From 38cbb42b58f6ecb9cbd2b06d4d2c5c39bdc6d124 Mon Sep 17 00:00:00 2001
From: Aidan Hobson Sayers <aidanhs@cantab.net>
Date: Sat, 7 Oct 2017 23:13:34 +0100
Subject: [PATCH 001/118] Use the renamed QT ppa (with packages named the same)

---
 Dockerfile | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/Dockerfile b/Dockerfile
index 7da65821..60ba4ff5 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -23,10 +23,11 @@ RUN set -x \
 RUN set -x \
     && add-apt-repository ppa:george-edison55/cmake-3.x
 
+ENV QT_PPA=qt591
 ENV QT_VERSION=qt59
 
 RUN set -x \
-    && add-apt-repository --yes ppa:beineri/opt-${QT_VERSION}-trusty
+    && add-apt-repository --yes ppa:beineri/opt-${QT_PPA}-trusty
 
 
 RUN set -x \

From 84508e91da2303967dc28d76433300c48f29cd41 Mon Sep 17 00:00:00 2001
From: Aidan Hobson Sayers <aidanhs@cantab.net>
Date: Sat, 7 Oct 2017 23:30:33 +0100
Subject: [PATCH 002/118] Disable apparmor to use fuse

Necessary for an Ubuntu 16.04, Docker 17.09.0-ce host
See https://github.com/moby/moby/issues/9448#issuecomment-289950103
---
 release-tool | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/release-tool b/release-tool
index 680cdca2..24d64f90 100755
--- a/release-tool
+++ b/release-tool
@@ -615,7 +615,7 @@ build() {
         logInfo "Launching Docker container to compile sources..."
         
         docker run --name "$DOCKER_CONTAINER_NAME" --rm \
-            --cap-add SYS_ADMIN --device /dev/fuse \
+            --cap-add SYS_ADMIN --security-opt apparmor:unconfined --device /dev/fuse \
             -e "CC=${CC}" -e "CXX=${CXX}" \
             -v "$(realpath "$SRC_DIR"):/keepassxc/src:ro" \
             -v "$(realpath "$OUTPUT_DIR"):/keepassxc/out:rw" \

From 1374c68274b8e93b74027f40c56db3eb5c48ab3f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Adolfo=20E=2E=20Garc=C3=ADa?= <adolfo.garcia.cr@gmail.com>
Date: Sun, 15 Oct 2017 01:46:09 -0600
Subject: [PATCH 003/118] Add .DS_Store (mac os) to .gitignore

---
 .gitignore | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/.gitignore b/.gitignore
index 2d9bb4af..b91b15ac 100644
--- a/.gitignore
+++ b/.gitignore
@@ -7,3 +7,5 @@ release*/
 
 \.vscode/
 *.swp
+
+.DS_Store

From c6f83b9ca6a6368c33b3fb315ded32c3423a0f2d Mon Sep 17 00:00:00 2001
From: rockihack <rocki.hack@gmail.com>
Date: Fri, 13 Oct 2017 12:31:57 +0200
Subject: [PATCH 004/118] Fix: Regenerate transform seed and transform master
 key on save.

---
 src/core/Database.cpp         | 19 +++++++++++++++++++
 src/core/Database.h           |  1 +
 src/format/KeePass2Writer.cpp |  8 +++++++-
 src/format/KeePass2Writer.h   |  4 ++++
 4 files changed, 31 insertions(+), 1 deletion(-)

diff --git a/src/core/Database.cpp b/src/core/Database.cpp
index d3f87a7b..864dd758 100644
--- a/src/core/Database.cpp
+++ b/src/core/Database.cpp
@@ -257,6 +257,25 @@ bool Database::hasKey() const
     return m_data.hasKey;
 }
 
+bool Database::transformKeyWithSeed(const QByteArray& transformSeed)
+{
+    Q_ASSERT(hasKey());
+
+    bool ok;
+    QString errorString;
+
+    QByteArray transformedMasterKey =
+            m_data.key.transform(transformSeed, transformRounds(), &ok, &errorString);
+    if (!ok) {
+        return false;
+    }
+
+    m_data.transformSeed = transformSeed;
+    m_data.transformedMasterKey = transformedMasterKey;
+
+    return true;
+}
+
 bool Database::verifyKey(const CompositeKey& key) const
 {
     Q_ASSERT(hasKey());
diff --git a/src/core/Database.h b/src/core/Database.h
index a799e0b3..b08233e5 100644
--- a/src/core/Database.h
+++ b/src/core/Database.h
@@ -106,6 +106,7 @@ public:
      */
     bool setKey(const CompositeKey& key);
     bool hasKey() const;
+    bool transformKeyWithSeed(const QByteArray& transformSeed);
     bool verifyKey(const CompositeKey& key) const;
     void recycleEntry(Entry* entry);
     void recycleGroup(Group* group);
diff --git a/src/format/KeePass2Writer.cpp b/src/format/KeePass2Writer.cpp
index d63151c8..f8f60f11 100644
--- a/src/format/KeePass2Writer.cpp
+++ b/src/format/KeePass2Writer.cpp
@@ -45,6 +45,7 @@ void KeePass2Writer::writeDatabase(QIODevice* device, Database* db)
     m_error = false;
     m_errorStr.clear();
 
+    QByteArray transformSeed = randomGen()->randomArray(32);
     QByteArray masterSeed = randomGen()->randomArray(32);
     QByteArray encryptionIV = randomGen()->randomArray(16);
     QByteArray protectedStreamKey = randomGen()->randomArray(32);
@@ -52,7 +53,12 @@ void KeePass2Writer::writeDatabase(QIODevice* device, Database* db)
     QByteArray endOfHeader = "\r\n\r\n";
 
     if (db->challengeMasterSeed(masterSeed) == false) {
-        raiseError("Unable to issue challenge-response.");
+        raiseError(tr("Unable to issue challenge-response."));
+        return;
+    }
+
+    if (!db->transformKeyWithSeed(transformSeed)) {
+        raiseError(tr("Unable to calculate master key"));
         return;
     }
 
diff --git a/src/format/KeePass2Writer.h b/src/format/KeePass2Writer.h
index 1b3436dc..184aa1a7 100644
--- a/src/format/KeePass2Writer.h
+++ b/src/format/KeePass2Writer.h
@@ -18,6 +18,8 @@
 #ifndef KEEPASSX_KEEPASS2WRITER_H
 #define KEEPASSX_KEEPASS2WRITER_H
 
+#include <QCoreApplication>
+
 #include "format/KeePass2.h"
 #include "keys/CompositeKey.h"
 
@@ -26,6 +28,8 @@ class QIODevice;
 
 class KeePass2Writer
 {
+    Q_DECLARE_TR_FUNCTIONS(KeePass2Writer)
+
 public:
     KeePass2Writer();
     void writeDatabase(QIODevice* device, Database* db);

From c0182df05ea74e5f59445018b84477ec9b12c5e4 Mon Sep 17 00:00:00 2001
From: Janek Bevendorff <janek@jbev.net>
Date: Mon, 16 Oct 2017 16:52:32 +0200
Subject: [PATCH 005/118] Add CLion build directories

---
 .gitignore | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.gitignore b/.gitignore
index 0521a42e..479c589e 100644
--- a/.gitignore
+++ b/.gitignore
@@ -1,5 +1,6 @@
 CMakeLists.txt.*
 build*/
+cmake-build-*/
 release*/
 .idea/
 *.iml

From 1cbbcc0d87b8c3d453388b986d6535e5aa5f8967 Mon Sep 17 00:00:00 2001
From: Janek Bevendorff <janek@jbev.net>
Date: Mon, 16 Oct 2017 17:01:37 +0200
Subject: [PATCH 006/118] Allow starting AppImage with custom extended
 QT_PLUGIN_PATH, resolves #1077

---
 AppImage-Recipe.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/AppImage-Recipe.sh b/AppImage-Recipe.sh
index 2707fe96..2a40458f 100755
--- a/AppImage-Recipe.sh
+++ b/AppImage-Recipe.sh
@@ -73,7 +73,7 @@ cat << EOF > ./usr/bin/keepassxc_env
 #!/usr/bin/env bash
 #export QT_QPA_PLATFORMTHEME=gtk2
 export LD_LIBRARY_PATH="..$(dirname ${QT_PLUGIN_PATH})/lib:\${LD_LIBRARY_PATH}"
-export QT_PLUGIN_PATH="..${QT_PLUGIN_PATH}"
+export QT_PLUGIN_PATH="..${QT_PLUGIN_PATH}:\${KPXC_QT_PLUGIN_PATH}"
 
 # unset XDG_DATA_DIRS to make tray icon work in Ubuntu Unity
 # see https://github.com/probonopd/AppImageKit/issues/351

From bae9dbc4078c6467da631a11eb2d0bf5e34b6915 Mon Sep 17 00:00:00 2001
From: Janek Bevendorff <janek@jbev.net>
Date: Mon, 16 Oct 2017 17:47:19 +0200
Subject: [PATCH 007/118] Add distribution information to debug info screen

---
 CMakeLists.txt              | 8 ++++++--
 src/config-keepassx.h.cmake | 3 ++-
 src/gui/AboutDialog.cpp     | 8 ++++++--
 3 files changed, 14 insertions(+), 5 deletions(-)

diff --git a/CMakeLists.txt b/CMakeLists.txt
index c6d28a35..ea32e100 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -52,8 +52,12 @@ set(KEEPASSXC_VERSION_MINOR "2")
 set(KEEPASSXC_VERSION_PATCH "1")
 set(KEEPASSXC_VERSION "${KEEPASSXC_VERSION_MAJOR}.${KEEPASSXC_VERSION_MINOR}.${KEEPASSXC_VERSION_PATCH}")
 
-# Special flag for snap builds
-set(KEEPASSXC_SNAP_BUILD OFF CACHE BOOL "Set whether this is a build for snap or not")
+# Distribution info
+set(KEEPASSXC_DIST_TYPE "Other" CACHE STRING "KeePassXC Distribution type")
+set_property(CACHE KEEPASSXC_DIST_TYPE PROPERTY STRINGS Snap AppImage Other)
+if(NOT KEEPASSXC_DIST_TYPE STREQUAL "Other")
+  set(KEEPASSXC_DIST True)
+endif()
 
 if("${CMAKE_C_COMPILER}" MATCHES "clang$" OR "${CMAKE_C_COMPILER_ID}" STREQUAL "Clang")
   set(CMAKE_COMPILER_IS_CLANG 1)
diff --git a/src/config-keepassx.h.cmake b/src/config-keepassx.h.cmake
index f89d447c..e0d96e0c 100644
--- a/src/config-keepassx.h.cmake
+++ b/src/config-keepassx.h.cmake
@@ -16,7 +16,8 @@
 #cmakedefine WITH_XC_AUTOTYPE
 #cmakedefine WITH_XC_YUBIKEY
 
-#cmakedefine KEEPASSXC_SNAP_BUILD
+#cmakedefine KEEPASSXC_DIST
+#cmakedefine KEEPASSXC_DIST_TYPE "@KEEPASSXC_DIST_TYPE@"
 
 #cmakedefine HAVE_PR_SET_DUMPABLE 1
 #cmakedefine HAVE_RLIMIT_CORE 1
diff --git a/src/gui/AboutDialog.cpp b/src/gui/AboutDialog.cpp
index 0e0f2960..5978cd95 100644
--- a/src/gui/AboutDialog.cpp
+++ b/src/gui/AboutDialog.cpp
@@ -55,10 +55,14 @@ AboutDialog::AboutDialog(QWidget* parent)
     QString debugInfo = "KeePassXC - ";
     debugInfo.append(tr("Version %1\n").arg(KEEPASSX_VERSION));
     if (!commitHash.isEmpty()) {
-        debugInfo.append(tr("Revision: %1").arg(commitHash).append("\n\n"));
+        debugInfo.append(tr("Revision: %1").arg(commitHash.left(7)).append("\n"));
     }
 
-    debugInfo.append(QString("%1\n- Qt %2\n- %3\n\n")
+#ifdef KEEPASSXC_DIST
+    debugInfo.append(tr("Distribution: %1").arg(KEEPASSXC_DIST_TYPE).append("\n"));
+#endif
+
+    debugInfo.append("\n").append(QString("%1\n- Qt %2\n- %3\n\n")
              .arg(tr("Libraries:"))
              .arg(QString::fromLocal8Bit(qVersion()))
              .arg(Crypto::backendVersion()));

From 6d433fecef375ca869eea0cba64e4ed7c895619a Mon Sep 17 00:00:00 2001
From: Janek Bevendorff <janek@jbev.net>
Date: Mon, 16 Oct 2017 17:51:16 +0200
Subject: [PATCH 008/118] Set KEEPASSXC_DIST_TYPE when building AppImages and
 Snaps

---
 release-tool   | 3 ++-
 snapcraft.yaml | 2 +-
 2 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/release-tool b/release-tool
index 24d64f90..35163069 100755
--- a/release-tool
+++ b/release-tool
@@ -598,7 +598,8 @@ build() {
             # Building on Linux without Docker container
             logInfo "Configuring build..."
             cmake -DCMAKE_BUILD_TYPE=Release -DWITH_TESTS=Off $CMAKE_OPTIONS \
-                -DCMAKE_INSTALL_PREFIX="${INSTALL_PREFIX}" "$SRC_DIR"
+                -DCMAKE_INSTALL_PREFIX="${INSTALL_PREFIX}" \
+                -DKEEPASSXC_DIST_TYPE=AppImage "$SRC_DIR"
                 
             logInfo "Compiling sources..."
             make $MAKE_OPTIONS
diff --git a/snapcraft.yaml b/snapcraft.yaml
index c73b5328..7062802d 100644
--- a/snapcraft.yaml
+++ b/snapcraft.yaml
@@ -24,7 +24,7 @@ parts:
     configflags:
       - -DCMAKE_BUILD_TYPE=Release
       - -DCMAKE_INSTALL_PREFIX=/usr
-      - -DKEEPASSXC_SNAP_BUILD=ON
+      - -DKEEPASSXC_DIST_TYPE=Snap
       - -DWITH_TESTS=OFF
       - -DWITH_XC_AUTOTYPE=ON
       - -DWITH_XC_HTTP=ON

From ec8c99c3b24d9c09858210ccb4f2afa4e8586374 Mon Sep 17 00:00:00 2001
From: Janek Bevendorff <janek@jbev.net>
Date: Tue, 17 Oct 2017 12:56:42 +0200
Subject: [PATCH 009/118] Fix remaining uses of KEEPASSXC_SNAP_BUILD

---
 CMakeLists.txt              | 9 +++++++--
 src/config-keepassx.h.cmake | 2 ++
 src/core/FilePath.cpp       | 6 +++---
 3 files changed, 12 insertions(+), 5 deletions(-)

diff --git a/CMakeLists.txt b/CMakeLists.txt
index ea32e100..3fddb457 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -53,10 +53,15 @@ set(KEEPASSXC_VERSION_PATCH "1")
 set(KEEPASSXC_VERSION "${KEEPASSXC_VERSION_MAJOR}.${KEEPASSXC_VERSION_MINOR}.${KEEPASSXC_VERSION_PATCH}")
 
 # Distribution info
+set(KEEPASSXC_DIST True)
 set(KEEPASSXC_DIST_TYPE "Other" CACHE STRING "KeePassXC Distribution type")
 set_property(CACHE KEEPASSXC_DIST_TYPE PROPERTY STRINGS Snap AppImage Other)
-if(NOT KEEPASSXC_DIST_TYPE STREQUAL "Other")
-  set(KEEPASSXC_DIST True)
+if(KEEPASSXC_DIST_TYPE STREQUAL "Snap")
+  set(KEEPASSXC_DIST_SNAP True)
+elseif(KEEPASSXC_DIST_TYPE STREQUAL "AppImage")
+  set(KEEPASSXC_DIST_APPIMAGE True)
+elseif(KEEPASSXC_DIST_TYPE STREQUAL "Other")
+  unset(KEEPASSXC_DIST)
 endif()
 
 if("${CMAKE_C_COMPILER}" MATCHES "clang$" OR "${CMAKE_C_COMPILER_ID}" STREQUAL "Clang")
diff --git a/src/config-keepassx.h.cmake b/src/config-keepassx.h.cmake
index e0d96e0c..e06c6938 100644
--- a/src/config-keepassx.h.cmake
+++ b/src/config-keepassx.h.cmake
@@ -18,6 +18,8 @@
 
 #cmakedefine KEEPASSXC_DIST
 #cmakedefine KEEPASSXC_DIST_TYPE "@KEEPASSXC_DIST_TYPE@"
+#cmakedefine KEEPASSXC_DIST_SNAP
+#cmakedefine KEEPASSXC_DIST_APPIMAGE
 
 #cmakedefine HAVE_PR_SET_DUMPABLE 1
 #cmakedefine HAVE_RLIMIT_CORE 1
diff --git a/src/core/FilePath.cpp b/src/core/FilePath.cpp
index 90311b40..b5c9d102 100644
--- a/src/core/FilePath.cpp
+++ b/src/core/FilePath.cpp
@@ -91,7 +91,7 @@ QString FilePath::pluginPath(const QString& name)
 
 QIcon FilePath::applicationIcon()
 {
-#ifdef KEEPASSXC_SNAP_BUILD
+#ifdef KEEPASSXC_DIST_SNAP
     return icon("apps", "keepassxc", false);
 #else
     return icon("apps", "keepassxc");
@@ -100,7 +100,7 @@ QIcon FilePath::applicationIcon()
 
 QIcon FilePath::trayIconLocked()
 {
-#ifdef KEEPASSXC_SNAP_BUILD
+#ifdef KEEPASSXC_DIST_SNAP
     return icon("apps", "keepassxc-locked", false);
 #else
     return icon("apps", "keepassxc-locked");
@@ -109,7 +109,7 @@ QIcon FilePath::trayIconLocked()
 
 QIcon FilePath::trayIconUnlocked()
 {
-#ifdef KEEPASSXC_SNAP_BUILD
+#ifdef KEEPASSXC_DIST_SNAP
     return icon("apps", "keepassxc-unlocked", false);
 #else
     return icon("apps", "keepassxc-unlocked");

From 75cfe1c5dd1c23523135d38e751f4cedba5cd0dd Mon Sep 17 00:00:00 2001
From: frostasm <frost.asm@gmail.com>
Date: Wed, 11 Oct 2017 13:10:40 +0300
Subject: [PATCH 010/118] Add the auto hide functionality to the MessageWidget

---
 src/gui/MessageWidget.cpp | 36 +++++++++++++++++++++++++++++++++---
 src/gui/MessageWidget.h   |  9 +++++++++
 src/http/OptionDialog.cpp |  1 +
 3 files changed, 43 insertions(+), 3 deletions(-)

diff --git a/src/gui/MessageWidget.cpp b/src/gui/MessageWidget.cpp
index de981b92..b3d014c3 100644
--- a/src/gui/MessageWidget.cpp
+++ b/src/gui/MessageWidget.cpp
@@ -18,20 +18,50 @@
 
 #include "MessageWidget.h"
 
-MessageWidget::MessageWidget(QWidget* parent)
-    :KMessageWidget(parent)
-{
+#include "QTimer"
 
+MessageWidget::MessageWidget(QWidget* parent)
+    : KMessageWidget(parent)
+    , m_autoHideTimer(new QTimer(this))
+    , m_autoHideTimeout(6000)
+{
+    m_autoHideTimer->setSingleShot(true);
+    connect(m_autoHideTimer, SIGNAL(timeout()), this, SLOT(animatedHide()));
+    connect(this, SIGNAL(hideAnimationFinished()), m_autoHideTimer, SLOT(stop()));
+}
+
+int MessageWidget::autoHideTimeout() const
+{
+    return m_autoHideTimeout;
 }
 
 void MessageWidget::showMessage(const QString& text, MessageWidget::MessageType type)
+{
+    showMessage(text, type, m_autoHideTimeout);
+}
+
+void MessageWidget::showMessage(const QString &text, KMessageWidget::MessageType type, int autoHideTimeout)
 {
     setMessageType(type);
     setText(text);
     animatedShow();
+    if (autoHideTimeout > 0) {
+        m_autoHideTimer->start(autoHideTimeout);
+    } else {
+        m_autoHideTimer->stop();
+    }
 }
 
 void MessageWidget::hideMessage()
 {
     animatedHide();
+    m_autoHideTimer->stop();
+}
+
+void MessageWidget::setAutoHideTimeout(int autoHideTimeout)
+{
+    m_autoHideTimeout = autoHideTimeout;
+    if (autoHideTimeout <= 0) {
+        m_autoHideTimer->stop();
+    }
 }
diff --git a/src/gui/MessageWidget.h b/src/gui/MessageWidget.h
index 03ebee3e..4a25737b 100644
--- a/src/gui/MessageWidget.h
+++ b/src/gui/MessageWidget.h
@@ -21,6 +21,8 @@
 
 #include "gui/KMessageWidget.h"
 
+class QTimer;
+
 class MessageWidget : public KMessageWidget
 {
     Q_OBJECT
@@ -28,10 +30,17 @@ class MessageWidget : public KMessageWidget
 public:
     explicit MessageWidget(QWidget* parent = 0);
 
+    int autoHideTimeout() const;
+
 public slots:
     void showMessage(const QString& text, MessageWidget::MessageType type);
+    void showMessage(const QString& text, MessageWidget::MessageType type, int autoHideTimeout);
     void hideMessage();
+    void setAutoHideTimeout(int autoHideTimeout);
 
+private:
+    QTimer* m_autoHideTimer;
+    int m_autoHideTimeout;
 };
 
 #endif // MESSAGEWIDGET_H
diff --git a/src/http/OptionDialog.cpp b/src/http/OptionDialog.cpp
index 9fb66bd6..b0823c7b 100644
--- a/src/http/OptionDialog.cpp
+++ b/src/http/OptionDialog.cpp
@@ -35,6 +35,7 @@ OptionDialog::OptionDialog(QWidget *parent) :
     m_ui->warningWidget->showMessage(tr("The following options can be dangerous!\nChange them only if you know what you are doing."), MessageWidget::Warning);
     m_ui->warningWidget->setIcon(FilePath::instance()->icon("status", "dialog-warning"));
     m_ui->warningWidget->setCloseButtonVisible(false);
+    m_ui->warningWidget->setAutoHideTimeout(-1);
 
     m_ui->tabWidget->setEnabled(m_ui->enableHttpServer->isChecked());
     connect(m_ui->enableHttpServer, SIGNAL(toggled(bool)), m_ui->tabWidget, SLOT(setEnabled(bool)));

From f38fe5a9dda5f17393373c67c0c4735ad578c95d Mon Sep 17 00:00:00 2001
From: frostasm <frost.asm@gmail.com>
Date: Thu, 19 Oct 2017 21:46:09 +0300
Subject: [PATCH 011/118] Disable automatic hiding of an information message
 for YubiKey

---
 src/gui/DatabaseWidget.cpp |  5 +++--
 src/gui/DatabaseWidget.h   |  3 ++-
 src/gui/MainWindow.cpp     | 14 ++++++++------
 src/gui/MainWindow.h       |  6 ++++--
 src/gui/MessageWidget.cpp  |  5 ++++-
 src/gui/MessageWidget.h    |  3 +++
 src/http/OptionDialog.cpp  |  2 +-
 7 files changed, 25 insertions(+), 13 deletions(-)

diff --git a/src/gui/DatabaseWidget.cpp b/src/gui/DatabaseWidget.cpp
index 3a39bddc..7fbcbe35 100644
--- a/src/gui/DatabaseWidget.cpp
+++ b/src/gui/DatabaseWidget.cpp
@@ -1325,9 +1325,10 @@ void DatabaseWidget::closeUnlockDialog()
     m_unlockDatabaseDialog->close();
 }
 
-void DatabaseWidget::showMessage(const QString& text, MessageWidget::MessageType type)
+void DatabaseWidget::showMessage(const QString& text, MessageWidget::MessageType type, bool showClosebutton, int autoHideTimeout)
 {
-    m_messageWidget->showMessage(text, type);
+    m_messageWidget->setCloseButtonVisible(showClosebutton);
+    m_messageWidget->showMessage(text, type, autoHideTimeout);
 }
 
 void DatabaseWidget::hideMessage()
diff --git a/src/gui/DatabaseWidget.h b/src/gui/DatabaseWidget.h
index 734e979e..93482000 100644
--- a/src/gui/DatabaseWidget.h
+++ b/src/gui/DatabaseWidget.h
@@ -166,7 +166,8 @@ public slots:
     void setSearchLimitGroup(bool state);
     void endSearch();
 
-    void showMessage(const QString& text, MessageWidget::MessageType type);
+    void showMessage(const QString& text, MessageWidget::MessageType type, bool showClosebutton = true,
+                     int autoHideTimeout = MessageWidget::DefaultAutoHideTimeout);
     void hideMessage();
 
 private slots:
diff --git a/src/gui/MainWindow.cpp b/src/gui/MainWindow.cpp
index 14531a4f..cfa18597 100644
--- a/src/gui/MainWindow.cpp
+++ b/src/gui/MainWindow.cpp
@@ -952,16 +952,17 @@ bool MainWindow::isTrayIconEnabled() const
             && QSystemTrayIcon::isSystemTrayAvailable();
 }
 
-void MainWindow::displayGlobalMessage(const QString& text, MessageWidget::MessageType type, bool showClosebutton)
+void MainWindow::displayGlobalMessage(const QString& text, MessageWidget::MessageType type, bool showClosebutton,
+                                      int autoHideTimeout)
 {
     m_ui->globalMessageWidget->setCloseButtonVisible(showClosebutton);
-    m_ui->globalMessageWidget->showMessage(text, type);
+    m_ui->globalMessageWidget->showMessage(text, type, autoHideTimeout);
 }
 
-void MainWindow::displayTabMessage(const QString& text, MessageWidget::MessageType type, bool showClosebutton)
+void MainWindow::displayTabMessage(const QString& text, MessageWidget::MessageType type, bool showClosebutton,
+                                   int autoHideTimeout)
 {
-    m_ui->globalMessageWidget->setCloseButtonVisible(showClosebutton);
-    m_ui->tabWidget->currentDatabaseWidget()->showMessage(text, type);
+    m_ui->tabWidget->currentDatabaseWidget()->showMessage(text, type, showClosebutton, autoHideTimeout);
 }
 
 void MainWindow::hideGlobalMessage()
@@ -978,7 +979,8 @@ void MainWindow::hideTabMessage()
 
 void MainWindow::showYubiKeyPopup()
 {
-    displayGlobalMessage(tr("Please touch the button on your YubiKey!"), MessageWidget::Information, false);
+    displayGlobalMessage(tr("Please touch the button on your YubiKey!"), MessageWidget::Information,
+                         false, MessageWidget::DisableAutoHide);
     setEnabled(false);
 }
 
diff --git a/src/gui/MainWindow.h b/src/gui/MainWindow.h
index caf3f585..ea17107a 100644
--- a/src/gui/MainWindow.h
+++ b/src/gui/MainWindow.h
@@ -54,8 +54,10 @@ public slots:
     void openDatabase(const QString& fileName, const QString& pw = QString(),
                       const QString& keyFile = QString());
     void appExit();
-    void displayGlobalMessage(const QString& text, MessageWidget::MessageType type, bool showClosebutton = true);
-    void displayTabMessage(const QString& text, MessageWidget::MessageType type, bool showClosebutton = true);
+    void displayGlobalMessage(const QString& text, MessageWidget::MessageType type, bool showClosebutton = true,
+                              int autoHideTimeout = MessageWidget::DefaultAutoHideTimeout);
+    void displayTabMessage(const QString& text, MessageWidget::MessageType type, bool showClosebutton = true,
+                           int autoHideTimeout = MessageWidget::DefaultAutoHideTimeout);
     void hideGlobalMessage();
     void showYubiKeyPopup();
     void hideYubiKeyPopup();
diff --git a/src/gui/MessageWidget.cpp b/src/gui/MessageWidget.cpp
index b3d014c3..2be29805 100644
--- a/src/gui/MessageWidget.cpp
+++ b/src/gui/MessageWidget.cpp
@@ -20,10 +20,13 @@
 
 #include "QTimer"
 
+const int MessageWidget::DefaultAutoHideTimeout = 6000;
+const int MessageWidget::DisableAutoHide = -1;
+
 MessageWidget::MessageWidget(QWidget* parent)
     : KMessageWidget(parent)
     , m_autoHideTimer(new QTimer(this))
-    , m_autoHideTimeout(6000)
+    , m_autoHideTimeout(DefaultAutoHideTimeout)
 {
     m_autoHideTimer->setSingleShot(true);
     connect(m_autoHideTimer, SIGNAL(timeout()), this, SLOT(animatedHide()));
diff --git a/src/gui/MessageWidget.h b/src/gui/MessageWidget.h
index 4a25737b..c29c320b 100644
--- a/src/gui/MessageWidget.h
+++ b/src/gui/MessageWidget.h
@@ -32,6 +32,9 @@ public:
 
     int autoHideTimeout() const;
 
+    static const int DefaultAutoHideTimeout;
+    static const int DisableAutoHide;
+
 public slots:
     void showMessage(const QString& text, MessageWidget::MessageType type);
     void showMessage(const QString& text, MessageWidget::MessageType type, int autoHideTimeout);
diff --git a/src/http/OptionDialog.cpp b/src/http/OptionDialog.cpp
index b0823c7b..03ae6e9c 100644
--- a/src/http/OptionDialog.cpp
+++ b/src/http/OptionDialog.cpp
@@ -35,7 +35,7 @@ OptionDialog::OptionDialog(QWidget *parent) :
     m_ui->warningWidget->showMessage(tr("The following options can be dangerous!\nChange them only if you know what you are doing."), MessageWidget::Warning);
     m_ui->warningWidget->setIcon(FilePath::instance()->icon("status", "dialog-warning"));
     m_ui->warningWidget->setCloseButtonVisible(false);
-    m_ui->warningWidget->setAutoHideTimeout(-1);
+    m_ui->warningWidget->setAutoHideTimeout(MessageWidget::DisableAutoHide);
 
     m_ui->tabWidget->setEnabled(m_ui->enableHttpServer->isChecked());
     connect(m_ui->enableHttpServer, SIGNAL(toggled(bool)), m_ui->tabWidget, SLOT(setEnabled(bool)));

From 72a6c3445027ec312864e5f6928e4794fc39fe31 Mon Sep 17 00:00:00 2001
From: Janek Bevendorff <janek@jbev.net>
Date: Tue, 17 Oct 2017 13:42:12 +0200
Subject: [PATCH 012/118] Add AppStream AppData file, resolves #1066

---
 share/CMakeLists.txt                          |   3 +-
 share/linux/org.keepassxc.appdata.xml         | 200 ++++++++++++++++++
 ...eepassxc.desktop => org.keepassxc.desktop} |   0
 snapcraft.yaml                                |   8 +-
 4 files changed, 206 insertions(+), 5 deletions(-)
 create mode 100644 share/linux/org.keepassxc.appdata.xml
 rename share/linux/{keepassxc.desktop => org.keepassxc.desktop} (100%)

diff --git a/share/CMakeLists.txt b/share/CMakeLists.txt
index a609add7..6323ece8 100644
--- a/share/CMakeLists.txt
+++ b/share/CMakeLists.txt
@@ -30,7 +30,8 @@ if(UNIX AND NOT APPLE)
     install(DIRECTORY icons/application/ DESTINATION ${CMAKE_INSTALL_DATADIR}/icons/hicolor
             FILES_MATCHING PATTERN "application-x-keepassxc.png" PATTERN "application-x-keepassxc.svgz"
             PATTERN "status" EXCLUDE PATTERN "actions" EXCLUDE PATTERN "categories" EXCLUDE)
-    install(FILES linux/keepassxc.desktop DESTINATION ${CMAKE_INSTALL_DATADIR}/applications)
+    install(FILES linux/org.keepassxc.desktop DESTINATION ${CMAKE_INSTALL_DATADIR}/applications)
+    install(FILES linux/org.keepassxc.appdata.xml DESTINATION ${CMAKE_INSTALL_DATADIR}/metainfo)
     install(FILES linux/keepassxc.xml DESTINATION ${CMAKE_INSTALL_DATADIR}/mime/packages)
 endif(UNIX AND NOT APPLE)
 
diff --git a/share/linux/org.keepassxc.appdata.xml b/share/linux/org.keepassxc.appdata.xml
new file mode 100644
index 00000000..3a5eb2c5
--- /dev/null
+++ b/share/linux/org.keepassxc.appdata.xml
@@ -0,0 +1,200 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<!-- Copyright 2017 KeePassXC Team <team@keepassxc.org> -->
+<component type="desktop-application">
+    <id>org.keepassxc</id>
+    <name>KeePassXC</name>
+    <metadata_license>CC-BY-3.0</metadata_license>
+    <project_license>GPL-3.0+</project_license>
+    <icon type="stock">keepassxc</icon>
+    <url type="homepage">https://keepassxc.org</url>
+    <mimetypes>
+        <mimetype>application/x-keepass2</mimetype>
+    </mimetypes>
+    <summary>Community-driven port of the Windows application “KeePass Password Safe”</summary>
+    <description>
+        <p>
+            KeePassXC is an application for people with extremely high demands on secure
+            personal data management. It has a light interface, is cross-platform and
+            published under the terms of the GNU General Public License.
+        </p>
+    </description>
+
+    <launchable type="desktop-id">org.keepassxc.desktop</launchable>
+
+    <screenshots>
+        <screenshot type="default">
+            <image>https://keepassxc.org/images/screenshots/linux/screen_001.png</image>
+        </screenshot>
+        <screenshot>
+            <image>https://keepassxc.org/images/screenshots/linux/screen_002.png</image>
+        </screenshot>
+        <screenshot>
+            <image>https://keepassxc.org/images/screenshots/linux/screen_003.png</image>
+        </screenshot>
+        <screenshot>
+            <image>https://keepassxc.org/images/screenshots/linux/screen_004.png</image>
+        </screenshot>
+        <screenshot>
+            <image>https://keepassxc.org/images/screenshots/linux/screen_005.png</image>
+        </screenshot>
+        <screenshot>
+            <image>https://keepassxc.org/images/screenshots/linux/screen_006.png</image>
+        </screenshot>
+        <screenshot>
+            <image>https://keepassxc.org/images/screenshots/linux/screen_007.png</image>
+        </screenshot>
+        <screenshot>
+            <image>https://keepassxc.org/images/screenshots/linux/screen_008.png</image>
+        </screenshot>
+        <screenshot>
+            <image>https://keepassxc.org/images/screenshots/linux/screen_009.png</image>
+        </screenshot>
+        <screenshot>
+            <image>https://keepassxc.org/images/screenshots/linux/screen_010.png</image>
+        </screenshot>
+        <screenshot>
+            <image>https://keepassxc.org/images/screenshots/linux/screen_011.png</image>
+        </screenshot>
+        <screenshot>
+            <image>https://keepassxc.org/images/screenshots/linux/screen_012.png</image>
+        </screenshot>
+        <screenshot>
+            <image>https://keepassxc.org/images/screenshots/linux/screen_013.png</image>
+        </screenshot>
+        <screenshot>
+            <image>https://keepassxc.org/images/screenshots/linux/screen_014.png</image>
+        </screenshot>
+    </screenshots>
+
+    <releases>
+        <release version="2.2.1" date="2017-10-01">
+            <description>
+                <ul>
+                    <li>Corrected multiple snap issues [#934, #1011]</li>
+                    <li>Corrected multiple custom icon issues [#708, #719, #994]</li>
+                    <li>Corrected multiple Yubikey issues [#880]</li>
+                    <li>Fixed single instance preventing load on occasion [#997]</li>
+                    <li>Keep entry history when merging databases [#970]</li>
+                    <li>Prevent data loss if passwords were mismatched [#1007]</li>
+                    <li>Fixed crash after merge [#941]</li>
+                    <li>Added configurable auto-type default delay [#703]</li>
+                    <li>Unlock database dialog window comes to front [#663]</li>
+                    <li>Translation and compiling fixes</li>
+                </ul>
+            </description>
+        </release>
+        <release version="2.2.0" date="2017-06-23">
+            <description>
+                <ul>
+                    <li>Added YubiKey 2FA integration for unlocking databases [#127]</li>
+                    <li>Added TOTP support [#519]</li>
+                    <li>Added CSV import tool [#146, #490]</li>
+                    <li>Added KeePassXC CLI tool [#254]</li>
+                    <li>Added diceware password generator [#373]</li>
+                    <li>Added support for entry references [#370, #378]</li>
+                    <li>Added support for Twofish encryption [#167]</li>
+                    <li>Enabled DEP and ASLR for in-memory protection [#371]</li>
+                    <li>Enabled single instance mode [#510]</li>
+                    <li>Enabled portable mode [#645]</li>
+                    <li>Enabled database lock on screensaver and session lock [#545]</li>
+                    <li>Redesigned welcome screen with common features and recent databases [#292]</li>
+                    <li>Multiple updates to search behavior [#168, #213, #374, #471, #603, #654]</li>
+                    <li>Added auto-type fields {CLEARFIELD}, {SPACE}, {{}, {}} [#267, #427, #480]</li>
+                    <li>Fixed auto-type errors on Linux [#550]</li>
+                    <li>Prompt user prior to executing a cmd:// URL [#235]</li>
+                    <li>Entry attributes can be protected (hidden) [#220]</li>
+                    <li>Added extended ascii to password generator [#538]</li>
+                    <li>Added new database icon to toolbar [#289]</li>
+                    <li>Added context menu entry to empty recycle bin in databases [#520]</li>
+                    <li>Added "apply" button to entry and group edit windows [#624]</li>
+                    <li>Added macOS tray icon and enabled minimize on close [#583]</li>
+                    <li>Fixed issues with unclean shutdowns [#170, #580]</li>
+                    <li>Changed keyboard shortcut to create new database to CTRL+SHIFT+N [#515]</li>
+                    <li>Compare window title to entry URLs [#556]</li>
+                    <li>Implemented inline error messages [#162]</li>
+                    <li>Ignore group expansion and other minor changes when making database "dirty" [#464]</li>
+                    <li>Updated license and copyright information on souce files [#632]</li>
+                    <li>Added contributors list to about dialog [#629]</li>
+                </ul>
+            </description>
+        </release>
+        <release version="2.1.4" date="2017-04-09">
+            <description>
+                <ul>
+                    <li>Bumped KeePassHTTP version to 1.8.4.2</li>
+                    <li>KeePassHTTP confirmation window comes to foreground [#466]</li>
+                </ul>
+            </description>
+        </release>
+        <release version="2.1.3" date="2017-03-03">
+            <description>
+                <ul>
+                    <li>Fix possible overflow in zxcvbn library [#363]</li>
+                    <li>Revert HiDPI setting to avoid problems on laptop screens [#332]</li>
+                    <li>Set file meta properties in Windows executable [#330]</li>
+                    <li>Suppress error message when auto-reloading a locked database [#345]</li>
+                    <li>Improve usability of question dialog when database is already locked by a different instance [#346]</li>
+                    <li>Fix compiler warnings in QHttp library [#351]</li>
+                    <li>Use unified toolbar on Mac OS X [#361]</li>
+                    <li>Fix an issue on X11 where the main window would be raised instead of closed on Alt+F4 [#362]</li>
+                </ul>
+            </description>
+        </release>
+        <release version="2.1.2" date="2017-02-17">
+            <description>
+                <ul>
+                    <li>Ask for save location when creating a new database [#302]</li>
+                    <li>Remove Libmicrohttpd dependency to clean up the code and ensure better OS X compatibility [#317, #265]</li>
+                    <li>Prevent Qt from degrading Wifi network performance on certain platforms [#318]</li>
+                    <li>Visually refine user interface on OS X and other platforms [#299]</li>
+                    <li>Remove unusable tray icon setting on OS X [#293]</li>
+                    <li>Fix compositing glitches on Ubuntu and prevent flashing when minimizing to the tray at startup [#307]</li>
+                    <li>Fix AppImage tray icon on Ubuntu [#277, #273]</li>
+                    <li>Fix global menu disappearing after restoring KeePassXC from the tray on Ubuntu [#276]</li>
+                    <li>Fix result order in entry search [#320]</li>
+                    <li>Enable HiDPI scaling on supported platforms [#315]</li>
+                    <li>Remove empty directories from installation target [#282]</li>
+                </ul>
+            </description>
+        </release>
+        <release version="2.1.1" date="2017-02-06">
+            <description>
+                <ul>
+                    <li>Enabled HTTP plugin build; plugin is disabled by default and limited to localhost [#147]</li>
+                    <li>Escape HTML in dialog boxes [#247]</li>
+                    <li>Corrected crashes in favicon download and password generator [#233, #226]</li>
+                    <li>Increase font size of password meter [#228]</li>
+                    <li>Fixed compatibility with Qt 5.8 [#211]</li>
+                    <li>Use consistent button heights in password generator [#229]</li>
+                </ul>
+            </description>
+        </release>
+        <release version="2.1.0" date="2017-01-22">
+            <description>
+                <ul>
+                    <li>Show unlock dialog when using autotype on a closed database [#10, #89]</li>
+                    <li>Show different tray icon when database is locked [#37, #46]</li>
+                    <li>Support autotype on Windows and OS X [#42, #60, #63]</li>
+                    <li>Add delay feature to autotype [#76, #77]</li>
+                    <li>Add password strength meter [#84, #92]</li>
+                    <li>Add option for automatically locking the database when minimizing the window [#57]</li>
+                    <li>Add feature to download favicons and use them as entry icons [#30]</li>
+                    <li>Automatically reload and merge database when the file changed on disk [#22, #33, #93]</li>
+                    <li>Add tool for merging two databases [#22, #47, #143]</li>
+                    <li>Add --pw-stdin commandline option to unlock the database by providing a password on STDIN [#54]</li>
+                    <li>Add utility script for reading the database password from KWallet [#55]</li>
+                    <li>Fix some KeePassHTTP settings not being remembered [#34, #65]</li>
+                    <li>Make search box persistent [#15, #67, #157]</li>
+                    <li>Enhance search feature by scoping the search to selected group [#16, #118]</li>
+                    <li>Improve interaction between search field and entry list [#131, #141]</li>
+                    <li>Add stand-alone password-generator [#18, #92]</li>
+                    <li>Don't require password repetition when password is visible [#27, #92]</li>
+                    <li>Add support for entry attributes in autotype sequences [#107]</li>
+                    <li>Always focus password field when opening the database unlock widget [#116, #117]</li>
+                    <li>Fix compilation errors on various platforms [#53, #126, #130]</li>
+                    <li>Restructure and improve kdbx-extract utility [#160]</li>
+                </ul>
+            </description>
+        </release>
+    </releases>
+</component>
diff --git a/share/linux/keepassxc.desktop b/share/linux/org.keepassxc.desktop
similarity index 100%
rename from share/linux/keepassxc.desktop
rename to share/linux/org.keepassxc.desktop
diff --git a/snapcraft.yaml b/snapcraft.yaml
index 7062802d..2b58df28 100644
--- a/snapcraft.yaml
+++ b/snapcraft.yaml
@@ -1,18 +1,18 @@
 name: keepassxc
 version: 2.2.1
 grade: stable
-summary: community driven port of the windows application “Keepass Password Safe”
+summary: Community-driven port of the Windows application “KeePass Password Safe”
 description: |
   KeePassXC is an application for people with extremely high demands on secure
-  personal data management. It has a light interface, is cross platform and
-  is published under the terms of the GNU General Public License.
+  personal data management. It has a light interface, is cross-platform and
+  published under the terms of the GNU General Public License.
 confinement: strict
 
 apps:
   keepassxc:
     command: desktop-launch keepassxc
     plugs: [unity7, x11, opengl, gsettings, home, network, network-bind, removable-media, raw-usb]
-    desktop: usr/share/applications/keepassxc.desktop
+    desktop: usr/share/applications/org.keepassxc.desktop
   cli:
     command: keepassxc-cli
     plugs: [gsettings, home, removable-media, raw-usb]

From b30eb597911a97d968ebd366f286e21b10b91f30 Mon Sep 17 00:00:00 2001
From: Janek Bevendorff <janek@jbev.net>
Date: Tue, 17 Oct 2017 14:12:02 +0200
Subject: [PATCH 013/118] Extend desktop file and name it according to the
 freedesktop specification

---
 share/linux/keepassxc.xml         | 2 +-
 share/linux/org.keepassxc.desktop | 7 +++++--
 snapcraft.yaml                    | 2 +-
 3 files changed, 7 insertions(+), 4 deletions(-)

diff --git a/share/linux/keepassxc.xml b/share/linux/keepassxc.xml
index 757047d2..b26b4db2 100644
--- a/share/linux/keepassxc.xml
+++ b/share/linux/keepassxc.xml
@@ -1,7 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <mime-info xmlns='http://www.freedesktop.org/standards/shared-mime-info'>
   <mime-type type="application/x-keepass2">
-    <comment>KeePass 2 database</comment>
+    <comment>KeePass 2 Database</comment>
     <glob pattern="*.kdbx"/>
     <icon name="application-x-keepassxc"/>
   </mime-type>
diff --git a/share/linux/org.keepassxc.desktop b/share/linux/org.keepassxc.desktop
index 1e72c4f8..fd94fdcd 100644
--- a/share/linux/org.keepassxc.desktop
+++ b/share/linux/org.keepassxc.desktop
@@ -1,13 +1,16 @@
 [Desktop Entry]
 Name=KeePassXC
-GenericName=Community Password Manager
+GenericName=Password Manager
 GenericName[de]=Passwortverwaltung
 GenericName[es]=Gestor de contraseñas
 GenericName[fr]=Gestionnaire de mot de passe
 GenericName[ru]=менеджер паролей
+Comment=Community-driven port of the Windows application “KeePass Password Safe”
 Exec=keepassxc %f
+TryExec=keepassxc
 Icon=keepassxc
 Terminal=false
 Type=Application
-Categories=Qt;Utility;
+Version=1.0
+Categories=Utility;Security;Qt
 MimeType=application/x-keepass2;
diff --git a/snapcraft.yaml b/snapcraft.yaml
index 2b58df28..a3e4004c 100644
--- a/snapcraft.yaml
+++ b/snapcraft.yaml
@@ -42,7 +42,7 @@ parts:
       - libyubikey-dev
       - libykpers-1-dev
     install: |
-      sed -i 's|Icon=keepassxc|Icon=${SNAP}/usr/share/icons/hicolor/256x256/apps/keepassxc.png|g' $SNAPCRAFT_PART_INSTALL/usr/share/applications/keepassxc.desktop
+      sed -i 's|Icon=keepassxc|Icon=${SNAP}/usr/share/icons/hicolor/256x256/apps/keepassxc.png|g' $SNAPCRAFT_PART_INSTALL/usr/share/applications/org.keepassxc.desktop
     after: [desktop-qt5]
 
   # Redefine desktop-qt5 stage packages to work with Ubuntu 17.04

From eb977b8021a997abdb973483ec68ca46ff195e13 Mon Sep 17 00:00:00 2001
From: Janek Bevendorff <janek@jbev.net>
Date: Tue, 17 Oct 2017 14:36:18 +0200
Subject: [PATCH 014/118] Check AppStream info file before merging releases

---
 release-tool | 38 +++++++++++++++++++++++++-------------
 1 file changed, 25 insertions(+), 13 deletions(-)

diff --git a/release-tool b/release-tool
index 35163069..c3fa84d3 100755
--- a/release-tool
+++ b/release-tool
@@ -257,7 +257,30 @@ checkChangeLog() {
     
     grep -qPzo "${RELEASE_NAME} \(\d{4}-\d{2}-\d{2}\)\n=+\n" CHANGELOG
     if [ $? -ne 0 ]; then
-        exitError "CHANGELOG does not contain any information about the '${RELEASE_NAME}' release!"
+        exitError "'CHANGELOG' has not been updated to the '${RELEASE_NAME}' release!"
+    fi
+}
+
+checkAppStreamInfo() {
+    if [ ! -f share/linux/org.keepassxc.appdata.xml ]; then
+        exitError "No AppStream info file found!"
+    fi
+
+    grep -qPzo "<release version=\"${RELEASE_NAME}\" date=\"\d{4}-\d{2}-\d{2}\">" share/linux/org.keepassxc.appdata.xml
+    if [ $? -ne 0 ]; then
+        exitError "'share/linux/org.keepassxc.appdata.xml' has not been updated to the '${RELEASE_NAME}' release!"
+    fi
+}
+
+checkSnapcraft() {
+    if [ ! -f snapcraft.yaml ]; then
+        echo "No snapcraft file found!"
+        return
+    fi
+
+    grep -qPzo "version: ${RELEASE_NAME}" snapcraft.yaml
+    if [ $? -ne 0 ]; then
+        exitError "'snapcraft.yaml' has not been updated to the '${RELEASE_NAME}' release!"
     fi
 }
 
@@ -273,18 +296,6 @@ checkTransifexCommandExists() {
     fi
 }
 
-checkSnapcraft() {
-    if [ ! -f snapcraft.yaml ]; then
-        echo "No snapcraft file found!"
-        return
-    fi
-
-    grep -qPzo "version: ${RELEASE_NAME}" snapcraft.yaml
-    if [ $? -ne 0 ]; then
-        exitError "snapcraft.yaml has not been updated to the '${RELEASE_NAME}' release!"
-    fi
-}
-
 performChecks() {
     logInfo "Performing basic checks..."
     
@@ -309,6 +320,7 @@ performChecks() {
 
     checkVersionInCMake
     checkChangeLog
+    checkAppStreamInfo
     checkSnapcraft
     
     logInfo "\e[1m\e[32mAll checks passed!\e[0m"

From d3208bddb0a01e0ab145e2c8d51f0429023877bd Mon Sep 17 00:00:00 2001
From: Janek Bevendorff <janek@jbev.net>
Date: Tue, 17 Oct 2017 14:54:11 +0200
Subject: [PATCH 015/118] Enhance lupdate-qt5 check

---
 release-tool | 12 +++++++++---
 1 file changed, 9 insertions(+), 3 deletions(-)

diff --git a/release-tool b/release-tool
index c3fa84d3..a1d23b40 100755
--- a/release-tool
+++ b/release-tool
@@ -289,10 +289,15 @@ checkTransifexCommandExists() {
     if [ 0 -ne $? ]; then
         exitError "Transifex tool 'tx' not installed! Please install it using 'pip install transifex-client'"
     fi
+}
 
-    command -v lupdate-qt5 > /dev/null
-    if [ 0 -ne $? ]; then
-        exitError "Qt Linguist tool (lupdate-qt5) is not installed! Please install using 'apt install qttools5-dev-tools'"
+checkQt5LUpdateExists() {
+    command -v lupdate > /dev/null
+    if [ 0 -eq $? ] && ! $(lupdate -version | grep -q "lupdate version 5\."); then
+        command -v lupdate-qt5 > /dev/null
+        if [ 0 -ne $? ]; then
+            exitError "Qt Linguist tool (lupdate-qt5) is not installed! Please install using 'apt install qttools5-dev-tools'"
+        fi
     fi
 }
 
@@ -307,6 +312,7 @@ performChecks() {
     logInfo "Validating toolset and repository..."
 
     checkTransifexCommandExists
+    checkQt5LUpdateExists
     checkGitRepository
     checkReleaseDoesNotExist
     checkWorkingTreeClean

From 5e0df62d7adc951aa05bdb064eddd23f50ab87be Mon Sep 17 00:00:00 2001
From: frostasm <frost.asm@gmail.com>
Date: Sat, 14 Oct 2017 15:41:45 +0300
Subject: [PATCH 016/118] Add processing of the url placeholders

---
 src/core/Entry.cpp  | 92 ++++++++++++++++++++++++++++++++++++++-------
 src/core/Entry.h    | 17 +++++++++
 tests/TestEntry.cpp | 32 ++++++++++++++++
 tests/TestEntry.h   |  1 +
 4 files changed, 128 insertions(+), 14 deletions(-)

diff --git a/src/core/Entry.cpp b/src/core/Entry.cpp
index 464628dc..867e68ea 100644
--- a/src/core/Entry.cpp
+++ b/src/core/Entry.cpp
@@ -755,23 +755,28 @@ QString Entry::resolvePlaceholder(const QString& str) const
 {
     QString result = str;
 
-    const QList<QString> keyList = attributes()->keys();
-    for (const QString& key : keyList) {
-        Qt::CaseSensitivity cs = Qt::CaseInsensitive;
-        QString k = key;
+    const UrlPlaceholderType placeholderType = urlPlaceholderType(str);
+    if (placeholderType != UrlPlaceholderType::NotUrl) {
+        return resolveUrlPlaceholder(url(), placeholderType);
+    } else {
+        const QList<QString> keyList = attributes()->keys();
+        for (const QString& key : keyList) {
+            Qt::CaseSensitivity cs = Qt::CaseInsensitive;
+            QString k = key;
 
-        if (!EntryAttributes::isDefaultAttribute(key)) {
-            cs = Qt::CaseSensitive;
-            k.prepend("{S:");
-        } else {
-            k.prepend("{");
-        }
+            if (!EntryAttributes::isDefaultAttribute(key)) {
+                cs = Qt::CaseSensitive;
+                k.prepend("{S:");
+            } else {
+                k.prepend("{");
+            }
 
 
-        k.append("}");
-        if (result.compare(k,cs)==0) {
-            result.replace(result,attributes()->value(key));
-            break;
+            k.append("}");
+            if (result.compare(k,cs)==0) {
+                result.replace(result,attributes()->value(key));
+                break;
+            }
         }
     }
 
@@ -829,3 +834,62 @@ QString Entry::resolveUrl(const QString& url) const
     // No valid http URL's found
     return QString("");
 }
+
+QString Entry::resolveUrlPlaceholder(const QString &strUrl, Entry::UrlPlaceholderType placeholderType) const
+{
+    QUrl qurl(strUrl);
+    if (!qurl.isValid())
+        return QString();
+
+    switch (placeholderType) {
+    case UrlPlaceholderType::FullUrl:
+        return strUrl;
+    case UrlPlaceholderType::WithoutScheme:
+        return qurl.toString(QUrl::RemoveScheme | QUrl::FullyDecoded);
+    case UrlPlaceholderType::Scheme:
+        return qurl.scheme();
+    case UrlPlaceholderType::Host:
+        return qurl.host();
+    case UrlPlaceholderType::Port:
+        return QString::number(qurl.port());
+    case UrlPlaceholderType::Path:
+        return qurl.path();
+    case UrlPlaceholderType::Query:
+        return qurl.query();
+    case UrlPlaceholderType::Fragment:
+        return qurl.fragment();
+    case UrlPlaceholderType::UserInfo:
+        return qurl.userInfo();
+    case UrlPlaceholderType::UserName:
+        return qurl.userName();
+    case UrlPlaceholderType::Password:
+        return qurl.password();
+    default:
+        Q_ASSERT(false);
+        break;
+    }
+
+    return QString();
+}
+
+Entry::UrlPlaceholderType Entry::urlPlaceholderType(const QString &placeholder) const
+{
+    static const QMap<QString, UrlPlaceholderType> urlPlaceholders {
+        { QStringLiteral("{URL}"), UrlPlaceholderType::FullUrl },
+        { QStringLiteral("{URL:RMVSCM}"), UrlPlaceholderType::WithoutScheme },
+        { QStringLiteral("{URL:WITHOUTSCHEME}"), UrlPlaceholderType::WithoutScheme },
+        { QStringLiteral("{URL:SCM}"), UrlPlaceholderType::Scheme },
+        { QStringLiteral("{URL:SCHEME}"), UrlPlaceholderType::Scheme },
+        { QStringLiteral("{URL:HOST}"), UrlPlaceholderType::Host },
+        { QStringLiteral("{URL:PORT}"), UrlPlaceholderType::Port },
+        { QStringLiteral("{URL:PATH}"), UrlPlaceholderType::Path },
+        { QStringLiteral("{URL:QUERY}"), UrlPlaceholderType::Query },
+        { QStringLiteral("{URL:FRAGMENT}"), UrlPlaceholderType::Fragment },
+        { QStringLiteral("{URL:USERINFO}"), UrlPlaceholderType::UserInfo },
+        { QStringLiteral("{URL:USERNAME}"), UrlPlaceholderType::UserName },
+        { QStringLiteral("{URL:PASSWORD}"), UrlPlaceholderType::Password }
+    };
+
+    UrlPlaceholderType result = urlPlaceholders.value(placeholder.toUpper(), UrlPlaceholderType::NotUrl);
+    return result;
+}
diff --git a/src/core/Entry.h b/src/core/Entry.h
index a37637c2..51208c9e 100644
--- a/src/core/Entry.h
+++ b/src/core/Entry.h
@@ -134,6 +134,21 @@ public:
     };
     Q_DECLARE_FLAGS(CloneFlags, CloneFlag)
 
+    enum class UrlPlaceholderType {
+        NotUrl,
+        FullUrl,
+        WithoutScheme,
+        Scheme,
+        Host,
+        Port,
+        Path,
+        Query,
+        Fragment,
+        UserInfo,
+        UserName,
+        Password,
+    };
+
     /**
      * Creates a duplicate of this entry except that the returned entry isn't
      * part of any group.
@@ -145,6 +160,8 @@ public:
     QString maskPasswordPlaceholders(const QString& str) const;
     QString resolveMultiplePlaceholders(const QString& str) const;
     QString resolvePlaceholder(const QString& str) const;
+    QString resolveUrlPlaceholder(const QString& url, UrlPlaceholderType placeholderType) const;
+    UrlPlaceholderType urlPlaceholderType(const QString& placeholder) const;
     QString resolveUrl(const QString& url) const;
 
     /**
diff --git a/tests/TestEntry.cpp b/tests/TestEntry.cpp
index 84ad0318..056dbc93 100644
--- a/tests/TestEntry.cpp
+++ b/tests/TestEntry.cpp
@@ -158,3 +158,35 @@ void TestEntry::testResolveUrl()
 
     delete entry;
 }
+
+void TestEntry::testResolveUrlPlaceholders()
+{
+    Entry* entry = new Entry();
+    entry->setUrl("https://user:pw@keepassxc.org:80/path/example.php?q=e&s=t+2#fragment");
+
+    QString rmvscm("//user:pw@keepassxc.org:80/path/example.php?q=e&s=t+2#fragment"); // Entry URL without scheme name.
+    QString scm("https"); // Scheme name of the entry URL.
+    QString host("keepassxc.org"); // Host component of the entry URL.
+    QString port("80"); // Port number of the entry URL.
+    QString path("/path/example.php"); // Path component of the entry URL.
+    QString query("q=e&s=t+2"); // Query information of the entry URL.
+    QString userinfo("user:pw"); // User information of the entry URL.
+    QString username("user"); // User name of the entry URL.
+    QString password("pw"); // Password of the entry URL.
+    QString fragment("fragment"); // Password of the entry URL.
+
+    QCOMPARE(entry->resolvePlaceholder("{URL:RMVSCM}"), rmvscm);
+    QCOMPARE(entry->resolvePlaceholder("{URL:WITHOUTSCHEME}"), rmvscm);
+    QCOMPARE(entry->resolvePlaceholder("{URL:SCM}"), scm);
+    QCOMPARE(entry->resolvePlaceholder("{URL:SCHEME}"), scm);
+    QCOMPARE(entry->resolvePlaceholder("{URL:HOST}"), host);
+    QCOMPARE(entry->resolvePlaceholder("{URL:PORT}"), port);
+    QCOMPARE(entry->resolvePlaceholder("{URL:PATH}"), path);
+    QCOMPARE(entry->resolvePlaceholder("{URL:QUERY}"), query);
+    QCOMPARE(entry->resolvePlaceholder("{URL:USERINFO}"), userinfo);
+    QCOMPARE(entry->resolvePlaceholder("{URL:USERNAME}"), username);
+    QCOMPARE(entry->resolvePlaceholder("{URL:PASSWORD}"), password);
+    QCOMPARE(entry->resolvePlaceholder("{URL:FRAGMENT}"), fragment);
+
+    delete entry;
+}
diff --git a/tests/TestEntry.h b/tests/TestEntry.h
index 3f6d20ee..febdf085 100644
--- a/tests/TestEntry.h
+++ b/tests/TestEntry.h
@@ -32,6 +32,7 @@ private slots:
     void testCopyDataFrom();
     void testClone();
     void testResolveUrl();
+    void testResolveUrlPlaceholders();
 };
 
 #endif // KEEPASSX_TESTENTRY_H

From e81d8beb191eab920f165fa4086779915490e77a Mon Sep 17 00:00:00 2001
From: frostasm <frost.asm@gmail.com>
Date: Sat, 14 Oct 2017 19:23:22 +0300
Subject: [PATCH 017/118] Refactor Entry::resolvePlaceholder function

---
 src/core/Entry.cpp | 229 +++++++++++++++++++++++++--------------------
 src/core/Entry.h   |  34 ++++---
 2 files changed, 149 insertions(+), 114 deletions(-)

diff --git a/src/core/Entry.cpp b/src/core/Entry.cpp
index 867e68ea..1a1dff02 100644
--- a/src/core/Entry.cpp
+++ b/src/core/Entry.cpp
@@ -751,56 +751,142 @@ QString Entry::resolveMultiplePlaceholders(const QString& str) const
     return result;
 }
 
-QString Entry::resolvePlaceholder(const QString& str) const
+QString Entry::resolvePlaceholder(const QString& placeholder) const
 {
-    QString result = str;
+    const PlaceholderType placeholderType = this->placeholderType(placeholder);
+    switch (placeholderType) {
+    case PlaceholderType::NotPlaceholder:
+        return placeholder;
+    case PlaceholderType::Unknown:
+        qWarning("Can't resolve placeholder '%s' for entry with uuid %s", qPrintable(placeholder),
+                 qPrintable(uuid().toHex()));
+        return placeholder;
+    case PlaceholderType::Title:
+        return title();
+    case PlaceholderType::UserName:
+        return username();
+    case PlaceholderType::Password:
+        return password();
+    case PlaceholderType::Notes:
+        return notes();
+    case PlaceholderType::Totp:
+        return totp();
+    case PlaceholderType::Url:
+    case PlaceholderType::UrlWithoutScheme:
+    case PlaceholderType::UrlScheme:
+    case PlaceholderType::UrlHost:
+    case PlaceholderType::UrlPort:
+    case PlaceholderType::UrlPath:
+    case PlaceholderType::UrlQuery:
+    case PlaceholderType::UrlFragment:
+    case PlaceholderType::UrlUserInfo:
+    case PlaceholderType::UrlUserName:
+    case PlaceholderType::UrlPassword:
+        return resolveUrlPlaceholder(placeholderType);
+    case PlaceholderType::CustomAttribute: {
+        const QString key = placeholder.mid(3, placeholder.length() - 4); // {S:attribute} => mid(3, len - 4)
+        return attributes()->hasKey(key) ? attributes()->value(key) : placeholder;
+    }
+    case PlaceholderType::Reference: {
+        // resolving references in format: {REF:<WantedField>@I:<uuid of referenced entry>}
+        // using format from http://keepass.info/help/base/fieldrefs.html at the time of writing,
+        // but supporting lookups of standard fields and references by UUID only
 
-    const UrlPlaceholderType placeholderType = urlPlaceholderType(str);
-    if (placeholderType != UrlPlaceholderType::NotUrl) {
-        return resolveUrlPlaceholder(url(), placeholderType);
-    } else {
-        const QList<QString> keyList = attributes()->keys();
-        for (const QString& key : keyList) {
-            Qt::CaseSensitivity cs = Qt::CaseInsensitive;
-            QString k = key;
+        QRegExp* tmpRegExp = m_attributes->referenceRegExp();
+        if (tmpRegExp->indexIn(placeholder) != -1) {
+            constexpr int wantedFieldIndex = 1;
+            constexpr int referencedUuidIndex = 2;
+            const Uuid referencedUuid(QByteArray::fromHex(tmpRegExp->cap(referencedUuidIndex).toLatin1()));
+            const Entry* refEntry = m_group->database()->resolveEntry(referencedUuid);
+            if (refEntry) {
+                QString result;
+                const QString wantedField = tmpRegExp->cap(wantedFieldIndex).toLower();
+                if (wantedField == "t") result = refEntry->title();
+                else if (wantedField == "u") result = refEntry->username();
+                else if (wantedField == "p") result = refEntry->password();
+                else if (wantedField == "a") result = refEntry->url();
+                else if (wantedField == "n") result = refEntry->notes();
 
-            if (!EntryAttributes::isDefaultAttribute(key)) {
-                cs = Qt::CaseSensitive;
-                k.prepend("{S:");
-            } else {
-                k.prepend("{");
-            }
-
-
-            k.append("}");
-            if (result.compare(k,cs)==0) {
-                result.replace(result,attributes()->value(key));
-                break;
+                result = refEntry->resolveMultiplePlaceholders(result);
+                return result;
             }
         }
     }
-
-    // resolving references in format: {REF:<WantedField>@I:<uuid of referenced entry>}
-    // using format from http://keepass.info/help/base/fieldrefs.html at the time of writing,
-    // but supporting lookups of standard fields and references by UUID only
-
-    QRegExp* tmpRegExp = m_attributes->referenceRegExp();
-    if (tmpRegExp->indexIn(result) != -1) {
-        // cap(0) contains the whole reference
-        // cap(1) contains which field is wanted
-        // cap(2) contains the uuid of the referenced entry
-        Entry* tmpRefEntry = m_group->database()->resolveEntry(Uuid(QByteArray::fromHex(tmpRegExp->cap(2).toLatin1())));
-        if (tmpRefEntry) {
-            // entry found, get the relevant field
-            QString tmpRefField = tmpRegExp->cap(1).toLower();
-            if (tmpRefField == "t") result.replace(tmpRegExp->cap(0), tmpRefEntry->title(), Qt::CaseInsensitive);
-            else if (tmpRefField == "u") result.replace(tmpRegExp->cap(0), tmpRefEntry->username(), Qt::CaseInsensitive);
-            else if (tmpRefField == "p") result.replace(tmpRegExp->cap(0), tmpRefEntry->password(), Qt::CaseInsensitive);
-            else if (tmpRefField == "a") result.replace(tmpRegExp->cap(0), tmpRefEntry->url(), Qt::CaseInsensitive);
-            else if (tmpRefField == "n") result.replace(tmpRegExp->cap(0), tmpRefEntry->notes(), Qt::CaseInsensitive);
-        }
     }
 
+    return placeholder;
+}
+
+QString Entry::resolveUrlPlaceholder(Entry::PlaceholderType placeholderType) const
+{
+    const QString urlStr = url();
+    if (urlStr.isEmpty())
+        return QString();
+
+    const QUrl qurl(urlStr);
+    switch (placeholderType) {
+    case PlaceholderType::Url:
+        return urlStr;
+    case PlaceholderType::UrlWithoutScheme:
+        return qurl.toString(QUrl::RemoveScheme | QUrl::FullyDecoded);
+    case PlaceholderType::UrlScheme:
+        return qurl.scheme();
+    case PlaceholderType::UrlHost:
+        return qurl.host();
+    case PlaceholderType::UrlPort:
+        return QString::number(qurl.port());
+    case PlaceholderType::UrlPath:
+        return qurl.path();
+    case PlaceholderType::UrlQuery:
+        return qurl.query();
+    case PlaceholderType::UrlFragment:
+        return qurl.fragment();
+    case PlaceholderType::UrlUserInfo:
+        return qurl.userInfo();
+    case PlaceholderType::UrlUserName:
+        return qurl.userName();
+    case PlaceholderType::UrlPassword:
+        return qurl.password();
+    default:
+        Q_ASSERT(false);
+        break;
+    }
+
+    return urlStr;
+}
+
+Entry::PlaceholderType Entry::placeholderType(const QString &placeholder) const
+{
+    if (!placeholder.startsWith(QLatin1Char('{')) || !placeholder.endsWith(QLatin1Char('}'))) {
+        return PlaceholderType::NotPlaceholder;
+    } else if (placeholder.startsWith(QLatin1Literal("{S:"))) {
+        return PlaceholderType::CustomAttribute;
+    } else if (placeholder.startsWith(QLatin1Literal("{REF:"))) {
+        return PlaceholderType::Reference;
+    }
+
+    static const QMap<QString, PlaceholderType> placeholders {
+        { QStringLiteral("{TITLE}"), PlaceholderType::Title },
+        { QStringLiteral("{USERNAME}"), PlaceholderType::UserName },
+        { QStringLiteral("{PASSWORD}"), PlaceholderType::Password },
+        { QStringLiteral("{NOTES}"), PlaceholderType::Notes },
+        { QStringLiteral("{TOTP}"), PlaceholderType::Totp },
+        { QStringLiteral("{URL}"), PlaceholderType::Url },
+        { QStringLiteral("{URL:RMVSCM}"), PlaceholderType::UrlWithoutScheme },
+        { QStringLiteral("{URL:WITHOUTSCHEME}"), PlaceholderType::UrlWithoutScheme },
+        { QStringLiteral("{URL:SCM}"), PlaceholderType::UrlScheme },
+        { QStringLiteral("{URL:SCHEME}"), PlaceholderType::UrlScheme },
+        { QStringLiteral("{URL:HOST}"), PlaceholderType::UrlHost },
+        { QStringLiteral("{URL:PORT}"), PlaceholderType::UrlPort },
+        { QStringLiteral("{URL:PATH}"), PlaceholderType::UrlPath },
+        { QStringLiteral("{URL:QUERY}"), PlaceholderType::UrlQuery },
+        { QStringLiteral("{URL:FRAGMENT}"), PlaceholderType::UrlFragment },
+        { QStringLiteral("{URL:USERINFO}"), PlaceholderType::UrlUserInfo },
+        { QStringLiteral("{URL:USERNAME}"), PlaceholderType::UrlUserName },
+        { QStringLiteral("{URL:PASSWORD}"), PlaceholderType::UrlPassword }
+    };
+
+    PlaceholderType result = placeholders.value(placeholder.toUpper(), PlaceholderType::Unknown);
     return result;
 }
 
@@ -834,62 +920,3 @@ QString Entry::resolveUrl(const QString& url) const
     // No valid http URL's found
     return QString("");
 }
-
-QString Entry::resolveUrlPlaceholder(const QString &strUrl, Entry::UrlPlaceholderType placeholderType) const
-{
-    QUrl qurl(strUrl);
-    if (!qurl.isValid())
-        return QString();
-
-    switch (placeholderType) {
-    case UrlPlaceholderType::FullUrl:
-        return strUrl;
-    case UrlPlaceholderType::WithoutScheme:
-        return qurl.toString(QUrl::RemoveScheme | QUrl::FullyDecoded);
-    case UrlPlaceholderType::Scheme:
-        return qurl.scheme();
-    case UrlPlaceholderType::Host:
-        return qurl.host();
-    case UrlPlaceholderType::Port:
-        return QString::number(qurl.port());
-    case UrlPlaceholderType::Path:
-        return qurl.path();
-    case UrlPlaceholderType::Query:
-        return qurl.query();
-    case UrlPlaceholderType::Fragment:
-        return qurl.fragment();
-    case UrlPlaceholderType::UserInfo:
-        return qurl.userInfo();
-    case UrlPlaceholderType::UserName:
-        return qurl.userName();
-    case UrlPlaceholderType::Password:
-        return qurl.password();
-    default:
-        Q_ASSERT(false);
-        break;
-    }
-
-    return QString();
-}
-
-Entry::UrlPlaceholderType Entry::urlPlaceholderType(const QString &placeholder) const
-{
-    static const QMap<QString, UrlPlaceholderType> urlPlaceholders {
-        { QStringLiteral("{URL}"), UrlPlaceholderType::FullUrl },
-        { QStringLiteral("{URL:RMVSCM}"), UrlPlaceholderType::WithoutScheme },
-        { QStringLiteral("{URL:WITHOUTSCHEME}"), UrlPlaceholderType::WithoutScheme },
-        { QStringLiteral("{URL:SCM}"), UrlPlaceholderType::Scheme },
-        { QStringLiteral("{URL:SCHEME}"), UrlPlaceholderType::Scheme },
-        { QStringLiteral("{URL:HOST}"), UrlPlaceholderType::Host },
-        { QStringLiteral("{URL:PORT}"), UrlPlaceholderType::Port },
-        { QStringLiteral("{URL:PATH}"), UrlPlaceholderType::Path },
-        { QStringLiteral("{URL:QUERY}"), UrlPlaceholderType::Query },
-        { QStringLiteral("{URL:FRAGMENT}"), UrlPlaceholderType::Fragment },
-        { QStringLiteral("{URL:USERINFO}"), UrlPlaceholderType::UserInfo },
-        { QStringLiteral("{URL:USERNAME}"), UrlPlaceholderType::UserName },
-        { QStringLiteral("{URL:PASSWORD}"), UrlPlaceholderType::Password }
-    };
-
-    UrlPlaceholderType result = urlPlaceholders.value(placeholder.toUpper(), UrlPlaceholderType::NotUrl);
-    return result;
-}
diff --git a/src/core/Entry.h b/src/core/Entry.h
index 51208c9e..7b7a2508 100644
--- a/src/core/Entry.h
+++ b/src/core/Entry.h
@@ -134,19 +134,27 @@ public:
     };
     Q_DECLARE_FLAGS(CloneFlags, CloneFlag)
 
-    enum class UrlPlaceholderType {
-        NotUrl,
-        FullUrl,
-        WithoutScheme,
-        Scheme,
-        Host,
-        Port,
-        Path,
-        Query,
-        Fragment,
-        UserInfo,
+    enum class PlaceholderType {
+        NotPlaceholder,
+        Unknown,
+        Title,
         UserName,
         Password,
+        Notes,
+        Totp,
+        Url,
+        UrlWithoutScheme,
+        UrlScheme,
+        UrlHost,
+        UrlPort,
+        UrlPath,
+        UrlQuery,
+        UrlFragment,
+        UrlUserInfo,
+        UrlUserName,
+        UrlPassword,
+        Reference,
+        CustomAttribute
     };
 
     /**
@@ -160,8 +168,8 @@ public:
     QString maskPasswordPlaceholders(const QString& str) const;
     QString resolveMultiplePlaceholders(const QString& str) const;
     QString resolvePlaceholder(const QString& str) const;
-    QString resolveUrlPlaceholder(const QString& url, UrlPlaceholderType placeholderType) const;
-    UrlPlaceholderType urlPlaceholderType(const QString& placeholder) const;
+    QString resolveUrlPlaceholder(PlaceholderType placeholderType) const;
+    PlaceholderType placeholderType(const QString& placeholder) const;
     QString resolveUrl(const QString& url) const;
 
     /**

From f0fcc199156b842e7fc972d4896d451dc1a99fc7 Mon Sep 17 00:00:00 2001
From: frostasm <frost.asm@gmail.com>
Date: Mon, 16 Oct 2017 10:35:40 +0300
Subject: [PATCH 018/118] Implement recursive resolving for placeholders

---
 src/core/Entry.cpp  | 200 +++++++++++++++++++++++++-------------------
 src/core/Entry.h    |   6 +-
 tests/TestEntry.cpp | 106 +++++++++++++++++++----
 tests/TestEntry.h   |   1 +
 4 files changed, 209 insertions(+), 104 deletions(-)

diff --git a/src/core/Entry.cpp b/src/core/Entry.cpp
index 1a1dff02..d5afec04 100644
--- a/src/core/Entry.cpp
+++ b/src/core/Entry.cpp
@@ -26,6 +26,8 @@
 #include "totp/totp.h"
 
 const int Entry::DefaultIconNumber = 0;
+const int Entry::ResolveMaximumDepth = 10;
+
 
 Entry::Entry()
     : m_attributes(new EntryAttributes(this))
@@ -670,6 +672,108 @@ void Entry::updateModifiedSinceBegin()
     m_modifiedSinceBegin = true;
 }
 
+QString Entry::resolveMultiplePlaceholdersRecursive(const QString &str, int maxDepth) const
+{
+    if (maxDepth <= 0) {
+        qWarning("Maximum depth of replacement has been reached. Entry uuid: %s", qPrintable(uuid().toHex()));
+        return str;
+    }
+
+    QString result = str;
+    QRegExp placeholderRegEx("(\\{[^\\}]+\\})", Qt::CaseInsensitive, QRegExp::RegExp2);
+    placeholderRegEx.setMinimal(true);
+    int pos = 0;
+    while ((pos = placeholderRegEx.indexIn(str, pos)) != -1) {
+        const QString found = placeholderRegEx.cap(1);
+        result.replace(found, resolvePlaceholderRecursive(found, maxDepth - 1));
+        pos += placeholderRegEx.matchedLength();
+    }
+
+    if (result != str) {
+        result = resolveMultiplePlaceholdersRecursive(result, maxDepth - 1);
+    }
+
+    return result;
+}
+
+QString Entry::resolvePlaceholderRecursive(const QString &placeholder, int maxDepth) const
+{
+    const PlaceholderType typeOfPlaceholder = placeholderType(placeholder);
+    switch (typeOfPlaceholder) {
+    case PlaceholderType::NotPlaceholder:
+        return placeholder;
+    case PlaceholderType::Unknown:
+        qWarning("Can't resolve placeholder %s for entry with uuid %s", qPrintable(placeholder),
+                 qPrintable(uuid().toHex()));
+        return placeholder;
+    case PlaceholderType::Title:
+        return title();
+    case PlaceholderType::UserName:
+        return username();
+    case PlaceholderType::Password:
+        return password();
+    case PlaceholderType::Notes:
+        return notes();
+    case PlaceholderType::Totp:
+        return totp();
+    case PlaceholderType::Url:
+        return url();
+    case PlaceholderType::UrlWithoutScheme:
+    case PlaceholderType::UrlScheme:
+    case PlaceholderType::UrlHost:
+    case PlaceholderType::UrlPort:
+    case PlaceholderType::UrlPath:
+    case PlaceholderType::UrlQuery:
+    case PlaceholderType::UrlFragment:
+    case PlaceholderType::UrlUserInfo:
+    case PlaceholderType::UrlUserName:
+    case PlaceholderType::UrlPassword: {
+        const QString strUrl = resolveMultiplePlaceholdersRecursive(url(), maxDepth - 1);
+        return resolveUrlPlaceholder(strUrl, typeOfPlaceholder);
+    }
+    case PlaceholderType::CustomAttribute: {
+        const QString key = placeholder.mid(3, placeholder.length() - 4); // {S:attr} => mid(3, len - 4)
+        return attributes()->hasKey(key) ? attributes()->value(key) : QString();
+    }
+    case PlaceholderType::Reference: {
+        // resolving references in format: {REF:<WantedField>@I:<uuid of referenced entry>}
+        // using format from http://keepass.info/help/base/fieldrefs.html at the time of writing,
+        // but supporting lookups of standard fields and references by UUID only
+
+        QString result;
+        QRegExp* referenceRegExp = m_attributes->referenceRegExp();
+        if (referenceRegExp->indexIn(placeholder) != -1) {
+            constexpr int wantedFieldIndex = 1;
+            constexpr int referencedUuidIndex = 2;
+            const Uuid referencedUuid(QByteArray::fromHex(referenceRegExp->cap(referencedUuidIndex).toLatin1()));
+            const Entry* refEntry = m_group->database()->resolveEntry(referencedUuid);
+            if (refEntry) {
+                const QString wantedField = referenceRegExp->cap(wantedFieldIndex).toLower();
+                if (wantedField == "t") {
+                    result = refEntry->title();
+                } else if (wantedField == "u") {
+                    result = refEntry->username();
+                } else if (wantedField == "p") {
+                    result = refEntry->password();
+                } else if (wantedField == "a") {
+                    result = refEntry->url();
+                } else if (wantedField == "n") {
+                    result = refEntry->notes();
+                }
+
+                // Referencing fields of other entries only works with standard fields, not with custom user strings.
+                // If you want to reference a custom user string, you need to place a redirection in a standard field
+                // of the entry with the custom string, using {S:<Name>}, and reference the standard field.
+                result = refEntry->resolveMultiplePlaceholdersRecursive(result, maxDepth - 1);
+            }
+        }
+        return result;
+    }
+    }
+
+    return placeholder;
+}
+
 Group* Entry::group()
 {
     return m_group;
@@ -736,97 +840,21 @@ QString Entry::maskPasswordPlaceholders(const QString &str) const
 
 QString Entry::resolveMultiplePlaceholders(const QString& str) const
 {
-    QString result = str;
-    QRegExp tmplRegEx("(\\{.*\\})", Qt::CaseInsensitive, QRegExp::RegExp2);
-    tmplRegEx.setMinimal(true);
-    QStringList tmplList;
-    int pos = 0;
-
-    while ((pos = tmplRegEx.indexIn(str, pos)) != -1) {
-        QString found = tmplRegEx.cap(1);
-        result.replace(found,resolvePlaceholder(found));
-        pos += tmplRegEx.matchedLength();
-    }
-
-    return result;
+    return resolveMultiplePlaceholdersRecursive(str, ResolveMaximumDepth);
 }
 
 QString Entry::resolvePlaceholder(const QString& placeholder) const
 {
-    const PlaceholderType placeholderType = this->placeholderType(placeholder);
-    switch (placeholderType) {
-    case PlaceholderType::NotPlaceholder:
-        return placeholder;
-    case PlaceholderType::Unknown:
-        qWarning("Can't resolve placeholder '%s' for entry with uuid %s", qPrintable(placeholder),
-                 qPrintable(uuid().toHex()));
-        return placeholder;
-    case PlaceholderType::Title:
-        return title();
-    case PlaceholderType::UserName:
-        return username();
-    case PlaceholderType::Password:
-        return password();
-    case PlaceholderType::Notes:
-        return notes();
-    case PlaceholderType::Totp:
-        return totp();
-    case PlaceholderType::Url:
-    case PlaceholderType::UrlWithoutScheme:
-    case PlaceholderType::UrlScheme:
-    case PlaceholderType::UrlHost:
-    case PlaceholderType::UrlPort:
-    case PlaceholderType::UrlPath:
-    case PlaceholderType::UrlQuery:
-    case PlaceholderType::UrlFragment:
-    case PlaceholderType::UrlUserInfo:
-    case PlaceholderType::UrlUserName:
-    case PlaceholderType::UrlPassword:
-        return resolveUrlPlaceholder(placeholderType);
-    case PlaceholderType::CustomAttribute: {
-        const QString key = placeholder.mid(3, placeholder.length() - 4); // {S:attribute} => mid(3, len - 4)
-        return attributes()->hasKey(key) ? attributes()->value(key) : placeholder;
-    }
-    case PlaceholderType::Reference: {
-        // resolving references in format: {REF:<WantedField>@I:<uuid of referenced entry>}
-        // using format from http://keepass.info/help/base/fieldrefs.html at the time of writing,
-        // but supporting lookups of standard fields and references by UUID only
-
-        QRegExp* tmpRegExp = m_attributes->referenceRegExp();
-        if (tmpRegExp->indexIn(placeholder) != -1) {
-            constexpr int wantedFieldIndex = 1;
-            constexpr int referencedUuidIndex = 2;
-            const Uuid referencedUuid(QByteArray::fromHex(tmpRegExp->cap(referencedUuidIndex).toLatin1()));
-            const Entry* refEntry = m_group->database()->resolveEntry(referencedUuid);
-            if (refEntry) {
-                QString result;
-                const QString wantedField = tmpRegExp->cap(wantedFieldIndex).toLower();
-                if (wantedField == "t") result = refEntry->title();
-                else if (wantedField == "u") result = refEntry->username();
-                else if (wantedField == "p") result = refEntry->password();
-                else if (wantedField == "a") result = refEntry->url();
-                else if (wantedField == "n") result = refEntry->notes();
-
-                result = refEntry->resolveMultiplePlaceholders(result);
-                return result;
-            }
-        }
-    }
-    }
-
-    return placeholder;
+    return resolvePlaceholderRecursive(placeholder, ResolveMaximumDepth);
 }
 
-QString Entry::resolveUrlPlaceholder(Entry::PlaceholderType placeholderType) const
+QString Entry::resolveUrlPlaceholder(const QString &str, Entry::PlaceholderType placeholderType) const
 {
-    const QString urlStr = url();
-    if (urlStr.isEmpty())
+    if (str.isEmpty())
         return QString();
 
-    const QUrl qurl(urlStr);
+    const QUrl qurl(str);
     switch (placeholderType) {
-    case PlaceholderType::Url:
-        return urlStr;
     case PlaceholderType::UrlWithoutScheme:
         return qurl.toString(QUrl::RemoveScheme | QUrl::FullyDecoded);
     case PlaceholderType::UrlScheme:
@@ -847,12 +875,13 @@ QString Entry::resolveUrlPlaceholder(Entry::PlaceholderType placeholderType) con
         return qurl.userName();
     case PlaceholderType::UrlPassword:
         return qurl.password();
-    default:
-        Q_ASSERT(false);
+    default: {
+        Q_ASSERT_X(false, "Entry::resolveUrlPlaceholder", "Bad url placeholder type");
         break;
     }
+    }
 
-    return urlStr;
+    return QString();
 }
 
 Entry::PlaceholderType Entry::placeholderType(const QString &placeholder) const
@@ -886,8 +915,7 @@ Entry::PlaceholderType Entry::placeholderType(const QString &placeholder) const
         { QStringLiteral("{URL:PASSWORD}"), PlaceholderType::UrlPassword }
     };
 
-    PlaceholderType result = placeholders.value(placeholder.toUpper(), PlaceholderType::Unknown);
-    return result;
+    return placeholders.value(placeholder.toUpper(), PlaceholderType::Unknown);
 }
 
 QString Entry::resolveUrl(const QString& url) const
diff --git a/src/core/Entry.h b/src/core/Entry.h
index 7b7a2508..212c8668 100644
--- a/src/core/Entry.h
+++ b/src/core/Entry.h
@@ -96,6 +96,7 @@ public:
     const EntryAttachments* attachments() const;
 
     static const int DefaultIconNumber;
+    static const int ResolveMaximumDepth;
 
     void setUuid(const Uuid& uuid);
     void setIcon(int iconNumber);
@@ -168,7 +169,7 @@ public:
     QString maskPasswordPlaceholders(const QString& str) const;
     QString resolveMultiplePlaceholders(const QString& str) const;
     QString resolvePlaceholder(const QString& str) const;
-    QString resolveUrlPlaceholder(PlaceholderType placeholderType) const;
+    QString resolveUrlPlaceholder(const QString &str, PlaceholderType placeholderType) const;
     PlaceholderType placeholderType(const QString& placeholder) const;
     QString resolveUrl(const QString& url) const;
 
@@ -199,6 +200,9 @@ private slots:
     void updateModifiedSinceBegin();
 
 private:
+    QString resolveMultiplePlaceholdersRecursive(const QString& str, int maxDepth) const;
+    QString resolvePlaceholderRecursive(const QString& placeholder, int maxDepth) const;
+
     const Database* database() const;
     template <class T> bool set(T& property, const T& value);
 
diff --git a/tests/TestEntry.cpp b/tests/TestEntry.cpp
index 056dbc93..1e863dbe 100644
--- a/tests/TestEntry.cpp
+++ b/tests/TestEntry.cpp
@@ -20,7 +20,9 @@
 
 #include <QTest>
 
+#include "core/Database.h"
 #include "core/Entry.h"
+#include "core/Group.h"
 #include "crypto/Crypto.h"
 
 QTEST_GUILESS_MAIN(TestEntry)
@@ -161,8 +163,8 @@ void TestEntry::testResolveUrl()
 
 void TestEntry::testResolveUrlPlaceholders()
 {
-    Entry* entry = new Entry();
-    entry->setUrl("https://user:pw@keepassxc.org:80/path/example.php?q=e&s=t+2#fragment");
+    Entry entry;
+    entry.setUrl("https://user:pw@keepassxc.org:80/path/example.php?q=e&s=t+2#fragment");
 
     QString rmvscm("//user:pw@keepassxc.org:80/path/example.php?q=e&s=t+2#fragment"); // Entry URL without scheme name.
     QString scm("https"); // Scheme name of the entry URL.
@@ -173,20 +175,90 @@ void TestEntry::testResolveUrlPlaceholders()
     QString userinfo("user:pw"); // User information of the entry URL.
     QString username("user"); // User name of the entry URL.
     QString password("pw"); // Password of the entry URL.
-    QString fragment("fragment"); // Password of the entry URL.
+    QString fragment("fragment"); // Fragment of the entry URL.
 
-    QCOMPARE(entry->resolvePlaceholder("{URL:RMVSCM}"), rmvscm);
-    QCOMPARE(entry->resolvePlaceholder("{URL:WITHOUTSCHEME}"), rmvscm);
-    QCOMPARE(entry->resolvePlaceholder("{URL:SCM}"), scm);
-    QCOMPARE(entry->resolvePlaceholder("{URL:SCHEME}"), scm);
-    QCOMPARE(entry->resolvePlaceholder("{URL:HOST}"), host);
-    QCOMPARE(entry->resolvePlaceholder("{URL:PORT}"), port);
-    QCOMPARE(entry->resolvePlaceholder("{URL:PATH}"), path);
-    QCOMPARE(entry->resolvePlaceholder("{URL:QUERY}"), query);
-    QCOMPARE(entry->resolvePlaceholder("{URL:USERINFO}"), userinfo);
-    QCOMPARE(entry->resolvePlaceholder("{URL:USERNAME}"), username);
-    QCOMPARE(entry->resolvePlaceholder("{URL:PASSWORD}"), password);
-    QCOMPARE(entry->resolvePlaceholder("{URL:FRAGMENT}"), fragment);
-
-    delete entry;
+    QCOMPARE(entry.resolvePlaceholder("{URL:RMVSCM}"), rmvscm);
+    QCOMPARE(entry.resolvePlaceholder("{URL:WITHOUTSCHEME}"), rmvscm);
+    QCOMPARE(entry.resolvePlaceholder("{URL:SCM}"), scm);
+    QCOMPARE(entry.resolvePlaceholder("{URL:SCHEME}"), scm);
+    QCOMPARE(entry.resolvePlaceholder("{URL:HOST}"), host);
+    QCOMPARE(entry.resolvePlaceholder("{URL:PORT}"), port);
+    QCOMPARE(entry.resolvePlaceholder("{URL:PATH}"), path);
+    QCOMPARE(entry.resolvePlaceholder("{URL:QUERY}"), query);
+    QCOMPARE(entry.resolvePlaceholder("{URL:USERINFO}"), userinfo);
+    QCOMPARE(entry.resolvePlaceholder("{URL:USERNAME}"), username);
+    QCOMPARE(entry.resolvePlaceholder("{URL:PASSWORD}"), password);
+    QCOMPARE(entry.resolvePlaceholder("{URL:FRAGMENT}"), fragment);
+}
+
+void TestEntry::testResolveRecursivePlaceholders()
+{
+    Database db;
+    Group* root = db.rootGroup();
+
+    Entry* entry1 = new Entry();
+    entry1->setGroup(root);
+    entry1->setUuid(Uuid::random());
+    entry1->setTitle("{USERNAME}");
+    entry1->setUsername("{PASSWORD}");
+    entry1->setPassword("{URL}");
+    entry1->setUrl("{S:CustomTitle}");
+    entry1->attributes()->set("CustomTitle", "RecursiveValue");
+    QCOMPARE(entry1->resolveMultiplePlaceholders(entry1->title()), QString("RecursiveValue"));
+
+    Entry* entry2 = new Entry();
+    entry2->setGroup(root);
+    entry2->setUuid(Uuid::random());
+    entry2->setTitle("Entry2Title");
+    entry2->setUsername("{S:CustomUserNameAttribute}");
+    entry2->setPassword(QString("{REF:P@I:%1}").arg(entry1->uuid().toHex()));
+    entry2->setUrl("http://{S:IpAddress}:{S:Port}/{S:Uri}");
+    entry2->attributes()->set("CustomUserNameAttribute", "CustomUserNameValue");
+    entry2->attributes()->set("IpAddress", "127.0.0.1");
+    entry2->attributes()->set("Port", "1234");
+    entry2->attributes()->set("Uri", "uri/path");
+
+    Entry* entry3 = new Entry();
+    entry3->setGroup(root);
+    entry3->setUuid(Uuid::random());
+    entry3->setTitle(QString("{REF:T@I:%1}").arg(entry2->uuid().toHex()));
+    entry3->setUsername(QString("{REF:U@I:%1}").arg(entry2->uuid().toHex()));
+    entry3->setPassword(QString("{REF:P@I:%1}").arg(entry2->uuid().toHex()));
+    entry3->setUrl(QString("{REF:A@I:%1}").arg(entry2->uuid().toHex()));
+
+    QCOMPARE(entry3->resolveMultiplePlaceholders(entry3->title()), QString("Entry2Title"));
+    QCOMPARE(entry3->resolveMultiplePlaceholders(entry3->username()), QString("CustomUserNameValue"));
+    QCOMPARE(entry3->resolveMultiplePlaceholders(entry3->password()), QString("RecursiveValue"));
+    QCOMPARE(entry3->resolveMultiplePlaceholders(entry3->url()), QString("http://127.0.0.1:1234/uri/path"));
+
+    Entry* entry4 = new Entry();
+    entry4->setGroup(root);
+    entry4->setUuid(Uuid::random());
+    entry4->setTitle(QString("{REF:T@I:%1}").arg(entry3->uuid().toHex()));
+    entry4->setUsername(QString("{REF:U@I:%1}").arg(entry3->uuid().toHex()));
+    entry4->setPassword(QString("{REF:P@I:%1}").arg(entry3->uuid().toHex()));
+    entry4->setUrl(QString("{REF:A@I:%1}").arg(entry3->uuid().toHex()));
+
+    QCOMPARE(entry4->resolveMultiplePlaceholders(entry4->title()), QString("Entry2Title"));
+    QCOMPARE(entry4->resolveMultiplePlaceholders(entry4->username()), QString("CustomUserNameValue"));
+    QCOMPARE(entry4->resolveMultiplePlaceholders(entry4->password()), QString("RecursiveValue"));
+    QCOMPARE(entry4->resolveMultiplePlaceholders(entry4->url()), QString("http://127.0.0.1:1234/uri/path"));
+
+    Entry* entry5 = new Entry();
+    entry5->setGroup(root);
+    entry5->setUuid(Uuid::random());
+    entry5->attributes()->set("Scheme", "http");
+    entry5->attributes()->set("Host", "host.org");
+    entry5->attributes()->set("Port", "2017");
+    entry5->attributes()->set("Path", "/some/path");
+    entry5->attributes()->set("UserName", "username");
+    entry5->attributes()->set("Password", "password");
+    entry5->attributes()->set("Query", "q=e&t=s");
+    entry5->attributes()->set("Fragment", "fragment");
+    entry5->setUrl("{S:Scheme}://{S:UserName}:{S:Password}@{S:Host}:{S:Port}{S:Path}?{S:Query}#{S:Fragment}");
+    entry5->setTitle("title+{URL:Path}+{URL:Fragment}+title");
+
+    const QString url("http://username:password@host.org:2017/some/path?q=e&t=s#fragment");
+    QCOMPARE(entry5->resolveMultiplePlaceholders(entry5->url()), url);
+    QCOMPARE(entry5->resolveMultiplePlaceholders(entry5->title()), QString("title+/some/path+fragment+title"));
 }
diff --git a/tests/TestEntry.h b/tests/TestEntry.h
index febdf085..50fec57a 100644
--- a/tests/TestEntry.h
+++ b/tests/TestEntry.h
@@ -33,6 +33,7 @@ private slots:
     void testClone();
     void testResolveUrl();
     void testResolveUrlPlaceholders();
+    void testResolveRecursivePlaceholders();
 };
 
 #endif // KEEPASSX_TESTENTRY_H

From 37aa4f0257ee1fb39300f262437b1cd858fc464d Mon Sep 17 00:00:00 2001
From: Jonathan White <support@dmapps.us>
Date: Wed, 18 Oct 2017 22:08:30 -0400
Subject: [PATCH 019/118] Unlock previously opened databases with --pw-stdin

---
 src/gui/DatabaseTabWidget.cpp | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/src/gui/DatabaseTabWidget.cpp b/src/gui/DatabaseTabWidget.cpp
index df0e1a1d..4c9445cc 100644
--- a/src/gui/DatabaseTabWidget.cpp
+++ b/src/gui/DatabaseTabWidget.cpp
@@ -129,7 +129,12 @@ void DatabaseTabWidget::openDatabase(const QString& fileName, const QString& pw,
     while (i.hasNext()) {
         i.next();
         if (i.value().canonicalFilePath == canonicalFilePath) {
-            setCurrentIndex(databaseIndex(i.key()));
+            if (!i.value().dbWidget->dbHasKey() && !(pw.isNull() && keyFile.isEmpty())) {
+                // If the database is locked and a pw or keyfile is provided, unlock it
+                i.value().dbWidget->switchToOpenDatabase(i.value().filePath, pw, keyFile);
+            } else {
+                setCurrentIndex(databaseIndex(i.key()));
+            }
             return;
         }
     }
@@ -204,7 +209,7 @@ void DatabaseTabWidget::openDatabase(const QString& fileName, const QString& pw,
 
     updateLastDatabases(dbStruct.filePath);
 
-    if (!pw.isNull() || !keyFile.isEmpty()) {
+    if (!(pw.isNull() && keyFile.isEmpty())) {
         dbStruct.dbWidget->switchToOpenDatabase(dbStruct.filePath, pw, keyFile);
     }
     else {

From feb6baad05a3de71387bdf11f7e6282cd31aef0c Mon Sep 17 00:00:00 2001
From: thez3ro <io@thezero.org>
Date: Fri, 20 Oct 2017 21:13:59 +0200
Subject: [PATCH 020/118] add KeePassHTTP-Connector

---
 README.md | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/README.md b/README.md
index bf214d3c..5588e322 100644
--- a/README.md
+++ b/README.md
@@ -14,7 +14,7 @@ KeePass Cross-platform Community Edition
 - Using website favicons as entry icons
 - Merging of databases
 - Automatic reload when the database changed on disk
-- KeePassHTTP support for use with [PassIFox](https://addons.mozilla.org/en-us/firefox/addon/passifox/) in Mozilla Firefox and [chromeIPass](https://chrome.google.com/webstore/detail/chromeipass/ompiailgknfdndiefoaoiligalphfdae) in Google Chrome or Chromium, and [passafari](https://github.com/mmichaa/passafari.safariextension/) in Safari.
+- KeePassHTTP support for use with KeePassHTTP-Connector for [Mozilla Firefox](https://addons.mozilla.org/en-US/firefox/addon/keepasshttp-connector/) and [Google Chrome or Chromium](https://chrome.google.com/webstore/detail/keepasshttp-connector/dafgdjggglmmknipkhngniifhplpcldb), and [passafari](https://github.com/mmichaa/passafari.safariextension/) in Safari.
 - Many bug fixes
 
 For a full list of features and changes, read the [CHANGELOG](CHANGELOG) document.

From 85f652290b48a2178fef65678889313d838c0f22 Mon Sep 17 00:00:00 2001
From: Jonathan White <support@dmapps.us>
Date: Thu, 5 Oct 2017 18:04:41 -0400
Subject: [PATCH 021/118] Add signtool function (Windows Only) to release-tool
 script

---
 release-tool | 41 +++++++++++++++++++++++++++++++++++------
 1 file changed, 35 insertions(+), 6 deletions(-)

diff --git a/release-tool b/release-tool
index a1d23b40..10c6a14c 100755
--- a/release-tool
+++ b/release-tool
@@ -119,9 +119,11 @@ EOF
 Sign previously compiled release packages
 
 Options:
-  -f, --files       Files to sign (required)
-  -g, --gpg-key     GPG key used to sign the files (default: '${GPG_KEY}')
-  -h, --help        Show this help
+  -f, --files        Files to sign (required)
+  -g, --gpg-key      GPG key used to sign the files (default: '${GPG_KEY}')
+      --signtool     Specify the signtool executable (default: 'signtool')
+      --signtool-key Provide a key to be used with signtool (for Windows EXE)
+  -h, --help         Show this help
 EOF
     fi
 }
@@ -546,10 +548,10 @@ build() {
     checkWorkingTreeClean
 
     OUTPUT_DIR="$(realpath "$OUTPUT_DIR")"
-    
+
     logInfo "Checking out release tag '${TAG_NAME}'..."
     git checkout "$TAG_NAME"
-    
+
     logInfo "Creating output directory..."
     mkdir -p "$OUTPUT_DIR"
 
@@ -663,6 +665,8 @@ build() {
 # -----------------------------------------------------------------------
 sign() {
     SIGN_FILES=()
+    SIGNTOOL="signtool"
+    SIGNTOOL_KEY=""
     
     while [ $# -ge 1 ]; do
         local arg="$1"
@@ -676,6 +680,14 @@ sign() {
             -g|--gpg-key)
                 GPG_KEY="$2"
                 shift ;;
+
+            --signtool)
+                SIGNTOOL="$2"
+                shift ;;
+
+            --signtool-key)
+                SIGNTOOL_KEY="$2"
+                shift ;;
             
             -h|--help)
                 printUsage "sign"
@@ -694,13 +706,30 @@ sign() {
         printUsage "sign"
         exit 1
     fi
+
+    if [[ -n "$SIGNTOOL_KEY" && ! -f "$SIGNTOOL_KEY" ]]; then
+        exitError "Signtool Key was not found!"
+    elif [[ -f "$SIGNTOOL_KEY" && ! -x $(command -v "${SIGNTOOL}") ]]; then
+        exitError "signtool program not found on PATH!"
+    fi
     
     for f in "${SIGN_FILES[@]}"; do
         if [ ! -f "$f" ]; then
             exitError "File '${f}' does not exist!"
         fi
+
+        if [[ -n "$SIGNTOOL_KEY" && ${f: -4} == '.exe' ]]; then
+            logInfo "Signing file '${f}' using signtool...\n"
+            read -s -p "Signtool Key Password: " password
+            echo
+            "${SIGNTOOL}" sign -f "${SIGNTOOL_KEY}" -p ${password} -v -t http://timestamp.comodoca.com/authenticode ${f}
+
+            if [ 0 -ne $? ]; then
+                exitError "Signing failed!"
+            fi
+        fi
         
-        logInfo "Signing file '${f}'..."
+        logInfo "Signing file '${f}' using release key..."
         gpg --output "${f}.sig" --armor --local-user "$GPG_KEY" --detach-sig "$f"
         
         if [ 0 -ne $? ]; then

From 19eb6a8a60afed2da5733a2eef47de80009f824f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Adolfo=20E=2E=20Garc=C3=ADa?= <adolfo.garcia.cr@gmail.com>
Date: Sat, 14 Oct 2017 22:54:20 -0600
Subject: [PATCH 022/118] Add new Base32 implementation

---
 COPYING              |   9 --
 LICENSE.APACHE-2.0   | 201 ------------------------------
 src/CMakeLists.txt   |   5 +-
 src/core/Base32.cpp  | 285 +++++++++++++++++++++++++++++++++++++++++++
 src/core/Base32.h    |  42 +++++++
 src/core/Optional.h  |  86 +++++++++++++
 src/totp/base32.cpp  |  68 -----------
 src/totp/base32.h    |  34 ------
 src/totp/totp.cpp    |  57 ++++++---
 src/totp/totp.h      |  11 +-
 tests/CMakeLists.txt |   3 +
 tests/TestBase32.cpp | 278 +++++++++++++++++++++++++++++++++++++++++
 tests/TestBase32.h   |  37 ++++++
 tests/TestTotp.cpp   |  31 +----
 tests/TestTotp.h     |   1 -
 15 files changed, 789 insertions(+), 359 deletions(-)
 delete mode 100644 LICENSE.APACHE-2.0
 create mode 100644 src/core/Base32.cpp
 create mode 100644 src/core/Base32.h
 create mode 100644 src/core/Optional.h
 delete mode 100644 src/totp/base32.cpp
 delete mode 100644 src/totp/base32.h
 create mode 100644 tests/TestBase32.cpp
 create mode 100644 tests/TestBase32.h

diff --git a/COPYING b/COPYING
index 481aaf72..403e4564 100644
--- a/COPYING
+++ b/COPYING
@@ -214,10 +214,6 @@ Files: share/icons/database/C65_W.png
 Copyright: none
 License: public-domain
 
-Files: src/crypto/salsa20/*
-Copyright: none
-License: public-domain
-
 Files: src/streams/qtiocompressor.*
        src/streams/QtIOCompressor
        tests/modeltest.*
@@ -241,8 +237,3 @@ Files: src/gui/KMessageWidget.h
 Copyright: 2011 Aurélien Gâteau <agateau@kde.org>
            2014 Dominik Haumann <dhaumann@kde.org>
 License: LGPL-2.1
-
-Files: src/totp/base32.cpp
-       src/totp/base32.h
-Copyright: 2010 Google Inc.
-License: Apache 2.0
\ No newline at end of file
diff --git a/LICENSE.APACHE-2.0 b/LICENSE.APACHE-2.0
deleted file mode 100644
index 9c8f3ea0..00000000
--- a/LICENSE.APACHE-2.0
+++ /dev/null
@@ -1,201 +0,0 @@
-                                 Apache License
-                           Version 2.0, January 2004
-                        http://www.apache.org/licenses/
-
-   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
-
-   1. Definitions.
-
-      "License" shall mean the terms and conditions for use, reproduction,
-      and distribution as defined by Sections 1 through 9 of this document.
-
-      "Licensor" shall mean the copyright owner or entity authorized by
-      the copyright owner that is granting the License.
-
-      "Legal Entity" shall mean the union of the acting entity and all
-      other entities that control, are controlled by, or are under common
-      control with that entity. For the purposes of this definition,
-      "control" means (i) the power, direct or indirect, to cause the
-      direction or management of such entity, whether by contract or
-      otherwise, or (ii) ownership of fifty percent (50%) or more of the
-      outstanding shares, or (iii) beneficial ownership of such entity.
-
-      "You" (or "Your") shall mean an individual or Legal Entity
-      exercising permissions granted by this License.
-
-      "Source" form shall mean the preferred form for making modifications,
-      including but not limited to software source code, documentation
-      source, and configuration files.
-
-      "Object" form shall mean any form resulting from mechanical
-      transformation or translation of a Source form, including but
-      not limited to compiled object code, generated documentation,
-      and conversions to other media types.
-
-      "Work" shall mean the work of authorship, whether in Source or
-      Object form, made available under the License, as indicated by a
-      copyright notice that is included in or attached to the work
-      (an example is provided in the Appendix below).
-
-      "Derivative Works" shall mean any work, whether in Source or Object
-      form, that is based on (or derived from) the Work and for which the
-      editorial revisions, annotations, elaborations, or other modifications
-      represent, as a whole, an original work of authorship. For the purposes
-      of this License, Derivative Works shall not include works that remain
-      separable from, or merely link (or bind by name) to the interfaces of,
-      the Work and Derivative Works thereof.
-
-      "Contribution" shall mean any work of authorship, including
-      the original version of the Work and any modifications or additions
-      to that Work or Derivative Works thereof, that is intentionally
-      submitted to Licensor for inclusion in the Work by the copyright owner
-      or by an individual or Legal Entity authorized to submit on behalf of
-      the copyright owner. For the purposes of this definition, "submitted"
-      means any form of electronic, verbal, or written communication sent
-      to the Licensor or its representatives, including but not limited to
-      communication on electronic mailing lists, source code control systems,
-      and issue tracking systems that are managed by, or on behalf of, the
-      Licensor for the purpose of discussing and improving the Work, but
-      excluding communication that is conspicuously marked or otherwise
-      designated in writing by the copyright owner as "Not a Contribution."
-
-      "Contributor" shall mean Licensor and any individual or Legal Entity
-      on behalf of whom a Contribution has been received by Licensor and
-      subsequently incorporated within the Work.
-
-   2. Grant of Copyright License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      copyright license to reproduce, prepare Derivative Works of,
-      publicly display, publicly perform, sublicense, and distribute the
-      Work and such Derivative Works in Source or Object form.
-
-   3. Grant of Patent License. Subject to the terms and conditions of
-      this License, each Contributor hereby grants to You a perpetual,
-      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
-      (except as stated in this section) patent license to make, have made,
-      use, offer to sell, sell, import, and otherwise transfer the Work,
-      where such license applies only to those patent claims licensable
-      by such Contributor that are necessarily infringed by their
-      Contribution(s) alone or by combination of their Contribution(s)
-      with the Work to which such Contribution(s) was submitted. If You
-      institute patent litigation against any entity (including a
-      cross-claim or counterclaim in a lawsuit) alleging that the Work
-      or a Contribution incorporated within the Work constitutes direct
-      or contributory patent infringement, then any patent licenses
-      granted to You under this License for that Work shall terminate
-      as of the date such litigation is filed.
-
-   4. Redistribution. You may reproduce and distribute copies of the
-      Work or Derivative Works thereof in any medium, with or without
-      modifications, and in Source or Object form, provided that You
-      meet the following conditions:
-
-      (a) You must give any other recipients of the Work or
-          Derivative Works a copy of this License; and
-
-      (b) You must cause any modified files to carry prominent notices
-          stating that You changed the files; and
-
-      (c) You must retain, in the Source form of any Derivative Works
-          that You distribute, all copyright, patent, trademark, and
-          attribution notices from the Source form of the Work,
-          excluding those notices that do not pertain to any part of
-          the Derivative Works; and
-
-      (d) If the Work includes a "NOTICE" text file as part of its
-          distribution, then any Derivative Works that You distribute must
-          include a readable copy of the attribution notices contained
-          within such NOTICE file, excluding those notices that do not
-          pertain to any part of the Derivative Works, in at least one
-          of the following places: within a NOTICE text file distributed
-          as part of the Derivative Works; within the Source form or
-          documentation, if provided along with the Derivative Works; or,
-          within a display generated by the Derivative Works, if and
-          wherever such third-party notices normally appear. The contents
-          of the NOTICE file are for informational purposes only and
-          do not modify the License. You may add Your own attribution
-          notices within Derivative Works that You distribute, alongside
-          or as an addendum to the NOTICE text from the Work, provided
-          that such additional attribution notices cannot be construed
-          as modifying the License.
-
-      You may add Your own copyright statement to Your modifications and
-      may provide additional or different license terms and conditions
-      for use, reproduction, or distribution of Your modifications, or
-      for any such Derivative Works as a whole, provided Your use,
-      reproduction, and distribution of the Work otherwise complies with
-      the conditions stated in this License.
-
-   5. Submission of Contributions. Unless You explicitly state otherwise,
-      any Contribution intentionally submitted for inclusion in the Work
-      by You to the Licensor shall be under the terms and conditions of
-      this License, without any additional terms or conditions.
-      Notwithstanding the above, nothing herein shall supersede or modify
-      the terms of any separate license agreement you may have executed
-      with Licensor regarding such Contributions.
-
-   6. Trademarks. This License does not grant permission to use the trade
-      names, trademarks, service marks, or product names of the Licensor,
-      except as required for reasonable and customary use in describing the
-      origin of the Work and reproducing the content of the NOTICE file.
-
-   7. Disclaimer of Warranty. Unless required by applicable law or
-      agreed to in writing, Licensor provides the Work (and each
-      Contributor provides its Contributions) on an "AS IS" BASIS,
-      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
-      implied, including, without limitation, any warranties or conditions
-      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
-      PARTICULAR PURPOSE. You are solely responsible for determining the
-      appropriateness of using or redistributing the Work and assume any
-      risks associated with Your exercise of permissions under this License.
-
-   8. Limitation of Liability. In no event and under no legal theory,
-      whether in tort (including negligence), contract, or otherwise,
-      unless required by applicable law (such as deliberate and grossly
-      negligent acts) or agreed to in writing, shall any Contributor be
-      liable to You for damages, including any direct, indirect, special,
-      incidental, or consequential damages of any character arising as a
-      result of this License or out of the use or inability to use the
-      Work (including but not limited to damages for loss of goodwill,
-      work stoppage, computer failure or malfunction, or any and all
-      other commercial damages or losses), even if such Contributor
-      has been advised of the possibility of such damages.
-
-   9. Accepting Warranty or Additional Liability. While redistributing
-      the Work or Derivative Works thereof, You may choose to offer,
-      and charge a fee for, acceptance of support, warranty, indemnity,
-      or other liability obligations and/or rights consistent with this
-      License. However, in accepting such obligations, You may act only
-      on Your own behalf and on Your sole responsibility, not on behalf
-      of any other Contributor, and only if You agree to indemnify,
-      defend, and hold each Contributor harmless for any liability
-      incurred by, or claims asserted against, such Contributor by reason
-      of your accepting any such warranty or additional liability.
-
-   END OF TERMS AND CONDITIONS
-
-   APPENDIX: How to apply the Apache License to your work.
-
-      To apply the Apache License to your work, attach the following
-      boilerplate notice, with the fields enclosed by brackets "{}"
-      replaced with your own identifying information. (Don't include
-      the brackets!)  The text should be enclosed in the appropriate
-      comment syntax for the file format. We also recommend that a
-      file or class name and description of purpose be included on the
-      same "printed page" as the copyright notice for easier
-      identification within third-party archives.
-
-   Copyright {yyyy} {name of copyright owner}
-
-   Licensed under the Apache License, Version 2.0 (the "License");
-   you may not use this file except in compliance with the License.
-   You may obtain a copy of the License at
-
-       http://www.apache.org/licenses/LICENSE-2.0
-
-   Unless required by applicable law or agreed to in writing, software
-   distributed under the License is distributed on an "AS IS" BASIS,
-   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-   See the License for the specific language governing permissions and
-   limitations under the License.
\ No newline at end of file
diff --git a/src/CMakeLists.txt b/src/CMakeLists.txt
index 79168557..28170b16 100644
--- a/src/CMakeLists.txt
+++ b/src/CMakeLists.txt
@@ -59,6 +59,9 @@ set(keepassx_SOURCES
     core/Tools.cpp
     core/Translator.cpp
     core/Uuid.cpp
+    core/Base32.h
+    core/Base32.cpp
+    core/Optional.h
     cli/PasswordInput.cpp
     cli/PasswordInput.h
     crypto/Crypto.cpp
@@ -138,8 +141,6 @@ set(keepassx_SOURCES
     streams/qtiocompressor.cpp
     streams/StoreDataStream.cpp
     streams/SymmetricCipherStream.cpp
-    totp/base32.h
-    totp/base32.cpp
     totp/totp.h
     totp/totp.cpp
 )
diff --git a/src/core/Base32.cpp b/src/core/Base32.cpp
new file mode 100644
index 00000000..8b2faf62
--- /dev/null
+++ b/src/core/Base32.cpp
@@ -0,0 +1,285 @@
+/*
+ *  Copyright (C) 2017 KeePassXC Team <team@keepassxc.org>
+ *
+ *  This program is free software: you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation, either version 2 or (at your option)
+ *  version 3 of the License.
+ *
+ *  This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+/* Conforms to RFC 4648. For details, see: https://tools.ietf.org/html/rfc4648
+ * Use the functions Base32::addPadding/1, Base32::removePadding/1 or
+ * Base32::sanitizeInput/1 to fix input or output for a particular
+ * applications (e.g. to use with Google Authenticator).
+ */
+
+#include "Base32.h"
+
+constexpr quint64 MASK_40BIT = quint64(0xF8) << 32;
+constexpr quint64 MASK_35BIT = quint64(0x7C0000000);
+constexpr quint64 MASK_25BIT = quint64(0x1F00000);
+constexpr quint64 MASK_20BIT = quint64(0xF8000);
+constexpr quint64 MASK_10BIT = quint64(0x3E0);
+
+constexpr char alphabet[] = "ABCDEFGHIJKLMNOPQRSTUVWXYZ234567";
+constexpr quint8 ALPH_POS_2 = 26;
+
+constexpr quint8 ASCII_2 = static_cast<quint8>('2');
+constexpr quint8 ASCII_7 = static_cast<quint8>('7');
+constexpr quint8 ASCII_A = static_cast<quint8>('A');
+constexpr quint8 ASCII_Z = static_cast<quint8>('Z');
+constexpr quint8 ASCII_a = static_cast<quint8>('a');
+constexpr quint8 ASCII_z = static_cast<quint8>('z');
+constexpr quint8 ASCII_EQ = static_cast<quint8>('=');
+
+Optional<QByteArray> Base32::decode(const QByteArray& encodedData)
+{
+    if (encodedData.size() <= 0) {
+        return Optional<QByteArray>("");
+    }
+
+    if (encodedData.size() % 8 != 0) {
+        return Optional<QByteArray>();
+    }
+
+    int nPads = 0;
+    for (int i = -1; i > -7; --i) {
+        if ('=' == encodedData[encodedData.size() + i])
+            ++nPads;
+    }
+
+    int specialOffset;
+    int nSpecialBytes;
+
+    switch (nPads) { // in {0, 1, 3, 4, 6}
+    case 1:
+        nSpecialBytes = 4;
+        specialOffset = 3;
+        break;
+    case 3:
+        nSpecialBytes = 3;
+        specialOffset = 1;
+        break;
+    case 4:
+        nSpecialBytes = 2;
+        specialOffset = 4;
+        break;
+    case 6:
+        nSpecialBytes = 1;
+        specialOffset = 2;
+        break;
+    default:
+        nSpecialBytes = 0;
+        specialOffset = 0;
+    }
+
+    Q_ASSERT(encodedData.size() > 0);
+    const int nQuanta = encodedData.size() / 8;
+    const int nBytes = (nQuanta - 1) * 5 + nSpecialBytes;
+
+    QByteArray data(nBytes, Qt::Uninitialized);
+
+    int i = 0;
+    int o = 0;
+
+    while (i < encodedData.size()) {
+        quint64 quantum = 0;
+        int nQuantumBytes = 5;
+
+        for (int n = 0; n < 8; n++) {
+            quint8 ch = static_cast<quint8>(encodedData[i++]);
+            if ((ASCII_A <= ch && ch <= ASCII_Z) || (ASCII_a <= ch && ch <= ASCII_z)) {
+                ch -= ASCII_A;
+                if (ch >= ALPH_POS_2)
+                    ch -= ASCII_a - ASCII_A;
+            } else {
+                if (ASCII_2 <= ch && ch <= ASCII_7) {
+                    ch -= ASCII_2;
+                    ch += ALPH_POS_2;
+                } else {
+                    if (ASCII_EQ == ch) {
+                        if (i == encodedData.size()) {
+                            // finished with special quantum
+                            quantum >>= specialOffset;
+                            nQuantumBytes = nSpecialBytes;
+                        }
+                        continue;
+                    } else {
+                        // illegal character
+                        return Optional<QByteArray>();
+                    }
+                }
+            }
+
+            quantum <<= 5;
+            quantum |= ch;
+        }
+
+        const int offset = (nQuantumBytes - 1) * 8;
+        quint64 mask = quint64(0xFF) << offset;
+        for (int n = offset; n >= 0; n -= 8) {
+            char c = static_cast<char>((quantum & mask) >> n);
+            data[o++] = c;
+            mask >>= 8;
+        }
+    }
+
+    return Optional<QByteArray>(data);
+}
+
+QByteArray Base32::encode(const QByteArray& data)
+{
+    if (data.size() < 1) {
+        return QByteArray();
+    }
+
+    const int nBits = data.size() * 8;
+    const int rBits = nBits % 40; // in {0, 8, 16, 24, 32}
+    const int nQuanta = nBits / 40 + (rBits > 0 ? 1 : 0);
+    QByteArray encodedData(nQuanta * 8, Qt::Uninitialized);
+
+    int i = 0;
+    int o = 0;
+    int n;
+    quint64 mask;
+    quint64 quantum;
+
+    // 40-bits of input per input group
+    while (i + 5 <= data.size()) {
+        quantum = 0;
+        for (n = 32; n >= 0; n -= 8) {
+            quantum |= (static_cast<quint64>(data[i++]) << n);
+        }
+
+        mask = MASK_40BIT;
+        int index;
+        for (n = 35; n >= 0; n -= 5) {
+            index = (quantum & mask) >> n;
+            encodedData[o++] = alphabet[index];
+            mask >>= 5;
+        }
+    }
+
+    // < 40-bits of input at final input group
+    if (i < data.size()) {
+        Q_ASSERT(rBits > 0);
+        quantum = 0;
+        for (n = rBits - 8; n >= 0; n -= 8)
+            quantum |= static_cast<quint64>(data[i++]) << n;
+
+        switch (rBits) {
+        case 8: // expand to 10 bits
+            quantum <<= 2;
+            mask = MASK_10BIT;
+            n = 5;
+            break;
+        case 16: // expand to 20 bits
+            quantum <<= 4;
+            mask = MASK_20BIT;
+            n = 15;
+            break;
+        case 24: // expand to 25 bits
+            quantum <<= 1;
+            mask = MASK_25BIT;
+            n = 20;
+            break;
+        default: // expand to 35 bits
+            Q_ASSERT(rBits == 32);
+            quantum <<= 3;
+            mask = MASK_35BIT;
+            n = 30;
+        }
+
+        while (n >= 0) {
+            int index = (quantum & mask) >> n;
+            encodedData[o++] = alphabet[index];
+            mask >>= 5;
+            n -= 5;
+        }
+
+        // add pad characters
+        while (o < encodedData.size())
+            encodedData[o++] = '=';
+    }
+
+    Q_ASSERT(encodedData.size() == o);
+    return encodedData;
+}
+
+QByteArray Base32::addPadding(const QByteArray& encodedData)
+{
+    if (encodedData.size() <= 0 || encodedData.size() % 8 == 0) {
+        return encodedData;
+    }
+
+    const int rBytes = encodedData.size() % 8;
+    // rBytes must be a member of {2, 4, 5, 7}
+    if (1 == rBytes || 3 == rBytes || 6 == rBytes) {
+        return encodedData;
+    }
+
+    QByteArray newEncodedData(encodedData);
+    for (int nPads = 8 - rBytes; nPads > 0; --nPads) {
+        newEncodedData.append('=');
+    }
+
+    return newEncodedData;
+}
+
+QByteArray Base32::removePadding(const QByteArray& encodedData)
+{
+    if (encodedData.size() <= 0 || encodedData.size() % 8 != 0) {
+        return encodedData; // return same bad input
+    }
+
+    int nPads = 0;
+    for (int i = -1; i > -7; --i) {
+        if ('=' == encodedData[encodedData.size() + i]) {
+            ++nPads;
+        }
+    }
+
+    QByteArray newEncodedData(encodedData);
+    newEncodedData.remove(encodedData.size() - nPads, nPads);
+    newEncodedData.resize(encodedData.size() - nPads);
+
+    return newEncodedData;
+}
+
+QByteArray Base32::sanitizeInput(const QByteArray& encodedData)
+{
+    if (encodedData.size() <= 0) {
+        return encodedData;
+    }
+
+    QByteArray newEncodedData(encodedData.size(), Qt::Uninitialized);
+    int i = 0;
+    for (auto ch : encodedData) {
+        switch (ch) {
+        case '0':
+            newEncodedData[i++] = 'O';
+            break;
+        case '1':
+            newEncodedData[i++] = 'L';
+            break;
+        case '8':
+            newEncodedData[i++] = 'B';
+            break;
+        default:
+            if (('A' <= ch && ch <= 'Z') || ('a' <= ch && ch <= 'z') || ('2' <= ch && ch <= '7')) {
+                newEncodedData[i++] = ch;
+            }
+        }
+    }
+    newEncodedData.resize(i);
+
+    return addPadding(newEncodedData);
+}
diff --git a/src/core/Base32.h b/src/core/Base32.h
new file mode 100644
index 00000000..04882897
--- /dev/null
+++ b/src/core/Base32.h
@@ -0,0 +1,42 @@
+/*
+ *  Copyright (C) 2017 KeePassXC Team <team@keepassxc.org>
+ *
+ *  This program is free software: you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation, either version 2 or (at your option)
+ *  version 3 of the License.
+ *
+ *  This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+/* Conforms to RFC 4648. For details, see: https://tools.ietf.org/html/rfc4648
+ * Use the functions Base32::addPadding/1, Base32::removePadding/1 or
+ * Base32::sanitizeInput/1 to fix input or output for a particular
+ * applications (e.g. to use with Google Authenticator).
+ */
+
+#ifndef BASE32_H
+#define BASE32_H
+
+#include "Optional.h"
+#include <QByteArray>
+#include <QtCore/qglobal.h>
+
+class Base32
+{
+public:
+    Base32() = default;
+    Q_REQUIRED_RESULT static Optional<QByteArray> decode(const QByteArray&);
+    Q_REQUIRED_RESULT static QByteArray encode(const QByteArray&);
+    Q_REQUIRED_RESULT static QByteArray addPadding(const QByteArray&);
+    Q_REQUIRED_RESULT static QByteArray removePadding(const QByteArray&);
+    Q_REQUIRED_RESULT static QByteArray sanitizeInput(const QByteArray&);
+};
+
+#endif // BASE32_H
diff --git a/src/core/Optional.h b/src/core/Optional.h
new file mode 100644
index 00000000..0721daa3
--- /dev/null
+++ b/src/core/Optional.h
@@ -0,0 +1,86 @@
+/*
+ *  Copyright (C) 2017 KeePassXC Team <team@keepassxc.org>
+ *
+ *  This program is free software: you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation, either version 2 or (at your option)
+ *  version 3 of the License.
+ *
+ *  This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#ifndef OPTIONAL_H
+#define OPTIONAL_H
+
+/*
+ * This utility class is for providing basic support for an option type.
+ * It can be replaced by std::optional (C++17) or
+ * std::experimental::optional (C++11) when they become fully supported
+ * by all the main compiler toolchains.
+ */
+
+template <typename T> class Optional
+{
+public:
+    // None
+    Optional()
+        : m_hasValue(false)
+        , m_value(){};
+
+    // Some T
+    Optional(const T& value)
+        : m_hasValue(true)
+        , m_value(value){};
+
+    // Copy
+    Optional(const Optional& other)
+        : m_hasValue(other.m_hasValue)
+        , m_value(other.m_value){};
+
+    const Optional& operator=(const Optional& other)
+    {
+        m_hasValue = other.m_hasValue;
+        m_value = other.m_value;
+        return *this;
+    }
+
+    bool operator==(const Optional& other) const
+    {
+        if (m_hasValue)
+            return other.m_hasValue && m_value == other.m_value;
+        else
+            return !other.m_hasValue;
+    }
+
+    bool operator!=(const Optional& other) const
+    {
+        return !(*this == other);
+    }
+
+    bool hasValue() const
+    {
+        return m_hasValue;
+    }
+
+    T valueOr(const T& other) const
+    {
+        return m_hasValue ? m_value : other;
+    }
+
+    Optional static makeOptional(const T& value)
+    {
+        return Optional(value);
+    }
+
+private:
+    bool m_hasValue;
+    T m_value;
+};
+
+#endif // OPTIONAL_H
diff --git a/src/totp/base32.cpp b/src/totp/base32.cpp
deleted file mode 100644
index 4c81cb49..00000000
--- a/src/totp/base32.cpp
+++ /dev/null
@@ -1,68 +0,0 @@
-// Base32 implementation
-// Source: https://github.com/google/google-authenticator-libpam/blob/master/src/base32.c
-//
-// Copyright 2010 Google Inc.
-// Author: Markus Gutschke
-// Modifications Copyright 2017 KeePassXC team <team@keepassxc.org>
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//      http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
-
-#include "base32.h"
-
-Base32::Base32()
-{
-}
-
-QByteArray Base32::base32_decode(const QByteArray encoded)
-{
-    QByteArray result;
-
-    int buffer = 0;
-    int bitsLeft = 0;
-
-    for (char ch : encoded) {
-        if (ch == 0 || ch == ' ' || ch == '\t' || ch == '\r' || ch == '\n' || ch == '-' || ch == '=') {
-            continue;
-        }
-
-        buffer <<= 5;
-
-        // Deal with commonly mistyped characters
-        if (ch == '0') {
-            ch = 'O';
-        } else if (ch == '1') {
-            ch = 'L';
-        } else if (ch == '8') {
-            ch = 'B';
-        }
-
-        // Look up one base32 digit
-        if ((ch >= 'A' && ch <= 'Z') || (ch >= 'a' && ch <= 'z')) {
-            ch = (ch & 0x1F) - 1;
-        } else if (ch >= '2' && ch <= '7') {
-            ch -= '2' - 26;
-        } else {
-            return QByteArray();
-        }
-
-        buffer |= ch;
-        bitsLeft += 5;
-
-        if (bitsLeft >= 8) {
-            result.append(static_cast<char> (buffer >> (bitsLeft - 8)));
-            bitsLeft -= 8;
-        }
-    }
-
-    return result;
-}
\ No newline at end of file
diff --git a/src/totp/base32.h b/src/totp/base32.h
deleted file mode 100644
index 75343fa4..00000000
--- a/src/totp/base32.h
+++ /dev/null
@@ -1,34 +0,0 @@
-// Base32 implementation
-// Source: https://github.com/google/google-authenticator-libpam/blob/master/src/base32.h
-//
-// Copyright 2010 Google Inc.
-// Author: Markus Gutschke
-// Modifications Copyright 2017 KeePassXC team <team@keepassxc.org>
-//
-// Licensed under the Apache License, Version 2.0 (the "License");
-// you may not use this file except in compliance with the License.
-// You may obtain a copy of the License at
-//
-//      http://www.apache.org/licenses/LICENSE-2.0
-//
-// Unless required by applicable law or agreed to in writing, software
-// distributed under the License is distributed on an "AS IS" BASIS,
-// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
-// See the License for the specific language governing permissions and
-// limitations under the License.
-
-#ifndef BASE32_H
-#define BASE32_H
-
-#include <QtCore/qglobal.h>
-#include <QByteArray>
-
-class Base32
-{
-public:
-    Base32();
-    static QByteArray base32_decode(const QByteArray encoded);
-};
-
-
-#endif //BASE32_H
diff --git a/src/totp/totp.cpp b/src/totp/totp.cpp
index 51af0e08..170ac2da 100644
--- a/src/totp/totp.cpp
+++ b/src/totp/totp.cpp
@@ -17,16 +17,15 @@
  */
 
 #include "totp.h"
-#include "base32.h"
-#include <cmath>
-#include <QtEndian>
-#include <QRegExp>
-#include <QDateTime>
+#include "core/Base32.h"
 #include <QCryptographicHash>
+#include <QDateTime>
 #include <QMessageAuthenticationCode>
+#include <QRegExp>
 #include <QUrl>
 #include <QUrlQuery>
-
+#include <QtEndian>
+#include <cmath>
 
 const quint8 QTotp::defaultStep = 30;
 const quint8 QTotp::defaultDigits = 6;
@@ -35,7 +34,7 @@ QTotp::QTotp()
 {
 }
 
-QString QTotp::parseOtpString(QString key, quint8 &digits, quint8 &step)
+QString QTotp::parseOtpString(QString key, quint8& digits, quint8& step)
 {
     QUrl url(key);
 
@@ -58,7 +57,6 @@ QString QTotp::parseOtpString(QString key, quint8 &digits, quint8 &step)
             step = q_step;
         }
 
-
     } else {
         // Compatibility with "KeeOtp" plugin string format
         QRegExp rx("key=(.+)", Qt::CaseInsensitive, QRegExp::RegExp);
@@ -93,30 +91,53 @@ QString QTotp::parseOtpString(QString key, quint8 &digits, quint8 &step)
     return seed;
 }
 
-QString QTotp::generateTotp(const QByteArray key, quint64 time,
-                            const quint8 numDigits = defaultDigits, const quint8 step = defaultStep)
+QString QTotp::generateTotp(const QByteArray key,
+                            quint64 time,
+                            const quint8 numDigits = defaultDigits,
+                            const quint8 step = defaultStep)
 {
     quint64 current = qToBigEndian(time / step);
 
-    QByteArray secret = Base32::base32_decode(key);
-    if (secret.isEmpty()) {
+    Optional<QByteArray> secret = Base32::decode(Base32::sanitizeInput(key));
+    if (!secret.hasValue()) {
         return "Invalid TOTP secret key";
     }
 
     QMessageAuthenticationCode code(QCryptographicHash::Sha1);
-    code.setKey(secret);
+    code.setKey(secret.valueOr(""));
     code.addData(QByteArray(reinterpret_cast<char*>(&current), sizeof(current)));
     QByteArray hmac = code.result();
 
     int offset = (hmac[hmac.length() - 1] & 0xf);
-    int binary =
-            ((hmac[offset] & 0x7f) << 24)
-            | ((hmac[offset + 1] & 0xff) << 16)
-            | ((hmac[offset + 2] & 0xff) << 8)
-            | (hmac[offset + 3] & 0xff);
+    int binary = ((hmac[offset] & 0x7f) << 24) | ((hmac[offset + 1] & 0xff) << 16) | ((hmac[offset + 2] & 0xff) << 8) |
+                 (hmac[offset + 3] & 0xff);
 
     quint32 digitsPower = pow(10, numDigits);
 
     quint64 password = binary % digitsPower;
     return QString("%1").arg(password, numDigits, 10, QChar('0'));
 }
+
+// See: https://github.com/google/google-authenticator/wiki/Key-Uri-Format
+QUrl QTotp::generateOtpString(const QString& secret,
+                              const QString& type,
+                              const QString& issuer,
+                              const QString& username,
+                              const QString& algorithm,
+                              const quint8& digits,
+                              const quint8& step)
+{
+    QUrl keyUri;
+    keyUri.setScheme("otpauth");
+    keyUri.setHost(type);
+    keyUri.setPath(QString("/%1:%2").arg(issuer).arg(username));
+    QUrlQuery parameters;
+    parameters.addQueryItem("secret", secret);
+    parameters.addQueryItem("issuer", issuer);
+    parameters.addQueryItem("algorithm", algorithm);
+    parameters.addQueryItem("digits", QString::number(digits));
+    parameters.addQueryItem("period", QString::number(step));
+    keyUri.setQuery(parameters);
+
+    return keyUri;
+}
diff --git a/src/totp/totp.h b/src/totp/totp.h
index 642b4f9a..d5d8aa67 100644
--- a/src/totp/totp.h
+++ b/src/totp/totp.h
@@ -21,12 +21,21 @@
 
 #include <QtCore/qglobal.h>
 
+class QUrl;
+
 class QTotp
 {
 public:
     QTotp();
-    static QString parseOtpString(QString rawSecret, quint8 &digits, quint8 &step);
+    static QString parseOtpString(QString rawSecret, quint8& digits, quint8& step);
     static QString generateTotp(const QByteArray key, quint64 time, const quint8 numDigits, const quint8 step);
+    static QUrl generateOtpString(const QString& secret,
+                                  const QString& type,
+                                  const QString& issuer,
+                                  const QString& username,
+                                  const QString& algorithm,
+                                  const quint8& digits,
+                                  const quint8& step);
     static const quint8 defaultStep;
     static const quint8 defaultDigits;
 };
diff --git a/tests/CMakeLists.txt b/tests/CMakeLists.txt
index 2a420270..3f003f01 100644
--- a/tests/CMakeLists.txt
+++ b/tests/CMakeLists.txt
@@ -161,6 +161,9 @@ add_unit_test(NAME testentry SOURCES TestEntry.cpp
 add_unit_test(NAME testtotp SOURCES TestTotp.cpp
               LIBS ${TEST_LIBRARIES})
 
+add_unit_test(NAME testbase32 SOURCES TestBase32.cpp
+              LIBS ${TEST_LIBRARIES})
+
 add_unit_test(NAME testcsvparser SOURCES TestCsvParser.cpp
               LIBS ${TEST_LIBRARIES})
 
diff --git a/tests/TestBase32.cpp b/tests/TestBase32.cpp
new file mode 100644
index 00000000..3d829d96
--- /dev/null
+++ b/tests/TestBase32.cpp
@@ -0,0 +1,278 @@
+/*
+ *  Copyright (C) 2017 KeePassXC Team <team@keepassxc.org>
+ *
+ *  This program is free software: you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation, either version 2 or (at your option)
+ *  version 3 of the License.
+ *
+ *  This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#include "TestBase32.h"
+#include "core/Base32.h"
+#include <QTest>
+
+QTEST_GUILESS_MAIN(TestBase32)
+
+void TestBase32::testDecode()
+{
+    // 3 quanta, all upper case + padding
+    QByteArray encodedData = "JBSWY3DPEB3W64TMMQXC4LQ=";
+    auto data = Base32::decode(encodedData);
+    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("Hello world..."));
+
+    // 4 quanta, all upper case
+    encodedData = "GEZDGNBVGY3TQOJQGEZDGNBVGY3TQOJQ";
+    data = Base32::decode(encodedData);
+    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("12345678901234567890"));
+
+    // 4 quanta, all lower case
+    encodedData = "gezdgnbvgy3tqojqgezdgnbvgy3tqojq";
+    data = Base32::decode(encodedData);
+    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("12345678901234567890"));
+
+    // 4 quanta, mixed upper and lower case
+    encodedData = "Gezdgnbvgy3tQojqgezdGnbvgy3tQojQ";
+    data = Base32::decode(encodedData);
+    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("12345678901234567890"));
+
+    // 1 pad characters
+    encodedData = "ORSXG5A=";
+    data = Base32::decode(encodedData);
+    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("test"));
+
+    // 3 pad characters
+    encodedData = "L5PV6===";
+    data = Base32::decode(encodedData);
+    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("___"));
+
+    // 4 pad characters
+    encodedData = "MZXW6IDCMFZA====";
+    data = Base32::decode(encodedData);
+    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("foo bar"));
+
+    // six pad characters
+    encodedData = "MZXW6YTBOI======";
+    data = Base32::decode(encodedData);
+    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("foobar"));
+
+    encodedData = "IA======";
+    data = Base32::decode(encodedData);
+    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("@"));
+
+    // error: illegal character
+    encodedData = "1MZXW6YTBOI=====";
+    data = Base32::decode(encodedData);
+    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("ERROR"));
+
+    // error: missing pad character
+    encodedData = "MZXW6YTBOI=====";
+    data = Base32::decode(encodedData);
+    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("ERROR"));
+
+    // RFC 4648 test vectors
+    encodedData = "";
+    data = Base32::decode(encodedData);
+    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString(""));
+
+    encodedData = "MY======";
+    data = Base32::decode(encodedData);
+    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("f"));
+
+    encodedData = "MZXQ====";
+    data = Base32::decode(encodedData);
+    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("fo"));
+
+    encodedData = "MZXW6===";
+    data = Base32::decode(encodedData);
+    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("foo"));
+
+    encodedData = "MZXW6YQ=";
+    data = Base32::decode(encodedData);
+    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("foob"));
+
+    encodedData = "MZXW6YTB";
+    data = Base32::decode(encodedData);
+    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("fooba"));
+
+    encodedData = "MZXW6YTBOI======";
+    data = Base32::decode(encodedData);
+    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("foobar"));
+}
+
+void TestBase32::testEncode()
+{
+    QByteArray data = "Hello world...";
+    QByteArray encodedData = Base32::encode(data);
+    QCOMPARE(encodedData, QByteArray("JBSWY3DPEB3W64TMMQXC4LQ="));
+
+    data = "12345678901234567890";
+    encodedData = Base32::encode(data);
+    QCOMPARE(encodedData, QByteArray("GEZDGNBVGY3TQOJQGEZDGNBVGY3TQOJQ"));
+
+    data = "012345678901234567890";
+    encodedData = Base32::encode(data);
+    QCOMPARE(encodedData, QByteArray("GAYTEMZUGU3DOOBZGAYTEMZUGU3DOOBZGA======"));
+
+    data = "test";
+    encodedData = Base32::encode(data);
+    QCOMPARE(encodedData, QByteArray("ORSXG5A="));
+
+    data = "___";
+    encodedData = Base32::encode(data);
+    QCOMPARE(encodedData, QByteArray("L5PV6==="));
+
+    data = "foo bar";
+    encodedData = Base32::encode(data);
+    QCOMPARE(encodedData, QByteArray("MZXW6IDCMFZA===="));
+
+    data = "@";
+    encodedData = Base32::encode(data);
+    QCOMPARE(encodedData, QByteArray("IA======"));
+
+    // RFC 4648 test vectors
+    data = "";
+    encodedData = Base32::encode(data);
+    QCOMPARE(encodedData, QByteArray(""));
+
+    data = "f";
+    encodedData = Base32::encode(data);
+    QCOMPARE(encodedData, QByteArray("MY======"));
+
+    data = "fo";
+    encodedData = Base32::encode(data);
+    QCOMPARE(encodedData, QByteArray("MZXQ===="));
+
+    data = "foo";
+    encodedData = Base32::encode(data);
+    QCOMPARE(encodedData, QByteArray("MZXW6==="));
+
+    data = "foob";
+    encodedData = Base32::encode(data);
+    QCOMPARE(encodedData, QByteArray("MZXW6YQ="));
+
+    data = "fooba";
+    encodedData = Base32::encode(data);
+    QCOMPARE(encodedData, QByteArray("MZXW6YTB"));
+
+    data = "foobar";
+    encodedData = Base32::encode(data);
+    QCOMPARE(encodedData, QByteArray("MZXW6YTBOI======"));
+}
+
+void TestBase32::testAddPadding()
+{
+    // Empty. Invalid, returns input.
+    QByteArray data = "";
+    QByteArray paddedData = Base32::addPadding(data);
+    QCOMPARE(paddedData, data);
+
+    // One byte of encoded data. Invalid, returns input.
+    data = "B";
+    paddedData = Base32::addPadding(data);
+    QCOMPARE(paddedData, data);
+
+    // Two bytes of encoded data.
+    data = "BB";
+    paddedData = Base32::addPadding(data);
+    QCOMPARE(paddedData, QByteArray("BB======"));
+
+    // Three bytes of encoded data. Invalid, returns input.
+    data = "BBB";
+    paddedData = Base32::addPadding(data);
+    QCOMPARE(paddedData, data);
+
+    // Four bytes of encoded data.
+    data = "BBBB";
+    paddedData = Base32::addPadding(data);
+    QCOMPARE(paddedData, QByteArray("BBBB===="));
+
+    // Five bytes of encoded data.
+    data = "BBBBB";
+    paddedData = Base32::addPadding(data);
+    QCOMPARE(paddedData, QByteArray("BBBBB==="));
+
+    // Six bytes of encoded data. Invalid, returns input.
+    data = "BBBBBB";
+    paddedData = Base32::addPadding(data);
+    QCOMPARE(paddedData, data);
+
+    // Seven bytes of encoded data.
+    data = "BBBBBBB";
+    paddedData = Base32::addPadding(data);
+    QCOMPARE(paddedData, QByteArray("BBBBBBB="));
+
+    // Eight bytes of encoded data. Valid, but returns same as input.
+    data = "BBBBBBBB";
+    paddedData = Base32::addPadding(data);
+    QCOMPARE(paddedData, data);
+
+    // More than eight bytes (8+5).
+    data = "AAAAAAAABBBBB";
+    paddedData = Base32::addPadding(data);
+    QCOMPARE(paddedData, QByteArray("AAAAAAAABBBBB==="));
+}
+
+void TestBase32::testRemovePadding()
+{
+    QByteArray data = "";
+    QByteArray unpaddedData = Base32::removePadding(data);
+    QCOMPARE(unpaddedData, data);
+
+    data = "AAAAAAAABB======";
+    unpaddedData = Base32::removePadding(data);
+    QCOMPARE(unpaddedData, QByteArray("AAAAAAAABB"));
+
+    data = "BBBB====";
+    unpaddedData = Base32::removePadding(data);
+    QCOMPARE(unpaddedData, QByteArray("BBBB"));
+
+    data = "AAAAAAAABBBBB===";
+    unpaddedData = Base32::removePadding(data);
+    QCOMPARE(unpaddedData, QByteArray("AAAAAAAABBBBB"));
+
+    data = "BBBBBBB=";
+    unpaddedData = Base32::removePadding(data);
+    QCOMPARE(unpaddedData, QByteArray("BBBBBBB"));
+
+    // Invalid: 7 bytes of data. Returns same as input.
+    data = "IIIIIII";
+    unpaddedData = Base32::removePadding(data);
+    QCOMPARE(unpaddedData, data);
+
+    // Invalid: more padding than necessary. Returns same as input.
+    data = "AAAAAAAABBBB=====";
+    unpaddedData = Base32::removePadding(data);
+    QCOMPARE(unpaddedData, data);
+}
+
+void TestBase32::testSanitizeInput()
+{
+    // sanitize input (white space + missing padding)
+    QByteArray encodedData = "JBSW Y3DP EB3W 64TM MQXC 4LQA";
+    auto data = Base32::decode(Base32::sanitizeInput(encodedData));
+    QCOMPARE(QString::fromLatin1(data.valueOr("ERRROR")), QString("Hello world..."));
+
+    // sanitize input (typo + missing padding)
+    encodedData = "J8SWY3DPE83W64TMMQXC4LQA";
+    data = Base32::decode(Base32::sanitizeInput(encodedData));
+    QCOMPARE(QString::fromLatin1(data.valueOr("ERRROR")), QString("Hello world..."));
+
+    // sanitize input (other illegal characters)
+    encodedData = "J8SWY3D[PE83W64TMMQ]XC!4LQA";
+    data = Base32::decode(Base32::sanitizeInput(encodedData));
+    QCOMPARE(QString::fromLatin1(data.valueOr("ERRROR")), QString("Hello world..."));
+
+    // sanitize input (NUL character)
+    encodedData = "J8SWY3DPE83W64TMMQXC4LQA";
+    encodedData.insert(3, '\0');
+    data = Base32::decode(Base32::sanitizeInput(encodedData));
+    QCOMPARE(QString::fromLatin1(data.valueOr("ERRROR")), QString("Hello world..."));
+}
diff --git a/tests/TestBase32.h b/tests/TestBase32.h
new file mode 100644
index 00000000..cf7cf092
--- /dev/null
+++ b/tests/TestBase32.h
@@ -0,0 +1,37 @@
+/*
+ *  Copyright (C) 2017 KeePassXC Team <team@keepassxc.org>
+ *
+ *  This program is free software: you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation, either version 2 or (at your option)
+ *  version 3 of the License.
+ *
+ *  This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#ifndef KEEPASSX_TESTBASE32_H
+#define KEEPASSX_TESTBASE32_H
+
+#include <QObject>
+
+class Base32;
+
+class TestBase32 : public QObject
+{
+    Q_OBJECT
+
+private slots:
+    void testEncode();
+    void testDecode();
+    void testAddPadding();
+    void testRemovePadding();
+    void testSanitizeInput();
+};
+
+#endif // KEEPASSX_TESTBASE32_H
diff --git a/tests/TestTotp.cpp b/tests/TestTotp.cpp
index e22c2567..48ff8814 100644
--- a/tests/TestTotp.cpp
+++ b/tests/TestTotp.cpp
@@ -18,15 +18,14 @@
 
 #include "TestTotp.h"
 
-#include <QTest>
-#include <QTime>
 #include <QDateTime>
-#include <QtEndian>
+#include <QTest>
 #include <QTextCodec>
+#include <QTime>
+#include <QtEndian>
 
 #include "crypto/Crypto.h"
 #include "totp/totp.h"
-#include "totp/base32.h"
 
 QTEST_GUILESS_MAIN(TestTotp)
 
@@ -35,12 +34,13 @@ void TestTotp::initTestCase()
     QVERIFY(Crypto::init());
 }
 
-
 void TestTotp::testParseSecret()
 {
     quint8 digits = 0;
     quint8 step = 0;
-    QString secret = "otpauth://totp/ACME%20Co:john@example.com?secret=HXDMVJECJJWSRB3HWIZR4IFUGFTMXBOZ&issuer=ACME%20Co&algorithm=SHA1&digits=6&period=30";
+    QString secret = "otpauth://totp/"
+                     "ACME%20Co:john@example.com?secret=HXDMVJECJJWSRB3HWIZR4IFUGFTMXBOZ&issuer=ACME%20Co&algorithm="
+                     "SHA1&digits=6&period=30";
     QCOMPARE(QTotp::parseOtpString(secret, digits, step), QString("HXDMVJECJJWSRB3HWIZR4IFUGFTMXBOZ"));
     QCOMPARE(digits, quint8(6));
     QCOMPARE(step, quint8(30));
@@ -60,25 +60,6 @@ void TestTotp::testParseSecret()
     QCOMPARE(step, quint8(30));
 }
 
-void TestTotp::testBase32()
-{
-    QByteArray key = QString("JBSW Y3DP EB3W 64TM MQXC 4LQA").toLatin1();
-    QByteArray secret = Base32::base32_decode(key);
-    QCOMPARE(QString::fromLatin1(secret), QString("Hello world..."));
-
-    key = QString("gezdgnbvgy3tqojqgezdgnbvgy3tqojq").toLatin1();
-    secret = Base32::base32_decode(key);
-    QCOMPARE(QString::fromLatin1(secret), QString("12345678901234567890"));
-
-    key = QString("ORSXG5A=").toLatin1();
-    secret = Base32::base32_decode(key);
-    QCOMPARE(QString::fromLatin1(secret), QString("test"));
-
-    key = QString("MZXW6YTBOI======").toLatin1();
-    secret = Base32::base32_decode(key);
-    QCOMPARE(QString::fromLatin1(secret), QString("foobar"));
-}
-
 void TestTotp::testTotpCode()
 {
     // Test vectors from RFC 6238
diff --git a/tests/TestTotp.h b/tests/TestTotp.h
index d197294d..785a9f52 100644
--- a/tests/TestTotp.h
+++ b/tests/TestTotp.h
@@ -30,7 +30,6 @@ class TestTotp : public QObject
 private slots:
     void initTestCase();
     void testParseSecret();
-    void testBase32();
     void testTotpCode();
 };
 

From 95b0ad15ef5f1f33d9b27f8eec47fa2fee81f1be Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Adolfo=20E=2E=20Garc=C3=ADa?= <adolfo.garcia.cr@gmail.com>
Date: Thu, 19 Oct 2017 13:52:23 -0600
Subject: [PATCH 023/118] Fix code style

---
 src/core/Base32.cpp | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/core/Base32.cpp b/src/core/Base32.cpp
index 8b2faf62..84dca5ec 100644
--- a/src/core/Base32.cpp
+++ b/src/core/Base32.cpp
@@ -206,8 +206,9 @@ QByteArray Base32::encode(const QByteArray& data)
         }
 
         // add pad characters
-        while (o < encodedData.size())
+        while (o < encodedData.size()) {
             encodedData[o++] = '=';
+        }
     }
 
     Q_ASSERT(encodedData.size() == o);

From d21ae0f94ab5af5900ade0776d52a6e83ae614e6 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Adolfo=20E=2E=20Garc=C3=ADa?= <adolfo.garcia.cr@gmail.com>
Date: Fri, 20 Oct 2017 14:54:31 -0600
Subject: [PATCH 024/118] Fix for loop's variable increment style

---
 src/core/Base32.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/core/Base32.cpp b/src/core/Base32.cpp
index 84dca5ec..5bd20901 100644
--- a/src/core/Base32.cpp
+++ b/src/core/Base32.cpp
@@ -94,7 +94,7 @@ Optional<QByteArray> Base32::decode(const QByteArray& encodedData)
         quint64 quantum = 0;
         int nQuantumBytes = 5;
 
-        for (int n = 0; n < 8; n++) {
+        for (int n = 0; n < 8; ++n) {
             quint8 ch = static_cast<quint8>(encodedData[i++]);
             if ((ASCII_A <= ch && ch <= ASCII_Z) || (ASCII_a <= ch && ch <= ASCII_z)) {
                 ch -= ASCII_A;

From 905e104ba24c8322832c660764c779b915dd65bf Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Adolfo=20E=2E=20Garc=C3=ADa?= <adolfo.garcia.cr@gmail.com>
Date: Fri, 20 Oct 2017 15:23:21 -0600
Subject: [PATCH 025/118] Revert formatting change

---
 src/totp/totp.cpp | 10 ++++++++--
 1 file changed, 8 insertions(+), 2 deletions(-)

diff --git a/src/totp/totp.cpp b/src/totp/totp.cpp
index 170ac2da..28d808e3 100644
--- a/src/totp/totp.cpp
+++ b/src/totp/totp.cpp
@@ -109,8 +109,14 @@ QString QTotp::generateTotp(const QByteArray key,
     QByteArray hmac = code.result();
 
     int offset = (hmac[hmac.length() - 1] & 0xf);
-    int binary = ((hmac[offset] & 0x7f) << 24) | ((hmac[offset + 1] & 0xff) << 16) | ((hmac[offset + 2] & 0xff) << 8) |
-                 (hmac[offset + 3] & 0xff);
+
+    // clang-format off
+    int binary =
+            ((hmac[offset] & 0x7f) << 24)
+            | ((hmac[offset + 1] & 0xff) << 16)
+            | ((hmac[offset + 2] & 0xff) << 8)
+            | (hmac[offset + 3] & 0xff);
+    // clang-format on
 
     quint32 digitsPower = pow(10, numDigits);
 

From 24f560aaa2c0a4574697bdc9b7ec41de9815c6de Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Adolfo=20E=2E=20Garc=C3=ADa?= <adolfo.garcia.cr@gmail.com>
Date: Fri, 20 Oct 2017 16:55:02 -0600
Subject: [PATCH 026/118] Replace Optional with QVariant

---
 src/CMakeLists.txt   |  1 -
 src/core/Base32.cpp  | 10 +++---
 src/core/Base32.h    |  4 +--
 src/core/Optional.h  | 86 --------------------------------------------
 src/totp/totp.cpp    |  7 ++--
 tests/TestBase32.cpp | 66 ++++++++++++++++++++++------------
 6 files changed, 54 insertions(+), 120 deletions(-)
 delete mode 100644 src/core/Optional.h

diff --git a/src/CMakeLists.txt b/src/CMakeLists.txt
index 28170b16..5255186e 100644
--- a/src/CMakeLists.txt
+++ b/src/CMakeLists.txt
@@ -61,7 +61,6 @@ set(keepassx_SOURCES
     core/Uuid.cpp
     core/Base32.h
     core/Base32.cpp
-    core/Optional.h
     cli/PasswordInput.cpp
     cli/PasswordInput.h
     crypto/Crypto.cpp
diff --git a/src/core/Base32.cpp b/src/core/Base32.cpp
index 5bd20901..6fdecccd 100644
--- a/src/core/Base32.cpp
+++ b/src/core/Base32.cpp
@@ -40,14 +40,14 @@ constexpr quint8 ASCII_a = static_cast<quint8>('a');
 constexpr quint8 ASCII_z = static_cast<quint8>('z');
 constexpr quint8 ASCII_EQ = static_cast<quint8>('=');
 
-Optional<QByteArray> Base32::decode(const QByteArray& encodedData)
+QVariant Base32::decode(const QByteArray& encodedData)
 {
     if (encodedData.size() <= 0) {
-        return Optional<QByteArray>("");
+        return QVariant::fromValue(QByteArray(""));
     }
 
     if (encodedData.size() % 8 != 0) {
-        return Optional<QByteArray>();
+        return QVariant();
     }
 
     int nPads = 0;
@@ -114,7 +114,7 @@ Optional<QByteArray> Base32::decode(const QByteArray& encodedData)
                         continue;
                     } else {
                         // illegal character
-                        return Optional<QByteArray>();
+                        return QVariant();
                     }
                 }
             }
@@ -132,7 +132,7 @@ Optional<QByteArray> Base32::decode(const QByteArray& encodedData)
         }
     }
 
-    return Optional<QByteArray>(data);
+    return QVariant::fromValue(data);
 }
 
 QByteArray Base32::encode(const QByteArray& data)
diff --git a/src/core/Base32.h b/src/core/Base32.h
index 04882897..204368c5 100644
--- a/src/core/Base32.h
+++ b/src/core/Base32.h
@@ -24,15 +24,15 @@
 #ifndef BASE32_H
 #define BASE32_H
 
-#include "Optional.h"
 #include <QByteArray>
+#include <QVariant>
 #include <QtCore/qglobal.h>
 
 class Base32
 {
 public:
     Base32() = default;
-    Q_REQUIRED_RESULT static Optional<QByteArray> decode(const QByteArray&);
+    Q_REQUIRED_RESULT static QVariant decode(const QByteArray&);
     Q_REQUIRED_RESULT static QByteArray encode(const QByteArray&);
     Q_REQUIRED_RESULT static QByteArray addPadding(const QByteArray&);
     Q_REQUIRED_RESULT static QByteArray removePadding(const QByteArray&);
diff --git a/src/core/Optional.h b/src/core/Optional.h
deleted file mode 100644
index 0721daa3..00000000
--- a/src/core/Optional.h
+++ /dev/null
@@ -1,86 +0,0 @@
-/*
- *  Copyright (C) 2017 KeePassXC Team <team@keepassxc.org>
- *
- *  This program is free software: you can redistribute it and/or modify
- *  it under the terms of the GNU General Public License as published by
- *  the Free Software Foundation, either version 2 or (at your option)
- *  version 3 of the License.
- *
- *  This program is distributed in the hope that it will be useful,
- *  but WITHOUT ANY WARRANTY; without even the implied warranty of
- *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- *  GNU General Public License for more details.
- *
- *  You should have received a copy of the GNU General Public License
- *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
- */
-
-#ifndef OPTIONAL_H
-#define OPTIONAL_H
-
-/*
- * This utility class is for providing basic support for an option type.
- * It can be replaced by std::optional (C++17) or
- * std::experimental::optional (C++11) when they become fully supported
- * by all the main compiler toolchains.
- */
-
-template <typename T> class Optional
-{
-public:
-    // None
-    Optional()
-        : m_hasValue(false)
-        , m_value(){};
-
-    // Some T
-    Optional(const T& value)
-        : m_hasValue(true)
-        , m_value(value){};
-
-    // Copy
-    Optional(const Optional& other)
-        : m_hasValue(other.m_hasValue)
-        , m_value(other.m_value){};
-
-    const Optional& operator=(const Optional& other)
-    {
-        m_hasValue = other.m_hasValue;
-        m_value = other.m_value;
-        return *this;
-    }
-
-    bool operator==(const Optional& other) const
-    {
-        if (m_hasValue)
-            return other.m_hasValue && m_value == other.m_value;
-        else
-            return !other.m_hasValue;
-    }
-
-    bool operator!=(const Optional& other) const
-    {
-        return !(*this == other);
-    }
-
-    bool hasValue() const
-    {
-        return m_hasValue;
-    }
-
-    T valueOr(const T& other) const
-    {
-        return m_hasValue ? m_value : other;
-    }
-
-    Optional static makeOptional(const T& value)
-    {
-        return Optional(value);
-    }
-
-private:
-    bool m_hasValue;
-    T m_value;
-};
-
-#endif // OPTIONAL_H
diff --git a/src/totp/totp.cpp b/src/totp/totp.cpp
index 28d808e3..7a584def 100644
--- a/src/totp/totp.cpp
+++ b/src/totp/totp.cpp
@@ -24,6 +24,7 @@
 #include <QRegExp>
 #include <QUrl>
 #include <QUrlQuery>
+#include <QVariant>
 #include <QtEndian>
 #include <cmath>
 
@@ -98,13 +99,13 @@ QString QTotp::generateTotp(const QByteArray key,
 {
     quint64 current = qToBigEndian(time / step);
 
-    Optional<QByteArray> secret = Base32::decode(Base32::sanitizeInput(key));
-    if (!secret.hasValue()) {
+    QVariant secret = Base32::decode(Base32::sanitizeInput(key));
+    if (secret.isNull()) {
         return "Invalid TOTP secret key";
     }
 
     QMessageAuthenticationCode code(QCryptographicHash::Sha1);
-    code.setKey(secret.valueOr(""));
+    code.setKey(secret.toByteArray());
     code.addData(QByteArray(reinterpret_cast<char*>(&current), sizeof(current)));
     QByteArray hmac = code.result();
 
diff --git a/tests/TestBase32.cpp b/tests/TestBase32.cpp
index 3d829d96..615b356f 100644
--- a/tests/TestBase32.cpp
+++ b/tests/TestBase32.cpp
@@ -25,86 +25,102 @@ void TestBase32::testDecode()
 {
     // 3 quanta, all upper case + padding
     QByteArray encodedData = "JBSWY3DPEB3W64TMMQXC4LQ=";
-    auto data = Base32::decode(encodedData);
-    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("Hello world..."));
+    QVariant data = Base32::decode(encodedData);
+    QVERIFY(!data.isNull());
+    QCOMPARE(data.toString(), QString("Hello world..."));
 
     // 4 quanta, all upper case
     encodedData = "GEZDGNBVGY3TQOJQGEZDGNBVGY3TQOJQ";
     data = Base32::decode(encodedData);
-    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("12345678901234567890"));
+    QVERIFY(!data.isNull());
+    QCOMPARE(data.toString(), QString("12345678901234567890"));
 
     // 4 quanta, all lower case
     encodedData = "gezdgnbvgy3tqojqgezdgnbvgy3tqojq";
     data = Base32::decode(encodedData);
-    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("12345678901234567890"));
+    QVERIFY(!data.isNull());
+    QCOMPARE(data.toString(), QString("12345678901234567890"));
 
     // 4 quanta, mixed upper and lower case
     encodedData = "Gezdgnbvgy3tQojqgezdGnbvgy3tQojQ";
     data = Base32::decode(encodedData);
-    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("12345678901234567890"));
+    QVERIFY(!data.isNull());
+    QCOMPARE(data.toString(), QString("12345678901234567890"));
 
     // 1 pad characters
     encodedData = "ORSXG5A=";
     data = Base32::decode(encodedData);
-    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("test"));
+    QVERIFY(!data.isNull());
+    QCOMPARE(data.toString(), QString("test"));
 
     // 3 pad characters
     encodedData = "L5PV6===";
     data = Base32::decode(encodedData);
-    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("___"));
+    QVERIFY(!data.isNull());
+    QCOMPARE(data.toString(), QString("___"));
 
     // 4 pad characters
     encodedData = "MZXW6IDCMFZA====";
     data = Base32::decode(encodedData);
-    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("foo bar"));
+    QVERIFY(!data.isNull());
+    QCOMPARE(data.toString(), QString("foo bar"));
 
     // six pad characters
     encodedData = "MZXW6YTBOI======";
     data = Base32::decode(encodedData);
-    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("foobar"));
+    QVERIFY(!data.isNull());
+    QCOMPARE(data.toString(), QString("foobar"));
 
     encodedData = "IA======";
     data = Base32::decode(encodedData);
-    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("@"));
+    QVERIFY(!data.isNull());
+    QCOMPARE(data.toString(), QString("@"));
 
     // error: illegal character
     encodedData = "1MZXW6YTBOI=====";
     data = Base32::decode(encodedData);
-    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("ERROR"));
+    QVERIFY(data.isNull());
 
     // error: missing pad character
     encodedData = "MZXW6YTBOI=====";
     data = Base32::decode(encodedData);
-    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("ERROR"));
+    QVERIFY(data.isNull());
 
     // RFC 4648 test vectors
     encodedData = "";
     data = Base32::decode(encodedData);
-    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString(""));
+    QVERIFY(!data.isNull());
+    QCOMPARE(data.toString(), QString(""));
 
     encodedData = "MY======";
     data = Base32::decode(encodedData);
-    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("f"));
+    QVERIFY(!data.isNull());
+    QCOMPARE(data.toString(), QString("f"));
 
     encodedData = "MZXQ====";
     data = Base32::decode(encodedData);
-    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("fo"));
+    QVERIFY(!data.isNull());
+    QCOMPARE(data.toString(), QString("fo"));
 
     encodedData = "MZXW6===";
     data = Base32::decode(encodedData);
-    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("foo"));
+    QVERIFY(!data.isNull());
+    QCOMPARE(data.toString(), QString("foo"));
 
     encodedData = "MZXW6YQ=";
     data = Base32::decode(encodedData);
-    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("foob"));
+    QVERIFY(!data.isNull());
+    QCOMPARE(data.toString(), QString("foob"));
 
     encodedData = "MZXW6YTB";
     data = Base32::decode(encodedData);
-    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("fooba"));
+    QVERIFY(!data.isNull());
+    QCOMPARE(data.toString(), QString("fooba"));
 
     encodedData = "MZXW6YTBOI======";
     data = Base32::decode(encodedData);
-    QCOMPARE(QString::fromLatin1(data.valueOr("ERROR")), QString("foobar"));
+    QVERIFY(!data.isNull());
+    QCOMPARE(data.toString(), QString("foobar"));
 }
 
 void TestBase32::testEncode()
@@ -258,21 +274,25 @@ void TestBase32::testSanitizeInput()
     // sanitize input (white space + missing padding)
     QByteArray encodedData = "JBSW Y3DP EB3W 64TM MQXC 4LQA";
     auto data = Base32::decode(Base32::sanitizeInput(encodedData));
-    QCOMPARE(QString::fromLatin1(data.valueOr("ERRROR")), QString("Hello world..."));
+    QVERIFY(!data.isNull());
+    QCOMPARE(data.toString(), QString("Hello world..."));
 
     // sanitize input (typo + missing padding)
     encodedData = "J8SWY3DPE83W64TMMQXC4LQA";
     data = Base32::decode(Base32::sanitizeInput(encodedData));
-    QCOMPARE(QString::fromLatin1(data.valueOr("ERRROR")), QString("Hello world..."));
+    QVERIFY(!data.isNull());
+    QCOMPARE(data.toString(), QString("Hello world..."));
 
     // sanitize input (other illegal characters)
     encodedData = "J8SWY3D[PE83W64TMMQ]XC!4LQA";
     data = Base32::decode(Base32::sanitizeInput(encodedData));
-    QCOMPARE(QString::fromLatin1(data.valueOr("ERRROR")), QString("Hello world..."));
+    QVERIFY(!data.isNull());
+    QCOMPARE(data.toString(), QString("Hello world..."));
 
     // sanitize input (NUL character)
     encodedData = "J8SWY3DPE83W64TMMQXC4LQA";
     encodedData.insert(3, '\0');
     data = Base32::decode(Base32::sanitizeInput(encodedData));
-    QCOMPARE(QString::fromLatin1(data.valueOr("ERRROR")), QString("Hello world..."));
+    QVERIFY(!data.isNull());
+    QCOMPARE(data.toString(), QString("Hello world..."));
 }

From c731f8e5c05b8546a5aa35e3b0b8f027dc1f4009 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Adolfo=20E=2E=20Garc=C3=ADa?= <adolfo.garcia.cr@gmail.com>
Date: Fri, 20 Oct 2017 18:05:33 -0600
Subject: [PATCH 027/118] Fix bug in Base32::decode and add bounds check

The bug that was fixed, was affecting how the number of bytes of decoded data was  calculated and thus, even though it didn't truncate the result, it was causing the array to be resized unnecessarily.
---
 src/core/Base32.cpp | 17 ++++++++++++-----
 1 file changed, 12 insertions(+), 5 deletions(-)

diff --git a/src/core/Base32.cpp b/src/core/Base32.cpp
index 6fdecccd..b76fd029 100644
--- a/src/core/Base32.cpp
+++ b/src/core/Base32.cpp
@@ -83,7 +83,7 @@ QVariant Base32::decode(const QByteArray& encodedData)
 
     Q_ASSERT(encodedData.size() > 0);
     const int nQuanta = encodedData.size() / 8;
-    const int nBytes = (nQuanta - 1) * 5 + nSpecialBytes;
+    const int nBytes = nSpecialBytes > 0 ? (nQuanta - 1) * 5 + nSpecialBytes : nQuanta * 5;
 
     QByteArray data(nBytes, Qt::Uninitialized);
 
@@ -126,12 +126,17 @@ QVariant Base32::decode(const QByteArray& encodedData)
         const int offset = (nQuantumBytes - 1) * 8;
         quint64 mask = quint64(0xFF) << offset;
         for (int n = offset; n >= 0; n -= 8) {
-            char c = static_cast<char>((quantum & mask) >> n);
-            data[o++] = c;
-            mask >>= 8;
+            if (o < nBytes) {
+                data[o++] = static_cast<char>((quantum & mask) >> n);
+                mask >>= 8;
+            } else {
+              break;
+            }
         }
     }
 
+    Q_ASSERT(nBytes == o);
+
     return QVariant::fromValue(data);
 }
 
@@ -144,6 +149,7 @@ QByteArray Base32::encode(const QByteArray& data)
     const int nBits = data.size() * 8;
     const int rBits = nBits % 40; // in {0, 8, 16, 24, 32}
     const int nQuanta = nBits / 40 + (rBits > 0 ? 1 : 0);
+    const int nBytes = nQuanta * 8;
     QByteArray encodedData(nQuanta * 8, Qt::Uninitialized);
 
     int i = 0;
@@ -211,7 +217,8 @@ QByteArray Base32::encode(const QByteArray& data)
         }
     }
 
-    Q_ASSERT(encodedData.size() == o);
+    Q_ASSERT(data.size() == i);
+    Q_ASSERT(nBytes == o);
     return encodedData;
 }
 

From f1d99dd0ede60bfe16438caaf7323219a36fa015 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Adolfo=20E=2E=20Garc=C3=ADa?= <adolfo.garcia.cr@gmail.com>
Date: Fri, 20 Oct 2017 18:31:17 -0600
Subject: [PATCH 028/118] Improve testing of Base32

---
 src/core/Base32.cpp  |  1 +
 tests/TestBase32.cpp | 64 +++++++++++++++++++++++++++++++++-----------
 2 files changed, 49 insertions(+), 16 deletions(-)

diff --git a/src/core/Base32.cpp b/src/core/Base32.cpp
index b76fd029..cfd7f04c 100644
--- a/src/core/Base32.cpp
+++ b/src/core/Base32.cpp
@@ -135,6 +135,7 @@ QVariant Base32::decode(const QByteArray& encodedData)
         }
     }
 
+    Q_ASSERT(encodedData.size() == i);
     Q_ASSERT(nBytes == o);
 
     return QVariant::fromValue(data);
diff --git a/tests/TestBase32.cpp b/tests/TestBase32.cpp
index 615b356f..1d30e781 100644
--- a/tests/TestBase32.cpp
+++ b/tests/TestBase32.cpp
@@ -26,55 +26,73 @@ void TestBase32::testDecode()
     // 3 quanta, all upper case + padding
     QByteArray encodedData = "JBSWY3DPEB3W64TMMQXC4LQ=";
     QVariant data = Base32::decode(encodedData);
+    QString expectedData = "Hello world...";
     QVERIFY(!data.isNull());
-    QCOMPARE(data.toString(), QString("Hello world..."));
+    QCOMPARE(data.toString(), expectedData);
+    QVERIFY(data.value<QByteArray>().size() == expectedData.size());
 
     // 4 quanta, all upper case
     encodedData = "GEZDGNBVGY3TQOJQGEZDGNBVGY3TQOJQ";
     data = Base32::decode(encodedData);
+    expectedData = "12345678901234567890";
     QVERIFY(!data.isNull());
-    QCOMPARE(data.toString(), QString("12345678901234567890"));
+    QCOMPARE(data.toString(), expectedData);
+    QVERIFY(data.value<QByteArray>().size() == expectedData.size());
 
     // 4 quanta, all lower case
     encodedData = "gezdgnbvgy3tqojqgezdgnbvgy3tqojq";
     data = Base32::decode(encodedData);
+    expectedData = "12345678901234567890";
     QVERIFY(!data.isNull());
-    QCOMPARE(data.toString(), QString("12345678901234567890"));
+    QCOMPARE(data.toString(), expectedData);
+    QVERIFY(data.value<QByteArray>().size() == expectedData.size());
 
     // 4 quanta, mixed upper and lower case
     encodedData = "Gezdgnbvgy3tQojqgezdGnbvgy3tQojQ";
     data = Base32::decode(encodedData);
+    expectedData = "12345678901234567890";
     QVERIFY(!data.isNull());
-    QCOMPARE(data.toString(), QString("12345678901234567890"));
+    QCOMPARE(data.toString(), expectedData);
+    QVERIFY(data.value<QByteArray>().size() == expectedData.size());
 
     // 1 pad characters
     encodedData = "ORSXG5A=";
     data = Base32::decode(encodedData);
+    expectedData = "test";
     QVERIFY(!data.isNull());
-    QCOMPARE(data.toString(), QString("test"));
+    QCOMPARE(data.toString(), expectedData);
+    QVERIFY(data.value<QByteArray>().size() == expectedData.size());
 
     // 3 pad characters
     encodedData = "L5PV6===";
     data = Base32::decode(encodedData);
+    expectedData = "___";
     QVERIFY(!data.isNull());
-    QCOMPARE(data.toString(), QString("___"));
+    QCOMPARE(data.toString(), expectedData);
+    QVERIFY(data.value<QByteArray>().size() == expectedData.size());
 
     // 4 pad characters
     encodedData = "MZXW6IDCMFZA====";
     data = Base32::decode(encodedData);
+    expectedData = "foo bar";
     QVERIFY(!data.isNull());
-    QCOMPARE(data.toString(), QString("foo bar"));
+    QCOMPARE(data.toString(), expectedData);
+    QVERIFY(data.value<QByteArray>().size() == expectedData.size());
 
     // six pad characters
     encodedData = "MZXW6YTBOI======";
     data = Base32::decode(encodedData);
+    expectedData = "foobar";
     QVERIFY(!data.isNull());
-    QCOMPARE(data.toString(), QString("foobar"));
+    QCOMPARE(data.toString(), expectedData);
+    QVERIFY(data.value<QByteArray>().size() == expectedData.size());
 
     encodedData = "IA======";
     data = Base32::decode(encodedData);
+    expectedData = "@";
     QVERIFY(!data.isNull());
-    QCOMPARE(data.toString(), QString("@"));
+    QCOMPARE(data.toString(), expectedData);
+    QVERIFY(data.value<QByteArray>().size() == expectedData.size());
 
     // error: illegal character
     encodedData = "1MZXW6YTBOI=====";
@@ -89,38 +107,52 @@ void TestBase32::testDecode()
     // RFC 4648 test vectors
     encodedData = "";
     data = Base32::decode(encodedData);
+    expectedData = "";
     QVERIFY(!data.isNull());
-    QCOMPARE(data.toString(), QString(""));
+    QCOMPARE(data.toString(), expectedData);
+    QVERIFY(data.value<QByteArray>().size() == expectedData.size());
 
     encodedData = "MY======";
     data = Base32::decode(encodedData);
+    expectedData = "f";
     QVERIFY(!data.isNull());
-    QCOMPARE(data.toString(), QString("f"));
+    QCOMPARE(data.toString(), expectedData);
+    QVERIFY(data.value<QByteArray>().size() == expectedData.size());
 
     encodedData = "MZXQ====";
     data = Base32::decode(encodedData);
+    expectedData = "fo";
     QVERIFY(!data.isNull());
-    QCOMPARE(data.toString(), QString("fo"));
+    QCOMPARE(data.toString(), expectedData);
+    QVERIFY(data.value<QByteArray>().size() == expectedData.size());
 
     encodedData = "MZXW6===";
     data = Base32::decode(encodedData);
     QVERIFY(!data.isNull());
-    QCOMPARE(data.toString(), QString("foo"));
+    expectedData = "foo";
+    QCOMPARE(data.toString(), expectedData);
+    QVERIFY(data.value<QByteArray>().size() == expectedData.size());
 
     encodedData = "MZXW6YQ=";
     data = Base32::decode(encodedData);
+    expectedData = "foob";
     QVERIFY(!data.isNull());
-    QCOMPARE(data.toString(), QString("foob"));
+    QCOMPARE(data.toString(), expectedData);
+    QVERIFY(data.value<QByteArray>().size() == expectedData.size());
 
     encodedData = "MZXW6YTB";
+    expectedData = "fooba";
     data = Base32::decode(encodedData);
     QVERIFY(!data.isNull());
-    QCOMPARE(data.toString(), QString("fooba"));
+    QCOMPARE(data.toString(), expectedData);
+    QVERIFY(data.value<QByteArray>().size() == expectedData.size());
 
     encodedData = "MZXW6YTBOI======";
     data = Base32::decode(encodedData);
+    expectedData = "foobar";
     QVERIFY(!data.isNull());
-    QCOMPARE(data.toString(), QString("foobar"));
+    QCOMPARE(data.toString(), expectedData);
+    QVERIFY(data.value<QByteArray>().size() == expectedData.size());
 }
 
 void TestBase32::testEncode()

From 86cd2c09a416fbb86eba4713a8ad66b27127795c Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Adolfo=20E=2E=20Garc=C3=ADa?= <adolfo.garcia.cr@gmail.com>
Date: Fri, 20 Oct 2017 23:50:34 -0600
Subject: [PATCH 029/118] Improve readability of code

---
 src/core/Base32.cpp | 6 +-----
 1 file changed, 1 insertion(+), 5 deletions(-)

diff --git a/src/core/Base32.cpp b/src/core/Base32.cpp
index cfd7f04c..13228a37 100644
--- a/src/core/Base32.cpp
+++ b/src/core/Base32.cpp
@@ -125,13 +125,9 @@ QVariant Base32::decode(const QByteArray& encodedData)
 
         const int offset = (nQuantumBytes - 1) * 8;
         quint64 mask = quint64(0xFF) << offset;
-        for (int n = offset; n >= 0; n -= 8) {
-            if (o < nBytes) {
+        for (int n = offset; n >= 0 && o < nBytes; n -= 8) {
                 data[o++] = static_cast<char>((quantum & mask) >> n);
                 mask >>= 8;
-            } else {
-              break;
-            }
         }
     }
 

From 09e94397aa7b2508591ff10683ea69d39485c720 Mon Sep 17 00:00:00 2001
From: Janek Bevendorff <janek@jbev.net>
Date: Sat, 21 Oct 2017 13:27:25 +0200
Subject: [PATCH 030/118] Remove emoji in commit messages from style guide

---
 .github/CONTRIBUTING.md | 12 +-----------
 1 file changed, 1 insertion(+), 11 deletions(-)

diff --git a/.github/CONTRIBUTING.md b/.github/CONTRIBUTING.md
index df542958..4f937513 100644
--- a/.github/CONTRIBUTING.md
+++ b/.github/CONTRIBUTING.md
@@ -103,18 +103,8 @@ The Branch Strategy is based on [git-flow-lite](http://nvie.com/posts/a-successf
 * Use the imperative mood ("Move cursor to…" not "Moves cursor to…")
 * Limit the first line to 72 characters or less
 * Reference issues and pull requests liberally
+* If your pull request fixes an existing issue, add "…, resolves #ISSUENUMBER" to your main commit
 * When only changing documentation, include `[ci skip]` in the commit description
-* Consider starting the commit message with an applicable emoji:
-    * :memo: `:memo:` when writing docs
-    * :penguin: `:penguin:` when fixing something on Linux
-    * :apple: `:apple:` when fixing something on macOS
-    * :checkered_flag: `:checkered_flag:` when fixing something on Windows
-    * :bug: `:bug:` when fixing a bug
-    * :fire: `:fire:` when removing code or files
-    * :green_heart: `:green_heart:` when fixing the CI build
-    * :white_check_mark: `:white_check_mark:` when adding tests
-    * :lock: `:lock:` when dealing with security
-
 
 ### Coding styleguide
 

From 0fe06b3fbb0c4758d8a09335e1d7d635b079587a Mon Sep 17 00:00:00 2001
From: Louis-Bertrand Varin <louisbvarin@gmail.com>
Date: Thu, 5 Oct 2017 14:44:05 -0400
Subject: [PATCH 031/118] Fix double warning display for database open

---
 src/gui/DatabaseOpenWidget.cpp | 37 +++++++++++++++++++---------------
 src/gui/DatabaseOpenWidget.h   |  2 +-
 2 files changed, 22 insertions(+), 17 deletions(-)

diff --git a/src/gui/DatabaseOpenWidget.cpp b/src/gui/DatabaseOpenWidget.cpp
index b8f8feb1..fee0c26e 100644
--- a/src/gui/DatabaseOpenWidget.cpp
+++ b/src/gui/DatabaseOpenWidget.cpp
@@ -162,7 +162,10 @@ void DatabaseOpenWidget::enterKey(const QString& pw, const QString& keyFile)
 void DatabaseOpenWidget::openDatabase()
 {
     KeePass2Reader reader;
-    CompositeKey masterKey = databaseKey();
+    CompositeKey* masterKey = databaseKey();
+    if (masterKey == nullptr) {
+        return;
+    }
 
     QFile file(m_filename);
     if (!file.open(QIODevice::ReadOnly)) {
@@ -174,7 +177,7 @@ void DatabaseOpenWidget::openDatabase()
         delete m_db;
     }
     QApplication::setOverrideCursor(QCursor(Qt::WaitCursor));
-    m_db = reader.readDatabase(&file, masterKey);
+    m_db = reader.readDatabase(&file, *masterKey);
     QApplication::restoreOverrideCursor();
 
     if (m_db) {
@@ -182,20 +185,21 @@ void DatabaseOpenWidget::openDatabase()
             m_ui->messageWidget->animatedHide();
         }
         emit editFinished(true);
-    }
-    else {
-        m_ui->messageWidget->showMessage(tr("Unable to open the database.")
-                                         .append("\n").append(reader.errorString()), MessageWidget::Error);
+    } else {
+        m_ui->messageWidget->showMessage(tr("Unable to open the database.").append("\n").append(reader.errorString()),
+                                         MessageWidget::Error);
         m_ui->editPassword->clear();
     }
+
+    delete masterKey;
 }
 
-CompositeKey DatabaseOpenWidget::databaseKey()
+CompositeKey* DatabaseOpenWidget::databaseKey()
 {
-    CompositeKey masterKey;
+    CompositeKey* masterKey = new CompositeKey();
 
     if (m_ui->checkPassword->isChecked()) {
-        masterKey.addKey(PasswordKey(m_ui->editPassword->text()));
+        masterKey->addKey(PasswordKey(m_ui->editPassword->text()));
     }
 
     QHash<QString, QVariant> lastKeyFiles = config()->get("LastKeyFiles").toHash();
@@ -206,11 +210,12 @@ CompositeKey DatabaseOpenWidget::databaseKey()
         QString keyFilename = m_ui->comboKeyFile->currentText();
         QString errorMsg;
         if (!key.load(keyFilename, &errorMsg)) {
-            m_ui->messageWidget->showMessage(tr("Can't open key file").append(":\n")
-                                             .append(errorMsg), MessageWidget::Error);
-            return CompositeKey();
+            m_ui->messageWidget->showMessage(tr("Can't open key file").append(":\n").append(errorMsg),
+                                             MessageWidget::Error);
+            delete masterKey;
+            return nullptr;
         }
-        masterKey.addKey(key);
+        masterKey->addKey(key);
         lastKeyFiles[m_filename] = keyFilename;
     } else {
         lastKeyFiles.remove(m_filename);
@@ -237,9 +242,9 @@ CompositeKey DatabaseOpenWidget::databaseKey()
 
         // read blocking mode from LSB and slot index number from second LSB
         bool blocking = comboPayload & 1;
-        int slot      = comboPayload >> 1;
-        auto key      = QSharedPointer<YkChallengeResponseKey>(new YkChallengeResponseKey(slot, blocking));
-        masterKey.addChallengeResponseKey(key);
+        int slot = comboPayload >> 1;
+        auto key = QSharedPointer<YkChallengeResponseKey>(new YkChallengeResponseKey(slot, blocking));
+        masterKey->addChallengeResponseKey(key);
     }
 #endif
 
diff --git a/src/gui/DatabaseOpenWidget.h b/src/gui/DatabaseOpenWidget.h
index d4b47364..d2a7e1fa 100644
--- a/src/gui/DatabaseOpenWidget.h
+++ b/src/gui/DatabaseOpenWidget.h
@@ -52,7 +52,7 @@ signals:
 protected:
     void showEvent(QShowEvent* event) override;
     void hideEvent(QHideEvent* event) override;
-    CompositeKey databaseKey();
+    CompositeKey* databaseKey();
 
 protected slots:
     virtual void openDatabase();

From a1aad5d165ab5b16937ff2a15d307fc9565a1ffb Mon Sep 17 00:00:00 2001
From: Louis-Bertrand Varin <louisbvarin@gmail.com>
Date: Sat, 14 Oct 2017 22:12:45 -0400
Subject: [PATCH 032/118] Using QScopedPointer

---
 src/gui/DatabaseOpenWidget.cpp | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/src/gui/DatabaseOpenWidget.cpp b/src/gui/DatabaseOpenWidget.cpp
index fee0c26e..19e9a3f4 100644
--- a/src/gui/DatabaseOpenWidget.cpp
+++ b/src/gui/DatabaseOpenWidget.cpp
@@ -162,8 +162,8 @@ void DatabaseOpenWidget::enterKey(const QString& pw, const QString& keyFile)
 void DatabaseOpenWidget::openDatabase()
 {
     KeePass2Reader reader;
-    CompositeKey* masterKey = databaseKey();
-    if (masterKey == nullptr) {
+    QScopedPointer<CompositeKey> masterKey(databaseKey());
+    if (masterKey.isNull()) {
         return;
     }
 
@@ -190,8 +190,6 @@ void DatabaseOpenWidget::openDatabase()
                                          MessageWidget::Error);
         m_ui->editPassword->clear();
     }
-
-    delete masterKey;
 }
 
 CompositeKey* DatabaseOpenWidget::databaseKey()

From aba2acb0620f0a34c29aaf4bac4eb790bec39782 Mon Sep 17 00:00:00 2001
From: Janek Bevendorff <janek@jbev.net>
Date: Sat, 21 Oct 2017 14:00:25 +0200
Subject: [PATCH 033/118] Use QSharedPointer

---
 src/gui/DatabaseOpenWidget.cpp | 9 ++++-----
 src/gui/DatabaseOpenWidget.h   | 2 +-
 2 files changed, 5 insertions(+), 6 deletions(-)

diff --git a/src/gui/DatabaseOpenWidget.cpp b/src/gui/DatabaseOpenWidget.cpp
index 19e9a3f4..ee0e9de2 100644
--- a/src/gui/DatabaseOpenWidget.cpp
+++ b/src/gui/DatabaseOpenWidget.cpp
@@ -162,7 +162,7 @@ void DatabaseOpenWidget::enterKey(const QString& pw, const QString& keyFile)
 void DatabaseOpenWidget::openDatabase()
 {
     KeePass2Reader reader;
-    QScopedPointer<CompositeKey> masterKey(databaseKey());
+    QSharedPointer<CompositeKey> masterKey = databaseKey();
     if (masterKey.isNull()) {
         return;
     }
@@ -192,9 +192,9 @@ void DatabaseOpenWidget::openDatabase()
     }
 }
 
-CompositeKey* DatabaseOpenWidget::databaseKey()
+QSharedPointer<CompositeKey> DatabaseOpenWidget::databaseKey()
 {
-    CompositeKey* masterKey = new CompositeKey();
+    auto masterKey = QSharedPointer<CompositeKey>::create();
 
     if (m_ui->checkPassword->isChecked()) {
         masterKey->addKey(PasswordKey(m_ui->editPassword->text()));
@@ -210,8 +210,7 @@ CompositeKey* DatabaseOpenWidget::databaseKey()
         if (!key.load(keyFilename, &errorMsg)) {
             m_ui->messageWidget->showMessage(tr("Can't open key file").append(":\n").append(errorMsg),
                                              MessageWidget::Error);
-            delete masterKey;
-            return nullptr;
+            return QSharedPointer<CompositeKey>();
         }
         masterKey->addKey(key);
         lastKeyFiles[m_filename] = keyFilename;
diff --git a/src/gui/DatabaseOpenWidget.h b/src/gui/DatabaseOpenWidget.h
index d2a7e1fa..a7691a91 100644
--- a/src/gui/DatabaseOpenWidget.h
+++ b/src/gui/DatabaseOpenWidget.h
@@ -52,7 +52,7 @@ signals:
 protected:
     void showEvent(QShowEvent* event) override;
     void hideEvent(QHideEvent* event) override;
-    CompositeKey* databaseKey();
+    QSharedPointer<CompositeKey> databaseKey();
 
 protected slots:
     virtual void openDatabase();

From 2fa3f5072d2010c402d44c394b208cd32f108aea Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Adolfo=20E=2E=20Garc=C3=ADa?= <adolfo.garcia.cr@gmail.com>
Date: Sun, 15 Oct 2017 06:02:34 -0600
Subject: [PATCH 034/118] Simplify the ZLIB version check

---
 CMakeLists.txt | 13 ++-----------
 1 file changed, 2 insertions(+), 11 deletions(-)

diff --git a/CMakeLists.txt b/CMakeLists.txt
index 5ec37473..bfefcadd 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -240,17 +240,8 @@ find_package(ZLIB REQUIRED)
 
 set(CMAKE_REQUIRED_INCLUDES ${ZLIB_INCLUDE_DIR})
 
-check_cxx_source_compiles("
-  #include <zlib.h>
-
-  #if !defined(ZLIB_VERNUM) || (ZLIB_VERNUM < 0x1200)
-      #error zlib 1.2.x or higher is required to use the gzip format
-  #endif
-
-  int main() { return 0; }" ZLIB_SUPPORTS_GZIP)
-
-if(NOT ZLIB_SUPPORTS_GZIP)
-  message(FATAL_ERROR "zlib 1.2.x or higher is required to use the gzip format")
+if(ZLIB_VERSION_STRING VERSION_LESS "1.2.0")
+  message(FATAL_ERROR "zlib 1.2.0 or higher is required to use the gzip format")
 endif()
 
 # Optional

From de065c728fb7600ec368e895ba4faab656c0dc0a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Adolfo=20E=2E=20Garc=C3=ADa?= <adolfo.garcia.cr@gmail.com>
Date: Sun, 15 Oct 2017 06:54:27 -0600
Subject: [PATCH 035/118] Enable option WITH_ASAN for macOS builds

---
 CMakeLists.txt | 16 ++++++++++------
 README.md      |  4 +++-
 2 files changed, 13 insertions(+), 7 deletions(-)

diff --git a/CMakeLists.txt b/CMakeLists.txt
index bfefcadd..f9aec839 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -36,9 +36,9 @@ include(CheckCXXSourceCompiles)
 option(WITH_TESTS "Enable building of unit tests" ON)
 option(WITH_GUI_TESTS "Enable building of GUI tests" OFF)
 option(WITH_DEV_BUILD "Use only for development. Disables/warns about deprecated methods." OFF)
-option(WITH_ASAN "Enable address sanitizer checks (Linux only)" OFF)
+option(WITH_ASAN "Enable address sanitizer checks (Linux and macOS only)" OFF)
 option(WITH_COVERAGE "Use to build with coverage tests (GCC only)." OFF)
-option(WITH_APP_BUNDLE "Enable Application Bundle for OS X" ON)
+option(WITH_APP_BUNDLE "Enable Application Bundle for macOS" ON)
 
 option(WITH_XC_AUTOTYPE "Include Auto-Type." ON)
 option(WITH_XC_HTTP "Include KeePassHTTP and Custom Icon Downloads." OFF)
@@ -110,16 +110,20 @@ endif()
 add_gcc_compiler_cxxflags("-fno-exceptions -fno-rtti")
 add_gcc_compiler_cxxflags("-Wnon-virtual-dtor -Wold-style-cast -Woverloaded-virtual")
 add_gcc_compiler_cflags("-Wchar-subscripts -Wwrite-strings")
+
 if(WITH_ASAN)
-  if(NOT CMAKE_SYSTEM_NAME STREQUAL "Linux")
-      message(FATAL_ERROR "WITH_ASAN is only supported on Linux at the moment.")
+  if(NOT (LINUX OR APPLE))
+      message(FATAL_ERROR "WITH_ASAN is only supported on Linux and macOS at the moment.")
   endif()
 
   add_gcc_compiler_flags("-fsanitize=address -DWITH_ASAN")
 
-  if(NOT (CMAKE_COMPILER_IS_GNUCXX AND CMAKE_CXX_COMPILER_VERSION VERSION_LESS 4.9))
-    add_gcc_compiler_flags("-fsanitize=leak -DWITH_LSAN")
+  if(LINUX)
+    if(NOT (CMAKE_COMPILER_IS_GNUCXX AND CMAKE_CXX_COMPILER_VERSION VERSION_LESS 4.9))
+      add_gcc_compiler_flags("-fsanitize=leak -DWITH_LSAN")
+    endif()
   endif()
+
 endif()
 
 string(TOLOWER "${CMAKE_BUILD_TYPE}" CMAKE_BUILD_TYPE_LOWER)
diff --git a/README.md b/README.md
index 669b0b66..e379123c 100644
--- a/README.md
+++ b/README.md
@@ -70,10 +70,12 @@ cmake accepts the following options:
   -DWITH_TESTS=[ON|OFF] Enable/Disable building of unit tests (default: ON)
   -DWITH_GUI_TESTS=[ON|OFF] Enable/Disable building of GUI tests (default: OFF)
   -DWITH_DEV_BUILD=[ON|OFF] Enable/Disable deprecated method warnings (default: OFF)
-  -DWITH_ASAN=[ON|OFF] Enable/Disable address sanitizer checks (Linux only) (default: OFF)
+  -DWITH_ASAN=[ON|OFF] Enable/Disable address sanitizer checks (Linux / macOS only) (default: OFF)
   -DWITH_COVERAGE=[ON|OFF] Enable/Disable coverage tests (GCC only) (default: OFF)
 ```
 
+:exclamation: When building with ASan support on macOS, you need to use `export ASAN_OPTIONS=detect_leaks=0` before running the tests (no LSan support in macOS).
+
 ### Contributing
 
 We are always looking for suggestions how to improve our application. If you find any bugs or have an idea for a new feature, please let us know by opening a report in our [issue tracker](https://github.com/keepassxreboot/keepassxc/issues) on GitHub or join us on IRC on freenode channels #keepassxc or #keepassxc-dev.

From 7198f20d6931bd39a17f41bd01d0c9d93ba56f10 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Adolfo=20E=2E=20Garc=C3=ADa?= <adolfo.garcia.cr@gmail.com>
Date: Sun, 15 Oct 2017 16:27:07 -0600
Subject: [PATCH 036/118] Improve building of macOS target

---
 CMakeLists.txt                  | 42 +++++++++++++++++++++++----------
 src/CMakeLists.txt              | 18 +++++++-------
 src/autotype/mac/CMakeLists.txt |  6 ++---
 utils/fix_mac.sh                | 20 ----------------
 4 files changed, 39 insertions(+), 47 deletions(-)
 delete mode 100755 utils/fix_mac.sh

diff --git a/CMakeLists.txt b/CMakeLists.txt
index f9aec839..7b465d22 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -36,7 +36,7 @@ include(CheckCXXSourceCompiles)
 option(WITH_TESTS "Enable building of unit tests" ON)
 option(WITH_GUI_TESTS "Enable building of GUI tests" OFF)
 option(WITH_DEV_BUILD "Use only for development. Disables/warns about deprecated methods." OFF)
-option(WITH_ASAN "Enable address sanitizer checks (Linux and macOS only)" OFF)
+option(WITH_ASAN "Enable address sanitizer checks (Linux / macOS only)" OFF)
 option(WITH_COVERAGE "Use to build with coverage tests (GCC only)." OFF)
 option(WITH_APP_BUNDLE "Enable Application Bundle for macOS" ON)
 
@@ -112,13 +112,13 @@ add_gcc_compiler_cxxflags("-Wnon-virtual-dtor -Wold-style-cast -Woverloaded-virt
 add_gcc_compiler_cflags("-Wchar-subscripts -Wwrite-strings")
 
 if(WITH_ASAN)
-  if(NOT (LINUX OR APPLE))
-      message(FATAL_ERROR "WITH_ASAN is only supported on Linux and macOS at the moment.")
+  if(NOT (CMAKE_SYSTEM_NAME STREQUAL "Linux" OR APPLE))
+      message(FATAL_ERROR "WITH_ASAN is only supported on Linux / macOS at the moment.")
   endif()
 
   add_gcc_compiler_flags("-fsanitize=address -DWITH_ASAN")
 
-  if(LINUX)
+  if(CMAKE_SYSTEM_NAME STREQUAL "Linux")
     if(NOT (CMAKE_COMPILER_IS_GNUCXX AND CMAKE_CXX_COMPILER_VERSION VERSION_LESS 4.9))
       add_gcc_compiler_flags("-fsanitize=leak -DWITH_LSAN")
     endif()
@@ -220,17 +220,33 @@ if(WITH_TESTS)
   enable_testing()
 endif(WITH_TESTS)
 
-find_package(Qt5Core          5.2 REQUIRED)
-find_package(Qt5Network       5.2 REQUIRED)
-find_package(Qt5Concurrent    5.2 REQUIRED)
-find_package(Qt5Widgets       5.2 REQUIRED)
-find_package(Qt5Test          5.2 REQUIRED)
-find_package(Qt5LinguistTools 5.2 REQUIRED)
-find_package(Qt5Network       5.2 REQUIRED)
-if (UNIX AND NOT APPLE)
-    find_package(Qt5DBus 5.2 REQUIRED)
+if(UNIX AND NOT APPLE)
+  find_package(Qt5 COMPONENTS Core Network Concurrent Widgets Test LinguistTools DBus REQUIRED)
+elseif(APPLE)
+  find_package(Qt5 COMPONENTS Core Network Concurrent Widgets Test LinguistTools MacExtras REQUIRED
+    HINTS /usr/local/Cellar/qt/*/lib/cmake ENV PATH
+  )
+else()
+  find_package(Qt5 COMPONENTS Core Network Concurrent Widgets Test LinguistTools REQUIRED)
 endif()
+
+if(Qt5Core_VERSION VERSION_LESS "5.2.0")
+  message(FATAL_ERROR "Qt version 5.2.0 or higher is required")
+endif()
+
 set(CMAKE_AUTOMOC ON)
+set(CMAKE_AUTOUIC ON)
+set(CMAKE_AUTORCC ON)
+
+if(APPLE)
+  set(CMAKE_MACOSX_RPATH TRUE)
+  find_program(MACDEPLOYQT_EXE macdeployqt HINTS /usr/local/opt/qt5/bin ENV PATH)
+  if(NOT MACDEPLOYQT_EXE)
+    message(FATAL_ERROR "macdeployqt is required to use build in macOS")
+  else()
+    message(STATUS "Using macdeployqt: ${MACDEPLOYQT_EXE}")
+  endif()
+endif()
 
 # Debian sets the the build type to None for package builds.
 # Make sure we don't enable asserts there.
diff --git a/src/CMakeLists.txt b/src/CMakeLists.txt
index bd8a1fd3..3d5e7bf4 100644
--- a/src/CMakeLists.txt
+++ b/src/CMakeLists.txt
@@ -234,6 +234,9 @@ target_link_libraries(keepassx_core
 
 if(APPLE)
     target_link_libraries(keepassx_core "-framework Foundation")
+    if(Qt5MacExtras_FOUND)
+      target_link_libraries(keepassx_core Qt5::MacExtras)
+    endif()
 endif()
 if (UNIX AND NOT APPLE)
     target_link_libraries(keepassx_core Qt5::DBus)
@@ -264,13 +267,7 @@ if(APPLE AND WITH_APP_BUNDLE)
   set_target_properties(${PROGNAME} PROPERTIES
                         MACOSX_BUNDLE ON
                         MACOSX_BUNDLE_INFO_PLIST ${CMAKE_CURRENT_BINARY_DIR}/Info.plist)
-endif()
 
-install(TARGETS ${PROGNAME}
-        BUNDLE DESTINATION . COMPONENT Runtime
-        RUNTIME DESTINATION ${BIN_INSTALL_DIR} COMPONENT Runtime)
-
-if(APPLE AND WITH_APP_BUNDLE)
   if(QT_MAC_USE_COCOA AND EXISTS "${QT_LIBRARY_DIR}/Resources/qt_menu.nib")
     install(DIRECTORY "${QT_LIBRARY_DIR}/Resources/qt_menu.nib"
             DESTINATION "${DATA_INSTALL_DIR}")
@@ -284,16 +281,17 @@ if(APPLE AND WITH_APP_BUNDLE)
   set(CPACK_PACKAGE_FILE_NAME "${PROGNAME}-${KEEPASSXC_VERSION}")
   include(CPack)
 
-  if(NOT DEFINED QT_BINARY_DIR)
-    set(QT_BINARY_DIR "/usr/local/opt/qt5/bin" CACHE PATH "QT binary folder")
-  endif()
   add_custom_command(TARGET ${PROGNAME}
                      POST_BUILD
-                     COMMAND ${QT_BINARY_DIR}/macdeployqt ${PROGNAME}.app
+                     COMMAND ${MACDEPLOYQT_EXE} ${PROGNAME}.app
                      WORKING_DIRECTORY ${CMAKE_BINARY_DIR}/src
                      COMMENT "Deploying app bundle")
 endif()
 
+install(TARGETS ${PROGNAME}
+      BUNDLE DESTINATION . COMPONENT Runtime
+      RUNTIME DESTINATION ${BIN_INSTALL_DIR} COMPONENT Runtime)
+
 if(MINGW)
   if(${CMAKE_SIZEOF_VOID_P} EQUAL "8")
     set(OUTPUT_FILE_POSTFIX "Win64")
diff --git a/src/autotype/mac/CMakeLists.txt b/src/autotype/mac/CMakeLists.txt
index ac93de0e..08c53278 100644
--- a/src/autotype/mac/CMakeLists.txt
+++ b/src/autotype/mac/CMakeLists.txt
@@ -9,14 +9,12 @@ set(autotype_mac_mm_SOURCES
 add_library(keepassx-autotype-cocoa MODULE ${autotype_mac_SOURCES} ${autotype_mac_mm_SOURCES})
 set_target_properties(keepassx-autotype-cocoa PROPERTIES LINK_FLAGS "-framework Foundation -framework AppKit -framework Carbon")
 target_link_libraries(keepassx-autotype-cocoa ${PROGNAME} Qt5::Core Qt5::Widgets)
-if(NOT DEFINED QT_BINARY_DIR)
-  set(QT_BINARY_DIR "/usr/local/opt/qt5/bin" CACHE PATH "QT binary folder")
-endif()
+
 if(WITH_APP_BUNDLE)
   add_custom_command(TARGET keepassx-autotype-cocoa
                      POST_BUILD
                      COMMAND ${CMAKE_COMMAND} -E copy ${CMAKE_CURRENT_BINARY_DIR}/libkeepassx-autotype-cocoa.so ${PLUGIN_INSTALL_DIR}
-                     COMMAND ${QT_BINARY_DIR}/macdeployqt ${PROGNAME}.app -executable=${PLUGIN_INSTALL_DIR}/libkeepassx-autotype-cocoa.so -no-plugins
+                     COMMAND ${MACDEPLOYQT_EXE} ${PROGNAME}.app -executable=${PLUGIN_INSTALL_DIR}/libkeepassx-autotype-cocoa.so -no-plugins
                      WORKING_DIRECTORY ${CMAKE_BINARY_DIR}/src
   COMMENT "Deploying autotype plugin")
 else()
diff --git a/utils/fix_mac.sh b/utils/fix_mac.sh
deleted file mode 100755
index 2e4e84e5..00000000
--- a/utils/fix_mac.sh
+++ /dev/null
@@ -1,20 +0,0 @@
-#!/bin/bash
-
-# Canonical path to qt5 directory
-QT="/usr/local/Cellar/qt"
-if [ ! -d "$QT" ]; then
-    # Alternative (old) path to qt5 directory
-    QT+="5"
-    if [ ! -d "$QT" ]; then
-        echo "Qt/Qt5 not found!"
-        exit
-    fi
-fi
-QT5_DIR="$QT/$(ls $QT | sort -r | head -n1)"
-echo $QT5_DIR
-
-# Change qt5 framework ids
-for framework in $(find "$QT5_DIR/lib" -regex ".*/\(Qt[a-zA-Z]*\)\.framework/Versions/5/\1"); do
-    echo "$framework"
-    install_name_tool -id "$framework" "$framework"
-done

From fdc7471a7b42731c849028ad17dbbee323007545 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Adolfo=20E=2E=20Garc=C3=ADa?= <adolfo.garcia.cr@gmail.com>
Date: Sun, 15 Oct 2017 17:28:26 -0600
Subject: [PATCH 037/118] Make QtMacExtras optional

---
 CMakeLists.txt | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/CMakeLists.txt b/CMakeLists.txt
index 7b465d22..5fa90173 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -223,7 +223,10 @@ endif(WITH_TESTS)
 if(UNIX AND NOT APPLE)
   find_package(Qt5 COMPONENTS Core Network Concurrent Widgets Test LinguistTools DBus REQUIRED)
 elseif(APPLE)
-  find_package(Qt5 COMPONENTS Core Network Concurrent Widgets Test LinguistTools MacExtras REQUIRED
+  find_package(Qt5 COMPONENTS Core Network Concurrent Widgets Test LinguistTools REQUIRED
+    HINTS /usr/local/Cellar/qt/*/lib/cmake ENV PATH
+  )
+  find_package(Qt5 COMPONENTS MacExtras
     HINTS /usr/local/Cellar/qt/*/lib/cmake ENV PATH
   )
 else()
@@ -242,7 +245,7 @@ if(APPLE)
   set(CMAKE_MACOSX_RPATH TRUE)
   find_program(MACDEPLOYQT_EXE macdeployqt HINTS /usr/local/opt/qt5/bin ENV PATH)
   if(NOT MACDEPLOYQT_EXE)
-    message(FATAL_ERROR "macdeployqt is required to use build in macOS")
+    message(FATAL_ERROR "macdeployqt is required to build in macOS")
   else()
     message(STATUS "Using macdeployqt: ${MACDEPLOYQT_EXE}")
   endif()

From a895729b9e75ea5b5353d80188c541f64bbcf5d9 Mon Sep 17 00:00:00 2001
From: Peter Nirschl <peter.nirschl@gmail.com>
Date: Sat, 21 Oct 2017 19:18:19 +0200
Subject: [PATCH 038/118] :bug: Fix result propagation in
 SymmetricCipherGcrypt::process The boolean 'ok' has always been set to true,
 regardless of possible errors.

---
 src/crypto/SymmetricCipherGcrypt.cpp | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/crypto/SymmetricCipherGcrypt.cpp b/src/crypto/SymmetricCipherGcrypt.cpp
index cd432406..e600a7ed 100644
--- a/src/crypto/SymmetricCipherGcrypt.cpp
+++ b/src/crypto/SymmetricCipherGcrypt.cpp
@@ -148,9 +148,10 @@ QByteArray SymmetricCipherGcrypt::process(const QByteArray& data, bool* ok)
     if (error != 0) {
         setErrorString(error);
         *ok = false;
+    } else {
+      *ok = true;
     }
 
-    *ok = true;
     return result;
 }
 

From 76ac8dda547eadcc4091a7955a990f745af761ef Mon Sep 17 00:00:00 2001
From: Janek Bevendorff <janek@jbev.net>
Date: Sat, 21 Oct 2017 17:22:47 +0200
Subject: [PATCH 039/118] Fix missing semicolon

---
 share/linux/org.keepassxc.desktop | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/share/linux/org.keepassxc.desktop b/share/linux/org.keepassxc.desktop
index fd94fdcd..d3b007bd 100644
--- a/share/linux/org.keepassxc.desktop
+++ b/share/linux/org.keepassxc.desktop
@@ -12,5 +12,5 @@ Icon=keepassxc
 Terminal=false
 Type=Application
 Version=1.0
-Categories=Utility;Security;Qt
+Categories=Utility;Security;Qt;
 MimeType=application/x-keepass2;

From 94ea91ec6321f0fc4fb6f1fa28149eff5b1cb08b Mon Sep 17 00:00:00 2001
From: Janek Bevendorff <janek@jbev.net>
Date: Sat, 21 Oct 2017 17:02:46 +0200
Subject: [PATCH 040/118] Switch from Ubuntu 14.04 to CentOS 7

---
 AppImage-Recipe.sh |  5 ++-
 Dockerfile         | 84 ++++++++++++++++++++++++++++------------------
 2 files changed, 55 insertions(+), 34 deletions(-)

diff --git a/AppImage-Recipe.sh b/AppImage-Recipe.sh
index 2a40458f..a05a118e 100755
--- a/AppImage-Recipe.sh
+++ b/AppImage-Recipe.sh
@@ -34,6 +34,7 @@ fi
 APP="$1"
 LOWERAPP="$(echo "$APP" | tr '[:upper:]' '[:lower:]')"
 VERSION="$2"
+export ARCH=x86_64
 
 mkdir -p $APP.AppDir
 wget -q https://github.com/probonopd/AppImages/raw/master/functions.sh -O ./functions.sh
@@ -42,6 +43,8 @@ wget -q https://github.com/probonopd/AppImages/raw/master/functions.sh -O ./func
 LIB_DIR=./usr/lib
 if [ -d ./usr/lib/x86_64-linux-gnu ]; then
     LIB_DIR=./usr/lib/x86_64-linux-gnu
+elif [ -d ./usr/lib64 ]; then
+    LIB_DIR=./usr/lib64
 fi
 
 cd $APP.AppDir
@@ -51,7 +54,7 @@ rm -R ./usr/local
 rmdir ./opt 2> /dev/null
 
 # bundle Qt platform plugins and themes
-QXCB_PLUGIN="$(find /usr/lib -name 'libqxcb.so' 2> /dev/null)"
+QXCB_PLUGIN="$(find /usr/lib* -name 'libqxcb.so' 2> /dev/null)"
 if [ "$QXCB_PLUGIN" == "" ]; then
     QXCB_PLUGIN="$(find /opt/qt*/plugins -name 'libqxcb.so' 2> /dev/null)"
 fi
diff --git a/Dockerfile b/Dockerfile
index 60ba4ff5..6f7ace34 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -14,50 +14,68 @@
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
 
-FROM ubuntu:14.04
+FROM centos:7
 
 RUN set -x \
-    && apt-get update \
-    && apt-get install --yes software-properties-common
+    && curl "https://copr.fedorainfracloud.org/coprs/bugzy/keepassxc/repo/epel-7/bugzy-keepassxc-epel-7.repo" \
+        > /etc/yum.repos.d/bugzy-keepassxc-epel-7.repo
 
 RUN set -x \
-    && add-apt-repository ppa:george-edison55/cmake-3.x
-
-ENV QT_PPA=qt591
-ENV QT_VERSION=qt59
+    && curl "https://copr.fedorainfracloud.org/coprs/sic/backports/repo/epel-7/sic-backports-epel-7.repo" \
+        > /etc/yum.repos.d/sic-backports-epel-7.repo
 
 RUN set -x \
-    && add-apt-repository --yes ppa:beineri/opt-${QT_PPA}-trusty
-
+    && yum clean -y all \
+    && yum upgrade -y
 
+# build and runtime dependencies
 RUN set -x \
-    && apt-get update \
-    && apt-get install --yes \
-        g++ \
+    && yum install -y \
+        make \
+        automake \
+        gcc-c++ \
         cmake \
-        libgcrypt20-dev \
-        ${QT_VERSION}base \
-        ${QT_VERSION}tools \
-        ${QT_VERSION}x11extras \
-        libxi-dev \
-        libxtst-dev \
-        zlib1g-dev \
-        libyubikey-dev \
-        libykpers-1-dev \
-        xvfb \
-        wget \
-        file \
-        fuse \
-        python
+        libgcrypt16-devel \
+        qt5-qtbase-devel \
+        qt5-linguist \
+        qt5-qttools \
+        zlib-devel \
+        qt5-qtx11extras \
+        qt5-qtx11extras-devel \
+        libXi-devel \
+        libXtst-devel
 
+# AppImage dependencies
 RUN set -x \
-    && apt-get install --yes mesa-common-dev
-        
+    && yum install -y \
+        wget \
+        fuse-libs
+
+# build libyubikey
+ENV YUBIKEY_VERSION=1.13
+RUN set -x && yum install -y libusb-devel
+RUN set -x \
+    && wget "https://developers.yubico.com/yubico-c/Releases/libyubikey-${YUBIKEY_VERSION}.tar.gz" \
+    && tar xf libyubikey-${YUBIKEY_VERSION}.tar.gz \
+    && cd libyubikey-${YUBIKEY_VERSION} \
+    && ./configure --prefix=/usr --libdir=/usr/lib64 \
+    && make \
+    && make install \
+    && cd .. \
+    && rm -Rf libyubikey-${YUBIKEY_VERSION}*
+
+# build libykpers-1
+ENV YKPERS_VERSION=1.18.0
+RUN set -x \
+    && wget "https://developers.yubico.com/yubikey-personalization/Releases/ykpers-${YKPERS_VERSION}.tar.gz" \
+    && tar xf ykpers-${YKPERS_VERSION}.tar.gz \
+    && cd ykpers-${YKPERS_VERSION} \
+    && ./configure --prefix=/usr --libdir=/usr/lib64 \
+    && make \
+    && make install \
+    && cd .. \
+    && rm -Rf ykpers-${YKPERS_VERSION}*
+
 VOLUME /keepassxc/src
 VOLUME /keepassxc/out
 WORKDIR /keepassxc
-
-ENV CMAKE_PREFIX_PATH=/opt/${QT_VERSION}/lib/cmake
-ENV LD_LIBRARY_PATH=/opt/${QT_VERSION}/lib
-RUN set -x \
-    && echo /opt/${QT_VERSION}/lib > /etc/ld.so.conf.d/${QT_VERSION}.conf

From 51ed7a59da5f1331277ef6d799d534d5ab3029d4 Mon Sep 17 00:00:00 2001
From: Janek Bevendorff <janek@jbev.net>
Date: Sat, 21 Oct 2017 20:24:39 +0200
Subject: [PATCH 041/118] Fix Exec replacement

---
 AppImage-Recipe.sh | 5 ++---
 1 file changed, 2 insertions(+), 3 deletions(-)

diff --git a/AppImage-Recipe.sh b/AppImage-Recipe.sh
index a05a118e..0e7d16af 100755
--- a/AppImage-Recipe.sh
+++ b/AppImage-Recipe.sh
@@ -74,7 +74,6 @@ get_desktop
 get_icon
 cat << EOF > ./usr/bin/keepassxc_env
 #!/usr/bin/env bash
-#export QT_QPA_PLATFORMTHEME=gtk2
 export LD_LIBRARY_PATH="..$(dirname ${QT_PLUGIN_PATH})/lib:\${LD_LIBRARY_PATH}"
 export QT_PLUGIN_PATH="..${QT_PLUGIN_PATH}:\${KPXC_QT_PLUGIN_PATH}"
 
@@ -85,7 +84,7 @@ unset XDG_DATA_DIRS
 exec keepassxc "\$@"
 EOF
 chmod +x ./usr/bin/keepassxc_env
-sed -i 's/Exec=keepassxc/Exec=keepassxc_env/' keepassxc.desktop
+sed -i 's/Exec=keepassxc/Exec=keepassxc_env/' org.keepassxc.desktop
 get_desktopintegration $LOWERAPP
 
 GLIBC_NEEDED=$(glibc_needed)
@@ -94,5 +93,5 @@ cd ..
 
 generate_type2_appimage
 
-mv ../out/*.AppImage ..
+mv ../out/*.AppImage ../KeePassXC-${VERSION}-${ARCH}.AppImage
 rmdir ../out > /dev/null 2>&1

From e2c6f5010830855ff1a4b49bfe60f455951218fd Mon Sep 17 00:00:00 2001
From: Janek Bevendorff <janek@jbev.net>
Date: Sat, 21 Oct 2017 20:32:41 +0200
Subject: [PATCH 042/118] Support starting keepassxc-cli via 'cli' argument

---
 AppImage-Recipe.sh | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/AppImage-Recipe.sh b/AppImage-Recipe.sh
index 0e7d16af..c421aa79 100755
--- a/AppImage-Recipe.sh
+++ b/AppImage-Recipe.sh
@@ -78,10 +78,15 @@ export LD_LIBRARY_PATH="..$(dirname ${QT_PLUGIN_PATH})/lib:\${LD_LIBRARY_PATH}"
 export QT_PLUGIN_PATH="..${QT_PLUGIN_PATH}:\${KPXC_QT_PLUGIN_PATH}"
 
 # unset XDG_DATA_DIRS to make tray icon work in Ubuntu Unity
-# see https://github.com/probonopd/AppImageKit/issues/351
+# see https://github.com/AppImage/AppImageKit/issues/351
 unset XDG_DATA_DIRS
 
-exec keepassxc "\$@"
+if [ "\${1}" == "cli" ]; then
+    shift
+    exec keepassxc-cli "\$@"
+else
+    exec keepassxc "\$@"
+fi
 EOF
 chmod +x ./usr/bin/keepassxc_env
 sed -i 's/Exec=keepassxc/Exec=keepassxc_env/' org.keepassxc.desktop

From 067da8223dfcc700654eae22c1ddf9f902187e5d Mon Sep 17 00:00:00 2001
From: Janek Bevendorff <janek@jbev.net>
Date: Sat, 21 Oct 2017 22:38:24 +0200
Subject: [PATCH 043/118] Fix build after merge

---
 src/CMakeLists.txt | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/CMakeLists.txt b/src/CMakeLists.txt
index cd256511..3f0ba782 100644
--- a/src/CMakeLists.txt
+++ b/src/CMakeLists.txt
@@ -68,8 +68,8 @@ set(keepassx_SOURCES
     core/Uuid.cpp
     core/Base32.h
     core/Base32.cpp
-    cli/PasswordInput.cpp
-    cli/PasswordInput.h
+    cli/Utils.cpp
+    cli/Utils.h
     crypto/Crypto.cpp
     crypto/CryptoHash.cpp
     crypto/Random.cpp

From 880a8da68a7a44ccc2730321a7a691afa8a55ee2 Mon Sep 17 00:00:00 2001
From: Janek Bevendorff <janek@jbev.net>
Date: Sun, 22 Oct 2017 00:27:26 +0200
Subject: [PATCH 044/118] Bump version to 2.2.2 and update changelog

---
 CHANGELOG                             | 17 +++++++++++++++++
 CMakeLists.txt                        |  2 +-
 share/linux/org.keepassxc.appdata.xml | 20 +++++++++++++++++++-
 snapcraft.yaml                        |  2 +-
 4 files changed, 38 insertions(+), 3 deletions(-)

diff --git a/CHANGELOG b/CHANGELOG
index cc976c13..3719f8e4 100644
--- a/CHANGELOG
+++ b/CHANGELOG
@@ -1,3 +1,20 @@
+2.2.2 (2017-10-22)
+=========================
+
+- Fixed entries with empty URLs being reported to KeePassHTTP clients [#1031]
+- Fixed YubiKey detection and enabled CLI tool for AppImage binary [#1100]
+- Added AppStream description [#1082]
+- Improved TOTP compatibility and added new Base32 implementation [#1069]
+- Fixed error handling when processing invalid cipher stream [#1099]
+- Fixed double warning display when opening a database [#1037]
+- Fixed unlocking databases with --pw-stdin [#1087]
+- Added ability to override QT_PLUGIN_PATH environment variable for AppImages [#1079]
+- Fixed transform seed not being regenerated when saving the database [#1068]
+- Fixed only one YubiKey slot being polled [#1048]
+- Corrected an issue with entry icons while merging [#1008]
+- Corrected desktop and tray icons in Snap package [#1030]
+- Fixed screen lock and Google fallback settings [#1029]
+
 2.2.1 (2017-10-01)
 =========================
 
diff --git a/CMakeLists.txt b/CMakeLists.txt
index 3fddb457..63281f93 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -49,7 +49,7 @@ set(CMAKE_AUTOUIC ON)
 
 set(KEEPASSXC_VERSION_MAJOR "2")
 set(KEEPASSXC_VERSION_MINOR "2")
-set(KEEPASSXC_VERSION_PATCH "1")
+set(KEEPASSXC_VERSION_PATCH "2")
 set(KEEPASSXC_VERSION "${KEEPASSXC_VERSION_MAJOR}.${KEEPASSXC_VERSION_MINOR}.${KEEPASSXC_VERSION_PATCH}")
 
 # Distribution info
diff --git a/share/linux/org.keepassxc.appdata.xml b/share/linux/org.keepassxc.appdata.xml
index 3a5eb2c5..563450a4 100644
--- a/share/linux/org.keepassxc.appdata.xml
+++ b/share/linux/org.keepassxc.appdata.xml
@@ -67,7 +67,25 @@
     </screenshots>
 
     <releases>
-        <release version="2.2.1" date="2017-10-01">
+        <release version="2.2.2" date="2017-10-22">
+            <description>
+                <ul>
+                    <li>Fixed entries with empty URLs being reported to KeePassHTTP clients [#1031]</li>
+                    <li>Fixed YubiKey detection and enabled CLI tool for AppImage binary [#1100]</li>
+                    <li>Added AppStream description [#1082]</li>
+                    <li>Improved TOTP compatibility and added new Base32 implementation [#1069]</li>
+                    <li>Fixed error handling when processing invalid cipher stream [#1099]</li>
+                    <li>Fixed double warning display when opening a database [#1037]</li>
+                    <li>Fixed unlocking databases with --pw-stdin [#1087]</li>
+                    <li>Added ability to override QT_PLUGIN_PATH environment variable for AppImages [#1079]</li>
+                    <li>Fixed transform seed not being regenerated when saving the database [#1068]</li>
+                    <li>Fixed only one YubiKey slot being polled [#1048]</li>
+                    <li>Corrected an issue with entry icons while merging [#1008]</li>
+                    <li>Corrected desktop and tray icons in Snap package [#1030]</li>
+                    <li>Fixed screen lock and Google fallback settings [#1029]</li>
+                </ul>
+            </description>
+        </release><release version="2.2.1" date="2017-10-01">
             <description>
                 <ul>
                     <li>Corrected multiple snap issues [#934, #1011]</li>
diff --git a/snapcraft.yaml b/snapcraft.yaml
index a3e4004c..0d69941a 100644
--- a/snapcraft.yaml
+++ b/snapcraft.yaml
@@ -1,5 +1,5 @@
 name: keepassxc
-version: 2.2.1
+version: 2.2.2
 grade: stable
 summary: Community-driven port of the Windows application “KeePass Password Safe”
 description: |

From 3088371631cf8a57a1431f170fb9a54dce6f65ba Mon Sep 17 00:00:00 2001
From: Janek Bevendorff <janek@jbev.net>
Date: Sun, 22 Oct 2017 00:28:04 +0200
Subject: [PATCH 045/118] Update translations

---
 share/translations/keepassx_cs.ts    |  19 +-
 share/translations/keepassx_da.ts    |  15 +
 share/translations/keepassx_de.ts    |  19 +-
 share/translations/keepassx_el.ts    |  15 +
 share/translations/keepassx_en.ts    |  15 +
 share/translations/keepassx_es.ts    |  15 +
 share/translations/keepassx_eu.ts    |  15 +
 share/translations/keepassx_fi.ts    |  15 +
 share/translations/keepassx_fr.ts    |  15 +
 share/translations/keepassx_hu.ts    |  19 +-
 share/translations/keepassx_id.ts    |  15 +
 share/translations/keepassx_it.ts    | 415 ++++++++++++++-------------
 share/translations/keepassx_ja.ts    |  19 +-
 share/translations/keepassx_kk.ts    |  15 +
 share/translations/keepassx_ko.ts    |  15 +
 share/translations/keepassx_lt.ts    |  19 +-
 share/translations/keepassx_nl_NL.ts |  15 +
 share/translations/keepassx_pl.ts    |  19 +-
 share/translations/keepassx_pt_BR.ts |  15 +
 share/translations/keepassx_pt_PT.ts |  19 +-
 share/translations/keepassx_ru.ts    |  15 +
 share/translations/keepassx_sl_SI.ts |  15 +
 share/translations/keepassx_sv.ts    |  38 ++-
 share/translations/keepassx_tr.ts    |  15 +
 share/translations/keepassx_uk.ts    |  15 +
 share/translations/keepassx_zh_CN.ts |  15 +
 share/translations/keepassx_zh_TW.ts |  15 +
 27 files changed, 631 insertions(+), 225 deletions(-)

diff --git a/share/translations/keepassx_cs.ts b/share/translations/keepassx_cs.ts
index 6904b188..737c2b03 100644
--- a/share/translations/keepassx_cs.ts
+++ b/share/translations/keepassx_cs.ts
@@ -67,6 +67,10 @@ Jádro systému: %3 %4</translation>
         <source>Include the following information whenever you report a bug:</source>
         <translation>K hlášení chyby vždy připojte následující údaje:</translation>
     </message>
+    <message>
+        <source>Distribution: %1</source>
+        <translation>Distribuce: %1</translation>
+    </message>
 </context>
 <context>
     <name>AccessControlDialog</name>
@@ -1095,7 +1099,7 @@ Chcete ji přesto otevřít?</translation>
     </message>
     <message>
         <source>Custom icon already exists</source>
-        <translation type="unfinished"/>
+        <translation>Tato vlastní ikona už existuje</translation>
     </message>
 </context>
 <context>
@@ -1318,6 +1322,17 @@ Můžete ho importovat pomocí Databáze → Importovat databázi ve formátu Ke
 Jedná se o jednosměrný převod. Databázi, vzniklou z importu, nepůjde otevřít ve staré verzi KeePassX 0.4.</translation>
     </message>
 </context>
+<context>
+    <name>KeePass2Writer</name>
+    <message>
+        <source>Unable to issue challenge-response.</source>
+        <translation>Nedaří se vyvolat výzva-odpověď.</translation>
+    </message>
+    <message>
+        <source>Unable to calculate master key</source>
+        <translation>Nedaří se spočítat hlavní klíč</translation>
+    </message>
+</context>
 <context>
     <name>Main</name>
     <message>
@@ -1338,7 +1353,7 @@ Jedná se o jednosměrný převod. Databázi, vzniklou z importu, nepůjde otev
     </message>
     <message>
         <source>Existing single-instance lock file is invalid. Launching new instance.</source>
-        <translation type="unfinished"/>
+        <translation>Existující uzamykací soubor, zajišťující spuštění pouze jedné instance, není platný. Spouští se nová instance.</translation>
     </message>
 </context>
 <context>
diff --git a/share/translations/keepassx_da.ts b/share/translations/keepassx_da.ts
index 55e91dd0..563f6adb 100644
--- a/share/translations/keepassx_da.ts
+++ b/share/translations/keepassx_da.ts
@@ -67,6 +67,10 @@ Kerne: %3 %4</translation>
         <source>Include the following information whenever you report a bug:</source>
         <translation>Inkludér følgende information når du indrapporterer en fejl:</translation>
     </message>
+    <message>
+        <source>Distribution: %1</source>
+        <translation type="unfinished"/>
+    </message>
 </context>
 <context>
     <name>AccessControlDialog</name>
@@ -1313,6 +1317,17 @@ This is a one-way migration. You won&apos;t be able to open the imported databas
         <translation type="unfinished"/>
     </message>
 </context>
+<context>
+    <name>KeePass2Writer</name>
+    <message>
+        <source>Unable to issue challenge-response.</source>
+        <translation type="unfinished"/>
+    </message>
+    <message>
+        <source>Unable to calculate master key</source>
+        <translation>Kan ikke beregne hovednøgle</translation>
+    </message>
+</context>
 <context>
     <name>Main</name>
     <message>
diff --git a/share/translations/keepassx_de.ts b/share/translations/keepassx_de.ts
index 8c55f99a..2fd20f04 100644
--- a/share/translations/keepassx_de.ts
+++ b/share/translations/keepassx_de.ts
@@ -67,6 +67,10 @@ Kernel: %3 %4</translation>
         <source>Include the following information whenever you report a bug:</source>
         <translation>Geben Sie folgende Informationen an, wenn Sie einen Bug melden:</translation>
     </message>
+    <message>
+        <source>Distribution: %1</source>
+        <translation>Distribution: %1</translation>
+    </message>
 </context>
 <context>
     <name>AccessControlDialog</name>
@@ -1092,7 +1096,7 @@ Möchten Sie diese dennoch öffnen?</translation>
     </message>
     <message>
         <source>Custom icon already exists</source>
-        <translation type="unfinished"/>
+        <translation>Es gibt bereits ein eigenes Symbol </translation>
     </message>
 </context>
 <context>
@@ -1315,6 +1319,17 @@ Zum Importieren gehen Sie auf Datenbank &gt; &apos;KeePass 1-Datenbank importier
 Dieser Vorgang ist nur in eine Richtung möglich. Die importierte Datenbank kann später nicht mehr mit der alten KeePassX-Version 0.4 geöffnet werden.</translation>
     </message>
 </context>
+<context>
+    <name>KeePass2Writer</name>
+    <message>
+        <source>Unable to issue challenge-response.</source>
+        <translation>Fehler beim Ausführen des Challenge-Response-Verfahrens</translation>
+    </message>
+    <message>
+        <source>Unable to calculate master key</source>
+        <translation>Berechnung des Hauptschlüssels gescheitert</translation>
+    </message>
+</context>
 <context>
     <name>Main</name>
     <message>
@@ -1335,7 +1350,7 @@ Dieser Vorgang ist nur in eine Richtung möglich. Die importierte Datenbank kann
     </message>
     <message>
         <source>Existing single-instance lock file is invalid. Launching new instance.</source>
-        <translation type="unfinished"/>
+        <translation>Vorhandene einmal-Sperrdatei ist ungültig. Starte neuen Vorgang.  </translation>
     </message>
 </context>
 <context>
diff --git a/share/translations/keepassx_el.ts b/share/translations/keepassx_el.ts
index a641c0d5..5224c024 100644
--- a/share/translations/keepassx_el.ts
+++ b/share/translations/keepassx_el.ts
@@ -67,6 +67,10 @@ Kernel: %3 %4</source>
         <source>Include the following information whenever you report a bug:</source>
         <translation>Συμπεριλάβετε τις ακόλουθες πληροφορίες όποτε αναφέρετε κάποιο σφάλμα:</translation>
     </message>
+    <message>
+        <source>Distribution: %1</source>
+        <translation type="unfinished"/>
+    </message>
 </context>
 <context>
     <name>AccessControlDialog</name>
@@ -1311,6 +1315,17 @@ This is a one-way migration. You won&apos;t be able to open the imported databas
         <translation type="unfinished"/>
     </message>
 </context>
+<context>
+    <name>KeePass2Writer</name>
+    <message>
+        <source>Unable to issue challenge-response.</source>
+        <translation type="unfinished"/>
+    </message>
+    <message>
+        <source>Unable to calculate master key</source>
+        <translation>Σε θέση να υπολογίσει το κύριο κλειδί</translation>
+    </message>
+</context>
 <context>
     <name>Main</name>
     <message>
diff --git a/share/translations/keepassx_en.ts b/share/translations/keepassx_en.ts
index c971512a..7cc9fc3c 100644
--- a/share/translations/keepassx_en.ts
+++ b/share/translations/keepassx_en.ts
@@ -66,6 +66,10 @@ Kernel: %3 %4</source>
         <source>Include the following information whenever you report a bug:</source>
         <translation type="unfinished"></translation>
     </message>
+    <message>
+        <source>Distribution: %1</source>
+        <translation type="unfinished"></translation>
+    </message>
 </context>
 <context>
     <name>AccessControlDialog</name>
@@ -1309,6 +1313,17 @@ This is a one-way migration. You won&apos;t be able to open the imported databas
         <translation type="unfinished"></translation>
     </message>
 </context>
+<context>
+    <name>KeePass2Writer</name>
+    <message>
+        <source>Unable to issue challenge-response.</source>
+        <translation type="unfinished"></translation>
+    </message>
+    <message>
+        <source>Unable to calculate master key</source>
+        <translation type="unfinished"></translation>
+    </message>
+</context>
 <context>
     <name>Main</name>
     <message>
diff --git a/share/translations/keepassx_es.ts b/share/translations/keepassx_es.ts
index 0fa7b14c..f8176b80 100644
--- a/share/translations/keepassx_es.ts
+++ b/share/translations/keepassx_es.ts
@@ -67,6 +67,10 @@ Núcleo: %3 %4</translation>
         <source>Include the following information whenever you report a bug:</source>
         <translation>Incluya la información siguiente cuando informe sobre un error:</translation>
     </message>
+    <message>
+        <source>Distribution: %1</source>
+        <translation type="unfinished"/>
+    </message>
 </context>
 <context>
     <name>AccessControlDialog</name>
@@ -1317,6 +1321,17 @@ Puede importarla haciendo clic en Base de datos &gt; &apos;Importar base de dato
 Esta migración es en único sentido. No podrá abrir la base de datos importada con la vieja versión 0.4 de KeePassX.</translation>
     </message>
 </context>
+<context>
+    <name>KeePass2Writer</name>
+    <message>
+        <source>Unable to issue challenge-response.</source>
+        <translation>No se pudo hacer el desafío/respuesta:</translation>
+    </message>
+    <message>
+        <source>Unable to calculate master key</source>
+        <translation>No se puede calcular la clave maestra</translation>
+    </message>
+</context>
 <context>
     <name>Main</name>
     <message>
diff --git a/share/translations/keepassx_eu.ts b/share/translations/keepassx_eu.ts
index 738dd29c..ffbb4a9a 100644
--- a/share/translations/keepassx_eu.ts
+++ b/share/translations/keepassx_eu.ts
@@ -65,6 +65,10 @@ Kernel: %3 %4</source>
         <source>Include the following information whenever you report a bug:</source>
         <translation type="unfinished"/>
     </message>
+    <message>
+        <source>Distribution: %1</source>
+        <translation type="unfinished"/>
+    </message>
 </context>
 <context>
     <name>AccessControlDialog</name>
@@ -1300,6 +1304,17 @@ This is a one-way migration. You won&apos;t be able to open the imported databas
         <translation type="unfinished"/>
     </message>
 </context>
+<context>
+    <name>KeePass2Writer</name>
+    <message>
+        <source>Unable to issue challenge-response.</source>
+        <translation type="unfinished"/>
+    </message>
+    <message>
+        <source>Unable to calculate master key</source>
+        <translation>Ezin izan da gako nagusia kalkulatu</translation>
+    </message>
+</context>
 <context>
     <name>Main</name>
     <message>
diff --git a/share/translations/keepassx_fi.ts b/share/translations/keepassx_fi.ts
index 5f186256..c7d61473 100644
--- a/share/translations/keepassx_fi.ts
+++ b/share/translations/keepassx_fi.ts
@@ -67,6 +67,10 @@ Kernel: %3 %4</translation>
         <source>Include the following information whenever you report a bug:</source>
         <translation>Sisällytä seuraavat tiedot aina kun ilmoitat ongelmasta:</translation>
     </message>
+    <message>
+        <source>Distribution: %1</source>
+        <translation type="unfinished"/>
+    </message>
 </context>
 <context>
     <name>AccessControlDialog</name>
@@ -1314,6 +1318,17 @@ This is a one-way migration. You won&apos;t be able to open the imported databas
         <translation type="unfinished"/>
     </message>
 </context>
+<context>
+    <name>KeePass2Writer</name>
+    <message>
+        <source>Unable to issue challenge-response.</source>
+        <translation type="unfinished"/>
+    </message>
+    <message>
+        <source>Unable to calculate master key</source>
+        <translation>Pääavaimen laskeminen ei onnistu</translation>
+    </message>
+</context>
 <context>
     <name>Main</name>
     <message>
diff --git a/share/translations/keepassx_fr.ts b/share/translations/keepassx_fr.ts
index aa04ae5c..90580e14 100644
--- a/share/translations/keepassx_fr.ts
+++ b/share/translations/keepassx_fr.ts
@@ -67,6 +67,10 @@ Kernel: %3 %4</translation>
         <source>Include the following information whenever you report a bug:</source>
         <translation>Inclure l&apos;information suivante lorsque vous signaler un bug:</translation>
     </message>
+    <message>
+        <source>Distribution: %1</source>
+        <translation type="unfinished"/>
+    </message>
 </context>
 <context>
     <name>AccessControlDialog</name>
@@ -1318,6 +1322,17 @@ Vous pouvez l&apos;importer en cliquant sur Base de données&gt;&apos;Importer u
 Il s&apos;agit d&apos;une migration à sens unique. Vous ne pourrez pas ouvrir la base de données importée avec l&apos;ancienne version de KeePassX 0.4.</translation>
     </message>
 </context>
+<context>
+    <name>KeePass2Writer</name>
+    <message>
+        <source>Unable to issue challenge-response.</source>
+        <translation>Impossible de lancer une challenge-réponse.</translation>
+    </message>
+    <message>
+        <source>Unable to calculate master key</source>
+        <translation>Impossible de calculer la clé maître</translation>
+    </message>
+</context>
 <context>
     <name>Main</name>
     <message>
diff --git a/share/translations/keepassx_hu.ts b/share/translations/keepassx_hu.ts
index d4c2880f..dc987705 100644
--- a/share/translations/keepassx_hu.ts
+++ b/share/translations/keepassx_hu.ts
@@ -67,6 +67,10 @@ Kernel: %3 %4</translation>
         <source>Include the following information whenever you report a bug:</source>
         <translation>Minden hibajelentésnél legyenek mellékelve ezek az információk:</translation>
     </message>
+    <message>
+        <source>Distribution: %1</source>
+        <translation>Disztribúció: %1</translation>
+    </message>
 </context>
 <context>
     <name>AccessControlDialog</name>
@@ -1094,7 +1098,7 @@ Mindenképp megnyitja?</translation>
     </message>
     <message>
         <source>Custom icon already exists</source>
-        <translation type="unfinished"/>
+        <translation>Az egyéni ikon már létezik</translation>
     </message>
 </context>
 <context>
@@ -1317,6 +1321,17 @@ Be lehet importálni az Adatbázis &gt; „KeePass 1 adatbázis importálása…
 Ez egyirányú migráció. Nem lehet majd megnyitni az importált adatbázist a régi KeePassX 0.4 verzióval.</translation>
     </message>
 </context>
+<context>
+    <name>KeePass2Writer</name>
+    <message>
+        <source>Unable to issue challenge-response.</source>
+        <translation>Nem lehet kiutalni a kihívás-választ.</translation>
+    </message>
+    <message>
+        <source>Unable to calculate master key</source>
+        <translation>Nem lehet kiszámítani a mesterkulcsot</translation>
+    </message>
+</context>
 <context>
     <name>Main</name>
     <message>
@@ -1337,7 +1352,7 @@ Ez egyirányú migráció. Nem lehet majd megnyitni az importált adatbázist a
     </message>
     <message>
         <source>Existing single-instance lock file is invalid. Launching new instance.</source>
-        <translation type="unfinished"/>
+        <translation>A meglévő egypéldányos zárolási fájl érvénytelen. Új példány indítása.</translation>
     </message>
 </context>
 <context>
diff --git a/share/translations/keepassx_id.ts b/share/translations/keepassx_id.ts
index 8f7cd023..f7db658d 100644
--- a/share/translations/keepassx_id.ts
+++ b/share/translations/keepassx_id.ts
@@ -67,6 +67,10 @@ Kernel: %3 %4</translation>
         <source>Include the following information whenever you report a bug:</source>
         <translation>Sertakan informasi berikut setiap Anda melaporkan bug:</translation>
     </message>
+    <message>
+        <source>Distribution: %1</source>
+        <translation type="unfinished"/>
+    </message>
 </context>
 <context>
     <name>AccessControlDialog</name>
@@ -1317,6 +1321,17 @@ Anda bisa mengimpornya dengan mengklik Basis Data &gt; &apos;Impor basis data Ke
 Ini adalah migrasi satu arah. Anda tidak akan bisa membuka basis data yang diimpor dengan versi lama KeePassX 0.4.</translation>
     </message>
 </context>
+<context>
+    <name>KeePass2Writer</name>
+    <message>
+        <source>Unable to issue challenge-response.</source>
+        <translation type="unfinished"/>
+    </message>
+    <message>
+        <source>Unable to calculate master key</source>
+        <translation>Tidak bisa mengkalkulasi kunci utama</translation>
+    </message>
+</context>
 <context>
     <name>Main</name>
     <message>
diff --git a/share/translations/keepassx_it.ts b/share/translations/keepassx_it.ts
index f60f0b26..5125a8b6 100644
--- a/share/translations/keepassx_it.ts
+++ b/share/translations/keepassx_it.ts
@@ -3,7 +3,7 @@
     <name>AboutDialog</name>
     <message>
         <source>About KeePassXC</source>
-        <translation>A proposito di KeePassXC</translation>
+        <translation>Info su KeePassXC</translation>
     </message>
     <message>
         <source>About</source>
@@ -15,11 +15,11 @@
     </message>
     <message>
         <source>Debug Info</source>
-        <translation>Informazioni di debug</translation>
+        <translation>Informazioni debug</translation>
     </message>
     <message>
         <source>Copy to clipboard</source>
-        <translation>Copia negli appunti</translation>
+        <translation>Copia negli Appunti</translation>
     </message>
     <message>
         <source>Version %1
@@ -49,7 +49,7 @@ Kernel: %3 %4</translation>
     </message>
     <message>
         <source>Report bugs at: &lt;a href=&quot;https://github.com/keepassxreboot/keepassxc/issues&quot; style=&quot;text-decoration: underline;&quot;&gt;https://github.com&lt;/a&gt;</source>
-        <translation>Segnala eventuali problemi su: &lt;a href=&quot;https://github.com/keepassxreboot/keepassxc/issues&quot; style=&quot;text-decoration: underline;&quot;&gt;https://github.com&lt;/a&gt;</translation>
+        <translation>Segnala eventuali problemi in: &lt;a href=&quot;https://github.com/keepassxreboot/keepassxc/issues&quot; style=&quot;text-decoration: underline;&quot;&gt;https://github.com&lt;/a&gt;</translation>
     </message>
     <message>
         <source>KeePassXC is distributed under the terms of the GNU General Public License (GPL) version 2 or (at your option) version 3.</source>
@@ -57,7 +57,7 @@ Kernel: %3 %4</translation>
     </message>
     <message>
         <source>Project Maintainers:</source>
-        <translation>Manutentori del progetto:</translation>
+        <translation>Manutenzione progetto:</translation>
     </message>
     <message>
         <source>&lt;a href=&quot;https://github.com/keepassxreboot/keepassxc/graphs/contributors&quot;&gt;See Contributions on GitHub&lt;/a&gt;</source>
@@ -65,7 +65,11 @@ Kernel: %3 %4</translation>
     </message>
     <message>
         <source>Include the following information whenever you report a bug:</source>
-        <translation>Includi le seguenti informazioni quando segnali un problema:</translation>
+        <translation>Quando segnali un problema includi le seguenti informazioni:</translation>
+    </message>
+    <message>
+        <source>Distribution: %1</source>
+        <translation>Distribuzione: %1</translation>
     </message>
 </context>
 <context>
@@ -85,23 +89,23 @@ Kernel: %3 %4</translation>
     <message>
         <source>%1 has requested access to passwords for the following item(s).
 Please select whether you want to allow access.</source>
-        <translation>%1 ha richiesto accesso alle passwords per il seguente elemento(i).
-Perfavore seleziona se vuoi consentire l&apos;accesso.</translation>
+        <translation>%1 ha richiesto accesso alle passwords per il seguente elemento/i.
+Seleziona se vuoi consentire l&apos;accesso.</translation>
     </message>
     <message>
         <source>KeePassXC HTTP Confirm Access</source>
-        <translation>KeePassXC HTTP Conferma Accesso</translation>
+        <translation>KeePassXC HTTP conferma accesso</translation>
     </message>
 </context>
 <context>
     <name>AutoType</name>
     <message>
         <source>Couldn&apos;t find an entry that matches the window title:</source>
-        <translation>Impossibile trovare una voce che corrisponda al titolo della finestra</translation>
+        <translation>Impossibile trovare un elemento che corrisponda al titolo della finestra:</translation>
     </message>
     <message>
         <source>Auto-Type - KeePassXC</source>
-        <translation>Auto-Completamento - KeePassXC</translation>
+        <translation>Auto completamento - KeePassXC</translation>
     </message>
 </context>
 <context>
@@ -123,11 +127,11 @@ Perfavore seleziona se vuoi consentire l&apos;accesso.</translation>
     <name>AutoTypeSelectDialog</name>
     <message>
         <source>Select entry to Auto-Type:</source>
-        <translation>Seleziona una voce per Auto-Type:</translation>
+        <translation>Seleziona un elemento per l&apos;auto completamento:</translation>
     </message>
     <message>
         <source>Auto-Type - KeePassXC</source>
-        <translation>Auto-Completamento - KeePassXC</translation>
+        <translation> KeePassXC - Auto completamento</translation>
     </message>
 </context>
 <context>
@@ -170,7 +174,7 @@ Perfavore seleziona se vuoi consentire l&apos;accesso.</translation>
     </message>
     <message>
         <source>Select a key file</source>
-        <translation>Seleziona il file chiave</translation>
+        <translation>Seleziona un file chiave</translation>
     </message>
     <message>
         <source>Do you really want to use an empty string as password?</source>
@@ -178,7 +182,7 @@ Perfavore seleziona se vuoi consentire l&apos;accesso.</translation>
     </message>
     <message>
         <source>Different passwords supplied.</source>
-        <translation>Sono state fornite password differenti.</translation>
+        <translation>Sono state inserite password differenti.</translation>
     </message>
     <message>
         <source>Failed to set %1 as the Key file:
@@ -196,7 +200,7 @@ Perfavore seleziona se vuoi consentire l&apos;accesso.</translation>
     </message>
     <message>
         <source>Refresh</source>
-        <translation>Ricarica</translation>
+        <translation>Aggiorna</translation>
     </message>
     <message>
         <source>Empty password</source>
@@ -204,18 +208,18 @@ Perfavore seleziona se vuoi consentire l&apos;accesso.</translation>
     </message>
     <message>
         <source>Changing master key failed: no YubiKey inserted.</source>
-        <translation>Cambio password principale fallito: nessuna YubiKey inserita.</translation>
+        <translation>Modifica password principale fallitoa. Nessuna YubiKey inserita.</translation>
     </message>
 </context>
 <context>
     <name>CloneDialog</name>
     <message>
         <source>Clone Options</source>
-        <translation>Opzioni di clonazione</translation>
+        <translation>Opzioni clonazione</translation>
     </message>
     <message>
         <source>Replace username and password with references</source>
-        <translation>Sostituisci nome user e password con riferimenti</translation>
+        <translation>Sostituisci nome utente e password con riferimenti</translation>
     </message>
     <message>
         <source>Copy history</source>
@@ -238,7 +242,7 @@ Perfavore seleziona se vuoi consentire l&apos;accesso.</translation>
     </message>
     <message>
         <source>size, rows, columns</source>
-        <translation>dimensione, righe. colonne</translation>
+        <translation>dimensione, righe, colonne</translation>
     </message>
     <message>
         <source>Encoding</source>
@@ -262,11 +266,11 @@ Perfavore seleziona se vuoi consentire l&apos;accesso.</translation>
     </message>
     <message>
         <source>First record has field names</source>
-        <translation>Il primo record ha i nomi dei campi</translation>
+        <translation>Il primo record contiene i nomi dei campi</translation>
     </message>
     <message>
         <source>Number of headers line to discard</source>
-        <translation>Numero di righe di intestazione da scartare</translation>
+        <translation>Numero righe di intestazione da scartare</translation>
     </message>
     <message>
         <source>Consider &apos;\&apos; an escape character</source>
@@ -278,7 +282,7 @@ Perfavore seleziona se vuoi consentire l&apos;accesso.</translation>
     </message>
     <message>
         <source>Column layout</source>
-        <translation>Disposizione di colonna</translation>
+        <translation>Disposizione colonna</translation>
     </message>
     <message>
         <source>Not present in CSV file</source>
@@ -286,7 +290,7 @@ Perfavore seleziona se vuoi consentire l&apos;accesso.</translation>
     </message>
     <message>
         <source>Empty fieldname </source>
-        <translation>Nome di campo vuoto</translation>
+        <translation>Nome campo vuoto</translation>
     </message>
     <message>
         <source>column </source>
@@ -302,7 +306,7 @@ Perfavore seleziona se vuoi consentire l&apos;accesso.</translation>
     </message>
     <message>
         <source>Error(s) detected in CSV file !</source>
-        <translation>Errore(i) rilevati nel file CSV!</translation>
+        <translation>Errore/i rilevati nel file CSV!</translation>
     </message>
     <message>
         <source> more messages skipped]</source>
@@ -315,7 +319,7 @@ Perfavore seleziona se vuoi consentire l&apos;accesso.</translation>
     <message>
         <source>CSV import: writer has errors:
 </source>
-        <translation>Importazione CSV: lo scrittore ha errori:
+        <translation>Importazione CSV: rilevati errori:
 </translation>
     </message>
 </context>
@@ -323,7 +327,7 @@ Perfavore seleziona se vuoi consentire l&apos;accesso.</translation>
     <name>CsvImportWizard</name>
     <message>
         <source>Import CSV file</source>
-        <translation>Importare un file CSV</translation>
+        <translation>Importa file CSV</translation>
     </message>
     <message>
         <source>Error</source>
@@ -389,7 +393,7 @@ Perfavore seleziona se vuoi consentire l&apos;accesso.</translation>
     </message>
     <message>
         <source>Refresh</source>
-        <translation>Ricarica</translation>
+        <translation>Aggiorna</translation>
     </message>
     <message>
         <source>Challenge Response:</source>
@@ -416,36 +420,36 @@ Perfavore seleziona se vuoi consentire l&apos;accesso.</translation>
     </message>
     <message>
         <source>Unable to open the database.</source>
-        <translation>Impossibile aprire il database</translation>
+        <translation>Impossibile aprire il database.</translation>
     </message>
     <message>
         <source>Success</source>
-        <translation>Successo</translation>
+        <translation>Completato</translation>
     </message>
     <message>
         <source>The database has been successfully repaired
 You can now save it.</source>
-        <translation>Il database è stato riparato con successo
+        <translation>Il database è stato correttamente riparato.
 Adesso puoi salvarlo.</translation>
     </message>
     <message>
         <source>Unable to repair the database.</source>
-        <translation>Impossibile riparare il database</translation>
+        <translation>Impossibile riparare il database.</translation>
     </message>
 </context>
 <context>
     <name>DatabaseSettingsWidget</name>
     <message>
         <source>Database name:</source>
-        <translation>Nome del database:</translation>
+        <translation>Nome database:</translation>
     </message>
     <message>
         <source>Database description:</source>
-        <translation>Descrizione del database:</translation>
+        <translation>Descrizione database:</translation>
     </message>
     <message>
         <source>Transform rounds:</source>
-        <translation>Round di trasformazione:</translation>
+        <translation>Arrotondamenti trasformazione:</translation>
     </message>
     <message>
         <source>Default username:</source>
@@ -453,23 +457,23 @@ Adesso puoi salvarlo.</translation>
     </message>
     <message>
         <source> MiB</source>
-        <translation>MiB</translation>
+        <translation> MB</translation>
     </message>
     <message>
         <source>Benchmark</source>
-        <translation>Prestazione</translation>
+        <translation>Prestazioni</translation>
     </message>
     <message>
         <source>Max. history items:</source>
-        <translation>Max. oggetti nella cronologia:</translation>
+        <translation>Oggetti max. nella cronologia:</translation>
     </message>
     <message>
         <source>Max. history size:</source>
-        <translation>Max. grandezza della cronologia:</translation>
+        <translation>Grandezza max. cronologia:</translation>
     </message>
     <message>
         <source>Use recycle bin</source>
-        <translation>Usa il cestino</translation>
+        <translation>Usa il Cestino</translation>
     </message>
     <message>
         <source>AES:  256 Bit   (default)</source>
@@ -488,7 +492,7 @@ Adesso puoi salvarlo.</translation>
     <name>DatabaseTabWidget</name>
     <message>
         <source>Root</source>
-        <translation>Root</translation>
+        <translation>Radice</translation>
     </message>
     <message>
         <source>KeePass 2 Database</source>
@@ -520,21 +524,21 @@ Adesso puoi salvarlo.</translation>
     </message>
     <message>
         <source>Close?</source>
-        <translation>Chiudere?</translation>
+        <translation>Vuoi chiudere?</translation>
     </message>
     <message>
         <source>Save changes?</source>
-        <translation>Salvare modifiche?</translation>
+        <translation>Vuoi salvare modifiche?</translation>
     </message>
     <message>
         <source>&quot;%1&quot; was modified.
 Save changes?</source>
         <translation>&quot;%1&quot; è stata modificato.
-Salvare le modifiche?</translation>
+Vuoi salvare le modifiche?</translation>
     </message>
     <message>
         <source>Writing the database failed.</source>
-        <translation>Scrittura del database non riuscita.</translation>
+        <translation>Scrittura del database fallita.</translation>
     </message>
     <message>
         <source>Save database as</source>
@@ -556,7 +560,7 @@ Salvare le modifiche?</translation>
         <source>Can't lock the database as you are currently editing it.
 Please press cancel to finish your changes or discard them.</source>
         <translation>Non è possibile bloccare il database dato che lo stai modificando.
-Premere Annulla per completare le modifiche o scartarle.</translation>
+Seleziona &apos;Annulla&apos; per completare le modifiche o scartarle.</translation>
     </message>
     <message>
         <source>This database has never been saved.
@@ -576,19 +580,19 @@ Altrimenti le modifiche verranno perse.</translation>
         <source>&quot;%1&quot; is in edit mode.
 Discard changes and close anyway?</source>
         <translation>&quot;%1&quot; è in modalità modifica.
-Annullare le modifiche e chiudere comunque?</translation>
+Vuoi annullare le modifiche e chiudere comunque?</translation>
     </message>
     <message>
         <source>Export database to CSV file</source>
-        <translation>Esporta il database come file CSV</translation>
+        <translation>Esporta database come file CSV</translation>
     </message>
     <message>
         <source>CSV file</source>
-        <translation>file CSV</translation>
+        <translation>File CSV</translation>
     </message>
     <message>
         <source>Writing the CSV file failed.</source>
-        <translation>Scrittura del file CSV non riuscita.</translation>
+        <translation>Scrittura file CSV fallita.</translation>
     </message>
     <message>
         <source>Unable to open the database.</source>
@@ -610,18 +614,18 @@ Vuoi salvare comunque?</translation>
     </message>
     <message>
         <source>Database already opened</source>
-        <translation>Database già caricato</translation>
+        <translation>Database già aperto</translation>
     </message>
     <message>
         <source>The database you are trying to open is locked by another instance of KeePassXC.
 
 Do you want to open it anyway?</source>
-        <translation>Il database che stai provando ad aprire è bloccato da una altra instanza di KeePassXC.
+        <translation>Il database che stai cercando di aprire è bloccato da un&apos;altra instanza di KeePassXC.
 Vuoi aprilo comunque?</translation>
     </message>
     <message>
         <source>Open read-only</source>
-        <translation>Aperto in sola lettura</translation>
+        <translation>Apri in sola lettura</translation>
     </message>
     <message>
         <source>File opened in read only mode.</source>
@@ -629,42 +633,42 @@ Vuoi aprilo comunque?</translation>
     </message>
     <message>
         <source>Open CSV file</source>
-        <translation>Apri un file CSV</translation>
+        <translation>Apri file CSV</translation>
     </message>
 </context>
 <context>
     <name>DatabaseWidget</name>
     <message>
         <source>Change master key</source>
-        <translation>Cambia chiave principale</translation>
+        <translation>Modifica chiave principale</translation>
     </message>
     <message>
         <source>Delete entry?</source>
-        <translation>Eliminare voce?</translation>
+        <translation>Vuoi eliminare l&apos;elemento?</translation>
     </message>
     <message>
         <source>Do you really want to delete the entry &quot;%1&quot; for good?</source>
-        <translation>Vuoi veramente eliminare la voce &quot;%1&quot;?</translation>
+        <translation>Vuoi veramente eliminare l&apos;elemento &quot;%1&quot;?</translation>
     </message>
     <message>
         <source>Delete entries?</source>
-        <translation>Eliminare voci?</translation>
+        <translation>Vuoi eliminare gli elementi?</translation>
     </message>
     <message>
         <source>Do you really want to delete %1 entries for good?</source>
-        <translation>Vuoi veramente eliminare %1 voci?</translation>
+        <translation>Vuoi veramente eliminare %1 elementi?</translation>
     </message>
     <message>
         <source>Move entries to recycle bin?</source>
-        <translation>Muovere le voci nel cestino?</translation>
+        <translation>Vuoi spostare gli elementi nel Cestino?</translation>
     </message>
     <message numerus="yes">
         <source>Do you really want to move %n entry(s) to the recycle bin?</source>
-        <translation><numerusform>Vuoi veramente spostare %n voce(i) nel cestino?</numerusform><numerusform>Vuoi veramente spostare %n voce(i) nel cestino?</numerusform></translation>
+        <translation><numerusform>Vuoi veramente spostare %n elemento nel Cestino?</numerusform><numerusform>Vuoi veramente spostare %n elementi nel Cestino?</numerusform></translation>
     </message>
     <message>
         <source>Delete group?</source>
-        <translation>Eliminare gruppo?</translation>
+        <translation>Vuoi eliminare il gruppo?</translation>
     </message>
     <message>
         <source>Do you really want to delete the group &quot;%1&quot; for good?</source>
@@ -676,23 +680,23 @@ Vuoi aprilo comunque?</translation>
     </message>
     <message>
         <source>Move entry to recycle bin?</source>
-        <translation>Muovere la voce nel cestino?</translation>
+        <translation>Vuoi spostare l&apos;elemento nel Cestino?</translation>
     </message>
     <message>
         <source>Do you really want to move entry &quot;%1&quot; to the recycle bin?</source>
-        <translation>Vuoi veramente spostare la voce &quot;%1&quot; nel cestino?</translation>
+        <translation>Vuoi veramente spostare l&apos;elemento &quot;%1&quot; nel Cestino?</translation>
     </message>
     <message>
         <source>Searching...</source>
-        <translation>Ricerca in corso...</translation>
+        <translation>Ricerca...</translation>
     </message>
     <message>
         <source>No current database.</source>
-        <translation>Nessun database corrente.</translation>
+        <translation>Nessun database attuale.</translation>
     </message>
     <message>
         <source>No source database, nothing to do.</source>
-        <translation>Nessun database sorgente, niente da fare.</translation>
+        <translation>Nessun database sorgente. Nessuna operazione da fare.</translation>
     </message>
     <message>
         <source>Search Results (%1)</source>
@@ -704,11 +708,11 @@ Vuoi aprilo comunque?</translation>
     </message>
     <message>
         <source>Execute command?</source>
-        <translation>Esegui comando?</translation>
+        <translation>Vuoi eseguire il comando?</translation>
     </message>
     <message>
         <source>Do you really want to execute the following command?&lt;br&gt;&lt;br&gt;%1&lt;br&gt;</source>
-        <translation>Sei sicuro di voler eseguire il comando seguente?&lt;br&gt;&lt;br&gt;%1&lt;br&gt;</translation>
+        <translation>Sei sicuro di voler eseguire il seguente comando?&lt;br&gt;&lt;br&gt;%1&lt;br&gt;</translation>
     </message>
     <message>
         <source>Remember my choice</source>
@@ -716,19 +720,19 @@ Vuoi aprilo comunque?</translation>
     </message>
     <message>
         <source>Autoreload Request</source>
-        <translation>Auto ricarica le richieste</translation>
+        <translation>Ricaricamento automatico richieste</translation>
     </message>
     <message>
         <source>The database file has changed. Do you want to load the changes?</source>
-        <translation>Il file del database è cambiato. Vuoi caricare le modifiche?</translation>
+        <translation>Il file del database è stato modificato. Vuoi caricare le modifiche?</translation>
     </message>
     <message>
         <source>Merge Request</source>
-        <translation>Richiesta di fusione</translation>
+        <translation>Richiesta di unione</translation>
     </message>
     <message>
         <source>The database file has changed and you have unsaved changes.Do you want to merge your changes?</source>
-        <translation>Il file del database è cambiato e ci sono delle modifiche non salvate. Vuoi unire i tuoi cambiamenti.</translation>
+        <translation>Il file del database è stato modificato e ci sono delle modifiche non salvate. Vuoi unire i tuoi cambiamenti?</translation>
     </message>
     <message>
         <source>Could not open the new database file while attempting to autoreload this database.</source>
@@ -736,18 +740,18 @@ Vuoi aprilo comunque?</translation>
     </message>
     <message>
         <source>Empty recycle bin?</source>
-        <translation>Svuotare il cestino?</translation>
+        <translation>Vuoi svuotare il Cestino?</translation>
     </message>
     <message>
         <source>Are you sure you want to permanently delete everything from your recycle bin?</source>
-        <translation>Sei sicuro di voler eliminare tutto definitivamente dal tuo Cestino?</translation>
+        <translation>Sei sicuro di voler eliminare tutto definitivamente dal Cestino?</translation>
     </message>
 </context>
 <context>
     <name>EditEntryWidget</name>
     <message>
         <source>Entry</source>
-        <translation>Voce</translation>
+        <translation>Elemento</translation>
     </message>
     <message>
         <source>Advanced</source>
@@ -759,7 +763,7 @@ Vuoi aprilo comunque?</translation>
     </message>
     <message>
         <source>Auto-Type</source>
-        <translation>Auto-Type</translation>
+        <translation>Completamento automatico</translation>
     </message>
     <message>
         <source>Properties</source>
@@ -771,19 +775,19 @@ Vuoi aprilo comunque?</translation>
     </message>
     <message>
         <source>Entry history</source>
-        <translation>Cronologia voce</translation>
+        <translation>Cronologia elemento</translation>
     </message>
     <message>
         <source>Add entry</source>
-        <translation>Aggiungere voce</translation>
+        <translation>Aggiungi elemento</translation>
     </message>
     <message>
         <source>Edit entry</source>
-        <translation>Modificare voce</translation>
+        <translation>Modifica elemento</translation>
     </message>
     <message>
         <source>Different passwords supplied.</source>
-        <translation>Sono state immesse password differenti.</translation>
+        <translation>Sono state inserite password differenti.</translation>
     </message>
     <message>
         <source>New attribute</source>
@@ -799,7 +803,7 @@ Vuoi aprilo comunque?</translation>
     </message>
     <message>
         <source>Save attachment</source>
-        <translation>Salvare l&apos;allegato</translation>
+        <translation>Salva allegato</translation>
     </message>
     <message>
         <source>Unable to save the attachment:
@@ -825,7 +829,7 @@ Vuoi aprilo comunque?</translation>
     </message>
     <message>
         <source>Confirm Remove</source>
-        <translation>Conferma l&apos;eliminazione</translation>
+        <translation>Conferma eliminazione</translation>
     </message>
     <message>
         <source>Are you sure you want to remove this attribute?</source>
@@ -833,7 +837,7 @@ Vuoi aprilo comunque?</translation>
     </message>
     <message>
         <source>[PROTECTED] Press reveal to view or edit</source>
-        <translation>[PROTETTO] Premere rivelare per visualizzare o modificare</translation>
+        <translation>[PROTETTO] Seleziona &apos;Rileva&apos; per visualizzare o modificare</translation>
     </message>
     <message>
         <source>Are you sure you want to remove this attachment?</source>
@@ -844,7 +848,7 @@ Vuoi aprilo comunque?</translation>
     <name>EditEntryWidgetAdvanced</name>
     <message>
         <source>Additional attributes</source>
-        <translation>Attributi addizionali</translation>
+        <translation>Attributi aggiuntivi</translation>
     </message>
     <message>
         <source>Add</source>
@@ -868,22 +872,22 @@ Vuoi aprilo comunque?</translation>
     </message>
     <message>
         <source>Edit Name</source>
-        <translation>Modifica il nome</translation>
+        <translation>Modifica nome</translation>
     </message>
     <message>
         <source>Protect</source>
-        <translation>Proteggere</translation>
+        <translation>Proteggi</translation>
     </message>
     <message>
         <source>Reveal</source>
-        <translation>Rivelare</translation>
+        <translation>Rivela</translation>
     </message>
 </context>
 <context>
     <name>EditEntryWidgetAutoType</name>
     <message>
         <source>Enable Auto-Type for this entry</source>
-        <translation>Abilita Auto-Type per questa voce</translation>
+        <translation>Abilita completamento automatico per questo elemento</translation>
     </message>
     <message>
         <source>+</source>
@@ -899,11 +903,11 @@ Vuoi aprilo comunque?</translation>
     </message>
     <message>
         <source>Inherit default Auto-Type sequence from the &amp;group</source>
-        <translation>Eredita la sequenza per l&apos;Auto-Completamento dal &amp;gruppo</translation>
+        <translation>Eredita la sequenza per il completamento automatico dal &amp;gruppo</translation>
     </message>
     <message>
         <source>&amp;Use custom Auto-Type sequence:</source>
-        <translation>&amp;Usa sequenza di Auto-Completamento personalizzata:</translation>
+        <translation>&amp;Usa sequenza di compeltamento automatico personalizzata:</translation>
     </message>
     <message>
         <source>Use default se&amp;quence</source>
@@ -915,14 +919,14 @@ Vuoi aprilo comunque?</translation>
     </message>
     <message>
         <source>Window Associations</source>
-        <translation>Associazioni di finestra</translation>
+        <translation>Associazioni finestra</translation>
     </message>
 </context>
 <context>
     <name>EditEntryWidgetHistory</name>
     <message>
         <source>Show</source>
-        <translation>Mostra</translation>
+        <translation>Visualizza</translation>
     </message>
     <message>
         <source>Restore</source>
@@ -961,7 +965,7 @@ Vuoi aprilo comunque?</translation>
     </message>
     <message>
         <source>Expires</source>
-        <translation>Scade:</translation>
+        <translation>Scade</translation>
     </message>
     <message>
         <source>Presets</source>
@@ -1027,15 +1031,15 @@ Vuoi aprilo comunque?</translation>
     </message>
     <message>
         <source>Auto-Type</source>
-        <translation>Auto-Type</translation>
+        <translation>Completamento automatico</translation>
     </message>
     <message>
         <source>&amp;Use default Auto-Type sequence of parent group</source>
-        <translation>&amp;Usa la sequenza di auto-digitazione predefinita del gruppo genitore</translation>
+        <translation>&amp;Usa la sequenza di completamento automatico predefinita del gruppo genitore</translation>
     </message>
     <message>
         <source>Set default Auto-Type se&amp;quence</source>
-        <translation>Imposta la se&amp;quenza predefinita di auto-digitazione</translation>
+        <translation>Imposta se&amp;quenza predefinita di completamento automatico</translation>
     </message>
 </context>
 <context>
@@ -1066,7 +1070,7 @@ Vuoi aprilo comunque?</translation>
     </message>
     <message>
         <source>Unable to fetch favicon.</source>
-        <translation>Impossibile scaricare la favicon.</translation>
+        <translation>Impossibile scaricare favicon.</translation>
     </message>
     <message>
         <source>Can&apos;t read icon</source>
@@ -1082,19 +1086,19 @@ Vuoi aprilo comunque?</translation>
     </message>
     <message>
         <source>Confirm Delete</source>
-        <translation>Conferma la cancellazione</translation>
+        <translation>Conferma eliminazione</translation>
     </message>
     <message>
         <source>This icon is used by %1 entries, and will be replaced by the default icon. Are you sure you want to delete it?</source>
-        <translation>Questa icona viene utilizzata da %1 voci, e sarà sostituita dall&apos;icona predefinita. Sei sicuro di volerla eliminare?</translation>
+        <translation>Questa icona viene usata da %1 elementi, e sarà sostituita dall&apos;icona predefinita. Sei sicuro di volerla eliminare?</translation>
     </message>
     <message>
         <source>Hint: You can enable Google as a fallback under Tools&gt;Settings&gt;Security</source>
-        <translation>Suggerimento: è possibile abilitare Google come ripiego in Strumenti&gt;Impostazioni&gt;Sicurezza</translation>
+        <translation>Suggerimento: è possibile abilitare Google come alternativa in &apos;Strumenti&apos;&gt;&apos;Impostazioni&apos;&gt;&apos;Sicurezza&apos;</translation>
     </message>
     <message>
         <source>Custom icon already exists</source>
-        <translation type="unfinished"/>
+        <translation>L&apos;icona personalizzata esiste già</translation>
     </message>
 </context>
 <context>
@@ -1120,7 +1124,7 @@ Vuoi aprilo comunque?</translation>
     <name>Entry</name>
     <message>
         <source> - Clone</source>
-        <translation>- Clona</translation>
+        <translation> - Clona</translation>
     </message>
 </context>
 <context>
@@ -1188,11 +1192,11 @@ Vuoi aprilo comunque?</translation>
     </message>
     <message>
         <source>Character Types</source>
-        <translation>Tipi di carattere</translation>
+        <translation>Tipi carattere</translation>
     </message>
     <message>
         <source>Upper Case Letters</source>
-        <translation>Lettere Maiuscole</translation>
+        <translation>Lettere maiuscole</translation>
     </message>
     <message>
         <source>A-Z</source>
@@ -1200,7 +1204,7 @@ Vuoi aprilo comunque?</translation>
     </message>
     <message>
         <source>Lower Case Letters</source>
-        <translation>Lettere Minuscole</translation>
+        <translation>Lettere minuscole</translation>
     </message>
     <message>
         <source>a-z</source>
@@ -1273,7 +1277,7 @@ Vuoi aprilo comunque?</translation>
     </message>
     <message>
         <source>Root</source>
-        <translation>Root</translation>
+        <translation>Radice</translation>
     </message>
     <message>
         <source>Unable to calculate master key</source>
@@ -1313,8 +1317,19 @@ You can import it by clicking on Database &gt; 'Import KeePass 1 database...'.
 This is a one-way migration. You won&apos;t be able to open the imported database with the old KeePassX 0.4 version.</source>
         <translation>Il file selezionato è un vecchio database di KeePass 1 (.kdb).
 
-Puoi importarlo facendo clic su Database &gt; &apos;Importa database KeePass 1...&apos;.
-Si tratta di una migrazione unidirezionale. Non sarai in grado di aprire il database importato con la vecchia versione di KeePassX 0.4.</translation>
+È possibile importarlo facendo clic su &apos;Database&apos; &gt; &apos;Importa database KeePass 1...&apos;.
+Si tratta di una migrazione unidirezionale. Non sarà possibile aprire il database importato con la vecchia versione di KeePassX 0.4.</translation>
+    </message>
+</context>
+<context>
+    <name>KeePass2Writer</name>
+    <message>
+        <source>Unable to issue challenge-response.</source>
+        <translation>Non in grado dare la risposta di verifica.</translation>
+    </message>
+    <message>
+        <source>Unable to calculate master key</source>
+        <translation>Impossibile calcolare la chiave principale</translation>
     </message>
 </context>
 <context>
@@ -1333,11 +1348,11 @@ Si tratta di una migrazione unidirezionale. Non sarai in grado di aprire il data
     </message>
     <message>
         <source>Another instance of KeePassXC is already running.</source>
-        <translation>Un&apos;altra istanza di KeePassXC è già in esecuzione.</translation>
+        <translation>È già in esecuzione un&apos;altra istanza di KeePassXC.</translation>
     </message>
     <message>
         <source>Existing single-instance lock file is invalid. Launching new instance.</source>
-        <translation type="unfinished"/>
+        <translation>Il file di blocco singola istanza non è valido. Esegui una nuova istanza.</translation>
     </message>
 </context>
 <context>
@@ -1352,11 +1367,11 @@ Si tratta di una migrazione unidirezionale. Non sarai in grado di aprire il data
     </message>
     <message>
         <source>Copy username to clipboard</source>
-        <translation>Copia nome utente negli appunti</translation>
+        <translation>Copia nome utente negli Appunti</translation>
     </message>
     <message>
         <source>Copy password to clipboard</source>
-        <translation>Copia password negli appunti</translation>
+        <translation>Copia password negli Appunti</translation>
     </message>
     <message>
         <source>Settings</source>
@@ -1364,7 +1379,7 @@ Si tratta di una migrazione unidirezionale. Non sarai in grado di aprire il data
     </message>
     <message>
         <source>Show toolbar</source>
-        <translation>Mostra barra degli strumenti</translation>
+        <translation>Visualizza barra strumenti</translation>
     </message>
     <message>
         <source>read-only</source>
@@ -1372,7 +1387,7 @@ Si tratta di una migrazione unidirezionale. Non sarai in grado di aprire il data
     </message>
     <message>
         <source>Toggle window</source>
-        <translation>Cambia finestra</translation>
+        <translation>Abilita/disabilita finestra</translation>
     </message>
     <message>
         <source>KeePass 2 Database</source>
@@ -1384,11 +1399,11 @@ Si tratta di una migrazione unidirezionale. Non sarai in grado di aprire il data
     </message>
     <message>
         <source>Save repaired database</source>
-        <translation>Salva il database riparato</translation>
+        <translation>Salva database riparato</translation>
     </message>
     <message>
         <source>Writing the database failed.</source>
-        <translation>Scrittura del database non riuscita.</translation>
+        <translation>Scrittura database fallita.</translation>
     </message>
     <message>
         <source>&amp;Recent databases</source>
@@ -1400,7 +1415,7 @@ Si tratta di una migrazione unidirezionale. Non sarai in grado di aprire il data
     </message>
     <message>
         <source>Copy att&amp;ribute to clipboard</source>
-        <translation>Copia gli att&amp;ributi nella clipboard</translation>
+        <translation>Copia gli att&amp;ributi negli Appunti</translation>
     </message>
     <message>
         <source>&amp;Groups</source>
@@ -1440,7 +1455,7 @@ Si tratta di una migrazione unidirezionale. Non sarai in grado di aprire il data
     </message>
     <message>
         <source>&amp;View/Edit entry</source>
-        <translation>&amp;Vedi/Modifica l&apos;elemento</translation>
+        <translation>&amp;Visualizza/modifica elemento</translation>
     </message>
     <message>
         <source>&amp;Delete entry</source>
@@ -1460,7 +1475,7 @@ Si tratta di una migrazione unidirezionale. Non sarai in grado di aprire il data
     </message>
     <message>
         <source>&amp;Database settings</source>
-        <translation>Impostazioni &amp;Database</translation>
+        <translation>Impostazioni &amp;database</translation>
     </message>
     <message>
         <source>&amp;Clone entry</source>
@@ -1496,7 +1511,7 @@ Si tratta di una migrazione unidirezionale. Non sarai in grado di aprire il data
     </message>
     <message>
         <source>&amp;Perform Auto-Type</source>
-        <translation>&amp;Esegui Auto-Completamento</translation>
+        <translation>&amp;Esegui completamento automatico</translation>
     </message>
     <message>
         <source>&amp;Open URL</source>
@@ -1520,11 +1535,11 @@ Si tratta di una migrazione unidirezionale. Non sarai in grado di aprire il data
     </message>
     <message>
         <source>Password Generator</source>
-        <translation>Generatore Password</translation>
+        <translation>Genera password</translation>
     </message>
     <message>
         <source>Clear history</source>
-        <translation>Cancella cronologia</translation>
+        <translation>Azzera cronologia</translation>
     </message>
     <message>
         <source>&amp;Database</source>
@@ -1540,7 +1555,7 @@ Si tratta di una migrazione unidirezionale. Non sarai in grado di aprire il data
     </message>
     <message>
         <source>Empty recycle bin</source>
-        <translation>Svuota il cestino</translation>
+        <translation>Svuota il Cestino</translation>
     </message>
     <message>
         <source>Access error for config file %1</source>
@@ -1552,7 +1567,7 @@ Si tratta di una migrazione unidirezionale. Non sarai in grado di aprire il data
     </message>
     <message>
         <source>Please touch the button on your YubiKey!</source>
-        <translation>Prego tocca il pulsante sulla tua YubiKey!</translation>
+        <translation>Seleziona il pulsante nelal YubiKey!</translation>
     </message>
     <message>
         <source>&amp;Help</source>
@@ -1564,27 +1579,27 @@ Si tratta di una migrazione unidirezionale. Non sarai in grado di aprire il data
     </message>
     <message>
         <source>Sa&amp;ve database as...</source>
-        <translation>Sal&amp;va il database come...</translation>
+        <translation>Sal&amp;va database come...</translation>
     </message>
     <message>
         <source>Change &amp;master key...</source>
-        <translation>Ca&amp;mbia la chiave principale...</translation>
+        <translation>&amp;Modifica chiave principale...</translation>
     </message>
     <message>
         <source>&amp;Export to CSV file...</source>
-        <translation>&amp;Esporta su un file CSV...</translation>
+        <translation>&amp;Esporta in file CSV...</translation>
     </message>
     <message>
         <source>Import KeePass 1 database...</source>
-        <translation>Importa un database di KeePass 1...</translation>
+        <translation>Importa database di KeePass 1...</translation>
     </message>
     <message>
         <source>Import CSV file...</source>
-        <translation>Importa un file CSV...</translation>
+        <translation>Importa file CSV...</translation>
     </message>
     <message>
         <source>Re&amp;pair database...</source>
-        <translation>Ri&amp;para il database...</translation>
+        <translation>Ri&amp;para database...</translation>
     </message>
     <message>
         <source>Set up TOTP...</source>
@@ -1595,7 +1610,7 @@ Si tratta di una migrazione unidirezionale. Non sarai in grado di aprire il data
     <name>OptionDialog</name>
     <message>
         <source>Dialog</source>
-        <translation>Dialogo</translation>
+        <translation>Finestra</translation>
     </message>
     <message>
         <source>General</source>
@@ -1603,15 +1618,15 @@ Si tratta di una migrazione unidirezionale. Non sarai in grado di aprire il data
     </message>
     <message>
         <source>Sh&amp;ow a notification when credentials are requested</source>
-        <translation>M&amp;ostra una notifica quando sono richeste le credenziali</translation>
+        <translation>Visualizza una n&amp;otifica quando sono richeste le credenziali</translation>
     </message>
     <message>
         <source>Sort matching entries by &amp;username</source>
-        <translation>Ordina le voci trovate per &amp;nome utente</translation>
+        <translation>Ordina elementi trovati per &amp;nome utente</translation>
     </message>
     <message>
         <source>Re&amp;move all stored permissions from entries in active database</source>
-        <translation>R&amp;imuovi tutti i permessi presenti dalle voci nel database attivo</translation>
+        <translation>R&amp;imuovi tutti i permessi presenti negli elementi nel database attivo</translation>
     </message>
     <message>
         <source>Advanced</source>
@@ -1619,15 +1634,15 @@ Si tratta di una migrazione unidirezionale. Non sarai in grado di aprire il data
     </message>
     <message>
         <source>Always allow &amp;access to entries</source>
-        <translation>Permetti  sempre di &amp;accedere alle voci</translation>
+        <translation>Permetti  sempre di &amp;accedere agli elementi</translation>
     </message>
     <message>
         <source>Always allow &amp;updating entries</source>
-        <translation>Permetti sempre di &amp;aggiornare le voci</translation>
+        <translation>Permetti sempre di &amp;aggiornare gli elementi</translation>
     </message>
     <message>
         <source>Searc&amp;h in all opened databases for matching entries</source>
-        <translation>Cerc&amp;a in tutti i database aperti per la ricerca delle voci</translation>
+        <translation>Cerc&amp;a in tutti i database aperti gli elementi corrispondenti</translation>
     </message>
     <message>
         <source>HTTP Port:</source>
@@ -1643,7 +1658,7 @@ Si tratta di una migrazione unidirezionale. Non sarai in grado di aprire il data
     </message>
     <message>
         <source>Sort &amp;matching entries by title</source>
-        <translation>Ordina le voci per &amp;titolo</translation>
+        <translation>Ordina gli elementi per &amp;titolo</translation>
     </message>
     <message>
         <source>KeePassXC will listen to this port on 127.0.0.1</source>
@@ -1656,8 +1671,8 @@ Si tratta di una migrazione unidirezionale. Non sarai in grado di aprire il data
     <message>
         <source>Cannot bind to privileged ports below 1024!
 Using default port 19455.</source>
-        <translation>Non è possibile collegarsi a porte sotto la 1024!
-Utilizza la porta predefinita 19455.</translation>
+        <translation>Non è possibile usare porte sotto la 1024!
+Usa la porta predefinita 19455.</translation>
     </message>
     <message>
         <source>R&amp;emove all shared encryption keys from active database</source>
@@ -1673,7 +1688,7 @@ Utilizza la porta predefinita 19455.</translation>
     </message>
     <message>
         <source>This is required for accessing your databases from ChromeIPass or PassIFox</source>
-        <translation>Questo è necessario per accedere ai tuoi database da ChromeIPass o PassIFox</translation>
+        <translation>Questo è necessario per accedere ai database da ChromeIPass o PassIFox</translation>
     </message>
     <message>
         <source>Enable KeePassHTTP server</source>
@@ -1681,23 +1696,23 @@ Utilizza la porta predefinita 19455.</translation>
     </message>
     <message>
         <source>Only returns the best matches for a specific URL instead of all entries for the whole domain.</source>
-        <translation>Restituisce solo le corrispondenze migliori per un URL specifico invece di tutte le voci per l&apos;intero dominio.</translation>
+        <translation>Restituisci solo le corrispondenze migliori per un&apos;URL specifica invece di tutte gli elementi per l&apos;intero dominio.</translation>
     </message>
     <message>
         <source>&amp;Return only best matching entries</source>
-        <translation>&amp;Restituisci solo le migliori voci corrispondenti</translation>
+        <translation>&amp;Restituisci solo gli elementi corrispondenti migliori</translation>
     </message>
     <message>
         <source>Only entries with the same scheme (http://, https://, ftp://, ...) are returned.</source>
-        <translation>Solo le voci con lo stesso schema (http://, https://, ftp: //, ...) vengono restituite.</translation>
+        <translation>Solo gli elementi con lo stesso schema (http://, https://, ftp: //, ...) vengono restituite.</translation>
     </message>
     <message>
         <source>&amp;Match URL schemes</source>
-        <translation>Co&amp;mbina gli schemi URL</translation>
+        <translation>Sche&amp;ma corrispndenza URL</translation>
     </message>
     <message>
         <source>Password Generator</source>
-        <translation>Generatore Password</translation>
+        <translation>Genera password</translation>
     </message>
     <message>
         <source>Only the selected database has to be connected with a client.</source>
@@ -1718,7 +1733,7 @@ Modificale solo se sai quello che stai facendo.</translation>
     </message>
     <message>
         <source>Character Types</source>
-        <translation>Tipi di carattere</translation>
+        <translation>Tipi carattere</translation>
     </message>
     <message>
         <source>Upper Case Letters</source>
@@ -1794,7 +1809,7 @@ Modificale solo se sai quello che stai facendo.</translation>
     </message>
     <message>
         <source>Good</source>
-        <translation>Sufficente</translation>
+        <translation>Buona</translation>
     </message>
     <message>
         <source>Excellent</source>
@@ -1810,19 +1825,19 @@ Modificale solo se sai quello che stai facendo.</translation>
     </message>
     <message>
         <source>Passphrase</source>
-        <translation>Frase d&apos;accesso</translation>
+        <translation>Frase accesso</translation>
     </message>
     <message>
         <source>Wordlist:</source>
-        <translation>Elenco di termini:</translation>
+        <translation>Elenco termini:</translation>
     </message>
     <message>
         <source>Word Count:</source>
-        <translation>Conteggio delle parole:</translation>
+        <translation>Conteggio parole:</translation>
     </message>
     <message>
         <source>Word Separator:</source>
-        <translation>Separatore delle parole:</translation>
+        <translation>Separatore parole:</translation>
     </message>
     <message>
         <source>Copy</source>
@@ -1887,7 +1902,7 @@ Modificale solo se sai quello che stai facendo.</translation>
     </message>
     <message>
         <source>YubiKey[%1] Challenge Response - Slot %2 - %3</source>
-        <translation>YubiKey [%1] Risposta di verifica - Slot %2 - %3</translation>
+        <translation>YubiKey [%1] risposta di verifica - slot %2 - %3</translation>
     </message>
     <message>
         <source>Press</source>
@@ -1895,7 +1910,7 @@ Modificale solo se sai quello che stai facendo.</translation>
     </message>
     <message>
         <source>Passive</source>
-        <translation>Passivo</translation>
+        <translation>Passiva</translation>
     </message>
 </context>
 <context>
@@ -1936,7 +1951,7 @@ Modificale solo se sai quello che stai facendo.</translation>
     <name>SearchWidget</name>
     <message>
         <source>Case Sensitive</source>
-        <translation>Case sensitive</translation>
+        <translation>Sensibile maiuscole/minuscole</translation>
     </message>
     <message>
         <source>Search</source>
@@ -1944,7 +1959,7 @@ Modificale solo se sai quello che stai facendo.</translation>
     </message>
     <message>
         <source>Clear</source>
-        <translation>Pulisci</translation>
+        <translation>Azzera</translation>
     </message>
     <message>
         <source>Search...</source>
@@ -1960,7 +1975,7 @@ Modificale solo se sai quello che stai facendo.</translation>
     <message>
         <source>A shared encryption-key with the name &quot;%1&quot; already exists.
 Do you want to overwrite it?</source>
-        <translation>Una chiave di criptazione condivisa con il nome &quot;%1&quot; già esiste.
+        <translation>Una chiave di criptazione condivisa con il nome &quot;%1&quot; esiste già.
 Vuoi sovrascriverla?</translation>
     </message>
     <message>
@@ -1971,11 +1986,11 @@ Vuoi sovrascriverla?</translation>
         <source>The active database is locked!
 Please unlock the selected database or choose another one which is unlocked.</source>
         <translation>Il database attivo è bloccato!
-Sblocca il database selezionato o scegli un altro che è sbloccato</translation>
+Sblocca il database selezionato o scegli un altro database sbloccato.</translation>
     </message>
     <message>
         <source>Successfully removed %1 encryption-%2 from KeePassX/Http Settings.</source>
-        <translation>Rimosso con successo %1 encryption-%2 dalle impostazioni KeePassX/Http.</translation>
+        <translation>Rimosso correttamente %1 encryption-%2 dalle impostazioni KeePassX/Http.</translation>
     </message>
     <message>
         <source>No shared encryption-keys found in KeePassHttp Settings.</source>
@@ -1983,11 +1998,11 @@ Sblocca il database selezionato o scegli un altro che è sbloccato</translation>
     </message>
     <message>
         <source>The active database does not contain an entry of KeePassHttp Settings.</source>
-        <translation>Il database attivo non contiene nessuna voce delle impostazioni di KeePassHttp.</translation>
+        <translation>Il database attivo non contiene nessun elemento delle impostazioni di KeePassHttp.</translation>
     </message>
     <message>
         <source>Removing stored permissions...</source>
-        <translation>Rimuovi i permessi salvati...</translation>
+        <translation>Rimozione dei permessi salvati...</translation>
     </message>
     <message>
         <source>Abort</source>
@@ -1995,11 +2010,11 @@ Sblocca il database selezionato o scegli un altro che è sbloccato</translation>
     </message>
     <message>
         <source>Successfully removed permissions from %1 %2.</source>
-        <translation>Permessi rimossi con successo da %1 %2.</translation>
+        <translation>Permessi rimossi correttamente da %1 %2.</translation>
     </message>
     <message>
         <source>The active database does not contain an entry with permissions.</source>
-        <translation>Il database attivo non contiene una voce con permessi.</translation>
+        <translation>Il database attivo non contiene un elemento con permessi.</translation>
     </message>
     <message>
         <source>KeePassXC: New key association request</source>
@@ -2010,40 +2025,40 @@ Sblocca il database selezionato o scegli un altro che è sbloccato</translation>
 If you would like to allow it access to your KeePassXC database
 give it a unique name to identify and accept it.</source>
         <translation>Hai ricevuto una richiesta di associazione per la chiave sovrastante.
-Se vuoi permetterle di accedere al tuo database KeePassXC
+Se vuoi permetterle di accedere al database KeePassXC
 imposta un nome unico per identificarla ed accettarla.</translation>
     </message>
     <message>
         <source>KeePassXC: Overwrite existing key?</source>
-        <translation>KeePassXC: Sovrascrivere chiave esistente?</translation>
+        <translation>KeePassXC- Vuoi sovrascrivere la chiave esistente?</translation>
     </message>
     <message>
         <source>KeePassXC: Update Entry</source>
-        <translation>KeePassXC: Aggiorna voce</translation>
+        <translation>KeePassXC- Aggiorna elemento</translation>
     </message>
     <message>
         <source>KeePassXC: Database locked!</source>
-        <translation>KeePassXC: Database bloccato!</translation>
+        <translation>KeePassXC- Database bloccato!</translation>
     </message>
     <message>
         <source>KeePassXC: Removed keys from database</source>
-        <translation>KeePassXC: Rimuovi chiavi dal database</translation>
+        <translation>KeePassXC - Chiavi rimosse dal database</translation>
     </message>
     <message>
         <source>KeePassXC: No keys found</source>
-        <translation>KeePassXC: Nessuna chiave trovata</translation>
+        <translation>KeePassXC - Nessuna chiave trovata</translation>
     </message>
     <message>
         <source>KeePassXC: Settings not available!</source>
-        <translation>KeePassXC: Impostazioni non disponibili!</translation>
+        <translation>KeePassXC - Impostazioni non disponibili!</translation>
     </message>
     <message>
         <source>KeePassXC: Removed permissions</source>
-        <translation>KeePassXC: Rimossi permessi</translation>
+        <translation>KeePassXC - Permessi rimossi</translation>
     </message>
     <message>
         <source>KeePassXC: No entry with permissions found!</source>
-        <translation>KeePassXC: Nessuna voce con permessi trovata!</translation>
+        <translation>KeePassXC - Nessun elemento con permessi trovata!</translation>
     </message>
 </context>
 <context>
@@ -2081,15 +2096,15 @@ imposta un nome unico per identificarla ed accettarla.</translation>
     </message>
     <message>
         <source>Minimize when copying to clipboard</source>
-        <translation>Minimizza quando si copia negli appunti</translation>
+        <translation>Minimizza quando si copia negli Appunti</translation>
     </message>
     <message>
         <source>Use group icon on entry creation</source>
-        <translation>Usa l&apos;icona del gruppo alla creazione di una voce</translation>
+        <translation>Usa icona del gruppo alla creazione di un elemento</translation>
     </message>
     <message>
         <source>Global Auto-Type shortcut</source>
-        <translation>Scorciatoia Auto-Type globale</translation>
+        <translation>Scorciatoia completamento automatico globale</translation>
     </message>
     <message>
         <source>Language</source>
@@ -2097,7 +2112,7 @@ imposta un nome unico per identificarla ed accettarla.</translation>
     </message>
     <message>
         <source>Show a system tray icon</source>
-        <translation>Mostra un&apos;icona nell&apos;area di notifica del sistema</translation>
+        <translation>Visualizza un&apos;icona nell&apos;area di notifica del sistema</translation>
     </message>
     <message>
         <source>Hide window to system tray when minimized</source>
@@ -2105,7 +2120,7 @@ imposta un nome unico per identificarla ed accettarla.</translation>
     </message>
     <message>
         <source>Load previous databases on startup</source>
-        <translation>Carica i database precedenti all&apos;avvio</translation>
+        <translation>All&apos;avvio carica i database precedenti</translation>
     </message>
     <message>
         <source>Automatically reload the database when modified externally</source>
@@ -2129,23 +2144,23 @@ imposta un nome unico per identificarla ed accettarla.</translation>
     </message>
     <message>
         <source>Don&apos;t mark database as modified for non-data changes (e.g., expanding groups)</source>
-        <translation>Non contrassegnare il database come modificato per modifiche non riguardanti i dati (ad es., espansione di gruppi)</translation>
+        <translation>Non contrassegnare il database come modificato per modifiche non riguardanti i dati (ad es. espansione dei gruppi)</translation>
     </message>
     <message>
         <source>Auto-Type</source>
-        <translation>Auto-Type</translation>
+        <translation>Completamento automatico</translation>
     </message>
     <message>
         <source>Use entry title and URL to match windows for global Auto-Type</source>
-        <translation>Usa il titolo della voce e l&apos;URL per abbinare le finestre per l&apos;auto-digitazione globale</translation>
+        <translation>Usa il titolo dell&apos;elemento e l&apos;URL per abbinare le finestre per il completamento automatico globale</translation>
     </message>
     <message>
         <source>Always ask before performing Auto-Type</source>
-        <translation>Chiedi sempre prima di effettuare l&apos;auto-digitazione</translation>
+        <translation>Chiedi sempre prima di effettuare il completamento automatico</translation>
     </message>
     <message>
         <source>Auto-Type delay</source>
-        <translation>Ritardo dell&apos;auto-digitazione</translation>
+        <translation>Ritardo completamento automatico</translation>
     </message>
     <message>
         <source> ms</source>
@@ -2160,7 +2175,7 @@ imposta un nome unico per identificarla ed accettarla.</translation>
     <name>SettingsWidgetSecurity</name>
     <message>
         <source>Clear clipboard after</source>
-        <translation>Pulisci appunti dopo</translation>
+        <translation>Svuota Appunti dopo</translation>
     </message>
     <message>
         <source> sec</source>
@@ -2172,7 +2187,7 @@ imposta un nome unico per identificarla ed accettarla.</translation>
     </message>
     <message>
         <source>Show passwords in cleartext by default</source>
-        <translation>Mostra la password in chiaro in maniera predefinita</translation>
+        <translation>Visualizza la password in chiaro in maniera predefinita</translation>
     </message>
     <message>
         <source>Lock databases after minimizing the window</source>
@@ -2192,7 +2207,7 @@ imposta un nome unico per identificarla ed accettarla.</translation>
     </message>
     <message>
         <source>Lock databases when session is locked or lid is closed</source>
-        <translation>Bloccare i database quando la sessione è bloccata o il coperchio è chiuso</translation>
+        <translation>Blocca i database quando la sessione è bloccata o il coperchio è chiuso</translation>
     </message>
     <message>
         <source>Privacy</source>
@@ -2200,7 +2215,7 @@ imposta un nome unico per identificarla ed accettarla.</translation>
     </message>
     <message>
         <source>Use Google as fallback for downloading website icons</source>
-        <translation>Utilizza Google come ripiego per scaricare le icone del sito web</translation>
+        <translation>Usa Google come alternativa per scaricare le icone dal sito web</translation>
     </message>
 </context>
 <context>
@@ -2215,11 +2230,11 @@ imposta un nome unico per identificarla ed accettarla.</translation>
     </message>
     <message>
         <source>Use custom settings</source>
-        <translation>Utilizza le impostazioni personalizzate</translation>
+        <translation>Usa le impostazioni personalizzate</translation>
     </message>
     <message>
         <source>Note: Change these settings only if you know what you are doing.</source>
-        <translation>Nota: modificare queste impostazioni solo se sai quello che stai facendo.</translation>
+        <translation>Nota: modifica queste impostazioni solo se sai quello che stai facendo.</translation>
     </message>
     <message>
         <source>Time step:</source>
@@ -2235,7 +2250,7 @@ imposta un nome unico per identificarla ed accettarla.</translation>
     </message>
     <message>
         <source>Code size:</source>
-        <translation>Dimensioni del codice:</translation>
+        <translation>Dimensioni codice:</translation>
     </message>
     <message>
         <source> sec</source>
@@ -2258,7 +2273,7 @@ imposta un nome unico per identificarla ed accettarla.</translation>
     </message>
     <message>
         <source>Expires in</source>
-        <translation>Scade in</translation>
+        <translation>Scade tra</translation>
     </message>
     <message>
         <source>seconds</source>
@@ -2315,7 +2330,7 @@ imposta un nome unico per identificarla ed accettarla.</translation>
     </message>
     <message>
         <source>KeePassXC - cross-platform password manager</source>
-        <translation>KeePassXC - gestore password multipiattaforma</translation>
+        <translation>KeePassXC - Gestore password multipiattaforma</translation>
     </message>
     <message>
         <source>read password of the database from stdin</source>
@@ -2335,11 +2350,11 @@ imposta un nome unico per identificarla ed accettarla.</translation>
     </message>
     <message>
         <source>Use a GUI prompt unlocking the database.</source>
-        <translation>Utilizza un sollecito grafico per lo sblocco del database.</translation>
+        <translation>Usa una richiesta grafica per lo sblocco del database.</translation>
     </message>
     <message>
         <source>Name of the entry to clip.</source>
-        <translation>Nome della voce da troncare.</translation>
+        <translation>Nome dell&apos;elemento da tagliare.</translation>
     </message>
     <message>
         <source>Extract and print the content of a database.</source>
@@ -2355,7 +2370,7 @@ imposta un nome unico per identificarla ed accettarla.</translation>
     </message>
     <message>
         <source>List database entries.</source>
-        <translation>Elenco delle voci del database.</translation>
+        <translation>Elenco degli elementi del database.</translation>
     </message>
     <message>
         <source>Path of the group to list. Default is /</source>
@@ -2363,7 +2378,7 @@ imposta un nome unico per identificarla ed accettarla.</translation>
     </message>
     <message>
         <source>Print the UUIDs of the entries and groups.</source>
-        <translation>Stampa gli UUID delle voci e dei gruppi.</translation>
+        <translation>Stampa gli UUID degli elementi e dei gruppi.</translation>
     </message>
     <message>
         <source>Merge two databases.</source>
@@ -2371,15 +2386,15 @@ imposta un nome unico per identificarla ed accettarla.</translation>
     </message>
     <message>
         <source>Path of the database to merge into.</source>
-        <translation>Percorso del database di destinazione da unire</translation>
+        <translation>Percorso del database destinazione da unire.</translation>
     </message>
     <message>
         <source>Path of the database to merge from.</source>
-        <translation>Percorso del database di partenza da unire.</translation>
+        <translation>Percorso del database sorgente da unire.</translation>
     </message>
     <message>
         <source>Use the same password for both database files.</source>
-        <translation>Utilizza la stessa password per entrambi i file di database.</translation>
+        <translation>Usa la stessa password per entrambi i file dei database.</translation>
     </message>
     <message>
         <source>Show a password.</source>
@@ -2387,7 +2402,7 @@ imposta un nome unico per identificarla ed accettarla.</translation>
     </message>
     <message>
         <source>Name of the entry to show.</source>
-        <translation>Nome della voce da mostrare.</translation>
+        <translation>Nome dell&apos;elemento da visualizzare.</translation>
     </message>
 </context>
 </TS>
\ No newline at end of file
diff --git a/share/translations/keepassx_ja.ts b/share/translations/keepassx_ja.ts
index 4ac8b7ee..28b7c533 100644
--- a/share/translations/keepassx_ja.ts
+++ b/share/translations/keepassx_ja.ts
@@ -67,6 +67,10 @@ CPU アーキテクチャ: %2
         <source>Include the following information whenever you report a bug:</source>
         <translation>バグを報告する際に下記の情報を含めてください:</translation>
     </message>
+    <message>
+        <source>Distribution: %1</source>
+        <translation type="unfinished"/>
+    </message>
 </context>
 <context>
     <name>AccessControlDialog</name>
@@ -1094,7 +1098,7 @@ Do you want to open it anyway?</source>
     </message>
     <message>
         <source>Custom icon already exists</source>
-        <translation type="unfinished"/>
+        <translation>カスタムアイコンは既に存在します</translation>
     </message>
 </context>
 <context>
@@ -1317,6 +1321,17 @@ This is a one-way migration. You won&apos;t be able to open the imported databas
 これは一方向の移行操作であり、インポートされたデータベースは古い KeePassX 0.4 のバージョンでは開くことはできません。</translation>
     </message>
 </context>
+<context>
+    <name>KeePass2Writer</name>
+    <message>
+        <source>Unable to issue challenge-response.</source>
+        <translation>チャレンジレスポンスを発行することができません。</translation>
+    </message>
+    <message>
+        <source>Unable to calculate master key</source>
+        <translation>マスターキーを計算できません</translation>
+    </message>
+</context>
 <context>
     <name>Main</name>
     <message>
@@ -1337,7 +1352,7 @@ This is a one-way migration. You won&apos;t be able to open the imported databas
     </message>
     <message>
         <source>Existing single-instance lock file is invalid. Launching new instance.</source>
-        <translation type="unfinished"/>
+        <translation>既存のシングルインスタンスロックファイルは無効です。新しいインスタンスを起動します。</translation>
     </message>
 </context>
 <context>
diff --git a/share/translations/keepassx_kk.ts b/share/translations/keepassx_kk.ts
index 07305271..4531122b 100644
--- a/share/translations/keepassx_kk.ts
+++ b/share/translations/keepassx_kk.ts
@@ -64,6 +64,10 @@ Kernel: %3 %4</source>
         <source>Include the following information whenever you report a bug:</source>
         <translation type="unfinished"/>
     </message>
+    <message>
+        <source>Distribution: %1</source>
+        <translation type="unfinished"/>
+    </message>
 </context>
 <context>
     <name>AccessControlDialog</name>
@@ -1307,6 +1311,17 @@ This is a one-way migration. You won&apos;t be able to open the imported databas
         <translation type="unfinished"/>
     </message>
 </context>
+<context>
+    <name>KeePass2Writer</name>
+    <message>
+        <source>Unable to issue challenge-response.</source>
+        <translation type="unfinished"/>
+    </message>
+    <message>
+        <source>Unable to calculate master key</source>
+        <translation>Басты парольді есептеу мүмкін емес</translation>
+    </message>
+</context>
 <context>
     <name>Main</name>
     <message>
diff --git a/share/translations/keepassx_ko.ts b/share/translations/keepassx_ko.ts
index ff6c208b..0b528474 100644
--- a/share/translations/keepassx_ko.ts
+++ b/share/translations/keepassx_ko.ts
@@ -67,6 +67,10 @@ CPU 아키텍처: %2
         <source>Include the following information whenever you report a bug:</source>
         <translation>버그를 보고할 때 다음 정보를 포함하십시오:</translation>
     </message>
+    <message>
+        <source>Distribution: %1</source>
+        <translation type="unfinished"/>
+    </message>
 </context>
 <context>
     <name>AccessControlDialog</name>
@@ -1315,6 +1319,17 @@ This is a one-way migration. You won&apos;t be able to open the imported databas
 이 작업은 한 방향으로만 이뤄집니다. 가져온 데이터베이스는 KeePassX 0.4 버전에서 열 수 없습니다.</translation>
     </message>
 </context>
+<context>
+    <name>KeePass2Writer</name>
+    <message>
+        <source>Unable to issue challenge-response.</source>
+        <translation>질의 응답을 실행할 수 없습니다.</translation>
+    </message>
+    <message>
+        <source>Unable to calculate master key</source>
+        <translation>마스터 키를 계산할 수 없습니다</translation>
+    </message>
+</context>
 <context>
     <name>Main</name>
     <message>
diff --git a/share/translations/keepassx_lt.ts b/share/translations/keepassx_lt.ts
index be7a82e0..a9a48383 100644
--- a/share/translations/keepassx_lt.ts
+++ b/share/translations/keepassx_lt.ts
@@ -67,6 +67,10 @@ Branduolys: %3 %4</translation>
         <source>Include the following information whenever you report a bug:</source>
         <translation>Pranešdami apie klaidą, visuomet pateikite ir šią informaciją:</translation>
     </message>
+    <message>
+        <source>Distribution: %1</source>
+        <translation>Platinimas: %1</translation>
+    </message>
 </context>
 <context>
     <name>AccessControlDialog</name>
@@ -1094,7 +1098,7 @@ Ar vis tiek norite ją atverti?</translation>
     </message>
     <message>
         <source>Custom icon already exists</source>
-        <translation type="unfinished"/>
+        <translation>Tinkinta piktograma jau yra</translation>
     </message>
 </context>
 <context>
@@ -1317,6 +1321,17 @@ Jūs galite ją importuoti, nuspausdami Duomenų bazė &gt; &quot;Importuoti Kee
 Tai yra vienakryptis perkėlimas. Jūs negalėsite atverti importuotos duomenų bazės, naudodami senąją KeePassX 0.4 versija.</translation>
     </message>
 </context>
+<context>
+    <name>KeePass2Writer</name>
+    <message>
+        <source>Unable to issue challenge-response.</source>
+        <translation>Nepavyko išduoti iššūkio atsakymo.</translation>
+    </message>
+    <message>
+        <source>Unable to calculate master key</source>
+        <translation>Nepavyko apskaičiuoti pagrindinio rakto</translation>
+    </message>
+</context>
 <context>
     <name>Main</name>
     <message>
@@ -1337,7 +1352,7 @@ Tai yra vienakryptis perkėlimas. Jūs negalėsite atverti importuotos duomenų
     </message>
     <message>
         <source>Existing single-instance lock file is invalid. Launching new instance.</source>
-        <translation type="unfinished"/>
+        <translation>Esamas vieno egzemplioriaus užrakto failas yra neteisingas. Paleidžiamas naujas egzempliorius.</translation>
     </message>
 </context>
 <context>
diff --git a/share/translations/keepassx_nl_NL.ts b/share/translations/keepassx_nl_NL.ts
index c8fd30dd..e18f1a90 100644
--- a/share/translations/keepassx_nl_NL.ts
+++ b/share/translations/keepassx_nl_NL.ts
@@ -64,6 +64,10 @@ Kernel: %3 %4</source>
         <source>Include the following information whenever you report a bug:</source>
         <translation type="unfinished"/>
     </message>
+    <message>
+        <source>Distribution: %1</source>
+        <translation type="unfinished"/>
+    </message>
 </context>
 <context>
     <name>AccessControlDialog</name>
@@ -1310,6 +1314,17 @@ This is a one-way migration. You won&apos;t be able to open the imported databas
         <translation type="unfinished"/>
     </message>
 </context>
+<context>
+    <name>KeePass2Writer</name>
+    <message>
+        <source>Unable to issue challenge-response.</source>
+        <translation type="unfinished"/>
+    </message>
+    <message>
+        <source>Unable to calculate master key</source>
+        <translation>Niet mogelijk om hoofdsleutel te berekenen</translation>
+    </message>
+</context>
 <context>
     <name>Main</name>
     <message>
diff --git a/share/translations/keepassx_pl.ts b/share/translations/keepassx_pl.ts
index 1ed4ed05..66574202 100644
--- a/share/translations/keepassx_pl.ts
+++ b/share/translations/keepassx_pl.ts
@@ -67,6 +67,10 @@ Jądro: %3 %4</translation>
         <source>Include the following information whenever you report a bug:</source>
         <translation>Uwzględnij następujące informacje, gdy zgłaszasz błąd:</translation>
     </message>
+    <message>
+        <source>Distribution: %1</source>
+        <translation>Dystrybucja: %1</translation>
+    </message>
 </context>
 <context>
     <name>AccessControlDialog</name>
@@ -1095,7 +1099,7 @@ Czy chcesz ją otworzyć mimo to?</translation>
     </message>
     <message>
         <source>Custom icon already exists</source>
-        <translation type="unfinished"/>
+        <translation>Ikona niestandardowa już istnieje</translation>
     </message>
 </context>
 <context>
@@ -1318,6 +1322,17 @@ Możesz zaimportować ją przez wybranie Baza danych &gt; &apos;Importuj bazę d
 Jest to migracja w jedną stronę. Nie będzie można otworzyć importowanej bazy danych za pomocą starej wersji KeePassX 0.4.</translation>
     </message>
 </context>
+<context>
+    <name>KeePass2Writer</name>
+    <message>
+        <source>Unable to issue challenge-response.</source>
+        <translation>Nie można wywołać wyzwania-odpowiedzi.</translation>
+    </message>
+    <message>
+        <source>Unable to calculate master key</source>
+        <translation>Nie mogę wyliczyć głównego klucza</translation>
+    </message>
+</context>
 <context>
     <name>Main</name>
     <message>
@@ -1338,7 +1353,7 @@ Jest to migracja w jedną stronę. Nie będzie można otworzyć importowanej baz
     </message>
     <message>
         <source>Existing single-instance lock file is invalid. Launching new instance.</source>
-        <translation type="unfinished"/>
+        <translation>Istniejący plik blokady pojedynczego wystąpienia jest nieprawidłowy. Uruchamianie nowego wystąpienia.</translation>
     </message>
 </context>
 <context>
diff --git a/share/translations/keepassx_pt_BR.ts b/share/translations/keepassx_pt_BR.ts
index b4f79260..1ea54d85 100644
--- a/share/translations/keepassx_pt_BR.ts
+++ b/share/translations/keepassx_pt_BR.ts
@@ -67,6 +67,10 @@ Kernel: %3 %4</translation>
         <source>Include the following information whenever you report a bug:</source>
         <translation>Inclua as informações abaixo quando reportar um erro:</translation>
     </message>
+    <message>
+        <source>Distribution: %1</source>
+        <translation type="unfinished"/>
+    </message>
 </context>
 <context>
     <name>AccessControlDialog</name>
@@ -1314,6 +1318,17 @@ This is a one-way migration. You won&apos;t be able to open the imported databas
         <translation type="unfinished"/>
     </message>
 </context>
+<context>
+    <name>KeePass2Writer</name>
+    <message>
+        <source>Unable to issue challenge-response.</source>
+        <translation type="unfinished"/>
+    </message>
+    <message>
+        <source>Unable to calculate master key</source>
+        <translation>Não foi possível calcular a chave mestre</translation>
+    </message>
+</context>
 <context>
     <name>Main</name>
     <message>
diff --git a/share/translations/keepassx_pt_PT.ts b/share/translations/keepassx_pt_PT.ts
index cf9f124f..0a671ed7 100644
--- a/share/translations/keepassx_pt_PT.ts
+++ b/share/translations/keepassx_pt_PT.ts
@@ -67,6 +67,10 @@ Kernel: %3 %4</translation>
         <source>Include the following information whenever you report a bug:</source>
         <translation>Inclua as seguintes informações sempre que reportar um erro:</translation>
     </message>
+    <message>
+        <source>Distribution: %1</source>
+        <translation>Distribuição: %1</translation>
+    </message>
 </context>
 <context>
     <name>AccessControlDialog</name>
@@ -1095,7 +1099,7 @@ Ainda assim deseja abrir a base de dados?</translation>
     </message>
     <message>
         <source>Custom icon already exists</source>
-        <translation type="unfinished"/>
+        <translation>Já existe um ícone personalizado</translation>
     </message>
 </context>
 <context>
@@ -1318,6 +1322,17 @@ Pode importá-lo clicando em Base de dados - &gt; &apos;Importar base de dados d
 Esta é uma migração unidirecional. Não será possível abrir a base de dados importada com a versão 0.4 do KeePassX.</translation>
     </message>
 </context>
+<context>
+    <name>KeePass2Writer</name>
+    <message>
+        <source>Unable to issue challenge-response.</source>
+        <translation>Incapaz de emitir a pergunta de segurança.</translation>
+    </message>
+    <message>
+        <source>Unable to calculate master key</source>
+        <translation>Impossível de calcular a chave-mestre</translation>
+    </message>
+</context>
 <context>
     <name>Main</name>
     <message>
@@ -1338,7 +1353,7 @@ Esta é uma migração unidirecional. Não será possível abrir a base de dados
     </message>
     <message>
         <source>Existing single-instance lock file is invalid. Launching new instance.</source>
-        <translation type="unfinished"/>
+        <translation>O ficheiro de bloqueio da instância única é inválido. A iniciar nova instância.</translation>
     </message>
 </context>
 <context>
diff --git a/share/translations/keepassx_ru.ts b/share/translations/keepassx_ru.ts
index c206b769..938d5eef 100644
--- a/share/translations/keepassx_ru.ts
+++ b/share/translations/keepassx_ru.ts
@@ -67,6 +67,10 @@ Kernel: %3 %4</source>
         <source>Include the following information whenever you report a bug:</source>
         <translation>Включите следующую информацию, когда сообщаете об ошибке:</translation>
     </message>
+    <message>
+        <source>Distribution: %1</source>
+        <translation type="unfinished"/>
+    </message>
 </context>
 <context>
     <name>AccessControlDialog</name>
@@ -1318,6 +1322,17 @@ This is a one-way migration. You won&apos;t be able to open the imported databas
 Это одностороннее перемещение. Вы не сможете открыть импортированную базу данных на старой версии KeePassX 0,4.</translation>
     </message>
 </context>
+<context>
+    <name>KeePass2Writer</name>
+    <message>
+        <source>Unable to issue challenge-response.</source>
+        <translation>Не удалось выполнить запрос ответа.</translation>
+    </message>
+    <message>
+        <source>Unable to calculate master key</source>
+        <translation>Невозможно вычислить мастер-пароль</translation>
+    </message>
+</context>
 <context>
     <name>Main</name>
     <message>
diff --git a/share/translations/keepassx_sl_SI.ts b/share/translations/keepassx_sl_SI.ts
index f43dd17a..cec9bd6c 100644
--- a/share/translations/keepassx_sl_SI.ts
+++ b/share/translations/keepassx_sl_SI.ts
@@ -64,6 +64,10 @@ Kernel: %3 %4</source>
         <source>Include the following information whenever you report a bug:</source>
         <translation type="unfinished"/>
     </message>
+    <message>
+        <source>Distribution: %1</source>
+        <translation type="unfinished"/>
+    </message>
 </context>
 <context>
     <name>AccessControlDialog</name>
@@ -1305,6 +1309,17 @@ This is a one-way migration. You won&apos;t be able to open the imported databas
         <translation type="unfinished"/>
     </message>
 </context>
+<context>
+    <name>KeePass2Writer</name>
+    <message>
+        <source>Unable to issue challenge-response.</source>
+        <translation type="unfinished"/>
+    </message>
+    <message>
+        <source>Unable to calculate master key</source>
+        <translation>Izračun glavnega ključa ni uspel</translation>
+    </message>
+</context>
 <context>
     <name>Main</name>
     <message>
diff --git a/share/translations/keepassx_sv.ts b/share/translations/keepassx_sv.ts
index bc846e46..a9e8a85d 100644
--- a/share/translations/keepassx_sv.ts
+++ b/share/translations/keepassx_sv.ts
@@ -24,7 +24,8 @@
     <message>
         <source>Version %1
 </source>
-        <translation type="unfinished"/>
+        <translation>Version %1
+</translation>
     </message>
     <message>
         <source>Revision: %1</source>
@@ -64,6 +65,10 @@ Kernel: %3 %4</source>
         <source>Include the following information whenever you report a bug:</source>
         <translation type="unfinished"/>
     </message>
+    <message>
+        <source>Distribution: %1</source>
+        <translation type="unfinished"/>
+    </message>
 </context>
 <context>
     <name>AccessControlDialog</name>
@@ -196,7 +201,7 @@ Please select whether you want to allow access.</source>
     </message>
     <message>
         <source>Empty password</source>
-        <translation type="unfinished"/>
+        <translation>Tomt lösenord</translation>
     </message>
     <message>
         <source>Changing master key failed: no YubiKey inserted.</source>
@@ -254,7 +259,7 @@ Please select whether you want to allow access.</source>
     </message>
     <message>
         <source>Comments start with</source>
-        <translation type="unfinished"/>
+        <translation>Kommentarer inleds med</translation>
     </message>
     <message>
         <source>First record has field names</source>
@@ -282,7 +287,7 @@ Please select whether you want to allow access.</source>
     </message>
     <message>
         <source>Empty fieldname </source>
-        <translation type="unfinished"/>
+        <translation>Tomt fältnamn </translation>
     </message>
     <message>
         <source>column </source>
@@ -337,7 +342,7 @@ Please select whether you want to allow access.</source>
     </message>
     <message>
         <source> rows, </source>
-        <translation type="unfinished"/>
+        <translation> rader, </translation>
     </message>
     <message>
         <source> columns</source>
@@ -622,7 +627,7 @@ Do you want to open it anyway?</source>
     </message>
     <message>
         <source>Open CSV file</source>
-        <translation type="unfinished"/>
+        <translation>Öppna CSV fil</translation>
     </message>
 </context>
 <context>
@@ -677,7 +682,7 @@ Do you want to open it anyway?</source>
     </message>
     <message>
         <source>Searching...</source>
-        <translation type="unfinished"/>
+        <translation>Söker...</translation>
     </message>
     <message>
         <source>No current database.</source>
@@ -689,11 +694,11 @@ Do you want to open it anyway?</source>
     </message>
     <message>
         <source>Search Results (%1)</source>
-        <translation type="unfinished"/>
+        <translation>Sökresultat (%1)</translation>
     </message>
     <message>
         <source>No Results</source>
-        <translation type="unfinished"/>
+        <translation>Inget resultat</translation>
     </message>
     <message>
         <source>Execute command?</source>
@@ -818,7 +823,7 @@ Do you want to open it anyway?</source>
     </message>
     <message>
         <source>Confirm Remove</source>
-        <translation type="unfinished"/>
+        <translation>Bekräfta borttagning</translation>
     </message>
     <message>
         <source>Are you sure you want to remove this attribute?</source>
@@ -865,7 +870,7 @@ Do you want to open it anyway?</source>
     </message>
     <message>
         <source>Protect</source>
-        <translation type="unfinished"/>
+        <translation>Skydda</translation>
     </message>
     <message>
         <source>Reveal</source>
@@ -1307,6 +1312,17 @@ This is a one-way migration. You won&apos;t be able to open the imported databas
         <translation type="unfinished"/>
     </message>
 </context>
+<context>
+    <name>KeePass2Writer</name>
+    <message>
+        <source>Unable to issue challenge-response.</source>
+        <translation type="unfinished"/>
+    </message>
+    <message>
+        <source>Unable to calculate master key</source>
+        <translation>Kunde inte räkna nu master-nyckeln</translation>
+    </message>
+</context>
 <context>
     <name>Main</name>
     <message>
diff --git a/share/translations/keepassx_tr.ts b/share/translations/keepassx_tr.ts
index 18639fc4..4514a420 100644
--- a/share/translations/keepassx_tr.ts
+++ b/share/translations/keepassx_tr.ts
@@ -67,6 +67,10 @@ MİB mimarisi: %2
         <source>Include the following information whenever you report a bug:</source>
         <translation>Bir hata bildirirken şu bilgileri ekleyin:</translation>
     </message>
+    <message>
+        <source>Distribution: %1</source>
+        <translation type="unfinished"/>
+    </message>
 </context>
 <context>
     <name>AccessControlDialog</name>
@@ -1313,6 +1317,17 @@ Veri tabanı &gt; &apos;KeePass1 veri tabanı içe aktar...&apos;a tıklayarak i
 Bu tek yönlü bir yer değiştirmedir. İçe aktarılan veri tabanını eski KeePassX 0.4 sürümüyle açamayacaksınız.</translation>
     </message>
 </context>
+<context>
+    <name>KeePass2Writer</name>
+    <message>
+        <source>Unable to issue challenge-response.</source>
+        <translation type="unfinished"/>
+    </message>
+    <message>
+        <source>Unable to calculate master key</source>
+        <translation>Ana anahtar hesaplanamıyor</translation>
+    </message>
+</context>
 <context>
     <name>Main</name>
     <message>
diff --git a/share/translations/keepassx_uk.ts b/share/translations/keepassx_uk.ts
index e1f98f86..c8abb87f 100644
--- a/share/translations/keepassx_uk.ts
+++ b/share/translations/keepassx_uk.ts
@@ -67,6 +67,10 @@ Kernel: %3 %4</source>
         <source>Include the following information whenever you report a bug:</source>
         <translation>Коли Ви повідомляєте про ваду, завжди долучайте таку інформацію:</translation>
     </message>
+    <message>
+        <source>Distribution: %1</source>
+        <translation type="unfinished"/>
+    </message>
 </context>
 <context>
     <name>AccessControlDialog</name>
@@ -1318,6 +1322,17 @@ This is a one-way migration. You won&apos;t be able to open the imported databas
 Перетворення можливе лише в одному напрямку. Ви не зможете відкрити імпортоване сховище старою версією KeePassX 0.4.</translation>
     </message>
 </context>
+<context>
+    <name>KeePass2Writer</name>
+    <message>
+        <source>Unable to issue challenge-response.</source>
+        <translation>Неможливо видати виклик-відповідь.</translation>
+    </message>
+    <message>
+        <source>Unable to calculate master key</source>
+        <translation>Неможливо вирахувати головний ключ</translation>
+    </message>
+</context>
 <context>
     <name>Main</name>
     <message>
diff --git a/share/translations/keepassx_zh_CN.ts b/share/translations/keepassx_zh_CN.ts
index db791625..0d5e2806 100644
--- a/share/translations/keepassx_zh_CN.ts
+++ b/share/translations/keepassx_zh_CN.ts
@@ -67,6 +67,10 @@ CPU 架构：%2
         <source>Include the following information whenever you report a bug:</source>
         <translation>报告任何 bug 时，请包含以下信息：</translation>
     </message>
+    <message>
+        <source>Distribution: %1</source>
+        <translation type="unfinished"/>
+    </message>
 </context>
 <context>
     <name>AccessControlDialog</name>
@@ -1316,6 +1320,17 @@ This is a one-way migration. You won&apos;t be able to open the imported databas
 这是不可逆的迁移，导入后的数据库将无法由旧版本的 KeePassX 0.4 打开。</translation>
     </message>
 </context>
+<context>
+    <name>KeePass2Writer</name>
+    <message>
+        <source>Unable to issue challenge-response.</source>
+        <translation>无法发出挑战应答</translation>
+    </message>
+    <message>
+        <source>Unable to calculate master key</source>
+        <translation>无法计算主密码</translation>
+    </message>
+</context>
 <context>
     <name>Main</name>
     <message>
diff --git a/share/translations/keepassx_zh_TW.ts b/share/translations/keepassx_zh_TW.ts
index af9c74b5..0dbabb3a 100644
--- a/share/translations/keepassx_zh_TW.ts
+++ b/share/translations/keepassx_zh_TW.ts
@@ -67,6 +67,10 @@ Kernel: %3 %4</source>
         <source>Include the following information whenever you report a bug:</source>
         <translation>回報 Bug 時會包含以下資訊：</translation>
     </message>
+    <message>
+        <source>Distribution: %1</source>
+        <translation type="unfinished"/>
+    </message>
 </context>
 <context>
     <name>AccessControlDialog</name>
@@ -1317,6 +1321,17 @@ This is a one-way migration. You won&apos;t be able to open the imported databas
 這是單向遷移。你無法用舊的 KeePassX 0.4 的版本開啟已匯入的資料庫。</translation>
     </message>
 </context>
+<context>
+    <name>KeePass2Writer</name>
+    <message>
+        <source>Unable to issue challenge-response.</source>
+        <translation type="unfinished"/>
+    </message>
+    <message>
+        <source>Unable to calculate master key</source>
+        <translation>無法計算主金鑰</translation>
+    </message>
+</context>
 <context>
     <name>Main</name>
     <message>

From 1a4303bbceb7dc6e303b4fe3aeff8e1d4a888d30 Mon Sep 17 00:00:00 2001
From: Jonathan White <support@dmapps.us>
Date: Sat, 23 Sep 2017 12:25:45 -0400
Subject: [PATCH 046/118] Added tests for retention of entry history after
 merge

---
 tests/TestMerge.cpp | 13 ++++++++++++-
 1 file changed, 12 insertions(+), 1 deletion(-)

diff --git a/tests/TestMerge.cpp b/tests/TestMerge.cpp
index c8f15f29..4f8daa06 100644
--- a/tests/TestMerge.cpp
+++ b/tests/TestMerge.cpp
@@ -48,6 +48,8 @@ void TestMerge::testMergeIntoNew()
 
     QCOMPARE(dbDestination->rootGroup()->children().size(), 2);
     QCOMPARE(dbDestination->rootGroup()->children().at(0)->entries().size(), 2);
+    // Test for retention of history
+    QCOMPARE(dbDestination->rootGroup()->children().at(0)->entries().at(0)->historyItems().isEmpty(), false);
 
     delete dbDestination;
     delete dbSource;
@@ -195,7 +197,7 @@ void TestMerge::testResolveConflictKeepBoth()
     Database* dbDestination = createTestDatabase();
 
     Database* dbSource = new Database();
-    dbSource->setRootGroup(dbDestination->rootGroup()->clone(Entry::CloneNoFlags));
+    dbSource->setRootGroup(dbDestination->rootGroup()->clone(Entry::CloneIncludeHistory));
 
     // sanity check
     QCOMPARE(dbDestination->rootGroup()->children().at(0)->entries().size(), 2);
@@ -212,9 +214,11 @@ void TestMerge::testResolveConflictKeepBoth()
 
     // one entry is duplicated because of mode
     QCOMPARE(dbDestination->rootGroup()->children().at(0)->entries().size(), 3);
+    QCOMPARE(dbDestination->rootGroup()->children().at(0)->entries().at(0)->historyItems().isEmpty(), false);
     // the older entry was merged from the other db as last in the group
     Entry* olderEntry = dbDestination->rootGroup()->children().at(0)->entries().at(2);
     QVERIFY2(olderEntry->attributes()->hasKey("merged"), "older entry is marked with an attribute \"merged\"");
+    QCOMPARE(olderEntry->historyItems().isEmpty(), false);
 
     QVERIFY2(olderEntry->uuid().toHex() != updatedEntry->uuid().toHex(),
              "KeepBoth should not reuse the UUIDs when cloning.");
@@ -455,12 +459,19 @@ Database* TestMerge::createTestDatabase()
     Entry* entry1 = new Entry();
     Entry* entry2 = new Entry();
 
+    // Give Entry 1 a history
+    entry1->beginUpdate();
     entry1->setGroup(group1);
     entry1->setUuid(Uuid::random());
     entry1->setTitle("entry1");
+    entry1->endUpdate();
+
+    // Give Entry 2 a history
+    entry2->beginUpdate();
     entry2->setGroup(group1);
     entry2->setUuid(Uuid::random());
     entry2->setTitle("entry2");
+    entry2->endUpdate();
 
     group1->setParent(db->rootGroup());
     group2->setParent(db->rootGroup());

From 010690a9c748fab667baf92eb2f01bae366a0e7a Mon Sep 17 00:00:00 2001
From: Janek Bevendorff <janek@jbev.net>
Date: Sun, 22 Oct 2017 20:55:05 +0200
Subject: [PATCH 047/118] Reduce external dependencies and install YubiKey deps
 from EPEL

---
 Dockerfile | 35 ++++++-----------------------------
 1 file changed, 6 insertions(+), 29 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 6f7ace34..c8a82844 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -20,12 +20,9 @@ RUN set -x \
     && curl "https://copr.fedorainfracloud.org/coprs/bugzy/keepassxc/repo/epel-7/bugzy-keepassxc-epel-7.repo" \
         > /etc/yum.repos.d/bugzy-keepassxc-epel-7.repo
 
-RUN set -x \
-    && curl "https://copr.fedorainfracloud.org/coprs/sic/backports/repo/epel-7/sic-backports-epel-7.repo" \
-        > /etc/yum.repos.d/sic-backports-epel-7.repo
-
 RUN set -x \
     && yum clean -y all \
+    && yum install -y epel-release \
     && yum upgrade -y
 
 # build and runtime dependencies
@@ -34,7 +31,7 @@ RUN set -x \
         make \
         automake \
         gcc-c++ \
-        cmake \
+        cmake3 \
         libgcrypt16-devel \
         qt5-qtbase-devel \
         qt5-linguist \
@@ -43,7 +40,9 @@ RUN set -x \
         qt5-qtx11extras \
         qt5-qtx11extras-devel \
         libXi-devel \
-        libXtst-devel
+        libXtst-devel \
+        libyubikey-devel \
+        ykpers-devel
 
 # AppImage dependencies
 RUN set -x \
@@ -51,30 +50,8 @@ RUN set -x \
         wget \
         fuse-libs
 
-# build libyubikey
-ENV YUBIKEY_VERSION=1.13
-RUN set -x && yum install -y libusb-devel
 RUN set -x \
-    && wget "https://developers.yubico.com/yubico-c/Releases/libyubikey-${YUBIKEY_VERSION}.tar.gz" \
-    && tar xf libyubikey-${YUBIKEY_VERSION}.tar.gz \
-    && cd libyubikey-${YUBIKEY_VERSION} \
-    && ./configure --prefix=/usr --libdir=/usr/lib64 \
-    && make \
-    && make install \
-    && cd .. \
-    && rm -Rf libyubikey-${YUBIKEY_VERSION}*
-
-# build libykpers-1
-ENV YKPERS_VERSION=1.18.0
-RUN set -x \
-    && wget "https://developers.yubico.com/yubikey-personalization/Releases/ykpers-${YKPERS_VERSION}.tar.gz" \
-    && tar xf ykpers-${YKPERS_VERSION}.tar.gz \
-    && cd ykpers-${YKPERS_VERSION} \
-    && ./configure --prefix=/usr --libdir=/usr/lib64 \
-    && make \
-    && make install \
-    && cd .. \
-    && rm -Rf ykpers-${YKPERS_VERSION}*
+    && ln -s /usr/bin/cmake3 /usr/bin/cmake
 
 VOLUME /keepassxc/src
 VOLUME /keepassxc/out

From 7f2bd4784933957ad5ce89eb3092dc39d276fe07 Mon Sep 17 00:00:00 2001
From: frostasm <frost.asm@gmail.com>
Date: Thu, 5 Oct 2017 23:05:08 +0300
Subject: [PATCH 048/118] AutoType: resolve placeholders for title in window
 associations

---
 src/autotype/AutoType.cpp | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/src/autotype/AutoType.cpp b/src/autotype/AutoType.cpp
index f3496849..2519b9dc 100644
--- a/src/autotype/AutoType.cpp
+++ b/src/autotype/AutoType.cpp
@@ -563,7 +563,8 @@ QString AutoType::autoTypeSequence(const Entry* entry, const QString& windowTitl
         bool match = false;
         const QList<AutoTypeAssociations::Association> assocList = entry->autoTypeAssociations()->getAll();
         for (const AutoTypeAssociations::Association& assoc : assocList) {
-            if (windowMatches(windowTitle, assoc.window)) {
+            const QString window = entry->resolveMultiplePlaceholders(assoc.window);
+            if (windowMatches(windowTitle, window)) {
                 if (!assoc.sequence.isEmpty()) {
                     sequence = assoc.sequence;
                 }

From 1f5a0c013005dd811fc647e3f9c8fa09b0639fb9 Mon Sep 17 00:00:00 2001
From: frostasm <frost.asm@gmail.com>
Date: Fri, 6 Oct 2017 19:41:04 +0300
Subject: [PATCH 049/118] Add test for resolved placeholders in window
 association title

---
 tests/TestAutoType.cpp | 30 +++++++++++++++++++++++++++++-
 1 file changed, 29 insertions(+), 1 deletion(-)

diff --git a/tests/TestAutoType.cpp b/tests/TestAutoType.cpp
index be73efd4..acc2df61 100644
--- a/tests/TestAutoType.cpp
+++ b/tests/TestAutoType.cpp
@@ -96,6 +96,9 @@ void TestAutoType::init()
     m_entry4->setGroup(m_group);
     m_entry4->setPassword("custom_attr");
     m_entry4->attributes()->set("CUSTOM","Attribute",false);
+    m_entry4->attributes()->set("CustomAttrFirst","AttrValueFirst",false);
+    m_entry4->attributes()->set("CustomAttrSecond","AttrValueSecond",false);
+    m_entry4->attributes()->set("CustomAttrThird","AttrValueThird",false);
     association.window = "//^CustomAttr1$//";
     association.sequence = "{PASSWORD}:{S:CUSTOM}";
     m_entry4->autoTypeAssociations()->add(association);
@@ -105,7 +108,16 @@ void TestAutoType::init()
     association.window = "//^CustomAttr3$//";
     association.sequence = "{PaSSworD}";
     m_entry4->autoTypeAssociations()->add(association);
-    
+    association.window = "//^{S:CustomAttrFirst}$//";
+    association.sequence = "custom_attr_first";
+    m_entry4->autoTypeAssociations()->add(association);
+    association.window = "//{S:CustomAttrFirst}And{S:CustomAttrSecond}//";
+    association.sequence = "custom_attr_first_and_second";
+    m_entry4->autoTypeAssociations()->add(association);
+    association.window = "//{S:CustomAttrThird}//";
+    association.sequence = "custom_attr_third";
+    m_entry4->autoTypeAssociations()->add(association);
+
     m_entry5 = new Entry();
     m_entry5->setGroup(m_group);
     m_entry5->setPassword("example5");
@@ -253,4 +265,20 @@ void TestAutoType::testGlobalAutoTypeRegExp()
     m_autoType->performGlobalAutoType(m_dbList);
     QCOMPARE(m_test->actionChars(), QString("custom_attr"));
     m_test->clearActions();
+
+    // with resolve placeholders in window association title
+    m_test->setActiveWindowTitle("AttrValueFirst");
+    m_autoType->performGlobalAutoType(m_dbList);
+    QCOMPARE(m_test->actionChars(), QString("custom_attr_first"));
+    m_test->clearActions();
+
+    m_test->setActiveWindowTitle("lorem AttrValueFirstAndAttrValueSecond ipsum");
+    m_autoType->performGlobalAutoType(m_dbList);
+    QCOMPARE(m_test->actionChars(), QString("custom_attr_first_and_second"));
+    m_test->clearActions();
+
+    m_test->setActiveWindowTitle("lorem AttrValueThird ipsum");
+    m_autoType->performGlobalAutoType(m_dbList);
+    QCOMPARE(m_test->actionChars(), QString("custom_attr_third"));
+    m_test->clearActions();
 }

From b6387f7709a4750b82498bf52b12e3205dd110e4 Mon Sep 17 00:00:00 2001
From: frostasm <frost.asm@gmail.com>
Date: Fri, 6 Oct 2017 18:22:59 +0300
Subject: [PATCH 050/118] AutoType: resolve placeholders in window associations
 list

---
 src/gui/entry/AutoTypeAssociationsModel.cpp | 15 ++++++++++++++-
 src/gui/entry/AutoTypeAssociationsModel.h   |  5 ++++-
 src/gui/entry/EditEntryWidget.cpp           |  1 +
 3 files changed, 19 insertions(+), 2 deletions(-)

diff --git a/src/gui/entry/AutoTypeAssociationsModel.cpp b/src/gui/entry/AutoTypeAssociationsModel.cpp
index 4a76233b..442453de 100644
--- a/src/gui/entry/AutoTypeAssociationsModel.cpp
+++ b/src/gui/entry/AutoTypeAssociationsModel.cpp
@@ -17,9 +17,12 @@
 
 #include "AutoTypeAssociationsModel.h"
 
+#include "core/Entry.h"
+
 AutoTypeAssociationsModel::AutoTypeAssociationsModel(QObject* parent)
     : QAbstractListModel(parent)
     , m_autoTypeAssociations(nullptr)
+    , m_entry(nullptr)
 {
 }
 
@@ -46,6 +49,11 @@ void AutoTypeAssociationsModel::setAutoTypeAssociations(AutoTypeAssociations* au
     endResetModel();
 }
 
+void AutoTypeAssociationsModel::setEntry(const Entry *entry)
+{
+    m_entry = entry;
+}
+
 int AutoTypeAssociationsModel::rowCount(const QModelIndex& parent) const
 {
     if (!m_autoTypeAssociations || parent.isValid()) {
@@ -86,7 +94,12 @@ QVariant AutoTypeAssociationsModel::data(const QModelIndex& index, int role) con
 
     if (role == Qt::DisplayRole) {
         if (index.column() == 0) {
-            return m_autoTypeAssociations->get(index.row()).window;
+            QString window = m_autoTypeAssociations->get(index.row()).window;
+            if (m_entry) {
+                window = m_entry->maskPasswordPlaceholders(window);
+                window = m_entry->resolveMultiplePlaceholders(window);
+            }
+            return window;
         }
         else {
             QString sequence = m_autoTypeAssociations->get(index.row()).sequence;
diff --git a/src/gui/entry/AutoTypeAssociationsModel.h b/src/gui/entry/AutoTypeAssociationsModel.h
index cef8bc66..1daa4a9c 100644
--- a/src/gui/entry/AutoTypeAssociationsModel.h
+++ b/src/gui/entry/AutoTypeAssociationsModel.h
@@ -19,10 +19,11 @@
 #define KEEPASSX_AUTOTYPEASSOCIATIONSMODEL_H
 
 #include <QAbstractListModel>
+#include <QPointer>
 
 #include "core/AutoTypeAssociations.h"
 
-class EntryAttributes;
+class Entry;
 
 class AutoTypeAssociationsModel : public QAbstractListModel
 {
@@ -31,6 +32,7 @@ class AutoTypeAssociationsModel : public QAbstractListModel
 public:
     explicit AutoTypeAssociationsModel(QObject* parent = nullptr);
     void setAutoTypeAssociations(AutoTypeAssociations* autoTypeAssociations);
+    void setEntry(const Entry* entry);
     int rowCount(const QModelIndex& parent = QModelIndex()) const override;
     int columnCount(const QModelIndex& parent = QModelIndex()) const override;
     QVariant headerData(int section, Qt::Orientation orientation, int role = Qt::DisplayRole) const override;
@@ -47,6 +49,7 @@ public slots:
 
 private:
     AutoTypeAssociations* m_autoTypeAssociations;
+    QPointer<const Entry> m_entry;
 };
 
 #endif // KEEPASSX_AUTOTYPEASSOCIATIONSMODEL_H
diff --git a/src/gui/entry/EditEntryWidget.cpp b/src/gui/entry/EditEntryWidget.cpp
index 809ac95e..463096b3 100644
--- a/src/gui/entry/EditEntryWidget.cpp
+++ b/src/gui/entry/EditEntryWidget.cpp
@@ -378,6 +378,7 @@ void EditEntryWidget::setForms(const Entry* entry, bool restore)
     m_autoTypeUi->defaultWindowSequenceButton->setChecked(true);
     m_autoTypeUi->windowSequenceEdit->setText("");
     m_autoTypeAssoc->copyDataFrom(entry->autoTypeAssociations());
+    m_autoTypeAssocModel->setEntry(entry);
     if (m_autoTypeAssoc->size() != 0) {
         m_autoTypeUi->assocView->setCurrentIndex(m_autoTypeAssocModel->index(0, 0));
     }

From 51b42bc7b86448867d3438467ca620b71b9882c0 Mon Sep 17 00:00:00 2001
From: Janek Bevendorff <janek@jbev.net>
Date: Tue, 24 Oct 2017 14:32:51 +0200
Subject: [PATCH 051/118] Move back to Ubuntu 14.04, but with custom libyubikey
 and libykpers-1 builds, resolves #1114

---
 Dockerfile | 57 +++++++++++++++++++++++++++++-------------------------
 1 file changed, 31 insertions(+), 26 deletions(-)

diff --git a/Dockerfile b/Dockerfile
index 6f7ace34..ad9a2f44 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -14,51 +14,54 @@
 # You should have received a copy of the GNU General Public License
 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
 
-FROM centos:7
+FROM ubuntu:14.04
+
+ENV QT5_VERSION=59
+ENV QT5_PPA_VERSION=${QT5_VERSION}2
 
 RUN set -x \
-    && curl "https://copr.fedorainfracloud.org/coprs/bugzy/keepassxc/repo/epel-7/bugzy-keepassxc-epel-7.repo" \
-        > /etc/yum.repos.d/bugzy-keepassxc-epel-7.repo
+    && apt-get update -y \
+    && apt-get -y install software-properties-common
 
 RUN set -x \
-    && curl "https://copr.fedorainfracloud.org/coprs/sic/backports/repo/epel-7/sic-backports-epel-7.repo" \
-        > /etc/yum.repos.d/sic-backports-epel-7.repo
+    && add-apt-repository ppa:beineri/opt-qt${QT5_PPA_VERSION}-trusty
 
 RUN set -x \
-    && yum clean -y all \
-    && yum upgrade -y
+    && apt-get update -y \
+    && apt-get upgrade -y
 
 # build and runtime dependencies
 RUN set -x \
-    && yum install -y \
-        make \
-        automake \
-        gcc-c++ \
-        cmake \
-        libgcrypt16-devel \
-        qt5-qtbase-devel \
-        qt5-linguist \
-        qt5-qttools \
-        zlib-devel \
-        qt5-qtx11extras \
-        qt5-qtx11extras-devel \
-        libXi-devel \
-        libXtst-devel
+    && apt-get install -y \
+        cmake3 \
+        g++ \
+        libgcrypt20-dev \
+        qt${QT5_VERSION}base \
+        qt${QT5_VERSION}tools \
+        qt${QT5_VERSION}x11extras \
+        zlib1g-dev \
+        libxi-dev \
+        libxtst-dev \
+        mesa-common-dev
+
+ENV CMAKE_PREFIX_PATH=/opt/qt${QT5_VERSION}/lib/cmake
+ENV LD_LIBRARY_PATH=/opt/qt${QT5_VERSION}/lib
+RUN set -x \
+    && echo /opt/qt${QT_VERSION}/lib > /etc/ld.so.conf.d/qt${QT5_VERSION}.conf
 
 # AppImage dependencies
 RUN set -x \
-    && yum install -y \
+    && apt-get install -y \
         wget \
-        fuse-libs
+        libfuse2
 
 # build libyubikey
 ENV YUBIKEY_VERSION=1.13
-RUN set -x && yum install -y libusb-devel
 RUN set -x \
     && wget "https://developers.yubico.com/yubico-c/Releases/libyubikey-${YUBIKEY_VERSION}.tar.gz" \
     && tar xf libyubikey-${YUBIKEY_VERSION}.tar.gz \
     && cd libyubikey-${YUBIKEY_VERSION} \
-    && ./configure --prefix=/usr --libdir=/usr/lib64 \
+    && ./configure --prefix=/usr --libdir=/usr/lib/x86_64-linux-gnu \
     && make \
     && make install \
     && cd .. \
@@ -66,11 +69,13 @@ RUN set -x \
 
 # build libykpers-1
 ENV YKPERS_VERSION=1.18.0
+RUN set -x \
+    && apt-get install -y libusb-dev
 RUN set -x \
     && wget "https://developers.yubico.com/yubikey-personalization/Releases/ykpers-${YKPERS_VERSION}.tar.gz" \
     && tar xf ykpers-${YKPERS_VERSION}.tar.gz \
     && cd ykpers-${YKPERS_VERSION} \
-    && ./configure --prefix=/usr --libdir=/usr/lib64 \
+    && ./configure --prefix=/usr --libdir=/usr/lib/x86_64-linux-gnu \
     && make \
     && make install \
     && cd .. \

From f6933a88681cd57fd3d08db290ff4966eda810ad Mon Sep 17 00:00:00 2001
From: Janek Bevendorff <janek@jbev.net>
Date: Tue, 24 Oct 2017 15:25:38 +0200
Subject: [PATCH 052/118] Ensure that YubiKey is only polled once, even if
 showEvent() is called twice

---
 src/gui/DatabaseOpenWidget.cpp | 16 ++++++++++++----
 src/gui/DatabaseOpenWidget.h   |  1 +
 2 files changed, 13 insertions(+), 4 deletions(-)

diff --git a/src/gui/DatabaseOpenWidget.cpp b/src/gui/DatabaseOpenWidget.cpp
index ee0e9de2..e487f97c 100644
--- a/src/gui/DatabaseOpenWidget.cpp
+++ b/src/gui/DatabaseOpenWidget.cpp
@@ -95,11 +95,16 @@ void DatabaseOpenWidget::showEvent(QShowEvent* event)
     m_ui->editPassword->setFocus();
 
 #ifdef WITH_XC_YUBIKEY
-    connect(YubiKey::instance(), SIGNAL(detected(int,bool)), SLOT(yubikeyDetected(int,bool)), Qt::QueuedConnection);
-    connect(YubiKey::instance(), SIGNAL(detectComplete()), SLOT(yubikeyDetectComplete()), Qt::QueuedConnection);
-    connect(YubiKey::instance(), SIGNAL(notFound()), SLOT(noYubikeyFound()), Qt::QueuedConnection);
+    // showEvent() may be called twice, so make sure we are only polling once
+    if (!m_yubiKeyBeingPolled) {
+        connect(YubiKey::instance(), SIGNAL(detected(int, bool)), SLOT(yubikeyDetected(int, bool)),
+                Qt::QueuedConnection);
+        connect(YubiKey::instance(), SIGNAL(detectComplete()), SLOT(yubikeyDetectComplete()), Qt::QueuedConnection);
+        connect(YubiKey::instance(), SIGNAL(notFound()), SLOT(noYubikeyFound()), Qt::QueuedConnection);
 
-    pollYubikey();
+        pollYubikey();
+        m_yubiKeyBeingPolled = true;
+    }
 #endif
 }
 
@@ -110,6 +115,7 @@ void DatabaseOpenWidget::hideEvent(QHideEvent* event)
 #ifdef WITH_XC_YUBIKEY
     // Don't listen to any Yubikey events if we are hidden
     disconnect(YubiKey::instance(), 0, this, 0);
+    m_yubiKeyBeingPolled = false;
 #endif
 }
 
@@ -311,10 +317,12 @@ void DatabaseOpenWidget::yubikeyDetectComplete()
     m_ui->checkChallengeResponse->setEnabled(true);
     m_ui->buttonRedetectYubikey->setEnabled(true);
     m_ui->yubikeyProgress->setVisible(false);
+    m_yubiKeyBeingPolled = false;
 }
 
 void DatabaseOpenWidget::noYubikeyFound()
 {
     m_ui->buttonRedetectYubikey->setEnabled(true);
     m_ui->yubikeyProgress->setVisible(false);
+    m_yubiKeyBeingPolled = false;
 }
diff --git a/src/gui/DatabaseOpenWidget.h b/src/gui/DatabaseOpenWidget.h
index a7691a91..aade111c 100644
--- a/src/gui/DatabaseOpenWidget.h
+++ b/src/gui/DatabaseOpenWidget.h
@@ -73,6 +73,7 @@ protected:
     QString m_filename;
 
 private:
+    bool m_yubiKeyBeingPolled = false;
     Q_DISABLE_COPY(DatabaseOpenWidget)
 };
 

From 05d02b702ad232f673860457dfe9ee258a1e937d Mon Sep 17 00:00:00 2001
From: Janek Bevendorff <janek@jbev.net>
Date: Tue, 24 Oct 2017 15:07:10 +0200
Subject: [PATCH 053/118] Restrict global menu fix to Qt < 5.9.0, resolves #691

---
 src/gui/MainWindow.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/gui/MainWindow.cpp b/src/gui/MainWindow.cpp
index f1d5f866..e37a7d28 100644
--- a/src/gui/MainWindow.cpp
+++ b/src/gui/MainWindow.cpp
@@ -881,7 +881,7 @@ void MainWindow::toggleWindow()
         raise();
         activateWindow();
 
-#if defined(Q_OS_LINUX) && ! defined(QT_NO_DBUS)
+#if defined(Q_OS_LINUX) && ! defined(QT_NO_DBUS) && (QT_VERSION < QT_VERSION_CHECK(5, 9, 0))
         // re-register global D-Bus menu (needed on Ubuntu with Unity)
         // see https://github.com/keepassxreboot/keepassxc/issues/271
         // and https://bugreports.qt.io/browse/QTBUG-58723

From cd6aac9acf0282594c90b77353c97d9a905e3d69 Mon Sep 17 00:00:00 2001
From: Janek Bevendorff <janek@jbev.net>
Date: Tue, 24 Oct 2017 15:37:03 +0200
Subject: [PATCH 054/118] Remove libdbus and libsystemd blacklisting

---
 AppImage-Recipe.sh | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/AppImage-Recipe.sh b/AppImage-Recipe.sh
index c421aa79..d8b71549 100755
--- a/AppImage-Recipe.sh
+++ b/AppImage-Recipe.sh
@@ -66,10 +66,6 @@ get_apprun
 copy_deps
 delete_blacklisted
 
-# remove dbus and systemd libs as they are not blacklisted
-find . -name libdbus-1.so.3 -exec rm {} \;
-find . -name libsystemd.so.0 -exec rm {} \;
-
 get_desktop
 get_icon
 cat << EOF > ./usr/bin/keepassxc_env

From 83fd387f2f187c4a11be0bff6535d3e2b49e136d Mon Sep 17 00:00:00 2001
From: Janek Bevendorff <janek@jbev.net>
Date: Tue, 24 Oct 2017 17:10:01 +0200
Subject: [PATCH 055/118] Fix desktop integration

---
 AppImage-Recipe.sh | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/AppImage-Recipe.sh b/AppImage-Recipe.sh
index d8b71549..e29c0562 100755
--- a/AppImage-Recipe.sh
+++ b/AppImage-Recipe.sh
@@ -85,8 +85,8 @@ else
 fi
 EOF
 chmod +x ./usr/bin/keepassxc_env
-sed -i 's/Exec=keepassxc/Exec=keepassxc_env/' org.keepassxc.desktop
-get_desktopintegration $LOWERAPP
+sed -i 's/Exec=keepassxc/Exec=keepassxc_env/' org.${LOWERAPP}.desktop
+get_desktopintegration "org.${LOWERAPP}"
 
 GLIBC_NEEDED=$(glibc_needed)
 

From ca59ae4f4f503ff0044919ebce94d544484aa126 Mon Sep 17 00:00:00 2001
From: thez3ro <io@thezero.org>
Date: Tue, 24 Oct 2017 18:24:25 +0200
Subject: [PATCH 056/118] remove useless View menu

---
 src/gui/MainWindow.cpp | 6 ------
 src/gui/MainWindow.ui  | 6 ------
 2 files changed, 12 deletions(-)

diff --git a/src/gui/MainWindow.cpp b/src/gui/MainWindow.cpp
index c83cae10..e8a1728f 100644
--- a/src/gui/MainWindow.cpp
+++ b/src/gui/MainWindow.cpp
@@ -124,12 +124,6 @@ MainWindow::MainWindow()
 
     setWindowIcon(filePath()->applicationIcon());
     m_ui->globalMessageWidget->setHidden(true);
-    QAction* toggleViewAction = m_ui->toolBar->toggleViewAction();
-    toggleViewAction->setText(tr("Show toolbar"));
-    m_ui->menuView->addAction(toggleViewAction);
-    bool showToolbar = config()->get("ShowToolbar").toBool();
-    m_ui->toolBar->setVisible(showToolbar);
-    connect(m_ui->toolBar, SIGNAL(visibilityChanged(bool)), this, SLOT(saveToolbarState(bool)));
 
     m_clearHistoryAction = new QAction(tr("Clear history"), m_ui->menuFile);
     m_lastDatabasesActions = new QActionGroup(m_ui->menuRecentDatabases);
diff --git a/src/gui/MainWindow.ui b/src/gui/MainWindow.ui
index 258dd90c..6824904a 100644
--- a/src/gui/MainWindow.ui
+++ b/src/gui/MainWindow.ui
@@ -260,15 +260,9 @@
     <addaction name="actionPasswordGenerator"/>
     <addaction name="actionSettings"/>
    </widget>
-   <widget class="QMenu" name="menuView">
-    <property name="title">
-     <string>&amp;View</string>
-    </property>
-   </widget>
    <addaction name="menuFile"/>
    <addaction name="menuEntries"/>
    <addaction name="menuGroups"/>
-   <addaction name="menuView"/>
    <addaction name="menuTools"/>
    <addaction name="menuHelp"/>
   </widget>

From 4076b37378248ffcacddc8b3b722b4d61e0920bb Mon Sep 17 00:00:00 2001
From: thez3ro <io@thezero.org>
Date: Tue, 24 Oct 2017 19:23:55 +0200
Subject: [PATCH 057/118] disable the save button if there isn't anything to
 save

---
 src/gui/DatabaseTabWidget.cpp | 10 ++++++++++
 src/gui/DatabaseTabWidget.h   |  1 +
 src/gui/MainWindow.cpp        |  3 ++-
 3 files changed, 13 insertions(+), 1 deletion(-)

diff --git a/src/gui/DatabaseTabWidget.cpp b/src/gui/DatabaseTabWidget.cpp
index 4c9445cc..8510279b 100644
--- a/src/gui/DatabaseTabWidget.cpp
+++ b/src/gui/DatabaseTabWidget.cpp
@@ -539,6 +539,16 @@ bool DatabaseTabWidget::readOnly(int index)
     return indexDatabaseManagerStruct(index).readOnly;
 }
 
+bool DatabaseTabWidget::canSave(int index)
+{
+    if (index == -1) {
+        index = currentIndex();
+    }
+
+    const DatabaseManagerStruct& dbStruct = indexDatabaseManagerStruct(index);
+    return !dbStruct.saveToFilename || (dbStruct.modified && !dbStruct.readOnly);
+}
+
 bool DatabaseTabWidget::isModified(int index)
 {
     if (index == -1) {
diff --git a/src/gui/DatabaseTabWidget.h b/src/gui/DatabaseTabWidget.h
index 847eaef0..db237d98 100644
--- a/src/gui/DatabaseTabWidget.h
+++ b/src/gui/DatabaseTabWidget.h
@@ -78,6 +78,7 @@ public slots:
     void changeMasterKey();
     void changeDatabaseSettings();
     bool readOnly(int index = -1);
+    bool canSave(int index = -1);
     bool isModified(int index = -1);
     void performGlobalAutoType();
     void lockDatabases();
diff --git a/src/gui/MainWindow.cpp b/src/gui/MainWindow.cpp
index e8a1728f..c82ea175 100644
--- a/src/gui/MainWindow.cpp
+++ b/src/gui/MainWindow.cpp
@@ -454,7 +454,7 @@ void MainWindow::setMenuActionState(DatabaseWidget::Mode mode)
             m_ui->actionGroupEmptyRecycleBin->setEnabled(recycleBinSelected);
             m_ui->actionChangeMasterKey->setEnabled(true);
             m_ui->actionChangeDatabaseSettings->setEnabled(true);
-            m_ui->actionDatabaseSave->setEnabled(true);
+            m_ui->actionDatabaseSave->setEnabled(m_ui->tabWidget->canSave());
             m_ui->actionDatabaseSaveAs->setEnabled(true);
             m_ui->actionExportCsv->setEnabled(true);
             m_ui->actionDatabaseMerge->setEnabled(m_ui->tabWidget->currentIndex() != -1);
@@ -560,6 +560,7 @@ void MainWindow::updateWindowTitle()
         if (m_ui->tabWidget->readOnly(tabWidgetIndex)) {
             customWindowTitlePart.append(QString(" [%1]").arg(tr("read-only")));
         }
+        m_ui->actionDatabaseSave->setEnabled(m_ui->tabWidget->canSave(tabWidgetIndex));
     } else if (stackedWidgetIndex == 1) {
         customWindowTitlePart = tr("Settings");
     }

From ecfbad0443d638585c38554fa0e8baeac6d14fac Mon Sep 17 00:00:00 2001
From: Louis-Bertrand Varin <louisbvarin@gmail.com>
Date: Tue, 24 Oct 2017 20:26:02 -0400
Subject: [PATCH 058/118] Disable reload prompt when db is locked

---
 src/gui/DatabaseWidget.cpp | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/src/gui/DatabaseWidget.cpp b/src/gui/DatabaseWidget.cpp
index 7fbcbe35..0cf41828 100644
--- a/src/gui/DatabaseWidget.cpp
+++ b/src/gui/DatabaseWidget.cpp
@@ -825,7 +825,7 @@ void DatabaseWidget::unlockDatabase(bool accepted)
         return;
     }
 
-    Database *db = Q_NULLPTR;
+    Database* db = Q_NULLPTR;
     if (sender() == m_unlockDatabaseDialog) {
         db = m_unlockDatabaseDialog->database();
     } else if (sender() == m_unlockDatabaseWidget) {
@@ -1125,8 +1125,13 @@ void DatabaseWidget::onWatchedFileChanged()
 
 void DatabaseWidget::reloadDatabaseFile()
 {
-    if (m_db == nullptr)
+    if (m_db == nullptr) {
         return;
+    }
+
+    if (currentMode() == DatabaseWidget::LockedMode) {
+        return;
+    }
 
     if (! config()->get("AutoReloadOnChange").toBool()) {
         // Ask if we want to reload the db

From 055ba4f14ed4cf69519f5d5c6313fd231718bf1d Mon Sep 17 00:00:00 2001
From: Louis-Bertrand Varin <louisbvarin@gmail.com>
Date: Wed, 25 Oct 2017 10:15:37 -0400
Subject: [PATCH 059/118] Q_NULLPTR -> nullptr

---
 src/gui/DatabaseWidget.cpp     | 2 +-
 src/gui/UnlockDatabaseDialog.h | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/gui/DatabaseWidget.cpp b/src/gui/DatabaseWidget.cpp
index 0cf41828..6a425b5d 100644
--- a/src/gui/DatabaseWidget.cpp
+++ b/src/gui/DatabaseWidget.cpp
@@ -825,7 +825,7 @@ void DatabaseWidget::unlockDatabase(bool accepted)
         return;
     }
 
-    Database* db = Q_NULLPTR;
+    Database* db = nullptr;
     if (sender() == m_unlockDatabaseDialog) {
         db = m_unlockDatabaseDialog->database();
     } else if (sender() == m_unlockDatabaseWidget) {
diff --git a/src/gui/UnlockDatabaseDialog.h b/src/gui/UnlockDatabaseDialog.h
index 9a42ed6e..ef2eabb3 100644
--- a/src/gui/UnlockDatabaseDialog.h
+++ b/src/gui/UnlockDatabaseDialog.h
@@ -31,7 +31,7 @@ class UnlockDatabaseDialog : public QDialog
 {
     Q_OBJECT
 public:
-    explicit UnlockDatabaseDialog(QWidget* parent = Q_NULLPTR);
+    explicit UnlockDatabaseDialog(QWidget* parent = nullptr);
     void setDBFilename(const QString& filename);
     void clearForms();
     Database* database();

From 263bee3c095abaa4e98d516ac440fdd3852d3f3b Mon Sep 17 00:00:00 2001
From: Francois Ferrand <thetypz@gmail.com>
Date: Wed, 30 Aug 2017 17:54:15 +0200
Subject: [PATCH 060/118] Detect session lock on Xfce/XUbuntu 16.04

The current code does not work with XUbuntu 16.04, which uses
light-locker to lock the screen.

I am not using a screensaver, but I suspect the screensaver activation
may have been detected by the existing events, and using it could thus
mask the issue.
---
 src/core/ScreenLockListenerDBus.cpp | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/src/core/ScreenLockListenerDBus.cpp b/src/core/ScreenLockListenerDBus.cpp
index 1976b47e..6c1b7fe9 100644
--- a/src/core/ScreenLockListenerDBus.cpp
+++ b/src/core/ScreenLockListenerDBus.cpp
@@ -20,6 +20,7 @@
 #include <QDBusConnection>
 #include <QDBusInterface>
 #include <QDBusReply>
+#include <QProcessEnvironment>
 
 ScreenLockListenerDBus::ScreenLockListenerDBus(QWidget *parent):
     ScreenLockListenerPrivate(parent)
@@ -34,7 +35,7 @@ ScreenLockListenerDBus::ScreenLockListenerDBus(QWidget *parent):
                 "ActiveChanged", // signal name
                 this, //receiver
                 SLOT(freedesktopScreenSaver(bool)));
-    
+
     sessionBus.connect(
                 "org.gnome.SessionManager", // service
                 "/org/gnome/SessionManager/Presence", // path
@@ -51,6 +52,15 @@ ScreenLockListenerDBus::ScreenLockListenerDBus(QWidget *parent):
                 this, //receiver
                 SLOT(logindPrepareForSleep(bool)));
 
+    QString sessionId = QProcessEnvironment::systemEnvironment().value("XDG_SESSION_ID");
+    systemBus.connect(
+                "", // service
+                QString("/org/freedesktop/login1/session/") + sessionId, // path
+                "org.freedesktop.login1.Session", // interface
+                "Lock", // signal name
+                this, //receiver
+                SLOT(unityLocked()));
+
     sessionBus.connect(
                 "com.canonical.Unity", // service
                 "/com/canonical/Unity/Session", // path
@@ -84,4 +94,4 @@ void ScreenLockListenerDBus::freedesktopScreenSaver(bool status)
     if (status) {
         emit screenLocked();
     }
-}
\ No newline at end of file
+}

From 1a87e30b95f0cda7b31e641a79ffc5bb46fb7521 Mon Sep 17 00:00:00 2001
From: thez3ro <io@thezero.org>
Date: Thu, 17 Aug 2017 21:02:21 +0200
Subject: [PATCH 061/118] add preview panel for entries and groups

---
 COPYING                                       |   1 +
 .../application/22x22/actions/chronometer.png | Bin 0 -> 1675 bytes
 src/CMakeLists.txt                            |   1 +
 src/core/Group.cpp                            |  12 +
 src/core/Group.h                              |   1 +
 src/gui/DatabaseWidget.cpp                    |  46 +-
 src/gui/DatabaseWidget.h                      |   9 +
 src/gui/DetailsWidget.cpp                     | 213 +++++++
 src/gui/DetailsWidget.h                       |  60 ++
 src/gui/DetailsWidget.ui                      | 552 ++++++++++++++++++
 src/gui/SettingsWidget.cpp                    |   4 +
 src/gui/SettingsWidgetGeneral.ui              |   7 +
 src/gui/SettingsWidgetSecurity.ui             |   7 +
 src/gui/entry/EntryView.cpp                   |   7 +
 src/gui/entry/EntryView.h                     |   2 +
 src/gui/group/GroupView.cpp                   |   7 +
 src/gui/group/GroupView.h                     |   2 +
 17 files changed, 930 insertions(+), 1 deletion(-)
 create mode 100644 share/icons/application/22x22/actions/chronometer.png
 create mode 100644 src/gui/DetailsWidget.cpp
 create mode 100644 src/gui/DetailsWidget.h
 create mode 100644 src/gui/DetailsWidget.ui

diff --git a/COPYING b/COPYING
index 403e4564..e12f4534 100644
--- a/COPYING
+++ b/COPYING
@@ -156,6 +156,7 @@ License: LGPL-2.1
 Comment: based on Nuvola icon theme
 
 Files: share/icons/application/*/actions/application-exit.png
+       share/icons/application/*/actions/chronometer.png
        share/icons/application/*/actions/configure.png
        share/icons/application/*/actions/dialog-close.png
        share/icons/application/*/actions/dialog-ok.png
diff --git a/share/icons/application/22x22/actions/chronometer.png b/share/icons/application/22x22/actions/chronometer.png
new file mode 100644
index 0000000000000000000000000000000000000000..71d6eabe5f7447958918c8c5d73ab060ada1d78c
GIT binary patch
literal 1675
zcmV;626Xv}P)<h;3K|Lk000e1NJLTq000&M000&U1^@s6#I$TX00006VoOIv0RI60
z0RN!9r;`8x010qNS#tmY3ljhU3ljkVnw%H_000McNliru;Rp{1CMOXXUgrP+1{g_1
zK~y-)U6f61RM#EF&;P!!dGkFm<Hr~qgNG7T#zA&d(bOceqEaa|o1~}`=^|AWwGNV1
zA=HADNZ3?WRWG1)fl*M?MHX%aa!adNq^JuB2q}sQ;5z<@XY3h!Z0rd$!+URL-kbMv
zyD(I4j&yVvSNEs;Kf3o2wrFs05QBq**tc&V0HAYsC*FGdEtXEFNe~3oYjys`y)XEO
zfBukfJ$K{Ajib6@yyQ79_qjjny6!wZ+Z-Ai!qCtV0N~A^z9}62@zJ2~`Rz@o`GTsd
zyNF2gJZ}RW_fx6Vm$z=;s=xo<`}VbK*M4Z4=8L9bT>izt!0M$-mqryuIZXgCJUomu
zXU+fsMn*=qWipvpqmk$@HBI}jBuTJs8=U))BpI?Sqf{!bRjQRs%Z23+BC+U?+IH@|
zOuqlmpc?%7KPEo@P9~Fa=){Q=IDh^;0N~uYbKTE(KR>j6`}Q~LjXLJ%=doHW@}}d!
z_gpZ>5DrJs)wQ2mTU%im#)BvNleulN=#fw;99~??U!IwpU2z=e>i?oRd-iPip}s?x
z6N$vZnb{dU-q=7(D#c}4rbHqE-}h0iR{7%6B0YJc^JqLy2M>M^j4>>HHE*O^w0qfX
zwz#~qd~;-E<O2eLQ@=hH@9F8e(%IShgNF|u@bnH1-+t~nh^`A)5D*N7zyUNG4cN8~
z!!R)Y<unS*E9iga6*6?g_;_OC?a|ST;{bdB5Kf;yO~GJrV1L*C<BN+qWcKVvDwTqy
zD8wH>Mlc=+lVxIzk)kM2Rh3-VMIfM(C<w?G3dm&kD#>J0+OucRCwK1Lv5voc9LzLL
zwQXnHdzNKEmPB-ScT+GJguocobQ=2H9KrKIw3!+sf@RyVZ5zG4z0{iCfl_G$?d|Qa
zA2@KJ2LN3hy$EKSW`9ddOEQ<s^1c_p&wbzLkw^rJEOR-LK&@Eh+;KQ#j7y@3jjzAv
z;cysTU0pntO7Y&FURajJBhe^0=dTUCI}iW>7K_FDi3qOi!frOH-e{0x7_be4+-4Ik
zFTYHWu3sl55TN^0Q}8^GlF1}gRV7A5oOAe|M?`?E$bH9ta%^)lNs=;+Mg#F!44S6#
zfU0si97Zr2<-|E+ZEgHNw{G#@zw-`{gu~diYZqsXfrvO01fEPLvAd&#bI(UC7W>wP
zKmK93tE+2*d9J5gjRqKFV1huRD3YYA5EO-ES%x48^l)*JjPY^O(rM79o~=Yg2&gI%
zW2l+6z*0WnpUdUqVx?MHw`?1p=YRkZ08tPCL4YJlxP9{`Ub}Ds=0_hPBFg|{ApU<<
z0n4%wjzqCiTv?l(oP3FhG;w`>eNxx;pP8nCjZz6gRpo(T5a1lH=iyLa9{`|!>J;2&
z69H8P-@Gw6=iD?+lq(fPqA^q|m8l~~j>rHCtXwYtYiVf-qA1e(`Z|wq+XmNhU|SX^
z0GxAfSr+$2k$bWX5OLr4Vb*F~k|fBojCefGv)L?aX6^d)^t1&4Y)5*>SGmR9gyXpQ
z^!9D4R4QZ`26V$9P6T3%h%s_>og`6&@B8F)j&iw7^?IGMxg0#tr))O+=+XM4e-{b`
z2LOa>rAmsdEHK87sllLJE|>YPjt->LX)r<9{1}`=4hBJj09oE_xJWpRnVA_lu1C7A
zV_{)oc<e7@H|n*zclhvO2(?-bE5((ySS+SXqVy^g1gbY0h{xl!J()zcTt+w&AyJk|
z6h-K|PNF1Xc5aqxwFX(1h1uEJzkc@lXTO{Ld{Q4A9K_hz7=)82PvY*~yWIEvheV`1
zuG3FMLbX!C>gp=Wl?wTuhgz+MjZz8OY?g|}BCLi*Yinzmnwq+D@BY1CUA=O34FEJv
z!~Fa_XzR0SZ*P}0O*^b<+HX2KI(ql+-3v|A5DJALZsrTivQVv5k<aHV`9l7;^;-Q;
z<9{2k;v0Gf7M_{`P*SN>G878+CzHuHT3cIRNF)+1vLvJFG|f_}G`+gI`boW3|9ifW
zU$t$!{<JE+E%u**836GqTzqOtk|bG?6+sXMfiXtD@B7VW)3<Hg@qORf0&>3z{x5B`
V=tXj1`11e&002ovPDHLkV1fyI8=(LI

literal 0
HcmV?d00001

diff --git a/src/CMakeLists.txt b/src/CMakeLists.txt
index 3f0ba782..97ff5edf 100644
--- a/src/CMakeLists.txt
+++ b/src/CMakeLists.txt
@@ -98,6 +98,7 @@ set(keepassx_SOURCES
     gui/DatabaseTabWidget.cpp
     gui/DatabaseWidget.cpp
     gui/DatabaseWidgetStateSync.cpp
+    gui/DetailsWidget.cpp
     gui/DialogyWidget.cpp
     gui/DragTabBar.cpp
     gui/EditWidget.cpp
diff --git a/src/core/Group.cpp b/src/core/Group.cpp
index 644d2ff6..fa48d8ce 100644
--- a/src/core/Group.cpp
+++ b/src/core/Group.cpp
@@ -435,6 +435,18 @@ void Group::setParent(Database* db)
     QObject::setParent(db);
 }
 
+QStringList Group::hierarchy()
+{
+    QStringList hierarchy;
+    Group* group = this;
+    while (group->parentGroup()) {
+        hierarchy << group->name();
+
+        group = group->parentGroup();
+    }
+    return hierarchy;
+}
+
 Database* Group::database()
 {
     return m_db;
diff --git a/src/core/Group.h b/src/core/Group.h
index 27400703..2a9d2b18 100644
--- a/src/core/Group.h
+++ b/src/core/Group.h
@@ -106,6 +106,7 @@ public:
     Group* parentGroup();
     const Group* parentGroup() const;
     void setParent(Group* parent, int index = -1);
+    QStringList hierarchy();
 
     Database* database();
     const Database* database() const;
diff --git a/src/gui/DatabaseWidget.cpp b/src/gui/DatabaseWidget.cpp
index 6a425b5d..0b83002e 100644
--- a/src/gui/DatabaseWidget.cpp
+++ b/src/gui/DatabaseWidget.cpp
@@ -47,6 +47,7 @@
 #include "gui/TotpDialog.h"
 #include "gui/DatabaseOpenWidget.h"
 #include "gui/DatabaseSettingsWidget.h"
+#include "gui/DetailsWidget.h"
 #include "gui/KeePass1OpenWidget.h"
 #include "gui/MessageBox.h"
 #include "gui/UnlockDatabaseWidget.h"
@@ -74,6 +75,9 @@ DatabaseWidget::DatabaseWidget(Database* db, QWidget* parent)
     mainLayout->addLayout(layout);
     m_splitter = new QSplitter(m_mainWidget);
     m_splitter->setChildrenCollapsible(false);
+    m_detailSplitter = new QSplitter(m_mainWidget);
+    m_detailSplitter->setOrientation(Qt::Vertical);
+    m_detailSplitter->setChildrenCollapsible(true);
 
     QWidget* rightHandSideWidget = new QWidget(m_splitter);
 
@@ -99,10 +103,18 @@ DatabaseWidget::DatabaseWidget(Database* db, QWidget* parent)
                                     "border: 2px solid rgb(190, 190, 190);"
                                     "border-radius: 5px;");
 
+    m_detailsView = new DetailsWidget(this);
+
     QVBoxLayout* vLayout = new QVBoxLayout(rightHandSideWidget);
     vLayout->setMargin(0);
     vLayout->addWidget(m_searchingLabel);
-    vLayout->addWidget(m_entryView);
+    vLayout->addWidget(m_detailSplitter);
+
+    m_detailSplitter->addWidget(m_entryView);
+    m_detailSplitter->addWidget(m_detailsView);
+
+    m_detailSplitter->setStretchFactor(0, 80);
+    m_detailSplitter->setStretchFactor(1, 20);
 
     m_searchingLabel->setVisible(false);
 
@@ -180,6 +192,12 @@ DatabaseWidget::DatabaseWidget(Database* db, QWidget* parent)
     connect(&m_fileWatchUnblockTimer, SIGNAL(timeout()), this, SLOT(unblockAutoReload()));
     connect(this, SIGNAL(currentChanged(int)), this, SLOT(emitCurrentModeChanged()));
 
+    connect(m_groupView, SIGNAL(groupPressed(Group*)), SLOT(emitPressedGroup(Group*)));
+    //connect(m_groupView, SIGNAL(groupChanged(Group*)), SLOT(emitPressedGroup(Group*)));
+    connect(m_entryView, SIGNAL(entryPressed(Entry*)), SLOT(emitPressedEntry(Entry*)));
+    //connect(m_entryView, SIGNAL(entrySelectionChanged()), SLOT(emitPressedEntry()));
+    connect(m_editEntryWidget, SIGNAL(editFinished(bool)), SLOT(emitPressedEntry()));
+
     m_databaseModified = false;
 
     m_fileWatchTimer.setSingleShot(true);
@@ -1041,6 +1059,32 @@ void DatabaseWidget::emitEntryContextMenuRequested(const QPoint& pos)
     emit entryContextMenuRequested(m_entryView->viewport()->mapToGlobal(pos));
 }
 
+void DatabaseWidget::emitPressedEntry()
+{
+    Entry* currentEntry = m_entryView->currentEntry();
+    emitPressedEntry(currentEntry);
+}
+
+void DatabaseWidget::emitPressedEntry(Entry* currentEntry)
+{
+    if (!currentEntry) {
+        // if no entry is pressed, leave in details the last entry
+        return;
+    }
+
+    emit pressedEntry(currentEntry);
+}
+
+void DatabaseWidget::emitPressedGroup(Group* currentGroup)
+{
+    if (!currentGroup) {
+        // if no group is pressed, leave in details the last group
+        return;
+    }
+
+    emit pressedGroup(currentGroup);
+}
+
 bool DatabaseWidget::dbHasKey() const
 {
     return m_db->hasKey();
diff --git a/src/gui/DatabaseWidget.h b/src/gui/DatabaseWidget.h
index 93482000..141248bd 100644
--- a/src/gui/DatabaseWidget.h
+++ b/src/gui/DatabaseWidget.h
@@ -27,6 +27,7 @@
 #include "core/Uuid.h"
 
 #include "gui/entry/EntryModel.h"
+#include "gui/DetailsWidget.h"
 #include "gui/MessageWidget.h"
 #include "gui/csvImport/CsvImportWizard.h"
 
@@ -47,6 +48,7 @@ class QSplitter;
 class QLabel;
 class UnlockDatabaseWidget;
 class MessageWidget;
+class DetailsWidget;
 class UnlockDatabaseDialog;
 class QFileSystemWatcher;
 
@@ -115,6 +117,8 @@ signals:
     void databaseMerged(Database* mergedDb);
     void groupContextMenuRequested(const QPoint& globalPos);
     void entryContextMenuRequested(const QPoint& globalPos);
+    void pressedEntry(Entry* selectedEntry);
+    void pressedGroup(Group* selectedGroup);
     void unlockedDatabase();
     void listModeAboutToActivate();
     void listModeActivated();
@@ -179,6 +183,9 @@ private slots:
     void switchToGroupEdit(Group* entry, bool create);
     void emitGroupContextMenuRequested(const QPoint& pos);
     void emitEntryContextMenuRequested(const QPoint& pos);
+    void emitPressedEntry();
+    void emitPressedEntry(Entry* currentEntry);
+    void emitPressedGroup(Group* currentGroup);
     void updateMasterKey(bool accepted);
     void openDatabase(bool accepted);
     void mergeDatabase(bool accepted);
@@ -209,6 +216,7 @@ private:
     UnlockDatabaseWidget* m_unlockDatabaseWidget;
     UnlockDatabaseDialog* m_unlockDatabaseDialog;
     QSplitter* m_splitter;
+    QSplitter* m_detailSplitter;
     GroupView* m_groupView;
     EntryView* m_entryView;
     QLabel* m_searchingLabel;
@@ -219,6 +227,7 @@ private:
     Uuid m_groupBeforeLock;
     Uuid m_entryBeforeLock;
     MessageWidget* m_messageWidget;
+    DetailsWidget* m_detailsView;
 
     // Search state
     QString m_lastSearchText;
diff --git a/src/gui/DetailsWidget.cpp b/src/gui/DetailsWidget.cpp
new file mode 100644
index 00000000..d506d551
--- /dev/null
+++ b/src/gui/DetailsWidget.cpp
@@ -0,0 +1,213 @@
+/*
+ *  Copyright (C) 2012 Felix Geyer <debfx@fobos.de>
+ *  Copyright (C) 2017 KeePassXC Team <team@keepassxc.org>
+ *
+ *  This program is free software: you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation, either version 2 or (at your option)
+ *  version 3 of the License.
+ *
+ *  This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#include "DetailsWidget.h"
+#include "ui_DetailsWidget.h"
+
+#include <QDebug>
+
+#include "core/Config.h"
+#include "core/FilePath.h"
+#include "core/TimeInfo.h"
+
+DetailsWidget::DetailsWidget(QWidget* parent)
+    : QWidget(parent)
+    , m_ui(new Ui::DetailsWidget())
+    , m_currentEntry(nullptr)
+    , m_currentGroup(nullptr)
+{
+    m_ui->setupUi(this);
+
+    connect(parent, SIGNAL(pressedEntry(Entry*)), SLOT(getSelectedEntry(Entry*)));
+    connect(parent, SIGNAL(pressedGroup(Group*)), SLOT(getSelectedGroup(Group*)));
+
+    m_ui->totpButton->setIcon(filePath()->icon("actions", "chronometer"));
+    m_ui->closeButton->setIcon(filePath()->icon("actions", "dialog-close"));
+    m_ui->togglePasswordButton->setIcon(filePath()->onOffIcon("actions", "password-show"));
+
+    connect(m_ui->totpButton, SIGNAL(toggled(bool)), SLOT(showTotp(bool)));
+    connect(m_ui->closeButton, SIGNAL(toggled(bool)), SLOT(hideDetails()));
+    connect(m_ui->togglePasswordButton, SIGNAL(toggled(bool)), SLOT(togglePasswordShown(bool)));
+
+    this->hide();
+}
+
+DetailsWidget::~DetailsWidget()
+{
+}
+
+void DetailsWidget::getSelectedEntry(Entry* selectedEntry) 
+{
+    m_currentEntry = selectedEntry;
+
+    if (!config()->get("GUI/HideDetailsView").toBool()) {
+        this->show();
+    }
+
+    m_ui->stackedWidget->setCurrentIndex(EntryPreview);
+
+    m_ui->totpButton->hide();
+    m_ui->totpWidget->hide();
+    m_ui->totpButton->setChecked(false);
+
+    m_ui->entryIcon->setPixmap(m_currentEntry->iconPixmap());
+
+    QStringList hierarchy = m_currentEntry->group()->hierarchy();
+    QString title = " / ";
+    for (QString parent : hierarchy) {
+        title.append(parent);
+        title.append(" / ");
+    }
+    title.append(m_currentEntry->title());
+    m_ui->titleLabel->setText(title);
+
+    m_ui->usernameLabel->setText(m_currentEntry->username());
+    m_ui->groupLabel->setText(m_currentEntry->group()->name());
+    m_ui->notesEdit->setText(m_currentEntry->notes());
+
+    if (!config()->get("security/hidepassworddetails").toBool()) {
+        m_ui->passwordEdit->setText(m_currentEntry->password());
+        m_ui->togglePasswordButton->show();
+    } else {
+        m_ui->passwordEdit->setText("****");
+        m_ui->togglePasswordButton->hide();
+    }
+
+    QString url = m_currentEntry->webUrl();
+    if (url != "") {
+        url = QString("<a href=\"%1\">%2</a>").arg(url).arg(shortUrl(url));
+        m_ui->urlLabel->setOpenExternalLinks(true);
+    } else {
+        url = shortUrl(m_currentEntry->resolveMultiplePlaceholders(m_currentEntry->url()));
+        m_ui->urlLabel->setOpenExternalLinks(false);
+    }
+    m_ui->urlLabel->setText(url);
+
+    TimeInfo entryTime = m_currentEntry->timeInfo();
+    if (entryTime.expires()) {
+        m_ui->expirationLabel->setText(entryTime.expiryTime().toString(Qt::DefaultLocaleShortDate));
+    } else {
+        m_ui->expirationLabel->setText(tr("Never"));
+    }
+
+    m_ui->creationLabel->setText(entryTime.creationTime().toString(Qt::DefaultLocaleShortDate));
+    m_ui->modifyLabel->setText(entryTime.lastModificationTime().toString(Qt::DefaultLocaleShortDate));
+    m_ui->accessLabel->setText(entryTime.lastAccessTime().toString(Qt::DefaultLocaleShortDate));
+
+    if (m_currentEntry->hasTotp()) {
+        m_ui->totpButton->show();
+        updateTotp();
+
+        m_step = m_currentEntry->totpStep();
+
+        m_timer = new QTimer(this);
+        connect(m_timer, SIGNAL(timeout()), this, SLOT(updateTotp()));
+        m_timer->start(m_step * 10);
+    }
+}
+
+void DetailsWidget::getSelectedGroup(Group* selectedGroup) 
+{
+    m_currentGroup = selectedGroup;
+
+    if (!config()->get("GUI/HideDetailsView").toBool()) {
+        this->show();
+    }
+
+    m_ui->stackedWidget->setCurrentIndex(GroupPreview);
+
+    m_ui->totpButton->hide();
+    m_ui->totpWidget->hide();
+
+    m_ui->entryIcon->setPixmap(m_currentGroup->iconPixmap());
+
+    QStringList hierarchy = m_currentGroup->hierarchy();
+    QString title = " / ";
+    for (QString parent : hierarchy) {
+        title.append(parent);
+        title.append(" / ");
+    }
+    m_ui->titleLabel->setText(title);
+
+    m_ui->notesEdit->setText(m_currentGroup->notes());
+
+    QString searching = tr("Disabled");
+    if (m_currentGroup->resolveSearchingEnabled()) {
+        searching = tr("Enabled");
+    }
+    m_ui->searchingLabel->setText(searching);
+
+    QString autotype = tr("Disabled");
+    if (m_currentGroup->resolveAutoTypeEnabled()) {
+        autotype = tr("Enabled");
+    }
+    m_ui->autotypeLabel->setText(autotype);
+    
+    TimeInfo groupTime = m_currentGroup->timeInfo();
+    if (groupTime.expires()) {
+        m_ui->groupExpirationLabel->setText(groupTime.expiryTime().toString(Qt::DefaultLocaleShortDate));
+    } else {
+        m_ui->groupExpirationLabel->setText(tr("Never"));
+    }
+
+    m_ui->groupCreationLabel->setText(groupTime.creationTime().toString(Qt::DefaultLocaleShortDate));
+    m_ui->groupModifyLabel->setText(groupTime.lastModificationTime().toString(Qt::DefaultLocaleShortDate));
+    m_ui->groupAccessLabel->setText(groupTime.lastAccessTime().toString(Qt::DefaultLocaleShortDate));
+}
+
+void DetailsWidget::updateTotp()
+{
+    QString totpCode = m_currentEntry->totp();
+    QString firstHalf = totpCode.left(totpCode.size()/2);
+    QString secondHalf = totpCode.right(totpCode.size()/2);
+    m_ui->totpLabel->setText(firstHalf + " " + secondHalf);
+}
+
+void DetailsWidget::showTotp(bool visible)
+{   
+    if (visible){
+        m_ui->totpWidget->show();
+    } else {
+        m_ui->totpWidget->hide();
+    }    
+}
+
+QString DetailsWidget::shortUrl(QString url)
+{
+    QString newurl = "";
+    if (url.length() > 60) {
+        newurl.append(url.left(20));
+        newurl.append("...");
+        newurl.append(url.right(20));
+        return newurl;
+    }
+    return url;
+}
+
+void DetailsWidget::hideDetails()
+{
+    this->hide();
+}
+
+void DetailsWidget::togglePasswordShown(bool showing)
+{
+    m_ui->passwordEdit->setShowPassword(showing);
+    bool blockSignals = m_ui->togglePasswordButton->blockSignals(true);
+    m_ui->togglePasswordButton->setChecked(showing);
+    m_ui->togglePasswordButton->blockSignals(blockSignals);
+}
\ No newline at end of file
diff --git a/src/gui/DetailsWidget.h b/src/gui/DetailsWidget.h
new file mode 100644
index 00000000..89e6cf62
--- /dev/null
+++ b/src/gui/DetailsWidget.h
@@ -0,0 +1,60 @@
+/*
+ *  Copyright (C) 2017 KeePassXC Team <team@keepassxc.org>
+ *
+ *  This program is free software: you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation, either version 2 or (at your option)
+ *  version 3 of the License.
+ *
+ *  This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#ifndef KEEPASSX_DETAILSWIDGET_H
+#define KEEPASSX_DETAILSWIDGET_H
+
+#include <QWidget>
+
+#include "gui/DatabaseWidget.h"
+
+namespace Ui {
+    class DetailsWidget;
+}
+
+class DetailsWidget : public QWidget
+{
+    Q_OBJECT
+
+public:
+    explicit DetailsWidget(QWidget* parent = nullptr);
+    ~DetailsWidget();
+
+    enum StackedWidgetIndex
+    {
+        EntryPreview = 0,
+        GroupPreview = 1,
+    };
+
+private slots:
+    void getSelectedEntry(Entry* selectedEntry);
+    void getSelectedGroup(Group* selectedGroup);
+    void showTotp(bool visible);
+    void updateTotp();
+    void hideDetails();
+    void togglePasswordShown(bool showing);
+
+private:
+    const QScopedPointer<Ui::DetailsWidget> m_ui;
+    Entry* m_currentEntry;
+    Group* m_currentGroup;
+    quint8 m_step;
+    QTimer* m_timer;
+    QString shortUrl(QString url);
+};
+
+#endif // KEEPASSX_DETAILSWIDGET_H
diff --git a/src/gui/DetailsWidget.ui b/src/gui/DetailsWidget.ui
new file mode 100644
index 00000000..fb6b7fb2
--- /dev/null
+++ b/src/gui/DetailsWidget.ui
@@ -0,0 +1,552 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<ui version="4.0">
+ <class>DetailsWidget</class>
+ <widget class="QWidget" name="DetailsWidget">
+  <property name="geometry">
+   <rect>
+    <x>0</x>
+    <y>0</y>
+    <width>630</width>
+    <height>207</height>
+   </rect>
+  </property>
+  <property name="sizePolicy">
+   <sizepolicy hsizetype="MinimumExpanding" vsizetype="Minimum">
+    <horstretch>0</horstretch>
+    <verstretch>0</verstretch>
+   </sizepolicy>
+  </property>
+  <property name="maximumSize">
+   <size>
+    <width>16777215</width>
+    <height>235</height>
+   </size>
+  </property>
+  <layout class="QVBoxLayout" name="verticalLayout_3">
+   <item>
+    <layout class="QHBoxLayout" name="horizontalLayout" stretch="0,0,0,0,0,0,0">
+     <property name="sizeConstraint">
+      <enum>QLayout::SetDefaultConstraint</enum>
+     </property>
+     <item>
+      <widget class="QLabel" name="entryIcon">
+       <property name="sizePolicy">
+        <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
+         <horstretch>0</horstretch>
+         <verstretch>0</verstretch>
+        </sizepolicy>
+       </property>
+       <property name="maximumSize">
+        <size>
+         <width>20</width>
+         <height>16777215</height>
+        </size>
+       </property>
+       <property name="text">
+        <string/>
+       </property>
+      </widget>
+     </item>
+     <item>
+      <widget class="QLabel" name="titleLabel">
+       <property name="sizePolicy">
+        <sizepolicy hsizetype="Preferred" vsizetype="Fixed">
+         <horstretch>0</horstretch>
+         <verstretch>0</verstretch>
+        </sizepolicy>
+       </property>
+       <property name="font">
+        <font>
+         <pointsize>12</pointsize>
+        </font>
+       </property>
+       <property name="textFormat">
+        <enum>Qt::AutoText</enum>
+       </property>
+      </widget>
+     </item>
+     <item>
+      <spacer name="horizontalSpacer">
+       <property name="orientation">
+        <enum>Qt::Horizontal</enum>
+       </property>
+       <property name="sizeHint" stdset="0">
+        <size>
+         <width>40</width>
+         <height>20</height>
+        </size>
+       </property>
+      </spacer>
+     </item>
+     <item>
+      <widget class="QWidget" name="totpWidget" native="true">
+       <layout class="QGridLayout" name="gridLayout_3">
+        <property name="leftMargin">
+         <number>0</number>
+        </property>
+        <property name="topMargin">
+         <number>0</number>
+        </property>
+        <property name="bottomMargin">
+         <number>0</number>
+        </property>
+        <item row="0" column="0">
+         <widget class="QLabel" name="totpLabel">
+          <property name="font">
+           <font>
+            <pointsize>10</pointsize>
+            <weight>75</weight>
+            <bold>true</bold>
+           </font>
+          </property>
+          <property name="text">
+           <string/>
+          </property>
+         </widget>
+        </item>
+       </layout>
+      </widget>
+     </item>
+     <item>
+      <widget class="QToolButton" name="totpButton">
+       <property name="toolTip">
+        <string>Generate TOTP Token</string>
+       </property>
+       <property name="text">
+        <string/>
+       </property>
+       <property name="checkable">
+        <bool>true</bool>
+       </property>
+      </widget>
+     </item>
+     <item>
+      <widget class="QToolButton" name="closeButton">
+       <property name="toolTip">
+        <string>Generate TOTP Token</string>
+       </property>
+       <property name="text">
+        <string/>
+       </property>
+       <property name="checkable">
+        <bool>true</bool>
+       </property>
+      </widget>
+     </item>
+     <item>
+      <widget class="QFrame" name="frame">
+       <property name="frameShape">
+        <enum>QFrame::StyledPanel</enum>
+       </property>
+       <property name="frameShadow">
+        <enum>QFrame::Raised</enum>
+       </property>
+      </widget>
+     </item>
+    </layout>
+   </item>
+   <item>
+    <widget class="QStackedWidget" name="stackedWidget">
+     <property name="sizePolicy">
+      <sizepolicy hsizetype="Preferred" vsizetype="Minimum">
+       <horstretch>0</horstretch>
+       <verstretch>0</verstretch>
+      </sizepolicy>
+     </property>
+     <property name="currentIndex">
+      <number>0</number>
+     </property>
+     <widget class="QWidget" name="entryPage">
+      <layout class="QVBoxLayout" name="verticalLayout_2">
+       <property name="leftMargin">
+        <number>0</number>
+       </property>
+       <property name="topMargin">
+        <number>0</number>
+       </property>
+       <property name="rightMargin">
+        <number>0</number>
+       </property>
+       <property name="bottomMargin">
+        <number>0</number>
+       </property>
+       <item>
+        <layout class="QHBoxLayout" name="horizontalLayout_6">
+         <item>
+          <layout class="QHBoxLayout" name="horizontalLayout_7">
+           <item>
+            <layout class="QGridLayout" name="gridLayout">
+             <item row="0" column="0">
+              <widget class="QLabel" name="groupLabel_2">
+               <property name="font">
+                <font>
+                 <weight>75</weight>
+                 <bold>true</bold>
+                </font>
+               </property>
+               <property name="text">
+                <string>Group</string>
+               </property>
+              </widget>
+             </item>
+             <item row="3" column="0">
+              <widget class="QLabel" name="urlLabel_2">
+               <property name="font">
+                <font>
+                 <pointsize>9</pointsize>
+                 <weight>75</weight>
+                 <bold>true</bold>
+                </font>
+               </property>
+               <property name="text">
+                <string>URL</string>
+               </property>
+              </widget>
+             </item>
+             <item row="2" column="0">
+              <widget class="QLabel" name="passwordLabel_2">
+               <property name="font">
+                <font>
+                 <weight>75</weight>
+                 <bold>true</bold>
+                </font>
+               </property>
+               <property name="text">
+                <string>Password</string>
+               </property>
+              </widget>
+             </item>
+             <item row="1" column="0">
+              <widget class="QLabel" name="usernameLabel_2">
+               <property name="font">
+                <font>
+                 <weight>75</weight>
+                 <bold>true</bold>
+                </font>
+               </property>
+               <property name="text">
+                <string>Username</string>
+               </property>
+              </widget>
+             </item>
+             <item row="0" column="1">
+              <widget class="QLabel" name="groupLabel"/>
+             </item>
+             <item row="1" column="1">
+              <widget class="QLabel" name="usernameLabel"/>
+             </item>
+             <item row="2" column="1">
+              <layout class="QHBoxLayout" name="horizontalLayout_2">
+               <item>
+                <widget class="PasswordEdit" name="passwordEdit">
+                 <property name="sizePolicy">
+                  <sizepolicy hsizetype="Minimum" vsizetype="Fixed">
+                   <horstretch>0</horstretch>
+                   <verstretch>0</verstretch>
+                  </sizepolicy>
+                 </property>
+                 <property name="maxLength">
+                  <number>999</number>
+                 </property>
+                 <property name="readOnly">
+                  <bool>true</bool>
+                 </property>
+                </widget>
+               </item>
+               <item>
+                <widget class="QToolButton" name="togglePasswordButton">
+                 <property name="checkable">
+                  <bool>true</bool>
+                 </property>
+                </widget>
+               </item>
+              </layout>
+             </item>
+             <item row="3" column="1">
+              <widget class="QLabel" name="urlLabel">
+               <property name="sizePolicy">
+                <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
+                 <horstretch>0</horstretch>
+                 <verstretch>0</verstretch>
+                </sizepolicy>
+               </property>
+               <property name="text">
+                <string/>
+               </property>
+              </widget>
+             </item>
+            </layout>
+           </item>
+          </layout>
+         </item>
+         <item>
+          <layout class="QGridLayout" name="gridLayout_2">
+           <item row="2" column="0">
+            <widget class="QLabel" name="modifyLabel_2">
+             <property name="font">
+              <font>
+               <weight>75</weight>
+               <bold>true</bold>
+              </font>
+             </property>
+             <property name="text">
+              <string>Modification</string>
+             </property>
+            </widget>
+           </item>
+           <item row="1" column="0">
+            <widget class="QLabel" name="accessLabel_2">
+             <property name="font">
+              <font>
+               <weight>75</weight>
+               <bold>true</bold>
+              </font>
+             </property>
+             <property name="text">
+              <string>Access</string>
+             </property>
+            </widget>
+           </item>
+           <item row="1" column="1">
+            <widget class="QLabel" name="accessLabel"/>
+           </item>
+           <item row="0" column="1">
+            <widget class="QLabel" name="creationLabel"/>
+           </item>
+           <item row="0" column="0">
+            <widget class="QLabel" name="creationLabel_2">
+             <property name="font">
+              <font>
+               <weight>75</weight>
+               <bold>true</bold>
+              </font>
+             </property>
+             <property name="text">
+              <string>Creation</string>
+             </property>
+            </widget>
+           </item>
+           <item row="3" column="0">
+            <widget class="QLabel" name="expirationLabel_2">
+             <property name="font">
+              <font>
+               <weight>75</weight>
+               <bold>true</bold>
+              </font>
+             </property>
+             <property name="text">
+              <string>Expiration</string>
+             </property>
+            </widget>
+           </item>
+           <item row="2" column="1">
+            <widget class="QLabel" name="modifyLabel"/>
+           </item>
+           <item row="3" column="1">
+            <widget class="QLabel" name="expirationLabel"/>
+           </item>
+          </layout>
+         </item>
+        </layout>
+       </item>
+      </layout>
+     </widget>
+     <widget class="QWidget" name="groupPage">
+      <layout class="QVBoxLayout" name="verticalLayout">
+       <property name="leftMargin">
+        <number>0</number>
+       </property>
+       <property name="topMargin">
+        <number>0</number>
+       </property>
+       <property name="rightMargin">
+        <number>0</number>
+       </property>
+       <property name="bottomMargin">
+        <number>0</number>
+       </property>
+       <item>
+        <layout class="QHBoxLayout" name="horizontalLayout_8">
+         <item>
+          <layout class="QHBoxLayout" name="horizontalLayout_9">
+           <item>
+            <layout class="QGridLayout" name="gridLayout_4">
+             <item row="0" column="1">
+              <widget class="QLabel" name="autotypeLabel"/>
+             </item>
+             <item row="0" column="0">
+              <widget class="QLabel" name="autotypeLabel_2">
+               <property name="font">
+                <font>
+                 <weight>75</weight>
+                 <bold>true</bold>
+                </font>
+               </property>
+               <property name="text">
+                <string>Autotype</string>
+               </property>
+              </widget>
+             </item>
+             <item row="1" column="1">
+              <widget class="QLabel" name="searchingLabel"/>
+             </item>
+             <item row="1" column="0">
+              <widget class="QLabel" name="searchingLabel_2">
+               <property name="font">
+                <font>
+                 <weight>75</weight>
+                 <bold>true</bold>
+                </font>
+               </property>
+               <property name="text">
+                <string>Searching</string>
+               </property>
+              </widget>
+             </item>
+             <item row="2" column="1">
+              <widget class="QLabel" name="groupExpirationLabel"/>
+             </item>
+             <item row="2" column="0">
+              <widget class="QLabel" name="groupExpirationLabel_2">
+               <property name="font">
+                <font>
+                 <weight>75</weight>
+                 <bold>true</bold>
+                </font>
+               </property>
+               <property name="text">
+                <string>Expiration</string>
+               </property>
+              </widget>
+             </item>
+            </layout>
+           </item>
+          </layout>
+         </item>
+         <item>
+          <layout class="QGridLayout" name="gridLayout_5">
+           <item row="2" column="0">
+            <widget class="QLabel" name="groupModifyLabel_2">
+             <property name="font">
+              <font>
+               <weight>75</weight>
+               <bold>true</bold>
+              </font>
+             </property>
+             <property name="text">
+              <string>Modification</string>
+             </property>
+            </widget>
+           </item>
+           <item row="1" column="0">
+            <widget class="QLabel" name="groupAccessLabel_2">
+             <property name="font">
+              <font>
+               <weight>75</weight>
+               <bold>true</bold>
+              </font>
+             </property>
+             <property name="text">
+              <string>Access</string>
+             </property>
+            </widget>
+           </item>
+           <item row="1" column="1">
+            <widget class="QLabel" name="groupAccessLabel"/>
+           </item>
+           <item row="0" column="1">
+            <widget class="QLabel" name="groupCreationLabel"/>
+           </item>
+           <item row="0" column="0">
+            <widget class="QLabel" name="groupCreationLabel_2">
+             <property name="font">
+              <font>
+               <weight>75</weight>
+               <bold>true</bold>
+              </font>
+             </property>
+             <property name="text">
+              <string>Creation</string>
+             </property>
+            </widget>
+           </item>
+           <item row="2" column="1">
+            <widget class="QLabel" name="groupModifyLabel"/>
+           </item>
+          </layout>
+         </item>
+        </layout>
+       </item>
+      </layout>
+     </widget>
+    </widget>
+   </item>
+   <item>
+    <layout class="QFormLayout" name="formLayout">
+     <item row="0" column="1">
+      <widget class="QTextEdit" name="notesEdit">
+       <property name="sizePolicy">
+        <sizepolicy hsizetype="Expanding" vsizetype="Expanding">
+         <horstretch>0</horstretch>
+         <verstretch>1</verstretch>
+        </sizepolicy>
+       </property>
+       <property name="minimumSize">
+        <size>
+         <width>0</width>
+         <height>50</height>
+        </size>
+       </property>
+       <property name="maximumSize">
+        <size>
+         <width>16777215</width>
+         <height>50</height>
+        </size>
+       </property>
+       <property name="focusPolicy">
+        <enum>Qt::ClickFocus</enum>
+       </property>
+       <property name="readOnly">
+        <bool>true</bool>
+       </property>
+      </widget>
+     </item>
+     <item row="0" column="0">
+      <widget class="QLabel" name="notesLabel_2">
+       <property name="text">
+        <string>Notes</string>
+       </property>
+      </widget>
+     </item>
+    </layout>
+   </item>
+   <item>
+    <widget class="Line" name="line">
+     <property name="orientation">
+      <enum>Qt::Horizontal</enum>
+     </property>
+    </widget>
+   </item>
+  </layout>
+  <action name="searchIcon">
+   <property name="text">
+    <string>Search</string>
+   </property>
+  </action>
+  <action name="clearIcon">
+   <property name="text">
+    <string>Clear</string>
+   </property>
+  </action>
+ </widget>
+ <customwidgets>
+  <customwidget>
+   <class>PasswordEdit</class>
+   <extends>QLineEdit</extends>
+   <header>gui/PasswordEdit.h</header>
+   <container>1</container>
+  </customwidget>
+ </customwidgets>
+ <resources/>
+ <connections/>
+</ui>
diff --git a/src/gui/SettingsWidget.cpp b/src/gui/SettingsWidget.cpp
index 8385bf26..aa0e5664 100644
--- a/src/gui/SettingsWidget.cpp
+++ b/src/gui/SettingsWidget.cpp
@@ -134,6 +134,7 @@ void SettingsWidget::loadSettings()
         m_generalUi->languageComboBox->setCurrentIndex(defaultIndex);
     }
 
+    m_generalUi->detailsHideCheckBox->setChecked(config()->get("GUI/HideDetailsView").toBool());
     m_generalUi->systrayShowCheckBox->setChecked(config()->get("GUI/ShowTrayIcon").toBool());
     m_generalUi->systrayMinimizeToTrayCheckBox->setChecked(config()->get("GUI/MinimizeToTray").toBool());
     m_generalUi->systrayMinimizeOnCloseCheckBox->setChecked(config()->get("GUI/MinimizeOnClose").toBool());
@@ -160,6 +161,7 @@ void SettingsWidget::loadSettings()
     m_secUi->fallbackToGoogle->setChecked(config()->get("security/IconDownloadFallbackToGoogle").toBool());
 
     m_secUi->passwordCleartextCheckBox->setChecked(config()->get("security/passwordscleartext").toBool());
+    m_secUi->passwordDetailsCleartextCheckBox->setChecked(config()->get("security/hidepassworddetails").toBool());
     m_secUi->passwordRepeatCheckBox->setChecked(config()->get("security/passwordsrepeat").toBool());
 
 
@@ -203,6 +205,7 @@ void SettingsWidget::saveSettings()
 
     config()->set("GUI/Language", m_generalUi->languageComboBox->itemData(currentLangIndex).toString());
 
+    config()->set("GUI/HideDetailsView", m_generalUi->detailsHideCheckBox->isChecked());
     config()->set("GUI/ShowTrayIcon", m_generalUi->systrayShowCheckBox->isChecked());
     config()->set("GUI/MinimizeToTray", m_generalUi->systrayMinimizeToTrayCheckBox->isChecked());
     config()->set("GUI/MinimizeOnClose", m_generalUi->systrayMinimizeOnCloseCheckBox->isChecked());
@@ -226,6 +229,7 @@ void SettingsWidget::saveSettings()
     config()->set("security/IconDownloadFallbackToGoogle", m_secUi->fallbackToGoogle->isChecked());
 
     config()->set("security/passwordscleartext", m_secUi->passwordCleartextCheckBox->isChecked());
+    config()->set("security/hidepassworddetails", m_secUi->passwordDetailsCleartextCheckBox->isChecked());
     config()->set("security/passwordsrepeat", m_secUi->passwordRepeatCheckBox->isChecked());
 
     // Security: clear storage if related settings are disabled
diff --git a/src/gui/SettingsWidgetGeneral.ui b/src/gui/SettingsWidgetGeneral.ui
index 1e62104c..7dc4487c 100644
--- a/src/gui/SettingsWidgetGeneral.ui
+++ b/src/gui/SettingsWidgetGeneral.ui
@@ -153,6 +153,13 @@
             </property>
            </spacer>
           </item>
+          <item>
+           <widget class="QCheckBox" name="detailsHideCheckBox">
+            <property name="text">
+             <string>Hide the Details view</string>
+            </property>
+           </widget>
+          </item>
           <item>
            <widget class="QCheckBox" name="systrayShowCheckBox">
             <property name="text">
diff --git a/src/gui/SettingsWidgetSecurity.ui b/src/gui/SettingsWidgetSecurity.ui
index 4233fdbd..53c69db6 100644
--- a/src/gui/SettingsWidgetSecurity.ui
+++ b/src/gui/SettingsWidgetSecurity.ui
@@ -136,6 +136,13 @@
         </property>
        </widget>
       </item>
+      <item>
+       <widget class="QCheckBox" name="passwordDetailsCleartextCheckBox">
+        <property name="text">
+         <string>Hide passwords in the preview panel</string>
+        </property>
+       </widget>
+      </item>
      </layout>
     </widget>
    </item>
diff --git a/src/gui/entry/EntryView.cpp b/src/gui/entry/EntryView.cpp
index 1bdd4fbc..ac8e6678 100644
--- a/src/gui/entry/EntryView.cpp
+++ b/src/gui/entry/EntryView.cpp
@@ -49,6 +49,8 @@ EntryView::EntryView(QWidget* parent)
     connect(selectionModel(), SIGNAL(selectionChanged(QItemSelection,QItemSelection)), SIGNAL(entrySelectionChanged()));
     connect(m_model, SIGNAL(switchedToEntryListMode()), SLOT(switchToEntryListMode()));
     connect(m_model, SIGNAL(switchedToGroupMode()), SLOT(switchToGroupMode()));
+
+    connect(this, SIGNAL(clicked(QModelIndex)), SLOT(emitEntryPressed(QModelIndex)));
 }
 
 void EntryView::keyPressEvent(QKeyEvent* event)
@@ -99,6 +101,11 @@ void EntryView::emitEntryActivated(const QModelIndex& index)
     emit entryActivated(entry, static_cast<EntryModel::ModelColumn>(m_sortModel->mapToSource(index).column()));
 }
 
+void EntryView::emitEntryPressed(const QModelIndex& index)
+{
+    emit entryPressed(entryFromIndex(index));
+}
+
 void EntryView::setModel(QAbstractItemModel* model)
 {
     Q_UNUSED(model);
diff --git a/src/gui/entry/EntryView.h b/src/gui/entry/EntryView.h
index 6a545f62..14c6b7cc 100644
--- a/src/gui/entry/EntryView.h
+++ b/src/gui/entry/EntryView.h
@@ -47,6 +47,7 @@ public slots:
 
 signals:
     void entryActivated(Entry* entry, EntryModel::ModelColumn column);
+    void entryPressed(Entry* entry);
     void entrySelectionChanged();
 
 protected:
@@ -54,6 +55,7 @@ protected:
 
 private slots:
     void emitEntryActivated(const QModelIndex& index);
+    void emitEntryPressed(const QModelIndex& index);
     void switchToEntryListMode();
     void switchToGroupMode();
 
diff --git a/src/gui/group/GroupView.cpp b/src/gui/group/GroupView.cpp
index e9649e44..82d01e31 100644
--- a/src/gui/group/GroupView.cpp
+++ b/src/gui/group/GroupView.cpp
@@ -41,6 +41,8 @@ GroupView::GroupView(Database* db, QWidget* parent)
 
     connect(selectionModel(), SIGNAL(currentChanged(QModelIndex,QModelIndex)), SLOT(emitGroupChanged()));
 
+    connect(this, SIGNAL(clicked(QModelIndex)), SLOT(emitGroupPressed(QModelIndex)));
+
     modelReset();
 
     setDragEnabled(true);
@@ -126,6 +128,11 @@ void GroupView::emitGroupChanged()
     emit groupChanged(currentGroup());
 }
 
+void GroupView::emitGroupPressed(const QModelIndex& index)
+{
+    emit groupPressed(m_model->groupFromIndex(index));
+}
+
 void GroupView::syncExpandedState(const QModelIndex& parent, int start, int end)
 {
     for (int row = start; row <= end; row++) {
diff --git a/src/gui/group/GroupView.h b/src/gui/group/GroupView.h
index eaa29072..0a084425 100644
--- a/src/gui/group/GroupView.h
+++ b/src/gui/group/GroupView.h
@@ -38,11 +38,13 @@ public:
 
 signals:
     void groupChanged(Group* group);
+    void groupPressed(Group* group);
 
 private slots:
     void expandedChanged(const QModelIndex& index);
     void emitGroupChanged(const QModelIndex& index);
     void emitGroupChanged();
+    void emitGroupPressed(const QModelIndex& index);
     void syncExpandedState(const QModelIndex& parent, int start, int end);
     void modelReset();
 

From 0e6fedc056f2f03400a3048c71c2faefd278f2df Mon Sep 17 00:00:00 2001
From: thez3ro <io@thezero.org>
Date: Thu, 31 Aug 2017 00:52:05 +0200
Subject: [PATCH 062/118] fix group parent, add details update by keyboard

---
 src/core/Group.cpp         | 10 +++++---
 src/gui/DatabaseWidget.cpp |  4 +--
 src/gui/DetailsWidget.cpp  | 52 ++++++++++++++++++++++----------------
 src/gui/DetailsWidget.h    |  2 +-
 src/gui/DetailsWidget.ui   | 38 +++-------------------------
 5 files changed, 43 insertions(+), 63 deletions(-)

diff --git a/src/core/Group.cpp b/src/core/Group.cpp
index fa48d8ce..1fee54a4 100644
--- a/src/core/Group.cpp
+++ b/src/core/Group.cpp
@@ -439,10 +439,14 @@ QStringList Group::hierarchy()
 {
     QStringList hierarchy;
     Group* group = this;
-    while (group->parentGroup()) {
-        hierarchy << group->name();
-
+    Group* parent = m_parent;
+    hierarchy << group->name();
+    
+    while (parent) {
         group = group->parentGroup();
+        parent = group->parentGroup();
+
+        hierarchy << group->name();
     }
     return hierarchy;
 }
diff --git a/src/gui/DatabaseWidget.cpp b/src/gui/DatabaseWidget.cpp
index 0b83002e..6571668c 100644
--- a/src/gui/DatabaseWidget.cpp
+++ b/src/gui/DatabaseWidget.cpp
@@ -193,9 +193,9 @@ DatabaseWidget::DatabaseWidget(Database* db, QWidget* parent)
     connect(this, SIGNAL(currentChanged(int)), this, SLOT(emitCurrentModeChanged()));
 
     connect(m_groupView, SIGNAL(groupPressed(Group*)), SLOT(emitPressedGroup(Group*)));
-    //connect(m_groupView, SIGNAL(groupChanged(Group*)), SLOT(emitPressedGroup(Group*)));
+    connect(m_groupView, SIGNAL(groupChanged(Group*)), SLOT(emitPressedGroup(Group*)));
     connect(m_entryView, SIGNAL(entryPressed(Entry*)), SLOT(emitPressedEntry(Entry*)));
-    //connect(m_entryView, SIGNAL(entrySelectionChanged()), SLOT(emitPressedEntry()));
+    connect(m_entryView, SIGNAL(entrySelectionChanged()), SLOT(emitPressedEntry()));
     connect(m_editEntryWidget, SIGNAL(editFinished(bool)), SLOT(emitPressedEntry()));
 
     m_databaseModified = false;
diff --git a/src/gui/DetailsWidget.cpp b/src/gui/DetailsWidget.cpp
index d506d551..ee051e9c 100644
--- a/src/gui/DetailsWidget.cpp
+++ b/src/gui/DetailsWidget.cpp
@@ -24,6 +24,7 @@
 #include "core/Config.h"
 #include "core/FilePath.h"
 #include "core/TimeInfo.h"
+#include "gui/Clipboard.h"
 
 DetailsWidget::DetailsWidget(QWidget* parent)
     : QWidget(parent)
@@ -38,11 +39,9 @@ DetailsWidget::DetailsWidget(QWidget* parent)
 
     m_ui->totpButton->setIcon(filePath()->icon("actions", "chronometer"));
     m_ui->closeButton->setIcon(filePath()->icon("actions", "dialog-close"));
-    m_ui->togglePasswordButton->setIcon(filePath()->onOffIcon("actions", "password-show"));
 
     connect(m_ui->totpButton, SIGNAL(toggled(bool)), SLOT(showTotp(bool)));
     connect(m_ui->closeButton, SIGNAL(toggled(bool)), SLOT(hideDetails()));
-    connect(m_ui->togglePasswordButton, SIGNAL(toggled(bool)), SLOT(togglePasswordShown(bool)));
 
     this->hide();
 }
@@ -67,25 +66,31 @@ void DetailsWidget::getSelectedEntry(Entry* selectedEntry)
 
     m_ui->entryIcon->setPixmap(m_currentEntry->iconPixmap());
 
-    QStringList hierarchy = m_currentEntry->group()->hierarchy();
     QString title = " / ";
-    for (QString parent : hierarchy) {
-        title.append(parent);
-        title.append(" / ");
+
+    Group* entry_group = m_currentEntry->group();
+    if (entry_group) {
+        QStringList hierarchy = entry_group->hierarchy();
+        
+        for (QString parent : hierarchy) {
+            title.append(parent);
+            title.append(" / ");
+        }
     }
-    title.append(m_currentEntry->title());
+    title.append(m_currentEntry->resolveMultiplePlaceholders(m_currentEntry->title()));
     m_ui->titleLabel->setText(title);
 
-    m_ui->usernameLabel->setText(m_currentEntry->username());
-    m_ui->groupLabel->setText(m_currentEntry->group()->name());
-    m_ui->notesEdit->setText(m_currentEntry->notes());
+    m_ui->usernameLabel->setText(m_currentEntry->resolveMultiplePlaceholders(m_currentEntry->username()));
+    if (entry_group) {
+        m_ui->groupLabel->setText(entry_group->name());
+    }
+    m_ui->notesEdit->setText(m_currentEntry->resolveMultiplePlaceholders(m_currentEntry->notes()));
 
     if (!config()->get("security/hidepassworddetails").toBool()) {
-        m_ui->passwordEdit->setText(m_currentEntry->password());
-        m_ui->togglePasswordButton->show();
+        m_ui->passwordLabel->setText(shortPassword(m_currentEntry->resolveMultiplePlaceholders(m_currentEntry->password())));
+        m_ui->passwordLabel->setToolTip(m_currentEntry->resolveMultiplePlaceholders(m_currentEntry->password()));
     } else {
-        m_ui->passwordEdit->setText("****");
-        m_ui->togglePasswordButton->hide();
+        m_ui->passwordLabel->setText("****");
     }
 
     QString url = m_currentEntry->webUrl();
@@ -199,15 +204,18 @@ QString DetailsWidget::shortUrl(QString url)
     return url;
 }
 
+QString DetailsWidget::shortPassword(QString password)
+{
+    QString newpassword = "";
+    if (password.length() > 60) {
+        newpassword.append(password.left(50));
+        newpassword.append("...");
+        return newpassword;
+    }
+    return password;
+}
+
 void DetailsWidget::hideDetails()
 {
     this->hide();
 }
-
-void DetailsWidget::togglePasswordShown(bool showing)
-{
-    m_ui->passwordEdit->setShowPassword(showing);
-    bool blockSignals = m_ui->togglePasswordButton->blockSignals(true);
-    m_ui->togglePasswordButton->setChecked(showing);
-    m_ui->togglePasswordButton->blockSignals(blockSignals);
-}
\ No newline at end of file
diff --git a/src/gui/DetailsWidget.h b/src/gui/DetailsWidget.h
index 89e6cf62..d4accf08 100644
--- a/src/gui/DetailsWidget.h
+++ b/src/gui/DetailsWidget.h
@@ -46,7 +46,6 @@ private slots:
     void showTotp(bool visible);
     void updateTotp();
     void hideDetails();
-    void togglePasswordShown(bool showing);
 
 private:
     const QScopedPointer<Ui::DetailsWidget> m_ui;
@@ -55,6 +54,7 @@ private:
     quint8 m_step;
     QTimer* m_timer;
     QString shortUrl(QString url);
+    QString shortPassword(QString password);
 };
 
 #endif // KEEPASSX_DETAILSWIDGET_H
diff --git a/src/gui/DetailsWidget.ui b/src/gui/DetailsWidget.ui
index fb6b7fb2..b4c3150f 100644
--- a/src/gui/DetailsWidget.ui
+++ b/src/gui/DetailsWidget.ui
@@ -235,33 +235,6 @@
              <item row="1" column="1">
               <widget class="QLabel" name="usernameLabel"/>
              </item>
-             <item row="2" column="1">
-              <layout class="QHBoxLayout" name="horizontalLayout_2">
-               <item>
-                <widget class="PasswordEdit" name="passwordEdit">
-                 <property name="sizePolicy">
-                  <sizepolicy hsizetype="Minimum" vsizetype="Fixed">
-                   <horstretch>0</horstretch>
-                   <verstretch>0</verstretch>
-                  </sizepolicy>
-                 </property>
-                 <property name="maxLength">
-                  <number>999</number>
-                 </property>
-                 <property name="readOnly">
-                  <bool>true</bool>
-                 </property>
-                </widget>
-               </item>
-               <item>
-                <widget class="QToolButton" name="togglePasswordButton">
-                 <property name="checkable">
-                  <bool>true</bool>
-                 </property>
-                </widget>
-               </item>
-              </layout>
-             </item>
              <item row="3" column="1">
               <widget class="QLabel" name="urlLabel">
                <property name="sizePolicy">
@@ -275,6 +248,9 @@
                </property>
               </widget>
              </item>
+             <item row="2" column="1">
+              <widget class="QLabel" name="passwordLabel"/>
+             </item>
             </layout>
            </item>
           </layout>
@@ -539,14 +515,6 @@
    </property>
   </action>
  </widget>
- <customwidgets>
-  <customwidget>
-   <class>PasswordEdit</class>
-   <extends>QLineEdit</extends>
-   <header>gui/PasswordEdit.h</header>
-   <container>1</container>
-  </customwidget>
- </customwidgets>
  <resources/>
  <connections/>
 </ui>

From 4a5fc2104f82b1e43a9d9d12b909ad65c97a8014 Mon Sep 17 00:00:00 2001
From: thez3ro <io@thezero.org>
Date: Thu, 31 Aug 2017 00:57:50 +0200
Subject: [PATCH 063/118] fix notes label

---
 src/gui/DetailsWidget.ui | 37 ++++++++++++++++++++++++++++++-------
 1 file changed, 30 insertions(+), 7 deletions(-)

diff --git a/src/gui/DetailsWidget.ui b/src/gui/DetailsWidget.ui
index b4c3150f..0f202c0f 100644
--- a/src/gui/DetailsWidget.ui
+++ b/src/gui/DetailsWidget.ui
@@ -459,6 +459,36 @@
    </item>
    <item>
     <layout class="QFormLayout" name="formLayout">
+     <item row="0" column="0">
+      <layout class="QVBoxLayout" name="verticalLayout_4">
+       <item>
+        <widget class="QLabel" name="notesLabel_2">
+         <property name="font">
+          <font>
+           <weight>75</weight>
+           <bold>true</bold>
+          </font>
+         </property>
+         <property name="text">
+          <string>Notes</string>
+         </property>
+        </widget>
+       </item>
+       <item>
+        <spacer name="verticalSpacer">
+         <property name="orientation">
+          <enum>Qt::Vertical</enum>
+         </property>
+         <property name="sizeHint" stdset="0">
+          <size>
+           <width>20</width>
+           <height>40</height>
+          </size>
+         </property>
+        </spacer>
+       </item>
+      </layout>
+     </item>
      <item row="0" column="1">
       <widget class="QTextEdit" name="notesEdit">
        <property name="sizePolicy">
@@ -487,13 +517,6 @@
        </property>
       </widget>
      </item>
-     <item row="0" column="0">
-      <widget class="QLabel" name="notesLabel_2">
-       <property name="text">
-        <string>Notes</string>
-       </property>
-      </widget>
-     </item>
     </layout>
    </item>
    <item>

From eb6582266533a979a753327b7f222867b7d146c3 Mon Sep 17 00:00:00 2001
From: thez3ro <io@thezero.org>
Date: Wed, 27 Sep 2017 19:18:13 +0200
Subject: [PATCH 064/118] layout update

---
 src/core/Group.cpp        |   5 +-
 src/gui/DatabaseWidget.h  |   1 -
 src/gui/DetailsWidget.cpp |  67 +++-
 src/gui/DetailsWidget.h   |  10 +
 src/gui/DetailsWidget.ui  | 727 ++++++++++++++++++++------------------
 5 files changed, 449 insertions(+), 361 deletions(-)

diff --git a/src/core/Group.cpp b/src/core/Group.cpp
index 1fee54a4..6f70db34 100644
--- a/src/core/Group.cpp
+++ b/src/core/Group.cpp
@@ -440,14 +440,15 @@ QStringList Group::hierarchy()
     QStringList hierarchy;
     Group* group = this;
     Group* parent = m_parent;
-    hierarchy << group->name();
+    hierarchy.prepend(group->name());
     
     while (parent) {
         group = group->parentGroup();
         parent = group->parentGroup();
 
-        hierarchy << group->name();
+        hierarchy.prepend(group->name());
     }
+
     return hierarchy;
 }
 
diff --git a/src/gui/DatabaseWidget.h b/src/gui/DatabaseWidget.h
index 141248bd..404adb52 100644
--- a/src/gui/DatabaseWidget.h
+++ b/src/gui/DatabaseWidget.h
@@ -27,7 +27,6 @@
 #include "core/Uuid.h"
 
 #include "gui/entry/EntryModel.h"
-#include "gui/DetailsWidget.h"
 #include "gui/MessageWidget.h"
 #include "gui/csvImport/CsvImportWizard.h"
 
diff --git a/src/gui/DetailsWidget.cpp b/src/gui/DetailsWidget.cpp
index ee051e9c..45284c84 100644
--- a/src/gui/DetailsWidget.cpp
+++ b/src/gui/DetailsWidget.cpp
@@ -25,10 +25,12 @@
 #include "core/FilePath.h"
 #include "core/TimeInfo.h"
 #include "gui/Clipboard.h"
+#include "gui/DatabaseWidget.h"
 
 DetailsWidget::DetailsWidget(QWidget* parent)
     : QWidget(parent)
     , m_ui(new Ui::DetailsWidget())
+    , m_locked(false)
     , m_currentEntry(nullptr)
     , m_currentGroup(nullptr)
 {
@@ -36,6 +38,7 @@ DetailsWidget::DetailsWidget(QWidget* parent)
 
     connect(parent, SIGNAL(pressedEntry(Entry*)), SLOT(getSelectedEntry(Entry*)));
     connect(parent, SIGNAL(pressedGroup(Group*)), SLOT(getSelectedGroup(Group*)));
+    connect(parent, SIGNAL(currentModeChanged(DatabaseWidget::Mode)), SLOT(setDatabaseMode(DatabaseWidget::Mode)));
 
     m_ui->totpButton->setIcon(filePath()->icon("actions", "chronometer"));
     m_ui->closeButton->setIcon(filePath()->icon("actions", "dialog-close"));
@@ -60,6 +63,9 @@ void DetailsWidget::getSelectedEntry(Entry* selectedEntry)
 
     m_ui->stackedWidget->setCurrentIndex(EntryPreview);
 
+    m_ui->tabWidget->setTabEnabled(AttributesTab, false);
+    m_ui->tabWidget->setTabEnabled(NotesTab, false);
+
     m_ui->totpButton->hide();
     m_ui->totpWidget->hide();
     m_ui->totpButton->setChecked(false);
@@ -81,10 +87,6 @@ void DetailsWidget::getSelectedEntry(Entry* selectedEntry)
     m_ui->titleLabel->setText(title);
 
     m_ui->usernameLabel->setText(m_currentEntry->resolveMultiplePlaceholders(m_currentEntry->username()));
-    if (entry_group) {
-        m_ui->groupLabel->setText(entry_group->name());
-    }
-    m_ui->notesEdit->setText(m_currentEntry->resolveMultiplePlaceholders(m_currentEntry->notes()));
 
     if (!config()->get("security/hidepassworddetails").toBool()) {
         m_ui->passwordLabel->setText(shortPassword(m_currentEntry->resolveMultiplePlaceholders(m_currentEntry->password())));
@@ -110,10 +112,6 @@ void DetailsWidget::getSelectedEntry(Entry* selectedEntry)
         m_ui->expirationLabel->setText(tr("Never"));
     }
 
-    m_ui->creationLabel->setText(entryTime.creationTime().toString(Qt::DefaultLocaleShortDate));
-    m_ui->modifyLabel->setText(entryTime.lastModificationTime().toString(Qt::DefaultLocaleShortDate));
-    m_ui->accessLabel->setText(entryTime.lastAccessTime().toString(Qt::DefaultLocaleShortDate));
-
     if (m_currentEntry->hasTotp()) {
         m_ui->totpButton->show();
         updateTotp();
@@ -124,6 +122,28 @@ void DetailsWidget::getSelectedEntry(Entry* selectedEntry)
         connect(m_timer, SIGNAL(timeout()), this, SLOT(updateTotp()));
         m_timer->start(m_step * 10);
     }
+
+    QString notes = m_currentEntry->notes();
+    if (!notes.isEmpty()) {
+        m_ui->tabWidget->setTabEnabled(NotesTab, true);
+        m_ui->notesEdit->setText(m_currentEntry->resolveMultiplePlaceholders(notes));
+    }
+
+    QStringList customAttributes = m_currentEntry->attributes()->customKeys();
+    if (customAttributes.size() > 0) {
+        m_ui->tabWidget->setTabEnabled(AttributesTab, true);
+        m_ui->attributesEdit->clear();
+
+        QString attributesText = QString();
+        for (const QString& key : customAttributes) {
+            QString value = m_currentEntry->attributes()->value(key);
+            if (m_currentEntry->attributes()->isProtected(key)) {
+                value = "<i>[PROTECTED]</i>";
+            }
+            attributesText.append(QString("<b>%1</b>: %2<br/>").arg(key, value));
+        }
+        m_ui->attributesEdit->setText(attributesText);
+    }
 }
 
 void DetailsWidget::getSelectedGroup(Group* selectedGroup) 
@@ -136,13 +156,18 @@ void DetailsWidget::getSelectedGroup(Group* selectedGroup)
 
     m_ui->stackedWidget->setCurrentIndex(GroupPreview);
 
+    m_ui->tabWidget->setTabEnabled(AttributesTab, false);
+    m_ui->tabWidget->setTabEnabled(NotesTab, false);
+
     m_ui->totpButton->hide();
     m_ui->totpWidget->hide();
 
     m_ui->entryIcon->setPixmap(m_currentGroup->iconPixmap());
 
-    QStringList hierarchy = m_currentGroup->hierarchy();
     QString title = " / ";
+
+    QStringList hierarchy = m_currentGroup->hierarchy();
+    
     for (QString parent : hierarchy) {
         title.append(parent);
         title.append(" / ");
@@ -177,6 +202,10 @@ void DetailsWidget::getSelectedGroup(Group* selectedGroup)
 
 void DetailsWidget::updateTotp()
 {
+    if (m_locked) {
+        m_timer->stop();
+        return;
+    }
     QString totpCode = m_currentEntry->totp();
     QString firstHalf = totpCode.left(totpCode.size()/2);
     QString secondHalf = totpCode.right(totpCode.size()/2);
@@ -219,3 +248,23 @@ void DetailsWidget::hideDetails()
 {
     this->hide();
 }
+
+void DetailsWidget::setDatabaseMode(DatabaseWidget::Mode mode)
+{
+    m_locked = false;
+    if (mode == DatabaseWidget::LockedMode) {
+        m_locked = true;
+        return;
+    }
+    if (mode == DatabaseWidget::ViewMode) {
+        if (m_ui->stackedWidget->currentIndex() == GroupPreview) {
+            getSelectedGroup(m_currentGroup);
+        } else {
+            getSelectedEntry(m_currentEntry);
+        }
+    }
+}
+
+void DetailsWidget::copyToClipboard(const QString& text) {
+    clipboard()->setText(text);
+}
\ No newline at end of file
diff --git a/src/gui/DetailsWidget.h b/src/gui/DetailsWidget.h
index d4accf08..44989fd1 100644
--- a/src/gui/DetailsWidget.h
+++ b/src/gui/DetailsWidget.h
@@ -40,15 +40,25 @@ public:
         GroupPreview = 1,
     };
 
+    enum TabWidgetIndex
+    {
+        GeneralTab = 0,
+        AttributesTab = 1,
+        NotesTab = 2,
+    };
+
 private slots:
     void getSelectedEntry(Entry* selectedEntry);
     void getSelectedGroup(Group* selectedGroup);
     void showTotp(bool visible);
     void updateTotp();
     void hideDetails();
+    void setDatabaseMode(DatabaseWidget::Mode mode);
+    void copyToClipboard(const QString& text);
 
 private:
     const QScopedPointer<Ui::DetailsWidget> m_ui;
+    bool m_locked;
     Entry* m_currentEntry;
     Group* m_currentGroup;
     quint8 m_step;
diff --git a/src/gui/DetailsWidget.ui b/src/gui/DetailsWidget.ui
index 0f202c0f..2bc6653c 100644
--- a/src/gui/DetailsWidget.ui
+++ b/src/gui/DetailsWidget.ui
@@ -7,7 +7,7 @@
     <x>0</x>
     <y>0</y>
     <width>630</width>
-    <height>207</height>
+    <height>180</height>
    </rect>
   </property>
   <property name="sizePolicy">
@@ -19,7 +19,7 @@
   <property name="maximumSize">
    <size>
     <width>16777215</width>
-    <height>235</height>
+    <height>200</height>
    </size>
   </property>
   <layout class="QVBoxLayout" name="verticalLayout_3">
@@ -146,332 +146,326 @@
     </layout>
    </item>
    <item>
-    <widget class="QStackedWidget" name="stackedWidget">
-     <property name="sizePolicy">
-      <sizepolicy hsizetype="Preferred" vsizetype="Minimum">
-       <horstretch>0</horstretch>
-       <verstretch>0</verstretch>
-      </sizepolicy>
-     </property>
+    <widget class="QTabWidget" name="tabWidget">
      <property name="currentIndex">
       <number>0</number>
      </property>
-     <widget class="QWidget" name="entryPage">
-      <layout class="QVBoxLayout" name="verticalLayout_2">
-       <property name="leftMargin">
-        <number>0</number>
-       </property>
-       <property name="topMargin">
-        <number>0</number>
-       </property>
-       <property name="rightMargin">
-        <number>0</number>
-       </property>
-       <property name="bottomMargin">
-        <number>0</number>
-       </property>
+     <property name="documentMode">
+      <bool>false</bool>
+     </property>
+     <property name="tabsClosable">
+      <bool>false</bool>
+     </property>
+     <property name="movable">
+      <bool>false</bool>
+     </property>
+     <property name="tabBarAutoHide">
+      <bool>false</bool>
+     </property>
+     <widget class="QWidget" name="generalTab">
+      <attribute name="title">
+       <string>General</string>
+      </attribute>
+      <layout class="QVBoxLayout" name="verticalLayout_5">
        <item>
-        <layout class="QHBoxLayout" name="horizontalLayout_6">
-         <item>
-          <layout class="QHBoxLayout" name="horizontalLayout_7">
+        <widget class="QStackedWidget" name="stackedWidget">
+         <property name="sizePolicy">
+          <sizepolicy hsizetype="Preferred" vsizetype="Minimum">
+           <horstretch>0</horstretch>
+           <verstretch>0</verstretch>
+          </sizepolicy>
+         </property>
+         <property name="currentIndex">
+          <number>0</number>
+         </property>
+         <widget class="QWidget" name="entryPage">
+          <layout class="QVBoxLayout" name="verticalLayout_2">
+           <property name="leftMargin">
+            <number>0</number>
+           </property>
+           <property name="topMargin">
+            <number>0</number>
+           </property>
+           <property name="rightMargin">
+            <number>0</number>
+           </property>
+           <property name="bottomMargin">
+            <number>0</number>
+           </property>
            <item>
-            <layout class="QGridLayout" name="gridLayout">
-             <item row="0" column="0">
-              <widget class="QLabel" name="groupLabel_2">
-               <property name="font">
-                <font>
-                 <weight>75</weight>
-                 <bold>true</bold>
-                </font>
-               </property>
-               <property name="text">
-                <string>Group</string>
-               </property>
-              </widget>
-             </item>
-             <item row="3" column="0">
-              <widget class="QLabel" name="urlLabel_2">
-               <property name="font">
-                <font>
-                 <pointsize>9</pointsize>
-                 <weight>75</weight>
-                 <bold>true</bold>
-                </font>
-               </property>
-               <property name="text">
-                <string>URL</string>
-               </property>
-              </widget>
-             </item>
-             <item row="2" column="0">
-              <widget class="QLabel" name="passwordLabel_2">
-               <property name="font">
-                <font>
-                 <weight>75</weight>
-                 <bold>true</bold>
-                </font>
-               </property>
-               <property name="text">
-                <string>Password</string>
-               </property>
-              </widget>
-             </item>
-             <item row="1" column="0">
-              <widget class="QLabel" name="usernameLabel_2">
-               <property name="font">
-                <font>
-                 <weight>75</weight>
-                 <bold>true</bold>
-                </font>
-               </property>
-               <property name="text">
-                <string>Username</string>
-               </property>
-              </widget>
-             </item>
-             <item row="0" column="1">
-              <widget class="QLabel" name="groupLabel"/>
-             </item>
-             <item row="1" column="1">
-              <widget class="QLabel" name="usernameLabel"/>
-             </item>
-             <item row="3" column="1">
-              <widget class="QLabel" name="urlLabel">
-               <property name="sizePolicy">
-                <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
-                 <horstretch>0</horstretch>
-                 <verstretch>0</verstretch>
-                </sizepolicy>
-               </property>
-               <property name="text">
-                <string/>
-               </property>
-              </widget>
-             </item>
-             <item row="2" column="1">
-              <widget class="QLabel" name="passwordLabel"/>
+            <layout class="QHBoxLayout" name="horizontalLayout_6">
+             <item>
+              <layout class="QHBoxLayout" name="horizontalLayout_7">
+               <item>
+                <layout class="QGridLayout" name="gridLayout" columnstretch="1,3">
+                 <item row="2" column="0">
+                  <widget class="QLabel" name="urlLabel_2">
+                   <property name="sizePolicy">
+                    <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
+                     <horstretch>0</horstretch>
+                     <verstretch>0</verstretch>
+                    </sizepolicy>
+                   </property>
+                   <property name="font">
+                    <font>
+                     <pointsize>9</pointsize>
+                     <weight>75</weight>
+                     <bold>true</bold>
+                    </font>
+                   </property>
+                   <property name="text">
+                    <string>URL</string>
+                   </property>
+                   <property name="alignment">
+                    <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
+                   </property>
+                  </widget>
+                 </item>
+                 <item row="1" column="0">
+                  <widget class="QLabel" name="passwordLabel_2">
+                   <property name="sizePolicy">
+                    <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
+                     <horstretch>0</horstretch>
+                     <verstretch>0</verstretch>
+                    </sizepolicy>
+                   </property>
+                   <property name="font">
+                    <font>
+                     <weight>75</weight>
+                     <bold>true</bold>
+                    </font>
+                   </property>
+                   <property name="text">
+                    <string>Password</string>
+                   </property>
+                   <property name="alignment">
+                    <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
+                   </property>
+                  </widget>
+                 </item>
+                 <item row="0" column="0">
+                  <widget class="QLabel" name="usernameLabel_2">
+                   <property name="sizePolicy">
+                    <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
+                     <horstretch>0</horstretch>
+                     <verstretch>0</verstretch>
+                    </sizepolicy>
+                   </property>
+                   <property name="font">
+                    <font>
+                     <weight>75</weight>
+                     <bold>true</bold>
+                    </font>
+                   </property>
+                   <property name="layoutDirection">
+                    <enum>Qt::LeftToRight</enum>
+                   </property>
+                   <property name="text">
+                    <string>Username</string>
+                   </property>
+                   <property name="alignment">
+                    <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
+                   </property>
+                  </widget>
+                 </item>
+                 <item row="0" column="1">
+                  <widget class="QLabel" name="usernameLabel"/>
+                 </item>
+                 <item row="2" column="1">
+                  <widget class="QLabel" name="urlLabel">
+                   <property name="sizePolicy">
+                    <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
+                     <horstretch>0</horstretch>
+                     <verstretch>0</verstretch>
+                    </sizepolicy>
+                   </property>
+                   <property name="text">
+                    <string/>
+                   </property>
+                  </widget>
+                 </item>
+                 <item row="1" column="1">
+                  <widget class="QLabel" name="passwordLabel"/>
+                 </item>
+                 <item row="3" column="0">
+                  <widget class="QLabel" name="expirationLabel_2">
+                   <property name="sizePolicy">
+                    <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
+                     <horstretch>0</horstretch>
+                     <verstretch>0</verstretch>
+                    </sizepolicy>
+                   </property>
+                   <property name="font">
+                    <font>
+                     <weight>75</weight>
+                     <bold>true</bold>
+                    </font>
+                   </property>
+                   <property name="text">
+                    <string>Expiration</string>
+                   </property>
+                   <property name="alignment">
+                    <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
+                   </property>
+                  </widget>
+                 </item>
+                 <item row="3" column="1">
+                  <widget class="QLabel" name="expirationLabel"/>
+                 </item>
+                </layout>
+               </item>
+              </layout>
              </item>
             </layout>
            </item>
           </layout>
-         </item>
-         <item>
-          <layout class="QGridLayout" name="gridLayout_2">
-           <item row="2" column="0">
-            <widget class="QLabel" name="modifyLabel_2">
-             <property name="font">
-              <font>
-               <weight>75</weight>
-               <bold>true</bold>
-              </font>
-             </property>
-             <property name="text">
-              <string>Modification</string>
-             </property>
-            </widget>
-           </item>
-           <item row="1" column="0">
-            <widget class="QLabel" name="accessLabel_2">
-             <property name="font">
-              <font>
-               <weight>75</weight>
-               <bold>true</bold>
-              </font>
-             </property>
-             <property name="text">
-              <string>Access</string>
-             </property>
-            </widget>
-           </item>
-           <item row="1" column="1">
-            <widget class="QLabel" name="accessLabel"/>
-           </item>
-           <item row="0" column="1">
-            <widget class="QLabel" name="creationLabel"/>
-           </item>
-           <item row="0" column="0">
-            <widget class="QLabel" name="creationLabel_2">
-             <property name="font">
-              <font>
-               <weight>75</weight>
-               <bold>true</bold>
-              </font>
-             </property>
-             <property name="text">
-              <string>Creation</string>
-             </property>
-            </widget>
-           </item>
-           <item row="3" column="0">
-            <widget class="QLabel" name="expirationLabel_2">
-             <property name="font">
-              <font>
-               <weight>75</weight>
-               <bold>true</bold>
-              </font>
-             </property>
-             <property name="text">
-              <string>Expiration</string>
-             </property>
-            </widget>
-           </item>
-           <item row="2" column="1">
-            <widget class="QLabel" name="modifyLabel"/>
-           </item>
-           <item row="3" column="1">
-            <widget class="QLabel" name="expirationLabel"/>
-           </item>
-          </layout>
-         </item>
-        </layout>
-       </item>
-      </layout>
-     </widget>
-     <widget class="QWidget" name="groupPage">
-      <layout class="QVBoxLayout" name="verticalLayout">
-       <property name="leftMargin">
-        <number>0</number>
-       </property>
-       <property name="topMargin">
-        <number>0</number>
-       </property>
-       <property name="rightMargin">
-        <number>0</number>
-       </property>
-       <property name="bottomMargin">
-        <number>0</number>
-       </property>
-       <item>
-        <layout class="QHBoxLayout" name="horizontalLayout_8">
-         <item>
-          <layout class="QHBoxLayout" name="horizontalLayout_9">
+         </widget>
+         <widget class="QWidget" name="groupPage">
+          <layout class="QVBoxLayout" name="verticalLayout">
+           <property name="leftMargin">
+            <number>0</number>
+           </property>
+           <property name="topMargin">
+            <number>0</number>
+           </property>
+           <property name="rightMargin">
+            <number>0</number>
+           </property>
+           <property name="bottomMargin">
+            <number>0</number>
+           </property>
            <item>
-            <layout class="QGridLayout" name="gridLayout_4">
-             <item row="0" column="1">
-              <widget class="QLabel" name="autotypeLabel"/>
+            <layout class="QHBoxLayout" name="horizontalLayout_8">
+             <item>
+              <layout class="QHBoxLayout" name="horizontalLayout_9">
+               <item>
+                <layout class="QGridLayout" name="gridLayout_4">
+                 <item row="0" column="1">
+                  <widget class="QLabel" name="autotypeLabel"/>
+                 </item>
+                 <item row="0" column="0">
+                  <widget class="QLabel" name="autotypeLabel_2">
+                   <property name="font">
+                    <font>
+                     <weight>75</weight>
+                     <bold>true</bold>
+                    </font>
+                   </property>
+                   <property name="text">
+                    <string>Autotype</string>
+                   </property>
+                   <property name="alignment">
+                    <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
+                   </property>
+                  </widget>
+                 </item>
+                 <item row="2" column="0">
+                  <widget class="QLabel" name="groupExpirationLabel_2">
+                   <property name="font">
+                    <font>
+                     <weight>75</weight>
+                     <bold>true</bold>
+                    </font>
+                   </property>
+                   <property name="text">
+                    <string>Expiration</string>
+                   </property>
+                   <property name="alignment">
+                    <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
+                   </property>
+                  </widget>
+                 </item>
+                 <item row="1" column="0">
+                  <widget class="QLabel" name="searchingLabel_2">
+                   <property name="font">
+                    <font>
+                     <weight>75</weight>
+                     <bold>true</bold>
+                    </font>
+                   </property>
+                   <property name="text">
+                    <string>Searching</string>
+                   </property>
+                   <property name="alignment">
+                    <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
+                   </property>
+                  </widget>
+                 </item>
+                 <item row="1" column="1">
+                  <widget class="QLabel" name="searchingLabel"/>
+                 </item>
+                 <item row="2" column="1">
+                  <widget class="QLabel" name="groupExpirationLabel"/>
+                 </item>
+                </layout>
+               </item>
+              </layout>
              </item>
-             <item row="0" column="0">
-              <widget class="QLabel" name="autotypeLabel_2">
-               <property name="font">
-                <font>
-                 <weight>75</weight>
-                 <bold>true</bold>
-                </font>
-               </property>
-               <property name="text">
-                <string>Autotype</string>
-               </property>
-              </widget>
-             </item>
-             <item row="1" column="1">
-              <widget class="QLabel" name="searchingLabel"/>
-             </item>
-             <item row="1" column="0">
-              <widget class="QLabel" name="searchingLabel_2">
-               <property name="font">
-                <font>
-                 <weight>75</weight>
-                 <bold>true</bold>
-                </font>
-               </property>
-               <property name="text">
-                <string>Searching</string>
-               </property>
-              </widget>
-             </item>
-             <item row="2" column="1">
-              <widget class="QLabel" name="groupExpirationLabel"/>
-             </item>
-             <item row="2" column="0">
-              <widget class="QLabel" name="groupExpirationLabel_2">
-               <property name="font">
-                <font>
-                 <weight>75</weight>
-                 <bold>true</bold>
-                </font>
-               </property>
-               <property name="text">
-                <string>Expiration</string>
-               </property>
-              </widget>
+             <item>
+              <layout class="QGridLayout" name="gridLayout_5">
+               <item row="1" column="0">
+                <widget class="QLabel" name="groupAccessLabel_2">
+                 <property name="font">
+                  <font>
+                   <weight>75</weight>
+                   <bold>true</bold>
+                  </font>
+                 </property>
+                 <property name="text">
+                  <string>Access</string>
+                 </property>
+                 <property name="alignment">
+                  <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
+                 </property>
+                </widget>
+               </item>
+               <item row="0" column="1">
+                <widget class="QLabel" name="groupCreationLabel"/>
+               </item>
+               <item row="1" column="1">
+                <widget class="QLabel" name="groupAccessLabel"/>
+               </item>
+               <item row="0" column="0">
+                <widget class="QLabel" name="groupCreationLabel_2">
+                 <property name="font">
+                  <font>
+                   <weight>75</weight>
+                   <bold>true</bold>
+                  </font>
+                 </property>
+                 <property name="text">
+                  <string>Creation</string>
+                 </property>
+                 <property name="alignment">
+                  <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
+                 </property>
+                </widget>
+               </item>
+               <item row="2" column="0">
+                <widget class="QLabel" name="groupModifyLabel_2">
+                 <property name="font">
+                  <font>
+                   <weight>75</weight>
+                   <bold>true</bold>
+                  </font>
+                 </property>
+                 <property name="text">
+                  <string>Modification</string>
+                 </property>
+                 <property name="alignment">
+                  <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
+                 </property>
+                </widget>
+               </item>
+               <item row="2" column="1">
+                <widget class="QLabel" name="groupModifyLabel"/>
+               </item>
+              </layout>
              </item>
             </layout>
            </item>
           </layout>
-         </item>
-         <item>
-          <layout class="QGridLayout" name="gridLayout_5">
-           <item row="2" column="0">
-            <widget class="QLabel" name="groupModifyLabel_2">
-             <property name="font">
-              <font>
-               <weight>75</weight>
-               <bold>true</bold>
-              </font>
-             </property>
-             <property name="text">
-              <string>Modification</string>
-             </property>
-            </widget>
-           </item>
-           <item row="1" column="0">
-            <widget class="QLabel" name="groupAccessLabel_2">
-             <property name="font">
-              <font>
-               <weight>75</weight>
-               <bold>true</bold>
-              </font>
-             </property>
-             <property name="text">
-              <string>Access</string>
-             </property>
-            </widget>
-           </item>
-           <item row="1" column="1">
-            <widget class="QLabel" name="groupAccessLabel"/>
-           </item>
-           <item row="0" column="1">
-            <widget class="QLabel" name="groupCreationLabel"/>
-           </item>
-           <item row="0" column="0">
-            <widget class="QLabel" name="groupCreationLabel_2">
-             <property name="font">
-              <font>
-               <weight>75</weight>
-               <bold>true</bold>
-              </font>
-             </property>
-             <property name="text">
-              <string>Creation</string>
-             </property>
-            </widget>
-           </item>
-           <item row="2" column="1">
-            <widget class="QLabel" name="groupModifyLabel"/>
-           </item>
-          </layout>
-         </item>
-        </layout>
-       </item>
-      </layout>
-     </widget>
-    </widget>
-   </item>
-   <item>
-    <layout class="QFormLayout" name="formLayout">
-     <item row="0" column="0">
-      <layout class="QVBoxLayout" name="verticalLayout_4">
-       <item>
-        <widget class="QLabel" name="notesLabel_2">
-         <property name="font">
-          <font>
-           <weight>75</weight>
-           <bold>true</bold>
-          </font>
-         </property>
-         <property name="text">
-          <string>Notes</string>
-         </property>
+         </widget>
         </widget>
        </item>
        <item>
@@ -488,42 +482,77 @@
         </spacer>
        </item>
       </layout>
-     </item>
-     <item row="0" column="1">
-      <widget class="QTextEdit" name="notesEdit">
-       <property name="sizePolicy">
-        <sizepolicy hsizetype="Expanding" vsizetype="Expanding">
-         <horstretch>0</horstretch>
-         <verstretch>1</verstretch>
-        </sizepolicy>
-       </property>
-       <property name="minimumSize">
-        <size>
-         <width>0</width>
-         <height>50</height>
-        </size>
-       </property>
-       <property name="maximumSize">
-        <size>
-         <width>16777215</width>
-         <height>50</height>
-        </size>
-       </property>
-       <property name="focusPolicy">
-        <enum>Qt::ClickFocus</enum>
-       </property>
-       <property name="readOnly">
-        <bool>true</bool>
-       </property>
-      </widget>
-     </item>
-    </layout>
-   </item>
-   <item>
-    <widget class="Line" name="line">
-     <property name="orientation">
-      <enum>Qt::Horizontal</enum>
-     </property>
+     </widget>
+     <widget class="QWidget" name="attributesTab">
+      <attribute name="title">
+       <string>Attributes</string>
+      </attribute>
+      <layout class="QFormLayout" name="formLayout">
+       <item row="0" column="1">
+        <widget class="QTextEdit" name="attributesEdit">
+         <property name="sizePolicy">
+          <sizepolicy hsizetype="Expanding" vsizetype="Expanding">
+           <horstretch>0</horstretch>
+           <verstretch>1</verstretch>
+          </sizepolicy>
+         </property>
+         <property name="minimumSize">
+          <size>
+           <width>0</width>
+           <height>80</height>
+          </size>
+         </property>
+         <property name="maximumSize">
+          <size>
+           <width>16777215</width>
+           <height>80</height>
+          </size>
+         </property>
+         <property name="focusPolicy">
+          <enum>Qt::ClickFocus</enum>
+         </property>
+         <property name="readOnly">
+          <bool>true</bool>
+         </property>
+        </widget>
+       </item>
+      </layout>
+     </widget>
+     <widget class="QWidget" name="notesTab">
+      <attribute name="title">
+       <string>Notes</string>
+      </attribute>
+      <layout class="QFormLayout" name="formLayout_2">
+       <item row="0" column="1">
+        <widget class="QTextEdit" name="notesEdit">
+         <property name="sizePolicy">
+          <sizepolicy hsizetype="Expanding" vsizetype="Expanding">
+           <horstretch>0</horstretch>
+           <verstretch>1</verstretch>
+          </sizepolicy>
+         </property>
+         <property name="minimumSize">
+          <size>
+           <width>0</width>
+           <height>80</height>
+          </size>
+         </property>
+         <property name="maximumSize">
+          <size>
+           <width>16777215</width>
+           <height>80</height>
+          </size>
+         </property>
+         <property name="focusPolicy">
+          <enum>Qt::ClickFocus</enum>
+         </property>
+         <property name="readOnly">
+          <bool>true</bool>
+         </property>
+        </widget>
+       </item>
+      </layout>
+     </widget>
     </widget>
    </item>
   </layout>

From d0f8d437396425b2907a2255f6730c3883b960f7 Mon Sep 17 00:00:00 2001
From: thez3ro <io@thezero.org>
Date: Thu, 28 Sep 2017 20:48:49 +0200
Subject: [PATCH 065/118] remove root group from path, resize icons to 16x16

---
 src/gui/DetailsWidget.cpp | 32 +++++++++++++++++++-------------
 1 file changed, 19 insertions(+), 13 deletions(-)

diff --git a/src/gui/DetailsWidget.cpp b/src/gui/DetailsWidget.cpp
index 45284c84..d0e9c4a4 100644
--- a/src/gui/DetailsWidget.cpp
+++ b/src/gui/DetailsWidget.cpp
@@ -70,17 +70,20 @@ void DetailsWidget::getSelectedEntry(Entry* selectedEntry)
     m_ui->totpWidget->hide();
     m_ui->totpButton->setChecked(false);
 
-    m_ui->entryIcon->setPixmap(m_currentEntry->iconPixmap());
-
-    QString title = " / ";
+    auto icon = m_currentEntry->iconPixmap();
+    if (icon.width() > 16 || icon.height() > 16) {
+        icon = icon.scaled(16, 16);
+    }
+    m_ui->entryIcon->setPixmap(icon);
 
+    QString title = QString(" / ");
     Group* entry_group = m_currentEntry->group();
     if (entry_group) {
         QStringList hierarchy = entry_group->hierarchy();
-        
-        for (QString parent : hierarchy) {
-            title.append(parent);
-            title.append(" / ");
+        hierarchy.removeFirst();
+        title += hierarchy.join(" / ");
+        if (hierarchy.size() > 0) {
+            title += " / ";
         }
     }
     title.append(m_currentEntry->resolveMultiplePlaceholders(m_currentEntry->title()));
@@ -162,15 +165,18 @@ void DetailsWidget::getSelectedGroup(Group* selectedGroup)
     m_ui->totpButton->hide();
     m_ui->totpWidget->hide();
 
-    m_ui->entryIcon->setPixmap(m_currentGroup->iconPixmap());
+    auto icon = m_currentGroup->iconPixmap();
+    if (icon.width() > 32 || icon.height() > 32) {
+        icon = icon.scaled(32, 32);
+    }
+    m_ui->entryIcon->setPixmap(icon);
 
     QString title = " / ";
-
     QStringList hierarchy = m_currentGroup->hierarchy();
-    
-    for (QString parent : hierarchy) {
-        title.append(parent);
-        title.append(" / ");
+    hierarchy.removeFirst();
+    title += hierarchy.join(" / ");
+    if (hierarchy.size() > 0) {
+        title += " / ";
     }
     m_ui->titleLabel->setText(title);
 

From 9279bf76287238e2eb99ba757a48073e3beb21b6 Mon Sep 17 00:00:00 2001
From: thez3ro <io@thezero.org>
Date: Fri, 29 Sep 2017 20:37:37 +0200
Subject: [PATCH 066/118] fix group layout, add autotype associations

---
 src/gui/DetailsWidget.cpp |  44 ++-
 src/gui/DetailsWidget.h   |   4 +
 src/gui/DetailsWidget.ui  | 582 +++++++++++++++++++-------------------
 3 files changed, 326 insertions(+), 304 deletions(-)

diff --git a/src/gui/DetailsWidget.cpp b/src/gui/DetailsWidget.cpp
index d0e9c4a4..dd80ea23 100644
--- a/src/gui/DetailsWidget.cpp
+++ b/src/gui/DetailsWidget.cpp
@@ -33,6 +33,8 @@ DetailsWidget::DetailsWidget(QWidget* parent)
     , m_locked(false)
     , m_currentEntry(nullptr)
     , m_currentGroup(nullptr)
+    , m_attributesWidget(nullptr)
+    , m_autotypeWidget(nullptr)
 {
     m_ui->setupUi(this);
 
@@ -63,8 +65,14 @@ void DetailsWidget::getSelectedEntry(Entry* selectedEntry)
 
     m_ui->stackedWidget->setCurrentIndex(EntryPreview);
 
+    if (m_ui->tabWidget->count() < 4) {
+        m_ui->tabWidget->insertTab(static_cast<int>(AttributesTab), m_attributesWidget, "Attributes");
+        m_ui->tabWidget->insertTab(static_cast<int>(AutotypeTab), m_autotypeWidget, "Autotype");
+    }
+
     m_ui->tabWidget->setTabEnabled(AttributesTab, false);
     m_ui->tabWidget->setTabEnabled(NotesTab, false);
+    m_ui->tabWidget->setTabEnabled(AutotypeTab, false);
 
     m_ui->totpButton->hide();
     m_ui->totpWidget->hide();
@@ -147,6 +155,21 @@ void DetailsWidget::getSelectedEntry(Entry* selectedEntry)
         }
         m_ui->attributesEdit->setText(attributesText);
     }
+
+    m_ui->autotypeTree->clear();
+    AutoTypeAssociations* autotypeAssociations = m_currentEntry->autoTypeAssociations();
+    QList<QTreeWidgetItem *> items;
+    for (auto assoc : autotypeAssociations->getAll()) {
+        QStringList association = QStringList() << assoc.window << assoc.sequence;
+        if (association.at(1).isEmpty()) {
+            association.replace(1, m_currentEntry->effectiveAutoTypeSequence());
+        }
+        items.append(new QTreeWidgetItem(m_ui->autotypeTree, association));
+    }
+    if (items.count() > 0) {
+        m_ui->autotypeTree->addTopLevelItems(items);
+        m_ui->tabWidget->setTabEnabled(AutotypeTab, true);
+    }
 }
 
 void DetailsWidget::getSelectedGroup(Group* selectedGroup) 
@@ -159,8 +182,15 @@ void DetailsWidget::getSelectedGroup(Group* selectedGroup)
 
     m_ui->stackedWidget->setCurrentIndex(GroupPreview);
 
-    m_ui->tabWidget->setTabEnabled(AttributesTab, false);
-    m_ui->tabWidget->setTabEnabled(NotesTab, false);
+    if (m_ui->tabWidget->count() > 2) {
+        m_autotypeWidget = m_ui->tabWidget->widget(AutotypeTab);
+        m_attributesWidget = m_ui->tabWidget->widget(AttributesTab);
+        m_ui->tabWidget->removeTab(AutotypeTab);
+        m_ui->tabWidget->removeTab(AttributesTab);
+    }
+
+    m_ui->tabWidget->setTabEnabled(GroupNotesTab, false);
+
 
     m_ui->totpButton->hide();
     m_ui->totpWidget->hide();
@@ -180,7 +210,11 @@ void DetailsWidget::getSelectedGroup(Group* selectedGroup)
     }
     m_ui->titleLabel->setText(title);
 
-    m_ui->notesEdit->setText(m_currentGroup->notes());
+    QString notes = m_currentGroup->notes();
+    if (!notes.isEmpty()) {
+        m_ui->tabWidget->setTabEnabled(GroupNotesTab, true);
+        m_ui->notesEdit->setText(notes);
+    }
 
     QString searching = tr("Disabled");
     if (m_currentGroup->resolveSearchingEnabled()) {
@@ -200,10 +234,6 @@ void DetailsWidget::getSelectedGroup(Group* selectedGroup)
     } else {
         m_ui->groupExpirationLabel->setText(tr("Never"));
     }
-
-    m_ui->groupCreationLabel->setText(groupTime.creationTime().toString(Qt::DefaultLocaleShortDate));
-    m_ui->groupModifyLabel->setText(groupTime.lastModificationTime().toString(Qt::DefaultLocaleShortDate));
-    m_ui->groupAccessLabel->setText(groupTime.lastAccessTime().toString(Qt::DefaultLocaleShortDate));
 }
 
 void DetailsWidget::updateTotp()
diff --git a/src/gui/DetailsWidget.h b/src/gui/DetailsWidget.h
index 44989fd1..155c58f1 100644
--- a/src/gui/DetailsWidget.h
+++ b/src/gui/DetailsWidget.h
@@ -44,7 +44,9 @@ public:
     {
         GeneralTab = 0,
         AttributesTab = 1,
+        GroupNotesTab = 1,
         NotesTab = 2,
+        AutotypeTab = 3,
     };
 
 private slots:
@@ -63,6 +65,8 @@ private:
     Group* m_currentGroup;
     quint8 m_step;
     QTimer* m_timer;
+    QWidget* m_attributesWidget;
+    QWidget* m_autotypeWidget;
     QString shortUrl(QString url);
     QString shortPassword(QString password);
 };
diff --git a/src/gui/DetailsWidget.ui b/src/gui/DetailsWidget.ui
index 2bc6653c..99164807 100644
--- a/src/gui/DetailsWidget.ui
+++ b/src/gui/DetailsWidget.ui
@@ -7,7 +7,7 @@
     <x>0</x>
     <y>0</y>
     <width>630</width>
-    <height>180</height>
+    <height>200</height>
    </rect>
   </property>
   <property name="sizePolicy">
@@ -159,9 +159,6 @@
      <property name="movable">
       <bool>false</bool>
      </property>
-     <property name="tabBarAutoHide">
-      <bool>false</bool>
-     </property>
      <widget class="QWidget" name="generalTab">
       <attribute name="title">
        <string>General</string>
@@ -179,308 +176,251 @@
           <number>0</number>
          </property>
          <widget class="QWidget" name="entryPage">
-          <layout class="QVBoxLayout" name="verticalLayout_2">
-           <property name="leftMargin">
-            <number>0</number>
-           </property>
-           <property name="topMargin">
-            <number>0</number>
-           </property>
-           <property name="rightMargin">
-            <number>0</number>
-           </property>
-           <property name="bottomMargin">
-            <number>0</number>
-           </property>
-           <item>
-            <layout class="QHBoxLayout" name="horizontalLayout_6">
-             <item>
-              <layout class="QHBoxLayout" name="horizontalLayout_7">
-               <item>
-                <layout class="QGridLayout" name="gridLayout" columnstretch="1,3">
-                 <item row="2" column="0">
-                  <widget class="QLabel" name="urlLabel_2">
-                   <property name="sizePolicy">
-                    <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
-                     <horstretch>0</horstretch>
-                     <verstretch>0</verstretch>
-                    </sizepolicy>
-                   </property>
-                   <property name="font">
-                    <font>
-                     <pointsize>9</pointsize>
-                     <weight>75</weight>
-                     <bold>true</bold>
-                    </font>
-                   </property>
-                   <property name="text">
-                    <string>URL</string>
-                   </property>
-                   <property name="alignment">
-                    <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
-                   </property>
-                  </widget>
-                 </item>
-                 <item row="1" column="0">
-                  <widget class="QLabel" name="passwordLabel_2">
-                   <property name="sizePolicy">
-                    <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
-                     <horstretch>0</horstretch>
-                     <verstretch>0</verstretch>
-                    </sizepolicy>
-                   </property>
-                   <property name="font">
-                    <font>
-                     <weight>75</weight>
-                     <bold>true</bold>
-                    </font>
-                   </property>
-                   <property name="text">
-                    <string>Password</string>
-                   </property>
-                   <property name="alignment">
-                    <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
-                   </property>
-                  </widget>
-                 </item>
-                 <item row="0" column="0">
-                  <widget class="QLabel" name="usernameLabel_2">
-                   <property name="sizePolicy">
-                    <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
-                     <horstretch>0</horstretch>
-                     <verstretch>0</verstretch>
-                    </sizepolicy>
-                   </property>
-                   <property name="font">
-                    <font>
-                     <weight>75</weight>
-                     <bold>true</bold>
-                    </font>
-                   </property>
-                   <property name="layoutDirection">
-                    <enum>Qt::LeftToRight</enum>
-                   </property>
-                   <property name="text">
-                    <string>Username</string>
-                   </property>
-                   <property name="alignment">
-                    <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
-                   </property>
-                  </widget>
-                 </item>
-                 <item row="0" column="1">
-                  <widget class="QLabel" name="usernameLabel"/>
-                 </item>
-                 <item row="2" column="1">
-                  <widget class="QLabel" name="urlLabel">
-                   <property name="sizePolicy">
-                    <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
-                     <horstretch>0</horstretch>
-                     <verstretch>0</verstretch>
-                    </sizepolicy>
-                   </property>
-                   <property name="text">
-                    <string/>
-                   </property>
-                  </widget>
-                 </item>
-                 <item row="1" column="1">
-                  <widget class="QLabel" name="passwordLabel"/>
-                 </item>
-                 <item row="3" column="0">
-                  <widget class="QLabel" name="expirationLabel_2">
-                   <property name="sizePolicy">
-                    <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
-                     <horstretch>0</horstretch>
-                     <verstretch>0</verstretch>
-                    </sizepolicy>
-                   </property>
-                   <property name="font">
-                    <font>
-                     <weight>75</weight>
-                     <bold>true</bold>
-                    </font>
-                   </property>
-                   <property name="text">
-                    <string>Expiration</string>
-                   </property>
-                   <property name="alignment">
-                    <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
-                   </property>
-                  </widget>
-                 </item>
-                 <item row="3" column="1">
-                  <widget class="QLabel" name="expirationLabel"/>
-                 </item>
-                </layout>
-               </item>
-              </layout>
-             </item>
-            </layout>
+          <layout class="QGridLayout" name="gridLayout" columnstretch="1,3">
+           <item row="1" column="1">
+            <widget class="QLabel" name="passwordLabel"/>
+           </item>
+           <item row="2" column="1">
+            <widget class="QLabel" name="urlLabel">
+             <property name="sizePolicy">
+              <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
+               <horstretch>0</horstretch>
+               <verstretch>0</verstretch>
+              </sizepolicy>
+             </property>
+             <property name="text">
+              <string/>
+             </property>
+            </widget>
+           </item>
+           <item row="3" column="0">
+            <widget class="QLabel" name="expirationLabel_2">
+             <property name="sizePolicy">
+              <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
+               <horstretch>0</horstretch>
+               <verstretch>0</verstretch>
+              </sizepolicy>
+             </property>
+             <property name="font">
+              <font>
+               <weight>75</weight>
+               <bold>true</bold>
+              </font>
+             </property>
+             <property name="text">
+              <string>Expiration</string>
+             </property>
+             <property name="alignment">
+              <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
+             </property>
+            </widget>
+           </item>
+           <item row="2" column="0">
+            <widget class="QLabel" name="urlLabel_2">
+             <property name="sizePolicy">
+              <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
+               <horstretch>0</horstretch>
+               <verstretch>0</verstretch>
+              </sizepolicy>
+             </property>
+             <property name="font">
+              <font>
+               <pointsize>9</pointsize>
+               <weight>75</weight>
+               <bold>true</bold>
+              </font>
+             </property>
+             <property name="text">
+              <string>URL</string>
+             </property>
+             <property name="alignment">
+              <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
+             </property>
+            </widget>
+           </item>
+           <item row="3" column="1">
+            <widget class="QLabel" name="expirationLabel"/>
+           </item>
+           <item row="1" column="0">
+            <widget class="QLabel" name="passwordLabel_2">
+             <property name="sizePolicy">
+              <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
+               <horstretch>0</horstretch>
+               <verstretch>0</verstretch>
+              </sizepolicy>
+             </property>
+             <property name="font">
+              <font>
+               <weight>75</weight>
+               <bold>true</bold>
+              </font>
+             </property>
+             <property name="text">
+              <string>Password</string>
+             </property>
+             <property name="alignment">
+              <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
+             </property>
+            </widget>
+           </item>
+           <item row="0" column="0">
+            <widget class="QLabel" name="usernameLabel_2">
+             <property name="sizePolicy">
+              <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
+               <horstretch>0</horstretch>
+               <verstretch>0</verstretch>
+              </sizepolicy>
+             </property>
+             <property name="font">
+              <font>
+               <weight>75</weight>
+               <bold>true</bold>
+              </font>
+             </property>
+             <property name="layoutDirection">
+              <enum>Qt::LeftToRight</enum>
+             </property>
+             <property name="text">
+              <string>Username</string>
+             </property>
+             <property name="alignment">
+              <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
+             </property>
+            </widget>
+           </item>
+           <item row="0" column="1">
+            <widget class="QLabel" name="usernameLabel"/>
+           </item>
+           <item row="4" column="1">
+            <spacer name="verticalSpacer_2">
+             <property name="orientation">
+              <enum>Qt::Vertical</enum>
+             </property>
+             <property name="sizeHint" stdset="0">
+              <size>
+               <width>20</width>
+               <height>40</height>
+              </size>
+             </property>
+            </spacer>
            </item>
           </layout>
          </widget>
          <widget class="QWidget" name="groupPage">
-          <layout class="QVBoxLayout" name="verticalLayout">
-           <property name="leftMargin">
-            <number>0</number>
-           </property>
-           <property name="topMargin">
-            <number>0</number>
-           </property>
-           <property name="rightMargin">
-            <number>0</number>
-           </property>
-           <property name="bottomMargin">
-            <number>0</number>
-           </property>
-           <item>
-            <layout class="QHBoxLayout" name="horizontalLayout_8">
-             <item>
-              <layout class="QHBoxLayout" name="horizontalLayout_9">
-               <item>
-                <layout class="QGridLayout" name="gridLayout_4">
-                 <item row="0" column="1">
-                  <widget class="QLabel" name="autotypeLabel"/>
-                 </item>
-                 <item row="0" column="0">
-                  <widget class="QLabel" name="autotypeLabel_2">
-                   <property name="font">
-                    <font>
-                     <weight>75</weight>
-                     <bold>true</bold>
-                    </font>
-                   </property>
-                   <property name="text">
-                    <string>Autotype</string>
-                   </property>
-                   <property name="alignment">
-                    <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
-                   </property>
-                  </widget>
-                 </item>
-                 <item row="2" column="0">
-                  <widget class="QLabel" name="groupExpirationLabel_2">
-                   <property name="font">
-                    <font>
-                     <weight>75</weight>
-                     <bold>true</bold>
-                    </font>
-                   </property>
-                   <property name="text">
-                    <string>Expiration</string>
-                   </property>
-                   <property name="alignment">
-                    <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
-                   </property>
-                  </widget>
-                 </item>
-                 <item row="1" column="0">
-                  <widget class="QLabel" name="searchingLabel_2">
-                   <property name="font">
-                    <font>
-                     <weight>75</weight>
-                     <bold>true</bold>
-                    </font>
-                   </property>
-                   <property name="text">
-                    <string>Searching</string>
-                   </property>
-                   <property name="alignment">
-                    <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
-                   </property>
-                  </widget>
-                 </item>
-                 <item row="1" column="1">
-                  <widget class="QLabel" name="searchingLabel"/>
-                 </item>
-                 <item row="2" column="1">
-                  <widget class="QLabel" name="groupExpirationLabel"/>
-                 </item>
-                </layout>
-               </item>
-              </layout>
-             </item>
-             <item>
-              <layout class="QGridLayout" name="gridLayout_5">
-               <item row="1" column="0">
-                <widget class="QLabel" name="groupAccessLabel_2">
-                 <property name="font">
-                  <font>
-                   <weight>75</weight>
-                   <bold>true</bold>
-                  </font>
-                 </property>
-                 <property name="text">
-                  <string>Access</string>
-                 </property>
-                 <property name="alignment">
-                  <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
-                 </property>
-                </widget>
-               </item>
-               <item row="0" column="1">
-                <widget class="QLabel" name="groupCreationLabel"/>
-               </item>
-               <item row="1" column="1">
-                <widget class="QLabel" name="groupAccessLabel"/>
-               </item>
-               <item row="0" column="0">
-                <widget class="QLabel" name="groupCreationLabel_2">
-                 <property name="font">
-                  <font>
-                   <weight>75</weight>
-                   <bold>true</bold>
-                  </font>
-                 </property>
-                 <property name="text">
-                  <string>Creation</string>
-                 </property>
-                 <property name="alignment">
-                  <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
-                 </property>
-                </widget>
-               </item>
-               <item row="2" column="0">
-                <widget class="QLabel" name="groupModifyLabel_2">
-                 <property name="font">
-                  <font>
-                   <weight>75</weight>
-                   <bold>true</bold>
-                  </font>
-                 </property>
-                 <property name="text">
-                  <string>Modification</string>
-                 </property>
-                 <property name="alignment">
-                  <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
-                 </property>
-                </widget>
-               </item>
-               <item row="2" column="1">
-                <widget class="QLabel" name="groupModifyLabel"/>
-               </item>
-              </layout>
-             </item>
-            </layout>
+          <layout class="QGridLayout" name="gridLayout_4" columnstretch="1,3">
+           <item row="2" column="1">
+            <widget class="QLabel" name="groupExpirationLabel">
+             <property name="sizePolicy">
+              <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
+               <horstretch>0</horstretch>
+               <verstretch>0</verstretch>
+              </sizepolicy>
+             </property>
+            </widget>
+           </item>
+           <item row="0" column="0">
+            <widget class="QLabel" name="autotypeLabel_2">
+             <property name="sizePolicy">
+              <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
+               <horstretch>0</horstretch>
+               <verstretch>0</verstretch>
+              </sizepolicy>
+             </property>
+             <property name="font">
+              <font>
+               <weight>75</weight>
+               <bold>true</bold>
+              </font>
+             </property>
+             <property name="text">
+              <string>Autotype</string>
+             </property>
+             <property name="alignment">
+              <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
+             </property>
+            </widget>
+           </item>
+           <item row="1" column="1">
+            <widget class="QLabel" name="searchingLabel">
+             <property name="sizePolicy">
+              <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
+               <horstretch>0</horstretch>
+               <verstretch>0</verstretch>
+              </sizepolicy>
+             </property>
+            </widget>
+           </item>
+           <item row="1" column="0">
+            <widget class="QLabel" name="searchingLabel_2">
+             <property name="sizePolicy">
+              <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
+               <horstretch>0</horstretch>
+               <verstretch>0</verstretch>
+              </sizepolicy>
+             </property>
+             <property name="font">
+              <font>
+               <weight>75</weight>
+               <bold>true</bold>
+              </font>
+             </property>
+             <property name="text">
+              <string>Searching</string>
+             </property>
+             <property name="alignment">
+              <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
+             </property>
+            </widget>
+           </item>
+           <item row="0" column="1">
+            <widget class="QLabel" name="autotypeLabel">
+             <property name="sizePolicy">
+              <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
+               <horstretch>0</horstretch>
+               <verstretch>0</verstretch>
+              </sizepolicy>
+             </property>
+            </widget>
+           </item>
+           <item row="2" column="0">
+            <widget class="QLabel" name="groupExpirationLabel_2">
+             <property name="sizePolicy">
+              <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
+               <horstretch>0</horstretch>
+               <verstretch>0</verstretch>
+              </sizepolicy>
+             </property>
+             <property name="font">
+              <font>
+               <weight>75</weight>
+               <bold>true</bold>
+              </font>
+             </property>
+             <property name="text">
+              <string>Expiration</string>
+             </property>
+             <property name="alignment">
+              <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
+             </property>
+            </widget>
+           </item>
+           <item row="3" column="1">
+            <spacer name="verticalSpacer">
+             <property name="orientation">
+              <enum>Qt::Vertical</enum>
+             </property>
+             <property name="sizeHint" stdset="0">
+              <size>
+               <width>20</width>
+               <height>40</height>
+              </size>
+             </property>
+            </spacer>
            </item>
           </layout>
          </widget>
         </widget>
        </item>
-       <item>
-        <spacer name="verticalSpacer">
-         <property name="orientation">
-          <enum>Qt::Vertical</enum>
-         </property>
-         <property name="sizeHint" stdset="0">
-          <size>
-           <width>20</width>
-           <height>40</height>
-          </size>
-         </property>
-        </spacer>
-       </item>
       </layout>
      </widget>
      <widget class="QWidget" name="attributesTab">
@@ -553,6 +493,54 @@
        </item>
       </layout>
      </widget>
+     <widget class="QWidget" name="autotypeTab">
+      <attribute name="title">
+       <string>Autotype</string>
+      </attribute>
+      <layout class="QGridLayout" name="gridLayout_2">
+       <item row="0" column="0">
+        <widget class="QTreeWidget" name="autotypeTree">
+         <property name="frameShadow">
+          <enum>QFrame::Sunken</enum>
+         </property>
+         <property name="showDropIndicator" stdset="0">
+          <bool>true</bool>
+         </property>
+         <property name="rootIsDecorated">
+          <bool>true</bool>
+         </property>
+         <property name="wordWrap">
+          <bool>false</bool>
+         </property>
+         <property name="columnCount">
+          <number>2</number>
+         </property>
+         <attribute name="headerCascadingSectionResizes">
+          <bool>false</bool>
+         </attribute>
+         <attribute name="headerDefaultSectionSize">
+          <number>250</number>
+         </attribute>
+         <attribute name="headerMinimumSectionSize">
+          <number>50</number>
+         </attribute>
+         <attribute name="headerStretchLastSection">
+          <bool>true</bool>
+         </attribute>
+         <column>
+          <property name="text">
+           <string>Window</string>
+          </property>
+         </column>
+         <column>
+          <property name="text">
+           <string>Sequence</string>
+          </property>
+         </column>
+        </widget>
+       </item>
+      </layout>
+     </widget>
     </widget>
    </item>
   </layout>

From 71ae2a3458d23a164aa9137798e2c00029a6d220 Mon Sep 17 00:00:00 2001
From: thez3ro <io@thezero.org>
Date: Fri, 29 Sep 2017 22:02:07 +0200
Subject: [PATCH 067/118] remember last selected tab, hide passwords by default

---
 src/core/Config.cpp       |  1 +
 src/gui/DetailsWidget.cpp | 19 +++++++++++++++++--
 src/gui/DetailsWidget.h   |  4 +++-
 3 files changed, 21 insertions(+), 3 deletions(-)

diff --git a/src/core/Config.cpp b/src/core/Config.cpp
index a432b3c9..6899015a 100644
--- a/src/core/Config.cpp
+++ b/src/core/Config.cpp
@@ -131,6 +131,7 @@ void Config::init(const QString& fileName)
     m_defaults.insert("security/lockdatabasescreenlock", true);
     m_defaults.insert("security/passwordsrepeat", false);
     m_defaults.insert("security/passwordscleartext", false);
+    m_defaults.insert("security/hidepassworddetails", true);
     m_defaults.insert("security/autotypeask", true);
     m_defaults.insert("security/IconDownloadFallbackToGoogle", false);
     m_defaults.insert("GUI/Language", "system");
diff --git a/src/gui/DetailsWidget.cpp b/src/gui/DetailsWidget.cpp
index dd80ea23..1ec891a6 100644
--- a/src/gui/DetailsWidget.cpp
+++ b/src/gui/DetailsWidget.cpp
@@ -35,6 +35,8 @@ DetailsWidget::DetailsWidget(QWidget* parent)
     , m_currentGroup(nullptr)
     , m_attributesWidget(nullptr)
     , m_autotypeWidget(nullptr)
+    , m_selectedTabEntry(0)
+    , m_selectedTabGroup(0)
 {
     m_ui->setupUi(this);
 
@@ -47,6 +49,7 @@ DetailsWidget::DetailsWidget(QWidget* parent)
 
     connect(m_ui->totpButton, SIGNAL(toggled(bool)), SLOT(showTotp(bool)));
     connect(m_ui->closeButton, SIGNAL(toggled(bool)), SLOT(hideDetails()));
+    connect(m_ui->tabWidget, SIGNAL(tabBarClicked(int)), SLOT(updateTabIndex(int)));
 
     this->hide();
 }
@@ -170,6 +173,10 @@ void DetailsWidget::getSelectedEntry(Entry* selectedEntry)
         m_ui->autotypeTree->addTopLevelItems(items);
         m_ui->tabWidget->setTabEnabled(AutotypeTab, true);
     }
+
+    if (m_ui->tabWidget->isTabEnabled(m_selectedTabEntry)) {
+        m_ui->tabWidget->setCurrentIndex(m_selectedTabEntry);
+    }
 }
 
 void DetailsWidget::getSelectedGroup(Group* selectedGroup) 
@@ -234,6 +241,10 @@ void DetailsWidget::getSelectedGroup(Group* selectedGroup)
     } else {
         m_ui->groupExpirationLabel->setText(tr("Never"));
     }
+
+    if (m_ui->tabWidget->isTabEnabled(m_selectedTabGroup)) {
+        m_ui->tabWidget->setCurrentIndex(m_selectedTabGroup);
+    }
 }
 
 void DetailsWidget::updateTotp()
@@ -301,6 +312,10 @@ void DetailsWidget::setDatabaseMode(DatabaseWidget::Mode mode)
     }
 }
 
-void DetailsWidget::copyToClipboard(const QString& text) {
-    clipboard()->setText(text);
+void DetailsWidget::updateTabIndex(int index) {
+    if (m_ui->stackedWidget->currentIndex() == GroupPreview) {
+        m_selectedTabGroup = index;
+    } else {
+        m_selectedTabEntry = index;
+    }
 }
\ No newline at end of file
diff --git a/src/gui/DetailsWidget.h b/src/gui/DetailsWidget.h
index 155c58f1..5bc02600 100644
--- a/src/gui/DetailsWidget.h
+++ b/src/gui/DetailsWidget.h
@@ -56,7 +56,7 @@ private slots:
     void updateTotp();
     void hideDetails();
     void setDatabaseMode(DatabaseWidget::Mode mode);
-    void copyToClipboard(const QString& text);
+    void updateTabIndex(int index);
 
 private:
     const QScopedPointer<Ui::DetailsWidget> m_ui;
@@ -67,6 +67,8 @@ private:
     QTimer* m_timer;
     QWidget* m_attributesWidget;
     QWidget* m_autotypeWidget;
+    quint8 m_selectedTabEntry;
+    quint8 m_selectedTabGroup;
     QString shortUrl(QString url);
     QString shortPassword(QString password);
 };

From 8416d69f1e0b390b82c0c2dea7bd158e10eb7bed Mon Sep 17 00:00:00 2001
From: thez3ro <io@thezero.org>
Date: Tue, 24 Oct 2017 14:08:22 +0200
Subject: [PATCH 068/118] fix protected transalation

---
 src/gui/DetailsWidget.cpp         | 8 ++++----
 src/gui/entry/EditEntryWidget.cpp | 2 +-
 2 files changed, 5 insertions(+), 5 deletions(-)

diff --git a/src/gui/DetailsWidget.cpp b/src/gui/DetailsWidget.cpp
index 1ec891a6..51448a97 100644
--- a/src/gui/DetailsWidget.cpp
+++ b/src/gui/DetailsWidget.cpp
@@ -152,7 +152,7 @@ void DetailsWidget::getSelectedEntry(Entry* selectedEntry)
         for (const QString& key : customAttributes) {
             QString value = m_currentEntry->attributes()->value(key);
             if (m_currentEntry->attributes()->isProtected(key)) {
-                value = "<i>[PROTECTED]</i>";
+                value = "<i>" + tr("[PROTECTED]") + "</i>";
             }
             attributesText.append(QString("<b>%1</b>: %2<br/>").arg(key, value));
         }
@@ -161,7 +161,7 @@ void DetailsWidget::getSelectedEntry(Entry* selectedEntry)
 
     m_ui->autotypeTree->clear();
     AutoTypeAssociations* autotypeAssociations = m_currentEntry->autoTypeAssociations();
-    QList<QTreeWidgetItem *> items;
+    QList<QTreeWidgetItem*> items;
     for (auto assoc : autotypeAssociations->getAll()) {
         QStringList association = QStringList() << assoc.window << assoc.sequence;
         if (association.at(1).isEmpty()) {
@@ -273,7 +273,7 @@ QString DetailsWidget::shortUrl(QString url)
     QString newurl = "";
     if (url.length() > 60) {
         newurl.append(url.left(20));
-        newurl.append("...");
+        newurl.append("…");
         newurl.append(url.right(20));
         return newurl;
     }
@@ -285,7 +285,7 @@ QString DetailsWidget::shortPassword(QString password)
     QString newpassword = "";
     if (password.length() > 60) {
         newpassword.append(password.left(50));
-        newpassword.append("...");
+        newpassword.append("…");
         return newpassword;
     }
     return password;
diff --git a/src/gui/entry/EditEntryWidget.cpp b/src/gui/entry/EditEntryWidget.cpp
index 463096b3..2d17c345 100644
--- a/src/gui/entry/EditEntryWidget.cpp
+++ b/src/gui/entry/EditEntryWidget.cpp
@@ -632,7 +632,7 @@ void EditEntryWidget::displayAttribute(QModelIndex index, bool showProtected)
     if (index.isValid()) {
         QString key = m_attributesModel->keyByIndex(index);
         if (showProtected) {
-            m_advancedUi->attributesEdit->setPlainText(tr("[PROTECTED] Press reveal to view or edit"));
+            m_advancedUi->attributesEdit->setPlainText(tr("[PROTECTED]") + " " + tr("Press reveal to view or edit"));
             m_advancedUi->attributesEdit->setEnabled(false);
             m_advancedUi->revealAttributeButton->setEnabled(true);
             m_advancedUi->protectAttributeButton->setChecked(true);

From b9fd609bb20d6246db8f63dd43bc237ce05de641 Mon Sep 17 00:00:00 2001
From: Jonathan White <support@dmapps.us>
Date: Wed, 25 Oct 2017 00:01:29 -0400
Subject: [PATCH 069/118] Resolve placeholders in entry details url

---
 src/core/Entry.cpp        |  3 ++-
 src/gui/DetailsWidget.cpp | 11 +++++++++--
 src/gui/DetailsWidget.ui  |  9 ++++++++-
 3 files changed, 19 insertions(+), 4 deletions(-)

diff --git a/src/core/Entry.cpp b/src/core/Entry.cpp
index d5afec04..edf5b6f2 100644
--- a/src/core/Entry.cpp
+++ b/src/core/Entry.cpp
@@ -243,7 +243,8 @@ QString Entry::url() const
 
 QString Entry::webUrl() const
 {
-    return resolveUrl(m_attributes->value(EntryAttributes::URLKey));
+    QString url = resolveMultiplePlaceholders(m_attributes->value(EntryAttributes::URLKey));
+    return resolveUrl(url);
 }
 
 QString Entry::username() const
diff --git a/src/gui/DetailsWidget.cpp b/src/gui/DetailsWidget.cpp
index 51448a97..deb7008a 100644
--- a/src/gui/DetailsWidget.cpp
+++ b/src/gui/DetailsWidget.cpp
@@ -110,10 +110,17 @@ void DetailsWidget::getSelectedEntry(Entry* selectedEntry)
     }
 
     QString url = m_currentEntry->webUrl();
-    if (url != "") {
-        url = QString("<a href=\"%1\">%2</a>").arg(url).arg(shortUrl(url));
+    if (!url.isEmpty()) {
+        // URL is well formed and can be opened in a browser
+        // create a new display url that masks password placeholders
+        // the actual link will use the password
+        QString displayUrl = m_currentEntry->url();
+        displayUrl = m_currentEntry->maskPasswordPlaceholders(displayUrl);
+        displayUrl = m_currentEntry->resolveMultiplePlaceholders(displayUrl);
+        url = QString("<a href=\"%1\">%2</a>").arg(url).arg(shortUrl(displayUrl));
         m_ui->urlLabel->setOpenExternalLinks(true);
     } else {
+        // Fallback to the raw url string
         url = shortUrl(m_currentEntry->resolveMultiplePlaceholders(m_currentEntry->url()));
         m_ui->urlLabel->setOpenExternalLinks(false);
     }
diff --git a/src/gui/DetailsWidget.ui b/src/gui/DetailsWidget.ui
index 99164807..fb31409f 100644
--- a/src/gui/DetailsWidget.ui
+++ b/src/gui/DetailsWidget.ui
@@ -188,6 +188,9 @@
                <verstretch>0</verstretch>
               </sizepolicy>
              </property>
+             <property name="cursor">
+              <cursorShape>PointingHandCursor</cursorShape>
+             </property>
              <property name="text">
               <string/>
              </property>
@@ -289,7 +292,11 @@
             </widget>
            </item>
            <item row="0" column="1">
-            <widget class="QLabel" name="usernameLabel"/>
+            <widget class="QLabel" name="usernameLabel">
+             <property name="textInteractionFlags">
+              <set>Qt::LinksAccessibleByMouse|Qt::TextSelectableByMouse</set>
+             </property>
+            </widget>
            </item>
            <item row="4" column="1">
             <spacer name="verticalSpacer_2">

From f3d85ae21917feff31806ef1c22bb76833cb914f Mon Sep 17 00:00:00 2001
From: Jonathan White <support@dmapps.us>
Date: Wed, 25 Oct 2017 23:29:01 -0400
Subject: [PATCH 070/118] Cleaned up url display code

---
 src/core/Entry.cpp           | 7 +++++++
 src/core/Entry.h             | 1 +
 src/gui/DetailsWidget.cpp    | 7 ++-----
 src/gui/entry/EntryModel.cpp | 3 +--
 4 files changed, 11 insertions(+), 7 deletions(-)

diff --git a/src/core/Entry.cpp b/src/core/Entry.cpp
index edf5b6f2..91d757a9 100644
--- a/src/core/Entry.cpp
+++ b/src/core/Entry.cpp
@@ -247,6 +247,13 @@ QString Entry::webUrl() const
     return resolveUrl(url);
 }
 
+QString Entry::displayUrl() const
+{
+    QString url = maskPasswordPlaceholders(m_attributes->value(EntryAttributes::URLKey));
+    url = resolveMultiplePlaceholders(url);
+    return resolveUrl(url);
+}
+
 QString Entry::username() const
 {
     return m_attributes->value(EntryAttributes::UserNameKey);
diff --git a/src/core/Entry.h b/src/core/Entry.h
index 212c8668..d4d2b903 100644
--- a/src/core/Entry.h
+++ b/src/core/Entry.h
@@ -79,6 +79,7 @@ public:
     QString title() const;
     QString url() const;
     QString webUrl() const;
+    QString displayUrl() const;
     QString username() const;
     QString password() const;
     QString notes() const;
diff --git a/src/gui/DetailsWidget.cpp b/src/gui/DetailsWidget.cpp
index deb7008a..b805f9b1 100644
--- a/src/gui/DetailsWidget.cpp
+++ b/src/gui/DetailsWidget.cpp
@@ -114,10 +114,7 @@ void DetailsWidget::getSelectedEntry(Entry* selectedEntry)
         // URL is well formed and can be opened in a browser
         // create a new display url that masks password placeholders
         // the actual link will use the password
-        QString displayUrl = m_currentEntry->url();
-        displayUrl = m_currentEntry->maskPasswordPlaceholders(displayUrl);
-        displayUrl = m_currentEntry->resolveMultiplePlaceholders(displayUrl);
-        url = QString("<a href=\"%1\">%2</a>").arg(url).arg(shortUrl(displayUrl));
+        url = QString("<a href=\"%1\">%2</a>").arg(url).arg(shortUrl(m_currentEntry->displayUrl()));
         m_ui->urlLabel->setOpenExternalLinks(true);
     } else {
         // Fallback to the raw url string
@@ -325,4 +322,4 @@ void DetailsWidget::updateTabIndex(int index) {
     } else {
         m_selectedTabEntry = index;
     }
-}
\ No newline at end of file
+}
diff --git a/src/gui/entry/EntryModel.cpp b/src/gui/entry/EntryModel.cpp
index 2f79f02d..4d357806 100644
--- a/src/gui/entry/EntryModel.cpp
+++ b/src/gui/entry/EntryModel.cpp
@@ -151,8 +151,7 @@ QVariant EntryModel::data(const QModelIndex& index, int role) const
             }
             return result;
         case Url:
-            result = entry->maskPasswordPlaceholders(entry->url());
-            result = entry->resolveMultiplePlaceholders(result);
+            result = entry->displayUrl();
             if (attr->isReference(EntryAttributes::URLKey)) {
                 result.prepend(tr("Ref: ","Reference abbreviation"));
             }

From 5bc000cc3193ee42f5e8b65a4e785c2646d209ec Mon Sep 17 00:00:00 2001
From: Joe Brown <grim210@users.noreply.github.com>
Date: Sat, 29 Apr 2017 21:00:15 -0500
Subject: [PATCH 071/118] Use fixed-width font for Notes

Fixed width, and a smaller font size, make for easier readability
in the notes section.
---
 src/gui/entry/EditEntryWidgetMain.ui | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/src/gui/entry/EditEntryWidgetMain.ui b/src/gui/entry/EditEntryWidgetMain.ui
index afc1d4f2..1d497708 100644
--- a/src/gui/entry/EditEntryWidgetMain.ui
+++ b/src/gui/entry/EditEntryWidgetMain.ui
@@ -127,6 +127,12 @@
        <height>100</height>
       </size>
      </property>
+     <property name="font">
+      <font>
+       <family>Monospace</family>
+       <pointsize>10</pointsize>
+      </font>
+     </property>
     </widget>
    </item>
    <item row="1" column="0" alignment="Qt::AlignRight">

From 0c2d71c2cee497129a26bc40a2a8bbf1d3adf004 Mon Sep 17 00:00:00 2001
From: Joe Brown <grim210@users.noreply.github.com>
Date: Sat, 29 Apr 2017 21:23:28 -0500
Subject: [PATCH 072/118] Notes section no longer visible by default.

There is a simple checkbox that allows your notes to become visible
again.  This is always disabled by default, as the use case
referenced in issue #342 (and my own use case) has confidential data
in that field.

Passes all tests (YubiKey is N/A) on Ubuntu 16.04.2 with Qt 5.5.1.
---
 src/gui/entry/EditEntryWidget.cpp    | 3 +++
 src/gui/entry/EditEntryWidgetMain.ui | 6 +++---
 2 files changed, 6 insertions(+), 3 deletions(-)

diff --git a/src/gui/entry/EditEntryWidget.cpp b/src/gui/entry/EditEntryWidget.cpp
index 2d17c345..000a1e55 100644
--- a/src/gui/entry/EditEntryWidget.cpp
+++ b/src/gui/entry/EditEntryWidget.cpp
@@ -99,6 +99,7 @@ void EditEntryWidget::setupMain()
     connect(m_mainUi->togglePasswordButton, SIGNAL(toggled(bool)), m_mainUi->passwordEdit, SLOT(setShowPassword(bool)));
     connect(m_mainUi->togglePasswordGeneratorButton, SIGNAL(toggled(bool)), SLOT(togglePasswordGeneratorButton(bool)));
     connect(m_mainUi->expireCheck, SIGNAL(toggled(bool)), m_mainUi->expireDatePicker, SLOT(setEnabled(bool)));
+    connect(m_mainUi->notesEnabled, SIGNAL(toggled(bool)), m_mainUi->notesEdit, SLOT(setVisible(bool)));
     m_mainUi->passwordRepeatEdit->enableVerifyMode(m_mainUi->passwordEdit);
     connect(m_mainUi->passwordGenerator, SIGNAL(appliedPassword(QString)), SLOT(setGeneratedPassword(QString)));
 
@@ -308,7 +309,9 @@ void EditEntryWidget::setForms(const Entry* entry, bool restore)
     m_mainUi->passwordRepeatEdit->setReadOnly(m_history);
     m_mainUi->expireCheck->setEnabled(!m_history);
     m_mainUi->expireDatePicker->setReadOnly(m_history);
+    m_mainUi->notesEnabled->setChecked(false);
     m_mainUi->notesEdit->setReadOnly(m_history);
+    m_mainUi->notesEdit->setVisible(false);
     m_mainUi->togglePasswordGeneratorButton->setChecked(false);
     m_mainUi->togglePasswordGeneratorButton->setDisabled(m_history);
     m_mainUi->passwordGenerator->reset();
diff --git a/src/gui/entry/EditEntryWidgetMain.ui b/src/gui/entry/EditEntryWidgetMain.ui
index 1d497708..f291e37c 100644
--- a/src/gui/entry/EditEntryWidgetMain.ui
+++ b/src/gui/entry/EditEntryWidgetMain.ui
@@ -79,10 +79,10 @@
      </property>
     </widget>
    </item>
-   <item row="9" column="0" alignment="Qt::AlignRight|Qt::AlignTop">
-    <widget class="QLabel" name="notesLabel">
+   <item row="9" column="0" alignment="Qt::AlignLeft|Qt::AlignTop">
+    <widget class="QCheckBox" name="notesEnabled">
      <property name="text">
-      <string>Notes:</string>
+      <string>Notes</string>
      </property>
     </widget>
    </item>

From fdceeb368e75f3044d33ee0a634fda06e6123e93 Mon Sep 17 00:00:00 2001
From: Joe Brown <grim210@users.noreply.github.com>
Date: Sun, 28 May 2017 20:58:56 -0500
Subject: [PATCH 073/118] Do not hide notes by default.

---
 src/gui/entry/EditEntryWidget.cpp | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/gui/entry/EditEntryWidget.cpp b/src/gui/entry/EditEntryWidget.cpp
index 000a1e55..1d584abb 100644
--- a/src/gui/entry/EditEntryWidget.cpp
+++ b/src/gui/entry/EditEntryWidget.cpp
@@ -309,7 +309,7 @@ void EditEntryWidget::setForms(const Entry* entry, bool restore)
     m_mainUi->passwordRepeatEdit->setReadOnly(m_history);
     m_mainUi->expireCheck->setEnabled(!m_history);
     m_mainUi->expireDatePicker->setReadOnly(m_history);
-    m_mainUi->notesEnabled->setChecked(false);
+    m_mainUi->notesEnabled->setChecked(true);
     m_mainUi->notesEdit->setReadOnly(m_history);
     m_mainUi->notesEdit->setVisible(false);
     m_mainUi->togglePasswordGeneratorButton->setChecked(false);

From ff01a7da1ed8a5df0493c1c6f32d31e3ef5d381e Mon Sep 17 00:00:00 2001
From: Joe Brown <grim210@users.noreply.github.com>
Date: Sun, 28 May 2017 21:58:15 -0500
Subject: [PATCH 074/118] Hint is displayed when notes section is hidden.

The alignment is a bit off, however.  A better option may be simply
disabling the QPlainTextEdit widget and stashing the actual notes
in another buffer somewhere.
---
 src/gui/entry/EditEntryWidget.cpp    | 10 ++++++++--
 src/gui/entry/EditEntryWidget.h      |  1 +
 src/gui/entry/EditEntryWidgetMain.ui | 13 +++++++++++++
 3 files changed, 22 insertions(+), 2 deletions(-)

diff --git a/src/gui/entry/EditEntryWidget.cpp b/src/gui/entry/EditEntryWidget.cpp
index 1d584abb..a152ebb7 100644
--- a/src/gui/entry/EditEntryWidget.cpp
+++ b/src/gui/entry/EditEntryWidget.cpp
@@ -99,7 +99,7 @@ void EditEntryWidget::setupMain()
     connect(m_mainUi->togglePasswordButton, SIGNAL(toggled(bool)), m_mainUi->passwordEdit, SLOT(setShowPassword(bool)));
     connect(m_mainUi->togglePasswordGeneratorButton, SIGNAL(toggled(bool)), SLOT(togglePasswordGeneratorButton(bool)));
     connect(m_mainUi->expireCheck, SIGNAL(toggled(bool)), m_mainUi->expireDatePicker, SLOT(setEnabled(bool)));
-    connect(m_mainUi->notesEnabled, SIGNAL(toggled(bool)), m_mainUi->notesEdit, SLOT(setVisible(bool)));
+    connect(m_mainUi->notesEnabled, SIGNAL(toggled(bool)), this, SLOT(toggleHideNotes(bool)));
     m_mainUi->passwordRepeatEdit->enableVerifyMode(m_mainUi->passwordEdit);
     connect(m_mainUi->passwordGenerator, SIGNAL(appliedPassword(QString)), SLOT(setGeneratedPassword(QString)));
 
@@ -262,6 +262,12 @@ void EditEntryWidget::updateAttachmentButtonsEnabled(const QModelIndex& current)
     m_advancedUi->removeAttachmentButton->setEnabled(enable && !m_history);
 }
 
+void EditEntryWidget::toggleHideNotes(bool visible)
+{
+    m_mainUi->notesEdit->setVisible(visible);
+    m_mainUi->notesHint->setVisible(!visible);
+}
+
 QString EditEntryWidget::entryTitle() const
 {
     if (m_entry) {
@@ -311,7 +317,7 @@ void EditEntryWidget::setForms(const Entry* entry, bool restore)
     m_mainUi->expireDatePicker->setReadOnly(m_history);
     m_mainUi->notesEnabled->setChecked(true);
     m_mainUi->notesEdit->setReadOnly(m_history);
-    m_mainUi->notesEdit->setVisible(false);
+    m_mainUi->notesEdit->setVisible(true);
     m_mainUi->togglePasswordGeneratorButton->setChecked(false);
     m_mainUi->togglePasswordGeneratorButton->setDisabled(m_history);
     m_mainUi->passwordGenerator->reset();
diff --git a/src/gui/entry/EditEntryWidget.h b/src/gui/entry/EditEntryWidget.h
index 2888d43a..74da2c46 100644
--- a/src/gui/entry/EditEntryWidget.h
+++ b/src/gui/entry/EditEntryWidget.h
@@ -100,6 +100,7 @@ private slots:
     void updateHistoryButtons(const QModelIndex& current, const QModelIndex& previous);
     void useExpiryPreset(QAction* action);
     void updateAttachmentButtonsEnabled(const QModelIndex& current);
+    void toggleHideNotes(bool visible);
 
 private:
     void setupMain();
diff --git a/src/gui/entry/EditEntryWidgetMain.ui b/src/gui/entry/EditEntryWidgetMain.ui
index f291e37c..2c9aa59b 100644
--- a/src/gui/entry/EditEntryWidgetMain.ui
+++ b/src/gui/entry/EditEntryWidgetMain.ui
@@ -135,6 +135,19 @@
      </property>
     </widget>
    </item>
+   <item row="9" column="1">
+    <widget class="QLabel" name="notesHint">
+     <property name="visible">
+      <bool>false</bool>
+     </property>
+     <property name="text">
+      <string>Toggle the checkbox to reveal the notes section.</string>
+     </property>
+     <property name="alignment">
+      <set>Qt::AlignTop</set>
+     </property>
+    </widget>
+   </item>
    <item row="1" column="0" alignment="Qt::AlignRight">
     <widget class="QLabel" name="usernameLabel">
      <property name="text">

From 9840470df8f95995e121ea5cfbac3d30a2175c0e Mon Sep 17 00:00:00 2001
From: thez3ro <io@thezero.org>
Date: Wed, 25 Oct 2017 16:40:14 +0200
Subject: [PATCH 075/118] hide note option

---
 src/gui/SettingsWidget.cpp        | 2 ++
 src/gui/SettingsWidgetSecurity.ui | 7 +++++++
 src/gui/entry/EditEntryWidget.cpp | 5 +++--
 3 files changed, 12 insertions(+), 2 deletions(-)

diff --git a/src/gui/SettingsWidget.cpp b/src/gui/SettingsWidget.cpp
index aa0e5664..a8b0e942 100644
--- a/src/gui/SettingsWidget.cpp
+++ b/src/gui/SettingsWidget.cpp
@@ -163,6 +163,7 @@ void SettingsWidget::loadSettings()
     m_secUi->passwordCleartextCheckBox->setChecked(config()->get("security/passwordscleartext").toBool());
     m_secUi->passwordDetailsCleartextCheckBox->setChecked(config()->get("security/hidepassworddetails").toBool());
     m_secUi->passwordRepeatCheckBox->setChecked(config()->get("security/passwordsrepeat").toBool());
+    m_secUi->hideNotesCheckBox->setChecked(config()->get("security/hidenotes").toBool());
 
 
     for (const ExtraPage& page: asConst(m_extraPages)) {
@@ -231,6 +232,7 @@ void SettingsWidget::saveSettings()
     config()->set("security/passwordscleartext", m_secUi->passwordCleartextCheckBox->isChecked());
     config()->set("security/hidepassworddetails", m_secUi->passwordDetailsCleartextCheckBox->isChecked());
     config()->set("security/passwordsrepeat", m_secUi->passwordRepeatCheckBox->isChecked());
+    config()->set("security/hidenotes", m_secUi->hideNotesCheckBox->isChecked());
 
     // Security: clear storage if related settings are disabled
     if (!config()->get("RememberLastDatabases").toBool()) {
diff --git a/src/gui/SettingsWidgetSecurity.ui b/src/gui/SettingsWidgetSecurity.ui
index 53c69db6..17d324f7 100644
--- a/src/gui/SettingsWidgetSecurity.ui
+++ b/src/gui/SettingsWidgetSecurity.ui
@@ -143,6 +143,13 @@
         </property>
        </widget>
       </item>
+      <item>
+       <widget class="QCheckBox" name="hideNotesCheckBox">
+        <property name="text">
+         <string>Hide entry notes by default</string>
+        </property>
+       </widget>
+      </item>
      </layout>
     </widget>
    </item>
diff --git a/src/gui/entry/EditEntryWidget.cpp b/src/gui/entry/EditEntryWidget.cpp
index a152ebb7..8457c5af 100644
--- a/src/gui/entry/EditEntryWidget.cpp
+++ b/src/gui/entry/EditEntryWidget.cpp
@@ -315,9 +315,10 @@ void EditEntryWidget::setForms(const Entry* entry, bool restore)
     m_mainUi->passwordRepeatEdit->setReadOnly(m_history);
     m_mainUi->expireCheck->setEnabled(!m_history);
     m_mainUi->expireDatePicker->setReadOnly(m_history);
-    m_mainUi->notesEnabled->setChecked(true);
+    m_mainUi->notesEnabled->setChecked(!config()->get("security/hidenotes").toBool());
     m_mainUi->notesEdit->setReadOnly(m_history);
-    m_mainUi->notesEdit->setVisible(true);
+    m_mainUi->notesEdit->setVisible(!config()->get("security/hidenotes").toBool());
+    m_mainUi->notesHint->setVisible(config()->get("security/hidenotes").toBool());
     m_mainUi->togglePasswordGeneratorButton->setChecked(false);
     m_mainUi->togglePasswordGeneratorButton->setDisabled(m_history);
     m_mainUi->passwordGenerator->reset();

From 2027429d879b9af5bcd8f1a60cd70431077e7e76 Mon Sep 17 00:00:00 2001
From: frostasm <frost.asm@gmail.com>
Date: Sun, 15 Oct 2017 12:49:41 +0300
Subject: [PATCH 076/118] Add support for placeholders on the KeePassHTTP
 custom fields

---
 src/http/Service.cpp | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/src/http/Service.cpp b/src/http/Service.cpp
index 768a5774..e68a7bfd 100644
--- a/src/http/Service.cpp
+++ b/src/http/Service.cpp
@@ -259,13 +259,16 @@ Service::Access Service::checkAccess(const Entry *entry, const QString & host, c
 
 KeepassHttpProtocol::Entry Service::prepareEntry(const Entry* entry)
 {
-    KeepassHttpProtocol::Entry res(entry->resolvePlaceholder(entry->title()), entry->resolvePlaceholder(entry->username()), entry->resolvePlaceholder(entry->password()), entry->uuid().toHex());
+    KeepassHttpProtocol::Entry res(entry->resolveMultiplePlaceholders(entry->title()),
+                                   entry->resolveMultiplePlaceholders(entry->username()),
+                                   entry->resolveMultiplePlaceholders(entry->password()),
+                                   entry->uuid().toHex());
     if (HttpSettings::supportKphFields()) {
         const EntryAttributes * attr = entry->attributes();
         const auto keys = attr->keys();
         for (const QString& key: keys) {
             if (key.startsWith(QLatin1String("KPH: "))) {
-                res.addStringField(key, attr->value(key));
+                res.addStringField(key, entry->resolveMultiplePlaceholders(attr->value(key)));
             }
         }
     }

From 4e7f2c6a4fe920ec4301b110258f894fc9ea87bf Mon Sep 17 00:00:00 2001
From: Jonathan White <support@dmapps.us>
Date: Sat, 28 Oct 2017 09:23:45 -0400
Subject: [PATCH 077/118] Fix apply button not saving new entries

---
 src/gui/entry/EditEntryWidget.cpp |  4 ++-
 src/gui/entry/EditEntryWidget.h   |  1 +
 tests/gui/TestGui.cpp             | 58 ++++++++++++++++++++++++++++---
 tests/gui/TestGui.h               |  1 +
 4 files changed, 58 insertions(+), 6 deletions(-)

diff --git a/src/gui/entry/EditEntryWidget.cpp b/src/gui/entry/EditEntryWidget.cpp
index 809ac95e..5a058bda 100644
--- a/src/gui/entry/EditEntryWidget.cpp
+++ b/src/gui/entry/EditEntryWidget.cpp
@@ -278,6 +278,7 @@ void EditEntryWidget::loadEntry(Entry* entry, bool create, bool history, const Q
     m_database = database;
     m_create = create;
     m_history = history;
+    m_saved = false;
 
     if (history) {
         setHeadline(QString("%1 > %2").arg(parentName, tr("Entry history")));
@@ -438,6 +439,7 @@ void EditEntryWidget::saveEntry()
     }
 
     updateEntryData(m_entry);
+    m_saved = true;
 
     if (!m_create) {
         m_entry->endUpdate();
@@ -510,7 +512,7 @@ void EditEntryWidget::cancel()
 
     clear();
 
-    emit editFinished(false);
+    emit editFinished(m_saved);
 }
 
 void EditEntryWidget::clear()
diff --git a/src/gui/entry/EditEntryWidget.h b/src/gui/entry/EditEntryWidget.h
index 2888d43a..628f8f8e 100644
--- a/src/gui/entry/EditEntryWidget.h
+++ b/src/gui/entry/EditEntryWidget.h
@@ -121,6 +121,7 @@ private:
 
     bool m_create;
     bool m_history;
+    bool m_saved;
     const QScopedPointer<Ui::EditEntryWidgetMain> m_mainUi;
     const QScopedPointer<Ui::EditEntryWidgetAdvanced> m_advancedUi;
     const QScopedPointer<Ui::EditEntryWidgetAutoType> m_autoTypeUi;
diff --git a/tests/gui/TestGui.cpp b/tests/gui/TestGui.cpp
index 75ce3cc5..6805e105 100644
--- a/tests/gui/TestGui.cpp
+++ b/tests/gui/TestGui.cpp
@@ -332,15 +332,27 @@ void TestGui::testAddEntry()
     QTest::keyClicks(passwordRepeatEdit, "something 2");
     QTest::mouseClick(editEntryWidgetButtonBox->button(QDialogButtonBox::Ok), Qt::LeftButton);
 
-    // Add entry "something 3"
+    // Add entry "something 3" using the apply button then click ok
     QTest::mouseClick(entryNewWidget, Qt::LeftButton);
     QTest::keyClicks(titleEdit, "something 3");
+    QTest::mouseClick(editEntryWidgetButtonBox->button(QDialogButtonBox::Apply), Qt::LeftButton);
     QTest::mouseClick(editEntryWidgetButtonBox->button(QDialogButtonBox::Ok), Qt::LeftButton);
 
+    // Add entry "something 4" using the apply button then click cancel
+    QTest::mouseClick(entryNewWidget, Qt::LeftButton);
+    QTest::keyClicks(titleEdit, "something 4");
+    QTest::mouseClick(editEntryWidgetButtonBox->button(QDialogButtonBox::Apply), Qt::LeftButton);
+    QTest::mouseClick(editEntryWidgetButtonBox->button(QDialogButtonBox::Cancel), Qt::LeftButton);
+
+    // Add entry "something 5" but click cancel button (does NOT add entry)
+    QTest::mouseClick(entryNewWidget, Qt::LeftButton);
+    QTest::keyClicks(titleEdit, "something 5");
+    QTest::mouseClick(editEntryWidgetButtonBox->button(QDialogButtonBox::Cancel), Qt::LeftButton);
+
     QApplication::processEvents();
 
-    // Confirm that 4 entries now exist
-    QTRY_COMPARE(entryView->model()->rowCount(), 4);
+    // Confirm that 5 entries now exist
+    QTRY_COMPARE(entryView->model()->rowCount(), 5);
 }
 
 void TestGui::testPasswordEntryEntropy()
@@ -513,7 +525,7 @@ void TestGui::testTotp()
 void TestGui::testSearch()
 {
     // Add canned entries for consistent testing
-    testAddEntry();
+    Q_UNUSED(addCannedEntries());
 
     QToolBar* toolBar = m_mainWindow->findChild<QToolBar*>("toolBar");
 
@@ -629,7 +641,7 @@ void TestGui::testSearch()
 void TestGui::testDeleteEntry()
 {
     // Add canned entries for consistent testing
-    testAddEntry();
+    Q_UNUSED(addCannedEntries());
 
     GroupView* groupView = m_dbWidget->findChild<GroupView*>("groupView");
     EntryView* entryView = m_dbWidget->findChild<EntryView*>("entryView");
@@ -905,6 +917,42 @@ void TestGui::cleanupTestCase()
     delete m_mainWindow;
 }
 
+int TestGui::addCannedEntries()
+{
+    int entries_added = 0;
+
+    // Find buttons
+    QToolBar* toolBar = m_mainWindow->findChild<QToolBar*>("toolBar");
+    QWidget* entryNewWidget = toolBar->widgetForAction(m_mainWindow->findChild<QAction*>("actionEntryNew"));
+    EditEntryWidget* editEntryWidget = m_dbWidget->findChild<EditEntryWidget*>("editEntryWidget");
+    QLineEdit* titleEdit = editEntryWidget->findChild<QLineEdit*>("titleEdit");
+    QLineEdit* passwordEdit = editEntryWidget->findChild<QLineEdit*>("passwordEdit");
+    QLineEdit* passwordRepeatEdit = editEntryWidget->findChild<QLineEdit*>("passwordRepeatEdit");
+
+    // Add entry "test" and confirm added
+    QTest::mouseClick(entryNewWidget, Qt::LeftButton);
+    QTest::keyClicks(titleEdit, "test");
+    QDialogButtonBox* editEntryWidgetButtonBox = editEntryWidget->findChild<QDialogButtonBox*>("buttonBox");
+    QTest::mouseClick(editEntryWidgetButtonBox->button(QDialogButtonBox::Ok), Qt::LeftButton);
+    ++entries_added;
+
+    // Add entry "something 2"
+    QTest::mouseClick(entryNewWidget, Qt::LeftButton);
+    QTest::keyClicks(titleEdit, "something 2");
+    QTest::keyClicks(passwordEdit, "something 2");
+    QTest::keyClicks(passwordRepeatEdit, "something 2");
+    QTest::mouseClick(editEntryWidgetButtonBox->button(QDialogButtonBox::Ok), Qt::LeftButton);
+    ++entries_added;
+
+    // Add entry "something 3"
+    QTest::mouseClick(entryNewWidget, Qt::LeftButton);
+    QTest::keyClicks(titleEdit, "something 3");
+    QTest::mouseClick(editEntryWidgetButtonBox->button(QDialogButtonBox::Ok), Qt::LeftButton);
+    ++entries_added;
+
+    return entries_added;
+}
+
 void TestGui::checkDatabase(QString dbFileName)
 {
     if (dbFileName.isEmpty())
diff --git a/tests/gui/TestGui.h b/tests/gui/TestGui.h
index 904e5f21..352dbf21 100644
--- a/tests/gui/TestGui.h
+++ b/tests/gui/TestGui.h
@@ -61,6 +61,7 @@ private slots:
     void testDatabaseLocking();
 
 private:
+    int addCannedEntries();
     void checkDatabase(QString dbFileName = "");
     void triggerAction(const QString& name);
     void dragAndDropGroup(const QModelIndex& sourceIndex, const QModelIndex& targetIndex, int row,

From 7e54bd49564dd658fa98aec5f5e63a8f0b3c4a6a Mon Sep 17 00:00:00 2001
From: thez3ro <io@thezero.org>
Date: Sat, 28 Oct 2017 20:57:11 +0200
Subject: [PATCH 078/118] prevent crash with empty database

---
 src/gui/DetailsWidget.cpp | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/src/gui/DetailsWidget.cpp b/src/gui/DetailsWidget.cpp
index b805f9b1..48077bbb 100644
--- a/src/gui/DetailsWidget.cpp
+++ b/src/gui/DetailsWidget.cpp
@@ -60,6 +60,11 @@ DetailsWidget::~DetailsWidget()
 
 void DetailsWidget::getSelectedEntry(Entry* selectedEntry) 
 {
+    if (!selectedEntry) {
+        hideDetails();
+        return;
+    }
+
     m_currentEntry = selectedEntry;
 
     if (!config()->get("GUI/HideDetailsView").toBool()) {
@@ -185,6 +190,11 @@ void DetailsWidget::getSelectedEntry(Entry* selectedEntry)
 
 void DetailsWidget::getSelectedGroup(Group* selectedGroup) 
 {
+    if (!selectedGroup) {
+        hideDetails();
+        return;
+    }
+
     m_currentGroup = selectedGroup;
 
     if (!config()->get("GUI/HideDetailsView").toBool()) {

From ffe344ce901b37c0b118398be1a1db0862f3357d Mon Sep 17 00:00:00 2001
From: frostasm <frost.asm@gmail.com>
Date: Sun, 29 Oct 2017 11:18:48 +0200
Subject: [PATCH 079/118] Save the geometry of main window only if the window
 is visible

---
 src/gui/MainWindow.cpp | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/src/gui/MainWindow.cpp b/src/gui/MainWindow.cpp
index c82ea175..ccc5fb11 100644
--- a/src/gui/MainWindow.cpp
+++ b/src/gui/MainWindow.cpp
@@ -727,7 +727,9 @@ void MainWindow::changeEvent(QEvent* event)
 
 void MainWindow::saveWindowInformation()
 {
-    config()->set("GUI/MainWindowGeometry", saveGeometry());
+    if (isVisible()) {
+        config()->set("GUI/MainWindowGeometry", saveGeometry());
+    }
 }
 
 bool MainWindow::saveLastDatabases()
@@ -858,6 +860,7 @@ void MainWindow::trayIconTriggered(QSystemTrayIcon::ActivationReason reason)
 
 void MainWindow::hideWindow()
 {
+    saveWindowInformation();
 #ifndef Q_OS_MAC
     setWindowState(windowState() | Qt::WindowMinimized);
 #endif

From 6bbd42bfd194c93639ba246b92ae08dbee277e79 Mon Sep 17 00:00:00 2001
From: frostasm <frost.asm@gmail.com>
Date: Sat, 28 Oct 2017 18:37:05 +0300
Subject: [PATCH 080/118] Allow to change the height of the preview panel
 (#1135)

---
 src/gui/DetailsWidget.ui | 322 ++++++++++++++++++---------------------
 1 file changed, 147 insertions(+), 175 deletions(-)

diff --git a/src/gui/DetailsWidget.ui b/src/gui/DetailsWidget.ui
index fb31409f..8fbafe34 100644
--- a/src/gui/DetailsWidget.ui
+++ b/src/gui/DetailsWidget.ui
@@ -6,22 +6,10 @@
    <rect>
     <x>0</x>
     <y>0</y>
-    <width>630</width>
+    <width>600</width>
     <height>200</height>
    </rect>
   </property>
-  <property name="sizePolicy">
-   <sizepolicy hsizetype="MinimumExpanding" vsizetype="Minimum">
-    <horstretch>0</horstretch>
-    <verstretch>0</verstretch>
-   </sizepolicy>
-  </property>
-  <property name="maximumSize">
-   <size>
-    <width>16777215</width>
-    <height>200</height>
-   </size>
-  </property>
   <layout class="QVBoxLayout" name="verticalLayout_3">
    <item>
     <layout class="QHBoxLayout" name="horizontalLayout" stretch="0,0,0,0,0,0,0">
@@ -36,12 +24,6 @@
          <verstretch>0</verstretch>
         </sizepolicy>
        </property>
-       <property name="maximumSize">
-        <size>
-         <width>20</width>
-         <height>16777215</height>
-        </size>
-       </property>
        <property name="text">
         <string/>
        </property>
@@ -166,85 +148,19 @@
       <layout class="QVBoxLayout" name="verticalLayout_5">
        <item>
         <widget class="QStackedWidget" name="stackedWidget">
-         <property name="sizePolicy">
-          <sizepolicy hsizetype="Preferred" vsizetype="Minimum">
-           <horstretch>0</horstretch>
-           <verstretch>0</verstretch>
-          </sizepolicy>
-         </property>
          <property name="currentIndex">
           <number>0</number>
          </property>
          <widget class="QWidget" name="entryPage">
-          <layout class="QGridLayout" name="gridLayout" columnstretch="1,3">
+          <layout class="QGridLayout" name="gridLayout" columnstretch="0,0,1">
+           <item row="0" column="2">
+            <widget class="QLabel" name="usernameLabel">
+             <property name="textInteractionFlags">
+              <set>Qt::LinksAccessibleByMouse|Qt::TextSelectableByMouse</set>
+             </property>
+            </widget>
+           </item>
            <item row="1" column="1">
-            <widget class="QLabel" name="passwordLabel"/>
-           </item>
-           <item row="2" column="1">
-            <widget class="QLabel" name="urlLabel">
-             <property name="sizePolicy">
-              <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
-               <horstretch>0</horstretch>
-               <verstretch>0</verstretch>
-              </sizepolicy>
-             </property>
-             <property name="cursor">
-              <cursorShape>PointingHandCursor</cursorShape>
-             </property>
-             <property name="text">
-              <string/>
-             </property>
-            </widget>
-           </item>
-           <item row="3" column="0">
-            <widget class="QLabel" name="expirationLabel_2">
-             <property name="sizePolicy">
-              <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
-               <horstretch>0</horstretch>
-               <verstretch>0</verstretch>
-              </sizepolicy>
-             </property>
-             <property name="font">
-              <font>
-               <weight>75</weight>
-               <bold>true</bold>
-              </font>
-             </property>
-             <property name="text">
-              <string>Expiration</string>
-             </property>
-             <property name="alignment">
-              <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
-             </property>
-            </widget>
-           </item>
-           <item row="2" column="0">
-            <widget class="QLabel" name="urlLabel_2">
-             <property name="sizePolicy">
-              <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
-               <horstretch>0</horstretch>
-               <verstretch>0</verstretch>
-              </sizepolicy>
-             </property>
-             <property name="font">
-              <font>
-               <pointsize>9</pointsize>
-               <weight>75</weight>
-               <bold>true</bold>
-              </font>
-             </property>
-             <property name="text">
-              <string>URL</string>
-             </property>
-             <property name="alignment">
-              <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
-             </property>
-            </widget>
-           </item>
-           <item row="3" column="1">
-            <widget class="QLabel" name="expirationLabel"/>
-           </item>
-           <item row="1" column="0">
             <widget class="QLabel" name="passwordLabel_2">
              <property name="sizePolicy">
               <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
@@ -267,6 +183,102 @@
             </widget>
            </item>
            <item row="0" column="0">
+            <spacer name="horizontalSpacer_2">
+             <property name="orientation">
+              <enum>Qt::Horizontal</enum>
+             </property>
+             <property name="sizeType">
+              <enum>QSizePolicy::Fixed</enum>
+             </property>
+             <property name="sizeHint" stdset="0">
+              <size>
+               <width>20</width>
+               <height>20</height>
+              </size>
+             </property>
+            </spacer>
+           </item>
+           <item row="3" column="2">
+            <widget class="QLabel" name="expirationLabel"/>
+           </item>
+           <item row="4" column="2">
+            <spacer name="verticalSpacer_2">
+             <property name="orientation">
+              <enum>Qt::Vertical</enum>
+             </property>
+             <property name="sizeHint" stdset="0">
+              <size>
+               <width>20</width>
+               <height>0</height>
+              </size>
+             </property>
+            </spacer>
+           </item>
+           <item row="2" column="1">
+            <widget class="QLabel" name="urlLabel_2">
+             <property name="sizePolicy">
+              <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
+               <horstretch>0</horstretch>
+               <verstretch>0</verstretch>
+              </sizepolicy>
+             </property>
+             <property name="font">
+              <font>
+               <pointsize>9</pointsize>
+               <weight>75</weight>
+               <bold>true</bold>
+              </font>
+             </property>
+             <property name="text">
+              <string>URL</string>
+             </property>
+             <property name="alignment">
+              <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
+             </property>
+            </widget>
+           </item>
+           <item row="2" column="2">
+            <widget class="QLabel" name="urlLabel">
+             <property name="sizePolicy">
+              <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
+               <horstretch>0</horstretch>
+               <verstretch>0</verstretch>
+              </sizepolicy>
+             </property>
+             <property name="cursor">
+              <cursorShape>PointingHandCursor</cursorShape>
+             </property>
+             <property name="text">
+              <string/>
+             </property>
+            </widget>
+           </item>
+           <item row="3" column="1">
+            <widget class="QLabel" name="expirationLabel_2">
+             <property name="sizePolicy">
+              <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
+               <horstretch>0</horstretch>
+               <verstretch>0</verstretch>
+              </sizepolicy>
+             </property>
+             <property name="font">
+              <font>
+               <weight>75</weight>
+               <bold>true</bold>
+              </font>
+             </property>
+             <property name="text">
+              <string>Expiration</string>
+             </property>
+             <property name="alignment">
+              <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
+             </property>
+            </widget>
+           </item>
+           <item row="1" column="2">
+            <widget class="QLabel" name="passwordLabel"/>
+           </item>
+           <item row="0" column="1">
             <widget class="QLabel" name="usernameLabel_2">
              <property name="sizePolicy">
               <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
@@ -291,41 +303,11 @@
              </property>
             </widget>
            </item>
-           <item row="0" column="1">
-            <widget class="QLabel" name="usernameLabel">
-             <property name="textInteractionFlags">
-              <set>Qt::LinksAccessibleByMouse|Qt::TextSelectableByMouse</set>
-             </property>
-            </widget>
-           </item>
-           <item row="4" column="1">
-            <spacer name="verticalSpacer_2">
-             <property name="orientation">
-              <enum>Qt::Vertical</enum>
-             </property>
-             <property name="sizeHint" stdset="0">
-              <size>
-               <width>20</width>
-               <height>40</height>
-              </size>
-             </property>
-            </spacer>
-           </item>
           </layout>
          </widget>
          <widget class="QWidget" name="groupPage">
-          <layout class="QGridLayout" name="gridLayout_4" columnstretch="1,3">
-           <item row="2" column="1">
-            <widget class="QLabel" name="groupExpirationLabel">
-             <property name="sizePolicy">
-              <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
-               <horstretch>0</horstretch>
-               <verstretch>0</verstretch>
-              </sizepolicy>
-             </property>
-            </widget>
-           </item>
-           <item row="0" column="0">
+          <layout class="QGridLayout" name="gridLayout_4" columnstretch="0,0,1">
+           <item row="0" column="1">
             <widget class="QLabel" name="autotypeLabel_2">
              <property name="sizePolicy">
               <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
@@ -347,7 +329,30 @@
              </property>
             </widget>
            </item>
-           <item row="1" column="1">
+           <item row="2" column="2">
+            <widget class="QLabel" name="groupExpirationLabel">
+             <property name="sizePolicy">
+              <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
+               <horstretch>0</horstretch>
+               <verstretch>0</verstretch>
+              </sizepolicy>
+             </property>
+            </widget>
+           </item>
+           <item row="3" column="2">
+            <spacer name="verticalSpacer">
+             <property name="orientation">
+              <enum>Qt::Vertical</enum>
+             </property>
+             <property name="sizeHint" stdset="0">
+              <size>
+               <width>20</width>
+               <height>0</height>
+              </size>
+             </property>
+            </spacer>
+           </item>
+           <item row="1" column="2">
             <widget class="QLabel" name="searchingLabel">
              <property name="sizePolicy">
               <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
@@ -357,7 +362,7 @@
              </property>
             </widget>
            </item>
-           <item row="1" column="0">
+           <item row="1" column="1">
             <widget class="QLabel" name="searchingLabel_2">
              <property name="sizePolicy">
               <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
@@ -379,7 +384,7 @@
              </property>
             </widget>
            </item>
-           <item row="0" column="1">
+           <item row="0" column="2">
             <widget class="QLabel" name="autotypeLabel">
              <property name="sizePolicy">
               <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
@@ -389,7 +394,7 @@
              </property>
             </widget>
            </item>
-           <item row="2" column="0">
+           <item row="2" column="1">
             <widget class="QLabel" name="groupExpirationLabel_2">
              <property name="sizePolicy">
               <sizepolicy hsizetype="Minimum" vsizetype="Preferred">
@@ -411,15 +416,18 @@
              </property>
             </widget>
            </item>
-           <item row="3" column="1">
-            <spacer name="verticalSpacer">
+           <item row="0" column="0">
+            <spacer name="horizontalSpacer_3">
              <property name="orientation">
-              <enum>Qt::Vertical</enum>
+              <enum>Qt::Horizontal</enum>
+             </property>
+             <property name="sizeType">
+              <enum>QSizePolicy::Fixed</enum>
              </property>
              <property name="sizeHint" stdset="0">
               <size>
                <width>20</width>
-               <height>40</height>
+               <height>20</height>
               </size>
              </property>
             </spacer>
@@ -434,27 +442,9 @@
       <attribute name="title">
        <string>Attributes</string>
       </attribute>
-      <layout class="QFormLayout" name="formLayout">
-       <item row="0" column="1">
+      <layout class="QVBoxLayout" name="verticalLayout">
+       <item>
         <widget class="QTextEdit" name="attributesEdit">
-         <property name="sizePolicy">
-          <sizepolicy hsizetype="Expanding" vsizetype="Expanding">
-           <horstretch>0</horstretch>
-           <verstretch>1</verstretch>
-          </sizepolicy>
-         </property>
-         <property name="minimumSize">
-          <size>
-           <width>0</width>
-           <height>80</height>
-          </size>
-         </property>
-         <property name="maximumSize">
-          <size>
-           <width>16777215</width>
-           <height>80</height>
-          </size>
-         </property>
          <property name="focusPolicy">
           <enum>Qt::ClickFocus</enum>
          </property>
@@ -469,27 +459,9 @@
       <attribute name="title">
        <string>Notes</string>
       </attribute>
-      <layout class="QFormLayout" name="formLayout_2">
-       <item row="0" column="1">
+      <layout class="QVBoxLayout" name="verticalLayout_2">
+       <item>
         <widget class="QTextEdit" name="notesEdit">
-         <property name="sizePolicy">
-          <sizepolicy hsizetype="Expanding" vsizetype="Expanding">
-           <horstretch>0</horstretch>
-           <verstretch>1</verstretch>
-          </sizepolicy>
-         </property>
-         <property name="minimumSize">
-          <size>
-           <width>0</width>
-           <height>80</height>
-          </size>
-         </property>
-         <property name="maximumSize">
-          <size>
-           <width>16777215</width>
-           <height>80</height>
-          </size>
-         </property>
          <property name="focusPolicy">
           <enum>Qt::ClickFocus</enum>
          </property>
@@ -504,8 +476,8 @@
       <attribute name="title">
        <string>Autotype</string>
       </attribute>
-      <layout class="QGridLayout" name="gridLayout_2">
-       <item row="0" column="0">
+      <layout class="QVBoxLayout" name="verticalLayout_4">
+       <item>
         <widget class="QTreeWidget" name="autotypeTree">
          <property name="frameShadow">
           <enum>QFrame::Sunken</enum>

From 8b00d0580bd4028a20124113d2bc2be3f3153f1e Mon Sep 17 00:00:00 2001
From: frostasm <frost.asm@gmail.com>
Date: Sat, 28 Oct 2017 21:14:45 +0300
Subject: [PATCH 081/118] Synchronize the height of the preview panel for all
 open databases

---
 src/gui/DatabaseWidget.cpp          | 39 ++++++++++++++++++-----------
 src/gui/DatabaseWidget.h            | 11 +++++---
 src/gui/DatabaseWidgetStateSync.cpp | 20 ++++++++++-----
 src/gui/DatabaseWidgetStateSync.h   |  3 ++-
 4 files changed, 48 insertions(+), 25 deletions(-)

diff --git a/src/gui/DatabaseWidget.cpp b/src/gui/DatabaseWidget.cpp
index 6571668c..ec51312c 100644
--- a/src/gui/DatabaseWidget.cpp
+++ b/src/gui/DatabaseWidget.cpp
@@ -73,15 +73,15 @@ DatabaseWidget::DatabaseWidget(Database* db, QWidget* parent)
     QLayout* layout = new QHBoxLayout();
     mainLayout->addWidget(m_messageWidget);
     mainLayout->addLayout(layout);
-    m_splitter = new QSplitter(m_mainWidget);
-    m_splitter->setChildrenCollapsible(false);
+    m_mainSplitter = new QSplitter(m_mainWidget);
+    m_mainSplitter->setChildrenCollapsible(false);
     m_detailSplitter = new QSplitter(m_mainWidget);
     m_detailSplitter->setOrientation(Qt::Vertical);
     m_detailSplitter->setChildrenCollapsible(true);
 
-    QWidget* rightHandSideWidget = new QWidget(m_splitter);
+    QWidget* rightHandSideWidget = new QWidget(m_mainSplitter);
 
-    m_groupView = new GroupView(db, m_splitter);
+    m_groupView = new GroupView(db, m_mainSplitter);
     m_groupView->setObjectName("groupView");
     m_groupView->setContextMenuPolicy(Qt::CustomContextMenu);
     connect(m_groupView, SIGNAL(customContextMenuRequested(QPoint)),
@@ -122,13 +122,13 @@ DatabaseWidget::DatabaseWidget(Database* db, QWidget* parent)
 
     setTabOrder(m_entryView, m_groupView);
 
-    m_splitter->addWidget(m_groupView);
-    m_splitter->addWidget(rightHandSideWidget);
+    m_mainSplitter->addWidget(m_groupView);
+    m_mainSplitter->addWidget(rightHandSideWidget);
 
-    m_splitter->setStretchFactor(0, 30);
-    m_splitter->setStretchFactor(1, 70);
+    m_mainSplitter->setStretchFactor(0, 30);
+    m_mainSplitter->setStretchFactor(1, 70);
 
-    layout->addWidget(m_splitter);
+    layout->addWidget(m_mainSplitter);
     m_mainWidget->setLayout(mainLayout);
 
     m_editEntryWidget = new EditEntryWidget();
@@ -168,7 +168,8 @@ DatabaseWidget::DatabaseWidget(Database* db, QWidget* parent)
     addWidget(m_keepass1OpenWidget);
     addWidget(m_unlockDatabaseWidget);
 
-    connect(m_splitter, SIGNAL(splitterMoved(int,int)), SIGNAL(splitterSizesChanged()));
+    connect(m_mainSplitter, SIGNAL(splitterMoved(int,int)), SIGNAL(mainSplitterSizesChanged()));
+    connect(m_detailSplitter, SIGNAL(splitterMoved(int,int)), SIGNAL(detailSplitterSizesChanged()));
     connect(m_entryView->header(), SIGNAL(sectionResized(int,int,int)), SIGNAL(entryColumnSizesChanged()));
     connect(m_groupView, SIGNAL(groupChanged(Group*)), this, SLOT(onGroupChanged(Group*)));
     connect(m_groupView, SIGNAL(groupChanged(Group*)), SIGNAL(groupChanged()));
@@ -251,14 +252,24 @@ bool DatabaseWidget::isEditWidgetModified() const
     }
 }
 
-QList<int> DatabaseWidget::splitterSizes() const
+QList<int> DatabaseWidget::mainSplitterSizes() const
 {
-    return m_splitter->sizes();
+    return m_mainSplitter->sizes();
 }
 
-void DatabaseWidget::setSplitterSizes(const QList<int>& sizes)
+void DatabaseWidget::setMainSplitterSizes(const QList<int>& sizes)
 {
-    m_splitter->setSizes(sizes);
+    m_mainSplitter->setSizes(sizes);
+}
+
+QList<int> DatabaseWidget::detailSplitterSizes() const
+{
+    return m_detailSplitter->sizes();
+}
+
+void DatabaseWidget::setDetailSplitterSizes(const QList<int> &sizes)
+{
+    m_detailSplitter->setSizes(sizes);
 }
 
 QList<int> DatabaseWidget::entryHeaderViewSizes() const
diff --git a/src/gui/DatabaseWidget.h b/src/gui/DatabaseWidget.h
index 404adb52..21507759 100644
--- a/src/gui/DatabaseWidget.h
+++ b/src/gui/DatabaseWidget.h
@@ -88,8 +88,10 @@ public:
     bool isGroupSelected() const;
     bool isInEditMode() const;
     bool isEditWidgetModified() const;
-    QList<int> splitterSizes() const;
-    void setSplitterSizes(const QList<int>& sizes);
+    QList<int> mainSplitterSizes() const;
+    void setMainSplitterSizes(const QList<int>& sizes);
+    QList<int> detailSplitterSizes() const;
+    void setDetailSplitterSizes(const QList<int>& sizes);
     QList<int> entryHeaderViewSizes() const;
     void setEntryViewHeaderSizes(const QList<int>& sizes);
     void clearAllWidgets();
@@ -123,7 +125,8 @@ signals:
     void listModeActivated();
     void searchModeAboutToActivate();
     void searchModeActivated();
-    void splitterSizesChanged();
+    void mainSplitterSizesChanged();
+    void detailSplitterSizesChanged();
     void entryColumnSizesChanged();
     void updateSearch(QString text);
 
@@ -214,7 +217,7 @@ private:
     KeePass1OpenWidget* m_keepass1OpenWidget;
     UnlockDatabaseWidget* m_unlockDatabaseWidget;
     UnlockDatabaseDialog* m_unlockDatabaseDialog;
-    QSplitter* m_splitter;
+    QSplitter* m_mainSplitter;
     QSplitter* m_detailSplitter;
     GroupView* m_groupView;
     EntryView* m_entryView;
diff --git a/src/gui/DatabaseWidgetStateSync.cpp b/src/gui/DatabaseWidgetStateSync.cpp
index 1510d844..9b5492b0 100644
--- a/src/gui/DatabaseWidgetStateSync.cpp
+++ b/src/gui/DatabaseWidgetStateSync.cpp
@@ -25,14 +25,16 @@ DatabaseWidgetStateSync::DatabaseWidgetStateSync(QObject* parent)
     , m_activeDbWidget(nullptr)
     , m_blockUpdates(false)
 {
-    m_splitterSizes = variantToIntList(config()->get("GUI/SplitterState"));
+    m_mainSplitterSizes = variantToIntList(config()->get("GUI/SplitterState"));
+    m_detailSplitterSizes = variantToIntList(config()->get("GUI/DetailSplitterState"));
     m_columnSizesList = variantToIntList(config()->get("GUI/EntryListColumnSizes"));
     m_columnSizesSearch = variantToIntList(config()->get("GUI/EntrySearchColumnSizes"));
 }
 
 DatabaseWidgetStateSync::~DatabaseWidgetStateSync()
 {
-    config()->set("GUI/SplitterState", intListToVariant(m_splitterSizes));
+    config()->set("GUI/SplitterState", intListToVariant(m_mainSplitterSizes));
+    config()->set("GUI/DetailSplitterState", intListToVariant(m_detailSplitterSizes));
     config()->set("GUI/EntryListColumnSizes", intListToVariant(m_columnSizesList));
     config()->set("GUI/EntrySearchColumnSizes", intListToVariant(m_columnSizesSearch));
 }
@@ -48,8 +50,11 @@ void DatabaseWidgetStateSync::setActive(DatabaseWidget* dbWidget)
     if (m_activeDbWidget) {
         m_blockUpdates = true;
 
-        if (!m_splitterSizes.isEmpty())
-            m_activeDbWidget->setSplitterSizes(m_splitterSizes);
+        if (!m_mainSplitterSizes.isEmpty())
+            m_activeDbWidget->setMainSplitterSizes(m_mainSplitterSizes);
+
+        if (!m_detailSplitterSizes.isEmpty())
+            m_activeDbWidget->setDetailSplitterSizes(m_detailSplitterSizes);
 
         if (m_activeDbWidget->isInSearchMode())
             restoreSearchView();
@@ -58,7 +63,9 @@ void DatabaseWidgetStateSync::setActive(DatabaseWidget* dbWidget)
 
         m_blockUpdates = false;
 
-        connect(m_activeDbWidget, SIGNAL(splitterSizesChanged()),
+        connect(m_activeDbWidget, SIGNAL(mainSplitterSizesChanged()),
+                SLOT(updateSplitterSizes()));
+        connect(m_activeDbWidget, SIGNAL(detailSplitterSizesChanged()),
                 SLOT(updateSplitterSizes()));
         connect(m_activeDbWidget, SIGNAL(entryColumnSizesChanged()),
                 SLOT(updateColumnSizes()));
@@ -102,7 +109,8 @@ void DatabaseWidgetStateSync::updateSplitterSizes()
         return;
     }
 
-    m_splitterSizes = m_activeDbWidget->splitterSizes();
+    m_mainSplitterSizes = m_activeDbWidget->mainSplitterSizes();
+    m_detailSplitterSizes = m_activeDbWidget->detailSplitterSizes();
 }
 
 void DatabaseWidgetStateSync::updateColumnSizes()
diff --git a/src/gui/DatabaseWidgetStateSync.h b/src/gui/DatabaseWidgetStateSync.h
index 96ecd104..79a8ded3 100644
--- a/src/gui/DatabaseWidgetStateSync.h
+++ b/src/gui/DatabaseWidgetStateSync.h
@@ -46,7 +46,8 @@ private:
     DatabaseWidget* m_activeDbWidget;
 
     bool m_blockUpdates;
-    QList<int> m_splitterSizes;
+    QList<int> m_mainSplitterSizes;
+    QList<int> m_detailSplitterSizes;
     QList<int> m_columnSizesList;
     QList<int> m_columnSizesSearch;
 };

From afaa0a3493c78d47fd4aad14c4c3fff5292b5afe Mon Sep 17 00:00:00 2001
From: frostasm <frost.asm@gmail.com>
Date: Thu, 2 Nov 2017 20:47:54 +0200
Subject: [PATCH 082/118] Fix formatting brackets in
 DatabaseWidgetStateSync::setActive function

---
 src/gui/DatabaseWidgetStateSync.cpp | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/src/gui/DatabaseWidgetStateSync.cpp b/src/gui/DatabaseWidgetStateSync.cpp
index 9b5492b0..57a3dcf8 100644
--- a/src/gui/DatabaseWidgetStateSync.cpp
+++ b/src/gui/DatabaseWidgetStateSync.cpp
@@ -50,16 +50,19 @@ void DatabaseWidgetStateSync::setActive(DatabaseWidget* dbWidget)
     if (m_activeDbWidget) {
         m_blockUpdates = true;
 
-        if (!m_mainSplitterSizes.isEmpty())
+        if (!m_mainSplitterSizes.isEmpty()) {
             m_activeDbWidget->setMainSplitterSizes(m_mainSplitterSizes);
+        }
 
-        if (!m_detailSplitterSizes.isEmpty())
+        if (!m_detailSplitterSizes.isEmpty()) {
             m_activeDbWidget->setDetailSplitterSizes(m_detailSplitterSizes);
+        }
 
-        if (m_activeDbWidget->isInSearchMode())
+        if (m_activeDbWidget->isInSearchMode()) {
             restoreSearchView();
-        else
+        } else {
             restoreListView();
+        }
 
         m_blockUpdates = false;
 

From c3c67f18b8752b3304bcd057efac43ade31c89fb Mon Sep 17 00:00:00 2001
From: thez3ro <io@thezero.org>
Date: Sun, 29 Oct 2017 15:04:46 +0100
Subject: [PATCH 083/118] add test for DB creation

---
 src/gui/DatabaseWidget.cpp            | 19 +++++++++++---
 src/gui/DatabaseWidget.h              |  3 +++
 src/gui/csvImport/CsvImportWizard.cpp | 23 ++++------------
 src/gui/csvImport/CsvImportWizard.h   |  6 ++---
 tests/gui/TestGui.cpp                 | 38 +++++++++++++++++++++++++++
 tests/gui/TestGui.h                   |  1 +
 6 files changed, 64 insertions(+), 26 deletions(-)

diff --git a/src/gui/DatabaseWidget.cpp b/src/gui/DatabaseWidget.cpp
index ec51312c..63420158 100644
--- a/src/gui/DatabaseWidget.cpp
+++ b/src/gui/DatabaseWidget.cpp
@@ -63,6 +63,7 @@ DatabaseWidget::DatabaseWidget(Database* db, QWidget* parent)
     , m_newGroup(nullptr)
     , m_newEntry(nullptr)
     , m_newParent(nullptr)
+    , m_importingCsv(false)
 {
     m_mainWidget = new QWidget(this);
 
@@ -137,13 +138,14 @@ DatabaseWidget::DatabaseWidget(Database* db, QWidget* parent)
     m_editGroupWidget = new EditGroupWidget();
     m_editGroupWidget->setObjectName("editGroupWidget");
     m_changeMasterKeyWidget = new ChangeMasterKeyWidget();
+    m_changeMasterKeyWidget->setObjectName("changeMasterKeyWidget");
     m_changeMasterKeyWidget->headlineLabel()->setText(tr("Change master key"));
-    m_csvImportWizard = new CsvImportWizard();
-    m_csvImportWizard->setObjectName("csvImportWizard");
     QFont headlineLabelFont = m_changeMasterKeyWidget->headlineLabel()->font();
     headlineLabelFont.setBold(true);
     headlineLabelFont.setPointSize(headlineLabelFont.pointSize() + 2);
     m_changeMasterKeyWidget->headlineLabel()->setFont(headlineLabelFont);
+    m_csvImportWizard = new CsvImportWizard();
+    m_csvImportWizard->setObjectName("csvImportWizard");
     m_databaseSettingsWidget = new DatabaseSettingsWidget();
     m_databaseSettingsWidget->setObjectName("databaseSettingsWidget");
     m_databaseOpenWidget = new DatabaseOpenWidget();
@@ -782,6 +784,12 @@ void DatabaseWidget::switchToGroupEdit(Group* group, bool create)
 
 void DatabaseWidget::updateMasterKey(bool accepted)
 {
+    if (m_importingCsv) {
+        setCurrentWidget(m_csvImportWizard);
+        m_csvImportWizard->keyFinished(accepted, m_changeMasterKeyWidget->newMasterKey());
+        return;
+    }
+
     if (accepted) {
         QApplication::setOverrideCursor(QCursor(Qt::WaitCursor));
         bool result = m_db->setKey(m_changeMasterKeyWidget->newMasterKey());
@@ -915,6 +923,7 @@ void DatabaseWidget::switchToMasterKeyChange(bool disableCancel)
     m_changeMasterKeyWidget->clearForms();
     m_changeMasterKeyWidget->setCancelEnabled(!disableCancel);
     setCurrentWidget(m_changeMasterKeyWidget);
+    m_importingCsv = false;
 }
 
 void DatabaseWidget::switchToDatabaseSettings()
@@ -941,9 +950,11 @@ void DatabaseWidget::switchToOpenDatabase(const QString& fileName, const QString
 void DatabaseWidget::switchToImportCsv(const QString& fileName)
 {
     updateFilename(fileName);
-    switchToMasterKeyChange();
     m_csvImportWizard->load(fileName, m_db);
-    setCurrentWidget(m_csvImportWizard);
+    m_changeMasterKeyWidget->clearForms();
+    m_changeMasterKeyWidget->setCancelEnabled(false);
+    setCurrentWidget(m_changeMasterKeyWidget);
+    m_importingCsv = true;
 }
 
 void DatabaseWidget::switchToOpenMergeDatabase(const QString& fileName)
diff --git a/src/gui/DatabaseWidget.h b/src/gui/DatabaseWidget.h
index 21507759..e9428a70 100644
--- a/src/gui/DatabaseWidget.h
+++ b/src/gui/DatabaseWidget.h
@@ -236,6 +236,9 @@ private:
     bool m_searchCaseSensitive;
     bool m_searchLimitGroup;
 
+    // CSV import state
+    bool m_importingCsv;
+
     // Autoreload
     QFileSystemWatcher m_fileWatcher;
     QTimer m_fileWatchTimer;
diff --git a/src/gui/csvImport/CsvImportWizard.cpp b/src/gui/csvImport/CsvImportWizard.cpp
index eb4b2123..e9a8f498 100644
--- a/src/gui/csvImport/CsvImportWizard.cpp
+++ b/src/gui/csvImport/CsvImportWizard.cpp
@@ -28,19 +28,9 @@ CsvImportWizard::CsvImportWizard(QWidget *parent)
     : DialogyWidget(parent)
 {
     m_layout = new QGridLayout(this);
-    m_pages = new QStackedWidget(parent);
-    m_layout->addWidget(m_pages, 0, 0);
+    m_layout->addWidget(m_parse = new CsvImportWidget(this), 0, 0);
 
-    m_pages->addWidget(key = new ChangeMasterKeyWidget(m_pages));
-    m_pages->addWidget(parse = new CsvImportWidget(m_pages));
-    key->headlineLabel()->setText(tr("Import CSV file"));
-    QFont headLineFont = key->headlineLabel()->font();
-    headLineFont.setBold(true);
-    headLineFont.setPointSize(headLineFont.pointSize() + 2);
-    key->headlineLabel()->setFont(headLineFont);
-
-    connect(key, SIGNAL(editFinished(bool)), this, SLOT(keyFinished(bool)));
-    connect(parse, SIGNAL(editFinished(bool)), this, SLOT(parseFinished(bool)));
+    connect(m_parse, SIGNAL(editFinished(bool)), this, SLOT(parseFinished(bool)));
 }
 
 CsvImportWizard::~CsvImportWizard()
@@ -49,21 +39,18 @@ CsvImportWizard::~CsvImportWizard()
 void CsvImportWizard::load(const QString& filename, Database* database)
 {
     m_db = database;
-    parse->load(filename, database);
-    key->clearForms();
+    m_parse->load(filename, database);
 }
 
-void CsvImportWizard::keyFinished(bool accepted)
+void CsvImportWizard::keyFinished(bool accepted, CompositeKey key)
 {
     if (!accepted) {
         emit importFinished(false);
         return;
     }
 
-    m_pages->setCurrentIndex(m_pages->currentIndex()+1);
-
     QApplication::setOverrideCursor(QCursor(Qt::WaitCursor));
-    bool result = m_db->setKey(key->newMasterKey());
+    bool result = m_db->setKey(key);
     QApplication::restoreOverrideCursor();
 
     if (!result) {
diff --git a/src/gui/csvImport/CsvImportWizard.h b/src/gui/csvImport/CsvImportWizard.h
index 317018d9..b6414c0c 100644
--- a/src/gui/csvImport/CsvImportWizard.h
+++ b/src/gui/csvImport/CsvImportWizard.h
@@ -38,19 +38,17 @@ public:
     explicit CsvImportWizard(QWidget *parent = nullptr);
     ~CsvImportWizard();
     void load(const QString& filename, Database *database);
+    void keyFinished(bool accepted, CompositeKey key);
 
 signals:
     void importFinished(bool accepted);
 
 private slots:
-    void keyFinished(bool accepted);
     void parseFinished(bool accepted);
 
 private:
     Database* m_db;
-    CsvImportWidget* parse;
-    ChangeMasterKeyWidget* key;
-    QStackedWidget *m_pages;
+    CsvImportWidget* m_parse;
     QGridLayout *m_layout;
 };
 
diff --git a/tests/gui/TestGui.cpp b/tests/gui/TestGui.cpp
index 75ce3cc5..8c066c93 100644
--- a/tests/gui/TestGui.cpp
+++ b/tests/gui/TestGui.cpp
@@ -49,6 +49,7 @@
 #include "gui/DatabaseTabWidget.h"
 #include "gui/DatabaseWidget.h"
 #include "gui/CloneDialog.h"
+#include "gui/PasswordEdit.h"
 #include "gui/TotpDialog.h"
 #include "gui/SetupTotpDialog.h"
 #include "gui/FileDialog.h"
@@ -119,6 +120,43 @@ void TestGui::cleanup()
     m_dbWidget = nullptr;
 }
 
+void TestGui::testCreateDatabase()
+{
+    fileDialog()->setNextFileName(QString(KEEPASSX_TEST_DATA_DIR).append("/NewTestDatabase.kdbx"));
+    triggerAction("actionDatabaseNew");
+
+    DatabaseWidget* dbWidget = m_tabWidget->currentDatabaseWidget();
+
+    QWidget* databaseNewWidget = dbWidget->findChild<QWidget*>("changeMasterKeyWidget");
+    QList<QWidget*> databaseNewWidgets = dbWidget->findChildren<QWidget*>("changeMasterKeyWidget");
+    PasswordEdit* editPassword = databaseNewWidget->findChild<PasswordEdit*>("enterPasswordEdit");
+    QVERIFY(editPassword->isVisible());
+
+    QLineEdit* editPasswordRepeat = databaseNewWidget->findChild<QLineEdit*>("repeatPasswordEdit");
+    QVERIFY(editPasswordRepeat->isVisible());
+
+    m_tabWidget->currentDatabaseWidget()->setCurrentWidget(databaseNewWidget);
+
+    QTest::keyClicks(editPassword, "test");
+    QTest::keyClicks(editPasswordRepeat, "test");
+    QTest::keyClick(editPasswordRepeat, Qt::Key_Enter);
+
+    QTRY_VERIFY(m_tabWidget->tabText(m_tabWidget->currentIndex()).contains("*"));
+
+    m_db = m_tabWidget->currentDatabaseWidget()->database();
+
+    // there is a new empty db
+    QCOMPARE(m_db->rootGroup()->children().size(), 0);
+
+    // clean 
+    MessageBox::setNextAnswer(QMessageBox::No);
+    triggerAction("actionDatabaseClose");
+    Tools::wait(100);
+
+    QFile dbfile(QString(KEEPASSX_TEST_DATA_DIR).append("/NewTestDatabase.kdbx"));
+    dbfile.remove();
+}
+
 void TestGui::testMergeDatabase()
 {
     // It is safe to ignore the warning this line produces
diff --git a/tests/gui/TestGui.h b/tests/gui/TestGui.h
index 904e5f21..9929b4e7 100644
--- a/tests/gui/TestGui.h
+++ b/tests/gui/TestGui.h
@@ -40,6 +40,7 @@ private slots:
     void cleanup();
     void cleanupTestCase();
 
+    void testCreateDatabase();
     void testMergeDatabase();
     void testAutoreloadDatabase();
     void testTabs();

From d6e8e1be6e1371f9dad6b83c1fa698ac77f218af Mon Sep 17 00:00:00 2001
From: thez3ro <io@thezero.org>
Date: Thu, 2 Nov 2017 19:58:45 +0100
Subject: [PATCH 084/118] use QTemporaryFile when creating a database for
 guitest

---
 tests/gui/TestGui.cpp | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/tests/gui/TestGui.cpp b/tests/gui/TestGui.cpp
index 8c066c93..ffa10b7d 100644
--- a/tests/gui/TestGui.cpp
+++ b/tests/gui/TestGui.cpp
@@ -122,7 +122,12 @@ void TestGui::cleanup()
 
 void TestGui::testCreateDatabase()
 {
-    fileDialog()->setNextFileName(QString(KEEPASSX_TEST_DATA_DIR).append("/NewTestDatabase.kdbx"));
+    QTemporaryFile tmpFile;
+    QVERIFY(tmpFile.open());
+    QString tmpFileName = tmpFile.fileName();
+    tmpFile.remove();
+
+    fileDialog()->setNextFileName(tmpFileName);
     triggerAction("actionDatabaseNew");
 
     DatabaseWidget* dbWidget = m_tabWidget->currentDatabaseWidget();
@@ -148,13 +153,10 @@ void TestGui::testCreateDatabase()
     // there is a new empty db
     QCOMPARE(m_db->rootGroup()->children().size(), 0);
 
-    // clean 
+    // close the new database
     MessageBox::setNextAnswer(QMessageBox::No);
     triggerAction("actionDatabaseClose");
     Tools::wait(100);
-
-    QFile dbfile(QString(KEEPASSX_TEST_DATA_DIR).append("/NewTestDatabase.kdbx"));
-    dbfile.remove();
 }
 
 void TestGui::testMergeDatabase()

From 78408cf54ba817f0fb666ce69a701ac10fdf41b0 Mon Sep 17 00:00:00 2001
From: Yen Chi Hsuan <yan12125@gmail.com>
Date: Mon, 6 Nov 2017 16:05:39 +0800
Subject: [PATCH 085/118] COPYING: remove a duplicated entry

Already in line 46~48 :)
---
 COPYING | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/COPYING b/COPYING
index e12f4534..a6bf0cf4 100644
--- a/COPYING
+++ b/COPYING
@@ -55,10 +55,6 @@ Files: cmake/GenerateProductVersion.cmake
 Copyright: 2015 halex2005 <akharlov@gmail.com>
 License: MIT
 
-Files: cmake/CodeCoverage.cmake
-Copyright: 2012 - 2015, Lars Bilke
-License: BSD-3-clause
-
 Files: share/icons/application/*/apps/keepassxc.png
        share/icons/application/scalable/apps/keepassxc.svgz
        share/icons/application/*/apps/keepassxc-dark.png

From 4853014a61f01427ec9cb59c46371c5619e74653 Mon Sep 17 00:00:00 2001
From: AsavarTzeth <asavartzeth@gmail.com>
Date: Thu, 26 Oct 2017 13:00:50 +0200
Subject: [PATCH 086/118] Fix id and appdata validation failures (#1131)

According to the AppStream specification org.keepassxc is not a valid
id. The product name is missing. This results in failures if one tries
to validate the file and makes it unusable where validation is enforced.

Additionally it seems specification don't allow the `<icon>` tag with
component type desktop-application. I am not sure this tag is strictly
necessary. In any case validation tests require this to be removed.

Fixing both of these issues ensure the AppStream appdata is compliant
and works anywhere passing validations is a requirement.

Also provide some other fixes and improvements to the appdata.

Minor validation failures:

- Fix missing captions for screenshots (`appstreamcli`)
- Fix descriptions cannot start with `<ul>` tag (`appstream-util`)

Other enhancements:

- Add more URL types, but could not add donation type because "&" is not
  allowed in the `<url>` tag and using "%26" causes
  `appstreamcli validate` to fail.
- Add `<developer_name>`, which in cases such as KeePassXC is a team name.
---
 release-tool                                  |  6 +--
 share/CMakeLists.txt                          |  4 +-
 ...ml => org.keepassxc.KeePassXC.appdata.xml} | 53 ++++++++-----------
 ...esktop => org.keepassxc.KeePassXC.desktop} |  0
 snapcraft.yaml                                |  4 +-
 5 files changed, 29 insertions(+), 38 deletions(-)
 rename share/linux/{org.keepassxc.appdata.xml => org.keepassxc.KeePassXC.appdata.xml} (89%)
 rename share/linux/{org.keepassxc.desktop => org.keepassxc.KeePassXC.desktop} (100%)

diff --git a/release-tool b/release-tool
index 10c6a14c..42cd3a1d 100755
--- a/release-tool
+++ b/release-tool
@@ -264,13 +264,13 @@ checkChangeLog() {
 }
 
 checkAppStreamInfo() {
-    if [ ! -f share/linux/org.keepassxc.appdata.xml ]; then
+    if [ ! -f share/linux/org.keepassxc.KeePassXC.appdata.xml ]; then
         exitError "No AppStream info file found!"
     fi
 
-    grep -qPzo "<release version=\"${RELEASE_NAME}\" date=\"\d{4}-\d{2}-\d{2}\">" share/linux/org.keepassxc.appdata.xml
+    grep -qPzo "<release version=\"${RELEASE_NAME}\" date=\"\d{4}-\d{2}-\d{2}\">" share/linux/org.keepassxc.KeePassXC.appdata.xml
     if [ $? -ne 0 ]; then
-        exitError "'share/linux/org.keepassxc.appdata.xml' has not been updated to the '${RELEASE_NAME}' release!"
+        exitError "'share/linux/org.keepassxc.KeePassXC.appdata.xml' has not been updated to the '${RELEASE_NAME}' release!"
     fi
 }
 
diff --git a/share/CMakeLists.txt b/share/CMakeLists.txt
index 6323ece8..81bb2693 100644
--- a/share/CMakeLists.txt
+++ b/share/CMakeLists.txt
@@ -30,8 +30,8 @@ if(UNIX AND NOT APPLE)
     install(DIRECTORY icons/application/ DESTINATION ${CMAKE_INSTALL_DATADIR}/icons/hicolor
             FILES_MATCHING PATTERN "application-x-keepassxc.png" PATTERN "application-x-keepassxc.svgz"
             PATTERN "status" EXCLUDE PATTERN "actions" EXCLUDE PATTERN "categories" EXCLUDE)
-    install(FILES linux/org.keepassxc.desktop DESTINATION ${CMAKE_INSTALL_DATADIR}/applications)
-    install(FILES linux/org.keepassxc.appdata.xml DESTINATION ${CMAKE_INSTALL_DATADIR}/metainfo)
+    install(FILES linux/org.keepassxc.KeePassXC.desktop DESTINATION ${CMAKE_INSTALL_DATADIR}/applications)
+    install(FILES linux/org.keepassxc.KeePassXC.appdata.xml DESTINATION ${CMAKE_INSTALL_DATADIR}/metainfo)
     install(FILES linux/keepassxc.xml DESTINATION ${CMAKE_INSTALL_DATADIR}/mime/packages)
 endif(UNIX AND NOT APPLE)
 
diff --git a/share/linux/org.keepassxc.appdata.xml b/share/linux/org.keepassxc.KeePassXC.appdata.xml
similarity index 89%
rename from share/linux/org.keepassxc.appdata.xml
rename to share/linux/org.keepassxc.KeePassXC.appdata.xml
index 563450a4..b2a4de6e 100644
--- a/share/linux/org.keepassxc.appdata.xml
+++ b/share/linux/org.keepassxc.KeePassXC.appdata.xml
@@ -1,16 +1,15 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <!-- Copyright 2017 KeePassXC Team <team@keepassxc.org> -->
 <component type="desktop-application">
-    <id>org.keepassxc</id>
+    <id>org.keepassxc.KeePassXC.desktop</id>
     <name>KeePassXC</name>
     <metadata_license>CC-BY-3.0</metadata_license>
     <project_license>GPL-3.0+</project_license>
-    <icon type="stock">keepassxc</icon>
-    <url type="homepage">https://keepassxc.org</url>
     <mimetypes>
         <mimetype>application/x-keepass2</mimetype>
     </mimetypes>
     <summary>Community-driven port of the Windows application “KeePass Password Safe”</summary>
+    <developer_name>KeePassXC Team</developer_name>
     <description>
         <p>
             KeePassXC is an application for people with extremely high demands on secure
@@ -19,56 +18,41 @@
         </p>
     </description>
 
-    <launchable type="desktop-id">org.keepassxc.desktop</launchable>
+    <launchable type="desktop-id">org.keepassxc.KeePassXC.desktop</launchable>
+
+    <url type="homepage">https://keepassxc.org</url>
+    <url type="bugtracker">https://github.com/keepassxreboot/keepassxc/issues</url>
+    <url type="faq">https://keepassxc.org/docs#faq</url>
+    <url type="help">https://keepassxc.org/docs</url>
+    <url type="translate">https://www.transifex.com/keepassxc/keepassxc</url>
 
     <screenshots>
         <screenshot type="default">
             <image>https://keepassxc.org/images/screenshots/linux/screen_001.png</image>
+            <caption>Create, Import or Open Databases</caption>
         </screenshot>
         <screenshot>
             <image>https://keepassxc.org/images/screenshots/linux/screen_002.png</image>
+            <caption>Organize with Groups and Entries</caption>
         </screenshot>
         <screenshot>
             <image>https://keepassxc.org/images/screenshots/linux/screen_003.png</image>
+            <caption>Database Entry</caption>
         </screenshot>
         <screenshot>
             <image>https://keepassxc.org/images/screenshots/linux/screen_004.png</image>
-        </screenshot>
-        <screenshot>
-            <image>https://keepassxc.org/images/screenshots/linux/screen_005.png</image>
+            <caption>Icon Selection for Entry</caption>
         </screenshot>
         <screenshot>
             <image>https://keepassxc.org/images/screenshots/linux/screen_006.png</image>
-        </screenshot>
-        <screenshot>
-            <image>https://keepassxc.org/images/screenshots/linux/screen_007.png</image>
-        </screenshot>
-        <screenshot>
-            <image>https://keepassxc.org/images/screenshots/linux/screen_008.png</image>
-        </screenshot>
-        <screenshot>
-            <image>https://keepassxc.org/images/screenshots/linux/screen_009.png</image>
-        </screenshot>
-        <screenshot>
-            <image>https://keepassxc.org/images/screenshots/linux/screen_010.png</image>
-        </screenshot>
-        <screenshot>
-            <image>https://keepassxc.org/images/screenshots/linux/screen_011.png</image>
-        </screenshot>
-        <screenshot>
-            <image>https://keepassxc.org/images/screenshots/linux/screen_012.png</image>
-        </screenshot>
-        <screenshot>
-            <image>https://keepassxc.org/images/screenshots/linux/screen_013.png</image>
-        </screenshot>
-        <screenshot>
-            <image>https://keepassxc.org/images/screenshots/linux/screen_014.png</image>
+            <caption>Password Generator</caption>
         </screenshot>
     </screenshots>
 
     <releases>
         <release version="2.2.2" date="2017-10-22">
             <description>
+                <p>Changes included in this release:</p>
                 <ul>
                     <li>Fixed entries with empty URLs being reported to KeePassHTTP clients [#1031]</li>
                     <li>Fixed YubiKey detection and enabled CLI tool for AppImage binary [#1100]</li>
@@ -87,6 +71,7 @@
             </description>
         </release><release version="2.2.1" date="2017-10-01">
             <description>
+                <p>Changes included in this release:</p>
                 <ul>
                     <li>Corrected multiple snap issues [#934, #1011]</li>
                     <li>Corrected multiple custom icon issues [#708, #719, #994]</li>
@@ -103,6 +88,7 @@
         </release>
         <release version="2.2.0" date="2017-06-23">
             <description>
+                <p>Changes included in this release:</p>
                 <ul>
                     <li>Added YubiKey 2FA integration for unlocking databases [#127]</li>
                     <li>Added TOTP support [#519]</li>
@@ -138,6 +124,7 @@
         </release>
         <release version="2.1.4" date="2017-04-09">
             <description>
+                <p>Changes included in this release:</p>
                 <ul>
                     <li>Bumped KeePassHTTP version to 1.8.4.2</li>
                     <li>KeePassHTTP confirmation window comes to foreground [#466]</li>
@@ -146,6 +133,7 @@
         </release>
         <release version="2.1.3" date="2017-03-03">
             <description>
+                <p>Changes included in this release:</p>
                 <ul>
                     <li>Fix possible overflow in zxcvbn library [#363]</li>
                     <li>Revert HiDPI setting to avoid problems on laptop screens [#332]</li>
@@ -160,6 +148,7 @@
         </release>
         <release version="2.1.2" date="2017-02-17">
             <description>
+                <p>Changes included in this release:</p>
                 <ul>
                     <li>Ask for save location when creating a new database [#302]</li>
                     <li>Remove Libmicrohttpd dependency to clean up the code and ensure better OS X compatibility [#317, #265]</li>
@@ -177,6 +166,7 @@
         </release>
         <release version="2.1.1" date="2017-02-06">
             <description>
+                <p>Changes included in this release:</p>
                 <ul>
                     <li>Enabled HTTP plugin build; plugin is disabled by default and limited to localhost [#147]</li>
                     <li>Escape HTML in dialog boxes [#247]</li>
@@ -189,6 +179,7 @@
         </release>
         <release version="2.1.0" date="2017-01-22">
             <description>
+                <p>Changes included in this release:</p>
                 <ul>
                     <li>Show unlock dialog when using autotype on a closed database [#10, #89]</li>
                     <li>Show different tray icon when database is locked [#37, #46]</li>
diff --git a/share/linux/org.keepassxc.desktop b/share/linux/org.keepassxc.KeePassXC.desktop
similarity index 100%
rename from share/linux/org.keepassxc.desktop
rename to share/linux/org.keepassxc.KeePassXC.desktop
diff --git a/snapcraft.yaml b/snapcraft.yaml
index 0d69941a..7903eb03 100644
--- a/snapcraft.yaml
+++ b/snapcraft.yaml
@@ -12,7 +12,7 @@ apps:
   keepassxc:
     command: desktop-launch keepassxc
     plugs: [unity7, x11, opengl, gsettings, home, network, network-bind, removable-media, raw-usb]
-    desktop: usr/share/applications/org.keepassxc.desktop
+    desktop: usr/share/applications/org.keepassxc.KeePassXC.desktop
   cli:
     command: keepassxc-cli
     plugs: [gsettings, home, removable-media, raw-usb]
@@ -42,7 +42,7 @@ parts:
       - libyubikey-dev
       - libykpers-1-dev
     install: |
-      sed -i 's|Icon=keepassxc|Icon=${SNAP}/usr/share/icons/hicolor/256x256/apps/keepassxc.png|g' $SNAPCRAFT_PART_INSTALL/usr/share/applications/org.keepassxc.desktop
+      sed -i 's|Icon=keepassxc|Icon=${SNAP}/usr/share/icons/hicolor/256x256/apps/keepassxc.png|g' $SNAPCRAFT_PART_INSTALL/usr/share/applications/org.keepassxc.KeePassXC.desktop
     after: [desktop-qt5]
 
   # Redefine desktop-qt5 stage packages to work with Ubuntu 17.04

From 3427a1aff4d304dcd4c44c843f4dc26209fe48cc Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Adolfo=20E=2E=20Garc=C3=ADa?= <adolfo.garcia.cr@gmail.com>
Date: Sat, 11 Nov 2017 16:25:20 -0600
Subject: [PATCH 087/118] Fix #1156

- Fix multiple activations of updateTotp by different QTimer instance timeouts.
- Fix call to updateTotp with invalid, uninitialized state
- Fix tooltip description
---
 src/gui/DetailsWidget.cpp | 41 ++++++++++++++++++++++-----------------
 src/gui/DetailsWidget.h   |  3 +--
 src/gui/DetailsWidget.ui  |  2 +-
 3 files changed, 25 insertions(+), 21 deletions(-)

diff --git a/src/gui/DetailsWidget.cpp b/src/gui/DetailsWidget.cpp
index 48077bbb..c8dc058d 100644
--- a/src/gui/DetailsWidget.cpp
+++ b/src/gui/DetailsWidget.cpp
@@ -20,6 +20,7 @@
 #include "ui_DetailsWidget.h"
 
 #include <QDebug>
+#include <QTimer>
 
 #include "core/Config.h"
 #include "core/FilePath.h"
@@ -33,6 +34,7 @@ DetailsWidget::DetailsWidget(QWidget* parent)
     , m_locked(false)
     , m_currentEntry(nullptr)
     , m_currentGroup(nullptr)
+    , m_timer(nullptr)
     , m_attributesWidget(nullptr)
     , m_autotypeWidget(nullptr)
     , m_selectedTabEntry(0)
@@ -58,7 +60,7 @@ DetailsWidget::~DetailsWidget()
 {
 }
 
-void DetailsWidget::getSelectedEntry(Entry* selectedEntry) 
+void DetailsWidget::getSelectedEntry(Entry* selectedEntry)
 {
     if (!selectedEntry) {
         hideDetails();
@@ -108,7 +110,8 @@ void DetailsWidget::getSelectedEntry(Entry* selectedEntry)
     m_ui->usernameLabel->setText(m_currentEntry->resolveMultiplePlaceholders(m_currentEntry->username()));
 
     if (!config()->get("security/hidepassworddetails").toBool()) {
-        m_ui->passwordLabel->setText(shortPassword(m_currentEntry->resolveMultiplePlaceholders(m_currentEntry->password())));
+        m_ui->passwordLabel->setText(
+            shortPassword(m_currentEntry->resolveMultiplePlaceholders(m_currentEntry->password())));
         m_ui->passwordLabel->setToolTip(m_currentEntry->resolveMultiplePlaceholders(m_currentEntry->password()));
     } else {
         m_ui->passwordLabel->setText("****");
@@ -136,14 +139,16 @@ void DetailsWidget::getSelectedEntry(Entry* selectedEntry)
     }
 
     if (m_currentEntry->hasTotp()) {
-        m_ui->totpButton->show();
-        updateTotp();
-
         m_step = m_currentEntry->totpStep();
 
+        if (nullptr != m_timer) {
+            m_timer->stop();
+        }
         m_timer = new QTimer(this);
         connect(m_timer, SIGNAL(timeout()), this, SLOT(updateTotp()));
+        updateTotp();
         m_timer->start(m_step * 10);
+        m_ui->totpButton->show();
     }
 
     QString notes = m_currentEntry->notes();
@@ -188,7 +193,7 @@ void DetailsWidget::getSelectedEntry(Entry* selectedEntry)
     }
 }
 
-void DetailsWidget::getSelectedGroup(Group* selectedGroup) 
+void DetailsWidget::getSelectedGroup(Group* selectedGroup)
 {
     if (!selectedGroup) {
         hideDetails();
@@ -212,7 +217,6 @@ void DetailsWidget::getSelectedGroup(Group* selectedGroup)
 
     m_ui->tabWidget->setTabEnabled(GroupNotesTab, false);
 
-
     m_ui->totpButton->hide();
     m_ui->totpWidget->hide();
 
@@ -248,7 +252,7 @@ void DetailsWidget::getSelectedGroup(Group* selectedGroup)
         autotype = tr("Enabled");
     }
     m_ui->autotypeLabel->setText(autotype);
-    
+
     TimeInfo groupTime = m_currentGroup->timeInfo();
     if (groupTime.expires()) {
         m_ui->groupExpirationLabel->setText(groupTime.expiryTime().toString(Qt::DefaultLocaleShortDate));
@@ -263,23 +267,23 @@ void DetailsWidget::getSelectedGroup(Group* selectedGroup)
 
 void DetailsWidget::updateTotp()
 {
-    if (m_locked) {
+    if (!m_locked) {
+        QString totpCode = m_currentEntry->totp();
+        QString firstHalf = totpCode.left(totpCode.size() / 2);
+        QString secondHalf = totpCode.right(totpCode.size() / 2);
+        m_ui->totpLabel->setText(firstHalf + " " + secondHalf);
+    } else if (nullptr != m_timer) {
         m_timer->stop();
-        return;
     }
-    QString totpCode = m_currentEntry->totp();
-    QString firstHalf = totpCode.left(totpCode.size()/2);
-    QString secondHalf = totpCode.right(totpCode.size()/2);
-    m_ui->totpLabel->setText(firstHalf + " " + secondHalf);
 }
 
 void DetailsWidget::showTotp(bool visible)
-{   
-    if (visible){
+{
+    if (visible) {
         m_ui->totpWidget->show();
     } else {
         m_ui->totpWidget->hide();
-    }    
+    }
 }
 
 QString DetailsWidget::shortUrl(QString url)
@@ -326,7 +330,8 @@ void DetailsWidget::setDatabaseMode(DatabaseWidget::Mode mode)
     }
 }
 
-void DetailsWidget::updateTabIndex(int index) {
+void DetailsWidget::updateTabIndex(int index)
+{
     if (m_ui->stackedWidget->currentIndex() == GroupPreview) {
         m_selectedTabGroup = index;
     } else {
diff --git a/src/gui/DetailsWidget.h b/src/gui/DetailsWidget.h
index 5bc02600..780fe558 100644
--- a/src/gui/DetailsWidget.h
+++ b/src/gui/DetailsWidget.h
@@ -18,9 +18,8 @@
 #ifndef KEEPASSX_DETAILSWIDGET_H
 #define KEEPASSX_DETAILSWIDGET_H
 
-#include <QWidget>
-
 #include "gui/DatabaseWidget.h"
+#include <QWidget>
 
 namespace Ui {
     class DetailsWidget;
diff --git a/src/gui/DetailsWidget.ui b/src/gui/DetailsWidget.ui
index 8fbafe34..8cece9a2 100644
--- a/src/gui/DetailsWidget.ui
+++ b/src/gui/DetailsWidget.ui
@@ -105,7 +105,7 @@
      <item>
       <widget class="QToolButton" name="closeButton">
        <property name="toolTip">
-        <string>Generate TOTP Token</string>
+        <string>Close</string>
        </property>
        <property name="text">
         <string/>

From 2987895370bfe397c461707f99a3ad2d67946246 Mon Sep 17 00:00:00 2001
From: frostasm <frost.asm@gmail.com>
Date: Fri, 20 Oct 2017 15:20:44 +0300
Subject: [PATCH 088/118] Fix usage of LastAttachmentDir in entry attachments

---
 src/gui/entry/EditEntryWidget.cpp | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/src/gui/entry/EditEntryWidget.cpp b/src/gui/entry/EditEntryWidget.cpp
index 8457c5af..6ea2088a 100644
--- a/src/gui/entry/EditEntryWidget.cpp
+++ b/src/gui/entry/EditEntryWidget.cpp
@@ -727,7 +727,9 @@ void EditEntryWidget::insertAttachment()
         return;
     }
 
-    m_entryAttachments->set(QFileInfo(filename).fileName(), data);
+    const QFileInfo fInfo(filename);
+    config()->set("LastAttachmentDir", fInfo.absolutePath());
+    m_entryAttachments->set(fInfo.fileName(), data);
 }
 
 void EditEntryWidget::saveCurrentAttachment()
@@ -757,6 +759,7 @@ void EditEntryWidget::saveCurrentAttachment()
             showMessage(tr("Unable to save the attachment:\n").append(file.errorString()), MessageWidget::Error);
             return;
         }
+        config()->set("LastAttachmentDir", QFileInfo(savePath).absolutePath());
     }
 }
 

From f34b090b427e717610925e928bd0e2209c816e5f Mon Sep 17 00:00:00 2001
From: frostasm <frost.asm@gmail.com>
Date: Sun, 22 Oct 2017 21:15:25 +0300
Subject: [PATCH 089/118] Add support for working with multiple entry
 attachments at once

---
 src/core/EntryAttachments.cpp     |  30 ++++-
 src/core/EntryAttachments.h       |   3 +
 src/gui/FileDialog.cpp            |  72 +++++++++-
 src/gui/FileDialog.h              |   9 ++
 src/gui/entry/EditEntryWidget.cpp | 212 +++++++++++++++++++++---------
 src/gui/entry/EditEntryWidget.h   |  11 +-
 6 files changed, 265 insertions(+), 72 deletions(-)

diff --git a/src/core/EntryAttachments.cpp b/src/core/EntryAttachments.cpp
index d700ed44..8ff66277 100644
--- a/src/core/EntryAttachments.cpp
+++ b/src/core/EntryAttachments.cpp
@@ -17,6 +17,8 @@
 
 #include "EntryAttachments.h"
 
+#include <QStringList>
+
 EntryAttachments::EntryAttachments(QObject* parent)
     : QObject(parent)
 {
@@ -71,7 +73,8 @@ void EntryAttachments::set(const QString& key, const QByteArray& value)
 void EntryAttachments::remove(const QString& key)
 {
     if (!m_attachments.contains(key)) {
-        Q_ASSERT(false);
+        Q_ASSERT_X(false, "EntryAttachments::remove",
+                   qPrintable(QString("Can't find attachment for key %1").arg(key)));
         return;
     }
 
@@ -83,6 +86,31 @@ void EntryAttachments::remove(const QString& key)
     emit modified();
 }
 
+void EntryAttachments::remove(const QStringList &keys)
+{
+    if (keys.isEmpty()) {
+        return;
+    }
+
+    bool isModified = false;
+    for (const QString &key: keys) {
+        if (!m_attachments.contains(key)) {
+            Q_ASSERT_X(false, "EntryAttachments::remove",
+                       qPrintable(QString("Can't find attachment for key %1").arg(key)));
+            continue;
+        }
+
+        isModified = true;
+        emit aboutToBeRemoved(key);
+        m_attachments.remove(key);
+        emit removed(key);
+    }
+
+    if (isModified) {
+        emit modified();
+    }
+}
+
 void EntryAttachments::clear()
 {
     if (m_attachments.isEmpty()) {
diff --git a/src/core/EntryAttachments.h b/src/core/EntryAttachments.h
index 04c22cb3..8fa7c717 100644
--- a/src/core/EntryAttachments.h
+++ b/src/core/EntryAttachments.h
@@ -21,6 +21,8 @@
 #include <QMap>
 #include <QObject>
 
+class QStringList;
+
 class EntryAttachments : public QObject
 {
     Q_OBJECT
@@ -33,6 +35,7 @@ public:
     QByteArray value(const QString& key) const;
     void set(const QString& key, const QByteArray& value);
     void remove(const QString& key);
+    void remove(const QStringList& keys);
     void clear();
     void copyDataFrom(const EntryAttachments* other);
     bool operator==(const EntryAttachments& other) const;
diff --git a/src/gui/FileDialog.cpp b/src/gui/FileDialog.cpp
index e293db2b..cf792e16 100644
--- a/src/gui/FileDialog.cpp
+++ b/src/gui/FileDialog.cpp
@@ -27,7 +27,7 @@ QString FileDialog::getOpenFileName(QWidget* parent, const QString& caption, QSt
 {
     if (!m_nextFileName.isEmpty()) {
         QString result = m_nextFileName;
-        m_nextFileName = "";
+        m_nextFileName.clear();
         return result;
     }
     else {
@@ -51,13 +51,43 @@ QString FileDialog::getOpenFileName(QWidget* parent, const QString& caption, QSt
     }
 }
 
+QStringList FileDialog::getOpenFileNames(QWidget *parent, const QString &caption, QString dir,
+                                     const QString &filter, QString *selectedFilter,
+                                     QFileDialog::Options options)
+{
+    if (!m_nextFileNames.isEmpty()) {
+        QStringList results = m_nextFileNames;
+        m_nextFileNames.clear();
+        return results;
+    }
+    else {
+        if (dir.isEmpty()) {
+            dir = config()->get("LastDir").toString();
+        }
+
+        QStringList results = QFileDialog::getOpenFileNames(parent, caption, dir, filter,
+                                                           selectedFilter, options);
+
+        // on Mac OS X the focus is lost after closing the native dialog
+        if (parent) {
+            parent->activateWindow();
+        }
+
+        if (!results.isEmpty()) {
+            config()->set("LastDir", QFileInfo(results[0]).absolutePath());
+        }
+
+        return results;
+    }
+}
+
 QString FileDialog::getSaveFileName(QWidget* parent, const QString& caption, QString dir,
                                     const QString& filter, QString* selectedFilter,
                                     QFileDialog::Options options, const QString& defaultExtension)
 {
     if (!m_nextFileName.isEmpty()) {
         QString result = m_nextFileName;
-        m_nextFileName = "";
+        m_nextFileName.clear();
         return result;
     }
     else {
@@ -103,11 +133,49 @@ QString FileDialog::getSaveFileName(QWidget* parent, const QString& caption, QSt
     }
 }
 
+QString FileDialog::getExistingDirectory(QWidget *parent, const QString &caption, QString dir,
+                                         QFileDialog::Options options)
+{
+    if (!m_nextDirName.isEmpty()) {
+        QString result = m_nextDirName;
+        m_nextDirName.clear();
+        return result;
+    }
+    else {
+        if (dir.isEmpty()) {
+            dir = config()->get("LastDir").toString();
+        }
+
+        dir = QFileDialog::getExistingDirectory(parent, caption, dir, options);
+
+        // on Mac OS X the focus is lost after closing the native dialog
+        if (parent) {
+            parent->activateWindow();
+        }
+
+        if (!dir.isEmpty()) {
+            config()->set("LastDir", QFileInfo(dir).absolutePath());
+        }
+
+        return dir;
+    }
+}
+
 void FileDialog::setNextFileName(const QString& fileName)
 {
     m_nextFileName = fileName;
 }
 
+void FileDialog::setNextFileNames(const QStringList &fileNames)
+{
+    m_nextFileNames = fileNames;
+}
+
+void FileDialog::setNextDirName(const QString &dirName)
+{
+    m_nextDirName = dirName;
+}
+
 FileDialog::FileDialog()
 {
 }
diff --git a/src/gui/FileDialog.h b/src/gui/FileDialog.h
index 9f8fbb54..92b58a58 100644
--- a/src/gui/FileDialog.h
+++ b/src/gui/FileDialog.h
@@ -26,22 +26,31 @@ public:
     QString getOpenFileName(QWidget* parent = nullptr, const QString& caption = QString(),
                             QString dir = QString(), const QString& filter = QString(),
                             QString* selectedFilter = nullptr, QFileDialog::Options options = 0);
+    QStringList getOpenFileNames(QWidget* parent = nullptr, const QString& caption = QString(),
+                                 QString dir = QString(), const QString& filter = QString(),
+                                 QString* selectedFilter = nullptr, QFileDialog::Options options = 0);
     QString getSaveFileName(QWidget* parent = nullptr, const QString& caption = QString(),
                             QString dir = QString(), const QString& filter = QString(),
                             QString* selectedFilter = nullptr, QFileDialog::Options options = 0,
                             const QString& defaultExtension = QString());
+    QString getExistingDirectory(QWidget* parent = nullptr, const QString& caption = QString(),
+                                 QString dir = QString(), QFileDialog::Options options = QFileDialog::ShowDirsOnly);
 
     /**
      * Sets the result of the next get* method call.
      * Use only for testing.
      */
     void setNextFileName(const QString& fileName);
+    void setNextFileNames(const QStringList& fileNames);
+    void setNextDirName(const QString& dirName);
 
     static FileDialog* instance();
 
 private:
     FileDialog();
     QString m_nextFileName;
+    QStringList m_nextFileNames;
+    QString m_nextDirName;
 
     static FileDialog* m_instance;
 
diff --git a/src/gui/entry/EditEntryWidget.cpp b/src/gui/entry/EditEntryWidget.cpp
index 6ea2088a..0dc555a0 100644
--- a/src/gui/entry/EditEntryWidget.cpp
+++ b/src/gui/entry/EditEntryWidget.cpp
@@ -122,13 +122,14 @@ void EditEntryWidget::setupAdvanced()
 
     m_attachmentsModel->setEntryAttachments(m_entryAttachments);
     m_advancedUi->attachmentsView->setModel(m_attachmentsModel);
+    m_advancedUi->attachmentsView->setSelectionMode(QAbstractItemView::ExtendedSelection);
     connect(m_advancedUi->attachmentsView->selectionModel(), SIGNAL(currentChanged(QModelIndex,QModelIndex)),
             SLOT(updateAttachmentButtonsEnabled(QModelIndex)));
     connect(m_advancedUi->attachmentsView, SIGNAL(doubleClicked(QModelIndex)), SLOT(openAttachment(QModelIndex)));
-    connect(m_advancedUi->saveAttachmentButton, SIGNAL(clicked()), SLOT(saveCurrentAttachment()));
-    connect(m_advancedUi->openAttachmentButton, SIGNAL(clicked()), SLOT(openCurrentAttachment()));
-    connect(m_advancedUi->addAttachmentButton, SIGNAL(clicked()), SLOT(insertAttachment()));
-    connect(m_advancedUi->removeAttachmentButton, SIGNAL(clicked()), SLOT(removeCurrentAttachment()));
+    connect(m_advancedUi->saveAttachmentButton, SIGNAL(clicked()), SLOT(saveSelectedAttachments()));
+    connect(m_advancedUi->openAttachmentButton, SIGNAL(clicked()), SLOT(openSelectedAttachments()));
+    connect(m_advancedUi->addAttachmentButton, SIGNAL(clicked()), SLOT(insertAttachments()));
+    connect(m_advancedUi->removeAttachmentButton, SIGNAL(clicked()), SLOT(removeSelectedAttachments()));
 
     m_attributesModel->setEntryAttributes(m_entryAttributes);
     m_advancedUi->attributesView->setModel(m_attributesModel);
@@ -672,6 +673,32 @@ void EditEntryWidget::displayAttribute(QModelIndex index, bool showProtected)
     m_advancedUi->protectAttributeButton->blockSignals(false);
 }
 
+bool EditEntryWidget::openAttachment(const QModelIndex &index, QString *errorMessage)
+{
+    const QString filename = m_attachmentsModel->keyByIndex(index);
+    const QByteArray attachmentData = m_entryAttachments->value(filename);
+
+    // tmp file will be removed once the database (or the application) has been closed
+    const QString tmpFileTemplate = QDir::temp().absoluteFilePath(QString("XXXXXX.").append(filename));
+    QTemporaryFile* tmpFile = new QTemporaryFile(tmpFileTemplate, this);
+
+    const bool saveOk = tmpFile->open()
+                        && tmpFile->write(attachmentData) == attachmentData.size()
+                        && tmpFile->flush();
+    if (!saveOk) {
+        if (errorMessage) {
+            *errorMessage = tr("Unable to save the attachment:\n").append(tmpFile->errorString());
+        }
+        delete tmpFile;
+        return false;
+    }
+
+    tmpFile->close();
+    QDesktopServices::openUrl(QUrl::fromLocalFile(tmpFile->fileName()));
+
+    return true;
+}
+
 void EditEntryWidget::protectCurrentAttribute(bool state)
 {
     QModelIndex index = m_advancedUi->attributesView->currentIndex();
@@ -702,7 +729,7 @@ void EditEntryWidget::revealCurrentAttribute()
     }
 }
 
-void EditEntryWidget::insertAttachment()
+void EditEntryWidget::insertAttachments()
 {
     Q_ASSERT(!m_history);
 
@@ -710,56 +737,115 @@ void EditEntryWidget::insertAttachment()
     if (defaultDir.isEmpty() || !QDir(defaultDir).exists()) {
         defaultDir = QStandardPaths::standardLocations(QStandardPaths::DocumentsLocation).value(0);
     }
-    QString filename = fileDialog()->getOpenFileName(this, tr("Select file"), defaultDir);
-    if (filename.isEmpty() || !QFile::exists(filename)) {
+
+    const QStringList filenames = fileDialog()->getOpenFileNames(this, tr("Select files"), defaultDir);
+    if (filenames.isEmpty()) {
         return;
     }
 
-    QFile file(filename);
-    if (!file.open(QIODevice::ReadOnly)) {
-        showMessage(tr("Unable to open file").append(":\n").append(file.errorString()), MessageWidget::Error);
-        return;
+    config()->set("LastAttachmentDir", QFileInfo(filenames.first()).absolutePath());
+
+    QStringList errors;
+    for (const QString &filename: filenames) {
+        const QFileInfo fInfo(filename);
+        QFile file(filename);
+        QByteArray data;
+        const bool readOk = file.open(QIODevice::ReadOnly) && Tools::readAllFromDevice(&file, data);
+        if (!readOk) {
+            errors.append(QString("%1 - %2").arg(fInfo.fileName(), file.errorString()));
+            continue;
+        }
+
+        m_entryAttachments->set(fInfo.fileName(), data);
     }
 
-    QByteArray data;
-    if (!Tools::readAllFromDevice(&file, data)) {
-        showMessage(tr("Unable to open file").append(":\n").append(file.errorString()), MessageWidget::Error);
-        return;
+    if (!errors.isEmpty()) {
+        showMessage(tr("Unable to open files:\n%1").arg(errors.join('\n')), MessageWidget::Error);
     }
-
-    const QFileInfo fInfo(filename);
-    config()->set("LastAttachmentDir", fInfo.absolutePath());
-    m_entryAttachments->set(fInfo.fileName(), data);
 }
 
-void EditEntryWidget::saveCurrentAttachment()
+void EditEntryWidget::saveSelectedAttachment()
 {
-    QModelIndex index = m_advancedUi->attachmentsView->currentIndex();
+    const QModelIndex index = m_advancedUi->attachmentsView->currentIndex();
     if (!index.isValid()) {
         return;
     }
 
-    QString filename = m_attachmentsModel->keyByIndex(index);
+    const QString filename = m_attachmentsModel->keyByIndex(index);
     QString defaultDirName = config()->get("LastAttachmentDir").toString();
     if (defaultDirName.isEmpty() || !QDir(defaultDirName).exists()) {
         defaultDirName = QStandardPaths::writableLocation(QStandardPaths::DocumentsLocation);
     }
-    QDir dir(defaultDirName);
-    QString savePath = fileDialog()->getSaveFileName(this, tr("Save attachment"),
-                                                       dir.filePath(filename));
+
+    const QString savePath = fileDialog()->getSaveFileName(this, tr("Save attachment"),
+                                                           QDir(defaultDirName).filePath(filename));
     if (!savePath.isEmpty()) {
-        QByteArray attachmentData = m_entryAttachments->value(filename);
+        config()->set("LastAttachmentDir", QFileInfo(savePath).absolutePath());
 
         QFile file(savePath);
-        if (!file.open(QIODevice::WriteOnly)) {
+        const QByteArray attachmentData = m_entryAttachments->value(filename);
+        const bool saveOk = file.open(QIODevice::WriteOnly) && file.write(attachmentData) == attachmentData.size();
+        if (!saveOk) {
             showMessage(tr("Unable to save the attachment:\n").append(file.errorString()), MessageWidget::Error);
+        }
+    }
+}
+
+void EditEntryWidget::saveSelectedAttachments()
+{
+    const QModelIndexList indexes = m_advancedUi->attachmentsView->selectionModel()->selectedIndexes();
+    if (indexes.isEmpty()) {
+        return;
+    } else if (indexes.count() == 1) {
+        saveSelectedAttachment();
+        return;
+    }
+
+    QString defaultDirName = config()->get("LastAttachmentDir").toString();
+    if (defaultDirName.isEmpty() || !QDir(defaultDirName).exists()) {
+        defaultDirName = QStandardPaths::writableLocation(QStandardPaths::DocumentsLocation);
+    }
+
+    const QString savePath = fileDialog()->getExistingDirectory(this, tr("Save attachments"), defaultDirName);
+    if (savePath.isEmpty()) {
+        return;
+    }
+
+    QDir saveDir(savePath);
+    if (!saveDir.exists()) {
+        if (saveDir.mkpath(saveDir.absolutePath())) {
+            showMessage(tr("Unable to create the directory:\n").append(saveDir.absolutePath()), MessageWidget::Error);
             return;
         }
-        if (file.write(attachmentData) != attachmentData.size()) {
-            showMessage(tr("Unable to save the attachment:\n").append(file.errorString()), MessageWidget::Error);
-            return;
+    }
+    config()->set("LastAttachmentDir", QFileInfo(saveDir.absolutePath()).absolutePath());
+
+    QStringList errors;
+    for (const QModelIndex &index: indexes) {
+        const QString filename = m_attachmentsModel->keyByIndex(index);
+        const QString attachmentPath = saveDir.absoluteFilePath(filename);
+
+        if (QFileInfo::exists(attachmentPath)) {
+            const QString question(tr("Are you sure you want to overwrite existing file \"%1\" with the attachment?"));
+            auto ans = MessageBox::question(this, tr("Confirm overwrite"), question.arg(filename),
+                                            QMessageBox::Yes | QMessageBox::No | QMessageBox::Cancel);
+            if (ans == QMessageBox::No) {
+                continue;
+            } else if (ans == QMessageBox::Cancel) {
+                return;
+            }
         }
-        config()->set("LastAttachmentDir", QFileInfo(savePath).absolutePath());
+
+        QFile file(attachmentPath);
+        const QByteArray attachmentData = m_entryAttachments->value(filename);
+        const bool saveOk = file.open(QIODevice::WriteOnly) && file.write(attachmentData) == attachmentData.size();
+        if (!saveOk) {
+            errors.append(QString("%1 - %2").arg(filename, file.errorString()));
+        }
+    }
+
+    if (!errors.isEmpty()) {
+        showMessage(tr("Unable to save the attachments:\n").append(errors.join('\n')), MessageWidget::Error);
     }
 }
 
@@ -770,55 +856,51 @@ void EditEntryWidget::openAttachment(const QModelIndex& index)
         return;
     }
 
-    QString filename = m_attachmentsModel->keyByIndex(index);
-    QByteArray attachmentData = m_entryAttachments->value(filename);
-
-    // tmp file will be removed once the database (or the application) has been closed
-    QString tmpFileTemplate = QDir::temp().absoluteFilePath(QString("XXXXXX.").append(filename));
-    QTemporaryFile* file = new QTemporaryFile(tmpFileTemplate, this);
-
-    if (!file->open()) {
-        showMessage(tr("Unable to save the attachment:\n").append(file->errorString()), MessageWidget::Error);
-        return;
+    QString errorMessage;
+    if (!openAttachment(index, &errorMessage)) {
+        showMessage(errorMessage, MessageWidget::Error);
     }
-
-    if (file->write(attachmentData) != attachmentData.size()) {
-        showMessage(tr("Unable to save the attachment:\n").append(file->errorString()), MessageWidget::Error);
-        return;
-    }
-
-    if (!file->flush()) {
-        showMessage(tr("Unable to save the attachment:\n").append(file->errorString()), MessageWidget::Error);
-        return;
-    }
-
-    file->close();
-
-    QDesktopServices::openUrl(QUrl::fromLocalFile(file->fileName()));
 }
 
-void EditEntryWidget::openCurrentAttachment()
+void EditEntryWidget::openSelectedAttachments()
 {
-    QModelIndex index = m_advancedUi->attachmentsView->currentIndex();
+    const QModelIndexList indexes = m_advancedUi->attachmentsView->selectionModel()->selectedIndexes();
+    if (indexes.isEmpty()) {
+        return;
+    }
 
-    openAttachment(index);
+    QStringList errors;
+    for (const QModelIndex &index: indexes) {
+        QString errorMessage;
+        if (!openAttachment(index, &errorMessage)) {
+            const QString filename = m_attachmentsModel->keyByIndex(index);
+            errors.append(QString("%1 - %2").arg(filename, errorMessage));
+        };
+    }
+
+    if (!errors.isEmpty()) {
+        showMessage(tr("Unable to open the attachments:\n").append(errors.join('\n')), MessageWidget::Error);
+    }
 }
 
-void EditEntryWidget::removeCurrentAttachment()
+void EditEntryWidget::removeSelectedAttachments()
 {
     Q_ASSERT(!m_history);
 
-    QModelIndex index = m_advancedUi->attachmentsView->currentIndex();
-    if (!index.isValid()) {
+    const QModelIndexList indexes = m_advancedUi->attachmentsView->selectionModel()->selectedIndexes();
+    if (indexes.isEmpty()) {
         return;
     }
 
+    const QString question = tr("Are you sure you want to remove %n attachments?", "", indexes.count());
     QMessageBox::StandardButton ans = MessageBox::question(this, tr("Confirm Remove"),
-                                                           tr("Are you sure you want to remove this attachment?"),
-                                                           QMessageBox::Yes | QMessageBox::No);
+                                                           question, QMessageBox::Yes | QMessageBox::No);
     if (ans == QMessageBox::Yes) {
-        QString key = m_attachmentsModel->keyByIndex(index);
-        m_entryAttachments->remove(key);
+        QStringList keys;
+        for (const QModelIndex &index: indexes) {
+            keys.append(m_attachmentsModel->keyByIndex(index));
+        }
+        m_entryAttachments->remove(keys);
     }
 }
 
diff --git a/src/gui/entry/EditEntryWidget.h b/src/gui/entry/EditEntryWidget.h
index 74da2c46..1f1b5552 100644
--- a/src/gui/entry/EditEntryWidget.h
+++ b/src/gui/entry/EditEntryWidget.h
@@ -80,11 +80,12 @@ private slots:
     void updateCurrentAttribute();
     void protectCurrentAttribute(bool state);
     void revealCurrentAttribute();
-    void insertAttachment();
-    void saveCurrentAttachment();
+    void insertAttachments();
+    void saveSelectedAttachment();
+    void saveSelectedAttachments();
     void openAttachment(const QModelIndex& index);
-    void openCurrentAttachment();
-    void removeCurrentAttachment();
+    void openSelectedAttachments();
+    void removeSelectedAttachments();
     void updateAutoTypeEnabled();
     void insertAutoTypeAssoc();
     void removeAutoTypeAssoc();
@@ -117,6 +118,8 @@ private:
 
     void displayAttribute(QModelIndex index, bool showProtected);
 
+    bool openAttachment(const QModelIndex& index, QString *errorMessage);
+
     Entry* m_entry;
     Database* m_database;
 

From c9895dd5c71261430e77b77ad9e86ba6255e35ad Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Adolfo=20E=2E=20Garc=C3=ADa?= <adolfo.garcia.cr@gmail.com>
Date: Tue, 7 Nov 2017 00:08:01 -0600
Subject: [PATCH 090/118] Improve Base32.cpp

---
 src/core/Base32.cpp | 23 ++++++++++++++---------
 1 file changed, 14 insertions(+), 9 deletions(-)

diff --git a/src/core/Base32.cpp b/src/core/Base32.cpp
index 13228a37..78448ffb 100644
--- a/src/core/Base32.cpp
+++ b/src/core/Base32.cpp
@@ -52,8 +52,9 @@ QVariant Base32::decode(const QByteArray& encodedData)
 
     int nPads = 0;
     for (int i = -1; i > -7; --i) {
-        if ('=' == encodedData[encodedData.size() + i])
+        if ('=' == encodedData[encodedData.size() + i]) {
             ++nPads;
+        }
     }
 
     int specialOffset;
@@ -95,11 +96,12 @@ QVariant Base32::decode(const QByteArray& encodedData)
         int nQuantumBytes = 5;
 
         for (int n = 0; n < 8; ++n) {
-            quint8 ch = static_cast<quint8>(encodedData[i++]);
+            auto ch = static_cast<quint8>(encodedData[i++]);
             if ((ASCII_A <= ch && ch <= ASCII_Z) || (ASCII_a <= ch && ch <= ASCII_z)) {
                 ch -= ASCII_A;
-                if (ch >= ALPH_POS_2)
+                if (ch >= ALPH_POS_2) {
                     ch -= ASCII_a - ASCII_A;
+                }
             } else {
                 if (ASCII_2 <= ch && ch <= ASCII_7) {
                     ch -= ASCII_2;
@@ -126,8 +128,8 @@ QVariant Base32::decode(const QByteArray& encodedData)
         const int offset = (nQuantumBytes - 1) * 8;
         quint64 mask = quint64(0xFF) << offset;
         for (int n = offset; n >= 0 && o < nBytes; n -= 8) {
-                data[o++] = static_cast<char>((quantum & mask) >> n);
-                mask >>= 8;
+            data[o++] = static_cast<char>((quantum & mask) >> n);
+            mask >>= 8;
         }
     }
 
@@ -147,7 +149,7 @@ QByteArray Base32::encode(const QByteArray& data)
     const int rBits = nBits % 40; // in {0, 8, 16, 24, 32}
     const int nQuanta = nBits / 40 + (rBits > 0 ? 1 : 0);
     const int nBytes = nQuanta * 8;
-    QByteArray encodedData(nQuanta * 8, Qt::Uninitialized);
+    QByteArray encodedData(nBytes, Qt::Uninitialized);
 
     int i = 0;
     int o = 0;
@@ -166,6 +168,7 @@ QByteArray Base32::encode(const QByteArray& data)
         int index;
         for (n = 35; n >= 0; n -= 5) {
             index = (quantum & mask) >> n;
+            Q_ASSERT(0 <= index && index <= 31);
             encodedData[o++] = alphabet[index];
             mask >>= 5;
         }
@@ -173,10 +176,11 @@ QByteArray Base32::encode(const QByteArray& data)
 
     // < 40-bits of input at final input group
     if (i < data.size()) {
-        Q_ASSERT(rBits > 0);
+        Q_ASSERT(8 <= rBits && rBits <= 32);
         quantum = 0;
-        for (n = rBits - 8; n >= 0; n -= 8)
+        for (n = rBits - 8; n >= 0; n -= 8) {
             quantum |= static_cast<quint64>(data[i++]) << n;
+        }
 
         switch (rBits) {
         case 8: // expand to 10 bits
@@ -195,7 +199,7 @@ QByteArray Base32::encode(const QByteArray& data)
             n = 20;
             break;
         default: // expand to 35 bits
-            Q_ASSERT(rBits == 32);
+            Q_ASSERT(32 == rBits);
             quantum <<= 3;
             mask = MASK_35BIT;
             n = 30;
@@ -203,6 +207,7 @@ QByteArray Base32::encode(const QByteArray& data)
 
         while (n >= 0) {
             int index = (quantum & mask) >> n;
+            Q_ASSERT(0 <= index && index <= 31);
             encodedData[o++] = alphabet[index];
             mask >>= 5;
             n -= 5;

From cc6be754f724fe6efdc6099da785100c3c825cd9 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Adolfo=20E=2E=20Garc=C3=ADa?= <adolfo.garcia.cr@gmail.com>
Date: Tue, 7 Nov 2017 00:10:38 -0600
Subject: [PATCH 091/118] Remove deprecated Optional.h

---
 src/core/Optional.h | 93 ---------------------------------------------
 1 file changed, 93 deletions(-)
 delete mode 100644 src/core/Optional.h

diff --git a/src/core/Optional.h b/src/core/Optional.h
deleted file mode 100644
index fb800198..00000000
--- a/src/core/Optional.h
+++ /dev/null
@@ -1,93 +0,0 @@
-/*
- *  Copyright (C) 2017 KeePassXC Team <team@keepassxc.org>
- *
- *  This program is free software: you can redistribute it and/or modify
- *  it under the terms of the GNU General Public License as published by
- *  the Free Software Foundation, either version 2 or (at your option)
- *  version 3 of the License.
- *
- *  This program is distributed in the hope that it will be useful,
- *  but WITHOUT ANY WARRANTY; without even the implied warranty of
- *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- *  GNU General Public License for more details.
- *
- *  You should have received a copy of the GNU General Public License
- *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
- */
-
-#ifndef OPTIONAL_H
-#define OPTIONAL_H
-
-/*
- * This utility class is for providing basic support for an option type.
- * It can be replaced by std::optional (C++17) or
- * std::experimental::optional (C++11) when they become fully supported
- * by all the compilers.
- */
-
-template <typename T>
-class Optional
-{
-public:
-   
-    // None
-    Optional() :
-        m_hasValue(false),
-        m_value()
-    { };   
- 
-    // Some T
-    Optional(const T& value) :
-        m_hasValue(true),
-        m_value(value)
-    { };
-
-    // Copy
-    Optional(const Optional& other) :
-        m_hasValue(other.m_hasValue),
-        m_value(other.m_value)
-    { };
-
-    const Optional& operator=(const Optional& other)
-    {
-        m_hasValue = other.m_hasValue;
-        m_value = other.m_value;
-        return *this;
-    }
-
-    bool operator==(const Optional& other) const
-    {
-        if(m_hasValue)
-            return other.m_hasValue && m_value == other.m_value;
-        else
-            return !other.m_hasValue;
-    }
-
-    bool operator!=(const Optional& other) const
-    {
-        return !(*this == other);
-    }
-
-    bool hasValue() const
-    {
-        return m_hasValue;
-    }
-
-    T valueOr(const T& other) const
-    {
-        return m_hasValue ? m_value : other;
-    }
-    
-    Optional static makeOptional(const T& value)
-    {
-        return Optional(value);
-    }
-
-
-private:
-
-    bool m_hasValue;
-    T m_value;
-};
-
-#endif // OPTIONAL_H

From a81a5fa31bb50b00b7091086013952fb0332fca1 Mon Sep 17 00:00:00 2001
From: Toni Spets <toni.spets@iki.fi>
Date: Sun, 29 Oct 2017 17:07:01 +0200
Subject: [PATCH 092/118] SymmetricCipher: Support CTR mode

Includes AES-256-CTR non-stream tests
---
 src/crypto/SymmetricCipher.h         |  1 +
 src/crypto/SymmetricCipherGcrypt.cpp | 11 +++++++-
 tests/TestSymmetricCipher.cpp        | 40 ++++++++++++++++++++++++++++
 tests/TestSymmetricCipher.h          |  2 ++
 4 files changed, 53 insertions(+), 1 deletion(-)

diff --git a/src/crypto/SymmetricCipher.h b/src/crypto/SymmetricCipher.h
index b85c58b7..4f1d50c1 100644
--- a/src/crypto/SymmetricCipher.h
+++ b/src/crypto/SymmetricCipher.h
@@ -38,6 +38,7 @@ public:
     enum Mode
     {
         Cbc,
+        Ctr,
         Ecb,
         Stream
     };
diff --git a/src/crypto/SymmetricCipherGcrypt.cpp b/src/crypto/SymmetricCipherGcrypt.cpp
index e600a7ed..c88dbd8c 100644
--- a/src/crypto/SymmetricCipherGcrypt.cpp
+++ b/src/crypto/SymmetricCipherGcrypt.cpp
@@ -62,6 +62,9 @@ int SymmetricCipherGcrypt::gcryptMode(SymmetricCipher::Mode mode)
     case SymmetricCipher::Cbc:
         return GCRY_CIPHER_MODE_CBC;
 
+    case SymmetricCipher::Ctr:
+        return GCRY_CIPHER_MODE_CTR;
+
     case SymmetricCipher::Stream:
         return GCRY_CIPHER_MODE_STREAM;
 
@@ -119,7 +122,13 @@ bool SymmetricCipherGcrypt::setKey(const QByteArray& key)
 bool SymmetricCipherGcrypt::setIv(const QByteArray& iv)
 {
     m_iv = iv;
-    gcry_error_t error = gcry_cipher_setiv(m_ctx, m_iv.constData(), m_iv.size());
+    gcry_error_t error;
+
+    if (m_mode == GCRY_CIPHER_MODE_CTR) {
+        error = gcry_cipher_setctr(m_ctx, m_iv.constData(), m_iv.size());
+    } else {
+        error = gcry_cipher_setiv(m_ctx, m_iv.constData(), m_iv.size());
+    }
 
     if (error != 0) {
         setErrorString(error);
diff --git a/tests/TestSymmetricCipher.cpp b/tests/TestSymmetricCipher.cpp
index 4f78693d..74f720a7 100644
--- a/tests/TestSymmetricCipher.cpp
+++ b/tests/TestSymmetricCipher.cpp
@@ -124,6 +124,46 @@ void TestSymmetricCipher::testAes256CbcDecryption()
              plainText);
 }
 
+void TestSymmetricCipher::testAes256CtrEncryption()
+{
+    // http://csrc.nist.gov/publications/nistpubs/800-38a/sp800-38a.pdf
+
+    QByteArray key = QByteArray::fromHex("603deb1015ca71be2b73aef0857d77811f352c073b6108d72d9810a30914dff4");
+    QByteArray ctr = QByteArray::fromHex("f0f1f2f3f4f5f6f7f8f9fafbfcfdfeff");
+    QByteArray plainText = QByteArray::fromHex("6bc1bee22e409f96e93d7e117393172a");
+    plainText.append(QByteArray::fromHex("ae2d8a571e03ac9c9eb76fac45af8e51"));
+    QByteArray cipherText = QByteArray::fromHex("601ec313775789a5b7a7f504bbf3d228");
+    cipherText.append(QByteArray::fromHex("f443e3ca4d62b59aca84e990cacaf5c5"));
+    bool ok;
+
+    SymmetricCipher cipher(SymmetricCipher::Aes256, SymmetricCipher::Ctr, SymmetricCipher::Encrypt);
+    QVERIFY(cipher.init(key, ctr));
+    QCOMPARE(cipher.blockSize(), 16);
+
+    QCOMPARE(cipher.process(plainText, &ok),
+             cipherText);
+    QVERIFY(ok);
+}
+
+void TestSymmetricCipher::testAes256CtrDecryption()
+{
+    QByteArray key = QByteArray::fromHex("603deb1015ca71be2b73aef0857d77811f352c073b6108d72d9810a30914dff4");
+    QByteArray ctr = QByteArray::fromHex("f0f1f2f3f4f5f6f7f8f9fafbfcfdfeff");
+    QByteArray cipherText = QByteArray::fromHex("601ec313775789a5b7a7f504bbf3d228");
+    cipherText.append(QByteArray::fromHex("f443e3ca4d62b59aca84e990cacaf5c5"));
+    QByteArray plainText = QByteArray::fromHex("6bc1bee22e409f96e93d7e117393172a");
+    plainText.append(QByteArray::fromHex("ae2d8a571e03ac9c9eb76fac45af8e51"));
+    bool ok;
+
+    SymmetricCipher cipher(SymmetricCipher::Aes256, SymmetricCipher::Ctr, SymmetricCipher::Decrypt);
+    QVERIFY(cipher.init(key, ctr));
+    QCOMPARE(cipher.blockSize(), 16);
+
+    QCOMPARE(cipher.process(cipherText, &ok),
+             plainText);
+    QVERIFY(ok);
+}
+
 void TestSymmetricCipher::testTwofish256CbcEncryption()
 {
     // NIST MCT Known-Answer Tests (cbc_e_m.txt)
diff --git a/tests/TestSymmetricCipher.h b/tests/TestSymmetricCipher.h
index 00998950..cad13841 100644
--- a/tests/TestSymmetricCipher.h
+++ b/tests/TestSymmetricCipher.h
@@ -29,6 +29,8 @@ private slots:
     void initTestCase();
     void testAes256CbcEncryption();
     void testAes256CbcDecryption();
+    void testAes256CtrEncryption();
+    void testAes256CtrDecryption();
     void testTwofish256CbcEncryption();
     void testTwofish256CbcDecryption();
     void testSalsa20();

From 248ae9d4ba40975558c928ae0d28fdd78c16d26d Mon Sep 17 00:00:00 2001
From: Toni Spets <toni.spets@iki.fi>
Date: Sun, 29 Oct 2017 17:07:56 +0200
Subject: [PATCH 093/118] SymmetricCipher: Add keySize(), don't rely on state
 for sizes

This additionally makes keySize() and blockSize() work before
setting the key and IV. Required for SSH agent decryption.
---
 src/crypto/SymmetricCipher.cpp       |  5 +++++
 src/crypto/SymmetricCipher.h         |  1 +
 src/crypto/SymmetricCipherBackend.h  |  1 +
 src/crypto/SymmetricCipherGcrypt.cpp | 30 ++++++++++++++++++----------
 src/crypto/SymmetricCipherGcrypt.h   |  2 +-
 5 files changed, 28 insertions(+), 11 deletions(-)

diff --git a/src/crypto/SymmetricCipher.cpp b/src/crypto/SymmetricCipher.cpp
index 98d48196..016103b2 100644
--- a/src/crypto/SymmetricCipher.cpp
+++ b/src/crypto/SymmetricCipher.cpp
@@ -74,6 +74,11 @@ bool SymmetricCipher::reset()
     return m_backend->reset();
 }
 
+int SymmetricCipher::keySize() const
+{
+    return m_backend->keySize();
+}
+
 int SymmetricCipher::blockSize() const
 {
     return m_backend->blockSize();
diff --git a/src/crypto/SymmetricCipher.h b/src/crypto/SymmetricCipher.h
index 4f1d50c1..81e13f38 100644
--- a/src/crypto/SymmetricCipher.h
+++ b/src/crypto/SymmetricCipher.h
@@ -70,6 +70,7 @@ public:
     }
 
     bool reset();
+    int keySize() const;
     int blockSize() const;
     QString errorString() const;
 
diff --git a/src/crypto/SymmetricCipherBackend.h b/src/crypto/SymmetricCipherBackend.h
index 78ec60c6..dd493d2d 100644
--- a/src/crypto/SymmetricCipherBackend.h
+++ b/src/crypto/SymmetricCipherBackend.h
@@ -33,6 +33,7 @@ public:
     Q_REQUIRED_RESULT virtual bool processInPlace(QByteArray& data, quint64 rounds) = 0;
 
     virtual bool reset() = 0;
+    virtual int keySize() const = 0;
     virtual int blockSize() const = 0;
 
     virtual QString errorString() const = 0;
diff --git a/src/crypto/SymmetricCipherGcrypt.cpp b/src/crypto/SymmetricCipherGcrypt.cpp
index c88dbd8c..ed031c00 100644
--- a/src/crypto/SymmetricCipherGcrypt.cpp
+++ b/src/crypto/SymmetricCipherGcrypt.cpp
@@ -26,7 +26,6 @@ SymmetricCipherGcrypt::SymmetricCipherGcrypt(SymmetricCipher::Algorithm algo, Sy
     , m_algo(gcryptAlgo(algo))
     , m_mode(gcryptMode(mode))
     , m_direction(direction)
-    , m_blockSize(-1)
 {
 }
 
@@ -95,14 +94,6 @@ bool SymmetricCipherGcrypt::init()
         return false;
     }
 
-    size_t blockSizeT;
-    error = gcry_cipher_algo_info(m_algo, GCRYCTL_GET_BLKLEN, nullptr, &blockSizeT);
-    if (error != 0) {
-        setErrorString(error);
-        return false;
-    }
-
-    m_blockSize = blockSizeT;
     return true;
 }
 
@@ -237,9 +228,28 @@ bool SymmetricCipherGcrypt::reset()
     return true;
 }
 
+int SymmetricCipherGcrypt::keySize() const
+{
+    gcry_error_t error;
+    size_t keySizeT;
+
+    error = gcry_cipher_algo_info(m_algo, GCRYCTL_GET_KEYLEN, nullptr, &keySizeT);
+    if (error != 0)
+        return -1;
+
+    return keySizeT;
+}
+
 int SymmetricCipherGcrypt::blockSize() const
 {
-    return m_blockSize;
+    gcry_error_t error;
+    size_t blockSizeT;
+
+    error = gcry_cipher_algo_info(m_algo, GCRYCTL_GET_BLKLEN, nullptr, &blockSizeT);
+    if (error != 0)
+        return -1;
+
+    return blockSizeT;
 }
 
 QString SymmetricCipherGcrypt::errorString() const
diff --git a/src/crypto/SymmetricCipherGcrypt.h b/src/crypto/SymmetricCipherGcrypt.h
index d3ad8d15..108bc14e 100644
--- a/src/crypto/SymmetricCipherGcrypt.h
+++ b/src/crypto/SymmetricCipherGcrypt.h
@@ -39,6 +39,7 @@ public:
     Q_REQUIRED_RESULT bool processInPlace(QByteArray& data, quint64 rounds);
 
     bool reset();
+    int keySize() const;
     int blockSize() const;
 
     QString errorString() const;
@@ -54,7 +55,6 @@ private:
     const SymmetricCipher::Direction m_direction;
     QByteArray m_key;
     QByteArray m_iv;
-    int m_blockSize;
     QString m_errorString;
 };
 

From 4840c2c64f1d6616af887457a0ec5a423d889db0 Mon Sep 17 00:00:00 2001
From: Toni Spets <toni.spets@iki.fi>
Date: Sun, 29 Oct 2017 17:17:24 +0200
Subject: [PATCH 094/118] SSH agent support

---
 CMakeLists.txt                                |   1 +
 COPYING                                       |   1 +
 .../32x32/apps/utilities-terminal.png         | Bin 0 -> 958 bytes
 share/icons/svg/utilities-terminal.svgz       | Bin 0 -> 6689 bytes
 src/CMakeLists.txt                            |   7 +
 src/config-keepassx.h.cmake                   |   1 +
 src/gui/AboutDialog.cpp                       |   3 +
 src/gui/DatabaseWidget.cpp                    |  13 +
 src/gui/MainWindow.cpp                        |   9 +
 src/gui/entry/EditEntryWidget.cpp             | 268 +++++++
 src/gui/entry/EditEntryWidget.h               |  28 +
 src/gui/entry/EditEntryWidgetSSHAgent.ui      | 207 ++++++
 src/sshagent/AgentSettingsPage.cpp            |  58 ++
 src/sshagent/AgentSettingsPage.h              |  40 +
 src/sshagent/AgentSettingsWidget.cpp          |  37 +
 src/sshagent/AgentSettingsWidget.h            |  46 ++
 src/sshagent/AgentSettingsWidget.ui           |  53 ++
 src/sshagent/BinaryStream.cpp                 | 219 ++++++
 src/sshagent/BinaryStream.h                   |  68 ++
 src/sshagent/CMakeLists.txt                   |  15 +
 src/sshagent/KeeAgentSettings.cpp             | 278 +++++++
 src/sshagent/KeeAgentSettings.h               |  79 ++
 src/sshagent/OpenSSHKey.cpp                   | 486 ++++++++++++
 src/sshagent/OpenSSHKey.h                     |  73 ++
 src/sshagent/SSHAgent.cpp                     | 272 +++++++
 src/sshagent/SSHAgent.h                       |  73 ++
 src/sshagent/bcrypt_pbkdf.cpp                 | 172 +++++
 src/sshagent/blf.h                            |  98 +++
 src/sshagent/blowfish.c                       | 696 ++++++++++++++++++
 tests/CMakeLists.txt                          |   7 +-
 tests/TestOpenSSHKey.cpp                      | 124 ++++
 tests/TestOpenSSHKey.h                        |  35 +
 32 files changed, 3466 insertions(+), 1 deletion(-)
 create mode 100644 share/icons/application/32x32/apps/utilities-terminal.png
 create mode 100644 share/icons/svg/utilities-terminal.svgz
 create mode 100644 src/gui/entry/EditEntryWidgetSSHAgent.ui
 create mode 100644 src/sshagent/AgentSettingsPage.cpp
 create mode 100644 src/sshagent/AgentSettingsPage.h
 create mode 100644 src/sshagent/AgentSettingsWidget.cpp
 create mode 100644 src/sshagent/AgentSettingsWidget.h
 create mode 100644 src/sshagent/AgentSettingsWidget.ui
 create mode 100644 src/sshagent/BinaryStream.cpp
 create mode 100644 src/sshagent/BinaryStream.h
 create mode 100644 src/sshagent/CMakeLists.txt
 create mode 100644 src/sshagent/KeeAgentSettings.cpp
 create mode 100644 src/sshagent/KeeAgentSettings.h
 create mode 100644 src/sshagent/OpenSSHKey.cpp
 create mode 100644 src/sshagent/OpenSSHKey.h
 create mode 100644 src/sshagent/SSHAgent.cpp
 create mode 100644 src/sshagent/SSHAgent.h
 create mode 100644 src/sshagent/bcrypt_pbkdf.cpp
 create mode 100644 src/sshagent/blf.h
 create mode 100644 src/sshagent/blowfish.c
 create mode 100644 tests/TestOpenSSHKey.cpp
 create mode 100644 tests/TestOpenSSHKey.h

diff --git a/CMakeLists.txt b/CMakeLists.txt
index c5cc9e41..b86f0eee 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -43,6 +43,7 @@ option(WITH_APP_BUNDLE "Enable Application Bundle for macOS" ON)
 option(WITH_XC_AUTOTYPE "Include Auto-Type." ON)
 option(WITH_XC_HTTP "Include KeePassHTTP and Custom Icon Downloads." OFF)
 option(WITH_XC_YUBIKEY "Include YubiKey support." OFF)
+option(WITH_XC_SSHAGENT "Include SSH agent support." OFF)
 
 # Process ui files automatically from source files
 set(CMAKE_AUTOUIC ON)
diff --git a/COPYING b/COPYING
index a6bf0cf4..7aa9c033 100644
--- a/COPYING
+++ b/COPYING
@@ -175,6 +175,7 @@ Files: share/icons/application/*/actions/application-exit.png
        share/icons/application/*/actions/view-history.png
        share/icons/application/*/apps/internet-web-browser.png
        share/icons/application/*/apps/preferences-desktop-icons.png
+       share/icons/application/*/apps/utilities-terminal.png
        share/icons/application/*/categories/preferences-other.png
        share/icons/application/*/status/dialog-error.png
        share/icons/application/*/status/dialog-information.png
diff --git a/share/icons/application/32x32/apps/utilities-terminal.png b/share/icons/application/32x32/apps/utilities-terminal.png
new file mode 100644
index 0000000000000000000000000000000000000000..3e4d324c0c5f03b7d15fe758dfb0a652e3536c4b
GIT binary patch
literal 958
zcmV;v13~<WP)<h;3K|Lk000e1NJLTq001BW001Be1^@s6b9#F800004b3#c}2nYxW
zd<bNS00009a7bBm000Aa000Aa0e#hi%m4rY8FWQhbW?9;ba!ELWdL_~cP?peYja~^
zaAhuUa%Y?FJQ@H113O7XK~#9!#aBIV6G0H2JD&-%pg<Ne4I&i5LMGszf&eW-Q7DNb
z@*hZw5dHx06F^9i3MeU3x<Mhr6mf$?hbZF8mV&>1=VjlWSG$APM~p)<*3<0AdEcAa
zx%Ju+LXhJ)B+Zj>=y*&>_~2HADTxabQ>4xLPsFf}L`9;BsFM<xi^bx{WHNctbzM3v
z5{ZOrhgt0R`-G^1AOO$@SQ}`yT0iso{5>N24gs#jIY~aVzrT-#;z%(MVq04iX<`Us
zBGAudGBe-=Hw3^E^?IFFR#s^4dM^5sga{Xkd|>tkyxA9ui1|MaV+e9<Yb)erg@-TA
z-MB{6)90xlNWyS&lL!a~(V%T0>_fC_D*;wB=N!+RaGYoo9}*h)U|bEs*dwgO@U+ST
z_pola%fxxaj4ujkR-I}tGFsgCee!!gyxRLw(Q^TOl7*&)2!KC_ZRqv7ir6T;*!08L
zylW0BtgWt6E|=4hla8{}=}^1fqE5RFVh~zH#+p3?c#YIPe%{%k<>g0It5)g#hj+BQ
zTawZC$Pav7WcXO>1Q^432Gl}@LV-3m)+v=r(UbM3AP1?gHeM$xQHQno8VLM8-I|}L
zh5HM1aBx7+Up$K~Krw#w2*xg;+wFw7d;1Q(di|2Nx3|NTJB}-}ahjb0&1REC5DdK~
z<C@2m4We0HdmO18^rucu(c3qhWZL3`MQn{OzzMeigCqAAmA|y~kb>wW1n?FN72qTS
z@PjgPZ$a4THQ?DXZDjwS&1J8l;E~6lfM|_dfSSuLfG=!40fk-Ukz^q5Z~;IRCvx%(
z=%9FDT9X(h^5|+npZ~VV;jAJj&w%H7AsJto72n7L9K-NDu5tF)aId^avsY$GM7JB}
z1M`A`aorz_yi%zk19kz$;#c^;A?^~YgvHJ^8V&nNSgX~jTCJ+vuJVjnjl<aDv2EQ?
zr_&^F;7ou}g#qAv2NAvi4`GHNHqMB+$GmNvr61fX1HDqI^d+0kUX^!t6)g&rMGdbq
zq84N%(XGjx8_Ea*ESJmQz^VRzp(HO!+>|(jv19mOSeN)D@k5beQ_f1bbUfCV_=PMu
g*sGH?mrmGz1I7zFk1Ci&^Z)<=07*qoM6N<$g5EB-%>V!Z

literal 0
HcmV?d00001

diff --git a/share/icons/svg/utilities-terminal.svgz b/share/icons/svg/utilities-terminal.svgz
new file mode 100644
index 0000000000000000000000000000000000000000..e913402f54e909ded22b71d6e12b4762ef8d1a37
GIT binary patch
literal 6689
zcmYLtbySq!_cdM8p}-I$B_ItBNDL`mQiF6#r*t`VGb11(jkGijjiAC1BHi86%@6|e
z4xit5t@ppX*4=xbefBxex@$em@dO0IP;W&HY$rF@cW%zMeD8eh0x%Y`P2J`dA4eTs
zLi{E(AIFpm+jV3&BO4v!vD#+h8^15%CMfjE(e#sV&iuQSD74lUq5Cj7+CM_g*v%Hr
za2h=H+n?Q|$1SA!rdj+Z)#YsSZLlB(q54oADyZJDO4>yI-|hORvdpZ_Hm`5WkW6nM
z!8dLk(n0qy(fcgT;gGqvJAB4ji+sKiyUxn{Ut2rgJ{Jd*uD-$G%*CZ8j)7r7%HT!U
zep~&H2*c<1e~)4H_4V2Z;?m~7`8je2%$J=Zwk^n@w8}czY`~{s1(vrdU$5G^Lo&Z<
zHNNR+nH^%*l+Hc+w7|zFKf0^xYWqgn@5l}+-0i?AICwPOcJA6b)Hy35Vq!6$Pk>Qh
zQ_VeFJ#oFr-FJ+P=ej(cW-9C?z0V=_TYyV0?AeM5sZGtgUR=PMv?NO4JU;Q?#wEGU
z%bTLCvqOHL?s?^G*7qJDPeT7#`O>gpnzjUd<drr#_=?(Gv!XmCs|0QSU8l*CMv}8p
z4w%A97MF{>SmLr9;N`jYwV$6%`v_h;)eni5^AJu>4mY*TnlA4z+4{CQ-?=Bd%TF#!
z?UP39&(ptX*E-Yg+IKt?%;X)@8bI=p3H}RtCwdL04zBOxJ3GGLy5XG~afBQ`3T)c3
z`dk&l`|r_f`bMdb6-N}Mhz!ZY++|aB5rgu}Cn;srT6^=rND)FPLTerz1Rl-Z+vJOw
z*T`{s&kw)zy|c^t2+=ju>X<kA)cL7;aMLyi*GizQakK44zj^t~idV-Qm&UDSleFsT
z&0-C)9Z%o)d}fedNjPa>d>cXb_lg4XlgsjOem%RDvR2Xh*23JTD8-bbdHT>h3_|a!
zI{)TUFYnByt(0H|lsv9-q&GX+5?*R`v7-iR-j$?KXLZVcQr6ge?a}0CDfT_zf1=j2
z#@12vzxbY~G3D=9Iw*J=bCr`q(mVLmz^~!<o&zWGRy*Flj{zhlk9<Y5KouJ2gMIce
z)<iQcaf}F|iyDr1x;()cUh7lacdK(DeC7v!uQ}nRfqJa6S=+_k9~P~flke}gmOH-%
zKdT57y$(D+QYeKy8&keS9CXa!fheY$zXGEYIYxh4=#$5X@d@^T0wbgwcf`pW|Ewcz
zAh)eV#i#RS-yyoIovatctw9Y48djbb%huD$0MF&g10Sk7C5kW^<yrBkn4$0nZ#fq7
zx?uuB3WAo72x?*A3QmNV%pXpfFBoh9jZ#8_cn%wYhP@b6MhFW_1HTZ4Rj4W>Wd#4H
z^XSx(9EuPPf+BpqWOiv~swy$dIGC5GLeAaiU_Loiu)OsTz5Wp$j9GMk_$7=&Se|jD
z1Td_KqF39lGID8*3s7VDWCFCJ2%EAuP;9oh>$NbsF!Q?DHAXg>LWBFsHGv{nG5MNy
z_+TX?D1w%hxsvwUUVdwRjjs91E7i8JKr%Ziad&y`3{w-Vyk(u#<W>g@2Ke24Nd5qu
z@B#;{9BKghfg%aekx|UD(hFWNaP=i7p*WCkx)X^XkpPYOg8efFj}Oc=lHm7!>?9_g
zln)HtWPAq9!wzeHj6VOsSN2!IE0n5_E_e&XF_Y00#PW<H?R$lCKf!!6K+qQ;4g^eh
zA@Omtpm5T@nn1D9<j@LcJSJAU6IzYlf`WkND=5Mer;w2m9=E%?hOLuB1<%7ymcMjQ
zq9Yf=(m}`ZAExjv4jV5cJmvu-*GovS4P7xLduFOeBviGtS~J*1f(x_g4o^-{x-Mlx
z+sdcKB$UVBNIG+u0>I(&Zn741n4u-ub=a5gV*=P%nlj4xUK{pNRhY7iOqwKE@bhFc
z_<07YveJX^mt6#XFU5g0qg}{eYpG{Uvc0UIl_W{Oh1d5H^l^&=6CO+mWl+Fty=1Ib
zm^8V}Wad1uu*88D7w+A%i?>i5Rv>Rb)Mnv?_ym&+NuW$84t(+;#>&gew6o*qY(n;g
zncN*qP8>)ziOwb>nS$I=Ja4^Mq_2_K#w0#EC6Rcd6W3t_myMVexVjD1(|aKJY089=
za-OC~T|wa#<eX?9TdQm9vennec}-rDEMKGJ$@*Su%E;j3cu1K9$%IkBQ*30mwIqbI
z_N4eG&#`TwPvH9KUCPJ)OJq&&oEd%QNDED{#j%lOgeOV}qbc7B33j0B-5zBpC-(g@
zN>1WThk_*XM=Po50WmOYF9?#HV5$rgDvx0HhYs^vF$e=~aM)=6cai@VCnAkhS>Yi;
z!v7`&ERK$cDG97mpvTh9I8M$?&Z#J4u?<b{5%CIaw)ArUX$+S687K~va3`}P`QKN?
z@n0V*iZYtxm^=T?(uo%HjS_yhL~&?Z=+z1BaIDhENni8Blx=Wqs2Rx>A1XQw5-1ys
z=jFp3+~c0WJ+q)tQi8RI<wDPby&noZe2A^k3Wtq^5gxz&klR2Ez7(U@#zRk-&wz#4
zLa!fElM}+CMDGFFLYMyrE>08$xfps8-no9bg0^pMux<yfkvhZ-<6mF-z3Qd%kdY4(
z(>(j(kw*G#*FEaWufn<;+e=cO_V;&~QlFK-sq0)spwZ#sFmexM5|*H5iySNAQ$cRs
z37#V~+ZA;SwiFVL3kafE++${Xy_!syf}c~mPdz##`pII}FQiG`2l=T@_fMz8$V(*d
z_x{%Dq>t-3a@(_I&UQW+bpQ8Y@#s^ge{0)p@sXbQ^rzYC9gQ6RaTKgP^WYzfXX$Nj
z+Ky|>8*}xE`tnldhW9VYUR;uVELbYy(vOr0Mv?9X#_MmhWo@(4Ir-D~NH=5~r_ASr
z6-|OT_$IoMt<8O$RYE~)+)9rjjI34F4)NR{N+SeN`#2n<b6^0h+SUqzXT6j5-Emf2
zSF>pWPK)qs#=31Woa3&+$uZr!u*o?sEwrV?7>Q0c&@T*gDA!nwRill)c>0bVSV$`U
zG@Q$8jtKROg9$+-J)v-6eeD?h6`^Heza>uJdS8T=SqUnv7S?_2w6iN?VL?NC*7lvM
zeDWr~U(euEBX5OmsPSA#ZFi)447iWYFt8BwX;AY_@X1YV^_TI*wCVSoXXoM)WHc4%
zmn-bQmrLKtB$8zdGQWRnb*k}^<?_SyFi)i3EgfQuS}YPm@-xc}Yy4@brLVmR;Z=dm
z4~&95&+9ukDK7|I2KU^jWyUlzErXzfuY?ET8w{B}?V7COEHcq3j-D%eHGAUv<z_C!
zO$_+*Hcj4WBGH$T`VCHVF(2n|VaxBIK@Jf}kVmR#&MSs^{K?n9;-kbX39HR5M1`|X
z5=9J$lV7~p^;VS`R}LN|bTS#n8T*}KS3gv*w*C3<+}Yb|?&BGNas|~F2+giLjoW)-
zHDj7Jr;VAvu`dFG^D<FW3@Ofw^=2SJ#pgG-<s7A`MnzQZ5-e>#fcXCBk!~)*lkZ~4
z<Vc(td51oUS!oi~JweJUw(DaTy=YKhA<135Mu>}ZG-x+<P7Ia2rYI8)ijoCHMbp1Q
zd|;dts{;+%rP1X$*p2ouOetb!g1TUU<@`aF8>@9QoduweeL*vVE@UC^a3pH!iRc!$
zW%@wWE5LMqqV-4=xv04=V0JYgg+||f398j&oCAh~h*N0m?X4vcFCEM)%u@LcM)DI^
z$KGCf6xc+Ao*l#&`M>rUUyUbmcM!h4T>a&1|8A^<);yJeY9>E%4UOwC+#_}Qt<n(s
zghsSV9?)Afc)Z@@b!8Pe)?v7!76&L0N63O)qL@V+<uk|su6?2gJr*w%R39UjcC6Tk
z|0$F@Ik%0}h<@(#z4(FYZ6E$@QgH;_ac$)GVsDEaNHeA9c<9?;JO+MEBr9?+gkxW+
zuK(D0!0PoB`<UbQtTQZRyEK4S5rd_7Tp%5aG71;FQcl1~9kjEe?MRIDjaG3KUK)b(
zkt#j5OpoS^6T|DtwAxt%wuu?WSO;n#mJ=981d*0C=fr0PJ)>{ib8@N@ttX?vjIs(Y
zJOYmLxq4E?LVbC^mB*;hqMx5j<5TGZx{mV~498NviPsX?wO(3~+wsKydKxaa-lwOT
zc=?>NRg8G?#NP9x^}n?b;7L;j56Of}<2S8heZV0@&ySE2n&|X$g?Wb8;A9cj5aI|v
zQh8s=G?Stg#9}Q#w@L@P9(<a>mt;k5$JU}6y81X846x^MSg>dIE{bOrYqgI0EU+FE
zPD}=eu|o)7ES2o-tkL3m^dy%@Sd-f^v=CXgclmFx33&Au^y~KtK;1=Jh?FG5;CxBw
zYn~QWtOuj|l)Vx*pZ}|zVZu&wqky3uGd{IWJDpr^Q_ver`!Y#3t9FAM_n|`wm(7E&
zYT1eAfZUVld<iCvs<rI>(g1T?;{b-~o0l?FN?G?!z9GYj^NI}bhs{@8+9z~B_gML2
zR-~Lil@=eTyDSRcw(hmtbJjZOV;yK|yG7wzs!)3y-GE*WS&B`tb6{fO9FHD8f#YE9
zE7nj>Sh(L}xGSDskqeSw*ioNh#46RCFSxto!PiHBR}z>TB#o#4sn9)UH9YVX5EH@3
zsy)|#N{nI05Uj6^okusY5GNMFKvwhWb~<z&-w+YN6RclIQL!yWn<elcR*(dz_aCE$
zOI*qVK_fXW@eqcmWJU)!NsU9l{U3uuihUy?hO7tKTQhc746*g?@@|+#X5o(&VqkB<
zPB|NK&Gn4oUv3rb?{xiH-acpuN`rYsG!jQkonP?u5B~?XdTdlC17M?D#b<6oYXYxD
z<->?PZkxQ3OMeNul7(s){DVrU2#BJ%O3gNWJYC7QYuw_EEmg^|ArakYaE6mJrTX$t
zsk8fEA#L<kQy+Jx*xhYj-G?1Wd6x}NF|&j|NbF9vs&3UGAo3T7=9#A+NJwK_XC@}x
zfhkW8uVkly8<6vdvD|r0#M0E3bv%WX9su2;p!-Oosb#=r;}-zbLRWkCQXeEFg;h~|
zA|NGERrkYT6!RmAmXkiG%^IRR_LpLDgNF!+VEl_JHz3PkU1#<fk&ub5R({WAV`C(u
zV=XUG3HpkreKtbV_5kQ=2!Td44K+cQVws+{3YlF&ybu2sRgx&J2lAK`R75*5kf+bY
z7$?;yqRRq-bkUNmIcP~^uCLBEbK$zyRF-q?`she<I*I6V8siLRyB%O29~0Fx$DN$V
zp6FX0TkjT8l74^7_DydMb0)zm$vh4lPN%~E(FOy=x>IC>!Ok?G?sfe|Ro!~GFalpj
zI0>w}hGE|`@+y`X<1MiiwK#s)m$J_Au~A~4pQuYM@eF?MpU)ieX{77J<2p!dxt!O&
zJMSLldx3;7GG9xQMUYxxfWlQyE=wS1zOc=G4-fAf_`UQEYAqxLHGgn>Cpxd#@omQ7
zYIQ9j$DcQiuD|Wn$lR~Z&}{Hirdob`z^BJ82TkR$7ShClCjmz?fzt=xzE^+O2a%I&
zcVuq2|B%a1;)xS43izc{kxwtJ-(gZ@u25Rdbow<k2el3#A^XSAj4zH?Q}(q6Y%^C5
z*VZMQ>KQDux8H^Y2G={bl(_U<HbKfWLnhV-*X~et$W|k;OHCsMj2CKN{SLQ`Z7Ke~
zhFQAvy`lN9-xtsS{=1k~-?K68P|&7y=4RyN;+pde_pGdZ?&iD`($U)7YG~@^Qy+UG
z_&u|MpRal;`)+Tmvnijlqh0c5*y_5IlBXK<138b>t<vkS*Yx%Fp9<(j?z%Ny&eCf#
zzi<1u7k$&_{3G+xU3WQ*?2KWw?ZES2v!9XK(0jjk^+r-z**RcI-lGiUsrWM6z3=<^
zx8iq~yBCLt%q~xjaUG;=O-C7ChnY%vT8xiSwk}zF`=0oOTy|xi%`gA)^^IqpvGf0C
zA}O`NU-ic+Fkl>$XO*{gPb1JEm(O-iY=a<Tk6i=vGce*!I&wY7%#=!{gb`K_^KF@F
z*voE->J0n@cz;p(yqZ#M)+7?toWVaVgy;;q2_hZ3sn9Z3y^FMbSMlo6+4CD}3;V1t
zpu}k9bPjO8$EM!KoTaq~rS^<+sUfd-a_wn!z{@!?mK}w<0-dUCYFUY!i{8`SBBS=e
zOR-_aUGeAsMb!S4sph}-+_^|vX{GBqeU9zuC%SQtXJ4&4y}G-#{^#4wx$SRwe=y%8
zZBpUdG0VS#E4(Ni2a>2=&)#OZ8D`CDDacLAlO1~II+e45&6K^>8FsA$)~33885@x$
zE7w7!d8(30V?y<d2BTBcc<5B>7h#%0$3j5L+{atK68nMsyHY@5mf5G2kU%w!cbZ()
zZvxE9#Wn$I;R_(9);^JxC_#*3_%J4Y1bk$x&a<y5D(182)J29<I~kL&t8SDA;ZvVY
zZ;zr^wX<q(=00V}+#yy>A##M?MY*5cAx*ie&E=PWLQIX@!rDsD<kf|KyIm~##x4dG
z<!n+D?!gv4jl`Ekiwbm68YhWr<m7hWBjx2|#pD1H7jE+ENo6>4>lk#U7Fk6T%0#Jk
z6d&_M)MX8QTv=R8Fg)0qMX?C2Nz;Nhbup!%Mb5OT?Z<Jxw1$KyzwnuyZ=rC9C<DZf
z8cxW~a`l?`PU=?P!z5w`t~VRC`u>tgtY0t?xs-}JdQK>!@F4vt$I&GUQ^-&6>gp~X
z=#ni5-V^(ATdeDDkElc?&y71C5z6_#n!}Y;80D@Vrl;F)DGRzaVbQwlI0Rs$cTw-3
z#aD(*?VYo~^!FL|!tZQ?-YK66c5!u^^A{0<|4zr9b|UT(U$)QU!lWUp+ujO`fHH4|
zY>{=I#t;)ts~s!`gd8(_Zc7knNGgo|b@*mn#kgwbwInm}xg|IiXU}Hr?Lf<bi|65B
zVo_>?O03J&nYWZU^MQ8=BVbXh>}qGvlwzp)U@D!ye?nkz<OL?7i6o_KyV4JVvjuVv
z|HrAHOYj(Rez|b1ZY|+7DfP(D$?+%XEC!^vUgLZ%_o^apSd8=)Cf#EdsTFW?Vp>a>
zI@zGlopKQD{n$R?H=D)0Z#lCwnR<liz{A|RigbLJ9%*pi?*c3O%h1@nLTd2r-;dph
zPhY7(lX(ZVdaTWZugjCRCr`dz9;0CNv{Fo+rCTfhm79_hnA87Ip0_V5S)ofI0jmc<
z-ykT)>wwyq7_}!Ye3Th6uV{cGp-)wlxPK^0dLC!4aCjfrF#VK?lbtKwC`u&gm*93_
zb8nHQJgHS+GkfxbPc}ovgiOtfausBV=eqIX7fIwLw;%b;9xGA5YSH;6nB3bGwRv!Q
z>bj(|yt^VkCcLuF7`zZd(&!w`hR+|Q&1dq5fs3Ji?5zj?uj5ct+oVgxZHtu31(@#$
zN4o4s>&oxFJspZ{qBo`R!Y;k<tIrKLsCdpBYGbBr^GMXRYoLL2@mE?k7Cky;WGaZ)
zPZL!|{=&O6O#5a_{UYO@)jw*9b3ty)YUYPoG|*H)APVZ*I%9ck1r;$9doq;H+9H+g
zpuez)INnGXZILotw+8Aeh;H&|a62ASJWB0F8>~roGy;TEesdMai~IwAO*I!|ptc(K
z0vAoq*BJWBrCohfXcI0+pK9-wo4VVON{!aZrx7wzjiYgj8x5w;N0C-!=+xi9300Np
zQ*FGNzfS8|A!G@Os4WVLx(#cK^GJxewA-5;i469^LwHCh?e1N0m6=+sRrnV|Uc7=L
zg)&23=fkdy5lW*MMOK%wKk!~r8Tlw)#^#%;5nBCM8IcO4aUz<}vzG((edRK#z3~H3
zYuK|IF7`s4xh%ruRKk-h(y;yq$(;GhMboCG4C2ffi4$$rQl>FR`)tR1g@&LURbxP$
zaU);qlkDXyW`g^0a8s~wM|Qz_wMBU(s@i#eb`8`O5M8mkJUBX_FPj;Qy|a0KxJ1d5
z!6wKwD=%gZd%}veFq9)vJYk#`J@sBpT9Mi1s>MSu^`pUJdd^(V=(Ec)I>dk%kqL+E
zFF2<tcqjM4OX#-dXe$oapEpux-at7Jgq3MO(Uxb>T|NK5oVDv@pOVCRPhsjy?m@qh
z#IYbY`s}%=pHER2+=$^4LG^VVeVB!0Js#RUlt&p6DFRaSWKNtB)Cp)Iv}G*ZZ~D45
zR+k<iPP1?pgUd3%Da<&MI1V%*Elj7jIDG*hovmVdvEDwI_F=#zQ*ZDMPb#qaL7auM
zv5IOZXi&`q;X_5nPn!QNN9bg55HbymgOkfaJ9$zk&q~AcA^yn944vAWE1U2y1iTV^
z71+7ljcA{KByonkxVw|o%r4qlShy9eM$FG2OvkE(u8scxob&39h^ET9$X&FR!>t%c
z<pvMeAN;V_wZh70bP^5=2zkRNb!yBsFa>1^RURN=6MJCt|2#W;F%!@j|KB=%o78DG
z(+~`RO{W{;BVI_rngmB}K)B^+S8>_+>e_}MW>>N%{T)NNXM5P})qfA4J30ByO-JBp
z{dix;bh;D}j{mqYO1cr)kP?Lvn&eq=##U!mC{7d+<P^Qq(p?xMn7WoV%=KB-SslKj
z{L3GnzV>G!-`T*><+Q9|P`n(IwyeTCk-QseqQ9bW+)i9?vBCHD+fe?a5Yf7d!i9(k
zK9o?2BCUYr6H1_G(%#41@RtCkEK6rjcB|zcZ<@ns)uhGZk1Q-|3l0IXkGL*?ACnDP
zj%sj@#OL0-dmK&}X9WT{)6Gm^0LcU5_BLMhFPAf)y~tkY>rK?v)m4zrzQ4=h@|G0y
Q>FRwMgXX>{5)<S90UtNk(EtDd

literal 0
HcmV?d00001

diff --git a/src/CMakeLists.txt b/src/CMakeLists.txt
index 97ff5edf..092a2102 100644
--- a/src/CMakeLists.txt
+++ b/src/CMakeLists.txt
@@ -177,6 +177,7 @@ set(keepassx_SOURCES_MAINEXE
 add_feature_info(AutoType WITH_XC_AUTOTYPE "Automatic password typing")
 add_feature_info(KeePassHTTP WITH_XC_HTTP "Browser integration compatible with ChromeIPass and PassIFox")
 add_feature_info(YubiKey WITH_XC_YUBIKEY "YubiKey HMAC-SHA1 challenge-response")
+add_feature_info(SSHAgent WITH_XC_SSHAGENT "SSH agent integration compatible with KeeAgent")
 
 add_subdirectory(http)
 if(WITH_XC_HTTP)
@@ -186,6 +187,11 @@ endif()
 add_subdirectory(autotype)
 add_subdirectory(cli)
 
+add_subdirectory(sshagent)
+if(WITH_XC_SSHAGENT)
+    set(sshagent_LIB sshagent)
+endif()
+
 set(autotype_SOURCES
     core/Tools.cpp
     autotype/AutoType.cpp
@@ -222,6 +228,7 @@ set_target_properties(keepassx_core PROPERTIES COMPILE_DEFINITIONS KEEPASSX_BUIL
 target_link_libraries(keepassx_core
                       ${keepasshttp_LIB}
                       ${autotype_LIB}
+                      ${sshagent_LIB}
                       ${YUBIKEY_LIBRARIES}
                       ${ZXCVBN_LIBRARIES}
                       Qt5::Core
diff --git a/src/config-keepassx.h.cmake b/src/config-keepassx.h.cmake
index e06c6938..b06e702a 100644
--- a/src/config-keepassx.h.cmake
+++ b/src/config-keepassx.h.cmake
@@ -15,6 +15,7 @@
 #cmakedefine WITH_XC_HTTP
 #cmakedefine WITH_XC_AUTOTYPE
 #cmakedefine WITH_XC_YUBIKEY
+#cmakedefine WITH_XC_SSHAGENT
 
 #cmakedefine KEEPASSXC_DIST
 #cmakedefine KEEPASSXC_DIST_TYPE "@KEEPASSXC_DIST_TYPE@"
diff --git a/src/gui/AboutDialog.cpp b/src/gui/AboutDialog.cpp
index 58387335..e89a7fdc 100644
--- a/src/gui/AboutDialog.cpp
+++ b/src/gui/AboutDialog.cpp
@@ -87,6 +87,9 @@ AboutDialog::AboutDialog(QWidget* parent)
 #ifdef WITH_XC_YUBIKEY
     extensions += "\n- YubiKey";
 #endif
+#ifdef WITH_XC_SSHAGENT
+    extensions += "\n- SSH Agent";
+#endif
 
     if (extensions.isEmpty())
         extensions = " None";
diff --git a/src/gui/DatabaseWidget.cpp b/src/gui/DatabaseWidget.cpp
index 63420158..a610cf50 100644
--- a/src/gui/DatabaseWidget.cpp
+++ b/src/gui/DatabaseWidget.cpp
@@ -57,6 +57,12 @@
 #include "gui/group/EditGroupWidget.h"
 #include "gui/group/GroupView.h"
 
+#include "config-keepassx.h"
+
+#ifdef WITH_XC_SSHAGENT
+#include "sshagent/SSHAgent.h"
+#endif
+
 DatabaseWidget::DatabaseWidget(Database* db, QWidget* parent)
     : QStackedWidget(parent)
     , m_db(db)
@@ -210,6 +216,13 @@ DatabaseWidget::DatabaseWidget(Database* db, QWidget* parent)
     m_searchCaseSensitive = false;
     m_searchLimitGroup = config()->get("SearchLimitGroup", false).toBool();
 
+#ifdef WITH_XC_SSHAGENT
+    if (config()->get("SSHAgent", false).toBool()) {
+        connect(this, SIGNAL(currentModeChanged(DatabaseWidget::Mode)), SSHAgent::instance(), SLOT(databaseModeChanged(DatabaseWidget::Mode)));
+        connect(this, SIGNAL(closeRequest()), SSHAgent::instance(), SLOT(databaseModeChanged()));
+    }
+#endif
+
     setCurrentWidget(m_mainWidget);
 }
 
diff --git a/src/gui/MainWindow.cpp b/src/gui/MainWindow.cpp
index ccc5fb11..30bb2cdf 100644
--- a/src/gui/MainWindow.cpp
+++ b/src/gui/MainWindow.cpp
@@ -49,6 +49,11 @@
 #include "http/OptionDialog.h"
 #endif
 
+#ifdef WITH_XC_SSHAGENT
+#include "sshagent/AgentSettingsPage.h"
+#include "sshagent/SSHAgent.h"
+#endif
+
 #include "gui/SettingsWidget.h"
 #include "gui/PasswordGeneratorWidget.h"
 
@@ -121,6 +126,10 @@ MainWindow::MainWindow()
     #ifdef WITH_XC_HTTP
     m_ui->settingsWidget->addSettingsPage(new HttpPlugin(m_ui->tabWidget));
     #endif
+    #ifdef WITH_XC_SSHAGENT
+    SSHAgent::init(this);
+    m_ui->settingsWidget->addSettingsPage(new AgentSettingsPage(m_ui->tabWidget));
+    #endif
 
     setWindowIcon(filePath()->applicationIcon());
     m_ui->globalMessageWidget->setHidden(true);
diff --git a/src/gui/entry/EditEntryWidget.cpp b/src/gui/entry/EditEntryWidget.cpp
index 0dc555a0..f1fe3750 100644
--- a/src/gui/entry/EditEntryWidget.cpp
+++ b/src/gui/entry/EditEntryWidget.cpp
@@ -19,6 +19,7 @@
 #include "EditEntryWidget.h"
 #include "ui_EditEntryWidgetAdvanced.h"
 #include "ui_EditEntryWidgetAutoType.h"
+#include "ui_EditEntryWidgetSSHAgent.h"
 #include "ui_EditEntryWidgetHistory.h"
 #include "ui_EditEntryWidgetMain.h"
 
@@ -36,10 +37,16 @@
 #include "core/Metadata.h"
 #include "core/TimeDelta.h"
 #include "core/Tools.h"
+#ifdef WITH_XC_SSHAGENT
+#include "sshagent/KeeAgentSettings.h"
+#include "sshagent/OpenSSHKey.h"
+#include "sshagent/SSHAgent.h"
+#endif
 #include "gui/EditWidgetIcons.h"
 #include "gui/EditWidgetProperties.h"
 #include "gui/FileDialog.h"
 #include "gui/MessageBox.h"
+#include "gui/Clipboard.h"
 #include "gui/entry/AutoTypeAssociationsModel.h"
 #include "gui/entry/EntryAttachmentsModel.h"
 #include "gui/entry/EntryAttributesModel.h"
@@ -51,11 +58,13 @@ EditEntryWidget::EditEntryWidget(QWidget* parent)
     , m_mainUi(new Ui::EditEntryWidgetMain())
     , m_advancedUi(new Ui::EditEntryWidgetAdvanced())
     , m_autoTypeUi(new Ui::EditEntryWidgetAutoType())
+    , m_sshAgentUi(new Ui::EditEntryWidgetSSHAgent())
     , m_historyUi(new Ui::EditEntryWidgetHistory())
     , m_mainWidget(new QWidget())
     , m_advancedWidget(new QWidget())
     , m_iconsWidget(new EditWidgetIcons())
     , m_autoTypeWidget(new QWidget())
+    , m_sshAgentWidget(new QWidget())
     , m_editWidgetProperties(new EditWidgetProperties())
     , m_historyWidget(new QWidget())
     , m_entryAttachments(new EntryAttachments(this))
@@ -73,6 +82,14 @@ EditEntryWidget::EditEntryWidget(QWidget* parent)
     setupAdvanced();
     setupIcon();
     setupAutoType();
+#ifdef WITH_XC_SSHAGENT
+    if (config()->get("SSHAgent", false).toBool()) {
+        setupSSHAgent();
+        m_sshAgentEnabled = true;
+    } else {
+        m_sshAgentEnabled = false;
+    }
+#endif
     setupProperties();
     setupHistory();
 
@@ -245,6 +262,239 @@ void EditEntryWidget::updateHistoryButtons(const QModelIndex& current, const QMo
     }
 }
 
+#ifdef WITH_XC_SSHAGENT
+void EditEntryWidget::setupSSHAgent()
+{
+    m_sshAgentUi->setupUi(m_sshAgentWidget);
+
+    connect(m_sshAgentUi->privateKeyComboBox, SIGNAL(currentTextChanged(QString)), SLOT(updateSSHAgentKeyInfo()));
+    connect(m_sshAgentUi->browseButton, SIGNAL(clicked()), SLOT(browsePrivateKey()));
+    connect(m_sshAgentUi->addToAgentButton, SIGNAL(clicked()), SLOT(addKeyToAgent()));
+    connect(m_sshAgentUi->removeFromAgentButton, SIGNAL(clicked()), SLOT(removeKeyFromAgent()));
+    connect(m_sshAgentUi->decryptButton, SIGNAL(clicked()), SLOT(decryptPrivateKey()));
+    connect(m_sshAgentUi->copyToClipboardButton, SIGNAL(clicked()), SLOT(copyPublicKey()));
+
+    addPage(tr("SSH Agent"), FilePath::instance()->icon("apps", "utilities-terminal"), m_sshAgentWidget);
+}
+
+void EditEntryWidget::updateSSHAgent()
+{
+    // TODO: unsafe use of translations
+    QString prefix = tr("Attachment") + ": ";
+    KeeAgentSettings settings;
+    settings.fromXml(m_entryAttachments->value("KeeAgent.settings"));
+
+    m_sshAgentUi->addKeyToAgentCheckBox->setChecked(settings.addAtDatabaseOpen());
+    m_sshAgentUi->removeKeyFromAgentCheckBox->setChecked(settings.removeAtDatabaseClose());
+    m_sshAgentUi->requireUserConfirmationCheckBox->setChecked(settings.useConfirmConstraintWhenAdding());
+    m_sshAgentUi->lifetimeCheckBox->setChecked(settings.useLifetimeConstraintWhenAdding());
+    m_sshAgentUi->lifetimeSpinBox->setValue(settings.lifetimeConstraintDuration());
+    m_sshAgentUi->privateKeyComboBox->clear();
+    m_sshAgentUi->addToAgentButton->setEnabled(false);
+    m_sshAgentUi->removeFromAgentButton->setEnabled(false);
+    m_sshAgentUi->copyToClipboardButton->setEnabled(false);
+
+    for (QString fileName : m_entryAttachments->keys()) {
+        if (fileName == "KeeAgent.settings") {
+            continue;
+        }
+
+        m_sshAgentUi->privateKeyComboBox->addItem(prefix + fileName);
+    }
+
+    if (settings.selectedType() == "attachment") {
+        m_sshAgentUi->privateKeyComboBox->setCurrentText(prefix + settings.attachmentName());
+    } else if (!settings.fileName().isEmpty()) {
+        m_sshAgentUi->privateKeyComboBox->addItem(settings.fileName());
+        m_sshAgentUi->privateKeyComboBox->setCurrentText(settings.fileName());
+    } else {
+        m_sshAgentUi->privateKeyComboBox->setCurrentText("");
+    }
+
+    m_sshAgentSettings = settings;
+}
+
+void EditEntryWidget::updateSSHAgentKeyInfo()
+{
+    m_sshAgentUi->addToAgentButton->setEnabled(false);
+    m_sshAgentUi->removeFromAgentButton->setEnabled(false);
+    m_sshAgentUi->copyToClipboardButton->setEnabled(false);
+    m_sshAgentUi->fingerprintEdit->setText("");
+    m_sshAgentUi->commentEdit->setText("");
+    m_sshAgentUi->decryptButton->setEnabled(false);
+    m_sshAgentUi->publicKeyEdit->document()->setPlainText("");
+
+    if (m_sshAgentUi->privateKeyComboBox->currentText().isEmpty()) {
+        return;
+    }
+
+    OpenSSHKey key;
+
+    if (!getOpenSSHKey(key)) {
+        return;
+    }
+
+    m_sshAgentUi->fingerprintEdit->setText(key.fingerprint());
+
+    if (key.encrypted()) {
+        m_sshAgentUi->commentEdit->setText(tr("(encrypted)"));
+        m_sshAgentUi->decryptButton->setEnabled(true);
+    } else {
+        m_sshAgentUi->commentEdit->setText(key.comment());
+    }
+
+    m_sshAgentUi->publicKeyEdit->document()->setPlainText(key.publicKey());
+
+    // enable agent buttons only if we have an agent running
+    if (SSHAgent::instance()->isAgentRunning()) {
+        m_sshAgentUi->addToAgentButton->setEnabled(true);
+        m_sshAgentUi->removeFromAgentButton->setEnabled(true);
+    }
+
+    m_sshAgentUi->copyToClipboardButton->setEnabled(true);
+}
+
+void EditEntryWidget::saveSSHAgentConfig()
+{
+    KeeAgentSettings settings;
+    QString privateKeyPath = m_sshAgentUi->privateKeyComboBox->currentText();
+
+    settings.setAddAtDatabaseOpen(m_sshAgentUi->addKeyToAgentCheckBox->isChecked());
+    settings.setRemoveAtDatabaseClose(m_sshAgentUi->removeKeyFromAgentCheckBox->isChecked());
+    settings.setUseConfirmConstraintWhenAdding(m_sshAgentUi->requireUserConfirmationCheckBox->isChecked());
+    settings.setUseLifetimeConstraintWhenAdding(m_sshAgentUi->lifetimeCheckBox->isChecked());
+    settings.setLifetimeConstraintDuration(m_sshAgentUi->lifetimeSpinBox->value());
+
+    // TODO: unsafe use of translations
+    QString prefix = tr("Attachment") + ": ";
+    if (privateKeyPath.startsWith(prefix)) {
+        settings.setSelectedType("attachment");
+        settings.setAttachmentName(privateKeyPath.remove(0, prefix.length()));
+        settings.setFileName("");
+    } else {
+        settings.setSelectedType("file");
+        settings.setFileName(privateKeyPath);
+        settings.setAttachmentName("");
+    }
+
+    // we don't use this as we don't run an agent but for compatibility we set it if necessary
+    settings.setAllowUseOfSshKey(settings.addAtDatabaseOpen() || settings.removeAtDatabaseClose());
+
+    // we don't use this either but we don't want it to dirty flag the config
+    settings.setSaveAttachmentToTempFile(m_sshAgentSettings.saveAttachmentToTempFile());
+
+    if (settings.isDefault() && m_entryAttachments->hasKey("KeeAgent.settings")) {
+        m_entryAttachments->remove("KeeAgent.settings");
+    } else if (settings != m_sshAgentSettings) {
+        m_entryAttachments->set("KeeAgent.settings", settings.toXml());
+    }
+
+    m_sshAgentSettings = settings;
+}
+
+void EditEntryWidget::browsePrivateKey()
+{
+    QString fileName = QFileDialog::getOpenFileName(this, tr("Select private key"), "");
+    if (!fileName.isEmpty()) {
+        m_sshAgentUi->privateKeyComboBox->addItem(fileName);
+        m_sshAgentUi->privateKeyComboBox->setCurrentText(fileName);
+    }
+}
+
+bool EditEntryWidget::getOpenSSHKey(OpenSSHKey& key)
+{
+    QString privateKeyPath = m_sshAgentUi->privateKeyComboBox->currentText();
+    QByteArray privateKeyData;
+
+    // TODO: unsafe use of translations
+    QString prefix = tr("Attachment") + ": ";
+    if (privateKeyPath.startsWith(prefix)) {
+        QString attachmentName = privateKeyPath.remove(0, prefix.length());
+        privateKeyData = m_entryAttachments->value(attachmentName);
+    } else {
+        QFile localFile(privateKeyPath);
+
+        if (localFile.size() > 1024 * 1024) {
+            showMessage(tr("File too large to be a private key"), MessageWidget::Error);
+            return false;
+        }
+
+        if (!localFile.open(QIODevice::ReadOnly)) {
+            showMessage(tr("Failed to open private key"), MessageWidget::Error);
+            return false;
+        }
+
+        privateKeyData = localFile.readAll();
+    }
+
+    if (!key.parse(privateKeyData)) {
+        showMessage(key.errorString(), MessageWidget::Error);
+        return false;
+    }
+
+    return true;
+}
+
+void EditEntryWidget::addKeyToAgent()
+{
+    OpenSSHKey key;
+
+    if (!getOpenSSHKey(key)) {
+        return;
+    }
+
+    if (!key.openPrivateKey(m_entry->password())) {
+        showMessage(key.errorString(), MessageWidget::Error);
+    } else {
+        m_sshAgentUi->commentEdit->setText(key.comment());
+        m_sshAgentUi->publicKeyEdit->document()->setPlainText(key.publicKey());
+    }
+
+    quint32 lifetime = 0;
+    bool confirm = m_sshAgentUi->requireUserConfirmationCheckBox->isChecked();
+
+    if (m_sshAgentUi->lifetimeCheckBox->isChecked()) {
+        lifetime = m_sshAgentUi->lifetimeSpinBox->value();
+    }
+
+    SSHAgent::instance()->addIdentity(key, lifetime, confirm);
+
+    if (m_sshAgentUi->removeKeyFromAgentCheckBox->isChecked()) {
+        SSHAgent::instance()->removeIdentityAtLock(key, m_entry->uuid());
+    }
+}
+
+void EditEntryWidget::removeKeyFromAgent()
+{
+    OpenSSHKey key;
+
+    if (getOpenSSHKey(key)) {
+        SSHAgent::instance()->removeIdentity(key);
+    }
+}
+
+void EditEntryWidget::decryptPrivateKey()
+{
+    OpenSSHKey key;
+
+    if (!getOpenSSHKey(key)) {
+        return;
+    }
+
+    if (!key.openPrivateKey(m_entry->password())) {
+        showMessage(key.errorString(), MessageWidget::Error);
+    } else {
+        m_sshAgentUi->commentEdit->setText(key.comment());
+        m_sshAgentUi->publicKeyEdit->document()->setPlainText(key.publicKey());
+    }
+}
+
+void EditEntryWidget::copyPublicKey()
+{
+    clipboard()->setText(m_sshAgentUi->publicKeyEdit->document()->toPlainText());
+}
+#endif
+
 void EditEntryWidget::useExpiryPreset(QAction* action)
 {
     m_mainUi->expireCheck->setChecked(true);
@@ -398,6 +648,12 @@ void EditEntryWidget::setForms(const Entry* entry, bool restore)
     }
     updateAutoTypeEnabled();
 
+#ifdef WITH_XC_SSHAGENT
+    if (m_sshAgentEnabled) {
+        updateSSHAgent();
+    }
+#endif
+
     m_editWidgetProperties->setFields(entry->timeInfo(), entry->uuid());
 
     if (!m_history && !restore) {
@@ -445,6 +701,12 @@ void EditEntryWidget::saveEntry()
 
     m_autoTypeAssoc->removeEmpty();
 
+#ifdef WITH_XC_SSHAGENT
+    if (m_sshAgentEnabled) {
+        saveSSHAgentConfig();
+    }
+#endif
+
     if (!m_create) {
         m_entry->beginUpdate();
     }
@@ -454,6 +716,12 @@ void EditEntryWidget::saveEntry()
     if (!m_create) {
         m_entry->endUpdate();
     }
+
+#ifdef WITH_XC_SSHAGENT
+    if (m_sshAgentEnabled) {
+        updateSSHAgent();
+    }
+#endif
 }
 
 void EditEntryWidget::acceptEntry()
diff --git a/src/gui/entry/EditEntryWidget.h b/src/gui/entry/EditEntryWidget.h
index 1f1b5552..a151f1b5 100644
--- a/src/gui/entry/EditEntryWidget.h
+++ b/src/gui/entry/EditEntryWidget.h
@@ -23,6 +23,7 @@
 #include <QScopedPointer>
 
 #include "gui/EditWidget.h"
+#include "config-keepassx.h"
 
 class AutoTypeAssociations;
 class AutoTypeAssociationsModel;
@@ -39,10 +40,15 @@ class QButtonGroup;
 class QMenu;
 class QSortFilterProxyModel;
 class QStackedLayout;
+#ifdef WITH_XC_SSHAGENT
+#include "sshagent/KeeAgentSettings.h"
+class OpenSSHKey;
+#endif
 
 namespace Ui {
     class EditEntryWidgetAdvanced;
     class EditEntryWidgetAutoType;
+    class EditEntryWidgetSSHAgent;
     class EditEntryWidgetMain;
     class EditEntryWidgetHistory;
     class EditWidget;
@@ -102,12 +108,24 @@ private slots:
     void useExpiryPreset(QAction* action);
     void updateAttachmentButtonsEnabled(const QModelIndex& current);
     void toggleHideNotes(bool visible);
+#ifdef WITH_XC_SSHAGENT
+    void updateSSHAgent();
+    void updateSSHAgentKeyInfo();
+    void browsePrivateKey();
+    void addKeyToAgent();
+    void removeKeyFromAgent();
+    void decryptPrivateKey();
+    void copyPublicKey();
+#endif
 
 private:
     void setupMain();
     void setupAdvanced();
     void setupIcon();
     void setupAutoType();
+#ifdef WITH_XC_SSHAGENT
+    void setupSSHAgent();
+#endif
     void setupProperties();
     void setupHistory();
 
@@ -115,6 +133,10 @@ private:
     void setForms(const Entry* entry, bool restore = false);
     QMenu* createPresetsMenu();
     void updateEntryData(Entry* entry) const;
+#ifdef WITH_XC_SSHAGENT
+    bool getOpenSSHKey(OpenSSHKey& key);
+    void saveSSHAgentConfig();
+#endif
 
     void displayAttribute(QModelIndex index, bool showProtected);
 
@@ -125,14 +147,20 @@ private:
 
     bool m_create;
     bool m_history;
+#ifdef WITH_XC_SSHAGENT
+    bool m_sshAgentEnabled;
+    KeeAgentSettings m_sshAgentSettings;
+#endif
     const QScopedPointer<Ui::EditEntryWidgetMain> m_mainUi;
     const QScopedPointer<Ui::EditEntryWidgetAdvanced> m_advancedUi;
     const QScopedPointer<Ui::EditEntryWidgetAutoType> m_autoTypeUi;
+    const QScopedPointer<Ui::EditEntryWidgetSSHAgent> m_sshAgentUi;
     const QScopedPointer<Ui::EditEntryWidgetHistory> m_historyUi;
     QWidget* const m_mainWidget;
     QWidget* const m_advancedWidget;
     EditWidgetIcons* const m_iconsWidget;
     QWidget* const m_autoTypeWidget;
+    QWidget* const m_sshAgentWidget;
     EditWidgetProperties* const m_editWidgetProperties;
     QWidget* const m_historyWidget;
     EntryAttachments* const m_entryAttachments;
diff --git a/src/gui/entry/EditEntryWidgetSSHAgent.ui b/src/gui/entry/EditEntryWidgetSSHAgent.ui
new file mode 100644
index 00000000..2d88327c
--- /dev/null
+++ b/src/gui/entry/EditEntryWidgetSSHAgent.ui
@@ -0,0 +1,207 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<ui version="4.0">
+ <class>EditEntryWidgetSSHAgent</class>
+ <widget class="QWidget" name="EditEntryWidgetSSHAgent">
+  <property name="geometry">
+   <rect>
+    <x>0</x>
+    <y>0</y>
+    <width>471</width>
+    <height>480</height>
+   </rect>
+  </property>
+  <property name="windowTitle">
+   <string>Form</string>
+  </property>
+  <layout class="QGridLayout" name="gridLayout">
+   <property name="leftMargin">
+    <number>0</number>
+   </property>
+   <property name="topMargin">
+    <number>0</number>
+   </property>
+   <property name="rightMargin">
+    <number>0</number>
+   </property>
+   <property name="bottomMargin">
+    <number>0</number>
+   </property>
+   <item row="1" column="1" colspan="4">
+    <widget class="QCheckBox" name="removeKeyFromAgentCheckBox">
+     <property name="text">
+      <string>Remove key from agent when database is closed/locked</string>
+     </property>
+    </widget>
+   </item>
+   <item row="10" column="1">
+    <widget class="QLabel" name="fingerprintLabel">
+     <property name="text">
+      <string>Fingerprint</string>
+     </property>
+     <property name="alignment">
+      <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
+     </property>
+    </widget>
+   </item>
+   <item row="12" column="3" colspan="2">
+    <widget class="QPlainTextEdit" name="publicKeyEdit">
+     <property name="readOnly">
+      <bool>true</bool>
+     </property>
+    </widget>
+   </item>
+   <item row="10" column="3" colspan="2">
+    <widget class="QLineEdit" name="fingerprintEdit">
+     <property name="autoFillBackground">
+      <bool>false</bool>
+     </property>
+     <property name="alignment">
+      <set>Qt::AlignLeading|Qt::AlignLeft|Qt::AlignVCenter</set>
+     </property>
+     <property name="readOnly">
+      <bool>true</bool>
+     </property>
+    </widget>
+   </item>
+   <item row="4" column="1">
+    <widget class="QLabel" name="privateKeyLabel">
+     <property name="text">
+      <string>Private key</string>
+     </property>
+     <property name="alignment">
+      <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
+     </property>
+    </widget>
+   </item>
+   <item row="12" column="1">
+    <widget class="QLabel" name="publicKeyLabel">
+     <property name="text">
+      <string>Public key</string>
+     </property>
+     <property name="alignment">
+      <set>Qt::AlignRight|Qt::AlignTop|Qt::AlignTrailing</set>
+     </property>
+    </widget>
+   </item>
+   <item row="3" column="1" colspan="4">
+    <layout class="QHBoxLayout" name="removeKeyLayout">
+     <item>
+      <widget class="QCheckBox" name="lifetimeCheckBox">
+       <property name="text">
+        <string>Remove key from agent after</string>
+       </property>
+      </widget>
+     </item>
+     <item>
+      <widget class="QSpinBox" name="lifetimeSpinBox">
+       <property name="suffix">
+        <string> seconds</string>
+       </property>
+       <property name="maximum">
+        <number>999999999</number>
+       </property>
+      </widget>
+     </item>
+     <item>
+      <spacer name="removeKeySpacer">
+       <property name="orientation">
+        <enum>Qt::Horizontal</enum>
+       </property>
+       <property name="sizeHint" stdset="0">
+        <size>
+         <width>40</width>
+         <height>20</height>
+        </size>
+       </property>
+      </spacer>
+     </item>
+    </layout>
+   </item>
+   <item row="11" column="1">
+    <widget class="QLabel" name="commentLabel">
+     <property name="text">
+      <string>Comment</string>
+     </property>
+     <property name="alignment">
+      <set>Qt::AlignRight|Qt::AlignTrailing|Qt::AlignVCenter</set>
+     </property>
+    </widget>
+   </item>
+   <item row="0" column="1" colspan="4">
+    <widget class="QCheckBox" name="addKeyToAgentCheckBox">
+     <property name="text">
+      <string>Add key to agent when database is opened/unlocked</string>
+     </property>
+    </widget>
+   </item>
+   <item row="4" column="3">
+    <widget class="QComboBox" name="privateKeyComboBox">
+     <property name="sizePolicy">
+      <sizepolicy hsizetype="Expanding" vsizetype="Fixed">
+       <horstretch>0</horstretch>
+       <verstretch>0</verstretch>
+      </sizepolicy>
+     </property>
+     <property name="editable">
+      <bool>true</bool>
+     </property>
+    </widget>
+   </item>
+   <item row="4" column="4">
+    <widget class="QPushButton" name="browseButton">
+     <property name="text">
+      <string>Browse...</string>
+     </property>
+    </widget>
+   </item>
+   <item row="2" column="1" colspan="4">
+    <widget class="QCheckBox" name="requireUserConfirmationCheckBox">
+     <property name="text">
+      <string>Require user confirmation when this key is used</string>
+     </property>
+    </widget>
+   </item>
+   <item row="13" column="3" colspan="2">
+    <widget class="QPushButton" name="copyToClipboardButton">
+     <property name="text">
+      <string>Copy to clipboard</string>
+     </property>
+    </widget>
+   </item>
+   <item row="6" column="3">
+    <layout class="QHBoxLayout" name="agentActionsLayout" stretch="0,0">
+     <item>
+      <widget class="QPushButton" name="addToAgentButton">
+       <property name="text">
+        <string>Add to agent</string>
+       </property>
+      </widget>
+     </item>
+     <item>
+      <widget class="QPushButton" name="removeFromAgentButton">
+       <property name="text">
+        <string>Remove from agent</string>
+       </property>
+      </widget>
+     </item>
+    </layout>
+   </item>
+   <item row="11" column="3">
+    <widget class="QLineEdit" name="commentEdit">
+     <property name="readOnly">
+      <bool>true</bool>
+     </property>
+    </widget>
+   </item>
+   <item row="11" column="4">
+    <widget class="QPushButton" name="decryptButton">
+     <property name="text">
+      <string>Decrypt</string>
+     </property>
+    </widget>
+   </item>
+  </layout>
+ </widget>
+ <resources/>
+ <connections/>
+</ui>
diff --git a/src/sshagent/AgentSettingsPage.cpp b/src/sshagent/AgentSettingsPage.cpp
new file mode 100644
index 00000000..70fa04bd
--- /dev/null
+++ b/src/sshagent/AgentSettingsPage.cpp
@@ -0,0 +1,58 @@
+/*
+ *  Copyright (C) 2017 Toni Spets <toni.spets@iki.fi>
+ *  Copyright (C) 2017 KeePassXC Team <team@keepassxc.org>
+ *
+ *  This program is free software: you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation, either version 2 or (at your option)
+ *  version 3 of the License.
+ *
+ *  This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#include "AgentSettingsPage.h"
+#include "AgentSettingsWidget.h"
+#include "core/FilePath.h"
+
+AgentSettingsPage::AgentSettingsPage(DatabaseTabWidget* tabWidget)
+{
+    Q_UNUSED(tabWidget);
+}
+
+AgentSettingsPage::~AgentSettingsPage()
+{
+
+}
+
+QString AgentSettingsPage::name()
+{
+    return QObject::tr("SSH Agent");
+}
+
+QIcon AgentSettingsPage::icon()
+{
+    return FilePath::instance()->icon("apps", "utilities-terminal");
+}
+
+QWidget* AgentSettingsPage::createWidget()
+{
+    return new AgentSettingsWidget();
+}
+
+void AgentSettingsPage::loadSettings(QWidget* widget)
+{
+    AgentSettingsWidget* agentWidget = reinterpret_cast<AgentSettingsWidget*>(widget);
+    agentWidget->loadSettings();
+}
+
+void AgentSettingsPage::saveSettings(QWidget* widget)
+{
+    AgentSettingsWidget* agentWidget = reinterpret_cast<AgentSettingsWidget*>(widget);
+    agentWidget->saveSettings();
+}
diff --git a/src/sshagent/AgentSettingsPage.h b/src/sshagent/AgentSettingsPage.h
new file mode 100644
index 00000000..f9d1be3f
--- /dev/null
+++ b/src/sshagent/AgentSettingsPage.h
@@ -0,0 +1,40 @@
+/*
+ *  Copyright (C) 2017 Toni Spets <toni.spets@iki.fi>
+ *  Copyright (C) 2017 KeePassXC Team <team@keepassxc.org>
+ *
+ *  This program is free software: you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation, either version 2 or (at your option)
+ *  version 3 of the License.
+ *
+ *  This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#ifndef AGENTSETTINGSPAGE_H
+#define AGENTSETTINGSPAGE_H
+
+#include "gui/SettingsWidget.h"
+#include "gui/DatabaseTabWidget.h"
+
+class AgentSettingsPage : public ISettingsPage
+{
+public:
+    AgentSettingsPage(DatabaseTabWidget* tabWidget);
+    ~AgentSettingsPage() override;
+
+    QString name() override;
+    QIcon icon() override;
+    QWidget* createWidget() override;
+    void loadSettings(QWidget* widget) override;
+    void saveSettings(QWidget* widget) override;
+
+private:
+};
+
+#endif // AGENTSETTINGSPAGE_H
diff --git a/src/sshagent/AgentSettingsWidget.cpp b/src/sshagent/AgentSettingsWidget.cpp
new file mode 100644
index 00000000..e8bc75ae
--- /dev/null
+++ b/src/sshagent/AgentSettingsWidget.cpp
@@ -0,0 +1,37 @@
+/*
+ *  Copyright (C) 2017 Toni Spets <toni.spets@iki.fi>
+ *  Copyright (C) 2017 KeePassXC Team <team@keepassxc.org>
+ *
+ *  This program is free software: you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation, either version 2 or (at your option)
+ *  version 3 of the License.
+ *
+ *  This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#include "AgentSettingsWidget.h"
+#include "core/Config.h"
+
+AgentSettingsWidget::AgentSettingsWidget(QWidget* parent)
+    : QWidget(parent)
+    , m_ui(new Ui::AgentSettingsWidget())
+{
+    m_ui->setupUi(this);
+}
+
+void AgentSettingsWidget::loadSettings()
+{
+    m_ui->enableSSHAgentCheckBox->setChecked(config()->get("SSHAgent", false).toBool());
+}
+
+void AgentSettingsWidget::saveSettings()
+{
+    config()->set("SSHAgent", m_ui->enableSSHAgentCheckBox->isChecked());
+}
diff --git a/src/sshagent/AgentSettingsWidget.h b/src/sshagent/AgentSettingsWidget.h
new file mode 100644
index 00000000..b6462daa
--- /dev/null
+++ b/src/sshagent/AgentSettingsWidget.h
@@ -0,0 +1,46 @@
+/*
+ *  Copyright (C) 2017 Toni Spets <toni.spets@iki.fi>
+ *  Copyright (C) 2017 KeePassXC Team <team@keepassxc.org>
+ *
+ *  This program is free software: you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation, either version 2 or (at your option)
+ *  version 3 of the License.
+ *
+ *  This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#ifndef AGENTSETTINGSWIDGET_H
+#define AGENTSETTINGSWIDGET_H
+
+#include <QWidget>
+#include <QScopedPointer>
+#include "ui_AgentSettingsWidget.h"
+
+namespace Ui {
+    class AgentSettingsWidget;
+}
+
+class AgentSettingsWidget : public QWidget
+{
+    Q_OBJECT
+public:
+    explicit AgentSettingsWidget(QWidget* parent = nullptr);
+
+signals:
+
+public slots:
+    void loadSettings();
+    void saveSettings();
+
+private:
+    QScopedPointer<Ui::AgentSettingsWidget> m_ui;
+};
+
+#endif // AGENTSETTINGSWIDGET_H
diff --git a/src/sshagent/AgentSettingsWidget.ui b/src/sshagent/AgentSettingsWidget.ui
new file mode 100644
index 00000000..e97ee87b
--- /dev/null
+++ b/src/sshagent/AgentSettingsWidget.ui
@@ -0,0 +1,53 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<ui version="4.0">
+ <class>AgentSettingsWidget</class>
+ <widget class="QWidget" name="AgentSettingsWidget">
+  <property name="geometry">
+   <rect>
+    <x>0</x>
+    <y>0</y>
+    <width>400</width>
+    <height>300</height>
+   </rect>
+  </property>
+  <property name="windowTitle">
+   <string>Form</string>
+  </property>
+  <layout class="QVBoxLayout" name="verticalLayout_3">
+   <property name="leftMargin">
+    <number>0</number>
+   </property>
+   <property name="topMargin">
+    <number>0</number>
+   </property>
+   <property name="rightMargin">
+    <number>0</number>
+   </property>
+   <property name="bottomMargin">
+    <number>0</number>
+   </property>
+   <item>
+    <widget class="QCheckBox" name="enableSSHAgentCheckBox">
+     <property name="text">
+      <string>Enable SSH Agent (requires restart)</string>
+     </property>
+    </widget>
+   </item>
+   <item>
+    <spacer name="verticalSpacer">
+     <property name="orientation">
+      <enum>Qt::Vertical</enum>
+     </property>
+     <property name="sizeHint" stdset="0">
+      <size>
+       <width>20</width>
+       <height>40</height>
+      </size>
+     </property>
+    </spacer>
+   </item>
+  </layout>
+ </widget>
+ <resources/>
+ <connections/>
+</ui>
diff --git a/src/sshagent/BinaryStream.cpp b/src/sshagent/BinaryStream.cpp
new file mode 100644
index 00000000..b9ed236f
--- /dev/null
+++ b/src/sshagent/BinaryStream.cpp
@@ -0,0 +1,219 @@
+/*
+ *  Copyright (C) 2017 Toni Spets <toni.spets@iki.fi>
+ *  Copyright (C) 2017 KeePassXC Team <team@keepassxc.org>
+ *
+ *  This program is free software: you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation, either version 2 or (at your option)
+ *  version 3 of the License.
+ *
+ *  This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#include "BinaryStream.h"
+#include <QtEndian>
+
+BinaryStream::BinaryStream(QObject* parent)
+    : QObject(parent)
+    , m_timeout(-1)
+{
+
+}
+
+BinaryStream::BinaryStream(QIODevice* device)
+    : QObject(device)
+    , m_timeout(-1)
+    , m_device(device)
+{
+
+}
+
+BinaryStream::BinaryStream(QByteArray* ba, QObject* parent)
+    : QObject(parent)
+    , m_timeout(-1)
+{
+    setData(ba);
+}
+
+BinaryStream::~BinaryStream()
+{
+}
+
+const QString BinaryStream::errorString() const
+{
+    return m_error;
+}
+
+QIODevice* BinaryStream::device() const
+{
+    return m_device;
+}
+
+void BinaryStream::setDevice(QIODevice* device)
+{
+    m_device = device;
+}
+
+void BinaryStream::setData(QByteArray* ba)
+{
+    m_buffer.reset(new QBuffer(ba));
+    m_buffer->open(QIODevice::ReadWrite);
+
+    m_device = m_buffer.data();
+}
+
+void BinaryStream::setTimeout(int timeout)
+{
+    m_timeout = timeout;
+}
+
+bool BinaryStream::read(char* ptr, qint64 size)
+{
+    qint64 pos = 0;
+
+    while (pos < size) {
+        if (m_device->bytesAvailable() == 0) {
+            if (!m_device->waitForReadyRead(m_timeout)) {
+                m_error = m_device->errorString();
+                return false;
+            }
+        }
+
+        qint64 nread = m_device->read(ptr + pos, size - pos);
+
+        if (nread == -1) {
+            m_error = m_device->errorString();
+            return false;
+        }
+
+        pos += nread;
+    }
+
+    return true;
+}
+
+bool BinaryStream::read(QByteArray& ba)
+{
+    return read(ba.data(), ba.length());
+}
+
+bool BinaryStream::read(quint32& i)
+{
+    if (read(reinterpret_cast<char *>(&i), sizeof(i))) {
+        i = qFromBigEndian<quint32>(i);
+        return true;
+    }
+
+    return false;
+}
+
+bool BinaryStream::read(quint16& i)
+{
+    if (read(reinterpret_cast<char *>(&i), sizeof(i))) {
+        i = qFromBigEndian<quint16>(i);
+        return true;
+    }
+
+    return false;
+}
+
+bool BinaryStream::read(quint8& i)
+{
+    return read(reinterpret_cast<char *>(&i), sizeof(i));
+}
+
+bool BinaryStream::readString(QByteArray& ba)
+{
+   quint32 length;
+
+   if (!read(length)) {
+       return false;
+   }
+
+   ba.resize(length);
+
+   if (!read(ba.data(), ba.length())) {
+       return false;
+   }
+
+   return true;
+}
+
+bool BinaryStream::readString(QString& str)
+{
+    QByteArray ba;
+
+    if (!readString(ba)) {
+        return false;
+    }
+
+    str = str.fromLatin1(ba);
+    return true;
+}
+
+
+bool BinaryStream::write(const char* ptr, qint64 size)
+{
+    if (m_device->write(ptr, size) < 0) {
+        m_error = m_device->errorString();
+        return false;
+    }
+
+    return true;
+}
+
+bool BinaryStream::flush()
+{
+    if (!m_device->waitForBytesWritten(m_timeout)) {
+        m_error = m_device->errorString();
+        return false;
+    }
+
+    return true;
+}
+
+bool BinaryStream::write(const QByteArray& ba)
+{
+    return write(ba.data(), ba.length());
+}
+
+bool BinaryStream::write(quint32 i)
+{
+    i = qToBigEndian<quint32>(i);
+    return write(reinterpret_cast<char *>(&i), sizeof(i));
+}
+
+bool BinaryStream::write(quint16 i)
+{
+    i = qToBigEndian<quint16>(i);
+    return write(reinterpret_cast<char *>(&i), sizeof(i));
+}
+
+bool BinaryStream::write(quint8 i)
+{
+    return write(reinterpret_cast<char *>(&i), sizeof(i));
+}
+
+bool BinaryStream::writeString(const QByteArray& ba)
+{
+    if (!write(static_cast<quint32>(ba.length()))) {
+        return false;
+    }
+
+    if (!write(ba)) {
+        return false;
+    }
+
+    return true;
+}
+
+bool BinaryStream::writeString(const QString& s)
+{
+    return writeString(s.toLatin1());
+}
diff --git a/src/sshagent/BinaryStream.h b/src/sshagent/BinaryStream.h
new file mode 100644
index 00000000..c6101018
--- /dev/null
+++ b/src/sshagent/BinaryStream.h
@@ -0,0 +1,68 @@
+/*
+ *  Copyright (C) 2017 Toni Spets <toni.spets@iki.fi>
+ *  Copyright (C) 2017 KeePassXC Team <team@keepassxc.org>
+ *
+ *  This program is free software: you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation, either version 2 or (at your option)
+ *  version 3 of the License.
+ *
+ *  This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#ifndef BINARYSTREAM_H
+#define BINARYSTREAM_H
+
+#include <QObject>
+#include <QIODevice>
+#include <QBuffer>
+
+class BinaryStream : QObject
+{
+    Q_OBJECT
+public:
+    BinaryStream(QObject* parent = nullptr);
+    BinaryStream(QIODevice* device);
+    BinaryStream(QByteArray* ba, QObject* parent = nullptr);
+    ~BinaryStream();
+
+    const QString errorString() const;
+    QIODevice* device() const;
+    void setDevice(QIODevice* device);
+    void setData(QByteArray* ba);
+    void setTimeout(int timeout);
+
+    bool read(QByteArray& ba);
+    bool read(quint32& i);
+    bool read(quint16& i);
+    bool read(quint8& i);
+    bool readString(QByteArray& ba);
+    bool readString(QString& s);
+
+    bool write(const QByteArray& ba);
+    bool write(quint32 i);
+    bool write(quint16 i);
+    bool write(quint8 i);
+    bool writeString(const QByteArray& ba);
+    bool writeString(const QString& s);
+
+    bool flush();
+
+protected:
+    bool read(char* ptr, qint64 len);
+    bool write(const char* ptr, qint64 len);
+
+private:
+    int m_timeout;
+    QString m_error;
+    QIODevice* m_device;
+    QScopedPointer<QBuffer> m_buffer;
+};
+
+#endif // BINARYSTREAM_H
diff --git a/src/sshagent/CMakeLists.txt b/src/sshagent/CMakeLists.txt
new file mode 100644
index 00000000..1733e21b
--- /dev/null
+++ b/src/sshagent/CMakeLists.txt
@@ -0,0 +1,15 @@
+if(WITH_XC_SSHAGENT)
+    set(sshagent_SOURCES
+        bcrypt_pbkdf.cpp
+        blowfish.c
+        AgentSettingsPage.cpp
+        AgentSettingsWidget.cpp
+        BinaryStream.cpp
+        KeeAgentSettings.cpp
+        OpenSSHKey.cpp
+        SSHAgent.cpp
+    )
+
+    add_library(sshagent STATIC ${sshagent_SOURCES})
+    target_link_libraries(sshagent Qt5::Core Qt5::Widgets Qt5::Network ${GCRYPT_LIBRARIES})
+endif()
diff --git a/src/sshagent/KeeAgentSettings.cpp b/src/sshagent/KeeAgentSettings.cpp
new file mode 100644
index 00000000..218e98ac
--- /dev/null
+++ b/src/sshagent/KeeAgentSettings.cpp
@@ -0,0 +1,278 @@
+/*
+ *  Copyright (C) 2017 Toni Spets <toni.spets@iki.fi>
+ *  Copyright (C) 2017 KeePassXC Team <team@keepassxc.org>
+ *
+ *  This program is free software: you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation, either version 2 or (at your option)
+ *  version 3 of the License.
+ *
+ *  This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#include "KeeAgentSettings.h"
+
+KeeAgentSettings::KeeAgentSettings()
+    : m_allowUseOfSshKey(false)
+    , m_addAtDatabaseOpen(false)
+    , m_removeAtDatabaseClose(false)
+    , m_useConfirmConstraintWhenAdding(false)
+    , m_useLifetimeConstraintWhenAdding(false)
+    , m_lifetimeConstraintDuration(600)
+    , m_selectedType(QString("file"))
+    , m_attachmentName(QString())
+    , m_saveAttachmentToTempFile(false)
+    , m_fileName(QString())
+{
+
+}
+
+bool KeeAgentSettings::operator==(KeeAgentSettings& other)
+{
+    return (m_allowUseOfSshKey == other.m_allowUseOfSshKey
+            && m_addAtDatabaseOpen == other.m_addAtDatabaseOpen
+            && m_removeAtDatabaseClose == other.m_removeAtDatabaseClose
+            && m_useConfirmConstraintWhenAdding == other.m_useConfirmConstraintWhenAdding
+            && m_useLifetimeConstraintWhenAdding == other.m_useLifetimeConstraintWhenAdding
+            && m_lifetimeConstraintDuration == other.m_lifetimeConstraintDuration
+            && m_selectedType == other.m_selectedType
+            && m_attachmentName == other.m_attachmentName
+            && m_saveAttachmentToTempFile == other.m_saveAttachmentToTempFile
+            && m_fileName == other.m_fileName);
+}
+
+bool KeeAgentSettings::operator!=(KeeAgentSettings& other)
+{
+    return !(*this == other);
+}
+
+bool KeeAgentSettings::isDefault()
+{
+    KeeAgentSettings defaultSettings;
+    return (*this == defaultSettings);
+}
+
+bool KeeAgentSettings::allowUseOfSshKey() const
+{
+    return m_allowUseOfSshKey;
+}
+
+bool KeeAgentSettings::addAtDatabaseOpen() const
+{
+    return m_addAtDatabaseOpen;
+}
+
+bool KeeAgentSettings::removeAtDatabaseClose() const
+{
+    return m_removeAtDatabaseClose;
+}
+
+bool KeeAgentSettings::useConfirmConstraintWhenAdding() const
+{
+    return m_useConfirmConstraintWhenAdding;
+}
+
+bool KeeAgentSettings::useLifetimeConstraintWhenAdding() const
+{
+    return m_useLifetimeConstraintWhenAdding;
+}
+
+int KeeAgentSettings::lifetimeConstraintDuration() const
+{
+    return m_lifetimeConstraintDuration;
+}
+
+const QString KeeAgentSettings::selectedType() const
+{
+    return m_selectedType;
+}
+
+const QString KeeAgentSettings::attachmentName() const
+{
+    return m_attachmentName;
+}
+
+bool KeeAgentSettings::saveAttachmentToTempFile() const
+{
+    return m_saveAttachmentToTempFile;
+}
+
+const QString KeeAgentSettings::fileName() const
+{
+    return m_fileName;
+}
+
+void KeeAgentSettings::setAllowUseOfSshKey(bool allowUseOfSshKey)
+{
+    m_allowUseOfSshKey = allowUseOfSshKey;
+}
+
+void KeeAgentSettings::setAddAtDatabaseOpen(bool addAtDatabaseOpen)
+{
+    m_addAtDatabaseOpen = addAtDatabaseOpen;
+}
+
+void KeeAgentSettings::setRemoveAtDatabaseClose(bool removeAtDatabaseClose)
+{
+    m_removeAtDatabaseClose = removeAtDatabaseClose;
+}
+
+void KeeAgentSettings::setUseConfirmConstraintWhenAdding(bool useConfirmConstraintWhenAdding)
+{
+    m_useConfirmConstraintWhenAdding = useConfirmConstraintWhenAdding;
+}
+
+void KeeAgentSettings::setUseLifetimeConstraintWhenAdding(bool useLifetimeConstraintWhenAdding)
+{
+    m_useLifetimeConstraintWhenAdding = useLifetimeConstraintWhenAdding;
+}
+
+void KeeAgentSettings::setLifetimeConstraintDuration(int lifetimeConstraintDuration)
+{
+    m_lifetimeConstraintDuration = lifetimeConstraintDuration;
+}
+
+void KeeAgentSettings::setSelectedType(const QString& selectedType)
+{
+    m_selectedType = selectedType;
+}
+
+void KeeAgentSettings::setAttachmentName(const QString& attachmentName)
+{
+    m_attachmentName = attachmentName;
+}
+
+void KeeAgentSettings::setSaveAttachmentToTempFile(bool saveAttachmentToTempFile)
+{
+    m_saveAttachmentToTempFile = saveAttachmentToTempFile;
+}
+
+void KeeAgentSettings::setFileName(const QString& fileName)
+{
+    m_fileName = fileName;
+}
+
+bool KeeAgentSettings::readBool(QXmlStreamReader& reader)
+{
+    reader.readNext();
+    bool ret = (reader.text().startsWith("t", Qt::CaseInsensitive));
+    reader.readNext(); // tag end
+    return ret;
+}
+
+int KeeAgentSettings::readInt(QXmlStreamReader& reader)
+{
+    reader.readNext();
+    int ret = reader.text().toInt();
+    reader.readNext(); // tag end
+    return ret;
+}
+
+bool KeeAgentSettings::fromXml(const QByteArray& ba)
+{
+    QXmlStreamReader reader;
+    reader.addData(ba);
+
+    if (reader.error() || !reader.readNextStartElement()) {
+        return false;
+    }
+
+    if (reader.qualifiedName() != "EntrySettings") {
+        return false;
+    }
+
+    while (!reader.error() && reader.readNextStartElement()) {
+        if (reader.name() == "AllowUseOfSshKey") {
+            m_allowUseOfSshKey = readBool(reader);
+        } else if (reader.name() == "AddAtDatabaseOpen") {
+            m_addAtDatabaseOpen = readBool(reader);
+        } else if (reader.name() == "RemoveAtDatabaseClose") {
+            m_removeAtDatabaseClose = readBool(reader);
+        } else if (reader.name() == "UseConfirmConstraintWhenAdding") {
+            m_useConfirmConstraintWhenAdding = readBool(reader);
+        } else if (reader.name() == "UseLifetimeConstraintWhenAdding") {
+            m_useLifetimeConstraintWhenAdding = readBool(reader);
+        } else if (reader.name() == "LifetimeConstraintDuration") {
+            m_lifetimeConstraintDuration = readInt(reader);
+        } else if (reader.name() == "Location") {
+            while (!reader.error() && reader.readNextStartElement()) {
+                if (reader.name() == "SelectedType") {
+                    reader.readNext();
+                    m_selectedType = reader.text().toString();
+                    reader.readNext();
+                } else if (reader.name() == "AttachmentName") {
+                    reader.readNext();
+                    m_attachmentName = reader.text().toString();
+                    reader.readNext();
+                } else if (reader.name() == "SaveAttachmentToTempFile") {
+                    m_saveAttachmentToTempFile = readBool(reader);
+                } else if (reader.name() == "FileName") {
+                    reader.readNext();
+                    m_fileName = reader.text().toString();
+                    reader.readNext();
+                } else {
+                    qWarning() << "Skipping location element" << reader.name();
+                    reader.skipCurrentElement();
+                }
+            }
+        } else {
+            qWarning() << "Skipping element" << reader.name();
+            reader.skipCurrentElement();
+        }
+    }
+
+    return true;
+}
+
+QByteArray KeeAgentSettings::toXml()
+{
+    QByteArray ba;
+    QXmlStreamWriter writer(&ba);
+
+    // real KeeAgent can only read UTF-16
+    writer.setCodec(QTextCodec::codecForName("UTF-16"));
+    writer.setAutoFormatting(true);
+    writer.setAutoFormattingIndent(2);
+
+    writer.writeStartDocument();
+
+    writer.writeStartElement("EntrySettings");
+    writer.writeAttribute("xmlns:xsd", "http://www.w3.org/2001/XMLSchema");
+    writer.writeAttribute("xmlns:xsi", "http://www.w3.org/2001/XMLSchema-instance");
+
+    writer.writeTextElement("AllowUseOfSshKey", m_allowUseOfSshKey ? "true" : "false");
+    writer.writeTextElement("AddAtDatabaseOpen", m_addAtDatabaseOpen ? "true" : "false");
+    writer.writeTextElement("RemoveAtDatabaseClose", m_removeAtDatabaseClose ? "true" : "false");
+    writer.writeTextElement("UseConfirmConstraintWhenAdding", m_useConfirmConstraintWhenAdding ? "true" : "false");
+    writer.writeTextElement("UseLifetimeConstraintWhenAdding", m_useLifetimeConstraintWhenAdding ? "true" : "false");
+    writer.writeTextElement("LifetimeConstraintDuration", QString::number(m_lifetimeConstraintDuration));
+
+    writer.writeStartElement("Location");
+    writer.writeTextElement("SelectedType", m_selectedType);
+
+    if (!m_attachmentName.isEmpty()) {
+        writer.writeTextElement("AttachmentName", m_attachmentName);
+    } else {
+        writer.writeEmptyElement("AttachmentName");
+    }
+
+    writer.writeTextElement("SaveAttachmentToTempFile", m_saveAttachmentToTempFile ? "true" : "false");
+
+    if (!m_fileName.isEmpty()) {
+        writer.writeTextElement("FileName", m_fileName);
+    } else {
+        writer.writeEmptyElement("FileName");
+    }
+
+    writer.writeEndElement(); // Location
+    writer.writeEndElement(); // EntrySettings
+    writer.writeEndDocument();
+
+    return ba;
+}
diff --git a/src/sshagent/KeeAgentSettings.h b/src/sshagent/KeeAgentSettings.h
new file mode 100644
index 00000000..4022750d
--- /dev/null
+++ b/src/sshagent/KeeAgentSettings.h
@@ -0,0 +1,79 @@
+/*
+ *  Copyright (C) 2017 Toni Spets <toni.spets@iki.fi>
+ *  Copyright (C) 2017 KeePassXC Team <team@keepassxc.org>
+ *
+ *  This program is free software: you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation, either version 2 or (at your option)
+ *  version 3 of the License.
+ *
+ *  This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#ifndef KEEAGENTSETTINGS_H
+#define KEEAGENTSETTINGS_H
+
+#include <QtCore>
+#include <QXmlStreamReader>
+
+class KeeAgentSettings
+{
+public:
+    KeeAgentSettings();
+
+    bool operator==(KeeAgentSettings& other);
+    bool operator!=(KeeAgentSettings& other);
+    bool isDefault();
+
+    bool fromXml(const QByteArray &ba);
+    QByteArray toXml();
+
+    bool allowUseOfSshKey() const;
+    bool addAtDatabaseOpen() const;
+    bool removeAtDatabaseClose() const;
+    bool useConfirmConstraintWhenAdding() const;
+    bool useLifetimeConstraintWhenAdding() const;
+    int lifetimeConstraintDuration() const;
+
+    const QString selectedType() const;
+    const QString attachmentName() const;
+    bool saveAttachmentToTempFile() const;
+    const QString fileName() const;
+
+    void setAllowUseOfSshKey(bool allowUseOfSshKey);
+    void setAddAtDatabaseOpen(bool addAtDatabaseOpen);
+    void setRemoveAtDatabaseClose(bool removeAtDatabaseClose);
+    void setUseConfirmConstraintWhenAdding(bool useConfirmConstraintWhenAdding);
+    void setUseLifetimeConstraintWhenAdding(bool useLifetimeConstraintWhenAdding);
+    void setLifetimeConstraintDuration(int lifetimeConstraintDuration);
+
+    void setSelectedType(const QString& type);
+    void setAttachmentName(const QString& attachmentName);
+    void setSaveAttachmentToTempFile(bool);
+    void setFileName(const QString& fileName);
+
+private:
+    bool readBool(QXmlStreamReader& reader);
+    int readInt(QXmlStreamReader& reader);
+
+    bool m_allowUseOfSshKey;
+    bool m_addAtDatabaseOpen;
+    bool m_removeAtDatabaseClose;
+    bool m_useConfirmConstraintWhenAdding;
+    bool m_useLifetimeConstraintWhenAdding;
+    int m_lifetimeConstraintDuration;
+
+    // location
+    QString m_selectedType;
+    QString m_attachmentName;
+    bool m_saveAttachmentToTempFile;
+    QString m_fileName;
+};
+
+#endif // KEEAGENTSETTINGS_H
diff --git a/src/sshagent/OpenSSHKey.cpp b/src/sshagent/OpenSSHKey.cpp
new file mode 100644
index 00000000..2c51ee45
--- /dev/null
+++ b/src/sshagent/OpenSSHKey.cpp
@@ -0,0 +1,486 @@
+/*
+ *  Copyright (C) 2017 Toni Spets <toni.spets@iki.fi>
+ *  Copyright (C) 2017 KeePassXC Team <team@keepassxc.org>
+ *
+ *  This program is free software: you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation, either version 2 or (at your option)
+ *  version 3 of the License.
+ *
+ *  This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#include "OpenSSHKey.h"
+#include <QRegularExpression>
+#include <QStringList>
+#include <QCryptographicHash>
+#include "crypto/SymmetricCipher.h"
+
+// bcrypt_pbkdf.cpp
+int bcrypt_pbkdf(const QByteArray& pass, const QByteArray& salt, QByteArray& key, quint32 rounds);
+
+OpenSSHKey::OpenSSHKey(QObject *parent)
+    : QObject(parent)
+    , m_type(QString())
+    , m_cipherName(QString("none"))
+    , m_kdfName(QString("none"))
+    , m_kdfOptions(QByteArray())
+    , m_rawPrivateData(QByteArray())
+    , m_publicData(QList<QByteArray>())
+    , m_privateData(QList<QByteArray>())
+    , m_comment(QString())
+    , m_error(QString())
+{
+
+}
+
+OpenSSHKey::OpenSSHKey(const OpenSSHKey& other)
+    : QObject(nullptr)
+    , m_type(other.m_type)
+    , m_cipherName(other.m_cipherName)
+    , m_kdfName(other.m_kdfName)
+    , m_kdfOptions(other.m_kdfOptions)
+    , m_rawPrivateData(other.m_rawPrivateData)
+    , m_publicData(other.m_publicData)
+    , m_privateData(other.m_privateData)
+    , m_comment(other.m_comment)
+    , m_error(other.m_error)
+{
+
+}
+
+bool OpenSSHKey::operator==(const OpenSSHKey& other) const
+{
+    // close enough for now
+    return (fingerprint() == other.fingerprint());
+}
+
+const QString OpenSSHKey::cipherName() const
+{
+    return m_cipherName;
+}
+
+const QString OpenSSHKey::type() const
+{
+    return m_type;
+}
+
+int OpenSSHKey::keyLength() const
+{
+    if (m_type == "ssh-dss" && m_publicData.length() == 4) {
+        return (m_publicData[0].length() - 1) * 8;
+    } else if (m_type == "ssh-rsa" && m_publicData.length() == 2) {
+        return (m_publicData[1].length() - 1) * 8;
+    } else if (m_type.startsWith("ecdsa-sha2-") && m_publicData.length() == 2) {
+        return (m_publicData[1].length() - 1) * 4;
+    } else if (m_type == "ssh-ed25519" && m_publicData.length() == 1) {
+        return m_publicData[0].length() * 8;
+    }
+
+    return 0;
+}
+
+const QString OpenSSHKey::fingerprint() const
+{
+    QByteArray publicKey;
+    BinaryStream stream(&publicKey);
+
+    stream.writeString(m_type);
+
+    for (QByteArray ba : m_publicData) {
+        stream.writeString(ba);
+    }
+
+    QByteArray rawHash = QCryptographicHash::hash(publicKey, QCryptographicHash::Sha256);
+
+    return "SHA256:" + QString::fromLatin1(rawHash.toBase64(QByteArray::OmitTrailingEquals));
+}
+
+const QString OpenSSHKey::comment() const
+{
+    return m_comment;
+}
+
+const QString OpenSSHKey::publicKey() const
+{
+    QByteArray publicKey;
+    BinaryStream stream(&publicKey);
+
+    stream.writeString(m_type);
+
+    for (QByteArray ba : m_publicData) {
+        stream.writeString(ba);
+    }
+
+    return m_type + " " + QString::fromLatin1(publicKey.toBase64()) + " " + m_comment;
+}
+
+const QString OpenSSHKey::errorString() const
+{
+    return m_error;
+}
+
+void OpenSSHKey::setType(const QString& type)
+{
+    m_type = type;
+}
+
+void OpenSSHKey::setPublicData(const QList<QByteArray>& data)
+{
+    m_publicData = data;
+}
+
+void OpenSSHKey::setPrivateData(const QList<QByteArray>& data)
+{
+    m_privateData = data;
+}
+
+void OpenSSHKey::setComment(const QString& comment)
+{
+    m_comment = comment;
+}
+
+void OpenSSHKey::clearPrivate()
+{
+    m_rawPrivateData.clear();
+    m_privateData.clear();
+}
+
+bool OpenSSHKey::parsePEM(const QByteArray& in, QByteArray& out)
+{
+    QString pem = QString::fromLatin1(in);
+    QStringList rows = pem.split(QRegularExpression("(?:\r?\n|\r)"), QString::SkipEmptyParts);
+
+    if (rows.length() < 3) {
+        m_error = tr("Invalid key file, expecting an OpenSSH key");
+        return false;
+    }
+
+    QString begin = rows.first();
+    QString end = rows.last();
+
+    QRegularExpressionMatch beginMatch = QRegularExpression("^-----BEGIN ([^\\-]+)-----$").match(begin);
+    QRegularExpressionMatch endMatch = QRegularExpression("^-----END ([^\\-]+)-----$").match(end);
+
+    if (!beginMatch.hasMatch() || !endMatch.hasMatch()) {
+        m_error = tr("Invalid key file, expecting an OpenSSH key");
+        return false;
+    }
+
+    if (beginMatch.captured(1) != endMatch.captured(1)) {
+        m_error = tr("PEM boundary mismatch");
+        return false;
+    }
+
+    if (beginMatch.captured(1) != "OPENSSH PRIVATE KEY") {
+        m_error = tr("This is not an OpenSSH key, only modern keys are supported");
+        return false;
+    }
+
+    rows.removeFirst();
+    rows.removeLast();
+
+    out = QByteArray::fromBase64(rows.join("").toLatin1());
+
+    if (out.isEmpty()) {
+        m_error = tr("Base64 decoding failed");
+        return false;
+    }
+
+    return true;
+}
+
+bool OpenSSHKey::parse(const QByteArray& in)
+{
+    QByteArray data;
+
+    if (!parsePEM(in, data)) {
+        return false;
+    }
+
+    BinaryStream stream(&data);
+
+    QByteArray magic;
+    magic.resize(15);
+
+    if (!stream.read(magic)) {
+        m_error = tr("Key file way too small.");
+        return false;
+    }
+
+    if (QString::fromLatin1(magic) != "openssh-key-v1") {
+        m_error = tr("Key file magic header id invalid");
+        return false;
+    }
+
+    stream.readString(m_cipherName);
+    stream.readString(m_kdfName);
+    stream.readString(m_kdfOptions);
+
+    quint32 numberOfKeys;
+    stream.read(numberOfKeys);
+
+    if (numberOfKeys == 0) {
+        m_error = tr("Found zero keys");
+        return false;
+    }
+
+    for (quint32 i = 0; i < numberOfKeys; ++i) {
+        QByteArray publicKey;
+        if (!stream.readString(publicKey)) {
+            m_error = tr("Failed to read public key.");
+            return false;
+        }
+
+        if (i == 0) {
+            BinaryStream publicStream(&publicKey);
+            if (!readPublic(publicStream)) {
+                return false;
+            }
+        }
+    }
+
+    // padded list of keys
+    if (!stream.readString(m_rawPrivateData)) {
+        m_error = tr("Corrupted key file, reading private key failed");
+        return false;
+    }
+
+    // load private if no encryption
+    if (!encrypted()) {
+        return openPrivateKey();
+    }
+
+    return true;
+}
+
+bool OpenSSHKey::encrypted() const
+{
+    return (m_cipherName != "none");
+}
+
+bool OpenSSHKey::openPrivateKey(const QString& passphrase)
+{
+    QScopedPointer<SymmetricCipher> cipher;
+
+    if (!m_privateData.isEmpty()) {
+        return true;
+    }
+
+    if (m_rawPrivateData.isEmpty()) {
+        m_error = tr("No private key payload to decrypt");
+        return false;
+    }
+
+    if (m_cipherName == "aes256-cbc") {
+        cipher.reset(new SymmetricCipher(SymmetricCipher::Aes256, SymmetricCipher::Cbc, SymmetricCipher::Decrypt));
+    } else if (m_cipherName == "aes256-ctr") {
+        cipher.reset(new SymmetricCipher(SymmetricCipher::Aes256, SymmetricCipher::Ctr, SymmetricCipher::Decrypt));
+    } else if (m_cipherName != "none") {
+        m_error = tr("Unknown cipher: ") + m_cipherName;
+        return false;
+    }
+
+    if (m_kdfName == "bcrypt") {
+        if (!cipher) {
+            m_error = tr("Trying to run KDF without cipher");
+            return false;
+        }
+
+        if (passphrase.length() == 0) {
+            m_error = tr("Passphrase is required to decrypt this key");
+            return false;
+        }
+
+        BinaryStream optionStream(&m_kdfOptions);
+
+        QByteArray salt;
+        quint32 rounds;
+
+        optionStream.readString(salt);
+        optionStream.read(rounds);
+
+        QByteArray decryptKey;
+        decryptKey.fill(0, cipher->keySize() + cipher->blockSize());
+
+        QByteArray phraseData = passphrase.toLatin1();
+        if (bcrypt_pbkdf(phraseData, salt, decryptKey, rounds) < 0) {
+            m_error = tr("Key derivation failed, key file corrupted?");
+            return false;
+        }
+
+        QByteArray keyData, ivData;
+        keyData.setRawData(decryptKey.data(), cipher->keySize());
+        ivData.setRawData(decryptKey.data() + cipher->keySize(), cipher->blockSize());
+
+        cipher->init(keyData, ivData);
+    } else if (m_kdfName != "none") {
+        m_error = tr("Unknown KDF: ") + m_kdfName;
+        return false;
+    }
+
+    QByteArray rawPrivateData = m_rawPrivateData;
+
+    if (cipher && cipher->isInitalized()) {
+        bool ok = false;
+        rawPrivateData = cipher->process(rawPrivateData, &ok);
+        if (!ok) {
+            m_error = tr("Decryption failed, wrong passphrase?");
+            return false;
+        }
+    }
+
+    BinaryStream keyStream(&rawPrivateData);
+
+    quint32 checkInt1;
+    quint32 checkInt2;
+
+    keyStream.read(checkInt1);
+    keyStream.read(checkInt2);
+
+    if (checkInt1 != checkInt2) {
+        m_error = tr("Decryption failed, wrong passphrase?");
+        return false;
+    }
+
+    return readPrivate(keyStream);
+}
+
+bool OpenSSHKey::readPublic(BinaryStream& stream)
+{
+    m_publicData.clear();
+
+    if (!stream.readString(m_type)) {
+        m_error = tr("Unexpected EOF while reading public key");
+        return false;
+    }
+
+    int keyParts;
+    if (m_type == "ssh-dss") {
+        keyParts = 4;
+    } else if (m_type == "ssh-rsa") {
+        keyParts = 2;
+    } else if (m_type.startsWith("ecdsa-sha2-")) {
+        keyParts = 2;
+    } else if (m_type == "ssh-ed25519") {
+        keyParts = 1;
+    } else {
+        m_error = tr("Unknown key type: ") + m_type;
+        return false;
+    }
+
+    for (int i = 0; i < keyParts; ++i) {
+        QByteArray t;
+
+        if (!stream.readString(t)) {
+            m_error = tr("Unexpected EOF while reading public key");
+            return false;
+        }
+
+        m_publicData.append(t);
+    }
+
+    return true;
+}
+
+bool OpenSSHKey::readPrivate(BinaryStream& stream)
+{
+    m_privateData.clear();
+
+    if (!stream.readString(m_type)) {
+        m_error = tr("Unexpected EOF while reading private key");
+        return false;
+    }
+
+    int keyParts;
+    if (m_type == "ssh-dss") {
+        keyParts = 5;
+    } else if (m_type == "ssh-rsa") {
+        keyParts = 6;
+    } else if (m_type.startsWith("ecdsa-sha2-")) {
+        keyParts = 3;
+    } else if (m_type == "ssh-ed25519") {
+        keyParts = 2;
+    } else {
+        m_error = tr("Unknown key type: ") + m_type;
+        return false;
+    }
+
+    for (int i = 0; i < keyParts; ++i) {
+        QByteArray t;
+
+        if (!stream.readString(t)) {
+            m_error = tr("Unexpected EOF while reading private key");
+            return false;
+        }
+
+        m_privateData.append(t);
+    }
+
+    if (!stream.readString(m_comment)) {
+        m_error = tr("Unexpected EOF while reading private key");
+        return false;
+    }
+
+    return true;
+}
+
+bool OpenSSHKey::writePublic(BinaryStream& stream)
+{
+    if (m_publicData.isEmpty()) {
+        m_error = tr("Can't write public key as it is empty");
+        return false;
+    }
+
+    if (!stream.writeString(m_type)) {
+        m_error = tr("Unexpected EOF when writing public key");
+        return false;
+    }
+
+    for (QByteArray t : m_publicData) {
+        if (!stream.writeString(t)) {
+            m_error = tr("Unexpected EOF when writing public key");
+            return false;
+        }
+    }
+
+    return true;
+}
+
+bool OpenSSHKey::writePrivate(BinaryStream& stream)
+{
+    if (m_privateData.isEmpty()) {
+        m_error = tr("Can't write private key as it is empty");
+        return false;
+    }
+
+    if (!stream.writeString(m_type)) {
+        m_error = tr("Unexpected EOF when writing private key");
+        return false;
+    }
+
+    for (QByteArray t : m_privateData) {
+        if (!stream.writeString(t)) {
+            m_error = tr("Unexpected EOF when writing private key");
+            return false;
+        }
+    }
+
+    if (!stream.writeString(m_comment)) {
+        m_error = tr("Unexpected EOF when writing private key");
+        return false;
+    }
+
+    return true;
+}
+
+uint qHash(const OpenSSHKey& key)
+{
+    return qHash(key.fingerprint());
+}
diff --git a/src/sshagent/OpenSSHKey.h b/src/sshagent/OpenSSHKey.h
new file mode 100644
index 00000000..eca6c9ed
--- /dev/null
+++ b/src/sshagent/OpenSSHKey.h
@@ -0,0 +1,73 @@
+/*
+ *  Copyright (C) 2017 Toni Spets <toni.spets@iki.fi>
+ *  Copyright (C) 2017 KeePassXC Team <team@keepassxc.org>
+ *
+ *  This program is free software: you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation, either version 2 or (at your option)
+ *  version 3 of the License.
+ *
+ *  This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#ifndef OPENSSHKEY_H
+#define OPENSSHKEY_H
+
+#include <QtCore>
+#include "BinaryStream.h"
+
+class OpenSSHKey : QObject
+{
+    Q_OBJECT
+public:
+    explicit OpenSSHKey(QObject* parent = nullptr);
+    OpenSSHKey(const OpenSSHKey& other);
+    bool operator==(const OpenSSHKey& other) const;
+
+    bool parse(const QByteArray& in);
+    bool encrypted() const;
+    bool openPrivateKey(const QString& passphrase = QString());
+
+    const QString cipherName() const;
+    const QString type() const;
+    int keyLength() const;
+    const QString fingerprint() const;
+    const QString comment() const;
+    const QString publicKey() const;
+    const QString errorString() const;
+
+    void setType(const QString& type);
+    void setPublicData(const QList<QByteArray>& data);
+    void setPrivateData(const QList<QByteArray>& data);
+    void setComment(const QString& comment);
+
+    void clearPrivate();
+
+    bool readPublic(BinaryStream& stream);
+    bool readPrivate(BinaryStream& stream);
+    bool writePublic(BinaryStream& stream);
+    bool writePrivate(BinaryStream& stream);
+
+private:
+    bool parsePEM(const QByteArray& in, QByteArray& out);
+
+    QString m_type;
+    QString m_cipherName;
+    QString m_kdfName;
+    QByteArray m_kdfOptions;
+    QByteArray m_rawPrivateData;
+    QList<QByteArray> m_publicData;
+    QList<QByteArray> m_privateData;
+    QString m_comment;
+    QString m_error;
+};
+
+uint qHash(const OpenSSHKey& key);
+
+#endif // OPENSSHKEY_H
diff --git a/src/sshagent/SSHAgent.cpp b/src/sshagent/SSHAgent.cpp
new file mode 100644
index 00000000..a398eb4b
--- /dev/null
+++ b/src/sshagent/SSHAgent.cpp
@@ -0,0 +1,272 @@
+/*
+ *  Copyright (C) 2017 Toni Spets <toni.spets@iki.fi>
+ *  Copyright (C) 2017 KeePassXC Team <team@keepassxc.org>
+ *
+ *  This program is free software: you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation, either version 2 or (at your option)
+ *  version 3 of the License.
+ *
+ *  This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#include "SSHAgent.h"
+#include "BinaryStream.h"
+#include "KeeAgentSettings.h"
+
+#ifndef Q_OS_WIN
+#include <QtNetwork>
+#else
+#include <windows.h>
+#endif
+
+SSHAgent* SSHAgent::m_instance;
+
+SSHAgent::SSHAgent(QObject* parent) : QObject(parent)
+{
+#ifndef Q_OS_WIN
+    m_socketPath = QProcessEnvironment::systemEnvironment().value("SSH_AUTH_SOCK");
+#endif
+}
+
+SSHAgent::~SSHAgent()
+{
+    for (QSet<OpenSSHKey> keys : m_keys.values()) {
+        for (OpenSSHKey key : keys) {
+            removeIdentity(key);
+        }
+    }
+}
+
+SSHAgent* SSHAgent::instance()
+{
+    if (m_instance == nullptr) {
+        qFatal("Race condition: instance wanted before it was initialized, this is a bug.");
+    }
+
+    return m_instance;
+}
+
+void SSHAgent::init(QObject* parent)
+{
+    m_instance = new SSHAgent(parent);
+}
+
+bool SSHAgent::isAgentRunning() const
+{
+#ifndef Q_OS_WIN
+    return !m_socketPath.isEmpty();
+#else
+    return (FindWindowA("Pageant", "Pageant") != nullptr);
+#endif
+}
+
+bool SSHAgent::sendMessage(const QByteArray& in, QByteArray& out) const
+{
+#ifndef Q_OS_WIN
+    QLocalSocket socket;
+    BinaryStream stream(&socket);
+
+    socket.connectToServer(m_socketPath);
+    if (!socket.waitForConnected(500)) {
+        return false;
+    }
+
+    stream.writeString(in);
+    stream.flush();
+
+    if (!stream.readString(out)) {
+        return false;
+    }
+
+    socket.close();
+
+    return true;
+#else
+    HWND hWnd = FindWindowA("Pageant", "Pageant");
+
+    if (!hWnd) {
+        return false;
+    }
+
+    if (in.length() > AGENT_MAX_MSGLEN - 4) {
+        return false;
+    }
+
+    QByteArray mapName = (QString("SSHAgentRequest") + reinterpret_cast<intptr_t>(QThread::currentThreadId())).toLatin1();
+
+    HANDLE handle = CreateFileMappingA(INVALID_HANDLE_VALUE, NULL, PAGE_READWRITE, 0, AGENT_MAX_MSGLEN, mapName.data());
+
+    if (!handle) {
+        return false;
+    }
+
+    LPVOID ptr = MapViewOfFile(handle, FILE_MAP_WRITE, 0, 0, 0);
+
+    if (!ptr) {
+        CloseHandle(handle);
+        return false;
+    }
+
+    quint32 *requestLength = reinterpret_cast<quint32*>(ptr);
+    void *requestData = reinterpret_cast<void*>(reinterpret_cast<char*>(ptr) + 4);
+
+    *requestLength = qToBigEndian<quint32>(in.length());
+    memcpy(requestData, in.data(), in.length());
+
+    COPYDATASTRUCT data;
+    data.dwData = AGENT_COPYDATA_ID;
+    data.cbData = mapName.length() + 1;
+    data.lpData = reinterpret_cast<LPVOID>(mapName.data());
+
+    LRESULT res = SendMessageA(hWnd, WM_COPYDATA, 0, reinterpret_cast<LPARAM>(&data));
+
+    if (res) {
+        quint32 responseLength = qFromBigEndian<quint32>(*requestLength);
+        if (responseLength <= AGENT_MAX_MSGLEN) {
+            out.resize(responseLength);
+            memcpy(out.data(), requestData, responseLength);
+        }
+    }
+
+    UnmapViewOfFile(ptr);
+    CloseHandle(handle);
+
+    return (res > 0);
+#endif
+}
+
+
+bool SSHAgent::addIdentity(OpenSSHKey& key, quint32 lifetime, bool confirm) const
+{
+    QByteArray requestData;
+    BinaryStream request(&requestData);
+
+    request.write((lifetime > 0 || confirm) ? SSH_AGENTC_ADD_ID_CONSTRAINED : SSH_AGENTC_ADD_IDENTITY);
+    key.writePrivate(request);
+
+    if (lifetime > 0) {
+        request.write(SSH_AGENT_CONSTRAIN_LIFETIME);
+        request.write(lifetime);
+    }
+
+    if (confirm) {
+        request.write(SSH_AGENT_CONSTRAIN_CONFIRM);
+    }
+
+    QByteArray responseData;
+    sendMessage(requestData, responseData);
+
+    if (responseData.length() < 1 || static_cast<quint8>(responseData[0]) != SSH_AGENT_SUCCESS) {
+        return false;
+    }
+
+    return true;
+}
+
+bool SSHAgent::removeIdentity(OpenSSHKey& key) const
+{
+    QByteArray requestData;
+    BinaryStream request(&requestData);
+
+    QByteArray keyData;
+    BinaryStream keyStream(&keyData);
+    key.writePublic(keyStream);
+
+    request.write(SSH_AGENTC_REMOVE_IDENTITY);
+    request.writeString(keyData);
+
+    QByteArray responseData;
+    sendMessage(requestData, responseData);
+
+    if (responseData.length() < 1 || static_cast<quint8>(responseData[0]) != SSH_AGENT_SUCCESS) {
+        return false;
+    }
+
+    return true;
+}
+
+void SSHAgent::removeIdentityAtLock(const OpenSSHKey& key, const Uuid& uuid)
+{
+    OpenSSHKey copy = key;
+    copy.clearPrivate();
+    m_keys[uuid.toHex()].insert(copy);
+}
+
+void SSHAgent::databaseModeChanged(DatabaseWidget::Mode mode)
+{
+    DatabaseWidget* widget = qobject_cast<DatabaseWidget*>(sender());
+
+    if (widget == nullptr) {
+        return;
+    }
+
+    Uuid uuid = widget->database()->uuid();
+
+    if (mode == DatabaseWidget::LockedMode && m_keys.contains(uuid.toHex())) {
+        QSet<OpenSSHKey> keys = m_keys.take(uuid.toHex());
+        for (OpenSSHKey key : keys) {
+            removeIdentity(key);
+        }
+    } else if (mode == DatabaseWidget::ViewMode && !m_keys.contains(uuid.toHex())) {
+        for (Entry* e : widget->database()->rootGroup()->entriesRecursive()) {
+
+            if (!e->attachments()->hasKey("KeeAgent.settings"))
+                continue;
+
+            KeeAgentSettings settings;
+            settings.fromXml(e->attachments()->value("KeeAgent.settings"));
+
+            if (!settings.allowUseOfSshKey()) {
+                continue;
+            }
+
+            QByteArray keyData;
+            if (settings.selectedType() == "attachment") {
+                keyData = e->attachments()->value(settings.attachmentName());
+            } else if (!settings.fileName().isEmpty()) {
+                QFile file(settings.fileName());
+
+                if (file.size() > 1024 * 1024) {
+                    continue;
+                }
+
+                if (!file.open(QIODevice::ReadOnly)) {
+                    continue;
+                }
+
+                keyData = file.readAll();
+            }
+
+            if (keyData.isEmpty()) {
+                continue;
+            }
+
+            OpenSSHKey key;
+
+            if (!key.parse(keyData)) {
+                continue;
+            }
+
+            if (settings.removeAtDatabaseClose()) {
+                removeIdentityAtLock(key, uuid);
+            }
+
+            if (settings.addAtDatabaseOpen() && key.openPrivateKey(e->password())) {
+                int lifetime = 0;
+
+                if (settings.useLifetimeConstraintWhenAdding()) {
+                    lifetime = settings.lifetimeConstraintDuration();
+                }
+
+                addIdentity(key, lifetime, settings.useConfirmConstraintWhenAdding());
+            }
+        }
+    }
+}
diff --git a/src/sshagent/SSHAgent.h b/src/sshagent/SSHAgent.h
new file mode 100644
index 00000000..e96f59e5
--- /dev/null
+++ b/src/sshagent/SSHAgent.h
@@ -0,0 +1,73 @@
+/*
+ *  Copyright (C) 2017 Toni Spets <toni.spets@iki.fi>
+ *  Copyright (C) 2017 KeePassXC Team <team@keepassxc.org>
+ *
+ *  This program is free software: you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation, either version 2 or (at your option)
+ *  version 3 of the License.
+ *
+ *  This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#ifndef AGENTCLIENT_H
+#define AGENTCLIENT_H
+
+#include <QtCore>
+#include <QList>
+#include "OpenSSHKey.h"
+
+#include "gui/DatabaseWidget.h"
+
+class SSHAgent : public QObject
+{
+    Q_OBJECT
+
+public:
+    static SSHAgent* instance();
+    static void init(QObject* parent);
+
+    bool isAgentRunning() const;
+    bool addIdentity(OpenSSHKey& key, quint32 lifetime = 0, bool confirm = false) const;
+    bool removeIdentity(OpenSSHKey& key) const;
+    void removeIdentityAtLock(const OpenSSHKey& key, const Uuid& uuid);
+
+public slots:
+    void databaseModeChanged(DatabaseWidget::Mode mode = DatabaseWidget::LockedMode);
+
+private:
+    const quint8 SSH_AGENT_FAILURE              = 5;
+    const quint8 SSH_AGENT_SUCCESS              = 6;
+    const quint8 SSH_AGENTC_REQUEST_IDENTITIES  = 11;
+    const quint8 SSH_AGENT_IDENTITIES_ANSWER    = 12;
+    const quint8 SSH_AGENTC_ADD_IDENTITY        = 17;
+    const quint8 SSH_AGENTC_REMOVE_IDENTITY     = 18;
+    const quint8 SSH_AGENTC_ADD_ID_CONSTRAINED  = 25;
+
+    const quint8 SSH_AGENT_CONSTRAIN_LIFETIME   = 1;
+    const quint8 SSH_AGENT_CONSTRAIN_CONFIRM    = 2;
+
+    explicit SSHAgent(QObject* parent = nullptr);
+    ~SSHAgent();
+
+    bool sendMessage(const QByteArray& in, QByteArray& out) const;
+
+    static SSHAgent* m_instance;
+
+#ifndef Q_OS_WIN
+    QString m_socketPath;
+#else
+    const int AGENT_MAX_MSGLEN = 8192;
+    const quint32 AGENT_COPYDATA_ID = 0x804e50ba;
+#endif
+
+    QMap<QString, QSet<OpenSSHKey>> m_keys;
+};
+
+#endif // AGENTCLIENT_H
diff --git a/src/sshagent/bcrypt_pbkdf.cpp b/src/sshagent/bcrypt_pbkdf.cpp
new file mode 100644
index 00000000..fed4cdb2
--- /dev/null
+++ b/src/sshagent/bcrypt_pbkdf.cpp
@@ -0,0 +1,172 @@
+/* $OpenBSD: bcrypt_pbkdf.c,v 1.13 2015/01/12 03:20:04 tedu Exp $ */
+/*
+ * Copyright (c) 2013 Ted Unangst <tedu@openbsd.org>
+ *
+ * Permission to use, copy, modify, and distribute this software for any
+ * purpose with or without fee is hereby granted, provided that the above
+ * copyright notice and this permission notice appear in all copies.
+ *
+ * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
+ * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
+ * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
+ * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
+ * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
+ * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
+ * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
+ */
+
+#include <QtCore>
+
+extern "C" {
+#include "blf.h"
+}
+
+#define	MINIMUM(a,b) (((a) < (b)) ? (a) : (b))
+
+/*
+ * pkcs #5 pbkdf2 implementation using the "bcrypt" hash
+ *
+ * The bcrypt hash function is derived from the bcrypt password hashing
+ * function with the following modifications:
+ * 1. The input password and salt are preprocessed with SHA512.
+ * 2. The output length is expanded to 256 bits.
+ * 3. Subsequently the magic string to be encrypted is lengthened and modifed
+ *    to "OxychromaticBlowfishSwatDynamite"
+ * 4. The hash function is defined to perform 64 rounds of initial state
+ *    expansion. (More rounds are performed by iterating the hash.)
+ *
+ * Note that this implementation pulls the SHA512 operations into the caller
+ * as a performance optimization.
+ *
+ * One modification from official pbkdf2. Instead of outputting key material
+ * linearly, we mix it. pbkdf2 has a known weakness where if one uses it to
+ * generate (e.g.) 512 bits of key material for use as two 256 bit keys, an
+ * attacker can merely run once through the outer loop, but the user
+ * always runs it twice. Shuffling output bytes requires computing the
+ * entirety of the key material to assemble any subkey. This is something a
+ * wise caller could do; we just do it for you.
+ */
+
+#define BCRYPT_WORDS 8
+#define BCRYPT_HASHSIZE (BCRYPT_WORDS * 4)
+#define SHA512_DIGEST_LENGTH 64
+
+// FIXME: explicit_bzero exists to ensure bzero is not optimized out
+#define explicit_bzero bzero
+
+static void
+bcrypt_hash(const quint8* sha2pass, const quint8* sha2salt, quint8* out)
+{
+    blf_ctx state;
+    quint8 ciphertext[BCRYPT_HASHSIZE] = // "OxychromaticBlowfishSwatDynamite"
+        { 0x4f, 0x78, 0x79, 0x63, 0x68, 0x72, 0x6f, 0x6d,
+          0x61, 0x74, 0x69, 0x63, 0x42, 0x6c, 0x6f, 0x77,
+          0x66, 0x69, 0x73, 0x68, 0x53, 0x77, 0x61, 0x74,
+          0x44, 0x79, 0x6e, 0x61, 0x6d, 0x69, 0x74, 0x65 };
+    quint32 cdata[BCRYPT_WORDS];
+    int i;
+    quint16 j;
+    size_t shalen = SHA512_DIGEST_LENGTH;
+
+    /* key expansion */
+    Blowfish_initstate(&state);
+    Blowfish_expandstate(&state, sha2salt, shalen, sha2pass, shalen);
+    for (i = 0; i < 64; i++) {
+        Blowfish_expand0state(&state, sha2salt, shalen);
+        Blowfish_expand0state(&state, sha2pass, shalen);
+    }
+
+    /* encryption */
+    j = 0;
+    for (i = 0; i < BCRYPT_WORDS; i++)
+        cdata[i] = Blowfish_stream2word(ciphertext, sizeof(ciphertext),
+            &j);
+    for (i = 0; i < 64; i++)
+        blf_enc(&state, cdata, sizeof(cdata) / sizeof(uint64_t));
+
+    /* copy out */
+    for (i = 0; i < BCRYPT_WORDS; i++) {
+        out[4 * i + 3] = (cdata[i] >> 24) & 0xff;
+        out[4 * i + 2] = (cdata[i] >> 16) & 0xff;
+        out[4 * i + 1] = (cdata[i] >> 8) & 0xff;
+        out[4 * i + 0] = cdata[i] & 0xff;
+    }
+
+    /* zap */
+    explicit_bzero(ciphertext, sizeof(ciphertext));
+    explicit_bzero(cdata, sizeof(cdata));
+    explicit_bzero(&state, sizeof(state));
+}
+
+int bcrypt_pbkdf(const QByteArray& pass, const QByteArray& salt, QByteArray& key, quint32 rounds)
+{
+    QCryptographicHash ctx(QCryptographicHash::Sha512);
+    QByteArray sha2pass;
+    QByteArray sha2salt;
+    quint8 out[BCRYPT_HASHSIZE];
+    quint8 tmpout[BCRYPT_HASHSIZE];
+    quint8 countsalt[4];
+
+    /* nothing crazy */
+    if (rounds < 1) {
+        return -1;
+    }
+
+    if (pass.isEmpty() || salt.isEmpty() || key.isEmpty() ||
+        static_cast<quint32>(key.length()) > sizeof(out) * sizeof(out)) {
+        return -1;
+    }
+
+    quint32 stride = (key.length() + sizeof(out) - 1) / sizeof(out);
+    quint32 amt = (key.length() + stride - 1) / stride;
+
+    /* collapse password */
+    ctx.reset();
+    ctx.addData(pass);
+    sha2pass = ctx.result();
+
+    /* generate key, sizeof(out) at a time */
+    for (quint32 count = 1, keylen = key.length(); keylen > 0; count++) {
+        countsalt[0] = (count >> 24) & 0xff;
+        countsalt[1] = (count >> 16) & 0xff;
+        countsalt[2] = (count >> 8) & 0xff;
+        countsalt[3] = count & 0xff;
+
+        /* first round, salt is salt */
+        ctx.reset();
+        ctx.addData(salt);
+        ctx.addData(reinterpret_cast<char *>(countsalt), sizeof(countsalt));
+        sha2salt = ctx.result();
+
+        bcrypt_hash(reinterpret_cast<quint8 *>(sha2pass.data()), reinterpret_cast<quint8 *>(sha2salt.data()), tmpout);
+        memcpy(out, tmpout, sizeof(out));
+
+        for (quint32 i = 1; i < rounds; i++) {
+            /* subsequent rounds, salt is previous output */
+            ctx.reset();
+            ctx.addData(reinterpret_cast<char *>(tmpout), sizeof(tmpout));
+            sha2salt = ctx.result();
+            bcrypt_hash(reinterpret_cast<quint8 *>(sha2pass.data()), reinterpret_cast<quint8 *>(sha2salt.data()), tmpout);
+            for (quint32 j = 0; j < sizeof(out); j++)
+                out[j] ^= tmpout[j];
+        }
+
+        /*
+         * pbkdf2 deviation: output the key material non-linearly.
+         */
+        amt = MINIMUM(amt, keylen);
+        quint32 i;
+        for (i = 0; i < amt; i++) {
+            int dest = i * stride + (count - 1);
+            if (dest >= key.length())
+                break;
+            key.data()[dest] = out[i];
+        }
+        keylen -= i;
+    }
+
+    /* zap */
+    explicit_bzero(out, sizeof(out));
+
+    return 0;
+}
diff --git a/src/sshagent/blf.h b/src/sshagent/blf.h
new file mode 100644
index 00000000..4878e558
--- /dev/null
+++ b/src/sshagent/blf.h
@@ -0,0 +1,98 @@
+/* $OpenBSD: blf.h,v 1.7 2007/03/14 17:59:41 grunk Exp $ */
+/*
+ * Blowfish - a fast block cipher designed by Bruce Schneier
+ *
+ * Copyright 1997 Niels Provos <provos@physnet.uni-hamburg.de>
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. All advertising materials mentioning features or use of this software
+ *    must display the following acknowledgement:
+ *      This product includes software developed by Niels Provos.
+ * 4. The name of the author may not be used to endorse or promote products
+ *    derived from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
+ * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
+ * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
+ * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
+ * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
+ * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+ * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+ * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
+ * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+
+#ifndef _BLF_H_
+#define _BLF_H_
+
+#ifdef _WIN32
+
+#include <stdint.h>
+
+typedef uint32_t u_int32_t;
+typedef uint16_t u_int16_t;
+typedef uint8_t u_int8_t;
+
+#define bzero(p,s) memset(p, 0, s)
+
+#endif
+
+#if !defined(HAVE_BCRYPT_PBKDF) && !defined(HAVE_BLH_H)
+
+/* Schneier specifies a maximum key length of 56 bytes.
+ * This ensures that every key bit affects every cipher
+ * bit.  However, the subkeys can hold up to 72 bytes.
+ * Warning: For normal blowfish encryption only 56 bytes
+ * of the key affect all cipherbits.
+ */
+
+#define BLF_N	16			/* Number of Subkeys */
+#define BLF_MAXKEYLEN ((BLF_N-2)*4)	/* 448 bits */
+#define BLF_MAXUTILIZED ((BLF_N+2)*4)	/* 576 bits */
+
+/* Blowfish context */
+typedef struct BlowfishContext {
+	u_int32_t S[4][256];	/* S-Boxes */
+	u_int32_t P[BLF_N + 2];	/* Subkeys */
+} blf_ctx;
+
+/* Raw access to customized Blowfish
+ *	blf_key is just:
+ *	Blowfish_initstate( state )
+ *	Blowfish_expand0state( state, key, keylen )
+ */
+
+void Blowfish_encipher(blf_ctx *, u_int32_t *, u_int32_t *);
+void Blowfish_decipher(blf_ctx *, u_int32_t *, u_int32_t *);
+void Blowfish_initstate(blf_ctx *);
+void Blowfish_expand0state(blf_ctx *, const u_int8_t *, u_int16_t);
+void Blowfish_expandstate
+(blf_ctx *, const u_int8_t *, u_int16_t, const u_int8_t *, u_int16_t);
+
+/* Standard Blowfish */
+
+void blf_key(blf_ctx *, const u_int8_t *, u_int16_t);
+void blf_enc(blf_ctx *, u_int32_t *, u_int16_t);
+void blf_dec(blf_ctx *, u_int32_t *, u_int16_t);
+
+void blf_ecb_encrypt(blf_ctx *, u_int8_t *, u_int32_t);
+void blf_ecb_decrypt(blf_ctx *, u_int8_t *, u_int32_t);
+
+void blf_cbc_encrypt(blf_ctx *, u_int8_t *, u_int8_t *, u_int32_t);
+void blf_cbc_decrypt(blf_ctx *, u_int8_t *, u_int8_t *, u_int32_t);
+
+/* Converts u_int8_t to u_int32_t */
+u_int32_t Blowfish_stream2word(const u_int8_t *, u_int16_t , u_int16_t *);
+
+#endif /* !defined(HAVE_BCRYPT_PBKDF) && !defined(HAVE_BLH_H) */
+#endif /* _BLF_H */
+
diff --git a/src/sshagent/blowfish.c b/src/sshagent/blowfish.c
new file mode 100644
index 00000000..02e9ac0b
--- /dev/null
+++ b/src/sshagent/blowfish.c
@@ -0,0 +1,696 @@
+/* $OpenBSD: blowfish.c,v 1.18 2004/11/02 17:23:26 hshoexer Exp $ */
+/*
+ * Blowfish block cipher for OpenBSD
+ * Copyright 1997 Niels Provos <provos@physnet.uni-hamburg.de>
+ * All rights reserved.
+ *
+ * Implementation advice by David Mazieres <dm@lcs.mit.edu>.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions
+ * are met:
+ * 1. Redistributions of source code must retain the above copyright
+ *    notice, this list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright
+ *    notice, this list of conditions and the following disclaimer in the
+ *    documentation and/or other materials provided with the distribution.
+ * 3. All advertising materials mentioning features or use of this software
+ *    must display the following acknowledgement:
+ *      This product includes software developed by Niels Provos.
+ * 4. The name of the author may not be used to endorse or promote products
+ *    derived from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
+ * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
+ * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
+ * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
+ * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT
+ * NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+ * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+ * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF
+ * THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+
+/*
+ * This code is derived from section 14.3 and the given source
+ * in section V of Applied Cryptography, second edition.
+ * Blowfish is an unpatented fast block cipher designed by
+ * Bruce Schneier.
+ */
+
+#define HAVE_BLF_H
+
+#if !defined(HAVE_BCRYPT_PBKDF) && (!defined(HAVE_BLOWFISH_INITSTATE) || \
+    !defined(HAVE_BLOWFISH_EXPAND0STATE) || !defined(HAVE_BLF_ENC))
+
+#if 0
+#include <stdio.h>		/* used for debugging */
+#include <string.h>
+#endif
+
+#include <sys/types.h>
+#ifdef HAVE_BLF_H
+#include "blf.h"
+#endif
+
+#undef inline
+#ifdef __GNUC__
+#define inline __inline
+#else				/* !__GNUC__ */
+#define inline
+#endif				/* !__GNUC__ */
+
+/* Function for Feistel Networks */
+
+#define F(s, x) ((((s)[        (((x)>>24)&0xFF)]  \
+		 + (s)[0x100 + (((x)>>16)&0xFF)]) \
+		 ^ (s)[0x200 + (((x)>> 8)&0xFF)]) \
+		 + (s)[0x300 + ( (x)     &0xFF)])
+
+#define BLFRND(s,p,i,j,n) (i ^= F(s,j) ^ (p)[n])
+
+void
+Blowfish_encipher(blf_ctx *c, u_int32_t *xl, u_int32_t *xr)
+{
+	u_int32_t Xl;
+	u_int32_t Xr;
+	u_int32_t *s = c->S[0];
+	u_int32_t *p = c->P;
+
+	Xl = *xl;
+	Xr = *xr;
+
+	Xl ^= p[0];
+	BLFRND(s, p, Xr, Xl, 1); BLFRND(s, p, Xl, Xr, 2);
+	BLFRND(s, p, Xr, Xl, 3); BLFRND(s, p, Xl, Xr, 4);
+	BLFRND(s, p, Xr, Xl, 5); BLFRND(s, p, Xl, Xr, 6);
+	BLFRND(s, p, Xr, Xl, 7); BLFRND(s, p, Xl, Xr, 8);
+	BLFRND(s, p, Xr, Xl, 9); BLFRND(s, p, Xl, Xr, 10);
+	BLFRND(s, p, Xr, Xl, 11); BLFRND(s, p, Xl, Xr, 12);
+	BLFRND(s, p, Xr, Xl, 13); BLFRND(s, p, Xl, Xr, 14);
+	BLFRND(s, p, Xr, Xl, 15); BLFRND(s, p, Xl, Xr, 16);
+
+	*xl = Xr ^ p[17];
+	*xr = Xl;
+}
+
+void
+Blowfish_decipher(blf_ctx *c, u_int32_t *xl, u_int32_t *xr)
+{
+	u_int32_t Xl;
+	u_int32_t Xr;
+	u_int32_t *s = c->S[0];
+	u_int32_t *p = c->P;
+
+	Xl = *xl;
+	Xr = *xr;
+
+	Xl ^= p[17];
+	BLFRND(s, p, Xr, Xl, 16); BLFRND(s, p, Xl, Xr, 15);
+	BLFRND(s, p, Xr, Xl, 14); BLFRND(s, p, Xl, Xr, 13);
+	BLFRND(s, p, Xr, Xl, 12); BLFRND(s, p, Xl, Xr, 11);
+	BLFRND(s, p, Xr, Xl, 10); BLFRND(s, p, Xl, Xr, 9);
+	BLFRND(s, p, Xr, Xl, 8); BLFRND(s, p, Xl, Xr, 7);
+	BLFRND(s, p, Xr, Xl, 6); BLFRND(s, p, Xl, Xr, 5);
+	BLFRND(s, p, Xr, Xl, 4); BLFRND(s, p, Xl, Xr, 3);
+	BLFRND(s, p, Xr, Xl, 2); BLFRND(s, p, Xl, Xr, 1);
+
+	*xl = Xr ^ p[0];
+	*xr = Xl;
+}
+
+void
+Blowfish_initstate(blf_ctx *c)
+{
+	/* P-box and S-box tables initialized with digits of Pi */
+
+	static const blf_ctx initstate =
+	{ {
+		{
+			0xd1310ba6, 0x98dfb5ac, 0x2ffd72db, 0xd01adfb7,
+			0xb8e1afed, 0x6a267e96, 0xba7c9045, 0xf12c7f99,
+			0x24a19947, 0xb3916cf7, 0x0801f2e2, 0x858efc16,
+			0x636920d8, 0x71574e69, 0xa458fea3, 0xf4933d7e,
+			0x0d95748f, 0x728eb658, 0x718bcd58, 0x82154aee,
+			0x7b54a41d, 0xc25a59b5, 0x9c30d539, 0x2af26013,
+			0xc5d1b023, 0x286085f0, 0xca417918, 0xb8db38ef,
+			0x8e79dcb0, 0x603a180e, 0x6c9e0e8b, 0xb01e8a3e,
+			0xd71577c1, 0xbd314b27, 0x78af2fda, 0x55605c60,
+			0xe65525f3, 0xaa55ab94, 0x57489862, 0x63e81440,
+			0x55ca396a, 0x2aab10b6, 0xb4cc5c34, 0x1141e8ce,
+			0xa15486af, 0x7c72e993, 0xb3ee1411, 0x636fbc2a,
+			0x2ba9c55d, 0x741831f6, 0xce5c3e16, 0x9b87931e,
+			0xafd6ba33, 0x6c24cf5c, 0x7a325381, 0x28958677,
+			0x3b8f4898, 0x6b4bb9af, 0xc4bfe81b, 0x66282193,
+			0x61d809cc, 0xfb21a991, 0x487cac60, 0x5dec8032,
+			0xef845d5d, 0xe98575b1, 0xdc262302, 0xeb651b88,
+			0x23893e81, 0xd396acc5, 0x0f6d6ff3, 0x83f44239,
+			0x2e0b4482, 0xa4842004, 0x69c8f04a, 0x9e1f9b5e,
+			0x21c66842, 0xf6e96c9a, 0x670c9c61, 0xabd388f0,
+			0x6a51a0d2, 0xd8542f68, 0x960fa728, 0xab5133a3,
+			0x6eef0b6c, 0x137a3be4, 0xba3bf050, 0x7efb2a98,
+			0xa1f1651d, 0x39af0176, 0x66ca593e, 0x82430e88,
+			0x8cee8619, 0x456f9fb4, 0x7d84a5c3, 0x3b8b5ebe,
+			0xe06f75d8, 0x85c12073, 0x401a449f, 0x56c16aa6,
+			0x4ed3aa62, 0x363f7706, 0x1bfedf72, 0x429b023d,
+			0x37d0d724, 0xd00a1248, 0xdb0fead3, 0x49f1c09b,
+			0x075372c9, 0x80991b7b, 0x25d479d8, 0xf6e8def7,
+			0xe3fe501a, 0xb6794c3b, 0x976ce0bd, 0x04c006ba,
+			0xc1a94fb6, 0x409f60c4, 0x5e5c9ec2, 0x196a2463,
+			0x68fb6faf, 0x3e6c53b5, 0x1339b2eb, 0x3b52ec6f,
+			0x6dfc511f, 0x9b30952c, 0xcc814544, 0xaf5ebd09,
+			0xbee3d004, 0xde334afd, 0x660f2807, 0x192e4bb3,
+			0xc0cba857, 0x45c8740f, 0xd20b5f39, 0xb9d3fbdb,
+			0x5579c0bd, 0x1a60320a, 0xd6a100c6, 0x402c7279,
+			0x679f25fe, 0xfb1fa3cc, 0x8ea5e9f8, 0xdb3222f8,
+			0x3c7516df, 0xfd616b15, 0x2f501ec8, 0xad0552ab,
+			0x323db5fa, 0xfd238760, 0x53317b48, 0x3e00df82,
+			0x9e5c57bb, 0xca6f8ca0, 0x1a87562e, 0xdf1769db,
+			0xd542a8f6, 0x287effc3, 0xac6732c6, 0x8c4f5573,
+			0x695b27b0, 0xbbca58c8, 0xe1ffa35d, 0xb8f011a0,
+			0x10fa3d98, 0xfd2183b8, 0x4afcb56c, 0x2dd1d35b,
+			0x9a53e479, 0xb6f84565, 0xd28e49bc, 0x4bfb9790,
+			0xe1ddf2da, 0xa4cb7e33, 0x62fb1341, 0xcee4c6e8,
+			0xef20cada, 0x36774c01, 0xd07e9efe, 0x2bf11fb4,
+			0x95dbda4d, 0xae909198, 0xeaad8e71, 0x6b93d5a0,
+			0xd08ed1d0, 0xafc725e0, 0x8e3c5b2f, 0x8e7594b7,
+			0x8ff6e2fb, 0xf2122b64, 0x8888b812, 0x900df01c,
+			0x4fad5ea0, 0x688fc31c, 0xd1cff191, 0xb3a8c1ad,
+			0x2f2f2218, 0xbe0e1777, 0xea752dfe, 0x8b021fa1,
+			0xe5a0cc0f, 0xb56f74e8, 0x18acf3d6, 0xce89e299,
+			0xb4a84fe0, 0xfd13e0b7, 0x7cc43b81, 0xd2ada8d9,
+			0x165fa266, 0x80957705, 0x93cc7314, 0x211a1477,
+			0xe6ad2065, 0x77b5fa86, 0xc75442f5, 0xfb9d35cf,
+			0xebcdaf0c, 0x7b3e89a0, 0xd6411bd3, 0xae1e7e49,
+			0x00250e2d, 0x2071b35e, 0x226800bb, 0x57b8e0af,
+			0x2464369b, 0xf009b91e, 0x5563911d, 0x59dfa6aa,
+			0x78c14389, 0xd95a537f, 0x207d5ba2, 0x02e5b9c5,
+			0x83260376, 0x6295cfa9, 0x11c81968, 0x4e734a41,
+			0xb3472dca, 0x7b14a94a, 0x1b510052, 0x9a532915,
+			0xd60f573f, 0xbc9bc6e4, 0x2b60a476, 0x81e67400,
+			0x08ba6fb5, 0x571be91f, 0xf296ec6b, 0x2a0dd915,
+			0xb6636521, 0xe7b9f9b6, 0xff34052e, 0xc5855664,
+		0x53b02d5d, 0xa99f8fa1, 0x08ba4799, 0x6e85076a},
+		{
+			0x4b7a70e9, 0xb5b32944, 0xdb75092e, 0xc4192623,
+			0xad6ea6b0, 0x49a7df7d, 0x9cee60b8, 0x8fedb266,
+			0xecaa8c71, 0x699a17ff, 0x5664526c, 0xc2b19ee1,
+			0x193602a5, 0x75094c29, 0xa0591340, 0xe4183a3e,
+			0x3f54989a, 0x5b429d65, 0x6b8fe4d6, 0x99f73fd6,
+			0xa1d29c07, 0xefe830f5, 0x4d2d38e6, 0xf0255dc1,
+			0x4cdd2086, 0x8470eb26, 0x6382e9c6, 0x021ecc5e,
+			0x09686b3f, 0x3ebaefc9, 0x3c971814, 0x6b6a70a1,
+			0x687f3584, 0x52a0e286, 0xb79c5305, 0xaa500737,
+			0x3e07841c, 0x7fdeae5c, 0x8e7d44ec, 0x5716f2b8,
+			0xb03ada37, 0xf0500c0d, 0xf01c1f04, 0x0200b3ff,
+			0xae0cf51a, 0x3cb574b2, 0x25837a58, 0xdc0921bd,
+			0xd19113f9, 0x7ca92ff6, 0x94324773, 0x22f54701,
+			0x3ae5e581, 0x37c2dadc, 0xc8b57634, 0x9af3dda7,
+			0xa9446146, 0x0fd0030e, 0xecc8c73e, 0xa4751e41,
+			0xe238cd99, 0x3bea0e2f, 0x3280bba1, 0x183eb331,
+			0x4e548b38, 0x4f6db908, 0x6f420d03, 0xf60a04bf,
+			0x2cb81290, 0x24977c79, 0x5679b072, 0xbcaf89af,
+			0xde9a771f, 0xd9930810, 0xb38bae12, 0xdccf3f2e,
+			0x5512721f, 0x2e6b7124, 0x501adde6, 0x9f84cd87,
+			0x7a584718, 0x7408da17, 0xbc9f9abc, 0xe94b7d8c,
+			0xec7aec3a, 0xdb851dfa, 0x63094366, 0xc464c3d2,
+			0xef1c1847, 0x3215d908, 0xdd433b37, 0x24c2ba16,
+			0x12a14d43, 0x2a65c451, 0x50940002, 0x133ae4dd,
+			0x71dff89e, 0x10314e55, 0x81ac77d6, 0x5f11199b,
+			0x043556f1, 0xd7a3c76b, 0x3c11183b, 0x5924a509,
+			0xf28fe6ed, 0x97f1fbfa, 0x9ebabf2c, 0x1e153c6e,
+			0x86e34570, 0xeae96fb1, 0x860e5e0a, 0x5a3e2ab3,
+			0x771fe71c, 0x4e3d06fa, 0x2965dcb9, 0x99e71d0f,
+			0x803e89d6, 0x5266c825, 0x2e4cc978, 0x9c10b36a,
+			0xc6150eba, 0x94e2ea78, 0xa5fc3c53, 0x1e0a2df4,
+			0xf2f74ea7, 0x361d2b3d, 0x1939260f, 0x19c27960,
+			0x5223a708, 0xf71312b6, 0xebadfe6e, 0xeac31f66,
+			0xe3bc4595, 0xa67bc883, 0xb17f37d1, 0x018cff28,
+			0xc332ddef, 0xbe6c5aa5, 0x65582185, 0x68ab9802,
+			0xeecea50f, 0xdb2f953b, 0x2aef7dad, 0x5b6e2f84,
+			0x1521b628, 0x29076170, 0xecdd4775, 0x619f1510,
+			0x13cca830, 0xeb61bd96, 0x0334fe1e, 0xaa0363cf,
+			0xb5735c90, 0x4c70a239, 0xd59e9e0b, 0xcbaade14,
+			0xeecc86bc, 0x60622ca7, 0x9cab5cab, 0xb2f3846e,
+			0x648b1eaf, 0x19bdf0ca, 0xa02369b9, 0x655abb50,
+			0x40685a32, 0x3c2ab4b3, 0x319ee9d5, 0xc021b8f7,
+			0x9b540b19, 0x875fa099, 0x95f7997e, 0x623d7da8,
+			0xf837889a, 0x97e32d77, 0x11ed935f, 0x16681281,
+			0x0e358829, 0xc7e61fd6, 0x96dedfa1, 0x7858ba99,
+			0x57f584a5, 0x1b227263, 0x9b83c3ff, 0x1ac24696,
+			0xcdb30aeb, 0x532e3054, 0x8fd948e4, 0x6dbc3128,
+			0x58ebf2ef, 0x34c6ffea, 0xfe28ed61, 0xee7c3c73,
+			0x5d4a14d9, 0xe864b7e3, 0x42105d14, 0x203e13e0,
+			0x45eee2b6, 0xa3aaabea, 0xdb6c4f15, 0xfacb4fd0,
+			0xc742f442, 0xef6abbb5, 0x654f3b1d, 0x41cd2105,
+			0xd81e799e, 0x86854dc7, 0xe44b476a, 0x3d816250,
+			0xcf62a1f2, 0x5b8d2646, 0xfc8883a0, 0xc1c7b6a3,
+			0x7f1524c3, 0x69cb7492, 0x47848a0b, 0x5692b285,
+			0x095bbf00, 0xad19489d, 0x1462b174, 0x23820e00,
+			0x58428d2a, 0x0c55f5ea, 0x1dadf43e, 0x233f7061,
+			0x3372f092, 0x8d937e41, 0xd65fecf1, 0x6c223bdb,
+			0x7cde3759, 0xcbee7460, 0x4085f2a7, 0xce77326e,
+			0xa6078084, 0x19f8509e, 0xe8efd855, 0x61d99735,
+			0xa969a7aa, 0xc50c06c2, 0x5a04abfc, 0x800bcadc,
+			0x9e447a2e, 0xc3453484, 0xfdd56705, 0x0e1e9ec9,
+			0xdb73dbd3, 0x105588cd, 0x675fda79, 0xe3674340,
+			0xc5c43465, 0x713e38d8, 0x3d28f89e, 0xf16dff20,
+		0x153e21e7, 0x8fb03d4a, 0xe6e39f2b, 0xdb83adf7},
+		{
+			0xe93d5a68, 0x948140f7, 0xf64c261c, 0x94692934,
+			0x411520f7, 0x7602d4f7, 0xbcf46b2e, 0xd4a20068,
+			0xd4082471, 0x3320f46a, 0x43b7d4b7, 0x500061af,
+			0x1e39f62e, 0x97244546, 0x14214f74, 0xbf8b8840,
+			0x4d95fc1d, 0x96b591af, 0x70f4ddd3, 0x66a02f45,
+			0xbfbc09ec, 0x03bd9785, 0x7fac6dd0, 0x31cb8504,
+			0x96eb27b3, 0x55fd3941, 0xda2547e6, 0xabca0a9a,
+			0x28507825, 0x530429f4, 0x0a2c86da, 0xe9b66dfb,
+			0x68dc1462, 0xd7486900, 0x680ec0a4, 0x27a18dee,
+			0x4f3ffea2, 0xe887ad8c, 0xb58ce006, 0x7af4d6b6,
+			0xaace1e7c, 0xd3375fec, 0xce78a399, 0x406b2a42,
+			0x20fe9e35, 0xd9f385b9, 0xee39d7ab, 0x3b124e8b,
+			0x1dc9faf7, 0x4b6d1856, 0x26a36631, 0xeae397b2,
+			0x3a6efa74, 0xdd5b4332, 0x6841e7f7, 0xca7820fb,
+			0xfb0af54e, 0xd8feb397, 0x454056ac, 0xba489527,
+			0x55533a3a, 0x20838d87, 0xfe6ba9b7, 0xd096954b,
+			0x55a867bc, 0xa1159a58, 0xcca92963, 0x99e1db33,
+			0xa62a4a56, 0x3f3125f9, 0x5ef47e1c, 0x9029317c,
+			0xfdf8e802, 0x04272f70, 0x80bb155c, 0x05282ce3,
+			0x95c11548, 0xe4c66d22, 0x48c1133f, 0xc70f86dc,
+			0x07f9c9ee, 0x41041f0f, 0x404779a4, 0x5d886e17,
+			0x325f51eb, 0xd59bc0d1, 0xf2bcc18f, 0x41113564,
+			0x257b7834, 0x602a9c60, 0xdff8e8a3, 0x1f636c1b,
+			0x0e12b4c2, 0x02e1329e, 0xaf664fd1, 0xcad18115,
+			0x6b2395e0, 0x333e92e1, 0x3b240b62, 0xeebeb922,
+			0x85b2a20e, 0xe6ba0d99, 0xde720c8c, 0x2da2f728,
+			0xd0127845, 0x95b794fd, 0x647d0862, 0xe7ccf5f0,
+			0x5449a36f, 0x877d48fa, 0xc39dfd27, 0xf33e8d1e,
+			0x0a476341, 0x992eff74, 0x3a6f6eab, 0xf4f8fd37,
+			0xa812dc60, 0xa1ebddf8, 0x991be14c, 0xdb6e6b0d,
+			0xc67b5510, 0x6d672c37, 0x2765d43b, 0xdcd0e804,
+			0xf1290dc7, 0xcc00ffa3, 0xb5390f92, 0x690fed0b,
+			0x667b9ffb, 0xcedb7d9c, 0xa091cf0b, 0xd9155ea3,
+			0xbb132f88, 0x515bad24, 0x7b9479bf, 0x763bd6eb,
+			0x37392eb3, 0xcc115979, 0x8026e297, 0xf42e312d,
+			0x6842ada7, 0xc66a2b3b, 0x12754ccc, 0x782ef11c,
+			0x6a124237, 0xb79251e7, 0x06a1bbe6, 0x4bfb6350,
+			0x1a6b1018, 0x11caedfa, 0x3d25bdd8, 0xe2e1c3c9,
+			0x44421659, 0x0a121386, 0xd90cec6e, 0xd5abea2a,
+			0x64af674e, 0xda86a85f, 0xbebfe988, 0x64e4c3fe,
+			0x9dbc8057, 0xf0f7c086, 0x60787bf8, 0x6003604d,
+			0xd1fd8346, 0xf6381fb0, 0x7745ae04, 0xd736fccc,
+			0x83426b33, 0xf01eab71, 0xb0804187, 0x3c005e5f,
+			0x77a057be, 0xbde8ae24, 0x55464299, 0xbf582e61,
+			0x4e58f48f, 0xf2ddfda2, 0xf474ef38, 0x8789bdc2,
+			0x5366f9c3, 0xc8b38e74, 0xb475f255, 0x46fcd9b9,
+			0x7aeb2661, 0x8b1ddf84, 0x846a0e79, 0x915f95e2,
+			0x466e598e, 0x20b45770, 0x8cd55591, 0xc902de4c,
+			0xb90bace1, 0xbb8205d0, 0x11a86248, 0x7574a99e,
+			0xb77f19b6, 0xe0a9dc09, 0x662d09a1, 0xc4324633,
+			0xe85a1f02, 0x09f0be8c, 0x4a99a025, 0x1d6efe10,
+			0x1ab93d1d, 0x0ba5a4df, 0xa186f20f, 0x2868f169,
+			0xdcb7da83, 0x573906fe, 0xa1e2ce9b, 0x4fcd7f52,
+			0x50115e01, 0xa70683fa, 0xa002b5c4, 0x0de6d027,
+			0x9af88c27, 0x773f8641, 0xc3604c06, 0x61a806b5,
+			0xf0177a28, 0xc0f586e0, 0x006058aa, 0x30dc7d62,
+			0x11e69ed7, 0x2338ea63, 0x53c2dd94, 0xc2c21634,
+			0xbbcbee56, 0x90bcb6de, 0xebfc7da1, 0xce591d76,
+			0x6f05e409, 0x4b7c0188, 0x39720a3d, 0x7c927c24,
+			0x86e3725f, 0x724d9db9, 0x1ac15bb4, 0xd39eb8fc,
+			0xed545578, 0x08fca5b5, 0xd83d7cd3, 0x4dad0fc4,
+			0x1e50ef5e, 0xb161e6f8, 0xa28514d9, 0x6c51133c,
+			0x6fd5c7e7, 0x56e14ec4, 0x362abfce, 0xddc6c837,
+		0xd79a3234, 0x92638212, 0x670efa8e, 0x406000e0},
+		{
+			0x3a39ce37, 0xd3faf5cf, 0xabc27737, 0x5ac52d1b,
+			0x5cb0679e, 0x4fa33742, 0xd3822740, 0x99bc9bbe,
+			0xd5118e9d, 0xbf0f7315, 0xd62d1c7e, 0xc700c47b,
+			0xb78c1b6b, 0x21a19045, 0xb26eb1be, 0x6a366eb4,
+			0x5748ab2f, 0xbc946e79, 0xc6a376d2, 0x6549c2c8,
+			0x530ff8ee, 0x468dde7d, 0xd5730a1d, 0x4cd04dc6,
+			0x2939bbdb, 0xa9ba4650, 0xac9526e8, 0xbe5ee304,
+			0xa1fad5f0, 0x6a2d519a, 0x63ef8ce2, 0x9a86ee22,
+			0xc089c2b8, 0x43242ef6, 0xa51e03aa, 0x9cf2d0a4,
+			0x83c061ba, 0x9be96a4d, 0x8fe51550, 0xba645bd6,
+			0x2826a2f9, 0xa73a3ae1, 0x4ba99586, 0xef5562e9,
+			0xc72fefd3, 0xf752f7da, 0x3f046f69, 0x77fa0a59,
+			0x80e4a915, 0x87b08601, 0x9b09e6ad, 0x3b3ee593,
+			0xe990fd5a, 0x9e34d797, 0x2cf0b7d9, 0x022b8b51,
+			0x96d5ac3a, 0x017da67d, 0xd1cf3ed6, 0x7c7d2d28,
+			0x1f9f25cf, 0xadf2b89b, 0x5ad6b472, 0x5a88f54c,
+			0xe029ac71, 0xe019a5e6, 0x47b0acfd, 0xed93fa9b,
+			0xe8d3c48d, 0x283b57cc, 0xf8d56629, 0x79132e28,
+			0x785f0191, 0xed756055, 0xf7960e44, 0xe3d35e8c,
+			0x15056dd4, 0x88f46dba, 0x03a16125, 0x0564f0bd,
+			0xc3eb9e15, 0x3c9057a2, 0x97271aec, 0xa93a072a,
+			0x1b3f6d9b, 0x1e6321f5, 0xf59c66fb, 0x26dcf319,
+			0x7533d928, 0xb155fdf5, 0x03563482, 0x8aba3cbb,
+			0x28517711, 0xc20ad9f8, 0xabcc5167, 0xccad925f,
+			0x4de81751, 0x3830dc8e, 0x379d5862, 0x9320f991,
+			0xea7a90c2, 0xfb3e7bce, 0x5121ce64, 0x774fbe32,
+			0xa8b6e37e, 0xc3293d46, 0x48de5369, 0x6413e680,
+			0xa2ae0810, 0xdd6db224, 0x69852dfd, 0x09072166,
+			0xb39a460a, 0x6445c0dd, 0x586cdecf, 0x1c20c8ae,
+			0x5bbef7dd, 0x1b588d40, 0xccd2017f, 0x6bb4e3bb,
+			0xdda26a7e, 0x3a59ff45, 0x3e350a44, 0xbcb4cdd5,
+			0x72eacea8, 0xfa6484bb, 0x8d6612ae, 0xbf3c6f47,
+			0xd29be463, 0x542f5d9e, 0xaec2771b, 0xf64e6370,
+			0x740e0d8d, 0xe75b1357, 0xf8721671, 0xaf537d5d,
+			0x4040cb08, 0x4eb4e2cc, 0x34d2466a, 0x0115af84,
+			0xe1b00428, 0x95983a1d, 0x06b89fb4, 0xce6ea048,
+			0x6f3f3b82, 0x3520ab82, 0x011a1d4b, 0x277227f8,
+			0x611560b1, 0xe7933fdc, 0xbb3a792b, 0x344525bd,
+			0xa08839e1, 0x51ce794b, 0x2f32c9b7, 0xa01fbac9,
+			0xe01cc87e, 0xbcc7d1f6, 0xcf0111c3, 0xa1e8aac7,
+			0x1a908749, 0xd44fbd9a, 0xd0dadecb, 0xd50ada38,
+			0x0339c32a, 0xc6913667, 0x8df9317c, 0xe0b12b4f,
+			0xf79e59b7, 0x43f5bb3a, 0xf2d519ff, 0x27d9459c,
+			0xbf97222c, 0x15e6fc2a, 0x0f91fc71, 0x9b941525,
+			0xfae59361, 0xceb69ceb, 0xc2a86459, 0x12baa8d1,
+			0xb6c1075e, 0xe3056a0c, 0x10d25065, 0xcb03a442,
+			0xe0ec6e0e, 0x1698db3b, 0x4c98a0be, 0x3278e964,
+			0x9f1f9532, 0xe0d392df, 0xd3a0342b, 0x8971f21e,
+			0x1b0a7441, 0x4ba3348c, 0xc5be7120, 0xc37632d8,
+			0xdf359f8d, 0x9b992f2e, 0xe60b6f47, 0x0fe3f11d,
+			0xe54cda54, 0x1edad891, 0xce6279cf, 0xcd3e7e6f,
+			0x1618b166, 0xfd2c1d05, 0x848fd2c5, 0xf6fb2299,
+			0xf523f357, 0xa6327623, 0x93a83531, 0x56cccd02,
+			0xacf08162, 0x5a75ebb5, 0x6e163697, 0x88d273cc,
+			0xde966292, 0x81b949d0, 0x4c50901b, 0x71c65614,
+			0xe6c6c7bd, 0x327a140a, 0x45e1d006, 0xc3f27b9a,
+			0xc9aa53fd, 0x62a80f00, 0xbb25bfe2, 0x35bdd2f6,
+			0x71126905, 0xb2040222, 0xb6cbcf7c, 0xcd769c2b,
+			0x53113ec0, 0x1640e3d3, 0x38abbd60, 0x2547adf0,
+			0xba38209c, 0xf746ce76, 0x77afa1c5, 0x20756060,
+			0x85cbfe4e, 0x8ae88dd8, 0x7aaaf9b0, 0x4cf9aa7e,
+			0x1948c25c, 0x02fb8a8c, 0x01c36ae4, 0xd6ebe1f9,
+			0x90d4f869, 0xa65cdea0, 0x3f09252d, 0xc208e69f,
+		0xb74e6132, 0xce77e25b, 0x578fdfe3, 0x3ac372e6}
+	},
+	{
+		0x243f6a88, 0x85a308d3, 0x13198a2e, 0x03707344,
+		0xa4093822, 0x299f31d0, 0x082efa98, 0xec4e6c89,
+		0x452821e6, 0x38d01377, 0xbe5466cf, 0x34e90c6c,
+		0xc0ac29b7, 0xc97c50dd, 0x3f84d5b5, 0xb5470917,
+		0x9216d5d9, 0x8979fb1b
+	} };
+
+	*c = initstate;
+}
+
+u_int32_t
+Blowfish_stream2word(const u_int8_t *data, u_int16_t databytes,
+    u_int16_t *current)
+{
+	u_int8_t i;
+	u_int16_t j;
+	u_int32_t temp;
+
+	temp = 0x00000000;
+	j = *current;
+
+	for (i = 0; i < 4; i++, j++) {
+		if (j >= databytes)
+			j = 0;
+		temp = (temp << 8) | data[j];
+	}
+
+	*current = j;
+	return temp;
+}
+
+void
+Blowfish_expand0state(blf_ctx *c, const u_int8_t *key, u_int16_t keybytes)
+{
+	u_int16_t i;
+	u_int16_t j;
+	u_int16_t k;
+	u_int32_t temp;
+	u_int32_t datal;
+	u_int32_t datar;
+
+	j = 0;
+	for (i = 0; i < BLF_N + 2; i++) {
+		/* Extract 4 int8 to 1 int32 from keystream */
+		temp = Blowfish_stream2word(key, keybytes, &j);
+		c->P[i] = c->P[i] ^ temp;
+	}
+
+	j = 0;
+	datal = 0x00000000;
+	datar = 0x00000000;
+	for (i = 0; i < BLF_N + 2; i += 2) {
+		Blowfish_encipher(c, &datal, &datar);
+
+		c->P[i] = datal;
+		c->P[i + 1] = datar;
+	}
+
+	for (i = 0; i < 4; i++) {
+		for (k = 0; k < 256; k += 2) {
+			Blowfish_encipher(c, &datal, &datar);
+
+			c->S[i][k] = datal;
+			c->S[i][k + 1] = datar;
+		}
+	}
+}
+
+
+void
+Blowfish_expandstate(blf_ctx *c, const u_int8_t *data, u_int16_t databytes,
+    const u_int8_t *key, u_int16_t keybytes)
+{
+	u_int16_t i;
+	u_int16_t j;
+	u_int16_t k;
+	u_int32_t temp;
+	u_int32_t datal;
+	u_int32_t datar;
+
+	j = 0;
+	for (i = 0; i < BLF_N + 2; i++) {
+		/* Extract 4 int8 to 1 int32 from keystream */
+		temp = Blowfish_stream2word(key, keybytes, &j);
+		c->P[i] = c->P[i] ^ temp;
+	}
+
+	j = 0;
+	datal = 0x00000000;
+	datar = 0x00000000;
+	for (i = 0; i < BLF_N + 2; i += 2) {
+		datal ^= Blowfish_stream2word(data, databytes, &j);
+		datar ^= Blowfish_stream2word(data, databytes, &j);
+		Blowfish_encipher(c, &datal, &datar);
+
+		c->P[i] = datal;
+		c->P[i + 1] = datar;
+	}
+
+	for (i = 0; i < 4; i++) {
+		for (k = 0; k < 256; k += 2) {
+			datal ^= Blowfish_stream2word(data, databytes, &j);
+			datar ^= Blowfish_stream2word(data, databytes, &j);
+			Blowfish_encipher(c, &datal, &datar);
+
+			c->S[i][k] = datal;
+			c->S[i][k + 1] = datar;
+		}
+	}
+
+}
+
+void
+blf_key(blf_ctx *c, const u_int8_t *k, u_int16_t len)
+{
+	/* Initialize S-boxes and subkeys with Pi */
+	Blowfish_initstate(c);
+
+	/* Transform S-boxes and subkeys with key */
+	Blowfish_expand0state(c, k, len);
+}
+
+void
+blf_enc(blf_ctx *c, u_int32_t *data, u_int16_t blocks)
+{
+	u_int32_t *d;
+	u_int16_t i;
+
+	d = data;
+	for (i = 0; i < blocks; i++) {
+		Blowfish_encipher(c, d, d + 1);
+		d += 2;
+	}
+}
+
+void
+blf_dec(blf_ctx *c, u_int32_t *data, u_int16_t blocks)
+{
+	u_int32_t *d;
+	u_int16_t i;
+
+	d = data;
+	for (i = 0; i < blocks; i++) {
+		Blowfish_decipher(c, d, d + 1);
+		d += 2;
+	}
+}
+
+void
+blf_ecb_encrypt(blf_ctx *c, u_int8_t *data, u_int32_t len)
+{
+	u_int32_t l, r;
+	u_int32_t i;
+
+	for (i = 0; i < len; i += 8) {
+		l = data[0] << 24 | data[1] << 16 | data[2] << 8 | data[3];
+		r = data[4] << 24 | data[5] << 16 | data[6] << 8 | data[7];
+		Blowfish_encipher(c, &l, &r);
+		data[0] = l >> 24 & 0xff;
+		data[1] = l >> 16 & 0xff;
+		data[2] = l >> 8 & 0xff;
+		data[3] = l & 0xff;
+		data[4] = r >> 24 & 0xff;
+		data[5] = r >> 16 & 0xff;
+		data[6] = r >> 8 & 0xff;
+		data[7] = r & 0xff;
+		data += 8;
+	}
+}
+
+void
+blf_ecb_decrypt(blf_ctx *c, u_int8_t *data, u_int32_t len)
+{
+	u_int32_t l, r;
+	u_int32_t i;
+
+	for (i = 0; i < len; i += 8) {
+		l = data[0] << 24 | data[1] << 16 | data[2] << 8 | data[3];
+		r = data[4] << 24 | data[5] << 16 | data[6] << 8 | data[7];
+		Blowfish_decipher(c, &l, &r);
+		data[0] = l >> 24 & 0xff;
+		data[1] = l >> 16 & 0xff;
+		data[2] = l >> 8 & 0xff;
+		data[3] = l & 0xff;
+		data[4] = r >> 24 & 0xff;
+		data[5] = r >> 16 & 0xff;
+		data[6] = r >> 8 & 0xff;
+		data[7] = r & 0xff;
+		data += 8;
+	}
+}
+
+void
+blf_cbc_encrypt(blf_ctx *c, u_int8_t *iv, u_int8_t *data, u_int32_t len)
+{
+	u_int32_t l, r;
+	u_int32_t i, j;
+
+	for (i = 0; i < len; i += 8) {
+		for (j = 0; j < 8; j++)
+			data[j] ^= iv[j];
+		l = data[0] << 24 | data[1] << 16 | data[2] << 8 | data[3];
+		r = data[4] << 24 | data[5] << 16 | data[6] << 8 | data[7];
+		Blowfish_encipher(c, &l, &r);
+		data[0] = l >> 24 & 0xff;
+		data[1] = l >> 16 & 0xff;
+		data[2] = l >> 8 & 0xff;
+		data[3] = l & 0xff;
+		data[4] = r >> 24 & 0xff;
+		data[5] = r >> 16 & 0xff;
+		data[6] = r >> 8 & 0xff;
+		data[7] = r & 0xff;
+		iv = data;
+		data += 8;
+	}
+}
+
+void
+blf_cbc_decrypt(blf_ctx *c, u_int8_t *iva, u_int8_t *data, u_int32_t len)
+{
+	u_int32_t l, r;
+	u_int8_t *iv;
+	u_int32_t i, j;
+
+	iv = data + len - 16;
+	data = data + len - 8;
+	for (i = len - 8; i >= 8; i -= 8) {
+		l = data[0] << 24 | data[1] << 16 | data[2] << 8 | data[3];
+		r = data[4] << 24 | data[5] << 16 | data[6] << 8 | data[7];
+		Blowfish_decipher(c, &l, &r);
+		data[0] = l >> 24 & 0xff;
+		data[1] = l >> 16 & 0xff;
+		data[2] = l >> 8 & 0xff;
+		data[3] = l & 0xff;
+		data[4] = r >> 24 & 0xff;
+		data[5] = r >> 16 & 0xff;
+		data[6] = r >> 8 & 0xff;
+		data[7] = r & 0xff;
+		for (j = 0; j < 8; j++)
+			data[j] ^= iv[j];
+		iv -= 8;
+		data -= 8;
+	}
+	l = data[0] << 24 | data[1] << 16 | data[2] << 8 | data[3];
+	r = data[4] << 24 | data[5] << 16 | data[6] << 8 | data[7];
+	Blowfish_decipher(c, &l, &r);
+	data[0] = l >> 24 & 0xff;
+	data[1] = l >> 16 & 0xff;
+	data[2] = l >> 8 & 0xff;
+	data[3] = l & 0xff;
+	data[4] = r >> 24 & 0xff;
+	data[5] = r >> 16 & 0xff;
+	data[6] = r >> 8 & 0xff;
+	data[7] = r & 0xff;
+	for (j = 0; j < 8; j++)
+		data[j] ^= iva[j];
+}
+
+#if 0
+void
+report(u_int32_t data[], u_int16_t len)
+{
+	u_int16_t i;
+	for (i = 0; i < len; i += 2)
+		printf("Block %0hd: %08lx %08lx.\n",
+		    i / 2, data[i], data[i + 1]);
+}
+void
+main(void)
+{
+
+	blf_ctx c;
+	char    key[] = "AAAAA";
+	char    key2[] = "abcdefghijklmnopqrstuvwxyz";
+
+	u_int32_t data[10];
+	u_int32_t data2[] =
+	{0x424c4f57l, 0x46495348l};
+
+	u_int16_t i;
+
+	/* First test */
+	for (i = 0; i < 10; i++)
+		data[i] = i;
+
+	blf_key(&c, (u_int8_t *) key, 5);
+	blf_enc(&c, data, 5);
+	blf_dec(&c, data, 1);
+	blf_dec(&c, data + 2, 4);
+	printf("Should read as 0 - 9.\n");
+	report(data, 10);
+
+	/* Second test */
+	blf_key(&c, (u_int8_t *) key2, strlen(key2));
+	blf_enc(&c, data2, 1);
+	printf("\nShould read as: 0x324ed0fe 0xf413a203.\n");
+	report(data2, 2);
+	blf_dec(&c, data2, 1);
+	report(data2, 2);
+}
+#endif
+
+#endif /* !defined(HAVE_BCRYPT_PBKDF) && (!defined(HAVE_BLOWFISH_INITSTATE) || \
+    !defined(HAVE_BLOWFISH_EXPAND0STATE) || !defined(HAVE_BLF_ENC)) */
+
diff --git a/tests/CMakeLists.txt b/tests/CMakeLists.txt
index c1f1adf4..c36eefd4 100644
--- a/tests/CMakeLists.txt
+++ b/tests/CMakeLists.txt
@@ -13,7 +13,7 @@
 #  You should have received a copy of the GNU General Public License
 #  along with this program.  If not, see <http://www.gnu.org/licenses/>.
 
-include_directories(${CMAKE_CURRENT_SOURCE_DIR} ${CMAKE_CURRENT_BINARY_DIR} ${CMAKE_SOURCE_DIR}/src)
+include_directories(${CMAKE_CURRENT_SOURCE_DIR} ${CMAKE_CURRENT_BINARY_DIR} ${CMAKE_SOURCE_DIR}/src ${CMAKE_CURRENT_BINARY_DIR}/../src)
 
 add_definitions(-DQT_TEST_LIB)
 
@@ -155,6 +155,11 @@ if(WITH_XC_AUTOTYPE)
   set_target_properties(testautotype PROPERTIES ENABLE_EXPORTS ON)
 endif()
 
+if(WITH_XC_SSHAGENT)
+  add_unit_test(NAME testopensshkey SOURCES TestOpenSSHKey.cpp
+              LIBS sshagent ${TEST_LIBRARIES})
+endif()
+
 add_unit_test(NAME testentry SOURCES TestEntry.cpp
               LIBS ${TEST_LIBRARIES})
 
diff --git a/tests/TestOpenSSHKey.cpp b/tests/TestOpenSSHKey.cpp
new file mode 100644
index 00000000..52cf4dbf
--- /dev/null
+++ b/tests/TestOpenSSHKey.cpp
@@ -0,0 +1,124 @@
+/*
+ *  Copyright (C) 2017 Toni Spets <toni.spets@iki.fi>
+ *
+ *  This program is free software: you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation, either version 2 or (at your option)
+ *  version 3 of the License.
+ *
+ *  This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#include "TestOpenSSHKey.h"
+#include "sshagent/OpenSSHKey.h"
+#include <QTest>
+
+QTEST_GUILESS_MAIN(TestOpenSSHKey)
+
+void TestOpenSSHKey::testParse()
+{
+    // mixed line endings and missing ones are intentional, we only require 3 lines total
+    const QString keyString = QString(
+        "\r\n\r"
+        "-----BEGIN OPENSSH PRIVATE KEY-----\n"
+        "b3BlbnNzaC1rZXktdjEAAAAABG5vbmUAAAAEbm9uZQAAAAAAAAABAAAAMwAAAAtzc2gtZW"
+        "QyNTUxOQAAACDdlO5F2kF2WzedrBAHBi9wBHeISzXZ0IuIqrp0EzeazAAAAKjgCfj94An4"
+        "/QAAAAtzc2gtZWQyNTUxOQAAACDdlO5F2kF2WzedrBAHBi9wBHeISzXZ0IuIqrp0EzeazA"
+        "AAAEBe1iilZFho8ZGAliiSj5URvFtGrgvmnEKdiLZow5hOR92U7kXaQXZbN52sEAcGL3AE"
+        "d4hLNdnQi4iqunQTN5rMAAAAH29wZW5zc2hrZXktdGVzdC1wYXJzZUBrZWVwYXNzeGMBAg"
+        "MEBQY=\r"
+        "-----END OPENSSH PRIVATE KEY-----\r\n\r"
+    );
+
+    const QByteArray keyData = keyString.toLatin1();
+
+    OpenSSHKey key;
+    QVERIFY(key.parse(keyData));
+    QVERIFY(!key.encrypted());
+    QCOMPARE(key.cipherName(), QString("none"));
+    QCOMPARE(key.type(), QString("ssh-ed25519"));
+    QCOMPARE(key.comment(), QString("opensshkey-test-parse@keepassxc"));
+
+    QByteArray publicKey, privateKey;
+    BinaryStream publicStream(&publicKey), privateStream(&privateKey);
+
+    QVERIFY(key.writePublic(publicStream));
+    QVERIFY(key.writePrivate(privateStream));
+
+    QVERIFY(publicKey.length() == 51);
+    QVERIFY(privateKey.length() == 154);
+}
+
+void TestOpenSSHKey::testDecryptAES256CBC()
+{
+    const QString keyString = QString(
+        "-----BEGIN OPENSSH PRIVATE KEY-----\n"
+        "b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jYmMAAAAGYmNyeXB0AAAAGAAAABD2A0agtd\n"
+        "oGtJiI9JvIxYbTAAAAEAAAAAEAAAAzAAAAC3NzaC1lZDI1NTE5AAAAIDPvDXmi0w1rdMoX\n"
+        "fOeyZ0Q/v+wqq/tPFgJwxnW5ADtfAAAAsC3UPsf035hrF5SgZ48p55iDFPiyGfZC/C3vQx\n"
+        "+THzpQo8DTUmFokdPn8wvDYGQoIcr9q0RzJuKV87eMQf3zzvZfJthtLYBlt330Deivv9AQ\n"
+        "MbKdhPZ4SfwRvv0grgT2EVId3GQAPgSVBhXYQTOf2CdmbXV4kieFLTmSsBMy+v6Qn5Rqur\n"
+        "PDWBwuLQgamcVDZuhrkUEqIVJZU2zAiRU2oAXsw/XOgFV6+Y5UZmLwWJQZ\n"
+        "-----END OPENSSH PRIVATE KEY-----\n"
+    );
+
+    const QByteArray keyData = keyString.toLatin1();
+
+    OpenSSHKey key;
+    QVERIFY(key.parse(keyData));
+    QVERIFY(key.encrypted());
+    QCOMPARE(key.cipherName(), QString("aes256-cbc"));
+    QVERIFY(!key.openPrivateKey("incorrectpassphrase"));
+    QVERIFY(key.openPrivateKey("correctpassphrase"));
+    QCOMPARE(key.type(), QString("ssh-ed25519"));
+    QCOMPARE(key.comment(), QString("opensshkey-test-aes256cbc@keepassxc"));
+
+    QByteArray publicKey, privateKey;
+    BinaryStream publicStream(&publicKey), privateStream(&privateKey);
+
+    QVERIFY(key.writePublic(publicStream));
+    QVERIFY(key.writePrivate(privateStream));
+
+    QVERIFY(publicKey.length() == 51);
+    QVERIFY(privateKey.length() == 158);
+}
+
+void TestOpenSSHKey::testDecryptAES256CTR()
+{
+    const QString keyString = QString(
+        "-----BEGIN OPENSSH PRIVATE KEY-----\n"
+        "b3BlbnNzaC1rZXktdjEAAAAACmFlczI1Ni1jdHIAAAAGYmNyeXB0AAAAGAAAABAMhIAypt\n"
+        "WP4tZJBmMwq0tTAAAAEAAAAAEAAAAzAAAAC3NzaC1lZDI1NTE5AAAAIErNsS8ROy43XoWC\n"
+        "nO9Sn2lEFBJYcDVtRPM1t6WB7W7OAAAAsFKXMOlPILoTmMj2JmcqzjaYAhaCezx18HDp76\n"
+        "VrNxaZTd0T28EGFSkzrReeewpJWy/bWlhLoXR5fRyOSSto+iMg/pibIvIJMrD5sqxlxr/e\n"
+        "c5lSeSZUzIK8Rv+ou/3EFDcY5jp8hVXqA4qNtoM/3fV52vmwlNje5d1V5Gsr4U8443+i+p\n"
+        "swqksozfatkynk51uR/9QFoOJKlsL/Z3LkK1S/apYz/K331iU1f5ozFELf\n"
+        "-----END OPENSSH PRIVATE KEY-----\n"
+    );
+
+    const QByteArray keyData = keyString.toLatin1();
+
+    OpenSSHKey key;
+    QVERIFY(key.parse(keyData));
+    QVERIFY(key.encrypted());
+    QCOMPARE(key.cipherName(), QString("aes256-ctr"));
+    QVERIFY(!key.openPrivateKey("incorrectpassphrase"));
+    QVERIFY(key.openPrivateKey("correctpassphrase"));
+    QCOMPARE(key.type(), QString("ssh-ed25519"));
+    QCOMPARE(key.comment(), QString("opensshkey-test-aes256ctr@keepassxc"));
+
+    QByteArray publicKey, privateKey;
+    BinaryStream publicStream(&publicKey), privateStream(&privateKey);
+
+    QVERIFY(key.writePublic(publicStream));
+    QVERIFY(key.writePrivate(privateStream));
+
+    QVERIFY(publicKey.length() == 51);
+    QVERIFY(privateKey.length() == 158);
+}
diff --git a/tests/TestOpenSSHKey.h b/tests/TestOpenSSHKey.h
new file mode 100644
index 00000000..92a071f6
--- /dev/null
+++ b/tests/TestOpenSSHKey.h
@@ -0,0 +1,35 @@
+/*
+ *  Copyright (C) 2017 Toni Spets <toni.spets@iki.fi>
+ *
+ *  This program is free software: you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation, either version 2 or (at your option)
+ *  version 3 of the License.
+ *
+ *  This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#ifndef TESTOPENSSHKEY_H
+#define TESTOPENSSHKEY_H
+
+#include <QObject>
+
+class OpenSSHKey;
+
+class TestOpenSSHKey : public QObject
+{
+    Q_OBJECT
+
+private slots:
+    void testParse();
+    void testDecryptAES256CBC();
+    void testDecryptAES256CTR();
+};
+
+#endif // TESTOPENSSHKEY_H

From 3b8d49104c35a0a85ef8511e1d563037ef505673 Mon Sep 17 00:00:00 2001
From: Weslly <weslly.honorato@gmail.com>
Date: Mon, 20 Nov 2017 04:26:53 -0200
Subject: [PATCH 095/118] Focus database unlock dialog on macOS, fix #1023

---
 src/autotype/AutoType.cpp  | 7 +++++++
 src/autotype/AutoType.h    | 1 +
 src/gui/DatabaseWidget.cpp | 6 ++++++
 3 files changed, 14 insertions(+)

diff --git a/src/autotype/AutoType.cpp b/src/autotype/AutoType.cpp
index 2519b9dc..0d01a831 100644
--- a/src/autotype/AutoType.cpp
+++ b/src/autotype/AutoType.cpp
@@ -256,6 +256,13 @@ void AutoType::resetInAutoType()
     m_inAutoType = false;
 }
 
+void AutoType::raiseWindow()
+{
+#if defined(Q_OS_MAC)
+    m_plugin->raiseOwnWindow();
+#endif
+}
+
 void AutoType::unloadPlugin()
 {
     if (m_executor) {
diff --git a/src/autotype/AutoType.h b/src/autotype/AutoType.h
index 6f4a815f..e881975a 100644
--- a/src/autotype/AutoType.h
+++ b/src/autotype/AutoType.h
@@ -51,6 +51,7 @@ public:
 
 public slots:
     void performGlobalAutoType(const QList<Database*>& dbList);
+    void raiseWindow();
 
 signals:
     void globalShortcutTriggered();
diff --git a/src/gui/DatabaseWidget.cpp b/src/gui/DatabaseWidget.cpp
index a610cf50..e5110e30 100644
--- a/src/gui/DatabaseWidget.cpp
+++ b/src/gui/DatabaseWidget.cpp
@@ -1400,6 +1400,12 @@ void DatabaseWidget::showUnlockDialog()
 {
     m_unlockDatabaseDialog->clearForms();
     m_unlockDatabaseDialog->setDBFilename(m_filename);
+
+#if defined(Q_OS_MAC)
+    autoType()->raiseWindow();
+    Tools::wait(500);
+#endif
+
     m_unlockDatabaseDialog->show();
     m_unlockDatabaseDialog->activateWindow();
 }

From f0a34de3c0d9e6453fdc8a261ae68f16c69bb553 Mon Sep 17 00:00:00 2001
From: Weslly <weslly.honorato@gmail.com>
Date: Mon, 20 Nov 2017 15:36:30 -0200
Subject: [PATCH 096/118] Revert 5bc000c to fix startup delay

---
 src/gui/entry/EditEntryWidgetMain.ui | 6 ------
 1 file changed, 6 deletions(-)

diff --git a/src/gui/entry/EditEntryWidgetMain.ui b/src/gui/entry/EditEntryWidgetMain.ui
index 2c9aa59b..dc07603a 100644
--- a/src/gui/entry/EditEntryWidgetMain.ui
+++ b/src/gui/entry/EditEntryWidgetMain.ui
@@ -127,12 +127,6 @@
        <height>100</height>
       </size>
      </property>
-     <property name="font">
-      <font>
-       <family>Monospace</family>
-       <pointsize>10</pointsize>
-      </font>
-     </property>
     </widget>
    </item>
    <item row="9" column="1">

From dc7322cc4a08b64e72bf19e3b48502db682a65f6 Mon Sep 17 00:00:00 2001
From: Weslly <weslly.honorato@gmail.com>
Date: Mon, 20 Nov 2017 01:38:48 -0200
Subject: [PATCH 097/118] Improve macOS pasteboard handling

---
 src/CMakeLists.txt         |  2 +
 src/core/MacPasteboard.cpp | 94 ++++++++++++++++++++++++++++++++++++++
 src/core/MacPasteboard.h   | 37 +++++++++++++++
 src/gui/Clipboard.cpp      | 11 +++++
 4 files changed, 144 insertions(+)
 create mode 100644 src/core/MacPasteboard.cpp
 create mode 100644 src/core/MacPasteboard.h

diff --git a/src/CMakeLists.txt b/src/CMakeLists.txt
index 092a2102..24742ede 100644
--- a/src/CMakeLists.txt
+++ b/src/CMakeLists.txt
@@ -155,6 +155,8 @@ if(APPLE)
     set(keepassx_SOURCES ${keepassx_SOURCES}
         core/ScreenLockListenerMac.h
         core/ScreenLockListenerMac.cpp
+        core/MacPasteboard.h
+        core/MacPasteboard.cpp
         )
 endif()
 if(${CMAKE_SYSTEM_NAME} STREQUAL "Linux")
diff --git a/src/core/MacPasteboard.cpp b/src/core/MacPasteboard.cpp
new file mode 100644
index 00000000..98dc6f7a
--- /dev/null
+++ b/src/core/MacPasteboard.cpp
@@ -0,0 +1,94 @@
+/*
+ *  Copyright (C) 2017 KeePassXC Team <team@keepassxc.org>
+ *
+ *  This program is free software: you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation, either version 2 or (at your option)
+ *  version 3 of the License.
+ *
+ *  This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#include "MacPasteboard.h"
+
+QString MacPasteboard::convertorName() { return QLatin1String("MacPasteboard"); }
+
+QString MacPasteboard::flavorFor(const QString& mimetype) {
+    if (mimetype == QLatin1String("text/plain")) {
+        return QLatin1String("public.utf8-plain-text");
+    } else if (mimetype == QLatin1String("application/x-nspasteboard-concealed-type")) {
+        return QLatin1String("org.nspasteboard.ConcealedType");
+    }
+
+    int i = mimetype.indexOf(QLatin1String("charset="));
+
+    if (i >= 0) {
+        QString cs(mimetype.mid(i + 8).toLower());
+        i = cs.indexOf(QLatin1Char(';'));
+
+        if (i >= 0) {
+            cs = cs.left(i);
+        }
+
+        if (cs == QLatin1String("system")) {
+            return QLatin1String("public.utf8-plain-text");
+        } else if (cs == QLatin1String("iso-10646-ucs-2") ||
+                   cs == QLatin1String("utf16")) {
+            return QLatin1String("public.utf16-plain-text");
+        }
+    }
+    return QString();
+}
+
+QString MacPasteboard::mimeFor(QString flavor) {
+    if (flavor == QLatin1String("public.utf8-plain-text"))
+        return QLatin1String("text/plain");
+    if (flavor == QLatin1String("org.nspasteboard.ConcealedType"))
+        return QLatin1String("application/x-nspasteboard-concealed-type");
+    if (flavor == QLatin1String("public.utf16-plain-text"))
+        return QLatin1String("text/plain;charset=utf16");
+    return QString();
+}
+
+bool MacPasteboard::canConvert(const QString& mimetype, QString flavor) {
+    Q_UNUSED(mimetype);
+    Q_UNUSED(flavor);
+    return true;
+}
+
+QVariant MacPasteboard::convertToMime(const QString& mimetype, QList<QByteArray> data, QString flavor) {
+    if (data.count() > 1)
+        qWarning("QMime::convertToMime: Cannot handle multiple member data");
+    const QByteArray& firstData = data.first();
+    QVariant ret;
+    if (flavor == QLatin1String("public.utf8-plain-text")) {
+        ret = QString::fromUtf8(firstData);
+    } else if (flavor == QLatin1String("org.nspasteboard.ConcealedType")) {
+        ret = QString::fromUtf8(firstData);
+    } else if (flavor == QLatin1String("public.utf16-plain-text")) {
+        ret = QTextCodec::codecForName("UTF-16")->toUnicode(firstData);
+    } else {
+        qWarning("QMime::convertToMime: unhandled mimetype: %s",
+                 qPrintable(mimetype));
+    }
+    return ret;
+}
+
+QList<QByteArray> MacPasteboard::convertFromMime(const QString&, QVariant data, QString flavor) {
+    QList<QByteArray> ret;
+    QString string = data.toString();
+    if (flavor == QLatin1String("public.utf8-plain-text"))
+        ret.append(string.toUtf8());
+    else if (flavor == QLatin1String("org.nspasteboard.ConcealedType"))
+        ret.append(string.toUtf8());
+    else if (flavor == QLatin1String("public.utf16-plain-text"))
+        ret.append(QTextCodec::codecForName("UTF-16")->fromUnicode(string));
+    return ret;
+}
+
diff --git a/src/core/MacPasteboard.h b/src/core/MacPasteboard.h
new file mode 100644
index 00000000..15e99616
--- /dev/null
+++ b/src/core/MacPasteboard.h
@@ -0,0 +1,37 @@
+/*
+ *  Copyright (C) 2017 KeePassXC Team <team@keepassxc.org>
+ *
+ *  This program is free software: you can redistribute it and/or modify
+ *  it under the terms of the GNU General Public License as published by
+ *  the Free Software Foundation, either version 2 or (at your option)
+ *  version 3 of the License.
+ *
+ *  This program is distributed in the hope that it will be useful,
+ *  but WITHOUT ANY WARRANTY; without even the implied warranty of
+ *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ *  GNU General Public License for more details.
+ *
+ *  You should have received a copy of the GNU General Public License
+ *  along with this program.  If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#ifndef KEEPASSXC_MACPASTEBOARD_H
+#define KEEPASSXC_MACPASTEBOARD_H
+
+#include <QMacPasteboardMime>
+#include <QTextCodec>
+
+class MacPasteboard : public QMacPasteboardMime
+{
+public:
+    explicit MacPasteboard() : QMacPasteboardMime(MIME_ALL) {}
+
+    QString convertorName();
+    bool canConvert(const QString &mime, QString flav);
+    QString mimeFor(QString flav);
+    QString flavorFor(const QString &mime);
+    QVariant convertToMime(const QString &mime, QList<QByteArray> data, QString flav);
+    QList<QByteArray> convertFromMime(const QString &mime, QVariant data, QString flav);
+};
+
+#endif // KEEPASSXC_MACPASTEBOARD_H
diff --git a/src/gui/Clipboard.cpp b/src/gui/Clipboard.cpp
index bf4db8ff..a6238572 100644
--- a/src/gui/Clipboard.cpp
+++ b/src/gui/Clipboard.cpp
@@ -22,6 +22,9 @@
 #include <QTimer>
 
 #include "core/Config.h"
+#ifdef Q_OS_MAC
+#include "core/MacPasteboard.h"
+#endif
 
 Clipboard* Clipboard::m_instance(nullptr);
 
@@ -38,10 +41,18 @@ void Clipboard::setText(const QString& text)
 {
     QClipboard* clipboard = QApplication::clipboard();
 
+#ifdef Q_OS_MAC
+    new MacPasteboard;
+    QMimeData* mime = new QMimeData;
+    mime->setText(text);
+    mime->setData("application/x-nspasteboard-concealed-type", text.toUtf8());
+    clipboard->setMimeData(mime, QClipboard::Clipboard);
+#else
     clipboard->setText(text, QClipboard::Clipboard);
     if (clipboard->supportsSelection()) {
         clipboard->setText(text, QClipboard::Selection);
     }
+#endif
 
     if (config()->get("security/clearclipboard").toBool()) {
         int timeout = config()->get("security/clearclipboardtimeout").toInt();

From 806248ebd4a2ab68c159029ea94597c731c72414 Mon Sep 17 00:00:00 2001
From: Weslly <weslly.honorato@gmail.com>
Date: Mon, 20 Nov 2017 16:50:56 -0200
Subject: [PATCH 098/118] Review fixes

---
 src/core/MacPasteboard.h | 12 ++++++------
 src/gui/Clipboard.cpp    | 17 +++++++++++++----
 src/gui/Clipboard.h      |  7 +++++++
 3 files changed, 26 insertions(+), 10 deletions(-)

diff --git a/src/core/MacPasteboard.h b/src/core/MacPasteboard.h
index 15e99616..8461cbc5 100644
--- a/src/core/MacPasteboard.h
+++ b/src/core/MacPasteboard.h
@@ -26,12 +26,12 @@ class MacPasteboard : public QMacPasteboardMime
 public:
     explicit MacPasteboard() : QMacPasteboardMime(MIME_ALL) {}
 
-    QString convertorName();
-    bool canConvert(const QString &mime, QString flav);
-    QString mimeFor(QString flav);
-    QString flavorFor(const QString &mime);
-    QVariant convertToMime(const QString &mime, QList<QByteArray> data, QString flav);
-    QList<QByteArray> convertFromMime(const QString &mime, QVariant data, QString flav);
+    QString convertorName() override;
+    bool canConvert(const QString &mime, QString flav) override;
+    QString mimeFor(QString flav) override;
+    QString flavorFor(const QString &mime) override;
+    QVariant convertToMime(const QString &mime, QList<QByteArray> data, QString flav) override;
+    QList<QByteArray> convertFromMime(const QString &mime, QVariant data, QString flav) override;
 };
 
 #endif // KEEPASSXC_MACPASTEBOARD_H
diff --git a/src/gui/Clipboard.cpp b/src/gui/Clipboard.cpp
index a6238572..a35f59b1 100644
--- a/src/gui/Clipboard.cpp
+++ b/src/gui/Clipboard.cpp
@@ -22,9 +22,6 @@
 #include <QTimer>
 
 #include "core/Config.h"
-#ifdef Q_OS_MAC
-#include "core/MacPasteboard.h"
-#endif
 
 Clipboard* Clipboard::m_instance(nullptr);
 
@@ -33,16 +30,28 @@ Clipboard::Clipboard(QObject* parent)
     , m_timer(new QTimer(this))
 {
     m_timer->setSingleShot(true);
+#ifdef Q_OS_MAC
+    m_pasteboard = new MacPasteboard;
+#endif
+
     connect(m_timer, SIGNAL(timeout()), SLOT(clearClipboard()));
     connect(qApp, SIGNAL(aboutToQuit()), SLOT(clearCopiedText()));
 }
 
+Clipboard::~Clipboard()
+{
+#ifdef Q_OS_MAC
+    if (m_pasteboard) {
+        delete m_pasteboard;
+    }
+#endif
+}
+
 void Clipboard::setText(const QString& text)
 {
     QClipboard* clipboard = QApplication::clipboard();
 
 #ifdef Q_OS_MAC
-    new MacPasteboard;
     QMimeData* mime = new QMimeData;
     mime->setText(text);
     mime->setData("application/x-nspasteboard-concealed-type", text.toUtf8());
diff --git a/src/gui/Clipboard.h b/src/gui/Clipboard.h
index e0a16d26..68f4e048 100644
--- a/src/gui/Clipboard.h
+++ b/src/gui/Clipboard.h
@@ -19,6 +19,9 @@
 #define KEEPASSX_CLIPBOARD_H
 
 #include <QObject>
+#ifdef Q_OS_MAC
+#include "core/MacPasteboard.h"
+#endif
 
 class QTimer;
 
@@ -28,6 +31,7 @@ class Clipboard : public QObject
 
 public:
     void setText(const QString& text);
+    ~Clipboard();
 
     static Clipboard* instance();
 
@@ -43,6 +47,9 @@ private:
     static Clipboard* m_instance;
 
     QTimer* m_timer;
+#ifdef Q_OS_MAC
+    MacPasteboard* m_pasteboard;
+#endif
     QString m_lastCopied;
 };
 

From afe48da4b182e71b204d33c5f9a8f8d43cffc074 Mon Sep 17 00:00:00 2001
From: Weslly <weslly.honorato@gmail.com>
Date: Mon, 20 Nov 2017 17:25:27 -0200
Subject: [PATCH 099/118] Change MacPasteboard init object to QScopedPointer

---
 src/gui/Clipboard.cpp | 16 +++-------------
 src/gui/Clipboard.h   |  3 +--
 2 files changed, 4 insertions(+), 15 deletions(-)

diff --git a/src/gui/Clipboard.cpp b/src/gui/Clipboard.cpp
index a35f59b1..78bad273 100644
--- a/src/gui/Clipboard.cpp
+++ b/src/gui/Clipboard.cpp
@@ -28,25 +28,15 @@ Clipboard* Clipboard::m_instance(nullptr);
 Clipboard::Clipboard(QObject* parent)
     : QObject(parent)
     , m_timer(new QTimer(this))
+#ifdef Q_OS_MAC
+    , m_pasteboard(new MacPasteboard)
+#endif
 {
     m_timer->setSingleShot(true);
-#ifdef Q_OS_MAC
-    m_pasteboard = new MacPasteboard;
-#endif
-
     connect(m_timer, SIGNAL(timeout()), SLOT(clearClipboard()));
     connect(qApp, SIGNAL(aboutToQuit()), SLOT(clearCopiedText()));
 }
 
-Clipboard::~Clipboard()
-{
-#ifdef Q_OS_MAC
-    if (m_pasteboard) {
-        delete m_pasteboard;
-    }
-#endif
-}
-
 void Clipboard::setText(const QString& text)
 {
     QClipboard* clipboard = QApplication::clipboard();
diff --git a/src/gui/Clipboard.h b/src/gui/Clipboard.h
index 68f4e048..6f8ff9ac 100644
--- a/src/gui/Clipboard.h
+++ b/src/gui/Clipboard.h
@@ -31,7 +31,6 @@ class Clipboard : public QObject
 
 public:
     void setText(const QString& text);
-    ~Clipboard();
 
     static Clipboard* instance();
 
@@ -48,7 +47,7 @@ private:
 
     QTimer* m_timer;
 #ifdef Q_OS_MAC
-    MacPasteboard* m_pasteboard;
+    QScopedPointer<MacPasteboard> m_pasteboard;
 #endif
     QString m_lastCopied;
 };

From 8ca52ba8f9856cc015f4421bfcfef6eeec3f4b85 Mon Sep 17 00:00:00 2001
From: Joel Smith <joesmith@redhat.com>
Date: Mon, 20 Nov 2017 11:01:22 -0700
Subject: [PATCH 100/118] Add initial Steam TOTP support

* Add the concept of custom TOTP encoders, each with potential for custom
  code alphabet, length, step interval and code direction (i.e. reversed)
* Select custom encoder via overload of the digits field of a loaded entry
* Allow selection of custom encoders via the "TOTP Settings" field's
  size, as currently done by KeeTrayTOTP for Steam. Use "S" for the
  short name of the Steam custom encoder
* Allow selection of custom encoders via the "otp" field by appending
  a "&encoder=<name>" field to the URL query. For example,
  "&encoder=steam"
* Update TOTP set-up dialog to permit selection between (default,
  steam, custom) settings.
---
 src/core/Entry.cpp          | 33 +++++++++++---
 src/gui/DatabaseWidget.cpp  |  2 +
 src/gui/DetailsWidget.cpp   |  2 +-
 src/gui/SetupTotpDialog.cpp | 49 ++++++++++++++++-----
 src/gui/SetupTotpDialog.h   |  3 ++
 src/gui/SetupTotpDialog.ui  | 42 +++++++++++++++---
 src/gui/TotpDialog.cpp      |  4 +-
 src/totp/totp.cpp           | 60 +++++++++++++++++++++++---
 src/totp/totp.h             | 21 ++++++++-
 tests/TestTotp.cpp          | 86 +++++++++++++++++++++++++++++++++++++
 tests/TestTotp.h            |  2 +
 11 files changed, 270 insertions(+), 34 deletions(-)

diff --git a/src/core/Entry.cpp b/src/core/Entry.cpp
index 91d757a9..eab79d6a 100644
--- a/src/core/Entry.cpp
+++ b/src/core/Entry.cpp
@@ -25,6 +25,8 @@
 #include "core/Metadata.h"
 #include "totp/totp.h"
 
+#include <QRegularExpression>
+
 const int Entry::DefaultIconNumber = 0;
 const int Entry::ResolveMaximumDepth = 10;
 
@@ -332,12 +334,24 @@ void Entry::setTotp(const QString& seed, quint8& step, quint8& digits)
     if (digits == 0) {
         digits = QTotp::defaultDigits;
     }
+    QString data;
+
+    const QTotp::Encoder & enc = QTotp::encoders.value(digits, QTotp::defaultEncoder);
 
     if (m_attributes->hasKey("otp")) {
-        m_attributes->set("otp", QString("key=%1&step=%2&size=%3").arg(seed).arg(step).arg(digits), true);
+        data = QString("key=%1&step=%2&size=%3").arg(seed).arg(step).arg(enc.digits == 0 ? digits : enc.digits);
+        if (!enc.name.isEmpty()) {
+            data.append("&enocder=").append(enc.name);
+        }
+        m_attributes->set("otp", data, true);
     } else {
         m_attributes->set("TOTP Seed", seed, true);
-        m_attributes->set("TOTP Settings", QString("%1;%2").arg(step).arg(digits));
+        if (!enc.shortName.isEmpty()) {
+            data = QString("%1;%2").arg(step).arg(enc.shortName);
+        } else {
+            data = QString("%1;%2").arg(step).arg(digits);
+        }
+        m_attributes->set("TOTP Settings", data);
     }
 }
 
@@ -355,11 +369,16 @@ QString Entry::totpSeed() const
     m_data.totpStep = QTotp::defaultStep;
 
     if (m_attributes->hasKey("TOTP Settings")) {
-        QRegExp rx("(\\d+);(\\d)", Qt::CaseInsensitive, QRegExp::RegExp);
-        int pos = rx.indexIn(m_attributes->value("TOTP Settings"));
-        if (pos > -1) {
-            m_data.totpStep = rx.cap(1).toUInt();
-            m_data.totpDigits = rx.cap(2).toUInt();
+        // this regex must be kept in sync with the set of allowed short names QTotp::shortNameToEncoder
+        QRegularExpression rx(QString("(\\d+);((?:\\d+)|S)"));
+        QRegularExpressionMatch m = rx.match(m_attributes->value("TOTP Settings"));
+        if (m.hasMatch()) {
+            m_data.totpStep = m.captured(1).toUInt();
+            if (QTotp::shortNameToEncoder.contains(m.captured(2))) {
+                m_data.totpDigits = QTotp::shortNameToEncoder[m.captured(2)];
+            } else {
+                m_data.totpDigits = m.captured(2).toUInt();
+            }
         }
     }
 
diff --git a/src/gui/DatabaseWidget.cpp b/src/gui/DatabaseWidget.cpp
index e5110e30..a0671af9 100644
--- a/src/gui/DatabaseWidget.cpp
+++ b/src/gui/DatabaseWidget.cpp
@@ -417,6 +417,8 @@ void DatabaseWidget::setupTotp()
         setupTotpDialog->setSeed(currentEntry->totpSeed());
         setupTotpDialog->setStep(currentEntry->totpStep());
         setupTotpDialog->setDigits(currentEntry->totpDigits());
+        // now that all settings are set, decide whether it's default, steam or custom
+        setupTotpDialog->setSettings(currentEntry->totpDigits());
     }
 
     setupTotpDialog->open();
diff --git a/src/gui/DetailsWidget.cpp b/src/gui/DetailsWidget.cpp
index c8dc058d..23c3485a 100644
--- a/src/gui/DetailsWidget.cpp
+++ b/src/gui/DetailsWidget.cpp
@@ -270,7 +270,7 @@ void DetailsWidget::updateTotp()
     if (!m_locked) {
         QString totpCode = m_currentEntry->totp();
         QString firstHalf = totpCode.left(totpCode.size() / 2);
-        QString secondHalf = totpCode.right(totpCode.size() / 2);
+        QString secondHalf = totpCode.mid(totpCode.size() / 2);
         m_ui->totpLabel->setText(firstHalf + " " + secondHalf);
     } else if (nullptr != m_timer) {
         m_timer->stop();
diff --git a/src/gui/SetupTotpDialog.cpp b/src/gui/SetupTotpDialog.cpp
index 5521773b..2e6c91f0 100644
--- a/src/gui/SetupTotpDialog.cpp
+++ b/src/gui/SetupTotpDialog.cpp
@@ -35,7 +35,9 @@ SetupTotpDialog::SetupTotpDialog(DatabaseWidget* parent, Entry* entry)
 
     connect(m_ui->buttonBox, SIGNAL(rejected()), SLOT(close()));
     connect(m_ui->buttonBox, SIGNAL(accepted()), SLOT(setupTotp()));
-    connect(m_ui->customSettingsCheckBox, SIGNAL(toggled(bool)), SLOT(toggleCustom(bool)));
+    connect(m_ui->radioDefault, SIGNAL(toggled(bool)), SLOT(toggleDefault(bool)));
+    connect(m_ui->radioSteam, SIGNAL(toggled(bool)), SLOT(toggleSteam(bool)));
+    connect(m_ui->radioCustom, SIGNAL(toggled(bool)), SLOT(toggleCustom(bool)));
 }
 
 
@@ -43,7 +45,9 @@ void SetupTotpDialog::setupTotp()
 {
     quint8 digits;
 
-    if (m_ui->radio8Digits->isChecked()) {
+    if (m_ui->radioSteam->isChecked()) {
+        digits = QTotp::ENCODER_STEAM;
+    } else if (m_ui->radio8Digits->isChecked()) {
         digits = 8;
     } else {
         digits = 6;
@@ -56,6 +60,22 @@ void SetupTotpDialog::setupTotp()
     close();
 }
 
+void SetupTotpDialog::toggleDefault(bool status)
+{
+    if (status) {
+        setStep(QTotp::defaultStep);
+        setDigits(QTotp::defaultDigits);
+    }
+}
+
+void SetupTotpDialog::toggleSteam(bool status)
+{
+    if (status) {
+        setStep(QTotp::defaultStep);
+        setDigits(QTotp::ENCODER_STEAM);
+    }
+}
+
 void SetupTotpDialog::toggleCustom(bool status)
 {
     m_ui->digitsLabel->setEnabled(status);
@@ -72,13 +92,25 @@ void SetupTotpDialog::setSeed(QString value)
     m_ui->seedEdit->setText(value);
 }
 
+void SetupTotpDialog::setSettings(quint8 digits) {
+    quint8 step = m_ui->stepSpinBox->value();
+
+    bool isDefault = ((step == QTotp::defaultStep) &&
+        (digits == QTotp::defaultDigits));
+    bool isSteam = (digits == QTotp::ENCODER_STEAM);
+
+    if (isSteam) {
+        m_ui->radioSteam->setChecked(true);
+    } else if (isDefault) {
+        m_ui->radioDefault->setChecked(true);
+    } else {
+        m_ui->radioCustom->setChecked(true);
+    }
+}
+
 void SetupTotpDialog::setStep(quint8 step)
 {
     m_ui->stepSpinBox->setValue(step);
-
-    if (step != QTotp::defaultStep) {
-        m_ui->customSettingsCheckBox->setChecked(true);
-    }
 }
 
 void SetupTotpDialog::setDigits(quint8 digits)
@@ -90,13 +122,8 @@ void SetupTotpDialog::setDigits(quint8 digits)
         m_ui->radio6Digits->setChecked(true);
         m_ui->radio8Digits->setChecked(false);
     }
-
-    if (digits != QTotp::defaultDigits) {
-        m_ui->customSettingsCheckBox->setChecked(true);
-    }
 }
 
-
 SetupTotpDialog::~SetupTotpDialog()
 {
 }
diff --git a/src/gui/SetupTotpDialog.h b/src/gui/SetupTotpDialog.h
index 243a05f9..9e90e968 100644
--- a/src/gui/SetupTotpDialog.h
+++ b/src/gui/SetupTotpDialog.h
@@ -39,8 +39,11 @@ public:
     void setSeed(QString value);
     void setStep(quint8 step);
     void setDigits(quint8 digits);
+    void setSettings(quint8 digits);
 
 private Q_SLOTS:
+    void toggleDefault(bool status);
+    void toggleSteam(bool status);
     void toggleCustom(bool status);
     void setupTotp();
 
diff --git a/src/gui/SetupTotpDialog.ui b/src/gui/SetupTotpDialog.ui
index a6d80628..c3a83e21 100644
--- a/src/gui/SetupTotpDialog.ui
+++ b/src/gui/SetupTotpDialog.ui
@@ -7,7 +7,7 @@
     <x>0</x>
     <y>0</y>
     <width>282</width>
-    <height>257</height>
+    <height>364</height>
    </rect>
   </property>
   <property name="windowTitle">
@@ -29,11 +29,38 @@
     </layout>
    </item>
    <item>
-    <widget class="QCheckBox" name="customSettingsCheckBox">
-     <property name="text">
-      <string>Use custom settings</string>
-     </property>
-    </widget>
+    <layout class="QVBoxLayout" name="verticalLayout_2">
+     <item>
+      <widget class="QRadioButton" name="radioDefault">
+       <property name="text">
+        <string>Default RFC 6238 token settings</string>
+       </property>
+       <attribute name="buttonGroup">
+        <string notr="true">settingsButtonGroup</string>
+       </attribute>
+      </widget>
+     </item>
+     <item>
+      <widget class="QRadioButton" name="radioSteam">
+       <property name="text">
+        <string>Steam token settings</string>
+       </property>
+       <attribute name="buttonGroup">
+        <string notr="true">settingsButtonGroup</string>
+       </attribute>
+      </widget>
+     </item>
+     <item>
+      <widget class="QRadioButton" name="radioCustom">
+       <property name="text">
+        <string>Use custom settings</string>
+       </property>
+       <attribute name="buttonGroup">
+        <string notr="true">settingsButtonGroup</string>
+       </attribute>
+      </widget>
+     </item>
+    </layout>
    </item>
    <item>
     <widget class="QLabel" name="label_4">
@@ -134,4 +161,7 @@
  </widget>
  <resources/>
  <connections/>
+ <buttongroups>
+  <buttongroup name="settingsButtonGroup"/>
+ </buttongroups>
 </ui>
diff --git a/src/gui/TotpDialog.cpp b/src/gui/TotpDialog.cpp
index 17cc1120..474acf77 100644
--- a/src/gui/TotpDialog.cpp
+++ b/src/gui/TotpDialog.cpp
@@ -87,8 +87,8 @@ void TotpDialog::updateSeconds()
 void TotpDialog::updateTotp()
 {
     QString totpCode = m_entry->totp();
-    QString firstHalf = totpCode.left(totpCode.size()/2);
-    QString secondHalf = totpCode.right(totpCode.size()/2);
+    QString firstHalf = totpCode.left(totpCode.size() / 2);
+    QString secondHalf = totpCode.mid(totpCode.size() / 2);
     m_ui->totpLabel->setText(firstHalf + " " + secondHalf);
 }
 
diff --git a/src/totp/totp.cpp b/src/totp/totp.cpp
index 7a584def..f17def8a 100644
--- a/src/totp/totp.cpp
+++ b/src/totp/totp.cpp
@@ -31,6 +31,39 @@
 const quint8 QTotp::defaultStep = 30;
 const quint8 QTotp::defaultDigits = 6;
 
+/**
+ * Custom encoder types. Each should be unique and >= 128 and < 255
+ * Values have no meaning outside of keepassxc
+ */
+/**
+ * Encoder for Steam Guard TOTP
+ */
+const quint8 QTotp::ENCODER_STEAM = 254;
+
+const QTotp::Encoder QTotp::defaultEncoder = { "", "", "0123456789", 0, 0, false };
+const QMap<quint8, QTotp::Encoder> QTotp::encoders{
+    { QTotp::ENCODER_STEAM, { "steam", "S", "23456789BCDFGHJKMNPQRTVWXY", 5, 30, true } },
+};
+
+/**
+ * These map the second field of the "TOTP Settings" field to our internal encoder number
+ * that overloads the digits field. Make sure that the key matches the shortName value
+ * in the corresponding Encoder
+ * NOTE: when updating this map, a corresponding edit to the settings regex must be made
+ *       in Entry::totpSeed()
+ */
+const QMap<QString, quint8> QTotp::shortNameToEncoder{
+    { "S", QTotp::ENCODER_STEAM },
+};
+/**
+ * These map the "encoder=" URL parameter of the "otp" field to our internal encoder number
+ * that overloads the digits field. Make sure that the key matches the name value
+ * in the corresponding Encoder
+ */
+const QMap<QString, quint8> QTotp::nameToEncoder{
+    { "steam", QTotp::ENCODER_STEAM },
+};
+
 QTotp::QTotp()
 {
 }
@@ -57,7 +90,10 @@ QString QTotp::parseOtpString(QString key, quint8& digits, quint8& step)
         if (q_step > 0 && q_step <= 60) {
             step = q_step;
         }
-
+        QString encName = query.queryItemValue("encoder");
+        if (!encName.isEmpty() && nameToEncoder.contains(encName)) {
+            digits = nameToEncoder[encName];
+        }
     } else {
         // Compatibility with "KeeOtp" plugin string format
         QRegExp rx("key=(.+)", Qt::CaseInsensitive, QRegExp::RegExp);
@@ -119,10 +155,24 @@ QString QTotp::generateTotp(const QByteArray key,
             | (hmac[offset + 3] & 0xff);
     // clang-format on
 
-    quint32 digitsPower = pow(10, numDigits);
+    const Encoder& encoder = encoders.value(numDigits, defaultEncoder);
+    // if encoder.digits is 0, we need to use the passed-in number of digits (default encoder)
+    quint8 digits = encoder.digits == 0 ? numDigits : encoder.digits;
+    int direction = -1;
+    int startpos = digits - 1;
+    if (encoder.reverse) {
+        direction = 1;
+        startpos = 0;
+    }
+    quint32 digitsPower = pow(encoder.alphabet.size(), digits);
 
     quint64 password = binary % digitsPower;
-    return QString("%1").arg(password, numDigits, 10, QChar('0'));
+    QString retval(int(digits), encoder.alphabet[0]);
+    for (quint8 pos = startpos; password > 0; pos += direction) {
+        retval[pos] = encoder.alphabet[int(password % encoder.alphabet.size())];
+        password /= encoder.alphabet.size();
+    }
+    return retval;
 }
 
 // See: https://github.com/google/google-authenticator/wiki/Key-Uri-Format
@@ -131,8 +181,8 @@ QUrl QTotp::generateOtpString(const QString& secret,
                               const QString& issuer,
                               const QString& username,
                               const QString& algorithm,
-                              const quint8& digits,
-                              const quint8& step)
+                              quint8 digits,
+                              quint8 step)
 {
     QUrl keyUri;
     keyUri.setScheme("otpauth");
diff --git a/src/totp/totp.h b/src/totp/totp.h
index d5d8aa67..d6729871 100644
--- a/src/totp/totp.h
+++ b/src/totp/totp.h
@@ -20,6 +20,8 @@
 #define QTOTP_H
 
 #include <QtCore/qglobal.h>
+#include <QString>
+#include <QMap>
 
 class QUrl;
 
@@ -34,10 +36,25 @@ public:
                                   const QString& issuer,
                                   const QString& username,
                                   const QString& algorithm,
-                                  const quint8& digits,
-                                  const quint8& step);
+                                  quint8 digits,
+                                  quint8 step);
     static const quint8 defaultStep;
     static const quint8 defaultDigits;
+    struct Encoder
+    {
+        QString name;
+        QString shortName;
+        QString alphabet;
+        quint8 digits;
+        quint8 step;
+        bool reverse;
+    };
+    static const Encoder defaultEncoder;
+    // custom encoder values that overload the digits field
+    static const quint8 ENCODER_STEAM;
+    static const QMap<quint8, Encoder> encoders;
+    static const QMap<QString, quint8> shortNameToEncoder;
+    static const QMap<QString, quint8> nameToEncoder;
 };
 
 #endif // QTOTP_H
diff --git a/tests/TestTotp.cpp b/tests/TestTotp.cpp
index 48ff8814..288c047a 100644
--- a/tests/TestTotp.cpp
+++ b/tests/TestTotp.cpp
@@ -83,3 +83,89 @@ void TestTotp::testTotpCode()
     output = QTotp::generateTotp(seed, time, 8, 30);
     QCOMPARE(output, QString("69279037"));
 }
+
+void TestTotp::testEncoderData()
+{
+    for (quint8 key: QTotp::encoders.keys()) {
+        const QTotp::Encoder& enc = QTotp::encoders.value(key);
+        QVERIFY2(enc.digits != 0,
+            qPrintable(QString("Custom encoders cannot have zero-value for digits field: %1(%2)")
+                               .arg(enc.name)
+                               .arg(key)));
+        QVERIFY2(!enc.name.isEmpty(),
+            qPrintable(QString("Custom encoders must have a name: %1(%2)")
+                               .arg(enc.name)
+                               .arg(key)));
+        QVERIFY2(!enc.shortName.isEmpty(),
+            qPrintable(QString("Custom encoders must have a shortName: %1(%2)")
+                               .arg(enc.name)
+                               .arg(key)));
+        QVERIFY2(QTotp::shortNameToEncoder.contains(enc.shortName),
+            qPrintable(QString("No shortNameToEncoder entry found for custom encoder: %1(%2) %3")
+                               .arg(enc.name)
+                               .arg(key)
+                               .arg(enc.shortName)));
+        QVERIFY2(QTotp::shortNameToEncoder[enc.shortName] == key,
+            qPrintable(QString("shortNameToEncoder doesn't reference this custome encoder: %1(%2) %3")
+                               .arg(enc.name)
+                               .arg(key)
+                               .arg(enc.shortName)));
+        QVERIFY2(QTotp::nameToEncoder.contains(enc.name),
+            qPrintable(QString("No nameToEncoder entry found for custom encoder: %1(%2) %3")
+                               .arg(enc.name)
+                               .arg(key)
+                               .arg(enc.shortName)));
+        QVERIFY2(QTotp::nameToEncoder[enc.name] == key,
+            qPrintable(QString("nameToEncoder doesn't reference this custome encoder: %1(%2) %3")
+                               .arg(enc.name)
+                               .arg(key)
+                               .arg(enc.shortName)));
+    }
+
+    for (const QString & key: QTotp::nameToEncoder.keys()) {
+        quint8 value = QTotp::nameToEncoder.value(key);
+        QVERIFY2(QTotp::encoders.contains(value),
+                qPrintable(QString("No custom encoder found for encoder named %1(%2)")
+                                   .arg(value)
+                                   .arg(key)));
+        QVERIFY2(QTotp::encoders[value].name == key,
+                qPrintable(QString("nameToEncoder doesn't reference the right custom encoder: %1(%2)")
+                                   .arg(value)
+                                   .arg(key)));
+    }
+
+    for (const QString & key: QTotp::shortNameToEncoder.keys()) {
+        quint8 value = QTotp::shortNameToEncoder.value(key);
+        QVERIFY2(QTotp::encoders.contains(value),
+                qPrintable(QString("No custom encoder found for short-name encoder %1(%2)")
+                                   .arg(value)
+                                   .arg(key)));
+        QVERIFY2(QTotp::encoders[value].shortName == key,
+                qPrintable(QString("shortNameToEncoder doesn't reference the right custom encoder: %1(%2)")
+                                   .arg(value)
+                                   .arg(key)));
+    }
+}
+
+void TestTotp::testSteamTotp()
+{
+    quint8 digits = 0;
+    quint8 step = 0;
+    QString secret = "otpauth://totp/"
+                     "test:test@example.com?secret=63BEDWCQZKTQWPESARIERL5DTTQFCJTK&issuer=Valve&algorithm="
+                     "SHA1&digits=5&period=30&encoder=steam";
+    QCOMPARE(QTotp::parseOtpString(secret, digits, step), QString("63BEDWCQZKTQWPESARIERL5DTTQFCJTK"));
+    QCOMPARE(digits, quint8(QTotp::ENCODER_STEAM));
+    QCOMPARE(step, quint8(30));
+
+
+    QByteArray seed = QString("63BEDWCQZKTQWPESARIERL5DTTQFCJTK").toLatin1();
+
+    // These time/value pairs were created by running the Steam Guard function of the
+    // Steam mobile app with a throw-away steam account. The above secret was extracted
+    // from the Steam app's data for use in testing here.
+    quint64 time = 1511200518;
+    QCOMPARE(QTotp::generateTotp(seed, time, QTotp::ENCODER_STEAM, 30), QString("FR8RV"));
+    time = 1511200714;
+    QCOMPARE(QTotp::generateTotp(seed, time, QTotp::ENCODER_STEAM, 30), QString("9P3VP"));
+}
diff --git a/tests/TestTotp.h b/tests/TestTotp.h
index 785a9f52..3bf2de93 100644
--- a/tests/TestTotp.h
+++ b/tests/TestTotp.h
@@ -31,6 +31,8 @@ private slots:
     void initTestCase();
     void testParseSecret();
     void testTotpCode();
+    void testEncoderData();
+    void testSteamTotp();
 };
 
 #endif // KEEPASSX_TESTTOTP_H

From 19ac36b965261846353734305981c18868e5f0d9 Mon Sep 17 00:00:00 2001
From: Weslly <weslly.honorato@gmail.com>
Date: Mon, 20 Nov 2017 22:25:09 -0200
Subject: [PATCH 101/118] Change QTotp class name to Totp

---
 src/core/Entry.cpp          | 24 ++++++++---------
 src/gui/SetupTotpDialog.cpp | 18 ++++++-------
 src/totp/totp.cpp           | 28 +++++++++----------
 src/totp/totp.h             |  4 +--
 tests/TestTotp.cpp          | 54 ++++++++++++++++++-------------------
 5 files changed, 64 insertions(+), 64 deletions(-)

diff --git a/src/core/Entry.cpp b/src/core/Entry.cpp
index eab79d6a..53a1ad22 100644
--- a/src/core/Entry.cpp
+++ b/src/core/Entry.cpp
@@ -42,8 +42,8 @@ Entry::Entry()
     m_data.iconNumber = DefaultIconNumber;
     m_data.autoTypeEnabled = true;
     m_data.autoTypeObfuscation = 0;
-    m_data.totpStep = QTotp::defaultStep;
-    m_data.totpDigits = QTotp::defaultDigits;
+    m_data.totpStep = Totp::defaultStep;
+    m_data.totpDigits = Totp::defaultDigits;
 
     connect(m_attributes, SIGNAL(modified()), this, SIGNAL(modified()));
     connect(m_attributes, SIGNAL(defaultKeyModified()), SLOT(emitDataChanged()));
@@ -317,7 +317,7 @@ QString Entry::totp() const
     if (hasTotp()) {
         QString seed = totpSeed();
         quint64 time = QDateTime::currentDateTime().toTime_t();
-        QString output = QTotp::generateTotp(seed.toLatin1(), time, m_data.totpDigits, m_data.totpStep);
+        QString output = Totp::generateTotp(seed.toLatin1(), time, m_data.totpDigits, m_data.totpStep);
 
         return QString(output);
     } else {
@@ -328,15 +328,15 @@ QString Entry::totp() const
 void Entry::setTotp(const QString& seed, quint8& step, quint8& digits)
 {
     if (step == 0) {
-        step = QTotp::defaultStep;
+        step = Totp::defaultStep;
     }
 
     if (digits == 0) {
-        digits = QTotp::defaultDigits;
+        digits = Totp::defaultDigits;
     }
     QString data;
 
-    const QTotp::Encoder & enc = QTotp::encoders.value(digits, QTotp::defaultEncoder);
+    const Totp::Encoder & enc = Totp::encoders.value(digits, Totp::defaultEncoder);
 
     if (m_attributes->hasKey("otp")) {
         data = QString("key=%1&step=%2&size=%3").arg(seed).arg(step).arg(enc.digits == 0 ? digits : enc.digits);
@@ -365,24 +365,24 @@ QString Entry::totpSeed() const
         secret = m_attributes->value("TOTP Seed");
     }
 
-    m_data.totpDigits = QTotp::defaultDigits;
-    m_data.totpStep = QTotp::defaultStep;
+    m_data.totpDigits = Totp::defaultDigits;
+    m_data.totpStep = Totp::defaultStep;
 
     if (m_attributes->hasKey("TOTP Settings")) {
-        // this regex must be kept in sync with the set of allowed short names QTotp::shortNameToEncoder
+        // this regex must be kept in sync with the set of allowed short names Totp::shortNameToEncoder
         QRegularExpression rx(QString("(\\d+);((?:\\d+)|S)"));
         QRegularExpressionMatch m = rx.match(m_attributes->value("TOTP Settings"));
         if (m.hasMatch()) {
             m_data.totpStep = m.captured(1).toUInt();
-            if (QTotp::shortNameToEncoder.contains(m.captured(2))) {
-                m_data.totpDigits = QTotp::shortNameToEncoder[m.captured(2)];
+            if (Totp::shortNameToEncoder.contains(m.captured(2))) {
+                m_data.totpDigits = Totp::shortNameToEncoder[m.captured(2)];
             } else {
                 m_data.totpDigits = m.captured(2).toUInt();
             }
         }
     }
 
-    return QTotp::parseOtpString(secret, m_data.totpDigits, m_data.totpStep);
+    return Totp::parseOtpString(secret, m_data.totpDigits, m_data.totpStep);
 }
 
 quint8 Entry::totpStep() const
diff --git a/src/gui/SetupTotpDialog.cpp b/src/gui/SetupTotpDialog.cpp
index 2e6c91f0..52d63f0e 100644
--- a/src/gui/SetupTotpDialog.cpp
+++ b/src/gui/SetupTotpDialog.cpp
@@ -46,7 +46,7 @@ void SetupTotpDialog::setupTotp()
     quint8 digits;
 
     if (m_ui->radioSteam->isChecked()) {
-        digits = QTotp::ENCODER_STEAM;
+        digits = Totp::ENCODER_STEAM;
     } else if (m_ui->radio8Digits->isChecked()) {
         digits = 8;
     } else {
@@ -54,7 +54,7 @@ void SetupTotpDialog::setupTotp()
     }
 
     quint8 step = m_ui->stepSpinBox->value();
-    QString seed = QTotp::parseOtpString(m_ui->seedEdit->text(), digits, step);
+    QString seed = Totp::parseOtpString(m_ui->seedEdit->text(), digits, step);
     m_entry->setTotp(seed, step, digits);
     emit m_parent->entrySelectionChanged();
     close();
@@ -63,16 +63,16 @@ void SetupTotpDialog::setupTotp()
 void SetupTotpDialog::toggleDefault(bool status)
 {
     if (status) {
-        setStep(QTotp::defaultStep);
-        setDigits(QTotp::defaultDigits);
+        setStep(Totp::defaultStep);
+        setDigits(Totp::defaultDigits);
     }
 }
 
 void SetupTotpDialog::toggleSteam(bool status)
 {
     if (status) {
-        setStep(QTotp::defaultStep);
-        setDigits(QTotp::ENCODER_STEAM);
+        setStep(Totp::defaultStep);
+        setDigits(Totp::ENCODER_STEAM);
     }
 }
 
@@ -95,9 +95,9 @@ void SetupTotpDialog::setSeed(QString value)
 void SetupTotpDialog::setSettings(quint8 digits) {
     quint8 step = m_ui->stepSpinBox->value();
 
-    bool isDefault = ((step == QTotp::defaultStep) &&
-        (digits == QTotp::defaultDigits));
-    bool isSteam = (digits == QTotp::ENCODER_STEAM);
+    bool isDefault = ((step == Totp::defaultStep) &&
+        (digits == Totp::defaultDigits));
+    bool isSteam = (digits == Totp::ENCODER_STEAM);
 
     if (isSteam) {
         m_ui->radioSteam->setChecked(true);
diff --git a/src/totp/totp.cpp b/src/totp/totp.cpp
index f17def8a..f102335a 100644
--- a/src/totp/totp.cpp
+++ b/src/totp/totp.cpp
@@ -28,8 +28,8 @@
 #include <QtEndian>
 #include <cmath>
 
-const quint8 QTotp::defaultStep = 30;
-const quint8 QTotp::defaultDigits = 6;
+const quint8 Totp::defaultStep = 30;
+const quint8 Totp::defaultDigits = 6;
 
 /**
  * Custom encoder types. Each should be unique and >= 128 and < 255
@@ -38,11 +38,11 @@ const quint8 QTotp::defaultDigits = 6;
 /**
  * Encoder for Steam Guard TOTP
  */
-const quint8 QTotp::ENCODER_STEAM = 254;
+const quint8 Totp::ENCODER_STEAM = 254;
 
-const QTotp::Encoder QTotp::defaultEncoder = { "", "", "0123456789", 0, 0, false };
-const QMap<quint8, QTotp::Encoder> QTotp::encoders{
-    { QTotp::ENCODER_STEAM, { "steam", "S", "23456789BCDFGHJKMNPQRTVWXY", 5, 30, true } },
+const Totp::Encoder Totp::defaultEncoder = { "", "", "0123456789", 0, 0, false };
+const QMap<quint8, Totp::Encoder> Totp::encoders{
+    { Totp::ENCODER_STEAM, { "steam", "S", "23456789BCDFGHJKMNPQRTVWXY", 5, 30, true } },
 };
 
 /**
@@ -52,23 +52,23 @@ const QMap<quint8, QTotp::Encoder> QTotp::encoders{
  * NOTE: when updating this map, a corresponding edit to the settings regex must be made
  *       in Entry::totpSeed()
  */
-const QMap<QString, quint8> QTotp::shortNameToEncoder{
-    { "S", QTotp::ENCODER_STEAM },
+const QMap<QString, quint8> Totp::shortNameToEncoder{
+    { "S", Totp::ENCODER_STEAM },
 };
 /**
  * These map the "encoder=" URL parameter of the "otp" field to our internal encoder number
  * that overloads the digits field. Make sure that the key matches the name value
  * in the corresponding Encoder
  */
-const QMap<QString, quint8> QTotp::nameToEncoder{
-    { "steam", QTotp::ENCODER_STEAM },
+const QMap<QString, quint8> Totp::nameToEncoder{
+    { "steam", Totp::ENCODER_STEAM },
 };
 
-QTotp::QTotp()
+Totp::Totp()
 {
 }
 
-QString QTotp::parseOtpString(QString key, quint8& digits, quint8& step)
+QString Totp::parseOtpString(QString key, quint8& digits, quint8& step)
 {
     QUrl url(key);
 
@@ -128,7 +128,7 @@ QString QTotp::parseOtpString(QString key, quint8& digits, quint8& step)
     return seed;
 }
 
-QString QTotp::generateTotp(const QByteArray key,
+QString Totp::generateTotp(const QByteArray key,
                             quint64 time,
                             const quint8 numDigits = defaultDigits,
                             const quint8 step = defaultStep)
@@ -176,7 +176,7 @@ QString QTotp::generateTotp(const QByteArray key,
 }
 
 // See: https://github.com/google/google-authenticator/wiki/Key-Uri-Format
-QUrl QTotp::generateOtpString(const QString& secret,
+QUrl Totp::generateOtpString(const QString& secret,
                               const QString& type,
                               const QString& issuer,
                               const QString& username,
diff --git a/src/totp/totp.h b/src/totp/totp.h
index d6729871..7d4c78c1 100644
--- a/src/totp/totp.h
+++ b/src/totp/totp.h
@@ -25,10 +25,10 @@
 
 class QUrl;
 
-class QTotp
+class Totp
 {
 public:
-    QTotp();
+    Totp();
     static QString parseOtpString(QString rawSecret, quint8& digits, quint8& step);
     static QString generateTotp(const QByteArray key, quint64 time, const quint8 numDigits, const quint8 step);
     static QUrl generateOtpString(const QString& secret,
diff --git a/tests/TestTotp.cpp b/tests/TestTotp.cpp
index 288c047a..06e36014 100644
--- a/tests/TestTotp.cpp
+++ b/tests/TestTotp.cpp
@@ -41,21 +41,21 @@ void TestTotp::testParseSecret()
     QString secret = "otpauth://totp/"
                      "ACME%20Co:john@example.com?secret=HXDMVJECJJWSRB3HWIZR4IFUGFTMXBOZ&issuer=ACME%20Co&algorithm="
                      "SHA1&digits=6&period=30";
-    QCOMPARE(QTotp::parseOtpString(secret, digits, step), QString("HXDMVJECJJWSRB3HWIZR4IFUGFTMXBOZ"));
+    QCOMPARE(Totp::parseOtpString(secret, digits, step), QString("HXDMVJECJJWSRB3HWIZR4IFUGFTMXBOZ"));
     QCOMPARE(digits, quint8(6));
     QCOMPARE(step, quint8(30));
 
-    digits = QTotp::defaultDigits;
-    step = QTotp::defaultStep;
+    digits = Totp::defaultDigits;
+    step = Totp::defaultStep;
     secret = "key=HXDMVJECJJWSRBY%3d&step=25&size=8";
-    QCOMPARE(QTotp::parseOtpString(secret, digits, step), QString("HXDMVJECJJWSRBY="));
+    QCOMPARE(Totp::parseOtpString(secret, digits, step), QString("HXDMVJECJJWSRBY="));
     QCOMPARE(digits, quint8(8));
     QCOMPARE(step, quint8(25));
 
     digits = 0;
     step = 0;
     secret = "gezdgnbvgy3tqojqgezdgnbvgy3tqojq";
-    QCOMPARE(QTotp::parseOtpString(secret, digits, step), QString("gezdgnbvgy3tqojqgezdgnbvgy3tqojq"));
+    QCOMPARE(Totp::parseOtpString(secret, digits, step), QString("gezdgnbvgy3tqojqgezdgnbvgy3tqojq"));
     QCOMPARE(digits, quint8(6));
     QCOMPARE(step, quint8(30));
 }
@@ -68,26 +68,26 @@ void TestTotp::testTotpCode()
     QByteArray seed = QString("GEZDGNBVGY3TQOJQGEZDGNBVGY3TQOJQ").toLatin1();
 
     quint64 time = 1234567890;
-    QString output = QTotp::generateTotp(seed, time, 6, 30);
+    QString output = Totp::generateTotp(seed, time, 6, 30);
     QCOMPARE(output, QString("005924"));
 
     time = 1111111109;
-    output = QTotp::generateTotp(seed, time, 6, 30);
+    output = Totp::generateTotp(seed, time, 6, 30);
     QCOMPARE(output, QString("081804"));
 
     time = 1111111111;
-    output = QTotp::generateTotp(seed, time, 8, 30);
+    output = Totp::generateTotp(seed, time, 8, 30);
     QCOMPARE(output, QString("14050471"));
 
     time = 2000000000;
-    output = QTotp::generateTotp(seed, time, 8, 30);
+    output = Totp::generateTotp(seed, time, 8, 30);
     QCOMPARE(output, QString("69279037"));
 }
 
 void TestTotp::testEncoderData()
 {
-    for (quint8 key: QTotp::encoders.keys()) {
-        const QTotp::Encoder& enc = QTotp::encoders.value(key);
+    for (quint8 key: Totp::encoders.keys()) {
+        const Totp::Encoder& enc = Totp::encoders.value(key);
         QVERIFY2(enc.digits != 0,
             qPrintable(QString("Custom encoders cannot have zero-value for digits field: %1(%2)")
                                .arg(enc.name)
@@ -100,47 +100,47 @@ void TestTotp::testEncoderData()
             qPrintable(QString("Custom encoders must have a shortName: %1(%2)")
                                .arg(enc.name)
                                .arg(key)));
-        QVERIFY2(QTotp::shortNameToEncoder.contains(enc.shortName),
+        QVERIFY2(Totp::shortNameToEncoder.contains(enc.shortName),
             qPrintable(QString("No shortNameToEncoder entry found for custom encoder: %1(%2) %3")
                                .arg(enc.name)
                                .arg(key)
                                .arg(enc.shortName)));
-        QVERIFY2(QTotp::shortNameToEncoder[enc.shortName] == key,
+        QVERIFY2(Totp::shortNameToEncoder[enc.shortName] == key,
             qPrintable(QString("shortNameToEncoder doesn't reference this custome encoder: %1(%2) %3")
                                .arg(enc.name)
                                .arg(key)
                                .arg(enc.shortName)));
-        QVERIFY2(QTotp::nameToEncoder.contains(enc.name),
+        QVERIFY2(Totp::nameToEncoder.contains(enc.name),
             qPrintable(QString("No nameToEncoder entry found for custom encoder: %1(%2) %3")
                                .arg(enc.name)
                                .arg(key)
                                .arg(enc.shortName)));
-        QVERIFY2(QTotp::nameToEncoder[enc.name] == key,
+        QVERIFY2(Totp::nameToEncoder[enc.name] == key,
             qPrintable(QString("nameToEncoder doesn't reference this custome encoder: %1(%2) %3")
                                .arg(enc.name)
                                .arg(key)
                                .arg(enc.shortName)));
     }
 
-    for (const QString & key: QTotp::nameToEncoder.keys()) {
-        quint8 value = QTotp::nameToEncoder.value(key);
-        QVERIFY2(QTotp::encoders.contains(value),
+    for (const QString & key: Totp::nameToEncoder.keys()) {
+        quint8 value = Totp::nameToEncoder.value(key);
+        QVERIFY2(Totp::encoders.contains(value),
                 qPrintable(QString("No custom encoder found for encoder named %1(%2)")
                                    .arg(value)
                                    .arg(key)));
-        QVERIFY2(QTotp::encoders[value].name == key,
+        QVERIFY2(Totp::encoders[value].name == key,
                 qPrintable(QString("nameToEncoder doesn't reference the right custom encoder: %1(%2)")
                                    .arg(value)
                                    .arg(key)));
     }
 
-    for (const QString & key: QTotp::shortNameToEncoder.keys()) {
-        quint8 value = QTotp::shortNameToEncoder.value(key);
-        QVERIFY2(QTotp::encoders.contains(value),
+    for (const QString & key: Totp::shortNameToEncoder.keys()) {
+        quint8 value = Totp::shortNameToEncoder.value(key);
+        QVERIFY2(Totp::encoders.contains(value),
                 qPrintable(QString("No custom encoder found for short-name encoder %1(%2)")
                                    .arg(value)
                                    .arg(key)));
-        QVERIFY2(QTotp::encoders[value].shortName == key,
+        QVERIFY2(Totp::encoders[value].shortName == key,
                 qPrintable(QString("shortNameToEncoder doesn't reference the right custom encoder: %1(%2)")
                                    .arg(value)
                                    .arg(key)));
@@ -154,8 +154,8 @@ void TestTotp::testSteamTotp()
     QString secret = "otpauth://totp/"
                      "test:test@example.com?secret=63BEDWCQZKTQWPESARIERL5DTTQFCJTK&issuer=Valve&algorithm="
                      "SHA1&digits=5&period=30&encoder=steam";
-    QCOMPARE(QTotp::parseOtpString(secret, digits, step), QString("63BEDWCQZKTQWPESARIERL5DTTQFCJTK"));
-    QCOMPARE(digits, quint8(QTotp::ENCODER_STEAM));
+    QCOMPARE(Totp::parseOtpString(secret, digits, step), QString("63BEDWCQZKTQWPESARIERL5DTTQFCJTK"));
+    QCOMPARE(digits, quint8(Totp::ENCODER_STEAM));
     QCOMPARE(step, quint8(30));
 
 
@@ -165,7 +165,7 @@ void TestTotp::testSteamTotp()
     // Steam mobile app with a throw-away steam account. The above secret was extracted
     // from the Steam app's data for use in testing here.
     quint64 time = 1511200518;
-    QCOMPARE(QTotp::generateTotp(seed, time, QTotp::ENCODER_STEAM, 30), QString("FR8RV"));
+    QCOMPARE(Totp::generateTotp(seed, time, Totp::ENCODER_STEAM, 30), QString("FR8RV"));
     time = 1511200714;
-    QCOMPARE(QTotp::generateTotp(seed, time, QTotp::ENCODER_STEAM, 30), QString("9P3VP"));
+    QCOMPARE(Totp::generateTotp(seed, time, Totp::ENCODER_STEAM, 30), QString("9P3VP"));
 }

From a4d1293eaf20555fef326c496694947dfaab9bb3 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Bal=C3=A1zs=20Mesk=C3=B3?= <meskobalazs@gmail.com>
Date: Tue, 21 Nov 2017 02:12:14 +0100
Subject: [PATCH 102/118] I18n fixes in Service.cpp (#875)

Fix plural strings
---
 src/http/Service.cpp | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/http/Service.cpp b/src/http/Service.cpp
index e68a7bfd..7f74a3ae 100644
--- a/src/http/Service.cpp
+++ b/src/http/Service.cpp
@@ -548,7 +548,7 @@ void Service::removeSharedEncryptionKeys()
 
             const int count = keysToRemove.count();
             QMessageBox::information(0, tr("KeePassXC: Removed keys from database"),
-                                     tr("Successfully removed %1 encryption-%2 from KeePassX/Http Settings.").arg(count).arg(count ? "keys" : "key"),
+                                     tr("Successfully removed %n encryption-key(s) from KeePassX/Http Settings.", "", count),
                                      QMessageBox::Ok);
         } else {
             QMessageBox::information(0, tr("KeePassXC: No keys found"),
@@ -592,7 +592,7 @@ void Service::removeStoredPermissions()
 
         if (counter > 0) {
             QMessageBox::information(0, tr("KeePassXC: Removed permissions"),
-                                     tr("Successfully removed permissions from %1 %2.").arg(counter).arg(counter ? "entries" : "entry"),
+                                     tr("Successfully removed permissions from %n entries.", "", counter),
                                      QMessageBox::Ok);
         } else {
             QMessageBox::information(0, tr("KeePassXC: No entry with permissions found!"),

From 236846baa7049cf75cc6cc69a8109701b74fba2b Mon Sep 17 00:00:00 2001
From: Vladimir Svyatski <vsvyatski@yandex.ru>
Date: Fri, 7 Jul 2017 23:29:26 +0300
Subject: [PATCH 103/118] Add menu shortcut Alt+m (underlined letter) for
 "Empty recycle bin" for consistency with other items in the same submenu
 which all have "Alt+underlined letter" style shortcuts.

---
 src/gui/MainWindow.ui | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/gui/MainWindow.ui b/src/gui/MainWindow.ui
index 6824904a..d0cded22 100644
--- a/src/gui/MainWindow.ui
+++ b/src/gui/MainWindow.ui
@@ -557,7 +557,7 @@
   </action>
   <action name="actionGroupEmptyRecycleBin">
    <property name="text">
-    <string>Empty recycle bin</string>
+    <string>E&amp;mpty recycle bin</string>
    </property>
    <property name="visible">
     <bool>false</bool>

From 9603c91877cce828c223310635e036688a5371ab Mon Sep 17 00:00:00 2001
From: Louis-Bertrand Varin <louisv@unito.io>
Date: Fri, 3 Nov 2017 16:29:42 -0400
Subject: [PATCH 104/118] Merge : Synchronising groups.

---
 src/core/Group.cpp  |  80 +++++++++++++++++++------
 src/core/Group.h    |  17 +++++-
 tests/TestMerge.cpp | 139 +++++++++++++++++++++++++++++++++++++++++---
 tests/TestMerge.h   |   3 +
 4 files changed, 210 insertions(+), 29 deletions(-)

diff --git a/src/core/Group.cpp b/src/core/Group.cpp
index 6f70db34..443f7cbe 100644
--- a/src/core/Group.cpp
+++ b/src/core/Group.cpp
@@ -77,8 +77,7 @@ template <class P, class V> inline bool Group::set(P& property, const V& value)
         updateTimeinfo();
         emit modified();
         return true;
-    }
-    else {
+    } else {
         return false;
     }
 }
@@ -693,27 +692,48 @@ void Group::merge(const Group* other)
                 existingEntry->setGroup(this);
                 qDebug("Location changed for entry %s. Updating it", qPrintable(existingEntry->title()));
             }
-            resolveConflict(existingEntry, entry);
+            resolveEntryConflict(existingEntry, entry);
         }
     }
 
     // merge groups recursively
     const QList<Group*> dbChildren = other->children();
     for (Group* group : dbChildren) {
-        // groups are searched by name instead of uuid
-        if (findChildByName(group->name())) {
-            findChildByName(group->name())->merge(group);
-        } else {
+
+        Group* existingGroup = rootGroup->findChildByUuid(group->uuid());
+
+        if (!existingGroup) {
             qDebug("New group %s detected. Creating it.", qPrintable(group->name()));
-            Group* newGroup = group->clone(Entry::CloneNoFlags, true);
+            Group* newGroup = group->clone(Entry::CloneNoFlags, Group::CloneNoFlags);
             newGroup->setParent(this);
             newGroup->merge(group);
+        } else {
+            bool locationChanged = existingGroup->timeInfo().locationChanged() < group->timeInfo().locationChanged();
+            if (locationChanged && existingGroup->parent() != this) {
+                existingGroup->setParent(this);
+                qDebug("Location changed for group %s. Updating it", qPrintable(existingGroup->name()));
+            }
+            resolveGroupConflict(existingGroup, group);
+            existingGroup->merge(group);
         }
+
     }
 
     emit modified();
 }
 
+Group* Group::findChildByUuid(const Uuid& uuid)
+{
+    Q_ASSERT(!uuid.isNull());
+    for (Group* group : groupsRecursive(true)) {
+        if (group->uuid() == uuid) {
+            return group;
+        }
+    }
+
+    return nullptr;
+}
+
 Group* Group::findChildByName(const QString& name)
 {
     for (Group* group : asConst(m_children)) {
@@ -725,16 +745,21 @@ Group* Group::findChildByName(const QString& name)
     return nullptr;
 }
 
-Group* Group::clone(Entry::CloneFlags entryFlags, bool shallow) const
+Group* Group::clone(Entry::CloneFlags entryFlags, Group::CloneFlags groupFlags) const
 {
     Group* clonedGroup = new Group();
 
     clonedGroup->setUpdateTimeinfo(false);
 
-    clonedGroup->setUuid(Uuid::random());
+    if (groupFlags & Group::CloneNewUuid) {
+        clonedGroup->setUuid(Uuid::random());
+    } else {
+        clonedGroup->setUuid(this->uuid());
+    }
+
     clonedGroup->m_data = m_data;
 
-    if (!shallow) {
+    if (groupFlags & Group::CloneIncludeEntries) {
         const QList<Entry*> entryList = entries();
         for (Entry* entry : entryList) {
             Entry* clonedEntry = entry->clone(entryFlags);
@@ -743,18 +768,20 @@ Group* Group::clone(Entry::CloneFlags entryFlags, bool shallow) const
 
         const QList<Group*> childrenGroups = children();
         for (Group* groupChild : childrenGroups) {
-            Group* clonedGroupChild = groupChild->clone(entryFlags);
+            Group* clonedGroupChild = groupChild->clone(entryFlags, groupFlags);
             clonedGroupChild->setParent(clonedGroup);
         }
     }
 
     clonedGroup->setUpdateTimeinfo(true);
+    if (groupFlags & Group::CloneResetTimeInfo) {
 
-    QDateTime now = QDateTime::currentDateTimeUtc();
-    clonedGroup->m_data.timeInfo.setCreationTime(now);
-    clonedGroup->m_data.timeInfo.setLastModificationTime(now);
-    clonedGroup->m_data.timeInfo.setLastAccessTime(now);
-    clonedGroup->m_data.timeInfo.setLocationChanged(now);
+        QDateTime now = QDateTime::currentDateTimeUtc();
+        clonedGroup->m_data.timeInfo.setCreationTime(now);
+        clonedGroup->m_data.timeInfo.setLastModificationTime(now);
+        clonedGroup->m_data.timeInfo.setLastAccessTime(now);
+        clonedGroup->m_data.timeInfo.setLocationChanged(now);
+    }
 
     return clonedGroup;
 }
@@ -908,7 +935,7 @@ bool Group::resolveAutoTypeEnabled() const
     }
 }
 
-void Group::resolveConflict(Entry* existingEntry, Entry* otherEntry)
+void Group::resolveEntryConflict(Entry* existingEntry, Entry* otherEntry)
 {
     const QDateTime timeExisting = existingEntry->timeInfo().lastModificationTime();
     const QDateTime timeOther = otherEntry->timeInfo().lastModificationTime();
@@ -946,6 +973,23 @@ void Group::resolveConflict(Entry* existingEntry, Entry* otherEntry)
     }
 }
 
+void Group::resolveGroupConflict(Group* existingGroup, Group* otherGroup)
+{
+    const QDateTime timeExisting = existingGroup->timeInfo().lastModificationTime();
+    const QDateTime timeOther = otherGroup->timeInfo().lastModificationTime();
+
+    // only if the other group newer, update the existing one.
+    if (timeExisting < timeOther) {
+        qDebug("Updating group %s.", qPrintable(existingGroup->name()));
+        existingGroup->setName(otherGroup->name());
+        existingGroup->setNotes(otherGroup->notes());
+        existingGroup->setIcon(otherGroup->iconNumber());
+        existingGroup->setIcon(otherGroup->iconUuid());
+        existingGroup->setExpiryTime(otherGroup->timeInfo().expiryTime());
+    }
+
+}
+
 QStringList Group::locate(QString locateTerm, QString currentPath)
 {
     Q_ASSERT(!locateTerm.isNull());
diff --git a/src/core/Group.h b/src/core/Group.h
index 2a9d2b18..6d309bdc 100644
--- a/src/core/Group.h
+++ b/src/core/Group.h
@@ -37,6 +37,14 @@ public:
     enum TriState { Inherit, Enable, Disable };
     enum MergeMode { ModeInherit, KeepBoth, KeepNewer, KeepExisting };
 
+    enum CloneFlag {
+        CloneNoFlags        = 0,
+        CloneNewUuid        = 1,  // generate a random uuid for the clone
+        CloneResetTimeInfo  = 2,  // set all TimeInfo attributes to the current time
+        CloneIncludeEntries = 4,  // clone the group entries
+    };
+    Q_DECLARE_FLAGS(CloneFlags, CloneFlag)
+
     struct GroupData
     {
         QString name;
@@ -80,6 +88,7 @@ public:
     static const int RecycleBinIconNumber;
 
     Group* findChildByName(const QString& name);
+    Group* findChildByUuid(const Uuid& uuid);
     Entry* findEntry(QString entryId);
     Entry* findEntryByUuid(const Uuid& uuid);
     Entry* findEntryByPath(QString entryPath, QString basePath = QString(""));
@@ -126,7 +135,8 @@ public:
      * new group into another database.
      */
     Group* clone(Entry::CloneFlags entryFlags = Entry::CloneNewUuid | Entry::CloneResetTimeInfo,
-                 bool shallow = false) const;
+                 CloneFlags groupFlags = static_cast<CloneFlags>(Group::CloneNewUuid | Group::CloneResetTimeInfo |
+                                                                 Group::CloneIncludeEntries)) const;
     void copyDataFrom(const Group* other);
     void merge(const Group* other);
     QString print(bool recursive = false, int depth = 0);
@@ -160,7 +170,8 @@ private:
     void removeEntry(Entry* entry);
     void setParent(Database* db);
     void markOlderEntry(Entry* entry);
-    void resolveConflict(Entry* existingEntry, Entry* otherEntry);
+    void resolveEntryConflict(Entry* existingEntry, Entry* otherEntry);
+    void resolveGroupConflict(Group* existingGroup, Group* otherGroup);
 
     void recSetDatabase(Database* db);
     void cleanupParent();
@@ -183,4 +194,6 @@ private:
     friend void Entry::setGroup(Group* group);
 };
 
+Q_DECLARE_OPERATORS_FOR_FLAGS(Group::CloneFlags)
+
 #endif // KEEPASSX_GROUP_H
diff --git a/tests/TestMerge.cpp b/tests/TestMerge.cpp
index 4f8daa06..d68c4f10 100644
--- a/tests/TestMerge.cpp
+++ b/tests/TestMerge.cpp
@@ -64,7 +64,7 @@ void TestMerge::testMergeNoChanges()
     Database* dbDestination = createTestDatabase();
 
     Database* dbSource = new Database();
-    dbSource->setRootGroup(dbDestination->rootGroup()->clone(Entry::CloneNoFlags));
+    dbSource->setRootGroup(dbDestination->rootGroup()->clone(Entry::CloneNoFlags, Group::CloneIncludeEntries));
 
     QCOMPARE(dbDestination->rootGroup()->entriesRecursive().size(), 2);
     QCOMPARE(dbSource->rootGroup()->entriesRecursive().size(), 2);
@@ -92,7 +92,7 @@ void TestMerge::testResolveConflictNewer()
     Database* dbDestination = createTestDatabase();
 
     Database* dbSource = new Database();
-    dbSource->setRootGroup(dbDestination->rootGroup()->clone(Entry::CloneNoFlags));
+    dbSource->setRootGroup(dbDestination->rootGroup()->clone(Entry::CloneNoFlags, Group::CloneIncludeEntries));
 
     // sanity check
     Group* group1 = dbSource->rootGroup()->findChildByName("group1");
@@ -141,7 +141,7 @@ void TestMerge::testResolveConflictOlder()
     Database* dbDestination = createTestDatabase();
 
     Database* dbSource = new Database();
-    dbSource->setRootGroup(dbDestination->rootGroup()->clone(Entry::CloneNoFlags));
+    dbSource->setRootGroup(dbDestination->rootGroup()->clone(Entry::CloneNoFlags, Group::CloneIncludeEntries));
 
     // sanity check
     Group* group1 = dbSource->rootGroup()->findChildByName("group1");
@@ -197,7 +197,7 @@ void TestMerge::testResolveConflictKeepBoth()
     Database* dbDestination = createTestDatabase();
 
     Database* dbSource = new Database();
-    dbSource->setRootGroup(dbDestination->rootGroup()->clone(Entry::CloneIncludeHistory));
+    dbSource->setRootGroup(dbDestination->rootGroup()->clone(Entry::CloneIncludeHistory, Group::CloneIncludeEntries));
 
     // sanity check
     QCOMPARE(dbDestination->rootGroup()->children().at(0)->entries().size(), 2);
@@ -236,7 +236,7 @@ void TestMerge::testMoveEntry()
     Database* dbDestination = createTestDatabase();
 
     Database* dbSource = new Database();
-    dbSource->setRootGroup(dbDestination->rootGroup()->clone(Entry::CloneNoFlags));
+    dbSource->setRootGroup(dbDestination->rootGroup()->clone(Entry::CloneNoFlags, Group::CloneIncludeEntries));
 
     Entry* entry1 = dbSource->rootGroup()->findEntry("entry1");
     QVERIFY(entry1 != nullptr);
@@ -270,7 +270,7 @@ void TestMerge::testMoveEntryPreserveChanges()
     Database* dbDestination = createTestDatabase();
 
     Database* dbSource = new Database();
-    dbSource->setRootGroup(dbDestination->rootGroup()->clone(Entry::CloneNoFlags));
+    dbSource->setRootGroup(dbDestination->rootGroup()->clone(Entry::CloneNoFlags, Group::CloneIncludeEntries));
 
     Entry* entry1 = dbSource->rootGroup()->findEntry("entry1");
     QVERIFY(entry1 != nullptr);
@@ -307,11 +307,12 @@ void TestMerge::testCreateNewGroups()
     Database* dbDestination = createTestDatabase();
 
     Database* dbSource = new Database();
-    dbSource->setRootGroup(dbDestination->rootGroup()->clone(Entry::CloneNoFlags));
+    dbSource->setRootGroup(dbDestination->rootGroup()->clone(Entry::CloneNoFlags, Group::CloneIncludeEntries));
 
     QTest::qSleep(1);
     Group* group3 = new Group();
     group3->setName("group3");
+    group3->setUuid(Uuid::random());
     group3->setParent(dbSource->rootGroup());
 
     dbDestination->merge(dbSource);
@@ -329,11 +330,12 @@ void TestMerge::testMoveEntryIntoNewGroup()
     Database* dbDestination = createTestDatabase();
 
     Database* dbSource = new Database();
-    dbSource->setRootGroup(dbDestination->rootGroup()->clone(Entry::CloneNoFlags));
+    dbSource->setRootGroup(dbDestination->rootGroup()->clone(Entry::CloneNoFlags, Group::CloneIncludeEntries));
 
     QTest::qSleep(1);
     Group* group3 = new Group();
     group3->setName("group3");
+    group3->setUuid(Uuid::random());
     group3->setParent(dbSource->rootGroup());
 
     Entry* entry1 = dbSource->rootGroup()->findEntry("entry1");
@@ -365,10 +367,11 @@ void TestMerge::testUpdateEntryDifferentLocation()
     Database* dbDestination = createTestDatabase();
 
     Database* dbSource = new Database();
-    dbSource->setRootGroup(dbDestination->rootGroup()->clone(Entry::CloneNoFlags));
+    dbSource->setRootGroup(dbDestination->rootGroup()->clone(Entry::CloneNoFlags, Group::CloneIncludeEntries));
 
     Group* group3 = new Group();
     group3->setName("group3");
+    group3->setUuid(Uuid::random());
     group3->setParent(dbDestination->rootGroup());
 
     Entry* entry1 = dbDestination->rootGroup()->findEntry("entry1");
@@ -399,6 +402,84 @@ void TestMerge::testUpdateEntryDifferentLocation()
     delete dbSource;
 }
 
+/**
+ * Groups should be updated using the uuids.
+ */
+void TestMerge::testUpdateGroup()
+{
+    Database* dbDestination = createTestDatabase();
+
+    Database* dbSource = new Database();
+    dbSource->setRootGroup(dbDestination->rootGroup()->clone(Entry::CloneNoFlags, Group::CloneIncludeEntries));
+
+    QTest::qSleep(1);
+
+    Group* group2 = dbSource->rootGroup()->findChildByName("group2");
+    group2->setName("group2 renamed");
+    group2->setNotes("updated notes");
+    Uuid customIconId = Uuid::random();
+    QImage customIcon;
+    dbSource->metadata()->addCustomIcon(customIconId, customIcon);
+    group2->setIcon(customIconId);
+
+    Entry* entry1 = dbSource->rootGroup()->findEntry("entry1");
+    QVERIFY(entry1 != nullptr);
+    entry1->setGroup(group2);
+    entry1->setTitle("entry1 renamed");
+    Uuid uuidBeforeSyncing = entry1->uuid();
+
+    dbDestination->merge(dbSource);
+
+    QCOMPARE(dbDestination->rootGroup()->entriesRecursive().size(), 2);
+
+    entry1 = dbDestination->rootGroup()->findEntry("entry1 renamed");
+    QVERIFY(entry1 != nullptr);
+    QVERIFY(entry1->group() != nullptr);
+    QCOMPARE(entry1->group()->name(), QString("group2 renamed"));
+    QCOMPARE(uuidBeforeSyncing, entry1->uuid());
+
+    group2 = dbDestination->rootGroup()->findChildByName("group2 renamed");
+    QCOMPARE(group2->notes(), QString("updated notes"));
+    QCOMPARE(group2->iconUuid(), customIconId);
+
+    delete dbDestination;
+    delete dbSource;
+}
+
+void TestMerge::testUpdateGroupLocation()
+{
+    Database* dbDestination = createTestDatabase();
+    Group* group3 = new Group();
+    Uuid group3Uuid = Uuid::random();
+    group3->setUuid(group3Uuid);
+    group3->setName("group3");
+    group3->setParent(dbDestination->rootGroup()->findChildByName("group1"));
+
+    Database* dbSource = new Database();
+    dbSource->setRootGroup(dbDestination->rootGroup()->clone(Entry::CloneNoFlags, Group::CloneIncludeEntries));
+
+    // Sanity check
+    group3 = dbSource->rootGroup()->findChildByUuid(group3Uuid);
+    QVERIFY(group3 != nullptr);
+
+    QTest::qSleep(1);
+
+    group3->setParent(dbSource->rootGroup()->findChildByName("group2"));
+
+    dbDestination->merge(dbSource);
+    group3 = dbDestination->rootGroup()->findChildByUuid(group3Uuid);
+    QVERIFY(group3 != nullptr);
+    QCOMPARE(group3->parent(), dbDestination->rootGroup()->findChildByName("group2"));
+
+    dbDestination->merge(dbSource);
+    group3 = dbDestination->rootGroup()->findChildByUuid(group3Uuid);
+    QVERIFY(group3 != nullptr);
+    QCOMPARE(group3->parent(), dbDestination->rootGroup()->findChildByName("group2"));
+
+    delete dbDestination;
+    delete dbSource;
+}
+
 /**
  * The first merge should create new entries, the
  * second should only sync them, since they have
@@ -447,14 +528,54 @@ void TestMerge::testMergeCustomIcons()
     delete dbSource;
 }
 
+/**
+ * If the group is updated in the source database, and the
+ * destination database after, the group should remain the
+ * same.
+ */
+void TestMerge::testResolveGroupConflictOlder()
+{
+    Database* dbDestination = createTestDatabase();
+
+    Database* dbSource = new Database();
+    dbSource->setRootGroup(dbDestination->rootGroup()->clone(Entry::CloneNoFlags, Group::CloneIncludeEntries));
+
+    // sanity check
+    Group* group1 = dbSource->rootGroup()->findChildByName("group1");
+    QVERIFY(group1 != nullptr);
+
+    // Make sure the two changes have a different timestamp.
+    QTest::qSleep(1);
+    group1->setName("group1 updated in source");
+
+    // Make sure the two changes have a different timestamp.
+    QTest::qSleep(1);
+
+    group1 = dbDestination->rootGroup()->findChildByName("group1");
+    group1->setName("group1 updated in destination");
+
+    dbDestination->merge(dbSource);
+
+    // sanity check
+    group1 = dbDestination->rootGroup()->findChildByName("group1 updated in destination");
+    QVERIFY(group1 != nullptr);
+
+    delete dbDestination;
+    delete dbSource;
+}
+
+
 Database* TestMerge::createTestDatabase()
 {
     Database* db = new Database();
 
     Group* group1 = new Group();
     group1->setName("group1");
+    group1->setUuid(Uuid::random());
+
     Group* group2 = new Group();
     group2->setName("group2");
+    group2->setUuid(Uuid::random());
 
     Entry* entry1 = new Entry();
     Entry* entry2 = new Entry();
diff --git a/tests/TestMerge.h b/tests/TestMerge.h
index 0b3ec618..3588cfd5 100644
--- a/tests/TestMerge.h
+++ b/tests/TestMerge.h
@@ -31,12 +31,15 @@ private slots:
     void testMergeNoChanges();
     void testResolveConflictNewer();
     void testResolveConflictOlder();
+    void testResolveGroupConflictOlder();
     void testResolveConflictKeepBoth();
     void testMoveEntry();
     void testMoveEntryPreserveChanges();
     void testMoveEntryIntoNewGroup();
     void testCreateNewGroups();
     void testUpdateEntryDifferentLocation();
+    void testUpdateGroup();
+    void testUpdateGroupLocation();
     void testMergeAndSync();
     void testMergeCustomIcons();
 

From 2ff56fe86c7a35dc84b714e9030997a8153018e9 Mon Sep 17 00:00:00 2001
From: Louis-Bertrand Varin <louisv@unito.io>
Date: Tue, 21 Nov 2017 09:52:31 -0500
Subject: [PATCH 105/118] Only updating custom group icon if set.

---
 src/core/Group.cpp | 13 ++++++++-----
 1 file changed, 8 insertions(+), 5 deletions(-)

diff --git a/src/core/Group.cpp b/src/core/Group.cpp
index 443f7cbe..dbe3d6b7 100644
--- a/src/core/Group.cpp
+++ b/src/core/Group.cpp
@@ -681,12 +681,12 @@ void Group::merge(const Group* other)
 
         Entry* existingEntry = rootGroup->findEntryByUuid(entry->uuid());
 
-        // This entry does not exist at all. Create it.
         if (!existingEntry) {
+            // This entry does not exist at all. Create it.
             qDebug("New entry %s detected. Creating it.", qPrintable(entry->title()));
             entry->clone(Entry::CloneIncludeHistory)->setGroup(this);
-        // Entry is already present in the database. Update it.
         } else {
+            // Entry is already present in the database. Update it.
             bool locationChanged = existingEntry->timeInfo().locationChanged() < entry->timeInfo().locationChanged();
             if (locationChanged && existingEntry->group() != this) {
                 existingEntry->setGroup(this);
@@ -978,13 +978,16 @@ void Group::resolveGroupConflict(Group* existingGroup, Group* otherGroup)
     const QDateTime timeExisting = existingGroup->timeInfo().lastModificationTime();
     const QDateTime timeOther = otherGroup->timeInfo().lastModificationTime();
 
-    // only if the other group newer, update the existing one.
+    // only if the other group is newer, update the existing one.
     if (timeExisting < timeOther) {
         qDebug("Updating group %s.", qPrintable(existingGroup->name()));
         existingGroup->setName(otherGroup->name());
         existingGroup->setNotes(otherGroup->notes());
-        existingGroup->setIcon(otherGroup->iconNumber());
-        existingGroup->setIcon(otherGroup->iconUuid());
+        if (otherGroup->iconNumber() == 0) {
+          existingGroup->setIcon(otherGroup->iconUuid());
+        } else {
+          existingGroup->setIcon(otherGroup->iconNumber());
+        }
         existingGroup->setExpiryTime(otherGroup->timeInfo().expiryTime());
     }
 

From 94ea3238360ebb32af0555b66c2673a59a8860d1 Mon Sep 17 00:00:00 2001
From: Louis-Bertrand Varin <louisv@unito.io>
Date: Tue, 21 Nov 2017 14:02:21 -0500
Subject: [PATCH 106/118] Extracting default clone flags.

---
 src/core/Group.cpp |  5 +++++
 src/core/Group.h   | 12 ++++++------
 2 files changed, 11 insertions(+), 6 deletions(-)

diff --git a/src/core/Group.cpp b/src/core/Group.cpp
index dbe3d6b7..c7c12bfe 100644
--- a/src/core/Group.cpp
+++ b/src/core/Group.cpp
@@ -26,6 +26,11 @@
 const int Group::DefaultIconNumber = 48;
 const int Group::RecycleBinIconNumber = 43;
 
+Group::CloneFlags Group::DefaultCloneFlags = static_cast<Group::CloneFlags>(
+    Group::CloneNewUuid | Group::CloneResetTimeInfo | Group::CloneIncludeEntries);
+Entry::CloneFlags Group::DefaultEntryCloneFlags = static_cast<Entry::CloneFlags>(
+    Entry::CloneNewUuid | Entry::CloneResetTimeInfo);
+
 Group::Group()
     : m_updateTimeinfo(true)
 {
diff --git a/src/core/Group.h b/src/core/Group.h
index 6d309bdc..eec376ee 100644
--- a/src/core/Group.h
+++ b/src/core/Group.h
@@ -86,6 +86,8 @@ public:
 
     static const int DefaultIconNumber;
     static const int RecycleBinIconNumber;
+    static CloneFlags DefaultCloneFlags;
+    static Entry::CloneFlags DefaultEntryCloneFlags;
 
     Group* findChildByName(const QString& name);
     Group* findChildByUuid(const Uuid& uuid);
@@ -128,15 +130,13 @@ public:
     QList<Group*> groupsRecursive(bool includeSelf);
     QSet<Uuid> customIconsRecursive() const;
     /**
-     * Creates a duplicate of this group including all child entries and groups (if not shallow).
-     * The exceptions are that the returned group doesn't have a parent group
-     * and all TimeInfo attributes are set to the current time.
+     * Creates a duplicate of this group.
      * Note that you need to copy the custom icons manually when inserting the
      * new group into another database.
      */
-    Group* clone(Entry::CloneFlags entryFlags = Entry::CloneNewUuid | Entry::CloneResetTimeInfo,
-                 CloneFlags groupFlags = static_cast<CloneFlags>(Group::CloneNewUuid | Group::CloneResetTimeInfo |
-                                                                 Group::CloneIncludeEntries)) const;
+    Group* clone(
+        Entry::CloneFlags entryFlags = DefaultEntryCloneFlags, CloneFlags groupFlags = DefaultCloneFlags) const;
+
     void copyDataFrom(const Group* other);
     void merge(const Group* other);
     QString print(bool recursive = false, int depth = 0);

From 2cd5006260dc7649eeb8c55f22a634995ee1d57b Mon Sep 17 00:00:00 2001
From: Louis-Bertrand Varin <louisv@unito.io>
Date: Tue, 21 Nov 2017 14:03:24 -0500
Subject: [PATCH 107/118] Formatting

---
 src/core/Group.h | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/src/core/Group.h b/src/core/Group.h
index eec376ee..57d503a8 100644
--- a/src/core/Group.h
+++ b/src/core/Group.h
@@ -134,8 +134,8 @@ public:
      * Note that you need to copy the custom icons manually when inserting the
      * new group into another database.
      */
-    Group* clone(
-        Entry::CloneFlags entryFlags = DefaultEntryCloneFlags, CloneFlags groupFlags = DefaultCloneFlags) const;
+    Group* clone(Entry::CloneFlags entryFlags = DefaultEntryCloneFlags,
+                 CloneFlags groupFlags = DefaultCloneFlags) const;
 
     void copyDataFrom(const Group* other);
     void merge(const Group* other);

From f25c23c051a9c1a55e22d0e453f35105081821b4 Mon Sep 17 00:00:00 2001
From: Louis-Bertrand Varin <louisv@unito.io>
Date: Tue, 21 Nov 2017 14:24:24 -0500
Subject: [PATCH 108/118] Adding tests for Group::clone

---
 tests/TestGroup.cpp | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/tests/TestGroup.cpp b/tests/TestGroup.cpp
index 5a809670..2d478bd1 100644
--- a/tests/TestGroup.cpp
+++ b/tests/TestGroup.cpp
@@ -391,6 +391,22 @@ void TestGroup::testClone()
     QCOMPARE(clonedGroupKeepUuid->entries().at(0)->uuid(), originalGroupEntry->uuid());
     QCOMPARE(clonedGroupKeepUuid->children().at(0)->entries().at(0)->uuid(), subGroupEntry->uuid());
 
+    Group* clonedGroupNoFlags = originalGroup->clone(Entry::CloneNoFlags, Group::CloneNoFlags);
+    QCOMPARE(clonedGroupNoFlags->entries().size(), 0);
+    QVERIFY(clonedGroupNoFlags->uuid() == originalGroup->uuid());
+
+    Group* clonedGroupNewUuid = originalGroup->clone(Entry::CloneNoFlags, Group::CloneNewUuid);
+    QCOMPARE(clonedGroupNewUuid->entries().size(), 0);
+    QVERIFY(clonedGroupNewUuid->uuid() != originalGroup->uuid());
+
+    // Making sure the new modification date is not the same.
+    QTest::qSleep(1);
+
+    Group* clonedGroupResetTimeInfo = originalGroup->clone(Entry::CloneNoFlags, Group::CloneNewUuid | Group::CloneResetTimeInfo);
+    QCOMPARE(clonedGroupResetTimeInfo->entries().size(), 0);
+    QVERIFY(clonedGroupResetTimeInfo->uuid() != originalGroup->uuid());
+    QVERIFY(clonedGroupResetTimeInfo->timeInfo().lastModificationTime() != originalGroup->timeInfo().lastModificationTime());
+
     delete clonedGroup;
     delete clonedGroupKeepUuid;
     delete db;

From cd1e0571a5f9af260cdf4ab53353116c0ce1b445 Mon Sep 17 00:00:00 2001
From: thez3ro <io@thezero.org>
Date: Thu, 16 Nov 2017 16:04:30 +0100
Subject: [PATCH 109/118] forget keyfile path, fix #1151

---
 src/gui/DatabaseOpenWidget.cpp |  3 +++
 src/gui/FileDialog.cpp         | 18 +++++++++++++-----
 src/gui/FileDialog.h           |  2 ++
 src/gui/SettingsWidget.cpp     |  1 +
 4 files changed, 19 insertions(+), 5 deletions(-)

diff --git a/src/gui/DatabaseOpenWidget.cpp b/src/gui/DatabaseOpenWidget.cpp
index e487f97c..451dc597 100644
--- a/src/gui/DatabaseOpenWidget.cpp
+++ b/src/gui/DatabaseOpenWidget.cpp
@@ -277,6 +277,9 @@ void DatabaseOpenWidget::activateChallengeResponse()
 void DatabaseOpenWidget::browseKeyFile()
 {
     QString filters = QString("%1 (*);;%2 (*.key)").arg(tr("All files"), tr("Key files"));
+    if (!config()->get("RememberLastKeyFiles").toBool()) {
+        fileDialog()->setNextForgetDialog();
+    }
     QString filename = fileDialog()->getOpenFileName(this, tr("Select key file"), QString(), filters);
 
     if (!filename.isEmpty()) {
diff --git a/src/gui/FileDialog.cpp b/src/gui/FileDialog.cpp
index cf792e16..ed86bd85 100644
--- a/src/gui/FileDialog.cpp
+++ b/src/gui/FileDialog.cpp
@@ -42,11 +42,11 @@ QString FileDialog::getOpenFileName(QWidget* parent, const QString& caption, QSt
         if (parent) {
             parent->activateWindow();
         }
-
-        if (!result.isEmpty()) {
+        if (!result.isEmpty() && m_nextSaveLastDir) {
             config()->set("LastDir", QFileInfo(result).absolutePath());
         }
 
+        m_nextSaveLastDir = true;
         return result;
     }
 }
@@ -73,10 +73,11 @@ QStringList FileDialog::getOpenFileNames(QWidget *parent, const QString &caption
             parent->activateWindow();
         }
 
-        if (!results.isEmpty()) {
+        if (!results.isEmpty() && m_nextSaveLastDir) {
             config()->set("LastDir", QFileInfo(results[0]).absolutePath());
         }
 
+        m_nextSaveLastDir = true;
         return results;
     }
 }
@@ -125,10 +126,11 @@ QString FileDialog::getSaveFileName(QWidget* parent, const QString& caption, QSt
             parent->activateWindow();
         }
 
-        if (!result.isEmpty()) {
+        if (!result.isEmpty() && m_nextSaveLastDir) {
             config()->set("LastDir", QFileInfo(result).absolutePath());
         }
 
+        m_nextSaveLastDir = true;
         return result;
     }
 }
@@ -153,10 +155,11 @@ QString FileDialog::getExistingDirectory(QWidget *parent, const QString &caption
             parent->activateWindow();
         }
 
-        if (!dir.isEmpty()) {
+        if (!dir.isEmpty() && m_nextSaveLastDir) {
             config()->set("LastDir", QFileInfo(dir).absolutePath());
         }
 
+        m_nextSaveLastDir = true;
         return dir;
     }
 }
@@ -176,6 +179,11 @@ void FileDialog::setNextDirName(const QString &dirName)
     m_nextDirName = dirName;
 }
 
+void FileDialog::setNextForgetDialog()
+{
+    m_nextSaveLastDir = false;
+}
+
 FileDialog::FileDialog()
 {
 }
diff --git a/src/gui/FileDialog.h b/src/gui/FileDialog.h
index 92b58a58..b4f032ea 100644
--- a/src/gui/FileDialog.h
+++ b/src/gui/FileDialog.h
@@ -36,6 +36,7 @@ public:
     QString getExistingDirectory(QWidget* parent = nullptr, const QString& caption = QString(),
                                  QString dir = QString(), QFileDialog::Options options = QFileDialog::ShowDirsOnly);
 
+    void setNextForgetDialog();
     /**
      * Sets the result of the next get* method call.
      * Use only for testing.
@@ -51,6 +52,7 @@ private:
     QString m_nextFileName;
     QStringList m_nextFileNames;
     QString m_nextDirName;
+    bool m_nextSaveLastDir = true;
 
     static FileDialog* m_instance;
 
diff --git a/src/gui/SettingsWidget.cpp b/src/gui/SettingsWidget.cpp
index a8b0e942..4ba81c6f 100644
--- a/src/gui/SettingsWidget.cpp
+++ b/src/gui/SettingsWidget.cpp
@@ -241,6 +241,7 @@ void SettingsWidget::saveSettings()
 
     if (!config()->get("RememberLastKeyFiles").toBool()) {
         config()->set("LastKeyFiles", QVariant());
+        config()->set("LastDir", "");
     }
 
     for (const ExtraPage& page: asConst(m_extraPages)) {

From 135e8419ae54c9cde3003776e5f7791e151a0bc4 Mon Sep 17 00:00:00 2001
From: thez3ro <io@thezero.org>
Date: Wed, 22 Nov 2017 22:12:43 +0100
Subject: [PATCH 110/118] refactor saveLastDir code

---
 src/gui/FileDialog.cpp | 33 ++++++++++++++-------------------
 src/gui/FileDialog.h   |  4 +++-
 2 files changed, 17 insertions(+), 20 deletions(-)

diff --git a/src/gui/FileDialog.cpp b/src/gui/FileDialog.cpp
index ed86bd85..9f3caf6d 100644
--- a/src/gui/FileDialog.cpp
+++ b/src/gui/FileDialog.cpp
@@ -42,11 +42,8 @@ QString FileDialog::getOpenFileName(QWidget* parent, const QString& caption, QSt
         if (parent) {
             parent->activateWindow();
         }
-        if (!result.isEmpty() && m_nextSaveLastDir) {
-            config()->set("LastDir", QFileInfo(result).absolutePath());
-        }
 
-        m_nextSaveLastDir = true;
+        saveLastDir(result);
         return result;
     }
 }
@@ -73,11 +70,9 @@ QStringList FileDialog::getOpenFileNames(QWidget *parent, const QString &caption
             parent->activateWindow();
         }
 
-        if (!results.isEmpty() && m_nextSaveLastDir) {
-            config()->set("LastDir", QFileInfo(results[0]).absolutePath());
+        if (!results.isEmpty()) {
+            saveLastDir(results[0]);
         }
-
-        m_nextSaveLastDir = true;
         return results;
     }
 }
@@ -126,11 +121,7 @@ QString FileDialog::getSaveFileName(QWidget* parent, const QString& caption, QSt
             parent->activateWindow();
         }
 
-        if (!result.isEmpty() && m_nextSaveLastDir) {
-            config()->set("LastDir", QFileInfo(result).absolutePath());
-        }
-
-        m_nextSaveLastDir = true;
+        saveLastDir(result);
         return result;
     }
 }
@@ -155,11 +146,7 @@ QString FileDialog::getExistingDirectory(QWidget *parent, const QString &caption
             parent->activateWindow();
         }
 
-        if (!dir.isEmpty() && m_nextSaveLastDir) {
-            config()->set("LastDir", QFileInfo(dir).absolutePath());
-        }
-
-        m_nextSaveLastDir = true;
+        saveLastDir(dir);
         return dir;
     }
 }
@@ -181,13 +168,21 @@ void FileDialog::setNextDirName(const QString &dirName)
 
 void FileDialog::setNextForgetDialog()
 {
-    m_nextSaveLastDir = false;
+    m_forgetLastDir = true;
 }
 
 FileDialog::FileDialog()
 {
 }
 
+void FileDialog::saveLastDir(QString dir) {
+    if (!dir.isEmpty() && !m_forgetLastDir) {
+        config()->set("LastDir", QFileInfo(dir).absolutePath());
+    }
+
+    m_forgetLastDir = false;
+}
+
 FileDialog* FileDialog::instance()
 {
     if (!m_instance) {
diff --git a/src/gui/FileDialog.h b/src/gui/FileDialog.h
index b4f032ea..9a57a921 100644
--- a/src/gui/FileDialog.h
+++ b/src/gui/FileDialog.h
@@ -52,7 +52,9 @@ private:
     QString m_nextFileName;
     QStringList m_nextFileNames;
     QString m_nextDirName;
-    bool m_nextSaveLastDir = true;
+    bool m_forgetLastDir = false;
+
+    void saveLastDir(QString);
 
     static FileDialog* m_instance;
 

From e17b3d24bfa19c199bcfe0ebffe0ae036378af4a Mon Sep 17 00:00:00 2001
From: Jonathan White <support@dmapps.us>
Date: Thu, 23 Nov 2017 12:51:02 -0500
Subject: [PATCH 111/118] Corrected database corruption when locked [#1113]

---
 src/gui/DatabaseTabWidget.cpp | 16 +++++++++-------
 src/gui/DatabaseWidget.cpp    |  2 +-
 2 files changed, 10 insertions(+), 8 deletions(-)

diff --git a/src/gui/DatabaseTabWidget.cpp b/src/gui/DatabaseTabWidget.cpp
index 4c9445cc..f70df4c7 100644
--- a/src/gui/DatabaseTabWidget.cpp
+++ b/src/gui/DatabaseTabWidget.cpp
@@ -298,8 +298,7 @@ bool DatabaseTabWidget::closeDatabase(Database* db)
             if (!saveDatabase(db)) {
                 return false;
             }
-        }
-        else {
+        } else if (dbStruct.dbWidget->currentMode() != DatabaseWidget::LockedMode) {
             QMessageBox::StandardButton result =
                 MessageBox::question(
                 this, tr("Save changes?"),
@@ -307,10 +306,9 @@ bool DatabaseTabWidget::closeDatabase(Database* db)
                 QMessageBox::Yes | QMessageBox::Discard | QMessageBox::Cancel, QMessageBox::Yes);
             if (result == QMessageBox::Yes) {
                 if (!saveDatabase(db)) {
-                        return false;
+                    return false;
                 }
-            }
-            else if (result == QMessageBox::Cancel) {
+            } else if (result == QMessageBox::Cancel) {
                 return false;
             }
         }
@@ -355,8 +353,13 @@ bool DatabaseTabWidget::saveDatabase(Database* db)
 {
     DatabaseManagerStruct& dbStruct = m_dbList[db];
 
-    if (dbStruct.saveToFilename) {
+    if (dbStruct.dbWidget->currentMode() == DatabaseWidget::LockedMode) {
+        // Never allow saving a locked database; it causes corruption
+        // We return true since a save is not required
+        return true;
+    }
 
+    if (dbStruct.saveToFilename) {
         dbStruct.dbWidget->blockAutoReload(true);
         QString errorMessage = db->saveToFile(dbStruct.canonicalFilePath);
         dbStruct.dbWidget->blockAutoReload(false);
@@ -375,7 +378,6 @@ bool DatabaseTabWidget::saveDatabase(Database* db)
                             MessageWidget::Error);
             return false;
         }
-
     } else {
         return saveDatabaseAs(db);
     }
diff --git a/src/gui/DatabaseWidget.cpp b/src/gui/DatabaseWidget.cpp
index 3a39bddc..453b2009 100644
--- a/src/gui/DatabaseWidget.cpp
+++ b/src/gui/DatabaseWidget.cpp
@@ -1125,7 +1125,7 @@ void DatabaseWidget::onWatchedFileChanged()
 
 void DatabaseWidget::reloadDatabaseFile()
 {
-    if (m_db == nullptr)
+    if (m_db == nullptr || currentMode() == DatabaseWidget::LockedMode)
         return;
 
     if (! config()->get("AutoReloadOnChange").toBool()) {

From a0bfa710beaeff9dea963d858e250bc6a9a84cfb Mon Sep 17 00:00:00 2001
From: Toni Spets <toni.spets@iki.fi>
Date: Sat, 25 Nov 2017 11:31:31 +0200
Subject: [PATCH 112/118] Add missing crypto init to OpenSSHKey test

---
 tests/TestOpenSSHKey.cpp | 6 ++++++
 tests/TestOpenSSHKey.h   | 1 +
 2 files changed, 7 insertions(+)

diff --git a/tests/TestOpenSSHKey.cpp b/tests/TestOpenSSHKey.cpp
index 52cf4dbf..949c708c 100644
--- a/tests/TestOpenSSHKey.cpp
+++ b/tests/TestOpenSSHKey.cpp
@@ -16,11 +16,17 @@
  */
 
 #include "TestOpenSSHKey.h"
+#include "crypto/Crypto.h"
 #include "sshagent/OpenSSHKey.h"
 #include <QTest>
 
 QTEST_GUILESS_MAIN(TestOpenSSHKey)
 
+void TestOpenSSHKey::initTestCase()
+{
+    QVERIFY(Crypto::init());
+}
+
 void TestOpenSSHKey::testParse()
 {
     // mixed line endings and missing ones are intentional, we only require 3 lines total
diff --git a/tests/TestOpenSSHKey.h b/tests/TestOpenSSHKey.h
index 92a071f6..f2d6d1fb 100644
--- a/tests/TestOpenSSHKey.h
+++ b/tests/TestOpenSSHKey.h
@@ -27,6 +27,7 @@ class TestOpenSSHKey : public QObject
     Q_OBJECT
 
 private slots:
+    void initTestCase();
     void testParse();
     void testDecryptAES256CBC();
     void testDecryptAES256CTR();

From 8905fe5a5455f2c8d7a5b6ffddf0ae9e0116cbc8 Mon Sep 17 00:00:00 2001
From: Janek Bevendorff <janek@jbev.net>
Date: Sun, 26 Nov 2017 16:48:09 +0100
Subject: [PATCH 113/118] Use Consolas on Windows for PasswordEdit instead of
 the default Courier New, resolves #1226

---
 src/gui/PasswordEdit.cpp | 13 +++++++++++--
 1 file changed, 11 insertions(+), 2 deletions(-)

diff --git a/src/gui/PasswordEdit.cpp b/src/gui/PasswordEdit.cpp
index 54b0ca28..ad736bf2 100644
--- a/src/gui/PasswordEdit.cpp
+++ b/src/gui/PasswordEdit.cpp
@@ -31,9 +31,18 @@ PasswordEdit::PasswordEdit(QWidget* parent)
 {
     setEchoMode(QLineEdit::Password);
     updateStylesheet();
-    
-    // set font to system monospace font and increase letter spacing
+
+    // use a monospace font for the password field
     QFont passwordFont = QFontDatabase::systemFont(QFontDatabase::FixedFont);
+#ifdef Q_OS_WIN
+    // try to use Consolas on Windows, because the default Courier New has too many similar characters
+    QFont consolasFont = QFontDatabase().font("Consolas", passwordFont.styleName(), passwordFont.pointSize());
+    const QFont defaultFont;
+    if (passwordFont != defaultFont) {
+        passwordFont = consolasFont;
+    }
+#endif
+
     passwordFont.setLetterSpacing(QFont::PercentageSpacing, 110);
     setFont(passwordFont);
 }

From b20918b60e810d3c946d8510c34243bc3dd242c4 Mon Sep 17 00:00:00 2001
From: Janek Bevendorff <janek@jbev.net>
Date: Sun, 26 Nov 2017 13:38:53 +0100
Subject: [PATCH 114/118] Add update information to AppImage and use KeePassXC
 PPA for YubiKey libs, resolves #1157

---
 AppImage-Recipe.sh | 15 ++++++++-------
 Dockerfile         | 37 +++++++------------------------------
 2 files changed, 15 insertions(+), 37 deletions(-)

diff --git a/AppImage-Recipe.sh b/AppImage-Recipe.sh
index e29c0562..a5124a74 100755
--- a/AppImage-Recipe.sh
+++ b/AppImage-Recipe.sh
@@ -85,14 +85,15 @@ else
 fi
 EOF
 chmod +x ./usr/bin/keepassxc_env
-sed -i 's/Exec=keepassxc/Exec=keepassxc_env/' org.${LOWERAPP}.desktop
-get_desktopintegration "org.${LOWERAPP}"
-
-GLIBC_NEEDED=$(glibc_needed)
+sed -i 's/Exec=keepassxc/Exec=keepassxc_env/' org.${LOWERAPP}.${APP}.desktop
+get_desktopintegration "org.${LOWERAPP}.${APP}"
 
 cd ..
 
-generate_type2_appimage
+GLIBC_NEEDED=$(glibc_needed)
+NO_GLIBC_VERSION=true
 
-mv ../out/*.AppImage ../KeePassXC-${VERSION}-${ARCH}.AppImage
-rmdir ../out > /dev/null 2>&1
+generate_type2_appimage -u "gh-releases-zsync|keepassxreboot|keepassxc|latest|KeePassXC-*-${ARCH}.AppImage.zsync"
+
+mv ../out/*.AppImage* ../
+rm -rf ../out
diff --git a/Dockerfile b/Dockerfile
index ad9a2f44..a5966be3 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -24,7 +24,8 @@ RUN set -x \
     && apt-get -y install software-properties-common
 
 RUN set -x \
-    && add-apt-repository ppa:beineri/opt-qt${QT5_PPA_VERSION}-trusty
+    && add-apt-repository ppa:beineri/opt-qt${QT5_PPA_VERSION}-trusty \
+    && add-apt-repository ppa:phoerious/keepassxc
 
 RUN set -x \
     && apt-get update -y \
@@ -42,7 +43,9 @@ RUN set -x \
         zlib1g-dev \
         libxi-dev \
         libxtst-dev \
-        mesa-common-dev
+        mesa-common-dev \
+        libyubikey-dev \
+        libykpers-1-dev
 
 ENV CMAKE_PREFIX_PATH=/opt/qt${QT5_VERSION}/lib/cmake
 ENV LD_LIBRARY_PATH=/opt/qt${QT5_VERSION}/lib
@@ -52,34 +55,8 @@ RUN set -x \
 # AppImage dependencies
 RUN set -x \
     && apt-get install -y \
-        wget \
-        libfuse2
-
-# build libyubikey
-ENV YUBIKEY_VERSION=1.13
-RUN set -x \
-    && wget "https://developers.yubico.com/yubico-c/Releases/libyubikey-${YUBIKEY_VERSION}.tar.gz" \
-    && tar xf libyubikey-${YUBIKEY_VERSION}.tar.gz \
-    && cd libyubikey-${YUBIKEY_VERSION} \
-    && ./configure --prefix=/usr --libdir=/usr/lib/x86_64-linux-gnu \
-    && make \
-    && make install \
-    && cd .. \
-    && rm -Rf libyubikey-${YUBIKEY_VERSION}*
-
-# build libykpers-1
-ENV YKPERS_VERSION=1.18.0
-RUN set -x \
-    && apt-get install -y libusb-dev
-RUN set -x \
-    && wget "https://developers.yubico.com/yubikey-personalization/Releases/ykpers-${YKPERS_VERSION}.tar.gz" \
-    && tar xf ykpers-${YKPERS_VERSION}.tar.gz \
-    && cd ykpers-${YKPERS_VERSION} \
-    && ./configure --prefix=/usr --libdir=/usr/lib/x86_64-linux-gnu \
-    && make \
-    && make install \
-    && cd .. \
-    && rm -Rf ykpers-${YKPERS_VERSION}*
+        libfuse2 \
+        wget
 
 VOLUME /keepassxc/src
 VOLUME /keepassxc/out

From 54d500737a580ffa8201ca60e6fa095ee1d4a39a Mon Sep 17 00:00:00 2001
From: Rich Brown <richb.hanover@gmail.com>
Date: Sun, 26 Nov 2017 16:36:46 -0500
Subject: [PATCH 115/118] =?UTF-8?q?Create=20docs=20directory=20and=20QUICK?=
 =?UTF-8?q?START.md=20instructions;=20editorial=20pass=20=E2=80=A6=20(#122?=
 =?UTF-8?q?7)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Create docs directory and QUICKSTART.md instructions; editorial pass on README and INSTALL
---
 INSTALL.md                       |  75 +++++++++++++++++------
 README.md                        |  98 +++++++++++++------------------
 docs/KeePassXC-Accept-Button.png | Bin 0 -> 98966 bytes
 docs/KeePassXC-Confirm.png       | Bin 0 -> 72759 bytes
 docs/KeePassXC-Connect.png       | Bin 0 -> 103252 bytes
 docs/QUICKSTART.md               |  47 +++++++++++++++
 6 files changed, 143 insertions(+), 77 deletions(-)
 create mode 100644 docs/KeePassXC-Accept-Button.png
 create mode 100644 docs/KeePassXC-Confirm.png
 create mode 100644 docs/KeePassXC-Connect.png
 create mode 100644 docs/QUICKSTART.md

diff --git a/INSTALL.md b/INSTALL.md
index 45efa7a2..2d3f7cb2 100644
--- a/INSTALL.md
+++ b/INSTALL.md
@@ -1,11 +1,13 @@
-Install KeePassXC
+Build and Install KeePassXC
 =================
 
-This document will guide you across the steps to install KeePassXC.
-You can visit the online version of this document at the following link
+This document will guide you through the steps to build and install KeePassXC from source.
+You can visit the online version of this document at the following link:
 
 https://github.com/keepassxreboot/keepassx/wiki/Install-Instruction-from-Source
 
+The [KeePassXC QuickStart](./docs/QUICKSTART.md) gets you started using KeePassXC on your 
+Windows, Mac, or Linux computer using the pre-built binaries.
 
 Build Dependencies
 ==================
@@ -28,10 +30,9 @@ The following libraries are required:
 Prepare the Building Environment
 ================================
 
-* Building Environment on Linux    ==> https://github.com/keepassxreboot/keepassxc/wiki/Set-up-Build-Environment-on-Linux
-* Building Environment on Windows  ==> https://github.com/keepassxreboot/keepassxc/wiki/Set-up-Build-Environment-on-Windows
-* Building Environment on MacOS    ==> https://github.com/keepassxreboot/keepassxc/wiki/Set-up-Build-Environment-on-OS-X
-
+* [Building Environment on Linux](https://github.com/keepassxreboot/keepassxc/wiki/Set-up-Build-Environment-on-Linux)
+* [Building Environment on Windows](https://github.com/keepassxreboot/keepassxc/wiki/Set-up-Build-Environment-on-Windows)
+* [Building Environment on MacOS](https://github.com/keepassxreboot/keepassxc/wiki/Set-up-Build-Environment-on-OS-X)
 
 Build Steps
 ===========
@@ -39,32 +40,68 @@ Build Steps
 To compile from source, open a **Terminal (on Linux/MacOS)** or a **MSYS2-MinGW shell (on Windows)**<br/>
 **Note:** on Windows make sure you are using a **MINGW shell** by checking the label before the current path
 
-Navigate to the path you have downloaded KeePassXC and type these commands:
+First, download the KeePassXC [source tarball](https://keepassxc.org/download#source) 
+or check out the latest version from our [Git repository](https://github.com/keepassxreboot/keepassxc).
+
+To clone the project from Git, `cd` to a suitable location and run
+
+```bash
+git clone https://github.com/keepassxreboot/keepassxc.git
+```
+
+This will clone the entire contents of the repository and check out the current `develop` branch.
+
+To update the project from within the project's folder, you can run the following command:
+
+```bash
+git pull
+```
+
+Navigate to the directory where you have downloaded KeePassXC and type these commands:
 
 ```
+cd directory-where-sources-live
 mkdir build
 cd build
-cmake -DWITH_TESTS=OFF
+cmake -DWITH_TESTS=OFF ...and other options - see below...
 make
 ```
+These steps place the compiled KeePassXC binary inside the `./build/src/` directory. 
+(Note the cmake notes/options below.)
 
-**Note:** If you are on MacOS you must add this parameter to **Cmake**, with the Qt version you have installed<br/> `-DCMAKE_PREFIX_PATH=/usr/local/Cellar/qt5/5.6.2/lib/cmake/`
+**Cmake Notes:** 
 
-You will have the compiled KeePassXC binary inside the `./build/src/` directory.
+* Common cmake parameters
 
-Common cmake parameters
-```
--DCMAKE_INSTALL_PREFIX=/usr/local
--DCMAKE_VERBOSE_MAKEFILE=ON
--DCMAKE_BUILD_TYPE=<RelWithDebInfo/Debug/Release>
--DWITH_GUI_TESTS=ON
-```
+	```
+	-DCMAKE_INSTALL_PREFIX=/usr/local
+	-DCMAKE_VERBOSE_MAKEFILE=ON
+	-DCMAKE_BUILD_TYPE=<RelWithDebInfo/Debug/Release>
+	-DWITH_GUI_TESTS=ON
+	```
 
+* cmake accepts the following options:
+
+	```
+	  -DWITH_XC_AUTOTYPE=[ON|OFF] Enable/Disable Auto-Type (default: ON)
+	  -DWITH_XC_HTTP=[ON|OFF] Enable/Disable KeePassHTTP and custom icon downloads (default: OFF)
+	  -DWITH_XC_YUBIKEY=[ON|OFF] Enable/Disable YubiKey HMAC-SHA1 authentication support (default: OFF)
+	
+	  -DWITH_TESTS=[ON|OFF] Enable/Disable building of unit tests (default: ON)
+	  -DWITH_GUI_TESTS=[ON|OFF] Enable/Disable building of GUI tests (default: OFF)
+	  -DWITH_DEV_BUILD=[ON|OFF] Enable/Disable deprecated method warnings (default: OFF)
+	  -DWITH_ASAN=[ON|OFF] Enable/Disable address sanitizer checks (Linux / macOS only) (default: OFF)
+	  -DWITH_COVERAGE=[ON|OFF] Enable/Disable coverage tests (GCC only) (default: OFF)
+	```
+
+* If you are on MacOS you must add this parameter to **Cmake**, with the Qt version you have installed<br/> `-DCMAKE_PREFIX_PATH=/usr/local/Cellar/qt5/5.6.2/lib/cmake/`
+
+:exclamation: When building with ASan support on macOS, you need to use `export ASAN_OPTIONS=detect_leaks=0` before running the tests (no LSan support in macOS).
 
 Installation
 ============
 
-To install this binary execute the following:
+After you have successfully built KeePassXC, install the binary by executing the following:
 
 ```bash
 sudo make install
diff --git a/README.md b/README.md
index e379123c..e4787cac 100644
--- a/README.md
+++ b/README.md
@@ -1,10 +1,20 @@
-# <img src="https://keepassxc.org/logo.png" width="40" height="40"/> KeePassXC [![Travis Build Status](https://travis-ci.org/keepassxreboot/keepassxc.svg?branch=develop)](https://travis-ci.org/keepassxreboot/keepassxc)  [![Coverage Status](https://coveralls.io/repos/github/keepassxreboot/keepassxc/badge.svg)](https://coveralls.io/github/keepassxreboot/keepassxc)
+# <img src="https://keepassxc.org/logo.png" width="40" height="40"/> KeePassXC 
+[![Travis Build Status](https://travis-ci.org/keepassxreboot/keepassxc.svg?branch=develop)](https://travis-ci.org/keepassxreboot/keepassxc)  [![Coverage Status](https://coveralls.io/repos/github/keepassxreboot/keepassxc/badge.svg)](https://coveralls.io/github/keepassxreboot/keepassxc)
 
-KeePass Cross-platform Community Edition
-
-## About
-[KeePassXC](https://keepassxc.org) is a community fork of [KeePassX](https://www.keepassx.org/) with the goal to extend and improve it with new features and bugfixes to provide a feature-rich, fully cross-platform and modern open-source password manager.
+## About KeePassXC
+[KeePassXC](https://keepassxc.org) is a cross-platform community fork of
+[KeePassX](https://www.keepassx.org/). 
+Our goal is to extend and improve it with new features and bugfixes 
+to provide a feature-rich, fully cross-platform and modern 
+open-source password manager.
 
+## Installation
+The [KeePassXC QuickStart](./docs/QUICKSTART.md) gets you started using 
+KeePassXC on your Windows, Mac, or Linux computer using pre-compiled binaries 
+from the [downloads page](https://keepassxc.org/download). 
+ 
+Additionally, individual Linux distributions may ship their own versions, 
+so please check out your distribution's package list to see if KeePassXC is available.
 
 ## Additional features compared to KeePassX
 - Auto-Type on all three major platforms (Linux, Windows, macOS)
@@ -19,67 +29,39 @@ KeePass Cross-platform Community Edition
 - Using website favicons as entry icons
 - Merging of databases
 - Automatic reload when the database changed on disk
-- KeePassHTTP support for use with KeePassHTTP-Connector for [Mozilla Firefox](https://addons.mozilla.org/en-US/firefox/addon/keepasshttp-connector/) and [Google Chrome or Chromium](https://chrome.google.com/webstore/detail/keepasshttp-connector/dafgdjggglmmknipkhngniifhplpcldb), and [passafari](https://github.com/mmichaa/passafari.safariextension/) in Safari.
+- Browser integration with KeePassHTTP-Connector for 
+[Mozilla Firefox](https://addons.mozilla.org/en-US/firefox/addon/keepasshttp-connector/) and 
+[Google Chrome or Chromium](https://chrome.google.com/webstore/detail/keepasshttp-connector/dafgdjggglmmknipkhngniifhplpcldb), and 
+[passafari](https://github.com/mmichaa/passafari.safariextension/) in Safari. [[See note about KeePassHTTP]](#Note_about_KeePassHTTP)
 - Many bug fixes
 
 For a full list of features and changes, read the [CHANGELOG](CHANGELOG) document.
 
-### Note about KeePassHTTP
-KeePassHTTP is not a highly secure protocol and has certain flaw which allow an attacker to decrypt your passwords when they manage to intercept communication between a KeePassHTTP server and PassIFox/chromeIPass over a network connection (see [here](https://github.com/pfn/keepasshttp/issues/258) and [here](https://github.com/keepassxreboot/keepassxc/issues/147)). KeePassXC therefore strictly limits communication between itself and the browser plugin to your local computer. As long as your computer is not compromised, your passwords are fairly safe that way, but use it at your own risk!
+## Building KeePassXC
 
-### Installation
-Pre-compiled binaries can be found on the [downloads page](https://keepassxc.org/download).  Additionally, individual Linux distributions may ship their own versions, so please check out your distribution's package list to see if KeePassXC is available.
+Detailed instructions are available in the [Build and Install](./BUILD-INSTALL.md) 
+page or on the [Wiki page](https://github.com/keepassxreboot/keepassxc/wiki/Building-KeePassXC).
 
-### Building KeePassXC
+## Contributing
 
-*More detailed instructions are available in the INSTALL file or on the [Wiki page](https://github.com/keepassxreboot/keepassxc/wiki/Building-KeePassXC).*
-
-First, you must download the KeePassXC [source tarball](https://keepassxc.org/download#source) or check out the latest version from our [Git repository](https://github.com/keepassxreboot/keepassxc).
-
-To clone the project from Git, `cd` to a suitable location and run
-
-```bash
-git clone https://github.com/keepassxreboot/keepassxc.git
-```
-
-This will clone the entire contents of the repository and check out the current `develop` branch.
-
-To update the project from within the project's folder, you can run the following command:
-
-```bash
-git pull
-```
-
-Once you have downloaded the source code, you can `cd` into the source code directory, build and install KeePassXC:
-
-```bash
-mkdir build
-cd build
-cmake -DWITH_TESTS=OFF ..
-make -j8
-sudo make install
-```
-
-cmake accepts the following options:
-
-```
-  -DWITH_XC_AUTOTYPE=[ON|OFF] Enable/Disable Auto-Type (default: ON)
-  -DWITH_XC_HTTP=[ON|OFF] Enable/Disable KeePassHTTP and custom icon downloads (default: OFF)
-  -DWITH_XC_YUBIKEY=[ON|OFF] Enable/Disable YubiKey HMAC-SHA1 authentication support (default: OFF)
-
-  -DWITH_TESTS=[ON|OFF] Enable/Disable building of unit tests (default: ON)
-  -DWITH_GUI_TESTS=[ON|OFF] Enable/Disable building of GUI tests (default: OFF)
-  -DWITH_DEV_BUILD=[ON|OFF] Enable/Disable deprecated method warnings (default: OFF)
-  -DWITH_ASAN=[ON|OFF] Enable/Disable address sanitizer checks (Linux / macOS only) (default: OFF)
-  -DWITH_COVERAGE=[ON|OFF] Enable/Disable coverage tests (GCC only) (default: OFF)
-```
-
-:exclamation: When building with ASan support on macOS, you need to use `export ASAN_OPTIONS=detect_leaks=0` before running the tests (no LSan support in macOS).
-
-### Contributing
-
-We are always looking for suggestions how to improve our application. If you find any bugs or have an idea for a new feature, please let us know by opening a report in our [issue tracker](https://github.com/keepassxreboot/keepassxc/issues) on GitHub or join us on IRC on freenode channels #keepassxc or #keepassxc-dev.
+We are always looking for suggestions how to improve our application. 
+If you find any bugs or have an idea for a new feature, please let us know by 
+opening a report in our [issue tracker](https://github.com/keepassxreboot/keepassxc/issues) 
+on GitHub or join us on IRC on freenode channels #keepassxc or #keepassxc-dev.
 
 You can of course also directly contribute your own code. We are happy to accept your pull requests.
 
 Please read the [CONTRIBUTING document](.github/CONTRIBUTING.md) for further information.
+
+### Note about KeePassHTTP
+The KeePassHTTP protocol is not a highly secure protocol.
+It has a certain flaw which could allow an attacker to decrypt your passwords
+should they manage to impersonate the web browser extension from a remote address.
+<!--intercept communication between a KeePassHTTP server 
+and PassIFox/chromeIPass over a network connection -->
+(See [here](https://github.com/pfn/keepasshttp/issues/258) and [here](https://github.com/keepassxreboot/keepassxc/issues/147)). 
+
+To minimize the risk, KeePassXC strictly limits communication between itself 
+and the browser plugin to your local computer (localhost). 
+This makes your passwords quite safe, 
+but as with all open source software, use it at your own risk!
diff --git a/docs/KeePassXC-Accept-Button.png b/docs/KeePassXC-Accept-Button.png
new file mode 100644
index 0000000000000000000000000000000000000000..de4b39261a9179902f6f9e700bb510c6c47e0e71
GIT binary patch
literal 98966
zcmb@tbyQrzvp<Lh4J3GQ9b~ZJ?mh$`+#Q0uySuvu8Qk3^KyY_=5AMEs-}m<YcK7e?
z)92jNeebERuBuOWRoCrs1vyDnWPD^OC@55EDKRA|C|EQoDCjgqn14OSe&p6r&;dHq
zV!~jztiKD)&`{q$`_(*ib^^C_W5uAUZ=j$MZ+M}gwiwIdpyDbppoHo`P*B4_Xei46
zzdJ0Tp`boK{$?#F5=asazLDU)BOvRFNY!MQeTDHCx*F5jt4W0N?;*H^QRxr{U<Hwf
zR_o+)pY>m1^G=w$0>-^J3*udfsGUAMJc=Y|r0^|F0oKoIxk}z<Ma9Lgiz?48?SLv!
zhuhW8KqM}cE@VI@{NLk0?ec~e;Qw@YxFs*($|Vcz{^z3(H+I!XpWN#1|MUK5xp?>F
zq8?oZDDr)<=f5cZBT-h2bB47WQI7FH1TA|T&5OUO(ftD5d_bT7-=yz5?n6Z?{ea#R
z*8elKX5$J;&MmhZ;J^8ZRKsla1($Yvx`r<;pOHOZf<#hArJs3&Y^r0Wpr|g4QD<(X
zZLe-={%-q>5Kbs1#Klpr+i+3^WAKbIvOgV3X!uXxd%k6N;ks}F4xfwc&oGTdYpew`
zs+-+p9Bi!c7f+AIQ4Qyi@W0_@V)l0mbj{sv+UWWF8XYw+U!3VH5F=UF%x<n9U+8<Z
z$Bp`N+}gP!*t=eEk){*>fx*d?#U;b{LlTmkgr!6b3H<6$U$7WsLjm`T&5}xFioXA~
z6;`8%diDmp&c;BM6jsHNC`>4t=o~vFjBHnL!HV>={v<1&C>boP$#BnJI)~IGf#@<D
zKnE8KLJ?8vLNJXZ?i41MFGI1in4yM(SHfK0bo@B6zj{Xf?s4T$t^4-Or1vzOJCWU9
z7rv@qWSE|SbSC@5!`6MlY8LJ9XtS2&$NispYTZtfyZb}OL%}8Rk3gZ7zFFtxIkMBZ
z=w2)QG86TjyZiC8+_(K#Z^4gE@9swuWLw=$7H#FmWuK69hO<NgCv9ELTXglFJ*&bc
zA!*g`MLSSU()AFYq6l4`p4yqe-={>!8`&rSR8xXSmbaY<&5zGJzV%qO`UNg6e7E{@
z^f{v*vP=sUx+(ezp;67D)k6Ng29A=&^M^4W({@KOf_h<BldKFqQxQiv7|QU+8(|nX
zAJ1X72<fv1SsHxv{FrKr@$qt&!4kA+6xdi2va+(ZMS|f8XNu<#3a&VP>NH|)wfv(k
z1e-BVq;mmocZEqXS<375*-w1&y&LHreD{AGiPd|52-YIf!Td}loEw>*HoeMlayFJ6
z-6wz0+3B?{3jGjr{LLeDL!}2QLZi;9uQ^7q?WQsJJ@xi}KKK2hu~~3N8&(J3Mv%Lj
z0~pNB#y<9#MMOSzfyxX-!E5r*(-^b+@i`H&8kcsHU?f!)ZV$C6G899bYK9l=|2Ly&
z&#NcQm3bPi$dF@K2a_Z}5f+bCcA-GvHx$TmY4&#xnz<Dk2D=m+C`Cn3@wEz>#xG-g
zV1(^aXttFw8P+^0PexHr$ly!yC_Xt<(eMjycHZ&(UEFVCj`-2(SD{8CjYV;3k)ez-
z^^}7b4OrOjkVYdm>FhU2*=@?&S(%MzDW6A9Gc<wwoqy7JiY}JRcB{4y$-@p-CCr!_
zi<<c^z$+c(;dvPIx_&sjaqfFPH~gTf`faOfXQ;3l3i>-s!JoqB^QX+;fs*o=Dk9r|
zoqLZ5TyQzl@^eAlyjhuU+`YaE<-9QM1O^Ghmx8gBE}q{INSDuC(TTV2rw#bBI*FpX
z6G=0M5VGFQ>bFxIY&{6YE@rQm!uHOkD$dWpQw5YQkt%K$!mIvUj($wQd2p{U*K&CV
zj3>|&m#?x1_S6umEUL)PGK^mG(VgRD0_Z}OaXU?0J4$^IgHiO}w@1VJCbKlUsko(a
zS(R-stnp$$$j;8bo}86&O~zgx5Z&eJ<pMhSZ`YP1n^pGY5t~!lgqn$;N5dB7zw-t@
z^74<JllIz>pl=ZE%o2&Q<#?t&ZrC^)m%%M4F=KM#Czrw}n-#k<&Ho~EkOsj6hVlKv
z&{0_JlLM%GYGC~-?`XVX<z)d-=|#Wsvf0XviR%32iw@1kjKMM){-yPJ21Ds>4lXTH
zhWce|18i}XT($Tk_PA18H7I{gZ2TC%Cs||VFI{?#*BPrMV~ewYUbnAAe3R!KURnC_
zqFMK8ImUn4!T+0j?GLBDnUMRVi^*aKN2|A61eiADvZN;J12%5Vs}+Ur2a%Ok&e+OI
zZ&I$p=FfBAni2jOSBMQ0H1CJz@QQlyUjKa#{sPDcVV)DEr^4fw<WPud$Q65C4iAkN
z`F<DMn)!Rjn!s25JE^d+ENMka$f5OnZ62x8gG=~#VJU2CAn`;Vh`%O9TkoDG5MGfV
zf22RLf-xa4pVH(;g6%WY87lquv0|IP+8ohq*(aSKVoHy=1H37Mg3<}mUm`KgDy+wO
zT~_*SLO6AO`+5FXVnVa&hKwPIOOaLswRj<Ir==mZv=Nk}5mlB=fs1~IE_{7`nYfn3
zhERuYRX(PkHhg?h8g)d2VXlIzBya1jOmAC)VWNWzayrLbGNeLJyG4F$4#!6OFX=!c
z{!SN_nyWxW=EUNi9fspPv&EsM7`}Fw_oB2a9Oo+)%jc>i22bJU$Ced`Fxt`eq23_c
z{@jpnr3(Ei4#6W?;Xk;9shW~3logzc>c+Tc&+X*)OX*pamHW~sfDjC2hSW)*Y>vSQ
z?&4A~N85r#f60%89}CeTs#6h$bF;sLhQ0=)6XgakBV$6%nslU7K^+Vikj8$S)#sij
zIBg2jxUVxOTNhOx+(-@9XIrrDWSc(J7CW-VH;*a*7D6*xqb99vO^_{?`hDP@%BRxo
zOWg7|)O(V7Bt?kpIZdp9Z^{v3LS~{GPd`O%B=`gse0&{pT_8B~sijyxx1B7()u}^~
zDkFpI&JU%zp8}kWCRpzhQ-*OI&DSi_>?z6z?Wq*FEVQl^obRuRRsTjqvF@|?)p{i5
zgtU0n(Hkh;zLY*iH%+RVEcL4%G!%#Ij(?oaP+bGWD*)4GijrIY)J(g0nJ9`8629)-
z(8M<!h%H)n<nQ>@e!^fB4zFNowjet-@30<+`djw4^{+y0Ia8=6BAh`Etp}HzsZYid
zIX|6SchkX(u~svwbN~(Lq^Ie;^P6-NuBS><^dd#%FML~HO5c|!R=wxmZglnJ4cmH6
z)y8H5qPJKk9q-rRn=gXx?{k|>o!zAeJnZX5&Z^xLzBI%>2W)r*$Y!=-f9JRFUowy~
zXO#yi%h;fJ(hD8IP7~pbhzG1cxSevsmz2stUnNQ~_NL3kio!A!A^duNbXraYpnm!`
z1G@aoMkAOTJf0;VFh^*iiRI6^pd-5X&nuUb+r~@@Iz8nfFyPMepC5NhkX1XJ*Jnk4
zs^^N-kT&ZS($L35O}Z5*fw)5<6ez(GvU+MssQZJL2$RUN1@!(H(y%&mf}#U=kFr=J
zn`%@d^ZZGV(&km|WS@39r@h{SVma-N1@By`C}Q|oqaM$uqn5?hXI|GmPFoqZCUCDy
zZ!-*x^<P-4Ay$j@vKd)2HHcC1r1r&EZlOt*87(PKk`e~9K6U(8d$Dg{sWu~E1EgUA
znO?|N&!wClrfPFVuZcEKYf7A}J^eONX1KdENX3eg_R$PI4CTN)wR}k<@G#<yw^V;(
z+6CIsVe~aOft5HI*MTlVF=b7`A;gZF0(Q26uoo*fE;6=+lQVcwK{*%s`;M^5WOfjX
zlR9Sa$u?}9%CC)g6`XG3r1T5asqcKt4RGStC?f5%=*Ai|r~`L#ICJbB;a?${caoQq
z`3(GGX&Y?}1}Yw}dSM8;0`9NZDKY%mry}!cDw`y#B?*6Yk4xg9KG7c9IH3tTMns)m
z)+(PauFREOsyr)$DYK$*@;7_D;2a;~L_*kF0oYWZ6A^-t0<FUtXL>iN3}v2vuU!%s
z&85IUcpsJ}t<Fq!LFVFAU8|LX#W~yTSMx`$ar9><>(ZB-3V(4$C;3KV@H&f8`>bXC
z2&toA=_Q@e#faf!sw8I=mGvHhq`pp1R)%R42=w)A|E9%@MG#W;^T;i)af_66(H{Q(
zNnAK5=twG|<n+k+iGldL&c{1=e9qkmZj&HflZja2Ny2wbB_CwFhC%#vhOYv_9AvWI
zrsdy+%`ANtV{k?1J1sCd^q+S91k0}<wvg4iA>j3w5^punh<dTQsH{ImwjA^w^}OS;
z=k@IeKQXx(Je3L^%b~I93fA+UWp2%Pap<QEKwES8xxq<Ydw1j}`}Z9Rht3^C?P{yd
znIxEoLeJzPFn}*NsZ=SeJVE1e$@g4(`A0&E@0oE^1<oiqfwDquj~$z0n98;moIvmU
z)l+bXZK)L;#D})}qqf(o6^>~zov4(<D+IsY8l!pn-2}(=N~($CB!qOdQm%O3##Kyl
zip{C+700#pl5cEkDT(UxB&g)iz!%=w*Mr;Mi|!z|%hKIyy%n&I+MUu*pPiwb_ns0&
zH!HKMMl=$B;Xf`%N8xwn3?A5tcN(a^8K!dlj}%i9*;zrO3JVPARDXYnyI->gvxu5D
z(T?CA3{fhVf!6;LAY9u<<iDg)m0;vsMY=Y$c_xo^k^0fMp{uZ<yd>5Tn`{zW1bGK8
zrxYUa*C~7UYibF{&OjLBY2q=FUHodjK6k8(+`~B{MzV5pOl?uD5qdI;>1#I?nTvL!
z`dq%wDD6VY3W&fA)l>TMIe}e@%vsaw`(W-%5*c}HQ8G4gAZMzc?ejm8L?jgfqkmE*
z?svIHgHOMUGH56G^VCOvuHy)cuPM9jNgUMkbQN{68gRy<_i`4H`{Qj`WFh*;<zVHW
ztPHg2_58S!%&>zTk@`>o9+0smiPZU`tHbqq%>4kpe~e9Hzz*IWgpC|TJ5SXHHe;r9
z8cWbln`98y?}{sx>27z(;$VLpfR_0MLMj0LeW%1CF9S`>9Y{YRtg*-=t4l{<t0v5-
zR61=Su7!b=Oht+ods~S52C5xN?Lun1hPcMbVD5}p(V^^Ze|@PWvdG|&8laa^Xlx?2
zv2Jc^YStpkqoB*T*p?}HPRbarSDvEq3?_wlxiWpx>K1Um^kgC@cDue)+gy&biX726
zlh1<ToIF))M&tL+ib5@&Iey^0QfZzlVmU7heCP4gg4!EXs%15~Ha1IC2WRr}FH+@>
zv0^{4?t7-qv;rPAWnvp400qbg?0<sbY>ij~HJ8EeKVHFjjY*HRwb|}SU;B{)i~~sh
zsnMu>E_;NC|F{pq`5PGrd_$xk-gTEE9}jeCq>QCbFdR)Flul`DWa^BoFvPah(@<G!
zo6n>fCZ>GI^0Xw&T>t5kXjSL@#fR!$#W->xMgQG?qSUbo?6<1UY_krdZRx92*(ey!
zZa*sw6=~JwGW5rIuyYmVR^X#aWHmqYo|wOAfSo!IbT&=Mr`kiN5vF4?)n^T1<|=y|
zIR4POz5W@R*tJyg%&}v`q(65e2l<%_J8RF@H|4ZmV?D~0m}ryTsgL68lY9J%)7aH*
z+j&k#u)zMM*HVW4P88GqrdqILtYYS+ADG+&?5*#wta_@?TsWPUGElY9l&PFS!0nEx
zRJu>5KxOCG`Pr0!gFD{zp}5bD%vHv=8k7@`eY`_eR>-H8$N!^&vbjOXHa>E-Gc{p&
ztDk}2r|sH}zkIIn3}hbr%xh%9TdCx*sMW5bscW5_5iXyv8qW8}xw&vHq}er3`X_Cz
ziLxY~vY|MtggWOUnFxHDrI3V{;`&Kq%n-qyq82IqFII4ztVKJ_=WGep(@I70CQ07p
zjKrg#(ch&|LluMFD0bq&vJ^)tCLUcx;>Rd;)uAX<_{(7%?sIWf&Y#TZ=X!sPod~`*
z%Xn@OQ@?J#q2QjUXkUY0|K2-Thp0oCjvL>e5O5g<!RsE$!h$lDJ21C3JGV*?VLUTh
zI+1brH@ev~I}r2t@Mr23VeE<KdyYzu9}UjovQU$4kZ~=@#)LY)0(8}^pI?JuIL_A0
zRf0_UpbSUBz*tG)K+93c!_!N&ILS|IbwklmW7w_e6488Vik*nD5`!RTiY8$Rh1o!$
zJDg(G&wXU~Lc>{2gj#kYu)n`KtbmUi{*fj{=e(#`SVbvC0G{d?`iz0tuN63E{Z4oK
z!oV1)DbgW=;D1hTk%kghKt4gnZkjNZym)2xMRAeZ5-d^h&=y;5@_iAT&-6moq`B?;
z>A(`u+y3eOs|F;Tuoi@yrt*Bq#JG_<jU(m)fXn}mt#gdJOWIcqD}tc&$&lhx{{a%|
zMEF5gK#QCtBGOSxesE!E_(2NJZX>W_*OPIA!Q>@{C382&7y-eF{!g@S^~`hS8iT4u
z={S&m)eD26ZMuolBiGmA13#^B>05d-Jeg%IOG?;tLfMHV+<5g@EGEhlU9qJIRbeaH
zT@_Rb%gd|w8KFh|<4R)kk)aG8(xZI^5;7e$MDQsod<AE$zta?SocTIad6V*tvvdmJ
zI=76r2=dZ}9z>+KNiADlgTO;W5jfkgnvpr9`VFH>me%(D@9%RGB8rZyFJ@nIeA$=_
z<i>t7k3?rlkQ$zPkS}2V*fl^)j~4c(t6s;xqew0OcqEyewtVS*`EcB}nT`kxMH`Fr
zLZ+m*m9YJWf+ui>$#aDG>mXdC<foK<Iavz;RDge&KE+``pqya<TJ6M5SBWS_n)=jv
zGajQ_`Xo{gXJg^yk-Wvu^zCcSb;m|m!yc`W_YB6mJd6NsI*dY2XkPqOosJn=_`+fj
zfua%C0-}e)EX<`u+~XCUIr>s_*G>q4lZN~AGVSPn8yE9(pU+Vv?SS!@=KS_SNshN&
z?>~2Vw><6B$i1JAo*3Ecx(+BynC*_9fWLDLS17FH%Eg@KazguUw_5<SNnjOv9Hapy
z=>=2=7I)#(Q!O730YaCCw7=V`jTaVJ9(A74o7LMN0&(vrdIH5Rd#*lw@2MnNzJ~>o
z7k@i%cRN!zmOas1Z{>WQ5r*2k+b?D^1z%oWH~Gb@&nDlG*KnIZMYj0&%#P+v2y{h$
zuY|p&RXYuqSQ}R+#=6waLH|D1Q;ZXVN4t|tKE&5*KM}rgyu+vL^+3q+T?Hp`d2<<W
z(<!WnrA~y--h!F2v=`#J!}A60Tb?dpim3rqe&5bqo|N8;ip|NRk%_Y&Chu^fU|wJ5
zNM#zUF3V6AhHg~&NWTwTg&2kI@#zxKWehDonn+)5j-fs66dBg?i65l?Pk<X1;rh_G
ze6vFfclcbqc)V1e=G-j3@JCNJ4XaOl<QGzexPlcbb56o3Hvw@>SV8%eWo5>i!zesT
z5yQkymV>lpe_un`U-~$UwQAzGr-#XYdGyD&rJf`CUcI;0Hlsy%I=lU?r111{x^3PR
zXgcc%cwN{eCV0uDaI+45-z)AG5KLF*5B=4`vGtk%+@s_lOXrQBxNrzPnhv->Z-(=e
zxY3^EhH*DBpY8oJ%U9vHf**vpv(h&_+Ze9H;_$Sf-Az%&XvTVAFsYci=~ahVGxqQ!
z9L*#oo549rnJ1LUYns=I1E$jZD-zW7oGek$oG66z#t~0Fv^A79P7pg3vudsYytQKH
zmY+jOkK}}#kzm~CDmqNbReey}pwfm$f3-_qpu!aUexu!yD>To@ufhd^<gm;fTGN-8
zmjmKbjU6y@R-U!eq&PD=Y^R0V=7-7p!iI^_0!?XRq$_5EwOR$=j;l+E@J!#gI%m7z
zJwSIA3D!~vG7(Y64U7Xlc>^@dRDIACkhT;FZLD#=WF1z&AaWP3Pv&V;4D2(8+6~{;
zhHXG(HWmP4@=Igdb+4HyNo9fY1~<XgAJFHY23p8YR6H=WAjaLRARc_b$HKU$LaOIN
z>VE3v!<_@loy4-(E2@t+ozi0il`rHgr1@_CJIQ3Z7j6ke#dtp?*{r8)pq`z}@%+jT
zF|inmOSs(%4PP3{pabXK1InOv%nP+TZ>Hj+k70yGLo{Nke#1`>7bwL=)Ca%*9h)1w
zEl6Lp62^jSq&(7m#@8XjTMr1hRgCnDuo6j>d|T;U^L%0IxJpd)z1`s2kIsXxI=mSC
zxTL1`{kVwfez`bg+RVUkX1EcCm$Y}IB`ZM{Cr<;4H?b`*U<VYGSLJyWoolq&rkkvO
z)}g*O4;ikMXoxOdEBVt3k;v34%hNIpp*>Bpi*s#P@!)_epIe1l!yjl_fLY^&!r3aT
zY~M&|->5lH*-JDBS+o*z+KW0WnQR~u*oitfmW9R>!)NF%c<Ej74LC9@|CDZ`)qtz%
z%P)<D_kS%|MCN((Emu;Id4dz4K!yD&;g{m~ZlNNw$45$5P=yegf=)2?DImg1?je|*
z<ysReVyI0s6;1`K@YTxTr_1xk*j#7&ny7GAaAMnSK(5I%K!Pa(4s|&yMNDTRGB}d+
zJp0-3`lyv4bW&H)>;8|6{hqcNT5h|~?b_Xqn$094cgMlb7A+de4v=LMKfxG;;mu~U
zOrC_LrAR35j8t}R(Po>LXA#nb$?bBKPS(V%LeZ>y6{Zrfrj)G-DYT`n>}PIHTE<MZ
zKDQwuymUIwGz(HZQaLeBPN-1IR2ez<C}$Lu%)R~WJu_P~0IY;NN__37?zOf-rK>=a
z+b>fW;NADRpL)OT66bQ9<nvzSa+c(E)*|Sx%%NOU^2;0v&xGu9%1~47?<QW?BJD{8
zI3?K;k?__{D0>&SWEc&V9Gw}HQ+c)+czeNo<B6_V&=T@0<?@dmw84t;&gOM6d7gqG
zgfeajUe6a8shJH8?<W5JWcl{DWNNTHTdb)lRvuB(77I;h^kZ><`J;u6HR$zlKRr-y
zoUko}BGu!%$jyPJ>ro{u>L1kNyO508+qa^BZue6<U<%91QB~u0OVcRHt&>Xy%{K4P
zy6(-o?z6h?vAW81w^e)HEAYQab!&eAv|1}NiR|qplZVm@aFV&XtLe10@JGF~ag>o~
zwJDvAf^=y>-f_29QqucjVa%ta8yyOy4FzaHr#4p(%}*xX{tO`JOKH=&8s=OvubEY|
zC^a9&l^aL*hrw%NW7m|osM?snGI1dZ<YqE|C0!EE`FBQ#1pI3(Z4DMB-SusKtZbp>
zY+iyp>ErYoYb<jwJ3D{73Ie@cnXVNLJe{b!5PGl^PS@V@W9td<u-5^<mw+z27nGvR
zfk6#ED2W&QxueyuB0et-9uWPdcx!|zB%9K|Q~ogaHneA2zi%<*zM7Zzv#$W{hqwHq
ztWRbW61%h@^PZbanrr(@KnB5LDx~IAN*TLl2HRu4b9l@BreCq`A+v}D^|Opu(wk2T
z8+YOFZ-EP^2o;NHY1O^Ek?wb-W}%61k;Kl~gbqz;?*eCwtR2W!AHkiJaeC}e*&iEB
zp~R2PwQt>3@gc7;!)iBG@=+IF>K^-;Pu(PC9?MgsO}eHw;p;e|t&j%WV`jQPD!9tc
zV7>Wfwp3>s>5$`0Q{M`uSY$g(RJ5Tc=UEu-3>D4!T(Q)x0F?+?C8*K$lx0m$n$Gcb
zMWRDlNsq5y_fu3Z$&ZD*v$4r5_1aTe*W83?p{y`JzA&%8k1pfw1r+a<r+W!wHa8p^
zJ<YxV))$>7=lBL`L;+}~Opu5E`9SU_nBW%34;v()eW}XHTC>=pD<>}#H(rh|1XUB_
zQLa+vR0m3*As}LJ-Q&RF&l<E=If$x>xoLzQe-P}nJ$qNDDoTDec_sNm%;$Ew)oU~q
z;3e$)k$S)MzH{83utO7JL{kNMioq+CmC+4sg`l-U##D6-lV|#8W|P@!Z?ncP&Sy{7
zpmDcmOsM7ylRcj_#I%wy%EfHmBh@+-%Y$HH4k}9w;MnKO%^7P!8^sSl43l*Q_4fk~
zTt1ApdIJ&uYv2Y+Mz`l@Vatd2ozhkDffQ^ly51lL0!*27=wvG%!0C0&&KicL=5LVp
z8<Gq?JH~%GW5F5__LQtB^=c)Ti&ah4@JC9KcKNbdVbIi6Womf@!S<T<!<bH>I^>`F
zl?9qX|CwIk;MAw50G~6cTF~!D2H`r&VI`AM1wxq{owOs_LHEU_N2oRi#!l*U<}t0Z
zKYb|)_=HK@O67AdoZ5mFGf*gY4aMydtT0FPkU}WjS`E+?1TGqMGX?~p*b}V<qRcn5
zR5T3$v?oe=c{Bl$T7dr%Dk4QKh}sr8L8HGk*<+YPWpcXKX!sB9h7IaNe{E&kot=QS
zW*Orj<&M-ut?iVB?Ap1%&d@dl6-uY{fS<_;I<^(!7U^f-hsUyll9beyN8@2u*E$l6
zVmGH-RCfMbh9Mj!D)_5RS!wiPZKNj-(^I6ib1SuQj<lBP{TMd$*3$G0OvdX<GG-4a
z_DK{A<#SegrU}^)tbwP(5|c#&IfOK70gK^E)^cN&rB2&2l3|xt<JSJfm`zpJi$m4$
z|ETHm+YG7RR5fwK;62iy&7K%L)9)!SahAjwz+%K8J%G-68d$rAQ4gxs$~WO!shS%a
zQwPB#D3mu`!K_K7WZf<U*?sFhE(jVyP6w3rAe1rSClszU0wqv7BY-2v6K!!v6`LuE
zzT2EfeD+&6#IC&mzs=*bb-!w<-R-lLE?L;8N-$ePf^|t%<%?5pRqnlOu}$fOW(Th3
zI!3k>o)*APCR`<=9@N<cdZX)M_f4#6gHn^lZ#&)_9>CQCVB#m20a7&qnd*?l<|JmD
z<o~kyK!jKW)ay@g&%&O#jUYfkoSO0Ulre#&-FKsKxx&vo%rdnq8It8<m@*YcNI&g{
z=|?2A1C3NmV?VW!)q;lIY}6l`vYrc{joLYKjg!IM<h;Vuw_<%bsBitU|2x8VbU%>j
z$-`8Y3d;c?J*6_t0*ZlneD7FAd`;<vcB0uQtOr>bB5@usu-I5As9MDJ!PI?f*-wEX
z{HG*JRv3K!WWo$3k#ge@)XvYC$(of);s0x1=7AcJ&R~kgBGX9adL^GGFxFf`5@m`P
zb#^TnNxO-lO2V~|x%{?8Q6sG&9ME(^$r{O`?04#1jd4O&15)>h9F${BwHJaaOv2wv
zWSQrz0YxD2ujg+gw*ih;!iT%mA-3IbP0Ln{^z>}_(VA34WZcp@<V;7~t5^SxVBUX_
zbb36QYj`woOUsNO2ms<bC$A%fddiJ`HKU(?KX>wRWeBTOf>X7~K~w)JO@G&@7Onvi
zz}nJeQ{6mTlKz>Q0Hd9Zn)@R)ol+Ia6pm5@(xQkIBJU9or#g(zraaZKo9OTlf!Eh{
zyIlWPj24IekyJgOCvJH3y|^q&`FPyh%d`K{Wj21e3J;uWcwA<De+MwK4H-7&Qh=+Z
z7rhyaviY}4UF7zT3m`)URDnUyZ7~cqIRG*g$;feNIE|isApG}%5`wz&@O{ssx3%6=
zw|9FvDd_-X)4a}laV;GVJ!zP_LT!Fn`B7QPuQ0z(SaQ-OA)yG=<FFYe(qKv<4?i|3
z#II6haci%KRM6<;buVISsW<CPdJY%qt%>Qa5AWw$tY!kpz{W-dl%u-yOmHkHyV90N
zt_+=Z)w^wUNgJaeLCOr{xPh0+0GvVmOspVXsY-_x5fT!zvZ6^GD_Jm&jDo_-!lI<C
zq?}Xahw23_*ehp;NCU<G>vMu%&;^9`PNw_zKh?|U8b6su1|&5ApyX?c68rU=40c4_
zi3`WX8IY|tu%*iSMCg5KV=!*1S++PcbLwt)7MW$PC{6Ec9e64VE(=sFn%o68GR410
z)Ih<WcCkBsrj>>Qs{F)dJ+A4R=4wm=eoGF!1(8P!7b+Tnc|Lp;q=CtG>J|UW+#DFj
zUqM5I_ABCvm@`IgVQUwj)fUPll1qT7(Du{KVS0KxY4{H+Pp0fry=TaO>i$il3m6zZ
zM8imC2$JHm!i!f>lqggj`mxlSsW~tsj;eo>5AU?Jb*sF6(m*WZtmz6^hiS8AbeQo6
zf!qgwQ?=P8@qj(Pz_)aXL+)EZIttRf53)}OZMJQs>rlxVT+d_xKM-p2nJ9=zVBHv}
zI7wIf7YibIBzx`p>TvV}7aTxZ(%7g%9&g7*2$K_+l93XhBTSVTERv^Gnnbs+;;e$*
zQRkqG_Xy(?kiGR)K}uc*VZ<+8NF<KX7^cpnd%gUBr=pBY1dI+=L{ip{VEmVB7=k<^
zv&5G*_SWJN!OGapL9O>BDE!jHuDStpRhqe4A0B~pQYPkSl}LUmZQ^a6G-MU7-oOK;
z?*!I~;JNsL$K*f@MQP5mLLG9oNRStLAa$Yr&lSaR*<UkAa}lc_tU&1g?JGAZZv`5x
zCb-e^18Mw>jLeLEhqMS_3$__?u1jYv(tqTClc<e`MR|wu&ss?1hwAEB1aiOpe^^gN
z10%~X<}1-QrGX>LNmG^Rq?~@@MJg%|=fi+^z{h=xzd5*s%?PwTmu!fD&bnW!T8)Ae
zpXE+_kN>2spxQB<N!@zhs?5YvI|~E0PXP|eXB=Elr+4;u1t5&<0wtA~5{y8m{N@*@
z#I$)xgA3S0k>lNK`6B>?5e{dE(L=<BFG`6?X9*l&sjbriEki={zpUt}LpSv?hxSay
zhzg<7q$Yr-Y1oj%VH)86pUiuFZPY}y=>P+<1AF~e-SSj>TrtAIIy#jKUI)U)85tS>
z6pIsy9XZg+X8AvWA$8YFRiO3&^Jw9x#7JN&n8V<RlIxE)o`Y6u*1rQ)Y8yFPfK+;%
z*fG@v>L)B^;8}O@@%X?Nk3{nAX>X?<_=Fc$TXJa_4K}N07Nd2g)%L8s+xeH$;B$-J
zo^)k_QZ#Y0x%QG`X%=b$hW`k;f;k-M>EBeh@Do80LNtV65$J#5pJRC%<1)4)KOpPQ
zsoo`v2}|_zaAQ9kxw|bNPNTFTQft;zV3O*m{8O-_;ibyZjWdPO0uokbNw3%(ZU1lZ
zz#_VxG&eM0VPm(px67xqn9P+Zs;a7rhN8V~hmvGvWijfs^&7JYy5PO2LY*%yEsbSy
zv$C^egT-wV{$H}FR-{D@{zEYxgz-5Zs+~@8B+MzhJpr0PyI5S#2|7hg(-q=T*`AP-
z(w48(?)Y%(53sI*%8qok{cLB;`o~)cJd?4}R*=9^f??%7%V-Mog%%ndz%7l)6hB&p
z-e&;wnC;bur{V@gQ4{V{fdZ4q^2+C2Whx+b*!iJ^`%!Pza4F%1Gw62~c5o3sjE0Mm
zL@Z3f7b>nu9mK^)k+Z?7^fIJM0ovZMhzB^2Thw0j)RMG0a>Xez?Ex)HBD9&~=L4Rf
z^=UO^98q({Ofb{5Yddry7S_Hb3UmNjdTjtY>_q79NQUMHikttBJy80uqAV$KoMbF)
z9Bdpc92_jHU)Lyz>W0{o`Bn?SyVep-wwV(uXiRx@{q%(AlqOElGEf;2k({HcLsJa1
z)VR{Ni?S4-U^xi1R*qpTEI`BiD3r2iK!-FY5hs7K*57bPx{or%1!9I4#ZIu)!q!Q|
zH_ztiYrPBhTC4ZfoGDYB9~QIHL<$Fs7)2I3Z}B{jrwd=OH~T!1&MYiYVIe0bB=jiz
zZuR(!hJ0pbWqmowwC#F-KE3FAu{oZB(9+VPqN3*7f8(RaLHRW}GjqL_CwhE*+}PO2
ze+v8Q7krX1M%-7*kMH|dl7QdiU@T;{px?L!GFJd&a$N!)Bnbdc6lm_J^`4Cl_URp8
zi<}~C!)cb&XZm>;5kOkXGk)^(l$tb&7luSFqrkccthO0=M%LGI>Ysvt_}PG^NvQn(
zl;-u=w>g*e_p2z_W1A>)cM~P|0FwT#@Hr{EeU<yjt<p!21z)}}wtn}O+%qLC7Yh}O
z!1?qGV4wKS$}bTr_VoTAqo$q)&{8lM4#9+R(xwuoE-oBH_c~@N7Np3r-$=G=R&B#w
z&3Ra5ki%EG#s5r766t+y`8o2KorfYycggoueVz<2mgj%OzW-3bxqL<}@R@n-=aSuM
zp6ECO!(e9G%7i_iCqzM^!e5|YOn?@FT&GWxM5~3uVWKwRZ`q%Thnkd?>ycHNMEUUz
z4+axo5NqXmG(lEb7vfp>>sZHyse0xYcoR-e=H?t`JDXo;;T^bHe>V8%8}5X<h&oMk
zR+EA^+XbCs_F4ON68<Up`3tAQqy6N&bhzec_Tt&xPsBnMy3t%;AER<MUY~iMhg$DO
z5zy0rNKhq`@VV7!(bd-0PUZ@B+wX>ym!CFo`dI$_>G5}|R;^l>orA;YZ^C_Y*uc)e
zUDZ#ZU{HNBgO!?rLFehd7Vv+ze$uB<S~CP-a1puUk_Z-BAk~&r30ylJvpJ6|AYuVt
za&cvAsSU8bq9~2qlv$k(w}_N{3(r-X-#UqEM}nUGGeZ+DVWNc6I~wH711`IW0`cV9
zkQZRcPv<MSYwUgaf&8jxg$AW%sxjxMElZ*0z0|Zdx#+fv=Y?J5K?#qBIof1uE|~6-
zS$dP6+6jAD#t2ENdYXtB0ejBQJ5jfv85U7Coe!u`gA5LIxOfn^?_JyV&XXiKg;!jm
z(~DaDa`s)lqZ=^|6Xp*HnzpfEK01G4a8XoY;2m*}IZgO6MZa?&k*HFHekL(BF|>Gv
z9Mf1Lw3oZ%4grfgF3c{6TNK>Q?H|ue9XZjO1&N}{iuzvjaqZn#68Q_f2_@*iNL@>%
zDxW&<$2Uta^GV40ydLW>;;j~?y?!5Y2!kXi2d57lkwh1@PCi7nMpl}XvUeUquXxbh
z3Yu_V7DM~K%&M!&R0mNev_Q%y2r3=*VCKDABo7ApU#J1y=r(Q9tEG**E^+D<XOa;4
zA5cI=nxubz5U=YwpZ7EP&>hz1Z?o+tF}K6sqMmQ3L0?E(TAFK2qgPu#t8l;}+Gn8!
zqt1>PztD`{k8;lq=>GxkW#IVALS8~6PIBCm2qjJ+`Bua*&*b^F%cPAdH31=Eq|#y4
z9Cus7mMj=UI&(|fu1>B1lp9!`Fy>dCAVlC*SFhz-tO%$qNDztz&7EXKfEa+&jV0hJ
zame4z01z;_thF_LayK!I(u+3cPhKH<?pfFh+!TV9iyF=|KTitC4QNw#8UxZlbo`x|
z7#jo4p53K2SHz}-94$J4Uem9X@5khpI*8#$m{NmW{iHczPtfvw<ZakNScZ_@6|d@P
ztGKhxd{0cBn(bp>U6VnjM5DPmx{jZPKFZj(!)dsZ;XAhB@VYTf=l~3fl55SixANcQ
z>Hj|HsO%Lv0|a>6o+?_-VL(%D-%l`0a>{Whf$?=AI5fTQ647O0Pb^Nc>x{+NgQ9hG
zQw(tn(z@^`5vi^VwpZ$*;euQwZQfi(x5p?>NciC*1`)dalEvARZaBm#6On^umYEyw
z%YAnW!Du|J6Q;vZ1?WY-nGFjI{H5eonhZaWD`rcb^QCJsO6~*mXC(PviUHl@#tYVK
za_|=E9V!LqoIT!#Fz0()rdoP>Uj}>rf%bdDwp|N0ooW;@|H{AsfSf#F^3Zq9;l9zF
znTAMz>YJZ%{UH?P$xibeOe{6TU)1Q9>&`}b{Uv#^05lmtlmJ617YU+-kvm<M4dQRN
zz_#*UvgvG3@LRP$)}Gc<IBslDAcNH&r9LV*{+f)xuPK*s?3H}mORZO+l<o7JX#ggV
z=9PbLEGbl=DJv^8XXA<OGg4)}rgIQ=VC4P8knMWVtzX~CWvSdU`-IhPNL5$cng^SJ
z#Sjr<${eET#5iE9oQA0|d(8WZ3Dw)a@z)M^LBvGm0n1U;$;k;Z|KF`zR2RjmQgoEH
zF>S9Mi|}!U0uge?@bG&=&z`fv`9%kLtkTnsLvPJcP_IuPZfm+Nn%ju<qR>ia#Mj@R
zCb>F1Han_xnQ`CQn(?*47gr6o@hO@ZoK_>d1-l&CayM>;K!h+@d$JSSTcU?#OPiH5
z+7UC(Qx%gR*vBFp`zA3I3}21ZY`Vu|O8t4F>uK2;N*R*nbFdIGnLEWHAg9OlaLYw6
z?iGU(y;Pg0ivZ<igq#wZI|XVYoztb3^r{<op%~leo|3t<zqyqK1Cr?JE<tw@vFN|g
zF6h2UrVd)@fuHvs69NJP05U02M7#@qeH3J5!ZcooQXkYzBh7sZu5l;5Qj3z;9^hkl
zMMY_0be!mZqgDR)O)-EQe+!5Rc)Xt6FrD1sPlNghyn{&=@YVx#Ld(U1R*r2o!DZ(m
zAT}F@MolQDq!)N#ye|Pzni2yGIhbB#KJtV+zl>{6r#jS=u!;$4t$u6G7gr~(X^-4+
zl%cr%*vw&+l_2BPxrEZHVwkL0M_RCx`!~{m2Yp=H&D<F^OvKJ4#sHj!f;bvB{B@%(
zKe-a)uBXS{m418+?;H}Ar6=lUSfhvaNa34JI_l$zFq32A9#aA@5~W0~UlMQcw-F7A
zo)QdN+=i(i6reU33|~KV4R?01J+iZFYNv9|`o<19^IU$>4S6viw^irWj||VcvI;ph
z#N?oC)g#uYm6hpJw4n0{!*2ajN}ULVkyUaGb{c5vyPcCoath$wrpNw5HM)Rg)`QNK
z2$wj|1s$-=Dun0s^<U696AQXf(`5e&N%1<p{Z7DHfLcuKsKlnwz58lLu_X~bxcm0@
zhJcFC_Akc&cZ(n;HFb3VVjz0^fsu%c!%wXKaBO^N2u!o553AQR$;_W|_^jDb0-lcn
zJ!LC|!xdl<)@SNYn4XBjn=b|i^0$9FE1@jgKUq%}JB#c+Hgs`~!TsfUdT!%)+M#_;
zeO5k)m+TY|v$E?%AObo0AWH5xv^O<1buo2O_GYcl<Dop<X)2j_Sv;Wc;<CPiSX>?s
zSllljykj)q*a)kCimfnL^rMT@QbYAQk6v!uS+UBFk;5~$>F%Vu9Wc>_EiUb%MKR7w
zUoL3R@`*Z}8yeWM|Mmz)q!Q)hwehsJfxU}H&Db_t9Nx}H&>PrR+E^N)qZu$cDvGnW
zkE?%uO~a)mTiKyfn%jEML1a)#sAREsnc3iv@O?>sdxxA6EwlcVH<aQb?17+BSJ`^p
z!H2f`FE$P;3y^+jlBxeIvU#J42&BVXHKPoosH8DMwr8YxIedMin^y}l;iHvDYy3SM
zj-T<F(E4Eb7Y-L}cu{3sw(n_bqi)rN*+pkhF=;Nmr<_2eWzmJv%sR-K;Rinhen~`N
zo4a+@(|M_&Tfc(MT#09Y3r=*_qV_12QY)Nkr}~B|;`av9fY03QBQC|qb)ygD69S$!
zrcWEuXw($fN9v6ewQtr1pb*P%@;Jy^q}-ILmmqN~m|{6#oG7TXON18lDtrzElc-m1
z?&svVyux<kAzmM+$Y5%hxz7NE1<d7ocTNUg!<D*>6*Q`f0ZVCqW5u_+<#Zr%Xo!T2
zhz=xLih+W`^Q6W*t=JHi-v{`?ReWt#g>y7N3xAKyAfv@FmL)cqHQ;qluWDvMIs`1=
z7TJeODGjfl+-cl^6kO5*@bX2-T0xZ=jO;Lt(mkzZcJ6>7&WV9k*#7wD;h(&oM7_R}
z7B#QG>)LQG5816No=2Ac#(B4o`Dj09N0(o$E4L;M8k0ear1NZ4M}q?<Zj{(N=_`@%
zeG`z~jU}*i$aiYpw2^U8GGJ+Ne%Voy7uU8SDd9`#F1dneEB6!A|0dM^gpZe?D2Pik
z<cnQhE9)#}Z)8_d>3UgNO!<1`hZ;HH*n+)=&yh0%sCzVQeT-#}Re~tR5AU&>O)Raf
zWTd72i}-Gq>&?c;$9=P)7&S$;c%TZdFsYuid6G-8FF(D)@%HBF!ehBz{5w$L%)!M;
z*~2wd6nCS~2xFR#1|BPf4^;T6aZSqx%ra)vZPl*g2JUuoBUMqDHXk{6_z6frCg58h
zETc}dq0wAU|G6zLQl+fG-U85=3pgK)GO~#YoS&cP_kHJMV3&oFQ`2)NJKJlkfzVY=
zYC5=QoFyO2RP{hLoP><`hPDSdGV%>j$8kNT;CzxF3wLu~e|rx}7IuWDgl1QNx@L>B
z^M0(0JTB(COC}YKV;CaL+BrL1%*SAvvyJL}agD6{cYCGV*(M_UaIWzXw$9>{Y+OUR
z02Dr$;o8e@{YR#-gwc4k?6@zXdBdow^ACF2q3O)AjUr3}8A~j`VluF%&bPe}MsS2p
zfKY3mCiz*4cmILEBXuT0rh3K~j>fFEek<FxXE;V3!HrMs_Id^|XN*k5e3li#@yBt!
zfnC{riyQ0#gu~!KLU3cXUGZ5v5kNv=&a3mL1vDaISZ&kQiE?!#SIk{?9!MBF#)JQs
zMVWL=vSBDI0}nW!lPkv_mGsCOHtB?-KFd?Y<_p76#J@PK;dKgkRpqJI{Ym=jk0u6H
z$mm3{gAw<mD;yYM_wjzaVs9D1`lVoQUdisj^jF_W0BB0f(rtSsG(1Z+A|WJP{hdw!
zcpvMUsO(%2#v8txo_l11!Y<y`nB&ES4sJ3UZjWNzbeq^i2lRkUHN`z10xBW0XS2Tw
z&!cJ<0m)|Pvv6z}JU7KFhqMPVhU;&AigR&-n{DNzI#7nkKhteE_hHFZ0S?OwG<`Q-
zy=D#H^Q33jn~o7hhVJiBOL6mfYC63^D=eHkZ9@o;y9!SV>-y<Utc?*24=fee5$JSS
zFx>4mVxS+Rr~d)}C8y49{XA&o5x?Y0w$L1%Y#Q3-&>DU`$dPsNplOCZpD&`+#xD(Z
z|EihjPFHf7!S0LVywgRe%=kT(wU@|lX&BJdxM4Qx?&EdjB(nR}x<~EfeUfwYN5j*~
z-9%YCSKDXm0_t_=>#2i3LkY(c>YmD)Q)a-H!oslm(8=-Dr=t+tqv%e@LpgR97G`#4
z0zupP2)d_3W?+{AZ0+a5{lvtA1!8{g@%^3N`J9)9Sdv`<Z|VN=8F(D+<pIOJr=Fau
zw?%+9m-&==&3Jk{*W;g<E%WZDbK(0zTa!AL52zcOeFyh{ML}Vz#eO#`DoV9l*Zbx`
zmLv16cJwX}($vI3L4mn7-SG(}1dRlm<39)$%=hGt0&zB$Bq@Q_v-H#hBz9z=fXAYA
z&|t%!D;OZ~pLaiQdPLoOtROwbTvjL!uut8W6^MgAe+UGvaVnJ7UMT!?JN%oY4<~bA
z>q;@|<pc$rc;@~vnjh3zhV3t+Z(&+l{>E_!wCN2aw<v#mjz|Fbi^9)AlBk}F3GKtx
zi)N>31B1$K8TqnLQ0rju0<44&wy<mkyIqKJc)0Xme~<g(wfgQS&GRn4IX*>Sd@<6+
zLqz?h#HpAW$LTQHY9sn1+lp__qrYZbbyMrzayY8hXM_6|9DNT>4;lV^nsx2dJ26G0
zMG8ZLM+o&buN<1Ol6-#AXin*6oA)h|7SFmZ6g3?G*v+#1>UVC4)@LFPkN#%SKXR`(
zNqvbva`H@xJ(H?o69YjyE4O-s(;qo}zt?7Fevdu2OW&xrZIrdhs>m2u@MtfoEON%W
zhyyO8wuA;GnGeyc1j*?o7~i@Xq&XfeX^Dy?RZ!=?%6e^e{yf@v!mJiI;ATq`@F)Sp
z2MN5MWUcys&GFUq;EW(O_o4$H%jQz&hMlvP*SO+RlHhe3kBYY|7xH;z;s_%qiwnO~
zIPdb9e1Uuy_*n?X8xcaCY~tRHtdKEI-b09qS>~U+QaV`ptn%sa(_D$a!#6zY`%JPF
zuTC!+b7@4qaoA5kcZDiO(<CKvJ=V1T>O`4wbV7nSYz_##FprTi@YEjTUZ=)AuhTRn
z5NFx9M{Sj*cBo_tWc-oNRC6GXI5~X5w9!<8G3z$&3ob3z`V03~*brg8Lj`{E>_!GU
z{pqOzAJHZgzKW7mR|1uUD{1U_H1DbBLM^Z}Din%%E1@?d@07uKKT_X^fxw(qS~8?|
zpa<HB>PN<Qe2rigbe{_Co%b&}MKvK1ucLJzR;vBx4}2RNp8mDDqxNA(B5ewqW{ndn
z#7RlrOXh`1oT&H{p<J<3&G(BBmi?tzgalpt2)DU*MLAZ^*PHS@+g~#}#hwH7`{ivr
z<z0c!t>^`rWJ`VGD~=X`Z;XXAasv9ey0>`OiL<E%YaF)fzUHHa$I9c;T}02-(4zE`
zuY-)n!`Kpe+n!kFSB9$FkllmXzuj!E4cXkjmG$#A>-DLj>t$O>!dWW`HLs3UtDY_Q
znWOtd^~=z7+0;M2-6y9H2+h{A7A-yg)$AIze$V}SzsW<~A|LStJ63>&2&bs1c)CzY
z@Gq(Sc(n`7sz`$cQF{7^S#+_yIBF^?7^&yc%`O;%|KtfsYNd1(kvMvi^*2I5gx+H|
zF3|?yGUf)1HIhlSV_EPC3aqvo7{q@<Xj;!=oTBsnw}2b`Bi!c(0mG}>z4gU<`Ax}?
z&V18j)4p)Z-&xml-nCVJajI~~$-@7YcTiH<lmY(?8FY(a%Kn&Map}n&>wYwx3bIg^
zBa6i<D{Gfq4Bdr7lB#u8Yaz^STBhdWhwG!wS5-^tD2cfrLA+YVQSl;`S4UOMEWKjB
zx1H@J9>TQCGgOq8+8P?LZF61}c@)(!!_|u2G!zh|{QRlixvyjfm^iOsnGVO341%PB
zuZc|sZdciT=2ybIwY?^2zb=ZJ<n=%HvGOtgSi&WG;7gSj!^Pb%u-mKCY*e81lj?1G
z?3-;T^zMTzz`TqbGU`O+<00Js?lymqC{iM%vuZ$XUhdz|TqyZoZY{^q80+(+4Bf(m
zjr>&;%(Cjnmy=CuQJVNCRginj;OvO+UP=MK`rF)Rv7P(?7=5tAmAjBMSV&gEL{#Ii
zH?Jr=;YmA1NXLf(Gli+8V$DrZ-<PiLi9eTQEjF#&x9yBtMPy%h&(OPCbKHSA=6bX`
z*=H%(dmTf(_5;x;N;acfpq8oepMB|8D@4Hi_=np|=Yn;#kh9Olg9QV(Av}or5hFVn
zcr=soQJI75#QF~d2dTlfBizj%QEF>JUvZk=P894wON)O7&PfioK8%$`2z1T$vqT|D
z?A;#=)G1e3?3F-NFaQ`CX8+Ao|96W@JH`6%VQKClr9EZC=Xiv7#?i{f@m%|7ZB6Gq
z<OEC7Pn;-tTp!mV(xYoI*)TbS{F8kK5pkc~&FM>{iYqK&)ex%6j#i}U-mH3Cs2J8t
zjIUR0_DK#K&R@LMauVzDEz>H3UZ=c?t5NN42lqTOT2x^T%HkK_Dh}FEwH?{ocJg2n
zgx3B<gsBe_gFFwk@xLGmTYr`I6L9p2S`L7g*c`ige&4HKJx+`0D2y0F<y^-}*F0xQ
zCvguXEn)d?osTEsxR>syNHyBcCS1XL`Yj+r8Zv!Ej|Bcx;r7j>d%M43d=ORV<>lt2
zjI1chgKolS%-`OKaLv{_mPTd-u&paVAGKm<&uaLn_f_H`)8$VJwG8R>VGM{8V|aSn
z{`P2^POXa1_uWfFW7&+*z0T|@J3nCqO0AH!$HF`La%lpdYe}s%5&HbDL}@&;1Z?&-
zxgVK<`c2U*SpX5}%+X_y4`edQUc+jfqqU0JjZQBYF$<8dv5wN-xp9-fjAUg#y5z$b
z0-y^)OvN41DIWBHt7gXps=7NbWyvazGMZ(>Y1~af6-z=;1ba%1?-!w|1jib<UvI%6
zRz<i@cY7H&1!#Wit<+vY`j^uVYqK2f9wcP*j-OUMf-cH4!O_aGg-b#4rP18^`Sp@x
zK5P}ccVkrf0pybGUqvQjGxx7^-B-OYa!1G@hEgR-X}1NVuR1vD)$QMRofIV+3-9i}
z1&S1WbzD-x(zFK%GSfXT<p>LM<5hBh9rTdGZN@>^va!ai{WIDBra^u@PN&ctWY_h{
zKr4iYfaf`c&3sP2v{X_)TCc|bi0VQA2cojh@{G^BUL=TR2}<&BGPE48sZreqbrE?f
zc7mt~?f!NkcO;qyuMJvncBK`%D4f0Y<*_0UI3F<Tj}~#mvQ-oAuPW8iVo~P$yn_<F
zRx#UPTy4K<gC?jRr&hVp;4uI1H%eS9K8{IYF6-<rRts-8_EPA8{-BeuFOPjPS=Gk>
z7gg^VT}c<MjmGJ)W2<A^Hg;^=w(X>2+qP}nwmY_c^PY3QA9sxUQKQD%wP($ms)=V^
zi7P5OIrq$CnhJf0(QR0D?%SCK+4eUTL?d_Mq~J&xY%R=ufqs_6CR?|v66-i+on_U%
zFs7?Ir9E!Gk2I|eUx?4-ogKR^F*z)7lWFhVCD=NgRsouFkF2M4ug$zKY^^>;t;b^U
z=@~Vip364+$r0gVw}GJcEE;BT8u4r`+h#xEZ)I>7e?binu?eB4TH~>K=<_f88#qV#
zFAridCSlQjm-|mcUd`b*gP@qO$>-BX)j8wWbKFp{DPJ$cz2DbCH(|i7^Qf#`VaQzF
z3JvolKe4{b@c5NG$d9#6986h%aX(mw-nc&pJFV78LP=c74Y<mDuiJ#J<ss8y1Y?zM
zIQ@RHkqhSb^oR@}=oy}VBQey?1H8*_FeAh#;o8l<gckW`wH#Hg_*DOL9=B{gx)Wg9
zvYoqP5nO-IMd)NT!WEGE`rSWjF;U(6mrPo2>qlS2iIME)`MzIgei~{19UXlNXti}r
zT(1DFq?8ukE1zj9&0}vpkT&qL_Bv~>9u{EiI@xTgr>*%}y&%cBeUZepHk}h$<Je9+
zL1(m4!kQ4Qa5azQeBs>PSy7Yb$Hpy?Tbm`b=~KnEL<G1DvG>WLLQn+~6YR~{pWC8p
zA&RpT3~aYKA5hBo0UM%Qz4b_VKG*DcIFT7Fwih*g)*P>(Smw%n3s;&;6!AVe;aju*
zi}<lF>A$fUd{$HK4MTrp+CCKB*2?RyLCA7{mS-l*rFf4zULb&S3W@nNy}SiQkSj1L
zX!v}tE1egCei^+^?S8}J+A#bCdu|WCd{e3Pr+#9B_F94QC0A<NA|O!6<@lEywJ7>F
zHoOiGdXmTsJ-;z{y$0c92FFp_E2DgJ99+9D<&X;mm`t-qxdIh?o?7MabJNMa7T-iv
zLZV%eic-g;G}GN@A5uRr!0%mtYhf`g{LY#(cRhJ&f?#)!5FNIyHcr?+UH)7*Z>JV0
zW?5U@OM2eIceick&E&j<4_*pUinqyZ(K#_`?<0%OrZ!g`Wva+_zjD{4qVBrw(uF{E
z?&2KqO<PD>)0}rKCy-D?Js4hwr5h}Y#m$%jBe<}sT+c|RL%4Z)P3uSj=c>8+OVvHB
z;D`btR|bviViM4BpF>)mYT0BqlKGmA?h=~sfO+Slsof>IW>}+!#C@x!BQiyVNIB?z
zp<i;lg1>L!Mu4kClgr!H{tq2r>|0n#8S{eFu$J__`Y{;m=%5}9U-bYLX6iY6%%E$&
z^Jy|6v81>?hW&th`;+xbuuOy6NB(otcSf9RBd$Z1n@*Mm2y^QnC99CeXe>Wr;L%Pu
zSM;kC6h)rHAKHfp^4V_MS_X|g7DIFI#dXJprVfQavc{zERxGD^jR%`VlGCcCA_(eg
zUXPQhr{|Egj$ImVX+>zgW*|3IIa%Jr3kGprV<tI+cVaYhEpsN?Ih|*G4(p-?sGj|H
zh#*Za7M=ygG*M5hj?bkny6^sU<5c;UI$2xIdNcLG=vOGWCs<h-99C*{zW+WOjw(@2
zXm#q0p`>GP9L0(P0zjCU8hXASYrej|h>=bkbjeq8KdQId-{*l=#JT}lJ-%v6XE(|g
zU#X?UapJRP%=N#1vaOCoOA@V~J~KQmn+@8?4A@rFExR)`&&hAa7jRQt*qTW4gOhQi
zSU;&-U8O>usoM=i>ym{<YyNwsGk>ucv+PzZqhIxxBDFwv5j}fs7DF-(Nva1|TE0ki
zre`0{1<6%hX;-@BRk2Ncyvl;5f9eRQ4ew7Fh`L`|g3H?49_=dj213-;;hGxj)0_JZ
zTsQx11mlc*Z!6B=9#q1ee7Lp^O{YrRw~nhQ5uL6l!7J5cS@14S&Kr#H_I04wM97v}
zRnF}g^}#iX4AGRu+{>(Y*sUkp>!zh;z%|s;<33&Hh{~p({d-M)tVE2Tm}Q}p$<h5<
zD3=He##?FG_DYLY7pE+s7qK>IlOm!zJj~?Xcr@cEP*JG>`c1jzo3OH<vw5HDG(X4Q
zyJLNhsH-^mWKRVmB#+a+EuQCmF7vcw-efRT%46!N-p146{0wNHvawvAdZ`F@+bbl~
zQPh@=-f<-=plrhN-tb*CU~7OIIlvrq5`p=I;_5TZc+}MB`}9B8He%sYkHxQd9jb$?
z5Xzo^CF#5?)ZM&lUmG&j?YevTDi<+rX4jrEK+DCHrLER*wF=jigJ)5MT5`o*_Lo!(
zZnL+!V+;ibMGWl5VR0SI{iLXfSGtI%hoY31?E<m6J(0dGqIOP8ygRvis2b_n@#PJC
z6<%6gOr9j~?4BWUSXs6ruF_eXl9cEuh|$OyFAY5V@!U9?XqT5(`@Fu3!L{*}4rE#h
z4z<R|m3TO{tEkHR89S8uBTR-dm3WPo)3p(Z?6gBb<gQsXFSVF{HPA?j;`?yPzM-a!
zOd`NzfAWEFQP}GzU`J%y(yVX%H?+3}eZ^yLbvA^|pEIui^5>At!w|&Rva=&Rr2WYN
zi7y2j6}CG9`5;tA4b8@7@hvH9aAl@wuJb$zeR{1W;`iM+Ns+r1&l{pBMPKnbq=KjD
zq`W`F8mX9IEjC&>LwRFel3D2$)4}K(-7>li=M#0J<;LqV8jCkyDBfywEUB-*Gi2x!
zOWg6S^^?U-;w=Q0DaBO_Q1!L6Ve4h_1_RBc1tZB4Jyy9-U2-BOdWJts_sj&1<c(`s
z5t(v{&g|mxNYg#r&UiI7knD#^TSHP06kb;w9EF<TI>tNx#r(4hWPBG!+zlN!$fO%Y
z-M+l_K_@tO5gbPCkk#n3OjwY+DFCU9&3vVvfrwj-+S@K=POgFpuW5<@vF^~Urb%d-
zVA92N#~nv<q=#G}4;nh+r)y49Joo_uD+O+8SPsvvib>a!za&*nysY5wkNXV@gy*!b
zV(Wc1-c!7bOC^-j2Uh0V(k^-~hM-%ep<6Rw`7~{{ezo7J+lUz$|LZv6z=W^G)iwJM
zedEz*X8hnhuU#drIBlXJF~x)wEvQX<gU9==5b@x+X2UrKX+&XV><Eh@W#^O}gty&g
zW$R9@c^MmufZ&;zV%hR3{}LIe)3%_V5vIV)O3WtXUU!Dwf!M7gM6v(|4Z+3Rzi7m_
z<jR{Lu14M!G(wju1O%AB-EofnWR^cPd?V%CjqzB3U*XPY;wT%9mJGkYv@n;9(V$Cf
z60QkEYe4X?9IOB=FzugJpRShAV$GmM%|Wjm7SriUxXG%~DUzd1`x}@>uGHX;v@kf=
zI<9t~p~p}Xt!Dk1q<PB8BFBUgcKDYC>Vuv%qJLkG+MB=scmYQKx&d8aZEsWkm4u-P
zaEJqmjg1d1&eXx}a(xWZT+PWzPU6`L?7D1!GuuC_u<}yHFU!{a_L!-PaWg%qvs*)*
z0vM5_27q}~K5Hlj-pJ<%#$?3}k=^;wP`14c&czd3ly%C*y7Sl-_idl=KS!pM2NzyL
zCN&m4GH+l;-%&u63Zo^1or;z3kN2quy>Z`KDcSXog4>W<dK)w{$#z6vIYmbGnad6)
zk%%|pspcB8cAu{w*AiT1-6dAYP<e`yAhFv{{e(z<KuE~Q*V|nYeR^OZefU#(?~1<!
zUc<3>c|j;8_!ue6lzxu!<NI(h!f3yu`*FupitU-^j?J`<y0#(OXW0#Ob*EeVQ*SHf
zJf-bT@~WAFqTtTE9o*|#^#v~D5lK<3EU`YM+M=NOZ5pfjJ+00$F8}*R0XQfm_PJ~-
zQCe)?d2caT&SpHM-gLP1WwIlv5$z~dnnrFfR$0FbUIZYg_3T)Dyq(1a_zR#3YS^=|
z<t%8rLK|@nceyEPtHJHHz)ezh$ekjJCK+1ju-Ava@}m)S_IEzgVOIWt6;rbiyJMKo
zVp_Z>Q=*DEMK2vZTDdu{d=3{5kNqOmxb!Uu^FkEo@$3iW=>wI}$Y;?bW>#@xj#A{E
z9XqU+r``h|1{$z9TF9oL*Up>RM`K8;j!!nW?Xqc;iuU!pU4%quLWzu0owDQ`<Nj^z
z-QAJHffd^gIYVQJc}s^AjfN@UP;}21y3ZbW>=4^K2|ez4Y=dZ9%uOM<0cTY)@3^*w
zuMnpF#Xw|FgR4p{=VL!l%Ic7bs-YqeoX(bIj=i}&#~9j4HO~bb(|<7OtFx`qXi2l^
zGO`%mCcQnX)4IG1&OK{bIc?j|$aT2>66c<CRE<ljvX)b8*`AJ%^T;vB*D*0WeBZbB
zn#Zx3)@gupfwPN_WqeMPafw9NZb5P{ozF?rj56Q^6+`#+hOC2`>a6`&KfA1a8#6yR
zJ3OL`l<2z~=_+wH`r_3wAjko@d&Dkvi5TjLO|BWc*OfQEJmTI`rExLsXMCFjllr|u
zTbABa$qtjhrp#ZQnlvHeO{uxP@>y@n=pP=I?21C1H$HKquP<9GJ`+R=<=-J~coXQ_
zotlG&81%i?H-BklgGM$qSnf2e7s=6ZSfD}Z4DVFRXepJSdEQ19a^#qci;GFA(K2#!
zWJweHx;}pg19C?DNpsjKy>UP{#U7RCp-!mEW)u|_7laArjX`M|dwpg50V^l&w64bi
zQ#?K*dc~&9q~tN#!)Wq-!Ky1t??G;S^o~2#FGsc0S#A8U$HF5S!Ttnoa>O9+{;-~N
z;9Pk~7yJMTkQUo01!-w9aO!*KY?jTv`9{T6ReIV|7KHRH?~fb31#sW&&RM#d7Qrp+
zD62FG!TI_a{0oT^+$7F?=X3nuTf*Z3zsO)}+TpVHt@m%J(`vf7gib;-dq0;QtwXE$
zaKr#+0ozWs%0iWm^HdFi+@@1pw~HJyGL?a_I9qI%SK*0|5{#r^I;nFc*;KaG&5k{3
zu1GZ|KyC_k1oggOMO9Q)G3(PY(xnLZO){IYsg*MK;ym>FiA8HWWL0ZUJ(OkDj!HI{
z{iI72vT{?hI?GLZ`Q#El72F=j%UhpwB!*>@GpO1vj%mEp`!oN(@#yD0DmS);mzg*U
z{pdGS$f8pp<ObGZTisMf*AKVCE;CGsSltOW@onKMXl?y+Ll|97{zZa@Np_#J<-iK#
zh->3c_VzfRu}4RB{^Ro)HYqR;71V*?mhNday@P7OUja8y>5#YlW(hJd!RK34j5trv
zf>G8PAiH+m#PQ?5*a+nZvvOI@3F{bEafIb`de%PooK8E=sN?n5rJyRMxp`z{xcWyP
zg=D0?$!5^D^{d5?+9MibkwZ5K9wy7S+qm;_zd=3J?#yOI`55B?+Z$<B_QaV|i-2|1
zdQj;nG`C}qei8>BBcT56KD6SMmvNh{DBF6fz142*vA4V>zn%r01}mpQB78{X+(5d+
zsPI@J2elk$mP;r)9ge4osr4?hsI~JsP^E$~^U4wbl`HS+?BsI3-A)w^|5l4)@OSK1
z-VT;BXZE2S9dL7f;;a`F*vGTJbjw?2Cbc{KezP~A*<y2acsP6dz!#?ZT+*m@b=?nC
z^0DZZ<O5l%q^q0r(?OV=K7G9S>#PkEHC(`b#Mk|z^Qf<Lis9a6kmgQe4Jn*E!lVa*
z*-k?P#R`!I$^C0Lp=raw+7CqT{pdD**K23;FR>49sOk`;x<9Ny^EIbq3W<EUefu9*
zV>qS#=d<{Mhc(L(8eVro;1pdln}Af7#8I^ps1C6x{?#lEH*T6Yb-cXRU)qVfe#1SK
z6(kX7$_SELh?vhRxcX_OXdXO>?IR*;M_OSH1&2>FOv&vrYW8PNR-&|fB+caPUzr;K
z!@&#v^XCy&;$@*n>3&uLOsLRts(u1V^U+GvSO4iavE?eL@wEg}1BdcI@*<dcTd!t|
zbB~rnI_`xkNp%hw>ge98?Cmw1*y+0JV5fL|xiYg!r>Z<+tF%p<wQP9qvgNp{mKC9H
zV~r=cmIym=xGWZL)tVjs;bZC;IK>MNZ8HV^I^uX;hvoG#`Lu1`@6md|Jk+8veAKUP
z{v{^qA2&mOblvoC@1vI+2d6VAy9@(KayCO;QEW;BtE$G_`MId9Q_OYiI+wnu5o#>J
z{;9P{dl?<7=mh-3R-UK+oDr+Grc66m1pCw;*DxFfeY?^C&Hez(ZnXO?sg{=_)?o(=
zz%{ib2jlSGal*uh<CSq81`7)fLY8c}mtO18-d*Ay>QvSGW@7Ng$GMmm+oafJR#a+>
z&B5OJYh?gh>G>PI_vYIVpK98^3~Z}wp$*1Q;_NGiozs0{$WV$Bi(iKzE*w+cHs_uM
zaMaa`v{ltrvi!Mu4*EII!D&m9aV5NOn1AbP1yM7jQ1_Z`&9RFrNGH^DXL>y!uT8)v
z?-={ykYI*{01#;z-PR|wl9^mzws^CJe1*@vYyD`8qN0da9Cz0&Ud{q6$vU1YwyAwS
zShLXJ2CHd0P&>x;YR+4q)(jlfE(|KX2ddDnV0F>uzvxqfeADDm+HU9321|Vjq(W^s
zaA(}ML1vLhrubYRGEQxLwXZOh@e2IXJ=Yr+nf}_fAR>8jmJaICcXoENTCLjM?u+nC
z!oh{;LhvymMhxx3eg5?I{<MCA0s$l?ulrhyS?102EFxKcT4tZvKTo{JAw@{s^u`D%
zKP|Z5R=WZC8$cz<!Ge7Tb-%zsn!&^<iR^={aOn67cL%>lDx4Y{d2F^%D|vz^VSR*>
z<ofBVC&BqzhNl<ok>on$Pa=*{{ep^w1sU2gjD}1aJQ?mmHgOmxJ7L5iPlb*}TszAu
z&cIV4>pVqmb1bdecIo%crXAs>B&Am)*1n#e3PjVq&8^H07@Sg%YX1!XOE~sE_n6@Q
zD~QHsspMol7A)oK*-_1T-{aiXQEuthHUDl4Cjn{auMyR0Z~iFkdCwQa%EpNG9JrS6
zY<OIyPH*%U@;V)w!?530k9LQvkytU%DX{~`+Ja$XY|iR)lXEO3;^ujzV!|A*lt^wt
z%+A?%KleS&eU&gHTS-bd@NdTn+rs>u!)53G;V+wwDcs>=<E7B^G@e=g(Rd@h2ZJtG
z5IjrMo&1Gr3Es;_O(wlQ7!Jg&#R+{yUa|>VfiH9VKVDzo5AFQKjnUv)F_@Virs{cY
zmYps<lq9;b6f}tGub!H23}(Gujg)uJ18|(ba{j!gr6I>Y=UDpq5@h`he}m+t*;$>c
zKH0)fcUG(5hC=R^ykdLOf8Pq;?wzls5+W2^YW3gdX|e3odh@IHN7zAqAGwi-+~z`+
zTMIktyacyKYDU%Kv5t85)m=PfdjvOgw~!0_cjL3lF*S6SeAG`)n%#DXhbk^m@VI$>
z{#|zcV5#CWenYI8{Ch0tIV!AloEwdnj5ZMJ#pW`fD19z_41o$LlfG1BQ0`m~Y262l
z0ZkyC#Gto((1UTLa%4KN`9r=JY<ub3rir%!#v(wC_-|O*6!ge7?bzuB5p$7@TnL8g
zJ*lMWdC)f!>tiX!5bewIpi3t-_d-E~qe&fouPZglbx&=@=ke-mxgc6&ONo?a^L*FR
z*BB*fGj~=zy!>!0W|J%mo8>OTH`SMI)Qa1nJn9**gU2)F6T8kQwZfJA6S4DY+B6z~
z0sAi$-{)mQ_p4s7FF-PdR#{cm_X5fL*N=ez^tUuNHvY_kXMfo=V95bl@M97KLkZmd
zR-FEA>ZfP{X9tv&2$a;0y{q@|YUG_nj1QT#Xwf7^dSJ)?lOl~0T)DAm%OAJ0xTA5>
z<6oZE&1S!n(b~^weq~@l8k(jwFeXh2$r0bUh-*DeA*=A~r+F~Xg=LrMt)c+AZVwjG
zqE)3$c{b?!lLnE06LyOj0@1DvH<=DeWysT$(>?FG+=osPiAK^%4OI>A{Q6PO(M(!=
zKuz=0m|i)_iT5{BVbvY1bHyOIbmF-E3`nW{(hX89#YLwv?>Ns{8JX_4<MQ4((g8=o
z&lKi;LS5CdENyo-ZARe72a%+O&a(KTaSO%z$X?4Z=|415G&Dts3=e9J6oirFB@1GN
za~JoZ^YJ!Y9PLhCint9?MFmNsWMQ{2=F8R3qi1&1Cfl0;1@XPX)g8X*RF~bK$$e<<
zl7Vm)@Gou9yZN=G2DH8iNxyFsb7Or28y>^mO@7UtesqvnS=_-$!Y-m}1zDCF^fI9S
zOp4Zv3wqZ_DXyMgsV7Oy#o6xO;5@A5CXlRO?^7TqG^LYJyxm6cPb4FO4OI7<&hm5E
zELE=;nFQCtn$6S?@Z%=ORDT9Y8`vb>h@u|z;aJN`Enw(<U}WiVzd!R08@hA~=`}Sx
zuTT+Dg}b|-P;jU}FJ{keK&M={GI0nAZaj7Vw#jPv&ZW1qx0k*P;zUG64Qr&PrpGYh
z88I!;?sC_o75Q^w%J3&GGb@n})@XKm-t1DK5pX#oAGFX|^^eQ<6D0x!@SZ9Q{O@wO
zF~g0FCHHbc<#4Mw?FRyLq^-$*V{zMT`?7Akv<4PP?6lR6Z2(~CWDH7mAM<;<gi1zq
z&?V@CO-Yyq`i)ffb<j7;iid|yM28RlP1nP9wVrMsWr@Q0)UEHLi%BPfh8cNnL$DLZ
z{fsgKEG;e3(Nk`2?09p&>m(okfQ1gMt*!!{NJvXx9u@NazY&h>bELDwz&r)RoV@w}
z!@k;jbwobKguLm=zjR8+kLQOegf|bQ5R=Hr<M-zuM>G)9jMx9A2tm$ljRhT?hqDI|
z$_*g~wHDM6zlqfcGSuhtoAb7GUaOzh#;tH9xjd_-9xJ{E)W=1^8d#m*-KTx(H?1cf
zEv>&V@m_aamx8y}p&w8_nE=0<r7xd962@T^kyPoN!*k*`O7PoN>q(bfeZStcXh!dB
z_|!X+rAKdVxwIbOHr8TVBJJaNt_mx_H$fmn%Pk}2q3fp-ay2x78j%ua>rat|cAu7b
zymw;NND!)K91Z94Wq*cD6=Fc<DeHM<s}bzpzk=|xsan_%5w&&p!Kb~Ba*n@yC<rmu
zJ&fk@<1gqjZJ`%K!EtStg^eIfxTi`KH>5vk%Vb0uy$O1kLCQ1!o3B8Pf7jA6`H-WC
z8F?zae|jRDgL#gh6U$k8_rCbvR~syHz%*uz5W75$APLpp#SkAx(uo?OOu^2g6k}$z
zB3CD!T7_~MRmf()?|_=6ia68)k5(TLaN%A(3}naj?)OfDzI=_Vc;M0dwVt;?*#sR0
zSK=Ym=KLnMHn1l92TlJvz|Y5|mF=X_00Pv+8NzcwNazs0c7mq-$|i}#_BCPW55W9_
z7ck!_9c*Y2K2FGn>ZruM>B-R1`99j9`?1$i!PnW<Mx)&-@GR{6#%a5^r@aPj=6(`*
z=%DP-6s7l;8VAglCiCLOsr);JYzkiaJ$26k@&`{fBz10^Z!3b=-ld2504itO^3YI$
zR<;u3(zbBct_^(0+9UCxJnY~S>YV$lbmHr>0PdrUw*W7po-2$h(c%T--}Kgo>DSk0
zJ`LY$?KhS8J+av`Zn&_V22#Y(iEiD*Q93aj3_lqziYp2<xQM(6E4N@pUeX+?*+Bk`
zx}ow}Gawko4%tz+C_D=AYMs=76bTqJLh}9|EhLE(tR}|A^Ci%Gd?5dIWj&y(YiLR<
z4xfd5C4!v(ip3R$MhTTYwQ%tKo&`pcFd8KIXMOY1r62`sX8^{J0s9yBx=p9%_ufD7
z_Zov^nl)fcfhz3Tw?k>Gn9l3t-!X9f?u&v-l#amFIG`DaLWtNRIO)Y%G9?;S-Bad2
z#vdT1@0_~%r-SZ{7;{rZb1ukaR>*Z!-!Wa;f@H(B`mq^Hu>ek<Rg6xdej5x3#ghL7
zEqklZVk4s>+KYk^dMoSKV)kGl@Z_Iq_*d@L3ix~^@|<~;-GH=Al=7bu^lj)cfYAPJ
z>y*j)$q7HEc$7I#5Yui^KQQTGNnkg9`Yfym#tlT43%W+$ql%@cCs*`A!ae+3Za|S@
zm%w;2+2G0p&HI<@+2;z|hv%m!NOn|pz6Uf$pn=CWupDO-LJ~B}?(pd_u(G@#_WaIH
zjG!zz%AH4-&Ac^ZnuwsinC3`T@-p^{Z9ddgV~cZc@CijDhz49$ra19mvk^G{vDzxl
zfaT@rF3G2<_vy;(Pdkmz4LJOW>GB0(*lG_Mq@jmS&|D{rJRnH<Q~5fzNt+f);`pbh
zr{v`1b4)V`9$}a{MYCZ04||}<94V#xMwbiqM%OPUI-dKp%A?R|dkOpPtYU#Gs^Vi@
zpdv*W`7$kVc3I;_Wy;c?9=@L%3bV9)BHwS1Ftq+8V!5^XGB-a)DjLS_pqf|%R>DoO
z<B(3E1OWz~YasG04f0+ArT<X)d%?<rOToa|e@=m<Vt+0xdnx4;{9x<@0V$Vf%2Tjl
zB+WOisZcPh`4!{>{S0&iDU~sz?5>t3j*1j1^?__IpdS41a=rW?*}$T1&r4*Y?;c_|
z`@!h{xurwXq6$<#($6W-usV%!(KuzVyqw<;(jbt97!ArU<sZtnQ!9;t(*G7OCTfHM
zjwpIXLZI!;#zjaNQJldrM{fR)yj%}uVPKm`HW&;|C9F|xDJ)}XSey5o{`uMpKo=hA
zS-v0|<eE?`Ty`u&@2=1A)o)~kq@SDmov9+qQzV5IPHd=@y_BNN2p5g&Dg7PfM&yfj
zb==^xX?EG3ZRgUC92!{#)$hQEw)^=J|58OF2+m)?>3owiR(9;Zy=`v<mlbD$eDx(#
znG;BGa*c38bjd7?5)V?9w7HWxP9L7{;PivL0mZc(8T+_c`nANybPkV;-b{DQ*AvCF
zRED-0%sz1XuUekn8!aX1R4v|u1ycfX(7i<sJJ|nWj~v`#weVHB!lP(W2~BU^{qF*W
zc<6M`!l}#&F<G3Ch32XZENr&U?sEO3^bk}_-wv;>VwRqbCinBa9-NPlK$Gnh#*D;B
zq`5**dP)xau4?y@qOJSoF4h*Cr*ixmj#`uR$C;uaMucWCvrX(l9u%(HaIUa?q;y94
z@I{SZ&M_io*Yamf@~7;70j>Q><j;LSd;s!`n}zZK{tFPB(DtL!*DSIU1SrCav`=bN
z_H|{Te|uUSe_7X5X()Urw5KVWMy8rb``V9vkZ2}bf3H--WbHVCH^wD0rH_k}go+fs
z&a}_4E=^Tcc=~vJCZ2YnG3&fanPEo)(kcLjI~PvQnv;~U2a-uR>Z%#@<jZMyHI!3)
zrU~nYX|jcUaQ{&Q?I$ySG8ic{%l8dN=c`#1zo|-LtIsW}&R$<325;+Kp+C1jR5O{T
z&37+GB&6`gY<m_N1>@^`C0z1Jn@|s@qwK&1*Sy@Lv(592PPfRzXZ@9URI=hj(2@7J
zOHKyPn6>Nmhw7A7lLgQ>m3&Voo5kLCdT`D~C#hKkVT=xt^gu~ElR5dvtlmm`CP0}S
zCPwrhmr8+73L|BvxE1ZT)z4u@mVQuQfl}b43eb16wIV&!n*kRC%&2f1QG`DC{tF$+
zbe;?uK_;@^?)IPkJJecjHm5&t)V5N$t(k$TtIgo?tcWVP`)$IQZpQ6kr6T5|V9S9h
zlTpk;HHn*-tgPMXc>kSiTc;=gHs(CW0ls;4Xqh0+x*{<O;Idh1bJ^+eF!&Vm7=?ZA
zqNV1M?yEeT6ajE;bS9HmV%#}@3jR;E<@B$d-;bHq%eg2~DSJ`LhmZ1+kPF+ZZ|J%@
z3=i(y`LZ~orX=X3y^YWNX^x*Vdz^2hgNT$J8E|#WkjYs<P+fHUZ7q9TUcDCPtgmrb
zKj+M|AJh4ajUWmX*!Q2-r~c8#N!hDbo-T3}HRp~Yn-s+R(o?2A4%>dePSp)N_oTBN
znNDPTpD&1%3{C}HeUvh{jBT3Vq`d3>$Io8z6R@l(fK|iQ8FlX`{{Ny#ys9o7H;2Cd
zp5}SpZh+^*bxb3Mm2dnj1+9-FQkk2-T!va@UG>PW<w@DZp4(F87}3;}Zzg}PR1pBe
zIFn{7_%GI-6j->j`W+YP7n2%wo++Ot-Lhpe^#LIN_qA!yJ8ll;9<Y{djVPc9<&xuG
zUTToqijRWYMd$4u)3e4$XVh!71-c^?8*P_f{B<!sL!@WB)itJ|ioPp0zkIQv<yr3@
zB>RAfeCed|iq;9NXo!~0NiVoOUTQcA&DZCX$w5jD;SWJ_?UUe#`Fa*9Vlkk9Lb-Fc
z#%(Y6XIqn>ZBF8(_>&T|%K?UvcGF+Pp=*N2%9(s0+jom{3IzKSj{C>fGrre^kH=`J
zsvBjs-^KVo)$@*BO+sah;)$GbZJH*&dG-&SCC)KoNlpstLvx;?3j4?4hynXh*wFEJ
z?lGyYl;MA|zzUH+ZXEybFT)?o=9%GlhbsWAQE94jkDtkvsjq6j^Ii&X(~sz<$8B^&
zpeFL|-Op=Oimu-uV_%4gCtIYe9}?Vt3!@^|nI6zhjsCAelx2t~FB%p7M#>nAglVaQ
z`l{Tm?<X5EJs+_+JZ!1_k$<RXqPBex4woQf{^Eao^boh?&VSPrG3sj2FiSsX{3nt?
zetnTe0KpVWiLCNMm-6_{G5|!<SlACNwZVLT2LR1GRN1x#69;!#rlV{^|LRIuX^c}m
zNk^)hG77U-AHGl(M%dLA<uW@1DcVgT(spq>b<1_8#Vl<`$KpNo7pyDfW~})ZM5R2`
zrSd$*qI3$tceTx0(PZ+DW^RMd_*n5TIBD=$DLtzqrO%6n=Tor=R2d9W|G)qUNZ>DE
z;{M8DCUjzv_=E%G`LPJr;G!dUUoBkMvMv>)>@&9i+!+v1ASR37fupb>UOqs<z9NHC
zf`u||x(skh8aRHTK$4-p;$Ip+q}Q^q2_W@SE!#<G-{Kxa?QH{TnqHxy<0i#cPs#)-
zL|IZju6kjNLO~V0%V-$1_1-JL9+Xv{5$!oPD%2(^p)6ZhDuT2<8Wf#^zJ<y>$4<g-
z>)GdAAYeN^3b}jhXyZB{L<0l+{;lvOVD^d_m%fJ`w#erN^1X+BiCaJ5X{p|iDxI~;
zxMU0QKSV<?RZ_AvoG8&oOdr<=1@LMjjS^Quo9_(AD@FWDU<$MxF=VF>TrgnBoVHow
zvVsVmT3ypWb4kr{COopxa9AkTX<05>sbT<SKRkDIjL{kVI$AF_#s`o4halk-!8q!U
znxo8Hkf9^3m86pkj8hG;s4M>%%@U%x-TTAKRNyu0ZqK32rXEI#dDwn73`zE6T1*BR
z`wuxVFifBuSODxBA>bP)r?&+}=ol<i6atc#RQUSwYuDV%A4>`9zbD|1{R6D!2%5D%
zSlCjVh5{ckd_WK8C7ilyU4>H@ONM%DY``3OZh5OhG+j8{(Rl<>wUBvJMLL<ue4>(o
z%0kuwmrw%FoiXr~iDTwmV0?8on9tb=QTdKzd4n}a2ig6^7+D3#`j@Su<Jec$I8+f<
zs8<-TTJsg>lm4xscRsO2&*0#6%8Vp|T@XA}mgituX4Pnhb7(0IQxHvIm8{MYqN5yY
zsVYGv&%@(#Jvx7Qf{@cI!YeU?{99$m;QWX*LTkooaht>U@T5EH+Ga*d3z3hEnLP}F
zK82o+h}n4J@8iby#P;n~F%QL>Y3K7IO?zn&(9bqX|2?|CGE|u;1RP?q30gwG@xqH%
zh+n9yJ5m2&QkdIn8oN`11O<8%m9RyT+5+udDZTal=%YrkP6bY`G-(qmP1I84XhQQq
zz7UKud8Za(Fj{+a$1;4&2xMiI_?{)5am$2r2-L0}@)`ZJoO;r+LkbBUX?{bZIE6ZP
zb=^G)9XPJ{r-T|`g6RCyuCD8SvWe}alv;Aq8!K-Zqvh#cQbbCjvC;LGOSnUGQK+F^
zS-eJM`Mi7zB?(cvl5<2^T;4+aBU12>U{%miRkyaDPs%vJt}l1R))LbF>!sWI(0XdD
zFK=x8aFd^!ERZrg{~w8+F){;El`UA5OOGutQNTKFBt<I-9w@w9b>dB--DS{tr7odw
zx-BHsN)3Xx%8>}>NMOoVEU4OXlT1LgCv9Apesf_mkTENx5!K4JixB)cZJLn0!1&QU
zY)RIJ0)KUvy9Q$kd*OJ#IA%}#<$vd!Fn1{+??B4)<CvK+5i>PJQ@Bqa2`%wNjuTIb
zu8J%Lr3yzh#TsWWb>UJ($vjgXp6o0P++hgu{Htyhx0+9&?WxmZ=OvsNX#c%3pzMj-
zawSRY>LO;g*-~j(52g%(y?hCrGYJr0MRL7}S$)Y*{Y=5-kRyA-r1`2Ss9WNweil!O
zaB-w72{a;wRx%E4NKG>?YO_BP;Wb@B(f*+yp>30cCRbKQ$vK?0)D(D%Me41TV>-?2
zkYIKi9F8c;(2){k$I3n$uaU*LBz_fwN)rF70gT;+hqF_G6j1kw%71fir-Or-8at$0
zDSyTigAfz{qja|o7Q2^)(R}KsxDg?7RC@|St2k=flJ~iVvlu(*l~#yqsftvFa%FQE
zxjnlnUE*M=+8;DLzf%_!g~T5->b!niTqNKv`GSRuv9`4`#_VJ*2CeG}bzxYp5Zcxe
z{P=LuXFMh${GhR^PNAMrZBHu>Q4z00W#hSu-diO-rPku4?g7~RC~Z4&1s^gY#;f6!
zTN1+8PErF^mKe05nx=W<Cc#rCVbtGxeMy*VISWpu>>DEeAIj$<=~crej_T{OZSY{?
zi0jS~aIjj&X1|C{g<8hT#6&-Ea99n;+~MJ~>JB*}kIxRS&Uc5S`#EF>+G4c&Wry=%
zR<O7T+3cb|>(Qw$?CDf{=0>{!X2|S;+G)P*G$g3!%7V(L(C32Z6Dk{iK+|i>GzQJ|
zYfVl9JYpK^KHn(^r=bnvh<}KCN+Vx7$3c~6-jvN>bc%q>iA9u7=g<R{PLJPI<VgM_
z_Qop&%<i*1$RmFCR03p0Cf>0zewjsMEG$Z;AHt=hSZ*J*!(QmDSCpzv8XAL9&-{dh
z3|ZT=?JY{w{QQdbIm``Cb-Ge!iZEU<tdRe1ym2AQeTt65qy@K3KNMW8@DBUD+L~-A
zIPQaxX|$#a!12GXpZ*g=BFT&!-s4a@Nc!9bTY$o03pg|?cQM)(jHKCfkxde+ERTp>
zx1&=-?Dwvm<{8Vg+Tca#3ZKTC1co_Y+#&j{OD`Y3b-Q)miB2T1>R9Q&79DNH+9VV%
zY{eo&WcXcr<#F6X07CD7&b_x$uMp_R7kaz)j)}If3iH`Xj_tRD!uPBWM(bKJzQDI4
z(z4oX2XNI%$_y6(#6Op5tt)xz_RdiYF_6aSnCEQQ#tIFiTEO9zXZVG%PNX!zLtRPE
zN37=a#}tZOyCvC|9I*e_9~6TgsF1XrJ1p6rwQsH{70H9P{v@|Oj2D~A0FJi!TA2tO
z8!_x7F|FJNTPr!q7Cuc~^R1o=JGgeMMC~rwxpvZhtSi;?*KoT(aT6_ZX5MDV|61E(
zP(v^~>k}=Y4;AD+zYv>?PHfg+z0ygOM5RbRIT9%ulyFzF4ifR27;IOMZpvd;Z0SX=
zST+~aK3tS2TpzNLT0IXZ1DOue!Hao~-zFIG-FY1VMy$_J<sF;hr+mAg&+Sr51_ot-
zs4@k4bnTti$2ZHSnOVW@5cB`D9aA|1NyE^)Z&qa^A5s*BIz1l}cg??$OeE)kVV22k
zc<ZjAkH}=mS}aQ`A4}VeWxI9k=>t*lBD4H5+<?ds>w<s7e>o9^<KPM3=!%C;L~QB0
zw8=-7#kc+vmHRIl;0MXn4J5;D47|zS-+EgXZ)q!0U?LCmtosq$881b+-#{XioUp_9
z+2?A^m$-nx0M6oM1Dd5dbGRaZ;=E-1Oq;|0B+%ck_OO|$tK@M}H!fQ-j3vNPswy!V
z$Ia_-KdW#Tpck;C8MLN(T*Gx=6A-#WX@SR0@m*hvMa%j>QDBU5zx5Vg>3>1+>bkj1
z7On?N;1m0Ihb$7?NG?;doF+8U3~31+Kr<=6&V<6{R8!+$dLwE@GOcEIB7byds5_Fv
zy&~cL_>&S}!O1Xo?-+t|{C#0m$yLtu--uM{8zQ8Sf3H1B^#s<6XY07<+iPj*pGnWz
z=_2SGd+l2PqmcZ=h`r%23R+2p)~i7_F)+KLxB?t{!||4r^R}FD9cARt@7|c$s<hEM
zC`@ctX!fg;J2!+hu-Q2{-Si}nTRdyQiH?(a(RD4lN#ik_9EnKyc>7FD<7B*av?cqb
zhPjkYl7$~!s4ILM^_1o^2n@Y3>;r6eA-1EiJELj-Wj=MD-(PzRFCfnUzc5X`ys!?V
zNwEm<Q3u*85D2Q1*3rI*RphrMr>LdoMr-=rT$uzF2NMt?u5f~5V5Q;oubZW#=X-zu
zpdVn<v`R?dBe(IcR3`m+xLcLETB`ns*Wb~*z=7zy<%3h`NQtCNxwr-3ELx^AY~|zh
zz8Ib9Ja?!rkV^R{m^#^wZuE9rC(TYBy!^jB4G`X_5x89{rL+kU+gBg3&i-7@1a3X+
zBNXzTWP!L8Rh#b1)EM2<<#xNh(DHZ-lPaBhT$9o3`U6Xbs`t&UCuH<Bm;3dF^|YY?
z+0Ik{>SzCKuu=`YDoK{YmRs4wd)5Z4@o=GSxX-u3Qwz<I7j8ZPS}Vy3t!$cbPCY1I
z#pQHJclv6*!T9lRF>$c4u(fb<kfh^Z6~}c~1@D#EkrUi*C259wvEr{Zr$1Q~iYHQ|
zx&xd`vS&LeZZv+U@OOBuf1M316s<)h>?I^_3rdzAr$C%5hE3dr_#`!=6kp43KV~YA
z`3CrcB;-k!uuqiJ{U}e{ZzaSHA?&;@*_6-D<};)fjJagV^XuHDVO@B#6vc%8YR>Gk
z*lA>F8avfxSJY2bcBRv5C3(QLlKnAmvTSmQ3saQMOJ=3dmLp*S!Id=>Xi1D@)k-4P
zXizgXw^W7EXk*q;bT>Zwj3;ZsL)mHnfjC^L7g9a{h}pH?TDS+xR5!8g86bZ(S$VQ;
zzHV3Sk8L7~k$y~gV*}TL(Q7wM+z0}nq|#&@)%Sg``TlzM{UTxJbe>uZX+X)4dpG$C
zWR)nnQ#^RhQJ?V*@%`1q=Vy7XT0{Z8iy(^?iU+6t+c9d4-nCc12a|3vAyT{RO@`Xr
zk$Yv$(`i(7#L-%eO~JwvUEvaqO946%&RVHoS;7#hBFfq#P|g~Gyiweq7`m_)F>yct
zZ447FcRt<X^v)tgtNNNtBD6DS;}IITqPeUnWH`>E$Rxvl{=10*%6k5zy<#LjKU#$3
zNVf_Z5H~{l{yS}$fUhB)Sc4;Hz27zuaHvsmI`t_9Q8Ogoxm`iOdu-k&XxdDWL(%Z?
z+k@pBN6JpNpRjB}`}JjbIjmOCx2DJK`?2Pmfy(4|T|$ZE`FKEq@LO)9k}%`qBhlM}
z`<v<fb>`;xo@_4Q`}hCk6||w$6xEZf&(2P(uTD=jlwxs(hrH3z<$%{fM=AIJj^`8n
zBFrTW$mK;45sCHQas6|l9~y)p{>wiI0VF7vpTNIUr`XfPqqxUiLQM!nTt7u4Gymi6
zs4LU+dTsmrisN~^CON@LbN{~n=aaYoJ0ZtAFn3<}MNYym;j0sfQu@O^Y$_1Y&;TH^
zf;P<L=7yw{2bU`&E35w5pDWjD5YD2#Q`OO1R~RER<YQnLEI<usze?X(U~7#IJ7oe4
zQq>#DGXMmBIF}LlV4>IiAXN&*_y+xT`cE?HTie5=%L`1XBpoe>5n9Xh0$;Y*veTbv
zmEvIc>xJN>tV#J;c*X|%Av&CI@bwSI6VQLeY6M{=1cv#t*sYh$t#9;KGBQG<62^+i
z^--N3P_1pBZTH=o^qkQ1tpoNaQoV<!x9PGwrhK1xUy>)1;=NTMN=Wx<_buN?pHngv
z(n3W&GD1as-zz6MU%b#?)<N$%uvfaFWZ#0Jc1XvvLKl2AegH!w&In=b)2kBXH#6Kr
zADr+2BIlarK2m4#58%KKKzsHdWiXsyf^?F*>`;SzqCu%AquFv>7jA5*nxhfW6-Mk#
z%yW?Q`x^B?Og#KE+`JvmvEA!5UfawJy+x*mdo`KW-R)<Ipd<4kd<KThv1yCRkZLEO
zZzlF@G~SK6Msmm^PO)(jbnZu9aPxw!I9#>drHdoDe?#z)JjnczA?(wv5tIx955TpH
zYHYj_a&#G`<xGrA@e|fKM-e=!oQjZi(M~!ACY-u14+Je<#ZG6mvW88YqiTEQ?U*q$
zK-E5|5n(|H8`&3?KBPwbV0|WEY6;V^_onviHQeM*Q@AT0FolYKOSDhP_DauSOuchE
zLg4t4hCh!$N-fBp`WF8P%b(H*U6|bYoMZl?G!2qzW+g0=xzsICCb=?K)I0@SPwAk~
zYOZBZZN>C{@l79uLwLe5`SQAHXp7^I#w!+-W`<#YyGJS_QydBO*%tBffjUvuuJD-*
z_T9r949DD1cK!=}`e8l`O@wD^0}8uo1bX_YiLavW@9;cCyT+arFmwG>hGF$&BD<eG
zxS*R6=ocVishM_#;lD);ad5Ct&eQhqC#dZ|fzl7hYQ056wybXBL-_@P|LlCnFM{(7
zh1$jrT;dn--8-d&U+?*H#4RU5stL;V5>h<t;`EW0<i=B=@X;tjbB^%Z1gZTr8j$!X
zy>g#h_##yaf<%8hlI<?%A_*VxG!?3PGF@HN-qJZu0^Jhr{-ULO|65;@%}7nYQwDK?
zg}6Ct^c%TD4o>>Wcq!=!HL2++=~CK^(%C8=bjXWVT3ESne+eR%2yVE^2=rfwU$ng2
z{QGki4@*;&GU`#%tgbc_mZb4x%>9lasairHF6hf!F{d!*q65i;s<zJDqTdDKJckr*
z%E~wp;)-}L0mWjR{W3~z;Fo?>4D16da@Z7)5@{%3wEnamdR|+1T_w)XSTpb~g>9u6
zQv2z_0L)%)?)O9Y^mN}7D^gKI_G(C}NbY(1s4%Hfy`)`62-Zb717%ZDSyg9ebA3Ep
z>s@_11WNkkeu^ADDTX%KAqf0{)roW(7Y8E)r*P3M1<Lv=c`%3gAgjywAcKt5=ife)
zn<gl2(M6RMQ<fulF+O`aE_c}h#y`k37AoNb=?E3ztjJj7VAfWt<0;C&iyHicXlzTX
zsOgSBrz{kSIn^TX*@b2kBv?mJ@{u!Q;b!e9-AEO*b=MYy&kXp#`hzEf)>t}sDdXv3
z+v0mYIAG<MC-!Sitrf%-<z^-<v9TC<Q2GfH#ETWnh^R*iNk>S{UIZArjG<c@><^@Y
zuLJ2U@tb&@_O}m4Ck3S>z1iBjTuURE!EP~)VX#maD$H}RGU~gGCmfS#nk$=;+Cybo
zqLjr6)9L9aFAN#UadEk0iX)z!))68m*rxTL_Pbd*XaOZ#qc#xU0bFBe7?#k~(A||x
zBm<E@Rk(E<jpJP~%k4!lQ-juEozt94dzEv~uC4jzY1{Z6{aJ8vBrLvOoRX-h2LuhQ
z^pw~eZuLj{VKFpeP+DX*)`EqE-*{rj1Db$!xtjX@57@`-lZ+s;hzLC`|B<;r=1#Os
zchpzt<OXb@LDl|^U{29B;FHIV`r=9^0zB2l?bYS=`R)1nZNN*?ha<74<P4YB`A77<
zXV*HPFC28Xv9ZBulkJZU@3p0zM$SCd1-@Qk&l&nUuqb^A_@I4b;d6b!T11F}7x~e0
zY5`8=xwfBO;!>(a(Jyi3=BnY{V5N=8eg|`AWMOT($kw)2i24ROD?t<1HC|V(A~SNQ
z0jf5Vq`%<rY_LH4+Plw6V)RBDiI*!z0peqqI|Sw>#&MZa7^lZ1=zo71@3{t*L!;HO
z?i$x0%(nR@f#=%a3B;Zw_L>*03#`G#J0Qi+LpD~~5br9C?jksmfzD7qjo$P6XgHs@
zM={nrFgiGFkg!_d2EOuCo!A=5+NHf}w+U2};cL%F$cQT5eC&gN@vUwrXNqTq$~Flp
zW|(8>DAnNczr3E{^4t~-s$f!3sH29%VTr+cfl!Vu$<d?4!}ff;31^m=UNueh#p#6R
zXzz6T-me9&Bj$;FkX^&qZ6YXc=I$wk{F1me!CGOh+##c)qM&N9ANcJli?Pu;B&II_
z-{I0aeVylz0J-B=?*AqcJ3&sOD&pBO)ZsbE#wNy+7_z<i(2<XxRX@)l^Zb{kNSa7I
zBYxxX(D<kbwdh+&(B+(MoXtg7M%MaV7vqK0+|6W;P$M-Hhn7%z#KTjd9y<I%!P7@b
z@Uqv-I=&ZJ-nQF-1Dn@NL$n<E!Mzc^^1jNe9Gt6J+8{8oGBN0)xgcJ{2O`E|55*1#
z=aBVH8A_Yy()0#Fei4qRJU5T|K{o2ALQYD0VBV!@+YZA*(ju?m(DP>Bks^CNXrkp3
zdH>|U62JCfkA!=rzU!@}+1k=AJK=%Nf5kqEcRCr;f$zNY%r$iVb+gn{_5L*iM=2I#
z=IO4<9nNiu?K}giv&F(n+N{dN``BGUxjb<%blBF8)`1rv7?~IlklESUF9YZPS%SuU
zx>PD`Bovu3!DagV0Uej^bL@?YhlTsV67cuNlVCCVE3xJ_yQ9EJyae^W(M9Uc$uCdW
zeTbi~sHXPh%09-sM{$4bX5`xUMdvl_iQ$?%=2?o{dYJW(q|LQRH}uMm?W=9i_RErO
z&(|4W_eQPF=hFdSDIe>@Wcf91e@hTI_s_^-ozI2=Qg+hPpUYa+sV-}|Ym*`9*Tqo;
z-VQUBlJg#2vNDH5zpJcs`s<SNb|9&Z<KT?2U&*kiVWv8>c2pF<dfq1@xg|X}`4`w9
z09k*jZt6JB?S&sdqzibWArv58#3cdNDVwDQCKun8@d{Lj*Mf5!@noUEqn@koS!)8c
zWGXy9)BXUov9wFW0)!cVcEQYoy+47tVzxVDq$ziWT1-j@#|3nQ_xk+cHQzXPnQL)b
zp69}|Bwb=-CuZE@`cQ8n*Ft1s=h|LQ`zm&<v>CUE|LHAn1lZ>OSSw2@ajt%>VlW*{
z16#LonKuXTKhZ^Owydn@2bn>VT*$D1i#xmXU;RBNh?7>w@IyP2RO6$g;x@0hs$#B}
zt_?E-#Y_~L{^VAidbzy5MFaa(1a8rZv+0+HRp&lVD;&r7o|)4VIGZKpP5Ob8*F7pK
zYi%nmGk@@{f<J5%>7kz|dt3#tU#6q(G7?#-Y*kh(A4X_A;d9vBBVcXt^M9kcl<?Ii
z@px<8*4xT^BGx=W92$0hH20ICA68>i@_DK5_=AikhLo1~Ry>ix<Hjql7I&H_%&P>$
zb^ONZu)5EuL>bD?=F2$!1NJXp-W*SK#I~F=ol~QNUF~|c+Q?Cujv7`-IFQHNxqlO-
zr1g(ZlU=*}J*LsLoR?7jXO_^r?58NexS+E!Gcs{7##0tkE6l<}n{8GHM;k`VnVlnN
z;I@J_FUl6XBh>C%qaOHE(Juu41`knP{$*8E;Kyo@uy0T?XN;zSjnEgcEUbTIWd=0<
zzz`<JPsYoYC8#^8CZf?|gtl;x$YHi(cr9-+oyAs8;#RqCbrMj`7H>APUOJL#LWr#9
zs7;4Xrv)v6;u0iHK|rCNl$ZueHRG(7e29sFbAVG|zHaS|>v9|2vzB$itmx{Z8zCFi
zAMI{dIH1F?2aUKsJotfWc<Y7JO=^vLJh!cy7Q~Od(t&C*hN9{6sVd&xDPR}Dm*YCY
zwjbTVvR6W%U<?^GF}#s^gaW#DcDVBBHZ`#m*x>ld#KFbZwm6Dhqo;f;uU4FUD$mb~
z%Fn7yagw%V@PN2N&p>x!JV|cK;&`9*q{N1|m@M!KXL1bcN+}|Y7m&{sak$|xSNskM
zhLDTnA8c2wmEMvX50aVqbui^LU^AD2WX`%Jk&jN#Jg(;%3VmXQD<Ud?by|>ZE~93k
zFV$!cdkznev{TB-&Opp8oNn75(c*F9Cre$J;gV0^D|K{ul|FRr0KDHnYkuseLqX7m
z%Mx6=jz)CfSe*@KpNZ+y#d>2<5P1E1xAy5KVpi?SL@)r-nFmMD)jJxmqo8YN_;SDh
zSMqf%-`aR4*xE~6dRTpL#fpfyj?$re|G_kNXhF6iM2P*^7Wg(gTurIXT;1}jO%X|l
zY3Ro=oWuD~C02cC6oK4#o>L%ocl!R>-J#VwXCrwyKPm>zsffEaNnPSY%L-+|9n@!>
zF%Lnq@c#p+Kv=(xpeTv%30HJ>ZPt=Ib=$qDy`Y!UT^U{d^s4<yQFekE?*&JPJ5mZS
z%RD%(c-r^<<sz`1_x23^4|UY{vf}B}GMDZrWAaC#w<QrW{1j-}P-(H_a(`y1w9*9J
z(#g2bC;=y+!8Uk?i>i;-A1)hhfnBiGaw~I=9YOYkyhzCH>T7uuYp}&xWvkKkw^zbi
z)5==va^ni_==s<hsCcF7L{)cV-u4y%7P|9SIxM~dVzQq*oZgybXR}2{b;B;0Tln1!
zbXFy*xi|^^>TH;+k&;2cHm8!z4h9S4vKgdd5(bCGAltC5I6_BVQBRyxa-jX5yQykn
z*w+5xiMHH~OPhU6cDg1sydZ!iD1LK@AR(we-gO%c*nB0aw6}^%$cuz|KT?12I=wWb
zr>g-^=xnJXRtD$4^Er3<^#%9h(hl0ZiFc@n^i*`hRVyVa)gQJS-VXCf!=x4AG1!hF
z5Y>UndaLg#ird3;m%}c379*%s@&LT-;o%q7J8f@=+r2=h7Sz<&R8>_})}yLBM;q#^
zvtMa@`JGt6A@b2V+bCO?xTe~WYB*p7y_1>76tt1r@P+YLwme$l7=6!O4!`V`TQk_y
zNr;R#QgPvH^YWXPl;S2NA`6wjL;{Y>8RO8phe#N#kQSae?(xb#@v;h!iRsO>zpz<a
z^@kmXx8HhXiqK{Tc4%xtjm~16Ju}rqYp~eN!NMSqLsv}qIs2sMCy?3@t;mvuwBWN&
zPp@9jYIqd~e`S04>e+qHzOz?TgDoAO+_;rag=cleh8k~oQ`u@PWW87PR6OFfk_hdi
zOt7!G=E0%ob2U|qs6x~<))talU*#tPdYXXlnb@qBeh3_lF?&Q?qesfIH@If%I5^qK
zMFuWN*1XJ&eyFSQ$iOoEJ*fuM9TjQ3&1GS)1U?m0*Nu(q%do$oyr?{J^X2(dEcR{@
zqL)JMFM>Zh^8Ea6Tek>@mn~^UP0c*p@Qey{IHLYg(*%H*0c9nCp&p=P9Frx=({(Mv
z3Q1+?uKX~Vx8K6HB7M)<zPoZer2(0QEPn2M_=@E|=ZCXeO9{5L3$VYNfG5;|<bKq%
z(%{RwOD5pxE%XZiY`@D|N3N=#dJqtuTZpNx?k+9N@DJ8dys={&%r1N>2@7P^npOlo
z$H<hC<t5<I6>XTPoG?4HO|q&IyNrb+n6Z-K)19|-3kGUBJ9EPgy+lYuT;y4v$8}(0
zC|Pcoww_d#Hop2e{&^*;u)YP69g}}o^MTbdW#fRuK1C%%NFpIJX4>C{?f-7V=|lpK
z#^ko;WL#2S<@m|Z8=!IlQy5@k{jR<}rL8{H?Vzoxvi+^l{D^KG7DTl-WrgXAv&lCX
zJxa<+BO}b#@wAKC4^5O^6L!AruBSk(DPZ@@`UKaVCJ#4VNXl%Ye#+J2%TB=Yp%R_e
z$A?OvRs!xbhDyZl`0CY!O5;>CG4e#hrS+#(x2S46T}mcJ^$Mnr=^$8%EAe)gm(^c)
z?D|`5G+i(~O9l~k1p)eU27yW!V-Qs@+R6Y+*!=ZV!Yd%=KY#^LDe;>1CJ9x!<2J8x
z5fo664hMTeTBGcDsJTnSqGFKLsg)fQ!$aMj-Iz8kt_xRR*qdY<?PLC(=~JoO)up}A
zkI>{-yOZ6wm<APHDFEA<Ajs_C7C6C!FYdmVq57^7$0!)83UZS$G5+@p-cbedeWW@<
zcNe;xT=OU`$nMDY8;8_GV;g$Na|;g__OMsbL+J5T-dPmryv|q@H~S;oosXOfN^3>b
zV50*Kl^u^Cx*6a8mI}_9poX4qmBiA(TkDOD7IFx7II`>Z(WCdXiUJGD0V5*-W|f+c
z=k_u&_}6<<-M5&pWQ-0+w!0kFc%0FmRNCb4psWB}cg*fBHi{+~(K5@rCm}7+gtcJx
zo%u^yr_{QJcilNRE^ghph&E%9l%Wsh?3`SWdefDC*J>T?&>!sFBI<I-_>$yK^u)!q
zgn2jPpGK#9>HGjY`UgArnX8i%Juy+JcaIu}6O#~rwu%Zy>yFzAS?^<AIbA=+YuV*p
z&3%~25CdiV<A-htYl;PqCgE~<tDJPr;vuL+U(^~UZ&eoK$9ZeAI2kxNU}XdtpUWvF
z3x1N;l@C}M0ESkt;Dof=hDSG)<qY{+5aCmo;t)0AxZE4(w@Q70Jb#MCYCccJH`d`3
zLbT*v_U*Qh!Mqp%hi7b~3^)gk#TY1qpi(Jd0s{;ddU`g`(_z-3C0$81wIPm@rf2^B
z!ab3;t@a?R>RCaaH*CGpk$GBU_r!!Xz6~ww9YBMlAUm@Y4xEMBwazLfE>ep!1ai{x
zWxP9$tg}mqf-g}6wGZzo$r=23^m-UJYB>^~l9d?Z4uWH8!a4=>h^f~uC`+iy9zQ3f
zqe#ac>fZ9E!5N*2b#*TwX_zjQhPcSH9KUc%u4{PPo$X<xd|GX@{r&vj(y5<N!0MZY
z544naILhiiOTwj8Hu^bE`}=(R*OAlpk-J`AL<A=pt)$ny__?CkB4!l)ya77vzNMD4
z=CPYEL+*w>zh`#H)7mIDy?dO>y93b!4|EZ2lMqkGLnq!uBk6;Xe#xPzWcS@>!CSAw
ziwP4ThrlhqS{!V))jfGvNLLeiY!SWv?DQo-rO!A4CxA-NR}CtGV<Zs!q$c9Bv4(?&
z@vDeh3XUINK`s>>O-1MWSgYIVX$D3j$hfJ{Oa&>g8zY=_wmKc(b0?`FAiV-GfF9~*
zaXHI`N_<CZ$?&o`aZO7*FuanCol4IQfP>NKbZ<TF`)Z~MX{{st=+i{61p-V?>PX4$
z-n3bHlbp)N-%3g=eY4GZlYK!(*Te*;i(7094>H-}8owi?r)dD>_Tz{_7U`a6oYR{8
z&_gs@UQf2OgR<h*uYMyXDYtR^woNMAwrx?^zUdDezmxp>8;y-y{Q|1HTjox@i|rv4
znsc$~PS+I`L~#3F>g!+Y$!>8CEe=htdtn8;VPW_<x`y07Z=vikIFZ|t;dEU|BnRoQ
zf2}X8?DQ(nKcNcHHwKI>l5??R^a<V=OI9{U9#5!Ow_d@4#F{52nvO8dz$m^p`Mp}s
zW&zM6vwpA^cr2s^na$tqxU<zZqPXT|1KihK(_UM&HXo>+iA_gQK7_OKH{0B|I>r}~
zGh6E)-d2#_|Mefg|IN8W=ThVP!9Ly(Ip7!`1mUO>FBci9eZp5Kz+nuRkx-xa&`O;3
zZn=4EuUBH}>+G5kYuF8Q5t<t0(&JmR0doi{nI~n=TH`a()@YZXjvM7d`W;Oc$kV_w
zH4n!c<1H*tYR>^I3;>vEaA{3wMMZ$6hJ%4PpW5q@RQM#L%nznzucI9pu}pcc%woTT
zELKN)m*)#?b~ZNQ?k>xl%67qUd@(41jC|Y3e`a9_7%d5vARuTKQrZwvU3}-t7Uk_<
z{YF}Zcj(IQyc3F!%Ru@$D9IlB`j0=()7l8gghC+5;laK{Odd~S1{O(q?KF`EJv^H1
z2N{W&eEyx5DS6n@F<$7(?kMoR0O?&L-~%Nrh9;;`e_C?^bAuV3vOrcUHq*=U<TcIH
z3vK>^p6=sQXM&6C!^KKNT;y4<$GvDM_BYpb)71@)Z|EaV%`ZY@3~LO(sVjf|*fy7F
zIFN*RI@jOl$iY!Z`TF65FT#<GPLRljUoBnT_{j(EZK)2Ib}McAT1w*gMu)VXJWOgR
zp|W~;ml@zhUPro^7%1SW@;IQTuZ<^%qE2}5RTVe0J#SK4$1&rrm^XV;+*Qnji){-)
zENv0B{rvPLB;eMd(kwyYW+bhx5HN=xmgdQYZPcl$R5k^q@^%w3HUxC7v)*F|rY8Kk
z{or^;d-6k@^|rc_wqaQh!>Ryn6TrwkK6g$4<qjpFb9j##!2@{ST!mnI77DM1fPqzd
zVSE2ni_ov=iRfIwQXc|dF?p!YzVY_nnvi_|v(^W8@AyteNk&0IQASDr2T6sU-)wT&
ze=$87#~cL*L1H*E`QE|v&-c3KSN73{Db0D#=fbXCil`-)j81R{Gw>-67x(W}`sPPP
zDOm+&MMWh=MMVV#B}D~ARVBG=`c_eqt(5kulE%e**bmZ@G06_+MRHR*rlfe&*vvnz
z)IS*xXc_`~7Fk8@1M?CkOK>>K<6s_`R`D#gj1NG~6SFbHBhVPTS2{)kPqTou(!k^r
zK<5l#Xq{1n?Pm#kwYa8ugC6DdBdJwEIsRwQ3TZ)c*EgG84_gC;l|XsfGZPa4W|jV4
zlr{}Nl(WLFUvF|cXd9bNsl!rI<85_s%J0~_-sI4Ud-tNV(opCMR3EMf8Umh-k59a$
z?I^!v&&<^pOhxM;9*dhKzH7_@j9`GCbykr`>y@y5o9^|x95`VF=!?+Q?0kv7S#0jo
z)|i&k&S3I(V@l)!EPdWG^6Xan>^Fu03<4Z*ptJ-qJOk*9>y^N#5P-HRU}BYCv`l%f
z%wiRfD#<w-T?k30r01bxZz;Gq$oa?Ab|D2&i8Ebs0)adeptOvKmQ0KQL-Y6?Ay3cc
zjn2q~cSB`?%h|)bH;ZWNh?1;5?0i^4Z%svCT9mD>(>$HFRHAy?2_rOKNTYIx;sup1
zyj_bH+3RcGN~^@IRyqS5;ts{~Hiuj?YAuwoIGR&=Gow=oh_@~h!3=>jCOoGQFAXt~
z=Yu@%4CHai1sLkodN=+U+n_N@Ue()Z8<BqhZ3Uod3c#$hiiPBmbl>JjTP+#yr`6;}
z$UaFC=;V8cRxy4~L#4}ml@-2T_s3tUs;GK8mv`n)!Kr@kP;#qSn-uVjjzkZ1@H*U0
zsZR*mVd}BtT4)_1mQWXaZAYl-PLG6!kWP>^_NkUB@o9CT(kM8=TB}w1853|b?#-V8
zO2|d`O>L3KSvFMS2OVR}#Jri`PEtWeGW51*B|5Cnh8}&3#Mu^kfiJ#=|Mq5N`VwB7
z*iaSZscm4j&+OWxgh#o}ITcM!RXHuizHz~~G)~^rwn)rG4-WI91cr!6eQ0#g)!Mg!
z3WrmRe68<4I1`kM?C%DdP$<Wwdz)$BR@3x<o{(FDuB)s?AS$c)RF9}?L!x_oN5)6z
z<=Vyc5RyrMY)iVgsYq^!CPYmarnzyn>op<^(ANXBEwbJVJ%E?s&<Js8MK+I+B5U%1
zGrXCegzTR<#;IO4jS$|}<Nz=uNSkQ|Z8O1rQB84&z|oS<eE<6zdY1dlt_o|xRYTKX
z-xMe*pMHog)MmCA5VknyAV|OWb*$pEvAqM}_z)4-*Id?$O3jM$zJGGR$@*Q}<Q%jv
zB*k|2b%5jjr1@7j?Aa#oqHFa$v*KxH8KBF9h6^4Q9|V;Q00Yy|rLEC2DH8)ds%L?b
zzEyHA59Y22D)C=Gj4kH))Z+47nZ;H$A`tjiT>CIs+EN{HN7nheoPYG<PzjQ!<sAM3
zPcL|81q03)1LY+^S@9!defLwE{vjfKtsRBw?d6OyCK+@>dv9|YT1cnoQ)6%p5?^8%
zfeh!iB`S8U94al8u=of$C5JgW6+k6(aS_arpR!y+8loc4hkBejFJe!pVyDNrfj7qR
z^!slr0F6bUlC<a3%I-RlI|;Uv5vjhb8$W3Y=xm>}dTwgltUXQk-MV3@=$WpWFwnu<
zPIQn<k3&H=d3q6^l-?1xAiG9ugBM&<39;JbU6SgOTH>N?<*jll1m0FKwMP5XrPWQq
ziGfOMwMwF(5|-49{RmJ=bg~R`swEO|&in+Ne_Ba^?y38Fx=|VEfhpUa>;s9R4RNlz
z+V@YGCuE37z=>*c=HbMDLoKfWN-}Pp-l(N2>-eyEpmyph#s)`XI<h>C^n6a4#b=<X
z{0fo@I<}_hqGPnRRb0)}r!}#bXCoXg6d<r894PFv(=oZe)+e0}^g>h6qXR!lCRA_)
zl8Nux#kjG+@qAp~V_RK&6Iei0jnMS|5IC0BmiN&5q?33K4Bn$66EN3>T940KoiUC;
z_q65sTC3gGKOLIb(AP5+Iv3Xzg*z109Br?+{uHDIA7L$c8yN(g<`?{yi%ZRjO~NkD
z+0#h(;i)sxne}abJVyMj<RQbO#-~`To&R>D#IFu0Zg#r&z77t8_!+aDx+*2{tD~DY
zUkuC-d|d_@XgC^a21YNEfUD&v;9vnU!kXeI;BuztOO~`o^Tdp)`G$CO`U6unZ*Be9
z^tKWD%+AisOu(%?sl8&0g~oy=RlR+rVrIA5J_wG7FHFGkXN*dV9>Y%E*U^ni7xMIY
zH(gzSP1EPa(C8|kSZKKz>4m0>^R-F(<S1j1Etp`K(VC>hul6f$b@#69sRl<NAkv=x
zzzmY1UNqE}Sf3REl^7s9qb=9RW(8#fVq2krv{+R7gEI?tDlURe>H6i;(pb<IcPM&U
z9#{5^|8kO)-!`3~gmm5esv-QQ_7<mO`|c)|24^CkoY8bN6qkV89~4&GgBMgqt#bV2
z&2jP|;~Bs}?`clhwdCmYdu&~I-;7PD9~>SZ23Z-n!bj&$EsH0MjKse^mUd6t{+Xk$
z<1=09d-liPrXk6A!8{gkXD=FSum|5vXh)Izm?8@Ee=hnGpwefWfWwj~*i}!!i4DQS
z%P8xPMpOs2W_ZD5?bK9)BGGigPPX7=FIZxqe_wO+aTi6a<ODQzSoob|DX3)3D~x~_
z+&_Kn?n&*K3><rUc6R`*x>@v4TSd)Pz*%tU0lNo@4?b6LOZADL&G|=<Rh{yzfX-&p
zB!6F%D&8m*<P0{bJ4O=XnakK>e@U4v&W%g#sd*i&yUAW%)j7WX9aX4kw3=A%>7ppF
zFO~zHJDkv(IotZsDvS|&L#yb3KfWoiXDVy=B%fS4^?ff`Dqd5(rQqSs$#--Q-%($v
z1z%m2Q=VJQfZTGRvJ^P;K~QN)&L{3Fp9#$<dE45R_oApbvPLkXagc#*NqX^ERrBUS
z^+%Dufpx|AbNk|I1$~~rdRW6rP4hAQl~4AQv$Be3HXL&hSJq8v>TQb*fo*XRp(%b@
zcODNYz?Nl=sR<ayC<KL>G3Z!#BWZi}ouN_fY~HG!$u#2f%eq&#RN^OEEJ&p^M7%jA
z=X7ANLoDXi0LT!?bGoeC#F+o;lIg7@Yp1Rf6eaBGr<K(_lx@Ouy3!jO{B9~M!8WMh
z5Zx9N9Ly#o(?at|;WdInV7}H8pFcjN=5W-^D;Jkc9~~Qv!^XRt$k?mzcoBtR5Jhx&
z;iwa`T4=+(K3C&Qyl<^wF^bq$c(5KB>keC}Q++^JWCYU#U{<e62x&D9em54A#sXTt
z$3alZ7%)1QRZ5)RVr!BNmR-w#q$8v2FK?GpLCWr`_jOg4H&`f#$2xL)K5|zI3oui~
zKCD%bpVRY^2IjE^jjb(hX%Q~FU2P9pyr_EEz#0W>81)a_l@-Ltz&XU~0dddj-|C-N
zm52UQ)qi{b8MeM>S}>C|aO6Ec|D}iagX>0NiAZvrh}y58hd$Q?+?>yAP-zZ{UDyvj
zTnUS97T}qp9oy8|l}CRc<bB|r>2}-O;VG|Ln%_4fYYXBlgJF+tk4qeOQm{yZ9>8?r
zrKF--ocUe{(1V2(SI1V@h1s2Rw=}u;GBLXl)mYJptj>?Gn9q4wFgr4Y8!NV}_EUAz
z(>Z0}q4uoSxpEB8n~h-$ZFz9{H7ezOZ9{EkbyayKqOQCi-_$WUz~6m%1u~h>t-idT
zfb1G%fMbK*`Q>+Z2b*rTbP2oo5|vy~+fY-5;B6LA+sSHatci%wRdLy|fJ1d-c@w#%
zy_M7Rt|<pF)&{ist<wb3Tj3ZR%ImvPMDhsOPHKsb*3@%T(YxXk=bn$sLZIs3$5%ZU
zuPG=DF^jP95JyW_bCY{7gtee9q3XWbloz-wN&uMnW#pnZj98kpvgz~e3ZT9@_@+n1
zm7D3wsg=l<y4KE$(t@a<3$~BWSw&`ehvdJsb&0s<l%A3{b2T!^=A!QvyYR;MQB`rz
zb+^0k*lHqjvw&nmJ8J~&Ev&t}JIHji#f+wE5r~=10+Il|(}00d2z*Ivv`mS|&_^H(
znJB|&1UPRqGE}m52}_G;Eo*8C&0hXy0V~^p<EL8e$Y57)splTRVyl(w+siLoQi^6a
zlDKhP!&lql6}&#7zU+nTq4O5oZQX=C{fe4|s_Q13=nQf#wmT|ndUV3J-N>`;F>*v(
zRiLxm+e<golV)`q5oB}D=c3CCcvsO7hdol!ofU9vJ0wFZm)CJ`+S<yxhq?wQ#)O`z
z^F|$)iQ=8F2fe8DuWXAGal{=0$4amn0Zzg?_0iSv;cX-#dh3MnLQ?fyT`w#0EYssE
zfJ*p76HN#8qn?3LS$U|&%Eso3oP=B-6JICOJzgn>$!&Oc+XOB=3AR;)9C-F0rx8a$
z^-ZlHn;gQiK2H49F;B_s2B{NWr1+C5w-mK(9%w%($imh(SHFIzx5ahG5|ZIhsX@5C
zhLGp!r1S^XKgu8W$Z@CwJ7><lo1}2*@0!DJ>U?Xf`kkA9X-5sn6@O^pzm&cNsPwTD
zaO}Sc{yv8U++y2Bawi$BOp#kq?sK)zX-Q#&bdbaCtUw1^1{o>s*`e^Qw7i70?2g^r
zv@A}YFgq))>Z)!MlP(mD#I-o{y*hA0KQgDa2TQKV^g43q`0w{^m0TyQC?zAeT^wh2
z57-mZ7<%!HgpsPe`|X^ztl3QV{89W)MnOtmK~YXoPEvNO>bm3Jr#;^1;dztTlPi$P
z0&d!##Ra4hCYQu+eNq)<Xt8^T;<vne<m6<ed0SAzE<`oIt|Q~%Pb>Xlmb-*F99^gG
zr++)Tst%|u1hh{9C-~d_{p2y;)AlMV=%q1OZOpXWIrc~Q?cDP94|3}_%I(;*?X;zM
zP4Q@A5L1}rcF67c@AnF6!Q4h#)l1V5fR_UBMK>oDu?^|soXyTjtKQWxd+{EhT#pX)
zIC@ay>mO7$$jK_nD=JECIiR-N=JnOE@@8sYTaCZx;RC0js}fUJHy=2*%O>RV>t;j`
zgEfL<R6i~jVZHn<DA|1Jjdg;kfQq@Al9!jBzXhePQDi=5No$NvZxN(QL3&GGp8Zaj
zUEgk&{a)hW0WG&H`pe&fa%J1P{uGP7TU<b7LKZuYc~TV&v)lv8K~6zxW_wbVZ#LiD
zdnGNigN&orHUVd!8!7D-_H=7$)!QdbV={TQWu5ey(FwQZtLK$cPRT?e1MVI@cxsML
z`C5B^IkdTwFe>Qw5IQf<fiFYp-~Mn=_mEfq-FaJ3E*y1aYBSGzd3P{Yv~liYG&$Ik
zmn*DOPgPYfU04(ZwnS{msUMk+nXl{RM4sh%91MV0JS)$0JhN3v`m5h=Tqh;9Nl`&T
zMpkL}_uH)Y+l2U);;LEP5eR0CU`DI`-}{QT|D-W+V5T&0Cbn!?<@l+t7n6==4uPW}
zCmEe~`KF3I1ot#OGF{W_n)4o22O3-L-nkS{NVEfe&B^a{4!a*Yc_X^^IT7rc*{%L_
zfJ!S*z;Wgz;J9C6t<vWNl@>pQWd7Fp+vXh&F-Q>v2<Gh36C2h`OG#|pe(<2Kle3j~
z$k_{T@7*h`?xf8>*hEZ=bG~=-EUD@R`&r#xDV9n0l3M%aHb}}zNlJ<5JOr{!I^T!6
zpYpk;|27>%AqciS5HSjgZL)H*@^T8Y;$8g%WHOiAVIH?T#d)2qao+6>eU<!sBzgBp
z%gRVi9c<FUKiH(1QUCO@@q+%S`|7zRmNz9dH^#cTM9w=zVufRbdgXQcE<Cr3!vROY
z{$xV3ou$@(iS?3F5|T@3icjMMI8uUn!a^<Fdue?!+Q%~i)g0g05OaHxBQHeAa8b_Q
zFV3EieBhhaJk)^ePK>hBvXhkDFDJKAR#sYay~<HT&4B7h4P!Kr!0C)hve3LHDY<X<
zs=h`*g-<m|=H=2L@zjetmS^t4CeVF#y_HXWXEg=&L~_6SF}oLm?$N0iu0?y?E2*I@
z#~KF(F`5I7E5$0_Uh>oqiA{SCYk7E?1w@!%in!}tR7IF`u*qs37PLHzHCm>{3LSdm
zxZ5@-jWEdoX_HO<2(g}Cj3A7$=8aCs*B<EJ%Ptvez!MXrg>`Dc(;5OKGw0YwG9<$d
zr?&qfzvr~--Ml*sp_159i#gC^aS1O<<Dzx?&eOX9(JAhj7uNhkY?cvumg8|=$*7ie
zRP|FI3k`jF`JD<1^767go+?MzYXlfPs7Cb7B%s8}VXplP=;OuDf^r<4-=V%CY<wI{
z)oJ$$!@I?Iiu#9!YeyS_0F&cO@q{|kNvcf*&RDp>t_77~3!w+)49NQ&5^x_5m6)Fj
zRGLbbO&xZ-stLHie{Ko5#gDe-eH3%x;>>}g^A9wwC@-(Bt82#M(4C}K44DAM5h0%9
zTAcl!jO!etkAv*Vu`w!|+FsGbKQ6SQyh1!@4#*v1(Rw=?3GGO7|0r+u#H8p^lvfMR
z0j(52f&2k7S;&nxz?u{siOQxEyO2}&R8&HeDXVEfP9K*$GRY)%3v;M1Zy+>xP=^?z
zjwbynW5h$f;_}W!<50(_?dYc3a!6H6YHCUttnt2<J`q~zX~j^wI{TPRDr1R*R2Rx{
zNzT25t^p>8F*?>qK{vHm@D8%&9UKbvxgOcrJ>12F8W;mvlzwz$oA6aSVOVguCRglX
z&$Gwn@{bgqrzswv+J^czQg;W1ifQk|cMc7+murnv<LXEEVJn(y%ByPX8awbU-MuZC
z-p)=Moi)i<*%HU)e((|0t81~sM=5)2SS4j*XhV>&#)wQ}6H2tFL!;x)AKiT0uJ3H_
z?5A-UEYUih(b`-YmN!+GRn|1s;|Dr~ck5nc)Z(MoA`)Jd#OrjC!-FTqOG8ZLS(e99
znIq66l}JE0BC9HE1T6VS4p%gGBMHO9?3t(_{<z$E$3=r5H-3(C1d~G?Rv#5vkAs3B
zp4LI*OiVH+nWP0Va6tlYtQYKxY>sh1dh*6L*z@oP5^-vs$8^u<mvxUWfSx}WeRc`B
zg~_;&29^H)8P+PT(HgDM8i}BBkeksB2P|~~9i!+>WbYC+J!`Z^AAz`o7%=x@fsf8+
z<0qSLR%Uh3KNlnX5}?v*B;Z6R<EFO>_<Ry@YqUmdv_>LmfXj$!%>?w-0d?JXsZG3^
zp3mhewMJhIjS>*8zDnV?vIaic=hH#tvbHPuB<QErDzQF^1l$@_TB9{uqcvKLmQiiC
zMr-u3iAic|4$)5Y)qR?WiNu3_tfhbQiO@%dN}SKWR%tB(w?=EUMqdCequOkZ*63r?
z#2AA?YNmEI69-2rERg+)6e2ByK57Dv^U2gI{d4N`?BD;1{GKCp+tkF;|IMPMzX>Lm
z)}YcFt<f5-(HgDMFM>XHtrF)Gs8#wu{%2tf#DhV?*a*6R!8g3rn-Em`@A1F#anf1>
zZjIJxjn-(5*62&8RZhUog-U;!f=UxVYpv2h`JewW@i&k;HbTJlx8vxfvA@y&{?Bpf
z`@jC3!ycwFhFS-?7{-4M{{_19zbF1Y&R{WH`^M4ze;Ne;hrhMb-$yvCo{r9rwl3Td
zNSgcy<1d07+~)(8xEzp8WeFCRmz9^7mDV&MTYH$~k=X^kzc^Y>N@BT-y2<>jlhd-C
z1Sg^I$)9(!LohlzG&)L02bIC-6S0ZF8m-Y9eJ=E`Ou~L~3EwXPDlJUF%}d7d=8*n0
z@t^I4hK#4@AGx0od)Gj(`TIZV5LDs}PqaoO@<OjfH(t+UwT?nJPfXB@TB{ST2g5JF
z?Lbif!iP$%-j3q<D>nWXcK*5Dv4j60asM$@+5NdB;Mg><HxZv~XQ8!!!@Bj7KYq7c
z-Owfs71jpww*~q|(sBx2KVYlC!ZJK_`p_{ZI8uoJz-{q9ITDPn;+?y5jLYq~hQ>G%
zTT`yl8m-aiLjTIr{x5DB!55H#`+ooc0RR8&eFs=m+1B>Vom;=}mMJQtR8g^vjs;N^
z6zN@1QBg-x!GfX!Hl(N^1O-7rq$6EAQWI(dBq5;$NFyNu5|WTc$eD6S=gyt`{O2T~
z1OkGCeskw%dGN`Tb8^n!YwfkpyZ2gqtzQ6@1brij8wIiFHwKsJ#jqRL;Kh6iBcUNL
zOz(8!MlWOmNh*U%LJ%sYO@K<2UmsKw@OWLA)+RUtSzl9Mk3_)n&1hOLPb^P$D(y!L
zGA`$xHQ2m<)kptW`q^iner05R^#60H^!8#MvnxQ64Ha)OG>^$eVJT8Ju7}-&!%8VJ
zs9c!2Y-4uztcoqnjy~jE?RD>rV8$k}vI<yvIm~2I!ISq#QZX>n&u39P+Nf<E11!Eo
z0$SS9IVT(ZjnHpyj;=tHdnX?6odggwg^YGAs<sZ<g6rk>&ciDB2r$YPvPh)XX7uZn
zk5KN+#%e@+b1Q=>l)U#yh*2RhOy%|xT2MVG45N=P7QIQJDi941(pq{*&15E5$Qy$f
zqreD5#B6VEZiK@THLufDHa5dM`mlXM{w$-TXJhfE(z}hlcYD^an0^aT>D?S~VhAcR
zMYaCL@t5_3%MIg)8s$)lnSv||Gd!QFf1|0GGAe?g(kuQ12OQ;B>459TwtCw-8ZA-T
ztgF6iwVvvtW4o<mV=&B4Xjl^mFiA<K)>qeCpYl)fE@;ZFtZ8Y%wA23ocEHVCvUE1r
zOe_g(6IPChsY5+I<M!0;Of;%43|;}VkrkbNdkN1uwE08M3uV2_llKl*Sp}=A9P3fu
zJoaeXr}s;To_AD4oc%iD>vQ?#1P%}20sPV)_<#9Y-Mi6mZjP=%lY2M7k-t_YLqOlN
zp45{LJ65dPYI-QD1)SQ^e&N(^bO;!(CY9d_+_&38UPwe!T~kw4O?}g%#ixy(Qqzg-
zzW2>rJ{4#SZ;85Ss()jfO-f>WKXoi)wE#5aG+bfyUf(-=LNlAlXj!Em=s!jpCH>TX
z<4ubesj8`IXlkfwsxDUBv}f_@<bBEHc7|x?2aeHfES{2Iz0=rxw`cu|={MnkQ?kKL
zF?@S!ShxHT^o#26lq7oX46Zaz<RFK@F9i~28mc(V_|mhTzD*@miSXsm;+Ipxy8k)0
z{SAUj-~Pz|<_GZLN&g8RAX)+s2rZ333ri4G8kR#P5sf44W%GO4Tv9)~yKk_Q%Iu`l
z(oxh6;gs#a7%KH(nyy<KZ2siqKYaAjM<1*I@z2f%_D`c*S>4e1tfy25Us`P9xXATh
zDHA?lW9Pq~`lamD);yS#CCt((C9f4y<|*?Y7QjnyFM=Jgf>}AG<hL>up%MdNrL^Y5
zoUCEC4i778o-{Nio;#m-{#<NR!^4_Nn1e0M8v2#eJHHc27*cj3Xn-t@U`AF+&+&ur
zv6dug>{uz-vEIR|s$tbtuY1Ipw;oOV^a1HmerIKr$Em1O7mF&ohWP*+;3eap!>m3)
z-+yf+>HBbU|L`=aP%fsQ1${dT&>LAP7gA1a*40$`>qbk*NX(OVfc^_J@r*L1L(gz&
zC--Y>EdA(DDqpCo>S$@KP}fk=RsDnUW<8&?S*TQ&kSckfYj)y3fDnxeJ+^Jp&ZSx>
z&KKeep|Wj&tfp;Ndr`opb)K%9A`+4GR;Z9lzp(8EDZ%rpyYc4Dx_?qtSJlwe)>PM4
zQ(3xt+aHW>7~CkS>S4|9!3x$4oba$_2YTLR?8&W%+`8^hD`<lN)_*nqCZN)EIO*+B
zi3vib(j*WnRe(?lr2v)EciwK1L#2_aP-%Pz9RIr?XNF4P!Q@MrJW(G{)XNpgpb{U1
zO5h=bO3dfj-mf0@ZjWXBLZ~DjBKIMJo&_8=+;VL5&f9@;@X9VWStyl4(~=TW@!hXg
zk6CK@M`Ji0^EGz<>xnHLN&{cLV^9gJ6wrXvwLD4{?1&A_+A$@6@~V;yD#^@&l~ZB?
znm`8xWTt>gCIIwAbOFrC>dl?!XH{Q100=TWOQAbkAIz;Fzt6lRqtinr<-D3#l1cyx
zN5mWGr4CSN!(51cgMcvW1NHsaMjuk{AD$+zKsco3;)i8RDae89d%jzDT5IfeycvJJ
zl2A<+3<v=6FT^nNQJr($(a>$@j_W}Qc}19JcvCa7BpVZPHtwqHhNBO*`BfJ7ux7VV
z^UgHPs7p&cq<+p^#~fCC0SS;nvmzn_@KcR3&gcA!&p+Wd^#hU-su<~C;b(8Y!e;%t
zb8b(vA7h$I8|#tv^~fevQASSa@r%J1Z)X#F&`^NnTWO*-OP*}arlWTod!u7e$<YF4
zbuhD}NBExk`QGWj+5sp33__)UOTLpZNz_gd?BO~Z@Z?4u8%G%(_~u`tF;w(#$*Wg_
zQE4BEO(Amn#4m?l{VbM2CGlIJ(x^xVl0Y%Dm{c0Qmo)rsuk<JGx3WMb2r#`A0Q{jL
zI;On?j>N!G7&sDL-Pl~+(osPeLiS1M!=nR&(E+}M!QnBOR064|3QH|-A)@gZbW3gd
ziz5Hz3Z0-1gZRNF`Y(L-^aCT=q-xk9JDC09=T+3<u>n1V<<#8G^EtHlQ_Bs@TrWmv
zJZ)<&!H`<J1_$4iMFh={M9d%PCp1&qFeK)1pFr-Ill#v5>6kWBa~EYmGzfjklW^sw
zVdtwjs2CU-;InC6UGz?<NT&oU1PcraS@dpsxyNCVtSt7ZgwJJlkr`dR1A-BmF@4uE
zr9+JFZWghlP1>8#QV4T|08MIMYrkw_#~+pVZgP>)TgC^|p5qv-nV?d4A0Vc&#4K7j
z&^Hd1_NV3H28Uz<5;HonNK8G7(A6(uL!9JDxFjMP)m#m)Lm<Eh!r{#*43Rt};!IN{
zQpzI;TY_FZIAONKRnO?wz4+V`Jid|4A+bhA-;}GIxs>Jv8WBhay9T;ZEy%iRC<X#N
z>fwl%CM<=_1;BFvD-D+q+dmm9rRGoKl~Vr8_5jXWrqn_H>&T2T<^rQU@i3dw$L?be
z3#5RA-z97bE}PtUR?pPJtJC!hL!u0cxNn{!mI#^5)|PfSRO%I~WGX9xjPD($3&7?|
zq#|a2YqR26?0A7>E+jk5^s*ZjO)NVtFMwLpLc)@`;7eEv;!GZiGvzFXIK&c2riy<4
z<o-c4{mrh)J|2(RO=NYnQ~P>Ql=iyDIvlcv22L7>6>8VN(Ie{vsU_{?0Z9j~?tY%{
zaXVdyy@t0#;e$x%*0NCnfGj5UOrtepkv+hWSjjbHGEY9LQ*p8hfX$J-O3LduI2Ra<
zYEL=4@hcBC!|10ieRPl`Tq3(0g`Qy)DHa!>rIfK$A=p&mP&+MccZRpF+3^s2e{3CT
zh)u3*xaX93?eLA_o=3e>sOAR~)fa6Y<Frj{`3W8K)c78OLLm^&5b<$%eK@R~N(T8e
zW!YvzS=_1C%=y`K`~VA(il*-)PcBm)L8LhLO555RDIBP>HlvG8Y(k@^w;lxn2W<UJ
zZNd|tm!Jp@^~l;9L_Gq5Zo-l&95Giu21W#<Z`Iam_>3WPSVF0+nH*5!bF!s#rQZTn
z62AIY!f7b-Ja>J&k=>rX`liRX?~QczL00rhS+D*hLrbqDuZHQw=1h;sX!pcyGza<e
zKb%)TON9MmB@Vb};|{oH5Gu*MZ~ta9@r^MaS)rGs>Zlq0KT$`=!@9qd3WPO1H6iCt
zAJQ|}Yp~mF*B;YdyNq@?y6FWV&J+!|_DdkBBp783_A)y%s*9f-y;pM3|9N)GovetX
z2dsB$?LM;9quL~m-@^QbK6nPeeb!zadcYbqHyOnpL$ZMG?tV;EoYm%ofB5~<kN))W
zM}Par;x87h)&FeQO*5YtMcpjk*f4@>Ru2&J^Dh}a_}Vfs1D6QC>!F2i$al`bWh7c2
z57>Prtf039LMSamjUjjK3`~|R(p6ics=j%#ikr!Sj11y%KOhD~WyGmFzuvNsY(UB`
zBvi*<x%Bkh^>PG}Cj|JwXf^3YjQ1YDQ<kw=xV|2!iNhQMs`SeJ)T>d2U4w1VFPjJJ
zL+-poOAzs1mr^cYPCz5WYb#+6;2g{8Sssono0c^XjNMaZjk<=K#xkvCe_Nuq`V*b=
z8&2e8wfA$Tns~X{-4{__mxRJ*cwfu7=ADE^MbuWn_SrzP$m<aDK~4^&5L3?C=vlAZ
zam72IRt1Ttf!%P&&uWL!=Sx;ES5;NhU9#AChqYf&4Xqx0IZhTZI6Q{g-T7r+JG?gi
zMe84b{pb&$e)`#`Iy)>4ZdLo1_j9?8{AO5?!%jtRJj>{2(WhC{8fA6!%6y7$?lje3
z{l(JdYU<0?)z>arYGPn}Cj>FjA`$_tjE+Ls0h>usX)3QKJn<mJ{{e9RDk$x#ioH53
znTDiZi6|ma6=ueeq)NMM60UnDUhyqKGO6Ug($Z@NKAZlc4fXwVsPEg&3~m<ryx?`S
zMrYM8n}Cq&UZe!zLaGK1hdwqjJ=Mwh^x{RE)YMeemM>lW*;j^kF467rM6kJoB5Hd2
z0mZXM_AasA37x=*xRHar<8Q4fJF79-L0ZD61IPeGh>5Mink9=>)l`?Lt=XYsa>qKb
zv7!&;&Y-mUPVJ<#rgyFV5oIKfPyyo1uiQU~rcc;4*@DUN@-22d@gV-jw$L*xH?KUT
zXBHEMrniF}Qq&`CJ~U~uKk%f!JqM3|=woE+u*&Y3Z*DNWAH#ZGd>(98O<&y|UrQxg
zQ#YnH(_Iq~RLeq1Mx^WvLV?T)bs)W{oi#q>z~<DDYa%bMa67c>PFz!e6VTUJb))R&
zPV>p5$Umf-ij+S~CgqyBN%@X-Kz%t?A_6$TNGkUE<+JOY53M`>H0Mb|dEzmLtH<|;
zBq3?-vWz3VuCg+B^H5vUGeL#7t9kfgK!HXjA{v!LrLcrTW${CxOp%QGkU(YDY@=&l
zPLGf+p>Zm&m)_iIrbJWdO(2j0#KS%L6>r8Kq<1R~tab$=ywWk4bT4>-q2-QM(^!uz
zLW!TtA)oE~M=#iIJZG)CW!*9r)wL>1&3D<~4Xx<|c?b<Xb~j(Sw!V$eASeCn%E%)S
zBn9f2b$4zn8x_iI>ATQx!2$OIhik0NjyrYgilMQc*<L*Z8{M_X%xoeePy;CWPPbPt
zC9eiZ*pdeZ=l!<c2(RcX{oy}@;P;~bk+(o4sTd0D{;8jYD7muZ;i=uXpW|VapSmR=
zRC+1=PRi}?=&6oK4Lxn;XuoQQ*|yylM#iQ_yAAa$53W20vkIxoLidw+l0LqKF-T-!
zBZ?BPY&m#a+wQjS-7By_7dwlcI(uB^2P#dNnOQoe<+Xyw3%ntLDThjb`IG9OKmGmR
z7ON~>tfs5~#m-4k3A~a&*p^ZJ^>SZREz^J(C(3{hXx#w(E9)o=IH6@`qW-ntb9@nl
zLaDtEzhiq~{W`7xS*Epo`Er$2pZ{*hmz%G;7j@?F`bGv4I&)ywhKjo$X5I|}f;?Ud
zCij-z=BviLV$(5fCNKyv9-$+T?^|rAuYK*-3vwkm36s+M(FIYa=Wm-`OTiQB0TLY*
zToquu{~cN)+tszl6!xM5LI4hSFq;FZg`MCv-9yNr3i&<%qOQ42Q&Uq_d-*J&k`2tx
z0YVZL<uFqdn29O0U#toqYHts-JDB#OlfoLt_C51TJ8AyqN)z=xSG>wPO6Yy$n#B5$
zQ|`O<^wc%i=&V?wy;^hehAjpsTq0^Cv0~CBv#8{i37W0XRvMV^3M}->Zp0P_)(6`=
zZ&<IujZL2J`Pg(JFraL3jk0=pW!H*t8CmXJzf@y|_DY?Vnk%*czG~yPqxMg*58Id=
zLRwET%-L1}Dk<UBB>oq6<nWndUTRmK@4hWwvykaIUlX6CmhQ%hGvf(k#>ghFpsTBE
zpseKju4}V`O4Ia9?}$S*GL!)HLI{E;VW*-p+`aWS@A;#u?oy3q>dRG^e7<qF-LW`)
z3~rc2&A{inU*D#1_NzVC#}Zl|BL_Ol6B}Wt&Q6xyNtcNF$E~7Xp-4zVU_%Z)a9Fiv
zlg{6@G}Sd#muqbJv&L~fm)P_U5}_Z3408#0ShaQHS@ok^4#g(p>533%e&zl_G+n-H
zQl<r!<$hLsF6nDIo<FR6_VC)Z+DEpV$2^`2l?GE=3;ho`+%hx2mKf!g0(0ND!O3#B
zZwQ<T0wCd7%Ow(S7pE?+D)`hHqp4a`7ljj3Mn(WZH?KafTJah!@S2^jE|JZ#%~Td4
zrL7oRD^-L_TmUF(FAh4ddFs%ryE3T6=&Qa}?rUT<bri**U|j%HECz@OT*#rYIZOFT
zGLG2~J(S79XT%zqd8+E4_c(euAYg~n6Bkc-Er};vg(ddZCqLM2ec9+(D1ulF0CNfV
zk&bflyt=z(fwoS{tl0#pbhGr<)IPd6L^r{D04Bf}lMAZ64U|D8EGEMTac7UMp;GHH
zz#(LiOKu*wIjO(O{IKy_XA`xJ>ok@wR$uh-(v`Y)Hn8gZcz_7vJ06i=ab3B#&dg`^
zV_RKfQ@f~Cpmz`%UlV-FP06TGYD?dRehW}(@2<e(ZW&KY(KTdZGo_=lIQ7v9%j+)A
z7oW9;cmGTtl|iMKEHbYAk;!F0L;t91X2nZ6RAP=a%<O=ZL#2NYQ0mIA?~OcXal5c1
zg7#C7^e5qWLg8=?zU+~^v%8t?)w6MB4;s3PQ22%xbbTu_KR+S(yu+0<$32sf5781F
zOTyq#nC(wXpPV)_GSJ#$W9swdN>X)dZqfZ`m8*m2!vUuNl~VIsnJmb<i~>WgLx{Wi
zcTSjWKc#Q%8<hCG7=x)q6EO-7I2kcpM$(Tx4{%s<Ic@zTGO7>!st+JPLZx0=?{H_8
zYf>q(k=l`vY`eyD&1$<du_t5j+10Jc!juwkOFvg@-5Xiv3H9W*Sb7QUfQ90&hqvs8
z09#ttS^40+#<@c}_Y<307=Xg8KHK20f8N5va(}?r&lr!X;6-?5Tjo8RJ3jWXa&k=r
zIq`}8n#;PY?cc2><GZ@5tD)Dw-Jz#ty$x;Tgn0Wkp0azMh;Gd+Z^6{%VT<49fE$nI
z0dG}R1+%e%4)8-Y2$dXRj)$K%b!4`qBCl?Bb<}ac6j>ZcCUgSWj+VR_i|c`gw;$(J
z<@S=Ax`{olwUn9%#ZUc?oOpc9tGud<H9TeMSkV#VdoRAAtg9KzZLWt$#+t9Xylx6N
zPFm{vq!_0Vu?*qVAtN0Tj<CpVYFlS#8>YPzPat+7%X(8hGVY(-cq88^0@2m_gjNAN
zY^MN~rt(VhiPpN;GR@MPiM#?<UBqRr3vZKY#yuOqt5%N+&{QG_p5E~G&6qLUmy*}k
zKLAjMTSF=yoG^cz18&-W1-ozb$=Vg$iQ{qsW_iPHy@!X_yIy(X7J<nsX+Sm9)FR+W
z42HmE<MCx>H}oDIS?_xF_1W55L=6gC-@|W0)#pc<-MC{kMRxH4M_iwtypq|3Nyn5w
zytwV;!A%$avx?KG?R9ueWm@)wLmnZg&g3;krBp<@ZaZ~o)5U-{XEPrhbh~%PC$+u1
zVTv<le&zn&HC?`I(iT>U2t^cK*uQGI{%31#uf+Id<Fm`aHw>+Bc#;DS1kxF8B|b-8
zob+{#OqXsyvg7MZ56WVj*lnEG>q#K8>Y!nB<1BpwlxR)BkrPi&+{kYjtncb6jJ3I;
zM6==pkGLkddZsitMl@80I)Kv{1qU1hKwWwfV7glOl=`07r!5S~0mtj*Qrieqwd4A8
z!^not&gX-rVLo~%9XDO{o4b^eG6*<ILv@86cx<b`Sw~-OyPNaFh8V1b0y&jffVikV
zEAW)YL7UZHVYNgMGR``dAG|S<(Hfm>z3QSaBta$CY|H@%2)VtSseObrCDS09fM$w-
z(H<!#SkVE8Z=`U#8N)m#ncLe=ASkmQk7~QxlKS$le!Y6P{xbVh_fj9$U`tW0b@@rf
z*Y@6a-mYVRXX{Nw5wzYc9pO@ywBap$&U$e0-2L+&IgG+w;)^ibTlWlaN6*EU&Xs-(
z4!D(TeRiLO=Q3XL#)7pwJEHc*U$xpFUUR162mG+i0r!$kX{(H~xawzoCmPXT`SL%k
zxj>~sYD2{>^T!@Gw~IO>=|2&_`AH~Y3Ois`v8N69Ui!)@F``9)pBUE7Y(a<GMV~jd
z4a`51#ew&V7(6PoGodWbZSQUatsMs}?^WD|Gq6-fX<P5+$ax6sR)k6u_j9p<k(_Q>
z43phq&@@c{6d?^Dg|}pQed+XI^{I+-5b%!>rRAr}9~@ZimAmONmcXgtB5!-^s9Szv
za3-cRaR`uYMxg<9ZY4oh>ej*9$CK)6BigHB2W`jpi;V$`$!${v9MEk#DadDG8^8A6
z=pBn<mU5`r_!9^p{m`3^r|yQ>JnHr?Wif^;8MwsDhoaB9#I=xe(5S!*I_lP67`VmG
zy(JSvm1V0+_RdjN#O%hV!1FrlHnMvru;klxXA#yt>240t0pcWh)m<kGPg8>nkHW9T
zJiO(kcm1$kat>L<gnn7qTM_K}g}wd%9=n-PlFFbWiDVKEPHPCv4s+YS_Pm~9WO7q4
zZK?xBItU1}2^BDBC?c((iYouMiBWUwik6z?q8*dva?f1d(og+lX-WHZdt^od35P}Q
zA-A=65=aD8DLvga(a-rG`yZ*DPe(RJ602a&_Odmz>3OC2L<@C`J6i6~tC<ab?YR%P
zob-8%Oye&*ho5oIgyWdg#jjZIf0l>i41)rZJnycMN8{yHQDzSCRobru|8RP+{7PvZ
z6~o3qePq4DeW%{})Q(uDVo0pCx4$VW+(OIEVCq@$nKhKE;7g0_?WW4^!P)I!UfHqh
zc3y30N%2kFMRwc&>gE-PEELM_AeHo{B(=ueM0bZI=G-v<%y!4bv!mkPq?neNaCk4Z
zS+>OS9_2nKO@C+o+6Swug&~SO4z5<!SKoQ`F(Hl)D4*U-`T<r}TcPJMdn5ft`ud;f
z@BQ+qODraW3^3lvm<<3`o#ppElxxk|?Q1=E7~jq9Oszsaa$oA`_`k<)DV2_aZ(ez5
zY4zQG<`?$vx*3v~SB!10X+a|j(hB_@0$j~E9tzs+4=*8c$5c<kVJp>+iy0_vG%5d@
z^B1;ye|5V$XDL%!<nCq;5vXx5^wd}Ro&LvP969s6r&PXrG)f0piI`+>drf!4^`S9H
zO2@=?xVI2^gBn8R&5IgpRx$}HwPxednM(V({~wMaDwk@?yG77o9LXIYdz18Tdh6kl
zfozH;=li(mnC@EX?psW+8v98fP=BG+*I0Y)sih`Qp0qIf-;K|slHQ~QY<xg7CpjGv
zabk(1(^QGiY)j`z9|$VF{HOHQdxJ{0UU_a=f|lX&oRdO2x7;T`@~m-irFH6XGwUbG
ztABw|iHxrpgGz8_<qtBbB%G}SZh%r>J_eOKqWXR!fB%z^)6<vZl6T+caA4N)Bqp5x
zt-=ntAriaxPEqV7qsz&L_t1F+0fR?lw#SwxUo$*%Yr}~rK}Gml3KL81%W9%-jF^XH
z0ZQQr1eHen0q(Q5Vwfz3Y2t$OR04ld(pmAqRoBaDV{|57)F#5WMQ_aXTI=+%#;u4$
z@6DxF_#fZxW?>v0Uq>U1fd(ef_qaLE!+f>J&W+ybB|$j|n6(|u)+wc6wonP8!S?#1
zQ~RTjAB$}4O~A9t0<Ks4IOG+0+%1YQx?Oebehs}XiH3@HIh*QyE{%YW?XJFeY>&I;
z-gj!rByeL7b8vc4-4KaD1RXR!YdwC?5jjt0n=D`gRN4otu7%aU@I1PC<;ss$m;8^N
zp2>ax^rlLtfDZkP3rLE(ay-sxYp(w2kE$x_OV_Shp}S_yD$TVk{<`!ZDj$Dhyma-Q
zpn7uaRO2XNN;%K)g^>He`e0^JCtnE8AV>2E#ePQ(LAeA?;l??0oip1uhs88f2mml;
zpEYO)QG<=Jdk(wJRn<4FSgEr@U3cl9RF(kVKq0@c{A8W?YS*~(`tYV|n3Ds{{xwvZ
zhF6MDbkpDVAhDg=z{KR7b&flJENUj1M!L8^b-Ga2+^P6dp9Gcg94`0*;AcRxkdNe!
z8AkGS{nGhlo!9D93FXa+=-LM-Y|c5_+)HSnbtvrS;{bxf&eD6X7H$qo&q@lra;K5q
zr>Y<S-a>7?cO)()7jx&Vwwm6@fB*cCNA!+lrSt;~=;tGVup0m>u$4DFm#c32`0t-8
zoE-*u10o5OHg@t1__f@v=0)z~n!ft|X!>i704EF;0sBnc&CG)1YG|F)?V23zmvXZ3
z8J<Vh8tVVAzPpXl(UT_@*+=PJZ-DoWYXArqMFkx>9;daGa(>yzzqeFdeL1Q+GOPN!
z%W9o3Kl<ZxCD&M~t-KUf3d^kYKDc$=nvegcv1HkDZB0$h<;%4<e7eSY^P#Xig&4$u
zSmw9{8{5Qc3{^6U)_AQxms&=9jz{@l(OkB9vK(h4Wf5P_F#!$e^lP|ly!;RPAAf$>
zJ-4S!4wONtG?0kN_O;*RXKI_0i<`@yQ)xfI&%zb@9X52coW`12?oZDf+iBP`)Cdcj
z)W>DopRBpK!mT)mz?Z((JFBrb$T*G{%d~7Nf5xpxLqt>g-Tiy7T3AG;HZdq;5qRJz
zifN8LXQ6gnZ{7WH)F46D2JX~0yq(VyfZGA^b6RpQxoT_8*_O_c-lGHV`w0#>*}~E&
z2$lZz9vpBNGFk)Le<qELrvMPLB&gu>)N4C}D-7cXkpuslSE$qpLM6)gKM9yv>_d~3
zn<gIV&9|{X5Qcx?Nx$bwzZ(K^5_s?j*z}CL0+^Xg<gU|2X;^kIkKWrJQ<Cbx(=Be>
zm5OI55|#==C2HDy6*id;j?4n4jFS)mdZ?(h@O6$p>rO`^iOED{@~L%^P8)nOa8aG3
z9Lh670nE`BW^p+0Md!d+@F}R4qTG%Qf0sqB7AmeWdHylAFf#|3-Tu_V32l(F({Kf_
z{g%oAhm3|vc<epfTwmLeT6ADVZ}geq91o9LTzG10^1ky)CtM$Qln3DI9vr+=?sBiP
zw<(HT3fpf#tCl!SZ3+0wv6-+^;s7B4c%>}G;y#$w;oKLU{Q~(tXKwk7P^s?4<zrh{
zX@C61-+!mCtAG6>yr*zXUHhf%41C7fqnp=jfAYDOs+y*bmX@}bmX@Zbww9)rzP9>l
zE9ZoGd|$`ZmmCz;A$uZd><*;ow+-<Cwv-KJ8*;Ew#*K7em(N{ImR$=$bk`}kb-;Hq
zf21G7tPLx;d+5-X4eS1~Tzk2urq*(8jn7oHzWik6<!y&yrM02(>d>)uGUdF=D^vDF
zQ+3~mO+#foa!sgXp|34$2AS4|9`r9b7}9|!^C$OI0V)k~fgup|<MSc7V7WgvU-?L$
zUBBS4stU*hYknZ_MaO_b81)Dp=zogIf!SEVOsAfO);}`Zrj^}xZ8dk>qcLgp1_UEJ
z!PUY;W8GJa9Q2HC-Ac^M#^MlI2B8-mTHUnn)MsCtozqyi@y*%R8f<Sz50@pBj7;6R
zHg9sDUeiy{pQbD77l^ZMopWAv^iS&q83lo01}@FZd8PdxHHYvA*Fxh1wpd;G$}!l#
ztfO{Vz9KRpWoJ&ydF>tAS{Lm1hh!tdb4xGp-?m}ZC!cF8z2-n@c74?I7gwFPtX=)_
z-_(~ZTc)L<p{}B)yJOLwAZ!1Ix&gTz7L78|{WZ!)k>;1bU*WOUH95Zz+1Zzs>S}S}
zU8FoJAG*@PHbHhk@i|-Lwfb7yj@pIS!CIw6$N@J12(s`+cMcnS+gL_tHuuqH50ysx
z049_P$sQUT%B&d(dYqC9u{{h?2fZP@`0k;@ll!>-lNDz-AJ5M0;PMpoE-k;6$%gJG
zl=NfzXV$VB7-T*6fzr<?X=9G<cax2x_Ke#ui$N=K?IEJIX0)rjF{1SDp(AtRb88y{
zKiEy^8KtLTv(LF~S+6r!TRKPjkWfkbo}iLndFKPl&m`$<s5BsMxLca!V-Q@qC!UQQ
z_)!j(=E(s^c+B{z_xqnXz4cXoCefEHujk_*5P#?rjzcAh3@VA)Y;FarF#447U1!V0
zBoq_J>+9`^Elu^`bvk<MrIMujo?jnSf@rY4qU3AcaOV{_E3-VaDm`_aZ>~8RUP&qk
z_>#fYj_1&>uD2M_I+&Rw%>LlBA{=9AY^x^|;AXTH!<?;PHq$^QVQ(uX%KpXuy}p&%
zuFo3IS%!ri39aj?tm&z^bNFt6xm#tDYe7wrYkId=F0H>Uv8Nd3WcLeNVhg?Ur+NKn
zm$r|ab;*n^pV0w_s17<{>tnR$@O6hxm(JU0UC-H@HqZsl$OffDDcGEwj;2?3?Y;Xj
zt*{b@tZA&PtErU{s;;&jgQL@jMaote#$TB>Fe~Sb!ZyzEyS*}{Y=B?cQ+(Ig*z({e
zr&EDxfraP-L`zF;L2G$H%7e?sd+%B~!YbhtdNfC<6xK9YCG5e+Iab}@dwT|%BJQ}R
z;x8495(cL9bULU6_Wj_q!q+mLNN?%a6|i5{`=G{GR=_OY0V;tnq5kAnP<Ce1$*u$2
zMyHPmxue`6Vh0^vjl*W;CEWDgz1d;Wmuu9|njA|{?qPHRqJAoYfv(0+I_r|2)WKAU
z*_vOue=tp-pkMaTwux!v^+wjIt+}`N@A0xQkH~6hZzUnhL-z-`+pP7<G)ra@IB(OM
zx|X^IQX3jQOp0sF_jNG8Vzl>e_~dJv!E5js%rG^vvEcUpz32Aqx_Lh_uc!qHudk`C
zM<JTY7!r>o%aQ;HtB6I@jH0kh#=CvZom2Cn%?%<pMVTDmBIV4ab`}L<DP;hcAHVz3
zZ7sX7OV;NDPpTb?+Ung<N*2myRq(E=;EUR}2ei(Hl#=1VH15l(Gyy7^AI>hBYRzoG
z>D;5r#<Zr|u<K^l&YPT0Pu3K$kGISYrax~})H`tO;n_S8b%?9Uv$P(d^!KNM(r1rJ
zUp|WbK&WJ{dN#WBNor&GB@3G)o1D(fiO-8SuF>$ca1MW71Iw?vV`J@QJXPW|+tNAG
zZ@~c<1n-Wb{Y(a4L!}8hxD(i~SC!rsD*ZeIRC;{L^4e6W1l2a-vc>i2^5iQf!KW<}
zQjyHo*HGzH)K-tegu3o|hDr*_0@8~+2Dowq2dd5B9H5ebhUtzq$iB7AJ@lN#xloH`
zx7>F=&2AkegXTk$+fnG}vdhgvx!dcaY+3$pc4d&o9$!m~gk0Rf;On+gBAZe!TbTJ8
z?N7^9)`ro64qm~Th8U|G@qYUPo>*GMUUJJr(WzuQroin+yrpY$kZVLv;DxgOkQOnE
znMW-3J7#p|9b1xm)xzTL-hHqNxNP1t=2UuwK!hAH_OdmJOmAZJj=dgcZ21gOsTu}H
z!1f)4*;<Aa#+=SbJi5{K@`ek^X{bSthyw_638jHY_FS~KjLgLGCxL{S2+Dz*jLo^d
zZ`VyTtK^(E-Vh)Hq<LL)b;QUr@S+plEf?+4S3BodKF~OZ2gJZ|QdizhJL@1*2UtZl
zZ1SqotQ>G>wr!1w!>~I>DgC8qn_{eP%_LL*3#HV1Xn-`you&*bNx7-GoZF6I-z^h!
za05#C2K6gp#(v#1-4|Y7A6HlR;JEF1C)=RJhDnYgxdSf9)xzCD$yqia%x*98KfK#x
zCfSV+jq<sJV)-H>6JVxh9^Q5I&r6s5Zj07Rk6SO06#&rvnrUNaRhIm2v)1Y>H><nA
zm*UWSlKTXjjiyiI;GT<qO~~**t>u{r1dlu~A%U1+0BF2g8EUg`pNICTl%&Q%u6Q<D
zGYp7x+6(*-8_ggcu9TbB_8ih#YlX1x2{b~VaTHy*v+&=uFY!65odGpn9(X<{DSO|n
zrPl%C5g?aX8sxb-(CsUKc%EN&@zwRakLj2OM%2@Lz#mD;11<5f28QP~O^@Cz@~a)j
zPx2v6mn=Za1o)Y_!oWj@SFBAVpG~r6kaX^W(y2s*R^?tYTWSLK(SK?mE&cZFf0m0M
z;!V^$tCXDfVGcO1g{kdH?pCw09uQDYFMb{P0k(}E)fDGpw)&#MM(>Q$z^uH>dsLw|
z1k8=ks!M*iW97=@!9_t))nQg9m-kskX3xo%&XMLDDvb)hkqW<sw!eKisC2KoE3)@z
zvQ#k#ccKgcC9qM0zt92qvr-2fpNYjhG)a~@;QS^!;2@j?9z6C)Beo&S^F-X4Qw8}L
zHc{q)Qx28pqXwK}3d-CnDsN14#1K@%&KfEKf?j|Sii)*5s;>e5)3=H}8rqHO9hJ>;
z>bfd#UK$S-R2J-+SXUp0&%I%*=C(^WEFL%1E5GL`9jJ6K_T9U3r>B;4MjDQ(BrTYL
z26R6rWS<Ijv$nQBsedx-=wl*|H43nLdLH{1pLY$q;Cea8|7rz2o-XAA4OIBe%bM@p
z5;Gm6>nr!e3K6i{>d<{4#|}kS5z`x*9=hvTA5e3<UrehRYZe`-axcC$P0MG5O7hRP
z`;$wW@vZIIah@A4yXqZ?sP%6W@PP&{>b94TrqyD@bMeGf-mI6_Wl#W<>}9*m-EiHb
zgf@{Z_^G*nuHn7VrtT-`3~!5V-iBsLxdid}+jIb^y-*flp}Xh$DkoSW999GJXJU`u
z9@Z^;qH9G7K?vQA9Mkm{nfhI=AjMDs+N5`ul2|1+z)Qj<d)YyKk4R|aQl|1}=6?B`
z>l%9N97%rOjly*#hT5(=XQ+QMwc{yMalQ_Pbw3WbTH&@!-(%`opq>K1?y03Qz3h0v
zU_K3#9a%(u(jX5e6#-mKYkI^z{k<2q8V1G(1S89R3mGYm^06d4`|RO8y<KOw@4JzQ
z1@Fn2q#pAn_lfi#HGP79RfX=GJyepp7Yo`rvS^rAQgu*(wa&gB`nLD$0$T)vw`&bJ
zhU&U2ZeG+>pZ=O5DQ7H4ztwcHn<KQhXot}?oqdtHm9cnIQA8O%zCr$!SxR~5*`3Ze
z%Nc2XY)0kTwz$I{ft44ZGP?%aDJ_ozEwqjr=$%i)#W7{2PUtnnP>XO2ea&U3R$6Do
z6NR%&K?x%5>dva53mTS=Q>_^!of|8iU_~I5De*NkxVBq~rkLsOx~%1#mDa}PPt?2h
zkqI3m(2mK`R8p>wjlTCT)1;gkt%rQ4VbyC$I!XhoPZ!@YUv3qwc|4)6=03jornSK}
zqj%u*He-)nd+$|5`Q?WkQrB@*F}jd27h5_<npX#$d{t>ORC@0YxVu$^M;{I<y$S24
z=eRtdF07l+WOXK0<%YR=XP&v+Tu$IaJK)-6u}bd;Dk&B=@e7PYRCco{V$e1*!TD(G
zbC|<y%NBxWs)1N^-9!7Y`hVBh=2LLC7U+SrPz*>(6E~nv-a>pm(=55Ahg3B5BJAdt
zBaUlbuRO_&YDK?j#x$0s);zGi=el#rHV@4M=^)@3QnDO62#gd{O1%Si>RalXZ@*FQ
z2A6h$s>7p5iu~Yyu16hRE!=|rYiQ+SKp>^E@zJU8-V(zl`d%v?A!SBX!fYX<8C%+0
zizjA0HM92CwLIyU;#G{ztHYvRq}D#1zU5O3%1%fYATKU!c_6cx3@{}mYU=LHOIju_
zx6N*s<aIWp>mNV09NXr7;xRV!MPpNAO?@rArVa^5b+>d44ophrASWps5LR~P26?Qp
zv(Y}}8I}H|2h+%FX@o~UnbW56Q5L`}>#PVrckuFlhg%WP@=LMJh-OTEaVlaGf2v@%
ziaoMA@T8PlKYg+Q*%MRASZJpo2N*3OzeT1&{s?mEFu<Au4ki@4NO_K9aR4D8sqW4V
zx(M~%+4FHqbbEU>nN1p$2uEhuuai5M=wH-6lAcAOQwA%lZ+sQ*xbmQ9%<)IqjFQHt
zhMKyuWC25MxYF_~8^WDd9=!beY;7HsETFMR(AwM(7iXdCxlXnXd!p>>o8is0)(*Uo
z7S~=IeDP}R*B5fqvuZG{NPG{Xsw5%om}}q>=lI;4;l+<!J>yP$<YZ>QJ{uS2a>Vc0
z#fWl3@enXLN%r$4_Yb7$llAK@C6*PEi6lSAFyuS41hjIbuU?3q&Q7P>7XBsqgc-D^
z363ITDfD50Kx>OlvRQpeSDAELAnA<sK5Z$0*_*-4rn85$&<-8PhxrH?3jN@MPu$51
zIT^E+^3$-R#{!O?k11|UMN~iY-4}hs<ytW@iY|p9ZEq3MXZ^!{x=tP$XOaY{K|m^@
zk2VKX2H5UV+q+Wd<ms5qXl!%Y+Y6gO2}S$RNr}c5S9L8<OtxlV`>*OaJ<e-LMIvL|
zk9Zw)xb<jqA7vKrU}kFD(6EBu9rldQjKkM8;WJ-kgt<Cic6RiAls=91K)`A${2lh5
zHQaGMI3ceH+g#Hu+iB?M5OC3P<E?Dlq-Jt=!C-Bq=iw`J=W~3R%khAdZcmzDB-Exn
zv{>u4ZneXlZ0Q{7JwT<=4-b{PK&Uh!R_VPu;AWRBpdXEV==9jb`cPoO>CB<pUJ-*!
zVYWq=q$z_+^WlI~QZCowX*8bQ4b7qwaak}+rRg7)5O{KcfzEhpzRhd<?(>O_4=F(J
z*pxsqt(ii~yUXqct(jtQIx`~eLEwT9hS_OvT&MZxWg1JCsjb_v#^k^rBd0^l^e-Da
zB;_bKn$QN<p31;$%k}O5Zhrg`Dx5BbrmDj|K&?;pU00nQ?n~@rqnhYcdHcEe;dgGy
zewStXH}=}VD&$EcjbXd3<8wRc{o)R8&Xq#<?VH!H`uH>TMN8G!ZCqn|aQc={Ot@zP
zCEP2ofSH&;2l%199A*OE*)k~?$76#t^^pu*_K6F+8lVB#>+}3_4ia57o;>g`%QaOs
zG_};V)K%10LkU7n6%vF_qS3+DqC)reo?rfX<+4A2zRg14ztH<#Qcy|;+e!<r>RsLW
zKVPj@`9e)gb-DW5sr;#sCDokRBdhq_HrfEt!$v7fLHYWL&?CT?aqTQ*N*k}NK5-Z-
zmQY2Hy*`Ipi;Bkj{-@8jTIk&<zBV}p<@Eh>I=oE(ijiYVZU<{nN)xu-uM4v|xM7{v
zpCSIMt1n+BPeB>q9@8{PX$WnKusQUV!r8C(*d9wjKSt6B6(KcuZ4Z9AZi?&zEN^7O
z`<`PlLDzO{-ShEhx{KA-v^BJ}maN*cYlF+<Q!#Kfv#7n{?)7b3ptDQH&aT{I@TJSc
z6Orhe9-d;h?s=E{8y3GWO`ob?7EiNhusoAxO&=T!0j5g^QyWuGo?WS7q@us~+RR#W
z%k27#lHNg%w2LE4jw(yNIPsbtUl`u8x{_Fngw>S7%=W;HW@^<8qv*&o{cFZf5ihzk
zP`F^99b1iOE#*~uMqhp%dnTj+R}fVD<l+vqGi&#UJwifGUWoC6E&%Ia9el)E^Niuv
zsAv?U9g13GanO0S0S^8)TI<$n$~vSqn{v6M{b)hDXP*0xO_Qw|s0CN|I3^c%&<Hfd
z^Bdc}cmB_&$$gYtyyTo#=FlX)TmF|Xwpr}-D>(fyJN(pEzrBCmx^}4&>tPG4K!n1J
z&h1;Rz3ihuE&W1Ob%mCu=5jUpPD7XQJ5_`Rfm95P4tKmL_S!aAKFjna{KR8)T`yNK
zOyJhvD-WD1@weL2InaBHRr-JqxPVGR_(Z5AV2Wz}i{mfr2bUW@Wj8`$-9JLBN>fu%
z3YjBy{>2HhE8~a8SCvwbMPY^)QuS{(6;sBb(pytdo|}+@vaS_bRFD|y>EwI<#HAEe
zC|c6Wk}!ry3|v%EiogDeM_-*Uh_9VzsML*Z^|p01TB5R9SAErLJ=I0WcH2COX&oSd
zGYr8C68wpe(xM_tNVYqs@fmF20Z-f0VU?YwB7pVA;EpHDw>6kjNMW!~ZghBWlF%<+
zv`lr$(zRQ+T6kP^z8QY#SnRD^rS(0mY0~g_(y$pZ)@S@ouEmrQD@SBY&_WtOh{2}c
zwm9|J*sJ_S4{N-#)h}qttw)ECC;DAa!=h80o06`0KK1Y}gA>IfU>NAnAZEB7Fxk9h
zk&5aPmAABfN*Rad=9DW}pac9Mzw<?}5;#F#WQM`+Oii)X_t;=$bFJLFte?$!U6NwS
z8Z~t_4RuYmS*f>ZfI!W3PIX_rXYHpN8!hy&SKWH2!Y0st()OphtC(z7U#z08s-mid
zKT~?-;r#;MEf7LYYwB0d|JP6C&t9gJX>u`~0r?i?kvDz+Ok<;|{<R|SDcQQG?bnzb
z%j<}Ifov-{qej+#6^Q@K)RwD4rAzEwVmlK$01+QO)F3PCp>WpTCALde*aXc*h1|0@
zm?FE|7Ps;%*-hP)XNk@xZYnC9)zz1(sV!4kq`SjrZ%}<;laK`vM|zUd59~dyqO$4D
zS!?4UgkL>Cn;`|lJjs2W-kYXR(XWeM#fTX!&$NY)WW{H?XQMUSzSw!g)VrdvM<j;K
zLo+xs@7PX}j$wf1)o1XQG<0+FRnPdDTQ&VCia2yM{&qkfn%zVoKTDXCly}-1hc?|U
zr}7&fk}`bEPChocTJ?g&9v{Bo7_XsL#`+lgoZR~$shNV42l$Hy090VTysQU^y3{o_
zHPkd!7praBv-ouKzGQMcLs`U?m<7<Ebt|=IM`L{bs*wz!UqB{h9!#HBQ$UM1I7RP1
z)!JgcGZ5vO+EN|qnD3!#zEzp^xRHTv&B4}(_#H5|($H8BHW_TQnrx?`agg=x`Z~r~
z;FY+)^PTu?HKs4a@{x=hAFFe-rL(8s0#x!VYY(OTOneQM_<bVyjl!7o8-q*qq6Zts
zR+R=P7B(r97d8<xMi4g&V!<m*^<vodEb!;UlD>q7yfD4fi5ssr7LepM;FJ|M`3@><
z!kJRo#L(Dur{S(W4u@@TBwl^iTGT$&#gWkY62?Fe1N*Qr(f_L>57wN?ds5RizYaJ7
zkJp81ZGt0^^|kf&NCX_;jG^`N#C)if5KA~+soJR|qywaQbduMO-RIZXK77(dr6|n!
zCzN2Et~{q=X+s1YUXMhgI|;ZRD!z?I>>1=JZvzx0A>#GZFdf8}ZaPcAmdf)&i2y#0
z$0VZLX)RqWmS99W4=w4%xAl>rdXG>=&#o?zGc2}13MDrmVG5ZYxRypZ_=C5$d~$J6
z26%uU#y`vNJjmvc$h351M8IHTP=tmiOgF2GH6nRa=oDUGBd1v{8cRn6qJA8s6W&r^
zUDMEl>SlK<+-<hya-sV$S{WUPmc|-5R1X%Rj6YL*1oCQB)}v|46~B4nTxF`zIK>jn
zVu|v;4|FNX);(Rn<Z@(jp!S2$<cWtUB+MB95jEflfy(9LXnZ<fDwPh87mJ;AR$eZ5
zc$7z(B0Cfu)r0QoXN_<LLPj61r2_$#+J#Dhf|sE%&14RV2X;&d2>SYQ&Fz!V4iP!>
z;<fKr?ql>GHGQgn4Gzs<d1fl7Ee5SL6FW<-VGTf9JaJ?yN~ej4?qagJ4BjkSHKTUW
ziKGGW8T`3Qxe3!u;gQ(FQ4Uqe=x%AJp}N?tH~wR=EgTWZho<iKW=bDdIQD{<j+NcT
zqCh^6^#>{$+t>{6=)?92`C?^*2K<$nDVWZh5!oCuARZM8nK<UOnlfhbCXKz?MsyRA
zOJMMZdcnCk0*zE^J(#><5GqiJxMoakO~dOp%Xb<QIh^q}OU3WZ=hylo(`C+7iT~F-
z;DGscz&&lIWeogG|K>lEm$F055#ti;iy}`ZHlHcv<GDXcUV#T+p<M0{vU0g2+!0)2
z9du>OnIZuW%IiHM87jxuKRX>(elnI&$NW|fm6Vjr{q9HbkeACPPAHeVbGPXZ14Glp
z7mg*ghqp?5xY7ybax<$7BVGK`4+K?bH4!_h%+C1?>z*Hy4z>Y>$4mUoSK8lSaiJ!!
zYv`8`vISb81^Ttof~GIf0?nSLgGwC~QrCYARO%Id58@>LKgXfc_b*4p92S?2XGz<*
zuQ=cSECEr`t5<?iX&;GAA#(b}FWE2uBYFj038EzykBuK31+V0O_aDer_pOL4;I%Qt
z_<?U(z`sTysPwZC09Z^ajowQd{<c^86Zcy=P6CgY0)Rg>M8~vuz>yd@3R8_lS2Z@*
zU^*Kq{5H0fDS)6-KVQP&@EHA60<pUq-BX69pot((Vsug|sq>XAV4jFitiuOrKXFyF
z_RBw-17P0Y=F0_IpauHBqt}{lv!Lk<v_Nm8=^Su!sMPbG9B@C)s{>AkkbaiPFwF?`
z;XflU$DMJqV`R!V5O{j|v*I_hD`m&T%SL|q_s9=pcNYKiC-4yc^GDJ5a-8&v|J{%L
zZ-3-}^8<J&?0_5j20U0IDN6|9BqmSP#}oB(MZIi3c#!(p#J+(}3cZs;{<T3R9<>D>
zZk8Qj5mM9^-wiN+VT#iQTA&5`Rnmf{FVF(bp8gM@(vR~Ut27Rk{v!iPKaa@QmS%=Z
zGH3-|KM5F3`Ubq)4?l~4__tUAD*a0&TT<eG`$~4q1eFE_qy57p%wcgKS486oWl)I=
zLZxn6e<yVuD*c)qa1tSxOGPtDXv!eJPXH)&f-lelEzo~EEok}zEzs;~hFGQfcfh?G
zgG%%4fP1}|G!B*K?K8BVB!^1iA;(GI|4RrS@<1gyRQl#6ANXMy!b#tQAW4>j@*B1o
z#7O{4D1%CTIaCtThWJz#k329$WU#t^tx#!!7HEMMXn_`JfhN*#0V+)kdd8NNlz$#u
zSeo&(%=`9lMemyoEqym0tE32(xTD`qfJ)MFs3aMON&+ftnB4ywD)s#e9dHY@Knt`$
z3$#EBG?9KY4!92hmHs^gRN_hh$%R&x7NF7sEztX+nYNUFz&5<zfL#rTS64MOVeq{?
z+VD)9{68rD8o0DT3-p_#_Xd>!(f8kq|M}g>58uCUsPz8;00960?0pGb6Ir%?&-9y_
zo_RCVcDI5cJ1Fi;tGEDyfMMS^w^m$01VIrMao<bC6;yU)-xpcKzJ)*%l8_J}Kp-T9
zkOT;+?$_@>?>{{=zgLw+mMj=-r(1pbCez)&s-o__=bU@)S9MO^^NR)G;NSR<KS>7Q
zz`u>nP^BMO$^e`aO8h$@cca2z5VN-RTk_3f)vv!?XJWT6sx7Jm6mGWk0pLTBk`hXM
za`^WI;6zmEdl6OQ3#rm4kgN1DQzgL!I61^&^x|>7IQ$TUGcoz^c-EZL3Z22>^C2%i
z#rU9~aeo=fe5!a~?=Te6!kqFKij?S4y!F|mU@*D-Dada5^jZCRvk~7=D>pSb$8X1`
zHOoKya_LuJE!tpeyZ?itO8-77{qj)6x;{pqqr^vu8LCt+q)K?XRH=_S+`nL|^usSf
zm6QRvw}U?<7|F($J@otT;dg%7rTC$df5)@t>{d?XmJ(TPkPUK*$;jttKiFs7Uq&*Y
zD&E&S3`Mjsr>LqTg`X8~efB7dkz_Up90A$6#L|Z+;Qr*6;+doHYTGr4j*qvrJ+sF4
z$d$yidCghn)hHCYqwhls!2SEA^vgpL>-rddjuIasW&&_?sgiU6u5ZBsI5AaH<|=&v
zR0(8&tUN;5lYk>njs)bD5#U;8?;m`+U?i7NE^H;RpsaI@12RE&0wx=<F$GL*;<K^h
zib5X{ri6VKOD4CRKvz<w1%OWzFyo+w+4^Vdcedro)dB-#r*sqm?lyppYhtdD1iYX3
zC9_9io0#1JQKboRyogfq<kV59KLuq3=*Tz-)^=6i4qRg4ve@Tl@gVZOH2wZDS4!=)
zkC`edU|k=h&r#wd#HT=&lmR%!FgiXuMC}>sp^lEqs;>ARAmD?1);OC^?WOnhjg7(s
z8U}gkgkr$e2C((WD(n6LcW;>hr&zpEI<<%1OJ%Xgm9Og;0s$T5ro9LK&axa>3p|-x
zfUGvBrvlh(2iUqKyickmF^V2hO}cTAN2gKg-PAGRe1R6+qOQUl->Dt2*17Tw&BDKz
zrr$qiOG!*9KUS)wh;@CGK1Yd<55IZ<PPB8kGFR#6Qziba@|L0kpF-5P)S$cDDfAHz
zlgne#Xe`<QgU1<Q5BCsSx^d`%!Lf0!xau<W5AOIFy}z}qr<FR$o`h>QgRDswrK`26
zr4m_NRaI48heWnCp}V?A##u6IHS@tK_QV*IHo%1L%N2lpPA3m_yCmX})pnmPrWbF<
zWEEkt4c!c~REbk?lFJ|Nq?4LZjkT4?Dq;7bwouJzO3%pnsI<G6m&YJk!gheo9wc=!
z@Ez0va&s>M*(@x|2>lvcF@!<h5D%Q<bNC$Q-~h9q#vU6NmD`-;^9BdoQ60$2hU%(W
zlI+2B(OGO+<u)brT?9hmuqG6jp19{UGI>}|Z@EL`LUO?8PD#tEN+hcZHq;wFlgH}o
z>gvT|iDXO@0fnrusj6?q5QjPatg*pPG^M$su?AU(!VqY}dkRF_AAx#HR#ex*F0+X|
z)UDT&`ejiVlT!;T<2qwG{j{;M32;u)Q>ZJo4Ry#IR6$tW9Y5n;VdfsMvN7<RC+Hf!
zObN3l;dcpq#yD$W9(mFyh2t6{j?WoIb}_EKsk;x~&!qH@4AI#TX_{bTm^C+ZL%l2(
zS+7&~34E3s)6xDKLqWBXNa)5MLK|g>LlbZ0D4It@{b(Geh1f&q(D~qm#DHa5`y352
zc&x#<Sb|t<Z)UxulrEZkBxhr24C%QuU+c5y+Qge#0GBC+E13!l24ksX{amPFzF>TC
zsJ&(StgxJL+naL2qx?}y7h0ZPnB%kUv$d*GXd=j}s>W6<afk;=OqO0`dXJysbCgg*
zVSEZyNg)FCO9kLqzghqeazTx>y1UoxcUY*XtklrZ(AL({($ZdIre$;2{c>h)dum(j
zt8<|#p`l5wt+CA&k5BHte%LxL4KqN3TswRR=pTgs_Pm%qSMFLpPH$!4;03FWUVHtr
z^>)**RaPuhQ`0b1Sz^B3_VTUjzB*{3l;{GSTTo1@jy)d~cRIYNaj>_0pt$(lj?j&N
z)cx|$pZ)IZMPDt_-)6NVtRVC?o5Yy2_)alM?2^!eu$`7hE52E}Oha>-rsgV@r4~Ev
zuHLPrHu6Eqx9IZn7(~abUWNq52c1rAZb?L;Q$xZFj~|MRxnTUjU&Z)ajU}p@Dyr(=
zT6z1YbZ1foyrIg0`k0HsF+t}`syf+1Q4EfBr6jqUA6>k7qsB5dZEa0hlI9{w*0sGt
zH^-j|dKnl}SS8V}s6S_4SCV)<_;B4|?e$9wkX|9FHu3!V{G&2@>*=3NOzQ)gu&PPi
zQdzRHzkauBsAXbmidEj*5FLIoa=%wVn8&yNma1#@)Yk3sI8}g+u0f}rvAbomXtU0e
zRpuVPNyOA%kPe$3M2xEkYOjYY*jv~(#+ansl925o8~>;S>vs{X-|f~rE>?z@4vmgB
za9V&{PCG4B78`1)sA+CmqI%rI{Z%T7(GS1MlW93I=Yt?Elva@;=|SevJOtUZ17y#t
zD>bz=wA6Lf|DvL?;&c5I>kj3l;W@%<>V{-U`0A}1dK3KYP}*0Qa8a&2Nf`qm8=M@c
z<d&bE9>q6{zFuOueVf&VF!wugUOq`zZseeub@<K~QTCg?e)l`I&;Ib6&;Ih|lEo@(
zx2qz;wz`}<<FGNp-|>1TE}jGqa7FWoM8l-USs%P+dMYB9m^%s%&t;l&t$jv=CB1bC
zVHf0D!W*q|XU%#EDfzEEl$qW!Bu#VQKG$Fp28nNgDVhaKpjn`ys<CY8lCL(HIP81Y
z5z_^7z~S-Uloa>5XH6aVMU!F);N(ODtMU33TX}k^=x>O+1lgx|V3_CT0EF7+Rhp{m
znyRX5-|q49PorcELHFnLDY+FhdXeKjeumFcLJ7t3DFom?D5~^p<tk0Fy4kh2ORn0v
zu34?~M@?;Y9UW~oJ@r3)vsCxD>L->v0|k{pMHyge0a)w-N@`=Oif``I-m^#N(A5%r
z37p^n!Y{7D!j9rQ2Q-h_>0f!-)Y%614K&Br+&<!Kx@C)|_DX#{J>3=BOV)k6<Iui`
zHILgSC}VRwG3)CaQ@a;=ot>TZlA`m*=M<t!WOm89!i%QXJJ&4L($h82H_$fF{p<4e
zTlP9VYrIPUd$|I6ZO!@8M|3;`K$rsNmOx1vP+of3#_W`lj+?*N+LH$~HgD8XTe3v+
zPruP$xqic$@_=k=4>1Op2WK{zSjT3z4bnmS7(1mU-S6C%Z_R(NW~ipEsja3fA<0s}
z(j3@@c$p#5uCPBQ)-N-0y+dFxqcNuH_L1WXN)JxRjcdyYb=Y|l>g@^dxxF=9vmv;^
zuMott;Yz2Rvhy-zwe^7G^Y#b0!BJu&Irp^dE^i|>bJty~Jxms_UGiJq70b5<N4Z^3
z2;XNBy!Ai7{ra~W25Z)yD)cLy!m_8p3DQ{oi^|(ajw#q%8B__<?^gyp_84Ew56Ng~
z%fD84+tG8~8l69>>nvNgOm+F!zumreV~}rdTM7@POTJ~9B|V#%Ok5uwBr}_Cm0h)W
z6Wg=4Hl&4R5D74ZNWglZj7;(X1MFo=NmvK!^Ufpt9=Ald^e~CB*qn1tCIPbKxpqTv
zk$>?dae~94=9h==I4ic&#f!dCHQcrd5poC-9A;#6$=2n`>z)b>CFZHa7Oy{kq4ve1
z|M-iF>QYtBHQUv!FBv%oo;Uq#xYKg08>NR!Ks?N3q5ngZ>gpjKOUq^7g{R^QAzCqa
zymGC5MuYLBoO8}5@+<+;ngGidfD;|u`Wq$J>|G_LG(T0EZ?4@Vf>hWQ_3@cWO{u<T
zw`?+lX2DV|b<JgJDqpYP<#6ByHVQLF=}pCE`JUf8=j;YE+XJzvr;T)cX<P$v#BbMJ
zTbj{JJTCW)Gi0CYW-g{H-7U1%t=3tlDjc1`>h;HSe6u(h9($xOzidV?a=gdS@Ht8-
zp*TJTs`Nnx;6zl3@rwuG2GI=(Hk$$s^&E~x9eRdID@CDebJ`2f$KLkaW^!e>6HrzO
zRF(sFHh_&wd~ru_2dOye@bYU;Yl4%TA9jJg&}u)~19shSN(x?S4;UOyspzj6>?(+{
z54&b^>1k#~7M0RW>LRz-^i)R_zP!Bm(9;7Ur4^lwvDuDz*4H;y&WSm=Av)MI)_%7v
z;?SPAy$lyj@+KMG%w8OUfJ1i>u*9y;#u92`K<aJZ^`WUdo)B87bL)A^`_e~rJO^;x
z1K8LD<yH5P1t;B>FEjdTwcY9H&}>Xjbz5s`3g(Gd)M+POhlq84$>sHt4P}6%HDK);
zUr3^mhRaH>Z;#x+&gaYvzenvEC8*ZgoHl7mS_69=<8vh174`?=9#!01iJ=rm*@s<M
zTzXSOf{}Dg@)1v6H5t7PcF?uGwKAYQyK|Ha3MNK-S-m)-gskqISbrhc^ieel7u%l|
zyid>ANY(N1-ONWt`8CmpV*QL)8Cs}p@%MRH5R;!>|773G(~kOfch{WGFQV6z$@$Oi
zE-aw8BCX8{z=hw8$t&q>X&Y^+Lq3k)vpjh93ddv7hoi6=mF<oBiA86vFCVrx3{5mo
z>}sR&<Y^P({=B%i4%ZzU<G3=&5Wd5qXYC?;ZYvCnyW?-X>$2tkm&JWZtUL+FT-)mt
z>l6G6)e_y9d&0v&miC46ToqWE(*?=1o7Z-yRAi;QF5QePENd_CXnT|$cNt-R1+t1f
zJVbnn^t#*m*AH24J7Q!Wek(4!5QC}cprLCk>9O9~*PQiFC$D+b-829VW&rGd)RY{&
z#_5XQfs}02pmf+ruC<FbSVO|a_h<VaFi@A(b4OiRYlTI06s0RB-q8?}l7pm_<_o~h
zJJ-^UqY0SNQE;%d{?e8Q-fMhLKR^BuonBPmR9{_Fg=|EliK9#`wxs03mPdQn_?($O
zTT@e2-PBe`<}^3e<vy{xaNSg%UXoEQPaAU1xapf1so4A6NQ$U#D{4Tul%!yuc|{$y
z)HOJ%Yn}M4gATbR7Uphw#395y-s5NZ93_-c9KTus?(br%1P9>$@d@QB{aRFsSW|yW
zXT9y>&BvlTVi}<D6@W0ovl7_r0601VmCyoT0XW$McAn`4BtbtLM|!$GJ!HAt{gT5)
zAf63^>`p;ZKv~4Wbr-XYUbYZNi<mX{&!{*#{^x<P*rFs_Z(~<C1%vFXzm{?T__kI4
zTTC7&G*kO#2UGYokdfG)1Gqx8!|hcLhBXFtgr7|+1H7O<c;{5~Nak$J#T3YAF}lg!
zxDEo5LToDTPw|Pn?DnP0-KD20ONq=m*UoOsH8H3C&5|HGo(s6z0`|^8MGa6@5a6*w
z%}8_S{-?wj10u<=Kx!m5#((v$i&{27P6bd^dC$oKaPW#P?LoH_lOFBXI<;|~Z#?cH
z9c0Ouq^<A^BguBH0ekPq<&>2AhR74DF3$gX;G%-kgQyZK6Z`6@x1I{r+kFzfjrCn^
z9HMR?8;>3of4#_OF(qZ?`K8+<jeyj~=IHL+(0%%r#w$*Sm#}J}6@vP_>xt*aB}RYN
zIUewOq!v2T{gf1cVy$VImP<qy`Bh`%L#VediuYCo!7#|nAeI51uzvF@dPPT@Y1J1`
z>u6Xn-hM2K5H}(U@AiSU$BS<6(X_s-dAPW!gCRqkBI$WPDeuZ?XujsJuW9$qj^ojU
zIrc0}Sa$S!RNf_D!V!Mk)}G$J^Kwo(@VY3_%}|#1Me=lrk8dC0z|o#JR=PK@qEFPN
z3`!y3X#*f!Q?fB*WAGrdyDH&p9K3VNd!{8Z2=+cirJPyodVj@{veGU-IN2pAJyIIs
zx*{ZXZ6pQNH<uK?#o9$0OmA#{*`4QqaK%y?mJoAdwMm$k^MfoBblLTj@})FyTDQ#B
z-M@5=Sa!O&winIBzI<e>=eu)@e-b`=5S$Z!6;OwopF|>bj_=swpD1w_n%~tu6}L|<
zc65;T8)Cg&g7i{cc)?}4)h+|yONIUAVhTP6GGE}I`E2>KwW@0H`EqJAG!}jir5x~{
z$9w!-pQD5l3PF-8iMF65lL*}(4^?`%0GuMhxQ{3RheeV1TZG%0U5TmbC5pcc5`H#Z
zc+cGqaF|V%+*9)iyb(S{Q0h~D-)VVp(&|VmiVg~fh&}h+GtWB*W}vQPm<&b%H8;>t
zUuVT<zgJV$T)Jwdp5e-s%e7bO{dwt^s=xW%eCdkox9YmvL1>+M0|~c<WsO44os%m1
zblKKDr2x;6N_m+E<l>u#8}8k7+O<bbbDf@nzMiJx(m$xG>wdm6Q14h?CVqI%cYBIZ
zB`2T)c@J53)!D+=%Ifxu>OO*4GIVe_4wHGw8gbLi0Vu76g#$^((L1V)TGE0^xU|Oo
zg#PjSWu#J2v<%3Wq-?5W3)s0vRy4n;D?NL7x&Erpey_d&=_R*kU2r!&YGHNzxnys{
ztgXV0U6M1fW5N{?HPQgwl91IhgU?r=UE%YhwEkgp=?%BtXAsuUl3G~<AV)BggijB(
z-5Idm>PZYrc!ZgV&$?s-Nx(UxwCVYRdn@kqpn&xXn-93z0=6D$1q2Qc<bhK;#KOz_
zO^zeXZ^hL15yeaOAUN=}<;96T`p33zx*yfhLlkGo&C;ewYc3HL^^dEnZh4sd+3vnA
zx`U)W&oALc>c9C98x8${Cxy3?kvDBE{SY#=56SbAu}e}0W`qrnf}AwiO5stY7ZABT
zXrP=Fd>-Kb#**P{xM_H(bz7k&cT8I{#NdkvW%qqngt)GMmWCb2jbm}o)~AISx<!=w
z6oCW=C<`KM2PCb1MuU%<%dWcZhV53$5`=c^1eCy1x-DBuZ`mwBUhDdwuMSypB(}6A
zuC*rOklhIvyPL7~efT+F8nQrcKB4%g58}9!%(MLb&a8lAy4o`Q#*AKWCL{0IT7=jl
z9w#@`dZwuoh$NTX@YgW6U3&0b204$z<Bz11iU3br`QGDa`5YybP!yj+0PYv3N<Z=b
z>+iCu68~4DN~m_4h5IXGk5`3wIJN;lNKMkf;aQ|%dVzO)m5YO(y@tW==jhanoA*E1
z5L{SIW3UEV3j+5>9sTY_Lr*z}KRKL5O7lCoX^rmZU+bu8XzT0f=<4X`Xlv{0XzLj1
zY96)mjE%t#;H4M58Mieu3XXuIudum*n+<d%X@*$L0puq+lSAmin)`V-yu7|$xBAOv
zy34e+b(ZOBeWj|s=5sy2O$XA_a6@zcmj7mS5_g98VoAn8i#N2OItgh_CE(};*n4Ka
z#t(@@NYFJSub^u@>;Pw{8S3M>_eptQW)nI-L_6rX=8gCU3R*;!q$LSaD+j>NEh$fa
zyVXTO-doohEI@h#P%CXvD|UdbXJ)Z<Z*2g3*Z6`qGHo2+Umsa`!^>MjRyu1xHwfP9
z4HQ=c$jW<8&VapFMiHLHg|sl13K1Gldq@uH;v<|?9CSn|0qA0=w_XeCt+W>0Qy{xy
zgG>Pv-qps*4nTP4ye81a)+iVP$FuM$;rqV!u~0vEw~AB?3Rtu6Bce)nfIUP;%Yce<
zz|I-4@y>cp7~+cVFiXOY^GjHFyRObjN4MJ<Rrk`6fVDH=D5d>&p*-!NxgcSs&?vAF
zc@iGU0o)`kS#)GJHHWAnNbYS)j$G{$y87tj#;$~}#)PA*AG@pxO>T}PgS|Y7mm2e0
zyMzX1*=@VXZXE$+xqK<*!Tpp)l@x0o3FkFh+W~vrb6(@$Xi$X7esJg|Iuo!%0G85c
z`9mNh6_@I_U#8!X(u;#<Y7uU5bcQNnx|^Qd);Bq->Kd9rd`0APh^a(qyteYa$2<BQ
zC6rhgJ_V}u3kKkRdJ}+yf7~DbzhnT8|HH`SuM>c)Yadwdo}}TCl#Uw^zkQKMm0Xi^
zF~cm_JK=h2)2}#O4EDZSG+0(PSaQ`n{F3wieDqK^$c7v)E;G#4>a_9h8xNB6%Q21B
z4Yjq^H9|Di)^wmT{rzL(oH@Bl^4*plVB_&BA48L|wV;3ra>~htH^R-WJvO=?xt4q_
zzcsH4g{sMGFTI)=amswxMJxBDYze17y+}*kd1??GO~n<$w7|*n4ON0@jr*)?;C?2x
z&!$uFK$V;UJLz_d?m_K}ma)pxYmPP{X1i}hDlWY@w8KVbZ*2hwmq%p{ubOM_pSQC0
z+~|5#QdYs{yKmUI0OiOxWX?S$A17S+*{~MiHx2G7dEz4}*gU}9P8d>rhu%tS!80`<
zrr__FDrFRROcMo#C0yH5TTj8FTgQ4{))xTI@H+`9dFBeqgalQZ8HM6h3C3_oS<!cf
zk)C>C<>^7`<w5$MVTRvDmUR>fzm-^swM%PIw%t0;FC}5<&`z2vy`}ZjQ0unN@NLV>
z0K_{`rO5$sD4{(w%tfZ(n9)m&NG~>S$$1zWQ`|!#Rcd^4Ti5vLVwaEvLb8Y|72NZ%
zm+w8^&F3hg!~*dP<|_TaPas$6ZB*&k%T=mJb+5O$tFs$;-qb%JJ|-`0l$6^xDBP2V
zKSHQ4Id~$@+cUBL?%nzX53d(~2a0M5W0R1(naITDU-jM<XlwmA4a1=;(g|5^OE8**
z$-LxZ9A;%5mx-avxDS6oz>I5+^R-@VW~6cAaw)w*?0YA`vG~rM^A6UR&0LeRB%TiW
z10W-zEhF4%=LJhdYzBrdUX!M1V9(>`q%#P_jor>b84^Iw8!VemBE<nXtS|s);2Tj!
zDw7Vt38_^@$xVB+@I8pwOquPvJSeSyTvdI?-6F`r`f>U@NKa-+QP?`N3MkJyWx3P>
zlGPPSS%o>+-m(-Xo+GE<AWAIr63dA=;Pq(1y`8Ov%uCLYer*ymaqJOr92Deq{@eiE
zqpGUA?&cx(7LQY!X;d-UTBw9ap)umJrO3_vRtk-xV{8Ntz@-vq0&s7kO58p)DSAi7
zMRnhMClDv@A=EGW?ugDn_mO10hnwHpr8FqdZs(U$Vlcug+|(^ude*$H^_!N?k)?Gn
zYHK47+WWiO--@fB4*!WD3c%g+LHIh!ILici865>zymtl2_Zy>v(PT(3ko;}tgfgLj
zmy^qH_^q(9)jf7Oi&8Sio*aHf$hzceGLQFA+~-V!Qw+{9mDJjWZ|kG6$E810P(lfL
z_!OwpuaT?t!3E%OHP}Ns`w$w3ZWi`di=Xr6OGXyuNKa7Fq=>ymr;P4g-?#tTO{0JU
zPk`LoJ0*O=t09($1!`;BE-^U~)0M<lU}t0*c>_$49gj%}aZvX)S^Y2;H`*ipSMcY)
z&s$T^BDS72v5L<kPP|!N=wQvsk}Fn*#=$zCsmYi@*4(e{1k6};{25!-qdN`n$6!XN
zqT^HjV7YH$xRt)?c>^~fzY3_SxaX`GRT8IlcP2fu)Cu}_!-)jk6S`<Wrx{5)ISR>2
zb{InAxQXHYSjl!R^^HUI_dU;}WH!Sox4QOAO#I(Ldh)1}Biz-pqHxO{=XOcU>MFv}
z?EG?9ARh@-R{+k6P^C9%)b-8R{TI~R*;+^lv4{2hC>A%~4<BtA`Z;OcUXS6F?dAu*
z`nK*G$L|#ORf{j`2P+mN;Sm8V8JjIfp7N}8&Er`71pKfumC++k>wY^`0=ZO>c&{ni
zX1|dZ^gkn;=>7KyO;kym1Y>?{m)4-XPY2#2rQHTQgJjH_x6HLYh9+nA_a<bMnlSjd
zd-lsum>2~n;a?7db9Rb=)4HEV+UOlOHVTkF3)b}@&j;yf*~s-9uwF1ZfQv0)w>PJ}
zXF3Iu1r9yJ#UEX}@tC^F!zYdOevl;?O~B6YJr>||m>}nMXW^qztMFqEQLoT_9n!gX
zN+=-*3k|@{P^Awi0H>r%5NIv!iDqu0D=iOSjt?n7XIHhLs&m_l!s6}*n3`Qj2w&+}
z%=*NgA#$KhBCqs#-F2e?>pf<+p~m+b0;_o>_>I#9D4@{VpC#BX4-|ch{Io6YbwhJQ
zbzKdzy0#J7L_&2A)47v#-fYkQfZr)G8^d6MJdj^W%DNS}(!oyGGw5mJvyP6+ZYE`z
z&ztt3Qw)$@LMV$o;SucSbn)S<+~T&DsupxzVNz9u{Y{^pDq91z-BTc^KQi0t3z#6c
ztTX3s$VM;MRX%5)r#)$Jecgg?C`zh^|H?$gD8#@8UUI6+0ehJr_6s)@u(kurE5wo!
zZ5BYLmz0KYjBsD!6&!u&QF~g+%xCI5&97RyKPhWUZmN73yk)<;bi0R*Rg8l5_QhrO
zH4wUEW2ZlNU#Rq?w?D`h_SPPH;!mh+j5@wI#KY<0BS~3FjoK+G2lM7RI~#C<^^%l5
z_lS&-^A+jsv=(^fgsfWuuztOQo}@e{qZ`<$2IS-C@4i_;bTPFC+m-s#%J!_G_2J8j
zA%$%@wQWtWlWHC)CgHjkB&x3+kDa8xMCAdFR)CdEdCIm@@1UrR7uZTv`{P`Avw+J8
zm!z3@6(SkRC_@V|>iVvN^8vblHu|g9*3dk^8jvir&f;6FT>-mQL`w2z&HSw&-l<{~
zsJk~My{ErtxUBNRhDa9!kD#c7kJ?g;8k*~?YsH%djNmZErKi_Lx*B){PoJ%+g*OXm
zAamPW>R-G-7zVAD@*85kbWHTcqw~T&cAwZ~9CjxzrvTl8Y;I{R%0NH#dvV5R-Tp|U
zE7e84T$ssBR&<K3OOE$Y#OL6Nl~i8e5EZ1yw7)os_~Nk9m#1%3bk>6cWqCLy6vVsb
zDt%Z~Ng03x;ZzwCFXc?G@3xI=mjC8!O%)9tJ)LEGnu}Dm;8e{m!bH*XSsN#co$mw{
zq(-(pKIp9CV5AjtI<F&VCc8o~HHu}|PH%9xOj}J$TSrqzQ&nSy(KkE8EJI%xkl>f+
zbDvqKw}p&JZxz408fh;m@LdzM_6q~`KYX<rvE@SHImzwd_`|s3yfa(Q?EKS)6{_E8
z=%_8zT(xecg}a%ltCzY_u!&QAri{;?C&oIf(6>GAJLs-ot^I|%mWsN@YSCZ0?Nc|p
zu-gtOs{qR6Z5JuprqTl5rn0mYuz;?yj?Kc*=>jUZ<8Doay~q01I$vmNtIgW{&_ull
zG+f{J2TF88L=Vx8GJ5YsXLM%t5~BCsgXki<(TQ%1-n$S)3!?YldymeO@9+QKTWi)`
zv(}xtch|GeIeVY|S=|ilem9r(xu*-2VD+j~!ZTR9wPJZ+wpiJ4y%s}Fe=|N!nSdB5
zTB6LGyFnjVqO3%b4B9On?5H|A91*wAjECkPs_XZe*Kz7nX?A|KRYWU$>0aDdI4VkG
zJ0yqVBRq5&wt#isd-u40P>!C@d}|pnLX_0NnRfG(i}7H!z2~=LpF!pO1advo7@j)N
z*7IRxTsvAxHE0wh*PcKJ6C-I^1eRnDOPcGK{Gx#lujpk8+Tr^x_wT;?Ni9aktsPcd
ze_??@C0|@$)UjC0Yqr4l+!Tf;N(FH!l)0U*h*$#B6?$6?i?}M&E%dO6eA4;T*S%EI
z?zmHpla5kl$IF{i64j9NZ7;%x;<)6;%)_4%+wRO-vfqbqdK$#+4{4K^$~#O>s<rgk
zXY3>s;Ogw@UxVH_=rupo{;-0>O854x_N;A6Na2qoeiO-RKkAa{ej!8bY=U&B0Ykow
z>#hy6b{LiD?1%4<edf||tx5|(AeQ%((g?@J&u`T!IqmPzU7=6++Qp#NO<aLg*@4%K
zwzbNdQu?X^x0s^CQ;GqVElMXB5X<EI9w-mJsXo4B(5LOB4TQ8+X~A3fmlLg9`Fvw(
zO<&m77(^XAv-DYHG^G?Z^`)N9nRM+!*v_RB-Ao<REfY@gY9Yqf<&8W-+D=+FJB!Y{
z>1K^)#*irGbVV@l6nIL@e)$_Z`sM4WOCj9PXQs~NX<Z3!cT@t?Z}^PLJ8VsUe0s@x
z?b`qqdjs6h;;*}!hISGc^b+;bH&lmMB)Lj&B6rgRYb)amIN92Oyc6)yd@U%jWGyje
zjF%Uat4NLCrf`Aqx}mNisxOOe_$+2TQJo90>gTO2F3@vSRN!48KLoOwM5OM8nEfT`
zNA3Hs)?-bWm=+MzX|B`M7W!99($n;jZCo#wL&(_q%n&m}DJ7Jt<S?BCt*<k8vSM=M
zm?#5GR0=PFu_^te*DfDzlgvxd*T)+{?(JulpzQ`hhP6s}?PqP?`gC1QV>O-_Wxw$?
zRE&>XV>ybTe!!_%BV0YCFblZ!7tAF|e>%Uuh_^lZI(zi0fX;Wi&AvjSX6tv>i_J{&
zCYN*-D!%_KgKv7aDp2fR@N|rg7Fio}pC=p|s;noMalGu7^e5^)yr8taFuy3b+4(FX
zf4f3~$?*3V-Om)?S9}>aUH{s(s`=!?!l(76nFC0}nhIWbGF7X+<gl%~%;eWTF3J%E
z;#Zi8#PKgGQkyt?y^kNC1M|eWFdioi8D}1sWU?^z#Y>2_XDDT8ZW6jgyrNGTTbUaV
zmAl4vruTA9mii)%VMM)&W=^L#t8&^K-n=12LW&p(FD<K(<Bi|V;_^7yj+vOZz5ymx
zu~-q-z$>b&p&xqUe5;!}*v>hkm`mp$CXod|@Af2eGY;bV;Xqj8`j0$QXCwly=;1Kt
z?LjtsVNH#czuTm!iNd@n#y_)3_HuK~32m;F27YnoFw8I+y=g_8qMxgPHGX^R+`Pz-
zV!R^bGal-7A7QrLFCf6#yMb+rYTggphTUp9DU8i|CJWGzUcK^V&TSREGfyB%d_aK?
zL4kZMfxn$x;`k%_a!BLiB8chN=*?WUZFi_#FUv!t3(M;;A+cp8j&^%=^`6&_8+QY0
z`XbivM(Sma#N{Kcqu<PR3<VTE2JZ~Fi~dCB_l|Qs!u<br%Bh1_`@z6pAB;;Jy|;1c
ziu|gJB%rRiRr#(AW^g=9;JaO>!+!qCsXV&>E}gVr5-y}SZyhZ16e8`ob4Ky?CKGkH
zlBB?7S-{aNNCA-FYrVwPu?v>O5WFFH<@9pE;*#>*Kk;SW{*0$t*erf_P^fFSH|($!
zu=7(qmBaZ%1nVQVsp6m5-e(CNPGYkdtT69aLYEsV65>`ClH$Nbq(?@n-xXiht`(s-
z`0x3!RcY(p);VW!Ud7DH*s&Zai)8roTOAa-)uu>K2A&7cdHxb$?B8cY62a}H2ye1;
z`;kc=2fY!;?Bc-rEw1C{9s6a2yghMBFpCy+5f^LHB`>K@v|5Gs!OINl5zFj3p|#%K
zS1bX2V%ipZA$r}`tlc$8aH1dxtndKZJITC-B_I@mHeTH|*};(?R}l;xJ=cBnK$%Z`
z26dk<y8x~H2P_kufAlMgE9+J6N44~$yH&P7X$WY{QG-|z+`6np_+DzH5S4J*C)Aye
zBV1U)rlgq_dWVpu9Whdm6xVCZpj{NZ#?t^?9w!0WBwtHY{O{3)%=lqRH>dw{*7QXK
ze`23Sg%;(G_CIVyTpjg<@%hnyndhL|U48g;*cULerSzQH{hdnda$|*_LFe^fbdSwG
zoaumAXI(oB_GEdu%*MeOIrhzRO9vCn{Yk#~!)F7Mu#L~pw2leNl;qY2WRAJtG+@$P
z?;tDV8qxF(m#&eYR^D`RHYuRiR%Qg1+S@QmP7_lfU^3gBgP1Q$NsSw?Cf&!;MMX=n
zlicH%7M9T<`w=x!^VjuzK39N!JyN}i>gOJU@v3i!xB!CiHWnH{5^m5^ludNqVAIzo
z{lF;dFFd-f$c)rsE__U9Z`U<*K%X4F-lQx<DWb;+R}W1fn$%&L*x5L&JG(59PYw)H
zw*GqN#4k=9Q4R9PFT+r>TRPb7-V^no18aP?vy@#uJ6YsAsav$Rvp94f-}R^s=)K-N
z``+`?uxcBds9~y*B4F{*J)dfCE<VIo*wC&a%{S}yZyNf`0M&GacOvxpv=w|$J)TA}
z84YP<X*zcNd@C*P#c2neC&l%iHrDoLHb&g$8{O9*phdstK7F<VHq<nCVCq7!8Qv)M
zJ(*jCza&pL&EGQRhT!@w?^-z?P!-l&rgC?pFeEW?TznABNV-8k`-`y10>Au%y82T7
zxADfnfxlXi^=iHgE4v7XFCwe8+%ql1zV_Pa_+oa?+0~o9pRkDe>{$*6vOfN+v>Pj%
ze2IXdm5q*8@XScvZMEyOgKSZ9kwt66oOh+b!|a;LC;y$B(}2gG&=S1hnTr}eZom7k
z`@0zJk#OHdoCR~s_U@m;R2<=%vsekKpXy@vTT*i0yviy&!nOUz+L*3)%rRGQ-?vSU
zE?2t|>qlF9zK_9qHOU*_F1#$I*NFF$9u9fAoIRZ}sTD^4c(nZ%>8N_D*wMhh>Tl!3
z#aEeI+g@86{f*W85xAbT0G;TFum61e>6!F_{ViuYejvVPq4O`ViT0VmsI=zDu4AN%
zYfQ)F%Qji}`nM5Qc&II-!Bp2+Phz>&v#^oxEw|!l9h6(x1(WUPEA751Pb$|)sxGuP
zLKg=Mq}66TkM|?FCO-P6=99PWM2N}06-G*oU*&RLZPOLu%pg*Y4I=~L=7o{I^H$q4
z=o0{Zgbv?}>Pq$pKr|#VUUq>cBj4cs&_Fm2SpM{KLHrM8D9c+d(UY|A(ee8GqorkE
z?t*UYSelBhd&3kw6JxM&*2n&!#ocxaE?*w~6|I7~^nLF*kf0PD6PQDQOz>ut038{f
z4$(yt$A!W1I1U#V{qTPKL*B<+<lJ+=ZQ-=<o!@RZvb@DEe6z2wGxCr2)-@^3Pp~5A
z8@4*jr%!~-*4L~Z+-+^glYeWHy)om<rqZ`2y&vsUE8M@h9(6Q4IB6HKI+-3~Rj}7u
zJJo4yOLH;N9OUmJ%RhM**4Cyyl2URB$<TGC73o~r$qF>Q53n9h@W2Y|Yw<SQ&U&1Q
z@jKk}{behsE?b-V=vSuyN2v|kHg+GEG8(gM_k*WFj)yEDR23QW>ZQClFs&~m7i9l!
zFw>Q~7@aI(oUGm~g?NQ$emaU5#ZoG<l;4b6`mB~XyfvK63Eddtef+eA)DfbXJqFPw
zDE}j}jxCV&L6hv7;|e|735!^cb-(H(d@|lB{=)cyct<P5yfCi7Z89+v-eb+mDn{nV
zDe}?t;j^Te#xHkoq>B2Ivh_Z8c8VvSQ|WpAVjEGF`U+*jNsn*W%d9WNAs`r$C0chz
zYeI{jst`2aZ7r+b`_b_G{(5#QJ~t9B{Wh+#G^-(FF*T+2hoa9wHA>H?%n9<UHp!M$
z6PhFfxlQ|7hhEwAmG>Q7*84|0q_{z6YS%a&H=3uhLcrS4t0h3%9I;l>I)Qn90(fES
zjK<ym0=~N!(US{8jntYOS4-_+xLN$c_sH;rDXr8tAqO7f1i(y|?;>E@Eyuph>(?i~
zzJ1@eTfLLpH?|$fW5P-d#`s6J#e2sP;K1?pidc)c@}G52ZU0sBU3|QK;yMcADhlEz
z#2*$%dMiKJ`zrO{r|)_f<wksRgO4j>3jmBEM36Y29_E%=aflx6zB|RNy=I|9w5+~L
z#R%p-pY8S8ps5m+00x9?{#ySzAsVZ_RS(RB7sOi$Zo=C_Rx4?yaXW^J%@y6j?}|X=
zFTW*$0Xh3GYnn0@SJplIy#125B&=RH(ZBki`rq{{*>x&cz2lc-9xfdfZScM*>K%H}
z-UymOuIxjrxW>{6fBE>|l^gCfT2qRNTpUa`fN~Yg1Ku1%;Flx;5ChgjX9%EN)_4q@
zNa(?6JHx3B5sGWL)9GdBY4&=6_t+H8Ja}EtJ3m*hi;4|jQt<==Uz`x3^Y>=78sIT;
z`|D)8iMH5+ukZ$9WWO1hw^77CM~nAQHs2p08B8@pcgoG%)iUMJY^6U0i4D$i1hX_K
z32154diXsScu-xEpj)WEIh8_>LfI4}tPwxTkq0k0Y|^sU1gO5qX~V9QQ;5)w5316l
z7WbLd^QNY+g2t-zKLWmOMO$@V)p3wwjZ!EJ`sY<eSZ_biU(tVxb^p%#aGP`8_)g3@
z3GIj|B}#en=$wJ`Hc}3W#sTed_HW!waH^U7Jq&Ip*=@u6S>&${e|sVP%tG46&Z~cq
zjDjJOBA#O!`=2RrC-F-`zdcN^+x<+g^%WD(lzNV|gvJ~zXr(B+8jG;xXhO(+*~Na3
zvLAM{YU9bb{Mvy}((Z^2+;eRzIqeb?m#W0wkxqS%Q2$mnF(_-@X#%I)wK82?4*2}7
z`xPT^nz&={+lNzO)8kH)e{3OeB&H!^3$P^Gbe8y_Zb`aG4UX6{@Er+dRr5D<7Jt)I
zwJxEb03I+w3+QR0rQ*{UqJu$E?uV{WHOSXiPqEi0lnr)E&6>LA%{*G~nxkhY)n@*3
zocw*$C&d@;cq4S|FP9DfZhI`}CK&?NNXI{Dzux~!YwjrvOVF{!Q}D{Ws|#1?YiM^u
z-oigbAFLa)?7&#868EwM>v4J@o41k0<Rq0|nPs<p`;x?w1aQ+Q!9_=Y_2u`VzyXyW
z(b#%Ka{pWfXttMriL|~2{xlYv%DT|N-i309dW&3sjb(6hK)Jhj)Vek#C3jM9`L&GP
zkPT_60$bn<oU4Tq@Sf6pFF2UkG{!&Mi)xkfdq~+Y6t4}f4Ss(jKY`%5F2*Acg%*3_
z3@f3xzY50>XSameSp{_xlwVA^UWE>yn@kZD5aYFGni#9~d6lfidT3xWk$)f4R?na9
z6RW~Ul_yjDOZ8d*s8*^lG4__>?A!k%{&k9E9ZO#CTh@37^+IRf)gJB|M9Wq-;%MC-
zhHZSD%)h?^)+smNRW0*>TtWsb3}{22D>)uHj!nA;XBU|*JuE3MSDqA3<@_Z|+fTcM
z(ObFGUVxNvx&tp-3<Q5N!<ZEo2ory7NOpfp#=N2{S!NmYh~$-xXO(Q0m-lF9^Mn#R
z+<u)xT=*Mm$#0Z<maemy3B2R-G)Rg1%6<3YK``iV3ga)~ow=y>u_~&6G^asL@(XcU
zBdm0#qiFSLEF*wSm!w;6ONf@W-w~neqo1m*3oJ~L>c{^cFCddTHFUqi)Qt7&6FXIQ
z@RhcSZ_p&mDA}R|c^hi-LMN!WIO~vHxVII6uHvSLvUOZvq;>j|-p&DWOnVxV+$<uC
zuoCI&)g%0YypnIjB^Xj5Qv?Ls1OzE7pTX(+mjXWu_SNx=(+Bdabohb0iuj8;Ai!$?
ze02Adb7+AHqi_GZL&BfeUp`Rb_Ora!LmtzJAd>$7#htbo=<Cky5Hlj!RDKWDaZjad
z=b5&@FSplbg0Jqst=yG+D&fjARhx;DIhd{anYTyr$L*S$o@X?vNG#O;OF6bEC|Cy0
ztx$cOVF-OKDZLW8i?Um+5gx{%nY$K2U`6r*Q?R07UazT}d0AX`jh|Y|PziEVf~rNz
zzBFC^=W?l6IVf*gqf&um641j6ZZXI>PHViq=!1TFLNQw`P)YQV@DcZAsH8onREFO1
z&L(So$K<99=f*BgP_j%mt^6@Z>I4IpTzcq}LZI{WC}5&D!^$+idv6XQ0|t$-@jNd+
z`1r)5)4zb-c^UkV`4)Ake_t)AC1uhw&z1!Sgl4hH3)XS9^zXP>LM&sYpe#tV4M}%X
zRveI;g>mkJQf=!V5rvAA<h^08a)o_0K)w_-N$88@P)cdDMuB0O8P=9kN5}|agU2Zo
z4@gQzUBhCml~Xx;_jy*V#1#r68N5veR?ACXxQS=}W0~XeKb9|+W&+8IfzFl%z()@S
z9|uLuik2HMBbV8l-JgUCL6{xAB_OS6bA%{E=<mOV02cWfZU7t<MiHtBEofOYER2U2
zRF~q(m3_o8SNamtMa*@xIRACAERpQZ(PGW&Dbfj#46mm~C0Ee@Vut);1t>*MvvAL`
zGkRk+P%v>$)u#evQ_`|#bGw8kT#0wRIY3s}o~Q{xg5mumQ;Aly97I6h-uog~%Q9ed
zA!0G_wH2>Mywc=s39X{9S&{#JPJ#sucGKHh&?o*?<UfH(FMkVUvV@a4<-^CZYC(CC
zuyLhqNR6`nwUCiFS<F%*eJ&`B(*oLai9;QIL~_uvRZ;Dr2Ke_nk}fa|uOw2QG#rRw
zmY@=<v<n85$O0zdTO+Pe++twKu&lCY%HR4$ME(-gO#A4^iK%3}C$nl5Q>_6GAEX#|
zhmAaVPjQV9j78;_=JYsnk^Tte|01=CQ7mvQ3*Pfi3QD)331~Nj+F=Xi|94GXN`Co%
z5hxY-JBD}Kz*SfOzUrg6n{KNNRMuEE9yq2BSwF3Ig{FSHbh*37c+H<#YNlQIlF;=h
zdz3=bi!%DPGuZ4`-ZefW&ch?HwDNBbllpoh548BApQI?<Lg}jmc!4K8A$P{q4X&YW
zTscqz+Aa3xf^YIEkUGaDjCh1x3y?W|jpSQ>51(99D?E{a7Lj-7l!PcMi7PazM6ghw
z*Zs=P{j&F@^78CXGp9-*>$_IOzD?&jT5zPe1{93120&^k+*B)Mvr`<%1<^wLnLgm_
zt3rV$;*{5A36d+Up4p{zV<f#c`MXf~B$o`FV3Zz%wE_EWRxee6b*$M(nCeup)9!G=
z9X+X(O@jNIzk0>@y8g;K;dgPCK%8LNiW2JS>FKGdsp+@2HW_-621s(i_h7TCV}SoR
z)t=C0Mk{rzs%ZKb`c^$(!^Y(yF0aY3DF@0=-c7cCDzBaObwbj~#1;TUCr41<!$A>U
z5GaodMDhjIEg$jau$gx%kZD%(-9a-@SptczBa2Q}vCX94V34**4sRSIUNu4_dd%ns
z?RD^=F|y}hhb!HOk-@l8O}+71t!DFNp7a*9`1cCOPxgpIJ0qX(9WRJj3^*Lu7F>7A
z(bLKNJ@1ukGPBs&l@}?}N!oZ1{4?<WO*L1qN4{BgDm!Uem!TTWNRv9T^KTSsLEUJ<
z3JXh>&Tu>nMGpwqU#f0+f$JOukJ=|!W9Bvph|%*p130F0#6v{e{&NXVSB-;Rf{M+r
zkBKMc9NF|I<F?#}{O@laG(xi_`=3XZVm_X^ec#0vPxqkH2bsD#py?-xsPP`QlQzQm
zGxyG~geQ+@N8SO3RZe3+Z=<%`ucm#M19Zp^0)UC2=HEW)H>1jtl#WB*J>#TB_xk@F
zED;%Otpj~}^S{*?1{i;5zR&TbedqqTxv@NgHE0m$Sg#!jWP^YWbWjKhWo!uvP$Xn}
zQ4DZr_Q9oEGK*?p0_3+ceALt|7$G4nX4G^n)b}GeiH;VMxMn4KfBqgkJW`JOS{QNv
z&WOME%-%`6e#~fln?!q3CULydP?t;Sa=-1&!BJ1O(8=3fS741-k|BK(3eq44ax$Zs
z8+716<vD<yCgA;Nm`14<Gb-Vm{>Z=`ypLyJ!$%oyn*1<WlG+4admJh<Li4p}kGgda
zGY5T~gBxz2g_*1&(Ba!YZW@u4`6iW2+*Qgfr)YyDqqx}7(Qe|mFUKxgs<setn?&2G
z&i#q1eq-x&Y@acENImX6m8j=RhGI^g5TpnCW(3}6!U`M+;G`jgDlj@thyt_)rPccs
zm?WBu*NP9k@&#ka0x)2HI(P4Nwq7??#3-|FDCoWOTf8lx%@FzJBQzrHK`r-nCP+RA
zW53Kw!$lAfvVNE;!h#w+JTyR!Cr>D{>*Q<gnxR!{r{%)DeAK<gqz^u|?9WJg`1;j`
z6xy4+ng$^86C(;94!t8xR(qF+>dbvE$odDp2CyX~?MGq2g3L@A%)~_FTuKmavs6Ey
zUT0HL^HrX0u<t__hv2N=tD+Fab-0<bp4vj*)M-oBRy>fPCM<c`rXu}D1~Rjh*LGMg
zYuBLr_mr>LX#BPgG~E6cf*i80Q0!=lFeHM&AG^z7ZC$q?^wab`(S$Q`^t!CQer=fo
z0JbXs&U~u=y`=fO3S7A^{M)I03*_=iRydHNIU-_UpiffV*aRm`q98&V+n)8$=rX;d
zmoO+)iKYl4oRu-Rrhv3VgVr?BOJ*)qKuIiKkG_nUcMrFrF+Ti9Rv6;_RuCp35d172
zlBZFu2S9cZnwHv^`)CtRhny;;rmz?TY8iAOfg*pcfE7dm+hqz>GXibp3Ux@J1_-gd
zW4Gp`R)7>7Ar@UupW7nZ$Q=%vn)h}#0df0vA1e?%_hA<-;nY%nsW_Ald=9X&pL1+|
zqaSa*_0*Qe7%KHCXYehZ@cfw3;mfC3c`@Y8b<T!PO^t?C6C5v~q4eFu(aK?}`upTJ
zAs1kD$;m<pl)r$|>z$bA!0)k@^wjk9SdMV9KCiR)jrcpYrPOZ0QpQ()aZay%{i_!;
ztAELM{|>|EB@-U<I#Zaz4^4ZuYndF>lh||-wIn<e6Fidb64`0t1dSGb;Q!*3ukdS7
zex>6u=pOHxo2jpcmk0YsB}Mj2Q+AZ&mfTJ|YTGnI6w&)u60QTussRIGZrV>5xxfAx
zmSOoBq;=Zc;#y*2o={>a&b4f<XH}&UH$<lkjr-n>@0QY`pgl3>u{=L8T?@uY{UEos
zuruYG>i4=|=XG`_B;`c*j@E^GtIKuAtLq7~Iz^s&@^#a*8rI$ecroStTSku#+qyio
zWH*Q^mMDh4mO3QzT#KFeH)?*Xun7F8yU+WTseuRPYk{iapah>y>?R!W_^!Hwu5szE
zD4gzw1$G&c;9?rR6JI!lv(!#{xB4>%n%HKrO(`1tRstbJ4TWc{p$<L^Tr5AV)qmU>
zO*L^49GU+0%jetHABBl+yE!Mp6K#;Dxnfj9u7TknsqZDOk9-fHHifc;TGQQudo7`|
zM#}0=+o#$3s9^@>Dn4FLuKQ8q2HHO5zp9t9j!f!bJ|bx+dJFLSbzCfB&=c`Z)5^uv
zk(k?a?Em2Q6LG{v@W{w%ez$4LBwl{+-Mee8X@_0LGR!Lbtt$0_JxY1va~=hE6U$q~
z=Zi37t#1tnE*=|o?))d3w+|Fg8Fe;YnEq>zidY6x+s{sjn(=U%oN~0159aS_Z<}H@
zcMngdPyVL8uN!l_BPcbIl`VRH`suN_IdESa{QaU-=bD5mT<iCnhDM`zyP_81*Ei17
zVzrt14u5Q|K88j({T;@*p2DZsd0v<toOBBrNTq&G<u%#wIAZ#ZTwkT&^Fze?1b%yP
zD93WC$KhY!&5s}cwB&QS`;MBwO=U^EWz6~HH+wPmZR;E?a^=Xoegnd+JW*uNGIPmu
z{vz9Dr+37L(?z6B#vCxUT*<4QnH}Sx8YE~>9%*DMJK@Zr7(Q@s4b|fZU^V?i{}G13
zW&{rOqbJ=ePZplj=iCG_L~Q`$#vZ=YHy4`Et9VWtYPTWDJ|8zw+3%}yqLdFmTRb=I
z?9{<b1r6r}vwKz(vt@+IzovR#>PdQ-@-{ZL1!<=1r}>^u9pNAF%Q@mGvc+xJ3NrC8
z{iJEVQfSBD+wh$6JdrXzyZX6v-)6Tn_s0ENnB12$B~wqHrbxWV;JTyQz51#@OKXV2
zAU}e+PA|Gh)=<WhbB|6aaS;A-W5SjKxi<?d)la~B8TyKzTjB5B4ia~Rmom24)8$n6
zKG*x`q$`fKJkL{A{YFvtmcLXN@D-&W?wTH15hnsK&7Vl0Cl+velB=<NBWgatlGLFD
zdye(f?w9^ljgpiM2W;<PKC%IaKTMMLl=4rKPol(9<v(XD(pyk@R?ke#Z>)QMan=pV
zkQw-5E0;D;7UQ`<=1%n`JI+YO(usg7Sn7xOjQ#Ip=lm4MsChh@=utLSrRMLX`+kd~
z?uTnPg`A-x+oC3>{jwP+N8#QMw@hoGeXPadVNawEN`8y#v&$@hZKEXx1>nup&a}}R
z{l*LY>!Jb>ra*uH_rtY?$kRE$CHB{vKq(}}fBKy&6*GTz%%2DP5eoWVrnNU32}07C
z##VkfyG)8xroiEjK0JChIT3K)2xA=I8suAB_(~B<^xLB7ncyKh`~@lQ=W)kZLhu^1
zmjPx`(W=?QC}Qoe@ZUym!1#CfVNT}vRZ!+14{QCxpV?4<r#E>{FMd*R46M^OVU}Zc
zC#m0<9h&FY!)=ZrO_JlTxS#*LXJ*=V??lgF9HpjLDmk!mYGtlOlp^D0ct3l+TwNdB
zR*`!2wL8UVho18M>6iU4?Wg;^Gp1<t>A-T{H>QmIKNYriP5>dS+-~15paE8Wa}7o5
zzUn=&p;SEq>M3<BXmpo}3l=&`Nm)Wvq&5x<?^5+@D;7Tn)LhSg^lIMTR4whp=Q{iL
z=<4=cgYULwRuW`2NyT_&x1m1#P7gt}L=~N`EP=l74n-{lCM~;pJ>2Z|$rp<iu(qAK
zx;^w$g#v_q^$9L2UWH&qeh^D-6ul~oYCh0Cpgh^Ytl&0&ujklmw!E8@zXvkFLZ6n_
zHn_;<ntZZlem1oJDzYoTRezq^dGh`zi<XhnrpPa1BOIPDa$*lz@n{XB=~b>V8^bAt
zR$X{NFih<V?k`tpEZ(M7axSW-@K@IcddK{3#`BfRY_nF$8*tE23*gX3UG7yyo$D)y
zKs5z?)u@FHZinSE_9M@x;g#Lix&969)^3zkJyBqwhW!SXtmG-5ZE1DD{r9zB7W5mx
z=Dv{&dnEOGWw3{1Q#|#GXAS=fc}REV72Ej}#@Vp)coZOeIcsTlT3I<F(v#_G_<q0T
za3);lC#Zn*U8LTY)40kJkKwM(`9{~xptgMu5#7{VwoLuCD!Y(dx&`$HzU@!pk3(i5
zN8)`)l;k8CMv2n2(uei$IghZAx}OcjyLSeV-ZF-WW2(He=_(s9s}e2hF7o4q9n1;Y
zXSJb7a(jmgmA4bw^s7yn{OV@-ox0vOGXvO!J=USCR?ZUhm{gVm>M<p5X+fs5HsSU$
ziX+Rvx47qhK_B)+ZGLiE7IR~zAiWbL=Fp92Cii49bYZ)*rz~lp{*vtC_b3ujEMw`o
zVWV@jbxNb=)P6HvVV)nnqat>CbJg5)SnCjTZ<y&I!lI5*ca=kve0G_0u(&#>Sh)lM
zuF;;OeJl9Hrcz8?(Uc?+F*1sNMQ+XAao<mt>US0!O0@Dw(0d4w4f_`<VPX()NgY0r
zQydf8A`K-K{x^UYAJ<h6pf%xhT!n(pV`Tu|4B&)EE!{@7Sdd>@OOYqoRBJlf9S#BJ
za)MCV5R1Jfz2CQZ6ztG&j~e@nxvh;vTC+(!8@lt+WTllN#_L2NCyD3wqS$2$jctFI
zDho@~o7dCT)z{V4)zj10)f;VSz&Ss?V?w+is-5v|w@@K{9HpLKy4N|rJQX5~Z9gSI
zYAQoW_7ztsj08KXNB*QW5Vk$28lK%aZ4X*tVH4bO`IY8Qc1R!1Phw(kV{L72V{c+*
zDtJc8*ER7-L5GE|)HR{AVlK=|uf%trDfTRXvs7@S0Ssd?gG3#4x%hh@=2NC1y9p|G
z#o3ay`2b+{8tyWMx!u1O76i#LT;2!^+TKYx#=<P=sDJQ-U-jm&BqzKsb3rm_-!SIx
zac^l2#08y2B)lqfN7C|oB`Em81824Rm6LHw-1Jy+GZDcOEyF7chro%uO}C-~iAFvl
z#%VtK<X#y&j&paeztNztP4Q?fhA3VY!D7a9IS{LZbt|U8MqwU@vy#{5qJEnge$oNu
zi<5Eg-1O0hJm<+rwBi%<cBMOS-Xz*&h)=P<fAPlLy9?{pJkV_qjYxArDv16n2DCU&
znoR+<>7nV6Hee>ix`feb4D{NBO6Mp2R0muI<|pL61@CG)-gyYqxz`a=&dcICad{O6
zYBh@?qUGXADh}geZ_=B!2g<%p2*hXHx4D9WSs^s+U0tvq{K2MI)+ojXMyzHK3=$DB
z!|#F2x!j7VKsX&DB$iR3PfIvNh_&^-v6}3fDc6W^*6bRe|8pXMQ!*KE`4$=6lYswI
zn{`fj<!rJroJluH($0i}jh~-5d}x?<{k)k+LxKE6OX7TtaOkh#<yi5)M;G(QQ0CQ^
zyEUw@YReRwFK|PHv<Bj~wN`!nSTuQT<gu+S!zQ<HJW3x_#l9&qDRdFwJF_#sd;7+J
zxxIgFSL0-M=eJ&bgSycGL7WS0^JeGzXYB9q+qXwO&PBrS`NcX$-&WN}uLFzXlB9fh
z4#S#Ait6%QU$HR|Cnkoo4_L_K83VEwEY^<gYmwwjdv=#=4<vx-k-MW`rq}{6_T|`N
zlA*_JRNx@oeUz$s?9<Z_K_&*W(@TU!EpgD^?!^-<1S#3)6@~4((KwW}{5@E_2!Ld3
zfH1@B%q|quhA>SvGdS?dg-g|^DTK{Q<Z4KmHkNkPWoVbhT66UJzXb{GBQ^){?OSl3
zBux5K?cgP>r()CP1!0Lt2&}<3RZ68|W24rcISKoMUQ(!_oo+ZY|GE|X46VUerf_A-
z;gyNrcs`zzq7OL1LlVFl1fmfIP7O{zsKCH;SU~kTgBl8`12v52GZhimpI-TChQjks
zp<Vg4r!p*u4Q*uo`=wZ>BzQV>KFqRgCSDB7qglxKv*c0Byjttze37L&)7yg`wCiO#
z6q9$N7^g0%22|*bi6z2MtT$na?tC8)fvQ;7QJ!zII|zj)tRmZGKAIIt8wV}DwlSR@
z2p7$KiEC{s(v0{v`Y3v==Rw)%1i!>|uOGt#(ny|{Mts1h@jQM-L@X!$_U)p=Q#Nk$
zI(%dk8$%Z#3u`V_E;GHqBrEcT{Sb*M&7Zn%(CK6~z+ByX)#TMnpMq)Da-$iAAPKOd
zYhMi9B8SzzcRE-^lgw-J+8^q`cgl^`9Hlcw)PB=RF3FiLiSi|W|1EY9w<XC)w&!~V
zRIS!m$IR>&#0I?|1N7RxMqPGFRedSE|9PC`R0`@V==o`?h~yVBIQXkHltc(@3U+dX
zU8;aFMmi#U(SZucTqSDM_`oe1sAQQIhzDq$rKeq5U<IT608a1()ww%9Q+!P5zR#@N
zGgUl-foI-AY=}y))B!T1>V+O)c&M6!Mulo;7c8V~x?HhyX^`Z_#!_-FT@W+lBTyc+
z1a$^|UHQh{3uf%@x5U?I6!#ChBnj7aVC99iV{L)Lgw>=~`YxDkI&7n_SIn)~xau0k
zFn9GP={`c4SGO-jN^5AxbCG+scdr{&YZlBo?>`(yZH#Khu&29vt&OMd99n$tN<!{I
zG0$`&-Eivn*qSQ%ox!s_q_|h#h&3Nq%40KCFy5D<y1<T^F2;VYvMK1d9iQ?O?WUn2
zrZ$!>EBowoXBnZ%=s<OPwlSJ*#en&D&!^sjWt)%{`IIJMLTpiX2?epw%;Y-zs7=1T
z9XC|qabW#NHfCnOlu+GD^QDaAHK!j*?TFJ&NNlB)fa@<Hd9$IVdp#`~KZ&t{&iLtL
zsU4KRBIp0~5ejF=MgVSYtyQ1o;DrwS0jyGiP0yMRK}O#0gvCYa`a?SyHq0`TqCkaZ
zBq(W8G%f@0PX`ALeyPmK*SgV774;}JsLrbP0%Ozq_ZK+{6<T|-UqO!ie7fu2;_)n#
zM^@8niC@IIHj20ST-##=v*eX6h?6&;NsoAh%zl!*d4>(o^sA0ze#NZ16?n~8$r#>A
z3pqddV1dmF{N;Yhw#j?L_W3-DvxgKjc=>lMb-O^zG^bNn+o`MP_aAhGI|OgfO3pTi
zg!8WNRp#A3kBk)<>}%SrU48ie*;XXhz&j}u#P*9Q@!Y7_l)dHq-wg4Wo{Sz-g=Q=t
zs0?2VdD&i!gf!h4XfS1KeHrloe7!^Ir+VkL;!X54RLb1p>)?p3;x+EfcQrjq<`?6*
z=q{KDg(LVHRp}cp$wu_Q6mfq%78v&!nuamV4D{}WF7fk4Mhqalr*=B~=Dl2P$QA+`
zCvm}BZGP?KjI`YL<!JjA%f&YZpVmT$e4<TEP-S1!x4EeWQ^f0Y@5_t_@W)}UmkqO7
zX*kX|(~`(e%w6Gqj~?rnqXJVXJj+YM6rZl$C~rmlRMZ9QHKN%F|F>|r>QpP?_^$Jf
zA@OSofyTQ>By|OPaDON$RKAd)6oMD6r&k<5H8Vi1LaGMdXF{A29}v)0#b}D@ebvIS
z>LXjIni=Tp*}AxJ2B^m~M06qh0U_1D`KZ__A9YL5O-!!zTA?S=NOt@Cm5#7=-qjCf
z)^L3ty)^ywjMSLy+oMHVMV#XHFb7l??e)<Qu(eQ@ikpVf)H&G;nyl--?c_z8f-t*u
zA%{z1<215Z5|dBnCZ8-!xEyYt*)oMTK6Xy5_YKlVHbA<Re47J)JvBe4asApP<1SsJ
z{oSWZdeCIi<;VX0?cZ=BZ$ky<01atD&yNjDKiOaRVe|6WHdNJ+3Jp3O7evoAEcdg$
zZ7(3q6ccfs4|=)ZCMxVZ9;TR4nY`)36Wz{=jL=|{(W5c$dWbQK&VPV`&*IL1=Fz$s
z%J3d%ks6OJZUP|%rPJ>*f*J<K0y(76A*kSV{_OoAOCOhp$YO*pAh4veyBlnfudJZC
zlcf~vWIT0&mlR|%K)%i0=}vLle$jrT(X7FY1ic1rAnu&_3UG~XsnE2`qPq};)QWx+
zc{mDbr5Ip~%dZOgH;ruHpUBaeL0-I<hTcgR7I}b!1TfgPWYtQz?<VW1pF02c<-cs=
zA9vqzK!jP_QRoeEa8Qe6<7={#kug(~-L^n+%rZxHJ@_C2UK*9?I9=VLO~}NcHxFNN
z$Otf3^TYzGvbzJ*z-qHd*ybg}CnqH!C%D7xPTu!)4SvGwAN)kwH2ON7XXQvu)+$UV
z7g)xOI^y-)P-N1pEUh^$v^g}*feT09kK+PRT&;^`(`D-XbenkW+H$!^2xVa{3(H7T
z=H!}haheKl!W29Q{U9RXw59M7z2tY!wBeha^=lfaI`i;Q>FQcuOKIm{7W1cRmR9fC
z6m4mp9$V@0f~U=Ka8IoLlKu3O_7zDa)}3TTW7ZSkjGbYbw=osjI?_!EwXEv9Sh$h@
zTV5&ZkU>YaX7=PQ=cP&TiJRLMOA(8EXie5allYx|l)h_<PA^Df^(5@1gODISeS*`p
zTth8w@Yf>F5@D^Sqn$J7W@@{y16p{I2Pq_rw2n$5H9)LpCt5kZUU`pDa11TSaq|Od
zSboI>yx!gVz0#;$kko|hAQ>rD$C2}<I{0OenGk;c=R*!2PHgX^5qLj4kjx8w*Myw;
z&`7n{u3my6QHY8R-NyxMcuE3Lf<Rm<(Ij~Q5-9Mt?i{2i*cdXxmODXd0>d9wFE-w1
z2j^`xUG-z>)cBzM$n3R*DiU4|v(Cq)?`$Wd=Ef;~BqWF*G`G`rwatJlYxXj;(wK7G
z>ag$;-%Vt%Q`eX$-0^Kv!u7xq1D6@GcEBp=R1l?Ez>b=}_?r%pfVZLU$JnyL3S$BK
zI}%gswiFiBJ4TU?kbyiWcuAcen|7Xq`V2q1Et51Vs%Ate8^YDV0Bu}^2tXUV;RDM!
z6|Q=O`AIee%-BW$*wN9Bd56HO3W>C<$8wy`$iP}cp-0n~@8OV6(sTdR4ue4SyWmG$
zrXOpG?ivW|w^$G}Sk+2UYzQY|M||*>sM7QWxsu`|7YW^9gX`#i0_^f~T=V)tQi67h
z_?ZJxjSs0e4`TQ~e>lli4F)}`m-3uqG{t@Z7>Xz?BWN+}ljIex!^1>W3~>}6!%9Xh
zY^bELXJ2PQs)oS2=7UNtc}qMpsLI(YP;<3{y~2bUvoqToMkrm#LydHtWSKHk#b@=N
z0124NFKtowGNr*C`c3C`*SQxg_$Ir%Zl%HQx&#L6n^QUDg?^3up{==ZPag^sd3FbG
z>SFT<z>Dn4$Rf#zDz=GSUdp=<(f=*~p3v`T^AZezN!?o@nnKC4yAarA?#p<pDXDxw
z_R`cl+3Q|38>=%NU!hSLl;Qu4FF&f}NDMQL%W#J_PO+Ghx*LZ<`3-Y57VSKFn1P*V
zQ~xop3F&6=O$i!SF$H5PX}UNskK^FeBGY}<^HRpeN*w?5QWmeb_T6SyCH;wf4Yr?s
zQ|0WMEJ`xdt!rKaZW4{V`bD5O8>a#oqa~dA-$q039qsO$^uPl$=o5N9=<6>&z<X62
zd@DWY%oa_ipM=^?pWbkzo#c?+jKB6PF;pJ&{zEjFGhCRZB&$SvNo%&AqZ}87W)CE-
zi#)x06L)6p$nxOxscVLeYA4_*@w)!aap~1;<@Ao<R@Nibb2_DT;)lWGoj9}RQ!Uq-
zV&!C4S8ohIvy1NI7f`X7Ah2HhVs}5UMf)`8pCbXm-{p|PKqvvS;C+LfC2g`Gx~x*d
z;WTr2KXH96?K`QU!Pmje*ugSVL1t1x1X(O6Rck8mOs!jy01>@mUue1!a!mp|ozOPt
zyM$lb6-!mTJ2V!Z{o!)TM{!tg5M2HqNxb0;`_M<MPk$`#awwUC`Qkg4)h?l)PdUn=
zVZQw_>RZia{w0vRP1vN-@WdxWg8w8Yc{O)wtybdts)AB&Zv)@yGhjmu7n=T&J0zNT
zBJ?;#AWV1<RevrFaozFn<mcMT5(fUC%cZVJ>prv8?h(9k;fLy7%jJRXia5eLm~$NR
zuYHSgJ*ZYVs(emkK(kNpgY8+6j3d%O*bn_-)JZb@vp<NTAQTIET~8D9r5%5P|1w#G
z@KJUv$&ex$E0>U>{wK*oPa-U;Yu(bG$BmqX7=JhY_{&L$;Ki|N-mlCDj}F@3L^?SZ
zb<If_-_^(kQ;qfICXh-1%wP5%s9|&xY6>Aa8mzw+5Fx>yr>KsVB!|WhRZx>vMe<A9
zfzC=~iNY0fh@_hJq_vRDpVMYamH%ewq5BtD>A1Pp)j!mk8ij%GbgL~X?%LF_o|*gv
zTnT_WKUjkbR`9+Fc~LG$gF<e@FWY2QmG?DKS5N*1^(?mGLfpa1`q;8i4=FiyR~$jm
zhj9w@giR@rp^x(OC{p8bACVJ+sO0geGJE)6e~<(%G#^nHmYX|0PSEFlp&a8VsH0Si
ze3d`Wzm`-gfN|;cfiZf+MlD}9nv{3{M^3H+ZaQWz#@lqF;X7{(5D64Bq8FJfauy5d
z>?2vI7b*P*8(KgLEmL8AMursxQ_BcbUrlN4-(n1DjfyMq&g$8a&{-Gfjl9ioH#}o3
zsBmq;#-J@(NOW)%R9GfvXvf!>|HX5f-@Ub#@fGcs=o$-Hs2)P}wlK^$;?E~UiMlJM
zex6B~`U^RC?AAg&gp&9)Jgkz5v^+9@DS;;Lun>k6+>*kRSkMU>#O5#rbcdWd;(qrq
z@2k_OeZ26uFGmAMk@vuBFK3vpJ8N9U>oVqGeu-(OD3)%IN?}x?)$D|R$t{y$c0@s5
zzQpF#WBKDVX0W}T!2Pz|fiW0p7B#bIF7XCAWK<~QKato>1}Jzch5o5SSC08ZFn0o*
z)CZTe2?Ha2B7l*;Q9yS|fU<brxFcY-g>GYBJ+dU*n?SM<uls|-%zVCQS?T<7l~{Hi
zSq)w_1vJQ9o}51jB<y~rfDS}C#YVDeu~@+cpBHuwVZUJMp7pxyst0xoLTTh#Wt1dd
z^kFjzdrp`h4gP=M9sny)?TnX~1_=Yl=2&F4!SD}iC3unmlS&xf9tITrl59v%E)t4(
z0TErCFj$#?_1{|i`Tug-2aft%?>e7@ZW6|;mCJi%O{_kBKr28zn)nk(uRKwwdjCgp
zoJTp4CzNMNZ?JqyPw0bkJP_GjvXl>q3M<bE?bP$3F5j4~&YBgBVLv+(@K_(J{yb8h
zI9_3O;>$MT>sN9lV03tOyQh8${GK4<GNL+qk-1}-2dt;4gA2z2d%w!#%{kE0DWtC^
zhc}_sNG*a?=K(26bgGy(zSj1!#uG<lhfcOF@Ap+iCdwW7SyTQiu|ZJ7B7*F>N<fvG
zApmu#!7ZF1Eh|!1vf4_30^cYgN-jZ(2O3c`K$7zH0uy5D_!}#`j>>Bs+eFP;5VFVD
zI&1KPnh1`x6%7Orj4u)smdhvS+HFq8B|!_8&NTviJM^;|%nua2K#}w<j%;o8Ij(q-
z>G01=OV&2apYGkKe4#JZ0SE{%6if(dYjP#XBX(i!qUmATdj13hwJkS?U1Z}s78*?x
zqP8BChz^2h(L!9sU=C4;qjN6PPoi*EYE8IMCQ#HW#BdL9Ze~wlP-v?OllIYQNT3^K
zP;gz`G(s>J#qidkj7DqmeVBKsw2*7Kx6pKyft!InW4`<+gAYp@P+%`jt{2bm9t-@l
zW;2ll(>yzxLBJ<JV75it>y%Vt@ZPUHpmV)?;mKgkLN6qenV@XZ;ZrH3(1`N5V~rP4
z7gEy?H$(YfjqROu2`H4*iK0<c4bZ3obwa8r0Gbm)A`>Bzn(&0lz{Dd<4E0c;JumO|
zFkw91IXS;%LjR+Jz<O^35~Jt<yW2_+FCtExU(Li<NXc-{G0*?1p*}3tyoQ5o5Vc()
zKlziv^MRlA-{?&0_oaJ|06py4WmT}5iWBGv6XWOzuL`mx_DJ!qvl6s{Ozz4i5Imy*
z&H8A#Fm?{;pSaZ;S)`CEL?Cc;qzXL9dPpby5_lY7?HP7K$5dEG9iLqQqcc(1k0m;4
zjZ7$DWKw{KShh5-&8&d+FZb>L?-@UmDnZ9^NF)G^u`upZl3*pChX)l}A$rrzcFd#>
z_38d<>)=XDeWH}W$H27gnb@Gb-Emd4l*Y>RqCcJD$)oW@r&S3+C@}i}<xfKysbUbG
z;8&<Hh1~>zk2709G9(trfHVqbt@i2(n*(&Z2~I0VIN6&FAkfeBK(=t6306ByHG2wm
z&;L~!e|VIHC-@(>bnNRE>XhgL3P5{XkitUVRlbi9(y70{aS!7A`^RX_0Sfbdtbdoz
zMM|`1^Cp?=mp2peI%u>f%u`<Q%UR%j`8KsU|10g@e^&@J#D@%k<)J;g0Ap$ho|ZeY
zR$-C`)JqboWl^TD0btMoB<6tJvgtSl6AE<D;>zjPs2!YR^qZmji+pp;lZheL4r~64
z*0)Ri1t7`ma-^9$WXO2%|JhzbB`Ayw%=7^^URDNDmxPjJD;G2u<bdqTUn~X%_CVrM
zt!e@p$A=TJ6I9!Qi$M;`jhYp}c(@yR>3Apd|LWc*8E&zgL?G!NcWqEOo-PEg37M~g
zflvSndkT*=bZc<{3^|=@as=Z`dX{aXI|nb(Mz1}xj^8~@i<UI6f%as5+)Ej98GME>
zR$_%lpZ#LVfnk96iZMRx#7EVNn$<%%5k7B{=#yBIYQ9#enUl~HV4?(uy()YSsJI)w
z!2=Jd!ZdWW3Y&$spiQKu<Mt}qGi)c{z)baPP)<mO$^tnReZ4D9shkW@A&<_yQF;9>
zKsUih#AQWU2RD%4O%(%a={!fHRlVN2z<R=IqUa^A$V1y+EbUKDPWUmU`02`X*!^19
z-j$=oq;C#Su32tUZV&Xk`Q@LfJvU?Y*NE=1sZ2>+Nlp9W8;Vw)P;lW5IfRL|bX=qZ
z@Y1h3bfJ;R?5gC_APsmX`C3@BypjZ>9|yd}0MG=(s0mBy*3bv9=-P;Ln!g*>#~OLY
z`5$sT_Sk+QdjFK%-I3g#-S?&?;3?>_W5<5~2!CHCs%W&WW#wkoVW~y*Zu|4J<?@Ar
z>&s~JLCR%}LMnC{a$iJ6%BVJ|wmvxOLWTPwc6p*$^}DF=--p|aoj@T}0D2(?0PBC!
z^Wub%vKN9R3V||T;Tl4vAdy_qJ4xtvDHt&3FAV^CCqp9bKffy(cOS-~thR0a_!}gl
zl@KyOce|gE!;@LZTy^)y?qFcnI4n)|=r<u+e)roM<z6?<cr4Vr$+VKEe0*D9mh|ki
zdbyI7&+_Dyqyb0xL#jr#qK^$baQqi5Crx-!a5!4A_QTv8b@iP83058Y2Wi%dN9a9H
z>yiqhI|c|FgbTt4P1lr;W0=2e%z<!5>lC#Bl^RgVEw~113EqnV$f^~7J5;!EL2@ur
zP|pP}^-#kSB<gR|Ey5e?=oH`uWpt4VbR!H$1@*1FQ)p5@M0yXWYH8JD6ss9SemH4R
zy^ReK&5yZOi4p%}IsI2z<ge;ZXT*@CI`L%#LyStp`|q-8FtIEIgol&n!-(>Lmr*~Z
zXuAE_AmI1yZq7w~KJFDBBRL}zBQK+bX_49>oA$Xev8Z!+SlGyS@mPv(W+8v1B$O8>
zh(Nj@(;y1Q2GBOPAC*Z!&M`BZbkMI^aOS6X*@^|XX7sH5t3)?#@bQ|Ggh|s@CS-3m
zf&^f*8Du{JVm)J*i_R|l{U%-iuX5u@k5CQQ0H>?mekn@2<r?Q{<h}y$O@+FYY8BZZ
z)v|2LGVX4Rn;4p?efPyII?(Kln<<8h8HPpqfJzbuebf?$Sna>LC<r<JR1gf&Z?T4_
z2Gw`rzdKw%{eQg7Cd1VVU3W(2j{ZWY5psAKl^J!1DnKVd@PJJ&qXg98T!&wyFpxq1
zUXuICiIIa}QEuA;s17(@AQSnTu~MYI*pk*9`g)J(>o;7i#^+#DqX^KbqGloZKrvrA
zBaGKDn<haT$6<$esRlkNW$XJ;`owb)?3v2IcBY-`CNy092?LE#@XGw=w6BX;JnuRS
zgW`tka$EZgzU7hcazoi3r?n3&>xq&_fNWNqz|*$%OQn7eA{qkr>k`mGtl$`}cOfPI
z2NN|LwIDbc@HJ2C?iv9UJPsy<;E_4W2KUmGCgdjpF-luD&IH3E>F~zPxY9wrI(#F}
zuSXfi_sr-M^-?Y48K%Hc>3eGBT^!3o;OG1~F=ZB6noreXbnnJT>^LKnubrbx5&cSy
z&?|1^tgBC32<{3K5%C{mV;4u?yQ~PW8r@sY#9j-Ytep5cJx{7$>jhl4$+Qm_EDIIw
z@hwgW*EH;8P#(7|w|TCo{qQy^BSRo1(122qyWymLW`0aXzzo(1#zTg?@vG57gmS@!
z&brVDRD(`Mm<9(IaRQi0D+c%i`5MydsFSei`GkUar-D8fGAPEb3%yj%sIX~heTl3|
zv<fxANd8ugl-8@kFWQXWC*JW!zF~783b9$fTO@oL>x@hs`F^Ep-Jp3xiti^_p}b@Q
z@%&c0z`E~|*wT#-M@D$&kAq+KtM4>(suc>M6uyij;5~;N3wQy$Ce#lFyoZC`WB^%D
zF^2Y(*sBNkyS^+EK-{;~!w!}VO~jA^_RuOB>nVSqVTRwR%#KQDdpsF9(j8BpA2&*4
zc(ZQdW?J=R^`mKeD_MtkNq6_5XZ$J|x&L&D4b#X+fV*9*)uLv0{6@`WZ$#8i25#}M
za!DgObih#;U;Khr1E4LTKqC^F-0?Lbr27X9v?Qk7SnM79eD5eXV=V74M*ACBm|$dc
z+=JE;Lt9a7?6JuI(fI%A>8<0MZomI=1f&#^ZV(tXL6L5x+32x>G~OcJ4bmw{4n{~L
z12(!-32CH8cb7<)g!0{ezdyg<9((Mu{qwr6*Lht#=UmV8yq;&t@q1c^Lw(7-23qv{
z)n$6nhh7Pro_9-Wj~loNQ8aY>1i_IHp(tG(Sj&f!Y+zixDQmgEzAZLy0na$;qYALO
z%evY`@AJ=E#nLFv=U8_ho!>O4X)+MkZr4(L(){vwM|Hn>p9E!J@d={~%Ho+5U9Qxv
zNWf;{?bWTrzT}Ue<yNqTbhM+#Mev>&t5kgYqJGScg7pWc)Q32)Iq=YvJi)*vnaPR=
zs%VV3@*L9>uv16#A6e}rLnIvCO-?GVix9+~{<6om>1d%&hoMan9-53V?IoFg;YvGT
zcp*3xuy#z6vx%te%AWSfKVEE&`un|aT<pid^9NpB18id}ViJ_E;>P+`yqzR00zA?T
zC!C;;<CXI=m%rMXq8>X@DhG%<-1dwQ{F}XvRRse@Nb<lUeMiJT+*zU<$FPm5HR8;P
z4doT%Xx74Mv}N6!A3d-E*3ZP@iggeKdpNLXj_P|gagKV?HI!?3+6?jc(SJPLC1M@D
zt8awI-f35d`$VA+@hNaW7EGhdmHC=No;{$dcWMg8Re4x_$Onv=pfN5Djj>sx#aGhk
zg1>(D%lKJ1z><v^z_w;{0krs9|KjV}_VVorJiN-VvxQ08Jm`BCo5Pwwa>D&e5WN%L
zlOjmOoRtisAq)?pTdC<y^g<Fo=>$zohHkHc&xjE3p|`Px3z>9eBVd+jmY<DzZ7WE}
zR%4?AEe#6(<#8LDF6P?I_NT=ZEYcjD;)p7WEO4a^!z&*3%6u-zVt{T#v7UYR*h}>@
z(ZIwRH6)i7$Nd#*@<ahh>I)@C?cC(d3)tB}{X(JHr{o&QXCJ{a@`;v{PWw|HimLF~
zEUJ9L1f9=OjqHT$z+NRFH&@8>nj>b^-j6iTGbg#9yMgDsy50u2*+wmVYfp2VP@Vp&
z$=<2!QdwZ1<JgZDaPZju-}g+0c%MuYRgvR+=UGg<q;aVR9WT}ge^T!bWfDw25m(52
zun+-$s|=ENVyP`D(;cyY2z%p$c~b--JeM+f^jzKWG0^XOUV-l3V;U^{%dS(8UWr?3
z6ZY3hG4W?PcEek2gOAdlDRX=VudhLD`@euIwK$=2y%c_(_3>cGgvBRr8exOOJZ{-B
z9vmu>Kj{@QQ=)O?36CRUu?moTC_q$wo%$<Lw4+Ixn-)B^tL^^FW_}&z4e8PmO}+I>
zVtj&waKfgq)lU>ON{^U~#epyx3W<KL;&Is7EL$-`qmPd}J`%46cw;CrdYa9eOKVIN
zvpUmAQzi1{vmYNsPGKzc+b>(A*MBowCO!WOG4}=itiEe4;Gnk9TUZEGc}dQvhoYv+
z+Wt#dXL%_6=n*4sXS}8Av$;1<i-xNoYZ+!i%z1Ub#$g*P3ghZzb$!GC{Q-yNFK^l`
z?n!?ECSsXX91nX|W(plra<1nL^kj$r^kYNh(CO}F<bZF^Ko;kBm(ESGl|i?(ke6+N
z)IdZh^yeplqd9;LsYqc&z^(jDYu?TU9%vst{7>PgS5&8GGa22%(p9U}(aKj-1N8B1
zPi>41z?z4`7aR`8E-;^C3rV^!kSGGE$S3v6@!+jjLtI+9>lRk(HTAWPjkR3lvd=U>
zYn(=(CJcOq%+D7*4Ib`Oe~GhvOw@UD)-z1;`>g(1E}Mk1M7`GyJ{&OsJ?dGZW-Z0J
z7Dt%r)g3T9;wmd!Eu9<}#<>@3d;iTO9iNZie9bQTw9iQU_pkOP@0LUGXhm|{c&=R)
zwsu^YYVrWL?ZHv-<a17r1Td*067%)NCNw!M4^!DL6I4))nUKo@hl#Ed*!AW^(Fgf(
zhu3uUevXkCJ<vmg@cfi*az_I0PH1R$VKIfWor-Q?iq9>6yZYn%qC?S{x`XARGg4=h
z3^qcaK`z5bTAb28RV=Z(px!CL%l8k|7ir5fe=#y6{4N+u6F-}GSXkD8pX5qWv^ix>
zm~=_I2|EToX++9KBopu%;`s1M22{7f9t6qir3AQ)7U$m14nLYjw4GUz*30ukLJy8q
z?ss}R0SHS{I~AyY$_lP(?m)7lC{wFTx@mf6|GVw2SC1ZHM$9zcv`RRgEuX>adydB@
z7UEOoYET|51rTk#C$cZD-eb={Xmff%_fX`B97QdR*s9LWZlZAa{#!lNh-CnZ9{K($
zfIh2GW#v-bHWQKnSW3jCAC#w71N(fY>hQO?&FeMiD_vreq?8*IF9-O&OLn-IBvuwV
z4-S7G-hp(MT0UrhaTcfj&+Tx{7QoRVW&s^%3plh=39|!9v5X2Egvx_0n?lQ4@?Kgm
zhO};2|ItTq%`D=iCOybSqV}js*)`wmIo)l^gnS$MwB353o(E2M-ivVY>10PtYDO%w
z`p4rp%`Q~9o480eYw-#OzM1Zl$VyKmvOMt_`<htiVr2IyCZoCEgNw&k*hrVHHD>`+
z5zJSbRAL$0BI){GnWMd;syar$KTnaBm>TO=jAp0Ha2Gs-+U(-MJUsm9LI}Nw<av+H
zr15pcFE=wrL4Tf!{(Xs_2tJ@lg4UPuvl6KOgVuccCk?iod7B<{)D{CDkr<s~PdPdQ
zL{8fipv*Yl?$#sQj;YUOFJCPH4h+v$N*^ET(#HXKJ-@51-6-@X^Zf%eGrYQ*^sshe
z8G9ZC9%*IvuHAT@>Lo`i-QVKfP+fZM<n8TkEmp$+9<+1dK*!k0Y2BYh!1V7L6JY(N
z10oKs*Hj)*wQ6y6GpYJ%;pI`?&@f7sHhrr9^IKh$j`qD$Zr;ZAb@UGhi|UtEHha}~
zF`wQmuLMdgyc_pv?~qAbw;6UIE(w&<woLDQhM0u^Ec=o8koX%5BbnL42X)<w-9JtG
zrRyStnV*eb>ySw7^~UeF%3j?$+(o@3#xLMc+I4s@5=0{*nlt?aVlQPW*5q64b)@mg
zEX~J1ZK3h4zEke3Q7osC(VYK!HQz6f3&R&Yq4zA$7LJiwta^Cc1jcVPIA-G`1~LBV
z)|EkydT#XVxX--r4in78-5Z*>@Qv*mjjh#(nk!^q5xR3e{OqOUR&fKYa<GJeLVv)}
ztR)X-Dnbt<;=$gr3@&8L2!cfclt<pQB{O3IL=J$uWe2Hp;)87VN+#{TDPx-wTQL`#
z>E0Ya{{3d*&(Ow5u5rqe2z&&55(ZSZ{*xWWpS_fAx|Dt3jf9mC?BEyjGo7hbc&FYG
zexsNRg@iiGM-!42g)sv`^2hp~UW-<Qr;ygT6Wc7~vFG5Ggpg&|Y(@3QS&X$lUQiW%
ze@U6;AlsCyP-gD-1dWFZcXCgTbG~wiaQ(pR^nS;F@-$Qg*jX3ha(2O#OLWzN&#-fY
zb2Y>RH&WilTG{$Tfb87-$atr17UjS|r$^T$ed(WsRDa_aDF(%pX3N#HaqH_<fM1_@
zQ>MbTi{}>J7(JE!Jt4l6P!wrS2ErS9<{qNSU~9KFmv|slG<wZyZ*4DSEEQV6m2T_q
zKh0##Y$a-7m2HXBnO|%D;~AVQ-rd6`{dLV}!2ta+^wAqtLlaj|yB<%AJ%uc=B=GB9
zozpwu*9zMu#bOAl22vn8u&BW<4|19E7RlH)t7%|my!jNt_oT!>eMzo_rS$$}mS^`H
zc&xIp^--IFdA{tqqL8os*S*O3SFO!|g?n71DP(60K|f=3h~;MS$yj0ugrGld2#iM&
z$es$9mF<n|KM4_<CRO)UPtT3Ah6W@UBzW0pquti#4T|Z<Kg|TJt^Ycd@Y*Js5ixEb
zksgHW_gC!zp1MPSJ`EeJi#dBG?={p<$sWR_^@3>7{P^Sm99Jkm|3()E>#QgNmTpf9
zI3H{2j`T(Zw4KG==4Z{HQvF3HPH8o~*iQCmj}P!g-MMLjT&EL|D?zS+#hFfSCy0+1
zL%ZR#Z=j{Cx%{o<8C9l*^nTgg5x)M>0pt!<%H~W1HO;2!pJjLJvfJhFw9ck>W!6(}
zKf!JcyDKKz@utmxyKj!6G(xZLxvJ71^D%`$8M<gv@SJFl1xcICZ{vV6V)J~fq#~<1
z?68^3vz=RejcJ<9h-gB2xNd8C@m{1juSvf7X_3GJpV$K59~bBS^GDu_v!=FP74y@F
zHw{is_6A=IYR&%U$=_UomzgDv19say-YR`@bSbxWiMvj_aI)@6(y&!&UiGP1<+y7y
z!G<cPA3CUPGSS>{TDRnoheM<0l{Wev`*Sz=Zm-$6uY9O%C#?4KCJff$r<Z(2f}=fM
zJzJwM&bTYhJnO`(A5dAmrSQJDhy^pq@<<G5%^f<^u8T^n5hWWx2yJg1(|KfP36E@v
zJRJmn1V5y|W1Y!eZ2aLdz=pfUl#Ez(@zh)Ov8P=xLqwG(oX8hua^v|%zaPj?Ui7A*
zWtK4S;Xz3!tqQ$xn0^el+tOvTnLG(Ql+4a#ZtUrrISQL<)ha9|VaUjeyn!&hl)LPj
z$rqA~aq(RGaNTRLC)_bZ_KdL5EFb}e|3t97b>C5QU*+N*Up}qL7uu|b+$9Sjb=(u`
zi?Zt@*kH~J<54v@Zgy7qW3GHop@qeNSe6B?5<*?_E;jIcemGNAtn^z4@ViHl*tlvY
zwsc1q_Yw6S+0+m@3XoQWl?Y4LS^a2Wz>J`IrPQ;ppaFCXzdYsjihl)OEMQ$mj#zGz
z2GZWOuf{96c*K)&i(-4@o82FyN9{*)OBveVyO(kPguVjiU+piN-Am}QZ0e<fgVLDo
zp7K2vqI~ju)XYLXYkgOE1nX}9G*&lk{1x=Q4Zi>xUawGF_3&l0uJ6%%$1X!31`z(P
zRm%IVG}rTW+3a@bcaS@W9Ix0_=4-b%IKKD91eK7hS2mV;T;<#A+oVqliSI8A?4K80
zbVtXJjEro6D48|Oh8_N%(>kw<4_?{c>bc`M%XN6;Lu`WyOw{d5O;&>S7)4f}0hj1)
zDlit%o2ilqQINe1a>STlhRQ-7X_EmGVh*UkP=?2YcjIx~IDmWJx&>-Kc>WOr3z=l%
z>%=|T_)a|-_B{O2OmE~kqr?}n=?tfmSElB+H5ESqRsDdf4nU%eRb!&R;gIecv@47-
zx$`k1az2<*yE*Y>3iX4h#=Qf#t3c8GNKGyNujN`1>Vd0n2EwC9s!BNEV<#Qr@s<5Z
zn&lDeNHu<&naf_XsHVHC(4T$#>Y+64T*2`l)19eGHQeH}8O94icLv4Bqxv}X5;zEw
z-?w<*hF)6fi#8VMOcTlPWnhGTvNzb}g8eA_M{wJoX}tUjH{^sc<gOOk5^(Mejz(7G
z$j+^ezWY^93{d?50Kmg!20EuY1Cv+aO=suf?of;TqYq%t;b&04v85?nC1h0l-NsH|
zyY$V)iCoUz&CmpQ!U_(;EdN0t1M|GJK<wkMqKfp+Idwfcy-*4^C<OzSUXl;_LXNQ0
z6oY0G<U@gxsJd^KKg|Biu*K8!F#<)NE3w+6@n@Os->p0IAH@!0{EYM!UVD5T?e2Ha
z;r5-Pc<e}pL--CVxcE}_6mmNj9!oHvC&i6=&56it2s&aqLQdd@{xi~T^8B01bKqdJ
zQ7U!zsb+VZ?=9^Mf*KUg1<mRaVPaYi=sD%jD>K?)_yp1*gi|(n<r8Z11x}_m!eo(o
zm3~du`M$BZa*6LfhQ7I3Le0&v`TAn(*Sh}U$(^vpcvq5y0qWjq$q(3Rtn(A)vG5Um
zMOX-F%mF7v$|K)SJw=@dxv)XeDkT6Wd=LTmfT#0?mf*^Kfg;@LofC1*LSYV=icPR8
zT!;5@K7>aB`7|9|#Av4(_7<2?@lwc8PufmoLYS@yKFax@X+&o8G3pL9c{~P-^WOX~
zy789yo{1&-K6>+uEYZMBt1`;0Sos-;pj4+dhCN1cEIQ?m%i%4tJruL@(%?$-lBLwU
z_+ZGE|7ha+7Y+<J37v!5V$DZ}`@Z?%$rh>nKANs2YATN%xjpD4mn%*dw8{nMH1Fv1
zX(N=4!JiYx5FVRmr4OqOhA_Hh;`)>2SRSMO;@*Mew<2Qp$Ddm{U!MH^YvP+p^oy0A
zM@lb{_|5u5pEW3UPZrDQ;v5Pt3CwwR(K@sH5EEP~Y-lVX3C+tz@gJE+UiHVSz#mHs
zQvC!Z&2g1@D1tvGf4-4Gnau<|st_ba3m6*MQM?J)iH`es7pg%h1r0rGHP$J5;bNlh
z;$i63b*~fR^ayNjv4*KNcy8H$S_;20CVWQ||Hvg<{_oFeS+3dG?5~I_6;5%Wla^=O
zOrzP0OHug^nw*2yhe(r73AZ|&S$&<lt6fAut<_=HPKH~vQ8^)k=m&D~<H=_MtTsN*
zvp9myMO+$E6;9{iHoj{W(qvO#_GNGX^vt2uNpzvvL`(jryKQU3{DQA>a}>)?7UbNS
zsNppf*!oy+PiBtK!UyX^3NQjYK+-TUb~kBHq7p@P!v<O=1o;6k<l#xltKW=SxljBW
zmwzU)ar$UA+Ug+oZrqYRIk`g0bW7=q<i!!ktDRm|%E(SK(E%Py)^9Ejio1mavKwuG
z{&BmUXy#}7)5&!_UaY`-`Y@%9Z+n^kB=9nq@Ym^Lz&@W|zkx@|$^myA!6zv0R@{8(
zZkf%gLzi^1>waiLmXrx3-Bx^da}gO{pF~UrCfM&cRKa|vUP!w=lJM9D6J#n|Q|};)
zG3{)uL~e~9bBA?wO)3v}=YlK6sygJh1Q*i5EqG3}d>~M%a~Y-e(!9vULXXx^0}HWq
zw`}GJ-=rf=M~UO}_pjoa&puaquH(0ps?M-j<qlcW2=4ke3;VHrGU|R_&gbl`@uG#~
zw=ZrE$8po*j51P8tejC~Ox=`G1z`a^xe%&<j|WrNb`-5!0Q7GHqMc&kPSRLslHO5r
z6scp&p@1a4C}NClb>8B#S63<TMTHZNsuA^;2=}`-1ElN=hF7w%RhQORymv~9RtOb7
zd)&<Ai@q(c+?VU0#-lr!H5pui8<X=o+)`rdX%cG&4expF3Xd*pRYE~PPaAp9+NR$m
zGQDzxeSxO{3?V)|E<0e<wYk>2`Cy>mo(k05i1BJs3jEtyNBnM>_)@f?8>E-D!=Ekm
zVE|~HW_s5DT3^)Vj9~Q@ZTbPiKR^8?MmL%)2L5Rj&uq-p%x7Jp`OV`~D7E<(?&f<v
zuDSb{A(oD+bsV!D#yapBCagx#Cd|5Lhw0hNTbmlZ(=Um?qA$Cv8z@cWJQ7UlTm_?u
z$AoZ3CBC)~F_JYfxF~+X2r#;Q{{nH?DtW!V8+Z3Vgo|DqzN-o!^If#rCuP>gjBX!h
z3@!;3hKmz3L(tRwLB`)%>RVhU2c?tq)?a;i_}{W~5>Vk329o!G9FY;9>BII?iFy5O
zevX_-l!j(v`vvh$(g&lDTCAzTG3RzatJT01?>|V^tCVFD#j^P8X8H|Y2@O&ioTeEx
zSPhnP()moM7g8|P6Y+f<{*=2TH8eLE^BMqG^LnbsM>Mhhh9LK`_;96ua9)9ykC*Mw
z-s-a=O1?e{$6h1tn{&O&;mr2gfZb0W$+}XbDOK9FZ+OX#lN%khi>E%mmjp)38~Txo
z*h+2Dz5l>f-vA@_o+5d8{+sT!>{?%cM5%zZbK1ze3N#!ItTHv_d-+jrwfIBIYj(H=
zaQJSFf8Kt9-tJ^?y+CiFE8*(qg|oDC5_moYHMw+s{B~zl&RfRs9Q}ON?0p3$F=pa&
zjKAR@=(Bg{kwrNX4qwq^34pJ@mL*oT0zLvDv7AD8__z-|AG;nQXhBo+w>1q^ITK&e
zI7OHn_Wxl?>4gwgDV~jfhBv=Lr8jM+m?ZrHSd<D_PJxa%*lj8H(s}NbEIOqx2AhdN
zIv#w^xzIUaK<ae7C>eQaF%yIC`P|THP~9%oDS(g^&TBL4<qtiiC2ckzBOS{B4>W|E
zvqKx@uT)AMXj4hhHp-8GKQ?BFOC>bSZ)vHEH_-3gnIxtr2{Cz5f?8AbuI+IV%Wubz
zTYI5i=xD@$=M>QrVLWO@EpLu5;oW%U+DuZOwV+cFBusdt`elb&=aEE@2rkM$@94Dm
z>@$N4Eun1(@4~{Akz;E-ScbHzm5k+X=_A;b2+?A$hAdWr`c)KToNd^4uXozl7=GR4
z-YcM2E?iJlda^))pmPE<IRNOtZLNn9y#FJ(S5s``!s%-f4_j@s{TlI7e<H<v05&EH
z+flnu4w^6{j)!rv4$(mXguD`@E279@+b-7u$vj0IeicUK++E(Ga=@d1eSoCJ53a`e
zX^@bO4gtaQ`NvbW%&%($-7rs4;bj3~jl{tyXjw7Eqkj>d^e0-JW%$LITS`9B)tp^b
zL=L?!u`&e-SBk789qEZ57B7xWae~^4fRPW9EM4GgSJSJ7ITucmOI(@frOOPeQEqWw
zgu&V24pN3+a>q;`XhV&LrW1f$tN$i^`<<w8#46M;=+sFU^(cE<MjVkNBcihhI?_eT
z#e-F{MW6~Vn+{buE5<(uZ3wm%%O!;4{m>@CHYa=F33mdDNvhi_)(5Jgn3i>I9jgZz
ze6AT4kk~!!zp&*05bz`IWfeRvAuPXy5{X5`oGgGcL6@7HJ3#t(Ha_kMvrzDT2$}_n
zL7PmhMh2=;VDnigGN&&;S3HEoiCHuR#ZmezenKpe&{k)z5UjlMR)Udy6snH!U*pil
zze31LEb9ZhQRndlEh1y2U8r-}%?sV=zRI18B6xwdkvAcj^Z0OS;pz~JwEE*n5X(Go
zw6Ds>&5@ZBS=Hg*!y5Fy8tPY+JQkGbmth|c9!ClwLeHV|lhQgD>q+@4Q3^e(Xi(!a
zf47Z+lLswwRdQn0sL;-@K`%5aW%ZCz1BoC)O#hcYFT5(k#8NuK;Egrwgri4<|Nn&I
zARuHh#cY1FyYcM=^YQZ1LQwnFMA+>g)FgIs1d8aORzx54KKgrqeH296`j_>80wjhS
zCOg!9tnbJYr+>QVer{_Pj(=xT4`F4Wieo5^C!Ty1Z-)YZv8sQE213yKXbA5KT*VOr
zGh3ge<8FA>&}s4G2?3takB-Og)`wqfk8TI~f?aO|R!p~_2+<J;m|)H(%y+-B=3nn+
zxsRGg14+l%mM+u~PS8oxm+YWsN5J2gdjMiZF{eYWYlezdP+=~>4->o!3fRnoU~55R
zAx9oF>*^0;{>%)L)jLU5U=@Lahd)6PIoIib>n36Y;R{pKG}KBj<hNcc%Om9<8X<wY
zRQ2NwIDDkQ2}&quJwzmbe7DXBTv>bu9WW{ZV|i5fzb$#l$!P6)Wo%(L&M11p$kLxu
zgLV}LlcdovYqnHt;<`DDRR@cMzKbL`-GZ7a!CffOI>>WV@-_2G;a!B&A_VQoTk6Dx
zp2Wo#A~P9Kz<?t~2X!e~WROQ>g*0iBx{id7ZWVWc&6_x2eM197TyNYoj)kpGhE6rM
z<}|O;+xrOx?{TQ%M}gN0&{S#VK+=h|+`rYeWksk0r>fWRURp3kdvall2fXmA>5;bP
zlhdf?YCv=jpdn@cB>V95!uu&Ps@uv`R;-j|@UUhAThpJ|JaD2W1ym5)v}Hj5XT71m
zUPMgnIRbnxq@la3N|DG>B3$yiM5E+QiKUw^vX5+aS{VUm>4>XIk_kFwYX$$A{m?xy
z-^Js;X70{7bn8SMBxf4}Bvpf=()2h_vM4IS^=gREAAw5**daAFX{qlzxqn68Un+u0
zfb_t{)6yR(h@Kwh%>yS#N5==2kAY8tl)&lvQcMh?OQt$P5J1^5J3gxN?cVQ0Ptsw`
z_pl}*kGipBnnt8@3%IL(AhZH<sPUTc{>Hd`3>Nx;3CF=rWjH^KRP=nJ^-rvA-wK->
z8TN`a{~PR=S8G&M)B@2#@UJys1UQnU@#g-d2a0kjHy%N!WR|&dou^wLc5bQ%_<uh>
zYkwTLQ-67icR(F=b22!73Pbt4v;8QXO28S1lm)#*8PCEfW?C|%ft^NTI1WzIojf<=
z2L+)rkrtKY>{oe$`Tyj@^Sk)l2iIKa{_HyK-jM1DmROd!l-{$Z<>WExk#3d3L$dOO
zYgc4pr@dB(u^;4Y(&r6VZqJh%VrE+Uqx(a!H+)Usfnr=`eR5&Ibl4X}cHzn^H>-}(
z3#@9rdu?zXGIDCZ!m-Cw`PJBLAs(W?ps(*v7{t_g<7IfE+4I+`=ecG~fI;J-<Kii%
zr{?qiLVVnTgfrfMJUbkEc3mXl8$@qk3WJCQjes&Vng)jIuf_>1mkOV0VJ!voHj}PW
z%=sDs+?@qo*4H;b1^o=#9*&RU;D0Zo`Ci0e$gTq9h8QjNr>YE8JgqM<`a!Mi`K92d
z=AZlbJ<mx2X;im=Ydu#C0JM#NNw$W{Ka4sreQ??zvTkg<JK}HuJ(HRy8)P?Xt$iTz
zbt`S>+wI74&ZA2<FVY{h|FZ0Y>p3e+3#nkXg2iAiO8WuR{a$V!tTO)k323i#U{3X{
zHWXWBZwswIRLv5Q=-S)Xy;7Y)iG8D6xN7{H8!%?*xqf(f6VG}t|HJfE>%Q*1t5#h;
z^lMOY%<XNU{nSaSX`eAVeyKvztMunrV_2V){?`xgGatmfzJ9`-cP-4A`|Qk*G*%w^
z?`Q6;+}&KSm@l97BAMH7e>Sh=thk<kvNmsTD-S&HscpC&`=3d#lded`x5i4)R4@{P
ze&Rs^mJTd2Qd}R&&KjJ&xJLuyeXfhlfT1BOyVQu!N?yy%!!^q((>XdBUpO=@XX#k5
zeGns?9_Q1ADn@n$kXR?4lKl(_^SkdzsWji&n`yb_S_+`7FpH~I-PoO;ZJoTVa5XL-
zoX@XYWEN^nsBz@@kxl5a|J3ut>zPHVxyf>;pG>V&SSe8h7U|pZO>J4Rs|n7wPygv&
zcHHP3H!n)V1O<fOiAJvk*MbOKSfYVz&RY~P;NNnS0`Oia*%nyNszwmBo?}n}&WKW1
zwNXvd?jIicqA@D11hU%Ep~x^yc?0}Jp;@Hcbz+-h!56Zg(5=&!PZYDjs!-h;z{8bE
zsjQuOF6{np_IS}YU`kFS0Li5IucQ@@MSxEmP*?jk0;6DHOA6Z~f5I(>l&vfUKKuyu
ztpXaB`F)<6i0lmv*y8>3e|m9=oZ2=xeFs2JnibeO6m;sk2qRt9&j<U?pML~g@u^{?
zNlpr*x|6p7Il`3c9NL3Q#Yx=AL_owk2mlIsv&b5E&Hl<<{3of3bV$_@t%r}lXj-3x
z_bdI@5D`6LP5O&8KMy%+iTc~z|8X>*sj{?BJHD|iU&w8rHmxg7f&T)&k2wIAdzF94
z_>)hqgn<B|$hin~3Qqyp%nYIM!W`R~d%?u45X^@qHAehH7c*`Ca|-r9f@ZJ@Ic%?N
z^G&cy>D0Ct!i}59@kR0X4KF_#C&Az|L;=_~8u*?QEzDuKZ)P~HiD03DA;lrcy~jD<
zI3eWH0UI#hr_tBn|1sb#2GbOPRgw|^yeS0#A0_qKI{;d^07}X`Ks-pCtzVprVI)<F
zGz23;*NF#R_!y%53Zi}ZGCpc^Q=;}PB}KlnpzA8|nk1M8aIir5!!HuB(@nBfeAs#m
z7^-*#-2%z{j~Urdxfi9Gf_}Rt-aH-G3ic}l^L_t3Y^96H(u(?^3j_WF2HZlU7xsG5
z;f^3E63V6Gg<vNx1GBYFFq0{5{EcV@2bO`K6#n}rh<x=wnrU#`01C2DV(0$`sUN>l
z0oPL1rE(Om;ltinb!pveghGA?dro+<bH;f~35I>6mTw>?x95S0%IS@9i~({EKvE3m
z)k3(u<7F34RVb`ZDF*+|n_#SJ{Yn#+SpuKxs3M58+s*tp9$;VnG+KxT4wxM)48{5s
z_BlNrv-g;)XH121$cWD>Gp?O#)k{K#C2e&7<hD%>5vpEFF=z!t^6g2uqQkMF63kx!
z{^uPpg?8k|?>DcXQS=El>2y<4!3GR85P7Be|BfK23`M$U0d1i_2Z&D~ugPJj6fpKQ
z+&ea>8yaHePd=C%6y$P^gJQ&a`ZR-eba?p7GZ=UW8qM0lNm~L@K!aTiz`BLt<!9eY
zH_vZC2E<3e@kN~YS0;xO|6{oZJMb2O*O54>`2&AIcjb$m(CEe7&6hyVe^8tENkC4F
zp@VuTP&pbHu^z1>Ji_mNtDq~7IK~<I>5<{^1`+$%z8kFs%PCyN|4(+YpHdew(wKk}
z;rJQtS_u9(&xun*H0dq*=th@NG?sLuD003<KUx~M5vO_7w=u57o~qGX>~4y@z=pg{
zs{@V_3c29q63j1Q`i?CW1a83TY5=0^h`z!-R(H`a{`V2|e~vB7Cr4p;|0ndA$Xft3
zZ7PLo$D+6=8M0G<d2H-4zI)|9Ayzu^*8AiW*r}#ulZ*f_U*~D=&uthlI}8a0W@u?!
z3!)tKp~zSzgcY`n-IhY3b$sFEP8<w5r^K*8k<+<GmU(Q-8O`6*M4z?EDc(4DXz@cd
zQsh-xbv5h%_{W=%D#5unFFi_xliz&?U4&~%asKjfM_YP|ckg8`?412ZPBglFG=UnO
zUo_&v24x?>j7A?UW(fp;=jX)0*wNjUo;$gZ`wci7<#vy61{yW9%6fX!hhsCGn6Rke
zzfb>~U6&JC0>0aKwxS%;T<Ooik@EI;n?t8OQ$>&vx?p+l@NVLXL4Ylu7XnjQnliWm
zTeotNfOW+o@t1#XJ4R=AlEd7HGncqZmn<97`F<ee6}Nc*Pmr^pQXb)9zO1Kdhe$RW
z-b~S|nTUG{oXdLBy0CTJ6tQP)5iRrpwO9a$A_Qx@lfzB1hY+l=G4dYkV(;&NWzV@W
z&X7l%f3IBaR`-9Ow#*6hrCsU%1pn0kexQ}<r7LhC!du<Tp(o{I0JDWaSm!sa?s{C_
zX4avswM*4gc4gddot;U8G6Ldgz8FsbyVl|zC}|V%spZ8RyN<ZkgI9HH>HN`#oE8Fy
z%wQSuBJfgR?Syk(1W?2X;a7{_C>Ans2<37{3h7H;Czw-$5tF*A%$}3F*4AVw%vq(X
zTni(S{og7Ap(XJW%Zw&2oEGPZ>qAB~1u0MjDUTE-1-il*UI?#_B^UYU89Q}kE5b(v
zN<Bi*!s~OG6Sg_H4)U+Xq!gW3Gq8NO6SiOOR<BzEt?hwG8dnJ#KDQ63wibZ-ZAI2w
z17VQ=Mpn(vmil0o4Bfj-kmskFT(9zn&^89D@3<K<?KU|7u~G%^g4%9X8UwMSsK<cx
zy=}Cx^k<8lx)Sitk7QBVQUIy<CxXTCSK5fzh<F{uZ)KOSzOc|WC!*9<$tJ&2V|y=j
zoPLI%i+F|Q`wSrRuP-ZfZ=Q50&B^SNEKKre$(MNSN3GB7qx1U4ya!h&+H9KEHh0s`
z{&`YqVayMD6q=!BDMR&k^=6gB>_`b%%@O=L)b=A<m_eaX3GE?VEdvr>E$Z^gN#{pl
zY$AYbNS80fvlJ-ITB1HdBCuY$D%`Ot1GwdC!aF1_ocnhsZ1dC1h4qTC^C4_jt~Y1y
zH)p;M4;4wo`stid<~NW1=|6+DGvzxgW3ty0W!!YtO-TY}fO5S-n$reu1e&@n1GIEm
zI1T4c0(P3ZMF5ky9kCRR0`ms8-U(HF@noA0Qdbk(szPwBMKlU>l{eLCnsV?$4{21Z
zxdD!F6EWtoe$?Z@cFWp$fib5XZ5wpp^*xBZ7$n`_YBzkj@(hx&g=oZ1M<HJ)OUW;q
zTHE+c^20&-<WYt3Xq(;Ln%~{o2i>JH55*bH?^PCg#!6tM0=+bfuf_Q?1yVX;yRali
z2Q7d`ivp8?aZ$<9g<yC1rZkM9QU?j^#H{^DHCmFLqtM`6bMYp2A|UL9e0wvPb}AQ%
z3A&l|-+Ot3H4g1^c+Z2EZR8);NDqA1JylXpm`)hT-`?f?79!XG*Hj88fVSR`(%ff~
z9Cq!0Ytr6rgM!+a?|Z3*l3kO1A%YniCm~KnU^?F6CDxfsK-PAH%s_lfB&1N793378
z&V(VO`jw|B3g}h$@oZdi>eq@el7qw}-U)tq`C!7c=Xh3+QhlmYo+I2NLanwA2`28n
zINO_?{r{H!o%{N`xV;<uXl|}@*;()Dz6FS#k7ut&dE>G!p9CF;-TyhF|8~`W_U$VB
zYROsV$bX~xqW*T;pdzzFcH`hBtANuXj`O3<s3BIP`z+EwGSBa|BGyg(BTS~|GZsCF
zp4>o~2hy%+JFiw0mf!k+9rd|locXZQvT{Fy=YRBP^}|t=+;7>IjrIVs-zVDn+J71U
z{xUnaH~2w2MS2df&1>xt^9Tb@S>Y{tOc@uqR^@*P1YLb(=Y%3TK!|vHRWjCj4OSUR
zZmE25ls_}lQa!4M|00~f{&}2L^D>XVy^mZIM0E7qP%|`sfcJKqu?R6X+~m~#kDoBj
zC#5<a0K;Qt-29Jnbe9hmWrN1{$$Z)Z#lCNN`byuv7{yDwm0g`*APfws!u$1{Du#4T
zrNPjdB2A%M*W`X7&4TQJteHMXhV1)?mA>PnTf7%RW6YM}(rZ;>Oc$#4uZ3A+xY=D5
zg_2LgZFk|^ZwsM6(w;$pFr+ECoW_qr1-x|lON(n0gm(;R$sKU{fUX0G(GG#o!dV(o
zRq>}bRb}8XYV_o;$Nqs<{oFqd_?-|Wc5xf?Y>`AjU!)Bdz76sgL}eB^(Y-QF=-D9G
z{G{}SO$9*lI4UeZQI77M5Z5en<>=&E+N?<3jJE9}Sgd&|mhi<4-W6wUWfRU~KQf3u
zzQ=RUyo2kQXfrCaLM&Q6f0pO)PXIA(hur363q4D2-$q25Uhc|1+3!1fpA6DS+%+{G
zCQ{XR<2ELrYH2OQP5~2jWrcO>AgsPmYsxRFZ*%C$eb3tf2og^R8Bzx3*ak7ekSoEa
zx=6+4u<sAm!`?dczEOA^YC-%WqEu`w)u#c!6;H6)5@`QsPe~A&slTXZ*Fydt$T;!c
zD2qI%H<X;egHMd=M82CUvi0)SgG<6$<Aj&1mk&+M?hjX0yxJRB4}r2FcREx1_Qb3;
z<9=%sj)(4ZWR*0(1-H_T)}Bq@_xs*y#NU}|u=<DK=oP-^=_ZQ&p05UAic|Tg+D5u!
z&yO!@jFcluLr}Y>KY6-tS*dU`GQ?>OL`WE5j3~JkWgu-tgEMV9Ko`;Iy0OT24Z=*U
zE-(gHSl95<fm!?11{&(TfpoD@*PKfgy#7ZrlkhFrTJ!lkqPH>JKj_@KCW~w|5{Rrx
zl<S^N6uETMlHB?RJ=r8Cj#(ExVQV#CAoE7#DXC!v8;Vki*cVU-QQR8=i<CJE$BjOH
zlO)!zn9)quaw4KA`cAd*bE3zfiGu2Mngk)m7)Am$xGlyXp3RM25z=RX)(id8;UkFM
zMuhW{GOR!iq>uCkxy_ehC`;gu>S4OMG=yqtT_OCQ)}Qdumg@BcaXvfh2$Sk8>aG;_
zx8V1WpATp8hKx|XOB8)O*<BC%6j8u{vyGoYc~<;doFce!p9q)*#@D?-?Gx2x&j<Pl
zhV;qE=j)gV{0MhAmSLmdaO2Q?_c}P-4?nVS-<6z$KJ_7UBb218P{V3GS!v%9$^8ms
zv;lff*wUHoWvRbMBoQDZ5hz^kXnW%l+Yqjf)%X@pjBNF-3P)oju15s0{;eyH0q2Kd
ziaAI%Bsm<FK0*!g>Pi_*2WX@V?Xg?ObUH<a(`YMg<Z0@X{uqe#^V+wM5Q=6)%X%^^
zHt5+K-<yy`{3D|gM$>VnIuNIp;E|0rU^HMrn37$E9R${!h?6GXN#@ap8#@alC+!-o
z%NxxqXO6CP5l;Xxh7mH41myGrxgW*5!N;Hy%*hwkJ_WxKlY0V_B4C`$Keo@fQlEqa
z`Dfu@lWO=wIdk~eWIUeNs~FBg9$fNA`|z4qWe<R@lQ%Wkt-*PsNfN}qxb6@WPY<Q3
z;tJ1A^z^@zqoW!QIU*FJ*dzDmnB)k97eWU$ijy;9BR~|UzX-mAQn<5!frcZ<k=JU`
zMJcJ30kyEbU2LkFV~&UqpK~CBaMHifP(aXBgw?`O&V=eV>daM~%aQhi#uRfD#1m*A
zl+sAb05xXL|1)v23m1k9oN2Xf$wlw_9cuEF;PiaD<?T=F(vTrEH8x_OCo<CSs&IMD
zy-pBN2?a!hC>Ssra2MW=8);k70zmz8A@c)ww8vl^*bVPcdJf}+!sM5My{Z6_sggeL
z#7)-X8URi{HJDVjbT=LiLpBZGEX(x~CEet5P5qc8HKUkE?9tL+>yzqYYo|KiPhkU}
ztDnZJa3yy&nmuwWHC{H5VG<yTI|NWZoNSddc{D0*E0FGs(P4lVWE>(17N?-dhi{GE
zs^5vWm>{OD)wxNMmk>iI6->@Q)}$%7G-^b78<a@q?6PqSB{RU>FRO}HN=5Z2f;1M&
zsYxDMuxXWzeg~}(V!lwxn~K`i>Ba)A8aori0SF+XrfHTGdp38&jAg5#xY-&m%=CoD
z3!ez|dDa3i-pE<7uj@lj`Vs^wa)Qa?&ram$?^CZ4I0;;A6VM&${=%h^NwvTc=1@O^
z1IZq=)T4bfaRg&5U289NoFR$8RpS^zA4F;Qwm3g*(T#kqIEa}P1;PE}7{TygSm5CF
z!inEj7Q~{v?!Gt#7tV;KF9B0x!&_D<c&JMWUAGu%JQ16TqUeI57VN!R*p2OGKJ%;8
zv(+GtzCz1i#ZbS{XpW%gTGRNn?J))7$gFga{Zu}olT|sg6~bJeREu3`T?3Y0biYY-
zqkW7u<Kx2_=YBi}sll@VCjuZN5*J7get=lFK9V{|$rpPb0stC9djx{!*<cJZS_m3P
zR8#~0P^urhF|INDTZ-W(m1g~yUj(S1*RykJNLvEI?=*1X#l<0fHP<a2O|z1Zdai#e
zkk6U~RE$Ps)ngN!C)`oLtTY)?<eR8L+F>-A_~-NB#Y7r70A9FNw4jh<S&Dhb&S{Op
zQ29DImSV`evOy4JbrwGe?ZJbBn46H!9DJ`qK5;mSY(|RCLK^2D7~_TuOfi(B)6IYz
z3Lz9<*y~W;VvlAwSH0X~4j@X{F#Xv*pn|=|zP<}I_B>V3E@FarjEAC2wZYadlb|t;
z6E)``sBKqobosYXt60dGRA4As>kD|n_N${dBF_v7woq3<^m;W2%i<bSpe>J%tk8ft
z%v;)8<dYSxxs74*-9AsBu1SX(7r$s?N*#MB-IO1F$t!DYxiG^aU4pkklYY+5l%PQ`
zZRq2KeME9zMby7@sGi_hNCb++CfRU--~bjbesxIW0#Ysd#wn`SF_};igy=mLzJddp
zoy`zMT~?xlNyh+22<KpGZv%h6Kpc-TgC+r-pIL2=Voc7`<2ps`5R2=YsB64@p!u}O
z?@Ld~RHg_Omq(E#o?8*griPO1a+a3*!)A27LiGgnxN+8QAfw(VZqBOQ=O>DtR_~o3
z{sVY_Vn?E#NJ^n39puYfZjfWv>UJ_{)??!>=9iz?abYK0*awVF|7wmfy^v3iuqnJS
zDr@gc)T1%nfiw4Ov~UvCmJezhK1V^zRfklpL*o6w{`qfsG)!Cgo_PB<N_rSFVW(HF
zMHzu&d!+Zpuw2YaV#0qOy4{27bS)9O=T+6w<MGO1kf;2jRYpz19rk_R)2@079Vdw=
z1OUN}G=%{gaLEIGTI?~iDv9Wq8R36GgaKA+R9qndQo`plw%rCin(5rb&^;eXU-5dG
zy`QCUJ`EGZb}cd_h5sac;II#Lo4PCON&y$B4;Sd9qom|Y5+Zi2nJB8&Rn1u?15#-}
zhiw+v^-vdFo<mk#f0{(oEc2cdEsLVYdpS|#POm;^dr@){!wb!3iYBacCg0^Kp}RRj
zbQD)uV2GO-w2t<O^@RgKnfl28Z&Mr%FL?bpa^)VDeS*_W=6z6zJyQ0?VuC4X%0Pdb
zUzHI58%V+L09~l|NsCj9L~pF_1@YU0L(UIDOm77>CVM>u=O=-qyb(7~{nq*_aaTLC
z^e^4b+It=c;>?PvBtQ`d9-<sLBm5vqZvd|i2z~+J1vzR%1`5BFV7dhtbyncYSfQT?
z&~}Cqr^Lj7<#?A;R?*4+Qx^LA9=cglTt2z(n|HUPGN+H?`+b3mFXgi1SacC_ETDup
z@QOG<HOrm`#$ud5+VR$_EbYbKCAUcVBBFUej&wlOBZwU&auWE<7y--&BXy7pB@nZZ
z3+v&)Ij<wyE~>hSJ-^y{rSA_l8luI^;jHE+9pu+b09w^M9Gn-{TC}>F<rn5RYHY9U
z&Ud{wR84J!ateh&4FOUyn~qN8A0Vk-H_3vT+K`;WGmtQIo-XqA%pbFZKL6cFr~HR5
zI3oJ(+kf7q(@_+O4^g86{p~1+OEkWV>sARUpCm8H__>iD#ax=YU7ATSyvV!B81Wkn
z&iJA930W3pZf?>^F5wI><p|_<%e?6db3gg>K-zUrR%oMjC-hUEFTAIJY<HZK$Y@C|
zMFqYkI`_>H><j><sMH+m1TWGoVUvfwxN|kyrAZ~6FREnZK|G3;8`LEbekh6p4JCmA
z2Mc+ie!Qdg0_20Km~&fo5*jWAk_rAcv3aUU;a0)PiS$Vp*vXuRRly(9k8`wDk7l2J
zL+<FElQLP*HbIt2UH07!$;CqawjFZG&O-qP)akMS&$FP{!~o2f+p%Xjq$}I0W3z>I
zNq_@TGnm6x8wh0peSn}aYV*nHRF;h2*W%_0^XTrWR}J)i)fKH@p~!Cn@0Bw|_BgRK
z*-EYHhkIm4NANbOexIibC!wqrkoglGOE*@O-bd|_czqjS*wl6S=Uv&S=|Co#)a${<
zhTk178@160-`zFEk@e;`uh_*%d>@LLWdI&ejXCDD4(oAxa`8fhnl{o&L8GbALi$Ed
z5%o2oHjwB=BLY8d0T>EHRg@a3!wW@I&#19ja}A3=vY;63tBnx+0*<ZYR9B)e`sffH
z0g_R1RU4sVaD*h3X<BMAiJc0EF+TmVl7n;i&|vm!Q0&yWB%LD8H?60O<#bDmUL079
z=*7|@6l2)GsAj3ez;3<Zg|-DV!10_ES7S)NG_SQbFoGM_mE2YWx%k}(u+&PB<<p>`
z;R2aw=AZ#<06h(QE-gXNIuLhO88$JCVD|kikAr{K$c^Ki7jNRfB3bvOR|;pP4-i*U
zR%GDFAqHNTmsuC4pob)@fSVVsCe#?dsD?r+jk_YdKcxz^U8+$swqL8BZ}68;%wd9o
z2pJgA51sM|HmDJaa#q)bM?-l9yQq3>EyJU0HLth@&y>2TMxNo|_&nP_`D2l8bFj$W
zF%-^E-&clf|LKoKx7uxD^IH2<2o-11V9`wL)PB=A#K{WB+rF9N0HlEMp~1Q0p6Y`j
zwIfiKngMU^NZdK*h55AE8@hzI@<e>(HiEA$<eZW>vGi+lSE=}SXWRv`21<2-3}kPf
z?6GS7b0e$qu_sy7)RLhtj*-)lHu*JV*C<ndGdV_|3spg|m$qO+wRBkqt~}GwPtTEp
z*d<eO;oRk>btZi@O%}JhG*&8&eDPFTdHz1ikQ@>VsO01wK8xqZc9|)`WWg76eT%N#
zwO0GParo5MBe$a#?BBF3`z%=wQ|*bseSKGQDBe4AGPrZhB?B%>;L2i#Hk5wnbkAGp
zVGPe(hWUFB%n{4fMSO(8^tTOVsVOex?aJU^yvy{g2gCgEm!~wO@3dAQIkVc9T$Ma*
zB_Hpu;T{lnH3&jsN>~oCzMp6!T{LcBB3-V&Nce#T-E9L?+^=-Y)^}^=I{{=Zd5Mox
z5<8ya5f^GjJ8CsMW?&XVpuDWKT=%Na-f*7opCEijSH!*r{^Dr3U!?!!IKb?zcudUh
z3~hkf&L;Q5_MEjTyuUhv5q9feX6^Kp&o^jbrcZA445>N(TJi&r45@G|X#7Pz7+&7*
zV_OeCbGl$vnVhks|MYpD^`qTq_vr#KFc1aicVvgb)nI-h6kJC$)Hq%QxlE>gIKgqp
zM(|kRR9M>{s1W?f7Y;$rrw=lesHJm_r4`FBkMrVmjIY&R!(ZV@{i6}K{V_=j<oC34
z!xIHLc!L0AYbwUwSEv<gslQVly1Xm;NIN)iN(cFJa6&i<w}apLzWN~!&S42n*p}6k
zUL$ENbK!aK)f~3Uuxu%DJxk>-vv+cQ2wKqL^d{MQszv>R_2p&h0~{uS`xe{|m6Jn7
z9pv{CjNmJr%uwxa<LC$CT+0DAxoBbCs^4XG1Z%<F4*0UMjTCq|!RBq5q|iNe^d>_I
z#_Tu{^8hE<ac#-r+ei==(#9gk3v5qt*dF7^|Gl?U3i}e@3K6tadjAk${{}@Rw~n?F
z&%cv+aLj`0Rxyc>7sAOB85G08X-b9S;;4Z*ae`C+?@Jz1+<X*5jAOHx3;q1xh4FBD
W@0isKp?m-S!~rR5DOD&~g#JIn5jhh8

literal 0
HcmV?d00001

diff --git a/docs/KeePassXC-Confirm.png b/docs/KeePassXC-Confirm.png
new file mode 100644
index 0000000000000000000000000000000000000000..989294a4ef0847bcc87833e43c75075acd0ec806
GIT binary patch
literal 72759
zcmb@tWmp`|vp1ZC2<}0GEbi`3f)m``-Q5>Rg1fsV*ammEu()oJusFe;#bH_G;l9uL
zpYuFl-cN5`yVp$j^i<dM^i)?>*Dp#{Sr!BJ1L}(xFEHfgq|{%$KoWcL;?)b}x6d__
z<85^>UXnb@OMTMx%{|InawgHj|G3M28~!=<l}g+#Nq@$vjQroQ^Vrw;sPe6iaw4t@
zcKUM6`pL8TXTF0TH?hadC8~_mJ4eStUenrA6ij+X3i{D_D!C(@)42@^KCZ452n3?O
zrG;KtSh&8ci`Brufa^n?r2uJmNbkq&(xmq4k~NrumX@_%y0sd<b^fk(x|MZyDZOHH
z|IwBIPz}z%M6cWe-p|kU4Cjlu9x9e?RBF^{)M+$mG-<SGv}<%~bn8r+YM>QfqW1aP
zVf(X3HAiVCqjV07xx{22Fg#H>JT9U_3%QiR9Z~P<%`cWea-Lg=S)NcK_Mw%L`iFqw
zi|8{LKa_qr{fPTfmDF+a`z@m;lse5JWz_5Qv44s83YX^t7m+PQBp%>`D_WGq{G;ke
zK$Q!ha#t%)PO0m9O2?_Z(Jc*|zrVFwzjeN>b-LFC55@$|erA{P>AZmJQ*1)yKg3?H
zhA0NDLaj5MBjt4zg{XZdeh^fDYLsPy(xn}ywom4^p%u8_|1GUfD0uWup%?uiYPT@#
z)RPQ@?Vhgy$_#s!QXG8D;o3$qTRCeT=T|O2fF-LZnPUf4AJb>G)(kaWnzt3MpmQia
ztzZAUN1Z=u8e-e+Gi3ifUES?ZLCxbttHb2qLec@-?G70vBvGCzhS@>1O5E`P6==u)
zIbYy((bUD<Zc^uCH+v0R;}#e=)}4K^2`e~VsoRAd(EdAS{lTZPft)MUi}W>J&~*M9
zPs@P;$ah9dRh{OWp&4G6qN!i$E&D0tarqgm&LeGMs;jpg>1|_4hWEex{LEwj74Ehs
zFJSQS>D+ITZI_^Zj_ZRsbdIX5eD?Zr?-U7AN`^iZ;P2^|BepWN2j4r1Z_J5suMtUY
zx<6X|^sfx}1$oZcPU+WwfAGc*LYOaDm(nc)f*mOgC|7+oz1H*=^T`86ikph3ke(;|
zix(Wsw)eJUd-W|Pe?Hc;)Q`*vJ^C{NQAy0duNRFiHD>?Y=!JDyz_y9|nc6MO>Lsm$
zqzz>9@oey2iZ<V!5`D`)Hqy#iQ9|s0H+^ID3KS5;1N6jQ_C@!0j41FITK|Q4w-4fb
zJbtzQU%he<yWJXoNa$BKUn`6FaovA-gGitwqv1pNlZtWvr%hNmBsUBaZfLZS`g19r
z0hKo1;>@$rKx>EZ>?1t@`}vc7CXN`z2#8IOqa41N>sz)Us<YAhRIp6vKq%I~m&aL}
zXO$vIIvdz@f{Zh28}=_tmX7n$3$_i&gs)OhU;fkRi=G9p7`wym{Us>0H@tz>j3^ou
z0pIdFh&8-@{U1Iwo2UDFx4^s2K$OKp+*{UtPa&0Xh#&afzuj0T?w`W9A_8z5d4kC0
zuwQTNGnV>i+ogM1+5HJVS@-btq=|@#sPE`tE}D|N{P@T2%H}TLxCr{{-@8TPp6{Ly
zQ&|dA>1bl?hK;Q~S3f-+<)IjA53CL~AXZO~=K`w?anzQfd^23Lv$OaZ%Pl-j+Z+1c
ze|VHU)+WeMZg{0j3}3$IxqfH4_USrs?UR&mH*EY9HX6Rh^y=izMV7D7uDHjJpvUCx
zlPLE^fz1|M>8NvQ-MX$&geEc|L0s;3Yj+n94=*Gqha`jDWCt9EmMa>dEq~r1LI;s2
zv8yQjUs8YX6P5swb?QPv!QG%|_>!22ouAZ^Il7{_U0n)#da<sduU{U!YH4Lf$*+>8
zalG|ArJ;d4gUtwh@a;X}q>*a!Jxjuf$F$7is0ddLi)4Dq|MD)RVk8vHgJz%<eE*mf
zdWwRH*-Z^Bq#g@R&~U9n0|?qvZ`zu)xxZm%W(ER*sd<{)K@$6R`&*V<i5XcS8n_;L
z%5HI7W0&t)Ar~sm7y|>t&orU(pZ`Pm@SiNec*8R)hL6P`pSaekL5b36>v&{j+74jZ
zia+XxhLx3nk~9v1oq@H@^*hNEw69*hl2cOJo~tszUuB}96Ak|x`th4oa=|vIpYo!d
z0f_?%Z4LgXdKSG>76W5R>Hnea8U?F$kK20sua8u3ZgKGOJ!NmDq#3}wsrX_ffS%JN
zu#~b!3Rt>m>hJ!#yoBQ`LA|!E?Hx5;T{`D)n<07u))*;1O6vcN6=R{?yxdamI4Nxn
zOW&VAX}^Ab+%lFr|G@OW6l_$EFZS3SZS5<gOc{d<re|VG)rfDR25$X~#TQlo+1l2&
zNw2Bn>CQv^hB*2sqe{10H!#qXe2^qAmFH<5I$Af%$CWUC$lU!UXAmQ<LIzItfAN0`
zPCRTYNuZ~8Z+o7^-Nl9o)|C6;XWFXAXuCEjvEJI*+1TC=1A#!eqVSvX>|{SnW4&+|
zg>-nMs@^RrE_i4SA}K=O9ZkT9CziBM73O}<i3Whzj`E7Sf6gY|Pb#DrWDJY!M^<hn
z-)%(5<8tFMODP%ZlY)5Y7wo&jj`<AWBP+?bm$%Uu@>%j!5IYtg0x3F~<mAl4NB|sn
z*kPDg-2NBR`~RXeaq;OkHYO(Uz(Cmk3}~jwL1(eqDW<zyj8(t!yFvzA><8XxSkF`b
zv(BYAS`o)k|9J^pE65iOU^+bB77fz1B+t@GryNVR5@TJa2D163q5#ATxYqIBzn3n?
z7E4N^%=JWm9%ST@AsS%uT{>2w;mqdtepv8#aW(m*dtCQ4IQ`D~%Kkv;a@HuFhIbI(
zOShM;;T?YoswoA;B6II^qc12?C|Q~e!LMR!>af~mQnAI|FNeqa&`ba(TRwgQ1MJf3
zFQxrPXzn6#xA8s!Whk>~RSo6u(^p3+`KM!S#eH~s&wK|66Ad(TUMZv-4Oe}mNe;P3
z_VViO8z3gMq0g0ecc1>dw-o|1L3a~u8SY5gjMAVo&b`-lPoX-+lm~NDMT{3N^>8w?
zvi-GA#<Ek(e?3r&lddiC$?bg)U#eva*|ub3hA4Tp@`msj>?AU!;vHuG)UA{y^R~{D
zu=Le2Vo6`i3`QbtuFYu|7G_C*n}lzfkdcFj89!M_&eqy$|GTwg)7vOsr2Q|`($LgP
z9jvoXSsT3cRB8WMtdU+!-!>@4nwN_R6<6diOR1c}M|m?Y#@?p+#{^)o196pY$p(*e
zX*lj4Yj;C~@HM&GZ73*_c9DUfJDfu$_+Ato`FV`qsJlg_yc+APw%=o*eEelUHy80*
zabbBu@bf%K>k(*iS<{~LHPF{*n)G_OyRutsWNdG5@4P=Bo2@d)@V`3X^gT7TLc=G%
z(pkAU>m646z^I$e?=sn0(=#|YC=-=!s8L)sPJJ=TWvN#`4hri44`qZ%+}^^Chg6UO
zf<n4<Kq}`*{QLQ^1mFv+*L=i@6oO)5x3j)1D=fOc?&KkS-H_mGrC#RgB8mBBmiDs9
zg4ktrTKOsJ_f~K}JLU@_=Oa)m<yf>zoW^K3aG$HWxp|b=LHX;cgoNB_gDK>cm<4dj
zYR!jZI08*p8%bf2^OR~R22{v;mt1Iazs-EJnWuU?d;{|D?}Dyk7w#g<(i3wRX(^!V
z@6Xh0dFVI(#>3LH@ysTg4(JzZ7NB=CYAscf26o&FG(Ik!inT|+d|Hr&Nh{9}T3#Ho
z{bZnx+(Qb1+YJN&+mBy8btTH`-nj^uCo58Z(Fqz}?7rHY`jjx}KVer53Nel#pM^Di
z=!22Ae#i*~*tFbTPgJTiE<5zN4|845gFM7UUS+IM3tY-0-F218Qm<(5@w!MJHk0jL
z?i_Y5Zu1H?xkw5>l<pnQf+SU_S50<DgRwfyo2DW+=`i-6=0Yx-f}x2w>BeRw>~=Ki
z;mH8ESUe5;ng_tc;~dw3o^6UUo}WD(-doR7vzY46X$M-#?z&%7Fo9Jl-`Sr43t|V3
z2;N;6(-a?A0HRSn6<2YY(juO1U%G}?mQxI0)^)Us-iY;|c>=-|Op$&3{Ir=M&Sf!(
zPD>^pWEgeY;Q(c$Q^_A^uIZFWp;OXrw8go;zP7Zn5#P5LzZzz=cW;zI&G0@J{$1hY
zQW;hgRPmNt{D0Rp+A*O1Pi(P6pr9$WR6;@rw)m<~m`W(N7>>lPuE1;5b-dg8&;-rU
zxw*OM(<HMpm*UX+gCq6WZotPHEf;S82u>SO7Wr|x@2A%5q7HscAaJ3?vsM(Kc9e}0
z;etgJqU)uzaEppcMq%re>S_QA!`r}9Ui4ryYBUle)ALSF53D<P9vy|OllLc<`FQ-*
zEH;RF%vdg8qzA?hj%BiMD&|h806lj0LL;4qPAfcrs9$<GJI`N}J11MFT+_h39UlK?
z6enTyA>Rrl5~R<O3_#Q%PPRx{63fA>74E&cT?>5-qdsLN7Jk)Y!#BjA=5q7?#1Hft
zT&y!GSTEw^X6qS0NjUGyCSf~A6on0ox4kRy`tw6!X@|$DIw6SLD7z^jCVT~S@u)K-
zu$3iYx!<+DR&sDHnp{NN_W2!L=lY3!<W&rjcSOIbi&%6~0qXip32|KL$KNi0h*rYc
z&+oY*r<HO~zVZ?6N>_G;GhdXuV)t%H)-^(aFiZmQP(17?MSjXZ@uV&NkCP|B0+A7C
zE82}P=&;ogWfTz&;pR35c^sC`mOZgO0eyG}V_018@X!jzO_?2cn$5He2>t3HEQ{k!
zy-WfZ@;VC7>-u(?Br2e7zj*o8_TS!+Tw$MTbJnO!PApP^k2!o!sYwM<c=YZ^^K}s)
z+HNb<#llqYCZfOW|4w>?)~yD-My&L>_Za`j<hkOJ)?s_Lbc#>wyoaDm7$yMr`}=z)
zl!8+VmLovIX;NRTpPwHM9nA)8H=(75(9Dfe7m>Fsj-Y1*OVe$#BI!O}P*nmalag|b
zt4@=4+3s?!vTD=(MlW(A>nk7FBkLv4&d>1eCliYMiz9RosmYA6sPbCs8vR@p4-%}`
zal~0d@fcUIoxF({BgFq+-e05VwZ&38RJ+d$rq?#+;1fVgBWMq|<x|H9(pyd@=YzY3
z=oK&<#@Svl-@I66BVC^^3}OMed>q3$+;5+KbGVmlU+VIZ6d9nNEt!m9#8h;GfD<~-
zn@ZR_EI!Mt2mPKT*fom09f;K%oFTGme66u$x*Xk@8dl1nx=7t?MmF}&+w#`Ii0I<#
z<qqItds&NLWZ7`acG<12Co<>iEnD7NT$|D>g8Y)=E$u6?)>OCbgCJX|%I799C^;~s
zj^&Os)51=_aO2xBvRnU<QAooerpnVp?xPuB0bfwaS1-i*nUAb)&_WK{^`x&q{4bt{
zUwIC-G4IIkevFSL=9J&UXT*?wbM1LubMOSLrc~ypr8$v0UyTNl={8@>YtrZtvX1US
zcY?LuY9aDtigAnJ9tG5HH=q$TmL)gjG+rPOF81~<5z(dDct70HBeox&?u(V5AIz`$
zO!)%S1*u|2*4EYwK?(c&H;Ps%ho56(V{M_;WO#InrjUHm&&4Kb*=lr_j`)-_#;930
z{><Rga$a%iQMrUB^O^2&iG6uWUd04qu+0;I61XKqLQE&ja`YC(4MnOye3J->q0uoB
zyU3Z@?Xaenyk2UoxF{NpL746#3QjxftPFUakb9S&mhm;9740x=g62Z)bN=~#kvHbx
z(SdgEw_}uqwogDuk#&A>+8#Nt!A~u|dfe^$koQ#xvqIso0|aKdlQYSI+!5#r7Nig5
z)E<hf=9kS5z+LsvcYqDOG_-;|7MH7+bp9H;UTl~ojXtGuC52bUUyj>*J^hb0E)hBA
zCj=^$0vD%aGvwmZjF0^}KHKA9Wkr39iSYsj<mC7UK60l$)MZR%oB4SFNB;IV3(eJ)
z*f%(-w=Vr=7uYh5cHy6f%z!}@(H0~6CuAmgOy$GTg?kOTUY|D`b6m$OE{T|1T!Iy|
zV{Oh7Ug~bGs@!VULvgN$?gg`IXdj@Zi>~#ruIuVnC`x(r!1hyO+J%ASx4yFsCi&Bk
zNt43l?GG?vvxB;|wMB_pnL~xxr4Q+Qe80BB_&MQ}-$eHpK^ySL75u1OaeHCobPpm<
zt2AuUhAh^8NI4^Qrp5li^-uMU7|rdXXIDmDBR4mfh{qP2OxW9UXFMxc$m_EnUa`7|
zvlgT6iP42d-pBHh*;e{qQSi_x27nzyY&HM(?rtvrc^!CXh0m`;h>>NN)n78;D&Z0N
zhTet~7$7d)cxmv232;1`{I2vCSnq>x;56sXx>t`al=U7=&nrya@xq~bzS3+oUoHB-
zES7K=7zC`*Q1_cutvV?wyDYTD+ry*6%=gd)1+Z?)CYS==-vV-xrEj)-pu6OZ|JXe0
zBlS?Y50O&w>k8d8IQep@Y`H(88icE?<~`s?@~tX^v*H*#yeWThv_P`9t&Dcl?lcG0
zV(M+pM-ST%lCsDBw_}H`k<stdP$@fWm~D1_{%$tSDL$2j{<=Iz%}B(vio4k0U*M}I
z+uY6MbPC4Tp;jn=d~cZZwV5HV@yL9Du}5p$b%+|ZK=_(I?4fJrC-z%?@r|0Cy7sun
zobQbZC9O|4CT7|*z-{o2Tl14seIelHp^CLXrWAvg_E#=%Re<@lEssL*=dDWYAeA7^
zi<_be^pd@L6z|eaqWVj8q@BF2t<IOZaA)LA#bb^(V8wK*%0K=>+CidNVM_}?vrcvK
zr;xWi&dZrfIed&HnxlaLE%NwLjrrnQzZxF^n^F7tL{8Y}XWy?56j%((T|)*y^a;e=
zzowwun+7bTFOQ4h)|+!SE%n<VWGy<Y_>uU%Z2sP?j6Fv4cp3n9@-s&%={>&Ty-H0Y
zhpP^OhM0!BMXniTmR2ij*`I?ofkCD$);jz#4*gLM+wRha8pa*gF_kCrm6f*Ks&1Y-
zPkV!pht9bR9N||cAExXc?ZgC9<#c7V)FeKqaYcJrM4n&$TIzkNL;sF6Z`sWixpz!F
zD-~?Mt#dp5VF8310Ivu#Tli35B7Ec?ovt1yVTBXa2_@%iI+|$o?}P8u0%Yr9l}hb-
zvSx+sC||FA(`6|=Jo^_`-hpcIUun3g=`u!Z%B%4SPIdRg1vbi(u9XFZ<~Mit6-*_>
zP{ORJaThmO+$);!jtwdL<J2p$^IGzv+?U6e-Ow^ctjQv3{5^WFNQHa+Q{K<`*I&kp
zM-(c^s|B%OKTQo{gWzAC0xvVCs?fL-!fKh@E^)#Pd0!Rke^qBw^sZ|^&ci8S3Y+dj
zEsvPciCYO-6jxAiPwREux`_@%ziGLL$5Agr@LXiy@hDqO{Usf^*ghfqXlsvCHn2>b
zmHfo|ok2V;^oy%`r=*-hBn_q5YZVpvxNtO3*|zikEM|<7%|s00-pH6c{&RCaJ7|Ds
z#fNCwl%jw|xL<#W;|Ls<hix&irJ<hqIT^Q#y`DwCKzpt>(cDjj;~PW5NAtc1WHhvo
zn;)VhR9K?IvMdQo@CdO#Rl+c)xsv53BWX1~BaN>y1!9ES5N{cK`KJ3lf`z&DJ4p%~
zE?oy!d&|@V8=~GHdmmDMd-r}I0J~`-G6gM;$mZnhNYsm0%9(%7#4wA(=s6eJ5Gx14
zqBE<LTB|ce?C)q%P10Z{Ba(|5+Ro5-Hx|)Nd+g<~cjWaww|JE!>S}6!?TH#ImcK%p
z9H8d5wvqAi@wi$?_wZ+b2F=SLWleS}@B16|zn(!?yy-Q%z0aO<8jbjv#d&TcTy(wW
zNsbAvAW-7gH=upvSStoBJK39x!(UldIWjU#t1W;<@~jb7fwi|oU4$WgK0~f!9q5bd
zbfz*V2awK`nR&aGB#%|lX~G2o{}mkyvD;DI+T<lQ9&vL~0+p{NIc*JtWct<A38iDb
z-ltqo)&8a}-t8tUGV*b<q4__t+s6@HU90aLjc!<(Z>m8RXF8rFEnl^o%>+>1(f5qr
zPrv+=xWRN38!+ATNmA&5w=ineVAe$-?y)GrO@t*)U=;LSbojBg7D6Zg7JKdvmzi`e
z4Qu^&^gH^wfrCb9LyHeXK<O+fAy%SvhO}!?$#&HVyWJ%JZ;{5?@=v1f>0}a@1cbc>
zAC{wHP5gxId@*AjNhdfbFr3Rz<pqN3bDFz?`q7y_cjE_P@$1l3)S>eeWaXe#=6nN?
zt7-O26Gbv<*vO0>#|DW%tH`J{<vD6<g+iztYr9nBHfres$(dPBR%I8#h?ZW<8UkC}
zdCf$LxD%GzcwT0E92U6g#sYt$05&EZKCWucA(z<lHCXGizvZ)69I~GH{azmAX3>sG
z3W?R2(xq`2(LSIA9lgPWxs2pbUFfa(Fp0zTqZg{#pWi152Fby1DcOw4Kv|2%fwYNL
zKTA7FM)ZZg^`y7JOYp^>_ysBCk6%9FQw!TfJJydOb%SmMZCd{{g}a2Zn`v?ETniC*
z4pH^$wEEAkPyWAENJ(1~tybu3?N)8Ovqis79`}3)O<7|~FS_wwQ!Nd#nWn5evQ%NZ
zZEa|GlU|ZP9PobE>XYddv_x%ySh)#FMFKi_4NagVo8-s7B|pgHyt1S3;_<J%EJFfN
zqImTYG)~S*#P(xWDW5hL`}9nSW9?ku68DzAHefTIpFc+DYWwD7TS~=I&eX&(@xDcC
z&~b0=Oa3SV<O4$xvaI&Ja+)|EKxDgWjD;Xd0Mb3F%HTZz_tB4F3ooySU$A5Lf2=X`
zSkj54A|YY#qwg9Z<&CwZ@K|!uY(UWMr-f;$?Wx2f0e4SX)V%J8yQxAg2ig(Hd8Wt>
zPr_xYM#*W}1WrL?BagJ7iAb;-4mBrnQe|6f<dpRT=jv1n<r4a>Ysc4fozl7;K<(d4
z&t^ltfloHvN0QZvMWIc~yWeVPnc0DTp`wyZM`IVG^)gQ!UwF0Gn4pQ!WN0ch-OHE5
zrx4V3Y^k;TQV||N@+e%%Tm*{W4a4#|y94?hRbUtxN!U3vv{iSsHV1JP5PNP;$guAH
zZl|rfGy%b5LiVO?1lJZ<R7stzLMg>#zabWD{w`Ih8RAx}B+W%g>8RE4A(dwxSSr>2
zQMYa;8~?4Xp$FGM&T!5Utfw7$3_T&~T~#6B{Clj;<1m%%U1jpaZU}l?P<`RIiALi1
zYFqP{I<2F3XNTaLihl&o@nZ(R!I<j^ILk>hf&UKE;(XN<Gc-L}16#g5L(qU;$4n=W
zS_3=c`c7h*pNIp_ij>_%Jl-Q-SNxQOFTn&MVUd@~@xt!`^jKNOu=_nVIUU`^QltAe
zzC1kN^Ig*Y(@l?Od@#1FkWhOcjYXKd+<I~lTM@JTpm*}>IDBx0fSnll%aN_%;L_5!
zAqwarlBnTcz64+clJopIZaH?*(45e08FCL+V4OgqQfVMx`qM{@SgdHg%OGd<G$>r_
z#F;pN{&=Wx`E9Yo_!vO-?#5TpUxPrAa?}qmCZ~Jir_GW%mlYKt@Bzi8a|xp>yyo}D
zfDn(<YI;Vj4|o48phg6sPJQEH>WM|yeX2qUe4O-v+=mc88WDE+gr34D<4Z8*i{)fj
zoVXP}jMxTBW(9C$Zi1sADX_SmfOOu&$=^0tL}v3TH$!pKJ=+<VWZhAKO^Ern%V_Qn
zjN{rR4-V<{19k^dTC5&^TD$YIy8)8vd+o_V+X#U5hac!$f_i%eMfYx$W!D>_gs`$o
z7Y8*Hjkiu1Lv1n-mPxpkl&gK;jt4C=pEcvLPEnh;!t#s(G_t!n&o2Ce*rGEpCI3vy
z1Ew$PBrn82lY81?Jk}g#l=XYxYSp$xHl>t`w^E0a<~sU@M~^sN9we~&>H5*?TKzjg
zxcc|9Zj*xrol6A?29xP@SB*<TM(D(XI>|#=baeD6QsPU@YuFm(_G~k4-ziVnM_Vc}
z_MXlLwM<0F-9CqOJL%gl?CBPiyk+C3n2+E-^+X0RuN!9G*kszV$NGHW@U+3&uEFO7
z91{;07FgG=cw@*KPSjy_spD+3veLirpkTHJ6jVl%6_NQoe@B*C^+%cGYt+E=Q5o&(
zU`Tk2kg4vj%bw^3I)?GFGW2~laMMu2G3|*X<G3MZD>zqD22Xc75H-eU(e!{kLcx}0
zid-j3wEc@hX$;))$!kZT7`Fn0mVNe{g(Scd#(0zx2{opl=u7?Mj=JhX&;t5?^_b0k
z_;&io1^r%^OLSYQqgw|ReKZ<_940L-IO6oTs)UO#cAjhU7<~qJ)rH((7hi@F;il{8
zuoQ`Hc)<X0z1Df_&w{L=+t~-4APM|dfx<IX3RT~&GCO(O2cHevqt&X>>cukV=}$fs
z=Lhx#&0MCwn@Pa#p?3|%>gr7FbFHkT7qJ$%Po2qA4>}yaduo%n^wb8YQ*)lnPHS;S
zi`=@6E*BXj7s){mm-?tf%EjsL%hKvqlq=@AmOb$v^*|U^!oW#Fkc0rU>~wzQX&GDV
zb4=I7s)ZfqvQxCY#x*1=Xo@8p;bS>jkw+wG0if$Zs%^aJg<g>c@vWV1j-mkP%|u`~
zx?}!_uML~@ogI+m+zrOUuiGyxW)d?HY=5t;b_Gp0m1{$2dl7W!AtUd2?D+EN9<I&F
zv6VvkzS5j^KAH>V5VyOS>DGv+^a%IcBU~N((BxQ#wO?z+VmFRmS~Ygpv50&CGg984
zH+`jvIjnL5^+iAqOgVzcs1;WPtlv+@osvipMIHJ(ntIWT-a-AMbQXg@gUa5`yHBF%
zfVgjAh*%`<j;Z~tYmuiriuPc$K^+7s98Sm%tjVLYh2`Dx6@*VB5cAt9Qs`L7OobEp
z7#>-w9mkpI$**kQ5#-B%4j5sKl+PzP;`q?_s;}&*ogm&w9<HglaD$&h7Vu{G53Ip&
zg9M#ZZ{nvG;Q)f3f51zvw7AXhF6yS{V^l7K&Zq4`qu%YW*ZlHq1XVS06to{NEe3D)
zGrU>XFQ~i6MF|zlFSM;f%b|oh_CI=5)zsA5#N7euIMgx>YRlmmB!ka?WOQ^*e%8R)
zpWt1e)59`nH@zufuoZF2HI{X%pNq`V!H8T#{-{Zo*eZYIfQ@zC#esf&+wmZ!B5DDT
z^zGKlcpvTkhYRIEeKYZU<<+UeN_j*?tzIf?&Dp8O3X|}l6<GGBO=!<^U;YWctLsLI
z)x&e_!uMBmuGTiM)vP7DEv|!OtF0T@e9c1AmF$YDKruHH-oKeryL`*J(%tqk_~L~`
z!?B!)-Vi@HsiWrM+r{M?o}%23a29|DpXY%Vr+OWD62R;e%tIJ&*5HcFOn+I_cN=%9
zy9q9t&#m{ndhdmQ?86<>`jbckT#c9Ko6Rgs$XU_56l*V#E=W%$=tmv0aaeJ>h(M_t
zVw1JG^HWCXoT;wGVn5!g=Z=g27|2A-KfGP<PRpm(M4ow{hd6VKkyl*XkGGRzoJuRw
z5e)<H!s*$7LBi@+->++~jYaEElOP>v{EitMEoPG8B5QGwamo3Vk`gMqf}bwY$ND>7
zd$DF0FBQeHfAuO7=L^aq-(ESMu!IgiHGV%iUAYuZ9*x_m-#1yz4GBHTAMNmp`|VW!
zg|_)@G`!NbXc%)5GI$-Xs8hH$;E{Cx)7fwIis@T0PZq_A1w(rDDGJp>AQ_3!9>@Iv
z=4Ez3)WRe!jm|9hm)8^id|h*~FTFf{;Y}`nJ_}w)smNIRjebK>%fiWGSC2AeYHI`y
zPPfx#BEdg?!oCV$@s^gIK%WDcq&A~{bvhxjI|N-wH5zEd*Ga^H$@(G6gOl`zFf~kp
zaW3;+0gG;d4e;V$b#v4)sRVqPvuwaTyqir!sLA42IrDg%vHuNXxo;w(kq`!&OR9Z$
zWsyTS<8($Vrt6|I3lDou{+QdmsWU4P{Np*y;T~*gWb}UO0*uDa;j$`1N=iCw`Zgh{
z2dvrh^t{ji&knYar?&L!kcp2Gq&v7Xz?-!(Q39Fb6<d2N)hl&rRczI=>hCd)6#dl-
zD3m-n+HZ>ABog4Fw^Ag&pp+O*Sq*@7`N#!`!N!%oQPNQUh&lmIw$Ve{E^@L0c2{lA
z5n|jIIUOICKfe8tXin2W6DN9Nz|m6BTN!AP+3xTY`=iADQ8gi_2WG6zb^`3|csp($
zzW6=H=SOR2Wc{f6tK_a*WdQ*+CzBdN#g4;&_jq6n5c8TL9m^;oOCvHYX9`k9*l}f`
zIgiW3+Q;;6@faU5lV6Fe+*usU*;OYC+0@>F4*0g~K^DsTwLcSHCOkoqJpJbrhsN(L
z?tI1b_ZIRV^MYh;W>)Xr?!EI3VV^B4k>G^lgBwvNRZBN}1ArkXt6$bG;L%Qogym6w
z$mPR=8EguVdOerK=cKQwCpiBllK8LXUMxf*6W2jDa#TC+WgBMkqYbf(GSRmmKPbEI
zJbPO!Jof@ncOQ+$6X-qYs=sBo_DKP92X4uY_AlpE!>imaBu&Yzlw4ZakOHrRzFk8$
zq*M5gvemS(CEFifvjJ!0g1dxrr>F@p_Fj{O>%(0+t1fMlN=w^$$Dq-s4p(p;lc)O}
zkELT~n(03&QbLuc${A6yyoRH1ccl#5f{qR3i>c#d#^*Vz05R9_26=%~KMC8dyTFO?
zp#qD!B6jXw2eK#SN@|6Uwa*i0%DCS~z<bih$9I^_q#L|nHE3TeI{#9hyCG*@+@Elm
zf}t8X4wZuGV_6Dn^q>wLPkTH`v>ixwIB9=mw^P6rk@zY}t2W3D<iwC=3^qs18tO8c
zwZv*_cp)#0M0`LYLD6)z`o*;+-%gFKcbA8rn@I9gr2o<flR3gc4G%Y*>W-&g%R`TG
zA<fScDNO>Jbn0dZI{Ng4-7<(1aWi{ZqGJ}@mgd!)!r)qKGl+aFtSM8=hPtV&ffcPP
zyvdNPuEt(gd`{!i0?+%jIE`CPY)Sqh2orAt{lqu;hbjX;zhrm~9|y<Z9}(o!RP7@;
z6m4PA8`toOcl@nO>y=h=cEpqV;hD<pa@$gWDJv)SPp^NRDYg(-lg(VuJq03uzh;53
zSb=h|#UA;5=~`9Q)hff99~noJYK$s<Z-$E<;2*HET;ew0-P7+O6BlCYWmGm;tXFQQ
z7Lw^+<qy9K838&4f2jgF>Yk4?SYHQaWmQ1Ts+j4^%Zk)<m`O)Ar519yTOga650C<m
z1M5h$wfxLWo`Ko^Q1U^#O!WN7Df57xAP_a{9S5<v{;6|Mch!<O0#ydh(QnLH;PB5X
zeneoOj#5~HJQjKYk*On3B%2WdxAP7sX>v@HiN~RANin})+M;JL>T!mL`M&O3tb-u{
z20AAPFRoYi`6&#+@iz;uo2$6xS(iVG3aAg(hm`6(PC6h(aLfUjVMpz;eQ(IjaHeRs
z{-~-ll6IrIVX+-9%oiHboC&_)GEBmBu%OmT#`BDp+(FV4ZQ^#Q+P#>xN%th-N(jP(
z*3AgV348z{KOEJL4BX%au$yg`NU=RY-}2i!6(3kbdYS^-C$6iWBcBXr5g8XU8Pc%_
z540T*8pyIKub>PnXcQZ0c=6pX!xAI_Z8+Lj>QK4rHSf7A@}c_^m%3{ybkKl8GRUP9
z!l8ceU0-*@K;W6zdrmzCG@*nZgrdG|sG>abx$w4ExQzs!N1zKz&;AAI3QC<7j1Jyq
zcVbze`|s4ASc-rgKD^P&BKX6;;KNVi-_=i*6g+XGcCWfHdgYx%SIv*!u`&1^k5wb<
z;L}lQ-BBRIE}ZQ?nQ+c{Ygo?*{ObM`4O!A>E`5wdrr!UATZG4+*J#2>uz&)wCULpl
z97=W{Tb97K^=4*b{&gvy67x4Lyw(U5(Mw{DMXLhnWRT*eLQMSm+$Ztmlsv}s`TiYw
z$ZFE#M)e6&l`2D!$1wJs`&xc)$UBd}zg|w!)2`hp-`0Fxa~C)apaOp2=ZK3*%ZVPv
zP~1F??&*ICbJ4XFFEMUCBAFb2khqWRxrpzKP1{uWZgar~+hDba#z@@a+r7jT*)*Cz
zz78Aa*BayZc;aBKxn~&@V#uW~c&$?v-<ayTA=LTR&O*Rpeb2jKAbYcyG$xAbZdhHJ
z1(-E7!NQT_ni_H@t^d>Z_^FZ4YdHRtx`3+);TcZEVh#VAGC%O<ETxBkm0U=~OUUyP
zTo%Pl#V3jq7|%K-D{fV~9y@pZATcGqi>HxTQDr8FchlSrtEHoU|0&n)1`M4c%#%g`
zwBEL5T=lRJ1tmmzcf%#GY)}^zB<AwuMErDjLeoKg--_=Rg(lllA9O?{Mk<b0F|*-E
zcra2!p!``+h<GX~)KDOP=mZXIxD^aX=P7#nnZ+W49~Wp&26ty@6UiGVIJT}mHKp;E
z$8hi|=1>$@%v=GX2fL9Ym9p##yV$VpT{oBm*&pHH2Hp9H29-zL8Y7^Ez~PD`nNuvh
z0aB|eP#;i#*xKc!6tuEl=|Wo8K62rbw&Y}T)=dbYy(|R}^%&pk64ja}@H5{RpQ6x1
zgAMwICmdOhsRfN!1-@yQ$Ni$Qldx*Eh3Qq+#;xC`y?yCX0p8W`UZ|{3`1PaGE-(((
zr|Z;bK4zho`_q;wcIygg0ML}$X>rK!*}s~^hAv?{)eP*it$}#lsjkg#)LnK&ZYi*y
z&e%mxZ7kY}uD@qwkp>=zm8sb%KAyh__TPhuoc=~{j}z(7M_yP<MILZZm7@e2cQAwL
zW#?Op02gRD59)kLdL@M}?8VJIA(z5aCdeJR%uKCcC4Sh7PcNiXW52^9?}tKl(7eBY
z`>;&jbA_P@i#kn;86O=R8yO#`;Sosv_4maF7gZa+Pxv-ymlN?T@-QCmU1NIO7#o<M
zBS`F?`30YBJIx9|gK&f3u)n2xjzx@bI~+I$=^WekrC0Ojd07~r_!qmLtKm6E%+`kV
z#+oGaL+5~d1Wyo4xn#li$3+}8x@-Te{4RpC>MAU6u)_HCIZ8|09exrfbJh%;ckn|n
zSf+)gQy*Po$<)Ln`V^*fuHA7|V+&3DzBKokgeu>ZYhEAoBBumB*ij4#;k;|=sMS}q
zp!1vles~IMY_`2;r(1wNP%XC%@ybx8D_;qnJRly-5|g7(F-F&S%Tf`sk7Ax_acVi>
zD)8r1BxXt|JsHQHtjd<@;qNYaa(6L|4ohTp>kas0vT)`vZVhxzrft?inRH-jiBAq~
z*b_S$>j7nQ>^~UYZ+>JVOtCk}C-=bO=XkIRRe2{{?);gRHj2z??bUgI)BALM<S>uu
zpLoofOM{v%8*=o@?0b;G{g7G#-2OS5HWgJO!S1Dluq{@!%#JjeGKgRHty!z$eaRo)
z`zyw`qNg_bd(N?X;*{Q@d;3#;_%r09p|_kRI^x`l=!lCwSiaS74S?Bpez-92?3^LZ
z{=2ECtK9z3)g4_S8M{wx`s8IDLFG#m#~1y<ohed{9RP>P<14~~Rw(Y;#z`A$n8XxU
zNlD4;*RO2@hDN%8#RX-dkgA#N?{;>lf9-`|Pd|V~3B}@u2VF%DBa4bs2&`D!7}E2|
z=UCh_$8)KvvjSa1y;+3#lDr661gJ=9S_J5m&&?YN1$%fRG=4-#FLDu(2b8QDBa>&{
zbZu%Zlo){0vY1D`Jw0a+4(5?;>43#ZR)iB#?)$&B)CfH=VNL87f=)!DAV;&)>=%Z-
zvPR)wuPOI8K8x*7$4z004d^oSvlJbC0AujWR%4t}Y0n4GvLWceAS3Gc7^(DySjKTD
zhww|H#@uQR<qJvc5DUucmSHP0*bP~)?~ESM98g+i)aEwTfE^g6917&kbt32^YCDiE
zUC_bJUR(ZTXWrsSM6I1?HW!78yVZV43b<#bYdDOPXIb1HJoqlOQ9@Dv9!lsOhe-Fy
zT)y!bOsMapEdQc-K)7&-1}^j98afMkdCAB3H~5|MZdD&+?l6=;CR?kds;)g77_C9>
zM|x8>)334wxq&hO7lqaTh+T%^kU6ZS&J+eJ2)y?VL+#=(t7e9`Dme6FbdI>Mj&n8W
zWLh?VX(HTko0>ZaP2O*cYx2?hwG0C9+P}R^&3jD-Ot1+b2O$#EbOB;<9+~1N-K)O)
zB4@LH>)VI%!I|7Pm<AT`PD-@=;PjFRaIJg>wYwnxEzEq^R&w=ZEyIl@4=zv}pB~W0
z43)WVPOwi1tZOc1oU}^wtv=q*(BB}qLz_6^nK>Foc0iyNJzHc@%D~QlQvJFDZZ<YH
zBn%C6QJr1U_OASuhM!Y7;?3AQKNff^n>h&4D(@uuSrI>Ha_&5U+3A3&XlP9zk(A?i
zhZV=@Dmd~k)P@#znv=0qlsAuysIwe|lYNd&EC;e$7IvF(3W^JcnLf|(aVU+(yx-+J
zn<^u|pK*@0X1)OWx(h9>u(n})eH*{$;Zo;ndUh`AC$BZil^7Lf14Byc&|?s93jins
z#>xXpBU%eo3#d?54PWP5PsO1s>oiG<6Zo6d1H9q*)rgftB;DnuSjv<+4(}2?S>+C#
zqur<kkTAK}r&gIQ?0g-$DzT(*KLh92X2mihJ4w%8!IKY~-ZQ7*U_jr88&zo7fB2~=
z3+O_6f~{`CQDQi9TEnlrciZrRSuY^RqzH4d6k#m0R%|gCAZEk&M?QGk(7v7u8SQd#
zVur9LQMWT!WwYD)141lk<kE?a#ch<DlJ$L{F+R>GG5-1ECm;cLx7WZjXIP{Z;YJve
zqo5m83>~`_D1a;fPUc;kCZ6fYZucPAQ3Nk`&2pcU9W#wTw)hWzA>{V!JT;6faG3gX
zZzX4!;KXV@Up2_}n)Wvo&Bet;#0avn*%);Jx~WANz8!iMY60DlNoEyYYhJADx+Y`2
zF-{A{D@XkeD%ksoSd6@$=%uWT#|>nX=H#1Kaw4A;iZq3AhYIMKwRjV2<QtC6o_Wtl
z5GK=YSBgbyCb;OXYy|T3KuXQZBtuQ_!g=X@xYzQOd&mPnrDA7axay0(+>|#ltydg^
zSI#|g?lnvn8CZh}@su)6z4GCcO*EQly@{K#u)!Zd!3Opso0|1)2x;BJR2;>Wi|>AR
zL_>86&#_4UVL?w+7rKp61xiWha95$p!J14Dex!pX!4JDILq^3SF6QLlUq}#NudfN8
zhqw2#ijbp6RYLIx>Zb}-hD8-1u+z0&e0zd_&GKSrBKww+sXedY^^<VY%U@exdSwB@
ziUmUm`&TmYtBp1X`dX6Mua!8WI_uH(v=QH;S4e_5*Qud*G<0;hq@;>pf+@^!%!;?^
za5C2?TgWSXpSB#J{SXmEQl*daH@0<=ENRBAbjytlpuF%+{K~LHq3q7Wj|LisK1pU~
z8Xh8XfOr+AA3Ish2_+e^3GQ<D*2U14Ok~RK=|^PQ?D)`Gg5>Q0{0`c{O#VXd!6I?9
z;a#>|r3ymvl9xGcwhv4-sPxl+eW<!Ba6}d3IFDC}`#>`1r@397?c&*|uh#FNgKFDP
zw1lA##RSK)D2R|w@8N`gCY|$#?!o#o2-HhgKzG4OsGIAvb}Y7{@cj8;N~irTMIgHH
zRN2}LQKvu(y^OMr=gqFK$1IPSAQ`0Y616%UK;ivFS{hF}Ol^eD$;I0{|6SaO9Qf5H
zoMm@LVI-G*qKMC5oD;FbVYQ{fKQAimNz1&<Etvly8hWC3l)Z+uc}5^ocf_(==zNqI
z4JLEThK7{%0ZI;+OgMdgNQ1I4B>&v0mveW?yBqbXO)00mL;t0?#4sb(m}2PY^hK?p
zXUguBN=9$qor5BxU&t0-)^ZOta2dK@^l4lU(0Ww*9W%~5KxVsER2b+XUu+iqvtEv=
zlb>(t*DSI{QNCyJ7Rp;p{}{bP_BtgU`B=U`@^6u_VfC#E!A-t^30T9vOz|hny>3fs
zP)FADx@@9iRZloY;(u|xJSo!V%1`YbDaH!ISWnrM-HFFJGQOqB+dcXY86@hQ*}kEY
z1+vDk@0w1&Lwa|5kCZSCiopq|3ttTX&hKbi4*A|Z|44VO#K+NvJMw;wT_2W_Pu|z}
z)VO_Bl_A&FnKn!Pv~@M5vgRJlxz`4{y_BG_vA=4xnRyxZY{p4dANoCmKj3|U$6tF>
zMGN&-G0oKmQ=D6#y+0%)%pDyoQ3wU?XOf6DrnUcH_4}OS)V4~;%BmF8b+UOZ=`Dk~
z?>Ax?3;)_BcBp&U`2|Zw$?EJZqt-KfY~**KFTLPqmhV@9#C7fGTy8=;K)%0H!^&ZU
z@ffqTinc#rem)m|9sU0P{-Uc5V(yxU3iMq%1;-yfhcTwk-%d~%Li^XS8dNLK*(8l(
z3CN4h8!+*6K6eifyu`EFs2MeqYb;}juRdANIIwecJMiB{5&rr;kBo=JXeonCY0*~^
zu!%Aiv|lw<%CU`#VApTV0PhNyk|WbpizG(3;*kPZI{zHnXX$_DUOrtB2&*wZ7)J|i
z|Gj<IGoy!`)B|bmH@`M)*3)Z%i06zg(9TK&Wj#Ye&Rut_i9UD@$jM+FT2IDslhvw}
z|0d8o#OtA+w#H16on7*BG3R%lLx~4Lu?^l!MouWq>)z+}J_(I8M@&bKwz-`+X*u)Q
zHP^WNZeza<u8nb9DnkBT(RxB|Dg55g$!v4WtaH8%O@)Zq!qPl8>L;`ob|E5UPPVDj
zcBWzPMsjGpcmou6UYl}<X~B<6HjfQp)h1IiBJTZ&4&yBnXj{rKG|f5uVefvPC|p^8
zjIM^XGt6td2@z?(DVDvqi<*=VR?(vB5sSY+wK(djfS-8YU8R=1!)vy9)m$Od(7!{K
zUadt#*hC48PA+qA>R+%%DbiWsGLvn+HRkDF5yYnzc6HnlAn@4-Q&3a4e;}T2y6A(3
zCMao=W$9nams!`lI0KAi2h#>QRv)Ww6ehwFs<6c@^1HVmHwN~v=ZChFWSB`#nD9}h
znM1?F?MX7OkC!qQ8f+SDAmmPY356D~-@fIt9w$<&9iGZIh>E4Z82(3Vrn6iGtrOxs
z+mgSh-EEB6*<F<Ghm!z;$E;N}m`2ffL*H61(hegky95f@*;v=d#>N^gHdS^cjyfw!
z0@)o!Qu5?j<Ea}clt}icc81VC(T=5~tqR3oYBRO!rz=_OqRaQ96ccJv*_h1oT&dVs
ztES<7R?fwGq&&MFB1qQJgZ@QNSJ%jv`K<e*m;A){&{IFxFE4_GT<m45j3sumn*2i3
z(`kuji#>qhh#O^srKGSqwtdvFKHEe`_@unKJTo~}b^6;1%BlO%${69zUx9ltUQ|pZ
zjgiR3_%u_rrPP;mMJ6sPWR%n1KNCiVF(RQ|0fDo%xy)YRv-jRQT#POgY*Yz`6Z@6l
zS*Rmpb;a*->rqCk3k&aLWK~R97Y!S2ybF75$2`}U(=@!B;Heqv_6i#EC>RvOMvW=9
z)L40r^lCL3;?6HeUen`i_%=N!1kO8&tS!~UY};<i@8f^xU$ffJb$ju2_l)R^@h7Qt
znvff}w!Mjh$>1_>bTK*AR{H!}YERg?$<i&T&R|T_%-CJt2Kop+_}kZ{+ilPbb4JdO
zOC(2M8QLAbj1H19$(1s*X89Dg@ESA*leRe2i8*&4!N8)D5n(qu>s;Pm--%ZFh>SyQ
zWr;j>aRL3AckKlghiW5Ab~ILAxfJyvLnuM@`go!@kXY9+i8F`qm6eKk;;XBx*|3bH
zq#t0twO7+N=@QcM)6c2jE%jou|D~-e4KDg%m_4nhW!2Sl_<mitXVax!BfR2%a5#<i
z5O(6mV4JP*QAkTYbSRrFf2>I|s2S@~MgdLHjb46!lmca+F>CRXPenzgN|AU{b?%=K
z;<KCce0U6i4}>LXhN)-%Gw*1Xw1JcRodm=Z;qA(bG1L_dX@+euNjolL+NecJ@i7ms
z`A_QpBA+O~F4ktFTT)2sjMW!|Q?1rirfB|~AwKFr*DfKUm{QWAt7YEg<Yaav3JT^Q
zKJp0&<9C6c)WS|&RF9Zv0n>NSJy4tCR7<MR^;nBqMppcV35GxZk7W1hZ8f0@=wcLa
zV$j7IiX?_HWH&c9&dx6f;ho$z5P|c}vYBU*Ot5z?vm29|pFu^;yPn=GiO){`e?QzU
ztA`0n!Orkc7cTrC2?+^&$sRl7#L9U>C1lTVGy0il{Fc^#h5<i1y|pGRfwU>9h~NDo
zAr_M|gpfycOE9Zc#`k|7Oxj=>3YPs3dsT*$*Pn0ym%*CI|66iGDR_Fu?LF^LEOdNE
zQo|3QBCO|oTcBEdp$}&Y_l)NI#$c@0sFwOw-tyP5H)io%7So6|>+L8~$Ae(_Gp;c4
z+dmM+Vw>A%nBG3|GY;{i|G(Aw|6kQU*VC6IVtparx1D@3-6Stwd~dk$?sFu+CKf{^
zxSjK4i9baxIMT@{)5t66EwBviU+{!q01AqNBOupS=-x03;04Z^Xxxqiu9uO*bE9c>
zZ9atsw#_BT{Cq%UQ&o&}pH1K{TYSxGVL8)3T=b(x!x;+%@**JL(F+c5!T@al)EbdA
zk(Az?5)+F(7m~FZ`edJv>UZdXe=hDLo>7p`n8fFifp%boe8iWUdW<=v63dGE9_wTl
z;G53yWt<{T*>yUKuI(S>V<ZLe89wRz?<xKNpQkr+x3Qeny|8X*C(D&x9AT4Px!2Nx
z0OX*nCrIMOi`$ltQ}{D>^Pe528v{+f<{SDhpPf}<58+rr^SS2Z;<yDqipZat7A@v6
zg1fmKzpdY>seZzK4jYU-7d;YlB_G}u_!PWy{7~_oqw!kgzLq?&91}EmSKSE_bLjEf
zOi9X$S_pY}B<%VnufxY@M)otkavpeUB<eY}0n0gYWmf6`{=q_46*e{Wv<3pX8?cOj
z`)ELIpL#=lef{|k>&nRW`V`6)+~ws*X&JX^Y5!dDM8dMgUiCfnY4CTi%sLT1bBf*%
zM11vpYJXLZh8u~31zs96NTmPzBdOn7CsBj3sQFBC*yzUX_GxKjro2a8K3+sklR(ut
zpIz=QxWTYw#qAhNGOnp46%?L=LnfgL<TKMtONH_=J>?AQTc+uy+6>_lkSdw_G7*<F
zr7GOqA#eHZ#;F(^lY=1n4}YbB{9S@s(WOn*LIAx5kK`^`eK5kP85SJxbFMHN8c*`C
zuqkq=E4SVnEk>Ri{EXjkj^B9=47&qT%u68k3v1ICYodD(aQfIBz5-quHKKvB;VS#P
zhwW<iJAwNrr!%`h1rX6|81UCgR{}CdfRyeY()CIAkTPY4ijN_pPt~fKzE{@9-T4_m
z@7y_3nd25}qr>==Q|@T##*fm|mZY~y$nCwOHtA=L$Kp_UPMx@$$0w#f<8gYrj%D2H
zGqW_)bQsRFm4j{O6uF}*S!%!9Cq$J&^<(!A%d8TB`0T3#uYgEvd%`w*TXI&bg4R;o
zk2exZYMlMWFY_P1*KvHauMnMg$r^95kUa&d+?_7i6r5jqI?X+j$EgG$6j@7(weLg#
z3u6et^3&Rf0_}$dWWiDrE{|r)>XY!+He#-TQcCVnL%tr6;dDylokV$bgIweo72A)*
zjdCHl%Tu??^x}mY&8;oATiHuJi!)iG8Yzz%BI)uQX><Zii|RY%yPEFsoxImn?&WDu
zMqZfpp~6yz1|d7hUT@J2hL>YjiKKXw^{*(m?Mi*-ZsnGi+6yl4ZKf<5xTO||>s{k1
zJqW~pu`wlN)MGVDT-4Qs`lR)QizNLe2a4Q!&vg8Okvu847~TK4{G$Yu4~C6l6`Qk$
zbq>GFoS3p+({<v@_wRohq3S3KM8Qg+5!>~dKbTt;!|MDc+!W2E$EjqM5Q*c?en;{6
z6o2~sGP{1S8A>+pkZi2mMS>zIFPhM^n78VmM7Ql3ipyr>U*8-$!uN&5o$C6Oc*IM3
zNUA^I&flT86mv0Iz8@|(lnQanKmurVGL3y7d3rGk^(1a_q?hDh-Y#``RmSd6RtEci
zmi7U$m@!M!N%6-QiQk9K;^ztPAQ|#6!J?xOcCoI8K@cJ@|4Gr``vzS>>ie|5{ba*@
z#`(vyPqA9Br%Q3U{itTMorf>|s3?(xM#XE99!5=qptpF?v1kAeD{i0cR~LS-!nL*M
zyzC?`U0j&uaJ^snxWRd(%@lkkP9@{&k96=+X~O@Z;;n<?Xuc@WFC;*aKyZiP?(V@I
zf(LhZw`EC?;O_43?n`iIgS#&7&H@WOe$VQ?|GK7Ts_sm8-#Pc5(<jRC;bZv^mXz*l
zvLuvi>cJB@LBA<W7j)sNPVB80zwyNlk><(z$l4-ZU6a}difOTt7qRO;!M;*MTYx0c
zkLEhFg<K#~au#9{mTC>eJ;E<wj<uVN24CDzRZ3!Cp;5JOnhp=?*{^N?@-waPs)zdD
z8B!7ET2c8nUDnScJ?zR)Un0LUkd6^;_>ie~RZLw{KSm)eE-FhoWWpcQ_)w*|Z_8OH
z#xa6}B_kcmR16|Bh6rjNE#s)xpFfV>DHD>}_^yVs{Ode=`8VDFtiu3z*=3Q!N3Ds1
z`0{;d<!5l!6A}^&MO=hrS@#<5LsUoXj#RrPqSHRBs^;qok4OgDhxZi4{^EGA%{Y>y
zsQRrchZSg5PxrMW7wVqfaU8pT8?Wjo>J5#7<tfH-+JM1V>YE<c<=H#R<^)JRt$^C)
zQsMJu=1uOUI2J<Co*IPmIuLS^fwzGn;xQSmq9GHlGIy~ImDLcF@FC|<4>7k)RX2PP
zJkhUtK*-<Zuw{%GnPQ;eENuvhO&zhV5-sr7r1Vyz<?V~|!z!(}8xUGBK;N=Yh{{^2
zS(CYjP`Sd@xH)coUQo&&X?ZrmFAjU21JEsRs6r^Ct6u-X`|@^+>Nf5$x#6u1UJs&}
zHhx4xzUd!c)mHAsV5h>>P^Zhv2gx-c+RVuCd+enb$%J5@pGp0y<rM*mc|X&9B~||}
z<{|9SkkVZl-Ip>pOFxN9%fa=ZlM@-hzw7GD=U!f+ppht7d7=#KD&-Oy7+j6^0;g93
zDOL#?1m>@oWoCvnMn`jJ@p1kx0#50~Jsn^&$0`>FreWnys*-dP4+0Eca3`Ab%a=1M
z&~j4*v#~nC`~ktln6W0ok|pt~y0k{|@#CuTk`8SjSU&|2R$S6@i!d{qDoB}XBN;tz
zYR*DA(hHKl_65CMC0t%7%U<qbDO;Nhq%+T|6ABFSW{)(fMN|?QqSw`Kr%*eikaKS2
zetW|Y>~|ZfvbNS~rY|(yN-DuFUGa=PJ+Uss@cc@m+*KF*&FIM2h&(9oFB^=4GhB|b
zpo$_F*+Tu7p<ifWTEcM&F8|oB?@1KdWAn^ydTUD$$4sPDf-O^VJw;HHtfsT|0j&t=
z6BH3+%R!}WR&|2K(d0O)a6;elw}B$)I{Ey`mN02Ks1?rdM_AA0hb!KVowrH#Ooq|w
zluMhu@|ItHhiveRQW%Nq>kZ%@eQfNb?6GzJjU&n8RCRsEqo0SZ6xj_mD-I~!NC8!<
z$FT{Z;}FnT2&iG?2emT&O>6_P+H6Buq!I-;P4K{HvcQj@ltnNfM_zc#>;4ox;lhY2
zlAdcR{5^JhvLQGTPLedL<$bwhH|0ss>ZIZ2gMGQdK)oG(rTWXlIxb8KSGuaI;*vpW
zqKbi+M9vYFsS??(X_%=i{2j^QLxwa)Wv~Gkj(VXQEDm`_8D<<p?dj4tOf6V3S|mO~
zFmKWM^{S95Lv7PdNU$woIoFoGCYMz3;-?EM3&Oz&lc`!nSs4yM+cFWCM1DYTB-Ox>
zaaaL^wRZU+3M-4(FUGG4@k+I|F2FtIQ5P@0^^ir2;b490T9Zf=fCw#O94HOz6Bs2e
zrX|`Z5xQbO&~eY#&z<q3iWYy9f2qT{kfz@_7`YKkJ>{iN4BT~(kZQbYD2d8~aa`X7
zqiVwUks-^<F`k<m{A&SS;liF?c><)0u(A!sU6i`vs*1gQ7|JS{Focrgw13Jqw>e47
z*FH+Qbg7Z|B+c`RlH1bdYYh}PwYbo)WqubWgDdvFZHQQFkpC@5b(Ej;=^2TjFC^>H
z;TZKOymBJhJ9YN(%Z#|)7R{8X!jL+EHsEPVgE5wO>?DF?JG4jHpHT_;=b+?+en#!k
zb!5)zbwa$x6QU!as9&xVeDnyW@qeM5!2bQ1DvZUxHXT|HLHyVF@ZI<BeAtU{eAzNS
zSTiMx;&CjbNro>C_Ddm4hb?`%+n3GuJL?k~ObZq*(wHhdB#&M1(}0UuIU<D%Aly`F
zoK6?YFcf~~$a7*vh{{pC;76DcWehY{W$}4rX(P?(>vej~B+rE<ioW!KA8#8~2zXS3
zMrE@3pap?RrtlCPy?eD%sOZk6i44#%Ao^LR#MMKOwFI~rPn;|p3%h}VUG?oSXGJdt
zM_&Dp1dWrnTxb%TR7|!KW#T@M+!e%CDf|B!ew91LgO!)}8A;qk{ER9jXG|gR{B?oM
zZ=~XCJ}Flq6k^*N#7C0dM|>9#>r@FqKs^Qj{cUzQZ^e^%kh_zhodWQc4{`TT<^a$l
z0l@kGV~C5l96kls$6s3+;aV@+yKMM2(TqmDzhF5^rz9}+i2S1XJu4T&mp$;87x7IC
zSoD{5ypU=V^M;!9v0VloMDQ;c6okm>{O=n=Z1!lLPwG$4Yx)nWu~I+$|B6Vd|H3|v
ze~>T7aOE0#r2h)b`Y{0RvIN5EmX0@VL1rzUpPO`g5}VQh6Oj<dnKmsl1_`j6t{x8Y
z%Cnr4G&=FXFR_;&Cl9Q?U+_nbLLJQ3o=SfX<1sM*B#cxqb3Pj(RYvg}p=lG7_DO_;
z`N>1k^IHFj<>usG-8I2iwPS%_xCk^GQs*pnOxqQEJ!bJ5hWOxTCAWt?#FF51_mU{u
zHHY+;Ag7Jixk!D&D$>=^vy!?-sK>lxF`OLKQErS=KL8SYcBe^qizBI-Mvf3!LKm(+
zxEtZOKrf&3rGSmjjhy>mn%Qtoz304gObtF5Z4wkk#u>Nq^6Bn;+{-QGO+;=`z-XbX
zx`Zht!)vdHVT;>&0^1kdJrQW;S<r?NVjV`{cc0$yQbz=`!GRM!+OuGtF~WD*3Qe@1
z;}{a4Q8{0Xh8u1u`l^3#H~`pWCJuQU9Nj~Q6xXdbB11ZHv}}^GBhu(9{lz*qC1TtO
zMf>Q09->mfx?~q$w51~Mh`yS%p-VTY*D?!LfWkN4Yh14b|MBa$2i_;x(FN>L<!vW1
z=dC34?@^=8L3+SaP8_PXT0yOgycYwZIB44G+vcY)l#Wunn5>D-e!7JdB7T=gJ${_F
zJ6_hLOTkmq3T1W?f5aeEix1@qUV@|A4zN0L6Lx6Kr4GxbT<uOVU_6J~<^B(o<`PtB
zNTj4IB$X{9X?gbAvMaKP7ID6BQz&}5^@LO}<mIW%xTkp3r0ujPV(&cBJ0#s0%VaPn
zD1}(WSWFU1NkLJ~=Y7im#IOi|2JvJifBO$148|>+(__gdd&AUW)fG&V0@{F%-K3z<
zgGz`u9ELU^Q=cNA1SrAqsS=5s6g^o(e`~|y5Xz-5sdz`iu+;Q*+k*<nd(2j|HURuh
ztdM;ct5kKSAz-}FGA~(>O)iIFHLaOtjd5dp9H-up!qIy56O*}(HWK^Bgf@h?kmrVQ
zsCU`Cb-^Jydk%-ze-HR`mBPzFnT=r4>dG6eft%$w)ltelfD8Op9)3}A70&|u7vjU)
zZL|XN=S>`{F+EtRU8-*ph4iQvI)QU;-*QDc?dN`iHg2+*!I@#zU;pUisd#Mh>w^#L
z%un&kUSeg9U!G@s9zKh_jZ=YOmgt!z1wLww)x>ktNjnm^gUPT4>rb2hoKbJ;Sn!uy
zpj)zA?l*iWCDsC=NpiZPeLRtJXsK)2cy#QXaT<n&TO7Q4OJPk*QgtQB{JG;p?Jho)
zh@UWoct^y8UIQUx%fo~+vqZ(X?{9AuDNj<qgfvIn0Us!{>o@n}$2Jl@%7{XF1`ZMz
zQMUAt71y+z$ChHJjfqt=Yv3YQZLeRoiCYRZ&;;asu8KAE8`zS2Q%O`YI4>WSKqP8A
zD3o*eP5N>^c%F#^xtC2xS}gl=mW#}kg}%=#>#rB{W;NHoiT(Kr{Dxf{Gj3b7>39Vz
zKBxH?tmY`Th;b_E6eVCCJrJ&R64^zU)%p5BOGB7|TP<%qzh*A*>j^V))+ICNTP17Z
z6VDA-(dMQUIbU$k?dsTP1Boojf?Ib^^Oyqq?`I_<O0ylqvu#YOaptPT05Y=PSfGq=
zWDRv^NlJ!0S-~d}?TwLF5i_Xymy#TxA>hep3gYO`-3{T@qJUcB&@=&#lMs@*0oC~h
zl~=!SLC;?->w+cTYPdwo3$FO*>V?;k_FWUA?0t5o^799>zE(~We}%q%+upSL`XYI?
z-nw`I;5PekqG-w<QBEa19`SQ^lKA!Y?gaEImg!Nly@tj@(K{LStv}j6{ffsM#gCZk
z($Fl*LR>&Dg#6Q6!ymhyjw^$Dz2XpyO3*&CKYzm}O&HxU=O_K2BM~lUI0NPD_CVYa
zi)cFU4D5Fx$m%4z-d|wDsCx16F|st)a`{v&>RDWAt(3Y3m8@U;spW8W4oj6K;wr<P
zK^P4JV}WVobRh)vZz8@;4B%LK<GLeR#okz#lbKIxm{n0I(8aYZ?QVYC*^fQE*Z=ht
zCqe8N|2s6UzJxxt?=zy~<nj<ww1iNE5@v{-Ks!0!rBHRhn$*?Hs=vLb{H~3KhzDG*
z`KrXBvL?1@loV`)Mk_^HZ1uT&AF&X6a(M>m?nUS<vQIz`{Om{BX|28V_ON;M9INuU
z+T%Oj8B4b`R5t6jfMMy>9XQ|bzhtNrc&=^4(KLP?jd5LVxuZ|%*rN*JB%KV>`^WE|
zAeV@qcXdX1|FWdIp~-C|cQqWFsp?UrUGWdv^+hBGNvN9cD>N-}$2)!R#>fe<&&oN>
zt{QPbpM*fPwGl5Y_fU!XP{~HS{L0s{d1h5oXQZHc$~zOTm*K~M6GVDnBg2OIXnt)k
zu|LH=u)h8ky)|*-*(9}#WvQj1u;aU&KV_>n_gwH7wB&2;3o%$R7~v0-f0UHsZ`jd@
z(~f6n7q>qM32k(g3a@<!#`9<~CcUtR+Rw+7m{5c`AiNrS9;I3KkUg3}U{nXtMF*We
z;{Ayt?tSo!`ssU5KD;<#34VAR_sV?>`OrUny;rj@Kq+0pS)m^Hc-nii<NAlS<L_4W
z`4Vkv3lq(pdh)KsF8us4@*_)h!KdT1fPuXRmf08`&SAdHu&fnPM+k)M>t!#>jic`y
zSNjF;;c4eM`6~XYe_@z&Bh~(beAGRY`3OuQYW<n`pul-%_WZ_po6a+qa5PY9$et}?
zaELL(cvyyy?B7mN4o@MPs2Icq--ZI3%J)Wry!D0Y)smLBI@c^7CpN&IiWFC+twEnG
zXfm`;R*v!qwtdKS>Qz?*>12()hh0)h*-tF9`gk0Pr-IjIyopV_2{AznS3YEZxR8&0
zu3oPgQ_6z9XQeqymZew>P}%5f%Gn2G@I|)i-IE~9`!C5w6bFNp*bfp93|`IF9XUX<
zF!h33E;r><;l_;uHI&6TtmQ+Ym$z}MzH+l{mdBn>lEq+r626Q%fTCW`h6=GW;l&zJ
z3$OKh-bAou9hHiGIwqBc1mXvr6`O#le*!7>_)p((uMK@(i{i7!3XQfyb_pL%8Yz&C
zX&m<6Fqvu^rte@@mWH{H;JmE~xgs05h;qhP+70Kof`gfP3kF~M!Y^BCj~`7GS?x`B
zn$#yS!)FZSlV-5<e2`22YtDQsYM=O=%EW3qlWSJwrqRA}o@?2>A<T2?FK%5#9q*{U
z{P=>9f&x(X7=4XFc@fykAQso~`3B5cSW9yYbDJH!Sn;K=!@KG{xoCI|qx{X<FNXs(
zZQ0Tm)d`@@pmp4q9CNW=-*Ky&t#(wp<DSE_`ay9@t{N|_zcitZSe<U0C9CMe-vGx8
zr=qxZTv2~`)*bnJCtH>M5eeyb5Imf@H6oiZrVtkGF?cuf$*~G|@yyOIJGX5rHLmPG
zwMua$B<~^SFWa=U$%jT3T@Gyxu865Tj(sAxxUp+a`42DBS`jD8UW1N$E<O&GdX=EQ
zU{K%ZOHlaL8pi3PDHRINVEGr_C;@0#dh9z}S*!Y08#y@OGg<ReZ$q#8kBj1<4Su(p
z&zl}-5mXbJ052Kn1=vl}tdWF!Ql{XMkxB{XU?IhW<8;<ju|r*>$5OM(P&3}qA7pH{
z@MV?$kOI9gB0R}LZL2xtullk5?3|?Ckqyu{3w*|uUf2E;c_+si_^N}(!ZpC$pZXV-
z^PGivGDlV3IdSJ1!){;XGY#bx#$$ntA#YV~AT*v~M+UC^YA9`rY?P%KSQkyt3C^oO
zrE&a?j&$EOh2|lwMR&Crb5@Y^XU1CIf9mS=)YnpFE$j)MmW|DAfSM)j7pjWBJ=n#f
zgm4vvA06|$&Kswqf58A?76|Pc<6Sz&g-8Ih=+UH~m<R;EFU_Yiow8lDjA{#z>{TXG
zyslZU19^oKBa<)h(5~1~s3@m`g|sEKn7zBNbn322YnFcxSfsfcEzLSw+&77>UBs2)
zF-dj**#2Js=5b%<U{zda#QC1mHZpEdSe?DkRRL>YGghFHy6wOx^c<1YE0>iiHTpMC
zT|BxPr-jXMAB);)wO5XRRx?Tcih8C~v)1q~odz2-|NMjf_4BR&<1CK?1wU6li4DT8
z8K!bDTo$mqg>i#J*J(z8WD22565S6Jw=BYYe;O%)LnrL(9Lem3@7#GG&uxvM%jR^<
zUp>3FR<95JlG*H*sjT+|(Hfexsy3Y|2UZ81{%>YnjuseMw4*=%R1GDYccPrW-j^z$
zAlt}90iF$PI5;l4z1N?@w*@EgeMB<;-j4k*rycL#_eNg-FQ=JJ*e`4-_etUh+=w`B
z|F^st*4>lLT0&wGcdlu#UWJ4vIDT*PG5zgg^f1zNysF8=R|btEz(4EDKKqYnI0>L{
zSOAn6lNhc3bW;HErs98}{t5Dv(hdk)|0#3-k+Lt!X(w4vGU`^gb1Fu|OF}E+dxvwf
za89~McC3`W0~_hvL`8o04>G<GZj#Y@C~`}AED{=MYGET%2i9}KXL%gu19FBnq0X3f
zjUovJO|m{I5;rCz%}TOk7&5`7-i~ymz{<x`k1RoH9l1b(5}`0AD0ez<l4?RcLxO@(
zxZDv{NL!p;dFb*e4xr%{;iIQ+_|7fb5g4srd`nOa3A8P}csVsip$O2bK@MoIhRF@)
zy{q)_mL4xcn6UXsG{a^sf6pq@Om#$f$m93Y<LYM$hplf$ncW2O)!;STf3WpW*P$Ao
z#{?GqyY_WJ{*fs;BS5^PbE6@Yt;u^O+e*cDn4#~~F?Q=I#ieC*ZZR{5we)N-q=T(3
zAdJhVy4BdDaDVX2N{i93ch|?r)T=gx>1&UlBstoS*YK(3%*4$S&CeYIU<`9VLgDNV
zZOLGD8)(!yNV;7Zo3Sa>0?@FF{PNJTm5U=McPi{?jc#$1gk;aD^0)2#{nJ8fi9NCu
zyT6k9mzU9<4w;CWM6DWs_*}fD`9dAXkSA@NixLD?sOYzqLplulR5m}~;P%`jHo0)a
zq?I#9f}+$A2U*M~-Kz|c_~?W1kYV!&>$|i88cKMVW0*dIZMOLq0$vs*5{FmBLaX3v
zc@nvKS&;ygZU%PSW1O6XFP1%~rlDHHkeU!}K3w<13td;=(~I6+6(t;}^Cx=KB&hZM
zy(nCu$of?c5@XOrQVN=eTxuh>5vl!B(7{!GScJI!$R3x$YrI;c-rtnn{-wbFm`u7m
zoK|nON77QmPA>F9k3nv=du7l$3w{0k_P3LY-_h!91cba3YJTwAmm5=O7xyoyZIi|V
z`0ch;R(l|DtJ0gF)Fl6}#Ea6Ict(!qTM~AyrKn-uF#&0M^`?|6wtK`!iC{o3?`p^q
z(fA@#b1QhhPsB~P$BSb2$!hvXc$=Uxa^<EDXoco_UWxRNWg?||L&#0_)wJ!<!7w89
z*?`t?&8j_Y4+Xb*z)dWY%13*xk8|=*-ak(JlQKiT+R^Wmjb#ok{gvP1y1eyjfUUoS
z`hd}z^_xqGr#cP;3&o4!m#-oJT|IXMriLU4KN3U?Ss{+=-IjKN_$iJv?cl74R5!EC
zLWLYvd>h+dR=Bin#&esT8Fr+CNa&q1jC3KV*cevAs4hOh;6X~RG<H`(TK)0ML|lW$
ziv&+Q_|035gIwFEQ*YIXo?D+G2Q^ar{c)S;qn<;I{cugH@FCh!QzW!M856wjrh|zL
zI}ucd5t5`$R4b<F3L?{5-8E$s-*Mf3=OGFbbe|(odirgpYs{=e-DiiD6!5Z#=R{K_
zbxy{eq^_%fu&b!#75n6nNwT?o=?aep!>54P0`IF()*is|vCQ_KFgSCcRwT~l-nH%3
zbl3|L>2NxP82G2!_J!c>;0<!~raKutzaYer6u+q}q=BuzN(EFm3=^eMCUmM`hKuBa
zXU_jQ3f#N@JrroYO39S@%Gt=x;=IT!(@xx>?Tpf{@N4x0PZa)8n&=DOi!XW+IBgo0
zggaxJ5`ok5Q1s|V&gm7ln0`xO@k`A40}^KK`~nrffn_@btbAfowTUZ+)1w}qr#_ik
zj3;X*ZycW~qjwGTk$~5oum2C4xkhf!Z08%>tAMX4Worf`!%W70g#I4we7F^EQw3*7
zPtrjm8z3lcmI_V8ETRlo@v4(^V55Xr_Q%<oOBH={V0i%vP23Gw2`Myf{YxE}x+((W
zJYcVxSHpXZLst$`b!ae$1K(>WxQj=Hnr#Bxnf48lWazZ{-=&XhQ9i*AyE-kX1b>5T
zRyMC``NBV`Ql8zVmV8@2lMDzWq)ghrv=P1P)J4UwkJO`R7e?zEDbUfI#sHeG?9kph
zxcu<RYEE*N@TNcA?&9!+iZAs`tFQG<gk5&_Jw58_2pK`$jAH=0vreT9;lW1Cx5uue
z!b<+Q9_|J~l%p-;ZxRCk0#Yw)@CJ<|po`gbv6QFpT4SdU+t%9C*6%g7KZp0dP=WKQ
z)=NZZa=yTX=GoinESo$kWe1D%Iwio{87n@#1xN&VmmENBb<`wmZN0IpYAur9z!Mz{
zFxg^SMVOH61jiCLjSk2G@8v!vlc%=lJ-578G8h)v)Y2yy<tBd(>mMq{e`$-!6kARk
z!iD%gu^A%bnOxKbxhXHE1N#y^@cc)k{k|)YkSy4<TMcTVBv3?2i2-svMD3+33!x&e
zi0UAbu;Otk`|ha%PAg6~DHz+M66|Y8Ky&mzu$-3Cdaz~Y|H`kG$&dz_4DMdISc9PF
zoAu0<kV`Y2_DjgY*~?Ge5g+M>8=D2B&VOpQcok!dI)=7RxeM3jIovZTobfW4XEAkv
zA@D@TP0Y>wNF)9y^RLWyJ@6MK5K2NU1*?xaPZ55HJiJ63hN+oEWEiV>%<X}xU50Fj
zMTT*(A7pnIwZ^!)QpRFbDy>z2C6_Lk-!X~CQtf3ijvi?|v2!*Rm?t{z!J=zjrBKk1
zld$%vmU-&n(^StEA%MuJN1+PS#qW3ATl7v#!4PeWA{U~?HT(XRQ?k)MyYUj5qp)af
z$b(dq)rE}S2^ubj#cnwMw=bEpbs}N+NhFFhZG$hDDPRTC_;2t3U_#oomR)vFIp*lt
zJ&tLpb-u&lU$saMQ)DUvhB(}=gmv`B)&Mfl>rIcwjf72?&u{wp7TUC0{}>%cCYLb!
zI9@3-Q&)ortyV|1a4i`0(?e085m~&#!Pg{_l%6csv+a4D-htJ^y<Z#{hx^qH!`$_U
zi>Zp4lHaSFse7+K*@-Mlm|Z$L4z!tRn@3(rGkc;v1=jkpBsgIRT3WvA+qgig%Tz_0
zYWj=BpEKokO9m$F_&2{#7w+C`Y+6>8G+{RG(6b<sj7($Z`Dc4IUO&5_zMUMD-I4s=
zGO;ZS|652C0qfn_?6o~cC4h3?Xo>6s0Z8;}TbM|ch8Z&@$N^srwiMP>tVTa(6{wBY
zDt+U<Bm{%2&F8%!(4E9r)FW1J%t=U`SnjmnWh%_!5N+s0cvr`eE!<}z?Zl?RfB;m!
zhrP(v1q}2kg(3Ol>S0(lhcs`-ScIu%(ICBdVSajjsq88h{}Wo^ygZrm`@s8al5$a1
z@l`ok8*nZ$j=T-{T`JKzR9ZeD9uv!jQ|lq6I<s1VcE=M>{*kA!ap801+IPUU0~-$X
z^swS3eCS?BzkI7(|8V`!r{Db@G0ylD&OcVC`lu0>ybb@#Lr3+uX>YWbkwxi~@aB~q
z_FUQQNhxcau56O<n(jj4v7s-4L3N?Y5vO8j3a<hH^vzn1fk8dv;|)OC)|$nAmn@y{
z3$?Qiy6?8|JH55R^(DRVR3Q1TmSKY(D!G@K#B35Tt{lN18!%)1uAi(VHK<!{ftRin
zevvk!hTGh~;lM>A=90?t&1X|4NgXa<enE2?rIiv%Do|X08T8+;uG{g^UzKFx7GXCJ
zUfb`hBd|Yij_XGcY|BlOZhH8#hN{(2Qu(?HnY@ypu+G8O&LB}q>J>kYIdL9k4dgsu
zUR!qmT`K6gh3EF=<}mco(eJNs_bOFeHqFo*@;JDoe!mNGIlpzp8N;)^?&DgOa(ziC
zX-4-QTZ3pwd=EKcB>Vyeu&pJUY^DtoxbJ3<J9cNxcwV}O?yi+_Ng)^)j4RY4=jutF
z<MGow1=(Js2}N`7Bno@ks>(dKm@8S~0thMvH1{Pv*ZW+DpoScjb)f?!v-D<Ku5{+s
zU}ajYT+iECzlYlibtCMg5J0JT5W3UFI>vjuEx8oyHBP;pvZhH^l)*QTPgAT(+f|g#
z3+-X8v-E2@xhbsI%0>>MZhAny8*N6%nRa#L)(-mqRt-bZftCgIcLb1P_;=`lLq)P`
zaVEJ1du1!@2aP-PxseUEQ<L_g?6vOOQ@eHBPH=8@+;NnJ)-?j`Zm2XV4WM&ls-P|a
zAC6uRQw?ISc*^e^qJ4{9g}S5jLcyi)2e1noVeHEFk3Bi=OkT#SpIfkVuB+wFD-au&
zKcbo7Ck4k={XRW4N2crwi)<L$xTPDm0*n`s8gck;;ab)<?~AGN>oET&ud#sL2=&IA
zDFP2@SzCowzUzkTESz6pkCK~Tx(fF9`8+?GEb!Op@a<q=MLETZzJh?zM>*`k9wVXn
zdid+<9*+j`M}JdYl>8~ET`E*ySAh!-1$XnW@F9DC!H95G{$zwx%H<6K$`qgU))tm>
zTkgkcihrU{7I>Ui#8&6X)83;-q}9b#oZ*1qPE{0u#h=&T^1r{Hiz#VC6XA5WB?@v$
zE$W91OOUf_7zXH31KzMr6EP*X59Qo{At551nkQNVCNvxXMF{!AInnTaq>_I<K}_ho
z)zPiCz6#$MSW?%X2*-%V>6Nf1i~iD<Fy7N58w~T=M2eRKsF}64>WV0dVf|O=inJ^g
zSz}yga8d=+I^S@<Qm_xUDz!1Y3OgxF-XwF2%=9{Ik`{@G4qv6~GU46V{jUwNJg(TA
z*mTVBSQ6@YL;BF_2+&vvz`HWE8ttD0B!sNvT6X_lXK2{O_2(bCyCWqedlU~15sFXk
zno+ldxP_ufSk*sna`IUKk`uLfm$?i=Js_zKN2h|9o61*&j5VthS!B7UIjS<^nwX<B
z9c@NwgGgRPx1@*-nkRTH)u5<=3Pe!(d6t1k%&gnpm3LlfQ0)ib6#CQF$$Yjc#ih(R
zFEKo1BT-eTyk4Xv%-NPqbcIXAP4Mbtc5$q;>`3wV7@3{b<-ty-)8x@b0{S|z_Ek~w
zmClpMwPw_1|JVvzP7<&y8qAu{dQ~Myy<pCsgBSARTV~x8OZ|+~l4!1+;ij;?2{fsu
z%qp%<$*{WQUJVS&BfpvA@Qx<op<roIX7($M2EP}a6_3=4IYy?Glw}iLDtU<`;VY8|
z9|Z=udFL7;_MgXdWncE)#`nR^MYKv<*KUOg6_|T^>p9Ji9*qpNHF+L<>R4Yq0uScA
zU6Tf{?t#$UmicPGth)dahZ(^@OFtRM)_Ga0D;yzBe|KShvb$PV=SA8CzHLdJhJ}}*
zoeVg)oT`kmm4MrlMI(@u!!9u9$r9@uG7>#Gm5^|6Lb=TJKMshEVmx3>yODVz(zGqD
zB6Yb)vMBzW_oS1JY*F$PzQqT*d}7|qtL~A8<xZVE53G~43Z9<As@^e&^lNuGgAkZU
zg0a9(<zD!o)>t}y2QT(gu>BmO{a%t@JZ!Ib-w!#r3h=$*#RS(nX9v-M^Hh9i6fe5?
z7TT^w5Ax$bPG%BK?`&d(afkb9>S95>Gm<$y3z(gKXULV6uEp8L!D*a@DS4s*&Yrf?
zEf)2L`RcuQ+5Cx*JMe2rUP(DIIJNr04jX2%K{W>;%g8uLYlbp7CcJn^InA_x*4*o=
zvRl8OhJVg{h%0r$f#W>N;}uNEd2iRr^MwVrozq{TmFjSNu-@#i?YdZl0E*UbeNOQw
z)1+M7F`Ne2b1m|Q3CYU9Shm$Dtyr?%duO$LVPcEl_dffFhVLq=?AKRqsHzo_f;%c3
zibfN6sYhid9X=OtqwJ9f^|crFPPTHr?GPHy?m6nkJAl6UK?DjiV-4K%jGy80EVFHO
zxQxdUh0T*09aU->+pAo6E*;-zhI~-S+F5mUNNx!Z8=C9?#axKnXdQ>9J%Q#jWiEOw
zyq_mx%~-lQ7SI{Cco;;CGJzLj#<M)7hs2vPT>nfvE$olStYqeSw2GCGDJAVlh4v)V
zR$DwQ@lm)&RJh-BQJf`YQB~hqC1YG}LFw&mp$V;3AUv&@xw<YAy8TZCs3DAT1wmyj
zJ(KE`5asK=9h~&W?y?b5$6YkU$=T~;bqMzo8YLWM+0X(_$;SH+X(Q)U?lNA6qfLe!
z`i*N>>=(BV9%S2lU;+7F1!&@_skkiF4jV##Xr3)<HEdF_gf9F@Fqeu@zri97L9Aft
z)8P_PC^A8%`17QD(LZWRWTdz;RoC9yj;HlaG(}>8C!l*;t9Ab!aOm4QE7w7*uN8c5
z;Ia*F5@!|(8J}ZBb6XX;^yPM5x#^RZs|O$For4qu_dI&SwC||rw6#aTH0n9LnJ@oj
z7Ov513$_smG;3YuJnYtSlO=#5*ZJSblpvI<4<Ab2mYXb>mt)?|l5oU8h<YKZID4$3
zIaZe|GTy$Mw4&?rtE{f<NcPNCMIX^9!-0V08?2HBiy6!qJ{l8EU8!g~F3ib?#<Dld
z5`Pzx**4e5oG0y&pYtfH|JJth=<s=&xwc&<6cY4W^O^;^B3wWH$-!|&6)Qd9YFSt5
z?<z>_UcGBC_}Z<q+y8QSt3F^vi&WA$WM$$O=jkOfl{FfgmVfo%YEcKz;7<&Wp0l=`
z1@pOE3Dnu{@aj<Z`Xgn1ugN{oyLjN(bwEU(#RzDI2TjbqJX1&*R`o<94Qu&pV^_)-
zE{S2=mraJy0O_n<zGjQjld66vY(3k41EhY~-k!!3@PE&>DFpU%m1r2^bK^}HOy4d|
z+(6v$dG5aTFRTrcztHFB&p3b4yrn^&O$CpHH*J@w<9dD6%XHE_yZH0ZDH@<(>W(Ir
z53_g_n>fKnw5jbvA3Z-<7Lkn{6mN+HyIuO<b;pgXC)nZkm!3*Hgd_u)j_n{-duFN^
zm?j?oO<th0DWwZ%WsH~EAmX<?k$cjU4^XAK=vaNyD=lxF75eQ5k8C)Ug3jAE+3X`R
zom(-5X0bR5H*za7;h4O8{>f?lBuhJY@cwF+&+Uy1FL0gjJPll!r`4|6w5om2$o;3p
z0j3%c+AwVs%dF0eEcTkvT7|?fdkR%v#`X~n2(L}FT?rC!9sRc-LtBRz0+|>MO{c%L
zc;I<m)$F2S-V0Obh(%$fQ|?emIg_3`vMcO%{&-AOrQ;_Ujc>CCbYUoORk;FWk|M0$
zEtxq-_@D1QxD_8M{x<g^vjA^>n6M*|&U0@QTTNZ{05X3Hh$bu8O7Mw4wD}iK_W3Qx
zGcI3YgCmDN+76eZ1_$M>B6-y<BFt*04u0>N-rL70ACUdS@0r*SYc{xJU%X@b&qNBX
z0SOBqNC~9I&)WSFuwmOK7D;y84$0D(J*6d(rdqY%jgr6j%kU?COrz0Mi#L~RNZh$v
zApuD+Y{GexfW0|kFw~#Ck^=7sygwdT`Z?HU_H3B9{f3c{srG0HeUo15hbz94Pv&DJ
zEaN~iJxdZ&JubS6cdAz?E9zob7%24j?jf`~`|U4ZEL6jd6Uj$<*97TWJ`UC7KrXt7
z#Im*)oO*I(!Eh)UC>}X!!Lrvi9)OGx!<%hwGIu8q(Nc2W1mPX5-vSR0O;itU@HwpV
zW#>p@ut1RtTHg;K^m~x1>S?ww-<W&D67m#IMV(X0T15wER#Ha}jZM}4FWq^zQ@Jbo
zA0du4ouv?6H5G$mbb@<?Q^Lkyj}lsS&-aw)R8-r^1`^69Ep(qQupAmlCIiBZp+_I4
z9xbsLaP)C-2T(*j4!YWjPn=|~cBSHA8VCQ0IssmSuF&Mjg^Gg<R<scBzl|>ZA}L(G
z#3PH<mPR^aB`UKKoa$J=@Elpx$B1(;!g&t;^oc0H$5(V5j|4IVv1*eH*~Y?^`|IWg
zs5x{tbRz7Yd*HOc(##1TBB$CxUPaHS6Wg*YekVx;+s{)5+~S=LdE9@C`h3Wh2Huj8
z+Qu4Nop^&6oslv4iZRk()jloD8%9Vk-dt+qvk;9&2=6=*O$)g=h=T692*(|_NlnGV
z7Cr72e~ve>`<`|_2fz1Ny1rf`@Ml68M>|a_;=Ir$7Sl{Ju_O!rW!lL2qI~WbWC}eD
z{%Px~81~TlcglYVHfQmyH+rs@vZjR7r4fv^>z~-^FhtoCBT@F3Jg97fc=|h49L~$v
zMjhQ#qT<0niLpy>Ldbq^bmE3-5HHOc2)3_(Pf#xf2E7n^fvT>FJN5Jnp<e2RNqJr9
zNyMp1P+RPi@}H`f0Rhg`iPUp%lE)0Y$k0YWD~9MsSl^h=CBb3jTcyiF@xWl)R*M($
zVoKP_eN*?8iau?0BN|1sKt|nnEJZGv`ezjCCv5^Jb)Zh^aQZxBo0DIX9R<em8PE0s
ziHeWuEPST}wGCt5<?w*^>ry?aLujhQqD?Gno&7Q5E~;Fn-P$r%y(o^CE6Ui4h@#f1
z*Sv=m0_^JFg?K`Tbg_usGpj2f>QAd*S|h!iS6pmJ?h5{mcnSa2nVz$a&KMt{bUgIq
zjn`-1tr#ilJ)+v6z5Chu6J6;ACF^>!w^|vyNJ%GYV57Gyx`&a(ifPABI*Yx1>JQVb
z2DWICo0-~3r1!67MWuGKD(yqW3%dX9_1I5FQp}~(R%%NuIo<7m?0<Im?GfwJJZS^I
z7^MD*R+hBWS@g0GCbVX-&a~PDBQ*_!+N@!(=vajttglDi;^^R%YKLoD6ov(qYM?cX
zsg;;Qj)OZ*|K5M4rSICEOjeh%p8sMSTnUkxWxqy8)$E_ZCeE5z*oOGEcNPg7+gFG&
z?ki}QE7hqyMNER9MJUH~#*FmRMPBF{Q*?|g5Ag%<p)8otA=&8SF!nEoMW6ka%Ei0X
z@U8kYA@=_F!hIwIFWf~AY5O~`JtC?JPMS$?H3?vk!Gi*f$~eM_38G*Er~S+;y&st#
zSdbq_TaT`fcjX%t=;z#8hON!ed<BaetlW|=V~$l)V_Q8H`}$xxP+KlNhF2@+1DS7G
zKtrlq&giwvZA2*t=xylW|1l|h)JxJ%8Sb>o$r-(!xE+ubGsk$K8fqho#<bD@%k6Sj
zmhG-s;4o3J<G8jGtl`x(Z>-No*xMFVR)+n#0p}TXp-``ZgZ)GEt=H;YFONb?tenoa
zM--478v3BM?glzoa|4$@u<+oCV8%Q>diW)<6rQ-e4rlL2w$Lbx_SKRYd^_?;YAhez
z@j;tsC()PXG5x~GQtVQq(_tVOH8XN%Pr`}Wx_NKx%xabO)V_6WJN#D_%iC=f9nd72
zbE&_+Zp2%W81z|}KdE*D5dPc$HIdY;3%~J>Mvv7>HQ6t?D!0d2I<t>f+4ruJUpXRf
z_Qd5D$}00D(DrX}o<Q5mFAE_SGVjI1Y4M^N=xTfZDxjK8wW~KR4Vs=MXguN|S}`(S
zso6x^%P9J*G~z*D92T|1Hs$0?bm0XAhxOif9q&d26>`?1`+bRpPjtzA_~1X}@YjDs
zq{b5QYa)#KWH@%n;8Jjau!o;;+)r2_0gOudrvsY{!-3VkabkAv3;8EJ>wjUpa=A|=
zt&$0?m(0_z)K=3QV<90rgZn5bnh}FAwobDC&BJj8fBm`>$N-Vo-Am#>uP=@lk>TTA
zv=pHk%4aPf!Ahm7DLJ(4Cg?<;L=y#fhAZB>2N=ytIUW7JZJe<VG%a1=mN<6M(EQ-`
zxU;dIs@k53xQfCT2;01OF0pd5+VDQ%E@4W#)n&SU%8+x5bz86%x5#6-Lrz_YF{!=`
z-F|rNkMo3OZRvMpFqpA_349Cd0h@2Lg}>qQXJ?ZfxgEgG7TQ1~<Z8C=9|q1dM|ZZ-
zTZlw_aK~c?-Pm-O4m;4dJ41vw0q!8g=!}s%YDAs$N-B_0Skr3fGM}f0f?#Lp<?1~w
z><YiF55Z6P6uzW-xV!YFBO><C7t1ZDS3KHI5x!fm!QviHmU{_jXtp5bu)XnKtqU|V
zuyAHhQRz<@-pNqL8Fybnw>?o0I#@gK5+c1Vq1KBbc0QSH?@T<LC8~%e<$&s^5XJ1I
z-prroSWWBxFpP@d1J}tP%J)^z)G)@L^rLB)9i>29-qRF(ZiZS0Lu|Z@R&SKt!cHjN
zKI2aL!&?LjdQ=d3H6$-`Cw;!nQ)6VF1B9yby(eaRN;KPW$nlm=XyFyUww9N}agC+~
zEMTcT(&-KwbJR(&aiLe$zHw8&gp~YUm*{OiK^7Os_Ljv{Lum&uC$TmWgjx~|0vtP}
zroIrpc%7S|4OB|?v79AeQOYfi&n5_E8^j4i@U1w5NisP8Wf?H;L$9KeV0SoH>{jhF
zJ++iC*+xSfdmgXVoAT03f=b_Qr80#BNUl~Jcz^gBx*5G*vfYe(8)i45)N%vYBDB7;
zAWxMiN^NW%4W|#-ssc13z4v4a4j0vrwPA1C3U9eAuem>{Us(skzjD-`8n;K%<|s2l
zSBv3ph-xfn9U>?|CgW)sBnJ-s9i1{Ii<U-Ix9YS2%Z`T2&P+f#SG*3bFrz;Rg{)e6
zIL4r}Ls&I++Jo=z=E0mkz;yjU^y;x=oUXBAV%~3@l|nPkmUYwb+&}rB{SluseS2&%
z#Y|{+Bkh*SV&Y=fsk1Yw9P2Z9VE0_*yQjnWiHg~WWcpz~c5t@J=^4THsiG4t?bFhO
z`3RJt?E(ps`59|4!w*<eJ5j`Dj6th?YkGYm?CevyhnK6=3!j98pzaCzmRafqndKLK
z2b&3sHyKBjyGZ<tqA8@F;^^#u4I~TB=R7IeO><<=nLgSk><X@Hf#{=FzXp3f_m%qh
zWREoaLcTaAr<Ij~X)kWYVcJU&_8A@L<EWr_|H)X=$=i9OI_nz|Tvp++781O$+8Aoi
zH|$|tpUd<uuOez7<;B6G<>R?Ha@=&1&Yq1uipmCg!S^Z|)`XrEKMl!eor3PT6K*TK
zX+uSC|DrxCwl|TjTGVGKrj_d#3TQcdnJ3mZq_+yGcDk}umgUU1b=r$HGL^)1Jmo8e
zD^XeNsN-rHXpe&Tljt&h>E%gSF51h5g^3Y6yF=G#N*wa>alyYq`X$Z>5=J3=)3HA%
zpZ2-KM>QkMDSoZ}0{=W@$L!3x7iaZD@iidlka76^z;g}b$Tg~ZlF$RX2j-S|!dgd`
zhet6&4TbT~c`~VIUa*gLIz6uD*50kL>=n-T!#s6}$G?hf;;R@$p$BB%@BzTPv3?ZG
z1gpPRk`&aZTwr*xX<z-i{nivHze8mA%5b?lg>w0%f)dk)mud6mQDkK0N98HX!{rmK
z_`2Ky(bkT;G;R86a9){&-?9LZETOg&$kg3EmdD2a-zGusb@VU-pmxu-aC9yKz>RG-
zc1t~Nv}FG%wze4JtO+%Otcw@Ccsqgh{`=6b%TOe&@MO39=QY?%=BiLNx_lRV*_4<m
z&D4h2T~(-&zs92;$n#t(oVZz6_;y+EU9~yTB^;XmwvEB#h(<$E%6L$zjGSAuFXQv+
zg7uvV%D@^J%KpZ3&u0e`=(8nnohbq2zwphazqBq%zh$5L2UYs$=2uGZe$XDNrvT%L
zgX_?40_}qLc_JPaZjC%r0vjtI|Jo5xDf=IZ8h;IXjx_Cl2r%9pP7WZuhJO)hA6UMv
z@Czk#A931Sr|KEq_qON-C3<eP-($<qvknZuOsv$#H2ALL^tp0Th+;h1QNLV3PjHfO
z-^iGD%Q4<~Gj19iyhUTWgu_`8Cykdu`1iX6l3n!Qb6*;hy&)b>#K%Q1ku!iqIn`Ye
zPromw%LA=C9$aXf#8+zo-HH|a)C1S@Rg$EXlm;MV$Wdj<LP+HP)s1ZO$@REWVPuMl
zoU=3HctLxYIa4KbA_%(S*6i(Q{iTF3;~05FAxf$km6}6e?x#2Q*rmJ1=w8wyZ|f_=
z!uP_Kq-!diBNO?8zJ4je55);1X`gnk?MA9`5+yR5SB7Zfg|w;EQ}QKo2;{w!BJiiZ
zJT*T){b3-ij2w}R;~7o<QIb3r&zqJC&n?tKDo#VL*G90AiYD}J(?Jd--%ycJ?$kMV
z_8TaeQ2B0uWovs&0VN`|rc)^q5=Pb3;FB*N(8iCSo*u9=Psmc2l($7{_er+SIR3|-
zq?%zb*uyjKg{S6RSy->0GZ#oJabm^IwGeiXRN()UFCIfxl7Tf3IUxnP%6z9Y)5T~P
z{HW3F!@<dgok#y89-oN*_KRKoTMZ~geACob%2i9<sj1g-W~P&P$Bp3!3h<aLfo%M~
z8ds`%Yv@O)n7S-bM#x-22p=B3k2P~Fgn3p@E4-e3MQ=etaR}GPiBd%e(?aWIn^d&f
zvWI5_98j5MvW;1rzZRqPt^KD=cv@4GH1lNOaLd!$X3fT$vOryL9(`TGL;t0LLe3DK
zX^`yHi9)$-4CR^0%L1k-&+@q1`}at^Y*jI?V)BT@^91=v>dia^7h|MqNc%|KbhrK&
z-JyJX#|C*&h1&8X7}S>M@sVfiYw}PZ`&L9(_qY??z85Ic>NyGk-Flz33V3wsO31s9
zz!!uo1GSx^b0MItONr_Pr`E6--XLctL>KSGsxbgLpsjj$;mmrcp+Rnpm0a#Hn{p^%
z5-Y1V2Tin?qMQjY+%Nst?L+@Qio@`>#8WN)$uYta=j2ZMzsjKuA(ES{X@-mS7oji7
z*!vbpn~JpDoUv7D#_}(seNL;-unT=M-)giyUFqm(7>{Ry=n_Xy7#|U%JFc%LN;lWT
z(L9s4<NO;4SPe5;1hmpQj-b=p9cbJ$XNR3ss7DE^iKj?2h*Xv<#L{Xm1Br)Pqa-G?
z)p07>lSyeHshUxlZP<(Dg3ClXoBMTXDH7!?WRAvnbG<C$skkCu5oC{(;G1YOAdrhk
zx3wOXzySTIsoHJVNW0FtBhaStg)jGq>2rn;0Y?r^hVH^KZI(8hUq;{&3K%1yHlVCX
z`wuDs7!TE#Ib+6stN}72uR=r3EP*Z3ZZ2(9dKt{y^8^@Na<Fn1O;84e*R1aO+t2Nr
zMP1T(U-+Tw)n&W}@K3yMF<sjVK3CC|Wk`x81CviB0!-fUP!8WV4FCAZU}hPup1CxP
zqmUuZH1PU>!8f5ECyQ>7{mFAOdyZFl)$scBwnr|)S~+AIIlFyLX1kibKA9oTP*1;0
z8XuAafczeoK`M*HpQv*we>sZs(0%7aa5ofUtxarzI1}(A0HF=F@ZwF;;&gx+K$;fS
zGiB}LwB?4V+C_jlstO#=;s2P%<M=g(?9{BoiAD}*azS+Q+m6{&?7)RVUy~TbnUF2i
zW|Mw7(fXUr;<|uve%}FF(d<T1Va=W&Fvr1u6_ouq?;97PQmbH5RDkMISE=luD69V(
zddA|eSP`@705brqoz7jHwT)wmT9KL8xfZ`C<*i%;3;*{hkR7I#3V1skpI@d?4M4e~
z=PFW~bG<~&1{fuCFJ<?vc<?*Vs2-aW=b2KHnNhekQr=JA1tDM(+0-m~BYX^k(dM|X
zEQpArUZ0V>MnYzRpI|Ub8MNo?!V7W$`Xe&&e%=LA46$f`ZEE0W0D}1$YOi*U^UKhe
z9Sw%Dv9XSIB#V(cf0g+6DgMtqAekIugoe<K;NSu$MV~*gfhIvfb5@UpW!+d>TiE>@
zOpp3Rc<idNOFQ^ASxZtsKSiLs_sOcLTWdx9IN}rSwA`B3UYt=OZx2R5f}fZDpgKLk
zd?b!s;(Y~i{BKYwNRB7+e~$j|OWxa8FdUH~=^M<C*<Ax$<UW4Asg~}oz-r)Q-!&s-
zurK?{^yI4M|9WHy<<~*&rA<W=Z?Xuo;q7GGdUft;Dn}0O8Ud?`%ulQF5a9oNqgBbJ
z%|F{w1!am?E&SFC!-=^D8zzkvt`vQ_kVm)?<f!>!*|->t>@wp5_frSJczvsq0n;o>
zNXu}o$d`?rd!n?`Vk5t9SKG1$g*VoI4UgNSE5<^<%QE2lx)aqZWXhYL5;m{&yE8P<
zZV@LqnC{Y9`?BV8le6J%?0+vDg@+1O+)hkQ7?_f}NjqQ5%x9TuyY(n>+T<DjG$k4m
zAQqGsM#Ofc9Pg>z>!*&bnC_N!6JC5R6`GyjzSq}1aD%)r^#2K@tF~ZbI-j$geIe(Y
z&aJ5S{Wu<8?D69Ii}dveAKl?`cy_}Q`pb;+tsy0NUMIS=qhjNX%T1L3e>4EWlt-ti
z(g!DC&<mp{AFA_vxkC5rG<54y&`bK=Ol+)C?vuu@y7m<({cq&`NTe0F4I~ztX2pNk
ztcfJw<=y9KC&H(Mz_=SMLUJ3Z#rSqGS#0=<(o8ts8~6ZCmCL{$`KWnXIZ)vyEKwi(
zW!{}X)}nw+)a|#$g58kZRH;pQD$COhe4LA1Zy@b*&--@udtN<WjD2dSEs?PkYNHz(
zM}=?Pk0_wk5G$ht?oX+)NyJqCpK}U<AK+AnQkA==^LhwgM7=}^%YZSHzJ_vWNx5GV
zVBS~nUUtM1+;5A~*o#PcuK`UR0pPCmYAp8xAu%uHpm&S;@N2E#<=b3G+PY7f^_Rqp
zH$=Hx1n158b}I1<nB$MLAwU!u(nOWa;`|FfBl~<Vjl|5j!psTWVx(>^cP=@rY_B+&
zcIiFn!H@T?)3s!GZYszKM95_PHUHlUr=wYZ7&I4jQ~i(k`eaq8@_ps}YD&z#St#?k
zCF+TuT?9cY)Ot^sku9eLM+b}KD<&Pdxfb{1iO3}M%M!xs*!ub?RT&^*awFVEc~s2I
z?6gEmclZ?zWfL)CI3!|a9914F@pFb!_Tr@Q)p#uFslNEZQyxBZ*k!U|$tz(kCh~oh
zW}mh9;^XupJ9_EN<9;X<R=fU`NWDu{0S!rZi!ozn8_8mXPXXMv-4amHM_0S4S);jl
zlhkvHD3l1~HN5%ck!Ch4B-O@G=o!X~dG_^c-XN4EO3*ZRM?L83wA-iBqOZxdG^G{k
zPbEB0@}&jbngx|CJh=?X@r5NNAc8`<4ywvO2p&kwF6~9bc<TA{v&OGkzxREakJnr)
zX3T6D1Qd(tgf_6kS8ta^F`Vxh=%rf2BO<@)6DX&BcL#6~h=Y*3We=m6H_82b28?1f
zUx+4w#v76Oqms2N{hIlUb64WEUaeQWJ>&W+9b&pWA6T-M1{J{<ml>-qZ+iP6vi7%?
zk`&&LleV|b#iq_$@i|(uHp-~*HW-ppR9MvvC1uJ^Ae={FPXeqkUD|*eC*1|Rh$c?E
zrnqS%c*D8$&G&W%SsqhuG;+KkPfaB`f1dRnE2>0EQQH#{)L^?xA?cMC%H!TUv4s`=
z1oWsn_+La+`{|L+zjg@B={zP`;Hl1k^X537u52uC;Hv3Ak2;a&8p0JJvi(2!ddsLd
zo+sWr2_z5*!QEXGEVu=?;O@cQ-90#qJ1p+*?rw{_F0%OIE|=f`o^zjfPrsWv-7~X$
zs{2$|f2%%YS`Q3pUW1A$ITY+tmwQ-iHEPC6^i?Y^x6tt_Eqx51*}pfA4Z9`jOgKkO
zW(XBm)?)*1WR+~L7>j7Ze8(cZF-aR?ZZQl4FcHB33^jVqoxtybKYaeioIHo#j?v{y
zE&2@_8Jp{vdNcqQk^5<lEi=#zr4Q_Q*aahHeo)@T=>%syI?%;|8S14eTAH)aGN*a5
z*&<Rh(*Fu;C;vP@Ch?)(|JrdA_haCGYFELMZE`Uii<ciU`E}%dQ5%f#dtX*1r5N-#
zJjE~4AmZ|x!S0`|+zZj+sRf=t=zV*REAUp^@-?US*`DEcV%7)o3=9}WN!;guWseIF
z)v>xF0Ibrxd~<Q??lFgV=~%-R*ulRI!bYd1GP|lepI<(xte`f#;`xKik)r0w1KvFe
zt-Cs2y1D(^JAQf}goXBFCEa*B@o)HsU^4)&j;fuibM_-O98ZQWKHw!mXMBmMr{TFU
zDQp}=um#D%j2kSns`7IB7xaUTc_P>P#+(JpFo4#s;|9M$b~d`oATQ-yDL@Trxst5P
zinMd+)y;OTQp4Tm4+O|<?5}n+MOQf(t}eZq{06*jb98wICwsP!`!yA@=sThuS6K|J
zHnlu7X=s*WNthgvE_k^Ib=iC)Wl$qWqtN#irg2yEzQ}q;8skI0u&kAMl~D}HDWIZ{
zrr&sizc)bNR`BE`jcZDc!2E;xc?4OnE6TvxmMYpMH@Sn=<<=XA&6%{!XM`eqO2jyC
zu4&;!uR!Rn0_$dTGOJoKH|SM{EVdNXG92Z+qrn00vU?GD{{`*OrF_C0L<3GxxzvW`
z5c}C+J=vFk-j;2-z9T+~y*|0tI`9Lr0(HiQBtWlg<Y*hbu{+>*quuU-$kd}T|9i9<
zSjM|9<2cUBJeDgm>@KGrVq%Y4RubGUtN51t*l?nF+VtAp56`@B<I%2*=XcVgu$Bd;
zbQZZ@OMIT6h+Oz^!A2p0R}wj6rfv-IBqVCm!CU?LU1Bx|a&B5HZ3f31N#gas)+XQ7
z7Vhn4o=AE=&-b$>$$NOCs|_?~nV4&XR)Xc!gUw94<vpW>dLa8UXh6@;K=cRwL_&1&
zhK5Bl{VJ=;gtVYHjvNsB?VXL~o9y$7wwp!CWan_h)ARmb5-94<s5eQz@t?B18g}qc
z*`BNxsQT6u#>Zs~seV^>7Zi?fxd*dO7>nbNYPmBJ{n~`TJ+edLSbt#hD|!`M5?<LW
zi#=A4#St@DT?9(S-*-OJ@2>IouZY)drg_5}W1-oyXhcS29<e!wgf5DTMA$2up3um0
zg>%jaZpWL{?GF8l-j~`bK=95HctvEWcTDe#6J915W161B5w*Vl*$Ap;lI=JfaJEi=
zARAYFzD2q4G{sm9mOB*P9BkHEtHpu1MsN}jHneLx=Fkw+zdN+wZ~*{F_IU|9Jk^h-
z5S16znmOl!mUFHR&HHg(yMXLS1Lg~?+-QEOrKYimaqDk}8Bdohey`V1j+D-hf6NxW
z;tb2K5ilcS2>E(OY%OM0w!4>D9K4&jQntyj*Z7=%{@!piP~<>2%W=5zn<&9p<J@+I
zgY@^}^&o>+epi${v2R<*mEQJe$9{QZOu7!bg9nr$oT(}jIVGWVq~dPxNM$)I3OUO#
zL|TQJccLfx>*~(~XeL0TRv=o~J^(n5p0A4)7M=Wwu}3R=qFvOEq$JGi3ct`GtyB&T
zzxorDnLPEG`1`lRQz2qgYJwA@ymRJ+ujv^i+iO@R0PTpUe&Ks+Wu>2JFiOh;VViHJ
z8^>(v_Al(!dlvj0{ib-4l*$ya_J3CvPcojFAyv@b;+YVQI(G2wKAcy_^$%4>XQOL)
zH3E;D-ivqJ?vBa%_V&m^&xkKE9r}u2H@(6Cr+Dg3DdO=>^niGzC*e!1lf^U!ti!tJ
zrwuayQ&+uh*0jT8H5SW0j!59v#9XYjdfUmxqbu90t$W!ELh&T8*k~})cxHW?eI@j2
zQ2<GQ52y>d@gY9H{iXL^lfjE3{jgXHY3nj1+A0$~nn0-baF7;uZE@({(9Jeeb-G2q
zSmMU%JIn!5f~TX;-db>_ah)*enc}c}@g~+LB($$5?x%la&*BJ<QiV0PQ&o~u+GA#!
z3^#I*3!Xi(;<JV-oD%zn!6?0sHkzk%#VU&B-)Di-wcwYJ{v{XK^SR(U`bdF8<{XY#
z0P#QWy=-S70icHf5XXa8>a30@SNiEqVYM1lS>><T<zitqjNzyo>(jU5V8C??(YFky
zs4yNF4Ogo0{_ac>AD$4=zJL6~ccE44_ROenUlf?|D~1#Txy3Qy3Huvrq=R3>OkONm
zeM!ap14ZkI7`#k=a?*kWjf$)+a_{WChZy#?t^&KACXYtV=Q1dcdsR2^8_sf0o8}Gq
zhE$gKiE%85MHy*z-*6`GQmMkn1!yp48NkZpF!rMg{UvH{$Lq@sJQ)GDwMp&09~37m
z{_ZTnts((=1C5822_h>g`1%1f0}iU4tAZI4GfH#WMWl?8BFuWveeX1g2UbIo=UX`t
zc^%omgDyt>Dl?8p|M#kT3K7T`j#83EpR4}2J*h?_#N>Z_FCzDUYnQ1kHr_$qLGEW0
zPo0ns$w|pybTmmzGw76JG7Ji(pOqQH!YBf0#A^D()vF^g5oItiKYkQ6Pp9j++bG}=
zTzcz)WLm;}iIq`+I(Bd!hd}#$mK>|Nh6oI!xjHSQ*!J<`j;KE6rfj;|$%lj~v9q`&
zAvM87U&-6Y4Mf1I>Tc`X!_z+8)o`r!<t#t7xN+bBz+MK9m%}pOi<nM+-BoGSJwhU$
zoB3j5*0}KozN~8MiRdWcX{4G{6q?4RC5pRT3x`)}IUJ{a2A*9S-9FH;u=15$3Jgq|
zA2U6Au`altIp)!1hR%ru*fcwO1b-f4*K}xFg9Eg~Ww5M`p)yBHzeJP!ZJiupE5+w0
z)DOZLxf2<WVGDG4_<o1eus#Ys#8Lz2f>1G?;tFO6Hv~beADMMMeO54ki->-v1PnYA
zrc5rY5bIkwf3B+wTf2xLqoRvEpHh=>RzheI{g8$0lopluL!IjtN7jCxf)23+e);#@
zM{D+@gY35Pe?Xfg#~KOA2A0I|YaRj(rvx4D1sV+M^P8tAV<oY?m)9YN4VU0eKE-nc
zX)@C8s02j%n$6afnlD2S!=rFrLkhi9-pvNpo*y0<Yh1)h!at4JT$;;ri}_Kgfs~ux
z3vkX7Tr_g@xn+D=>C;tuTYp^jh`(<h6WOf$I}oH`*2VJ~hThYqwFvym6rZq*Hj4Ko
z<$Nq8%4=;S05-1+ve&XbpKkeNFq#h?mB-2;ADj;dBoTmxl}w+nh!hgGLnF408vkSs
z=iVf1m@+<om84pMaQpB$)v(W-&YbZuI7Q}@oU#=71jrv>D@@o-&EM)Oz6DGXGFO|V
zzq)(HNsXW{TA0xkc6K>;JP~bXAyQLMq$<ie`eZOEjzg50fyv8<%UXI7IAykD2@|Al
zd-Jp94A})muX^0`*1-Er4&=HWiBbT$qJ7pFqJYuyTo}WdW#{4{i#f!3Ul&AP(k@y-
zd}?NyQ_<>&N9t?hdkI9M<at1#^rzNnI1mNbneDM{6X#0M+x6?$R0m2P4N{(L-K{d%
zMUYqZq#uRWS<SEfa(X$;?BmIiDCkN`jy*2s0-m+^m5&+xm|H~jL?*F#`!#ueScD-$
zO%<o2Cv0&fOmvnt*fO8H-k5dTE850n5Jxs*9ZpGgNra6R>ik&I>TE&2aLBfxu};N4
z9o6s0YL(R)joIr<d~n*Ors?pUeB(BtyXCR<`A^YXuhjJ9ev3;}Fpy(s_%XA&5Q0+h
z59R-E#B#QyNcm~MK9o=K47+Yx?WN?w-Nl39BjiZtp1$zICH*xl9V#jVG5K!(AZrcB
z#|cC77%9Di-D^X=8U7xzEynQDB~ZIKjl6hCmV5Q?_bbSwIiuVunRxLHyhqCzw+Ph4
zG+a03j*DrBF?+PQQ#Brp2JV%POv2+EzS=VKgbeO$8C<oAymo9dKNOM9zS;~nmQCN+
zI~5q!3luCZ$5PZ>49vG|VR<A0LvZ!ipq%XC_8CKzjVWlxRXpy5m^A6OabAY>gSN+A
z9==5!=Ql&D<0&=BRUzURh^Jm0QfW<Ff)nX2I8c+$EJuX9Irv<bOil|XqKMSlrQNii
zz3@&YCGH6P=6KvCcX9U%I>rD*ttZLFm|+{L;Asx7n?t#idndSLL%Q=SdbHZtKL@hb
zvM0>o<h~(h&g8!DZx*BYfi!Z?CdU?@3`u$<q|a#6on!}TobUYB)bf^;0TtA>GDW!r
zXPSsp3Fqp+M<;xd?A%e}XEM2Ypwe9qyeXTX+XQ+OhAKzV)Gb1liD(zPr!sbuP2V~(
zHXag*hmeJ}45`ZW#NQ`fx_MMGNd@vVd!3bHk(YqPBI9Z2>jyJh!BkuE=ZaG=E3dS$
zE?BgfI}BqjBEpYdp}&2&(3?EZ9|kCDk3N+EHbBuAX$P-Y_zSD1VC6Cl!7isC_L=ak
z&sNUUa{{AF4U-~4KuR6h3HqR{8|C@#QBnC-8Lv?l#%XE+HJR$6yQ<PR47kR$rJ9Xh
z_V9$#O6KndI$9f~+_!k2H}Eyy#l$zaV6(|NjaA&1VO+?rW*Wtdzzs!_)*H-<^IdDD
zVnqmpIbX34^+{pz)06sW->pGGf&ZB&>thy_9C3QCLCi5zz~^ut=Acc7(%0Gd($<Om
zaoYV7cA7ahD+3XXjy4lUIdlK#CrSonGH)r+3d7|u$w~K#gWk@Jpb`W{b3ZFcSwtb}
ztS6OmvF57aS}iB58JT9$VFSyBZ*&wGnk!<VSY<EkOR(Q7XRQn=;tnst*zJ=QN363I
zX*>3Ah|gLIR>1K}*xb+>C##XYyKa&-JsqNdhV{9-`+L7Z)`|7%=_&WNPWpW3Y#MiZ
z7Zc-1P}J6@abHQw>d|Cri|MnG<>twQF(BF>_V&`G@*&~B*p>k51`ar$2pt5P?K14`
zdO?c16Zku~#2kssD)syl<Vux(K2XX^a5+X%%K%tFz>f2ls~!JswKV7gJETj=@)z!y
zp8%BL`{XM2eQ`ICHXfJ5oF!g>pfADR7ZTVMa+TaQxfdweNDx*+rZjK+=?0LW@d#Dt
z6pEJ{l==J2DMRIbPW+9SEvrj*V^RcBjVQ@24$tvJ88i6<nDK3d=dCl%ybNmBp(xpM
z#7*W`4*I?9l<WrBWFjmZ5Mho+eTgyzlUk7@N~qq-%AkErW=S~d)=`go^aH(KzUfwU
zxr$vTcOB+1Z^R*XhP0rP27n5vnbEEaamL#_ScRT-v7?Zi9Qe0*n?$m044Py2zKGj}
z(~%076doyg2A7U%x-Q$l?AhF#DBr#5#{X9Fpy=#k*qK=&=6Wl}8Je>oS~(#zf}pjx
z|KK|DOtQU$yV|K?lA6t+4eRK~%OQ_Psx%VUA>rBjKo3b}_U%!q3`#7%UgPQ<qAAOe
zXlWzX$s`}w@JRDZp%<>jUp+t|wap_bbRE9r>p}1?;a(*4s!KDE{p5P__6M|Het)L6
z@BNnc2rcP)YFv{i5PW+=I)Hzu<ad4XC;2?)6A+p;=rrRJDbUe>I!B$)CrNoaQ?$0h
z|9OX1KjmRTLGwgVVe8|9kLkb3wLDIdgqVU8D!PD_WF3mLQc6T>O%^5CW*eWzHOwGQ
zJr4(x(5O3URABO)@A!KvlFq;qOUlwoW94zb!jFZUSpLNu*jH|6ICPmRG!*CPrQi5T
z6Rf8Gnx4ynX8|wcEDi&F1*%K79qO)4lGv}NEw5Xrnh*6u9`ef*)?TdXLF@IQ4Pem)
zZ%dz)9}`U#X%CHmx9@NMyn!)p0SGFa9Cyo$=>9mRU&wv)32Oola1dwenyD{PMa;rT
zP)QXaUy&M&2iA}dKuV@?GtJ{uSw470*JQbLXf16$L1jX|*k8&7t}JnEJtVYEe1mLA
zT7tT==$>yFqhb5GVo`k3fJh8XXg;GgasrgkR&~g!ui{Me%!ZP_r&*6Nr}`rvHPj_{
zb#cHs!JRz947rx~^aE1%$oao%ON_4<0dH6?D{<tnU*a(8(|_cNox1~{!q3@|0PdId
zDh=YppTGYX9^aY27(@fcYUbfqa1lgFvbxzu|9FJU4J%GsVb8I0BA+-0ScuG+5biex
ztIP`M_v*d*FTf)WMlK3TqkQ`DLomC4lUZ{mlCXp5C2`SCc7(EkEk1yT=lOe;(M>Xt
z>E=`+l8|!6BCIQK)A&9G@UY4$-O1v-t*h}X)!5aJZC-!&pv3F;6-_04OqZH*Eq)eW
zrh<%`KKXVApQ1&pdVdUnv$@In%U2ZCj~X(^GB5Vz^@03TPP7*ti;kUEn;%kcmz-Wf
zR}CvpSwq;sSTvZ(BY+11)#)p^PI)|?Y`4Griv2cyauc6;knf(U>607_=r`Ts$v|J^
z(2-ti;-?Kd)bovFhRrhW#X_K86Mob~2?Zf@zafxxs1KbJM}55DM!dz+T+%I^uyW)l
z!}`HEs1SPuzM7O0{EPnk=juWBlw4R(1Q;IZ-{bVP0fD?r0MGCY7hMB~B&t6IArP{s
z#}%_K@u+ziAnbv}rAVUe8-MMo1Ca>pzSAwmKv|qo*wkQ?Q!#mQzS)%aZNkj#cdluE
z4a{03Mp5)o{wd1LQJrqlKUvb{z|W1G+-|1rlR4_XBe&#EAB>oKI)}NTjM)>DReV%_
z2^KU#=5tlf^#ThHR=||IgD^6;3zs|zyZN6f5QF|i1Z8=9paP@Q@bleVRnbp;$dn5P
zzyB-ueTOW*i{qn<;uJ`RrGydKVolGnjy;U^jx~=BU%B<^XVo(M1<IA+r2CtZJVB;%
z-e39f8QMx_96P4!^55ocUXW)h_0*B$*7GG@l*spo3a+-a0)6&Zt%)sP^+%s$yBv9c
ziK|%cKFk%lB-&b){mCbLp4-|*7P$EHO34=nij%#}gFoV)QeH~W!ddL|8NBJ(=b!9f
zxUA0ct40^QhkwZ=NO+a42K#Z)N1MiIPR$Libp&Y}M8P5oWYh0E=A0`bKVB-$w3#L@
zO0?7O#w-4sf3ICuLiZ`w#S%uq>jKqq{xPfyw@g2J8~JvPCW@?njZnNsPhIM1z*G9Z
zbk&!-03}UXR@J`X{D~`Jx7p#U=(D<n&ua&f4?k^cb-n?M!#iZxy_C$*!5-$nQzbX&
zcIN&f*V1%buV3NAO#g+yqv%PPyJERj!q$h#NbFC)k>tCo^nW2FV~51}1u`tGPG-1=
z)U<62%S-*z2aturBU1BflaNJ+4r?pM&z6*3lkaUSxPWGj2Oxvb4(DIsywT3TM^W>y
zr5n|d>IvN7J9e!O38AAd73*Gl3(4qX?R_Q9r&{kBvqygFd<vk1`i|~SYfUlN^eMqA
z-UT4*XLn_`91Wrp35&RKhtU=!u=6W8QdeabRgevj$`pxQCtuRNNIJYTG}BUk8^*#Y
z-0_U@G2&gf50v=;lTgH!UPZ}Zx98A5o_uol7vk{v;vppGL2m<&SFGfos_XhtQ^1+p
zix}Z<XGQcBu*Teh8ytK_8(qaOC}M-6-{Mc8>5P*eYy!)b4kk3AU)il*&r^;WINp8u
z3MRj4YFG0urAF?x@!|$z{3I%WUVoITkWcKiPE@?_cUElOV`&MNOS?V;5%-&>Zdjgl
z6}=)<p;9IutMZxSta;svsd$k12*~tK8WDH~oK^41qG%1KSDRjPp9EZfMG@SerBh?!
z<=Om<|LY<Qg<YRw7tQ1Ll&kU<K@h{HB-|oJ0@mOInAPYdgb3BTc4=Ql)Lb7WQBb@(
zbraOe-=Wf=dfl%ch~b;>f?GVRruN|4(HROtIe84eIUl#tMZY*K7F@;<IeY0lN#_xH
z&_jPGQEG|WMV!~DMZse|t_sk+5cbZoC2qE_j(DsMwIgZ%q)*hIks&l67Yw*RX#WnL
zRi#>KiScqp7DFsgp?u`bTaYt~NuYZ6&_cX9y_wrLmS0)*?Yd)*XX9Xc6X(!&7#qQQ
zk}_6!FJ0~0#%9A=q*lD)ef0Dd_`eVW4#K-*l-JoT$S8rYpaKZIi<CttaE_j;He>*H
z1&g*qTH<H&OY!FK*pB4cL!-ufzOCQwXIJR^J9itZu;olbgRP<_jXX~cVkbZDGdTCM
zQe`^qDXBd6psV1cj;k~~c+NBUxLLyXy)J&EdKZE#=xO~7$`G=BRZTj|9O~G#FBWV|
z_@W?V=@@u)5>vRipw~h7SBZ~y)-%-|o!i|3$e>5d)}KN7ud#FvrJ+Q%6b3C*(qR)c
zqv5HZecZpEFa$Fx{<QNAuYD2SxN67-&N695TTl(c(v|9ts-!6*Xim0a(q=!!HZZV|
zP)7u}e0|PLZJ<>=(kdFA5Ky=%E~Vl+IxoE{gRLpeqqoqtN|~I6=sJrpy0uF2sb0&7
zpC0?Q^$9uyG`-{c^HLO9BJ3zh#+BUF;|-M<ms8I+wEvVD>&XmsN4ndkLr6d}C@0Il
zsWF*gV0D@+<diJ2NpDkJ|Gq<H6fv3MEu<Fh2G6I)R|iAty6tXIWh-jh!{4dn0t4_F
ze3^L!Smv;gB{HZve%pZB>Ol2lJAZ6OZ1Ky(K7?n%x!fk_QilT6u-`4nRi%Id52>e8
zMU<#iC#xyF{);|`oQNG%^tP<9HSE}Rjx%=4h~H1|n9^5I&g);s5!K+$yhbI}Ld>+T
zM8Vq^gW%WO?_$2L$kiiVq2ynsF7Y3;ntH~ZgP_SPs3`7<p`o+oY-^!4=Ss5Pk0ocy
z9IK|U<xm&4QrEf}Z{+GD9_i}=?hd{fpjlNxM@d%cLg(`xT(7Th*aEEdEq^GLycclR
zQ5M*M|8vFLe?f%)HfR^EG-2bVB(I}2r9Ft3B~FUQ_Mj*w?0+VBfNuNkLP2k`6}vSQ
zK<77?sHprCB>^I<d_u||O&qcPRJVK(6Ji<I>PlRCSll5Nx9Z|lXlr`=$&|NN(-RgI
zpzzNYoD=muzVjvXLK?J#>XbU?r8mjXFhE-R)H?IgIgFw$b8q;%MSU`DD7G6>eUoSM
zogIvW^p+$O{SqaNq)D%k<f)k8lzi1GsvUOp)93s>L)@?8>`O@&BaiJT!e9(>o!$CL
z&T&)Ax@ERNOUxtPN=AhV$ABxBZ{lgJo<|x4vq!W960iGc30&AC4sXGMCXWY<x*@l%
zJkNH_0F079cFsRru#xS2^Jp8>|14Wr_BCcZ5Y*wB4?B>rnxgbWjQ7-*^-AFT2_&2j
z<Bs#LI8EwZu*S?>i>i-D{!Lm!-`rn17%mjpvGc~c1;>r~e5Qz^Zq2OgZ+>3&g%KEp
z^UQ|lJLc2|-kz_TAzkN#zj$}d*_17+taXQl4lCt*oD9nMMQX&$ZpSD}+q?Rn2GD#-
zb@bijr5axgNE-QJldoJX(0yloP0VoEl{Ls9&a&p3UDc8I=FDe`O^gTZ7q^eA-kPM&
z4kYJy4!95f-Q1Ikk@F@hTw|&70eT;@{)dm+XEB#fiJ>E2`Jr?GN!hrsD#p$-<lIs?
zMh^v8&=CfT3CDMe8vBLPRh~5IgK#oJRR3DOjFkfL&WVeo_O5CY9C7|j8gByq`)q;D
z>u4Y`Vh0Y|4pF~`6e$lN{WK`z_+F>6qF#Dq8jC^aQX^{l%fld3^SVtIzyH+<5GUe#
z^Qz@Zl-`*(Aqa;bEe2N&D#|zpv@Qy(wWXVKvRGr`o8Z)~^1w8;7X6xoQ#$dDUPrvE
z^NHo-K$m``(PR9dyyLMCU)U=y2wl(0EfxBicK||HkmgsZ=B}N&r*_U5?v-<L1j3GQ
ze%XpW!nhr_JES;K$FLWrFg3Z#zvMS3HLYQ)F<6f4$Y^s%e#_?++Cd9zhe{oo3rD9+
znxx#i4B}^Q>mEoNpvk^hPgPm4ZXK)O(Wjsik59vwss_RoEtC(KWa6rUiMDWjGFiEm
zmiV2?q#yCbMSg{+5P<8-+}4}}ylo%yc``H*wAi(DOezjQrz(#Tk;15YLJned)&q;7
zcUV`Af8npNP{{|=#SMHC;U6`N>6!rsL)01UY2D#JZp-<S`+o>b^V21SPNC$2<0OAr
z7qkn)eu(PXbwl7PWa#}{{#EOzE=19ToAfi=t{PuK0id=^>TnIv_=NEY?KUZ7Z;i*g
zygB<YjzMT74QIoSaXGh$7u-NAfRmbQ=#v41iU~VEe^r0^1(!@-r}ghv?Py?fm$V)i
z8?WkT6K5K&fZ@yP0f$<OMY_hNHb*wLp!?mcHOE>p)5>l|>~>x8H;e10-_{xj{v??Z
zn4($GpX`7ao|QMQv_qbbWt2*aCfUbMm78b{_e)CcYXPIHe4kMbXzRqMWH*N^?-Fmj
za6Y}tL9=jLRW%z&QZ9cu13tb>N6J49Stcx2t(1mIZ6%?A1iXd2%%hy6x0ESgT>l$6
zvob^~fvIR2DlL`cM=OD2j{pVJEn++hiQ-Bpsuahr$48$LXI`b!&-&;+FS95PL9ZNg
zL;*U|v|7D3EWqUnsYY$P9jVHcynk*)w3Ci|Dx(_G#^?A%akRTl>ddeYpD$Q{afbQ-
zwzE^SNKaTP8swjk9&7N+53jtLJ`?Zxdt+)c=0El689!0E>5kbpFwruzn(=fZQs;Cq
zvsV$J?9<of7hD&{`x2(@qSi5u#keG}oZme45^jWxmS-a(_G!Mu0$|u$mg?sbotiUM
zjj;v9<G?X<(7AFpDXuI(gxL71aqRgz;LT-s4p2y-Z5<FeM09cn>~k7Z@o8uuv%bqZ
ztwa#$!aHuz;=)%J`RxoNSEen|*7$Y32{zShHN3B9xs+wmp@HK+4;F{_zi<kQUgYE*
zb_%7PxR=kiU!To2H;R2@7L4m`ejuk~N!X$N)W#dpKniLeZeBrHk}`#UF8f<X3wEXs
zGCYIFA3+7CI~VVX=+w6m5cPKm5Kl7_r(h&Oj*8j$fuNI3cS7QHGu6^73685NRFZ3S
z5?7D;juFao=q>YWFj`F75(mBW`5$0$DJ+V~KNRedhF@0<;1%i?6poyaHbmZpdimMP
znz9u`V7fIwes0-bILW%@+6;fC>QwY)y@#9#A82sB=P|`G`J(;;agDedZ18^Jv-MQ3
zrvK2DD~87%ZYIMgc25hF<V&{FHNUK@<cL8Y($QzSiB~(wpIW9NRVqR<n{hVg9RXOn
zywLiC^FZAGl=ywtWfO9T{oUi_pYr_A$hGXiXMU;lfwvZUSaRm2L>DK1QL}MT+|Kxz
zzQRbL{$w?!T1$+)OzO2r{z911UHrkVv;02&vP^QPgC%fXr$X{}V6k2LXOt_>?R@h1
zX5;scinghRji~6HyzrEEk2mjQs1_;EQxDGnJABFIvf(JYjlK1@Q={(-A$}&2eWASM
zMIFx>Vf|v!42pe9$hyl-uYZ~r^PTLzOPOL!3Olz*b&`YA=OV1Az1b2&H_KhKe^GOP
zkLqsf70Zh%#&yBt>povs<!^jb5o?S~YtLt(ma{Jx>-<sH20FgCYpq#pT+zms{hTgk
z2u`r!zXh0n$E39w@Lgwtu)pg%queUX%D4*f-3ZXMB~8gD-e-d9Hai9c3XikByF&=8
z_CCxODHlBKbXdb*!XZ3BfJU9a{q6}!_6=Xxe4d4UcNC)p$riQ)7dH(geJL?$+h#-c
z6o2lh2>qn*WNVEU7h_W)q^!>;Bp13b!F-<^l`ww@XKDZyxlBi}HKs`F56cm!{ON|n
zfatH<kv~c4&pGu&kTfo8xCQhB&(2n9MtLQr>i1l0^u`Yx^t|r(82B|DWA#ojDU|Qy
zh@4Y&X1h+TILe!V0(~ItICy$9Y|nl}?xPHe_SUdq+tks1@&8nUx@hn2%gAJ@QClK)
zIxGgbE&*Zo4jo9B;Cwfts;&Q2NN=@r;TJ<tl2MIe)vt)_o)P$OlgW39iOMoG%BY^o
z@K=76dFxV&OP!q>{Hrk;jV*2V)-A%?cnIqoqRa+y<w)o@dCKLy+JU;wpb<zz^>wS;
z2cHqm!eE51IV^9)Yy2NF1W`tYe`@OQ?)hEHFJVASV~)Bw9j$r7AkBJIRF3v3=NB^m
z%=sod#Y{Wqtg))xE|6YB*Rp}|h6}prGZGqDd#P~`FUep7BQT4Dd4upH*|{xN&xjH?
zi15%tpuO%zB1$3B?M+9}>l^Ha<ZdkqKV}@Svqr)ObI<&<_x>OE<Y}M};1=3>B9Bkv
zk_AzWb3*idxlsqb5k7^u!#2?J1j-)rrZITNt=;Bbjfw7`z=H*S@>2S~B*?t(BD5`$
zE)U#3(bSf`R_7%*rrUTwlwHqfewn@HjL2P$)9y=Ub;jA@PoI3wY-4Wh7_9|X)>s0F
zQCq4?-mtGB-6o`ZW^xZ-qAHJU05%Q|hYpQ6ucIZ|f1W=dmYf|_gd7mLP+G|u;*kI9
zLa`k91Dnp#lBiT5b)keB{6!EW*BYLOpSaJK>gv^#9GCedkmz_MI#EE^1gh)H%sBrN
z>1p-|Y~%BT1ADCRR#hk-><zNm6l*Pdf@&-(&==ZlViLBbw98pl4fxubfE_mlwM9dq
zfN_Cq0rj@C{&<MbUG#k>34dF_GQPazJ7^#coPYVqIzR5(K*v_uK>Si#DS+{?Q)y^C
z|Mk%E&a3zi878Xiu;6+T_$M&#IMw?zO6;OYUHH}=qzJ2K-+?L`7rY|#bxw>Ba-Q3{
z@&oI%)_xp=+g2u<f1gtvtLzG0sIcP>9_>j~c3URnagFg?iYfj`&k|N?qI>-w_fDgi
zF0qg98?wMAMF&VZu=e5O@*Swg(f@su@Sh9B7{T%H{uf6>9QmgR27kN@4Fvwja;$~v
zLIkNaOR13&I!bA)R<?;#o!uP&#z&#cc!MxCn$T~E<bQ%8N=c<6F^db+z474~bSy$)
zz8L?6P{oSL5{3`V&{*muMt)GSRV1`O5B;j2pPf^b)sW)F%|Rdvv-~F&^B5{gQJJ08
z&RyeQs>sHzykk~@|CiuMab4M8jI|=lIDxV&`qe<be?K-xM^MI_3+cvKsE3i+c6r{Q
z{Zxk=^<_T%Hq5sk83_?{2a%MHJ$4TKW!|I$!6XYogHDMCq>Mt0E2OT>%ghBBQFZL~
zc70f(MoLVeFp0qi3Y$B#vJvWhba_G-w39L`Mqw#PF22@SCwmb?slCl|QJ~zleCmtV
zowxBgEX$LL`JJf!u1>-T5*I~J&J=bKq#fzCad@{i?;kH^vwBs>$XGuDvUhokH#*WT
z*2Spsv$mzIVvh(DA<$-N7ZthVI{V;Id)lBZ;vD!f68?e!glS((*SFJN>N$v#7LJ^O
zRld4hPUh{S6(45Ujj~Xd$d@O=JCqy7lUhyfswYjt3L(b5k%YUp%CTV(rsJ|a>F~d_
z2QNXrIKGD4oVT78XWy<eR3pjjbzM16VbsrosnFL-0g8vQ;Ac!a3E(l@^}B@~&tKnN
zIykQ;lgyXeyM8+;Qj|)g!SpH3%Zn`%>I|T8K21|O&3ANO!Oyb2TjP!zp(JgJv#8Pg
zb=Rgh7rQw{x}PT+lgdJ;1ePG40yUM)yrz|fkHkjc|0kXvl-_wi(0un3?yJPbRq&*M
z4fh(1M!jIe$W@GgYA&ZJK)nCddH>T`KZ64Qyi2a{v4xa$VN2KzTMSD5{creun#(9^
zs;-p&pBVeqC?*W>4fjpRj3%7A$L8Z1J2%0dOdqMZr2CccTl4?duZ$F(7?<TW_`JR#
z>oFIW?h>7*+#>f+Ox8l@DE!#}d+i9xf8GAyFr(+g|Bd_qy)jLE@$mM}>3f%3tZrJ)
zC=d)@2sE#S3Sv*IgasCR2b;I9O|2L+!C70LmXadjQ7Qz!!2ht8Wt~REhtCCiMcPCd
zxLkW}+PbZK?rLWYVfMXa?>_ip<GfS<K742&I)A6oec0mr5C8Y!1C;rlf%oBq8{j_<
z;D>I{Z^ZvyZltGe&ssE;KbIH`6%n7_?|yr~`Fkm{(U0A~(Z8ur9L}q?#`t14?Q>Y<
z=P~jym5BdFpC@fR3v9loUSLg8O|hT5+?%Z*X1ikTxCnF_jEDn%)Wp?^;Jx?rYZ9~d
z>3C`QSpT{HYdz94AwRY0PGS*E7j0+LduG}EPrTc`|B!wk{EDvk7gzQ0e{20t|GnA`
z-LA{Pt>Poh2>q}1#<TnV_dRcY)HU3%O3A9ksQ<NKYU>ZyAFV$@LjbRi@voV{*IiMO
z|Jt_X`*TQ$7Pe=hcNOb4T6xpe9v#v2`B3G}icZ5^J!fu0dJKeHBk%R3fNq0`2&|}q
z!ZiLo{xbeL{<g{A?@y>xp$P%4f_YYlAw$S%!_VzH5h6^2kI^?e$2<a6^V*y44$2Lh
z4a(fsi;(?{&5^R^S?-8Qk-AtPKiWj8+oP>+-ILSh+sW_ea#_%`m9ZD^Cp#yjb(_VT
zd8*tl8s$F7hT@FPM(gSGG=>YZIPzfCMB#Cp+*`@Eo!P^L45P2nRH_quW^7>{C^6jF
zk*lqydh5BfTi}rtB8akd+$W6x?Mr1959&+K)Hk51)~YUlyGbGu>43rX%}deO#p4@>
zR4J}5+xSA(qw-&T-d*kW4OR;e>%ZOBqQok+f3|f#id?5_e+T|&0{=;U;FJ@G-ev!c
zEl?_`$$CFUZt;?Q4HdJRlDr|JOVkgA8cUIyAzc(iy4&m}OnQXS+}L6a`Wa7XhpS*d
z0_1L=$4?LjLCi6d%d_H5bJYLJ+tUQJaRpqigUFHdtCd$^o}nZb6S>^ph7-X^xr>sW
z20Rl=$Wc=0B)<QhArhwF7Oj`E?b7AJ(2&m&SR=EviMbdB?OB(D=)~gU;=w#Zlvz=w
zJOTxx?z@!lp45)C*S@eKf)R#5EFZ~BksmnZy;^z@`Z2b!gA3{1fY((R8iMga3~;<}
zoYTvY^;{ZbQ%hMhB!`rb8kpOze38Lq;FTvaPDj#qT>@#ZPJlON9RY=suCe-k0NEL^
zyzj9(yLORMd8BFohBsCS;3q*qon)R0Qr4nmeA3B`YRx}rF75^=EU|~fZUz@;gWK*1
z2DJOXQd5g(5J0yNz+r)|44up^y9<;IFUI+;_o@=AsTdlFG_gar1wiF+gWV`9{#XSC
z2F-T$?eFqorovL5WxQ8cBt3AO-Y_*QzfyG6V7PEq#T*1xsN_G?+Qq>z+Ij7MVn@~t
z8JWO2!x-D$h1Bd)lOpo{>$-9IXVcOj6Zr9-iod*XY8V^zm2zY=AdehUt-po$eMLn7
zO<wGFOk(Hfm{5|baL|njmZcBqE={0jnLFdyorUY+p)A7b;0>ChNw@a|ec8rbicqwm
zRP;!9C=w4_{20gBT<yat+|~ri6Pu8?+=x^Ckv?0hAw0L@3d!UD_l?c2hpSCwx^I7P
z3<_RFL)|o}rhh-Vi6CK}3fRd@@KK}<kL5_aKVfE9ZN5^<b%{YBl87Td{xh||K(J`t
z<H~cIVxuG_p{gPlPY)l)8q0yC{;bdQrDHw9e6aFFj*h%W>N#dFNXf<ZV^h@7tU3f<
zX2HXrvGnJ>D^Vz;J@u$QTp6BO?$w!HQpWYppUTKNH6bsoh;EcHnNAWr3`Cz~u~9uY
z(Lbebg=XoB7+BF+&zGlr!FwuD?N<f&7HARgY+nCy(8HC}VZ{Tjj8<cTvlh~ddA(?!
zjPx9jmtY;EZ~kIE434Io0}o4jLY(4;A6u0}Nz#44fgV|&`o2uS&i89&T|sS?a77DJ
zTZW6TUy)RrXO(hoVx)A&YK3Up*wNe84b8f)8Gv}A;8=O}0V61)kb&G%LGbg^)~4Bl
zrT@NMvW8nz%6Y~nd>jL7P#k@H^*R^9gbL))k?A9}AI$v?DeT@2?X*6`dBQX2>f)}P
z1*!WF=RtikI2$PYIh2AbFF)gYxL4w$X=|x$$@~#rq;+Q>+PtcSS(g^&IdXfMdl~Nf
z^R2qQ{Vu+=iMDk!Q66k=wc!{#JS@@M*W2Gt5!pQ@A+&ZH)}R?SU_r<aZ4dg{Cu`5n
z8>qY+yNwi6w4;>}Y6}>SHMMd>r3W89s-dYR<|aVK@TI-R$0sn)&J&99^F4ir0m4}A
z=&rMr^_d<qsu55-j@(h>*a6yMFaX_7Dm_(?T~z4>@t0`|^Mw^2sd-lgDmE3uOsy{k
zR@uL7Ya>v`@#i3u`MvXTn3lk3dv+7UW1oXx3t~`hCdfb#!_{6?7hcw}O!*iHliq+_
z-3Bkx-9H7sa|Y7M8~gKKx&8+&UMpYWi{$Mk?}+Eb>ET`nP`Orf`lT`mO-@*9@24yR
z1u0p|RHzwPscz&Cd||gEag)oWn6x+5DZkEOIlYfV8^}#~(oL0d&z?<_NUaOg-nsoe
z-d~+p9*wx*+5PhUY#Qmy7X()~sX3$>$|4MEa%uj5Rf+tX<Sx^WwQP-~xPVz*qvcqP
zCD71%GckR#T<+!xlG$XV!TX%p{`wiSOGU(_n2+7@-`{+`a22eq6TnaMnsWdO@M}3U
zB19-QvNZ#vv<+iSty>8OP*acy|BViP*^SFzFSdiKL=u!dYdT4@mV|+{zRm3$*TE~N
z>*`78+f^@c?=!QPKkDg`;HIO0--msDHkWY=bTRHvvHzpj8a5)fsNp#rzRKgoyk0y;
zeO!Lv&VtvK&<nwT)>BRB7pDzR=7_sDGBN2yZR&elCn*r;qmv92!WXi|$>A}=Tp_<R
z+)kDFw#W5G`Bhg0Hws*uMU^gVYXbIR^@!vjspn#M3))joai*i~R3(_j^Y;OboYW$2
zONB*#doYc2_5M8)$Z7D*dtq<aJuvO>8GXjd83ZPbk=68%RD4Kk=ct){T3RaXvYRqo
zcANY<d(WWV;r+E8;&<HP+3fbPlO7|jofR2J7u{A*6SAf*faV3=-a88I;}bvQS{s-c
z17zoiTm~Qk`dNwg)Rc>^02GuQA=e?y`J(BL$K66s>CeeM#NJ~G&P7XZJPBj|B|-TZ
zF^r(4cs_A}a*lY|uZrDer>a^$w0<79ZSuoCnhlkJDbPA~O!YO{Ou=}t!$b^l#4SZu
z@h^ove~uA_XnX=rcyjXfiD$VQ(NELp+mp@J2s0&Y=!a)Chfr+)&gN^tbzj}dxZraq
zV~)8-zwuBUn)&1@-YKo#l9DrPbS>oeitmC!EeG(%dQ&pV-*^7?4{6>m=|e3J%g%U9
zOIIcIE?-1cl(rp|D4$C;et)LL-J~eoQGmy{x>&T>O=@=3#yrN7^{MM6f2n-`xWw~-
z6Z8*XUxV%GvpIp}Iog}71O)|iA`XxV?Ilk#X>xFcuB@;iqM2;4LJ#&(gErq}0G*0T
zcf*y?4$W|JoiXKnT#+T8lfp~HraUD<avnlJ0OYDHC@n*df0jUKjYv-4wau`@cpVv8
z#~wQW6)+P)>!v*5%gf(}Eo`tr?m!Q=$cSM6Vtpj*WdtA^e$mNjg30<RH#E;1cWI1~
z*bypF5o+n)yV()oqBMF;X-jbt78Rw^oTmgHh{?=kXiv9`%fdP#E}1ALZN*s@|NA5%
zmX(d*uFp|Di#zBa*0E$`JMMtUI@mC8D4X1&eJ&yB<D9_|N#XiVcTXKfyBQ#8$L}G`
z&;1xD5xtoBEBVw4ZzIqazj#Wpf;4LWb!>>P?%~#xb-dS6BK9C)9N-3l!Ko)4EFbJ+
zX5s74(u<lVT#9%lF3ZlDL5b4M!?~|R*Ww$Ma95XP9(9Xx!@is7Tjt9~<>UD!Twt$+
z$95m{vqPL|&x~m(Z?u^)0_=0{E*q)YU8o<yb?6Z_TWPxdu+H(v6G}MucESEudiVY9
zA)Eh3;Bf3oDVhbWPVq`R<0!Q|fNim`Q$9r=D6(sL1d0)Q&?x-1xNe0z9sdyte>z8l
zH4VO)-9lvX<4&p}ZiHxQBtZ*#vSPfD#JA?*X=rj?1&HA%q54n{4C29h8$KOf>7NW<
zjcu2Fv+-2kr+1`xqk`ee4erDg5L&a|k+2I_+j=J~Wh@}!tECy0$%gK-5L5Z`#JW0z
z7Kn&tg$8=NcyTq;fdb{0XPNcoa_*_Il?|~UK&OzwQkesaYh2X|{&@haO2a!s1;YCK
z38yQc2OMiM+GEd``h3Py|17Sv0hNqBlTmO2(&vcCq_i0EK~6jDI~`!_mZO$ATljWv
zTWSYeA|szs9K0BoZ##%0hR(nS@&x*O<mawFf@Oj*zbLMcCj7kNQd&R>NZ!uOM3o@s
zHclI?WHp&F_;$aM14^9lnn8OFN*OH{{Q>@)Q_#FG#SzW(#>2{3x-Fn!dFHULmd}8S
z4xA00KxCCUv;39%LHkVLiQK_7l#~0$(8E<BFUP`hE=bRE!<s|}D<#jHG%R$y_Oh6K
zK)-9W&eM|13?1~t-5y3TLpy5u`cr=qP2cAxnZD&$YZ#B=mrPAj?HAd872oK8NwE~5
z6Stb?q+MVCygXf>Hrl<Lxc6mL0`4p3=|O@UbACYqsmu|pkX23ATD;CX_Q#jm4;`1K
z))?0a?ydJC7M&S~Kg>{ffxy1`pARJUlQh=}Mo8ZMs^anw1DjK0o1(qQ<61aYfCyO$
z$p_?Kw*v>i)zv~K;W~UByvBU*W7XoO`-FWcQobiNs=Ng=@EspWww<lC7Rh`v6*5BX
zHPAj!pHk;dY1lQL50LWa_EH8ETCe7DuZ5!ax<JLG<=iM3n=%i4Qgq_Gj1mTY4`wu@
z_9ud8t?yBRH$=1qPBhfHpSj{5V&2#Cj(_XZ?s|wF(vanCqsb(w2lGxx5q0THzsOWj
z?2z!+Q4bO#beWu|9@B#we>M*CX5HIzRx0C!y)W^Q)+qdRahBWo$>KLXR!w$u(TIH{
z^ILnq73bH;GshnfBfQvmBIeW#dPMRD87{et*NB79a#~J>vLc?#zxbb8@h#|xS@fUP
zgI8m7nYBDUFg*`tfdGN*KF=F@>y5O#5Gb}07g|w&?hqd-`pbE>>Pt+ZXWSg}9(u&)
zss^IIX~4bNivpOuAm0sTkLIyO^5$ht@nBZ@;Hn3D9ZQP7!%($izaY8<k@vXM8=(T}
zF<<cYL@V&6yh2^gUwCr$Ji&&RrbXxcYC>UYOya)yibi=%L7aKA8G5-rz42#O*XZcZ
zheOkqOR`xL)Aop*+nCWEIKr3D!El1RZB~1Og{aR{EvywA=48);hTKlj(I$^NTyCw9
zPFwTK^$<gKFDeW~=0jhaE6QbexJQ{*md6U&arM>&;-(5PTnn)Wag^(E&PFGUPO>`F
zX}9$x{sd$fe0Kd*8%Tmm9C7h*-TeCFrjmrqPd+}DAbkU+f^p7#p%xRbLLlEfM9!`4
z*nvOYG(zULu6uoAIL!KLkA=I+98}$b1&8&*$DPI3U3*;{4oprzk<Zi@>v#O`By}n3
zE8+1~YAaq;Izq9RvY^)|PApZiQV}DBKw3Lb|7I$cbj#<<RT<i<<o4KpYEn|c?P%FB
zY+)Ol$~C4s@-qihd;0IP^MAuiki}w+jU?zbwy~GlJoqfdaShRvLbb|?Ra;k5{$%!k
zgs4}p`;xc~eSDrszS_L-Jj}NQO)wqujP3GBmV7kHz+?As(326h1tLAIquYItpkBDb
zx+tWtUauO8+|gxlk)TvSiMQI!d|oS{ggNs56ZoC=pxiM7$jG&IVvnTP#+I?pl+{@w
zma}XP^RJP%dA$q3a6saNH5P2RE(i%OOwsF*N$A2Sn!K~SK_H<i37r!U-qU)W^i<!>
z<>00>R5v^eHh(|4RKT|5t&eGuDJy&pvgaa+uO9znWYC+AYSeSM4Vp1*nCc7u%y9`{
z)yS)=;O+_go`q-xhvj-Ue85F@K=5@JETi|VUAbjj7w7l|9cM-NU}-(ZdNJNEcEpVW
z5yO8h=JYgeswxZN=Ba#Z_GTfY+Mc>!@EWke@IRw>9v*h^Or<>83n%{>tqPm+2OKKv
zi^l<sve-l?IG0I=4wFVuD_!?3uUrcQDy-_{`q+51mX`f3PR4bXQps&LI)n0GVwE|}
zKhGs|stJFyJb<9YhY^&j0&!USIeBz;IJLso{Z$S!T>hS^=xKL=z#iAs`)sF=y(KnM
z;P?GeB;`9Sd|jEkjaXuE<l_>~t?4!{@q$MJDx*#(Av9#Qv?e26Ad9a_m=nlIu9hSr
zJB2#_ugTDU$R%=)ZxA3J*zCsh0m=ih=jM;iRAN(jE25&aP)aez>cM>A;}Xnww=xzV
zDl}O0=?*z9oV8yFLlAJ%xX;1ONLh`F1~%@j%fVgFKL;|fv<wySY}~ImQrxT0+gp<j
zIwROCE2q<A?J%=N*3;;b_4dL?oKvtL^147cnA&E|2Ay@sC-n^MXyO&fp2c&=h}i36
zN}HmL6U}Lo91K*|z)C{0?R>K7Pqm(4({Izu<0&#~!Cj8stLqwBLdW}ij9?4W63T#^
zVX%l-d4Yg8cV&yMv1dr~s*NaHNdZRi2)?8j1r6iRmt#Th3~k!ruS6mzhrKO(K&Hui
zqN`I!$xd7GxI2aY$W723t(txG4{~~Hgtv9W>KXh2k5&2aZlQney>ZXPi)LJwHCE2P
z4e;qoaVM!dWrQ}jgi%KEn-0I->i^qjJUN%`Vdf2UW5kb}pmMYyqG+wC-e1il4Z>=^
z>h{GJ(@D!ykxP68mTw<BpRJ8oF7+lo#JW4;)AM-uGTjIsWFbNRh_H*=q+jr}M=cm~
zWS3e_1p6JSmOGXaT%LqPABikvM1d7cB3U%Pwd4#f&&zt5&X!np#tk<Ng>+o)dIW8{
zWf7qV5vg8pycY*GaIS26=Fbnsx75hZ?TvA5W8Sf&5r<0C24j+iYOEj$CpAL*v-dR*
zvfy`(8Zlx5N6yy<&txsUo?N6ih~0zuO=rSrVpj@M%96if+DL~FHZwjYu8w&i+w4o7
zUcxU2Dv1!K2Jb)hnXedqery8U=P6$|@z`@L)|RusOgVgLE!20euDi_4sn6cATEtP0
z;+v;%-z&+gT-`-4K6=zh@{D830WEgT4kb2grK{h5dup$?X3<I3%X<rh2OE9F5C`r<
zz6Tzk`+#R>7!X+ULa#5j)=HERppKLY#a|yiqxN{9wbv*PKMHr;{^EHg2QXhVZeGxa
zUG+KdsZUNW4j#zjBq1B`B6gwpx)P3QvKyKO5*-jBLY$%_FTI1DjBLhg^hzX?kzp^)
znKPI7W1s1$`Frv`ZA=%7CVV2a0537$G_r7~hs0)|@|udN2c5@)*%|B@5|d|=6qSuz
zs7oV{3k<Zy!OAT#l-L(vf;A}m`%&@E1g$PVpU9}OR`p;<nx6-HK_p9M?{+6AVFm4a
zo7I)y?U_LjN6Lw>zq3;&Wkms|LgtnMD~P#4vnxgkm3XoCUKE_RIA+mg3|Refm+JF}
zHavzS>HcJ;Lu-3dHmp@2w9x@TQc5BeOI^3J!IR70IU4h7xnXB+YD6>c_*W@FRJg-J
zoq=wAIoEI<pLcKE$5fBp#(EWr{7Ox=-ENEF&90u~%z(71JYxSf<o<wLKN&lxY&yv0
ztvF;f#NwCPdYI}d_l#f%ZKm>T$iE+}=aYUNP8)|pzq9g4_~H8dt9Vv!;F#ynsd!+d
z!)PCVxZVkdA~jyERO_^{I?6uO^p%BXz$^8F%vhTf>FCJbOZ>QYPqjr-SIJdKdC|cL
zbE*!IRZIGhJ&|awSd92~o_XP@iYA&S)QTpwt0MBvJuLd^)Ni8sS!(;R2@Al4|3tSc
z8A=fAn^M&B%klo@>RyYWVROz_dDu939uj?!=2pumvf_?NvEB#Y=c1SQa)DBa!&Sr6
z8j0b)MMpyQSleqYIi0fRA`;w@fO=KT0(mB4CfoXHu>geP$%%vL!plSlFtBwfk8+7-
zEoPAod2&2QlQSC{>l{9zL+oQ@tV@@a^b6jtH_>=Ls(({u6EuH(C2?RVzLqFD?zzEv
zZ2JeYZUc+m5<~12NqG8y*n7*MxVmp|FbTmSxVyW%HNi=6cXzko4Fq=@cM0z99^4_g
zySuwh=l?wS&eU5qRr5|w)qJ`Aq3d+_wqAbr`K`5~XWm|id$|W|sg9m_Rgqp&g$Q_Q
z|G7y#Y1XHSq!t2hx#>4URic$H?xT-g&aeuF<kgnSYG-h#iER69HOb*O=67?6sf9Gz
z{*GUB!p^Dpj~o9cD({Z1hnqDIi+O49eVvJ5#UF}cx~WYY3#0U**w%AlN*3)D1f{Ya
zoF39{@LO)ImH8sK>&0y_oNUPCilF!kvYU2W(;3bK%dd&vP}f6jCDue8)yIMa4caQF
zpg<fiQk-4QX0-KoM!`<NzZo+|n<gG+L5dhqLyuBu4O`Eu-|%D)RiEPjHmm>GEqNOt
z+*`jj^10ny`+9|JE7df??LFs|Q>9L;s!fnJ^Uy3I2gcnfbYj+O9{ubDyzyka+VPrZ
zqPnub?O;n`<19UyZ0mPlefW@((P!q72yEeknqc3Iz9Rc9lp6T@7K*THI`ZpwPJ0s1
zZ?%6@nx&%)Kh02h7c0$_bfjG}<Wal8vM%>l@J*z)-?FG)tuWAoPP5)zXk?GU{Bl=5
zb&Pk!*onzd3V-N|ha6^*7>vuT*~Mb1rt`e=j)8U<cPqE+hg~&2z;`ywaKb6JI5S>b
z?T#|gV}4?jsoOg<dCKNfU*bVQM*pt7L{>ALr_7c`J8P4PhJ9tc%d^!TIqb+dBMj;i
z2E|Ep6Nt-Oa)4{E6%U?ek!_6PcG%@ftvB#-pWsLkCj?uL>>BuC2`y{dpHXp`5;=>k
zD@g;z^kwcB2KE{ZbC!OvrZEN?=xDpY2e40m(Jx<93|x-Osj`2fpJY^80P>(7OC;Qp
z)`tsL`~AdjI31y%th5>z)5lTxYS8OWI$my&ZfWzBjZ-VLGU<x?dLithy4=&7u)A_!
zo$WmKN{>=fu5uenU%-3?$CBujGTG6vJsN6FBy_`3XZh|ehmxg>sFETep|<H&8Gt&w
z*_KtwuOgjz@a@lDinb;XD5G(Uc`PyHJN-RGh5m~_;AuPJfr34QI#eI#9sea9#i)bL
za4=7=86}fu9lUYkLKmInD|f?U5G?NVL#2Ka>vCJz<i&n<fby}aybGzBsK09L>yI>P
z!|g}pGB``@`4S@yBisP@3U*&6k;JWU6@9pjjDNODD+t^RLvdv^Ina#SFo-(xh4yXP
zG>kF&Dw%|VC8d6<siaGr2ycaItXJEMH<tBrxoe>TiH*NYL#=Fdg<Cn^gzB_DnDTHO
zfSvy^c=t0lE-vBF)`vvW!WM~0RU?i@mbP<Ze~R)6Bp?gw;;UNY4AI)BWP1$YtF`_P
z8wVp}L0VJf<)$}n7LiTUZian%{Rfc#dg(c*cVp@!jT3scv%@ZgJqpXN)74a9G-=Hm
z%t6Iugt^(nAg88HkYVrQ*ge!kRQN}_yJl)9xOH3SJ{)%YYctu3F$QDSg9-y?G=>A@
z@?zuyXATXoXT~2V8Zu6arX4>~#csdL+SZ@j1_XDbkGNwKn$yLVoV9XdhAHZlpT2&e
zIrD_{ErP#{xnV91B=i;r8T%<-xvQ_@gla;=Ok91aE`qI%YRaKfsf??Pz<F;VGa(!e
z3}&6$1-TPvnZJA3hIiY1S5RMl_WY3=;!+K>Y3OaDPj8omZ6Q2W@S;mCa4pF=m-?W5
z(<2utCdggAR2{$YJiEL&KT%iPf|7MbFqHcIc>jbB=f#L@(clMbSx;mJyXAQ#KAI`*
zeC=qjKM+L#ckW3M?}iJXNWZHYs{BCdAA8Y*|Coc*!qEA3UmXFu?;&pobFl+DCEF>a
z+Nok2m!z-DdNXSRl{jR=oaeH-0`Jm+jd6Xmd=lx@rwyXa4l}?+S7uuiPv8(xgTE;O
zmo8b2=A9S(W%{i(dX|dOiF?q0S*Wp^uQ7>1bG^p+&u32c;Gx&vo)+Y+6<iqM6j7k;
zw(F4zTGoDVz2K5<$@U*Ut?Z;L@0@wrHT5mB&9?mf?u<;-`W_6cV=4xvr7gxfikCUv
zJ&;Dv#ROHA3lOWpHvKngDYFZ70*an|N1RAC2MS|ra<e|gYO9Q);`CV=K7X7}WA`o{
z=dNfz5T1X*kwFPJO1$*Zv4J;lLvfpdYnN_!QdZnh_zojZIf&)Fic3O?wy`1KRho2c
zBme?piTORe;(*XO4$B~fuHq@feXy-@yDl3KLbE;cJ3L~`QFv%++K%}vI6$MqKb`jN
z0vXS@V;A|*2|nk(i<YGQDG*&6t}G|y_;#we>gZQ#Bv6W`HQ-_rQ;g&Z88eECcF69!
zjY~PTOQSd`>#4zhC=s|kn-w{Rmo#tBqUYY)%P(t_P8}lrS+%(j9aEcZ_&eyZr2a5?
zLQJr!nooN{WAgfBw7Gj67?^QtqI67qcf*|^{S<Ze%o%(1W4-_SMq{K-yuNxun5Qeu
zai!-;b+%pal!B8{cJmc%RpgBN`fae)TMf<~Ao-?etxqPyXb1pCy?$(?f*U`_7BjSY
zt1)bPtPV0mNNH7Y^%uJZ^+*p|KE`=Wn3%t3q&v#Ss!@4)mn_#R4rLNHPCT}SV$WkL
zXon5va(4$1$3fm${OU0~y?3B(Yck}@L)MtV7>^_zUh>{%exOkH7B6-&1AeaN#p-?J
zr;$y9;fxax+X;R#{MM$|??07(<^D6_W6Mzw&Wa1;aYdj$*~^f>W&2k!A$8d+W?NR{
zv1&W!uEf!@A|entv9YOFE@>{Ut(R&7V`F0rrE4X1Gbk3%*#{`S#_}l7CokJ6fm2>^
zyqMX^1w)bvS>B9-c|_Z$A>I=chYFP}k?TiY`#QHQKSH}69T@E&&&Aee%rtWQZ#-M!
zHSzG(u@qHz|Cp-KB-+^waNC(k@u`S+%x7jwS*sr?fB(K)IhZclu-cDbPl8~{i3YK(
ze^OKd{DD(*aQyK4g4iGKF)6VQbsA11DtJXc;wh-b?#;LDq(IozCh7Q?;%upTz@FaU
zuZOxD_13rrrKsSybfgeBQ_$o~M{~!gvEV`7qcvd|r$f#ab7pWswU}SviR}&l;g}cE
z@C@XHVXNnZIaj73`&%Yg6RIEfDnXe>CFkp&Z1-tBy_I^JcQVZr3HGw)VoG^ct+9a_
zqp`>L*@TkX!mX=>ZQk|9OKUIG^MhK&dd@oy;!Y6l)!M{?iq*L@S{xb`x-Il~YK74J
z@O_rT`$F@VR)`X!$U=!Mu@mmP==T04gm*itrH<J|%6HseEH6ZLTeRNFN7fpmb7pQ7
z2Qz~3SuN%=1E#$+QF}%SRRxL@jXp$O%FC31OcR7oQDeoUb{r-n0!>#f|07AOvRFEB
zISPmOJyUPX^)#V!%9<5z<f`sMSaq3Ri6?hzEbvVfaX2~M-zTHwf_Vc%%iOjY-^_I5
zBwYnZyE-hTk7qJJYMpBA>8QqhysQJ0uZt+$>igF9d=mH(s$_I#we_Q8Am3Mtl7X-U
zx}njs!-5o6$K1-TCS`vU-193J0mL=S)_^`W(q=714U>YlBdM?nZ)uMiGxheyqWcMh
znRAnF?{)O8;<n$lZ9pf@KP;o-u7<M9bLL;xL*|x_lQsD^jyEIHt_AQ{flYYvvhqPN
z^xZKOEjA{#L9`<8g)FJtjciZ9(Du0aFI}tq-=DsZ;~p^A_233srZ_M%i|BUL+$hjO
zh6+7+Hg9d5M1|{dGv3XuEWbcd($(X%-hY8VCy$|~1mY0(W7nPND4em0>YlO5VM+xx
z!ajE#b(QT2BsXt<wz3nqry&l%D6_uQRWJ@r)&~?^v)x>vdXR4>#mng`=!|GQZydkS
zdCzm{H&~F632KZK37IBCo5m4$77hlxSp;@8D;L~&Uaoyi-c?2XkSWS{YLM{&RMoQC
zd%xMsy4R?7gmiFd0Nr})wkqG<KX!-J)RRcC;Hji}a|gT2Lsi$;)GpIEWr(-YM?Ak#
zExg}O-^I&_x|FyvVHuv=n3=p*PCl+@)AJJcE(%+aZb^iJcNQ9oS^?mD=PK;$HitxU
zeQ`{atyjf1Q0+aeClbbalIpSJT*4KzV3so;C-n+pyu9I>AEY+R>S#ZT0Cw3@ASdlL
zHv1iOr})wquJdRA&~@fI1qsdBETQvBGj6ODjoogGA;E#zBiE4H*R)#sXrgir32Yzs
z<m*O=i)N$H>C2&$)QZslcZ(@?FWwf^%b2Y4OEk2HrKsh7U<GTYiXxoV5k#0j2-(dN
zu#Pa9e_Iu4%~HGDa8A&ces54M6O4k$@mMhX*&DTY;JYlaq(efC=Xf|Gh{~Ig^4+}y
z-R|7RC}9N&(KIGh(Clgi%k6vYi9N^3c+}<TA(sJ}h^p@P2?jJUK+wUV#D?cM32Xl7
ztyxi*N`d_H(dQqa$*QNk@;m|b#oUlIo6MU%uxiA}6@?6&1xJCMqrarfyolhBs0{tD
zZ<d9sWe)L|C{_u$<)NB<9L2L7D81FF5r+#As1d3zSiZaU@bob7bi|dA2%tcn!~t*5
zaUEuUEEaKO@2r$<Zcl^e{WH6X_D;`<?P_vB+kvBFRfdi}lCy|pzUN|x6<3(lcYG*w
zsb<_=s@ID{OW4fBvi^w|*{!%8)@SrzI^GqsK9HAqI#ni^QqiV1T>*dGw1>{!LCplG
zh`j8SJ^@XyzAzUz0ms-V#^Z|8SJ7QPGM_^yO0gRmQSCBie7j11yB@arW`_S}VV#rg
z2%{j8+7!5kl+2(K=8a+s;Do;x?i63>!!!^4hE8iRoh6<KB>03i{@bnkvm%n~pmw3i
z%gm>T@z)Q09W-C*>CH_MO=$Fpr$U)7Fn`*hq;RhrpKncTKQL@H@`F~H-taTG3Rz5#
z4EfPkntv9D>f9a~$OxSLB81lv*nx@X)BI3V2`NpHyh9r(&5L8ZU1$(=uKBXJ@ovxG
z6~T{Ine`1j&OrVLqx8VNRyg(CZ?!eSk3|ZD4d+J-9k+RK2G2+c?rpE?fr8a##WY7M
z=e|+!?`;z)yrxo?C(RqWf>|OtknTW}D;G?&$EYo9Dwp0}xLTr1zKle_V}Y$h4t_jG
zOuF0!vqe;p<*mXA&by<;RvZ~QfYOCTKGD8O3izc0fEm1AD@G5HGZGU8gqNx=eBaJq
z;VmC|d)!Pxe*RRTfmHR=LJb20112|3M>(je3|s=Zbt^)07VKpzB|0kL#Pau|DlBD+
znD%v~*rE$s5F;Bti93Z~uoqet%4<3E(zD=Q%o3UYUUq`>?p_MKMAK&RTEnMbtHtp>
z?*#p<W+HP_gmJm7<~Ggzig4$7Z0<?iAhx%$j`$)T;#-gQ-n*^_F1<0NbP>zlHRMUD
zomAFUCuY|*VZ-Q$S>AnDX}j&m++TR?eE})$#D~dz`t)@5T*-AO4Ft?@Sc?oSsA}P8
z9y1bCP@-#@wf%G#%=o}mjgIOXTE+bE8$KEEbiK6E5VvWp3>MbB0u%jZm+#&|QW~At
z#HiQLnW3F@S~@6YVfNbZ#t?}%59lM^7)`p$R4W+Zw2~_2y_|!U@1lXvT}=FNbQ2gP
zjWw0GR`lH&DJ6NGo4H(Azt<Nb*I04LS!q^u_|UT0+{j1?p89_z!!wc5nseQ~8Ztx$
zK$6f~<LG*X>S%}Q5NA^RoliBQ;3|cf8%bb60%$}s@l(1Xi;?<6(@A1@MQCpW7bwuB
z)}s0$y$FT_hYt;A#JAb9!zXRiLl}NHVtTHdXvqN1bP@U=1zUcvo00ae!83C{pnsCZ
z`l@B1hZO{hJm@4uihTh3@JF0@ePPT3pC&*hZS;IhdKqNCW!Q##K?0CvCk-XAd2YS1
z0GAR?TwLS`J9j0is7A~1%9x?dK31MMt*%!U)qAUC4(*d4Sj(ktV+2~Kwx^k{-?{*`
z;p`(RTJEipE_u||(^p-P&Fpma9aI@sh&OyX>S>WESah~6Q2K+?4MHV&uQbxR4m(A6
zhUGo6;uZ{7s;>A3PW&QW1s*@%;!p#Ud~CmddEZJ#pzcJU5?B-2fx%|>e(sMW^0*Q)
zp&l-fNvj$<S93dU?|}h0py^SWcIyxN0|en)PJZN-DE*Qh7H%oP52Qz_;fC8u)Lfut
z?6!Ac^LsJt5hD*Ojf0uSYV*@0dZ(N7cKduTdoi&0?bu->mN04A{gZ<EIV)$#-QuMS
zM1|HVmwXupTpoc3#DFfAfo~G_R<RTD)w&;#kY_c;0RjFxR@4Nllzq=i?dw6M4o*{h
zGnH}JOV;-p%syg|F-2?i@J+geZVg)BT66HWVjS$_sY|>DZ(-Kk<%AVdM+O2_F6HHB
z0-uX^6hv^8;l!Gk$QpOlT#eIx7P33doDfzSp(X?UW3&I#6u<fP_w071U`;8j%IvAr
zIm*Nr<Lnx02pqA5!IHY0X|bTrxu1zat<>Y+{l)V|6@@=3(_)}1!xhC&qg2wFVQC?n
zTUvc>ZH7wVg*eOG`<3?<x?R^lKAxO9;X5_P_ae5M7_~m4>K*{4uN={eGL%xvm!&%6
z-r6jMVmF1_^&t^)7mSF#xu`P)Q*{~fczFL|cm<CMdiGdhzI8)!r-U#4Kn!+E$oOv=
zI`gB<8hpoFMT8K}&c|N-VXV{9*~-MB?MaFWFoC2H#Y=qDwpDOL$*(#OYm3l5uFK~Q
zQBUxKv+phdC!(x|^vcB>a!Mg!)?>#t?~k-V`=1_sOKVrmSv@};OwrGXU4z2PC)|!A
zoY2CrX`g=?Ms{`Ry=0??Pb7+OBUONU9*n=qkooj*!k5kRc=bL*G@yBHtge}lA|(uH
zywwQe;|6|OdKcXY*SW4{v*+J?bo+X@qAY!R6_7M<%+HlV@vf-X6gFoxR3a(5r;>}@
z^bXG6>hHj3n5|OY6)98@$ycsEcO_Mvw*4)S9@$hR;x<47L$~6(u^<DX+>NG7XB|lp
z_Zgwa>&&%vZ0%~ftlpe@yjKT&a!_cQ*LUO7NO4fSHN;H|eteBp%hi+VCjVUfzryqA
zz1W6X$Dx)@%Ln0p@=|JQ6B>&p#veOf_a`Ame$Lpxz1gj8zuvd;uhF6aw8gg7v`xL(
z={0*`6z(_zfjc38bOMKSnO+vIj7C8mf_ni!RP^+aawn-*vWdn6&&k%+u68zS+cQE#
z+(^-EXnQ&@s`({A1R^z>k#~1d<g1E)SJ$QXZ?3WzX*9lZrO<h2gcld~W_^f?p-7_J
za|Q;#@UKR%-U`jm)X=OG-hbZdof{S}dnOCK!pIhd$Aq6vbD{}*;MIpBkpx6f=GNCI
zWZ1#Q*dJqdgodMGHWvu*8Vt`asINqTBvf5Er74xp^=mZ@I83{e@jyT7;owX@DFa_=
zvx|NyQiya_xKGuYP_uEs4-Nmyv}(ZYLf;M^To2ngK|$EhH**kIqKT-?r9uec7XLdP
zvhZNlRFJ9@;u(hVFJ>9vc+o^=ijtW0%s?x>K?mAF2)sQ$qv0??qs?rs5Qd6#4xUdW
zd0gLtFn_xSAwFX#oWoUaEkRcroikAxo+-noo5XDZ771)+Gu>PwkodFS1vtg2wuEiq
zhnIppvS8g=<+nusc4oD{iF=SViEic-p-e->njgDBdP2ntKMoYDr#UCt>H4o`WjAL>
z1<IGz!r#fsix%InvnN$@OPb4<Q(Xd(2dFRqE(1JVgj@W>e=d-P#rgkT9SjK>AqC){
z-=k4Ls6>Aog8y%b#6N!=hQzoxw>S8oZme4h|Ex<G2IunsGOS3-!wVRB3<e(0e}w(;
z0pWA@TlxGJbZ~<_7@__X_7aR*zv=}e*$2_Ut%&9Re#!s;#g~9>r+>oG|C#oGi2Oey
z^}nxG|Gz6xHR4a^55KG43&*Ybp|{}Wv&{4Lv!WUL!Nx+p`vI)n?td=_*}(ZPUo-z>
zG9tjaFVSZIF(KRF%#|ISzb0kk|9R7MwQaV&2mF1{)rqq+aN3OU^~XK<2*mAcu#o~A
zuqBr7pM^e%PPV2cV<Q|u@nU1cixY|<jA9D0%r=X(&hD93$Unoaee}qAyTKO(GR{}G
zHsfXKE&KSmvi*JWZB2c!@MRbBdC)H3Hf$!8n_#-$DDL2Q2M?d&xIeKfh!~A2iS{FS
z;?0@9b=kqCV-%wB?rJ9C{RM0l6@&SF&fYA3)_qMSwvopJ*qsw?zim1YvL_@_RlKY>
zf(cUZxc}b#Tv-b__1VII>0+_LhLG7gsgMDj7u1WdNh}l1S%e5C$<I#Gzcljb29vLd
z>i^y4z19N|Oya-!B*AJ4YAwNWDa~xIrmSo!qGEaBVGF2um^11^B}M8^Mj?<WY<KEt
zk?OJ$l;k1pqM|6D>FY$8{C>y_d7#OM)m;<uyZS)eqZ+0~6b&tv-O_6pw%x|vzKyS~
z0~8-5$x%Z^Nn<3*W7j`dMqXH$n-eoJfo5iuZP(hqeg7VIcOU+1I?+(;GW)?}HZbYG
zn=^st#UH5sjF%g17M7QdtgK4=#>dYB|5(UXmp{k@+mE`X{(I!40V^_K{4BOuas)n4
zY_U=ytJyeydU|>?ht-@<prJ^0{(`bK9ROXgvgP96)u4v%>|QRx5Sh@W*3jm{#Q*w5
zyxHjI=l98m_#H6}u`kh3>Hlt?XM1#ooU(Ch;a#zJYEF#hFr>cuQpT6cs0LGZ1{HSY
zBzwNbfR$wxWiIw<(o8GQ*=hlfvx0fPGd(LEihri}HfiJRme2@PI2%xCD4;22XL^#T
zE?!Ut4q{~K{lp&UsP9@)^sMzx;3}Pi&h1bUD|f5dRT;QrPo>j4Z}KU3PWXpTj|rDc
zutd8Z_<fJzZwl754OtAp)X6&4X*Z^<mpZ&WQ3(_*46zw9LxobiXg4-cYrV|U$NF0i
zbK}NoZNGvmYMKt(GI|wtO@cnI{DAM5+SjE~GTFz&Lm9XwM6{r!>|)-#7Y8~z(J_pf
zbvkms+UU^}xU*R<3%z9qI%cNQica>*BpsxG8Eh*IKF6zW?pJX*v7j*)pP5Ye@So@|
zadB*197E$gkZ%VLuK*R>oGCP6wMnn#QjrfL?&4`(Jlscz*cmBW{DR`-J^NUx;(TQb
z-MEC%3OXvhitG+0CJ!f2!_stKcoRVu)mb9kk|kpdfd|Yy=*wlyF@<n%mEN?Ddq-Kz
z+f<vbi@?7!(E>{YY?;zzglZ>}6ntiJl14au?a%t-u7;(fgoYp!!92w#bZ+Am6rtYx
z!X(0t?UYrvG`IeSyg&<e<5~FaR*hv@Gw?ROR(srfJ@$6kNXeWgxBMwU^{cv^GRx#1
zLQ>6<`Jb8G;(L<)ny}`jrU~R|g?xe)qAaug1D_8(;HsBCTSHW5AHhI-m+fCZNMrs^
z#*m>8rX|Td&+H!wy7&7k@?eF01f!P?GRt(AGSv>8b}6<>+h0(RNx-@SmXav}$<1jD
zmakT486>A$W}}%^>6b==J=;x!LR@k3ROBc`4k<e$d_3S18nqH-14Db%RCbBcWNXV8
zxa@V$)b8ZK^s?TcXTVH4S6ugp;q9Ye<)|_}?v53329%!zB5MV+#WDoizjh#Fj)z^O
zct-tR2`Vg`3bksjPwanAK*vy4R97DH@87ds8Gn%9kP~VO3v3{@EmT@12cjPZz?A*U
ztBU;;Gyl3jehfh3J5u<gfaLz*_m8IQ;VC}+5No}aM0ogU_`6ZTp!H8ym0z%+hfMee
zZ=kQ<h0nXa!BOk+0+EAM>u$N%Z7#;{^liZs@GOtqkxW=d+L$~>u$ikU<ylj2mcNXF
zlBqI!G(!6<k195<jFOQzwkiIHW9bo1ae3~`oXk~R_qPyLw6t_tSq%sbq(1$XJJuJI
z7^OvVXD^P_VWPpd7szoJzGPF+=<TG6=wv(zYhiYUm}*h+g6McKSZIl|ymRioiSS+&
zn4hDjVr+(?=s^|ZSBAZ1H1$oAvEblM<cJ;ASy*x^#27h5sLfXuaA>51&0)dUD)$*J
z6;oWbgzBx()xfGfDJ5#{LAzC4Tmk=*D<@Q0!r~k9<9<As;w1G+<IFVa6$4XwL0wtY
zlWCtBTPpP93?{h~+qX~w#ho%raME(o4$yXQ*1j@(mqs`TQS2-GDig6FN9fKVwV}~g
zsLFF3eqA7%r%rWxUEt8Tpgm1{jgi>VM}{0*cexU+u^z@?V)n@?by;^!Rt-yzO9h1@
zjCdcaRpQ#B__h*gbo6<7UB)X*cX3@BS210cnVH!?3+f^o5&}o5ykZj&seIQ863BS@
zn3sL<S&QU_;oP`dfo^E-jjOrU1!cLFVmX!H(D#bIg{c`@6}G<#c2xXp%XI1gGF#&k
zrJIW3m)EZT-ip&_lhy66+<A7G-miq$0%^`V4^8*t{A6}0WKeB)2KBngG8UtZ4H_Vm
zExvZ_Uxncn9XJB@_fTHG5<e(H4G(5kkP6Ay!cVo3YTP>bw9+LuIAwxKyqs}(ds5{5
zS-J7O;;xUaFOx4g$s#=s0gEXZW{#IMGxCdh52a|L0&{wmSetgkpH$Q7dYLLC_hQ3$
zbk@6q;W=6R4OvQ0f~%**lTiGhe&t$4$)4k=^8$z7iWIlR1eUDsvU;(E9ZqN(yfFu-
zD4@9;+}WR#ZjIbJA0txF0?od|YIN_(saY-60ZQzk?Y&;r=Q`ibBHk}C?Ox=N*1XlA
zYgx#umZ}h18J?@E6b-n%po8Zkg?88QMq-|BW>|hDMGYD}0awOXcMZMqA~8_n`w2{r
zQ*&Req_8K&a7ji>%$uvj54@DB@wnuBE5bW$nQow?#LSkG7J!69w=bHw9CDhl3KeOe
zhYjzmr@ir&JP(=w{6_Zb0bt)h;<evEUwBR@An0sOJf3(MNT5ViD~Gh$_*k#HY@n!=
zwVy2=m%&^qmRyfJnBEyD-ko$kKRq2B;Qi5(2;M~NuYF1LvgY0$K%JkqUPBSr9*VnW
zWhMfR-*_$9T~l%1^5YDdE!4ezwi1LVxso-K0De>EA1;J8eQN*1fz4>yl3wiObum<$
zE36^p=@$8NpkzIFcl+z0ltQodw%bwE?DaY1X`<)UnsGnj_-V8By@&cghHj@Z7#*PF
zUU1<~472O9@KIYvjoJ0LY@5;5x7i=o&aFP-&@2)#>({U&lu?H9z9<kf&r|cpAH)TM
zSq)#P=%4POg6+`dGdyEQe>#t*)_s6q9U9GKhuMb}z@EBxO-4AFIN;D7U33n!2`{KI
zz0t$D96$d9K5v2~3u+s8<$FH_3y^cQfbk3lWp%gmojIrsv1he2zO@;!($SHCWFy$0
z^NxTi&1tr#>=lH_n&&D9;nB93=52bnP%?8eW=&ZshOmv;=#Ko{c1b`*rjHhdwo=XP
zVz~Q>O&crO$hIb$g{|%33=1|ZM&0H|pY8OQ{;1{OH=E(=_nXWsSjQ|^UPeDW??lg;
z><oGBvCqrV+;wSli0`pelElsvJOj%>TUm*6wql>Y=`n2mGV-|uD81QQ2l&P?dIX6)
z>iPFYB>N;Q;ZVefB&T}2=+sYo2#RQ9={b5864XK?bw5l%Vc)WJOD-@^Dg}U2kO8&`
zPR+mj`0`h#(ZS_FA|w?WcR{7gO%(LJ=>BG!Y_50-xaiZ`UP0tp7}nSv=}2!y;Tm=#
zPuRFQ%UVe>iDVj&vxQA(YAj2_eF&|&p9=&jm~uB?hTLe3_Pm9DdSD5W&=yFmUUrQd
zJ(yrB6*r4G=RjxcEwD%o?K27gK0M4WoX&Ff=1L^#nXe|L4i0xVVOPo6NnEEi)u=%A
z${>5<4NxIE5-jQTRrIOtYHOqn!SF55Q)zz^jQBTn@&x<E1T$ObQZXfu=m;YzoU2Se
zFG>#w@^3Se&nq^=O0V3O?J-Q0*88pDn-3VfaX<J#d=``Fq6EYb3$mCk_yZ<m8nJdj
ziMDs%y=2+n!UG?Zys#ekz7tOdC)uyeqB_+U-{9^Bjbsx?LF<x^JE2I-^Xgl+g1W3A
zniX-VuHbr?UD#T6t2&J`-sX4=kKBG{+kz8a`K1*%p!U*a45f*n6VCuW^9se<GSXy}
z8{}PS1yx>a+|mU6*zMc22D6tt;SW(E4=w<<4kA%t@HZIsP$xkF`ZtTHQ%xpL-NB9S
zTl}f%Fq-mbNUhZ=vY}!Aag)m3(X&#JSS1N}*|lk$9`76JU3|1tp6B?0RXG{u9jV-W
zZ9pFZIY2tl|DZGSbv~dslbrDd`3#eB)YFF}>lw<afjK-mA}t_8VB+Kc?ul+g44Xz{
zsAt`7b)2{mp^3%1({O=c=@^uL=Lxe^huk($l9kKo<r|`ELrb#(j|KEJCef~Cb!x<m
ze%na{e{-dTpxGuW6X1zHAo<EMj7}u<0mvSViO_FS&NYIx+I#;UKlGACbfDLP?2R@M
zC-ZZbl7WEC&h7<Aw%ph;DfC{YX=gZml2L<`ItpNJ>%B+Yt^%V!*8QG)03Yg#DF);}
zxNpQXSs22O`bo~o#Givt+nRa#WF#UEc4dr5CS@HCz<vsr7Rj4iW;`b6;&)t6X={G$
z1HvFZ*;^&m@qgn$Z=Ao*$+M|TV~WY9&%K5&j=r%<4g49AG*(d(0g-t7#zXeh(P%W*
zUwVbGE1}IpvrcPeW(96><OrN@_i!9+&Ep-&W)eugvq~YTBjd0l%ZP7pG8$bULC{Iy
z!=kN+xE7)GekhGw6?Qsr6>5vgg6<x-&jY&m)VxT%bX=*NMb72-zUQ;e(jJNq)nfj^
z`*S^mNK%r!_d5YqdO&CS>gIVoo(NzeEF1abTMTWEAHYbq^HBPv(a)xfB0#Vt1399)
zw5i35meOA}$F3ga)Hsfs@PJs+o<-F`u=G%&qcMihrbCa=U;EIi9Tjh0XSkm-FRz7>
z+7G`IRFZ7QBs$VP5`g6jAQJUGS7dR!?-usqhsS8m&u|HhW>5?$!}F&M<u?oC?@<vg
zx!*o0>YhBLn}O9sLutYZc0H|fv*I}hks~h@S?EDp+vFVNVGZd*D_~(bisV{!>K&qV
zcTk3{R56rs&Y11BZmYX+2XEi=zP{hsLj*srBPY5>H9hz*b&Pu`u6Ag4VPDTiJZ{i2
z8uub6Ir#}R6qMl$hN+m<@Mu>&PSWNJL!>@A?Ld_z)4eQ&wvlEgs%gQC70Si#HK)Y0
zBgtwjv52(U&GE~1Uo#?S)uC}IL0F3cM#KPAmb^&!)Z%Eh>2!o_ELDsCLlT9dq1Tw+
zYSnIEJ@v2zD&7Xvm<JsNyiTH=j!bE0aosJ`{|QyG!ol9hqWo9+9jQi#Ej<qJPj9=n
zK<`SxK`OS9zHvnLqxzGqqtVmRHV`BBo3uMb!tg82aCN7Q?~e8lvy^HUh_wf@7G9_u
zP9jOYT3>_{y8!p~#)DTEqP3SE=^L5VON6yCjayyof{KCuC(rSM8AaO9%35PMHC|kX
zY-<_S(*it+E0=D!7B#O8Y}1xpM5DZ4C3Co{N$?(;I%)R0^|H=xsCq?1Gy{2maMc!+
z^$Z_rjgu!R{5pIw?!cER#^P#IGcak2aM-irLAhkW>gK98|4HL72K1PSm=Ni0#7ncN
zP?uTni77HXwQ!$sZqblxK3GOF4(alas!`lNk&?HCh#daCz9BW9KgKPmIUH}{dGQvy
z`kh^cO0u(w;CP&$Oj#5LALC;_!Hw59$(MAw$Q$g-y><6z5Ij!(pQLFF+~GRTqd)vb
zI|fp5E_iEls(DMa0UH+-0`}1Gl=K6Z!-P?N=yA`3J_8POUC;G?z20|1-EmR;5_-;J
zt7Vhtok4aY9eolo8}2T)-Tk(*y%=$?wJj<Z&*><{M`XPj8H02uDem<-#j+Ag-Vp&K
z!Z#r;OYmI;g!c?FF@#G<P}bh@awECN8+^9-4rcuyT>Cp4W1Q6Px3H?=TP^64FKato
z=6vAirW=iTj?uA{63V^*YhS{>`mZ<1g3ap8uFM5xRx?t1z5V7BKybUZW5nir+R{_M
zKR@LjGu$Y>A_1o-^z}d+T|K)p&&>`DDu+;zq(($WGNX1zO7|NYw!sDScs3z7XI%?R
zt52Xp?7qNj4^`v~J$5AU5}ke!oRGzl_j-SIYp<&0uK-@1QHx6UdgoNUgg@p6PgS<Q
z^3;WYgoKvZbq0JkOMHL6;WYW}b0Cp8u}?qs_}OaJ#0}cbp5B-s3bW^cX^ZU<Y0D|u
zHO6WYLvCg1j;&=SEgxTtAX=dZB1U5QwRXwZr@>LXuFCUvz$M}QU7@4#+s@&Nf|^a{
zrtrf8jWh4?Z4P&hlo!voVPM)OanP;3@l0>IwZP^?;0$|?V)$T(Q<i5W!;--pl~!G<
zRG_{2yEh56!Mdd{(YzyVT`8GO##`xx<?Dn(fLyRoekFY7(!9f|bJ}Y@a+2N_T8Uv;
zd2FNLd@Y?%hl+G-EX~pMrGRt;X{8lt$jaDE*CIu<K+S>g9+RPuO7e^9X5NfQ^Ou0i
z3uXh68;iY9n@sx>Z@d-$*1Nn1n|=vV@VakV+ZefqEpbJ~Meny%vwAmUs*i-Zbv5(*
z;ST@YhrF1&rC$6ObS2|aO<4kSfQn5pLXeUQZnCOb^qV$iP^bb4%Eyly=wi9O(l^HJ
zp}Zj*)VQekpB+eW#5l!7g-|p;2c8uyT4>(oL*{E3TVa|Uz9Dre-TpFKp8krK<d**2
zvwu+R?Pa&Bb?$K1SgJewUU)I7cVz1NVSp)*q@5YE@9<;DLhVO*N-tkXCt2c>5*@b`
zod?}c)YLinXsXZMBST0HBS_mj`Dsl`sYu^4(G|aO*3{xmkxDw9XP1cvWd_0QP$Ip@
zj&mtU(h@PwaI97fXP=#xtb5~_eCv@)0Pi&phfS14_+R|E9bnx%pMk$AWEiYxBeAt&
z+BCJO9gii?@N*ru@4|CofY}$7*r;RuFrx7;3tH~HSbu7q;!~}%yAeuh=?=b~Pk^mW
z+tn%i?M(`tgS$LjoXuR$qvEgY9vFKjjipU+D{_yB3Zi8nsgb8N%i&^0h6ZSbsKo7e
zExq7zKWK~pFo8!O-6LD|K7`G}z)RjJ`@`^(qOZ#0oAOjk%-{SQ9fzZ$Pk3$EMC_pb
zo-R-NPZO)qc5lE016crQ#LYoQ<AW8v9=DG-+<ZPs6A2+E@6wx$`h#(8NA-$F%?lOY
zupkjpQVfLlw+H0ULdc&lKM`-{g5LI^0N<K&1z?nvevXf_ao7ET2Vy>SpQmHT+^!a(
z0gQw<9r$TueSQZ`xaj9gQCGy@)pR@7C99NeM2bD$Zu(7_*wCYn@MdqhsC#N`QJ-=J
zB{??3OGS-;rRVu#2d(GE?4zcaC#YIyYH0>+x-j@eBj(!3$3eG|(D{qmnlF8A*_VRo
z4X-+d%3kJ)O_k@&Z(sCz0B%E6^#fk}PAEu=4=Z!ssNRM+U7LwGJ0}=pp}l)l1p~`I
z=)@B8BbKy>1KcM&XL4Ii<zE_XA(Sq!7ry26bBWm6i~8YAlquai6YvHc%SgT&9LUuZ
ze9q5(*HfO5`CMRa=MyaZfgomWz(#0ZC+z!Z2P0;Hpa*cn9%+{)^=G1B^U!`?@JjMK
z+96xmYKsi5&kY&ns1v<7%(rEvugGKBPKAr>r0*(A0dRYtLI<#t91J?vn##b4qG=p8
z5PwKg0+9-ha)s$Xnmo#}#`}~LryVq*{Uy8*HY_ZW*G*%sE>`f)@OTVX^=w(uh{OPe
zUhkU|{GR4{?{ldkipn|@y5&oHB6N!Hf{De)c^a1oPGR5Vv&l7u!+@4!)Zq#cIuH$o
zlyS+GeJe)G4Q72T{fq0~c`MegoZf>QRF9DnDXX(<E1qQl<*`*BzP7Kc#z(vATe#kP
zyA9ngp@;E0zh%+uOTGY53mGZ}*2^Zq2Jd7qh_t3gkNSv1<kDOcw%>y@a~ur?z%L6z
z&RYk-KeijEORJHRsxA9qww8Q$HImyJT(`L#qbjXtQef<z=fC-(jVps$!U{5M4TNtS
zZP;@APDbA8RS`hxgs1q0+pyr2aP$UNWUBo$dX2-X?MxHv45C}~Go5g{nSR<T=}APf
zs9X430kWK(ZB=Za^YNXJIOzBa2mi76BOgH5&j{;|n3xgU#ag?K>&>q$)Y|sKggtMu
zP@(IpdHi)K;tMR1A2Ey{u`VY$@CL;cm=l~t$ph6h$%Z?>E7LuNm(7fC8C*btJBza3
zZP7wU&%kNqWX_s{dn8|8EL=~IfKpMrX(do&b6M%A-JC#`u9y|a;748vld~nhQcmCV
z+ut6YibYTsh$D|sk@N-rOFb=A{^&dHnNPfn**S9_&VuSg^Rp4;VF^YVu}R+*0V9m<
z`-h3$_20Iay7=3zt3%<$G_gYIKVZ51RW}C+bk(cQ;a0Y2<(Kt*yN;N(U9w({@yv{#
z3*%gK;q;xM*+FN&j+PWos_uR+-ymKH;DN49G^ji9!tfM?>>JF=I(~}kv@TtmI(S%a
zj~Z_UZ}vle+U5-BQ^WK-ze^w3JB1Btr4<V0Co*w1G%m;-fX#}8S*k-TWGjj3{`__M
zm+ksPSAM;DtQgtw8cyqe(?;p9@C&&Z@bSYEUFF!uSw9A1#u}J4>fqUcIril&NGjIa
zWCOTr79T|+;o?`UjErt!Y;I|gAx9-b=IP6>1;Uvo22qlRE0csR&H1b-g>A$8L+BV#
zsW@%AvLlaCFgl3_7@@Xnccoz};6<MNVXe&wQv9E;oa75wCwE?MuGzWAuf@BA|8g*7
z|F4cf#sA?)2tJ`j!)oZNa{e-)lA@??d9#CcZ+oMhC+zqK;yDA;Am~w1odN0VS8>Ft
z_}eBX9;itYS2uWQl@9okV$7;K*5HI@no(1x{$-cojU%kUlNWu-DfO7n2%>nLKsR^j
z7Ip%8S23aSmsb1tveyz{7ruEIa%^77EBEJcv(qf7o=lAVLumwK3ZL-V+CrnHthX@N
zwal<$wlaN-N5;{DiGj4a<LW>A=wD1!$qMBn2>~K=N>OX+Jx#Z{cN?-~&jVM4?}F|`
zAd<ROnf@^wr%gUPRMV7pShO_IMwKU<w(DtMj@a|Y2_X&oT<79!6j%6k%E008tu}%P
zgdl%`b!Otv7Ai>!@*W5u!)^56`?ZqU`qKNXKGM;ljXs&f?medWs%5iE9<@ja_?Q-{
z1a*vbNUk(s6ODTz*|nKO4V@=%`$NvzYd0cfRV@Cr2!FXK#-e*Ejqh%9iQ=gUzqp(F
z%6&Ta_2`xGN9lQP=LvU>TvL}Ppw)Zo;&u-cGud?GgOb_=a^8Fd;k+kjLvrIGeFq@H
zuQjkRW+Y$;&imJ~C=&CjZTIgUNo5M=Y7?^!ch)0!GB6Wi{M=l0c{aCqcLRfhg7z7K
zO)|EgFF0A8<}HfyWN`lPcg)uJa=t|cGTiZ3#d^P<Q-2L1`R!EE;qNmIwB>(Xh?@x+
z)qQhk;l1|mHULrBGqd>C<Iqtvj2c*QDpoDM!X&L$BV*|Kl^uL?c^20X_QCBfvp+M)
z`92*N#JeZ>^&$%@Cj0KE)?mr*G6xciPoVkOBP{f)-cLaX?oTe_JxN}jRpcKX_oxP!
z2`kFL*cJ;|c=%caK_^V3npcIg7Xb9so^D3^6%Gi<E?4Elr?J)-bOrbVB2wLcOSlbL
zGz~K$O4jdR2L$zGdZ|0z@Xx)G;d??Tk(5tYmlD`v77Bu<&q?9J8FPv*NMC@t)pQrQ
za7%FVIz-`vw_g@4EyDu$_S^<W5vHZ7jK;STssw4p<)fe?SB-AUI|*=2=q<M!x|a<|
zq$$%3OG0VZ8moP;qcYTq+~Bh8c!R;kONdqYh1Z+5pQ?$0_z<ko+VjB!sY07irbC0b
z1wHd}M$)@p4O)KXg`h4$T5vJ<sIIm1%IqSqh^EA*t~WQrFW=QGaFr%AiK2e{WN-o3
zVefgKqf%fCQki<ur_1dxqD0bjpv!UZz!}KA=o(AUQs?fhcmKs&ab28Evbdp*y}h7%
zt9jO}@(G;>`?M9#`!27@C9K<@@)5Vr)CyYVqRuvWyiZU8q$kCCSF`lcw2&=FQu66q
z0V{sEGyK4aFPpDXwg@G-@=Q#k)sg}Dp`THGV<^4{!VOw#{>io!Z!8I=04~UxtrG{i
zedNnKUzhjfvm(M>JZi>+7+r5)Kdsc6sF3xfvfE#`@GWV@Sk*z4kH^d=*YaDjCJ^L-
zM8=xU6`c&Mcq0LG^1bxWd+U=K@%i>ILVeO-_2^?NhMbJx)429>iwZDZkHPuU6~<f*
znL4L#$NfW3*{DxlMOJ~9Ujx@9#>{CM#Pihy_~%?%f(I1k{c@gUsaui{aB*|(R^)u(
zpEPL|G}EC`o+~b1Ux0%pB?_9ZL?*kD@-y|dZ^e<=^S}@|O9k!esNfTTJV<+eeW-%T
z-LbtP%RLaXs7Vi$TA&)Q#+fT?AgYZ>OU(<-^3a6nuS4&8@>Ya<+c9GJrY?<&nU;sz
zm(O7C&K~d)a9n6h^!mRrq{qyliQ2*5{;Q*74YBeAJ>vOb?Qa`<trg0~F|P=oZIS<k
zenQB-Rs(coz#T^(etv#^BO@{xbO2vZQo-fDV<x1n|MC`Rv(1_R^HVOG+<$c#*-k(K
zzy*GS{(_Gj0GpMtd2#QM39ae*ABMk9hEn}U;fZ0kb}xrvvN}2dLeUqC*d6GRoxwft
zUWDd04$CXh_qP&MnSbs3UlX77cM1RY0{d)q^8fzec1p7Of36hiU#|{ss_QBFPw@IT
zeq9pz$5;FvYn~7l@SoTUyxg|C2nygE{C}RsFUwh?IpFtiinx8&37cAWL&wtn+BGNA
zgs4GI4&T=TCm9A$^8UxLHY5$3zguoinEtb2k9qRw1%0MiQXo>#Jptw4@}Ym={`2nf
zzxB?(0J^QbI(#y77t~2Ys&#Ho@7bJ^Uiv0tQEVBUHdaukT3Vycm|epjpBQ!9#t!`O
ztIM$p;OVJE*zu%EnB_xfX18H)L3x^&U8h{%gI|_AS%d)Puhp}O{H5WP5-~sDNPr0p
zUNEm}E1%eW+IU2umHN-n?pj$r_0xy(wvAd(uil5Z9`==Wv8Ge9xZkA)JalmZAO7e+
zD%04V9s|-X8o-m6xHJ&}c=QLh9a1LtO?WdBhm1dY=EwZ)69q1odXlhiu@jdsC~*?5
z;eO+&FwTg%d-#~c?~dp?CAuU@W?`}{gWK{F{LDCD3D6i`e#WnHepd}J{l;cNg}8hE
zUyEGbjPt+ST6KPW*eyU1^kHhJYl@?s631;O5PWxk*qP36>#KZ@F3<o|2wbW4XS+)<
z_zd>_s`BUP%{uU693wX4<dTox-pv!)jllR7pL#yv6^+u`(Y)87{nC`ACJT@o63ia^
zO7KMM4m)uLEl4=BTDafnf{+R~(1RxI{!PI+R8m%3`|WToZIU@WBW(gMv3dgAL{6E4
zU>;#4+)ewb8yk%b`*S3<;Y?Gd1v-T=x*stv0*v2@6tcO?VyaB47n*t3a}qFXIpkV8
zKNdNo*f3>1T<+s)V+&H@c=+}1T8HGrUr=CedH~1`ER=?vF&8Lcm|$-mIk5LS`U0gk
zGywD$AXq@LNtPKL07{l22mVDAvXsBKT)4l$n6xFud=!vD%wXqqVP(G&HOkElD$s=z
zCuFH0e0D1s;0^!w5V9!RE%A4j>8DC~A`XxEt{=G9m8cDTQPJ&}@d*RDv;EavJG8Am
zQ$uzqCh`I<!2h*hs@~>x^5rA|Dvi#(oHn<vBw=_@=t+D43||>*BFx{X#rTGsK5y~R
z8W%K5kEoG?n?7fyz7I^ugA))43z(>kxp23{H_6GG?7-A4sZ&PBR4k)SSCp6k>g^4<
zAGRtw=lpXkX<*nt!2kXaJq$Ik>3|3b4W<e|c0^=7I(qmrsU9yRQ8dc^u`>zT)<UQ7
zBur|cCP3^>O;&?Lv(ag}U8`a}5}6L<Y9)9$V%_`mk`L1E{6DXlL5ZVi`0Gty%%tE|
z)in*l8syEvH89f~&<MBy2Ot@u?cIO2HJH!b#s4Kzs^F%Pe0?qxh}1F{lJE=DRp%GH
zs*5nn5^cFwk5S_n?4ClV%#vl?wpDgFx01=YLK3-1A~_^P+qKJ;ir9;ksDO$1P{#PT
z;~DaY+M%US(~zBJmwM7H_4QrdOHd>El*vp$-}ywQ0S8a^uJ!uZLeJiffb_>lx!8YM
zzbE%_lZ#zrJ}NLa9*Osu<_{6|rS$S{aqMt~vIYU}wSSw^+w*}x^>W?f4m{r#d!8M^
z@8|ZfbKHa*KcrbLFidt5%xQ+CvPn-r%ztUUioq5BLMH$lQB2jLlfBFg-!CZl-&Cdq
ziZ3ht!207&<Tr0N;9!qn*y=9;{R$x65vRe@LMP;BB`md7e)eGiqDmGYxubp?hC%bU
zsZ+J2nV8rf@Z-ONKZ{AylXG{*TFpHINVu2vD>LQ362!R%md@X@Fh8b{ZsUJpUYZw*
zYe;Ds{?bB(i=6>nh3%IJI<T_NudU8li(v_hZ*~s))@?StlOH!<^nG$8zk=!>q%>&D
z_OcW8bN6PCVDrGUpsB4T;+DkXMAl1M=6re|+MRttxE5DxiGQ1SL~VW%w6kkLQ*K`1
zd@;H6B;Wsxjdvnic$|Oc&F7(mb9(z2ze*=Rzk^1x%fbF5Qbv3>poNo4+~dIF&y-7N
zY+^<5k0@Gf%FHq$F`T}Os_=@i=Q?vd^JAQBGi}5-9yglIf7Ot~uDh_3P$Woj5zEVg
zFSfh2OO3m6C?ceM&MiZVl3FU;;E$X2ePu96j+BN&1VOH&A~AEzDg8pd2b!`{zjNmE
zbiSQ|A?hG>nyr1Vd$R2|g$o(ZfnzT0s#n4Wga&#M2t<Q4OFW#rYs+rnBiQYdL~W~j
zJW11!c*y*Um~R}ANdaK@W9RT5o*f7_^Z1hG3zoK_i_k0tB0Dw2ilY|E(qm6l+V>kt
z0dXnUI}+QBRo~?Tc(=20s@ln46@d=7kA^K_vW~rdG0r}^0U0SYQllptb>;%4t5FUu
zRl$lJlJQ;igfDK9BG6L{9SnZS{#MP%*4;~uV{RtZJmJ!b7Y%VlU9d91O0Ehj2(lLR
zDd9CTU@827-3;n--Y+7SC=1cqfQ~z;YDO)dw>8^tJFaNfygzI#@O!s7-~MClz{*Vl
z7CWiQz}8soy&yYf9wI#&($|Z$m6vX)fsDyEpTm#$H~mJQ@=&Nn;8Nla>*#Wp?Uxm{
zG6?bMl+Ve006JCu*H|1?Qz;g$7hL%Fffx+CK-6SaxhYAkplml>r7zpJcYwLdNXqJx
zEXM8UAG$fDj&yi3{PtCEu_CToL!416lhZme-CVLl_%2Iw+U{ug5owJY%%IK$Fgbk?
ziLekE*Dmv3PRx3PR1WKQ0&7i9Kd#K_Z9S)AY9>J6#P=%NoAUXdxA*YvCDPZ{cP%Y_
zk&2slx03mwMOrUvwLGI9mCw2RA=ApW_;@H-zjJ=^c1ZE<sQ{xOT-V@Gib>z9Ggifu
z6=oc}aB~u-rzLG=wLw|OOqH9Ub;K+M&iS?f@}`uvxYaXaqAcB>b$NKRS95BX`Y4VK
z&?)&JJC)qCC-H!NP~IsO)QPswWkY<UDu7~Q^Me9f!G0J~3lyjRc{jQY&%I_7uSGVp
zMd9`_<zn#yRB8;ME@<FLOh&vrsctmtxifDNn~jdw>T92|$_s9`?_I}uX0p35$VuGW
zT)x2&s~WJRO0$_j)moFt&*|{dMeZ9QSU5b1D7|NC&^;%w(OFfe<@m8Gw-f)YAgsgW
z(3+EBDwfiMU~3x<woGX~0}p%{liJu~MXOlWp084<M^nwynO%?|k#tSZ<dH_l$Lw}U
z8zr`u5@AjFai{$wSil{q&*$8EcqE5L2DblRg$@6$4gbD<z2-ewGZwzIXz+U;?-Zy=
zfKa_P!&F0(aHt#!hoHDCx-KC;H*?`E)U2<M^E=i1hhGvF?UIM}0%aHcVPjOG<Vmh$
zixc(#C4f$XKyek`r4dw~^Rp4ae1<mdNuJy2&nXnCp88d8-m~60npkriCJz%B6Xuxb
zMjsO33+a%B?3V7LgP#q9{qu<Br`)5^Lmym90%|eeye!B5?#IuneBQ*Bt=L|#4C9^c
zkyTvXA+*PoMpYTZ$rIEI=f9i%bw8)`hcEY0c27MY0Fxs-D1!vNu^v{=DIaHb;*y$W
zMjy1_Tu=c@nKZy*bH=dEB6sB0GQW_@CgHL>R4tkIOZP*xjxZUjj@pdaJyp$;Yj=5|
zU)}{VzS^0|ZE7z0zIjtx2Od!?1$T0#!3Y;3u++yRH1FvNiL|J>#edi8|0wFp<Du@l
zc<PzTZkS{rTa22JEn8zJ*^<3b$k;`;XeebFOJv{o>?*P|c4O?aBtm2CWSOy!Fy2w`
z^S*!n&i$No&pDra&)t6Cb5zW};MlO=Xl~{17DqqM-Tn=;JfOn}bH|k}xqD3yKvF24
zI-n}1lDd15#=UY~@Bmm=+`n;exntQ~q}Nn-Z}RHoW<bzDv-|Y$yHa-8{7%Adf;vMD
zf)7^Hmagl<=i?k7*33Ru=s2-J62awd8@3$m%Idkg^B)52@D|{psUth2(0Vp5i+xfU
zbYfd&;yvfgj-1D~hc#h!-A%4(Dg~Gy?i%oFaWOoa!pzKH>Ymxs+}^NA*N%8HgX4hR
zF+es;MMZtN3!_85IT+Ng+VdAzh#tC2UO#q%qSZtnC;RIvj{~f?>1OTh`g#E()-@9x
zqqcqJ6}1?Wq*mhOF>o{~3ExgmlU#f9rdzI1vs)oJ&46JLOs*86bZM`5w2^+lXdam_
zu*x6|4nQ|r68Mb{#3c^RG8-k}!AwtT>9=kRd(1ZnK2*6`orIn3g2|yeDlgaN-N)Xh
zUfPlQ-xz}-y125d%yaprSPFf7%GYLW(hoQ3CcO^hrMhB3djJaRBwX`Xz-gZmVoJ2r
zO@&v-M}kN)CpzD688QYN)E6r>y6Os4=GbjJ4=rRgaFw$6SAdJO<ogqYNzy6cC6xE;
zew;CtgyjeS#i)YvH}hunb;pOSvECcG<+5*xYtm8|Uty$9pB44V>*@@DCvs__52pPc
zAAtvt<zal3SwcgI;ztrWeFu#AHR0F?L$U8!!;?DLCr(^>#tXD6sw&!hd%GF6oNjz`
zEc@vFrEQr8yZmZE$19`3k8Mc%=bWp>ZTf^_@!)wqQr7)yw%z76>FFk>I*V@|tqU(}
zzv`zdc2bG#i%`!#&=hwcxYh}PF2{bSYM;}p&o;0JX8?8%)BoMf%79@PWCgZWG^b7l
zZVXsjwY^aweCc@rwXE*^EoqR5+P-9IUjAC485M5y7`|hxd#Q<*PzARqhGJgvBAR(o
zWl8C`I3-O`-FJ>)8eifr*OB<zgmLLp$C7Fd98{iW=@W=p8?e8wZn{G8p&%jpv(>={
zWvU;%?Z1uy!B$tcMapew^yR+?sQGm{j8y8)ZL)R!KG0)~d4JE_ixO}U4!I8f@U`f!
zmcBc6b;1>S=f->PsUh!NyBaYTg4G31V$NMzQF&WEI&z3H_d4CEJg2pqb*c*om3Og@
zLjVPKIyjbp0WQTO6~Ix2?F}wF`cR759o#i1vH$CZdM?;Se^wX$%}!^_&XNQvRNX|>
zHRkb&hh{dmdu&q7OHlEbF(z0<8am4obK^^VSL%(GFA_u-qK}Bz5l3i?I^M-r!Hdbo
z)9xRA=EdHeQjLihP&T_|d*$;6kZ-laC7-z^@!YqBNu3${g1oDcMzJ3<Mmb-_$m#Tn
zW&DVO<AN!((hw(>UYY)k%C;9obzJ4IiwD=6^Ch-u0>DADIL4lVA3(nVLerQGD@u2R
z-f=?O$&KXj<V5-P9a^x82B2X@lAlw|7E{li{&o<DT40bf)`&A4R*Dm=b^SyzsN_MA
z$OmNdv0-M$z;KxiZnxYkNpaA*3^X0q7q9>7`2b1y7+(5Mb#Vqfx$B7*2Ug9o@LINe
zSz2lVQUo%mg_l%ka5G~tO;l5y1SBQ}1H7$#Ehapyo|TO%;HH*k%ENNz7$YmwQ?}5{
z?J}EC52EnS(WdX9hbe+w8v`!may9GL3+M0p$sEBQ?p7~eZBZVRR5^v2ldX!O8ov1~
zAE<@%V82wJZeSzv#GwjNnX5iGnuCl$8Q9)yDrsF>L-g3`C!D-{4oK~Ww^LH}ZOXUf
z6QL73H9UMWTm<$wh8=e<M)5TLU(Cy+GeHIYdW3-}eh%P%Kw?O|@+I9Gh#Ot#Z+Vg%
z6vkArcWzXdW}?z<|GO;z&`YLYKG?QQ1pPzxd&3X*P1fIy^T3<|HFme>5iMfqLB}RX
zLUAL^5<%MP9RZ;+AGM*uarDG$&bMZuoz7%Prz)BouENY1J^93yo$ACFp#+7IYjc3&
zy(5N*uC5;wQbfxhBNwjpl?&EV*ja@8VLN<I^=O7I1o7N<mwpD=2`-7qy-xp3KkpaF
zLbv$Ib&K82BtEkdZEc^R6;zY195CfsQ)wBEE?%yXtpyx33jDNNmwLEu5JR%0k%C%=
zPPBk{>pP>>eYb*Yuh?Ke<nZ653~SMR13SDtqH`0%a({Mw_5z<7LZC>iUlmv9#{e$7
z+x2DQt#qtEXKk60Xrf7OZZ3n7q)eTkpNO}JFSVu?Q@O}glzEK7XUOo+-`eKL$4Coa
zJ4#-=N8(O+Bc*F4*R|_RjL(nWp^p5vQRHt*|9Fbk5DQwAAADV>BU5KAUQb-eUP^`F
zooG#u#@rvzdSn}BAC4=nhm%;XEr)po_5^B@gzVSS0LuhG1(5*=)W4s46J}$Pt8K2d
zF(7g5dWbP?6u3~RHI?~e@wy^R`U}JU8&Cd$cW+6{r3AAj*ar(yZg@UK!5Rs@E|!gt
zVqrF6FLzXt`gF%$BMD-}wd29{q`{Lu_SyJsEJSh!OP82$e|=DKZJNayVao~oJrX&u
z3)t8uDl)~77_!g{S}CmyzHk}UJTC1GGj@08A6tHY(G+oBh68Juy{XJtqpHDkEU19~
z<<Sm=DX{6!VfACE@#@3}&@gh!6xJmC(42a52JA(bz$WX?xK;ML=q57VKYIy!zTtLm
zcG}f2-<Z!fo4G!>?9e>U6FzkL2^W*M)mF`HTkoB)npb!iO|px?IPW(MwWiv=4ydQ-
zLlaP8^YdAu`rW0m8RLE3mgINj&QI-89tqMvdAEz(ZbZfX-*0&{*0U&zM+D9FpD}MY
ziq+%g<XMd4HTxnL5_sffxy;)pgY?{<E*hsd?*gKhUj@4~3Uf<dGojI{FE@Q&{%nYq
ze9w8#W}YDg<Vy!#5k8fpy9Vt@EjOu<=B2>_pYcJVtWGuNor~(X)9+>1b-TP}{~B;A
z_C@NL(!q%o83!1E><i5wn03!AJDU~N$6q|D(Js3uq^cD6C@x>anvgQPbtQlNGA2W%
zdjiGiX94;-vdWMjw|MP*jK@`;^{Y1+8cENj4VTnY#Ojm#5UDsunZElT%pvHQ801$q
z<wE8x(|)r|x)V}_=tGg#hyGkg2k?mWpXy;vm;CQ#6L%F?8)+K}5_IeG?=t4<2&?mf
z%N9oFofQL*$^~)JL{t&QVeW3-N#(43GdDAsmzS67UL_i{^>*%8S2l(+?IRQIyQUR(
zwhTkR54XHl*jZPUmrpKMnR2zRI;uEDQ`5T$lW%z1e{tH?`m_r4M%uYK&spW3;P<NA
z^=*{A!hi?b>ha0fpFkZHy*^S~%$+=SC%ig>y=B?-$!S{RNiAi^dD6GdXR&x<LUL$i
zhqoL<_N?Se&_{Klh#{hHbs$>siQ%#99hT>Evvtn`tE)hZft-`~bVO4&b2?1{mDQ|K
z&9|zNh||4*?$TiFVwviKHcA&&Gsd6PkYZKFm{Q@>zSESxpY8LtFp=%m><)Kt^s&6e
zkMuS7p;1hzT(<OJtDi7n>(g}LZ6;EnfsxDF6%6iuR>xJ$oC-NmDLK>-@87K;+H33G
ziT`~1ddk5MI`IOu<CE&v@l(#B&t=1!z{AU%n{A4)7cfOs*=E;+_Ev|b6F`APy=UBn
zlJlh(v%r#9{<=0C9SVPg)_C-Lszm=pjbnRcPuj1PYw{hHY^d_7$BF5m)c^uv2B%Uo
zgI!oT_uFsuMwd>8k7rVNB1gn?+g!#9+yCmNBMfWl=TfbXK!;}P!ByeGWYHJ?_Tu=Q
z;Jdue%{EPXPcJ6X*b~`ZR!;ot-1<Mph%Xo2YsL%dYPKKw*MA6uD8iNDDr6apwjl85
z@9f)3sa0z55OgScY07jW3)@?HaTtSL>dV(AKO5zqOQB4mt={F>I313No^<YNZB^{P
z<S@dV!kWVQM}gFlw<L^d?1>?PCzT?FCnY~+={{X4a|FQF*49lnV~zVp3pz<F8Ck$9
z&RfYV&R5AN-uXwjA;V?=$Y8-x6_|8fO%F{EbU-3BaLz_7WsJf&;H5~CFc84^he13d
zTu&r|9ta$UjxHV1*DM`<YcmRP5=nvrb&~oc`=k2b_m60M5Lbrzq&euk+!7XIujQ^%
zEvUoq!dGoin$o=qLJuPT6|udAIW@XueCX0-Uc$dM%AG2FX3Ag1@jY>ZYprZ+FV*f&
zJq>x9XgQAUn?>6_z1)n0fh5b%qB9T}BXy^eSSR~+X6D`LUr6DMmMfDIC}i0Aau_f|
z)tV9#$f{X@4B}CO@CWR6xLkOi>iTTqK_`V5w2#Z=7tJ6qY-Z%Kpvx518M5(Z2j2IH
zAhi^ifj29}n^B+9Y#MRmX^4o)UCT4r<9vkz!u$;22LzH)lC3M8{%i1QGQE4I&HaMM
zIGM!4kzTnUD0J?e=tYczs6SN}eKc<L@|h&LBN5okj>0oW#YFFp!sMUo6{mB2XVT>F
zP-p4+==TSa_d=p#9e5cXoWWp=hFO1ZNr@6szHII|;;b6kwx<N*2MD%dLxdU-q4No6
zG%<0Stjf}(qVUF|Uf(gV6LPccA#nNj85Xg7v<2@=Xo&Lp9tXN36i{N#4zu{Kc5uYg
zuy1ERUG{)jcGlth3_IM8FPoR7X1FPo*?r`|-_s&(&W;@>5`5O0V?{)rf?<nN2&puk
zT_MEpO%w9~9o&xknLiFEX|rrkOjvbBJIN;g*~bm&j@@VJBGl7}DCM>V(XOHE@W#_D
zS1cf5VZ4k=fVXTdqCkM>YpViL@X4k_p}41P@IRk%1k|N?%C>)IAU&1Dn+^6O8wy*i
zFZVkN(;TUGN+~+dW&{$co8N}_-FBeP%&V6|U^RsL#GX!Z-t0PlXy0zPYZ>{x6Hkr^
z<d`s;$FXrjm9>hNJzpEx>cQ|2#l0p=db9CwjHof3hf?U!HBOlE%dM<e(r1GRIIOAJ
zVa}C=cNg6;(}>27nFm=RA7n1C9MlXC8K6oa;slwOH`-60TUo~UL`O#cQ3XlT5L>PI
zfz|1tc_&1J^~5_D2SchP!TO*aLlEHiN#-~@&GAi)9L1n{98n*>&4>A^zQrXv)bqGe
zT9+K&R8>92UX8Gct+KL3c=dH}$#E?ib8yOkVpbHY2E){1oTf}&3+iN<tQKmXMWK3Z
z3y#bOZY_Ftcj0NL(zDq4Yd>&(4%_)opTT!#F|Vw3IjgqHae+vbH}bu1%u2o3qE*fu
zPnbXdbyW@wWMh3jd*xtwNIXdMs@6LxOOtprPkipW&1PEY<Y(bbktw+O?ylBodQx0g
z@KXcwpD|3&mEKQB{U+Mb#!=^nYy9X8rPW4#p3Qkt>ni`EQT?w0Wmz-av^+O?ba-5D
zIgDw0+<mFdS%viM*|qMd>Rk{2n1@lDApkXG{o<8l`5_ydo5}?+Utz-ND3Cvb?m^|^
zO&z`u8;VzB12lV*yOlsyvqw5aOLDH3&|l7N6}NF!&??ou@Q|Ws+08~u{vMoZ<3DnK
zTrVqu<o&n*Rxx88aT=*0iQuYWiIA!g35`;Rwr`xgcjkTx$Ee2`$G|nUTY~OiS08cB
j8(p0xPYCh=y>RZS4UGV!FxZ~_c}`PJSM`(flQ;hXx^h)Z

literal 0
HcmV?d00001

diff --git a/docs/KeePassXC-Connect.png b/docs/KeePassXC-Connect.png
new file mode 100644
index 0000000000000000000000000000000000000000..55b0f3d4907a0f93340127f5be82a39d9e6b5494
GIT binary patch
literal 103252
zcmc$_byQnh^e{*TDAtzZUfc;zad)S<1b1uE;B6^T+zAfFJ-EBOLvYvP?(l`a_kQ!u
z%v!T%{+he)N<;3x`)og3P6L$`B+-!Zk>TLr(4?irRN&xV0pZ|YGQB~7{Q?P{4S;(Q
zO&~2MtO`orpDVLURK`VESrBrN*VA!$w>ujAKAEtS{);1uJUUPOTW5z4=0hJ%B1%3y
zlKuFFovDBGm`#Kc#dgDY+`gK8l>D&y1Rzd*OG@_lI*N9?AZ(fLxqiH+7FZ}*`!g_7
z`v$h?l3pBS&%R~-bSq#D9u7`P#QWyfNuz7iybA>mF8$a2!STAr-><lTKbikOeS)GV
zb}<7wNL?EAY&erNA<#1I;y)WaSEmf-4%jP%v_QDlr2VVAyaGDxU~#$J3Ec1=7W~lv
z4dQ_wcol>Lcg)(e&Qd*Z%K#pTAK7L}kTd#3DABSU4us$=+SMqOI08l-sLan4mWH_C
zhW%iCG-^Kzd`cQJV#b|>FPzvFYgi0ZFT@%$W5W-XNYUK}rf$j&Z>2OQ*~29VKLtbe
zVS;#i+D}=Ooz%kZY0z@9KNB!X&aRqSY-t_RJ6(E8Z!tQf?5`0zMN<`NdN0yMtK5i7
zYaX1185#K_3yd;GAdD#?js7_>^}um1@?`tIds&X<Z2sPRrFA#?%+pZBq*-9ZEi455
zUgQmFc{_ix39Dsra4;tik5x)aiu&izjy4PR&I8)o+6xAUi`4#_?4u%|e=&=gT^`KW
zaB^{NvsUY~jS8X2M<%4C5P963W;cOO+F=jQ>M>+c%Pi9U%rqlTKERNR88FL)lL%IS
z|Na8pRRDnqniV7_Cfa~NGe%|c1cO?#f}(%nbKV=i&U8AM<DjRfuaKf}V83>aSPd11
zt$-JzqNWzBrm8yA5%BK+hQBla3rX;Js|Ezf-Lb);%VoDv%IkVKGddbEG%_+jJ{|>I
z!#JD`_{twU(PD2H{D#0JpIL5uIHlrjdt|;V7>5x*6oC_%ObO#rQ}nZmKLeJ3er4t4
zW3%^SPEL-Eu`&4<KJ!3QY_!TzR1{VqjHRESu=+E16r=(_&eGZ67+6~u$}1?$HMkz>
zCXBSTeg9{{rB9WkVjixpH8Uiie;F&0NmV1SPeP&Q5dD^FF*5Yp#)yi}_rVC-MZtr|
zcRy^fx_7~+vX_#k+5GP8rid?C^^;c_SUNMlV<#F4cgw;SeV;2r-5wZ-w70YKDe}O`
z$=SJ%S0|nkP*m1~XHTeYG5&=d++u^G{6?iaxCje@PXCv<Xg59Y!bpZ{L{Ti85|~NH
z);47?DDmLxmB+ux)#I1m-WxSW{mYj0pWyelE4xxV918hk^Yhk)g@w&L`(L{O%`Gj<
zO&646@ltpI8H7IICQ6w_F9?1;I5N>eqJWUxIeQ$hP|mgaQZHvOlJ~Q>$)p3lG6Uv6
zXpjBEeEB>F!QyjmcX+vnhlfSof&9bQT{Trzv+eCa_Jl4^)_Y!hi;&*0ZVNc;?^&Zx
z)Qoe>624|u^+sTnvNU4($C7>mJUl#x*}rO#O)Qp7rn_~YpH~(a7pIIGgg&Fo9Ky-j
z+%&yAUKK?b$bU~Ac|ymuOZgMGkUrK&o9}UCdl}usj@i7J&p_I!Eb^~y{scG?WD%V`
z++8g;=z4bt#+_UpE>`3!rp@*D2Q`ci8w}%nELETGuEVTeQl9g?wEPXs0=mqfT5|Ak
zi}Zc&783=Zi17&s9DTX1_rFr5U7q=g{iCerMxUppR6!p*UtizpnVB8y<UfD@EExA4
z92^Xr@Pm$9(YBry*K)nJWk!I9_w``ArluzNq0H|~FUapzxu!`Cv$l_3lU3x-2#n~^
zCT8<`m0l1M%naJW#l?&sryGIR0gI!fE7r;5Xt<`n3)@D_BWAUYconm=TIQExE-Ll~
z{2rHs4{7kW_J>5B8IkU?@`RGz^n6O%QgJ997aie(b#2KUmyhrML#rDC9ZKR_)Y0ST
z=Rf3o=BN+k#cMI5ucv2ANlEFl+V0o-?$#ag*}HQ-g@tH<{?SXPt9-Re$K0H@hKSTe
z2+R%YRoYHYz6N(0mEa-%6^uX3)C*NQ?qMoHWd*JZW&1yS(e<IUeTnd^5T^-o?BJRv
zGcz+?3^Zb`oC{CZ1U{>hXW~9}Xc_&I=hC+-i6o%oV1T{cB{{_L6Be|-QXN}UE6$Q4
z&=H4kpM$pmK6PPfG<vGMZs-ywjX}Y4eJC(ltqrbRePc~Q?gJJ>AoHuMh6en@r(M4^
z+0Va~zhQ%66MaYX7f$YEcY<1@`D|;50K6*0CFA+MGiK8$hS`C3J@zr(!N;d%pa=<_
z>KZRxj0`(ef-zERqga#y-=Ytc5|;M6Usa}-q&3~o&uRSv@K5AkEVCk0#tb-V6iICz
z-f#AmP2>wuEPD}}#e9umDOOfiS|-*1?FFxGltL7pE%KhGX79dt0MS<*X^D>gw|iH<
zFUIPqZ7Qy>Qa!p?D5ayS*FvU;hKAh11!EQzi*{TH_WP`U5wwAsV>Af1lY18zhqDI<
zwxlgIyQSG}g}O}C6|*)+JVn|5ZF^q3@AzF^UHfV#CN?OHQC7`l$*eVH(X5m!Xi$Ms
z6uY9qU1SLQ$4VROg;m5amiI2AdU|?H1kxmvK5kc7P@9+sTi5A!bF;MLUGeepbsnnY
z*XN1LTeUPbJ?#19oF}n^h)76!>cn1RHfU%CfWH8qvHL>raC<x4#*enQ`})8T^z@mg
z{&Ak#dyb#vFXu<9CeyJwg4>@N6R6ZKo{m1BJGkWe#PV_d_LfJY`;0QW&oB9IZQyN#
z4g><}J3Di%#C{vlQOo6(gTs**t1!84FD1^JAh)JFJvOHNn%bq<0&kF~B+WysL)+?@
zn4^kFa7~piHcORG{EHFP3cAW)WXQ;oCq9(H43dt@8pM64SoraKAo}sH6v(CI_QCtU
zeGqiI>x2&l@r7}U%zc2Al&mdj7h_xJ3o}~Dh@YRI$EX%gy^-5j&(@e;x!A_HQvN)D
zvJ+HMQSnCZUcY<<1ez|5!=KDBQ^swikXA9PeD@({CObp?izDl5SC{xtdWjCU7m>lx
zN{SEFoYZ9H&#*bFVwE$`U~^Ymmb>CGjeMRTE0I$&0te}xc@3MF`TuWna*?q9xLrOo
zw04h7S~zPXL9lApyLJJKcduCwSAo;l=_b+ve=WtO+l|5B@Jr4QmSaBO;LFrDg9s;{
zlz8plF6*UrwrAMVX*Rv6w}EZ4Q50VI2YdhkU~H-5*UjDCT`g$H!&5ygjzs!){;zFJ
zfPS%NZdj6-IPqbi)jdD09`KE$-1RX&j-r4`G8qrXZ4?EqIRXIok92>+Gg9d&2ebd@
z$JKa^-v77>l=KDcOGo-+vAw>*TkVgq+!OA_$xAr6Ux7Gqa6)p8u)mF-)4=x_Fvt29
z4}yVrcES?Dk5tc~EdTF8%fg|s7hpNn{|`$pw8^M`#qD0L`+nkYg+u3tMe8n){6j1d
zCt|G~fj=W&rZ7V<k1ZsOXD1}Ug0fk{&T8V%eOcF;?>2F>>lq%*OQoY!KX&|;EwVYx
zgkdJOiuzaNbjhnQFQSn4yL0eLgIfE8pY?&YH$Nn5Hf@*c54B)_PVI-TzjF0=jC{Rp
zUN$>jG@Yy1vs6>Vf;~tqYiWocxtrIT<?A2lnvff`&zahFg2`Wqt>8f6ZDBEkJ>f>z
zxHJ{EHyXsdh2;5_ug+tN{Cp!lkZre%OR|Hyi^@OsZ=V<8Ih;xWHYwZ<A$B~c>OU3D
zopYA-v-z!`wTAiii@W*rml%`3f13UMyo4VAacO}4`dAFzd+^2*z(r*xe9J~0p7v0>
z{dBo~?Ed<%(iTT#$;}CSP9F6ZjdrI~UFVauIJ@~Zbu|FQd>khqi{K&kD`V<|(v!Ft
zTxvl^FN2f}Gp`F(v=_wKA8BeObXrnIUZK?MX@w@qjW_Ebe>Y@3+dv1LttKRRvI+>;
zJ?|)_KO?TpZEOZ%X(=q7t0(D^&z*=HGGhb}+;|%*7Vv5WY48zqJ;S{h>Ag_im7(~+
z$-!Zoui76A2@OTlXx6+TgHk^1Wv^A$)R_MdMjxML7gtwXbMu~QC{%AZF)67+j%r=K
z*=hdwGR}1tk7G6n4<@{C@9Jx7OMQJ`>FDV>Z|)uRgHvzn58!Xc#v-wh{pdGK@XuVl
z6AQQYT_f|Wl%Cz<+lS<ol)BTZ>T0t-lX3pDY#h6V%OASNJAOp<dS4wKD+)5Xtx6Ir
zmc?_XMV|cxP9`fBu;`Mv-F$uzUUC6VpnNUH&u_Jem8)U2x+ucVsIwYQ<fYfgeBQ#+
z$<7DCK`^kqsq`e^ue~^aB7NEHJ%^j|g$u50Jqs(!zhEnG&+ntv8_o-E<}m^MfNY(s
zdnV;<2}kJiitF$E*nbG+Rk~3+89(w|tOo7Y(YBzd=8rAV0{>k`h7qVuTX?aS-O_d>
z@|phkvsu8o3Z0y`Oiqf>JUjXI$k;prAUFA*0XQ%)P+eMT01LZ^&X;{A?Nn4$Hcn2H
z5)u-+mBn7Say>hmDVdJ{;ijO|-rn9;XTa90)Ehok3tX!zFJE(T)8|a8+TFDzASA3j
zJhZd6wyx;zPUrW$ZarLnYCl}On-n-Z&8~SEg1%$e@R~j($~1Nk8=k@?xg`$5c`i2L
zu5qv!AG%cq(p<-?FJoo1H5w~bI0OZcmNI5w3I6Jrnb?w?94hNK?6qrZ`ug_H&d!&0
zU`V6w0SY^Nt?}IaJi`a121gG6ZaUM8;5G4Q-LyW<^z{YarQ~O4Q{vcK>({B4gDm~%
zVr8`K?IAD~Ykz!SszhV5D%E+be?I?({m&4&S#)3)WfVY<YE7DeD0uex%OvppN(bz^
zA5Bf_aZY0}l3G<?#=g~12vaDmVugeI!dU!eXmIekGzzY+g6PtzHL8+b@N4IfBWp0@
zR>Bg|V34?spS3_r*+nSh{388K5|{Yho_z%ypod!gZr!;JSZp&pQh|53+LPyn69(G$
z-s>Jkj_;nFxee0>00RO7;s!QtJUr%OrN!sxa!3AZuT?S~Wgk}j!OE5|f5k-^1n&23
z&a9}IAoehY@!RF@-dqFDkI|^+w4nyqw6B&CJ-AtQxgHkqO%a9z_G_TI)fabV#dezq
zV2vbf#YdBow5yqkT*hf!&;9Oc*9E7|LhWGiBNSG@Vqf%IXlQ_8>?x+HiJsgd{!>MJ
zsH&+E_Y8C<s>y5fU=LsC#gF&)SX6n&=6$S37?ttc$S;4tL0V)I^ct%Z4!-I&hgj<e
z%xKB?y|VBeZ_ES9e!Thd@+A-mtZf8b@ov|kb(^V2Be;gTZe3~Z)f}!SH~HKpXZs|N
z%-!8{2IF)vqr&dYlbDzogT3iuBRpbwq6u#2-*zV%N02;x!!J^$@xL?7Pp{qyX>0SC
zT!ilIiu*XxeeZ5a$;+$t%UC1RtyBM5Xj-GBzW6=KRW;8>>Gy3e4XwSHh*2Vi{-cTl
zn{qt47`|_}dxU*6vD!(-EaL~pckjX<pI$l1ZSUa!M?wcGT($~Qoo<-p_ORi4cjyCP
z@$d60Jex^IAU8Mn8&u?<6~SzT`v>SNN8$JP!4_&Xqtm~|Bx@*iqnxU);D(T~9GEcM
ztOq#by(*D&RBC;y(WDdnYCSV?!2N2yfX}N(lrp+>2O^f)FJ}ce)*S_XK9$t;AmHHa
zBO`w>wkiOPg%AxnT)-+U_>@d*2H>+~U^g2a4==AcX($G@LhIC2)stUR*e;<S%tUa{
zzfREtRp<CwSkS{1!b&U4f3{Fa?ON_C(aat4S5WA=V#!oi(tj<?K}wj#K|k*j_AG7x
zaJEGd#H?-h0&<|gdK}1?wKYk;r-Gy6$Q$9M6-eN!N>iZp@v?!vY=3mFADL-b!DvvQ
zo_=JlYpv@qH68aP<8yO#$d>zy4LGp+w6vlEL%7E&tVB7fO+s%?eBi+X!bs<7Xk``z
zb496<UNO;iJtwF9&Klj*Y9M<R%@{);G~w(<({>N830~H~aQ(H%_E4$gX}b)H<e-~9
zivY7ufNu}e#|IIdwTgLk@Kjg~No>?N=QWkDuRcVL8`6gwHuuXhaA%c0O+<A_sx^Z0
zN&gX42WrI960nR~!`1bw1%AlF&)+}DtJu@aYjt~@`p2`-$hFcp{htzjA9EI3;GF|C
zfIwn0a`M&PT_hA)6p*{yn)@sojhc`S^(cb|@@_$~eNPp^#T&HnwwU~hlY(Ii&o!)H
zzl?Ly@tu)Nh<Q)ShsEyQ*4RC(AKqj{*^~3ghuN#lf1$~TFPkNzVbCDG>tXd=TSX!u
zkhO{H&M4a@W|wcQtws2c+V^we!D0cxbXZjFLg<T)jisTXX@!;dWriIHWi4u&nz$+|
zDq^E$u#IkEVWIN_4_&3Qo*v_^%G-W%Zl67%{+|z!q9O*6hero2vzO91AG4V3GZAS_
z+~Ci%-oai|(;oX(+sRPty-z6(-HU&mwjm7U_uF%(!&EIej-}9_$Z}lQ_eP^H=3l9x
zer1SM^@$-6dKfQ3c&!jNcn>t$>i_bQK|4xS@e?<<QBpWpdA7$W`^lQa>A!|~7BR}8
zs-u$xvZONX9~#1vMX>BxuB>D~k!^R}86_p9#m2_|^7SivyPCE(-H$L>uguWY6yC?j
zM@(Ftl$KWd{AfU!o0cn7*mx}d9nY&Arjv|2vcRmnw@9-ABn}Q^4EEyT6hLP*y;{aS
z3B63@8$Y$<)3-k(1M$p;wO(5{gnmlW_j5>)5gV_gldcu$j=@7=(Xr<qJh(p=SFNJ}
z%IyEL5;1Ukm7#b+c2Y$6b@}OAlZU8*u`N7K?nQ5}6!g=HyQ*(jupzEL>~^D2&R5OA
z?XI$hzDGwV<wVXw_ETl>HG}McDXbUkokbL+>Zgmee7}8zV|kUML?brJ0`t<z;qGpU
zeP3~}qY?2sOH};e?kt#|z0sTlagfOQqx17=!-)B*q)p%xb$G_c->ObYuc<*kti{Ia
zgop>rA8$=2e7QpIuAvV8a<j$1TTj)s`vdq|Qtx}{8S##sC&9!LOZVky;kEV$NP1@R
zG4H~+l^GX8=~(gu8(Oj!fgm-r98Fu}?~~EA48Z>a#^4hx1;1*31O*KrpDtz}GZ)vB
zRyNN-8Yc#o8=2)?lShrF0_e%V&q<C=*C})^!X&cj;vjGeCnl*oz05)m|E`4=cuq(~
z)vXdQb(I#vTi#$1aV6xU;iu!wpO>eWQ6TKMGb1PGX^h-0AOE_AzpS^{TEsmSm6qFC
zs<%W`uA4~A6X3fShieg@@{?tK`DdX$&m|>I8CwB-GrIf?Hf_&iZNn!=VSnSE=;KFL
zjH2sNG4~R&Pz(Ujs`sB5!~6~@@Ezk_VSYaPz>EA*u{4^oeXJpq$m57Nqrn_i<mj;e
z(4Uci!VUplbZSJz$6J-KX3u99T-djKrEq>Todku4_jvO2@9gc7GxB2$6))yl{}Fd?
zLRM43jH@EMkYj1AKJXj1u8%(sV$v0S_~7x@%wQla^E&B@wAS5kb-h^m+NMWZvuK%8
z8q5U5FAUzac3q#)yE#S!OOI!_Qj-qNe9gi$XR7{4#Y7a0y=xq}>baY+#-Z@P`}nup
zTldcH?)IJ@$(X?0qqLW=UPUG+GnniO*LmGlzt2wLbqykn33gDi!(TU427|^P22=S_
zV67F=t$en;{5|1V%*`sgg&49c2Q-0qK|fDeWi7(-0&uE&jLQN!)Mq`B*Rl2t4Jxrw
zz(wD`2l9u=EwY&ZhL;E<4nWWBHtKFLW3GBaP9?>fanVG|O_#7ii(Wk!#|!I8YyWX`
zmM-YS`C-lYndD@?|H2X+-75fiATlj29JUh$+m}lv?tq&IGRC*rKVQg>a#)GVA{`yc
z*3nRJ=CBZBI|o6NxuZb4L!#Y^YijCKeo+M;Yq9RtxUyg!!wr&37Mq#RqvQDg=p*4j
zE=lyeUZ+@soX6#Mq*#F40NmmS<Ww&^On(_$e=GjL<!}(v#I|-TWBPjmeR@NZ(Qop1
zR*`PPA0VGTK&~iG60;-Mx(I04{)s<>ABAKQ^Ixuhe}yQP0HPBTUIs-fjoC~Cgef=j
zZ%Mt@#l7+Xo9Vh&0C`W%$-2oeZ7=z8ad*f$7%`?eQfNwcTBnlebitkUOb@JPP3FIP
zhzZELj2}*}BYxwu8L|S?8kK@>jNDcuNEPpk(7HY?ikDtAy@W_n?z_;hplgRmyD|O>
z8v54!`vo>&Y%tsZKmS8zlTunmaSvRou}{lWkn&@(h&H+P-UFvwPx{ZPko=M5rhy76
zfkCh~q0z1i2Kq83Rc1yxx*yk^veH+@#;{zV-}f=e>xbh=L5#vxKuDWzN0p}8CJH$l
zppkzBb3}maG;RE%mcmLAE#OkejQOFF&@KuzD@n78mnpOmF8_x2>j!^&fuDi1h*B~N
z<DX8}vi<*!*lfQ>$6IS_KiSMxN;m3Gl(z|-WboHoU<YT|3o_M9*yb@_{BDjhPS2}I
zZp_|nayT6u>xt0+@(Lb`MN^wE(#D9@EX~jzWm?E$b)J@<ePPm~8S44<C3bvmYd0fd
zSQ19*f(td!-Hk5wBW<+NV8n0G=B{!)?}gW=S`#B{C34Rnbm)Y-zm76T$gDKp?8}9$
z+Smn!#F)T*pQ)tnU*GqA({%pXS%fY`*u!beepyA7jsU2pM)@NQsoup$2PQs*ARaCy
z7YFTk)_WcVH0H^}!oq=s;!#eUv6pK?a_Fcbwm(5=1eXooC+;rS!SVOQDn+I9z6a>0
zU!KSiAwybWV<RD*WYYCE0TyisyW1;lhm3@tP_$*HdB140@4e;c!b|vE$y&`HmIvd*
zcHS-b!0*;Q@7(`~i;%G<pt7*A9A92yFN5IW;gLwwVFQvh95S(gW0I9D%=S`9X#Uxu
zrQbJE-Z*q_4W+&b50UUTB$A;#>5uK)8zA?KFH{_Oqu+`lT6NoHJrg}*aIUF0$gcS+
zfU&If<kOEbwm5@i3ZQkiOWR1e(EXrR@AMu0sT0~)aY>R*`<={FJ>vy-{m}7P`md(_
zCc2!QBFa%)j2xb->)wA8`sW_bqL-YSDIwx9#WGznXK`Rqll++630iF6Z;7DKY-sFl
z-!}+&g!=1*gyi8na5^`vgr_Mo#e`SdyKrMFJcYlTvE_c+l*pE)9(-NWSLeyw(!=an
z(Y1FleO2+`^6n~m+u_jXs$rYEC7><%7wp>iuZ&QXkr5FS`<d9rii=u+VPIuN2TQZc
zEXK&x92k!Jxa%ZJV$HpyqN53>{2#rw=|R$n-HQ#b##03rgGt-rzhaeX=mZLXXaoZ1
zFO%CN#();kVPS}ik7e?S!ClzSsfFvO%dZkwOI|0fqIzSWeS88%5wp+;LW2FpCJ*IA
zs*(^38ZLfjdjJ*)S&-v8#WY<Ge|B}eiiH&=$34WBs6bSp80<P1H04Yxvz(xsN>NIk
z4GIlaqwE={1M=X=^qnkjn`WBKw#Z(dM2%RKOd|tx6;ebD4M|=0nOjG$oEbEkNfKt=
zJ~{qIUe+&>3@SrCOsyE*UA41VE~6*jKYqjG^aqyl5RW|_q9O)d`uMX1gnhAE#v^tA
zIDp4O*kY&n(-|5tnxpuA`pVKm@xp(L`-OUki)Kx?D1iW>v$6iqo7NW%C_r5+sb@+j
ze+;Ma=GJ4%RG=bhe*gac`07gX%NORgwKY|!2rYNq)rM{d2dhMPzd5^xH9UaU@{JKY
zJ~}>r5x#9_XXi(@8n`X%i%;&i_%Fdl;w{2}b)?)#P*Kl&zFG6vglW#=N89J_F1Unu
zwdqL{@A)=1f*$#GkGC=vdR;sbpc3KVx7N{YwP=bW(M$bXio>eD!C4shi0sXw#0mQ<
zHQT2x!UH&=AD;)+Rxd6tE^3|k;%-TsJa0~U89TBqB{VhT6XByjs;a7H$%Jk4b5ldv
zbpgh*GBSykmZyu_Y#?bOUKiAp6P;4IcM`H-1VhmU2|`Bh(Dh|CgT1?1P0VVviF<Y9
z`@&URLGlm85Q(;jSc_Wuz;+8rEUo}I@~hk?UulduL(!+e>jDpbRsO>_2RAQDB_!Ld
zm=~D%CoR{zg*}SE$iS+H+uwYQLx(?b=KC<vVOJHLB|2clOnL?h8CgZJXj3ij?bh~o
zp;l3$24t-}l%QZkb1B-<LB0c5D}zS%hJtT$YKr5=Tbmcu7uE6O$IGe>=8r3vHhTO1
zp;EGfzcRB0S9f;t_XW>UTuf9A7JINjdrc&zAE!g=3Wwq`w8FTpeL5EoG|C+G(96wB
zgcB+dt%#41iWTiSCN97$91dB?dRE;7v$IUTI9y6p{|J<WgTo3bm3<(>yvAfpCecjl
zQ)ITu75VlCew})EuZk#=91Z~Zv&+cx^r6z_I4Y|3;}ba<AK{C~$2Z!In(y?Jz8()4
z#iSOuN3vD*KB;#!+ZWBmLJX~Q{Lw7&jRYp>^*S2h@df72*uoe?dPazsYPoGND^CC-
zC`kU!i#(c8NPu$}vW0-asIIOZBH*FQ^T`_lfB<-=?p830q^zr}i|&`ybyNZa(u;Du
z)8!%Ee>|LpRh^TTiIGu_%~*a4yG>RmPQ3qV_BUeB=;-^4qPey7k75##HbfFH|MO(>
zUS3uI9~t!5rzWAm8l`lNr4wxvLWs!Wwtk^ky?6W_0>ikj@g1jyw|7n2Zd5{vR)vAQ
zf<FhTFbA}>He9@ph!eV^BKk~I2DXx(Ua?stg=gR1<^Y)B0q@x{9F15}$kJw2ZLu2h
z&6-W7?FQn8-XLiq3+j`+Mz|)UV<kk=!8l$m!Sswu44Y&pSGh_!hw^3Z4+)QNC(KmP
zzR+*l3O%dvGKkFfOX3oBbZn@oR5GhCIyot*{4M%*VsR0svm|R+<?z?4{7HqSy$Act
zMJ+4GH2*qguQ^9<n}iMm#NWKx<ns=!Zo@?l)NG>Dwk;>b#Z8|Z9!X{)il%ZiY6rbj
z!)O9_tEMHqNfkg#3v=q)CG|DLV?&r*Y4h<f@poT^w|IqEu)ch5TtVc*VZ!V7m+hzY
z>Nh}EUTWu~eK0$sw6wIa+@SkUKR=_@d$>jcYlIvHZzK$T2MrF>AZky~rm_W}x0l10
zZLSmg!r8ghe-;)D#yZrBE7%ww?g}qY;*>MLOiW?5py7U_v$xk}PS|GxJ?I4g6XNsm
z=G?pYmS!Qamc+{OYKIll8je2UPg*X-?tM8EQ?oo)GjmdCOmMp|Rq~|oWI{5bZg2k&
zZgSCs3Ca`{wZ5<J^>h`FH9t!nv$OvT#$wgx11qKjM#o0S&+L#{v7rL1-*H?j{S&Lj
zhDIk>DA)J-L4B^J&go^~|G*FuE+SVb^$-XM8i&&a?a$z*CZjye{|5_(Mv3nCK9e6~
z7B;HK1w}=wP;hMQET0%h^+xLE(kAZ=&*+RS3+P#G=p4#kUi?gY^;ti_gYK{+6!+^S
zYfy;3B<w)N+~90#J9wdRp<<!I6Hx~d-y^@l7kUJ16h3dTKC;@%uzq{05dZIk78V2#
zOqS}N%3lV?Ax5u*(M?x7(`ftiglzB%L*>O$CMNSA?n_39`gQFF;1>&<T8_!;mOKt=
zZ`VCPT_wvNXV3&a-+9(?!1ki!$RRUZQ`4^5VSexc8sA3^f<*rDOb>0YP18S_w*>+X
zL?-@dZNdM(gHQw;{%y1H4#9P;e?7Z<7*-s5jmGm4S`;}q?oK<F$O8CtuIOc&v*+Jd
zc-8}(6~KLoefewJY4gm@JV(}$9zRr@EV5LN$`}z5vE<$Hsyu(2>`3-=GyIyZc>DCm
zv%0?i4<9gZG+XjGs4GLQPz{QBeVmiJlI{8q1_ZaGsMBqICE^DW`ndA51U7i5kCiET
zx9^ktK95=I<GDW!(9hu+@KK=w$BG=Scz1l=4~WY7M}scb;rLC~o%;{)e9Ci6`wQFL
zwTQ4a>_7-X<GEJP3}y%a>*q$h!B2~`cYd(*H@l6-a<B*IDf15vg>Rl4->q*(ZQ_2!
zF4bgLnI|PBO<PqF-WD0(Dr_^KIp6&Yp_D#87*|~j#jljeG|bJ-ed{&N;+5+de^c-E
z5BgqODN9)o_`-_|=R)Y-;^@@xXAC>K?a%`m&wTX1lLW(T9A4`Ob(q9n>}_mp$Q+Ne
zctI0x#yRSz4<47X@*x}^=kCkh)Bs;_b?38?SM+XlmymCMY&LJ&*t?F5?^bphvCPAc
zIq*(Q*>A~i|H0QQ<eZF~Q=PYa^3Kdr?bWgsw10GJBW`4vxsDbmK)HVPe7>x;;m7xM
z@pkkx#v2<m_wFsTZ5!$a;~}%NwBLoI{}&`wgdqFA^kp;bbr*Z95vo+idCgC_)rJ^I
z;xI(t#$542GFJ02!aN5Al6=_gCq7S9AG@@<NkW}PH3CY;s;oq9^X03GJ$8Uk^NKZR
z-=Rf*BA2B2l{f>^4NvzK@_c&bW&MU-{u0?nl2e(7>hTxaL@>m-TA}V8iOWgD9(B`3
z*4W7YHh1gQ719z7i^QKmyZ^&weZV1y#S=RfbVk?MDRfG21ci9)Q^AaQg;kkiz~!;p
z$@UgL=TB!Bmn{a&Nx`tnx#B}}7<L0pr|w$Vv|U|*L5C{3%!YH1kbwQm1&V={tZjkq
z;yTm=n5&<`QrEqu`qUo-*gvtE?WSIyeYVVJA03h*cs`D|cP28wcZ`Gc81pl|WO7nX
z1eGa<p(yn<)v#bx$Tn%3`_%I|ohcbf4*O^zAz?!G#NFMUZeX)qu0>%0Hk-x^?=fY^
zpBh?)sZ|uW>E8Qxvyza61p0$LX~=sop`?cIEY^5yhFfyD>X5A{8a0(6RW8*gHKgR*
z1K;{hP5Fh}n8Jy>w|9wtSVKdDgO`_H3t`=i8=LGUC9KJoFZcp(g<PsRG&3`^{^kUB
zIK>Ti^h<O1&t^Qg%W$OQ#rDIL`M`+DiOH$SnaTNrL%cCnLz10DMNj!f{_nL|%0a$2
zAZKSa!2ZpRTN4h)Q2mlDY@$h`%4#n&RPR;)s2-MJ{3Km6{6rB=okX3fm^<O%;h__5
zU2j<eDpoIaaC6h5ik5CForODmeDq$|=Yz3%5Y-nw<TzlcK3skpyKnalYT8i~Q^H`L
zqh>CBuFvlMA5iqz*}ev=M|s0;PTgAU=Ex&4)Vt+Jqg%Gm9gK=&p9?p>Sw6fb9|?xp
zMW+eflYUta2hw-%-dQINM{R}kzk->jYvf;Xr52?Qrv9_m=4w-;<>tytI;;gciFgBp
zF_e-}R97@pbm3ZL*JyNLnMl97ynG&z;l`Vsn_QS&-rGJCxmgusISLc<MKSHsLl-QH
z0Vy)63#lupVG>KE2L^X#>>nM0VF&V_$5aSZc>G%Y3H<*Orlax~Uk<d3{`nV^lYaip
z`T6<h$q=d>t9!XSYs1<F>kt;?#<K)AgKHIPVgmLZ<|J(efw7(mVWJ1_Nj{INI3-TB
z1)pClWeI}by6H7G!?=7l$9Y9UQ#knJmfq`?VC6l(A2JxsoCa0s^2VNd%Ildv-%i>j
zmy2owrlo|LP>`oOt*op=B|=LV>`?{}%XwvMQJBE%u4Y%h&Ue2<_x;~GQr%Dzh$K>(
z$Fl`ArLR){-9aTYRyPIM8=vb3u`DC@#)Y1?<3HoaAD*|m$jq^02a-r)AZ!k#>ExxS
z@Y=kD>a2kWaJY8&4DLSJvziTio$NuSV?}}wEXtJRpO)w^$op%563{ERAYpco&1%dQ
zN<yJ(hh5Hw$0}>qZ<D}M;euAqI~=^`m%5GrblKV7{&IYmT_qngsxJ#x8LHy)#_0_V
zn_iXsax}Kfb_{rlIe=!(>uI*lBRIIWcLm*7^n7p}%b?8jOFufd<)u6?Q9o$lhe#m#
z`HPrQ@tXBAB+yovb`QEg;j#4iEdW;zc8p#e6DGySw;mreubq5CKty~6yI|})h*fLM
zmhEf1Fg1XQba|TDTieB-7jyz8v~`)+-xt-9hLb<&@J1~+zk+1KFKzOG()eB<bs$DG
zI>D0K1!_YhR$~`o|G{ySzl@n}4W@2?vj)L$`?W3Cp4`KZWwu{mf0B@td__)94qH&g
zu-bgKZXf8v+%R)l?ypg60jdj^LW8v1%LR=%nNIW$qme&&P;YrG|A5ZDZrO8VxM==0
z)eJ71_Ia@fr3i^9Vl#;wjG1LMHX9oB1ruQ-f_Cl4_u2FsM@L3R5OKWMWIuw&^nt+c
zxjB5;bX**!C6SrpeN7ieUg#yDAwH$Zyt!TSna3|6Mly4g&umgX5Yn4PkK+<fa>s1q
z0sigdZ7#?PWDh6u>CxF{8T47?*DQ;uS)W`2Bb(XuVDjvCKLWT58tai7AV&6mcXxLs
zV}x~PZm#|Ckm>UB^4TuhXa1AvAd?w&MG{Ppf5qwoGBsO2wrdPG*(bX%InxZ|Fs^vw
zJJlz6*e+d!>Q1VjY987mYW<&9BjIekPO3^sNLcwX0tEvY84tpl&;T&o{8P&RkCn`J
zvE@Y14&eh=pG}#Jw-GzXyGwU@{#bj&i1zX&=iR5;RMF-mhSMgr-kv|9xsgY4N`_{G
zVK8%y{%a_S32YwF<26~r>wFncV}SlzE5z2$&dA){yyg90GoSfKWAQ12cGX8`<HyK|
zXn-s9zST{F-M};!0*_Zqo9;!<g2DG1@>^z2V+)mOv<tN)SKlJY-<IBr#0^fG41^?b
zu$f;zl6C|`7)b~SP?#=ZhjO2A^*kA1RxzbKSF>;6!ooY-4At(S=Yx5n<c7b-@LR}9
zTEvbg)>3Y6>5`@0Xp0TQLa8giC7&s=Y~Eif$yX1?Yq2?+9pQ|?!&u0rgPpTLu)pL#
z`~Y*{Kr)z_!8E>#C4dh+ByaE7<NTnnD|Bki);Om~zT9D6_o@C*(7J3pq=dQMeK<bE
z+P5fyyP~FJz+0}kE0|Ysy4n+DYi|#0*ht03z5}?F69I2EZ;nTwg91MAGGLl(+*puo
z?D0bs34cgvb&rgMMsYHYvv4(mZ8+jzvcPCe!D*=`Pv6J^w>^47FkY2A-<si6!1R@^
z=e3Y2!ru6Jq>Kw}#sl(G`+(q&j#vdtXHQq1FJkJr1#RudLlwA{<1Jl_`>w~LR-NfT
zA@)n+j4<*xULz7}XlPuad`uhpOWy2~DPl$N!LgC#9v<W$3W<QUj%O(r*21UbzB3kH
zoeNn|Tt!uh054s~H_$6}&7PL~dDr`=f^(l*^U2qEY}RI}x8bWC?Ch0-jbRPnV4Bb9
zeG6mSU*r1OOMO?Tf?Hr|CoC>EUFpO?r;ncije_1jUXWahZBIu9<iIi9XqqNtfbwT~
z%+RLnS*%h@E7kY;KYrxR>=4B+d6*mQFt?t+h#6@(@-U0Q^>7$I+dy{I+Y>S0S~4xJ
zf&$Y#jyy*6Q5yfe28jc>e4*J_Vh)dya34rD9zRC*yOX`~Jnxxyozh-5?)Un07d_{A
zkttaH^rX`{?$g)J3PMVft@cU90_=)W?!9JaWo4!O{NMd#R5si&PRLiacCj5xd+dI{
z2WeQN{H`(C<Al)Y`?%&5ndL*X;VUS$WWI5VdXBRsPQ;3)w!?l)E!*pa0B8(&JY|sZ
zc5SM_4Rw1rk&S23o|F03M{$YAvb>sHyOP|KXRZ`)hiRz&{n_`t&yyZE{HT#f8Nnc&
zgY2s@ai3nPL6WJbC)?BCHpYF^QA26)z-cT1?amWD71jiaTgtAFcT{o|?M+$)byz@8
z7}A97<OwUZ@&4M|?xy4R>c|4xqQ#{+)g}99$EUFQ>7@}oBp(YRm@D@kx~~5L#QmW5
z7JAJATEvpRW<>$XN0W-j#V?b;{87?KZNk&t>odB3h41VEBv+J*i?9hcL8iU*NGg$f
zA&xENo_}kylh|f4$<DsLoMZSjKS}JFba;$s0U3;$|NYJ<dRWwc+<ir!XIRl($e;Cv
zRir)hms5_I9{tRV1$G{Q=f@T6X_BmfCvl_Qa1&!T5M#9M6T@+oH<t+r1TuQboFL~D
z62fPHY8bVt1${6)NQ|O&L%$)p>Ot4?PNGN>^w|QrE4ZCFq>h$Q_YPb>`ORP0mqS|$
zT72TYf#ZNj8lS`{oQgDdL|MlZOwa?jDRLw66I~J<WTu4-#Q1ySiSa!0=of`oPNT#5
zDH$A%89w<K8_Q2#7EE^Va7Az)Z$pgdlj#D|b$mnAFCX*ZtDt*+3zWn@gIcuPo!t<=
zvd7%2fpQg`y+BTP7WwTsC4v=kX!g5NnfJKsL9630$9gDVmTYB&JVtz<xq=6A8wRBY
z(489d0GP54`fch<kfa(;iv%8lL=TF6a<ko0#gs{cXpJ#4n~>JM@MO7=Q~g&|#(=qI
zDl2-~z7arrX?g@~zehejqh*5R$Z(6zm!da)9lt<eq>`r=^|Dpva#hZLZ#%uiXsXZ`
zbDty*Y0Fb#9vzc&{){+<jIQ%k{FsNcZUHwWgcDT2nONAcLol9E<yoR}HMXoPAt}nu
z$WQiSG=3Bp*huW_@<!gA!^>8U-4$(=$3U#uXO6?jGs%CnAcn@8E{~BWT{C2F{8S}z
zj=*ByCbPCVI%v!Lb_!4kKqp`~x~DJLu`0<Zw*RFtCU`J$du3k^7A`cB(()~@{uZ>x
zcN$FJTZnT~@VO&m`r7_%MDid<Noya1QN3H>_QFH^`~mT1BBn834gp|km--SS2>#Dl
z`&XO~0B?X`Y@ODD?w1N8Of4Z&eGk0lJ0b#E#z$}G6m><^)PJ~_5?u)Kc09<Crl7uK
zhp9~|7Gc!6J#M(kew^eM8{e{FW#e}9lJD(d(Lu6ZoF+hGLXk~7F{t{1DY09rQu;8S
zX+CJ=ia82|=4Fg-waHPLeKwXWO)qR+M?%tXA<IVosxG9m#2`y5#@YHdtDZ#TDbp4t
z=Iyu`LOt+#&rOC1Ko{pgK`^jFY4gZ%Tu@LD<x~3A!omV()A*q+igN15A57n7rw{TC
z4p$A7)i`!`bzyPgm?s}>m+l0I7PV+fTT}%C7qg_LguwZXaeoF4IEh-?c%DQYbkuN*
z(t>&9T53XJ0cs=y$w#%yh(<sX7(%l5V068uTectWUYJJkB>wn`B@BTX57~04De$S@
zAk4O2A?F()d-JSqi+AJUo|Xks<11D6j~(^sWCmI3N{W$rMfqH~q#1b=1jzdJknTMS
z8krW?11FOl@p6t#jCiD&-9wP=+qZ)ijs~+hB#!KB?*kxyY(Dx7`e}oksox;mP_Q(%
zV-tdEaUJF@WWD=D{<XO}#=Ke7>fYGn!`=Z$ogUQ-JwH_mJ4%P7SA|<cZFXZ&&)RKH
z0tkKn;rQd%lXLh3Y$clv`EgjcmWV5@BQ<=-L+JYR;n8s}ts6J5jAJP~j;!M;%$09U
zo?V&M7cBD)I@N*?T11z=CgT}y3}aejMCon3i((y0-jMY9$+S-&Lk&p}u@vLVG9|=V
zIC|BjA{B65v*Afaj2g!VG9}=r-WtW>@%^3W$}FMNALN}B8EpR>&CB<9Iu!4Xcgo`m
z*Umfl=r$#SbLAse2d!44NuBr-Mj@~_ikB$LRgX@c{b2X|?eAOXh<PKAKRC;@Uo&%%
zuUEz6WB*q464h-%UM&777wQ~;TaIUW6Cc^mh1+z3kn`om_cnVL!h5Q@W3JJkEn#$G
zlO!hCYCB1J<hg;YIcy(n4_Zd`DlKX(DpuPGQ2iT)^&=*ixH_xsgIIs+f}+2paH2{C
zc}r-O1edpA-cX7DwvQk1$x5r2op>!2<PMx;dN)r!t65%U;@EdNf&%neFv-AS{iUuY
z<}o*-%iEktIe^VPG!2i4!^O9t`^7P_V<BA7aI=~DtuFn#!a5v34>^w|nM%!@yA;x=
z0+Q;b$HBP-36aHCvG%K^Th!<$dr&?nLF%@LKlRiNplCas=16*(jjxHR1109^ZvL9j
z#RE9se1Aneudc@59bzxdvpR&hM18$7@3dy^VXE(C$lv&LS*oy`%9!V(@4F}Oz&rbS
zxDp(C%c_uo-&+kEY4=g|0@lZhg%lEoBKh7YKYj8j!@JoWYyWVe*gw5?$=b=^b#u^{
z>lTnp#KfO?S7E&SfzZ}$opt{Ehz4XMH`tr7j<|2l7piq9OU%vqvJqIh?2rM;t)cop
znNo3lRo!)DC18#(SBWaPIk#*Jp}q@mGq45wH+MU!xH4>(W}?aJ3T$-5?p=TJAxtW%
z`Mj9#Htdc%A~>A-e%l|*kNs}mL2t&^)_`@{G{Is#$fTJqEe>uT$>UItLy7Cy#_L_>
z0_9Q6Y}!j;ds^xo7#xx`qIS8ye<gC!wBromg7Qh{wC;^CeqOn_24giowkSgGFIr*e
zPDR*2NSe&AM%X1XfJzz5EV5bTnK<69paX<If9%*ZN?0EFyFEtOQd<HM0|#o;YUA&2
z?%+K*&RX*f<<!E;=)SEEq@o7A`50NvCxMb)e~wV!s$t1}O-I=Pq?Ckh;c}$n0+0#3
zOV0X%m)M!hA~**jr*o7s@I$zV!5f|*Urg17TP$B7gf@6ugfbX_q(TjgUdw-{FDQhJ
zVX%ajyqB!^)$P<rd_m5(8|00#-o-VF(5Nu+2+dz&{3G~ChbGu0^C;lB7_~tHimhj}
zA17i;LEs*GnR3)W%7K55|3D4Q20ay;XtuN*ao~ryNOa^wd(l;#wis2><Gg{Ol+_A|
zihJw*gH5m$6f4Nv<>zcVmT6KJ4{(wRJMz1dF5s_KpP7HxFg2yDs;Vj<;ge%R1yD~1
zDnotC1QYx>(q@{+ll)L>D%jXl&+61nFymB!+EQ+&OtVOaVxBEA>%7foM^hp{3PLNb
zJ2xPo4Xlu}n5W-?(YDK$W5s1E4ry0RBf93owiQ5BB`nmcBMP40=KLcGpBhV>)5Z|$
zd=&Gy`wqMnn(l=k+?c$YTdz_jxkgM$nqICqHJKz|bdTM!UpBBw7qC&Ej-<V5mJ;+~
z9Oo2`W<l&)l)B_5G)(fq?W^K<3M%^ud0D82>dHPbza$53Wo{Z*=X(f-vQ26WeNGRS
zS~-}-jTsEzb+_^$F_x5Vk@qK-<5y;1;O-h1RjwtGB4x__#w5<zpX#FR?vZbOlv($A
zP#VAKrXFYK={0DIGWs!-UzkAeq(Qm2P6DG?@fBp*8Y0<!llis1v8z0w*`HSoz~4!G
z^-8SAG-7;8A~hrY_AQ6#_;mmF#RPT8h<Paa-d+7LGLOijl)zeV^{<Bg5w0=PuD&HQ
z%(jwFWDmPfY276Z<U{qjVEdRF7i5ozw?4NI>-X?I+a#Pz!1H>^?MN_&wc9u$!%)|F
zG9Nt9M<C%Pq^E`A*dd~IuOhw$7c_-@9Hjg0bkN$OLmx-F{#$NdjlRf|(MD86aO%ru
z5!^l-6Q|b_Jsx;_cX*#y`6^#pRkqn1eqeQ(@-53?AU+RI;$>G4VzK6~?}f7HeK>f}
zY+Sq3Dm0^;_!3*$#T}{69Q<W_->6&>kab+d7L;Cthl-JodGcbea8D_RVoZ6FcEu`U
ztWEcY#@_Dzjbq}lM7mU-Fr$2L=7mLJvpLOF;1U7JnA?eH{qX#6)MWVqKT9Vu#h&-;
zA(v}>i4WT<Uh4N~Izk<O;+V-8&S~hU17xSKbn~%RrtuyWE0sAjnnai$F($fP$Ml>s
z={;GxUdZ<HFzS)(HGJz<%1?IN03K(38c%JLwI8_U6t5d~G$f_WxG$PeApw7Zj*pP}
z;LM5SvJukW(oUVIRG0PhmWNX6$Z~>ho*Gv!Jg6fA15MK38b`jvGgn_-E025!Mnu=;
z6FTecxZVn=lDrMhL(`PmP<L(g2{Dtcjaqw4JEm%6g_Lt$O#+-J|8h?nIA6zINgqrD
z7@-D0em34q&{@0h5KU)zRHD@zp7V2@b8dZBj#9KMsiooy&nTxWm_xKAVC@a;?64M7
zvA`AKol($H!&7ss!`$2s;*sgax=`)C*cla62|wTOix82EQge&J3Uog$x=>Xa6ZmE{
z`c0eb2A>hZi>spvO;zKUz{XY-;7>n*jvP{uQcz8bP<6XKURKA*qYMnEfkfgf10RhC
zDkclnGyd3RXXN{yPJ7>q`4pM%`rqMN<O|Iz3Hz3Z$Gv#f!6SR)@9lrbW5H<uJHI?-
z>9?Wk+zWTCDW@s$*l&xB{QSW24`XSKe9Aro@Y%7L>=#NC#ilz64+-aW>NCZKL8-U8
zvv%BdQ3t0q`FT0NUE}Qx*=DCzJah_o^B8|;Hzy|kp$kGrrlBiNuND;#keJb6QtVRF
z!8&+(T6`Jl`8zAap9)5ERU=YD(TLIMnI9&HvI`)%dtT7t037<M1f|tkADi~V3nQ>`
z;qcJPo!~UJWBJ@d{O(S>aK|&_v4F+`b9B5=oN>+s-^!r$luYXd;*3p0!U&NUw;Kys
z)v$-N_-&{##VtQF0?+&op6Uc3%DQ-xsR^MY;-#7grJAXDIn&wM*@pM#rp9OBVwi(a
zM=9k=w7Np#55C&n?ZLPR%uACUaROqh1dMeZNLSv0Y3&75ao}AbUxP2V;Lo)$d|(2~
zhrCH6)IBv^j;2c2tBE;&lgn4uMvsKI<2z{Bt>`OiX(C(1<|5UgHP^ylXYyvptasaI
zGxRz$1C48D%x^P^-mf=~^9-N;Wcq1$T0m2%Ix3KEHhP?=FL$YiZa-OkUPBdy;THGG
z(c2)P<7>NJTvXxsDE(RzN9455y}g4csOV{Tsy&w%ci%QArz$cEe|19KPZcLl>0`H^
zn_~;%HgTw+M3chwSB*aB@plbh9M%b&KfQ0w$-^H{lBf9-oR4x&c36tROSXQ^A}wtf
zhP$1?xT(@2OV@|vtv-=ytZ5xTX=ezrgMSFWoyc^-c!*q=mxgykTRgq&CmpKjY1n^a
zY=0sU*KrrK+1*e7-54T+-hxaS`C#yk6J3x)F*Gd-ussk(ot0JY-<?WYU)2(J<d9rF
z_nSFf_cwHbj%Djlq9wL*sa{CeG!UK3--ifddPkc|?aik@=p6^EV$yVA+x`ipeCf_d
z`M6*pM@>i~02TQ3zOOD+i>WD3vvsduS3<=YxA<VA&8zJ*Ipt2!)|k(M8fKeMrl=5@
zMdTaQ)U~@r&!jP(pz{j%XhpckJY=(JSaW~Rf?Pn%Z7iU=6BB{p&*-IV=HZc1Z41(c
zkU+ud=hGu)XCk-gRmTQqifn_Ooi2)g_m5bv`W-V7Qm5ikwmbN(u>T5RBX>L4=^M$^
z?aqcv%l(b?>3zMwheaaHqrQlOuh4V$*W*v^GOfcz7bAz294R{(i&0&5QkD16Z|$1=
z3p&5IRr+Mq-72EuJoZUl3yw+7k0lXFYskN%Gv)mw;8&aT!C8YP(VuLxDgl*CGL!Z$
zEOL)?Cu2!60hCz%Lj(bHC?h<jT<U?4n8qNlKkf02B*MdT=ljR4f%zVX6qCR056XE#
zl*X)Ow8(o?qxP{qeGw}8k7T5U=lXJ;HHV(%S7du++B8b|%>2kef0q}UhL~c9=Fx?K
zC0T%DLt`3~F%FgZo9vUG_^Wje8!pK&tLHeK#5L=MSeG+%kj~)~+`SfA%8I&oQ<;I|
zLMXoZynTFsdh0itW@hVF49rK`)pTYE)r3LC-%D2eqL)e|wCm|JYD-PAk`4|ucWeTD
z2ON|~l&23cFDg-cFXR-w{dr~c(PpL2sd$@pcS4GN^Lo^E?=~ekC9p75jMKfosPNwk
zpcYUhvfa-x@t<+_yfsJU)x|Dp_jZhd8_}k#pBkz5ts=VhRtC~BCP>cK*>Q)tWH2bF
zR;VsfDKGiC)7@s3yR%g4|0ZMnRwbynz2_*t@#|4@Pq}JCW&dahOW)oTvazCXldeWd
zi81aPWYJgGRtFjRYV=@QPB53Z57<;VR{!wUyT57$Bl*(_TUwEBV5aXYrZ9zCuX6M&
z<K6p+aoNw|m#{!Ns_4V!i=@+cT-J4GY;K0qFgsLcelvG)ZCV|{U_&)4G#@AVbyU6N
z0N6h(%6sE-r@rM;U$ztMyx*+c7s~X?OU2FWB}E4pdexXs8u!~Mz^8JfMTM}SQx!FY
zTk2QWKLx_ycrkS?*}*#DI+}I&k_y*F+oNMCgQssh&xEk^FPh@SmMrXC$6Z+O_q7^y
zC(l%UCIYiQQ#5UJI^G4|&i|Y*lXEe58ZY^rZe1^bpQCv5wVOTJHpkF-y)7icL$hj=
z3W<?u675%(APD6vb@hihwV{i*<U|e`3!%T6VuJEQZEhWY?=)Zx4~Ny(GIftx^6J}$
zQWRwQYM<zZzAuJ@#N~biPaTE)c^lHdr;1WLdtXPuX0Fh)^$=eA^(knUAY&FULfG~z
zCWl|7&C@1l(lAyOmu2B9+l89#G#IbZ>3othn$#EE^BPoTA#e6X=t=CcNLpp6G$XUK
ztSPBsiD^jCViKKFjJy5TC>hW>ZHJ+6he}zXDIJR0QG`@QS^d8N!$3U0nd6%@Hrwf}
zy2*`ApR?<|nYi1$&vY9%KAOFbFSZ5|R?tql(Y$5a&|69Ug)KyHwr7<kK1lwz-0FWK
zHuTFk2$UEUH>kRMnjJyMSh{lu-z}WWcCQt9tPW(ge*t&Jc-8*q2AA|KTOc`st605o
z7SrFh;q7;4V8475Ya(j+C9aUWC+CrN!k#_XBG?=e%jqw^;<)Jd3K8S%SFXoV_}RCq
zDw_MOD|C7WTJtCj+{jJgPoct}ZU}$sl<n5YP|`Mw-9%sPrDt_T%vtV@y<aNZ68os{
z(LH9o8z#*UI{HPt$@kyLtz)aXoEFRZ>(@B^)mLnqGlzM$w#-|#S-@i{VIqEZ3_T@&
zO3w^CyWr~Tij$)=E5G@cV`&Yf^cv{VJ`$(HH_LH))jT_F=YN9T=97GK;1s9!f5N4J
zZ3Nz_Cbrdpa#DTj?h5L{o+p0jWqG-I^I`mx=3r?qo&v8wr%Zv@<6nPW@TwKy6*-rV
z(|<=B_L>Et-h6Sn__|rHxHFO#Ccvwa2c!47Z>mRMzKQ<C=_q1E!XN%$^aTAE{b%2&
z@5E+QQITjHY8X)^^FT45@xs@+AM-Yv$ggQj%0yY+Cnnf#8O#_}TAmFX1x*P<w^q}4
z){CK_gBTJMdC=4IP(kBr5Ot%iK@g1iJ7NYr=~=S}os19OWxV7J56Uhxs)rGg(2sO4
zVx(pcBZXHPt?T0c1C;<Zoq)#??rU_Q>l9TFSuMa=-%bo=Gtk|5Q$DWVBpqKLzlGk$
z76!EAJP_AQbzu^1(U0*!)bqe#6qS`R-hPe;x8|XV`JA?*0y?^kqMkm{ZqY}RwV$HF
zx^i@>-l)T+Etrz7-*`Fu$nutKW69Q%%_ZAE4ZJEUD&$j?B!79?iR0k}qLJ@Fca&Wx
zcB2c2Kbz0?h&)bKnP?xjK13`{?vFg2Uz|X|*8v<`6GNKt1*NfDfL9o0w+^yk(<x?s
zeu$%omg9fWk<V8;Fy{kz-nChQ*WAM#ORgeQZIJIi%6GtZ!rx2dNk6oJ<11`fIM<#J
zoSbm7dl!!d3z)kzgq@L<+-n?U$dVA~2OAiyh~Qp`NaDqJ=D%x)hqE(I4s-cH)U$Ab
z569z6$r#YnrMG~Zwh={93{m@5^8J!oEb$cIcX7tW>3uvFuVm5oYwU?=rL;|L(T`TR
zRyhM1CrSKiH6Jfqz&o~1I10dX@>syTb9b^}XCxu_8mSNonM(I80M>}|N*GA@A>sH6
z7KlX6<^yLOoCJ7T%lq~cA$dw_``Sce7cTVa$GlHZ<FYo6_{wh726HmmT_Y0vo%Z;y
zv1g5696J*<)bvQ7iNswUM`iqJyq*2{Y(W?aH7!(jW|6SRk$^Qee7|KgpKsoW=i(J2
z`I(K!Y#U}fxnZ;7G)_kgNUiOEw%_Q5-L(C5R;G}4_A`E3H<Ohj(Q$Be#A(hu%wM{k
zua2g2Dr1lajfURlWYTv#a6;7o#hTA?UHOgBqbp0lTF>6wbzE17#J#TuWkDF1_AKMu
z#lk*bE~0(*IDcTn+=UBRaXcQM^Z`mbb!g=_Xea4&xzMLOHnSG+k^LrCEZNHb?JL>w
zoi{VQ{h4>@4rz@87VuIDU{56d<j4H9`W==naKu*loAYFUi>Tyo!w^H3#Iv_Hk<=gT
zIJ@R;zT2|pG5QmAukgp^L=Ja5>gaBa=hmjr*e$@zbuxHuyGfFwgDPbj@!x;QId5Bh
zuNH8&!ARTSF#4uDlwbIfpzVuUy4aIhLPyT-Zn)UHGTX)xuX$V8akZGso#w>as1%SL
z?8!}EGkEP5;8ol6aHYa(FB!brCGgtC<}W>%IYVlb5ZjNLu_l6zzr;~<=P0@HzSw>f
zz^ol9#MSg#ZjPwvd0u_VTe<Y~*C$V`c=_BaCaB4Lc!Z%>%nupQW3RiUHxCLJ>O|KX
zO-amm>|42nrL&yy6p6cwvj<M^FJ$q`y==c)MnsE&w&CB7zh8sb7wmp-1|BvxOtYE8
zv>9KqWbJtZb2}*38c_|_(3Ts@rSBH7bM7=2csOI{<bcy;|H~MnL_mU3qrli0Na3~3
zxUTcY#(6Qz1=Ote{1lfp=UF4b>z)8t?ISmSCWF@+3wXUV8NA|)xOaL1$$lTQ_4H9b
zKjhD$<)3rVaSkgT-es1%m+-S=cpc6nsj3gHW$RpTO*|<(-si0BPx-PxDTno_>(j_S
zvx1-3Oygr=H#^}^uFkeN%wNviU!7&esT{Hz`X_FJ{Z@bG6~nHY1X8}Y<;*8G>^R`V
zy8UO_^6}@ab(qZp+qZF9uo%xBm-+5uGli|z_^C#tETKF3CvG48nq^Dp^NyV>4z3=!
zJKEwn-3Ish^I35=lcNO&YWppqtZx=^`ZAZkU(8OgcUa(Ri`{}{IDhj!^S@cks`)l-
zT<y%ZEBTyjFwi33AQ6y0SV2>67?Hc56+g6Se&@Vt6=@EZ=3;41o&v8wpG<+*<6l$Y
zC4<-BEs4F5i!Uk`@VaQnNYoxiGt+pW9z)tl_+WI9(Vi%@B{S)`_6kM5|3StN|3T&t
zuaJLWCUqAU(sOG*#yA@uT>XHtplujpZZOm;ZFOm9RJ&L3$Xp)W^<q449}GzVG{*hD
zyO_$3qLmKT5CAihpTPZ&E&)74+}GtYTCjnUxGx#I70FnB4P!bZqYvr?zwH#CEn)P=
zc1BaLFfuU4h@pj%j`@sKf5b>ZB%?JQ0vaC(@KOs{y32jVFN|e<#{IiLGTzrKGtu}+
zKKI*vG2Q+EL&Plf*AJm9xQkA$#yHx-gRY&7SFGWF>NW1?wh4WRYcL4#%3-`&v?=x!
zhMUo7x_ZRK*1(8zw*W!W&y2aEpZggf5Fjal<w18iqou1DxiM>!o?p;D7Q0F|eo^p}
z-m^{sI-TytM7l<vSo?$&(3o+aWAi^_i`Q0;$5nBAz(luvjIl`CtO=a_?2t~pHz*&I
zEp26MtmvRyI$B<*6yOy}Y4j!mPENezzJiT`*9AmWaj&v~ySIV}UgO4&W%Kd!xz76d
zZYrb%Q6m7ODqJKY-|?068s>ZK;#f=y@m2RI&JQB~{7yE_UBH^9QoHI&889%Q@1wu=
zCW%{@aAd(;ymth#IXIuhoN9`N-^B0s;Fy@0=YJc-*B5HZ?-KRsL_H<`+>PGDX9ogV
zdiWMslXI!5%%Q3#mc-~F_PQNo-;#?Y6?dQzNxfb#05d0wuvMGI`#U%o63@B3a<a?w
zxDyvl(5AWUT(gt~M{cntUOJLm{abrj^sLuQwyHpJFOcxBocM0O2WyVTusflOwBiDC
z5`qcdJeM77ma*WcWOk&9<YOR*uDq-Gdi}z8^DdGs+SMs1NF8+4-Q?1bU+~?UFIn?L
z96v^NQ{O3lro_;Bk>Zq7c<qeA<6tg%$_|E<8QeYOCO~<*NDTMlx$71|Nre;?rBD;U
zm#8DF`N(+#GnSv>bXGIvI=#@d)NY+D*8WT+WCIEerNQK0_2F~hb1XZ0gR3cd)RbmY
zo#)T(ARjh*9AnEDF{CuKQPq`2`a!Aw_p#k@LS7w;O1wv1UA??bvaPM2j)W~Foc@@l
z-~Yry-#D(O6;W4|OkLbAE+1PhlC<w|T6KYQIUQ8X?W&?PH;@QfpYE(Vc9~uAbwW=y
z6eVBc=8x{|^S0xC?_+rS=8@VWY-;Qh{uV}l)Ly>Ye1Ii8&JhxyO<uVGo;=}i!4`iL
zAaLYXEs1^R6^@~%WbPhtmG$SmX5SO^w~_Z&oZ)Ov6J@G)Ix3^NckTdN?4+%Rew@6R
zM|!)6?IsPKjVYx5XwUhLZus6RBe+IQU(-$MV|`fdwG9u?gB-n_#O>ND@~UddONb_J
zw+qL__r3hCvHDgY)hYpzT_q^2;1!(A?sOfs-4DS_r?ZT6oyNS?P?1Axst*@WZpQKR
z{n&20L_m5AHHvzSbpaIK^2K#yAof3GkXSz~67m<<*MI<lp@w9#_Bs>1#S7otr34G`
z>Kdx0CqIzLub*ZwduDq7B>I>`rm~N|o_vbVea_`QOF0;L6~9|Gq~umnnUhFO>^`D{
z_TqLtnI(}e6txXMGXBi|E8Seu4oh1NQ^~z}5?{y9*=)O!{Q)UNR`ydfY+|6hj?RRw
z#2s0{QtzG2+bqUoLJkGRsZ_=9CPw(5$NX<`UL8SDVGs419*nJFltyi3u7@}8xNPT#
zz*}6-t0l9%jp`QBcFUG(-K14-dCRBz;a0;_k8Cw;YbvEt%)2q0rZLZHBkn6g2)uDm
z_`p3X3qr)W+Q}L>FP6>Uz@h6^BnSxX7y2HoOO&6f3!LyLt?;LK8q$AZ{SQa^_}f6j
z;xa@z#gtYFsJ(TG(;Iejbh{sy@*2p|2zZlk99hS^*>|kqC2bwemd5Wq0a-J@!TsYP
z&cxm&t16qa`~c#D_OZch7v3v^xhTeGl^j0{QDg;k`s1~1^V-awpxXrGR+Cv$O=;#0
zasyWrwEqh{wuiCobU9fH>1K+EUsXZmT>O!hYxm)`;T%D??~q@XO?CDeuKu!$dG<EU
zbe+rEi-m+sD_)YX_twy#w3)bHma*h%@#Cv70`DoP&_6!DJ+D~(OqzqI!0XQ|Q{eUZ
z*93U|<qp@7z$?Owj#ICo4gH%XssHCo$UlU<#z@3_LRK<*{V)&eG8oqkAk)`a9}jxJ
zLsjHR=>;z`f1XG7DR=VEzE5q?f6x)~Ukr!*H-->5MnXdvNo&F+7{xSRj<LoG?d`ua
zaQ46G3vr;oqyY8MxPYP|#s{xrxIGK)g&7!=LIp52aDS|svEkbo1rQk{{)s8#fPkYM
zMuydx#_}-L*kek1O}zgVBR8*N>Xx1zsu$qn#Yp7`0^kJbR4Ew~_1}Nc&4a;H+%FTK
zT@w9^c4V}!Sb&}AlTpQZ?-fRG+se<QX)|u4Z4!_<B4ACQEFkJ50ezBA)(dF5!C3E*
zXtQ2im&tfjETdOr1sF<YskuL1h^bPPapP~OL_d3jX3>`&#c+L&0L3$mSFdLDrU0*q
z*Ua)#HhNvQv1Dt>=FbAJ^73-|6ea1s7Y43J#Gn(2l_rJS#MAufuoZ9Tql9HQQ)n=W
zgwtf6n0^IphTlB5Ac<+X4O43bC6V8-VD@`Vv;Tz6*PFPdu^c9#DxfJ~0sb2ud3Wmt
zoX)k9uN0G)sv2$bM&kA_!rA!{E?=h--)uciu9bnpKmr#}W4(hNtNibBw8B8UzMii9
z5Y9R{v+>=<YzizSP+>$RA3NQGA@ytG4>{tp=trD3#dD)(80BCi%H-`NoL$Q--((!a
z2dN#hZpqT1QIrw)O(+qoqsXr4rdhz9zW+Mq*Zf%TxP?#V{=&tg0h+82X%Cj73|>aa
zRu`sk3dR0Z4R;$=Pu8=x6N4&|%J>6pbarO3%hw!=Zzk1xAc3lo*1*LCu6N{}Rp+q(
zsgT^hdV0iIjasye(_X$@yW32OyhXE?j)t3r{OrfhZ+zIWIfml_WmLCI33fAvVqbD%
zcd_VPCLhOkQKM30Y)hxW$AhEZv-!yTEDL|BrJ&Dp=zuYimiR-gvh&8-{zv>0Ye-WY
z=n{$8lM)W;PIm8AZ?2#C64zsCEWM(kZbF|m^p?cozbb$u-j~Q~R8ZNOO@^;KKY2Sc
zXLl?gUr|vvX-lWJF@tiS*_>VX0ggWLtc*9&GI3mXCW;h4yxkV#>bi*o3H78ZHK>)T
zG$ib2v&-Z3SwO?N<(ymV%pC9IxclUirqBpKs6u&jJ=gtK;<P1_dA~GKG;wO2lA+QN
zf|pHatBXCGLUTFOApA`vw%V2yau2ybQGd-7`rD0fVheXV#b=#`bmd;+kn1sa&W#|o
zwogEp<v97;WHNR;6C{C2Tsfh_NBbMEQGfdc-k%5X*(ULM`=rAjv`rXptl*ZPGavaz
zi1DMKs7s8K9syn<kAj!=j=W?uk^E~d03eN1eYa@W1?p0dGk51DTn`m;uTyGMukeu&
zif{Vjxj6{uy_uvm51~{EecgC5eJO>$G|d+9+G^=vqmF)M8cm7&+42l~&G!BoPrrL)
zb#~CvnnL1^5Aa{>gl|eM;e#fI<fGK3XQkp$ltu7OXf|I*Hd3Y-dIY?*W`NM@<?W9q
zQ>PeDsa){d$#K_%T)Njzp27TkSB93mH2h*m$cA@u-W14^z*Y)XCi&nBqcN4{ghPDg
zya-39P5gMXjzncIy5<X1UfRimkG%Q7^(d$Ey5%j4)&oi86{JVwz{KGim2`>uHubnG
zJ1^yMsK6v2ykZ(Cr7LP75$mQg`@JpLe{!4HCZSI`wl$+F48VWEyKHoHV(Wzh&I$17
z5c(djPm)&{gSN~Spj$y`Q6GavXDPYngYEhYe7LuWyIqqGnHXrI_T0~;|NJwzN*c);
zGRV(a{U&b7&*VuEm&#o~PmV5_!JPNL#cOpU@ht}VIWnW6iGhNP_%HgDogN!FENva`
zR?|O}Putx{POkD1Kpo7@iouEaDW9%ceS(6BtvGw1#`cGF5}Sm-4OWZsxq(|pKE-3_
zMHcxtQ7~Zf5p6Q9ao@AXYdW^B^I3nXn20tbodzTN=1eL?{P36JhwoG3hsy>I#8;A_
zGSK;${=TS4bFefQOLOuRc>Vcg3cMcwlE6zk)$srP^}s7jB;lTB@Ctdw3{a6mB3@K1
zKoIeUkQt0#n$3e)Cmv*f$5=}pW9kQtkM%M(qL2?N80u9r+$W^<GU~h;sBZm@ZUJAt
z7v`c*zs>#TKEZ1mMg|fY3Vn~(@Bc3aLNfMGBO~e(rDfvU(O&Kgz%pF7MHezlfR_NK
zx<(6l#bb)M6X5lZ04zU767ps68W}6VROf~%MQZEUjNFQO2wv@;0=xv=<cA6HYG=$i
zF3PH6tZfye_x@o9ugmU?lw=5q8WsT6#(4Kd0Yo2Sxa^F!<Su$K5!}~QG2VHOv1Hqa
zI=S%;BaJnTsx^#je+^#a0=yoGc8%nJNKfd0Q?%#*k}mq1e&l^hf?QBtx97fq%hBjJ
zC+YbG?IYP#*jBQ!8N57Y+dm1sB%iW^m-K(@1fUhk)eDJqjSOA_2sEkGCIzzFX+Im?
z&k>v7O1(%%1|{&4%Aa(dxxU}RmuXlbz$=uZh;Nzup*J779OLZ0HmbzLr<W6o8r1RI
zxOMVt?Dk&6?Yx4*PLU+_l+kr*F}Ho(SnYe2O;O#Hbw5lH)FL4-IqblhZ)W3qAePUr
zG*Z`jhpxL}9ChBoHmAdcXEjkMCT6uf$%@3XE1L4Fd)e&1kxv(#An0Bf1zpW3leUxO
z?`;OJFx4dRGCvP9Sl3Rs0Q<gS14F7tbOlGrIKP#-U!G#__ZeigP5yp2#@dq<T>cK%
z?V&gvyeAUto`;jN)|~KatqF|KkD*O~>1`htulB`lQxsRrx<w*xNh;Khn2HaRapoHw
zL{d2W^UK_96v<IrCO5Y(B=D<`Ihk0=)lP#*X!7W8xkbp01oj=d#>us3xh!;7*fvbF
z0NIw9kI6W@m|ZvW@GCW-kdkfz4mk&0`Ni9bPyBAO?e-wmGB`*HX%%e(5RSX8XS?Gr
z{F7=)(^$bvD~ndElf|0Y_BCWuaBMCSKh9@+bUug6jI^q)x*0;J>Y}B*l_oJ>RpS30
z&1q!qcjdIVGoSvP$o3Q+_5D`=>7lbEhL{zzIq2!mmdJ8WD@+Vb{7|W=yE%cIJ3KhP
zcBufHYNDEl8ElTGS|r3v*E~U=g~EOzJ8)eeD10Z2^tN7<9rq|WK3@RAT)sS&&i5Hc
z+9sdw)?GmDNf$1E=g9WZbbRv-wCY8I*_!&C`rCtlatqm=LRX#lXv+*|zl$H+JVS{q
z?V!y9UaGoeOQLMqiq~MIy{{X6Z!5L6z0|bmA2~|B6JyQ~+zAnI=W8B6GI(`AZpG^%
zcukC3%b@}$wRD3dgtB-)Jhz48vhN-lt<veE!k-nv6x|ZwwIxKnpFz5!=MjBnJh#3y
z!r!uG@G^rySgo*EQ#3V+KF?(@w}Y8vDkbnrCTYhk0@ga3!AoTYFSDN+4PDf>_fpY1
zD8_|$0=gc?I`hhn$uunAlu?$(5#qTGKj(dfr8jfO66b~+Qpr2yNXS+vwufhMxX?tS
z<j=Cby67&wLewT#_I$RGjUjoQ%4wsoI+W_D9|d^rV2)b=p@m8sjg~_#<ma1y-ImGV
zrEV*xRRD9Gp9|YWef#d2pMf(9knXrJkBDzS<U=v8U5-_9SD~|v12qHHw}{_n$H}kV
z<WptOx0u08-DCw_p>F{ep+)^Nc$LQbGUuBxKG<FGYw(huo$G96sI`f%fg!pCgbZsZ
z#VyNtw}O|n;&n%i-(OZa@X4;rY>DptRh%Af%%<@0d@k&m$IkFfj^t@*?Cr%c*ny(9
zgXRVm!;?;1H3{39y27au<JU`ozT=*BQd`CN6l13F#C#&Z7v)4`3p*HTl%E|m%CWtt
zG=|Gt?eSUT#h%y_LKQ~34E^+%$8dG!bHoqth4_lO{enWo#i7aZ?Zw0z=cPH=3SQFO
zJOy5VE|~(a$G@z{$^SLM>w-HSC;t;|@GF+2{{Mdou>iq^zcCX2Du$p}7&!f(41`U`
zko5~=^@WW0wScx0^zAS*Xzs{}lJTzX=!@Q==gKSeT=hU#lFa>nwfJzD2mSX@M{Pji
zXHU^j4rB$bBlC75WmTQ1A80|B&PcK&hD#q{O1&V!tH}ah378TbF<zLC>B12KUIiBL
zD#TRpDZuL=j{z?aMk?NCBu@e_1^2}Sbl;f6Xt{VlPV_NS^ex7Vk%B}<mCcMB8U=WX
zI&Zv>@ro<Dx>AgTBitX%W4!qYW7qA>`jF(hJErPFMnu2HRd>Ya;<~FR#kEnQj84V{
ztc_J}r9Z(*z?K)8r##3y`w>L}Z=v*m1$E#n7{mVdJM3e&kz`}Z){@Pi1YVL@!Ap9W
zx3917#evHr8jHv)F&6OJC4*N0*YaDaGnfxWuujApjYbx&Wm0~01;jYig0Urt!YGlr
zxgW-UnV1O6JLs{3S6>6BJNrow-;Rs#Ej)u;Dee-9i87Cx(;{)(<H*(v863zl($x2G
zg4T6Z(i^j!SU*o@`(DP~zksTmYqX~Xu*3N<tG&XxEnvT0)FFeHe2jM~Eq5b0>avcl
zj=MRN(n4x?4_$>p6kIvL>Lcg*<mX#lOSwx$Nil_a1(a6TqtIC&&^O2@f$7qAk$B<@
zoWDB2N1GxDip!#?s+_{oO3HGRX-GLpjQ>t-SN@FsrrX@8=%8QdL?b0zlCC7Ng4aMJ
zhKiHqT;7B8)(bf9&mp6+?_naO>%h<#L*+F;me2OZ!#$A8m2H&w<#G3<7ty=tu~#G-
zr;1gy)n22cDw6YeD)GBez~#+;q#Zg%R%;jcl;z}}oJYdJd7Mov;bMn@Zt0G=NX+i+
zbLQN7H@1b{krSHce)De|nT)Npl_U`6xs@YMy9pNHm8vn{5!PxovS>6~S)}LGq-~QO
z6*sxL!B!+<ZZbH83n*=~f|p_PvG<l|ernB$p<I7RHhv;OZ|Ji;d#7)rwIH1H?sn{$
z?#Py-F&s{<BPF+#^0FezYD&n83npUyOpdN~VP{M!X9|1hE|l)*@4;=`Z}n+Xw_|Dx
zr!46xURy&2NTdsJR-$Z6CvBfAr@r`zuMPyUIiiU8tU{{F%P6gEAU8RNltZ@o?{r|r
z&v9%??4V(|1HAyRyZc?9tv~0zgb07j>J;OoGn<ywVD>uuu*D;Y8wCoQr4#6cPWml}
zPXurA;Lyzi&Nm5g)fvrOy9S#WQj}0rT1Y{D5rric6lUI{Fl+<ok8WW0z8lO7RZ!9`
z{Isjs3|>AD!K-Ehye5rX%a%jaU<;<k^8&DZ@YoWJ^WJQd8`T0X1lY9-@Ve<^2Cw}>
zU+piiFP+d=_P$?(Kwpvnuk4ln411+3y6NpLpeT4XR}Ox{k@K<qe6y0&yG4`~mysv*
zSyiVpKSyPWLt5dZTFvBmWd;c8HwuknUQiU?;=IQee4O_XoZLXB-iS&+OmF2);x{{R
z`fD%z;>rkbH~&nAwSB6VJCq!C=E627)&^v<H=&u%qF`#S`ZC|sSH!zZ#FVzn&)umd
z8_PFeetSdAdc#Wk8Gy#~9^8=amcrg_Ghi4xi)at^BFfhu_rup%7Sm0cQaABK$bAjz
z0)Siy-|ivCT_Hgh@EUG<WQDO-Lw{2oO_^udy#Fkp?1>~iA&Yxu#pcrlD{80}<F9k#
z*)GvG-9x=ijCbi&LW73hTJwt9xsC2@i@e9tQX?&@hx*a9m(m{YM#2$0HU=i}U9yg<
z9?KyVdIg&9a_TDzDatRTu&9iZoFr-!4sto*2OPc$!sB4N0Br^B&57LFV$bPS?(!B@
zs~xQU?{CT?_kar*w@WuHN(h#~OO)SL98QqObHtA|PVx%li3$;a`VB8Ve_BPFgQdB6
z3cUWDG6i0be@Wow^q2erWf{EOCV|)A&2r%-L`v?%US&i;g6h<NQt*?I6R$9MaSjh|
z&F6mn62=mih`;j~%iPBO%6r`J>|$JB&)7g1+T8ciq}yUFyTw?C0F==&7&i%!>B89E
zf~Kd1p@ANTH22Znw<zL%G2@lajAqPaBs+|e8UbFTmKCoAdjVeW{uaFI+$}3!(pJOE
z7VxSQ;N>pB>pcs2iE>5;7!$ByOcUR?0+ay5k-{WKJ1pSU70&4OnF74rFf~;(Iylbw
zU=iaj$GCsfb`p5a#Z*(o=zs)X5}2J}G**-qy`1|+sf>5_Fs|)jRIfy<>SDOJ7IjZN
z{Uv*7IrlcLKfQwH{3{lKdKuf8<so>vJrlgj%F5(m-`m@3hA1&ns@3Wj6EUf(CGgUS
zgkPOPO~Pq@aM;Qk=Oct<Hj*zAK>6rhjano!ldqNP(oF!x1bC^MFp7k(@R|UxH32wn
zOCqkiiy;em8M|xIXY3&*WGl`Byu3mhDd`y$32i#L2VDr*;LJAxY3$3^Q`a-;nB?vn
zv?<?`7`R^ELNfQvJ!<m<X^8b@nS(FRUZF%4DdZof9g@LICBu4aK`iIoH?iMo7lBE2
z^47UtwHRBKiDU+R#)%E@vvQ#m_71Mt&$eUv+HLq{w~!=&V?ato`s&bUA0+koBIdh0
zU^8tFvmIS<_w>Zw!xK+8C+4}li|s5sY-~1QyXXRuq8%+lCn^cNgswD_Xf3)D{m^Ca
zC*|A*oWBXcd7nsl>w4t7<MPRIIx&{yEuZK3*3pM`p26HG>!wy+N6U>3WSm>a_g72V
z8(&9dqObe|xc+%99Eocr;m|&EPVFVBsh-<46(sEYhU?$2Cp5c~TPo3Sk(jA0TanIh
z@?f9z@O`a0aWWs4(nzaFNP|5#<7)vgX~j!E;$3UCzhrl5<wQErrA2%{lF$Wn@Np6e
z(4|5`L;~0{WRSOj=`GLKJOnQ--6C;I-)*fwkFzxfnp9HKHzb3XqUa*wi(T1hV}tVt
zcFc6~!pY48PY(|~ygYGn_>kG+GdpKD7M#lAP+~pxi3iCE-iZ5#bHCE3{Da;SU^E3$
zblbXuV*#&@Y_k0p^3x(4JRD{-ZH_yRF7BcpPdq&5;pSwE%eywrvJ-aQ5XF*<(ut5_
zjI^c+aCLdM{sedh%ityS)tN<8a*zyOn>_-#p5JO&5z*0ClSsyHCxSMM1o}pSymHYl
z0c&qLO&7OuWxEq!3w<~^yW=YK;O^pp`|Nj^<GC1{%`q&yDB?hm8N8&!HLi;UesfR~
zyVEpOcj+u!gdfHQ$q%Ii1x#X`n(6~75P;<&Z7JN7Nm9d*052uR<{%1V1$b=^{sZ(S
zftL$G5_lz45meMgYnm^2gEru{KHwSl5<s{oLq7grYwSm@%A_*+1OcC|WW!8*7CPC>
zr<cyQ^JDF{M6z4@7_vM|sS|#xQU5kx>5T)z52d(plR#l73A}=m%-}VsZ>OUuk_!uM
zh5ZD$NT-{MgkCZ9Fb)m1=F@o2o$Dg$-xQq1zJw+LUO`mH`!a8>KaQduaaCOmN)Tc&
z-*~Y?%;dOhJu-c;C7*^sj|sc&$u!a+t-yB_(kkp3>+8gtfCRQBsj2F+uK4K0II;q}
z7<V@Wcs1+gt(`;i_?G-h0+J$v8U?UOhqWkjsk(WH@B^Rl>Bn=KZSRPK?Hm?<xrq&z
z1Q1sl=o+$um*x?@N#k83A9&Fv{59R;uLnfE0rkTF2aS{TQ$%Zs2XTImqCW}d-;*2E
zVHj#bo%uc4KfADgr7Mn(!k=Bmn09r-)A2p*To+)o^c0JarE{;lisqUtge|eN#FZjK
zT8(mCk)Aa+pO$I<nSxNM|2GAAwMyXCPEXlIB9}Zz{BU$){_#`}+|^UlZ3W{OpFgcP
zA*DH3nv115S(=-z^Yj#W{W)X`ydM8DgV%rnuWNrn@CtXO<HUcU4f<~jD7^Y|5-ub{
z`YkX!RF_;S3b&^q_+7fs|2IYn8iHOie@B*g8M*N@qs0PNjM7;dwU}yMFcr<hRDF|C
z<q+dW=@>vQ_x0TZO4`BDfykg4AFgJ+uN-Y>IqHT`jD_zrdS@0RcLW4gHwy4-GJ{v5
z9meo?L|um`Z8a>kY&8@Bb79pZ;N>d7YX&2^5_nn5NyK#9U6k`GCaK+51)LQL@ak-`
zfR}*1*cq6vxG>sWEg(?>uR<O)AHi^aHu@k-zps0uuPVaWr{=z@K!BMqW3m6h5d3$B
zFaLl#I{{-?o#=B97^TBQgp7AH)|W=dtuJT`v_TvC_m{VgEPs=2EZJJJ`SXC6^f0d!
z^j{dbCdsf6y{21CxFQM2IM31fpR(C=3rBBNaI;5GyL2kn<nIqle}{z#f9>n0t)!8b
zQU#p@0^){SFf;^GcuOR1+d@QQl|fQX*94&Hx~kEp?II~?GtNFYe+ypgCGbjRZ<e%G
zYSKRX&T2F%JI&zbGa0;m1bF!f@CxBlVJj^n=^C6k#6rMI{xt&JH?rUHM*<V8Nt3q6
zNuR3}Xp**(?JFIB?jn*mN9^t1W5J3~S^sk)XVd#A@6j>T+kht9hxDJ9Fn^&3HnXJD
z2i=(K;f9Bs8*c9IxXqo1r`J~k%>3B?-E9)8J7|@`OVY=%1#m5Q-bMdq@bb5S*WN6W
zYrD;>W7cQDG|3k5I>b7UU}8&pXcWLdRQwYqw|x2bQYkw^^T`X|O7*oLMKarte~yxS
z0lUpdwU^x`=uQFWwjLsM$5F23HIOF~@IfK{wbsPR6W`k+VQbQh#7WYZ04ZI)(AN!1
zLb_Wdq&1|f^>nE97JEOmzfLDT$0mW-MZ!d)>LU_W3A}<^%;m`|WRq4L%qwIXx<%ra
zw#)Hh{f%bulFQRJ&{`Bt*y5#Zwwb{^I|0N}vLtlu?k4msfrp0|Ui0R$V&g8hiG(pM
zvkFDxe(s1w-bEzxPC}nall7@;#$Zk4H=DsLT>=TE86-|Dv0;&i1G8M_$_bieQ+FXA
z0x0Irn~&F5J8<_)=7)rK8ixkaHmAxf3eVP`Na$0V$WjWOwP(>Nz-x~MykhfPXpmP#
zMZ#7s?6J#ik3%<$IbW}*t-n<y^HD_qu$XV>O=E!oetXe27k2^sE{=HEzJsmTB5bx?
zW?7^JUIH{ai)aawz{^Qa;CD&j)oHyWKlw(BMi%`*Bl`Mt6vUdr%SnJ&V!iZiloEaO
zc^SMsCWF`S)t42#3cF}Y_2JI>^=5nRdy>7R6*tkYUFjs&^jnU@SEEvh?{D+Q*LF4^
z3kbD$T!h`s^{n{xEI%idk=i{-+pswy);t>LB)`@7o8v-3tl3UZ!p{Y~XXx}|ygmdk
z*`K4Ngx_GXuURBest<4{R)E*W;7s<#OW<{$>LdYPJ3=k-t{b)Ji+b|-|5ZDN<^D=>
zP1P*QJLh4sTOzwN_0$Vc(J3uI4<LYSTSy9fGj!B+S>vGqpz4R?NCL0(5_n1Nt4kzv
z0_5`vY!dC4p2yYopsxv``r>*vezAbrbL?@n`v|XPD_OZel!MnwxYy7}kASQpwdOZ^
z)9R!#KP-b+nkfIg1YWWE1k@R59C-MQ)Id`XHD}$pvd@W)fzryWnnn@d)wL;P9a+rr
zPlW%>wc|q<PqY6B@bYq+Dg4_4UPsN~)$%LwdKgz^Fw|>h@U)(mDUF-pR%uJLf}YZ7
zB9=TWe#~dZ`tR8qo<~UGFwMOdf6=`B94gJh(p)?RUVl!R0<Xuv$|t}p_OAwBnIZ{y
znFL;wAnIl0iUTA0Ap&kv(KZIrpT7}>fUJ%H0bkNHWY+RS-)1CW9ium|q3IbzZEC=%
zaAved09124qum1nKw7xp7sqhwM$|E0JV;zDWIhkB+M^2jkfP%sk^j>)l;Qu4_NG0?
zbm=rg%T_~mJR?cA0+vKQ;l7N-=S_guNSy#IX~pZpmjb+^CxMp>BjwXA;MMdHyyD#^
zftQ<Q#Y+OOCJT5?#}wnlXniRU22BFI?umc<(0k=0`hxz85osmyx+8;S`3!Zc8MA=b
zgKKXveEdIY*!?$Z{XU@Q>OAymqK`?QjNjYIczYH12f8sSZ(=OjiRtRhm$!>W?+?Mt
zMYjFZz^k;hR1Wq%Jw3mg)L%@j6RUt9T^GvISgvhw;qa$kYzx1~i88(XJ2B?+AAVng
zF11=oM@=5r*9H@@CW@>IkyJ^)YttNL*{T$b({7PCRd-D!8oJIZG!x);1JB^*UvD+s
z?Z}q!boSrVQ8x*^hTBT%xxAdK(pE#C7(A?74O9Ku;o`^FUSZrUQP65VrApf^pQhE6
z70wZ7Z?@Qf&*}JTQnk_wo+Xj$uVt_)mkQ}L!TfBB%3?{na*m%??#1uxK%#TI$Wu1c
zm9m@EfHgSpI*+Yy3YU{|s4Fd?xFC<bf<g*Pt0}E$qNY;R-_%97YFLJ@AxUQzJzK#`
z-zWWi!wK$P-i^zaa2)sFBdxyY;j?x_3iLgfskrLH^4UJPy9N?b*g><QPe9u>YH}j^
zA*hV4hcn1Hx`pzHUBpzhakaXQ>Z`lO|JM<g62-o#BsQ-L!sojfGRj3lDWBRU68#!$
zqHo^X7T910A1kOf=RZtH&nF7-640$w>nz|k*<Xf*UHas$hPO96a{6oO&T}!LQi7z?
znYSgXe+yoHH3`3|-<-Jh3-GF;IqwSouIt$~YZE_*#B;HviVUISLixv5izqBEr@W??
z+Eyh^y?T0;4H!yKkb8L-PC}pdLZ7L1lk_>*f}u5(l7u6|AEm8pX=d<Jq>&;Lw}3Ua
z>^dKVZ)yX{IVF@9<jY%53yVrAtFEP@NkOHekCr~^WIvH$)tOi9o~b_xypo>|UQ+ue
zz-!A~d~R0|SlUn1z4PQpe#e&^4zO@*Ai=lNxL00AerXj&nYSs9*g){{Z<w<$mboFV
z6n9PrFXsvHs<MKYW>Q>GKN-A|9sw`wiq{{auPv6XhJ}6f7M`K_$}U{CKFwZ-@!T3L
zgI7Ye`8azSzVw6i*H+M+n@dSSF$H&0D2x4xm~(!7vM-8NXLHGH=w`?Qm@@cGj&sss
zIkKH@O!D(u(xuZobwj_}YA9`S3snekQCUy<)6>_OMez}5!nZo%?VrJ(xJChM0=yD^
znZNB}yfcH><obUt8m$$)@+{zGS*f&um%hD#mWeHh;{9~3u;<gktNn4{)o7quYuSP+
zz*0KQqq?k!oIL5I#ye!hg%Gj(V@~f`%gMx2Vw$wHN;lAcGu|J9m$cFrAa51Ul(z~?
z&k|bWbZ>nI`G=k4XXL!krm;Iwfui~*jkk}nVbK;A&ELaMm*crzS<c-O0V+93G$i|Q
z<@_!jzX`(qK-wc)4b5AaLlx$@Vg;`rQP16dE<|iIgO{|`vP&;P@Kplco*q9cr1;US
zps}MLWuKZs8Pu)w+lz^H-j(KHX)c!L<SFp_^T`x=J^u9&yl(LS00030|LmQKS5#NF
z|NoHR`@P><uhU6)ulM@(Yh&^{aYz`10%s*AQDb+<2`6yGL}Ox1zyYU3L>a|-Kopr3
zaG;pSVk)MBf*Poz<^g4r?{A-bYXS=yG%>bSYwaag-FweDd+&43{@gRYS>V-3;FUz+
zb)3K}?(L}u_UGQ=<pzOCNj`=;^#Fm%Q`LDW(`TdO>|0Ppzs0Tl(l9ywSM)@OLVG6-
z2K7@|`q>&Qe+<@tfc~nR7;I4xcy(b=eFgg4??L_3Tj-%YYEQleJ-6;@HcF2%d6)iv
z3+5|6c#?YwgUtj?LlX4s(qK)V0n4#JqxW<Kp0E)wYQXvjO7OVW2fgWkf;I6Uu-?9g
zCwB1a6cBj5N8oi119h(86^JKPwmw$AWP-Nx>}SF2sy7Bi1q6yFz+8uZX%tkqKY;A?
zTTq{T2bxRkpsA~eks9|Qb0LPMKjUfE3Yg+&qxGj*5Fh&=$f$hkW4}Ys;om`XZZ`DQ
z<*@2Z1ag%aRvgD*+DA@3Pti`y#?02t=FIlvfft)o&Kmv61D8__2KENlOdY2gTFE2S
zMlZvKu(??E?FDQ|YJpH<cn0iDrcRiY=_tJ!g*|h^v7Nvty<CAVi<|;C0xvFbV{feU
zC=gL_(;2z-WO7&Vx{U?#?WnMAuA#WR40pl<u`VJRp_k>T=yFce(TeY(?4U1BIX2g5
zacr(}Bw!bI_#MKz{3aAr=ikGE0FxBfu1lyQzzLljg1;|0hPa0klo%}N>ZpNABBH?E
ziY~`gNhWG&>vItA8-j=#dk}xG9eL_5be9}O!Nsq!c+YhNooL`U193ga#o7sLPYWb6
zC7R_F80t;7sYNb&wg<cvSoTUUpfWuipR9{OVCZGssFac3_$i;gnnv`N9Yo%#O_&q-
zJ!XG#1J|mQ1dDoDdxdBr(E0IH4z_Q-NU*ydIfo-~hrsJWw;Zyf6A-8FK>USc*m3+k
zg14t)Ph<%yn$@<&<7StDji1^U)7(qo(`y5tXTj^9(Fz%fdw;QTyTcX!I0uP41=w|2
zh(lErIBM;nu7*z8f#!-jG**l0Icl^t+{IlA#1ri4H}#@L(`y?+BXF(Az?J2}h+Mi0
z$Ff^-+x!GZ>k}7!Q~TJ_3R$ZJa!N;UP~frr25Pd8VrB3lEFyj0tl;%&=JY8>Zwcu$
zeg^_JpGCld2gs9lqf1tRlA}v-@#`S$xn6;j4UeJdbv?g`K%i5Co@Po*sYAEf%8%G_
zQze~&?U?%Gz^fGxyQt1|K0s>@4_;dr#N$pyCnPq%>#>8^j>U+`sz+>D7n;-dAor(W
zcx{M<Pk1GSN*7-<HN$voH|`wS0KfeySU})a!2<GUz{^B|y4mq2-|2_85pK=+BVKm!
z%IkO$ec47>8Ca&VHAhBh+iyX9FA}RJU@yV`Jlt)TLSrGAt7%2Ms1s_Jsm%;{t?ES7
z=S09aBn}^h<sw5QAM-_&#oFW6&-2NbS-YWY&P6e|xrQHhCFSE_NiP~Tz5G;LOBZC7
z*Ks*?F24JF5JD1)@sqFv>Y8}eWkz7}4rhC3q_P+-=CK2I+u9&)TM3%Z&gDkDwkPId
z|065fsJ>ZbW!#9@2#}VWZEGz}P>cqzHrAH8f)@jl3dA&$e@Z3L$(m5pX+V9CYkS8=
z)`Tef#vkW43J{)Bgy?27nl)xO_1(yU7xVuIY^`6gAHFzv3)@rGsF9m&`cXq!%g#xg
zkHe&&ZHdJ=DQttPIttb2BQR%11U{I54awvK2K&_XUOApL{DjggUtwNoECdH0QvDpc
zxklLehokJ!30cJzT;Aq`AJ;F$w>K-1*xpP2s3cot;M$5{92u|uXdzMS(QULqZ!%8_
zx?F|z!K^R#fY<9O9`JJiVc;dWq<KTZ>zqFiUa>atN^$|I$x4zp`Y)Zs;G+%#C(7v4
zGW6BWME8w%Q1Qe6!~Na=2ak6D8y^1f7u>%dhbrpCjD2+7P$P!h3A_saN^ld6fxK1>
zTY=#L0w&Slpt}4H%J=?X2*3L;)Mdm%+9-lXSp|zY7Ef-xPx&Tb%e#PqHUg&MHuNb|
zpgH+JQ0^v>ITj9Mb_M#VQSE;sgt_p2XfM43W!y@rldr+5?4$3+1YZ7>)^q}|L;^3D
zsfHN=PVl-Bz;CW0w@)=Z$Ai}eHr4SC2BikjP26_&ru_d#$LZgpc=sBV9i#ko=rIH;
z)Z=^%%dTLMI_JL9ObYCBVX8g~b>tt>y8GWz9QJQ0Jp2LbO3I<oP@eT!81CGS!PLLK
zfL(0h6>9@8viU^7i%o6l?(TN!Bn?v%1_l-uOsgAUEe%KB&ub7M2*Ir7F^DNvpm8*K
zDM}!YUxm1>3-IwjPGi9j6?oW80UdRUy=`%}fG&;#kz8ce^MMEtUUe|#?n8FmHuy)}
z!u&W1%Gh@D+6I_%LXmFUPF}F)9@3i4wvnP%sEW_v>?iMGv!87{`MTZ_+sTK#zYL)<
zB{<V&fszHaMlsAeYmok<9|YWX@)<~NFrZV_fTk<!aPRaQ9LlK1*#;ieoZyvD;Po92
z&OU;h1?{MzfX~u%8@0C%Ve`D*Sheg7u2yIuadhNV-uzv-e|i<x?u)~^Q)PJ6qT=4T
z8(F|>*RRnAUM31`wV6~$4shGae<E0m@U#}>*w)(hDvKaF^9f=$&%yLH(eOG{jr=AC
zT?Ud`w24!3>To2s2kpl0_qHQ))oG+wcA?g)g+ZByjt57OcxVT9goPvc$OC+nB7>;Y
zXag_)O?fT_Y;ksQAn<9^j16A7Bf!h)FD47W3z)9801YR-k+5?n+4D9&PoV%&V+XHV
z$V+b^diA$Bu;v)9mWh#7_W-H;0+F=cnLZC*{PQ&8ho}sni?f>rSP+?mH91ev<_Mf9
zfD~Q9`7K}I`_-Fq^iBhA%X^_?=b{zG;L!X9*yO(&N79;+ZMFsS%3?I0`V`T@KA07J
z1OefNxYuq(m$nXFsaueGXcgw~zKTzx+fku;?0|^g&V1zWT8q=G)?;6s5Ybg;bW;7$
zH|KC~{KwUweZ;Ga>Ppvr0<Spi^FM@bi_RmvUJ1D!yy~;ufY)B+{u~VNO>vlWuo^<g
zCK=>E?HR~fw*X&x1>%20u43tB8LCxI@VdpOti@$xU#<ytavOM=j4t)u1-zPKP<ktz
zuczO!^SbnuM%Re?E7*S@ciZ%%^mT0t`dUaJP=y2u8*#2f=eYLrC3_u3;K5wn@2ZBR
z={_#4KZNKtXOK~?MuVgNk>1sDsLwwL-|vz!E20AT8=W%%oNe6m!7GnV`(&e3Z3Srj
z*%t|HJNeKUZX5F=r7hq$=b$D1N9T6(spQX{N|?n7s7Z^!!tKuX&R_>GrgJy#En8d5
zz)RCw1o4>w&Tcy{Ji?D9wwFOl9=t}|lLs#&6y!I2JtpwFRW<^=?%P2(Lxh-$ZZzlp
zgyQ4~tcfqergS|dMpy8vfN<|xTnbr-Gr84B?zW&qZ*i&bHt@38!Rsyxewc?N!5`tH
z;3zCTS&KrM9lYuxFFc21^H(CoFNErc7-^jfn8asLd5#CK84DPAkq_FzOH+o{GoK@7
z;~cX0aReMHL2ic$G7USvAcXg~u!{&f-GV~S4rD`ZI$Bc0ux7#g_&9J0HeV{og^pgx
z*`_M34^b2Goc5#E)_#1s5s|4ixY0r7)!9b)j8o`0ZT%tZgIQnf0k79nJmBU2;{>le
zZyI>rry$%9@?*b)HRkQ92ljSJBydR#!9em&40RYWY$8DE-Ud^}$EZmX;9;Zy1(9AT
zNZNu2<&_Yr*t~eUMwf`;$`3Jk=TCJ1M!G)*LvkyI`=l6FZ->5g1}bA`ppdOQX_P_L
zXTsBA`b`^yr>XB@Fp=OZEuI4=c7Srfp#-|?tD!ow0Gd;WV9I=me$!(N47R{pzZv>0
z0lF`4LQlpO^!5y5u)mdH%8%}Um%xjy72`+FhD`U+pCLdWn<mNRh5-E)x#;hvJok~P
zFLIk}^d<f``tE#-f$B#DWF`#vx1e9V0qV?UD33})<s~r;ihi)28qu4F;jYUVD87zC
zQ2~bOyJ0hdL2@Xhhi0Md@GKNv3`L{30ZL5=`Z|wexO^!FZ~U3hL*mr!!)(lK&1}wW
z|2*)js;Y8;*HnRv7d;GYN(lvNR<;vacNWCi$FO~6FqSUeft_)wh<;d!9AOE{N`xq{
zc!0aNV{m5M66{*P9E*>pV{5hw_0(xw&F!!@pG8SZ1Oh^0;Iro*GVA2rv$?51vRat#
z?m<>e2z(<_Ac$#2Ne7z_)d@>o5`-~dVXgmqES~obj$F;gotj4|Es8~Y>@I{ZTEZQm
zd^EiYcPZG_5GeID-a*!mPjPtZA_RxUAvCrKX%A~ql63`X-%x<S9iSX%J3yHLLM?*i
z#@~^4cs@dZj74aa5O?mCK~z(Knz~!axtWBcU&P?}hE&`au@O89I4mM`7GB1=FGKKM
z&<-4kPeXK39qv~(pd|AO()S8*c(oS<n@?iJsZ!)OcXQJW4Wk1;`oGnzCaFP(Fa}9$
z{qfb3c~~EL4d0}TkX=%Uhj(HS8@do->_BGH>-Ow!+na6{*vQb?oPnE%*J0n1AOua{
zhjlA&Q6Q=$*fda3Sqf=!9O5?yW7ij9*pyI)$Vv;E)E4KP^7>5N+v|gvkN`xa5U7f+
z1U?oUIEW!BNx@kH?g*c~h{<liT?*2=IPh`?kgSa|n)txcNcNPcZAI#d&#~;QqgWcA
zimRE05S8bmrXUKbG5fG}!A@-Y;v~+OHX*0(K5p;zLqh1t^zFNY8D(|o&fJ3ZpO+zs
zp0_wW4Og>^QD1c*b>s(kVzy&TfIrqRT!-&&)F4G+p+KJML}M!MZJ3V}ivqFb$W`n~
z6Ctyt2*p`(NZG#>`-2z2D>xEC2Oc4}g@P=r9Ok-nD8BL?z6?EppdDurpLQQbbtR}`
zTXkPKguQ|QtoB-oO+P)r=}HrUgvoJ0?YR2$-G|uhR@^6@8?D8V<i#UguoIg<`W`<e
z6(Fa*n|zBp{KjnD<qo`^$BhV`t?ofvQ8Y>}?83@5KVW`vJmPQPM{#`xDjS4&kV1a5
zY96-vEx@$(Nmv-yic)UGs~l~yfk=t)K}bv%_S`k1R%UWc5q9{Ykq0lUhT2&Qh#mFx
zn|x$4z-QCZS_#Nf!VyT{`_lJW^u76o^%Y3^Dnl%{7D)#k)!XOWYa!X|7?y?K!=o;$
zvyFFg^`F~tWPS*KjJ=I0VGVN2s>#Q4P<QJnZYCYa7cmbIe5(W1Qk|pRdYAggga@x@
z{XExVMK{|3M_vbI#x~qJycC}Xhhb4@EMo3FL}5u5L}}mP+L85`xA-dv)?Gw=nHo(-
zC3;)pxDoz9m-ddmcrlnwV+ZWEk$jz`43eZ}xc$Q%tp70@8_(C`ZnG7Vh7#0A2jX^w
zFSk43p1UT_o^15eY&Jq(NA-A*k4>+oh-tNOz@`^xlD>VoT?Zr5YH*got0n&=gco;V
z+1^u__k9YkWIRG$O)08H4{<*u8Rz#ML|k|@QY+g~YBWP>vW%+l>_rQ;FC+}S9{o5U
z$AV{IZt(Y5xR(Gny%55RJX8szksf~lyOw>2ZEKTowN#0Eixw6|D(X@WV%>tRSU7J#
zj$O+_MuP~&wIn%Lk#T4l4zHaHpT*%=vYWtFOfeAoo24!ug%|f?<%a!Ouq7HXxARe0
z`2aPAakzPQ3zi2=!<_j`u;p?Y&P%N1Z*23TI`m|1LE5<O$69=Qy$aXc&1lz}`SMNy
zyzF8JFV-h}!0YuB4|uu%yxHKDIOkdLN_-LdPm<3taGk(HD8{g{14F}IuoyaFP)T7_
zwZo|IfngA^5WEb@wh>rN$6)H8_>q}J`uFN843yr-piD!6Bgf!i2h2KlpBBBtK>uJD
z0o@L|@2?oV{ztm!Ly{;A<cjgM*LG&}lScGY2i$k%B>Gc?y=7EfLGvd}a3{EX5(w@t
z!QDN;;O_43?(PJ4w+!y??(Q<U^OEQJ@9sJ8hu!(obMCFFs;=%^)3>X-epUM7FF10?
zFL`>H(DP46)V$#x;So3u;BqhfII2$u;;(ejBh~u3tx;XkU1blb!A#(=XYaZY)nK<u
zHGH{N5IC;K35<ycL0_uYeENRf|3IW(`DvH@g*G@x{HkwB(snV3uMi4?3bVW9YwtM)
zL+ocj$qwm@F+w(9-l!AaZRyfQlwv9((=Br8RPlIs*P9Ve+bs-Y=1cFK6%!tC=m7l-
z{e7@ZsWKOrZz&tky#nsN^P2g^w)3TVrwbxG*`nUENd)7%6qt?x$pI8RgWML>W`B;}
z^NKhPcXGgKAz`fiRjJ7zlCw2x&`*r@P+ylTv$3VLsD|HaS7_ad?Fh%k0gTK$pGDKc
zNG<1A!7qu1sF>sMJ21r5WQC>#b;fQVLUJZwQkxBbVg-HIeGox~Pj6h~qC-HpLT|{A
zpbSOny(pBbz4H1@`g?e!>l-tpMr~jr5M!o_+cfaYJU=p4=vqsFP`KC2e0)`^$hwH?
zcK|0zJw@^9MES%g<*(frCYm@np2}??<dV8FN>&l_x`bqksp>t<q3{072R;Ue_{(=v
za4fqCTnhWcSEyMsj&?R*Tdb)D>Mt_ksy{z^u?_@pH8^kU_UE=Snp6Om{tAuH<Fi|@
z&juQ>lM+$NMMv1b28#7Jf_tPagF-XUuRFOfp(`8^%pH+}y240A^17DWUFFD?kf91+
zx*u0OD548OTiBNr1Nxz@F>2<ENIe!2Gm-B_`=ZD)%^UK=GQ8({D{IYZfqqJW?$Fd$
zgyPxLSedE$V=#I(A4Yqd^Knr&GW7uCZBDJF2To`Dj4-1csH>YC2%qX>_19w)b+2!P
z6!!Zi^CzTMW5Ui$(!w#4IWR)2H!SmsF~S#adO1@!Sg>34SLE8v{ObNt-1;>)T2R;c
zbMmzwOKmaM;LooCE!eH#0@69muMDfJFr#YF+ZjVPH4o|-e59evuTE@4b=rqZ2UvSH
z*C#Z4Xe>mU?1VY=pa7I^A>A&^M;fhgvr!a1kRQPs)p3FDTwfH9^J1~Xp+r=5=Xyb>
z=w6)ytQ2~iB$}PEHAzP%8v@|cJ1U9WhFqI0sN{`qrZYRLzMC&poKDP9iN5VN>B!X)
zZ!npz8+*27Y-8gptC@h$d(+^26NU6insUd$W!r~+pzDR3)PA*c>gVXR;{ePsDl;lU
zQndE6XlR?|mXYIg9t6-mUC)XqNU*FJpe$z+ye`z1D)Vp_*tpLUetzeohCFlf$SPI!
z%*FNH3zNL8727HqU~Xffhr0-XTN1pdGFAO$Vd~Fy`OO}=y4!w%$W7_(514zE&(~Kz
z#BS^lo(OcesG(T}UiOuu=qOVZB(^KX8)quK{lg#Bi+t*1V;@5~2xzu;4~l`b?!;0D
zPra*?*zfg4dU{ie6+G#Fp`L_g%9bZ4-0m6qna_2NF34B<TrP_n>6YAtBj$PIYhjU>
z?TnK)SVgpJf%NFYk3W-0UTWB9$c*)7agF8Bg{!t$^NH#q%4rE)kNS>VnpcZ1_s}wb
zd{|yui>NIdX{|LAa0eJ~B|Ob7#H~Ym6B|q)e)M6(#G~5%g~EiafG(R|E1|Tg)^apq
zy4foH1~&1bN4gX65q#-#+4p?@QhSxKf0cE^IR9X#e*I)$!JQnI(8^m9_i$ZLIaJ(M
z7H{V?h!*&ifDF;jz^#i5JhbfQSM`agPeIw09@BgEy7#Woj`dAs@}{clUqLooX4QIk
z$L%@jjQIXe+<jW_)Ai7$Q2`s%*F8_XGq(WsnC)khfN5o^gmw=u{P22jur0gbok(6S
z02So7mC}yE+|oQN{4DdM0>#*?76u5A1No-BOycv*$NHtv8;X5EB-h(?lGwJ2_vB2a
z)S$jCP8f(QBJilj4Lvdg-IqHR<x!+#?UCiAHuuHaVB4OTL^0Ny?tKJwR$Pwg#|J*^
zxGhp06G8b9L*eya3-i#Ds!JKHme;=&C0O?Vx`sk*Ow?am5&xzXv|W|q>TUoNT;&;*
z7wq9$mZG~fBRiEGvt7q~8|mdrMO(z82x`!S4wn3ge23xB?WFlUEdk@YVh1hMY^*nx
zT-{M#Kc!|H+!g7qWVB^AN{U$I8R~b`%=q<=jVR{>;r3xtP?O$2uRe&REDU^*NnNF}
zW+c)z|EyaHo%`1lKB5-6uJkkgEjER2O??`e%E+bZqxx{lbZV3y$Qu#xLS3B@h~11(
z&sfh||Kz%*qM>mNR-H2aSQAIjwjYcCq)*PAPGfy~sEto~bOQ<?A^GY6$9C}i^sB}b
z!V~#G&m<Z8oYxozN4=4-MlzmsBtk^o5S~pK^G|N!DjZ<MI5qqa2@p3ds`d$1B00BB
z=#)oIdObY*uig+p6HJCGq<kBOuG<Tl=^dM8yJCRDo$-+4M57K?eRKiQbvm{9N)w)@
zS3ByrtL>(=dl0vOlpY3UL)o-}rjU{GltB@)T4u-?A--*Fl@6V*yu^-(4~&hFD*$~4
zZVp2<#lcs4eUBo|^t;!Y;d3sD!mndkN<tk?u2yB)B(DM~e$g(YhEp|>?n~{4ePV&7
z0nF6h-2h+CjjxcE!IulvOUZM;{3145Rr}bSB<V2)ye*iSCMyO`Ql%|rm2#VA4XM>&
zxXiEZ3=F>QEaVJi<+CNGJ+d#+s2eOgHe=*+n3F4#34P6==s|*mGF}T!2o?r6lOc*1
zB18QPVo?mNq-47GtLT=|)z9^flo8PXRh+VzOG=87A_N2(#exAGAg@5z-Qh^wsBw$I
zmUU^-{tQwcUq<rTw+>2f&uy00`D{vk{aLOdh&NCK=@W?O(xwVoInNAOsl;<QP4%AF
zgxT^M(s<P>G$Mxf4Ey#Hw{-V-Go!Hb+eE%(d1YK)V3{(xkX+`Xu+bDd4sAjv%65fE
zr8;n+{Iz$VTC>WL6d{==69yeeP3~=Gy<1~7<jt9r4k_hoX8Kj|o}ylSz$JU%(yE4R
z2)ir6oFo}hhAv00#^r^MR`$}SVN$^pIaxi}UY5&*Vm#^_<<fh;rtBJ22Q0PxMD5A{
z25UiYa0B{RI_&c}5;MyQw79jEi1(SOa1ku3ilK1A3>)hbRO+4OUWiQVY(p<ut6q6A
zdo5!dMvpV}6})=E&*)2bVNBFVO2Uj@U`a<j99ki?bCU{tBR!jkm1lN)xB@w&?Uc!a
zaULf<ICshWlVS$RR|XAa`b%3#o6%o@g!uBqH5UGMy~NHHG3%wY5UV4{#)O)n8;79j
zogwx^ABk04qjGvx7{(6+t7(FYC7fXLC##n7T6-n**2aSKVOiengH>*1;8N%+j$d=P
zX@GtsWKr1-Wl@8m+IVk|3VtnVEgD6AnSvu9M$jSK_9JbbNiE#CB!%npX{~nkPsI`b
zjOSH4;ZmtL$>W0OQ9$ev)znvFraHdb^SzH&s0?~#lBxm3(qJ7FQ?@8izv5X1Zo`FH
z8}}i6``DK^&&*8@glP)ooz<Zn(9?*@)lKbk%*jhPP}NW&OFoS@`e)xtmHnK~QZzO9
zTg^Q>xbr57s}~TroSkqmDWAX)^I#X!?|w3)inRJSe3+Gan*^!gO~1DI#&*mW3HU(L
zDG7%=t`1R*(5<<T7W^BA*z9QBlCht#1@SU_%&Padl@%24f(ZKEh}$gZD}ArJPZ!Jo
z&&8sk0BrUS@E)eKk8TiM8NuA`NL?k<quvu+afZ|*yCX&D>b?dX-!Qs*V0Ghm26^RJ
zv{}l`2R%%=jAOqw9~zK&)sA}IFl@PRa=v)YKHgfxAGx>vV2-W25&d{Fd!-8>zO7)n
zuYkf4zw7O~JBH-H%=<{@FBDk({t@S4yqWayQ=9m9mi4XK_?jDh<tC|b%i_ng^^8ra
zqs+)=%O;HeW;cmn%4aIS{L?P6-A9)r57#3dJo5AQGzw`6j|=9tGyGOI&%o?pDI`D>
z7VRU!=O76;5qWe`aD<tfoSORh$2c|w`=$ffam0}6l|Gvfk?SXDlzkMBNAD**x9H=9
za?tvuT$sTxgIrxz=&XFy#`%3p8X92*1=R4gn$FR3QcLAu!Zl^AOUR2x5s656$Q^Un
zY;&Q77<*KCQ%9UjTe-4}z1=B_D}g7foG{u{mECr!%ztxabd*>y^NaFRXJ`**=qfR$
z8+l{D?j1)pRr<7U^>?)wvfVo7YAeH`YHO-WKT%ix(nBp&pa>DP*!watrZWj9TpcI$
zqbxYJioTc$lL-}G0q|WgKrlcSzQ>V<&>ETlCB<Kn+^Gbfu^NSR7AC=-FY7nw9v%dW
zwq+$@eTXI@KF6c}<nG;SA8&Q&wSx2{HC?%2oH%@(Fht{qsb=nFX4%lh@T^ohsYRu*
zQ3m3?wtI=w4}A4Fo07ew60AR!Wl-Adza7yXK{k%dnilYotnieYWu#VR0_9p!$dyT}
zh=J#dW<Ok~$_yb<^cz&0e@VK_%L7<xOpV-J4(Ua`-$Ep+gGChskQGR&q#{UYXm%Wx
z0ooCwtyoM4_=rG9$rANveUoQi_d|S>mz&6oZ1x@$X=OTecEQog9Oe@aFLUkN;ez}!
zyzwk;(?1P;GWHE<j-@PIhgB}_*UfaO7*UXh`<`4PY#($OH}B)O1}H;Fc;Bn}L66U;
zByT@U*PyA7%Zd@|K8bgj60zp~<hMa&C89KT;D;}mJI3>_?C~DWY3eo1+&IEho|sPw
zcW5b$z19;5=B4`ob#^T0nyQS;FKR`fA77V0S%MWoX_&zqI@XX;{El7laP;WJMZN-c
zkTOPGvX+c`mzdq_NAuJwd(!mYLE~i>g{Xdu-jIT3o=nenVwr!sUv-YE^AQ-NuUwnO
z{WAx#jbqDB^F#fmX!ooD--zPi@OOaMpg_X-hj46oxV(y}l{~6NNH~X&wc-&;F%!;M
z1;Ov;b3**{8T<k3n5Q;_oiklUi76Sgu#$G_$`a8=;UMEQy!CUk=WNg1Su?qVOXEd%
z%h_^eG2h9vKPqU6pu4{^-LGL@a#rO4C>c%G6^lT+y9AQTI_UXxs)kY-W$&5#I2cv6
zEW0hEIzMbp&3h{_v?l1Sp~k-)Dh0yU5=c*`q>J<nZ!DAzM@&rI>W??Xr5pH;iF`?7
zztsXym{e2XZi84$Dy)N*3w^Z;g{2xHX;}$x*&7X--hCl{I&t3;-kG9DOfS*o+rufu
zqJ{+cQGdm%ff}3@Y58MExXdos^2WfYv@!gUCaq39_N>1^QQxr)0jN%K?HYYMjDn!A
zq;~!8`iJ_OUzhLZUJ9HJJ1irx@9!EmfB(zCvlr8(1I6xsME7QY+SK<6f%#z#SKCJ)
z(9zXjNS!aPwz~9G6UBlOgjc(R=Q#1i-Lo@LJbN;1Z`c^d2F4b~H^aV*5nzk;SN$+h
z&<PI0dNg(wg;T2=@pbGc))SnyonB3HPIyn;KKy?N-ZQ))#~9HL#A7zIH7-*{`>HkV
zB0r1c=NOzIzAU!3zbx%D@o+0LRPm{ku=0VO-f?-4hnWFAS8t1Exi6Xd$~BAMvw4|^
z_F!oqQOis&8&eXFXUEfop!s|oVNfq1P<mUQ_eA%!CYbTF-VJk1bP)NIy+luE>7or#
zMW0q%-p^C1xHR6TFRfq4*99t^Gcsfj>_!>ecrHBskHy%7>7!NTqMF?KpEZJ0O6Vu7
zp=ZCH?T;-+%<*r8+!;K#3RKs>UEFrou9CI|FRxd2NJr}exB=X{7AS)@CfaZ7UcAn{
z%wulVaXxM=RqF%y*p<oGX8NZGupFmMwl*>B`htgKWbJshGlNG>JkHg`f4<zuiT*Lu
ze?M#aEJm}X3}xnpYAy`vOvY%A|9eVHCo*~ja!&_wP%Y<N?C1niizYVLzf#7a9&V{3
zN}_?-U_NFz{PVBK=D(|bM8Fe9pa*CR^X+9=X!1talxp&+@zO(MvXckG3kuG4O&Osc
z2nFqgA6bTl^S6+p<|n~#-scxhhCa64p{&7}IT>haod!!b4kNaM?$L<)x0|l={Ct0l
zqka3Q(5)R2Lt!vW{5QO62<AxSOr-nz&+c#D(RFffj}AFaRoM{SHDxW18Tf_{m-rkY
zeP66y-8x;4&g7S}5XNIu$FFx_!zE<M&8p#hB+=ym!rkJL{nwNGwrsw2%>)PYX!+Iz
zVF<Abrm4<XihqXfK92e2@<%}XxSdPqEZgpL#AxuBi`(IuZFU!i>pv8e1vb=woWUpS
zpZoy)E0+Tc#X(*s&bu+rJ|5XVF*BEjw}ZDfw!1dSFH5KXQVgb>ki9ITx#q^)y6Ktw
zj4SLh46SqJhfCHK?k7vq+irIcM#mQ5_e>dLho?_>Hu>*d**Slob2J$kmWyqo*Ec|S
z&aX`i(?ro!2x>(2R%&V!*;VgVE=%1i)m0gf92fPSJnmKNq6@`wPXurPZL-ysIwZc(
z7LD+d<Uvz*KIiHj)ZEKYu=`4@2aQa(nI^To^8w?v=LLk*<jMZbuKv_cTR5z7lrDeH
zOM~TbOjy3`AoK_2k~0?jdh}c9!=YEhm6()iojShMyZ#Efe}Q$1e}Q#7|3!Rz-#Q2&
z9xQN&KllvRZ}E8Z!+z_!nyQwq_4UhhpdF5Bd2dZe7Iy$*dlrx<S$|16c>4m9r&4RO
zTB3gQf%-6IIdwUGIdj=Nf9o#4>rM-7c9ne-r`71q)Q8YQ*|4tjZ_zQ;M3)e|H9+ie
zQkzIL#mbQjeR@#cJvGvMJ;|ZsP-friEMkp&nn^~OJwd`Ce=;MKZ}9J>+xvleNa=}9
z!)1%bWsXZb_eW-^>>xyJ>GRa+)FSLvs&D&`-yc7As?n$Cg-@R&=F+Ag<ofuF^!Z)d
zvLi28@M!%IA?SG%$7AF%jC6!lBlhkA*3Xpq8V-bh*(H2p&8_#^lpf!bOxtC*8ZXH!
zo)WFBnXvtRTVcP}G@9{6HyWljHMUr0B`feZ<;c#f{h%Vca&Pa409^3fFu3k3eC2!5
zxC*};DhP}MXusn>C%iGn;`w$rw0`rGZQYIV)4Y9|=Lh|f>vVq4{!+c1c}@WiU`iV+
zOqc_*q?r~oZ+Ou^zeE7|pR-F7&8VK-72afTJ3!eFb>2Q2?@aUd9f<s{s6H7dm(`Nq
zmCtXQvx~~3Z*?P2Wh=|r^A8R;C9^%c-_#XGb4{xRL#(WDSJg!;>!WUCZYsj|Q?mcC
z|0+)wT37XRo)$_>fmI-(39PA!)hzyw0k1HyurtE4hR0@IiG^=8CtH=3Q<0Ue_G1C&
z-|jBvzujGit7{*JZVN2K5IA7I_s7YX1E-|aW(taG%AEgZW+i<2eCZ8~{Qj9MYrUT$
zJ*(Z8(0-UAd1!RHv$$|teNNqZe^Yc)-KoO;T7GCjb^qLW3!++S-vqclTD1HOY0^NE
z)l+(*RNc<5OiNr}JNy%ZUTKvguv>DQts!MHWoL1tzHv6`gL!}RIag`_%~iMhZffg;
z`Yl$C*sCEMP0;}CWlyrL{=lb2VJ@~9*FJJ0P^j1sY97~RHVVdTF*IBJ_@m4}V)X2^
zgw4oTZd?7;<PI_)i<ci~Z*->t=WqXZIsUT*pTtK7Fq3eLZ#kVjR1<yugcgGT-*5K-
zzy#b)wc0wP$A9_1I~kRcYbeQ#BGdiZ?su|Uu-OkH|Nn7A1hksQy!j#w(DJW#oze{B
z#=J@mYY+ibqd2d~GMHE8Ac0Gp_sG90RsV-6&$Xfv&Cw(4>~rHxjwPSi!{EP(*7u)@
zM&N2D>bn?nq)!gue|w*Y@E7w|&||yU={oJT>n^XTh(y1CD8ESL-9i123Ea~16-x&a
z)w0;taMy|d4JX>a;pFH(MdBPBg#%cYZJ)($VV=kNNZ3JDw}4z&8`y6ZOC1FXlf-!b
z7Y|PTOBW5|e^Ftze^KEZXyV*gFv7#v79l4YM4;>kG*~xzXJo8ZT2xwP+IZSI>#j7b
zAyT_AnShJS1NCL#|7MgBc-Q`)4JDJZ?f+)-d<y;e1bh7lt|?`Ku7}ePk|R?t=T7m4
z?9PJSnMvYyIr*(s0;M1|Pjw{twJ(UozvcXUW88w&bd&y!bh%kNOLN;-o4<pcv(eGJ
z8Cbiz%o86$#8$`Gh&N+tz_h2!h{YKC=x0>~xwG~5-X@-wQ9i9@tDF#n{ZnW~+W0?p
zDgz_G)2Lr$`=tiw#>S*=^XaiZ*Davy!cT0uUram9s`YBj>h<c(8a`qscg`vB^1wFj
zG%7$h1z^ScsN93T;`K2x$>zL%MYpq&{(f~ZZ~cCMh3Lh7y;HYy17iQnI;dVLctkOc
zO4F#KVl+k$dbyb`I>;6DTSKGv>FH@}owUBbUX>EV{~USVeBQiqr3r=N6Kh#4y*9lu
zy*0f(y*s@>eK>vGb0>)ogZ^Q}8uXj)_uaC#$H!J`65ScgrF2eZ<|?jMfe+q_!DjGJ
zozjA_*R#aDI_07fRa|NdqpGvsokpxY^fuYom5p5V_qjRcU!C+cG?1EvlsaHw-=ykQ
zK0C?A=fj$C_aPh8BW9ED+NyT&3498{wop;~ySD9NEt$eveS5(>gZQYv`S1<F@xx@l
zhpzku`+QvLZJ{laMZtJP7B`uVNu_B-U4z=esM<i6Ru$-Id5qBBR$r9Rd7msNE4y-g
z>sT`{;Ii(BU8PKwcIehE2L?8kWt(i?WIkZNV18hJZw_sNW%0v;%|cWOI1{k555T1b
zSXmtNqDH09OVW>Lv{*Sj$Su`xLnIR~Sv=KyCG)pKm=z(u(Il1ruYpwEo6u-*4Z1`r
zRi^4Dnff{fhJ%k^KRvC0kBj?>76>;RIbSh9Hh(scxIh!#0hYd#MD)+Bx*&5+O&g=l
zC2B1j7Ry!^lm25dwj0~7><vz9IcuWEwJTKoPWPdKVC0oY%mRVfq@1+6|1++=A>|FL
zm7C#eSNtDKQ*!It2%T%?ya!L78}_XPP>5i@kU>FGpH^07X7_ASA<taJuTT5mf`7m4
z9|w;ckDipPlqd62(*x^VY>F)HtY@%HC@euv6Trn?aa1EL!$Xsj|LG^!GmDTK2wv{0
z?Qc;r^>IYUic3dB1I8KiViPPFSS-!B`uOj0t#QEk)>T5)<J!iB;+Jr>X6n^`sT|M7
z1%##NOaA8cpr)7c^G9aTYme3<^ZQ$sMzLJ`4hJ0=m^fgtl~4dANgSTyVN~WSf}nnj
zx}yg&xA)6(|AbJD+nJB{T4~(3o6d8z)A|&LxEL9QO-DqY!}n>(XAK~caj~nFb6op!
zKikZo+4Z_g*$skEEZtX+^$DxnAODy(xdve`S6x0ju2=`(hUV1#`6u>>)`z)y+Jh2s
zAp%<2`^%T{M%->ue)gYRgg)H=y_Iyl1NE7dO``EBD*qG1_fuQM{?T^Ie^}yRXhI-+
z`hT#!V7`6wz_p0~k}`ghhIjmW;{Lq;>1Nhykph1qigYi)vgcxk3zG#hl^Do%?9tf<
zhw<p7CoakTCjA5q_Z16N<J<lem52&>3jAa#FY3CF{wd`b?sk&gKfy--7lLXl*YyY9
z$(ziV4xdgJ0vIr`226IlwE;Ww!AcsS`63&z>NI_|Y1~NT0LP%}^b=;;s$Yhn*=}vf
zjvAqQ1&;oo<et<0MkIPUq)%|^L8V?7>}^)A;D3t9{a+MWdDr?xDlVY_UcZGbev19)
zR%?-be|?4MelHi8!ny?$C-&SqBZw~ish`08Pf8?gHP63x?*H8aF#!+6fRw9GfMnx9
zwGH=Nntz4@-%g_V*W&%Z+rvzrPyNY(*Z(o-XY1^m)$<ACoQeu?qXrWFQ)3LS8b}Bj
zeEBr+Kixl+W*-P)u2%0xtyHr_I^e$KFPT+uT5F!4Xg4-BGSzRNRh9ppxTk4vJ*{x=
zl+G&G8?t5!X^=gtHG8v9_1j#EjfIr|g_cMb8;j>3OD`zM7wGwf;QX-0oln~)mxa^T
z_vpFFi#!x}^|bfaws`n9c9_t$^$F7Z`BBijiYG<{{O3E16%KH3uy1f!%wLT*0Q(;n
zGpa~Px0JUuWOXbopcohU36vZfO38%?xbD3cx#H^oA12fPm|%T${ttnvJA>;m3N-yE
z?kX8sI@>2TIU4X<_)1d$>OYtAO&MK>V}?9{RZ!I~IRC>`^1o!NX8z(nAvxya|J6?a
zld%po{X2xwe|{N`7LfA#$mBZD==vY+6deC)?BzW`9q79^5IP^~M?~%py;c()NCIW;
zkP}PXy)E1Fe9MqMo0r#$v~oes!1c}bH7^z0-7u$Tn=#UZ(ALGdYi231NfZJR6`Ips
z0H(bIiYp6q0HN1bLIBdBgLw8vOWMu58sUi-$H7r|Y9ZQrm4u7Hfa&J6^Iq%4lk^d&
z2WdpC_R71-Q7~->832+eUbHYAgL4^lOT~9Ioj%P&Z_JIE3wQ)<PWc|Np>sh4Yb3TI
zOM^Uo_k_gp`dt}9?LZEc3#$$m<DtJFJfOGFOhYQ$A({kG2n_Tdg=#mNgq>a9b|;>(
zzef+PL4UpCWb~YdEkD|=<f6s<Jt1V_oV(5k8B&QUl=4}Q`sPamk|d5EuV<rg;8ZB)
zg&z@)2efWObQdkuP6fpvKQ#RlBWN2>V61~bK<yXJNTcbS5D``Lo}N@8mPqB7T8_?f
zuW$IkU?+|{J?QI>jKEeoy1}z?nA*01&rJ%NgCIUs=rda<)$JU9oq+QZEnv;BursLT
zA%z1H3bCIZRCz#B3aPbZ=%5`KaTz6p`BUi3hR3b2CvWMHzp0z2ugK_U^G_VgZQ#_B
zD5RY$$O*kZvj!o(Y^aiSy=&BYf0-i{E-Pcm{dLp@b*d4P>99TZK^QNG-vnu{`1$>w
z8>@9s*9>Wf$Ar^MB4`wdm*Jt9loYS}>WB?w+_)vj^;}zO-k-y!h)zy}43GV1+2Na8
ztauhy9TUPjc8)j#PhK%8wc}!DgnlTm_S!xgv|ELpT)Yf^T<9dKlMRw%i?&(h`jDfX
z++xtk$Ow+aCyB4Pqft|r*<JrBd>qut?vLkJ(O*``fYkxj0K$~W9HD+k<W{cv18I|n
zsLg{^1FL^kG@lanZhhzPfCb=R%x>+U@c6IXl`iF_L(NB%tLxzZDweu%Avb}utZDX&
zJgHn>y4^wCGxkD9;Q`gb0&;f52Ca@lBeuT786&bJZ=oA8EqLt;81lVR5>2Rw-kv?B
z@^d<BCm`*6LNO^~8!SLjgC3PuYYRsLce6>LFQ1?uln)+^`7)3Xn7)V4o4G1$N6s-Z
zJHD|Wum{>z<6ca3?#90>W%4;dtu!&LC4g(&TEhN$yE|fC5L9}=m1W`F#);Ouf)9hJ
zXMwHW<!N(A-Zgx(sd;&s+^NJpb~OfIF$vQeB5*F_4vnOS4Q6{oPqu4BA{EkdtZWA^
zWBc<T+@$&X=NE~-FwR*Bw;$+~@J>fg67<>z?b5o++$MQ@F^(t_`8{`IltegDqIUyz
z!ta{CXPdr+cz(p|cj(+Yg;fNl>sGD9-R%s5$~Z3QGda;6a(pl)R&jtuWAkCZ&fN)~
zvf%5Lxfv|HXrmq5J}-xUIw@iQMHG>%^v1mVcSOKN6;<X>aiKgaq_Q3=j5(;O{p2TY
z)Ha~Zsr=ijo2xhAM;%7_)xd=0>-1DmIuQ(47Mkeb?)IG5-j=yvJ7}^*JvLAV<-5UK
z_5Du3AHu1*=G?+%-y(?=LN>N65r=X(r@{N}u4;$cClg6e6Ct?d6z9CWO>CH#8=v$|
zP4PEq_4`S&;l>~-IQ#pDZrvCfPcjEjDCAjzxjp_6-ci6n)%6X>65#;mX4DJJcJ0ES
z#v@E+OLw@-3*IQJ-*5-zj1@7AFg?6J{jG1+dUrF9G~Op>uR8(uXMDOnrET>bi))l8
z`M5GBr&Ib|zPm4MyS*Y2px^fh>J6397WlkJ_t3k#vgnb6;ku`Eb161G)R!0iQmYLm
ztU5s$(almwHn&M=XOn42cV`48Qiw}7dROV*(+@G94+7S7Ck_xTc`>}E^sAGRjoxth
z!`0G=K8DId?!^w2X(b)bxsdI(VlVgMg<x(Km`V^;K`DHksx7pNwl#G1&wm~p5s<=C
zvRTqq<q37|Vpao^21~L2ovOn>JOBHKpc>bPhaEJA1{Dq94sK+{vt~fRZj<JkN|pFb
z#zUUYKZVN)b#5QqPWUXr@$XBJ`<9J*bnhy2p1Pv%7^}+T>QkOY3eWoA@dMcdwQNHh
zVI2{=`_Le%I(HO%>I%~a7>W~8M_dS*zqRyts3pYdAw9g~B}XW|oX5NXwZAdjW2>d|
z<p;V>anMjmdbjTS4_cAS>AJK!5itO{5GE^R#f}GbV0En^^)T&~2$Dvbt~_tp!|W`m
z(x_ATpvhcW+xEI*(GmYbwB*8yK&kx7N(J=*<0$v|uFw1Lp81ZuPU(<LFqhl5@VcfD
z4&s3OD%zxN;+ui}M>_TMqTqCAI?Pj#L{HmFP%S!t|8~}B?Ck--@bw)H(ZyDR*9*!9
zMQ|l*3S(a=t`i|V>TXI)|0<p8(`iq$|8#x(?^>rlL^Emd{+&=}cB#;2$q{qT6iq69
z01u(oCCY4ILy1OR9@4TzU0(SNHorvtvYoPB?O0{y9h>ix2VY(|5zS%Z;eqJEY20Z7
zGbhBvxRTXk{b4Mf^)fUC?7)J@0*b+=7VXxvSSq2q!BBFhacGCgdE4k);)jlAQu0bU
z*zk@aCH8mytAV+0a14?AKpns!crTPR!*X}r%g;c`gu_n0qUPdFI&}IMMDV(dkM`J|
zB?k^X#IF2KRIEe&R@Gak+R8CU3e)yTgB!y!{)_G+`F<a`T*<%5aE4C=2S<x1uO-F9
zz`G_(>;h`azu9Gr?GH3jE1|QlXBm?$NUWkKKI01xdM%R9w-?frs}?F6l>Tg2M@u}0
zH_?9@e`3UZB!IOdb?W2$2h@bbf4FbHe=L^O5urBZoxblH?HEPW3bB!X|9G=&xA;&j
z4=o-$cAz_76mmLri=@Lu(|qyC)%mDy3RcGGIBjvbA_P5CoD+h~Uno$k(<FE9_}vFi
zjdZ;;8UaY3M|^1(I@)H9xZZ#y+JyyFE2Z}fSCPRxIPglIVTgCVgNwxcrTUpVU-|eL
z1I0|@G!-6#wJFU^3R6vje)b6mhr4(tT{f#YT^N~6EsQvV9nNCx@pvTA6sX+W&aBDS
ziOfbqne!XiF-ODnxM5R&X!~{tqm@M{hGD*etS;mt;KRJV-yy{YuD>;BW>P^l(xdW%
zyuI)*rN-4>KWZpFXCp#sF%5H(e5d6#1yqb#I2ri@Vc^`J+hdEXZD>&Ac}C5D7n-)y
z?tJ$h4N~^cRwcp2DVeY(Kk9RL9(}H9sE*vnm%T2wU}{DWca6^x)03ryb9r!Z_QNah
zP}p7Fd|-YtWJq~s79T3jl^$y7=ukXj3x3TM&%Z_p9r2R%mi#7X;1vd&d?qqeA1if)
z(5mbb)G`kzsO_0CG+Lfk{%16$En&%v9Ev_KXEC16C}D;w!41zjcvq=YcUCQ7+2<#C
zu{4yN=4xC`gh>$nsmgL7Ab?Ci6w^8VEj()>>|vyYZi1YbD=G1aC0r8zC)ETgD^sTF
z@Iaw?gy3X{AeNp&j0AmIenW@bM!S{~JvUc6a7O=HDq<)i{99w`?>{lO?0qlY`NVSe
zqls@NUgzM#n0NcjhN7L1-n$&0fkb2=8BE=xf^3s&ug>gX6OkyD{yuj6a*^-{O;sc>
zEzxP_VbQ{@+u}r?4xz`ir!&nvB=gPp=#{gCv(6(iaX~iR!pTGtYrs%t`g6Eeo$!Y~
z;A9hl+f8ew%_lxnDku{nFcU#MY$T6^KInDLl&lB*>K>(^n<-$(x!k$&minZp8b{Zz
zCu??EB@l8jmT~}RhyGZqPMh?lL_M$i1nc>v%hS7b#+<|Z%ds%O+20ZK#aDrsb2rwm
zGgGn~$*>7}%<J%c%EsZC7nWge4)9Kj*1kREh^N=K#LDQS^6l?l^NUzYNyG!_i(Z*&
zo53GLbj7zCFZ1)ipXpg6&~Y-O2YA1wmI?dl3%+t+>YR*1;YMQJRA_9>sN<cl46-K;
zEuq2ZumbshI5QG;XnQp*axwU9D&IZuAHehj%}whpNOMNkFyeVE?VdCf8l_&QT=qp9
zTv}{ToGB&b3f$zyBxEp?plW%%w39}IR|b0YT5J1+#T~>?I<Gvu^#s+9g@q5USoo9t
zca-xLuR|4{Biswe3T}+%`&$ddzQ<uC$y(P=3G|*0ET3?S{PBss)p}zI&IgLmNZm*b
zk5W*O2|n5p`?t44ZiJCBHrIxmTh)JDqVbuV0KfE1!tj2dVGreL-fVTVBwBH(jIDMP
z1Gdd<pjJ2eT!yMi=~}x*ICa1)CVim{G3mBCcT9>`pY}srWyMu?ojBZ(r7en_78Mb~
zwrYLk=IWJK${BssXv&PCArk?$b*cp9_asDmaHsJbAyQG{nOck{sT>;0s2m<-$Mms@
z2uw?TQ5xC3ga^foi*Vqg$knNgMm~M|7hwrtc=|_sPX-3N!+{)OM0&b1oI+V>NwH;{
zJtJQlGWidB-QysJiEoYIM@Tzw*K8Xpr@6&>(Gw}NQ#CD<;2-w!D;!eFFD&tU2K5~L
zYEhtGNBM-~{6DLda!ye}(y3nlH+fIrB204HWjnQh04Q)hIsLB6Ffb$*?Q)o-X>)G7
z_S&s)zgEgscOc@hLSf!mNb@))A^6Ddt)aZ(md|Gq5j*bg0@{!Du2{W_iH(DuSUTMN
zZ<Pn)9Bk;=CuI*_ESgizFZ=GYlv>*4v%+%1L1rV<3Kq!`_y|E-isdVp57d=Bm?ABl
zC^59%j;~yZhszF(KwoeX58nm>GpWXXPQ$RSWDG2UbP~EJve<c`p-p_&bNtWSwyjox
zQ>>J8S=GeV<w4D_rBda<yvIWO7yXNcp!f@~v;byj&_kqGi`(YDUkvZTY==Q~8CP#Z
z<8<Qa^wiwJDQ-k<OOEibR)6^Yhn$~>N3%z#Eo13DX~)cVw+~zCALInZJ~6FjR0jPo
zCnFDykB&Q;P3PBc36^wzb)mBa?D&J0Dy+fgr=gtX0ad|xTn5GY#uo$Nm+(wF<stB8
z%<Hh~JV*$7vj#zkEVqtRW(us1&pRYUhGC49;UylH0o8ZPMP5|`lSIT<8-wjf3$wl(
zUd1<e4MGI>lH?T~Zi5;#V(|NM_nE1z*_?t+z29)9>K0t}C?X()Kgu-0ClyH#NoKsX
zI7|=vq9sf~wyzl$DF+N7O>*d?sJxE{HcuPeU^USvd|wfC5ImP(du=dI4q}9o35Vl8
z-YSKxeqQW!aXx+eC#0*z)qaDBdP^bI-8@#ej}f26Y1k9Z6WaO!IDOkD$t<_;GCV&~
zfifkW>08FeWh}pG=g;ylZDTttX}HpMh`I-jU_6AyH$z$j4+f12Dk*;|^TIqIg&UFq
zx)W*Nda|2T3UaBR&2y!>R*hIOPfNX?1b0<F7~kYQ+|BQG{0f%w4X9sJiu!*Vh7fSp
zd*#n`N?-W<l+s6$Y`5SRo0KzHmo!bKxaz3YS(r^^Fgy9NTc@e?RBc-Gc-}AEPRA|0
zzglU0#vVVOCf{<6U|zS_nUi7pQw4LUk`nK=bM{5{@{X6JPe*ZDYf|JkcH6zZjyHT5
z-kv9QUn6@7P$)?m=+gqZZ)~|(<Ay0R%C(wem8`ym?<ELl>2zhn^(v?>V!UDBlYU4p
zjR^dZYdl=I%i?IwU^WUNXQu51O_UU&+Q6=DdBq9MHrF||eaCK}g)6tn`bi$eEFF16
zmQ0(Cfc>HRGfL=)bJh*{BISo3s%=zfkPaue8JUO5%gwTH2Vw?80<BuU?YP+hx!{J1
zcDLAh)Pu!b12UuAjD&U83+jv1Xe@1=fE*d%a>CWAt(_cT^|66U50_ev+T|Hd=YYbm
z+b)L`=BAN2n7#c@#F<fi+tX!>Om56+`=hL4J*z5sMKYUL<~!>iPqUR+y_XTcXw00T
zQW1Supe^F>fg$%8y}qIOikkZ^Wmm?qLR!_Sf+U>Md=+zs(q<8cm5%u7KVsKmMToQl
z*0)ZLi7JPYVv&Yp@D{2$@V(@<%Ex2)AEMYwNT&|+1v%tbbH5LcX?6We6U|ds_Ha(+
z_e7M=^v9!UZ=O8&Z29EpMTNwgYbEpj@^Dh9>g3wsY6?O;pMIhm&cF^;xX~R3zYZpD
za);mKMBuzF+wx&tTAUo|<$e~Jl+|I8mVPw778N~f3$U;hh^YU}kXI3lM{`Vdz~?(G
zrhj4hEVP%VRn}8X{VVc|IWc0t<D(o6FJ`E=KH;$n{jKJ;R;T^J(wb3w4#`5&`KqXp
z0Oc}v6sK8U={G<CUHkVPBlLhxr7u7!e~DW5ts!?z_cvf<wiJ7v^|ts}amh_#DFH32
z<z2(~*3|3iL|Vkn^KhjzB_p#3*~%^K0mb7sU+R}1xpiY$m7U~nvF}(DUw@uA{8};t
z`z+s`x!Lq<=@y~=WR!JE<pow~HV;wLx*z_p?b>co)&g7gFRX}PXR>QD4&Fppw3}Wm
zevL24H_chB76U%LmS2j3;Yg|q3;ji7tZ`8A#^x$rmOVQCIE+*zhnp0KK+W5c#`FtL
zAA!WpMB6T-QUs62;H#{xIF;oQMNQDx-s@AWY$6>yG&hCy?i#dyX(U=s;I_O`<eYt|
z6d89Fgf~#T&?7h%v}aOkFkV)eEFm!kgRfSRHTK<nR2h*e&W`wfz{z~BQ{?S?&1Ez5
zkvVHGMg{Dy8TnYa-hr|_ug#pu<KhELJISu^<Y^VLLXQMb*=9PX9g@Hzgq{5?iI&vG
zc_&uz)V_EkcQlG}%vUaZNCOWGM)4m9>8bqB*FU(^+AwFcTxw7z$xfd}Y~ye?y+}>)
zy@^_~;fU!?W{F4DJ&rs&aQ?)kzpFz_pK^dkF#ATkg$Iavq3bSE2w&Uwzfz0(j3d&@
z1jBoojn2j09S09j$)&Zehpk)h3-2#>KK{KkVo?r^Ju(>{W+hi=D?-V^le$?3)8>WP
zmTF*R!1Fcc*WU2)p>oH2S>7QS3<y5RdKi&?4p_l@&wW!(Iu{!;gRopEow^yUynSDf
zCx_`cm~oc*5xJn^ucPhe!{QiqOsC^_{Cbm#G)5*fEqw(UR#uM2NTS;38+}5Zan=U?
z`Cu8jqw3wY$Gdvnql7NjuaV3UNOOQf@ah`*nXe9MU)%K?z#f=7h^WR9aNX<fU!@4|
z=H*Jok$+4KLk~6@sPkKs=pZhr4v=YkSvj(V{JGxd5sj`f&hSdCIi;%8yx?$RBw~BW
z`&~A%1m#sg%_Y>r&F2$>yxLu4vE70(AFH{!$8Qe*5#VhbdKF-O=3+zgq``|R=M`F$
z)~zQ192nUwHmSA-E~=3M0*)5tzE-D+)go2(@eBFtaJLufQ>&J&7H%cHk?~2r#WcLY
zmG2ATnwxit`A?aTGzud=gI9W=;;<S*WT^V|U(4)1n)VPW`+)XT1&s_mRe8wX2Z+2+
ztb#RilFnK|fgw)gH;t_l-bbWzeGb%`JP###ak=w{k8!5OF>lUJMd{VMqbeRtY_C#m
zNb*LHzVDt~c0V+$`36{(zLs92oiO<a0lEER04r|QD$(pajl0^Tl(XZOzxmU0-qR)I
zn57~YJnSfH_Xt5Jh8|+TmG@7#3D*q8usGoE#~3jYSi8ZS6#5bYTA?@b&w~q)_BL$H
zqF;<Jm$>|ONB7fqkT56syiE?b%?v+>s4eo17bRa%2o@QRe5p6dbWl5U{Te?&Mvd9E
zj+WxhA&J^+<d;HH6xln6chhMqn<ILTx4SrGgNIf$d_OZsV5}}m&u6Ji-ufVIA?YWp
zE5mKA*IF6X*zz+S><EiQ=s3GG>ge(KJT^zn6$G0In`GExO3p(DCZbH;&BGgY<Ay}m
z<i*-s#KUZzuXzFjkU_#bKAWi3<jfp3mXN=n9j4wdU_*fRVF~`}WWhW+H%qd=hubE7
zjLOGlD%yMOZV<lH%q3i<QgbZB?T{`Sw_d2F<{<QPHV@mS49H*EVyVS=4;=Bo@7=Vk
zabBK?D63PF>h1h}sM>O}#ez}IAk}e=)cY%FD^+QVr^Z_-*tsFtsp@d2Zo3vhs|SD0
zrH?-!^Rt5y(nA0^M{CK*_2I0Dgnnb5NbNZvL|VXwyxTY82hQSLobitBS$n{Mf8K8E
zjUjE=0;XH5*5YN%jE@+pp35JtBll>}RH!jYXu;~%ZKy*uJWSYjyXuHYxZ2mOR9UC^
z^{yr1arM0qB`2NHa!FEEeZ6ai`Lke^Z4bm+=xx*XO1BZs*Mi|OLp<u}7dxtsR(L=u
z*f!s{*4J@kFU}n2gxQbN&c_`&lZkcE4>GM8o5Y&(QCGt3@crv*My8G48r*D-fkdT(
zH3jj{TACcuLh~Ba=LUwvAO6D}FqU+@J?vZ<A2qguyqRHkYmw^*BBm(Ma8V$!n(L9h
zuzb5h6$Lf_{4OalaC~E*#y~l-*B<xsjLe&_V8isOQ@Z?uy}WjRy<t!Hi)eD#!}AuJ
zQ%|)8Jxf`TONoOL2R6HWK<duvh=OcR%%YkEoV#Zd(!w};sI{&eeB((`?v|P4=+5r3
z(=YyRI4P2{&k$ekvFbWi%JgjY>2NW7DCS@@s9{OA7wE8JW=$R$l&~y$2l)nZF5ClA
zi4FvWBgrRvWSel1^vf)1esJ5=aO8%%8jUoNEF%d{OmHvL5RYA<NFR0T)Bl-R-|rEk
zC+j7H4V^f%Ez|2DL01z!xpH^_9C<f@C(uvUEOuvkFy=ir#6B!nO5w1au_OM-*{YFC
zR@{j9v7m&dIJ|dRx@7NiUH=j349mF=`o_hQy49r%E)?j4?tE#lkM48Js(S*H^QXBR
zmHASTND8uS2d@93p8FVOgbS#yKzkr{vY$urVFz|nXMM|nJ4nx#VtW;K5a)xFmq*m2
z1Lu~rGG=_<O*4ZtDW?h`2vdqJU6a6MES=H;JC;46uJH{F=h_FBP={`T_@!ArlZgda
zFc~j>@Is@V+1>GC^qz=d&err@kH{_S%m}I<=oNL~DZT9>syTJ^ZjQy1E1C~d9EjE&
zAIP<4)J!?NtrtNJfQip=3In0}cu6bYS~$Ij_r;|~GBHRyG-L+67}EaqIzZwyoG%;J
z%Td>_lCiKY7yU*J>;>ut*NFu0!7{8sa$f%&_7&x&dz+cJ<+??@uMSTVVOIQxqkBDz
zX@UM!Y;zxf`uT>9B1=$0(zOg|a%txLRpJnlV?lXe@j;90-EHOp%8lyg`$ceJ-A6#=
zLEYJwiX~9^BcLbj%Kg__k^x8P6VHlplr@#RCxbpr0NcxMy5js}M^A)sF~n;XBRX@G
z3W06-;4bFQcT{PVoqmUMma%O9!=Irk_762A@<(nA#ewa3r!k+Io|Trh&fCFaltddn
z8~OSYKP_`>IC9!3njkZezVXGMwH29pCqKjce6)c!C=Nyx7&i(diOM9{S;_exJ+XzF
zpB&g*Z~u?mB>@n9Wb~DPn}({sb5~C{WAJ*BFg~m8HLuL%|8Xn0PtNOp`Y|!-Jk4Q5
zN$I+ao55A+@H6zQu3I#!#Q?JC=2}{*H<BUn+VX1}-Ak(V_4hW>di9g9V?o96*M&aR
z(FJ2}$Z89b{o<RMq)KnL6Q;W!X>^b>?0Pv>j5>5qy2)OA0<B0gZ{ig6Ls%i*c$Vjd
z!}R!apuuq*Eui4<!~_)irY;hGK{Ci1pmEr^zW@z0v))zsu5`Ur7kzcra4mG)iFdH}
zW`)W5qmUL7-H+oWMmXP8r@*fn%bp9Ph)9i_%g)?Lo0%podo8G!Edd(s<2dDQe!WCc
zeI2(|Braxju9L6vvj!CQdy0_k4tRtvUiaiXm5xvhgugoZ&!_(?h-jTENA2|n0#^G9
zoJ??=xxYRnUjNV~3r(4-j+wgjGlNJ2PWWpKdbZm0`-aAX`GdddaQ(Rl0=-QU0d&PJ
zPa!|>eWr6SRW+e?#3>kxpE5)ec{nE<yUo>0kW|rDPb(uV4Bfs0HB!(KoHR^Nhm%!9
zc60XObRAW|{$N5(pD#u|I8iXZi&KilV<z%_aD$%}t$ouy(Y-&$VKxqf;D_afIdp#I
zBQC9Qyw-p)8i~v6#}(BcrJ(u9*`!d_`6@De4yE<JjzK$~RuaiMHk})<+LSF|Hia7P
zRXT$5n@QTcbIkLQi3}m*tdP{#aFKtBucR4_;O)tE?8^W_<ltqY@)Q|HDa=*9R-i;o
zlBp>{{|IvkWDuk~(@%Kb?z=eu8kb9<9HLGGmi;d&N+-XE<d<yE$<eA``<o#Ka(Q+6
zGOGG)JImm3lne7hR{}!zc@Pn?|8U*IiuF<rS@Ir?FkDA_jSm+>myB-)W!Eq_e}i)s
zuZtwT@%xTN#U*`a?f;ytDUIM&^cmoN_x7Sv=`d~~c#5p{;q7Z_XLLP~`nbmsc~k|;
z(g@q+(Y9$q`kHEJ2~nXFI{CuDP~_%UN<MTeE!#2&`KHW#|IXbia`YgylwZ^<hEA)%
z`L#Ddy3|II7($}8KI%M}7w0{Us@<ofui1rK;%sjF#dycbznt7i<{A(MdO&HV+S8tv
z+<=Sr0jYFOo8D)PiVAQMDYGv(k^q+3DQrPkIHEbW#?QUxiYF_NfZ&>!%Xtm@OQFf{
zA=9m?0yV;p2tbLt>C*!KBMx0fG%QAXxe6R#=N#)>w)CFM6eU;rmFo&|TBk5I*W2@7
z?=wVQsWNJ*AGzu3VMhx_d7-?YYex|W{<nUAag`<*QkyGcLc9<Xz)VkcaxhK^SQ>s+
z@wUo_{eCCXhkb`H$#;?z#i4wO8=gKQ2%&@0C?n7`L$o2)??UwO$5@xhngppQQ7b-Z
z_k%NMDN^y1020hX1vNW2A{1>d9F%}Wki2AwDn@X;TP4DCi;je}g4l$+M1+|_fs5<A
zH{C%s=I(>&PMXqW{Rl;33tb<G{{klF^YvZ=m~R$R_sZD62;;CJh|Y@O0li6iU>5<^
z)|Lr2qp8~JI7A}<>>YLGL+WA6tmB*g9zXC7({$G9h&3O=au_xCT7i9ecSat%NStbo
zvSV%T^yeLO;~N*Te&vLv@oB|&tOIzq6&k%9+Hc;&w@g>41UoCrrcs#Ol^cZTj0=+-
z9n=`j<MKR8t-h?~Nzk;eUyK%)e+)r38ckF)n+oT~OBT^3_s)FMeY9)i+e;1wpm5j)
zv}qpxv;;^+Ry`y~LWlO`A#k(dm5%(&Y??|05qW>Te*JY#kt(Tt&#IbD(hH7s-;eh%
zw9S^uY`~K1;r2_L&EXT8qbbf`)l=ra9zO|}95l`EU@0VcaeqT}Kk9$tTLL+cUfKxL
zc`yV*uGSmV^@M1qa%@9xQ2V30B{`mZzH)zwjeKl;fx)>``O_Rt%EbGoMlZiG+x<%o
z2}wwa53eaRj~Wu>7()SUQFUYJ0G&zwR0&!x2>c%VHCrItkpwu-=a#VF7NcWmEWPl1
z^qu?oaX+*x-Y(5{wGr{yK-6d1`Q8l^b@6#Um~6zLX9zipguL0`{|AFgwrhs3Q@SPd
zsm!L;A?}W%gy3o7aGPb>HF}uz&<|<fiu^L;t(AgJtD-ZaJGcQdN}t^PkRn-pd(&me
zsi}lgIQ%0~9daS}5A(qx>f^vY)}#bA!vtdY@Q4AK(#&GP*3>(DPPgN~-lzLZV@b?v
zl6Hv`$W4?mZ#49w4WmDn-mClvQlCu6T(;D8FUm_Rj6f`FtHbLu{Cb9-U|A9_tzR{U
zltc#UmMYQus1?3eM_~Pa)%8dqzEry@xXR(4yPgXPyky)zLen0otTkFVRtB#-1-Mo5
zar?6TC9ctaqpkZchT9+}>6GZKfDb1SKkCeO@?a?FV`co|6!Yd6u4*D933+U{4NA(Q
zQOKEuTxO%uo`qEwHz9xo!8h%Phe3Dx<n|xA9jd#6e&*3f$&nG;8M-a&=9Tx3_>n*E
zDl<fX)^d=A-+OBA*h}7*H%`|vt~G$GwW>-~o0fOa;ut)qA?)z~`RCrQhdgAk5!@AH
zo%9~ax%*r#tY$@lpS5eJ)WEkZPrDIQMDqW!^^U=rL|xnHBok+niEZ1qZJQI@cRaD}
ziEZ1qZQHqH=j45!@BQkWs#Dc}y1Qz(_FBEyy4H0q=D?a3=f3$eisXwHp&uaK4;zhX
z5nferw+}v`GYt~p-dKXWmv)?Hbj8~-*b1AcLzmBN?|K#)H3_&ITQ&Y5x10B`OF{LD
zpwCp$2?Tm{>njDz0nng2Q)}0LqLKa=a;nAFBzklHQ-^A|@K(xOOBc(FN5iJ>X0Uq%
zlQFMMmf67x>4;M1Y9NZ$>tWTu$fuViIQd`gIHUc9v2qXdeq&YzS}&Z{@I%Q{B7R5T
zxOr^HhbQjlv>hX@HF-m#wP=-W^9dZVy4GrCId{X9VtTX$GG$mAc(Q5ZEp#X6Y-YqT
z*#V1EqjsIWz75>b8v=7U5Kh(+R6moe#jKvZGxo;xWD|S`yEldjn}k+mO9^=8M7HV<
z%F~X1>0XQ+u8b|K)Sv(fr{d0~L+ZWH%+)e(O?{myUy=w9+%wE#Mu+4E`+L#QQ%|&H
zoP(aPNpt_`GhR0EiRny{aa0$1YcBGtMl<haaBe#TK1~tg6zQOZf0|%k_5FrFT=Cub
zZMz$5g#;2_#GDA8d!WN|q@rxu0UV^+h193nS!kd_V?8nA$}QY`lkW^`#_1nTBJ*mV
zie9yO)Q@D|WqW!W)nIOC?<BJxHZUfj8?{RSfXDB0h?JT&Ds~fSdxc2X7Sf{4U}=k<
zc?-G0UE%OydHu*Ab+eD8Cn+3=u|KcPK-<rpDFs68#6L#^T$=t*I<Y#@^ZAQ2vODBK
zWWVzXP@T@lyWnFy@Z4Cj$>Xn|jFI>7`R9PjbLApq<Y&+xs#%UT9C#mN+wJojA)1A)
zQO21q&2*~+J0ocJ3<2oJJM_&HF#$zlPbi7k<`mGNIr6gnb>3{#uwjZ6NhvE|2im(u
zBtm#!W%ZAH^rjoK!yPm!(M$}1MKKitRCf=QkoTs9M@_oZx;kUdu!o0L#?TtOJoHAP
zXHhs9ux*JBI43OsSCKc3i>tp|*t^&LC_{>{?s>5XDCMapU|~&Cs`NnqMF0wlhlFS!
zejdWctZxD_|G@5eW6K4i3QBX>hIoEMjtm(ku5CLMlN^on6usl8PtdzN3s#gAJ43co
zsSf&Xepjn8F<-pBS6TAq5S2ieH4qpK?ao7Z>%iAKttTG5%>*2)&UY6FP7X@1(Vxvi
zMMiRVNuoB2LNcs8U`$W2Dg8K)0ON2ZI@{wDyVs6M4u)IGiYj%qlfkvIw95ua4k#n+
zuTZzpDHv~q*(7J)7>F-eDS4LFD-2u?zD-R3$~5-_`g?8wbjV)mz%PHqXMCAv>IA19
znY(g`>?u7n`KcD|QM^k!@=lOt;-^-Ba3{-+0w{;GMHOcp=-`l?O#XsIz_-;is|mhJ
zf5i64qPY{2w_0xehD{oZ@V%VJPCRJjTTUMye&A@AjKZI&OmpLk)V}H+2nIu_*g%9s
zaiR;{A#gM5pK_eHWOnlO8vc`{&)_CE%v@Z+_;5HP*5LBQY_MQMCyLHny|h@x6R}r%
zrxS3OdsH{L#X+9P<J-*DA3-jDU$a``fAuLH*`_PztcZPhgbl_}-X?vaN<H*@V*;Tv
z9|u){T~9I)R1(!uubO()9fkXX*nSFqpdOZ6ueI+AH<FwFx}FlIPS0(rj4Yxq!#uA)
z;N~G=4laA=(gV%RiMFX?vEceKAyr3?xI*S{hmQQ-llQ8q?~IQXC%q~<?tp<A&DCjA
zHII4%y3o?%5Oa>wS@P$LjDO*a?uq!E!^gMJfD-S-Qf4BxS0{WAkw*^)Wo0krP$=un
zt@C|_#C_>2ZMgJl`0jFSTk!!Sp@b6d?&<%xK0Wr!K(5-IsB6QKoQ5qhXGZ{W9IKuT
zG#~&f3~ql`mU?Omx94cI%&YkczWnMqHq#{~a(#&=!G#I0s#)w#2EuPnb4p2&g6{WK
z1K<5rk@H30$(RgEOw5i+Jz}NY^tKd?@u#+rebP+;5Wt4IZ7~8%uwUp&J`XkG?vVU&
zXrxGv;YFEr6OMxwUv+1YOXWFiRX4Hp(fCnKA6>Ly!V>K}9-H<N<(0`lB{^9dZ083!
zgx+&;P*CRCi1?KImSVxjG>_&^LgDEOJ|~)-+Re|xJ}veJT`v(KOjzI0C>sM|+&av}
zwd?y{$*lfoCG(w0Q_=x`86)`qyU)3P+n!Ng%wR1RvX_)6s(ps<U1qDT??y{#`z_ve
z$yV=AEoplmDH}zg$0;YWQoWBYjJ)MpjbDc4cpnKK${y>Qe2<mh1@amk09J$U*J{S@
zF$Q@%8oz&{8%^9nhAR3_dKJZPs{8btQFSq=I*XCZ0|MjhoE3>w@Ynr4T#_gy#Ob3*
zVR42nKCNNSJ5R_*HXpejxL}ixmvNb4#N4Ek=1vZjm$6gWXjM^O<wADKzlK|{-`hdT
zjOxl(6`uw4P#IlZT2zjFXMF#9i`G}Y>7#leEX?v^^J-u@Xc&!3uR>17RZa^_>HRy{
zJhoGF%^b3m1X&Ln9xCHWP(aW&n6ty9Yw@l-x3fR7u#Db`XO=Yk4uT#tVybNSiL6Ey
zmtjB`Ql(yFl;LpapeMXN2hQCI-i6^7C&d}LNI`;{${fP}s-DYj&`Kv;(i!<%QzyGA
z=~Xy4&0E&JXBA^%btI_>Lu;5NV0(p26RWP2TJ@l5`^u59XKR`-VuAfF?~uKqrB24a
zJ`9OVX~j|!Nk+1Nj=!+(<;o13nA4l`({|wTSmH8({i{U}+8&Vvuw`>9{Oiq)X(vhy
zr21t^0_t0WRr^wseH%G8{sAajP`Ayg1lZ;ffQo70z#a&h1~?9vvz-$fzRA|4E~FDe
zlzEky7SJph{F#xM!ahz1fq>w`z=Rjc&*r*z!S<K2!d=&`2M3Pj4}8hvY0(Ptts+$(
zUVW!auAW8b2ci7|l{TUsQrXBMbtLMbO_omPaW{g=%^FvF!d~e=bU+0d|9EiQD|Gok
z^vTI>$qwtU80mK6m(rnCq_B^^93kUDW1@Bg^}5-Pydv^=GZWl?JeF41{-#tWxD32W
zcS>dT!LYP+bUuJMu_&jG$h*hhXt;5p4Ny4s5v63MIuSsB7aU%rzPtSc<Fi@~3JA+7
z<YrNW!=cb+C%hy`468NUB>&Sccl=P;n3hmAI)+O~S)RuP%toxHVuU}Hi3tdbJZ+Mr
z>C~TBNj#eTG|8L7*Weu?tm*h0KJycRpD{2)2+{GB8yg}Mog1g}Lp0n>c2Zyhj#${4
z<u&(q%d^C49OL$wmknx96~it4&oEph`;`pOMYRm=qRR+@#+o1vG@&@?LFU{r<F89)
z@R6$@Kq^$=pf7b*a>Pv5LfVUV`F()<7b|~@)^jhQBMUiY3W2^<%8m$ek#a#K`|$O+
z>|$mS{o~2g`%8MS)V%?x_$TsgnhD{1BK=fYQU~uI>8o#Vi{!L;U=}#0ujI7S#%M0V
z9*^8MhASxkDU4SG4yrJ>94~Y~|Egbo{vreV{^nXKkc}?%dxel`^<4$A-i?k<@l}mf
z{RjQM`Lurju4`nmiD_d3zqsL*Y?zwNGafm&KDb`BYA^(uouTKQFS<5Jr3r#oRjJl*
z{ux&<uoQ|+Dd#l5Dr#d!;PjVX!6R$3OtOD+ZWUti{!y;o)mV()Xu;xOr~&!kNrs<j
zE}r-Sd}sGb*m)mwa;nBXbI4!iRurGnvmBB4Zp>zB+;Z|`|C%<LM^b($nT1<*G%ZqR
zTFF|_t=2LQK=KnQadlXBXMPa#8Sg?`{z3;)T^9gT^=4&(9D7la>}aZet0F)SKXR<?
zEyzfl4l;2hi&+rX29^G3pVwDc*PN{RYNF1te>`xorpZkU;-RdxOLXvV{ZZ^g(u!yB
zGGRBnyoAIwBcQA*Hf_swGFDW7-(v#rIlOn2EpV}q<2Y`aKBOftsSHf?RnysTfjT%P
zitYR^Ior-~@&(<O#soWT`Zk8dK}4i$9HaVZOxVM2BNuX*<~%8+{Jhbd2hxkeH&dY-
zpd1lVlS-?RmKuiG(qUZ28e#Euk+Hd3UCTGoy}pPdc(21e{%(AvBz{YljDCmW*jcsa
zgj%-%d!SGz$gy~Lv0Jf#=MLHT4ux8kmSLWAJm@cIeA3_k5EL_L2^xdwDX|J&q$I!R
zL+7F;5YJ4gmC<JkJ%no5A*v|KY;ymW)Y+Lbe49-x^hn`kmE@M-vjT0v2U8&bFHeIC
z#@LvJ``N^1-fgV)V^C|ly|+Tw40u}7GJ=3T@$yzD392K5Ag}uBx>wZ@H=Qksjx&ld
zx4wOL8=A=jnufN1(`*Q&^$w_JVBQ7Jmvjbm>Nwu2-O83+ukebsY!kf&-Q{R&=Te@z
zyi?->{CK;A4-1}cbwSq!G<aI?z(C->+cjAhTes2Oz6KvQW9Sx>?jI!=VT<8bdG=Q<
zcBE=Vb!I3^b1bt`U-EasrdvMx!rx~-9QtV~=<8W2m2L<Sx>Ce4V;T}py>5*iu&=ME
z>)Oyf)}VPwl3%d^6UbQmrN7i@YZV;cAyIe_Buy_qR$p}x<?Wn26Qe})AM83`OaluV
z0Z)8N#yLeDan6kssR*^F?#K?;cNWr`&TOFVIWl8?QwR=5jQw!miafuMbGp~V4)MTA
zq__)2d;dss$9~&-`M`c-r3C0o_wFA~<V(59ZOcOZ2{fOZiudka$aMlbTr$1l?+}q-
zPxHs(Zj;V}x=r^NX&B41^-=VLkn@oSH2>i|_}*dR#n&Bp!}5K%4X^YasoX>gaR%Gs
zH5eZj{mm@j(U%uwa|c78k(|SvLgn4Qw_A*Q%G&oo{qfp23y?$t^S47UdXPnytkT8c
zba1aoxLUT7#V;7r(|(mh(Oq5Ush2s`hYI5j1w4qB+*%U}&TqY?-I(k3XY#DJCwjV^
zG^vL$5FVODVolbfvwaU=LSVocbWTcCffgZ}Gq%B#d)1a9_O!D>v+b0nJ;TW1!Pcr+
zYE3Ogi^I>abbyEQ$Ra4Qh^X=xYY~`BS;o6n`hiAvEVgs<{2f`nigeQMKVHVzvBppH
z{%W?Z4G#nvl@sASQ0rC?`=58JMa;T(ypV-Il(ta>&c*=A$kMht1aZ4ctkmd6)z<q5
zMWa%;4_lrer|b&CU|VSzIL@Z6z97(rvZag<CMu|=HzZX4IRf9=-%bZ7o}OJyrsOlP
z&?+@w4|AXBvPUMeY5vKy9iGEn<55W|vw_4PNBBtzDWI#q=>W}oO}_NOS8C2PV5pU0
zmCirTpv<wivI1OjPDc;{mj>~CE(304Gu|C7A=)&TFqCcmk%!KG%$fzXhi>B5?J&n%
z)<K5@{?wr3LW_6z`IMi#hX*h{ib!6OcOJMua2j7IZmW@9hx`>kXc=O&`_+C#Hyr;J
zh8b{5hf)RAyR1t5hSzcaO|Pv&I1*O6@UIbp5_0^J-X6_o*@!;Rwy4d`#!67rsOy=E
zDgXU549eD1Tt$le7nGNbicZ#T{LO8iNEu$`UQ;0^*O%%ZX(17KoZ}Y;w~Ox%dFFO4
z+Q7K<igjf?0Ge}ro8<UW3wv3`Sz`-C2LX&$-@S;|kLc@=1AoC}h=Z0zC3yC$Uo;Y<
zHv97U+L4qEDSL$cd6RSUvb%AmK`NkYy#V)^1=J~h>Vn023ICw0#AsE{%G;rB7W}mR
z3j%0aNPoFq<0{pYpIZwU^o;<}&gn)hc6wcz41M<nM>%FM&E<6mw}ic@>3Brw4mAMv
z2h|TV88eav@e33izB{nMUFDQid9&-cIsWwvg6<N)^DBms;DOSiFiMr-{1#M_-)=+F
z`yHP|&u;VgXSY}f3HP1aP;JyLCk?{1rsTeL{g=(DW}k;2$>wG++XqNyk2vC9x7jTT
zr??k+Rzr?)#_5RvF8AJp+W#>bzQvjsJo<8XN3@kKW91tE#5%NT7N}t*L=v2Fwxj50
z1k|J~b6Tz;f7mpz<0cMR)#Okj1(^l@$(gH0yhcKG4s7jBXnW;cXBuca-#W>5bkj0n
z4PUloYSGNi(z7%0v1$t!e*`pcL~j>bX$Wj$-)mzQzSH3y=)Tc4aeJc5L&5`v+l`o;
z^er7StLojqi7-I2zv`$GOWv?PEZ8AkuL6+}9rC`s%6$JwKzF*JHs-ek5UBDbc$;JI
zq)lXAbjU`6Bjwvh8Nd11i|Tm}R8~9@>a;&1ulc(KT3LZew{RT6ow@cqKS^JjAaWW}
zhPQ{T8lSIdaF4>TtL|QlOM^o+%32dg{b%s*9{Na+;G_9v42K0&hZ+Ps$lmR<%N<nz
zP&<}})eoE>NQud>^xU)_+yC-i19X-Ce5IFn7`&#(WTS?-32211^0ETg7|A8NWl`r>
zx8WZw;=&fqqwN}IBV67T?4GW&S90g*LbNC0)}~Sy;Lggs_1If%%IppU94ceE##{BP
zY7`fZKW|>W<E{4M&K{{z9d&LeAD2q~8{cfjRNnw{2ZryLKIlwd3fIr1QHL&bWz!X5
z!Eo|=N^DI2q?y$ja9dli?MM-<sTq9r&{xuhZzMi`TswEGTT6M0Sdc4~vX~HTz0E2k
z^x!>Ny2keSz0&^#>)o0%n`a)=u<vC7W%i{a{!wj8@DjXG%l;ZbVGF~rHDe3oG7REn
z<xhr64MkmkDpF=><!v)K$11AHB6j<fH0MA2Z}~0eQA=GJj(qg1??{m_OWxSs%Y?*i
zxjdiChrO*^d@pMm+Orhtj>w#uZVb>;1q-|x<WS<SjFCgARx1t0&F)shF_&TO;86;~
z{c_-cmJeO-j<p25Ay_#dF=%(eW2cCCt*_O3K1!^tf+Sl_8|6)D(TIF`bFF+G51dbB
zTVFBpjqR2uVsRN6pbx##E!I%~r?UMi8o=9apbo}?jlT5K)G0)nl<8X|KJ*HmJ)`dg
z!=)@|jIDS7-i0Wt3K32o0_15ys^o(`Ep3ho=z1Zc;sT85wI+QA{;CeZnLX<t!}Flw
zI2rF6m`XzQIUgve0T&&CzrxoZnX$m0ec6RdPPszDcnVB?hcPi}Xgj**b0P-5(sj+T
z36trMZ%+ZAyP$Vi6K^Xh5?WR;gm`rWmA86NZLAa)H~h}f)j4qE#jEyMArH@~MHt*=
z^n`xY)_!hu8--n3%d+|Mr?!S{J`*?iMFx9VD(l{8KQ)D^ml5cRbCO>^-`nYMdU76?
zi6PLF^QfH~yaZ&tsJX42eAMZ>bhQlmh~2OMl^Orn-xVejCXfgu31`V}Qiki#4<9Ly
zrNWmwPz9@a^IS187?|clu4&7f$S-?z{qe7g6slo&#;j9=Ox-Xj37riHbGXT<3RG|H
zmgxKtK1?#w6S>-nyJY%<{FqyJgQt#{0&PGXrP`)nR&Vxm>)R2^u~w+68GE(}Bt;pk
z%sk&w>2Fq(RS7?Ru{4H9robORz4bxAjer81QE_4B;DQ_$__Tr&4u6|ZHw$&uIt+fa
z;<`4p1lJ@4&uNblLF?adhw8Y>Xo}Jaa(*76K7648VbqW|iA14I6p!s+#iBMnerh&e
zg00(;?A}vEkjqO^*uJ>I_)BaUM=m0vLfCQz*9vnByf%Is#NI$Yt>CQ)I9jM5c@O{n
zBq$BfVCjbC($L9o>}rTM+D|I{*5D>bMMe7TFE9K8Tu!Z?56>p;VKJ>bz(Xb?Xr~BG
z<%@2taELwc^DBNxX^oU#aEw$U-Vt4m@P~#(UFwtT(S}=%aPj(<Q$)A+ZAPOk1I~SJ
zvJtAA6?KSz9Fss>NgUpYc4yFN7V>7Vwxx6U&<7camY2o41W~}~hB~kGn#)4tS0FzV
zfP59<Zas#n8z0FQxk-B+%u9Nyh#EE!yB(D}SEi1%?_p)y{wJ1k8z|3AtT|dzNRtqq
z!O>~5x_yCUTJW4Op4HQz8f1&D(vhSURlNUuBF&v@{f^r9>ZIwxR0Fi`r;g4A5p@9>
zRLuPY7J{6jC#2;P1tlR*8P+urKshvqnpT~h_2<gnV!SizFJ)3QZFC+1aq7%>#$9QQ
zQb`TYlXdY1AF(=*e1Y#h4ExCRSB62rP_-csVC|K2w!6=K>?+O4;=y{sQ#P-7*Ywj_
zmas(a$Ge#*&$u)x6OCW&h)mu1*&5VNU+obN;l%>g{lk}OkC{Ip=rEpAHF_+Pgqlvq
z{gJw@Aop@7+vWFkQt(CkpAjJ|kcLmzJyO)m5kmSEIrow_heGDR%9KPu8cLAV{~d(;
zj%S98H<Gv(W_T&Do^q$F8U6X=H#OkNA%a5fCn#>CQ#ZMXA-*v@Ub~=bHt3<<#9@Yz
zsQl$YpqeRW(}IilhR!U!9Lh+>%=oS2@1|&+Q!xsVP!S&=%}$#PYuumJbwruxjpI>C
zR!nvUv^!F~*&tM-b2GrL;*n_hjQWv!-0RdJx;U}xAg$d}8(B{?QH)2E6Okm%gbF!Q
z7m9*_P=wpEC+A<aBY8h;eq)KMS2`U^?*+NBXZ|uo!pw=+$EvWLY6Uq^D`T6-A#c1b
zNgAI-J?J6|3vrIOvL?Nm?4O}!Rh%E)E=M{ll%%pfa$1VM^%?6{x}<smiQJLsP6enp
z&f#Ej{N<}Dw7gL(rs(5^@k`4@60jVI1)f*EK36}EqGk)8))G?nWXTJ1v@FIKPxrQi
z_@Pc?`56#Ccj&aifl{yNVJY9FqTab^C3l(OvC;0l>h%mOMY*ny2RSq9uUWlwd(M}X
z_i+$sa{iq?V-N-G+Y;%fzPBEvuCv-7ye>{`EhG(!rk#q%E+(sgL;?};(IhQDnWe@C
zQ}6JRoZKOmxln)ii}278Rp!moSr+7Bevtt!HRZa5@7SdWYGwNJvXnIR#RZRug`Qk%
zGTyZx0=@zPorR9KQhTJ00!li+Yh~H|G|ON$Jqa^l2W6jXSewgKQ2gFnpO&o~-ehw^
zKE;~aNswk{T7InX0pr8dcnT@bke<l9d&HgA2E_?M@l6o26zMLSvTkMM^L|IFMZ3MX
zDZd+}+*W10cdz^}V*)ZPg-Ki!_;-N&e6@Np8+vmAy!Sc1S{-cnpW-~qdjthk?XY1M
zT0}@$F5fwYJ}&Z)r=-97qL~C>c+5kN<_GNWjwgtoL|}>~30J5v`6qikQ}lS@$*(jE
zU0g%6IdkgtnH92yW5y74A!4_O^dZkfJUCAaR9Int4a&geQ1#mHvJ-ws<9f^wh<DL#
zdc3{V4G&g^w7Qx7j8vY$uuZ<*&MW;H-)A~k-Z9cTF^=gA?g726;e%SMXX{(U3nB1X
zuS4xp7M|zub5EDk&I<yncA}dR>RdIj;85@V+Rq0oKK?!bG&|JNYOpI7sh`tzW;4w+
zOH9UZgHTmTY!Fq=DV7xA{zsO7K~pKlOUvu*{Nbf-I#+S?0b##X3p{V1L#rGQwY#SM
z7~QBO%pL5MWFue`534%`G-H7W>Cd48_0pz2C&%a%ZaEvi<!UMDa=kC$I$8x`xydkP
z`N#E>oVeX*O|B?GQ%adP*^C*JT3TLAhCdze-dcDleLk&)4N*v^aJvQElanKJ%jxTT
zS|ceAF{K#YusifXkiIDQT=dp*6Q^)gVfK)%{m!exekGR9Z~np3wk<?>9n(Slkf<j+
zSfC<{UKu}up3;e=AXJyMHXiNpjqUu|kao8VWvcyF&tLz*0X9<ViVSvwu^rQ7xBx~@
zCzg`192-Lf#ORs}Z}-Cg7~0r15}J&Vwk(9r%BSUWCA?-qZYmkq*3H>~x>!qb^1S@^
z1i!*TD>%xRB2+g`CTeenc^VfVa2`&1?y~wbX|W=|bEM6m9`~P@IQlK7h}5XAqd+3l
zYd}RH|8qtECxJ{_eBx7eAr{P@3t@sl>9e@E>oC27kEH%AkA$xxUwhr4oSF7#e&^CG
zY@$Ap{umZYtqA2i79s>yxE?afxp+W_Wgl(lSb#qdBi3N`Ao8Ra-6gu$omCKWcy_0o
zy0+$VMh7Yg7B$4GVu&1p@B798SaowU$d0bF;3v2D$6mNS`fTX<s|Y&TqTkyiT3+#=
z{%drwi3y|~gfHCy$Bs&l+}z%aD+qJjj^4z-Sn=AA-77KAKaDvUiqJpWeWkJm*I)Ws
zTagFKYb71(cZAG<aj4rDQ9FuiaBwcC6heitiO2cn?cZIaDmjoe-mgFpeM|orxdV{%
zs9V_g$o#DTDOYh@;wdZV(>W)pUetor@^1BcRT#YXwtre&m#_#Q*P^ySr4F!!`6*eO
z9=#dfoBEHoAK(X<yu5J}4mC(G(e`sNK%tasCv7tIH`5+@XSJqdPo_7~Oo4Rk&;w{_
z;Tobrv;S$4=`S|Dp1OeL8enA4Bz@>ij)9O+KG2>wBL9Ve?W-VUHvXqqB@eRd=EAhI
zV^XQTckRhKAZDs{IoZj!SoMz*K5?PZ`@o-l(qGJ*V@*y|I$`j`%p{2l{BA@%m#yB;
zKhL{9601GRa#tsRAopi$`ttg<za%Y~Z0wH?cBk?T{Icofq~QagVpl_5y)|P@XFBO@
znT$16_G7y5VL5rjNLC>B(hUa;LyFb=`r)i@M4i}l^qsDMBX~gwI5<+V+q`|ew5^7X
zarhzCCaVB#951Zj^U~BshtP6>k1fQHu8p$#4@q9L9z{f`#HYRt=|TSE!Jv#Nbg19^
zD@e3t73;%^#C{ylg$b!oGSL65B8ZaEx7V&`O?sxWPuow?hHd%CNNfF-5Ur&m`XyUm
zF<tq~L;o&kUIptjSWX(UW!?3?C^8`K>IDu<xYqq|Rj^w2?J%3Bpso772JHpaDUF}m
zF_TjROn|IRTK6H%8*YB<IU%kbJOKkiXb;(22X$AwT`2UO%P`}g6zV(BG06(^+BywN
zRUl7T_oe(hfxu>sA+@HV%TKFmi4D*`=->9lbL+uYkSVnWGX@i2xtb0eG0MP6SBfO@
zM}n=>AKwLm4D%X;AjJTlH8337Y;D>sD?0LQNy8n*sqWdSLeAL?thGH(L5#X2?!-e1
zDNqULwb4C#lT-|BMwdIxCa6{p*w(-xFhm@z=<Sblz#7f4<Ec#KgDZn|87w+cM0%9~
zMIO%;7ay#+F|QHFotg$Pzmc4M;~n}p91(@cO4%@P9`0{P+j?+eNPL466f-)JlsI~j
zY9;i%%O?h(p6Qdv)qx>n_SU3$0c%NIR8-I(unO_^R_GDKr_5fdl(0=%#@WV^Gujxt
zhIk@S+zx1;e<EfHipGYF>h2&SeujstU&SU;D*OG%>99Ilt8cyTwGvE8qesH(stxM)
zdS78Y!oQ)^CoR$NosBlWeToFaU?;x!cthgE_>5-rKkiHKKb_Lzj}0sTHa5bIvdeXT
zsUx3FHm*6T;YS$QAWzo_+5=C!yzlURu+}_3cD|ekPFr<YNhqQSY)np_mH&O7Lto}u
zVEZl~U-KmyMpf2WO=Y|(0!3JK?=8^78w27)=H#wM{e}~-w~qN)ylG_r1dUwxNO0lu
zSy;xog{qu<BGR)*ziMF=X?<oI*~H;Eq<ON_+HsA1Wzzo;AgyUzF+E|Zyy8F@&h0L1
z<^==3!@v0gXyKO<RMXvm!+Z?RTpB*l@@$l3qR$bT(7%?O)JH!Qo#!;VS|(dZq<P<|
z_$tA-_L{0s10234d<Fx%jjE4HJXKlNtkUQm*lCh{ykci{{MZYgX<qSB<N}wyjjC`4
z4bPRtelHfJ|3k$0YKq9!21k^nvLgb5C-QcMPj}2(GqV+R*C1cosMk0FiPTOwX^4>Q
z5VteG-u=6~u3~f$=vzNcKV2o2vcStv1ithKYI#sbb$i6$h#jV5oplRw?D}Y}j-vk!
zE6g9#G<QTl+yVIr9>*9Nw@4$|6!X)=vk3IKF&b7OmkZDb%Dc)!=Moj__JqTx<LOLo
zbIN|ga(`L<H@M}O?+DM@*x8kGc}#uiwVsAk<Ez-0Ob>}oC->oUseOFD(jDoDdCQ%Z
zof6l_-%0O}101M8i<4-%lSp2vW#};`9`^I~Ehr$f>i#_RM)qi9I;h*ikX8jr!QXpA
z?&S%kCF*YDJQM@#ctw&z2G8Ye1T8=84|HNUAZFENak*!hnI9CO6CMYEbq>>*9bA)h
z+!G}4yqlp=`V}-tB?>iVqq<sl);tTq!BXp+Q0b(ErYvNyDc$DVI!t?ktrtI_eJB=J
zNAof9a<;7r&tP%*&2E1VJ;F9=;B5`HZFy@v=Yq_;N>KVf{7Hl{OSzH`+?0Z+!woMj
z72F3L(8m-nr{cd@e^|gn79*(6C!Q&0i`&$~?tY`T#x0Zy?GJ+@y20PUO&dhssX2l2
z%impM@mhm+=8)^;I}&|h2bE4ORLRx!gJ-Ar2U}wqjlPoHsd3>iFtw6wDfd&oxL1F3
zsf-jymr6D<kB^`LyvgANn^Z&GAh)V}8M^S{WPpaekXa4cH&!?R$;-~{63xwygi4|=
z8gFkxQT(MKZnjB(|7F39jqW{EHEQW)K_sqBCahgPDyOCatAG+LZbUiglF3aB>|kA>
zr0=X6fhMCo!C?Pgxw9NcjIpjAA;_eQ2$g<SVOcjVxYuqB{^R9A1d82Q#Gup?@M4=D
ztaZ3uE(1rfxf*}Bj>cg0%|=sMR9h?U()p>|7{kDVJ63b3R#5{x%&T|b-Q?cfAn_wC
zgr~JOB&icT_M|?ZcRBm!2DNAQwKaRdDGWeCvX><2*Ntknu>I$Far(Hwbm>m86?Qhq
ztB8#|qk@~ecAHCer5O79VNp<bWN=1crPz;+>tDa(hdmxKAMZdibMA&5C2?n4mjw+R
z%fcVUBuc1-Ae$AaRa$_4*=K1$GC+S>KzhU(42xHt$#OxmDJ!B!(nJ5n+hUR9-!C^S
z__JR|O3hd1UNZ@T%BHn1S~O2gqTlr0I=XOD-U|{rHQI-w5FL5xkv4j)Zy_ZX7wRJJ
zYXkf&(WQD*U#0i547&!>?`#+L!3v1`I<$W>@udu}bS~Q~jt?94i+gHKRLmj+isKw=
zmxz8**u@?FX{RN<@uQ~wmJw)(x|ig%&-v-ci_1kHEcgs<Zr(<c`Kiw!{98aUe6>n5
z`?daCM&`ZFq!T8OCziCO1o^${rhv_OS^eB<@5xUd%R~O6cl(rbBR*3~6g!$9ivLTn
zDxWzoF1*)i3cDN^b1*N8v<p7VC47&lX!Ml?EOxUjm?~$wgxJ4TUa+v5SYqEUseLGn
zyeS{qarWn~QwA2PE30kayJ1O{(uWZ!4hXl)4fOl}6T_!dJ&<W+KI!1oyVF^(q`qrb
z;q)!M1BCw*D*N2`sR6c%!^xsk9Cv8S*{qgNJ9$<rzXB!Nv%$77sP@`Jr_YEWMjL15
zKfei1R+uJjX|m_!ck|iI&wpM)B9{QW@d~#@vMoXr=Oy(3ZCbM{f>J1TeP>pdnOWTE
z;34ZS%x;KtWnU-2wicP!GwwG0Gv-~o!x&Z8A@0eSG@ziW1@^h54H}>F-@7*oCY{=f
zUHWzbJuRc&WD&5+cp(<fTI&OKoIPqkAKFvlV>LkAVG@0vT_Ni>HfK}c;q|HdI{`}A
z{_|YoRDkO4OY1*mr$!RJFZ}<?zh%BDC#Yi$oB6Jc|K6<ShAPQ1py#$}oNCHcYv#@a
zr#`b+Y^dLtYvw;`YiHgx;r6s>Y*)%{YuYNKZLscC)ecWis*0tKi-iRNBP2vZB2bTy
z4b=Gzy3TqcHSd8U%z?iBhEMHB-4pII#+|b4ZjU%&l>l((;O3l(F=umLiE6M4TYDis
zfHJEVH(3t@!`}Y1%xa_KGWDB-Wa1It0k*2G_U3Rf8>*v|Z{_j$;EY8bgp|Py1+?`N
zrntC&;i~7b3Oa>-4rnbJ`QDs~oGG!7C@QL?6l0oEEVlLII=yUVGDkQ{ajllTN)hD>
z_BybOf%LLYedAE|N1&Fl?0W-4LK!VH;abL_+Y@_N<%qZ$@tGym+QE}nX}qT!g2glh
zlNvz_iI*dke38?QxaM=LdzO-Ta-IJo_;GA{1WlkiJNoMh3b>(J&8CAXFJ4+8%W_A4
z`n2|}jIuRxNx0gIX?m=!_)Ti+AoTC}9K$<osrdhN(Spj@zqW?Fj;!_)+vg6Bfu=UL
zA*9P#35_DB%c)rkRlD1i?+~&jtKgE$KfR~3*8gHj=6PW9N%jRxr%E(uus7}jwJZnQ
zWQDBt9G4!E(GExyEnHDhm=08rg{CKM`@D0?pwjj)G%1c%bihlxKG>VXJ{|GqOW?O=
z;Ux`rM?$xzQBC4dticntu+SKs9Iddf7|G(`kDyZJ=+#^1JY)o`kk=u)U&Iv{EmDvD
zH^!#@h_lf`V?5o-RSZR1@uBnAHvJ}=K)c<C^WNVw@i--qr5k4vlvnFLp<B3b(JHJ&
zz4r_==U|9}1<G?BTqn&j>&-~#w{?P>WE!r?N~1gN+&l+&GBI^Tz*}bh<qx(bD1~Kq
z$833d9U4G+0Ku(+gX@Q*tGC$DxP+uTx;r=4&8Cgpz=O_Pu)%eipZOCS&V)?AG-X5$
znHjazbg4rSHv|y_Uv}eD<T_JT_3FP7op#Jq6BmH+nNT)4hB&{xc*O@tt6pz`hw<lp
zMOEKu9vp?CjsE0%TrX%N%2xD(FHBA6BU!`bS8!Du3incyasPQEM>)<{;4EBr6Z{<J
zOTbF1>!!RW{q0f-V3>NMBtU*)mUYzkz`E1lsd65czRP<XZEvr*b;Ws?>6VIqe`DLx
zp@{?)TYY+=yJg4lPV05Z`C}8(kNUOu>XYM1_*#Mb)e3eGC&u$!R+i_SUD3zBB8v#6
zOLck<W*+5H{wf>v3Ya_cGIpeWO>X{WL>~U~k!Hoeo|5u~R4UCcqIX4JQtE-6o&5$k
z=ljN({3RJ#jwt!}YCzOlH+!`Uv0E=b`Zz82oB!Xtmq>JA&G%QTmsJOKVORgfci2-K
zes>(R;R|msI%df5tzO#Rtpkl7e!U&OR2rVpO_`KV-wR#e*Y}6}7e_=TO&9Ws?k>Bt
zBw!E*y86V#54M`%9S<9JYLUUEeAcF}HirjlIuRc;WSh_p)6iNy=OY+L>A{A=GsF-#
z?D;Ax+eYmJ3u9eGVQc^)j1<AiOgeNB0X8U>QY)9S)!=4>-ZMU1Uhtf$Q7}JIki=*?
zto4p^;DR#{VH^d)QpTJWuyZSKn~lzQOhAK$`ilzgSAbk<=fum9OSF3GUq}#f><SOY
z1xLviUK}Q<AS?=&X2aW--J3N-8}(fMT%lzfY>%`NOz2=-Cz{85Mo%$vNFoq09yN}&
zg_-*E1244h+RuYE0;F&P^+rLnhaS98uVJ<<ATIHVQ=iq6!Ay?-7y}d>Y*|KEs4MtN
z(au#!emAa7I9X`=0YZtbaG}{<4|2~lc@XiDo^#1zY^ZG{u5|?__sWW4vf$f`GKXGr
z^g<o7hI<j}a(eo1D``;hL$$)dD(W~-7$jS=^(U4V>WqDLZ`A(tD!Jm(aYJ?u_~nh3
zv$^u<OD#q^`mZ=Bra}mt3-{M+i|%axm{DV9!RjlqX06`|lL5Os&JQa*_3p!4hbFzz
z+pL>BF)q9{9w2n%MR=Fr6tFx-?&p_Lvxvlc##zBd(~v>z4*6^_gnO-23>CrQsucMV
zw$Uo|IsyS><7G&)2}L^dyLQOkojR4eSI68R>?j*vaLrDAEoo%Y+AZ0Gj;tac)N8mP
zfB@kA-F+9+kxxe5R?F8PSMx;k{UeDL_^{9ykX9I>%*@JWL_qM{4(5rVb_AYOQW`(T
zCbmx$f%Y=<6Qonkm6-~C77$Bc*?PkZz9oe0^|xp_=1;lphGwiSi)=;kha60*c?5_C
zsbA)S?>;QdUwxBSN51RDr*;u3*ViSN;ZFR&CQbn|!>O6f+TCHd0lOZ#H}80vYo8?_
z`<Wa3rhI8?A>os(Y-C2Z`pI?fRQ0*4Wdrv8_=<0bwgsP!FsI@R<{h~18{?ZUHh<3B
zbZPqFf<t3|Yvn4O8Z>Ac)@skLmjzX+#`t}kh~8dQ4AF=80U+oSwYjFT_XV3c7{Y~N
z-C4m3GRN?(ZPJOo>u$a>m{G8g+Cy`vFM<H6-`w{AWNi4Q!hDih0$mmXOc0^oaKXk9
zG!Oh$j`W|b?MBD8F5?s$20!gknw#D*GrmsW+Bg|Su<2_UQSA)DE^24&4N)i<LYfIx
z&^VK7VTd)u8ZF}YFkp<!&uJ&Gc()(jd-Z``fO{$!5}!}DrLc!c`%(U(xD@3YYHrx|
zR+@=3gzQ^>AREHyuWySDLe|rk03Z(ZlYY|Z{AU<#Q2WOvVfULt$~uT;!C3$X`na3%
zQ~k8zTf`uTSM5(BC#c6+k>+d(R|$Y9JxK=?5y%7`Ec*8y2u?)jY=dP#Xj2rAU}ePh
znN;co;QGG&3hC~IYwR8Nweu{y#y|pt{GZDPq6?DzZ5{0s{m&~PT&n1On%0s;nEk&`
z$iS}I0_9HtWyCg+$_gl}NCHCyN79>xg{J>L_@C|Q*Z<#sVFLMoPeU0^{hz`9Kl?QH
zyQqQNRw45<@WP(R3zJF`q(~B15g10bzlapE6S02ER4D?4?oH<3_OJy<xc%b{e$YKO
zXMc6$=k74@up!@{**cd$Fs$-md;{2W2(wUq%zaDgo+y3-7m^b3^kJjUt^;Ofx4@DW
z;9p=2f%$Tu(Me#({EyZp`0-F*+b5LYo^UbP`F=mdgd6lHqhGpw9WI-V2j(CvJCHLS
zX@4ant{h9g1@J9B1;AiDOqwrY=VJWvzJ`^l5O)xt6Zr2;8vmUl2>Jlj<!H1b)$=99
zUe#P3*&E&SH8l$v)$0A!3!j)!m5^Q!gA*lJEM&_M;hi=|lDR49pU%h?j8NF7b*`7~
z4)~ZJ<R2QE*aq#)!8&{?q?n`^Zxo0@<JT?-vt^De09!pe5wwdzZIh!G(_p|qZyZf(
z^5x>*Yi4c*s9XS`I2vx)FU3DjJ2jf0Se7pBggTcP-FgY`%6qr)0M3~*Gp&ZOvp%fc
zM{l2p2A3&<+P+wC%a?;&E^iKPdJ$wxKH`1rY`l78ZNE|+Zw7bKZ~AuWYd)3mk@dIQ
zT_~<3sQzbq!Ri54+q?V>wwXHaCgf{a4jJDK6w#EJ>wp7eP_u&xK^IBXv1y-RO1>>H
z(|k{8uK00#k!z5Z+(2X=cLTxXZHSa6SX_O*fP)SMxSwnkLi_MjV|dl#!-G%2Bjfd&
z%VN8|k7_Q3X`CF|T^sWFsK0JdSD#|{CFhDxA7outbv+lMys`4h0cF>X{an4#t7~aA
zJXEecEO?1GFf|4Xn=!d~tXNi`A+OheS}a_9u!we9x%=Lh)$d%sJQe~|K*Dn!zKpW@
zu2P%#+4u>+&6ftSYhv72?w}6=fAoQZ?c;`^9TRT<*o{PyUKq<NdA(suVG}R7RuR~8
z#e>DS5q-O<4ZL?k)ljAxc!B4hAY7XPc$o&usLyy@VZi8@_PlO5m8ih)sF}a-h+;ea
zU7me;fLuwK!ZCQo^SW^%uS)nyaz*%~xC@c?(7nXtjrD@p9qt;MXJ*Z~+huZ|-tVeD
z={Xc#51;Uy8JA=zgtjAZb=SmoA~SQeH{WPj_&{*e@??Q{M#*nztU0dviA2v+z6UHb
z(>5xb_0IdtW5AXb=hl#;2k%b%`<n^<*Cq7zo%iq2B;vG3^EU@FFdVX4gFGb(d;Ed)
z0qz^o=)d#9>&^=f;yID^ipX>DAq%}Sn{#OeHw=&6<QJ-PkTK`;vs|rkLazL+`Ui6{
zP9tJ?#Fx12ER2BDP5PJMYOm!14r@zFc(rM`wy^`kGm!9}!?=6PI5DsJOcKYqkGk*z
zBdcsqm<<D9a2d7yzu#=a6Q>!W;}flmay?jdeGK@FhiK`M5oWjCF+3O;@ne(q@Yx&i
zRaSB;^b`ChY*5-koJr{0+QLxuzW%RhqN@1QXJt{^039y8XpMnv1>=xLKB8wBFIh}y
z%0Mu9!D>weY6Vou|7a#ch0b}3dvJdB9cOy~5EbMt8NK`H{C(WE<dSQ4U2nFe=Tz-7
zU7>l$FV&F&2Au14OperKd(yb3CO^$A4LB6?m-MK~{#Xls-*RGUpAK<k7MGJ-^xdBM
zdL#NlH=UJwXL{nsp08bvoe@)NzLyAt@&m)S803e^d5yhfpZFFV@;cdMA<qY+A9e!=
zn|MU)@a8HC(U4~4?Nhg0hc#ncqM-dO|MJ$-J#qWd;**JmEm+mpjnAikT#UEA&23l#
z53c(T1Rj2Rz*5G(xh+iZM>oUn%@=>1nw__VW354EMHJv8JFcy%W&bO$0kJxn-)2CX
zNY4r!_^-5IMw)!dW8tRZX7g#}(ET7Jd*3vhF7;ui=c0z*ENgtU0xd^JQNmCLW)(3E
z<@is0W`YO+fUu?K2XH4tKuZ!|im;^82NffA37S11e?>sti)fC)@9KJ3MDFa&AAC@H
z7{C$@m$++MP|{WuP?Q0a<l_qree)_9i}2yw`&97qQVNZvEXvW*S^ia0CaOJ8F&R!q
zCF7A?z1RBPFlx{aJXjntK~=~jD5H#v)LD}}!@~vo(Biw2YkNHGA!7ET?z{QBZ|!a%
zG2QexSyH1vVhnwxyhFmi$*9sAzP?f2;lh-lDy{W7P#j_BJgU1o=5~>oU&?nZ6j0na
zsDf5-L&7A|FnU~=^<K~|OazpqBq(Z04oCYbGuxGiahu?Uy>|Ro=l$?8ZeHt6Uk)@8
zL5$OtQITT|T8%>?VZEPk|Kxpv2-?R^7j-rTCtZ|PZo?|)FiAj45;0O?0vCNjK{1U-
zK@>}DX7`Kle0~jceMZ812~6~N3>U@!w>m~XTkq)MrKF_J&vq7GG6A<AHV!g1rD}2*
zQx>V|5}QUI(6W~@HXn(OqTa<%T22X6V&(ShO{3WG51^30A?8}C{`3ZP@AEFHD5%E^
z87?ssWt$+TDG3>h!cKedx0Ng)g_jMql+)(v+!H@uoqwddFk!s)IPWRXjmrKed;Aof
zno_RIj<>x{2n|E<xPP<&{EpgZ(~4YIVxroTz_qm2cO_Dk1Q#KN-9YG8Or^Y#X8bJN
zM%*K}?^oX$N@(60(k`fKi@nX5G5vTy_)q|yKXe)FySfY9JdVRiD?M?NQ$yL!{RF%O
z?V!d9i8zMk`O;sPdlS}BheuM_^??R?Q?C&<Qi`ldAR#h}9;h#MisC<T=-?nrhO;Dl
zonNQCqL47ql98tj;P}18As&c{C8XW?cZ>xu+^@kLT-Q~r?KpdvwL5#$1<79_dAQ<1
zs(pr@rK*-p@r?G4cY*Ow5;V3b#bpAest*^sMhIxnQ0W%BA?+CHh;Agu$csvn$J&<8
zIFmw~qf(M@1oZ@6ERyqZXQM97wNy3E+%!-=jWUM180Gl!=+m3O#V0c`B!^)#?$KQl
zBt!y#x2{%!ZE+1zU9L{VRrZ#l4xF2CGZTlRupy=;Nz3KcL}1|e1$b@8h|^y-`fKf~
z!|1)DLdWQ<>ObDWBDF=Jx~7+gvg^G}H>*4)Ebn(MbcJu2!_*N=P)-pta)(UZ*vAjN
zLEYYxFwn#YS{ru9cQ&G+OO)0RN}~KBLjdxmhc+mMQ(67fEiNIW9nzLFDgcNfT9AU4
zr^|>?UUZekDj^Dsh7=+rrir^+&>p&&Bp!>yPDBzA5vQbXI8u#8lp<pM^V+`Oj^JJs
zp|l{@qxD@2U4}%g7J?z7V?m&o73_HDOs66L7Q&9;VAnBCcQEPOe%9v?>3{f;!T7@E
zZHLS8OrecTcSR2w@nXXEt)@zHjA`B2t{g2uT)S6U7S%2)EXgV<V@t1Pwr)jG6v*o+
z{QC@EIIRo($Be10sw#GNl2b)4TvSYVg&*{<4O98(4Y;FO+Be(f>gz&xdpsQ0!jO(>
zJXo(%Xm*xI?ISELo9VZ2%5*IRMgHxaN>zkXR9{BsuMus!gD{O>fs^XE7Ry!4muqhO
z>r=YVwtK&tHbajM+Xx&@x=6O`4KqKD&`RhJ&n&d3bh!swpz{^gRfUW4bG;rUa=Yh#
zFJ&_kf#xgu&go2QFqoj6S;pJC%p{2D!euHdE3iA6bZx`Nk7?T<s1ljqW`&fOk|l_r
z<&@DOKUsBNY){wAg*~EDtu3?kR3w%GIj47CSM}5WTu(Qge*#wI4{J-&x+53FL}i1U
z+92xu_GfjR<222(5&x|hv?b()D??H0sdL_+<GFr%{7|p<<hgI^cOILbP*ODh+r);&
zgn5Rw7Ww(WK7q$G{1ucjmyGive*WU^kwJC;9J>uFEtxW;;rCnKy2yZ6b0yjXlFMf+
ztGeq_L_A>DIn5)rG&vVg)CI6p(2K(qsLMob@&{O?W(tkZW!0|_JK1z$Awz~e<q~d%
zoTXm_7eA0ROQCCf&TrL<Y&$1ZA{07A7*;P@=Uj55mUVa4(-q$D!YRh?NH1<s;3Ir~
zd9TJyd98c?;yuDMyJ*{AslxA{)zrl-+Vrd5J~>7y&93IHmO7agKbcK*PY@4x(5@Cw
zGukL)ygAl1+7Pp+QUvp7wR_x0&{O|9TIQ{i;k`kq_ACOdP8y9(|2!!z^J{A2Vp=t4
zX_$O|VE4nG*6xXFHppverk*%MAAG}lZF+iueg*oJ(&NSMT}}`pi@VBlgtULiRq3Y<
zJ~IY8FJlWf>svn$68(xfxK)2b4Y|8-fi^RJJShHLE3t%apGjIHX`D<Pz3Z@-rS_H9
ziYKs<ta_fz_D`!Zfeuj(GKXr%;_yMbtLCnI8?w0|lRsEHNXux)43bXH0Hw62l@`QX
zTIdo&d3;bhmfE|Q%q{jheWIF=4bk2;<V_phF8_vbr!Afqn;X8?{>teVF?ocOhVUjp
zSK82U5yVXwCkAHkwv5V8s3;b8H$`KtbDflx=P^4nl@(P@+)<HMz6;-1Y;dR|h`l&D
z2I=$i8Pn7U!Tmz;URatJRxe|ypcYn_hTX)MoniJJQQAf)N$w(=N@~TANU3fnroROx
zH;XdP0%ZRzbSotmmQ_udMJE65uFOMzSydzB1QPMEWUybs15{Gcbjccxazak?`d~}A
z#A&Vdj0cSwqV^M~FJy^B*K<mLM&)(>qeN<2`dY`vv?*wQMq{+sQLpoB@-VF+U#wdJ
zd#<7_TO}}02J1Y}+d{71zMTn#`Rn|`xn-&qdVjTgF6z3?&9JA%!rCEpuj*$1g?13!
z-&qwBujivrjO?PuY;KprYfd^{_lamSMIyaa=gX6d`?9kZx}3PtLdwwv<W`40YlCOH
zVzwzV`>gMwMJh|3pY)~I+BQ35B#>Edq7zlv@&H%K*3N87!}xF?J}M^i|K-`#%a!2@
z&G<;R+?hRDT{O3xezi}F?`e=+0;Nd!d!p;L5>`K7C}fsxj1RkHf8nskUX=x$Y`IYH
z%U(HLN`hD@)hHzjS>AwWSbtN--PMDC&x#03>;EmXXZj~*?t<03Ls+h9c{x>DBZL&5
zJ|VDtq@e4VO)lr_;QZ`H^DLC)ht;Qu33YQx%6aJH{9;Y?0dZ|Ozlot!b`TCq@ZepN
z!@?LFdWX&N{zlP-KbJnG#nj;ZFq=}EU;YXXG4%7a`vj#sTaJLB@cm<Fo@(z<e9Rk`
z4eK*pGDY&e^M#%*)z<W;WVgi95@wGACq#w!R(dx0lUl=ce|U97YS%m+)G5urNs<Km
zW78t&GclVNousVF|LmS&PS@4A*@bCn=)-(j6q1#e*W=V;PP!QO>?88UaZe25!tuyM
z0}Wgi&d<^YQ}u<C1U&S~iZRvZuASje4g}TO>j~5`g{LO26Q%U`ETvsT*VnnL^G3z&
zBFSRxG1Zmt(rZeRE2rTw;`>Lv&WgdVqb`{2Y_h4a%$gTqO*!O5Z%;>%iQ=9gkmR_w
z8QN|#7Jg;?{4(xP!E2wISzM{f{3vc3PVnb%72dypyo%Q=c==o2sT~h^Z}<yH>Nk`R
z8(6%yhOwp0(em?>-dD0UgDBDOM4;|bzsdEIH2p~Q&xXTr%gifv1!GXPS6ZDp(7G)d
z+q$a=FttuBSb2Qs&>*flBaCIP%73&oB>z7|y<?CiUC^%Gwr!i!cK5XHp0;h<w(Xua
zrfu7{ZQK0z^PcxRCu0As9kHq^SH`N$JFi=_<!JL4TYkeBKR2V_;M8j1@eF-<@$sCa
zEloAg?-hYfd#SO)ve~>^Qe}a3ciASm0otm{?Gj5E5&s+c$Ru#g<|$Ne!ck0`K;DZ}
zw&)GUGn36cVChPAPj0xDSHnn4TvO|){W6cvK&=vi1)oXHZoHNx(6ANzbx#T-KRlvK
zNoBBBOY>*ef&;Upvn?|Lt(&2{zp5GjO4$2P4qsH2s;)=UQq-PAm)oJ}e9J7?|H!S^
z>(ZN2dww|w^H;o+p79_3>QRRdOwtfZ=?t$wM9Sp`*m${uUHF~%&GN6CkAt<%t%!*m
z5%Kk;55)H^TQ@`vay4Z~mz?x20YFsy3{0_Ft30FWl2;wG^0Hb;5Xh%i6$ZSPP)RZz
z%zj&j7)?Lf=sAt*eyeIsifQD?#fj?Y1RU!z#(K7!;k1^$Z#3iJa^f^W3uZ}BlW5!(
zqeT>(IE-0ipUjQm`)q%Z7;9Mjt%}e?rI5`>BI<173a31mW3k5N`5I3P>2D<gc*?6>
zb2vPqk+uyi>!WBLV~BD_wdLfwhWbJ2*QP`;DPg&NtGaZyAV?;m(=iF@#)032e4wCk
zjY~|I-`HDV01%u9EDj{$E}GiyJx2vuC+`Q7`x=o+Ag4%n-;O18&kIM%Pnso`gt5dc
znQWCU9KPw~y6nZ;=f{rB=Wwt^=tZ5qWUumRg9P*kon7zKz=hZSRpgL&mpSRhF=C%{
zB2HnniMgd!Vd)lLobDB24f0{Te`Q$~r-t85sz*+Uo+7625D@+t!=nq+X>mkJB*so-
z8Z-)f9C_(y8_^|wRYf1;B23S%m`l%y%acea`$Agq!uzU?no<23w^-HYNOM5p>Y`3a
zz*Yy71X4}a4Vf<V=oiPnAwOtU0*^wDL(;#!w#dkcCiol8$b82EMn@}8#AUx9_@JL=
zv*iI8Lzv9yfAz+Pb6y_ib>X(>T5pcGveP0<P$)PuojJ341?uw-jj<s}=-yeAJUr<y
z4<F$xVZ-<~Ljn9M>)~n>dF=a3=leJjDxora&#Erb0=RK9M@V4=rbtylsc0~Pat1pa
z;YawabA${aV^th=uC61bB47l*5hBBf$_kXZSr_t^S7>sTxFSEY8(793=p7%|BB5ZY
zXaG^xhfcxei@oiH->Fe&CO@jY{XAnBnTHRMQtq+n;oY6K`U~Gg3&F9xmAq}+J2D22
zkc2ubL9Cg*I;GJ8icX{K%tMeeMt-D!JC?^bX+aIX$?z?{_sf^>ce{O>RYJdD<Voo3
z7G?he2;{@kWc<{K@h(AZ8wIlVOYQ?hvK$*7I@wfQk(bx%_K5$@#>KqTplYafcR)-M
zr0yQ^Ygp*P&n`Cs`$L_!sZh_iskgud(~4oFZlZWZ`XFImVAcG41N!@f(xg6himN*P
zWAcsoXUx_oyHb>I7kozN8=cl=p@SnLIqzc7Ef(Z;_V%b4AHJy-g3-1h$7JETMB4QX
z;_lknS@x?BP>@XOyk8reDu>QpG}M3q9f;owKut9{V0g!he8^C|ldO#QGI3bm+9Fk7
zoK2Ki^L+AJe;xR@vDBz1?{(l9Cats3{gQH9Ih@B}?wK>^KUf|=odV&+jcP7l1Uf=<
zLG?G^%KPo42LS$R0*4~kx^dcr{ho$;qSFb52usY#iqZqAcE`($9YtQq#JWD>ueVhf
z_a5w7ZBb0n6w2~5ONszyf|7<NHa-xvI`wm_GBBR4pNJo7fB!;oYTj~URftTt<`%I~
zJ;!^GK;9@A=QeF?8WceM@aVTcgUX+c79bUihSlR9xoLzRdrVQ5m0s9A4?6PNe;i<J
zz{_?`i(AbTJWL~h%}a}RQy(1}Xur?Ty7a3-+hMfS@WK6)`qReG?41Y|0#1Eei8g?q
z0J-%&4Egv*DmV>(1(Dt~muQaStEBd^m9Z2RELV~?y?7?!!*<x?gb2COt*~oaLF~sR
zwkNya;SPp^ZZK|ELY_do35l!@Q(6qM*F2A}r~L#)=k?q1_C}WNbJRCGGA(Ise$tPH
z8ikz_U0`*}RD%%0cRS8j`i154laGP_o{U5#x~mMXfEgC7ZMxvsH->J5n3MY~5=M2)
zaoof8rsD(pI~0k8esj$QJa1*1ew#7E@K+T!`$pEr9XVsrWd$8!qTKgjgaG_pUJrH<
zJVJKYfuxK(kpXfpuPgUt2)wWcOC#y~)jH|I<qY!%(WUY^&LwRwcU(%%rBw=M?96z)
z>f9l?EiW=BpE7m!_C#G6bubjjZGq4u{WZg$*$KNe8=TZANs~%+6wMybL#GIk?LZ|V
z2DAAsVP#AEkcXR~vriBd^gX)oAm|EisyZW+=~%YGV@vmx^^M^^IxXt{H}{R(sfND0
zN+wEq=zNAJ_F?GS9_Mm+kRe?4hI6XUvtny2WRxoy5)ztJZ3hbz0uN`M1+xy^<Ll*z
zg*DQO`w=^u_$VyN&^PFv64RXKzuKJr)+~2<!r+iz>ZBoz$>zJmOe-Sfz1)3YNCNHk
z@wvS(jYUED7=#_8RX<#>YrYY+F~>{vH9<0H?G~MFP<jo>^$SFk)64<u#)rW(2P9;J
z+$Z-{6avYER$g$ATVR4*^~o2fW&PGskSN@jJ2dxeTr3Iwzl44L*V<Q8T=)Mlq9Cmb
z1tt>nYz*%t(&}A`mMG<OxicH2eAXw<eF<EihWgI$L4tSA2B-tl#NG$y@ETL-m!~(K
z5&O2Jqocwla(h^oerfG?ff}T_L3L>NW05Lb6OyA++tC>kues8d$00b*o?40dJX8^l
znPE9IhRuGeaVjSf3hr&qt>UvDZjhUnT}BMkD|@Tq$(#@A;#m>tzMtfxCTCJ^`%z&d
zK7R>2h!b<&H>cDfCIAxe{Rv=P7oD8*pi39=ftoM9bvhb*#M|C|cSk{PyGD}hjR-`z
z(B6$Z>I*}dU4FU1t!FFxlioiIP?Stos?Cz}{Y$^{@vpX3n4_D(73d&H{+8bTp-mJm
z7}`F^Vl*?sXO_dou-*>8d}<w2BJ%;b<QX@ldQS#J2WC&Hn-x??ZY}BGX4ZC+4(Xp?
zT$j_K=_Rz9iDb%0Z15)yq}VQpFb8%fC=5-7?80FDs=WNIiPt-yQ)-?Zby5E;sM^-4
zW~iatruU#PRv#C1r`wv2vk{SB5A`UY1F?NnrWCG7eSaiPk~EyCf88InO&~NseXAk`
zUVF3MBazahLV42<u@HL9`+6fz70jqjDE#4xOc4(aOkad9)k8b;U#MI@wF{lqBXV7H
ztglEp6)(59PdMgn#FCfKz`+**YCUo#A+DLaPf^Y~jE);KkM$Nv6{zA}B~+9wX{@1K
z&h2<$(=gdYjj<5NcHm6uU5Vs|5=!)p?k!xvE}ut~t>UU|#|dzf9GJB5g(_bOvp2MG
zYvgGuP1+;7^C3Zu%9{REQ%>6LJz(N{)#~6OW#{_!BG?9%Tzn(4t9ml?(8061-H|j4
zXe8noOos~tX4^_mK=RF;yaBAHnghqhr4WE8dw7~ODzx4CnuZ0R-l#=-Z<&NB!4eFg
zFC_@PwA-`z1p2gGE-grIm1lN(&4jlWVsm4?x-jV-H!%pltV_N)@}*sCLi9;g3AJ;|
zD5~9_KpP^YGhi<F7G;4E9f>X`ZTw`>qh?^tk%F6reoliHq^Oi0xu$f{z0${J3y1M~
z5VOZpJd~#|%SG>I#A=95^R-)2z{-)7s+}c{_FweeVmd`&=l~u(o#%m0krJMJun`Dq
zi4{y@$2pBtwsZtd!h1qAuRV`j3u1wMX^r`g4H)U94;R|caHMJgqvY{dt@__-j)^J-
z0hBOt&5ZeX2D|dSyaGbE$na6CZndH|G>+W~_U4!K(Ox^1)5d)mqwAD}+x6D8`N;wa
z*B0YELB`{<*u$2>d^}07hVhJ3uV<!yIfi}lr8cb7tojwUgx_sw;Q&)=?+ob$cn!`1
zL~cl1rnMfW1ly1M?|r0P!rb13x}3SMO1>@Uuv(G$>x**u@_@kA6%V$$ESGLhaw%gG
zq{Y%@cc|>^d^ou{i(U&4VV5nbfQP;;2Z1`Et+(b=Tj;(*3x}9_vH-gh-sbcm!I~Wf
zY>(i={Nkdn@|k*t`nZ_mLlRJxlWV~lR-l!Wc?US5a}Wvdn%o`AeZIxw1XSOQECIxm
z+wk&id#OXkD6fxC$*!hcy+wZEWyz=z_HJ#oU^2CP=#ajmt=C_j(TckU<sc)uZJCA@
zr8C+o$aK6oy?cu#v>GXk<UD(PS3K;lr=u<S5DRPWJUn1`_sa7EG`FYgNOBBU0k$j8
z-X%N%b>c#t_nl{7^m~f@ef=*J|CGyMw+9Xytlk{H*nFG4#T2BqNTq@#1@7^~%qr%_
zjB#mx?v9ri>OH+uy%Khf-!%V-)uav5O1$C=!lgNjA6?`-v+$1s?||e|eesj?i6wrX
zf|YdnnPzO`xo(Kt|110E8@m9Lq;V#>euh~7nZ-1U$#>55&Sp}bdu8j(m@g6+xnAhA
z6m|2=($Sy%!W>MNy5S0smKKZT>!1mA$JUh^VeHv!6Xp00XgvrI=b1-?WJ;s13SzfN
z{=aEZpeJmH-3Xx9h9CtV&U;xD78cjzT;)JiSQg#+%M@bA{1xNYu*3kD_DD029xLXU
zI(7)P@6uF5^N-t-=`xO%&Yqg0<W*Kbv4Uj1u5<=M6;O>Grqxo^DIH=r{XjD3^5^>p
ze`@8L5>ah2xJ03Z?27Wyt)spn3!4O*YwgG4pBTOyWe&qE1SLB~!rM~9|JOaif71@%
ztyvZo!3Q_zo!e>8Vhi^#2}t%m9y3X9B2uP=m>})+TiLW=u5U)XvME+M6cB6sWce(}
z5RJmu*HeIE-~#{~=r`4B%RTw}!4C;~MApMzNbg@i8G#k1^I5_jme<s5;J_#f#_O{0
z)-T~_9A@$Fu~eS0Au8HwoPzh}i{+KAZSRmLcCWLXK_|^d#H58*?#^yKOGSn}Zof=n
zK5!sH+DGsl)`EgFdQp62b>)W=<9u2_rb@sp@zA)lS*=*rfDs$GIXky{=$xr5q|k5l
zTY}4i?FoTmDxa|VpJxHTH$vtEqm%9_(@Bi0YN-d3SxMB?eeUTc=aBw~b)X~8r3_My
zn&+}<Nzn<=8?F}w86VHXpaBQ$(lK*2Ip2#-SMJCTJ(*M{He*D=;9IHcDN}T7vQP-U
zM8jdRq@j0pngNT}ur)RMs(51$`q3C|1BgWTVwjPZ%4xSTTc#J`E|%K7_l}Yzugi;@
zlik7%7EVSX&mFPaKFt{BO<BJk9|Pg<{~B?Y*=K&l_QNmuUsN75FN`8YD9tPBg|IGf
z7BTcJ(`0*jbJ^jGrmsofp4`p<M*cS4QgtDU+))X8t0l?k>{4hq#|ifw$h2D$9^QON
zM*jY4((gWnHkpQXSmi@#YD+b@y*s&XFf4xhihDBB<3vnKrViT<XWUpVTS;)>1MkLj
z9+5$Mi!S+NW>x$EVTbJcfmB$MG5^EiRXv>CMXpnse$VM;ONTT1JT{==xQ_b}&l{O|
zleB9eKIYkDWZar1`?Bwl(vyI#KntZZPyQJ<Wm5f)89jSCLbLI^x@5UaThS-Uor`is
zK`X1WOzO0AO2i|3n$a(1{?9#L+l=S++N2o!2E>}D-Zk5to=q%~N{g7oMuEVBOwE0k
z4>A*d$*S}aiY<~^PmU;P8neYJupIw1k(j5e4boVkyUn~`Snduj3W6#?ktr&tPE}5v
zP;{c&N#4blRsT!N8or~hB8xyP_T547R1tX=6D-kk$Fmb}KVDhh+;Sm7fNSs|X#)HE
zf%|=mcc9!qIt`nm#$Kqi1`@Kh!IVOCC$_M#Ppp}Tl1jd_9#pb>eRdkzNiokW!U$L+
z@}x6V(r!0lI`~67l7>wF^j|w~MnQCGFy9mfT~p#dMwDK}xBFM$765L<%oQHmn3(w&
z?hXdY^YWj09)KA+`#u#y%QRHQsomy#^owIYK+EZIjjx$wB3O?F9`n0PX}8n7gV&v~
zZzc6MuTTrS<C4f}F|PJxq@z_Fjola*T?xrGmq)-AlV3Mxr;4!dCnDR~0)$e)zcETS
zd}WCB^P$KKCf-c<?a?9ZSe5REe?b2GXBc?lXQe2{z3CIsCmBa!<fGPWmz;|P|86b$
z!<vDgVhWrz2E#dByj@{^UNRH-g}8=K3=&u3l~jbCSKq<gW;+HFBl}rYj~Vq)y(tYf
z!b27hq$lwC<$Z?;M@;mI&0l@u(W(}8McXmw@ukRmWeCk6Ekxj!5_a%$n+7O%rfTXt
zZo+<q`36IVAS0#AEH1QwAu}eH#V{Wwtl^2d>iBn`BQ)naAA34OT?c#zi}4b(|EuSx
zdPT}nH6@Yn_WyBUfddDsz|!4y|4lJ=KdkKu4dml-{>X7*9LQ=3XSPxdl^yah;TMxG
z(U(g&b4_5HH0^wRUOC)P4Sh2yWywMqZ@-WjQnj4Nc3wL4W77Epv^B3HpNof#;Atf9
zjHqj{nuAgRlT1C5UE|&}hX9#g+Me#P-obgtDVtz9Hy@pm%#71gBVeY6#k~DV@u2fB
z+$w!dx@SJ?AWKC-!yYPVi>bAkRnMbr9D(916Pa>~6$b%IZkSP8(+7QJ`Ryz1(K_h3
zE%`lT&|5DTf8_^=Z#ixz@HLb#T?(_uL#L=BRMNEz?R`$bct&AlKQ&K}7SAn$G$9S~
zSL=mmBWs+&ftrN14o*flZtIHXev>LvO=-;Fzu5g!Irpxn@R^Uu&*TKcgWfHV3OuaR
zseRPz%SdaP1W#cakzVu`!kPx!QvqEtVpszE4-4{)do*TIqMP~!Fr6wLb2ztSLlJ)P
zdk&C^eY4Roc88Z+ZQ}*{S>3Y|iK<Gad!H}muV2}2X<2g~QfMFUsCuDw6AXBzcw8Q`
zYKBq^@#2K2Jw4D@XC>Y|CveLxTTn636u+o`uQn&2?aKdFAnIev=j}EbYFpb{<CRQt
zfV`=@k0s*vWe+CUq4Mq*Y)9xGC>{+=TiVlY5~ta{3ucvfdd6}#3y4I{iiNa)(;1|#
z)9g%wvlRUy^rMn%F^>~v+)$;kr+iN*IAJem-dfD$G81aM!Vr<E6%dS+i39rl41$Jn
zCZ%}9YpG;s={T5?IlY4{X~{dt)e!$vLWIn~v-bA`fzPitSs{htPsSrL-7laWBE~?Y
zoK`Pa*pkc~^?%!8SIxlMmSnmlMDksRi=Lg0(&WEMbc-EScJjgozUv;<t)qskB{nrR
z&#LIrj0Q8PK62nzm<6SqV{-yqsj@891&~#C<d(pXu`WFV#Wg)(XFTxZSeI;SpJhBI
z#-*83Jm8lEeZKBs;YNPu;6LT3h8!PMR7wbh?79%AXOaOVZK1d{FOEh#f%gtl_w>b1
z&fyP{I>V+GL`qexU)Qtr#{y`+vP{UB(&ZC)oeZ-2U13C@VLGcd-2@%{Uadz7Vzt_u
zl5#{F7g!@~@AbtGaq8=$_ARXjM@$=ei&3Gn;c777ZSyQn38lK9fK2f$MTd9bp}pj)
z-5Vx>duRFf0GLHemSwACoYU0PRaY$0p=tTl^w{&<PoWN90VhRwEyJpR3rD2P8$%~g
z(Bp5ALaLDw@4s5UGpg}zv|2$&cM&{~_RKdULgwxAoa6Z2qh|NmDAN1x;?<q%a&QqM
zKHHTnqOZtyUjPNeNPjp_q67EDX7N%5L6e!ezfCx|%x1KH|C_*gTnj2a@;u<Eo7$9H
zOvd&H+jDF2%=B+qdozMC#kAR82-T(1Ie#VChgU>e<KYc8(5wv5kGrWkW8bGMUL5TX
z7`uaxjnCVPOTXZxQg%l|pk2wVQwgj*LzPjbfz^{6R>qc-pv*R4@G5U>$nPI}DlBV;
zzC#wd?Vmwf)LS(((wSDF*>WAYvo>&@Ak@`&vrZQ~4IN*&Vz*TL4NGpZj~b>|ONxBa
zr*anTM9|Ir$noPstX!GF7Vv&5uKQ%^r#~N_>G*|dIrbuJD0iOut3h`=a}7}D43sGM
z1t=cxphB*voh2ij#Ssf(D)>G+<KTCmuG{|7rkXNMF2-{~6)RC;ooL7ke>#xeHUdR)
zV6kc%Krh5KUeQhB&zb^0R9WV7p6pO+)<bWKm)79wgXEk{B;;K$aB7E^<rQrn*|aT^
zxg%b8h>x4mrK6u&jKcXi`t{;TkQslTHrcWQ08H+6>CHBLwO3CAV97|7vM0^3hNa7Q
z-^%C1SR&o=E4$Z|cP5`%lWK4?YWu^j)<ux+&B&uVcQFIyL?x1`&YP2jHL&+5w!d4L
zhS?TlrzTXF8U{P?B;V}6E<<8H)jXT6!ZMrLzg+nY0nTJ7*EW3@qe8~0^t0-RC9`Hu
ze3H~L5kfEGTqdhYQx#&DoYym=fC)}5fWoKCL5d31l{DrF2t@#?^dgu~wdHpwj+%aP
zFQ>boz$ArpK}`URUKtJyN`73v;8#&$t`OX>U$cF+YKV&+6?4@-dX22hwO4Y?+Zj!Z
z#_!PkCc~a<JddCGN_cYhS8$i6<;<@BD&$It83AxMP1Vk*H~I24eV-oO=~m^ALx%yp
z@?eK)a9S~Gp_mI7%1@E~qfW1}${o&Ub!!-3Ni!Erwd5Zao-&<<T++^_P}%BH8AJ@@
z7%OE0+x@41c;w0V)7F$+hF0#(vzIaGbWk*PJ<1=6pL~s66v~<NdQI?=Vat3a<uwTT
z3A-^5Y=AeVlcBah!qY^oaW>pUP8HiC#yN_)DFX{|omx$~u!SeA;M#J;MI5?vS?nH<
z=CDB#+<Em!jz+T6S<@es!<-hGU`Dhpz;)MaTtahb{=Mp$FrEOaJq$H^8GyP1<xzha
zQVn7h4*(uNd@sjKuw*lMA^bl_f;RyDy^68=jy<8bA=iBkyF$OjFnBHE_t2!N>cSV@
zQDFLDPT$KdNOXu%63F_r<@%^6HdXf4KlJAJ`P#&Xn_?@8nmp6|o|S~5IH&NWXKRT7
z$$gDL1_smXLE_QICDGrTvYZk++}`ZSTecgk&i&9~luWH*MaZaHGP)TeXvJ&aLb_0f
zdmY9&$M5T(RJo<)`GKKO*-g$(vl_<JivzmaE>ENs$I$Y{PKM)P5z3}^Q(h5j2hjJb
zm2(**bU88VfRmd4kITr@d67p*P<++MzHX*{DEZ=W9_8yQ2n3e5|Mw<y1bvyOyg&t2
zxZB{Dz`A<+Xu91|zv&G(N-~#wi_qiG8`o!SCh>)Z7-k{uDufC3vm7g|BRO?=>HD3d
zZ4NVX>>)}0Lj)KGD^g9U_H(W&<*)W^DScHZ$gRh0nlWT-9doHp-XB=cT>8h$L8Td)
zT(vZsXIqb&d5bOrz1W#JGF|L%UOqGbpbU2Dnbz95uGC<R8%8ChB`{2B_KWmidfa&@
zw%l<nEMt$W;s2NiCzRJ=*+2eN>`@ZyCRR}-5`(-r)#s+WAh#Ogj;64_U9{dS!HD!y
zfDCArsxu7lIInpyKw_dY%9AhH@x4@<5@(skSQm0kLyJyD5wMcR+nv?S-&`y_4v2if
zVSb&z5OjOhggCw`X<?1P0(?cg3Nd|R7A;<iY4});pNcMueWaVKex$&35p&wpLtGVC
zJ^6^o&IEWldGWWvRY%!BcIOlM(S3<iDtl42nNWQ5ONoyI-F4h?@05zlQdvLckc+DZ
z&!UGbf<)!ZpS(9jeq)O|v^e~9G4go23`%rC>Q$T<5?f`SDGJmTl<rXNz;4m)rh!v(
zp~p`oY0lN)*rDXmi~7Gaczfh6Qd<`ST#5Eq&F2HXBM=^Tzv*$UzdvJ53b~nDTT%-W
z3v-EdH7jz?=)%(!Ylva?$*)pqlYJ>~mZT)CZtGu)Wdg}R=-|k%gcxJl2^xLLtA;-G
z_JY~6Od8T_7TTRU(Pmn#=BH`tTN<zl&MF7@<%Ia^=qK_?D05d&p#lk{hhh*M4L-af
z{8kk3RZ7AFWbl1b7*F#Tes?y*?xz%y-L>EP@^!04q9#CI?tW*WmsNH9muR5rdMqu5
zzn~es<Hu%&ISlh;H}LnhTHj1Hx%j+p5C<FWrJxn<5bwpZJwOtgj3df%iXAT99H1)Y
zyyXvGfF8s)gVqa3{ol5h<Go#y+Teu{>0Ld%g7vo#eJzy-1&{^qi>s_?&xawm1)w31
zU2bd*rP~J#CKbY)Nq|%S>IU>}F!xG%L?a<wZfMb|iF}x5JcNvjEcQE|C!Yy{GjDUS
z*|uHAdIxx`n(x%|74;k<EWLS9ZO^?J1P|u^kM3_t0IfU#I2clV_oJ7fW}wHgTSA<Z
zOLpBwr8EoZ?uK&O<gV@a^kAefRUu|^L>icN19)wfGEkNoi@p~=klC4S@4YXCZpIoK
z#P?JopYqv~(H!JyP2xNT;<Po*55Zl<G&JeS@UQ7i>{%U7Z=H@siot(wK|yus2oxFq
zs;G=LKY_VM!MP6+jOA#+`sC#D_;>1W0>3*WQAB{ckj*YUPABW%4+m+LHTp@e>L%L+
zPc>LVU04d!w!!5f(r!Bw+$95Et*MKrq{mV^<fS|L8wnxm8zNJT&Ug#lYTUc(PuOm1
zKgKWh=kY@AJ%eB}QBw=JZ&)!_2={Oag8lS=vuvc!BYb^=LPhvWS=-W|Sp>H7ea6iu
zL32L{5Z_s<XH=}X(Yt_@Mrj2t+&R{h{}5dr`8bhZokfK{o5bUKXIcrfuFd{QftIFE
zcUw=hiW_7J+@5?iNBYtK1kFWyBTITju}G;BsSAw1)dfVm1Z{p><lSD!p&G(j#Y2**
zn<pHW(8${cw)boR>`P}z+ygnuGXg^?N1bv5D(%uo?Nl?riL#;!O^pRi=Dqvchtlv5
z?x1ut4s06hW|S0lWE1J6E%E~ef{66cZ=^e9ID${g32R%U1N5<hzY;<OIs-ed3}Ngt
z#V5(jML6967ti?vuVOlQk4weQSR2v88u+c@ond~`%u;IIO}x4Yr=Vv?9wOYEf>PcN
ze%zNr7IhE4M0!LeiRV@6zh9QoD|$sU-S)hRdbiClE1vsLw%X>Tx_PSq8^=!x0b8^d
za-C=hfNz*d(?Kg12EUBIUss+gAKdl~$2M6JTC_)zi`D)n6zOOG?vnED^>v<JFB_mA
zlkj`Tt9-}4MWbF)N#wcZ4?{#J^B%i^9<R-P76@buw?|cZZa1nxNSsp2Xef~5$auhk
zo>2x1!}dgDAx*nN+`C{`x5c39so++p2XZJzxqU3Zx)RmOLvds{oukNYQ^t!&C6An0
zs%dg8)pM_f1FQH)*vtQRT#)T>9U`kfzDK6@_i0NE_k<*)9fhy>$<Ks9yWM>t@zE4z
z_P_GDS7RJFg(5Tzy=tGl*_GmyB%QT&^DimTC=p%tSvV9^#g30ix7zR%Tw$BS2iTI{
zRTQ^s2v`EpVpH8UAGK&*k#L95&98VH!7^@`Iz2tZXW>fBMJmFAo!8BtHJVlcm*<-c
z)F-3SKY~OJq5_&ydA=QdJyX}kB#;)*pqy=TDFj9@1syaXEtjgRt{J@!KlH75n*PhJ
z@)?$|{60O9rTEg}iAwD>A|IX0;X65VzZ)+i)V}PX_R*bDK7jc&N-HK-yKE~X&237=
z1B7PoB7Z*{fv8ygD1cGhE~j5SnmB$SoVr|!v=I8`e{_FLzLb+anVcIEqsvb_6xZPR
zJ^ebof#9Qgc0cN>dlA>@1bA%xj3~pSyC0?oxcQP$%Sk(EQx@hW;9PZ|4{+$1G1(qN
zU-nC*`8I$1?u7|`2W=!so=&lgdsQL2B~w@5;oNz45bV&h1wtM1p!oU<2)OD-)E#5U
zeQ2M^&HAt-aLp{==-5ZmP)e^Fnj8W?ooo!=Gz3!deEeq=QSstF0|TC1-ghR6$Vwwy
zx_VY3R=_{w*aq>%@+htW0ZB+{Gx+aF9{29OB_hp`;`A3mSZd*#2fyA0{%*WH0`&ch
z4GzFq4lRrpV`L~EV_(pD(<Xby+9)j&!b&By{zB##g2ugP*v{p)Cb$L7l<#;_I@Tv4
z=dKwK>V$01U#5>=T`iD~KOT2pGqOrZHG>b4=!AU0{#(%uw5r}kj&p?I{`K(i)b=5Z
z!)yCyZFpDm)jewWo(}Llq1?x`8q=DM9iIe>QWz^#vOY3{wl>z7FUFg|kQlA1w2@X4
zEVXAp;QLDjxgFlExdPg8i7H8iC*dDbHgqKu=~hSm!>U#3KH3g314<4t>nhA$EA}t5
zGR6<Fg&ox49}!ay;@oZ&J06^At`_+Q^~y-B0?4QACDBU?Xgjs{D~1AO{UlEhHajf^
zRH7O*_u)Fc%{p{YeZVRhyu0lx+J&n6NjH!xX4dF;74IYOb57ejc!u}rMyFd?MR?td
z=pxGR`V7yw;<L&Jj4HnFy-lsmM=wpPB~W-ReFK(!=b4cFIu0>xLOXZ#c(Y$h+c671
z-!OfDK3#QONS1W}In<}ePHWQ|;})a0C8pWXL^q%GX`{2po<_Xut-S6Df;&`=J(eXY
z2?_w;DOFl;lRbXw`l{$e=*C@H^X!dInbq;iVII_!S(N++X$w%j<T&r^&lR)A_-;Bv
zuUST_aTX2j``OyZfdnV85z+eiH4>-{J^s+=wL>IFKfAXQgCQfZKa<iiH#lS(udMlC
zsZ_ulAhkl+S|<)`6ClowLcnLGQ?VzGTr*sMZ_9qUfHztZ>%&=RN7+%MEpAuELMkJC
zCtFoPSOd-x@x(pt=c;RT+|SpKSz**rjc8P5%d*oHP5D;Ctg<cF8H``N>hs=O7~}4f
z{J+Bu7dsTXOCSnPgh(DHn5Z$nzt#NMqvRl{swXU)!z#KbT@8$($_4WWi_zjA3siw5
z!JCRT4nxBd(eU~fqEUwO+op0{C`|H8ISXoL#;<qk9%QHxlq}_aaZJt}M1o6@Y4B6E
z=9GRV$>n@FUK6JOu6bL=vW7q0W+4v;$cY^y7Gh}mDeInQ6tiuVzaVP6HVim+yo}Eh
zqxC|7F0|eDFWs2lKp)f8mBc-!yxxiI=qLp;A4(vcHJUM-x`10Lns$kb-G~FPJ0BH<
z=I<jWrwW@Xf>~RPF4X|+Wa#PXMUyLaBMbtc!SC>Q$NQ=A<8Q0Mi-l8-io<eFC~kr5
zKpp{_nvq5%A*BZBnHnXqzT$`%D09ujLkBkK9}%v%ea`din|_l8M>zP4i7~y{l<~1r
zMchtMwFzwVpH7UFH_SGq)Rjr-G|DZ?-M<KaGnX<e4jXejSpH5zV-t5u_oj8J9Pe|L
z=@Ym+Y0V{YA8Q%e>O2@*A>wB}0x%rq+1`Ipn)om5zr`a~1Xd7@7VHVA|H$c%^_I&Z
zm2$#vPGK_FAMidd%B<~vHhOTqLRi;Oj}fu)roYZYB|6ej)6ioC_ob9g9LvOiF<2j?
z0(i_y@F81^60ZuWG6qt32E^kB&NWwkoASsn%aPyUwg<UGAdQsjf7=FwHlP8p;co7w
zoL6B|CcUzel?V0$)APuOh1Ab-caD_uWaB|pf@~29cLI%KC32ZFf7cmPVDEpRDi$UW
zYZl(t&40H|aP@F?_MBy09+nCt(P&67Z&x|O*0u!HP93hsh^k9D0GX9|@WK!WSc&UC
z)bakBGL6Oh5>N=|tfHc1d;=W$0sKFAvbAO6N8h%Yra>8$dhOO8r5I2OOPN}a(Y$>4
z6QeFuC-OsaoxSdIihpLV`y0@Hb5>4BZm7lRod7=a64kJw?xM+ctlEgwl~uDW_5>rY
z%$dV2au9xq?1`jr#rJ39;4bXv(*}Y}G(}yjop@>%+<r@vEgn=-(k7SyU|SR&5MS=#
zx^?;$`~~a`ssCTx-y_?J<G9`+%wX>jOVRVBCTcUR=*yWZrGJ;zqai1o$a38iJLouy
z^<Dd@@27&D(Z7~Dq&?)ZFM;6Ak-%0e%$c~UR52i&XnT1QCMP|6)fOfkC;D3}M_BO{
zxU=%d`0_;@%Vs~wN$Cm~(g}td1NfqwKl?*AifMz<XkX#Cc{2(vy3$<Se8->!Ek8{Z
z7Uf1%l^Xw?Y(SMN&~DB$$lv6oFT5LW3kYfMlLL^nlV&kL0hq5g101EoO)iDvu~E{O
zyIyaMttPYkx7{H14|G-m{l;@H^y;2nXK$<ln`-83IT(2<r?S|N;Vy7ZDZIbDK?yWp
zbBmc1=l>FF5EN3!-+d*B?&=0Fl+QFcC&{QoDy6{u=RQ(a4wxk4(y&j`b^H+2s}Z3`
z9?@t`>p|17_LRmKRI^cwE`i6JX6*L(=EC_jA>iydYgr{6ew8}MUrF*-nHJ<%3ql4-
zT6ezT{j97b$>-N_g^4*E4XWk5de0(w+PxfHKkTQ?lu101J&$gDC?@RRP2U_v28Er_
zxZU1Tp_`gp&iOt4Ip!evtNjhv)`AjzP8y-MfIcn17S{%7pR2eIX_WU$-s6+(c64Ai
z5NJl<%px|?w`8E)4+D?FAcIjIvMwJ$HaNbzKkFeMuqr<`Rmb<wN^9rdSs*I7%2gDU
zFyv&0`?P9(jmcN_on43qOVV<>1kMf;4lS6HX4Zo`<L~t!l`hr93Q(gzBe^4`@g1C1
zKQ#wU;XY<q%ifl!L=$%A?Hy#dqG`ya8j{asoycKCp4$;hcXn2(7TiD4@h>nBP1dLj
zie$boucKjhn#LGToahxSSL1Izbsq?r4WQo$2BZ;6b%N<auoCplx%=14q;YM9vHVB?
zsg}!rJlNs?)qa8?&@nh(k|7yqrj~Ubv<kt|l4+m)vh(WpQz?`%@|&v8%Og5`b*Fg#
z%68pxK6=Ra!m6cB4x>)_^cwsJj5yC5Ue9{CddL8`aQ<8Efa&zpC$2bd0;d8@+W1%O
z<lm%h9QJ6BtB$`Lx?*|6(f~h4oYMZ4iLRE*o1&Y@VEU~e$o*LM{U@e*u};nJMr1}&
zn0W4Eiu3ezp8EMNv9|iXDG`u(GEs&fk1mFEm$`w<GQyK2&FujNVxa4{v+``+bx5P6
zA*`u}zWsLET!5?)LdtBc6&1x~W~(8K>B?sG##5kvb`!MW^u6=+K0RtPk0|G$IBd)=
zEZyW_jIA6F5S;;i#9(b5NG>jjCoMKZ?xWBUQ_shqLg;VzG8KlC9^Uo@18iob3mc=u
zEN=GU2t%Y);k&=}go-MZI4Wz^+2doPM(UpvIYx{`1f){tf>>$s#S)$UZ~YzU7BdIA
zk^S+Z-9zOy$+;L|;?>$8E~klABYG!9e8`Vu?^;`+{I4Um-&4*h_S^sLa|8R|4+jx^
zNm{0Si@|<LvY0p3O#SWpQvn`-;(_cokO@9;!tCD5oT|AsxK0YEw)0yEB&0g9(7wly
z;6r%Wn*Bna@IhL}ahj~8Qpy2g<zaz^^X>x(B7?5@$I+_NHu70Cc#jYxpy$E`8Exu6
z`J?BHhExxADd%<Cn6k%!lwvC3*a<vZR@cSMiBx}02p=Rmwl7(itB%wFmoCcPy?H^8
zpT^9d3p}JUOkl>2CZDcxqOvWY0aZl7>Ko<d^Vz)5kXXBQ`&6BlygPxKgs(=7;h#&L
zf3^R~%yh11?o756SIlQHyFwe>cgUw(#SV_~r6j_6^5>o-9|E2q*^UK#DC*yn37aDT
zq9fe(yc5~UCYwp@W%xqfb(wANNE-wuPOsp|yJJ!JB2<QxpW~W*?&xa@)IlrC_pIWn
z%bICfrOLnC*b9|}5zxhGOOZguzY?`enY7&-^5mtdkOqsTG$nmKVf;3BG8je={DCKM
zAF%@d`C%D+SBto>*?-L%9zR_NML-p$5xg8Z2WDGageZZ%I>!Cs%*^_0YZ&`3g*f!4
zJr$w$pR97nZ%gaY=Ie9ye<Y0>)iSu-jVCQ@K3~zFQDEYqez-%|zGCLG+tGU%UenwW
z`b@0pfBzzZ_z)r;TMWbqN2wbY%`^fht-3Iwq+JgC?}QyH3pnh{3qPLN4eJMin%%gg
zpb|)^2UEu7AQ-h6P+5h#4A%O1Jw8Iz2_Z3tB@d(5xS#Xto@p61ak!y?-=T2o;M&A$
zSvkB*7WRw@>)MCeclbn~b%Sh8XRW$lQna9=hErD*R|3ujfj|KR9U7ccQNCiK{naz|
zL;Nt5FZx13pwKYT1228>yw<7ub>=u?o*h`f-WV_orAAee80B-J`D&E>Fk^efD}n_^
zJtZ0kd`)AJo`0Qkq-yD%l!<d9dJ98ASC6DYrhV_9mMPMGbfSg=RF*8)6UMl1bmTo`
zYb_$3m!3XAx)cX#id(ln$U}E6cbR-}7vIB^8ir#i04;JW1Pb!Cq<S<cBBRaGYHc^&
z<=;R6Xxy`lqv7J3r88yoV2Kmi*-{ko@sVdXe?=j*ifeNCA(xX6frM9vw-lS;&560q
zz=Tm+|7<Qo9k$1?(H?hL3!js5%}O1rk9hC3eXDQ47GIp>vo~E3$Gd7hZU%1IsCE-O
zEFC4_jJ}5>PHdn2Q!Wz4S6ri<Iy(RMj!|3lU*x*kmHEpPkr<(S^q=Hx6;WPd6W>E+
zBoE+~JDSSNTX1~t=;Mu>s$VY>cCNM>6W`U%#NROg<u}B}3wFi-+oOUpw7WNN!}*Zm
zHmbj&m>^t2+Sot-c!^-WMIF0s+D|@jN%yIa%t%2jMcJwM=xkQ^SK@@WRV69Ann?uK
zGu)I0{i6fw{0KL@uq0Hn1YOt{giVasTY)Ob8%<4CswCx8raY;h8j{^F4F)z59dq_m
zOap<#><s^iX5!|;CQ5X71qI>Pl4}wc#EGgQYUlwv`v)@--xdEv2XvM7PAmGOd``3!
zQ*(a}qMaMd{7J-T7m0g%W4d<W#XfRsPju?zS(R1lYwXEGaiz6kG`?wFuVCehRwY#4
zXg>i6LE1ty#I}eNe>bigWR;uIY$ryYfDM%0;^CRp(C*sEqf~9BZHZl1O-4u2>PhW)
ztctBhxsz#d?8P{Gn0pD=hP}fEF9ag?=m}rb?Cc!6XCgG8#a}LWtR1?Y@!F)=Y(#nD
zy4Di@(oWUQtUMv5Uhr%>hz1*9%uu++-=bQ2jq;coo{TCzSpE(_#dLL!2hQrmcl+DJ
zKrJL&VS@|r>eP7A=$54@TD<b2G}8(06=N=?Nq1w(;b~a7E^%3BH#>_?f40O=>xzgu
zdU(-27KsV8<bRjOL0qlB96!`>uvonFRg0b^G5ASme2aY<zb3j517$t&y*<B(dUv^_
zZeSt~IA&r9Jg*4rNW;?0mVXIj)h%j*apkvCqA9CyIEz+B&WkXT%uEeimPc=kwKrZA
z1huzww}Xlo@-Jl8k+^erIpIMr$L>w!$%3ERAE;`h_AAjm4Rm?{04;}_+Ta>4f$@Wy
z`_$cOUCT2c+HurMj|~;o{^LbJN;!0`vwy`!-^|Z82{O#1&eI;5uV?(pRq6QfL$$o?
z0vD-=Z4B_(Y$w_bEQQRHe4KT^!?Wt>FUe{C&%{mlO?%7O#`{|WVC*H8b}ba+^37D*
zRgckS3EQx;4au}6WeY@{vgJldfQ{bS6B~*Sy`V6*c^nfCk2$<eYufNET|z<%oSgBB
zR4u-=W02F<;D*SEg8F(zOiMnrxrD|?+-GEvFH57=0i3qor;po)RFsXM8da!nrI{?X
zeMI)@YIy23G-bY>#Iauht+W`eno0>>l=l5sz7OQ0z>UO>B+IHdAH<3?GTI-Q%4r1B
zhilu*X1U?j*1Z1erAFs76Qbb~01*%eRPoIaAqY~V{>U22Em1eVK)o+{n#Yk;PLi(&
z*Nk@X^`7+p6UI6f(fId|u6J<-?WG_gUj|klPR^_EB9!WNPcLx8Kzhu@;JjkaY5O<Y
z&JGQccIIE|Tgt0S!HYYkc80EdHZLl97m9gX++`5dW8doj-!9mhp8fny?My21)h=18
z4F+RkzOUAJMt@XmZ(Q+grJg&OY2y#20YEKb^eY#?*{hc+YwcTnFNzB0iaZ%!Vd>Q=
zT=&ODf;hCBCWf#~6g3h%yAfvzzY-`fmek8XdTOUqs8`(sXI!>CM&Cw#q8l!F+w6IE
zJo0<6L06ZZd1ApTI*rRgCoRu)1rz^Xo?EN=MVlEG!ipAdRto1yu9mzFhYNj@6whX}
zo_D4V)`p<8BaaR_BsCbNJtQW9u|FtW3WW1aoHH-_i$_0Ay(qFiI>_d_#rCy7ms<}c
z0MLi1=XLH+^CUOv|Jv;f$?ji%|I5RRQdU{PA1O_uSdh#ri2$L2g|#G5m0g!C%!nlc
zhLHk8jjof;k+WJbUYDs|V2vn(7&2#rh@sez56=u2gJ;4v(er2c2rcWa@4p7=xCEK#
zzWIjT$?br3FsNxIf}rVPdBApEb$Z!;_{bUg+IG6WnUvUDvP=ByAWlFN^`M|lEvR7x
zRPr71iSbiV2G0KFkWD=*;$aFr9(Q3sj1p)QU91Qk7V1J4Qbr{uGK}Ioiz=K<V+z_0
zH3ki>-swoc{KvdseiwlG(;9GNud216t?jW#k4!|V3&v-O+gdEG7Zf7Xj1C@jQEzi4
zq+#XTJA#@+ZsBY}2910wqs|H2Ji6?ZyzHcwX)F#Wl9K{BnIoV`St^iW|JKrG(ILfd
zTr7Osec*gGL{a6vN5Wv35Z(4WS{(uljfo@r^Fr-f!yx9Mi%mmL!3rVPqtzEiYa1-7
z6j9%a`<Cp@Z_9j%$!P1!LM<phbqkRqIoV7-DK|DL*AV~d%x>ECg|6GW+wYQ}w%~(r
zFBzqv%#6u3AtIq4)GEQsc$qgi_%uqz+xvMC?vd7Owb18S0yHwglAz&>2X00;yJq-8
z_%L+XAY?|U%Uu{*x3jqB5$O8JHP8T~Cf^e#Q0WU(Fi839qR-H{k}Ha4t13iom0u5I
zcW^{wl*<=oElj@Pe2NZ_Ug|dmEo2Y1^L!;|^^To**^>fi=H^3&G*ehabuw2&LMJC^
z0}LW*%OM`wNsFM;1A^+$2TSF4e(>O;-$1Fa@39O(`u16)u(TLw``s7QfKYY$ktUv|
zY!wBSy5~Dgj%y;0tn}KPH~Q`$EreF*c#G(brzq{*>Wd08&MZL_m7t~_(OEy7u)+bC
zSHl$R&2eCQlwIVwiL>{Pr*%{4(6^u%)DGW9W%6~(><TYw$fV@{I#cP(I6*BWDGNzf
zt#IimaNP0xq{VzS{^jcqI-09eM!KQ?cD@|d{XqiUbtWgSOH#hzahF_0Gc-7DBRHOB
zeOqcV)0R#VzRq`@E#KGEIQ{uWB*NWtImn&F2tM*(Bc~ODXrR*VlWlxNYNk?WdIz3l
zgz%Np<bdC?k8)r(3A82mCPylbV`omvLF0q^)9~>6itloFq(ZAD^abu4KQnrPv0|$a
z!;DVYkHm)kF%K!jjW2MDmg-(cec>pNRR}*X%XV<CQwZuQW5|8muIZCtJwGHlbi=@R
z_LOzMo!qC4DuQb^Z-9J7&(Ox2UB2-Y0v`S~;{jD^SWMJa7%4923^kwsVa|yCYo5ld
zp)g8)>hJ=gs47cq44Xn_Tt!VKe-Rm_$a~>Qoc>m|XQPiB!tgpM)wnNw&(wA-Uz4dh
zh#(j!j(SmwyTG_zg@UnZM8k!CjL~MqP7OkEJ7d9{G1sz*O<yFN*R7(?rA+G1T=X^U
zg?+s@czv^XFq>Cq{%JJ4Ey<<8&&$qE`A01D$^|w8G~*uYKnP}-|483p8pbjPy=El>
zMLVbaFx#xSTe$8kM7zO?)ol4(VS^VC`^|0APZpAXP`3tRlpusl5FT?Ih@<ZgS{t5Y
zIT}0-{-Y`;H(z1i>;1_??@fJya!sfpg)pd}jQbAyv)VRLxe8)RHK=NufUBhHY><8)
za2EwvqZGI?v#YMhVJA!mnqx5pvyq*<Mx+@?Ao=OVz~40>rzE@zPwMlv8;fe5x$T><
znH|Kug~*F`j7D?WT5jIGtj~la*kDMvxB-|X*Jy9l<{i#Y9OwQGt6;&xU>O=C*TlHm
zq{b<PE>ftPzd4<|*$}HSj^@dZ5+?Vzcb$I5%%F>&ED!QT6qz_Dxcd9jao2LDEz`EA
zHo9=HfZd8ZiK$C6GQ&G;&_g&mE$rGDw-Afh!QajB)L5wT&)9=ekjBE`X+5+Wc!xd>
z$JdT93S!+Bmvx!Ixv6}vI4yLd??V`4=E*6+=Rtd!;&dsE$m~jXTF)&AMkxnevk*Ua
z+m%y;Z?4HjaAq)a0JYV@#wd9JCsu6u67@7l>-1yp=+N*AEA$4iN-TA*$-)Wb+u)(J
zfprj@DD?HY6^?Ch4x>s(IWaC<$?PW&FhP57)>R66nM!`DHMUW-g!d^uL_Zs;7+|rE
zmti<VxJt(EiZBfZQBoeU@%1p73jcb^h~`-~^P;6Pv@e7k%1-~TKc3kHcqsgMsQjRH
z&)r|Xp6*8b*SGxoSJpBLQsk{g`y*}n4i=n*D<kh5sF~?K#`XEG<-2<Vv>LcfLPqxe
z*GC1WgcOD+b?5Lq-P{@<%(c%$FERJ_T%^xw%pVs9&Yt>C4NlHjvr83Xh2^lC-94}(
z@02?t9~0@`-afSh7PGyhm-%oXNqy&ng_@ws@*H&RkkRYxSS}RKF@>9RH&o=wsia@=
z2$&3dp(mR7kCQ!jPvSDX9_l`9B1<dw8`$S@k22A^H$i5z2sI1Q6jOi7Sg%^I^-YdA
z?eQ9bA2y!MdqP4@Q$O!wcn<FW%>b*#VSCEbE?)W$UOtA3sy)hJoS1z(oz5Al3NKiO
zRvRJ7*;zlXX}#S*cH9u{2L`9vXYK(AdH|N&u;lDWun@;P{gr}_ZGh4a3u_SBphtT5
zc4$?cZU6B|^Zvnum^Q*3>SKmP<1LKc;^Yk}d+Zex)cy}Nif(@d06hnQ&P7AoAqwFy
zDfqR+XY_cW_l$o7g|P<J&2bA;*xy@c(?|}HPJD;Hg_J53$6Aa3mY+2vAPrF?qtO#?
z>Fo{#bHM!FFU^^7O9EI>_}y*;vGF&`d88ll!<;u+6l|Tr2-9Wtp98BQg+{qz1k7pQ
z=)xP`P>%0<q$u4tpc!9xaOQ?te%C=6B6gacD^Yl|@H03-QV{vyI|T2Myd#3Bmdxk9
z6~A14m8R27j{SHw_og;1ic(I<Wkz(u<PXT>`(n=ZJ_2&p=?oMLBb<ir5|-J7hZ6hK
znNt=3#uP)mN1hEp`vIVSgCebxto#lYQ2U2q;TSa{{p~Q7U$yX=x|&Mt3lWSJB!Zjx
z@wX^)0GQu@#66NtG8{cl8hw>yE}c?HhRn0fyFuKlRHADL33q5p6y5(Yf&cwvaL77?
zQU4#1j{^SxJ>LJWNP_r(xAfm*k_`Iaw<z3u@ViG6)+!2vUKLX23y;^R3vB8Q>C#Hf
zt^;p<f>{DrC0_d?aQQfcf^qDAWjAEUB&bjW(MX3+#RZ1S9ZhHyn|bs|YSfs*9Ny>j
z2@E;=-ccr&e)wvKc;5?p9kaP<W2)~8hM4NL<I>w!fH%k&ENCI$_y4SVQv+}prPvIe
zAeSZDfy4M7WpvZR4#i+5F~F`){KHJ%V6;PG-d#2X_r71hOzFpZXLic^GaGVd*SeH-
z=SU5E1GkSYy+1yLtYx+Q(H|D#xdqVoS(yg+S)V!JEe67sSAP<TQ0T=Cm8c!{RQ?X1
z4)-Rf88N5(`-NfQKfBq;tnL66CP6PEG&XtKS8)XkuAJ@|^fMj`dRZ|>t9kC3?pvMP
z2>s7m9nAiFho+sk=QiJXJJwQz9dC$4KU*_(XIVg*ULp66P#!!6iui*WEy{QA6(4m(
zN0hB*4j8DqBe$DvXC$4kQ&=1NRU1*H77cZG;sRp#K8SnW9<WT5Z1`t$1++3W^YfzV
zX|J3Ft(1^askWjHO$a9tfv3kM?Q|^@=0CYu13je3+oz7JJ$Rqh?3|eb1ApF_vU^s+
zBWS?HlmEhcdi^r57X9~(o85hj-(Ar%uq^(60yw;b5D*F$!?27aDVExs*}+$DlA}Ai
zF;kczt@}u$6C!E<d`YJ}*)V4&WyK<?Fd4hlB6K2YIX4W28@7T3f1K5&0RJVWb0Pd|
z_&osd)>vD8T=%tp6N+1ClA^*zD~tR8XnV`3xRz%RGzkF`+%=Hk?(V^Y6WkfxgF_fR
zf#B{A!GjL2gAeYW;0*2z?z}nY{N>*F?$@{0eCRdZyLVM}b@i{Rt9$Ex)zS8UiykFt
z!0-M>=DGTX;}_YUeE*e*$TOzc^yTTF!eX)hGV2^n#t+nF-aXxRY>=EfNt5*;+>;H~
z-)@@x`c-K6T9zg|COoB;K@(f#qN1TM)mcb}YgA!(wKoS(=Rg^#c!sOs4CddLO@<1=
zZ=QtD&x3uNnRdqRu~*nAU$gtl2oahDp?yBqMP;xTxQ4E$*P7RoiSaT0t}$!hhR~<E
ze=Sk1TUjial&psIC<2pcMT4h$lx{MU2D#>(4N!fi&@z9gqfJg{#2M&BeV!F@sycb4
z4k!}ZGcplQ7Oc}|?i8g3Tc#ZM1fbyVGk3}Qt_d1ftOiPkiAnFZxmNocAux_m{LWv2
zxd4QMBK+m0Y@XPviVnGX6(p_6Qf<BerSYDBX}tCNrP#k*nGkJ_`Sx$UMETXZ?1?5M
z(s(>1u2CGlb`WstFb@HDUY{GjX$%_@2NDx69?!QnYE|qmoR2mLlGs>?WZ_c<5f^Fx
z>)uwMRA*FAl)!ABY~G+t7K6-&@fDf*r-!4*MG0`h_uGfxS~kWj44lqlQ(K)xGR?Xz
zmajimGqq(4+kCLU!Sz|fJpTypHne|R=T7BR9Q{bk0o<SIl8>A<DR_U;yV#rI9H?Eh
z6-l18$2R`{NqHRP?_UcH!cWkcat4Q|XR2TbT+>Y~By~=_i`EijZt!r(lsTZYTGSAj
zZs@O)wJOMajB&vH{_z9Wo7Vx)!V+L+LJ9yTI{XsJ4`UzwWX$s};iq@|Ax?5F`}DEV
zVm#+Lxx|u6yqb4FPWQJ4k)Nq4D8wa(dn5i7SS=Tn=N>Vr(yN;n25&Qp{7DnsO9!4`
zh81}mfJ1pjA`WYi9C$@Y;=ByNa}J*=!4tAJ=hF+&1}VXyNg-Y6T2SMm`YZqT?mt@j
z0{a%}qE_59QyPZwuu#rT^qt#KY-((*th^;gvqd9=J@?dI?5^B=qkhwh6!>DNP60xw
znV>$eoR28ZQO7$0q>7k2j3}@xyix>CWW!(r=BW#{?Y&FcnC3U0VcP5t-l!8Rww;Mh
z1tt6>M;KySgZFFG+GB?xj~dD|LAtZj!3z4~QVp4vz4teh`h6*mgTVW;_cu;fD9AVw
zgG}~60k+duS3+v5mg=hMgN5PptVzpx5;=nvnLti8#np(CoWie@BGxIi6b`TcmhBVf
z2gtAsHgwk0xc!OHXCn$P6&ZfwqF5)~Z8mQ86m5@lQcY3vkUOv4)x7&a`S<TKCpGzN
zRWxZ!zM$%afVbo2pB#Or+Vt3YA!_d~$);(+(NR$%%F6N@D2Og;k-27c95liS#%*!?
zAxN7=Jb(^qu%cR=GORg^+5N&aT^H;!3e{Y82Cu)m+kH{g#z&GilK6Hq5nI*%Q(@xD
z=St(IVm?vt>EEuS0~KTAT(a}44Nh%p-xpRedPz^r-UE?NAd3ce*8b&w6^)$D?e;k9
z>gJJTr5|avb5)k@KMUROMcz9hueYF7D(vuzmHefHN03Kj^1Udp$oXhzzcV3b&t~Mn
zR-H-7yw9Nai|57HUtUF@ISgQ5RRU8c{PnmNs+mMubYW_sl?x}ogmzrM^DbJsf}tqx
zm1YT>89cwI$%JRYJJgdPvYp=^xcr>U(H=%|E92r}5_6NRlZq(|g+F0`E(zYe{!8FD
z`Pfj4<~J}-^pPC}g!4hhqA#KmtGxtg!;UUOR+v^=OuE9kgk!7;#G*Fuy;*0)xTY+u
z+a%8`UZJS<2w)3`Z@J!c*#4lxa6y+(qE?P}81U{GJH<Xvtz`&~y&yR|Sa>g0fmT7J
zL<~bwqvxj>{BzbENx~D5Lbk~-?~<=7ke7JfXMghskW(AxNnr!ooL8NmQw6Q^&sMeJ
znW@qbQlO@mURh>_*p!;Q+?%QvDw^5b(w&j|0xhPQCK50uTK<w%rTy#JQqJvb+{!S)
z?XcDW&0F;`j4mN?Yym0D_2M5D=d?vteSv0Eq<jEbU&PcU1`5xZt&9PlZ}ofO)Z=Va
z;$#2tflPV5<9Q{Vh9bp_h0z~=BJrPBc6&m<yKKs%Ge)5lwsF-sNS+d1y%nVxJREY&
z{{<6&o?AIFqDcr;-bncnc9~`6PZ}&wMsvUXn|Rll0Q4O>I{}Djk>E5eD`}5%$8Obd
z^Jn5<TKD2YH}vEJ`?X@#20A89w6gNAEX5<J`1M-_q6WtJ4S~ic`x`E0NBn<=2lx$(
zZCE-~d*!W-@iBzfk<ao_uII$(C9#z#<uNkNh5-_n(`o<6BL4W~ff62%$bEJc&0B*%
zPoiDzAa?UfPQV|h*s5Pdtb1y5a!OP*wDIMVPY+F-s7oT->&L_+V-QZ)&Ea<?Hq2c>
zccHgk?O-u;Y!JBSyM>ABJ8%INFHO=+BGFV026nU6+owR`o9<=xc#u>8h?IeA{)CTq
z{@1h`*dA?>b}$b87N>ZRuE1(e&2fd0ISN`Uq{HRHSZm;$+VMnmU^X2lKan?WJ6U8I
z58TFb)`xo{<?H;mv>O-KEMG#IHo_-Agh}vj5%#<#7b9Ga%c<qwwc_n9#LfCir9`OU
zb!8HL5)YBwgM67KdL=Q<ulv<8+{}<SX@}O?{GcrI&JvNTLrel_{w`(8t)NJ5JW5b;
zsYR|lYbVI%jyL$O7{_qJ>7;F;B;oElV5Wn#_!n%2yeFQUYU_EZ5q|SrdJYmcZCHw-
zF?;3uxK*i%pJxPhjhc~0p_-F5z0fvBEOiZ&R{A{9{>hRcxYzk?9*=W+V_-mFBupgY
zcHs}c<EW5NJ5_epU9{i7=anlZ+>G50M`+voy>|Aqo%8;~<$S9ws?!z`g_`KYRY}OZ
zJbN+c(_7qH!w>jUa8_dXMUiwL{uNLP^klkLPX9Wg^lu5^6yu*a)vonRp*lT~F2|oP
zSwF_x@vc@l)l3An6678S2j69jk!UNuI6k3qs`=f0?jZFui$9fzk#FVnPk%ubN}WZp
z_a%Lv0qKaShj;Ro%UW#^h0nPwFSc_@*3=+fn%o?1Y&y2W#pLB{PfYXVdE=#>FFTKh
zp45pM$L{?Gs{!ZUr~bn+h-Q3F)P=!zF>MLdG<=P*Bo`E*tFvyv75=a?9*)sMWG;7l
zS%?;ANh4vteTSv1B8>p1A=99t$!o$V7*eZD$8a(N@q>YvHh4k7Z)^V(zL?LS96zRR
zmFJm(q=vD1`PI(L(cNfPQ}9U)xRx>P{BH3&Pa+;D_vo#<zgmBS**VP@E4K(0@SzQh
zoT08848yEYZOs7~r6?Ily%F=@=<FUp+-v0~x^9!EPWdWao4&B*6x}lXCb2oA_v&~4
zAdf>|Y>iHD^d4goa(~Tc+$PEBRtX+Cao3mtg34tr6mb^V=P+5l)e_foe;r4y_sk`C
z(p>v#z3+hQ8uqy)M|}w5XZ)`P3j79EWAJna)%1Ae4pR_$L$r*F=^@mzh*|Wk(4%st
z#r3;_2_d9(@8nLzKPOAR?kQS8&&0DdrG&L)cRYCg<cTN8tDI_ALIC#J>#L{m0=gtD
zr`SYgO|&nkU0T^p=#v~br#3p}p*m(eMoVYQ4V|?05Qi-v)`?h5Zs4oQNFixpFty*d
zS+7RnF?8UKw&=+M`g}X57n4D38BdJk&vLD`@_3UIxJ}8eCFYdD89&#S1KAXgF{2b+
zYPoZ3CH?$7OvTogdL}4Y?5>g3+&MbH<3oGhJ?;EbER&HkR|BU88d!kLW~}m_t$b@(
z7gu{UNe0BD;VL8)g=2`+Yk{t@l2EpIODB8gZk(p=c*lxrr2-*4BhTXeqa|S`Et=*@
zQ?PgN%i&Om>MO`U#j|SPk!@ppCdYx-_8lI<LN3=B>#r@&J<_T?P#J2Q*lKTRk90xu
zssf!ObFKtow_l^Tx`3qHVaKhLpy#wJ?nB~hB~{K|?%v6|uT|=Tx7#i(LCDCs4@u}(
zpwB&i3!)7)DI%gt^-qk!zfSnuc5w}s=kkdB)7#QCm*S)ApWZ&1{M(x1Q2>%7u-JU@
z!kB{3jwZ5yd+bRNGNFr@8?pNwz9L{IAG6{zbn@xKEgZEa$QjuwuXdHn!wr^?^q_3^
zaYNvGM*xdHVw?;4<SHl@7$L|q_%@81hBmffHZIdS>SkAEtTMj#LBa0s#-WdcJ7;FG
zkm$0*$)Sjfbfwy2@=ir7YmDwLFFJDbbzPCHW_<FGO*A*yq=8Ut_{5gcR7c4Bwj+;P
zhV~_4C%z*tO_s3vNvrS_l6rXxxnQzz6aW4(q0B)FFHXCK?B%bcNi$pKYFIhnSXC9&
zrUW?SCHNamIHtdd8s}M394HgU&HRq6W=_xaWdeGv>0~AXe85jwi)`jjycB7P7tHaf
zc7wG|$E8_|h&ux)L`rKK=#Qd$;mdq7e~7Ua8d#NVV+=Uiv{mLFsEPf?pqi7PWTaqw
zg9_PMGx^QTY2CgKUyRHnzVzv3KC<D$-J#&wquF>LvYn|X9<-C4kbGaP4AY1~9+J`L
zx2H1CJ&bVB44*!y^#8!-J6W6#;(_okk=^@l{fjzuV?S9&Z0Y#{kbv~iq_mIK(ZEe*
zj|!_$S3#nXL1SHCku(lyYQy};?OF1$af{ntNJSe?eFk@^2d{MUjK?H@zB4gB`k}qb
zWnEse%L}&grRcjg{3(4Dc7Vvo867^K*7nel3K8E~2l|<@ChHjwX*nE(`o7-GMAM(8
zbi5)-I_^1xFD&>oa2=NkLGt$O_c?;IRS4?x*Fc;)V#rQnoZ*y|<YMiDQhW)N9$MTX
z^G&hOI_Q;m6txqH&^!A?w-Z4WkC?4;_(AbM#s$4P((Vg@t5LUJnM+ENW|p>h-28%q
zxqb)le<6&sYcEQa6k5#!dQ$OZH9EcNmuB2NyGZQ3z4snNHVRV1b}rbvYtxy(nA?Xd
z*2}+g^I+UN$+m3*g>KgD&;hP%Y5k~rzQVK&Xx5dO?HeZMc!>1JUAIy$Z}>;n3~zCG
zr2tfuH$R?V{3G!XH-Y~EycTkCC?`6T%#}2Q{t!DzDw?oib+~js0Jh-lmJnR6u{RKL
z;-~cdjqBY|33M!fdYMFl1Mo+wdz%<2>tcZe68)-7Z<sk+b75?o!|>Q5e^=5ay%jzz
zq(1pt>dbk`9c8h`W<n0(E_ZAM{!x$}(XSVpEo&Dl1^bnqC51VRgnOcuCu^m;y_>o_
z0@?chj(VmX__Q219`Sa<*wYs+LUl7qs__Y<vx!E7+%(s3^v5uJj4ZtPh<m8J++32W
z)v0<+zQq%cLhB<ni!Uw3*`+NPnA9gu()w0(<%MN_IdcvsxNDbdGP?3g9$19@app`O
z77*BV(1_EY_iKz=bTliMThrUrvwYsL=T?qZBmKQ$%v4;Q^eV}RQq&H!=2ik@GR$++
zfVHr^{c@$XLEW3pbLd2&vYITViZWh42kt2@D``98HX$@3^jZ%yhiO+(PZ17^)qn3r
zVJi~y?Yi60zO64b^XK`OhbTq}SM`(*FmQHT0l{31=KF~dyI+^6&((aa?(AM>i!hp%
zHg5H);rWWH;j);qsVs_#7nNq#bxCPQFoh>^v9_|*v_C;x)`M={V&W@<{-7E2x+3eL
z{K+JUc|0d;f`$$q`VbRG1FbsICE0KmGJACju4u&94S(T~0n}tl%_5r++9^3@)(=9B
z!TRV$qlrqoZ%`TTJ*Ef6u+?3n42J5&YP?J7M57zfTzA828L}Sx#eK-#z8j4dImvlM
zE68=d)4k@I{zA*Cdeq+%>cd(`TEeqjT#>y!^=_z=Iw8$r=$J@+Y~A9}VACcU#A;Z+
z$JYtKne<-+A5+86s|=R4Hfoi%W%reuy0BUNR8s!HbN*^FWUl5GK|nN|P*p&0y2pgN
zLAmxcvmrx-VatGLWm#vT?$aSOU^PS8PpEQT0{pj!g7xMJ{|8W))!!4g|GVFALxX0e
zOO;ukBM)@q7A=kwgT!)6m%?Fj6Y=}^1;n|J7ks_)p|E^f@7JAA<Y0tAeK%?`z;6JF
zY`Z_R$luKAi@avGA^?IyAaL0|{1wYjY}={nZZ%5daSlB(=VJ!-51#%(!J2Pr#}4$Z
z;2)2}k52EeDc%QLR7titK0cniC+4hn6Yetr1xKxp!pb1^BGOnS3C*6CEbqPB0{a|Z
zR6ZJY>K%z+!$?&t2iJVokLc#h)^QMXr{7-3ahVjnTYPc>G^jzhpRms{tenA5#~R=w
zJG!vvWm0-EMu6Hqtv%I9Z*V94(kmrP&<uvf^<raEdKq142AzmUd;r6gtM3LxL-HRb
z^GE+nFcRQn$0{cD*g(qDD85*u`<v#Xx^pY-VHoK(=NtyEisEl2C$D->r6kYujXu-J
z=8P~yKEi&{>Aey_Ps<I;S=8rMr`wlB5R_)T{tB}Qv-jIqDjRLA**v$H#T5R$<GSGe
zOCoh`7t2MrU~mUkuUKQ%Q>RTlXfxh$@}t~v+clp^qd@wD*;AzRnM9>QXCoa5=b0PE
zIWuYC8^|Q^XV;X9x>;xN*y6m}T_^0wF62*^o^l%OZ5Y=ADYa*_q9*`HKp-qr0Gz#s
zNv88)bgcO2-6)?RLT~U_Jyc5BQ{NS+=7+F(Es5E9pl&NRQMrYGb#4N%UKZ+}naYM=
z{#+byL;AV;w7X|DNw$*WZ@ahl%=FJnGoFew_kCSi6n$Y(irK^1oKN7ZND=48Jy60G
z4KFQ0b;hJzRAKIW60jvoyf7_be9XM|G*N_B87WdJX~tkmH8XxJDNhe2Lyua#RoZ^;
z<(RUQS)qInQBIcPTQ=(E@@0wT4E7m=yc&MQ<s{0fi^dWM?#CxsNpOb(xYX4~<oc}`
zB9Oz_0P8BJ*!gNMe@E`JY$#8Z@f*UqD5P>8=+(k(DP2HrUq=0Abe21XFg7h&#&#QB
zet(f!3U+MFyey$NkYdffI`yn62c8;gqIhiI|3u3NDoC66vzR4emU-d$30r7Bh-bqv
zwVfe+>zM<_NpnPBC~QH9{OPys<K{^G8nwhl{D(%-ruJh!>M(_@-|RhcumgXSD^SJe
zbF$l+yEeO2#pX<2b5l#W+u6TB?!#Xo_XqGX0%`%UGZR*LVi5Cls<X^Y%AzJ(J==cA
z64%ReZT>TTXomet$$c}Qg7c8p-eRP|w9Y+dr7VtD?v1G^(P%KXBkWJGk!}`6SOB$C
z@IH6x^=F!gd<y;rB?(?jQvG`O7{~4<y^m%i$WmX3x=3^E*DAibjS;3&($aF!=RLq9
zP*KzXj`!!&rfheY&yIKPU!x`Gh4Ku@42nhVg@lBWVU@GPZhLnmb3G5R=laNzWXnjJ
z;sJpsr18mf&skU0R=0R-(W~-TXjc7Bhu-*YRuw&cVu7h=dU}qAAIwH|czvH}sT!r$
z@K<HK%qaC`4bNiA$!~by3wTxg_#??29DiEKUe)N4kOK?yvN{wn?y$$LG?Wt;chcRw
zDyxao@MvkzrB5E#*LclRC*ExN9+YGI0kqWxOI9YOXUb{%UPHYx@4uZ_O#0+v^(hQJ
z5%F*NKD_@JnzBU+IoNkL?WnV=ND%?p#hhCxl4`SHj3}uVBOUKj$z?y%u3p7cc$+Xk
zerY#bX;-8q)f>$qY}BC1U*(B2bX|g-rUzwsU>(GK!cEDg63+<dr9sMKU|P%WeU0X}
zg?pJXV&I+4L;NXR(Pn><iJjn((q{f0tru|pczd+mUFL20=m$aZ2;~fkQr3vnf%gJ<
z?6JK$znrt0lleyN^3soIYePBDHJaLAUuoht@x)EMqM}KjS`&*1Catq_q+s2}6<)UF
zoH1h<miX+#&y@9BgRJGpxj7`*+4Nxkru`Ac%xlQ0%Ehv3xcG)_c*CuiY#}^<VEK6!
zh;h~}Cz2L3M@B)<8psuvwX&l@kNha2)8Ix#_4S>_P%q<|z8-sWpOfbiz2B)8Wljy&
zWp~e^D7L~^Jw^rw!MeAq1^tyf#ZjoYz~8SdqtGo^d*PG{t4r;EU2%rC-)Y}no21L*
zFuZZMETaZIA~fb<uzaYl+j?@Ielp!F3#qX$qT2A8XE#ycyvGS2U~??$x;WfdEL8?8
z{kFw_6f=}vmF}oI+8N$GC;i1G>!O(u{WMT^csGMoU&Lf+2-t8u=c{Gsj!x((ij5<e
z@oLx;(hYe2fZ6VJZ4Qv7?DC?rP$FB+w=p{)-F4S)E}eF*EsfLb$ya0k7Y^=#dm+PH
zY;1tpW-(`nO0u%HyS4f|y6tQ`s>VBpd2am4WZX{=*VActYGQ{KiEjR`EROc@{N%d0
zulbN8#mcPJfnx#5RFOI%a#oB1jj`>=rWr;7c~8eBMctQHj%#IP44I=PMR_G=`>EVN
z9YBSwMmXuQ0$(yk5-G@8-BL=NRDL;Yl{sk*IlGZ6pUhivJ(Q7s;m?qim*$$?E^#P&
zjqW9n!&{>;7t!g!`HHVEqqzH#7REVSTpt~-(1C@|p1E~$oxE=*V-$qctQR(9gB6X?
z$FYCJrqj-sdYO^3zSxR6ZREE7m{i2ze}p&BW6B&(XEtvzcZ=55({p=#PygO82LSRP
zDf4UnlbN@p77_Pp`h0QNrXuXa<1VEZ#(C#-DO=#tCcQzXs(=FhVcepd+3(Pf^|lA<
zjL)mIjd^B<snm1Y(aukP&*a`;pI7o>mcn;f=%jFnh~0`M0;5s7j%n1kRP~+;p+e1c
z($qJz;0jL>4!kj*reRG?8)N7JdWvvl^ucec{24L(vE|ZW#5-a9T)jQ+AS!K>jJ*5U
z@lfT)FZhx!LYIF-^FhP{%%Kw&Xb_#S(RN}!Ml07c6*>sYFKRPmG|igfjo-{!94+NA
zg3YFC9*P#zH7ijs|7)=O{|W`|F$10vUc7jIK3rb?tZ(tIA12mC^lC))Q{*oCG-*Dq
zg7NE=YE&ZB-5~$(9uR%Dxsl#pdf5hgSAZ-uh$0vQk@Js?j?Q-ZX3pvNC%H<^50C$&
z{!>uQ`1g`gm)FbbZa=R1JZTJ^b_ML&?vyddT`7C)eEoDVE9>`_J<3{6&<<*m1x7*d
zzeajz%u}(%_~+{z?##@dRsvexBw6N1kT;s6I{ZOZrfHbRDYL7(g+;ZZnpu?zCyH5b
z5p!%AnPw+`7e)KoJ(EU8&O?ct@sCC?2KP^9wu)*?UCeqs`hH}5cIQbt<KZr?$v3hW
z;i}>6eMZ<0)|R*N{up>Px^M5GebU*4r0y+$BHZs<&r|lLNkQ^yy5%OjIeTC4*4A#b
z%tpnc7oW%7r*e@?oh0p1Nz9`i)b7f1cN5XtLb5o$<cGy-=Xhn;yL=$vKXB=DD?7IV
z)!$pvr>k8^CsS)W$a|R8L?-2(pDmf&dOCD~`sAwTV2oPxw>CaUO?NpXgB&mX+uD)8
zD(Vy>E%Hn(mT#}Ttj8?k&VJe<1+^*RYN_+_xSS&x+V~h2@2^e{SMa&5dntP09@`n4
za^cQheAd34ENt8=^HRWPb3gD|WTOS6(1K09ZXQYZ&vT}jo<wI2p2b)Frt;p4m1_-W
zv_FnEmN8*?=cJwvNxxxx@#3_b0u0{y5uz<FVAboxA7ke%Sh?4Wf1V5eK<9D8aokPN
zO3F}3+t2MOR_YBy?A@MA`opLP5N)KOvti=F)?mg_W5?4PSoUVZQ=`XHG5=z41r5d-
z>sThSd`eE3>4W|_)RF4?DZsjUyo%51PxVv9T=Av1>c(3c(&plEM}46`G%SnBILQ?d
zHLX2+T-@=xn0Z`JncMoe7Tc2HGCiNi`temi7~72iCh}@a>W?%nXjy3bnMDkACNsk_
zD<1ooA06k<Lz=UfyVYZIv{weL?I|lgT@7Z09oT(NeOh*~&|c%$({g7x*QK)oGNHPF
zRfM3d@`mXK_)E(n@rM@;HA2!mNqpE1X)}5*YPe=pC{a>8Uswjx`A!h%KppK2OJ2go
zB|we!HDAQwV*J|qy2C!z1*z#HugjY<&ApS^vc|s4gWX@5t0#lJ<BlJ80rMs&xaUvw
z<t}9uFJ1uGu>dQs-94!EG0WyKq#=>gXVwzc7<)AMMrAZ<_ptXHwx4L>+Dhf8{)Kl>
zp3=$S26T88Kj0192?h8Y=P7_^lHuO-<%<`>Z2xK<t;d7?;>B7MB^VrX`f6xxKob{U
z9nJ9XYJ<P4Q~#-k_oc%5Bjp+k0583e4?aC3??#1}J`Td^k_5sZd_hnA_mh9s(?|k6
zG1n2{rJv@16Y$rciD>IvB0mV>rEl?YZGpcNUi`aLypZ`Eco}X&=5x_suwy~09vfL%
z-rNU9Z&H|o;q7rZW{KfiX50sK?}NWJl>?9kgFkH<scrRFHSzz?)sGvO|B$zA=$PRC
zt`Fw%;&;7fei-eisFxJ9ySd<3zSy5|a068XzoXMdhIApF|M~F)_>*H2!RVX5)n1)m
z`jR~|qqxqd^KRe1e$#`IhkkRE$e*t%-jgR{x8_#n$g6>?^)-=yOU&4i2=Ms62hOH3
zf_3BKx}DJZ3Bt3-kwb*tGv9xzB;O#P$m=&gH{}PBD%b)58kaj6rI{VMj{5VOwt#6x
zl~;4Q^RXE&`VJ!%%>s=(Nb~myFM_q7`~Q;qfXdl)(AJhv`m?*L(HP5a)VRKvb7_&G
zOxc2fVDS-^>q1LMo_&v1pnx&@SRZ;b4c}J7QmVeIYsEx1>EZmgEj##5EEqnLACtSC
zTWf0a3Y|8jv>o=`ZsWiD&&{}QXfAg&ma}+U*54+@^B!eS7Nva0`;okqxaeZ$Fgn^S
z!naGXyqSXr()gRt4+tLq#bp(}g%;ANjTg>a@!8Lt$oQBkm#45&auMBmGxa!fe^3eC
zisPQ#2SkTKrDhhs?YX7QMb|)wNu{ehgCja4G|*GbU*d~>`My>p#qp_<%~tzjN*f(N
zIyp&*y{ubGDaHp6V{@ADVkXU~?s7W9OYk>Rc_68ag2Rw~Ge;u<AK}8^-O-X7DlPt}
zx9^*(2hS^)3-d}x4?jyoXv-Kgf0gmis=$^#@jusV2){-92Inc4hi~U<>8HM10vgEe
zUn~vgU$sWeUv{UZqnKHU@Ovs_D)MaPH?dEuJ?Ti^QpKHx1Xdqw8&`OtH<wH#le*eD
zj2&%B{>2a{c*++IuI=B@sACq+KF`-3^qeG-vIdzoRdyF3YjeHpk817bjBNmZ<AKfz
zj?Qi%E$3yJ0}Jno{+gS_vgGx(gq8b$)bZ^-U1{GzOn^}#lRR@16J4^BA>UpK67^QN
zr<e7kw@C91p2}Zyz$efP&RAhvg&oj-nj9v`k(=8~`Ic(^jpz&+pz~Yv|H0dnkemqD
z`oJ;=cJTbc^ib4HOU_rs6Dcy%HU578iB(@7==M@J=@Pk~Tf*Qc?P=bgvS+iuOoaK*
z<;R{uIJ$pU5>j>xnSV+b%xB^NfBU|V<_lL*I2(tTgLHsB;lFhYDZa;Uq2~Z7opJqR
zz5YZ7J?aygBf|B^#>S;~J-D<pErEqk|L}a%e`*`F&a*-cxNg%tc-Mpc&6}Qk=L))x
z4=3TjWAaP_=<h!D;z0wo!KETqy~NHAY+Heo>K1_px-fD9KEgE!ZiTXJG!nJb`^7%z
z;YDybh`TCArxO(~I!rf=WpbTcc#WC6&`vMQwbZ7+smZU&ho`R>Pdf`nkX--7;R#hW
zHTa12C!+B8P+qt%(@&k!ZvlBf3w}KdUsp)ThvDu-N{^andyk!{oVJg*jkjI;G<CSH
zGU|Ydf=%E*%TOC=eLn>t&ZW^2lJ=Yvx{v^|!;DB_B8edEVMps>k0ec{1-y?3A{O>A
z1wfdTP3Y#LAR@1iM^1`^h302DDu0Qn2Idjyg2{c&V5Wa}>WnZAv1^nBHw+wQtP}B_
z8x77s2S51PD$2)__7m3Ah0Qw<uxWD>u>DN|5uZ~GQ1f^1Fx3aL><l?@9{$%n%h*AV
ze1$@pG2tE;3e<KBI>`46Z(d=^bL#}<Yw0CIp@iEfJg4#uZF3Ic9@j#i>jgE=^MidN
znVIZg;&Na(cjWH>lNzQ;3c$KcWB501H|(w0@BPoQk^KN6`FB*&LRg@fHQ4-Emzf#d
zvyKgB5Qqh|>RUd6#Pbe_vx9U=m9Ym;PlxM4c94-BO54vkAgTXFJG&D2YaH-44j42@
z^F1y!^<{zcP(lBQa1ROvDy>9KH8mr8*~Yk;y$|D@qe8FXcOY4cgnw)3tdN7ToKL%(
z#0Igl?-$>XV{u~Lfi7M;PjoQMTHeagHc}&Hjrc<XV_1WNPMTBL{!c6gF(=tmMewt7
zbNB)-54~+%@4+PBe`NR<9fA-hDTh@w$1DK|m1WJE+lb%2pygvb(Mngn?8wn4KO?c3
zWu&@2H0$Ku;`zXdnK=qRD#X@y#qP{1<^kTME-npNkLPo2sFd*9%KgSMVP?qDM!(dq
zNuR&Uaols%Z{)#+O%Z+BmWG+`>wGN;{>2B)>9C6jl83FxR|>cgcVsSA<iwO;B68rb
zHNfV)Y9I$(f6#iGzQd2|W<r?0Lk@g#K*qN-!QSVJA4JPE-++E+oQ4nf=T!-UYdbJ|
zTR0*+gQMe|x%Vrq=VI~)ttInkgIUk9j_WKW;(W;+kB7U2_aGxBpJkr1*J-HTJYx~f
z6Ec?rLORI)6d4S>+NzsmYuoVyIpH*&n##Q}e<|%|L}4zD7%l2@9EC|=P>)k=Z=t-A
z6#pVzz17Et%tCxdCYI<RdHN<%;l(AP#+MZ79az>m*5hlXC_A`2Fd{ZC`qlbR+j-mK
z=aP$oY-aX(hSm4!d|Tvd7=KzBh3{1f<LhuIQu}gkN;)r3YEPFihL%?;>MAQk1~2n@
z{u(6J8S04ne0yfV-;!W=Fir;^RYjyQ%ldgpGLx^nvPc-XtdSXoddlptdAAYD*`l@x
zjk0?*<P}IndBoeoy8G*aFgDwAfvNDMJ=&W|k*J<PA|iN%$slNajIqk8U!x--!xI+t
zu69K*u;0)72mkgOeO#n2sHn$G5_>SDmLFdsM!*Z465a3bozxVm>*%N8o0*?VEmOY6
zZFo;!yE+uNdEnq9OCkKgI@x#iDo%VJr22)E{C-)r7{-vYn$>m4C)@du3F(uQ5SD}|
z88HDLVkoacnWi1_roF$(PlgMBx1J}N_8R;+w3zT6j5avQ@jx1FeUWYAW@JpUr4t&&
z!SmaQ31WvuGD}mCE%I`8R5$UxoWX>KUu9|F;Dhv$9JD^LcNjmaH{vgYMAV1=0Ka(K
zNtTY1m5>#=t1#A{@!Mw!8Um|b*w=o3L1V;E_o{~FQr*so;NJYu+yo8d<DA7cZ_hV5
zmx>>mc&#kS7KV6$kDrsK7-GpL9jh-`LQ&18s$9HL{P0u4FF6A6$|DqdTI~PmU{gUN
zj!{2!y{V3f@KB@xo4Hmq?-Rhk6M;Jn<*G7W)GQBcldax4f>ozf@rt6BnW9wDCvI}6
zn8d8=p@Eu6PnVU?uyP`dAghqGBO5$_a=QW;gD4|nN3?QJ1k4l2TQt*-L4mS|$|7|P
zO&sCkMh0;3Rar0MKQJHbm*+RRS4)jF>b&<w><Ax%3=Ie~<88<lyG38(ofFWxfB&OX
z!-Fmsquiy(vGZFaJS+X$#b)JeiB~|u{wf9^RAP~Tp)YcR&x(?6<JHQO-Ae))?Rc!D
z#d*<@%gYb8pJzTqq}ct}hy#BD5#i?ekoY5k%FA&jM&UN~h~;!4`WijsiN@U2f`dyo
zSrp2w!r^FbAkFr%UH3Gi<rhvxV=RK-ZoW+|pAnxYOqoBJKLw>eT2g>z!@C{oHu4(Y
z53wTD2_opVhF!7NmGSU<mY|__pRK_hSj|Zz<eExho5iC#eyR~>L%f@FHqOEw$aJU|
z^p1Hq<k%n?^<s?63YI3Xe57^N!kev6&3Ix~#W?={auGVs7-`Z`u_?S1a<hTzN{_#G
ze*%YcmFzwuT$UwjuSaktI=ZD%f6VTZ5JqA5-as7a2CWlXkyI6yzfWV~rj1&ZXl_*T
z5y~yM?&~ecc(dw`FRCB$j?ReNvBPx4Px3qb{2}%BSBezqjNrZ1re1-k#}wGk32KTT
zrHgPfS`j)({PF1<VjW#bRKYy2=xbMhOgHx<e&0d@CLG4%xz(-9PUzN9AGG(c^$~3Y
zsVHpz>fMN62*fVI$2Ok~DiP2-ZVL>mgF0fOe`s6{e!KXlMP8HttK#<{=rBRRJH_pd
zn`NOI6jWum^*u0!PX&*-?w^QSZ_PJLIsu+f)E~anOcAlY{{p#WjYnDNsZaZ2y`S;1
zZ6#QgO1BTlwm`bSel7i$;Kyb{T_|W$+vF*ZygV*LMZlzp9<@d8c)t#B(M~$QEBH>7
z)aw_UF_GDFR+CE=$@eZig)<(jMkLU{D8HPUPUI(J^A`&osHLOa4jr0zk$MQySK;by
zxxCzo46u;TLxufhy?Z&u15}43TE2RryYf`+@2kXR4md5V^3=t?2b&B@j`RvgX4j}0
z2&IMjhqF@ZGSK{C4z@BD00)qso)}%_{c?O~=H|E)ijO{a-f;D^ITzpYp&rryx*Ee<
zUM5b&TC$NE0C{ap&Mi4V5j3rRa0unO6>Tadcy|K&zhK36Xi5OYPQTI+Ec=m~!G$K_
z6}~I!dCXpwylA9L8T{bg3&xnzQ<KzJpAnUoJ^VARtef$KtWrprp33_oyfuJ+c8J^d
z%z<C>U!CW3zZqu#(B_JljLnr^_joF_{9~*20A^rHxFXLBO&)voIKW<aIeN1%fuFq~
ze}?-D0)8~q$>M{bs2Ri_kYLVNDY*omlzj?!goH~WtO#%+-G0N*=fy=UwagS!4=U7G
zSg)->Vq4~fI)Tu=aEO<PyFx4R)1-NT8y~jrESQoBGuBpxFe=<%H#m^hOliDX)&J29
zg>_pCXwmUeRhnYW776X{lk_HW=^ZYphooH1naqY^2y2UCJhuy36Cd?DxsxgPCPA-B
zH&1_m+~}X7ya>jguOmQ<y(y8)UJ?8A4ZoH2@cd~Z^j-LDOk}*<SE?;rp(mJ_;3;N5
zI{!THcV5&Axs2Fk60q;buwG})Q#7WWC())is^0NHRhIB{bC_4%e@(I?E(nMNYMffH
zRu!$E#Bf8ec_Ab!q;c9-)UR-q|0{&Jp#e~EqD7Hd$%3Y$INk%hH-C5pB5BFSOo({=
zL?{u_N;M9wFpN1IM%N+PYohy!<l5j)DeH{<C!bnN3&G1a1Ge3de;WR)TR7Y>$-Y}D
zpZ}RSWOO2ANk0lm`<1i(<vH%1Q-RH^<*7kUK6w<|YEHnz2@}3wg21=HW!xzS(%_Iu
zfEy_?2E%Cqo_^46NDHjo2QP?Vf0Z-x35Q3SjG;R|*5~GnHuNzby8vC!m}DlmUL`2C
z!c*tTMUdQE7tD7HJe$^I9^4a8ws`H~g{<PO67)G>cn!CpTm4?>6y3fOnZdEP2zNEB
ztSg>H{roCyno@ZF$H{`?#LU+<H$4QOfP;11#jwvaT1&iXxvC{jtU(aIZW}{G1I&cS
zi2ob2LEk}X+F8amNe}OP4+2Tb$4NS~D>*K7l!zQADE4|5fl-wr*ryw?>kYC($O9D_
zFn8e1?G4d{;}6;r@_Wjm>fg8R*60LTTx<1<`4c*Q#*^0+2YEOq_i~ZZ9>%(J><$<S
zZc$+}cO*`nCGW<il>1W5CM!Q3mXb&|r)}B{d<%!tmWQ*YkZV4SM!kHuPae`G7`{G7
zUO=v4DoH=88UG$;Z6T!fju+|zLhot7CYrI$RALQu{6=!#;ITeTi^@&aW<Amtyy@Ft
zeKu=$laUf5hz0uG$;3()mh?z}P}{9C7kyGWXEu4uic=%Lsr%_=Aa?0S{SB}-;4W(<
zqkvl~Ea<H*_%x2h?pn)CH#6R)G|({*<Nl!h7ssTRifBm*3Uh=r!9tq&Og1&ZnHf-N
z{XfA}@3!gOdpYn*!so#eTEcZJt7Bwau%F$VVz1*)Ym$KW2Hg8=dKjDA=;8^*Jxc2S
zxK##9yEYoI#1}0J`Z@}-qZfc9?q>geb>=s~WEN=Zh@5@vKtwD_fEJ07%On$IX2n!}
z`UN@J5(Spmk%6R|;Ypg~U({KvU)1MmtBsx~KQgda*EJ^)x<5q_AA|ywSxJT*R4GF+
zx_<6;?r=Ye!Q+4+l59T~plJ1b2I#Y;YIOP?iH~dUs|eG@s?7v(gX6SslM4~s4`@EF
zn|9zDDnuq;qt5hDRGn4<#InZ(*ia6q^UsCQa0-%+R^)I!769{m2<Tu$Wf21QcJ?jC
z=}I`qX!6J^`apbM)>G5A%s<2bvL1^q3TYLfVr-E)?OR!juyY-YRZnNDGD8UmqmKWP
z-x@iLkqQ<*SRFCnN)32Indf8xEXsjv<iIUQP#P(VX9qf%S898v)R>hw`ka-Z@&qm9
ztsY@KP7*MwQe=HcxB=@YZ~2YS3mXxFizwnrr*mEme#k)@sXA0M$1o5fXO#)i{?-<f
zoF2y(HvghDT)&D@OSp8GALbIOEf%&ZPV#Id?cmXG-+S(j<m9IYp5fv5E_{WGX$N!L
z$Ev&z8&B5d5akRN_kFMD?lt31G9k<DzB@TFhiVVPrkWZ{>^nISH?t??EmI7&CYS8b
zT7RG2INkDD)rJs+DF@ysgBE@b)h>sNpb{B5?}{3hr-#Qg2)(q<s0BXK{S#ozvT;(M
zCk}q5T??uYdJ+5)S3)A0R%t3$`97b^hIfj(50#@&|AX;}DLYneMnN3~sSR&3ckGYe
zw?%aY#zIJcj04b;SseAi1NQ;U!)KHf`VE&?LfV}1gbQf(<?kQIM!3v8j|HxMWKLqv
zN7`Ca{snR^6NxARq;g>RZfNq5A?Yy@Ciamrlz=BpjdaDKCbzi}A*&FbA6!e+wN8zO
z9iDscbbm<btLgQ!#!-jYhY**-MNv_MN{4qBh2-tPxm)Gi$;u}`?4Z+_U)=~oQT)2A
z=t|n8GdmHmNe&#4nFG|qMn>B5t>|OftLsYlQ6b|HB*%E5VI>``gioA-4z?f##WxDD
znkIwJ+8+Oi+rQ0}I-^l7n}L5KsD<QQ4y-(v0Q}SISSkyiN=$vSN3hJ{qw1MqIuh`1
zy_;BBiO|ajGMcb4>c7*##vc_?;rlA7JBM@|!z0_Q5kZDX;A3DH=-kwT3^Ed%l+VMv
zK5ma5U+O)e4x9g^-9|p#_0u!#Fbpl6xds^J^KZ8u_NoyN<kY;ww=jnO_(O^Dbtcz3
zVtfv#TPNVp5AOJCejJd^`m^{`9w<(D(kE~nI<}*XQ_OMItH7O2AWmoiwU~MHl7XD^
z!y}Z(-#bD9%;`V@;KTvN$b#pZ;DF5pVn-D=-(mt`+9QB!&a(k%Fkp9;*siRp6bE%(
z4m|n1DL)u>BVsY@fSVO+!mwgB=HDA@B_b9;)6W9ri-lbeN{Bb3-i4t<$B<Q7<HbAB
zyOxOgir0)SofH5$00HRfgeJ3hIN?8QC@LB@=rvB-PwpGmxYZ@6duh+mH^>|F;n$YL
zrz+9-p1xYYGeDBJ>zZJEhMvgNvQzzie!os1%H3yG?X?bO(kCX1COTHKn98BfM@Iu%
z@yWI8ny=J63r>ax;?r{*!xe~cP!i2tfX_tK_Hpt!Ao-C+yH2t6%tn%Iwr;xBSfH;Y
zG)XiPSn(A;{uxLaAPgMP51*23t7!u$jRVhv4`CSLWg5{Wn-4X>QJ`00$@Ui|Oi*&?
z5sY1{&OBg!Qh45wM@fZwe`RT+7WuI4S-8-91Qh>6bl;Ckbl!~^>ATLEr5!{!wOG9)
zI6FmG`A%(l5d|C1<<fHbvHm{T=!c_D@<o8nYOm)hDr@f&^|d~FJqAqPY4)J{ofP_m
zpY)X!k~BP!^r`*dkptj&3TS;70{|4}A;BOV;VOCZUN_QtIQ{gLPOBd^(fiVRM6oN^
zBgR-ygLhQg0MQvYB-CIb)99O{6fNx+=I)um*&B^Nk#@c4vSPVXQ*ovvW8CW=n!MJ%
zJ)2DXP7a0`T1WthVZ?p^KwP#WKS%Ye4t|G^Uiz4dhFNYaIPYA-=QHb`R)KLqLzVSu
zxJl7!4x677hq?zr>_o!m)8RU_!wyZF*~ejvLg`OPN^Q@5S^H$#B?ekF+2_h-phFG0
z_K&eCTk2IPUyV6^D;gs7<dk}YV)pc*=SEZSb*4>!#3irBPu#DD2x_>Aq3CfNmGesw
z+6T_Q*W@%9W?$BHZ(eVA@~K2Mw_Z3vHG|bx8BRNqu3e)sDB&>8-WYZ!_22n|068ED
zo4;dTh)e*od|ljSyTp3j2qEkgGYDzrBdyk74q+0pXP>k9uoL2lUBg6{Knd52#2@VJ
z@NBoxSVcK-pJNlP$dw4~H4+H~sbVp5=|rIlHvLNRUOuL^*6~BDjDfgau%!|C3YBUG
zae7!a2#d`y5n{LBrT2QLLDKB#Q)4yyj(T{tR}PN4D5&26hfTKwm<3-$av)4|6yF2B
zLEy738^RO~VXC+P3ACq!<%!}Jwo?Pv10f1!-C_BjZ$c|O6JJw_G8{<;Eu*QsvzixA
z!wfRf%m^(7=RSnOVT1(^9`Ui?#tG2v(ngrv<85t23CCsZ%kxSdr^0zvkHHXma4k3L
z%iOVc>Kswf<F`Sk&nCxr(?CuN)N?I{bwa&pfyE3O*i`E11Rj&q*>A*=D5@@0Fw!b}
z@2@R!^Uvlg=BnoLy>@W_^<VK%Lb#=dDZ@~bT6rPs<fffBP>#c`)Z0MB_4)gW3A^C7
zLOevV0^|E^gw)eB@g>*@1@y(S4=eG8)(*6?gU8fJmye9;tCb=9?nUU5{_E#oK9Lb6
z-EH@ZH_?5Zfz(pkVIyXQ9CR0?Bpd9<KHElhgKV8c3P-WJN8grF+O7n<S6CrUnus^I
z_m@Ead<4SLK#1Me2iTA^E(nf%=EAPc1$xU=L$#6hcp9-lhR4vtPiLx#mTbd4KY(O;
zTZa707RAj8U+7VtskilCs~vgBzUxo5Vl`8fB3>D@{iJ1&Tlu6D>MN6&nyC^+e3BmP
zvmDLqP3NGp%9WGVTP|%RbWi?m9E$gvCS}988oP9gwxD3nMC%KBkpt%%R|OV`!20a-
z#!W68yT}8x4}fM6wRt<96>|qJOdJr9fbH{t0=;bPQsB8bU|Tw^2-$=g>7jUN8AE_`
zHDc<S9D?Ow`Az%}IY-|7#!tZyk!GQacLbQM_ZTs3V&D543(TJ4Y$2OEDl30z4EH!S
zc455?WR~Sx-E7P;DrR@-Ugb))locfz7&hN44T9#c{bKI(l-HkrG3lJK4(deVvup!q
z_ViA-22n<I;8<jGeAONT;$(^S2-C+BQlU~ec}7MVG2BZ(QN#gNG;3|j#w0k($SLzw
z<Vb?EKRfp4Zj+~u5~L2NJ6Y><0E$EtAW8Y`IG`#L;ifY5V$vgOfR^<T55Idi$5Rtu
z_~`()2u^QA)+BNnASV2p%ZYoND8Mwv%<l{1af~Vz6oJac2Dd_-ZswNJ$LZtu*5p!l
zKWPM0b$fno$DopW9NWTolm4QCo|AO!V*B&~S3^#9OK4etU{BS<RtLLa_<@{>(8h@S
zpG}jWa57%rHYbEWsS{X&2HXw8a9oWzQ9OVCAFHV(#I8aT>=UpRt#m~{!Nv)-4SBA4
zrMQsWbFrxmp|_{6t$TSzu#3(@53(1R&Uz{6E5yj`Yt8P_HK!5<R_F}{g0QA#mmZS0
z1^RH#@Rf0J^do}qm1Jpdr}9a8KH)Oj>Z@v5<vuQ<cUp?u2fYM6*Q2SY>?rs?8nN{y
z`XUKu+e^Nb1%EV6spwme!D|{<0$bA9R+m+g2E_x@RMU(?j4IXTq4g?rVIU!|7q#eD
zwg~MjfB@+ks~YY`N*s`vaHjbu+XyU>gSBm)tVm&JpxryO`+mH&L0`?^pxWHJevFJ<
zgs-J-)hpjP;|tG%$!GYMz7<v?oek3fkJvm@TSjy}Qjs>aNlu4eqE-@>?*<^ESJ2u#
z4u#TERWN+nwcdx^KH}>%N`!^YICl4ON)1%VQc%?X7W!6c={C>1KGV!7T-82tDdNeG
z`Iq^vu=ro*w<mlaJ|6=%`S=!~>jdO7nRGMXS8-@)?JK(KKuR~MkWaHq$cC<Lr4aA(
z*B2g2u9(~wpA1ImyOnYB!s05Q_;$$Tad1kLH<?)55d7f`$*xAUBm*=^y;YWFrwS)G
z%G3oFeW{);{huwQQ^Bp|*EAVUDi)ujONomU6skNMU%dpij&acdf(E!)Zt?~Kz@`Y%
zkNG&)kZrT2GfHOug-D12m$?P)0P74DNA8;rd@}`KR2zV1YVF`Rk4l|bRU4^KMJOkS
z+Q!P|b`Q=>DA@5+0Wq4q2DXRN&6BDfz!2@I62f#ws+y9gWsT=e>&83DUdINv8{JHD
zxfJFm*?L>4_a%<+884S7X6q?g+6e5l@Ygu3I$(C;r<<xGP>^n%o?Jh#TYh0FzSWc+
zyHTk2^G){13yK;#&H?CF+J7Qyh)ALHnm8aHxYebG>6H^1-tk>QVcT)gMlHsrTHOdb
zk3=YgX_qqH#r3pM-OXh(j&KVrW^FR&@yU}wj#TBFY3OWf$0*0#v=E{m^Y6;80Ep>`
zz9GBHL-*PGd-WeMXT}j<^{D<8=B_~J+c%-a)S(LJ92ONQ*Y;W)+8Odr&w4nePU-hJ
z{Rq644r&{5QuyS$MnBT9Z<Y64-sHxzJrCfF$o({H2sJz7unIcYYR!0+9+FeR+9l#>
z3){U?d+;i@L(g83zI4=-yIgHsVqit+WBXYh&S4jb)PZMLKdstm_E-nB%|OBICp5i_
z7jE=AvmTA$Fv~~6w9n-!zPw|}+MtMM?Fa?u9vo0e{pGtbhbzMI@t6Ou_wX6*PSD3p
z4fE1GUa$^{#5vwUZAV8MZ+t#Ky6BkYXyiIxgFWl}e~$5Q-8pw7&)kUkKkWk37#v{@
z$b4=>auu4w7k;(zIJ4pCkuBy9$R>aGuUPB}J(Ppu_d~bB{yRXyq4SJ5pdC3dAi0%y
zNgRy}h5wuuK8*A=15lo`|ABe2K<{usIw8O)-!O<>T!6_ZvN-tu5Pbw?0yBVW@!z|U
z;7%-<o*eX&Ic#1+z{eVw8GC>|{~MPhr8i|DWdywC>i=rFjt3&#T3HR{dQSO^w)%kH
zVch@mPC9^xs3i3ARoFZe3Njnl2>sef#z6J}JRokB-U@sq{d>!GNkKuw1fDxq!6k7i
zkH%LiU-OBqq|Tx>U{^wlFI2A%RS%IRKua3WF!U#V_|S+P4ckU)oZ%M}LOizo_F(_<
zlXst8Ns5E+_~~}<JCS`}uJ%6ns}ldUA+A~T1xN-U0oXeL-SNJas(W{x3XYuW#r&NK
zA=~-B$F36{B<TROSUMeQS)T>GIYKHmF5#;$Mw-n_HwWJSvlst55fjuB*u1u@)QIsQ
z8fxe9@_=n$>8M1!e&F=%`R`rmx1pFI?c;$8qdRDl1F`G_R{yiyUkz@;*S8-3-e$+a
zdJixRTrFRhjS=!P3hpVZz*=~#(WU0Ne(FVB_q%r$=;{CW&i`vjh&Jo<as$~(t%hr{
zkl(7FeS;esf@U1c>%V&ZMN16u`zO!f<)kW88<kl3qd|xL?>`oMbD|1-n7a0MKs1Dd
zvHGIznQW3TVvFy&i5=Z&?76^<|D<iay1+Ma=6FbF7v{C0W9_JId2Bnr8P&BtAXRWY
zX>_AK!GM~S*)zOYDXI9$F|Rj~Y4;huRGR1i)k$|guke?Cx}u}GY3D@`3P;k~@e0df
z+~R4qD3N3blDZ2F4{9qndIa)cG(1}iYG$@dqa`9dzX)c{xm$<;e&m1UxO{jCTjvqr
zvAe}g_`3BZV<&vKz*{fUpfQZAV3950@XexSxjNHT=A6{{h_m@;NmYfFxSg%?|3?Vo
ztyS!fy-@Jz2%bIgu-MS|Vg<usNcXWiq`~IIUcr5-F8vU_%%&aVW+Poq-&V1rMBtwR
z*2q9(^ZzGv<eQTlOUq)>1tyy1j-|c%L&owEdHwW!i~V?S|D4;?cb?2<tIOhJz2!ln
z24Woqo`U3=#Q$(bbV<}OczSmEk0#Lj!Whv(P@l=7BCErLYq??n^s4Mh(466oY1Zxd
zmFb&P8Kn{yo}#&#%mwv880{@|>*OB|Q4s~ZZR~2d=H(RXFh7|%IAG}1o>k_pbQ5fd
zae;kA|IUmE80zqn4q@y0f5!d#>HEXkbvLiCyJ~Xw!>T_J%eCd>FDm}o&dBy7;NHys
zi>f^9Pk}x7fnVcq_0OmEzeDR3nC(J-MX$U1Co9piE&QpteB6G>_{&{??<7W%V-Mf|
zx1E$>>a?_DiwBeWE5C!T+Pz#Y|1_60rCWq2E!%O%pu}76vrI+C#ZS9_?2S<d#^eJB
zySDeo1-~u7e|Z0|+v%^2=cgWC{Rfnq7Z|mL|NJWzXAj~$DCSxJ$r!X~>y$*?({#|P
zkg0}yPMrrWOVUcNm^vS{h$rOO2Q7P0>R8e9FtiTj<p4=!!>)dl*NBgc10HbP{j^B(
z{Q2`AzkFd~V36@JtK3#;R<&){!>|9ctoKyyjk|O2-m$8^eP`2x|M;w5zn+2NfO+NX
z58KtwyPXd+-*YeiZQJ#vjU9FS<898oe*L<lrbb8ZL)mVi6ZlkS+uXL1wvD!(ZF~Ff
z+x2CKwfCD_$?$c*?|pW7j*r^M4<8CX@Jlf;{5ikr<mR)RFMeL#w)o<TjPmXKZ}F~=
zx%l|wj*8OC!a~9D@NmPqevh9$Q+xOB-J^g1<QN!!sNH;U^U=*GH=pJA&O1A={`b>w
z;j15Rz5Vvl)2B--YAq#ry0*v7^;5s~wroq(S_^yo{>_^=TiDtHowYAwTe(@qwhE|6
ztIVpmRh#Wu{qRH7+AzcU=et?wt~cC$H_v4DSqtFSlgE!AXP8J8mXrVkr)Fc$`<xFs
zA9FtCe9rlj^EKyNPWj>N`u+Utp-b=XTCY+{lyJTH^StMos|UgplxA78uS}aRQu}h*
z;r%;HBe}nEXj#fXeSBL!?&b90xb@e+RM;##{nY4f+3ugAY16-!?Vf8k`|O_ss-BZn
zde^?a%a-2_JU;YU?w4&<v-iF|cl;IK`nqMC&Ubx_yc8E-<~#rV^Pi`y_g=D*;k#V7
zf4=-K70*da47cvQeJ}UJwu;$%a__n2uik$1_Pd%j?><!RzyH}k^c#Dw?S<!`E$`-S
ze_6Hn9RKeUE8pXf11G6?UV3l~o3>ZRi%x&MDtcG@%s<)P?RT`#>b==@|2<IsB(|+@
z-kDWI@A187mcLlvefs<IzuR^l)&{CxecI0a*7R?`j!t>CYn|K<u&Z=;SKoY?`)OOH
z^xcbJw};Bb)xTP(_jLlur+??~%Pai%)?Efv)!d&6Ubbh@4otBJ68J!CxDJ9Pnk_-A
ztk{Y{$(`pJD6LDJ0VQ;U8OR#q`Pauovf(X5;Nne=0|x)23=bY`ZmeC~ttt$%fDxog
z0L(NbkGYY1y&%XWQLy&SQb4C10j<e&c+-9z$ObLJR0J*NJiOrF+Whzgz9<E-y`a^W
z9i1R`J|LeYJp#J}<iQyrKOH#&D$3PBN)2%<1#WT!D)<jvE&i+_vL$r!;(tIcgQu&X
J%Q~loCIGpw15^M2

literal 0
HcmV?d00001

diff --git a/docs/QUICKSTART.md b/docs/QUICKSTART.md
new file mode 100644
index 00000000..b4b2d38c
--- /dev/null
+++ b/docs/QUICKSTART.md
@@ -0,0 +1,47 @@
+# Quick Start for KeePassXC
+
+This procedure gets KeePassXC running on your computer with browser integration, 
+using the pre-built binaries available for [download](https://keepassxc.org/download) 
+from [KeePassXC site](https://keepassxc.org).
+
+**TL;DR** KeePassXC saves your passwords securely.
+When you double-click a URL in KeePassXC, it launches your default browser to that URL.
+With browser integration configured, KeePassXC automatically enters 
+username/password credentials into web page fields.
+
+## Installing and Starting KeePassXC
+
+* [Download the native installer](https://keepassxc.org/download) and install 
+KeePassXC for your  Windows, macOS, or Linux computer in the usual way for your platform.
+* Open the KeePassXC application.
+* Create a new database and give it a master key that's used to unlock the database file. 
+This database holds entries (usernames, passwords, account numbers, notes) 
+for all your websites, programs, etc.
+* Create a few entries - enter the username, password, URL, and optionally notes about the entry.
+* KeePassXC securely stores those entries in the database.
+
+
+## Setting up Browser Integration with KeePassXC
+
+* *Within KeePassXC*, go to **Tools->Settings** (on macOS, go to **KeePassXC->Preferences**.) 
+* In **Browser Integration**, check **Enable KeePassHTTP server**
+Leave the other options at their defaults.
+* *In your default web browser,* install the KeePassHTTP-Connector extension/add-on. Instructions for [Firefox](https://addons.mozilla.org/en-US/firefox/addon/keepasshttp-connector/?src=api) or [Chrome](https://chrome.google.com/webstore/detail/keepasshttp-connector/dafgdjggglmmknipkhngniifhplpcldb?utm_source=chrome-app-launcher-info-dialog) 
+* Click the KeePassXC icon in the upper-right corner. You'll see the dialog below. 
+* Click the blue Connect button to make the browser extension connect to the KeePassXC application. 
+<img src="./KeePassXC-Connect.png" height="200" alt="KeePassXC Connect dialog">
+
+* *Switch back to KeePassXC.* You'll see a dialog (below) indicating that a request to connect has arrived. 
+* Give the connection a name (perhaps *Keepass-Browsername*, any unique name will suffice) and click OK to accept it.
+* This one-time operation connects KeePassXC and your browser.
+<img src="./KeePassXC-Accept-Button.png" height="200" alt="KeePassXC accept connection dialog">
+
+## Using Browser Integration
+
+* *Within KeePassXC,* double-click the URL of an entry,
+or select it and type Ctrl+U (Cmd+U on macOS).
+* Your browser opens to that URL.
+* If there are username/password fields on that page, you will see the dialog below.
+Click *Allow* to confirm that KeePassXC may access the credentials to auto-fill the fields. 
+* Check *Remember this decision* to allow this each time you visit the page.
+<img src="./KeePassXC-Confirm.png" height="200" alt="KeePassCX Confirm Access dialog">

From 525d5de30c5ca817c1d8510754659d66b27c139a Mon Sep 17 00:00:00 2001
From: Weslly <weslly.honorato@gmail.com>
Date: Sun, 26 Nov 2017 22:23:15 -0200
Subject: [PATCH 116/118] Remove empty context menu from toolbar

---
 src/gui/MainWindow.cpp | 7 ++-----
 src/gui/MainWindow.h   | 1 -
 2 files changed, 2 insertions(+), 6 deletions(-)

diff --git a/src/gui/MainWindow.cpp b/src/gui/MainWindow.cpp
index 30bb2cdf..fa16adb8 100644
--- a/src/gui/MainWindow.cpp
+++ b/src/gui/MainWindow.cpp
@@ -114,6 +114,8 @@ MainWindow::MainWindow()
 {
     m_ui->setupUi(this);
 
+    m_ui->toolBar->setContextMenuPolicy(Qt::PreventContextMenu);
+
     // Setup the search widget in the toolbar
     SearchWidget *search = new SearchWidget();
     search->connectSignals(m_actionMultiplexer);
@@ -822,11 +824,6 @@ void MainWindow::showGroupContextMenu(const QPoint& globalPos)
     m_ui->menuGroups->popup(globalPos);
 }
 
-void MainWindow::saveToolbarState(bool value)
-{
-    config()->set("ShowToolbar", value);
-}
-
 void MainWindow::setShortcut(QAction* action, QKeySequence::StandardKey standard, int fallback)
 {
     if (!QKeySequence::keyBindings(standard).isEmpty()) {
diff --git a/src/gui/MainWindow.h b/src/gui/MainWindow.h
index ea17107a..ade339c5 100644
--- a/src/gui/MainWindow.h
+++ b/src/gui/MainWindow.h
@@ -87,7 +87,6 @@ private slots:
     void updateCopyAttributesMenu();
     void showEntryContextMenu(const QPoint& globalPos);
     void showGroupContextMenu(const QPoint& globalPos);
-    void saveToolbarState(bool value);
     void rememberOpenDatabases(const QString& filePath);
     void applySettingsChanges();
     void trayIconTriggered(QSystemTrayIcon::ActivationReason reason);

From 5fa76dfd66e90b5efb4a4a159c034ea130e89059 Mon Sep 17 00:00:00 2001
From: Weslly <weslly.honorato@gmail.com>
Date: Sun, 26 Nov 2017 22:59:48 -0200
Subject: [PATCH 117/118] Remove `ShowToolbar` from config

---
 share/keepassxc.ini | 1 -
 src/core/Config.cpp | 1 -
 2 files changed, 2 deletions(-)

diff --git a/share/keepassxc.ini b/share/keepassxc.ini
index f7ff52cb..c6f0654f 100644
--- a/share/keepassxc.ini
+++ b/share/keepassxc.ini
@@ -1,5 +1,4 @@
 [General]
-ShowToolbar=true
 RememberLastDatabases=true
 RememberLastKeyFiles=true
 OpenPreviousDatabasesOnStartup=true
diff --git a/src/core/Config.cpp b/src/core/Config.cpp
index 6899015a..2047919b 100644
--- a/src/core/Config.cpp
+++ b/src/core/Config.cpp
@@ -114,7 +114,6 @@ void Config::init(const QString& fileName)
     m_defaults.insert("AutoSaveAfterEveryChange", false);
     m_defaults.insert("AutoReloadOnChange", true);
     m_defaults.insert("AutoSaveOnExit", false);
-    m_defaults.insert("ShowToolbar", true);
     m_defaults.insert("SearchLimitGroup", false);
     m_defaults.insert("MinimizeOnCopy", false);
     m_defaults.insert("UseGroupIconOnEntryCreation", false);

From d35f3fc573cee42ec9cd00a4a20aea0438862a06 Mon Sep 17 00:00:00 2001
From: Janek Bevendorff <janek@jbev.net>
Date: Mon, 27 Nov 2017 20:39:44 +0100
Subject: [PATCH 118/118] Treat warning as errors

---
 CMakeLists.txt                           | 2 +-
 src/http/qhttp/http-parser/http_parser.c | 6 ++++++
 src/sshagent/SSHAgent.cpp                | 2 +-
 src/sshagent/SSHAgent.h                  | 2 +-
 4 files changed, 9 insertions(+), 3 deletions(-)

diff --git a/CMakeLists.txt b/CMakeLists.txt
index b86f0eee..ec7682c6 100644
--- a/CMakeLists.txt
+++ b/CMakeLists.txt
@@ -97,7 +97,7 @@ if(WITH_APP_BUNDLE)
 endif()
 
 add_gcc_compiler_flags("-fno-common")
-add_gcc_compiler_flags("-Wall -Wextra -Wundef -Wpointer-arith -Wno-long-long")
+add_gcc_compiler_flags("-Wall -Werror -Wextra -Wundef -Wpointer-arith -Wno-long-long")
 add_gcc_compiler_flags("-Wformat=2 -Wmissing-format-attribute")
 add_gcc_compiler_flags("-fvisibility=hidden")
 add_gcc_compiler_cxxflags("-fvisibility-inlines-hidden")
diff --git a/src/http/qhttp/http-parser/http_parser.c b/src/http/qhttp/http-parser/http_parser.c
index 895bf0c7..ab48d0cb 100644
--- a/src/http/qhttp/http-parser/http_parser.c
+++ b/src/http/qhttp/http-parser/http_parser.c
@@ -1815,6 +1815,9 @@ reexecute:
 
             case 2:
               parser->upgrade = 1;
+#if __GNUC__ >= 7
+              __attribute__ ((fallthrough));
+#endif
 
             case 1:
               parser->flags |= F_SKIPBODY;
@@ -2374,6 +2377,9 @@ http_parser_parse_url(const char *buf, size_t buflen, int is_connect,
 
       case s_req_server_with_at:
         found_at = 1;
+#if __GNUC__ >= 7
+        __attribute__ ((fallthrough));
+#endif
 
       /* FALLTROUGH */
       case s_req_server:
diff --git a/src/sshagent/SSHAgent.cpp b/src/sshagent/SSHAgent.cpp
index a398eb4b..7969fe0c 100644
--- a/src/sshagent/SSHAgent.cpp
+++ b/src/sshagent/SSHAgent.cpp
@@ -95,7 +95,7 @@ bool SSHAgent::sendMessage(const QByteArray& in, QByteArray& out) const
         return false;
     }
 
-    if (in.length() > AGENT_MAX_MSGLEN - 4) {
+    if (static_cast<quint32>(in.length()) > AGENT_MAX_MSGLEN - 4) {
         return false;
     }
 
diff --git a/src/sshagent/SSHAgent.h b/src/sshagent/SSHAgent.h
index e96f59e5..078ff7b0 100644
--- a/src/sshagent/SSHAgent.h
+++ b/src/sshagent/SSHAgent.h
@@ -63,7 +63,7 @@ private:
 #ifndef Q_OS_WIN
     QString m_socketPath;
 #else
-    const int AGENT_MAX_MSGLEN = 8192;
+    const quint32 AGENT_MAX_MSGLEN = 8192;
     const quint32 AGENT_COPYDATA_ID = 0x804e50ba;
 #endif