Deeps-2005/java-ssl-scanner
0
1���� A[ AutoPatcher2 1com/github/javaparser/ast/visitor/ModifierVisitor <init> ()V 3 patchLogs Ljava/util/Map;4 java/lang/Integer valueOf (I)Ljava/lang/Integer;
java/util/Map put 8(Ljava/lang/Object;Ljava/lang/Object;)Ljava/lang/Object;5 visit p(Lcom/github/javaparser/ast/expr/MethodCallExpr;Ljava/lang/Object;)Lcom/github/javaparser/ast/visitor/Visitable;6 ! " -com/github/javaparser/ast/expr/MethodCallExpr getBegin ()Ljava/util/Optional; $ % & apply ()Ljava/util/function/Function;7 ( ) * + , java/util/Optional map 3(Ljava/util/function/Function;)Ljava/util/Optional;8 ( . / 0 orElse &(Ljava/lang/Object;)Ljava/lang/Object;9 2 3 4 intValue ()I10 6 7 8 getNameAsString ()Ljava/lang/String; : setProperty11 < = > ? @ java/lang/String equals (Ljava/lang/Object;)Z12 B C D getArguments &()Lcom/github/javaparser/ast/NodeList;13 F G H I 4 "com/github/javaparser/ast/NodeList size14 K L M getArgument .(I)Lcom/github/javaparser/ast/expr/Expression;15 O P Q R S )com/github/javaparser/ast/expr/Expression isStringLiteralExpr ()Z16 O U V W asStringLiteralExpr 4()Lcom/github/javaparser/ast/expr/StringLiteralExpr;17 Y Z [ \ 8 0com/github/javaparser/ast/expr/StringLiteralExpr getValue ^ javax.net.debug ` com.ibm.jsse2.renegotiate b *jdk.tls.rejectClientInitiatedRenegotiation d e f makeConcatWithConstants &(Ljava/lang/String;)Ljava/lang/String;18 h i j k l AutoPatcher$SecurityPatchVisitor logPatch (ILjava/lang/String;)V n setDefaultHostnameVerifier19 O p q S isLambdaExpr20 O s t u asLambdaExpr -()Lcom/github/javaparser/ast/expr/LambdaExpr;21 w x y z { )com/github/javaparser/ast/expr/LambdaExpr getBody ,()Lcom/github/javaparser/ast/stmt/Statement;22 } ~ � S (com/github/javaparser/ast/stmt/Statement isExpressionStmt23 } � � � asExpressionStmt 1()Lcom/github/javaparser/ast/stmt/ExpressionStmt;24 � � � � � -com/github/javaparser/ast/stmt/ExpressionStmt
getExpression -()Lcom/github/javaparser/ast/expr/Expression;25 O � � S isBooleanLiteralExpr26 O � � � asBooleanLiteralExpr 5()Lcom/github/javaparser/ast/expr/BooleanLiteralExpr;27 � � � \ S 1com/github/javaparser/ast/expr/BooleanLiteralExpr28 } � � S isBlockStmt29 } � � � asBlockStmt ,()Lcom/github/javaparser/ast/stmt/BlockStmt;30 � � � � D (com/github/javaparser/ast/stmt/BlockStmt
getStatements31 F � � � stream ()Ljava/util/stream/Stream; � � � test ()Ljava/util/function/Predicate; � � � � � java/util/stream/Stream filter 9(Ljava/util/function/Predicate;)Ljava/util/stream/Stream; $ � � + � 8(Ljava/util/function/Function;)Ljava/util/stream/Stream; � � � � � anyMatch !(Ljava/util/function/Predicate;)Z �snew javax.net.ssl.HostnameVerifier() {32 @Override33 public boolean verify(String hostname, javax.net.ssl.SSLSession session) {34 // AUTO-PATCH: Manual review required. Implement strict hostname verification here.35 // Example: return hostname.equals("your.secure.domain.com");36 return false; // Default to false for security until reviewed37 }38}39 � � � � � &com/github/javaparser/StaticJavaParser parseExpression ?(Ljava/lang/String;)Lcom/github/javaparser/ast/expr/Expression;40 � � � setArgument N(ILcom/github/javaparser/ast/expr/Expression;)Lcom/github/javaparser/ast/Node;41 O � � S isObjectCreationExpr42 O � � � asObjectCreationExpr 5()Lcom/github/javaparser/ast/expr/ObjectCreationExpr;43 � � � � � 1com/github/javaparser/ast/expr/ObjectCreationExpr getType 7()Lcom/github/javaparser/ast/type/ClassOrInterfaceType;44 � 6 � 3com/github/javaparser/ast/type/ClassOrInterfaceType � HostnameVerifier45 � � � " getAnonymousClassBody46 ( � � S isPresent47 ( � � � get ()Ljava/lang/Object; � $ � � � SInsecure HostnameVerifier replaced with secure placeholder requiring manual review. � load48 � � " getScope49 O � � 8 toString � KeyStore50 < � � � contains (Ljava/lang/CharSequence;)Z51 O � � S isCharLiteralExpr � PHardcoded password in KeyStore.load() replaced with environment variable lookup. � 0System.getenv("KEYSTORE_PASSWORD").toCharArray() � getInstance � 52SSLContext53 < 8 toLowerCase INSECURE_PROTOCOLS Ljava/util/List; 54 � @ java/util/List55 <
8 toUpperCase d "TLSv1.2" setEnabledProtocols SSLSocket SSLEngine56 O S isArrayInitializerExpr57 O asArrayInitializerExpr 7()Lcom/github/javaparser/ast/expr/ArrayInitializerExpr;58 ! " D 3com/github/javaparser/ast/expr/ArrayInitializerExpr getValues59 F$ %& iterator ()Ljava/util/Iterator; ()* + S java/util/Iterator hasNext (- . � next0 :setEnabledProtocols() to use only 'TLSv1.2' and 'TLSv1.3'.2 "new String[]{"TLSv1.2", "TLSv1.3"}4 setEnabledCipherSuites 6 7 WEAK_CIPHER_KEYWORDS �60:;< = 0 java/util/Objects requireNonNull 61? �@ 2(Ljava/lang/String;)Ljava/util/function/Predicate;B =setEnabledCipherSuites() to use strong default cipher suites.D ^new String[]{"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256", "TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384"}F
MessageDigest H I WEAK_HASHING_ALGORITHMS dL "SHA-256"N newInstance P QR
XML_FACTORIES Ljava/util/Set; T U
java/util/SetW java/lang/ClassY 1com/github/javaparser/ast/body/VariableDeclarator62 [ \] findAncestor (([Ljava/lang/Class;)Ljava/util/Optional; _ `a accept q(LAutoPatcher$SecurityPatchVisitor;Lcom/github/javaparser/ast/expr/MethodCallExpr;I)Ljava/util/function/Consumer;63 (c de ifPresent (Ljava/util/function/Consumer;)Vg URLi http://64 <k lm 65startsWith (Ljava/lang/String;)Zo localhostq 127.0.0.1s https://66 <u vw replaceFirst 8(Ljava/lang/String;Ljava/lang/String;)Ljava/lang/String;
d d67 { | t(Lcom/github/javaparser/ast/expr/ObjectCreationExpr;Ljava/lang/Object;)Lcom/github/javaparser/ast/visitor/Visitable;68 � $� X509TrustManager� TrustManager� .com/github/javaparser/ast/body/BodyDeclaration� 0com/github/javaparser/ast/body/MethodDeclaration69� 6� checkClientTrusted� checkServerTrusted70�� z "71 F� � S isEmpty � $ � � $ �� OInsecure TrustManager replaced with secure placeholder requiring manual review.��new javax.net.ssl.X509TrustManager() {72 @Override73 public java.security.cert.X509Certificate[] getAcceptedIssuers() { return new java.security.cert.X509Certificate[0]; }74 @Override75 public void checkClientTrusted(java.security.cert.X509Certificate[] certs, String authType) throws java.security.cert.CertificateException {76 // AUTO-PATCH: Manual review required. Implement strict certificate validation here.77 throw new java.security.cert.CertificateException("Insecure TrustManager automatically patched: Manual review required.");78 }79 @Override80 public void checkServerTrusted(java.security.cert.X509Certificate[] certs, String authType) throws java.security.cert.CertificateException {81 // AUTO-PATCH: Manual review required. Implement strict certificate validation here.82 throw new java.security.cert.CertificateException("Insecure TrustManager automatically patched: Manual review required.");83 }84}85 �� �� replace #(Lcom/github/javaparser/ast/Node;)Z�
SecretKeySpec� IvParameterSpec86 � B87 <� � 4 length� 2.*(password|pass|secret|key|pwd|salt|token|auth).*88 <� �m matches89 O� � S isMethodCallExpr90 O� �� asMethodCallExpr 1()Lcom/github/javaparser/ast/expr/MethodCallExpr;91 O� � S isArrayCreationExpr92 O� �� asArrayCreationExpr 4()Lcom/github/javaparser/ast/expr/ArrayCreationExpr;93��� � " 0com/github/javaparser/ast/expr/ArrayCreationExpr getInitializer94 F� � S 95isNonEmpty96 �� � "
getParentNode � `� B(LAutoPatcher$SecurityPatchVisitor;I)Ljava/util/function/Consumer;� ObjectInputStream �97 � � t(Lcom/github/javaparser/ast/body/VariableDeclarator;Ljava/lang/Object;)Lcom/github/javaparser/ast/visitor/Visitable;98X $99X� �� '()Lcom/github/javaparser/ast/type/Type;� SecureRandom100X�101X 6 d� SecureRandom.getInstanceStrong()102X� �� setInitializer `(Lcom/github/javaparser/ast/expr/Expression;)Lcom/github/javaparser/ast/body/VariableDeclarator; d d103��� � S #com/github/javaparser/ast/type/Type isArrayType104�� �� asArrayType ,()Lcom/github/javaparser/ast/type/ArrayType;105��� �� (com/github/javaparser/ast/type/ArrayType getComponentType106� �� String � $ �� 7Weak cipher suites array replaced with strong defaults.107 � � k(Lcom/github/javaparser/ast/stmt/WhileStmt;Ljava/lang/Object;)Lcom/github/javaparser/ast/visitor/Visitable;108� � (com/github/javaparser/ast/stmt/WhileStmt $109�� � � getCondition /com/github/javaparser/ast/comments/BlockComment3/* AUTO-PATCH: WARNING! Infinite loop (while(true)) detected.110 * This could be a Denial-of-Service vulnerability if it ties up resources.111 * Review the loop condition to ensure it terminates properly or has safeguards.112 * Manual review is required to determine if this is intentional or a vulnerability.113 */114 (Ljava/lang/String;)V115� 116 117setComment N(Lcom/github/javaparser/ast/comments/Comment;)Lcom/github/javaparser/ast/Node; @Added warning comment for potential infinite loop (while(true)).118 i(Lcom/github/javaparser/ast/stmt/TryStmt;Ljava/lang/Object;)Lcom/github/javaparser/ast/visitor/Visitable;119 &com/github/javaparser/ast/stmt/TryStmt $120 D getCatchClauses !�121 F e forEach java/lang/Void122 h f(Lcom/github/javaparser/ast/stmt/WhileStmt;Ljava/lang/Void;)Lcom/github/javaparser/ast/stmt/WhileStmt;123 h! " x(Lcom/github/javaparser/ast/body/VariableDeclarator;Ljava/lang/Void;)Lcom/github/javaparser/ast/body/VariableDeclarator;124 h$ % b(Lcom/github/javaparser/ast/stmt/TryStmt;Ljava/lang/Void;)Lcom/github/javaparser/ast/stmt/TryStmt;125 h' ( x(Lcom/github/javaparser/ast/expr/ObjectCreationExpr;Ljava/lang/Void;)Lcom/github/javaparser/ast/expr/ObjectCreationExpr;126 h* + p(Lcom/github/javaparser/ast/expr/MethodCallExpr;Ljava/lang/Void;)Lcom/github/javaparser/ast/expr/MethodCallExpr;127-./ 01 *com/github/javaparser/ast/stmt/CatchClause getParameter ,()Lcom/github/javaparser/ast/body/Parameter;1283�4 (com/github/javaparser/ast/body/Parameter6 Exception8 Throwable129-: z �130 �< => getStatement -(I)Lcom/github/javaparser/ast/stmt/Statement;@ printStackTrace " d131- # d EFG HI com/github/javaparser/Position line IK[/* AUTO-PATCH: WARNING! ObjectInputStream is used here.132 * Deserializing untrusted data from an ObjectInputStream is a MAJOR security vulnerability (RCE).133 * Avoid using ObjectInputStream with untrusted sources. Consider safer formats like JSON/XML (with XXE protection).134 * If unavoidable, implement a robust deserialization filter (Java 9+).135 */136 �N LAdded warning comment for ObjectInputStream (deserialization vulnerability).P �/* AUTO-PATCH: WARNING! This cryptographic key/salt/IV may be hardcoded.137 * Storing sensitive keys directly in code is a severe security risk.138 * Externalize this key/salt to a secure location (e.g., environment variable, KeyVault).139 */140RS com/github/javaparser/ast/NodeU JAdded warning comment for potentially hardcoded cryptographic key/salt/IV. $ �X CertificateExceptionZ NoSuchAlgorithmException141\]^ � " )com/github/javaparser/ast/stmt/ReturnStmt142 F` ab indexOf (Ljava/lang/Object;)I143 F % d144 �f gh parseStatement >(Ljava/lang/String;)Lcom/github/javaparser/ast/stmt/Statement;145 Fj k� add & d ' d ( d ) d * d146 Fr �s #(I)Lcom/github/javaparser/ast/Node;147 �u vw addStatement M(ILcom/github/javaparser/ast/stmt/Statement;)Lcom/github/javaparser/ast/Node; + d , � - $ . �} verify Code LineNumberTable
StackMapTable MethodParameters N(Lcom/github/javaparser/ast/stmt/TryStmt;Ljava/lang/Object;)Ljava/lang/Object; P(Lcom/github/javaparser/ast/stmt/WhileStmt;Ljava/lang/Object;)Ljava/lang/Object; Y(Lcom/github/javaparser/ast/expr/ObjectCreationExpr;Ljava/lang/Object;)Ljava/lang/Object; U(Lcom/github/javaparser/ast/expr/MethodCallExpr;Ljava/lang/Object;)Ljava/lang/Object; Y(Lcom/github/javaparser/ast/body/VariableDeclarator;Ljava/lang/Object;)Ljava/lang/Object; lambda$visit$27 0(ILcom/github/javaparser/ast/stmt/CatchClause;)V lambda$visit$26 5(Lcom/github/javaparser/Position;)Ljava/lang/Integer; lambda$visit$25 lambda$visit$24 lambda$visit$23 ?(Lcom/github/javaparser/ast/expr/Expression;)Ljava/lang/String; lambda$visit$22 lambda$visit$21 $(ILcom/github/javaparser/ast/Node;)V lambda$visit$20 lambda$visit$19 +(Lcom/github/javaparser/ast/stmt/TryStmt;)Z lambda$visit$18 /(Lcom/github/javaparser/ast/stmt/CatchClause;)Z lambda$visit$17 T(Lcom/github/javaparser/ast/stmt/Statement;)Lcom/github/javaparser/ast/stmt/TryStmt; lambda$visit$16 -(Lcom/github/javaparser/ast/stmt/Statement;)Z lambda$visit$15 .(Lcom/github/javaparser/ast/stmt/ReturnStmt;)Z lambda$visit$14 W(Lcom/github/javaparser/ast/stmt/Statement;)Lcom/github/javaparser/ast/stmt/ReturnStmt; lambda$visit$13 lambda$visit$12 lambda$visit$11 f(Lcom/github/javaparser/ast/expr/MethodCallExpr;ILcom/github/javaparser/ast/body/VariableDeclarator;)V lambda$visit$10 5(Lcom/github/javaparser/ast/body/MethodDeclaration;)Z lambda$visit$9 lambda$visit$8 lambda$visit$7 lambda$visit$6 lambda$visit$5 d(Lcom/github/javaparser/ast/body/BodyDeclaration;)Lcom/github/javaparser/ast/body/MethodDeclaration; lambda$visit$4 3(Lcom/github/javaparser/ast/body/BodyDeclaration;)Z lambda$visit$3 lambda$visit$2 lambda$visit$1 lambda$visit$0 Signature ELcom/github/javaparser/ast/visitor/ModifierVisitor<Ljava/lang/Void;>; 148SourceFile AutoPatcher.java NestHost BootstrapMethods 0�149 h� ���� 2Removed System.setProperty("", ...) for security. @�150 h� ����151 h� ����152 h� ����153 h� ����154 h� ����155 h� ����156 h� ��� 6Insecure SSLContext protocol '' changed to 'TLSv1.2'. �m� 0Weak hashing algorithm '' updated to 'SHA-256'.� (Ljava/lang/Object;)V�157 h� ��� 6(Lcom/github/javaparser/ast/body/VariableDeclarator;)V� ""� /Changed insecure 'http://' URL to 'https://': �158 h� ���159 h� ���160 h� ���161 h� ���162 h� ���163 h� ����164 h ���165 h �� #(Lcom/github/javaparser/ast/Node;)V166 h �� 167 h �� TUnseeded SecureRandom replaced with SecureRandom.getInstanceStrong() for variable: UHardcoded sensitive string assigned to variable '' replaced with environment lookup. System.getenv("_SECRET") N .(Lcom/github/javaparser/ast/expr/Expression;)Z168 h ���169 h �m 170 h ��!171 h" ��$172 h% ��' /(Lcom/github/javaparser/ast/stmt/CatchClause;)V) �/* AUTO-PATCH: WARNING! Overly broad catch for '' with minimal error handling.173 * This may hide critical exceptions, including security-related ones. Catch more specific exceptions.174 * Manual review is required to refine exception handling.175 */+ 7Added warning comment for overly broad catch block ().-176 h. ���1 K.setFeature("http://apache.org/xml/features/disallow-doctype-decl", true);3 M.setFeature("http://xml.org/sax/features/external-general-entities", false);5 O.setFeature("http://xml.org/sax/features/external-parameter-entities", false);7 V.setFeature("http://apache.org/xml/features/nonvalidating/load-external-dtd", false);9 .setXIncludeAware(false);; #.setExpandEntityReferences(false);= /Added XXE hardening features for XML factory: ?177 h@ ��B178 hC ��E179 hF ��H180IJK LM "java/lang/invoke/LambdaMetafactory metafactory �(Ljava/lang/invoke/MethodHandles$Lookup;Ljava/lang/String;Ljava/lang/invoke/MethodType;Ljava/lang/invoke/MethodType;Ljava/lang/invoke/MethodHandle;Ljava/lang/invoke/MethodType;)Ljava/lang/invoke/CallSite;O181PQR eS $java/lang/invoke/StringConcatFactory �(Ljava/lang/invoke/MethodHandles$Lookup;Ljava/lang/String;Ljava/lang/invoke/MethodType;Ljava/lang/String;[Ljava/lang/Object;)Ljava/lang/invoke/CallSite; InnerClasses SecurityPatchVisitorW %java/lang/invoke/MethodHandles$LookupY java/lang/invoke/MethodHandles Lookup h - ~ *� � a k l ~ + � �
,� W� 182 i j + ~ 183 �*+,� W+� � # � '�
� -� � 1>+� 59� ;� S+� A� E� H+� J:� N� 9� T� X:]� ;� _� ;�
a� ;� * � c � g�+� 5m� ;� +� A� E�+� J:6� o� �� r:� v� |� (� v� �� �� �� � v� �� �� �� �� =� v� �� @� v� �� �� �� � � � � � � � � � � � � +�� �� �W6� t� ř l� �:� ̶ �ն ;� U� ڙ J� �� F� �� � � � � � � � � � � � � � � � � +�� �� �W6� 184* � g+� 5� ;� U+� � ڙ K+� � �� O� �� � 6+� A� E� ++� J� �� +� J� N� * �� g+�� �� �W+� 5�� ;� p+� � ڙ f+� � �� O� ��� � Q+� A� E� F+� J� N� ;+� J� T� X� :�� � * � � � g+� �� �W+� 5� ;� �+� � ڙ �+� � �� O� �� � +� � �� O� �� � �+� J:6�� X�:� �#:�' � :�, � O:� N� #� T� X� : � � � 6� ��§ (� N� � T� X� :�� � 6� * /� g+1� �� �W+� 53� ;� �+� � ڙ �+� � �� O� �� � +� � �� O� �� � �+� J:6�� g�:� �#:�' � I�, � O:� N� 2� T� X� : �5�8 Y�9W�> � � � 6� ���� 7� N� /� T� X� :�5�8 Y�9W�> � � � 6� * A� g+C� �� �W+� 5�� ;� r+� � ڙ h+� � �� O� �E� � R+� A� E� G+� J:� N� 8� T� X� :�G� � * � �J � g+K� �� �W+� 5M� ;� >+� � ڙ 4�O+� � �� O� �S � +�VYXS�Z*+ �^ �b+� 5f� ;� q+� A� E� f+� J:� N� W� T� X:h�j� Bn� � 7p� � ,hr�t:+�x � �� �W* �y � g+� � u w y ! | . } 8 ~ ? G � Q � o � { � } � � � � � � � � � � � � � � � � � � � � � �" �% �0 �7 �R �e �o �y �� �� �� �� �� �� �� �� �� �� �� �� � � � �/ �; �D �T �a �p �| �� �� �� �� �� �� �� �� � �
� � � �# �. �; �H �K �P �X �d �r �| �� �� �� �����185 % 2
NQV^jw�� � � � � �!�"�(�) *--FEGLHTI^JK�L�M�S� � � o O <�
� _ O w9�
� p� � K� x� B� " h O ( =� $� � B� " h O ( � L� 3� � z� G� z ( ~ � 186 v*+,�zW+�}�~ � '�
� -� � 1>+� ڙ+� ̶ �� ;� +� ̶ ��� ;� �6+� �� F�#:�' � ��, ��:��� ���:��:�� ;� �� ;� ���� ڙ v��� �� �: � ���� , � �� ��� � � �� � � �� � � � 6� / � �� ��� � � �� � � �� � � � 6��@� * �� g+�� ���W+� ̶ ��� ;� +� ̶ ��� ;�6+���#:�' � ��, � O:� N� -� T� X:��� � ���� 6� �� ���� [��� � ڙ M��� � �� O� N� 9��� � �� O� T� X:��� � ���� 6� =� 7��� /��:��� ڙ ��� �� � ��� 6� ��$� +��* �� �b+� ̶ �ȶ ;� +��* �� �b+� � 4 a c !f ,g <h Kj Nk sl {m �n �p �q �t �u �v �w �x �z �} �~�� � �%�-�8�I�X�[�z����������������� ���:�=�@�C�H�V�f�t�� X � K� (� A�� <� K �� + h �( � � � (� D O� \� 3� � " ~ ! �*+,��W+�κ� � '�
� -� � 1>+��� ә x+��� �:� �Ӷ ;� a+�ն ڙ W+�ն �� O� ř G+�ն �� O� �:� ̶ �Ӷ ;� '����� * +�ֺ� � g+ظ ���W+�ն ڙ [+�ն �� O� N� K+�ն �� O� T� X:���� .��� %* +�ֺ� � g++�ֶ �� � ���W+�ж�� |+�ж���� ;� f+�ն ڙ \+�ն �� � O+�ն �� :� � ��� � � �� � � �� � � 6� * �� g+C� ���W+� v � � !� +� 4� C� M� \� k� �� �� � � � � �
#-9ER\fmrz� � � �� a� � ~ � Q*+,��W+���� � '�
� -� � 1>+��� �� '+��� �� �� +� Y��W* � g+� , - !/ ,0 81 G6 O8� � O % ~ U 1*+,�
W+�� � '�
� -� � 1>+�* � �+� E F !H /\A � ~ " 187*+,�� � a� A � ~ " 188*+,�� � a� A ~ " 189*+,��#� a� A | ~ " 190*+,��&� a� A ~ " 191*+,��)� a� A � ~ " 192*+,��#� a� A � ~ " 193*+,�� � a� A � ~ " 194*+,��&� a� A � ~ " 195*+,��)� a� A � ~ " 196*+,�� � a� �� ~ �,�,�2N-� ә �-� Ӷ �:5� ;� 7� ;� �,�9� ���� P,�9� �� E� e,�9�;� |� W,�9�;� �� ���� C,�9�;� �� ���� 5?� ;� &�A :,� Y��BW*�C � g� 6
I J K L .M <N JO XP lQ �R �V �W �[� � .� <� Y� "197�� ~ *�D�
� F198�� ~ *�D�
� -199�m ~ 1 �5�8 *Y�9W�> � � � 200�� ~ # *� T� X� � 201�� ~ *�D�
� ��� ~ ] (,� �� #,� �NJ:-� Y��LW*M� g� � � � � � '�� '�� ~ Z (,� �� 202,�X� ON,� Y-��QW*T� g� � � � � '�� 203�� ~ 2 *�� ��V � � � � � �204�� ~ � �*�,�2L+� ә �+� Ӷ �M,5� ;� !,7� ;� ,W� ;�
,Y� ;� c*�9� ���� P*�9� �� E� F*�9�;� |� 8*�9�;� �� ���� $*�9�;� �� ���� 5?� ;� � �� 2 � � � � /� ?� M� [� i� }� �� ��� � ?� <� Y@� 205�� ~ *�� 206�� ~ *�� ~207�� ~ ^ 3*�[� ڙ **�[� �� O� �� *�[� �� O� �� �� � � x y 2x� 1@208�� ~ *�\� w209�� ~ *�\� v210�� ~ *�D�
� c�� ~ d �-��:+�VY�S�Z� -� �:� �� �+�VY�S�Z� -�_6� �� FY�c:�d �e�iW�l �e�iW�m �e�iW�n �e�iW�o �e�iW�p �e�iW6� E� ``�q� }�tW����* �x � g� F . 0 1 !2 <3 B4 K5 [6 k7 {8 �9 �: �< �= �< �? �B� $ � � h X < � F � &� 211�� ~ � J*��� �� �� ���� 4*��� �� �� �� ��y � � �z � � �{ � � � � � � � ( � 2 � < � I �� � D@212�� ~ ^ 3*�[� ڙ **�[� �� O� �� *�[� �� O� �� �� � � � � 2 �� 1@213�� ~ *�\� �214�� ~ *�\� �215�� ~ @ *��|� ;� *��� ڙ � � �� @216�� ~ *��� �217�� ~ *��� �218�� ~ ^ 3*�[� ڙ **�[� �� O� �� *�[� �� O� �� �� � � � � 2 �� 1@219�� ~ *�\� �220�� ~ *�\� �221�� ~ *�D�
� y � �� �� � � /G ���N �G ���G ���G ���G ���G ���G ���G ���N �G ���N �G ���N �N �G ���G ���G ���G ���G ���G ���G ��G �G �G �222�N
N N G �G �G ��G � �G � �G �#&N (N *G �,/N 0N 2N 4N 6N 8N :N <G �>�G �A�G �D�T h U 223VXZ