Gen.Variant.Graftor.20505_27077c3b86

by malwarelabrobot on July 11th, 2015 in Malware Descriptions.

Gen:Variant.Graftor.20505 (B) (Emsisoft), Gen:Variant.Graftor.20505 (AdAware), Trojan-PSW.Win32.MSNPassword.FD, Trojan.Win32.FlyStudio.FD, TrojanFlyStudio.YR (Lavasoft MAS)
Behaviour: Trojan-PSW, Trojan

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary

Dynamic Analysis

Static Analysis

Network Activity

Map

Strings from Dumps

Removals

MD5: 27077c3b86ad486c38d9cca930e84acb
SHA1: 1522a358a93f5b24c2f86344d077e1add316aabe
SHA256: b89defd9460b20e4de12dca6cad4b5d84585fef8bad87efbc7045908d94e9536
SSDeep: 24576:nSrwiH9656uvPq75DKkbyf2FfWl8KuqGavkg3NyNIbbbIoIBAUZLY/V:n8wiHaXqBKk s8KuqGaX0ToIBAUZLYt
Size: 1617920 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6, MicrosoftVisualC, MicrosoftVisualCv50v60MFC, MicrosoftVisualC50, Armadillov171
Company: no certificate found
Created at: 2015-06-22 15:38:29
Analyzed on: WindowsXP SP3 32-bit

Summary:

Trojan-PSW. Trojan program intended for stealing users passwords.

Payload

No specific payload has been found.

Process activity

The Trojan creates the following process(es):
No processes have been created.
The Trojan injects its code into the following process(es):

%original file name%.exe:1332

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process %original file name%.exe:1332 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\sp_line_1[1].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\78072[1].htm (4794 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\c_4[1].gif (81 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\bg_9[1].gif (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\lazy_iframe[1].js (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\sc[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\more_boss[1].gif (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\10111ZM324[1].jpg (2696 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\tgbtn[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\t_8[1].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\ico_ann[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\faspbtn[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\tjrm_img011[1].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\tjrm_img07[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\xfv174[1].htm (1504 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\4399_14294510451[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\left[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\bg_4[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\zmxy3_20150115[2].css (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\4399[1].js (902 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\headerBg[1].gif (228 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\chkDomain[1].js (554 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\c[1].php (1827 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\t_lm[1].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\pic[1].gif (719 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\n_zm1[1].png (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\zb_nav_20131205[1].png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\bg_3[1].gif (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\0913524M015[1].gif (84 bytes)
%Documents and Settings%\%current user%\Cookies\index.dat (8192 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\bdsstyle[1].css (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\more_zb[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\bg_8[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\unilogin_package[2].js (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\base[1].css (12385 bytes)
C:\jedata.dll (88 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\nav_bg[1].gif (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\unilogin_package[1].js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\4399_10503158122[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\4399[2].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\zmxy3_20141010[2].js (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\tjrm_img09[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\sy_ico[1].gif (2 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@cnzz[1].txt (163 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\4399_17485812405[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\78072[2].htm (3324 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@mmstat[1].txt (168 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\c_2[1].gif (70 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\bg_6[1].gif (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\4399_11234392734[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\style[1].css (337 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\02163A05453[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\jcsp_1[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\jquery-1.2.1.pack[2].js (2177 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\bdshare[1].js (182 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\151JA35H9[1].gif (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\2616293441V[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\101634512c8[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\t_9[1].gif (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\10163ZO2N[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\1Q62S330N[1].gif (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\lmbtn[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\core[1].php (73 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\right[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\zmxy3_20141010[1].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\1016395W521[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\logo[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\libg_1[1].gif (899 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (916 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\c_1[1].gif (160 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\play_hs1202[1].js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\sszn[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\4399_16125310445[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (1504 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\trace_news[1].js (559 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\b_5[1].gif (317 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\play_hs1202[2].js (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\0G641442227[1].gif (2696 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\bg_5_20130716[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\t_4[1].gif (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\go_bbs[1].gif (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\1GQ340U13[1].gif (527 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\click[1].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\jquery-1.2.1.pack[1].js (1461 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\tjrm_img06[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (203 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\stat[1].php (1177 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\lb_ico_v1[1].png (652 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\t_3[1].gif (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\zm_add[1].png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\stat[1].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\c_5[1].gif (180 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\hottop[1].gif (857 bytes)
C:\Ãƒâ€ Ã‚Â¤Ã‚Â·ÃƒÂ´.she (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\new_icon_1[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\bg_7[1].png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\scbg[1].gif (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\n_mg_bg[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\bg_1[1].gif (791 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\zmxy3_20150115[1].css (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\xfv174[2].htm (954 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\ico_1[1].gif (44 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\logger[1].js (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\stat[1].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\ico[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\b_2[1].gif (250 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\libg_2[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\zrsp_1[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\shell_v2[1].js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\icon_keys[1].gif (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\b_1[1].gif (610 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\ftbtn[1].gif (477 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\ucenter[1].js (24109 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\topbg_20140506[1].jpg (3808 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\game_bg[1].gif (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\t_1[1].gif (599 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\t_6[1].gif (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\02104939B23[1].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\core[2].php (764 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\101144213249[1].jpg (4539 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\b_4[1].gif (244 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\libg_3[1].gif (542 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\bg[1].gif (5 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@4399[1].txt (161 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\is[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\t_2[1].gif (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\tjrm_img08[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\b_3[1].gif (248 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\c_3[1].gif (84 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\bds_s_v2[1].js (1649 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\t_5[1].gif (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\news_footer[1].js (961 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\more_boss_s[1].gif (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\zj_btn[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\xfv174[1].swf (4463 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\78072[1].htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\zmxy3_20141010[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\4399[1].js (0 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\jquery-1.2.1.pack[1].js (0 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\unilogin_package[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\xfv174[1].htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\zmxy3_20150115[1].css (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\play_hs1202[1].js (0 bytes)

Registry activity

The process %original file name%.exe:1332 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Multimedia\DrawDib]
"vga.drv 1916x902x32(BGR 0)" = "31,31,31,31"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "%original file name%.exe"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 28 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1434976709"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "05 A3 8B D2 98 4B 4C 0C 12 64 FA 32 44 8C F1 1C"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

Dropped PE files

MD5	File path
114054313070472cd1a6d7d28f7c5002	c:\jedata.dll

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name: QQ:207680472
Product Name: ????3?????
Product Version: 1.0.0.0
Legal Copyright: ----------------???.????????------------- ????? ?? ?? ??---------------------????,??????--------------
Legal Trademarks:
Original Filename:
Internal Name:
File Version: 1.0.0.0
File Description: ????????4399???????~
Comments: ???????,????????????,????????416057221????
Language: English (United States)

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Section MD5
.text	4096	518199	520192	4.56705	779604c4e354b6e61451cb85e49d8042
.rdata	524288	1000570	1003520	5.06484	7877cdcd2f5f2f2041118980f5c7ff95
.data	1527808	242250	65536	3.25594	d8c728b8b984fd31dce2e4efd8090eb0
.rsrc	1773568	23072	24576	3.69095	52d95721a2b7d20858cb585320c60698

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

URLs

URL	IP
hxxp://203.130.61.92/flashzt/img/zmxy3_20120913/sy_ico.gif
hxxp://203.130.61.92/jss/play_hs1202.js
hxxp://203.130.61.92/jss/4399.js
hxxp://4399stat.5054399.com/js/click.js	115.182.52.78
hxxp://all.cnzz.com.danuoyi.tbcache.com/c.php?id=30039538
hxxp://all.cnzz.com.danuoyi.tbcache.com/core.php?web_id=30039538&t=q
hxxp://all.cnzz.com.danuoyi.tbcache.com/stat.php?id=4073713&web_id=4073713&show=pic
hxxp://oq.cnzz.com/stat.htm?id=30039538&r=&lg=en-us&ntime=none&cnzz_eid=1152341830-1436511239-&showp=1916x902&t=é€ æ¢¦è¥¿æ¸¸3,é€ æ¢¦è¥¿æ¸¸å¤§é—¹å¤©åºç¯‡,4399...&h=1&rnd=327808461	198.11.132.200
hxxp://all.cnzz.com.danuoyi.tbcache.com/core.php?web_id=4073713&show=pic&t=z
hxxp://oq.cnzz.com/stat.htm?id=4073713&r=&lg=en-us&ntime=none&cnzz_eid=1155346791-1436513542-&showp=1916x902&t=é€ æ¢¦è¥¿æ¸¸3,é€ æ¢¦è¥¿æ¸¸å¤§é—¹å¤©åºç¯‡,4399...&h=1&rnd=1969154380	198.11.132.200
hxxp://all.cnzz.com.danuoyi.tbcache.com/img/pic.gif
hxxp://218.95.101.8/4399swf/js/chkDomain.js
hxxp://static.n.shifen.com/v.gif?pid=307&type=3071&sc=1004,4801,1916,874&desturl=&apitype=1&linkid=ibxcqxyxib5&velo_load=2640&velo_cssload=1875&velo_jsLoad=953&cite_uid=480925&cite_type=1&cite_mini=1
hxxp://e.xdwscache.glb0.lxdns.com/resource/css/base.css
hxxp://e.xdwscache.glb0.lxdns.com/resource/ucenter.js
hxxp://cnzz.mmstat.com/9.gif?abc=1&rnd=1063648122	42.120.219.171
hxxp://e.xdwscache.glb0.lxdns.com/flashUniLogin/css/style.css?v=20121016
hxxp://218.95.101.8/4399swf/upload_swf/ftp7/hanbao/20120107/6/xfv174.swf
hxxp://e.xdwscache.glb0.lxdns.com/jss/unilogin_package.js
hxxp://cnzz.mmstat.com/app.gif?&cna=C24mDjpgZhYCASU5EL1BywfR	42.120.219.171
hxxp://s8.4399.com/4399swf/js/chkDomain.js
hxxp://www.4399.com/jss/4399.js
hxxp://ptlogin.3304399.net/resource/css/base.css	203.130.61.92
hxxp://www.4399.com/jss/unilogin_package.js
hxxp://c.cnzz.com/core.php?web_id=30039538&t=q	195.27.31.246
hxxp://ptlogin.3304399.net/resource/ucenter.js	203.130.61.92
hxxp://nsclick.baidu.com/v.gif?pid=307&type=3071&sc=1004,4801,1916,874&desturl=&apitype=1&linkid=ibxcqxyxib5&velo_load=2640&velo_cssload=1875&velo_jsLoad=953&cite_uid=480925&cite_type=1&cite_mini=1	115.239.211.92
hxxp://oz.cnzz.com/stat.htm?id=4073713&r=&lg=en-us&ntime=none&cnzz_eid=1155346791-1436513542-&showp=1916x902&t=é€ æ¢¦è¥¿æ¸¸3,é€ æ¢¦è¥¿æ¸¸å¤§é—¹å¤©åºç¯‡,4399...&h=1&rnd=1969154380	198.11.132.200
hxxp://www.4399.com/jss/play_hs1202.js
hxxp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xfv174.swf
hxxp://s25.cnzz.com/stat.php?id=4073713&web_id=4073713&show=pic	1.99.192.16
hxxp://s4.img4399.com/flashUniLogin/css/style.css?v=20121016	203.130.61.92
hxxp://pcookie.cnzz.com/app.gif?&cna=C24mDjpgZhYCASU5EL1BywfR	42.120.219.171
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/sy_ico.gif
hxxp://c.cnzz.com/core.php?web_id=4073713&show=pic&t=z	195.27.31.246
hxxp://w.cnzz.com/c.php?id=30039538	1.99.192.14
hxxp://icon.cnzz.com/img/pic.gif	195.27.31.248
gprp.4399api.net	42.62.52.249

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

GET /core.php?web_id=30039538&t=q HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: c.cnzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/javascript

Content-Length: 2572

Connection: keep-alive

Date: Fri, 10 Jul 2015 08:05:38 GMT

Last-Modified: Fri, 10 Jul 2015 08:05:38 GMT

Expires: Fri, 10 Jul 2015 08:20:38 GMT

Via: cache2.l2de1[2406,200-0,M], cache4.l2de1[2407,0], cache9.de1[0,200-0,H], cache1.de1[0,0]

Age: 817

X-Cache: HIT TCP_MEM_HIT dirn:-2:-2

X-Swift-SaveTime: Fri, 10 Jul 2015 08:05:38 GMT

X-Swift-CacheTime: 900
!function(){var p,q,r,a=encodeURIComponent,b="30039538",c="",d="",e="o
nline_v3.php",f="hqs10.cnzz.com",g="",h="text",i="q",j="全ਾ
3;统计",k=window["_CNZZDbridge_" b]["bobject"],l="http:",m
="1",n=l "//online.cnzz.com/online/" e,o=[];o.push("id=" b),o.push("h=
" f),o.push("on=" a(d)),o.push("s=" a(c)),n ="?" o.join("&"),"0"===m&&
k["callRequest"]([l "//cnzz.mmstat.com/9.gif?abc=1"]),g&&(""!==d?k["cr
eateScriptIcon"](n,"utf-8"):(q="z"==i?"hXXp://VVV.cnzz.com/stat/websit
e.php?web_id=" b:"hXXp://quanjing.cnzz.com","pic"===h?(r=l "//icon.cnz
z.com/img/" c ".gif",p="<a href='" q "' target=_blank title='" j "'
><img border=0 hspace=0 vspace=0 src='" r "'></a>"):p="
<a href='" q "' target=_blank title='" j "'>" j "</a>",k["
createIcon"]([p])))}();(function(){function n(){this.c()}var p=['http:
//VVV.4399.com/'],e=document,g=window,m=encodeURIComponent,q="unknow",
l=null;n.prototype={c:function(){if(!1===this.d())return!1;var a;this.
a(e,"mousedown",this.b);a=g.navigator.userAgent;l=e.documentElement&&0
!==e.documentElement.clientHeight?e.documentElement:e.body;a=a?a.toLow
erCase().replace(/-/g,""):"";for(var b="netscape;se 1.;se 2.;saayaa;36
0se;tencent;qqbrowser;mqqbrowser;maxthon;myie;theworld;konqueror;firef
ox;chrome;safari;msie 5.0;msie 5.5;msie 6.0;msie 7.0;msie 8.0;msie 9.0
;msie 10.0;Mozilla;opera".split(";"),..d=0;d<b.length;d =1)if(-1!==
a.indexOf(b[d])){q=b[d];break}},a:function(a,b,d){a.addEventListener?a
.addEventListener(b,d,!1):a.attachEvent?a.attachEvent("on" b,d):a[<<< skipped >>>

GET /core.php?web_id=4073713&show=pic&t=z HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: c.cnzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/javascript

Transfer-Encoding: chunked

Connection: keep-alive

Date: Fri, 10 Jul 2015 08:19:15 GMT

Last-Modified: Fri, 10 Jul 2015 08:19:15 GMT

Expires: Fri, 10 Jul 2015 08:34:15 GMT

Via: cache23.l2de1[896,200-0,M], cache11.l2de1[897,0], cache8.de1[896,200-0,M], cache1.de1[897,0]

X-Cache: MISS TCP_REFRESH_MISS dirn:-2:-2

X-Swift-SaveTime: Fri, 10 Jul 2015 08:19:16 GMT

X-Swift-CacheTime: 899
2a0..!function(){var p,q,r,a=encodeURIComponent,b="4073713",c="pic",d=
"",e="online_v3.php",f="zs25.cnzz.com",g="1",h="pic",i="z",j="站
长统计",k=window["_CNZZDbridge_" b]["bobject"],l="ht
tp:",m="0",n=l "//online.cnzz.com/online/" e,o=[];o.push("id=" b),o.pu
sh("h=" f),o.push("on=" a(d)),o.push("s=" a(c)),n ="?" o.join("&"),"0"
===m&&k["callRequest"]([l "//cnzz.mmstat.com/9.gif?abc=1"]),g&&(""!==d
?k["createScriptIcon"](n,"utf-8"):(q="z"==i?"hXXp://VVV.cnzz.com/stat/
website.php?web_id=" b:"hXXp://quanjing.cnzz.com","pic"===h?(r=l "//ic
on.cnzz.com/img/" c ".gif",p="<a href='" q "' target=_blank title='
" j "'><img border=0 hspace=0 vspace=0 src='" r "'..5c..><
/a>"):p="<a href='" q "' target=_blank title='" j "'>" j "<
;/a>",k["createIcon"]([p])))}();..0..

GET /resource/css/base.css HTTP/1.1

Accept: */*

Referer: hXXp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xfv174.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ptlogin.3304399.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 10 Jul 2015 09:01:06 GMT

Date: Fri, 10 Jul 2015 08:01:06 GMT

Server: nginx/1.4.1

Content-Type: text/css

Content-Length: 32685

Last-Modified: Thu, 14 May 2015 08:01:18 GMT

ETag: "5554564e-7fad"

Cache-Control: max-age=3600

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 kf50:2 (Cdn Cache Server V2.0)

Connection: keep-alive
@charset "utf-8";../* CSS Document ..Use for:...Version:.1.0..Date:..2
011/08/10..Author:..f2er..Update:     2012/05/03..*/...login_embed_ifr
ame{border:none; width:100%;}...login_embed_iframe_hor{border:none; wi
dth:100%; height:100%}...login_horizon{height:31px; line-height:31px; 
/*padding:9px 0;height:12px;*/}...login_vertical{width:530px;} /*modif
y by qf 05-03*/../*............*/...mt5{ margin-top:5px;}...mt10{ marg
in-top:10px;}...mt20{ margin-top:20px;}...mt30{ margin-top:30px;}...mt
35{ margin-top:35px;}...w256{ width:256px;}..#popup_login_div{ width:4
00px; margin:0 auto; padding: 16px 0; }..#popup_reg_div{ padding: 0 0 
16px 0; }../*............*/...login_horizon legend,.login_vertical leg
end,.login_module legend{ display:none}../*login_horizon*/...iptw1{ wi
dth:73px;}...iptw2{ width:154px}...wtc{ width:352px;}...wframe{ /*widt
h:620px;*/ width:530px;}...wframepwd{width:280px;}...login_horizon a,.
login_vertical a{ color:#1278c0;vertical-align:middle;}../*......chrom
e..@media screen and (-webkit-min-device-pixel-ratio:0){..  .login_hor
izon a,.login_vertical a{...vertical-align:top;..  } ..}*/...login_hor
izon a:hover,.login_vertical a:hover{color:#ff5712}../*login_horizon*/
...login_horizon .login_hor,.login_horizon .login_btn{ float:left; mar
gin-right:10px; display:inline;}...login_horizon label{ color:#333}...
login_horizon .login_ipt,.login_vertical .login_ipt{ border:1px solid 
#ccc;/* width:144px;*/ padding:2px 3px; background:url(../images/sprit
eV2.png?v=131127) repeat-x 0 -31px; height:22px; line-height:22px;<<< skipped >>>

GET /img/pic.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: icon.cnzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/gif

Content-Length: 719

Connection: keep-alive

Date: Thu, 09 Jul 2015 08:47:39 GMT

Last-Modified: Fri, 16 Jan 2009 08:10:47 GMT

Expires: Fri, 10 Jul 2015 08:47:39 GMT

Cache-Control: max-age=86400

Accept-Ranges: bytes

Via: cache1.l2de1[7636,200-0,H], cache9.l2de1[7474,0], cache1.de1[0,200-0,H], cache1.de1[0,0]

Age: 84697

X-Cache: HIT TCP_MEM_HIT dirn:4:785300231

X-Swift-SaveTime: Thu, 09 Jul 2015 08:47:39 GMT

X-Swift-CacheTime: 86400

GIF89a2.........f..3...33.............................................
.......................................!..NETSCAPE2.0.....!..Powered b
y AFEI.!.......,....2...... !.di.hjBl..p,....x......`P.(...GR.D6...CH.
...,..@8.... -..EQc.8...........`...."....................~"..H.......
.H......"...$....#.........."..........."Z.......*...%!.!.......,....2
...... !.di.hjBl..p,....x..|....p r..H.C.\&.H.tJu...#b......7..W.h....
...7..l..v..-....."....................~"..I........I......"...$....#.
........."..........."\.......*...%!.!.......,....2...... !.di.hjBl..p
,....x..|....p r..H.C.\&.H.tJu...#b......7..W.h.......7..l..v..-....."
....................~"..I........I......"...$....#..........".........
.."\.......*...%!.;HTTP/1.1 200 OK..Server: Tengine..Content-Type: ima
ge/gif..Content-Length: 719..Connection: keep-alive..Date: Thu, 09 Jul
 2015 08:47:39 GMT..Last-Modified: Fri, 16 Jan 2009 08:10:47 GMT..Expi
res: Fri, 10 Jul 2015 08:47:39 GMT..Cache-Control: max-age=86400..Acce
pt-Ranges: bytes..Via: cache1.l2de1[7636,200-0,H], cache9.l2de1[7474,0
], cache1.de1[0,200-0,H], cache1.de1[0,0]..Age: 84697..X-Cache: HIT TC
P_MEM_HIT dirn:4:785300231..X-Swift-SaveTime: Thu, 09 Jul 2015 08:47:3
9 GMT..X-Swift-CacheTime: 86400..GIF89a2.........f..3...33............
......................................................................
..!..NETSCAPE2.0.....!..Powered by AFEI.!.......,....2...... !.di.hjBl
..p,....x......`P.(...GR.D6...CH....,..@8.... -..EQc.8...........`....
"....................~"..H........H......"...$....#.........."....

<<< skipped >>>

GET /jss/play_hs1202.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive

Cookie: bdshare_firstime=1436516355908


HTTP/1.1 200 OK

Expires: Thu, 08 Oct 2015 05:45:48 GMT

Date: Fri, 10 Jul 2015 05:45:48 GMT

Server: nginx

Content-Type: application/x-javascript

Last-Modified: Sun, 10 Nov 2013 09:24:36 GMT

Transfer-Encoding: chunked

Cache-Control: max-age=7776000

Content-Encoding: gzip

Age: 1

X-Via: 1.1 shjcl69:80 (Cdn Cache Server V2.0), 1.1 kf49:6 (Cdn Cache Server V2.0)

Connection: keep-alive
5f9.............W.n.6..n... ..X)..'......t...b.v...%Q..Y4D*...........
s...d.u]...S...?~.Gt.T.*D.~.n.3.JE..y......\._-.N...R-K...\.lI........
....'.... _.q[p.bsNVw.FR.vN"..=.c.i.;...`.q.C.u... .........m..#X.....
%(..?.....$*2...):..Ts..........n_N....2...b.u...J^.......&..Eu3`.mH..
.wnI..m*.....F.B .. ...5A -5.o.4..&...s...r.{.%c..L.`..6A3tB..q|yr..;1
k...E.....{g<....x....L........;.vNp:}."H.....IS.t.....g.>c...3S
.V.....K....8..b.]..9k...a......y.>..a. ^r._.....\W-6b.e....h.#.p..
{D...N.v...:Q......bJ....7.!....j.....T..vR$9On-....Tmy>.e.U...2U7&
lt;. cW%V.q......T....d.<H....GZ..h....MHdp..;.{V....c[p...1.R.2..V
.&....5.......v k-\....sr...u..n.....M....fK.5...I.].P....'.X....).N..
..*.y.)p..d,=.).T..-AF..,E.to..eA^.,.9......d.cL.S..:.O.......p....N.h
r....hre.....}.-.ZlL/U.J.... .. .Nym..wB.E.D...F....Z.mN.....e.M`...u.
.h/j.v.'..1Y.k1..#...dL..C.m.{eGj.Qb..}..:...Q..5}aMi.M...][email protected].....
.r......Z#..y..B;......$..m\sv.^..\.`...uB0....y.z68..q....0H.,..%..t.
...).-.6.....N......a.....3.bj......}....Q....n.f...9./_i.|.C.....`|..
1..-^G..h..Euk.y9..p..9..G.K.t.Q.8..........$<9u......._.c..<.J.
*....:3l.C......^.5........J.%..PT......=.H.;T....aB;f.%.gXw......e.{.
.|[email protected]....[./...k....yH<g..Dp..Eb.O.>.J.RTs.H..xM..@V...
.?$....s........B..p..@x*..1.....C]4...L%..P.. ...C....:..4...W...}...
/.q.]9D3x.......3}....tD3_.....{.)x.C...P.R..B..>..ey.t..B.#..r....
.[U.....o.=.6..6...w....g.[.....C.i....2.....c..\_.....C...B:F......).
^./.:us....A.."@s.[.Evq4.......4..to.t...O.6Lq..j.......<.N.?..<<< skipped >>>

GET /jss/unilogin_package.js HTTP/1.1

Accept: */*

Referer: hXXp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xfv174.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive

Cookie: bdshare_firstime=1436516355908; cookie_hs=4399.com|||%u9020%u68A6%u897F%u6E383%u4E4B%u5927%u95F9%u5929%u5EAD%u7BC7||78072||0; CNZZDATA30039538=cnzz_eid=1152341830-1436511239-&ntime=1436511239; CNZZDATA4073713=cnzz_eid=1155346791-1436513542-&ntime=1436513542; _4399stats_vid=14365163603627287


HTTP/1.1 200 OK

Expires: Thu, 08 Oct 2015 07:26:38 GMT

Date: Fri, 10 Jul 2015 07:26:38 GMT

Server: nginx

Content-Type: application/x-javascript

Last-Modified: Thu, 07 May 2015 06:16:12 GMT

Transfer-Encoding: chunked

Cache-Control: max-age=7776000

Content-Encoding: gzip

Age: 1

X-Via: 1.1 shjc71:80 (Cdn Cache Server V2.0), 1.1 kf49:7 (Cdn Cache Server V2.0)

Connection: keep-alive
613.............X.o.G...R...O...H@...*..J.B....u.[_.9.^o..R...M.V.....
..E.RH..q0(/.P[..y.JU.....{>'...pvg~......5........i..f..=~<..Z.
....g...[1. ..EYGs.Z...YL'.ds........q...&.l.jit..j(..S.R.....&.(J.=6@
.)......JLc..V..r.`..J.*....ci...|..$d...%O...=Qy5.@<..!.K*~...b.kg
)s...6$5:K....0..KX.D!A..v.lh.. ..F`O... ....a.l. ..qy..I.J.Tz{q.i.c.I
*..$.[..)b.G.El.d..........NY.N..kL...\....th....'.B.c.5vP...Pt.Ab$.J.
g..K9.t,.....X1.o.,...9,.9lYa..47R....*.6..m.......u.....2R.1b..*..6..
'7x~..jO...XB.B.#...RC..J.-.)...........~...&.6.K.0EW\#....L.Y..._.2.|
.....><....I....;.*.".I.T.#.0....tm..........A....g|o4)<H3..=
E4.....M..k.U..9.....nb.w.D....k...hG.......''..F...59XB....`$.g......
j......N.............>.....i...Y>.L.1x..3......?G.(.Mg....J....]
.].....P....~.a........3.........0...... ...%.!.....cz.!."..a.x...1^.0
.....v4.)..R....k........u6.w[W..nl...;....v.=}.^.v.xz......o.X...C#u.
U<?...q...h.eu...7p}.........8.V.@u.$.=WT.. ....:r....,QBV...9..&..
]...Um=............K...].0.C....).y.M....q..9qK...Kl.}.!NU<. $...".
.M!......w....>d..$#'.g.nn$.G...[..4...R.!.........{.)ff..|)8......
.....v....'..V^..l....t... .}s.........L.!.M.0..`~"z.(*}..X.uJy.f.sN.*
=..53z%Q}.36.....J..y..Z.8~dl|......6<..r...<..\1.<.....3...i
.>......w.....Z. ..>..w.%{..........^..!z.......%.Z{..._Z....g.2
;...\../*..x].W8.(....~..f{.....*.........N..__......o..O~..........t.
^. .<....?2.D..4./C..~x..J7....3>...)..P.....].Bs.c.j....o<.k
A..........px.%.....V.#........^[........6bHa../.]......."(.....K.<<< skipped >>>

GET /c.php?id=30039538 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: w.cnzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/javascript

Content-Length: 9937

Connection: keep-alive

Date: Fri, 10 Jul 2015 06:53:59 GMT

Last-Modified: Fri, 10 Jul 2015 06:53:59 GMT

Cache-Control: max-age=5400,s-maxage=5400

Via: cache43.l2de1[3918,200-0,M], cache42.l2de1[3919,0], cache2.de1[0,200-0,H], cache2.de1[0,0]

Age: 5115

X-Cache: HIT TCP_MEM_HIT dirn:3:894927173

X-Swift-SaveTime: Fri, 10 Jul 2015 06:54:03 GMT

X-Swift-CacheTime: 5396
(function(){function k(){this.c="30039538";this.R="q";this.N="";this.K
="";this.M="";this.r="1436511239";this.P="oq.cnzz.com";this.L="";this.
u="CNZZDATA" this.c;this.t="_CNZZDbridge_" this.c;this.F="_cnzz_CV" th
is.c;this.G="CZ_UUID" this.c;this.v="1";this.A={};this.a={};this.la()}
function g(a,b){try{var c=.[];c.push("siteid=30039538");c.push("name="
 f(a.name));c.push("msg=" f(a.message));c.push("r=" f(h.referrer));c.p
ush("page=" f(e.location.href));c.push("agent=" f(e.navigator.userAgen
t));c.push("ex=" f(b));c.push("rnd=" Math.floor(2147483648*Math.random
()));(new Image).src="hXXp://jserr.cnzz.com/log.php?" c.join("&")}catc
h(d){}}var h=document,e=window,f=encodeURIComponent,l=decodeURICompone
nt,n=unescape;k.prototype={la:function(){try{this.U(),this.J(),this.ia
(),this.H(),this.o(),this.ga(),.this.fa(),this.ja(),this.j(),this.ea()
,this.ha(),this.ka(),this.ca(),this.aa(),this.da(),this.pa(),e[this.t]
=e[this.t]||{},this.ba("_cnzz_CV")}catch(a){g(a,"i failed")}},na:funct
ion(){try{var a=this;e._czc={push:function(){return a.B.apply(a,argume
nts)}}}catch(b){g(b,"oP failed")}},aa:function(){try{var a=e._czc;if("
[object Array]"==={}.toString.call(a))for(var b=0;b<a.length;b  ){v
ar c=a[b];switch(c[0]){case "_setAccount":e._cz_account="[object Strin
g]"==={}.toString.call(c[1])?c[1]:String(c[1]);.break;case "_setAutoPa
geview":"boolean"===typeof c[1]&&(e._cz_autoPageview=c[1])}}}catch(d){
g(d,"cS failed")}},pa:function(){try{if("undefined"===typeof e._cz_acc
ount||e._cz_account===this.c){e._cz_account=this.c;if("[object Arr<<< skipped >>>

GET /v.gif?pid=307&type=3071&sc=1004,4801,1916,874&desturl=&apitype=1&linkid=ibxcqxyxib5&velo_load=2640&velo_cssload=1875&velo_jsLoad=953&cite_uid=480925&cite_type=1&cite_mini=1 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: nsclick.baidu.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: max-age=0

Content-Length: 0

Content-Type: image/gif

Date: Fri, 10 Jul 2015 08:19:18 GMT

Etag: "4280832337"

Expires: Fri, 10 Jul 2015 08:19:18 GMT

Last-Modified: Fri, 23 Oct 2009 08:06:04 GMT

Pragma: no-cache

Server: BWS/1.0

HTTP/1.1 200 OK..Accept-Ranges: bytes..Cache-Control: max-age=0..Conte
nt-Length: 0..Content-Type: image/gif..Date: Fri, 10 Jul 2015 08:19:18
 GMT..Etag: "4280832337"..Expires: Fri, 10 Jul 2015 08:19:18 GMT..Last
-Modified: Fri, 23 Oct 2009 08:06:04 GMT..Pragma: no-cache..Server: BW
S/1.0..

GET /js/click.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: 4399stat.5054399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx

Date: Fri, 10 Jul 2015 08:19:15 GMT

Content-Type: application/x-javascript

Last-Modified: Wed, 15 Jan 2014 06:56:45 GMT

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding

Expires: Fri, 10 Jul 2015 08:19:16 GMT

Cache-Control: max-age=1

Content-Encoding: gzip
41b............}U.o.6..v.....DT.*...K<-.)6....uOA`0.%3.(....I....EY
...A......}p'.3..d..V....Zj..L.#M.<? {.[.hV...~........)......<.
[email protected]..[. .A=#mo4..1..u.?t.(]..Dv.:[email protected].
*.q.........4=.Fq.....**....Fm%W....!.....5j`.....U..e. .2P..I~$.f....
.......Je.<b.F./(.V<.oQ.....b.I.E.^1..)z..0&...T0OU2n...)..} ...
..a.%...E.......F...-..%ka0>.v.VY.>..I..`.....-g..?....IB^.3.^\.
.....XU...t.....JN......tr.-.t.J..`...H..V.fX.Z.".c.)./ 6......>..M
....=.^....igrp.l.m.//.m..vV....=.Y...$A... ... ...7\F....zr?....Ts..G
.v.....<\.0>.K..*.g:..0.[...g....Y....o.B.M!..ku..m.am.<=..&l
t;a....4r<.x2...&l.."av...............Ya.n([email protected].._2.
.U.vQ.z`f.?>~.....9.[n;...l.....=..^`..S..nvH.D.%...d.K...P:K)<V
..S....P..=........v.....E.Oi'bKuX.'.Ejk.{pknyH.n.g.t..9......n.y...d.
.a$...-..z.........,.Z.....Yb..Ov...@^j..TC..a.i].........i.....v..."O
.#.C..G...ln..D.........&.C......W.r *.o.......%1U..]..:X.jtD:.......R
5"[email protected]@|{<...}...j.;....M.
.}...H...?k.yH...Unc..(Q..Fi.^..t.6..U ..^"...z.F{......0..

GET /flashzt/img/zmxy3_20120913/sy_ico.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive

Cookie: bdshare_firstime=1436516355908


HTTP/1.1 200 OK

Expires: Thu, 08 Oct 2015 06:27:23 GMT

Date: Fri, 10 Jul 2015 06:27:23 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 2053

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 shjc71:88 (Cdn Cache Server V2.0), 1.1 kf48:7 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89a8............o{.dpv.47....tz....KO.35...........................
......................................................................
......................................................................
.......IPT........................t.....q..|...............IL...."#...
............dqx......................HL.HL.........6<?.........FMQ.
...ILs...sy.........prs...............frw............>>>r~...
..........{...........334.............................................
.............GJ.;>..............................................dh.
........SSS.........q|..y....OOOccc...................................
....mop......___...s}..........................kp.szu.........|.......
......................................................................
..........................!.......,....8.......}.x.......*\.....>N.
..B....2j......./*Y....!?>[email protected].
.~.\..J....X.fu..........D..|h..]...[.f.....`?~g ...7M..Q...L...{..I..
....,*..G.r.G.XQ.D.....>....E..86..{.....=.j.(..J.[....7.......{.p.
.j.[\PE.z...!B...qXNi."..5_.....O^......W/O..z.T..A..<.n.M[...3p...
@(.L.I..&..q.).`..(H.<...CA-L O.!....z$..6..r.....".,..b....B..L.BA
.@0...\.H }.2.0..!........4.d.1>)...`0.....!......<..L,...L.....
).8...n....r.i...0.A..q....\...sl.F..L.....p...B.c..D.@..\....pP.<!
......j...P.D..Pb..........*.... [email protected]..
.D.....Q...\ B.R....^.R..~|..... .?..;.q.F ...P...I.S....l...'.....[D&
lt;I...?.X.@>.D`...w... ..q..8`..#.........0.,..4......1..70...<<< skipped >>>

GET /jss/4399.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive

Cookie: bdshare_firstime=1436516355908; cookie_hs=4399.com|||%u9020%u68A6%u897F%u6E383%u4E4B%u5927%u95F9%u5929%u5EAD%u7BC7||78072||0


HTTP/1.1 200 OK

Expires: Thu, 08 Oct 2015 05:30:08 GMT

Date: Fri, 10 Jul 2015 05:30:08 GMT

Server: nginx

Content-Type: application/x-javascript

Last-Modified: Sun, 10 Nov 2013 09:24:38 GMT

Transfer-Encoding: chunked

Cache-Control: max-age=7776000

Content-Encoding: gzip

Age: 1

X-Via: 1.1 hzsx165:80 (Cdn Cache Server V2.0), 1.1 kf50:10 (Cdn Cache Server V2.0)

Connection: keep-alive
386.............U.j.@.}V.....H. .>&U .B..)4/..#[ {SYkV.......O./tf.
b.v...y.z...........v.k.'...&*.z....x..U.. V...\q^..b...y..#.U...f....
x.VOb.....k..M6.....iC9.KJ.2./..2z.u!...W.`....k.L..).[U.C.%..h.$q..*.
...wphI........MEmC>`&.M/'z.:.eUM.\...7k.=..|....e.u..2..5. j^...KW
..%*.`.|......>...\.....7.zT.)8.'bzA..I...H.<.<c..a.K.^...|..
#....3.{G.<.E.#.9.o.......&>.tl.1...).9.H.;$'...X.M*<.Xp.....
>'....IO.6.}.n.~x....T...?2xp.M....|F2..>.U..U.oj..C...i.R...}..
.U~.&.1!...Ma.q_67uG.K.c...wA...{..S...V-.j..]"..M......l>n.....|.!
..k\{g..8... t..Kv.R[....>...^.<.tb..K...d.6.h..0.....k|....x@s.
...l....S<.E1..2/....v.zCCq.T..5.....x..,F..c1I....J.Z.#.......#.\.
z...}.\.A.... ..;.......&..c..r........9.,.....]Y..\..W.....F.....?.m.
..$~c..8i..<CQh.C........2....o..?.N[.Os..2.>....4.....b;....{..
.@w. ..O.Y..#\a.]..k.I.....YJ....%...n.k`......x..O..]g..^.7.......8..
.=...3c.........^...?t......c.....J...Z'.s.....0..HTTP/1.1 200 OK..Exp
ires: Thu, 08 Oct 2015 05:30:08 GMT..Date: Fri, 10 Jul 2015 05:30:08 G
MT..Server: nginx..Content-Type: application/x-javascript..Last-Modifi
ed: Sun, 10 Nov 2013 09:24:38 GMT..Transfer-Encoding: chunked..Cache-C
ontrol: max-age=7776000..Content-Encoding: gzip..Age: 1..X-Via: 1.1 hz
sx165:80 (Cdn Cache Server V2.0), 1.1 kf50:10 (Cdn Cache Server V2.0).
.Connection: keep-alive..386.............U.j.@.}V.....H. .>&U .B..)
4/..#[ {SYkV.......O./tf.b.v...y.z...........v.k.'...&*.z....x..U.. V.
..\q^..b...y..#.U...f....x.VOb.....k..M6.....iC9.KJ.2./..2z.u!...W<<< skipped >>>

GET /4399swf/js/chkDomain.js HTTP/1.1

Accept: */*

Referer: hXXp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xfv174.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s8.4399.com

Connection: Keep-Alive

Cookie: _4399stats_vid=14365163603627287


HTTP/1.1 200 OK

Date: Fri, 10 Jul 2015 08:15:19 GMT

Server: 4399SERVER

Last-Modified: Fri, 17 Sep 2010 03:21:31 GMT

Accept-Ranges: bytes

Cache-Control: max-age=31536000

Expires: Sat, 09 Jul 2016 08:15:19 GMT

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 352

Content-Type: application/javascript

Age: 238

Via: http/1.1 4399SERVER (CDN CACHE V1.0), http/1.1 4399SERVER (CDN CACHE V1.0)

Connection: keep-alive
.......... K,RH.../-R.UHK.)N...*..&....].s.3..R.J.%%.V.....z&...z...J:
0QL......4u("..z.5.[...b.......8?.....aE,.w.%E>...%.. ...'.........
....... 3M.$.@..<3/%.\....3-.HA..;...:..9..rR..K2.....J9........Z..
...': V.........%[email protected]........%../,.|....k.>..g..
.G....W.9.tv..z....7..8}..w....'^o.wu....g?......g[....z...#..l9.LQI..
.Z...F.*...HTTP/1.1 200 OK..Date: Fri, 10 Jul 2015 08:15:19 GMT..Serve
r: 4399SERVER..Last-Modified: Fri, 17 Sep 2010 03:21:31 GMT..Accept-Ra
nges: bytes..Cache-Control: max-age=31536000..Expires: Sat, 09 Jul 201
6 08:15:19 GMT..Vary: Accept-Encoding..Content-Encoding: gzip..Content
-Length: 352..Content-Type: application/javascript..Age: 238..Via: htt
p/1.1 4399SERVER (CDN CACHE V1.0), http/1.1 4399SERVER (CDN CACHE V1.0
)..Connection: keep-alive............ K,RH.../-R.UHK.)N...*..&....].s.
3..R.J.%%.V.....z&...z...J:0QL......4u("..z.5.[...b.......8?.....aE,.w
.%E>...%.. ...'................ 3M.$.@..<3/%.\....3-.HA..;...:..
9..rR..K2.....J9........Z.....': V.........%[email protected]...
.....%../,.|....k.>..g...G....W.9.tv..z....7..8}..w....'^o.wu....g?
......g[....z...#..l9.LQI...Z...F.*.......
<<< skipped >>>

GET /4399swf/upload_swf/ftp7/hanbao/20120107/6/xfv174.swf HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xfv174.htm

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s8.4399.com

Connection: Keep-Alive

Cookie: _4399stats_vid=14365163603627287


HTTP/1.1 200 OK

Date: Fri, 10 Jul 2015 08:10:26 GMT

Server: 4399SERVER

Last-Modified: Wed, 08 Jul 2015 09:03:55 GMT

Accept-Ranges: bytes

Content-Length: 3134568

Cache-Control: max-age=31536000

Expires: Sat, 09 Jul 2016 08:10:26 GMT

Content-Type: application/x-shockwave-flash

Age: 535

Via: http/1.1 4399SERVER (CDN CACHE V1.0), http/1.1 4399SERVER (CDN CACHE V1.0)

Connection: keep-alive
CWS...2.x....<...?>...53.A...E..Q.....R.0........h.H%I%*.F.m.v.(
*..&.TT...5.|.....{.......{_..{....f.B .N! Q...D...h...<.:B L..Bm|.
\t.".<...fL....l..ccc.b....0cSkkkc.3c33C.0...D.8C.Pw.->..[.".D.8
|..Vg...E3&N.....k..h.....b...#.<.......b......L.-3*...ab.......!..
...a(.)..n....#...l[{.?....e..X.....s.Y0f......L&..(..i.%...C`N.0.....
..Q..\.0.-...E....G..b<!.6S...c...s...hf.....o.U.....mgEsu......N..
.#N7..a.S`.l.Nr.H...D...4.....d....y.}.....B...A|..x...ianm.......!%..
....;.....Z........w:.._.. ..meUU......DQ..O.D...............j.....m..
o'...eN....R.O..q...B....v: ...^..4...O...?.Y.4.D_~o....r...Kc..^.{q..
....?On.c.ug..9....w.(.........zW._Mu.Z..Z.#.0....[CN{..L.}..C.6D2.WS.
.".ho..ch.&...OI..L|....z......L....^[email protected].&)..OR.U{.^....
.......T..|.e-s=..].Z...._...m>..<gMz...:W..ah..p..N............
:M..1..S....%.u.s......^..C.:m..M..d....QJ...O=F...6.......B.k/....g..
......."_.....|;..I.......=/M....jM32.$.z>k..X./w........w.......u.
<....'........//8..C.@^z..5V..;...\2. 7K..=..[.U.....).....%.Gd....
.. ..e}...~e...;^..6...].u.*k.Z.l.....U'...d.{.e.......&..E.su.v.. .FC
E.K.-.?..<.xk...... ..v.>[..5'.....>q|\..........<..2.e*..
.#..^...eR6O?....&|...k.?..~.....2._E......i..2].da.:.$...G.*.7.?S.Mk.
.5.]c}.n.^...fwj.8.SM.....`....b......s.yf.w..k.;.>5"7........e...K
DR.|.#c..<....M.|...q..W.$g\qO..........z......r......?;.e.....hvs.
.....*DW...zH[.F...w.;...3..*Ym..k..4s..3..N.m..T..J.*y}MN..>oW....
.Y?..$?..=.2.f.U........q.$....l.uy.Yg..or......^.... ........f..N<<< skipped >>>

GET /resource/ucenter.js HTTP/1.1

Accept: */*

Referer: hXXp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xfv174.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ptlogin.3304399.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 10 Jul 2015 08:30:57 GMT

Date: Fri, 10 Jul 2015 07:30:57 GMT

Server: nginx/1.4.1

Content-Type: application/x-javascript

Content-Length: 46303

Last-Modified: Thu, 14 May 2015 06:16:20 GMT

ETag: "55543db4-b4df"

Cache-Control: max-age=3600

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 fuzhou190:8105 (Cdn Cache Server V2.0), 1.1 kf48:10 (Cdn Cache Server V2.0)

Connection: keep-alive
uni_login_type_key = "loginType";..uni_login_username_key = "username"
;..uni_login_uid_key = "uid";..uni_login_nick_key = "Pnick";..uni_logi
n_qqnick_key = "Qnick";..uni_login_puser_key = "Puser";..uni_login_ptu
sertype_key = "ptusertype";..uni_login_phonebinded = "phonebinded";..u
ni_login_lastLoginDate = "lastLoginDate";..uni_login_lastLoginAppGame 
= "lastLoginAppGame";..uni_login_lastLoginTime = "lastLoginTimeStamp";
..uni_login_type_qq = "qq";..uni_login_layout_horizontal = "horizontal
";..uni_login_layout_vertical = "vertical";.....var unionLoginProps = 
{};..function getCookieValue(propKey, defaultValue){...uniCookie = JK.
Passport.get();...if(!uniCookie)....return defaultValue;...return uniC
ookie[propKey] || defaultValue;..}..UniLogin = {};..UniLogin.getUid = 
function(){...return getCookieValue(uni_login_uid_key);..}..UniLogin.g
etUname = function(){...return getCookieValue(uni_login_username_key);
..}..UniLogin.getUserType = function(){...return getCookieValue(uni_lo
gin_ptusertype_key);..}..UniLogin.getQnick = function(){...return getC
ookieValue(uni_login_qqnick_key);..}..UniLogin.getNick = function(){..
.if (!UniLogin.getUid()) return null;...var nick = getCookieValue(uni_
login_nick_key);...if (!nick) {....return null;...} else {....if (nick
.replace(/[^x00-xFF]/g,'**').length < 2) {.....return null;....} el
se {.....return nick;....}...}..}..fetchNickTryCount = 0;..UniLogin.fe
tchNick = function(callback){..setTimeout(function(){....if (!UniLogin
.getUid()) return;....var nick = getCookieValue(uni_login_nick_key<<< skipped >>>

GET /9.gif?abc=1&rnd=1063648122 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: cnzz.mmstat.com

Connection: Keep-Alive


HTTP/1.1 302 Found

Server: Tengine

Date: Fri, 10 Jul 2015 08:19:23 GMT

Content-Type: image/gif

Content-Length: 43

Connection: keep-alive

P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"

Set-Cookie: cna=C24mDjpgZhYCASU5EL1BywfR; expires=Mon, 07-Jul-25 08:19:23 GMT; path=/; domain=.mmstat.com

Set-Cookie: sca=53f43e47; path=/; domain=.cnzz.mmstat.com

Set-Cookie: atpsida=bc83d5928b2eb43b590fbd73_1436516363; expires=Mon, 07-Jul-25 08:19:23 GMT; path=/; domain=.cnzz.mmstat.com

Location: hXXp://pcookie.cnzz.com/app.gif?&cna=C24mDjpgZhYCASU5EL1BywfR

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Pragma: no-cache
GIF89a.............!.......,...........L..;HTTP/1.1 302 Found..Server:
 Tengine..Date: Fri, 10 Jul 2015 08:19:23 GMT..Content-Type: image/gif
..Content-Length: 43..Connection: keep-alive..P3P: CP="NOI DSP COR CUR
a ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"..Set-Cookie: cna=C24mDjpgZh
YCASU5EL1BywfR; expires=Mon, 07-Jul-25 08:19:23 GMT; path=/; domain=.m
mstat.com..Set-Cookie: sca=53f43e47; path=/; domain=.cnzz.mmstat.com..
Set-Cookie: atpsida=bc83d5928b2eb43b590fbd73_1436516363; expires=Mon, 
07-Jul-25 08:19:23 GMT; path=/; domain=.cnzz.mmstat.com..Location: htt
p://pcookie.cnzz.com/app.gif?&cna=C24mDjpgZhYCASU5EL1BywfR..Expires: T
hu, 01 Jan 1970 00:00:01 GMT..Cache-Control: no-cache..Pragma: no-cach
e..GIF89a.............!.......,...........L..;..

GET /flashUniLogin/css/style.css?v=20121016 HTTP/1.1

Accept: */*

Referer: hXXp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xfv174.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s4.img4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Mon, 13 Jul 2015 06:13:59 GMT

Date: Sat, 13 Jun 2015 06:13:59 GMT

Server: nginx/1.6.1

Content-Type: text/css

Content-Length: 4316

Last-Modified: Thu, 14 May 2015 06:02:29 GMT

ETag: "55543a75-10dc"

Cache-Control: max-age=2592000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 zhj192:8108 (Cdn Cache Server V2.0), 1.1 kf48:2 (Cdn Cache Server V2.0)

Connection: keep-alive
@charset "utf-8";..body{background-color:#37383c;}../*login*/..#regbot
 {display:block;}...loginDiv{border:none;width:538px;background:none;}
...login_hd{background:url(../images1/tbg.gif) no-repeat;padding:37px 
25px 0; }..#login_tagnum{background:url(../images1/ptlogin.gif) repeat
-y 0 0;padding:0 5px;}...login_fd{background:url(../images1/ptlogin.gi
f) no-repeat -538px 0;height:23px;}...login_close{background:url(../im
ages1/closed.gif) no-repeat;width:15px;height:15px;top:8px;}...login_c
lose:hover{background-position:0 -15px;}...login_horizon .ptlogin_btn,
 .login_vertical .ptlogin_btn{background:url(../images1/spriteV4.png) 
no-repeat;width:73px; height:28px; overflow:hidden;}...login_horizon a
, .login_vertical a{color:#ffaa00;}...login_vertical .login_hor .q_tip
{color:#899999;}...login_vertical .login_hor label{color:#899999;}..#l
ogin_tag{height:28px;}..#login_tag li, #login_tag li a, #login_tag li.
selectTag, #login_tag li.selectTag a{background:url(../images1/ptlogin
_tab.gif) no-repeat;}..#login_tag li{width:84px;height:28px;padding:0;
text-align:center;}..#login_tag li a{width:84px;height:28px;padding:0;
text-align:center;line-height:28px;}..#login_tag li.selectTag a{backgr
ound-position:0 0;color:#fff;}..#login_tag li a{background-position:-8
4px 0;color:#464646;}..#login_tag li{top:1px;}...login_vertical #login
_simple_toregister{background:url(../images1/spriteV4.png) no-repeat -
74px 0;width:73px;height:28px;overflow:hidden;}...login_vertical .ptlo
gin_register{background:url(../images1/spriteV4.png) no-repeat 0 -<<< skipped >>>

GET /stat.php?id=4073713&web_id=4073713&show=pic HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s25.cnzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/javascript

Content-Length: 9938

Connection: keep-alive

Date: Fri, 10 Jul 2015 07:32:22 GMT

Last-Modified: Fri, 10 Jul 2015 07:32:22 GMT

Cache-Control: max-age=5400,s-maxage=5400

Via: cache16.l2de1[0,200-0,H], cache14.l2de1[1,0], cache8.de1[0,200-0,H], cache10.de1[0,0]

Age: 2813

X-Cache: HIT TCP_MEM_HIT dirn:-2:-2

X-Swift-SaveTime: Fri, 10 Jul 2015 07:56:44 GMT

X-Swift-CacheTime: 3938
(function(){function k(){this.c="4073713";this.R="z";this.N="pic";this
.K="";this.M="";this.r="1436513542";this.P="oz.cnzz.com";this.L="";thi
s.u="CNZZDATA" this.c;this.t="_CNZZDbridge_" this.c;this.F="_cnzz_CV" 
this.c;this.G="CZ_UUID" this.c;this.v="0";this.A={};this.a={};this.la(
)}function g(a,b){try{var c=.[];c.push("siteid=4073713");c.push("name=
" f(a.name));c.push("msg=" f(a.message));c.push("r=" f(h.referrer));c.
push("page=" f(e.location.href));c.push("agent=" f(e.navigator.userAge
nt));c.push("ex=" f(b));c.push("rnd=" Math.floor(2147483648*Math.rando
m()));(new Image).src="hXXp://jserr.cnzz.com/log.php?" c.join("&")}cat
ch(d){}}var h=document,e=window,f=encodeURIComponent,l=decodeURICompon
ent,n=unescape;k.prototype={la:function(){try{this.U(),this.J(),this.i
a(),this.H(),this.o(),this.ga(),.this.fa(),this.ja(),this.j(),this.ea(
),this.ha(),this.ka(),this.ca(),this.aa(),this.da(),this.pa(),e[this.t
]=e[this.t]||{},this.ba("_cnzz_CV")}catch(a){g(a,"i failed")}},na:func
tion(){try{var a=this;e._czc={push:function(){return a.B.apply(a,argum
ents)}}}catch(b){g(b,"oP failed")}},aa:function(){try{var a=e._czc;if(
"[object Array]"==={}.toString.call(a))for(var b=0;b<a.length;b  ){
var c=a[b];switch(c[0]){case "_setAccount":e._cz_account="[object Stri
ng]"==={}.toString.call(c[1])?c[1]:String(c[1]);.break;case "_setAutoP
ageview":"boolean"===typeof c[1]&&(e._cz_autoPageview=c[1])}}}catch(d)
{g(d,"cS failed")}},pa:function(){try{if("undefined"===typeof e._cz_ac
count||e._cz_account===this.c){e._cz_account=this.c;if("[object Ar<<< skipped >>>

GET /app.gif?&cna=C24mDjpgZhYCASU5EL1BywfR HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: pcookie.cnzz.com


HTTP/1.1 200 OK

Server: Tengine

Date: Fri, 10 Jul 2015 08:19:30 GMT

Content-Type: image/gif

Content-Length: 43

Connection: keep-alive

P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"

Set-Cookie: cna=C24mDjpgZhYCASU5EL1BywfR; expires=Mon, 07-Jul-25 08:19:30 GMT; path=/; domain=.cnzz.com

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Pragma: no-cache

GIF89a.............!.......,...........L..;HTTP/1.1 200 OK..Server: Te
ngine..Date: Fri, 10 Jul 2015 08:19:30 GMT..Content-Type: image/gif..C
ontent-Length: 43..Connection: keep-alive..P3P: CP="NOI DSP COR CURa A
DMa DEVa PSAa PSDa OUR IND UNI PUR NAV"..Set-Cookie: cna=C24mDjpgZhYCA
SU5EL1BywfR; expires=Mon, 07-Jul-25 08:19:30 GMT; path=/; domain=.cnzz
.com..Expires: Thu, 01 Jan 1970 00:00:01 GMT..Cache-Control: no-cache.
.Pragma: no-cache..GIF89a.............!.......,...........L..;..

GET /stat.htm?id=30039538&r=&lg=en-us&ntime=none&cnzz_eid=1152341830-1436511239-&showp=1916x902&t=é€ æ¢¦è¥¿æ¸¸3,é€ æ¢¦è¥¿æ¸¸å¤§é—¹å¤©åºç¯‡,4399...&h=1&rnd=327808461 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: oq.cnzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: Tengine/1.4.6

Date: Fri, 10 Jul 2015 08:19:15 GMT

Content-Type: image/gif

Content-Length: 43

Last-Modified: Mon, 09 Mar 2015 09:01:02 GMT

Connection: close

Accept-Ranges: bytes

GIF89a.............!.......,...........D..;..

GET /stat.htm?id=4073713&r=&lg=en-us&ntime=none&cnzz_eid=1155346791-1436513542-&showp=1916x902&t=é€ æ¢¦è¥¿æ¸¸3,é€ æ¢¦è¥¿æ¸¸å¤§é—¹å¤©åºç¯‡,4399...&h=1&rnd=1969154380 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: oz.cnzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: Tengine/1.4.6

Date: Fri, 10 Jul 2015 08:19:15 GMT

Content-Type: image/gif

Content-Length: 43

Last-Modified: Mon, 09 Mar 2015 09:01:02 GMT

Connection: close

Accept-Ranges: bytes

GIF89a.............!.......,...........D..;..

The Trojan connects to the servers at the folowing location(s):

%original file name%.exe_1332:

.text

`.rdata

@.data

.rsrc

t$(SSh

~%UVW

u$SShe

jedata.dll

{A0005538-9391-4dd9-B4D6-8EB7B9360F08}

\jedata.dll

%S4WD

hg%fpM

S.Ac9SR

0.I%3s

,wAe.kI

aiUy'4xu

%c*@j

.eH'y

{&%U)

lj%4U

xe%CNs

9F.cLe

hJK.ZH

O.qt0

KERNEL32.DLL

COMCTL32.dll

GDI32.dll

MSIMG32.dll

MSVCRT.dll

MSVFW32.dll

USER32.dll

SkinH_EL.dll

207680472

hXXp://VVV.4399.com/flash/78072.htm

416057221 886520

bbs.886520.cc

hXXp://jq.qq.com/?_wv=1027&k=TpEX8U

%$%,%4%<%

S%T%U%V%W%X%Y%Z%[%\%]%^%_%`%a%

b%c%d%e%f%g%h%i%j%k%l%

W%X%Y%Z%[%

Z%T%i%f%`%P%l%

%$%a%b%V%U%c%Q%W%]%\%[%

%<%^%_%Z%T%i%f%`%P%l%g%h%d%e%Y%X%R%S%k%j%

%,%$%4%<%

eZl%u

Q.YeY

R:\Sg|p5rL

e$e#e e4e5e7e6e8eKuHeVeUeMeXe^e]erexe

s4s/s)s%s>sNsOs

qq!r!x!/!L"k!^!-!y"_!`!!&"&#&$&%&&&'&(&)&*& &,&-&.&/&0&1&2&3&4&5&6&7&8&A&B&C&D&E&F&G&H&I&J&K&L&M&N&O&P&Q&R&S&T&U&V&W&X&''!'"'#'$'%'&'(')'*' ','-'.'/'0'1'2'3'4'5'6'7'8'9':';'<'='>'?'@'A'Q'R'S'T'U'V'X'Y'Z'['\']'^'_'`'a'b'c'd'e'f'g'h'i'j'k'l'm'n'o'p'q'W'>!=!B!F!G!H!I!w"x"E!D!s"l!m!("n!r" ","*"-"M"N"O"_"P"`":";"]!e"g"g!\"J"K"A"@"i"j"h!h"f"b"b!a"e!f!c"d">"?"<"="]"^"!(,("(-(#(.($(/(&(1(%(0('(<(7(2()(>(9(4(((8(=(3(*(:(?(5( (;(@(6(#"""%"$"'"&"!"~!{!}!|!~"z!y!j!i!v"u"t"!!"!#!7!9!:!;!R!S!T!U!V!W!X!Y!Z![!)"."L!M!A!!$"$#$$$%$&$'$($)$*$ $,$-$.$/$0$1$2$3$4$5$6$7$8$9$:$;$<$=$>$?$@$A$B$C$D$E$F$G$H$I$J$K$L$M$N$O$P$Q$R$S$T$U$V$W$X$Y$Z$[$\$]$^$_$`$a$b$c$d$e$f$g$h$i$j$k$l$m$n$o$p$q$r$s$ !,!5!6!!%"%#%$%%%&%'%(%)%*% %,%-%.%/%0%1%2%3%4%5%6%7%8%9%:%;%<$=%>%?%@%A%B%C%D%E%F%G%H%I%J%K%L%M%N%O%P%Q%R%S%T%U%V%W%X%Y%Z%[%\%]%^%_%`%a%b%c%d%e%f%g%h%i%j%k%l%m%n%o%p%q%r%s%t%u%v%&!<!3!4!l0zC7<|Kf>0;e><2TI?M"P/1n3#P$@BRV5:Jg>>NBJ$PfC%Pz6&P]40Cg<'P(P)P5GW57GcFC83KIi*Ph> P52e6p8iL&VpM}FE5,P-P;N=MhA/Pv;sF2P>1_8^8f0KOJO3:!03P4P5P4K6Pr8g0rK|5}5~5bD<N7P8P9PM?:=N?>P<P=PX5#:p2;P:P)JF;E;>B?PUIg@8!@PBPeBaNJ0AP>2D6gCo7CP$Gk4DPK0`8l4zI2HY5q2gPAElGFP<HbN-?G;w;@2QD"CJPL0cD;=4:$MNB?2IP>MEPGPn:HP$UPPSPQPB2;JKPOPs8H;&4TPLPcNx;MPRPUPNP!6M0"6A2%UyKnIt8/?7NXJ87½2S=YP^P\PWP/BZP]P[P]JXP.?sK_P`P$=mPPG6IhPpJ62lPfPoPRAD8\GG`nP]EcPv8u8aPZ<iPoJMCePq7bPjPdPQNkPAOf6p7pPqPuPN0PJtPsPwPvPdDr7xPE<&BeDv6yP65zP|P5Kf71;wH{PE:CM~P#Q}PD:}=97$QO6!Q"Q/F|A#6MK%Q=N&Q)Q'QNA(Q*Q,Q QHJ75.Q/Q/2-Qt<2Q1Q0QVP3Q~=4Q%MYL6Q5Q8Q7Q9Q:Qt058;7<={C$6h@w8n9<QHLFEy;;Q=Q^Eu3>Q~F4A@QAQ,Hx8;OBQ&6<J6Bq65Es7CQDQbF_1GQ}:FQF:HQnfIQAKJQKQLQi>L<'4OQMQ=LNQZIPQQQRQ_EVQTQUQSQc:WQjLdNXQ(@YQZ=ZQ|C?N`EER[Q%tE6\Q^Kh=|B^QdF_Q`Q.3aQ'6LFz1P=!HbQaEO?cQ,JZ@"4)4dQfQ:7eQsNi==HLJgQxMhQiQ~EjQ)@~:t7kQI;o9fDmQ'Bo:nQoQ0AlQqQ6Kd9pQu7^:mGtQrQ{Ij>{Qd3uQsQOAwQvQD3`7|Q-NxQ}QzQyQONy8C2tNu=XEe9"R#ReN O%Rz8$R/3&RVK<D&MYJ'RUp0F(R*43L!>)RgJ-R*@*RP6 R 4.7.R/R0R1R[<{8^LhLwFqJ2R3R5R7R6R8R=2LK|:9RYA">)6:R[H;R<R=R>R$Ih6e0?F?R==i@AR@R#>a8CR>HDR\H4BnB(6nF1CnGNKFRj@57GRHR,1u0m4(BQ5qMKR72JR*6LRqLMRRN|868NRPROR_?91^1QRRR78SRn52;TRtK5:Z5'MPA?H}<G=h<u<v=@HWRC1QA}8E8g6[R!C~B 6$>\RZRD2fB8<K;&1p3f9J;]R^RI5F3g9H5_DF>L!9yMGE~8/7gRc6JK]HfR^4aRbRdReR[5a?-JcR_Rc8`R$OrJhDb8p9hR]FlR~<v<oRmR#LjRsRnRqRF8?LrRtRvRp:BOkRiRuRpRxR#SzR~R!S{R>Si:13yR%Sv0$S%0JI"S|RwR}RH:&Sw0/S'S(S%>iK-S,S/E.S S416:0?)SbE*S"04S#M'>:S9S0SCB1SoB6S&>3SdL<77S8S5S;S2SASFSBS=SGS1AIS"9?S}CCS<S-4n4e3DS@Sv7JSHSSAJ5,6ESt6D1NSLS'TQSKSOSMSL;PSSSXSVSUS2CE2RSTS(>31WS^2bS|>^S\S]S_S=19AYSZSz3aSo4dS`ScS.JUF8HfSeSE3gSjSiShS9GkSlSnSmSpSsSqSoSrStSuSvSwSxSEQ|<M;s2x0DCyS$:O0^?zSG8q9|S{S`J}S!T~S"T#Tw7`1$T&T%T(TZE)T50_:=7OC*T T-T.Td:Q67K,T/TA:#93T%:3C0TZD4Tb?2T5T?76T7T$9@39T:T;T8T1T<T=TdKk>?T@T>TBT8Gh0VICT}>9<]Gp4k:YK2Fx7OBATDTDBETFTHTiD.4!ta1sJl>HEf:NT=J]Nt2JT:AMTcEIEdE9HMDI:ITv16EKTGTP?OTN=-6PThJ}AFDRTOKSTXT/JWTQTTTVT&:IJYTECu2m>[TZTh9\T^T]T`TUTbTaT_TN;Q?TAcT<@m0dG[DeTdTfTgThTiTQJjTF2kT<M03IRH=?BlTkL4LnTgB7E@BWIoTpT{1:<qTP0rTsTb1q4`FtJwTUAvT@7[KuTeEyTxT{TzT|1|T)>~T%C}T3Jw=[E!U%9"U!G^HQL%G U85EM/L,V#U&UEB8KJE'UeKJ:*>(UP;O;90H8 @Q0,U-U*U81/4)UEL1I(0y0Q;R0#02U0U<L3U1U/U1?.UZJd87U8U >4U,OLG6U':9UXI:U5U;L^G;U2I<U@U=UG2?U;<>Uy7LUEUBUdCAUCUDUFUGUr4IUHUJUn>MU\DE1KUNUOURUPUQUR;SU&9TUz;8BUUVUZ;'9RL(5I8WUX3XU9BYU#VZU[U\U^U_U`UpB'1i<B0WA045<(9fE!=14hCjD8095uJB<R5k@<<(MaU\5K:23c1,>H2bUFMI=d<cUs4RF)LdUeUYIgU(4w6fU242?kU!;I2jUhUlUiU GM\3?mU@NnUpU~CoU#@{;PBw<uIl@M<qU->rUsUS0:BR?tU3F.>/>uUm@0>vUwU`LxUF6"=yUzU\<,?tFT?xH"GI6{Uo5|U~6OF02S;}U"V!V}6~U8E0BKEH<XAzM$V%VVF3;'V(V)Vt4*V V,2;Ad4-V(LRBY3/V1V_4.V0V3V2V4V5V=F.6e26V;V9VwJvJgE8VT=7Vr?<Vj:BVCV=V33>VGVFVEVAV@VDVxJKVHVJVrMIV?Vs?LV7:MVNVQVPVOVhE:VWVSVRVTVUVXVfNYVVVZV`4[V]V\V^V_Vn@#=d=cA)98:*9p5`V9:J8aV&LCGbV 9,4'CR6T;[IAHcVu4fV!DeVdVgVkDc?U;J@SB"5"DhViVo>9KlVkVjV}IsVZKmVoVkKnVpV(HqV>JrV34?J/GtVuV,944vV88DM)Mv4xV#D-91>_H2>x=lDyJ9E.9\IyVYEB:K8mDC0n=/9GMzV{VQG|VwN-O~V}VG3!W$W%W#W@I3>'W&W"W(W)W*W-W W,W.Wd1nD/Wz7v26G0W{F[J1W.O2W@J5W!P1P0<uF6W]5$Dz07W&J09PCoDoL98L88W9W?We<%D/6:W IFC;W<W06=W>W@WvEAWBWCW4W3WDWA7'IL:7I&DKIEW4>F1FWGWrL`HJW}1,@IWHWB7TBNWLWKW'Ne8y=MWLE>=@FQWPWOWRWf8SW|I[=TWyHAF'D0EUW 54?,Iw4&GVWV;:K;K~1[WiCXWw2-XZW0GYWWWz9]WcWiWaW\EfW]I`WeWgNW;UB^W^5hW-@e1bWx2gW16dWjWlWvWtWqWpWxNrW2619z=yWkWoW_Wz2sWuWQC(:82mWxWwW36)Bf3C7nWzW}W!X=<'XpD{W%Xy2#X$X~W"Xg8*M54Y1&X:G-0aH\W,X0XeL)XiE.Xp>/XWFGO X1X{9K@T0*X(XZA|W4;FB=X[A8X5X6Xf<9X<X7X$=:X4X|L{L>X?XU03Xr6&064;XCXBXGXHXFXIXAXEXJXKX@X|;DXVB292X5?XXiJNXOXPXWXVX}K74TXE743QX8NSXV0UXLXRXYXD7MX]M M\X`X~AyNaX^X[XZX_X0J4FF7bX]XcX{712kX84iXjX):hXfXeXlXdXnX{2pXoX(DsXqXgX|7rXvXuXwXtXxXyXzXjJ|X{X?=.@f2|2}X?0L@~XCl!Ya7"Yo@#Y$Y:5%Y&Y'YWBM8aL<Kj=(Yp@=nbHj<M:)YGB'JqB,Y*Y-Y Y.Y1J70^IcH/Y2Y5>;50Y7Y6>1YDG^M3Y4Y8YjE5Y39^@FY4HrBdH-ZzJqDuK;Y!2jCDY4C>YEY@YGYCYBYoG<Y}2:Yq5sB6Y9Y49[@7>AYRGr5H3g3!?IYNYJY}7OY";i9&==Y};LYX;MYD0HY)Ds546KY'0C:6?rDTHQY^A*B ;RYTYPYaJ=D\A{JN<`Y_Yx?~7YY9>hF1GWY]Ax<\Y8>VY[YSGUY!7]3]Y NN:5CZY\@59d?f1<AXYE5G7OD^Y_AaYcY7BiYdYfYAIsDgY,MHM94.0eYbYx4g1hYIMlY;BsYmYjYqYSYnYrYBHkEkYoYH7q:]@wY&EtY`KuYvYNL"@b7}Y5;zYyY2G5F1E{Y|YoIEG#;q@PKI3%Z~YJM'Z#Z$Z`A"Z?Y&Z!Z Z,Z'E.Z$;)Z<5/Z(Z3Z2Z1Z4Z6Zq>5Z9Z7Z8ZpY;Z:ZxY<Z0ZY;=Z>Z@Z?ZAZ~269|J/@N8CZFZRI_5EZDZTGGZ56IZHZ:46;XFI7t?JZ0@(E_IKZLZMZ8J]UF@LIX:eHCHMEANOZP<PZ60T6M@`IQZB;GC[;7?RZ}Jw1\;UZSZVZ9NTZ{@WZ2BXZz4ZZYZ[Z\Z{4|F6Cl5];aA\=00]Z"2aZ79`Z ::>_Z;>@L*:W0N@fZ1@G1U=fKr:<>'@eZcZdZkC&[jZ~;89hZiZ8?gZ/;lZkZpZqZmZ"3nZoZUHaIJ7rZ2@=>RCG6sZwZK2tZvZuZk=HCE0xZyZ*DqNC;kJ=K"[{Z~Z}ZzZ![^F|Z#[l=$[KMxG%['[([)[J6H199*[ [q=bAXR>A=AXBG:rPn7-M~J~I,[s:?D-[/O>K D.[|4/[0[ZL$LvK\K%;2[k<QK4[7[6[y4`53[5[8[y?{MI0`:<B]<s>;[NE9[ B:[r>]L<[=[hMB[:9UG?[lE^ZbZO5GGA[>>DHG[zH>[D[C[O@mKSNgKL2^;HOF[u?E[@[O8L[J[M2H[N[T[HBAJV["IU[pG?K;4w@@=SD.MQ[P[R[O[W[M[K[S[I[lCxLF<t:::oKA3NDJFI1r@4@*7Y[;9|3[[t3a[^[s@K3,:J3O:\[e7K7mEZ[F0][_[M6,7<4K5b[y:qK7;c[0Io[32d[u[e[BNl[_Gt[g[40i[<9k[j[f[q[?>mTh8|Mh[tD#3-:`[p[a3n[r[nE~42\ILw[}4~[@K!\#\'\y[*CoE \|[(\"\9?,\3@*\=4POv[&\X0x[:L}["?GDs[%\z?/\q3!81\z[0\)\{[-\.\?\NF$\;\=\XDLMvI8\JB>\?A5\B\A\oF@\jFD\7\H6:\]=`G<\K64\6\3\0OZ39\C\53g:]1T\1OW\:?V\U\R\F\c\E\X\P\K\H\I\Q\"tN\=9HDdAL\G\J\MMjKO\Y\a\Z\g\e\`\_\PDeA]\[\b\h\uHn\i\l\f\tC8I\\d\@>OLx\k\"8#2_3S\A>p\w\y<r3.Cm\r\v\66L5t\!5KFs\u\o\q\`3IC|\z\i8y\!]X[{\}\~\,](]m[']&]#]j\%]$]*]&O-]{6)] ]'H.]2]/]sM0]^\3]4]516]g7!<U6$2_M8]7]:]=5V6>4=]<]>]N27C?]?4A]@]B]C]D]_;5@!:pIbJDOu;P:rNE]F]`;G]H]J]I]XK^=l<D;K]M]#?L]N]O]P]Q]R]T]S]U]%2JCV]&;L3W]BELT#5X]Y]lJhKGFZ]fH{HSL[]]]\]_]^]a]a;1Lb]c]$5d]f]e]e?9IJ1EHuDA=a5FH.<h]@4x1rFg]>9SCi]q]j]ABb5r]h7%5p]n]k]`M@DYFl]t]s]#7-2;:m]o]WKtBwK|]}]O2(J}L!^#<B>x]~]h176u]z]t@qGgHw]!Ky]$^"^{]"KHGc5%EmC%^#^YBv]K1NM0^/^v@,^lM6F&^EDL1?9)^'=.^-^(^ ^h3*^IG.Nt>u@6^4^MI1^3^:1@92O=3bIaM$3;?5^:^C>0M7^2^8^^NsEBF63U1>^A^CNdMH^B^?^TNE^J=G^L^qEJ^D^8CK^@^F^M^|0C^N^<?_=%J.:;^I^:E6@i3Q:D>=^B=L7<^R^m=:8a^[^t5OEV^_^/02192X^,BO^Q^A9b^]^U^\^ LZ^^^P8E>9CT^/MW^P^rES^Y^QO><~Kc^.Ho^;8`=e^/NB9r^n0p^d^j^l^OMg^.Ei^q^k^GLf^"<~^j3h^m^n^lBZBv^|^z^)E#_w^x^`^y5:I?<w93Ot^"_i1fAyGA4zN!LRD{^}^2A!_y^s^C4i7/_*_x@c3a=3_,_,D)_YDL_&_%_._(_'_-_!@$_0_1_B46_5_7_:_CE4_8_c7yB2_;G9_>_<_?_B_;_j9(G9^tM=_A_uB@_ _ioE_I_G_C_D_H_F_NIN_K_J_M_TFO_uCmB%@P_R_Q_u^S_gFT_P2tE=5^<R:'Of?j1V_U_Y_:C\_W_[_Z_@EY0uN^_(1`___]_X_#Kb_a_k1d_2Jc_5LG>3AF>{Nj_y@f_k_l1i_aGe_h_H>QHl_Q<z@o_g_'7m_PMp_&tO=q_r_.Gt_u_3GuEw_y_UNv_x_m1s_[Sz_gA8;|_{_$?YR}_!`n_~_"`zG#`$`%`&`^D(`'`)`*`_<cIlL `,`VA$<-`.`/`RJGH0`WG-D1`g2m5FL6L424ORK*J7@2`CF#83`T:5`4`6`7`8`>59`:`$8HH<`u>;`86=`?`>`@`Q8A`i6@A}9C`D`B`m<HF96F`,CE`5ObGI`K`H`TLJ`L`DNP`O`vC-G%8N`M`1M2MQ`n1v9b;R`S`U`C=W`V`X`M3Z`Y`\`[`<8(NL6&2j6a4hN^```a`Q2]`9;AD_`d`n<b`>7IHc`~`i`=8e5f`}M0NvBh`j`VNW6|HJGk`m`p`l`o`j8M1q`p?n`\Nt`$tr`u`g`s`<:v`w`~Mx`y`e`z`D4%<{`|`}`;1!a;I"a$4#a$a%a'a(a&aSI*a)a,a a-a.a0a/ay92a1aE4S?<E3a8@:;y14aQMcJ5aDE3MC9=?KC4R.Dh26a7a<a:a9aBZ&38aZ0*HJH1N=a;a\C&@ H-I?a,NM7@a>aVHAaBa[0v>GaDamFCa&5JaEaFaIaHa%IBAAA?5KaLaMaOaNaV1WahHQaSaUa>?VaTa@<PaRaBII>YaXaZa&</:wE[aKD]a!N\aiAbadaeaTCca`a^a_aaahafagaiakalamanajapaoaqaENtarasab4~LJJvauawaxa|ayaza{a}a~a!b"b#b/HPE$brG4I%b&b*E'3D9'b(b)b); b*b,b-biH.b/bis0b1b2b.;3bVG_KN1W14b6b5bpE9@9]7bAL8bF4WH9b:b;b\LUL>DjA=bb=J>@b?b>b}HG4)8FbCb??2LBbDbEbAbGbHb/Dc4eCIbJbMbg?DFNbSKKbLbQbPbObSbRbTbVbUbMJV=FNWb7FXbYb]b[b\bZb^b_b`bab7LbbpLcbNCjGk6;Cdb:6P@eb=:fbgb&8U:ibVEV:N5$KKGWE\9kbK>2NE9'8#Hmbobk8nbvDqb73lbjH01l:ROpbrbKJY@tbubsbN3{bzb'<|bwb}bxbXHvbyb"c!caK~bk0$c#cL>ÌA'c&c(chbjb*c)c(<iNR< c77@5'5c;4M1c0cDA-c/cK=@?.c,c*GM><IW:xE2c3cIcX6=O5A4cR2wD!J5cz56c8c9c)G:c;c<cY6S2EF(=d;=c)=J2CI>ckHEAAcBciGA??caC@cN>\0)5CcxDDcG@-L#IEcFcUCGNHcGco<Jcp0McKcT2N7LcF9r9fJNcTKPcQ@O1:2,0OcQcRcw>ScO3Ucj7f5Vcu6Wc|@MF`@u:XcbCkAZc\cYc[c"7]c&7g5RM_c`c.1ccv3bcacec^cfc)NgchctTjcickclc5NmcopO>ncocW=8Fpc(Cqc<Crc%6?Q]C3<H4sc"dvch5uc$dtcP>xcyc Ezc^3Z?dI|chBwc{c}c{:&d.I&HyEZ6%d#d5H~c^C{EzEv:8d(d*d-d.d d,d)d'd!dOJU25d2d7d6dsG'L;;0d9d4d3d/d1dI4=C}@"H>d$Ha@;dOH?dSJ[C:d<d=d@dD<FFEdDdAd6OJdNdKdGdHdMdBdURIdCdLdRdJ4OdPdQdTdSdvHUd|NmJZdWdVdR@Yd[dXd_d\d]dFd^d`dadFJbdbLN6)7cd4Jh?0Ldd3NtGFA4GM=@0idgded!4Q>jdhdfdndmdldkdodpd:@qdsdrdR88Aud|Etdvd5JlAG9wdHNydzd{d|de;}dO7j5*5!esLH9~d$efL<G3Ic=#eS<I9f;i56J"eGABKw:g;]D'e_NY:(eB?*eR>0:)e*=>8HA%e e&eP7.e2ek7-e6eJ9mM<03ek50e1e}E/e,e(3d@(88e5e7e4eQ73B9enAFeBe<e@ez<]0;eCeGeK9VLVD=eEe:e>C?e=0JL>e[6lHmAPNo=neHe~@DeIeKeyDNeJeTJK4KL^0Me}NLeo1lFOeVePeWeSe{GJ<UeReXeQeD=%KL=Te`e\e_e]eae[eAeS@KH^eYe!AR7 =%?6AdefegeceeeZebejeiezK 7helekeoeqe<;mereseteze;Eveuewexeye{e|eL4}e~e!f"f#f$f%f&f(f'f)f*f f.f,f-fa:S7VC3Hp=MGmH/fmX0f2feM1f4f3fSM5f~H6f9f8f7f:f27"AA5>f;f<f?f@f=f)1'2BfCfDfbM,=FfEfi?GfHfIfe4M4JfKf]KcMTM7OM9NfT<MfOf)<QBPfL9WLQfRfSfTfUf*<mLWf?CVfYfXfZf;@[f\f9J]foA^f_f~Nbfaf`f0Dcf&?dfef8Offgfifhf%HyF>O)HkfS>*IlfjfN4T8h;nH*8CKofmfN9O9i0h:YG_0tf@CXG[Bvfrfufpfsf&KU8}0qfxfyf9F;6&g=Gi;<[email protected]@S5zf|f{f}f&C>G1D#g"g~fU?eI%g$gP9SO5g)g*gp<(gx9'g g2D"J#A\B/g0g,g-g.gQ96g2gfIlK(I1g4g3gDK7g8g7A9g;g?g<g:g?G=g>g22Eg@gAgBg!BDgCgFgGgHgC?i2IgWN <-=j;WCJgKg11LgMgNgOgPg=6*ZQge@RgK<Sg0PTg^J\4$AX=qI.=UgR9VgLHdgXgIBuG?8Wg%AYgzD[gZg]g\g^g`g_gO4agbgcg1:INeg'?p1fggghgr0igjggIG<lg)320kgngNGD?V2'K]7\6mgj2#4q1rgjN]BDI~gW2|gzgqgogpgc<l6wCQFQ1tgsgygugxgPLwgX2}3{g}gT7#h,h-h 04hq0 h*h%h$h"h!hcC{B'h&h)hpAU7A1(hS9qA:h;hY2.28h.h6h=h7h5hvg3h/hP41h<h2h>h0h|GiM9hOhGh{?F5]6Bh[2T>EhZ:QEJhnJAhZ2V8)IKh?hHhRhChDh:FIhFh(KLh`0@hNhMhkGTh_h~3bhPhUhnM^hUM*NxCk3rIdh!F10]hYhrASh[h`h,G*0XhahxI\hWhU>/=,<XLGIghphZhw3x>ehjhsAfhmh_CnhVMch83ihlh,Lohhhkh)K!OshzhrhC<QhNJ"Lyhxhthuh61whqhUDvh~0"BCJ{h!iYH~hV>I<#i>6$iyI}hVh|hOO"FsI i1i2i%ivG/i'i)i3i(i,ir1eF-i0i&i&A*i';E?07tLyLr=7i5iNO4iuM6i8i9i<i:i#F;iMH.is==iBitAAi"iCiIA>i@i?i1]"]EiDivM<bFiGiHiW8T5Ji]Qu5:Ns6KiLinCMizF:0c2RiSiNi=;OiBGPiQi[iUiXiTiViWiX<YiACV7B3\i?3ai]i`i:H^i_iHIZHbi}Blihik2fi*KgidieijimikiiiciXCti*Lrisinipiqioif@9Oxiyi!j*?{i~iviui"j\2|i#j}izi3DwihG'j;M&j%j.j(j0jfM3j*j j/j2j1j)j,j=j6j4j5j:j;j*3B59j$j8j<j7j>j@j?jBjAjZiFjCjDjEjGjl7IjHj0=T9'^JjQ=93KjR1W>LjU9Mja0=INjj?UjRjoCSjPj^6OjVj67^B\jXj5BWjZjQj[j]joHYj^j`jS8TjA0_j[:vNajbjuA"Ncj5MdjejdJfj@:#NkjljX>jjgMgjij=@~?hjmj#Jojnjl3 Kpj|jrjsjtjujyjzjxjvjqjwj{j7p(2~j_6}j"k!k$k#k%k1=&k'k(k>@WM)k$JFG*k k 8,5,kk;AG-kP3.k0kwM/kF?1k2k3kQ44k5k6k7kQ38k9k:kr2(?;k<k=k@8{D>kW7V?Ak$F@k17?kwB-5BkCkY>m7Dk,K_@v5uLJAEkG?pCZ>FkIkJk>:BBHk[>>IGkl;S1NkX7n;m;MOMkLk'AM5CO:3\>KkPkQkOkX8@Mo;'GTk@@BC6MWkl8?@SkXkm8UkVkRkb@IF/C]2pHC54D[kYkLCA@R4Zk[?JN@O\kgk5Dfkckkkdk`k|D_k]k!Mp;ak^kekt=A8zBEKZ1b0%FikhkfFmkbklknk,8jkV9U<okXMrkuksk5Ipk`6tkvkzkwkykxk{k1<}k|khI!lY7~k"l#lD5Afy>$ln8%l&l>;NZ'l(l2=)l*l l,l-l C.l0l/l&F1l-K2l3l4l5lZF]>6lk9.P7l8l?I9lAl:l<l;l=lFK>l?l@lBl-3gDiIb:[email protected]_BqH=EFlGKl2Ll(OBDEOq;Kl1B\l(AxFPIOl?;r;^>eG-8NlMljIA<REQlRlX9PlSlTlVl#BUlf4XlWlYl[l]l^lV@O<_lR3`lvAalblkI/5cl6D[1dlq<v?-Bglflelmlklhljlilllw5plW@qlY8nlol)O7D)ArlulsltlYM'Fxlvlwlyl)m|l}l{lzl}D!m%m"m~l#m$m m&mX@(m*m'm-m3=,m.m/m2m1m0m4m3mvL6m5m7m8m:m9mH?;mm6<m>m?m@m=mAmV<Bm0537.8CmpF>EDmGm4<FmEmZ7HmS3Jm\:ImRmLmNmeJKmMmQmOm15PmSmZGXN4=Tm"MVmUmYmAMXmm3Wm\m[mZm2E]m^m_ml9%7`mambmI?cm-<dmem!R~Qfmpegm$C ?@GhmUJTD~9)C*1xKW?^7a6VJimkmjm`2vFlmwG3EmmR=omBL~mqmrmID`BwA(FpmU5ymvm%n)F`Csm~DSEtmxm`[email protected]$Bum)0"OzmaB5=J?|m{mo0}m/I'n[Fk?YCx6&n7M?1WJa2!n"n#n$n;F#Cc0(n)n#t=B*ns1LA/8ZM n,ExAW<,n/ne=-n A*Ad0KN1nrH3n2n0ndcT4nm5n4n6n8MaF.K7nY<8n9n:n!Ej0Y9:O>n47;n<ntIT39M?6TE?n@nAn"ECnBnSFDn6=`<[GqCr<l?EnFn]?GnHnInoM7=KnJnZ9s9@;Nnf=MnLniBo8C@0H9=On_>RnPnQnTnSnz>UnVnWnPHS:a<XnYn$NE=nLLNZnb6[n#E^nx3K?\n]n`DUK|6`nan_ncn_FC3gndnfnbnOoenkNZ8on4Ejnmnknpnqninvnt1hn-Hln`>[9HKd6F=<F-AtnnnsnCL8Dunrn,Aynxnwn/K{=zn_JT1FIrCx5|n]9,;{nm?n?!o#o{>"o$oS6EIb<#O~nx:?O&o%o'o}niFUEWD,oCC(o)o-7 o08*oa>y30o?:yAJD;3.o/oCD-o1o7o:o9o-E2o3o6o8o@6;o5o4o?o@oAo>o=ob>*F<oEoCoDoBoxBFoGoIoU4HozLToJoMoKoLoNoPoQoRoUoSoVoXoWo9DgLYo.AZoDJ[o 3<1W4V4\o]o^o_o`oX4U3^96Hboaoco\1foeodogojoG0holokonomooo.FpoqosorolItouoe:vowoIKKA$0KBxomI{oyo_9zoB8EJ}o!p~o"p!1X?|=Y4#pfG%p"1$pDDMN F|o&N18[My64N(7bB!g&p,3o?V3(p)p'pd7]:c>#1YN p.n*p.p,p-p/p0plN1p2pI@;H}?g4:Mm28=[85p4ps;6p3p(;:p-jVRw?8p%NqF 1c@6<7J@1mNkM;pEE{<<p=pL?>pnN9p@pBpAp?pCpDpzAb2Ep8LFpGp*O1[HpIpJpNpKpLpMpOpD@wLE@PpsHQpSsLLRpSpTpW3VpY?Wp$7Xp\pZp[ps3Yp]p^pH0_p`pd>apG5dpcpbpqk\JepfpgphpipjpZ4kplp#Gnp;2qppp$1A6GJ:D":`9g=\?sprpBMh4RH\F|?NN[7vpupKK,FP1wptpQIjMxpyp{pjB[3\3zpi428j4?E`N\8|p}p~p!q#q"qwI$q%q&q'q)q(q*qtHLf)?25 q,q,R;]SH{0;0t;0K~>-q_L.q\MB1A;/qn20q1q3q4q6q2q5q[47q8q9q:q;q=q<q?qBq>q@qAqCqB6s<DqEqa9Fq>3OGGqHqZCkFIq}GLBX1n6o6sCNqp6o2MqKqLqJqXqOqPqQqRqTqSqY=UqWq35Vq{A38YqMBZq-F[q`q^q]q_q\qbqaqdqC6cqeqfqhqgqiqkqjq|9lqmq<3nqoqq?pqqqrqsqb9tquqvqwqxq1Hzq&I{qyq}q|q~q!r"r#r$r%r&r'r(r)r*r r,r-r.r5]/rxd45!32:1r0r%L3r4r2r5rbK6r{5%O7r9r>0:r J8r;r<r=r>r?rnK-;z:/A@rCrArDrq8BrErFrGrKr*;dBLrIrHrJr_7PrOrNr30ZrVrWrSrYrUrb3LOXrTrRrQr\r_r^r]rII[rs0`rbro3Mr71drcrar-CpKZNerfrgrhrir;Djr7Horkrlr1KDLPFprqr>Fnrmr*2yrxru1vrursr{3rr2<)2c9|r{rzrwr}r~r%s$s&s-1!s"st99L#s2K s's,s)s(s\7-s.s/s*str0saD4s5s3s2s8s1s6s7s:s9s<s=s>sIO;skBm:?s@sAsBsCs48DsEs/<FsGsHsIsLsJs<OKsoNMs[NNs~GOsQsRsPsm9MLcKwV`]{K 2TsP5UsVsWsu9XsT`[LcBYs[sZs\s]s^s_s`sasbscsdsesfsgshs$E]8jsMAksls!Imsns7cZlmpospsrssstspNqsusvsxswszs{sys6N|s}sTc~s*!t!p!s!u!J!K!v!\!$!%!?!0#1#2#3#4#5#6#7#8#9#'!(!c!a!d!)!w!A#B#C#D#E#F#G#H#I#J#K#L#M#N#O#P#Q#R#S#T#U#V#W#X#Y#Z#N!@!O!0!2!.!a#b#c#d#e#f#g#h#i#j#k#l#m#n#o#p#q#r#s#t#u#v#w#x#y#z#P!C!Q!1!o!

S%S'S(S)S S,S-S0S2S5S<S=S>SBSLSKSYS[SaScSeSlSmSrSyS~S

d d"d$d%d)d*d/d0d5d=d?dKdOdQdRdSdTdZd[d\d]d_d`dadcdmdsdtd{d}d

B"p"C"m"l"n"4"1"k"D""*!*$***#*)*!).*2*1*4*3*@*?*B*A*P*R*Q*T*X*S*,)c*b*e*d*r*0)N)" ! $ * # ) A). 2 1 4 3 @ ? B A C)P R Q T X S L)c b e d r P)s '*' %*% (*(  *  ,*, /*/ -*- 0*0 ")B)7*7 6*6 8*8 5*5 :*: ;*; =*= <*>*> $)D)G*G E*E F*F D*E)&)F)H*H I*I G)J*J L*L K*K ))I)()H)M*M O*O N*N J) )K)W*W V*V -)M)Y*Y [*[ Z*Z \*\ ]*] _*_ ^*^ a*a `*` /)O)l*l i*i f*f k*k h*h j*j q*q t*t s*u*u w*w v*v &*& C*C U*U g*g p*p m*m o*o n*n 9 0"/"2"6"5"3"8"9"a&b&c&d&g&i&l&v&e&j&q&r&s&t&{&x&u&z&w&y&|&B'C'D'E'F'G'H'I'J'K'L'M'N'r's't'u'v'w'x'y'z'{'|'}'~'q"o"!0"0#0$0%0&0'0(0)0*0 0,0-0.0/000102030405060708090:0;0<0=0>0?0@0A0B0C0D0E0F0G0H0I0J0K0L0M0N0O0P0Q0R0S0T0U0V0W0X0Y0Z0[0\0]0^0`0a0b0c0d0e0f0g0h0i0j0k0l0m0n0o0p0_0q0r0s0t0u0v0w0x0y0z0{0|0}0~0!1"1#1$1%1&1'1(1)1*1 1,1-1.1/101112131415161718191:1;1<1=1>1?1@1A1B1C1D1E1F1G1H1I1J1K1L1M1N1O1P1Q1R1S1T1U1V1W1X1Y1Z1[1\1]1^1v1_1`1a1b1c1d1e1f1g1h1i1j1k1l1m1n1o1p1q1r1s1t1u1w1x1y1z1{1|1}1~1!2"2#2$2%2&2'2(2)2*2 2,2-2.2/202122232425262728292:2;2<2=2>2?2@2A2B2C2D2E2Q2F2G2H2I2J2K2L2M2N2O2P2R2S2T2U2V2W2X2Y2Z2[2\2]2^2_2`2a2b2c2d2e2f2g2h2i2j2k2l2m2n2o2p2q2r2s2t2u2v2w2x2y2z2{2|2}2~2!3"3#3$3%3&3'3(3)3*3 3,3-3.3/303132333435363738393:3;3<3=3>3?3@3A3B3C3D3E3F3G3H3I3J3K3L3M3N3O3P3Q3R3S3T3U3V3W3X3Y3Z3[3\3]3^3_3`3a3b3c3d3e3f3g3h3i3j3k3l3m3n3o3p3q3r3s3t3u3v3w3x3y3z3{3|3}3~3!4"4#4$4%4&4'4(4)4*4 4,4-4.4/404142434445464847494:4;4<4=4>4?4@4A4B4C4D4E4F4G4H4I4J4K4L4M4N4O4P4Q4R4S4T4U4V4W4X4Y4Z4[4\4]4^4_4`4a4b4c4d4e4f4g4h4i4j4k4l4m4n4o4p4q4r4s4t4u4v4w4x4y4z4{4|4}4~4!5"5#5$5%5&5'5(5)5*5 5,5-5.5/505152535455565758595:5;5<5=5>5?5@5A5B5C5D5E5F5G5H5I5J5K5L5M5N5O5P5Q5R5S5T5U5V5W5X5Y5Z5[5\5]5^5_5`5a5b5c5d5e5f5g5h5i5j5k5l5m5n5o5p5q5r5s5t5u5v5w5x5y5z5{5|5}5~5!6"6#6$6%6&6'6(6)6*6 6,6-6.6/606162636465666768696:6;6<6=6>6?6@6A6B6C6D6E6F6G6H6I6J6K6L6M6N6O6P6Q6R6S6T6U6V6W6X6Y6Z6[6\6]6^6_6`6a6b6c6d6e6f6g6h6i6j6k6l6m6p6q6n6o6r6s6t6u6v6w6x6y6z6{6}6~6|6!7"7#7$7%7&7'7(7)7*7 7,7-7.7/707172737475767778797:7;7<7=7>7?7@7A7B7C7D7E7F7G7H7I7J7K7L7M7N7O7P7Q7R7S7T7U7V7W7`7X7Y7Z7[7\7]7^7_7a7b7c7d7e7f7g7h7i7j7k7l7m7~7n7o7p7q7r7s7t7u7v7w7x7y7z7{7|7}7!8"8#8$8%8&8'8(8)8*8 8,8-8.8/808182838485868788898:8;8<8=8>8?8@8A8B8C8D8E8F8G8H8I8J8K8L8M8N8P8Q8O8R8S8T8U8V8W8X8Y8Z8[8\8]8^8_8`8a8b8c8d8e8g8h8i8j8k8l8m8n8o8p8q8r8s8t8u8v8w8x8y8z8{8|8}8~8!9"9#9$9%9&9'9(9)9*9 9,9-9.9/909192939495969798999:9;9<9=9>9?9@9A9B9C9D9E9F9G9H9I9J9K9L9M9N9O9P9Q9R9S9T9U9V9W9X9Y9Z9[9\9]9^9_9`9a9b9c9d9e9f9g9h9i9j9k9l9m9n9o9p9q9r9s9t9u9v9w9x9y9z9{9|9}9~9!:":#:$:%:&:':(:):*: :,:-:.:/:0:1:3:4:5:6:7:8:2:9:::;:<:=:>:?:@:A:B:C:D:E:F:G:H:I:J:K:L:M:N:O:P:Q:R:S:T:U:V:W:X:Y:Z:[:\:]:^:_:`:a:b:c:d:e:f:g:h:i:j:k:l:m:n:o:p:q:r:s:t:u:v:w:x:y:z:{:|:}:~:!;";#;$;%;&;';(;);*; ;,;-;.;/;0;1;2;3;4;5;6;7;8;9;:;;;=;<;>;?;@;A;B;C;D;E;G;H;I;J;F;K;L;M;N;O;P;Q;R;S;W;U;T;V;X;Y;Z;[;\;];^;_;`;a;b;c;d;e;f;g;h;i;j;k;l;m;n;o;p;q;r;tfs;t;u;v;w;x;z;y;{;|;};~;!<"<#<$<%<&<'<(<)<*< <,<.<-</<0<1<4<2<3<5<6<7<8<9<:<;<<<=<><?<@<A<B<C<D<E<F<G<H<I<J<K<L<M<N<O<P<R<Q<S<T<U<V<W<X<Y<Z<[<\<]<^<_<`<a<b<c<d<e<f<g<h<i<j<k<l<m<n<o<p<q<r<s<t<u<v<w<x<y<z<{<|<}<~<!="=#=$=$=&='=(=)=*= =,=-=.=/=2=0=1=3=4=5=6=7=8=9=:=;=<===>=?=@=A=B=C=D=E=F=G=H=I=J=K=L=M=N=O=P=Q=R=S=T=U=V=W=X=Y=Z=[=\=]=^=_=`=a=b=c=d=e=f=g=h=i=j=k=l=m=n=o=p=q=r=s=t=u=v=w=x=y=z={=|=}=~=!>">#>$>%>&>'>(>)>*> >,>->.>/>0>1>2>3>4>5>6>7>8>9>:>;><>=>>>?>@>A>B>C>D>E>F>G>H>I>J>K>L>M>N>O>P>Q>R>S>T>U>V>W>X>Y>Z>[>\>]>^>_>`>a>b>c>d>e>f>g>h>i>j>k>l>m>n>o>p>q>r>s>t>u>v>w>x>y>z>{>~>|>}>!?"?#?$?%?&?'?(?)?*? ?,?-?.?/?0?1?2?3?4?5?6?7?8?9?:?;?<?=?>???@?A?B?C?D?E?F?G?H?I?J?K?L?M?N?O?P?Q?R?S?T?U?V?W?X?Y?Z?[?\?]?^?_?`?a?b?c?d?e?f?g?h?i?j?k?l?m?n?o?p?q?r?s?t?u?v?w?x?y?z?{?|?}?~?!@"@#@$@%@&@'@(@)@*@ @,@-@.@/@0@1@2@3@4@5@6@7@8@9@:@;@<@=@>@?@@@A@B@C@D@E@F@G@H@I@J@K@L@M@N@O@P@Q@R@S@T@U@V@W@X@Y@Z@[@\@]@^@_@`@a@b@c@d@e@f@g@h@i@j@k@l@m@n@o@p@q@r@s@t@u@v@w@x@y@z@{@|@}@~@!A"A#A$A%A&A'A(A)A*A A,A-A.A/A0A1A2A3A4A5A6A7A8A9A:A;A<A=A>A?A@AAABACADAEAFAGAHAIAJAKALAMANAOAPAQARASATAUAVAWAXAYAZA[A\A]A^A_A`AaAbAcAdAeAfAgAhAiAjAkAlAmAnAoApAqArAsAtAuAvAwAxAyAzA{A|A}A~A!B"B#B$B%B&B'B(B)B*B B,B-B.B0B/B1B2B3B4B5B7B6B8B9B:B;B<B=B>B@BABBBDBEBGBHBIBJBLBCBFBKBMBNBOBPBQBRBSBTBUBVBWBXBYBZB[B\B]B^B_B`BaBbBcBdBeBfBgBhBiBjBkBlBmB?BnBoBpBqBrBsBtBuBvBwBxByBzB{B|B}B~B!C"C#C$C%C&C'C(C)C*C C,C-C.C/C0C1C2C3C4C5C6C7C9C:C;C<C=C>C?C@CACBCCCDCECFCGCHC8CJCKCLCMCOCNCPCQCRCSCTCUCVCWCXCYCZC[CIC\C]C^C_C`CaCbCcCdCeCfCgChCiCjCkClCmCnCoCpCqCrCsCtCuCvCwCxCyCzC{C|C}C~C!D"D#D$D%D&D'D(D)D*D D,D-D.D/D0D1D2D3D4D5D6D7D8D9D:D;D<D=D>D?D@DADBDCDDDEDFDGDHDIDJDKDLDMDNDODPDQDRDSDTDUDVDWDXDYDZD[D\D]D^D_D`DaDbDcDdDeDfDgDhDiDjDkDlDmDnDoDpDqDrDsDtDuDvDwDxDyDzD{D|D}D~D!E"E#E$E%E&E'E(E)E*E E,E-E.E/E0E1E2E3E4E5E6E7E8E9E:E;E<E=E>E?E@EAEBECEDEEEFEGEHEIEJEKEMELENEOEPEQERESETEUEVEWEXEYEZE[E\E]E^E_E`EaEbEcEdEeEfEgEhEiEjEkElEmEnEoEpEqErEsEtEuEvEwExEyEzE{E|E}E~E!F"F#F$F%F&F'F(F)F*F F,F-F.F/F0F1F2F3F4F5F6F7F8F9F:F;F<F=F>F?F@FAFBFCFDFEFFFGFHFIFJFKFLFMFNFOFPFQFRFSFTFUFVFWFXFYFZF[F\F]F^F_F`F6GaFbFcFdFeFfFgFhFiFjFkFlFmFnFoFpFqFrFsFtFuFvFwFxFyFzF{F|F}F~F!G"G#G$G%G&G'G(G)G*G G,G-G.G/G0G1G2G3G4G5G7G8G9G:G;G<G=G>G?G@GAGBGCGDGEGFGGGHGIGJGKGLGMGNGOGPGQGRGSGTGUGVGWGXGYGZG[G\G]G^G_G`GaGbGcGdGeGfGgGhGiGjGkGlGmGnGoGpGqGrGsGtGuGvGwGxGyGzG{G|G}G~G!H"H#H$H%H&H'H(H)H*H H,H-H.H/H0H1H2H3H4H5H6H7H8H9H:H;H<H=H>H?H@HAHBHCHDHEHFHGHHHIHJHKHLHSHMHNHOHPHQHRHTHUHVHWHXHYHZH[H\H]H^H_H`HaHbHcHdHeHfHgHhHiHjHkHlHmHnHoHpHqHrHsHtHuHvHwHxHyHzH{H|H}H~H!I"I#I$I%I&I'I(I)I*I I,I-I.I/I0I1I2I3I4I5I6I7I8I9I:I;I<IAI=I>I?I@IBICIDIEIFIGIHIIIJIKILIMINIOIPIQIRISITIUIVIWIXIYIZI[I\I]I^I_I`IaIbIcIdIeIfIgIhIiIjIkIlImInIoIpIqIrIsItIuIvIwIxIyIzI{I|I}I~I!J"J#J$J%J&J'J(J)J*J J,J-J.J/J0J1J2J3J4J5J6J7J8J9J:J;J<J=J>J?J@JAJBJCJDJEJFJGJHJIJJJKJLJMJNJOJPJQJRJSJTJUJVJWJXJYJZJ[J\J]J^J_J`JaJbJcJdJeJfJgJhJiJjJkJlJmJnJoJpJqJrJsJtJuJvJwJxJyJzJ{J|J}J~J!K"K#K$K%K&K'K(K)K*K K,K-K.K/K0K1K2K3K4K5K6K7K8K9K:K;K<K=K>K?K@KAKBKCKDKEKFKGKHKIKJKKKLKMKNKOKPKQKRKSKTKUKVKWKXKYKZK[K\K]K^K_K`KaKbKcKdKeKfKgKhKiKjKkKlKmKnKoKpKqKrKsKtKuKvKwKxKyKzK{K|K}K~K!L"L#L$L%L&L'L(L)L*L L,L-L.L/L0L1L2L3L4L5L6L7L8L9L:L;L<L=L>L?L@LALBLCLDLELFLGLHLILJLKLLLMLNLOLPLQLRLSLTLULVLWLXLYLZL[L\L]L^L_L`LaLbLcLdLeLfLgLhLiLjLkLlLmLnLoLpLqLrLsLtLuLvLwLxLyLzL{L|L}L~L!M"M#M$M%M&M'M(M)M*M M,M-M.M/M0M1M2M3M4M5M6M7M8M9M:M;M<M=M>M?M@MAMBMCMDMEMFMGMHMIMJMKMLMMMNMOMPMQMRMSMTMUMVMWMXMYMZM[M\M]M^M_M`MaMbMcMdMeMfMgMhMiMjMkMlMmMnMoMpMqMrMsMtMuMvMwMxMyMzM{M|M}M~M!N"N$N%N&N'N(N)N#N*N N,N-N.N/N0N1N2N3N4N5N6N7N8N9N:N;N<N=N>N?N@NANBNCNDNENFNGNHNINJNKNLNMNNNONPNQNRNSNTNUNVNWNXNYNZN[N\N]N^N_N`NaNbNcNdNeNfNgNhNiNjNkNlNmNnNoNpNqNrNsNtNuNvNwNxNyNzN{N|N}N~N!O"O#O$O%O&O'O(O)O*O O,O-O.O/O0O1O2O3O4O5O6O7O8O9O:O;O<O=O>O?O@OAOBOCODOEOFOGOHOIOJOKOLOMONOOOPOQOROSOTOUOVOWOXOYOZO[O\O]O^O_O`OaObOcOdOeOfOgOhOiOjOkOlOmOnOoOpOqOrOtOuOvOsOwOxOyOzO{O|O}O~O!P"P#P$P%P&P'P(P)P*P P,P.P/P0P1P-P2P3P4P5P7P8P9P:P;P6P<P=P>P?P@PAPBPCPDPEPFPGPHPIPJPKPLPMPNPOPPPQPRPSPTPUPVPWPXPYPZP[P\P]P^P_P`PaPbPcPdPePfPgPhPiPjPkPlPmPnPoPpPqPrPsPtPuPvPwPxPyPzP{P|P}P~P!Q"Q#Q$Q%Q&Q'Q(Q)Q*Q Q,Q-Q.Q/Q0Q1Q2Q3Q4Q5Q6Q7Q8Q9Q:Q;Q<Q=Q>Q?Q@QAQBQCQDQEQFQGQHQIQJQKQLQMQNQOQPQQQRQSQTQUQVQWQXQYQZQ[Q\Q]Q^Q_Q`QaQbQcQdQeQfQgQhQiQjQkQlQmQnQoQpQqQrQsQtQuQvQwQxQyQzQ{Q|Q}Q~Q!R"R#R$R%R&R'R(R)R*R R,R-R.R/R0R1R2R3R4R5R6R7R8R9R:R;R<R=R>R?R@RARBRCRDRERFRGRHRIRJRKRLRMRNRORPRQRRRSRTRURVRWRXRYRZR[R\R]R^R_R`RaRbRcRdReRfRgRhRiRjRkRlRmRnRoRpRqRrRsRtRvRwRxRuRyRzR{R|R}R~R!S"S#S$S%S&S'S(S)S*S S,S-S.S/S0S1S2S3S4S5S6S7S8S9S:S;S<S=S>S?S@SASBSCSDSESFSGSHSISJSKSLSMSNSOSPSQSRSSSTSUSVSWSXSYSZS[S\S]S^S_S`SaSbScSdSeSfSgShSiSjSkSlSmSnSoSpSqSrSsStSuSvSwSxSySzS{S|S}S~S!T"T#T$T%T&T'T(T)T*T T,T-T.T/T0T1T2T4T5T6T7T8T9T:T;T<T=T>T3T?T@TATBTCTDTETFTGTHTITJTKTLTMTNTOTPTQTRTSTTTUTVTWTXTYTZT[T\T]T^T_T`TaTbTcTdTeTfTgThTiTjTlTkTmTnToTpTqTrTsTtTuTvTwTxTyTzT{T|T}T~T!U"U#U$U%U&U'U(U)U*U U,U-U.U/U0U1U2U3U4U5U6U7U8U9U:U;U<U=U>U?U@UAUBUCUDUEUFUGUHUIUJUKULUMUNUOUPUQURUSUTUUUVUWUXUYUZU[U\U]U^U_U`UaUbUcUdUeUfUgUhUiUjUkUlUmUnUoUpUqUrUsUtUuUvUwUxUyUzU{U|U}U~U!V"V#V$V%V&V'V(V)V*V V,V-V.V/V0V1V2V3V4V5V6V7V8V9V:V;V<V=V>V?V@VAVBVCVDVEVGVHVIVJVKVFVLVMVNVOVPVQVRVSVTVVVWVXVUVYVZV[V\V]V^V_V`VaVbVcVdVeVfVgVhViVjVkVlVmVnVoVpVqVrVsVtVuVvVwVxVyVzV{V|V}V~V!W"W#W$W%W&W'W(W)W*W W,W-W.W/W0W1W2W3W4W5W6W7W8W9W:W;W<W=W>W?W@WAWBWCWDWEWFWGWHWIWJWKWLWMWNWOWPWQWRWSWTWUWVWWWXWYWZW[W\W]W^W_W`WaWbWdWeWfWgWhWiWjWkWlWmWnWoWpWqWrWsWtWuWvWwWxWyW>XcWzW{W|W}W~W!X"X#X$X%X&X'X(X)X*X X,X-X.X/X0X1X2X3XLX4X5X6X7X8X9X:X;X<X=X?X@XAXBXCXDXEXFXGXHXIXJXKXMXNXOXPXQXRXSXTXUXVXWXXXYXZX[X\X]X^X_X`XaXbXcXdXeXfXgXhXiXjXkXlXmXnXoXpXqXrXsXtXuXvXwXxXyXzX{X|X}X~X!Y"Y#Y$Y%Y&Y'Y(Y*Y Y,Y-Y.Y/Y0Y1Y2Y3Y4Y5Y6Y7Y8Y9Y:Y;Y<Y)Y=Y>Y?Y@YAYBYCYDYEYFYGYHYIYJYKYLYMYNYOYPYQYRYSYTYUYVYWYXYYYZY[Y\Y]Y^Y_Y`YaYbYcYdYeYfYtYgYhYiYjYkYlYmYnYoYpYqYrYsYuYvYwYxYyYzY{Y|Y}Y~Y!Z"Z#Z$Z%Z&Z'Z(Z)Z*Z Z,Z-Z.Z/Z0Z1Z2Z3Z4Z5Z6Zf87Z8Z9Z:Z;Z<Z=Z>Z?Z@ZAZBZCZDZEZFZGZHZIZJZKZmZLZMZNZOZPZQZRZSZTZUZVZWZXZYZZZ[Z\Z]Z^Z_Z`ZaZbZcZdZeZfZgZhZiZjZkZlZnZoZpZqZrZsZtZuZvZwZxZyZzZ{Z|Z}Z~Z!["[#[$[%[&['[([)[*[ [,[-[.[/[0[1[2[3[4[5[6[7[8[9[:[;[<[=[>[?[@[A[B[C[D[E[F[G[H[I[J[K[L[M[N[O[P[Q[R[S[T[U[V[W[X[Y[Z[[[\[][^[_[`[a[b[c[d[e[f[g[h[i[j[k[l[m[n[p[q[r[s[o[t[u[v[w[x[y[z[{[|[}[~[!\"\#\$\%\&\'\(\)\*\ \,\-\.\/\0\1\2\3\4\5\6\7\8\9\:\;\<\=\>\?\@\A\B\C\D\E\F\G\H\I\J\K\L\M\N\O\P\Q\R\S\T\U\V\W\X\Y\Z\[\\\]\^\_\`\a\b\c\d\e\f\g\h\i\j\k\l\m\n\o\p\q\r\s\t\u\v\w\x\y\z\{\|\}\~\!]"]#]$]%]&]'](])]*] ],]-].]/]0]1]2]3]4]5]6]7]8]9]:];]<]=]>]?]@]A]B]C]D]E]F]G]H]I]J]K]L]M]N]O]P]Q]R]S]T]U]V]W]X]Y]Z][]\]]]^]_]`]a]b]c]d]e]f]g]h]i]j]k]l]m]n]o]p]q]r]s]t]u]v]w]x]y]z]{]|]}]~]!^"^#^$^%^&^'^(^)^*^ ^,^-^.^/^0^1^2^3^4^5^6^7^8^9^?^:^;^<^=^>^@^A^B^C^D^E^F^G^H^I^N^J^K^L^M^O^P^Q^R^S^T^U^V^W^X^Y^Z^[^\^]^^^_^`^a^b^c^d^e^f^g^h^i^j^k^l^m^n^o^r^p^q^s^t^u^v^w^x^y^z^{^|^}^~^!_"_#_$_%_&_'_(_)_*_ _,_-_._/_0_2_1_3_4_5_6_7_8_9_:_;_<_=_>_?_@_A_B_C_D_E_F_G_H_I_J_K_L_M_N_O_P_Q_R_S_T_U_V_W_X_Y_Z_[_\_]_o_^___`_a_b_c_d_e_f_g_h_i_j_k_l_m_n_p_q_r_s_t_u_v_w_x_y_z_{_|_}_~_!`"`#`$`%`&`'`(`)`*` `,`-`.`/`0`1`2`3`4`5`6`7`8`9`:`;`<`=`>`?`@`A`B`C`D`E`F`G`H`I`J`K`L`M`N`O`P`Q`R`S`T`U`V`W`X`Y`Z`[`\`]`d`^`_```a`b`c`e`f`g`h`i`j`k`l`m`n`o`p`q`r`s`t`u`v`w`x`y`z`{`|`}`~`!a"a#a$a%a&a'a(a)a*a a,a-a.a/a0a1a2a3a4a5a6a7a8a9a:a;a<a=a>a?a@aAaBaCaDaEaFaGaHaIaJaKaLaMaNaOaPaQaRaTaUaVaSaWaXaYaZa[a\a]a^a_a`aaabacadaeafagahaiajakalamanaoapaqarasatauavawaxayaza{a}a~a!b"b#b$b|a-b%b&b'b(b)b*b b,b/b0b1b2b.b3b4b5b6b7b8b9b:b;b<b=b>b?b@bAbBbCbEbFbDbGbHbIbJbKbLbMbNbObPbQbRbSbTbUbVbWbXbYbZb[b\b]b^b_b`babbbcbdbebfbgbhbibjbkblbmbnbobpbqbrbsbtbubvbwbxbybzb{b|b}b~b!c"c#c$c%c&c'c(c)c*c c,c-c.c/c0c1c2c3c4c5c6c7c8c9c:c;c<c=c>c?c@cAcBcCcDcEcFcGcHcIcJcKcLcMcNcOcPcQcRcScTcUcVcWcXcYcZc[c\c]c^c_c`cacbcccdcecfcgchcicjckclcmcncocpcqcrcsctcucvcwcxcyczc{c|c}c~c!d"d#d$d%d&d'd(d)d*d d,d-d.d/d0d1d2d3d4d5d6d7d8d9d:d;d<d=d>d?d@dAdBdCdDdEdFdGdHdIdJdKdLdMdNdOdPdQdRdSdTdUdVdWdXdYdZd[d\d]d^d_d`dadbdcdddedfdgdhdidjdkdldmdndodpdqdrdsdtdudvdwdxdydzd{d|d}d~d!e"e#e$e%e&e'e(e)e*e e,e-e.e/e0e1e2e3e4e5e;e6e7e8e9e:e<e=e>e?e@eAeBeCeDeEeFeGeHeIeJeKeLeMeOePeNeQeReSeTeUeVeWeXeYeZe[e\e]e^e_e`eaebecedeeefehegeiejekelemeneoepeqereseteuevewexeyeze|e{e}e~e!f"f#f$f%f&f'f(f)f*f f,f-f.f/f0f1f2f3f4f5f6f7f8f9f:f;f<f=f>f?f@fAfBfCfDfEfFfGfHfIfJfKfLfMfNfOfPfQfRfSfTfUfVfWfXfYfZf[f\f]f^f_f`fafbfcfdfefffgfhfifjfkflfmfnfofpfqfrfsfufvfwfxfyfzf{f|f}f~f!g"g#g$g%g&g'g(g)g*g g,g-g.g/g0g1g2g3g4g5g6g7g8g9g:g;g<g=g>g?g@gAgBgCgDgEgFgGgHgIgJgKgLgMgNgOgPgQgRgSgTgUgVgWgXgYgZg[g\g]g^g_g`gagbgcgdgegfgjggghgigkglgmgngogpgqgrgsgtgvgwgxgygugzg{g|g}g(h~g!h"h#h$h%h&h'h)h*h h,h-h.h/h0h1h2h3h4h5h6h7h8h9h:h;h<h=h>h?h@hAhBhChDhEhFhGhHhIhJhKhLhMhNhOhPhQhRhShThUhVhWhXhYhZh[h\h]h^h_h`hahbhchdhehfhghhhihjhkhlhmhnhohphqhrhshthuhvhwhxhyhzh{h|h}h~h!i"i#i$i%i&i'i(i)i*i i,i-i.i/i0i1i2i3i4i5i6i7i8i9i:i;i<i=i>i?i@iAiBiCiDiEiFiGiHiIiJiLiMiKiNiOiPiQiRiSiTiUiViWiXiYiZi[i\i]i^i_i`iaibicidieifigihiiijikiliminioipiqirisitiuiviwixiyizi{i|i}i~i!j"j#j$j%j&j'j(j)j*j j,j-j.j/j0j1j2j3j4j5j6j7j8j9j:j;j<j=j>j?j@jAjBjCjDjEjFjGjHjIjJjKjLjMjNjOjPjQjRjSjTjUjVjWjXjYjZj[j\j]j^j_j`jajbjcjdjejfjgjhjijjjkjljmjnjojpjqjrjsjtjujvjwjxjyjzj{j|j}j~j!k"k#k$k%k&k'k(k)k*k k,k-k.k/k0k1k2k3k4k5k6k7k8k9k:k;k<k=k>k?k@kAkBkCkDkEkFkGkHkIkPkJkKkLkMkRkNkOkQkSkTkUkVkWkXkYkZk[k\k^k]k_k`kakbkckdkekfkgkhkikjkkkmknkoklkpkqkrksktkvkukwkxkykzk{k|k}k~k!l"l#l$l%l&l'l(l)l*l l,l-l.l/l0l1l2l3l4l5l6l7l8l9l:l;l<l=l>l?l@lAlBlClDlElFlGlHlIlJlKlLlNlOlMlPlQlRlSlTlUlVlWlXlYlZl[l\l]l^l_l`lalblcldlelflglhliljlklllmlnlolplqlrlsltlulvlwlxlylzl{l|l}l~l!m"m#m$m%m&m'm(m)m*m m,m-m.m/m0m1m2m3m4m5m6m7m8m9m:m;m<m=m>m?m@mAmBmCmDmEmFmGmHmImJmKmLmMmNmOmPmQmRmSmTmUmVmWmXmYmZm[m\m]m^m_m`mambmcm7"

2!2"2#2$2%2&2'2(2)2

1 1!1"1#1$1%1&1'1(1)1

% %!%"%#%$%%%&%'%(%)%*% %,%-%.%/%0%1%2%3%4%5%6%7%8%9%:%;%<$=%>%?%@%A%B%C%D%E%F%G%H%I%J%K%

W%f?i

e.lFO

urlsS

u%urrGS

]']&].]$]

s"s9s%s,s8s1sPsMsWs`slsos~s

x<x%x,x#x)xNxmxVxWx&xPxGxLxjx

{.{1{ {%{${3{>{

h!l!'!c!@!A!$("(((&(:(,(*(0(.(B!4(2(9(!(%('()(-(1(#( (/(3(5(6(7(8(&!%!!&"&#&$&%&&&'&(&)&*& &,&-&.&/&0&1&2&3&4&5&6&7&8&A&B&C&D&E&F&G&H&I&J&K&L&M&N&O&P&Q&R&S&T&U&V&W&X&''!'"'#'$'%'&'(')'*' ','-'.'/'0'1'2'3'4'5'6'7'8'9':';'<'='>'?'@'A'Q'R'S'T'U'V'X'Y'Z'['\']'^'_'`'a'b'c'd'e'f'g'h'i'j'k'l'm'n'o'p'q'W'*!,!.!/!0!1!-!k!d!e!y!f!m!q"r"s"t"u"v"w"x"y"z"{"|"{!|!z!}!J!G!F!L!X!^!O!N!D!E!I!H!R!S!`!_!C!K!W!V!U!Y!T!\!]!Z![!Q!M!P!Y"Z"["\"]"^"_"`"a"b"E"F"G"H"I"J"K"L"M"N"O"P"Q"R"S"T"U"V"W"X"1"2"3"4"5"6"7"8"9":";"<"=">"?"@"A"B"C"D"$)%)&)')()))*) ),)-).)/)0)1)2)3)4)5)6)7)8)9):);)<)=)>)?)@)A)B)C)D)E)F)G)H)I)J)K)L)M)N)O)P)Q)R)S)T)U)V)W)X)Y)Z)[)\)])^)_)`)a)b)c)d)e)f)g)h)i)j)k)l)m)n)o)v!u!x!w!t!s!p!r!q!o!n!b!a!!!"!#!(!)!4!5!6!7!8!9!:!;!>!?!~!2!3!<!=!!$"$#$$$%$&$'$($)$*$ $,$-$.$/$0$1$2$3$4$5$6$7$8$9$:$;$<$=$>$?$@$A$B$C$D$E$F$G$H$I$J$K$L$M$N$O$P$Q$R$S$T$U$V$W$X$Y$Z$[$\$]$^$_$`$a$b$c$d$e$f$g$h$i$j$k$l$m$n$o$p$q$r$s$!%"%#%$%%%&%'%(%)%*% %,%-%.%/%0%1%2%3%4%5%6%7%8%9%:%;%<$=%>%?%@%A%B%C%D%E%F%G%H%I%J%K%L%M%N%O%P%Q%R%S%T%U%V%W%X%Y%Z%[%\%]%^%_%`%a%b%c%d%e%f%g%h%i%j%k%l%m%n%o%p%q%r%s%t%u%v%$!E(F(G(H(I(J(K(L(M(N(O(P(Q(R(S(T(U(V(W(X(Y(Z([(\(](^(_(`(a(b(c(d(e(f(g(h(i(e"f"g"h"i"j"k"l"m"n";R!6_FrMIU}HOIBO"X;2kS$Xs3(WRG'X@JpG{15RT4 6?K)X*6=AOQ%I-Xv8>Q\cPVa7.4YA<XhM$5*NwVv@Y>/XKDC>1X4CeR.VZN'Uu:&7V@9FREGGT9K3RR?XE>rF2R0OgOiJ@XrBRBiH,GKAhSyUBJ~6!XZSw?FT%;AXeN.>(XGQ)P=XoYvM:?;=%:`Rz2`:6DmO)>$MAAWGqYtYKHiXZR2JJHlXjXFXv=MFp3kXq=i=THS4XBV2PWKJ{KLU68IOZYpX*GnXz4nATRmXGRoXGCvQYVrXuX~<[<NH]7B7sFxXARiN?<|7%7]PZVESo;a;qX!I0N 4sXKIvXWBwX1NyX.2@9#Yi0fAlIEKFK$Yh5 5;NM5!WtWSSeLN:"Y\Y`S}Xp7wW~XzX!YcD6StX]Y{XeEP@pQ[0Q<&Y%Y,Y.Y Y9J)Y6V^3(Y}@LJ*Y'Y0Y16)9@R@OBBD=lU`2HGk?-Y/YjNn:VGc1Y4m64Y!?^YNG~@8YWK}75Y7Y#1aS9YEP6Y1Y2Y)A3Ys<^P)8c>=Y:Y30BYDY61?Y95s>HLr:PRCYh= 3EYk>FY;Y_D>[email protected]<JY<YKY FIYvW#M!=LY<E5MMYGY%3~?58|@x0v4NYOY"4PY_4A0QY5IqORYEAVY.IUYTYWY[K)='FSYXYYYeH\@y6#XJT*TVPd3WUHOb9K?bCR6CMnYpY3556$>kH HK0 9yAbY<@29X9KPx1dF_>d5HWxQf<^J=<fYgXZDT8=Ha2YT0CaC"Z_H4P|>)EZ9#Z)T$Z{Y,6k7y1|Ye3v>v?1Rd@36~Y}Y;>`F<W!Z9Ar5hAu<U4]A}D8<27o7lY>F-?K;J5I[WP9M<0v3w;J[/:dT65s5VXPHV7PGWX/?;[XXLP.;>kPAuArTU844u3>IPEYE{@p1YXN9=5ZXFV"K/H2IL4L?t9[X\Xg6A<jLwO]X0GP9#=^LJF`X^X_X~0g>#Jt<18n8bXK=dXcX|EeXfX&A0Hl0&9S<qN=[SA/6zV,EY=>[?[x@">M@@[FJ*2BScC QB[U@C[1?<DZGD[hYWI49pNHT|0R4YPiYK^kY0X/;11W3NXQT3=o?;OPXK7QX%FxG=RRXdD.J'G&X}IgN\;k0*;-P01dW?W%5tBOD)272e12_<U(?,BUX1BTXTN`[email protected]!S#N4<4HQBm>6PaZdG'3r6|Lz@w@9QaQGX^2e@q:HX-TaOIXJXCOx3G>KXL[%HXO~HN2VSf20<QS K47"7eJ!H\Jd1pPQEE[~5Z?E9d>mA6_5_;VP=YUH0#6I?(L3_7JRSOX6RE:>K>L7_p54_uST3w8:_O:*<u5,M{Cs:t@BMrO8_EO@B9_pB}>_ALMwRM7A_D_q7I0V6T7,:}LT?1KtF(VE_bN33|N54GNp:aN=Q@_t4J3f8;_ED<_=_>_;E?_B_1TC_:GXNXDJ_O_\VI_Z_6NG:N_H_^EkIt:|CW>F_M_XE&UM:L>=S@8dVG_>9'?|AK_L_P_[_e_W_V_IWc_d_ke'RR_)?[TH?T_LO]_JQ^_'07FS_e:_6[M~9UT__lO%0g_Q_FQU_X_Y_\_);`_a_b_f_h_4Sg86Ej_ZI(ADD^?xO\Un_82_:l_A[dQtK=4&0q_FLr_m_i_k_o_p_=;s_t_#;[J(N'`*3&`!`~_YM|_z_P?DWLIx_!0}_{_"`(`H7!F6I2@u_>EDXy_vD#`$`%`%P4`dL1`&?/`9N `FI.@.`m:0:)`v_3`8`-49`2OH:0`zP,`{Tw_gE-`wS6`7`D`aP<`I`J`>`*`$IA`2`HJC`5`KNCKM`F`B`K`:`?`@`E`G`H`L`;`TKU`V`R`P`N<Q`B8EXjPoBO`=`T`S`W`\`X`vV03lW;KZ`{NY:a`]`-Rb`[`Y`_```^`d`wF,XkTf`IJe`A8g`h`i`c`?:gLj`yOk`BH@=RDl`m`tGDKn`X;6XrRo`EMZ6q`0T'@Q4'Np`r`L9z9<Ms`TFt`2T&Hv`u`w`AM%JZTW[Y[X[g9\[][X5Z[[[!3_[x;7V`[y>;7P[.L2?5;xWS?i?a<3L^[S0kNX79WBF$@9Lg[a[:Fc[h[wEj[i[@?f[e[94,@"Bb[d[MPm[]@r[b6s[R[89 Tl[Q?p[Q[f5k[e?n[q[y[!9#0qBG3o[x[RFt[u[w[v[~[rS:2}[$\{[z[|[`Ey;#\%\CLQ6@]!\"\5Gi6'\&\)\$1L50?_QB6(\zKsk\K~KAL{H*\nL \S[/\,\3>{J-\JI9D=G.\vTfP DU6T[Z1U[V[>:@H?JIH3WyIG?x:<R:b&48148DOgY&ObMmY`69R;99b7bs4lL Lr72XkQ;:'J7MDRd?P<a6E^F^<[YQfFNDn7\7|?`WuF<1H^1=WLJ^I^l5]IB0.E ELDi<}KC:yegHze}M1W>8hBQH{eJ6K<}Q!fnC$f~e%fWMA7|e}e#f]D(f'fCC^F*f7D"f<Jc=C9&fUP/N)f0f&R*=-f/fQ@LR'<1fvRKW~M^M&B f,f?=.f3f2f6f8foDHDj>oI7fp6dCiS4f5f"H=f9fEFqM;f<fi;>f:f7@$S?ftICfDfvP=CDCBfAfGf1OtkJfEf^<)I5<SOHfIfNfPfQfKfU5LfOf[DFfMfRfTfSfUfxYVfWfSW]f^fW?PTVWf4oKZfCXNW"POC_f><B9[f'Q":OB XkJne\fu7fHuD2e~D|K3e,UnSXJ20NKjMj:5e4eZWY9fV(6pMKR&15Jh3sIM?{PRJ6eB;\O,9WT&:gQ|OR<7e]Hm?v1^KE<D<zR\C\?;8BC.:"T^G/Dl2Q9;eHA/U<e>eg4T6BK0Q<5YJb7dI =>NpW!PYI{6Xfb<>3PIYf"3L^HSM^"RN^M>O^,J|R_3jeaD!>2NrDV>(Fc2S>|GkLl=]N:JAFle<P9UmetJ@MEBoeDBpexeMM=IYR(alSjKqF,a'a)a*a/am2 aZ8-a.a0a:51a3a8aRQ6a5akA7a@T2a:a604ay?9a;a>a<aEV?O=a?aMBk6xSMGe7~>@aAaGag3iF^4BQHaFaEaCaBa@18UDaKaLaJazoSaRa6GIaNaPaTaQaMaOaUaVaWaXaZa[a!N]g(4]V2Q23$9sWIG^>.9WNn2O[:<QRHKM0oOcYm=R1PJ<2'K 7&J#Ox`JU{`z`AE{L1Ay`cV/2DV[5x4!V/Oo0|`!a#3}`~`1C]C"ay7O;#a;D$a%a&a14I8=FjD"2RP[gC;WSDSc9Ob/WlGS124QbrP.BPbb?&SW5Rbj5mC}8.8SEO7TbSbH6yW%MXbVb|J5?9SUbWb.AH@[bZb*@NA\b]b^bH[SQ"M(=C^%X*?M[lRzF*ED^W1._=J1_-9}R%8k:Z3\5EUVCRO!;seretedMuH/5?Gve0lfei915<BhegeieMRjaNP.MeQJ2k1r1mECU0S\a]a[R93K1yMwU^a6>}4_a\:`a2;IBaalP=MbaC5GEcadaySea-Qfa"NgaB5haU;DP`bX1dRabI<LHcb~l}l/_bb>V|M&CCcRVgbhbGSlbl?mbeb@3nDnbCPv:ib^73;,LKKdbfbjbkbwbtbuTsb-EzUBE@2obrb/A<K!5yb1<qbTP9TubV9vbSGpb\W!mxb%m~bQJ5AP;V?c:!K&m#m"mV;'mtP$m^:w6!c26qL'9"O!GR?q6zb{b}b|bUD"cAS'cDG$O)c7:(cZ;#c$c*c&crNFS<;CTzD(m|P%cuC-c/12cB<,c?5iG0c*>oMs;hL/c1c'O.c)N];k5e>R2M391 cQ2,5_9h6kO7cL;GHJP8cn3)mzSdS*m9cbR5c^SP83c6c_74c"@:c8TH4;cE;wIeI=D m}B[;.??N<c6?o1wT>c-m?c):,m=c@c6:.68PC0.m/mA@Ac3EBc2\0mj8lN'jgPyJVH7OI3RNd=^cr;(j=U]F)j*j,j j.j-jX=/j>BA4w4';flel?7yKb1glHIhlilVJP^E2zTKFG0r4SHPM8?[?$G4V)@Q^(IoQ$Eg063EHb0v7zEs6RUP3<<-3q>Q0VRcJ%W6M669?[U'8WER^Y?UB@G$;(1jE{E'L'1V5(DS^:Qi3rCw7tV#5p24DiD-@T^h0DE`AU9\>XMN0OMV^P>>WU^PU]0bD#Bp<5S9@!E&2qT(@CJW^|U09-H)KY^=?4F'W0JCDV3R98V|j40f?tLZM?VNBNN"L.PSD25X^uU7<S;$02El4qU}jZ^&MlMfN\^1M&@=W[^F04:SIsDh>62L@pKq<;;75uEf^c^]>_^74]=`^mDFO`5^6ZJt5e^FUa^ML~FEE4Rr>SB=L83S=X?FMZQk4d^]^g^~j0Bb^@V'5t2h^r^m^q^`HaWo^hCaLe2>Rn^k^UN'4 ?>>R=i^.T^^j^?@l^s2i8'BA=u^x^ 2$4j4&Iv^QKc8w^z^y^BLa0n4:e/Pk2!kt^cIs^Z0!Rw1/Lp^$K*U{^]4&D}^~C!D!_LA|^o>2FE3vH:K~^$_2W73CAKG%2i4 WlD"_#_%_3:&_^@CIY2fG'_\G(_"kSK*_)_A2JE _\TAH,_p>-_'V7j6kUJ|XD8ž7~UJ9'PMtP5tCH>7k=0L=2AV1(3R8"IX68k4>}JCG{Us7DN Us13l_05l76OAzu1PeUSNo=b3 86U=mO69KBP=76l)JTE9l8lCB7l}P:l;leW<l=llF^NH<UH)5I><VgT.QqP8j9j:j5:1Ju?zM@j:0>j%@;j}2wCh;WRtN?j<jCjGP3S:4ACrWQUGJEjDjGjFjgVTOKjN;z=NILj9I~OJjNTMjOjmMIjNjnN^;?3UF0>zNgG'>PjGV@A]TQj>ORjnJ/E50TjSj_t:D)1_eUjoJVjWjXFXjYj;TzG7R|8Bj\2|BxTfLnWBTPSCksE~7Tk7K^kJ@{M/3ZF|k>D4N)D>1}TuJlVSFd6z;`P1IST(HK8>h<I;hn@SPD2e4<hHUE6=hxJ\8uL4@nQ?hBh<:-1\==jChFhKhLhIKe0 <99AhwMJhvNmUVADh6C{9&VHh`JfT@hEhGh9Gc7Ih]?RhWhUh\<O<[h^hZhz1X03DL8bF>HaHOhThVhq9XhuW{D\hi2Qhm<B?MhyVxAq2_hAJYh$Uj1;UNhPh06Sh]h8@wJ(K\Fu@ih#PrhjV`hahyQK:y8q8TTohnhlhp9RLfh&Nr?80qhph@Wdh)M#I8;[=jhbhcheh55ghEGkhmh0=.Wxhuh0Mvh:Ahh7Cp0thwh#9RINC`Nf@sK]L5PaJshl<yh^CeFw9t0XW,<oEDL&i-I"ib@C?~hW9{h$iNR#i2V5W'i7=|h}h!iVM,R2i)i*4;4 i(P%i~3,ic@*i9i8i.izh(i,?1i:i%B/iE8-i\S4i5i7iGiF@Ei0i;iq0<i%U>i?iAiqA6H=iBiCi3i6i1;@iw<DiFiJiNi[2Hi.7KiLiAU#DXia:Ii#STiWiPiOiAGRiYiH3SipOMiw3ViZi4L-OUi\i[i^iQi]i_iJC7GN46;@P#l7E{S$l%l[Fn?&l'l*P8Gh8(l9V}UK4=2dNgFaMu4@K_<bicijQeiy4di3QbJP2hifigi3Viijikili/l9EN6sRn5Y;1lcRcN8D?C>69XH1O1Q1~EP1 C1U$kA::L%k'k(k&k)k k*k,kOJ5XqC%CxF-kJD.k/k0kU7z71kbG3k$:uQ102k4k*5HBhG5k.K_c@S[Y!M-VsG`Yc;::bc O`cGI9:4QacjH/9-=X3[N@LhcictM-L3<jckcZP{FZ7_GJRVNdclcrIA3gccFec3mfc3IfE59;Ccc=E$AYBW2mc&;-DpcZ>{cucS:P7MSNVSUA94UXQ9PvG*H42ZCnc|coc(7wctc:7"Evc]E(2|F`D"Wa@yczc}c)Lsc>SC14mqcrcxc:PCFsT~c`='d&dsQ#d)dwH4O(d.deB46r="di:*d,d}6^V2d-d!dn;]M"GIEwA$d3G,===%dGWb2 dC</dk;0d(E1dcU#?:d7d;d=dVFF:K@!84d!T#:~=<d?MyD{OfI?SQO3d8d9diLNLT@5d0A6dPNA;S5sH'=GU,I"8JdLdDQ:R-:T:Cdm5MW@d}O?d\AJLgJWDTLHdGdAdDd-5YSFdyRc44;nI>4l;MQmL5meG(TKdUWBd$=EdfSIdxI>deS~GI6|T32WdBNMd<N[8VdJ?NSlCHEXdDMOdTdUd~:fO?URdPdNdeM*J#@&=SdH8gd4T[doAidgR_d`d*O]KZdQded\HcdgDbdad|3hda5LWfd,;RWOLxkddv9MVYd\dzB^dKBD@PBu12LN5od/FaFud)Bl@]Qnd.Dmdvdtd~B]dpd~JDUqdzQkdldrd NKE1G:BjdJA6L13{dsdzd}d|dN3:3wdydxdlE=@hT"eD0$e#e$<%e!e~dt1(e)e&e'e*eYF e-e,e/e.e`90e1ep;alpCF5R;iAnTD>FWVTS2>lAj/B64WQ432H;?@lKV?lAlElf>?LZE<>Fl~1Dl(Uc5Bl6Ac3Cl8KC@~LRAHlf:S@rVLQ>?37UIGlb;LL}=HH)OiMkEi7IQ8:IlJl@;Klbl:1Y79=LlfQMl;HQlSlM;e<Ol7I:CclUUPlsVRlNlTlUl?I(O\P,Q[HVluNlJZlYl>0WlXldl<HGA\l`Q[loT]lF[^l,1_l`l&W@E<k.0t>88/RV0y53X,K]c,Ff0FE9k:k;k@Q#Erj2D5DN@sjADoNpjtj|I#GXL~Nujvj,Og@wj?6xjyjzj{jqj.Hka87lama4WnaoaLSqaq?paR571sara|:ta79Q>|D]:F=uawa@6AO(JvaxU|Sxa|ayazaj@~a!bG@{a}a%bTA#b(b~2"bMCB2'b&b$b)b bIPmV(C,bWO.bo:`i-b*b ;3T0b/bai1b2b3b!L4b5b~PJBqSuM`gagA>jBdgcgfM5Cbg7;VOaAighgtg#2jgfglgkg:IdUeg)7ggngsgiVmgrgqg`0ugrGE@m@pApgvgvK"h!hAWzgyg{gwg~g}g|gUAYG}ECEmG#h&h%h'hw:xg$hpH*I)he9~Q(h*h-h.h'A/h0h,h4h h1h5h2h3h7h6hO9,p-p0Fj0?H_MMN1j2j?FI43jgUy]4j5j6jJ80_uIpLzI{ICS&K&8.pB18eoLISW<jIg5PDi5.n-;^g/n)32n1ng=0n7NOEtAN[3nsPTBhF,74nk3{;5n\g6n.=bqhJIRZp[p\pFAm8N>^p1E]pqQ`pL0j=_R_p/4h7fpep#FapbpC4cpnU[LR>2<hpgpdp!2"V8S7>,HjpwQLV[:ip;64M&F!Akpnpmppplp>;op5LrpU3T1sptpvpa4qpwpzpxpup}pyp|p~p!qAN$q#qvA{p]Jq4q11L&q'q,qNU)q3H"q q(q%q*q)0-q/q1q0q.q"Q2q3qo9G5W0Y0mTD5T=J;'p^8(p(0)pnM*p p$FeVdqeqsC[SQVhE/SfRAn;05UNQ`<P:x?G8A5LE"JKCBn?D"6lm$C1V`OomNE\6!Jmmpmqm<C4?nmtmrmfU_Csmvm#U#QumPCwmt?l>xmwL[QEWvU|m{mymzm}m&>/K!n=6"n@D~m^=G2C6%n:X#n&niCr3'n$n9O(nwB)n*n ^3FFGuVI52K n M,n0U-nDvG[#4,Cfq8JSR*VroX>C=soL6 0/J6m7myN/7s?8mkB0I9mvF3?<mxEPQ)W:m;mbQ?m@mDmHmFmNmhUImGm>miEFFiIRTAmBmCmEmy@!4h9PmQmJmOmxN6KLmMmuORmrA2SKm7Ho<pEVmo55B-0iK.1TmkMb5UmSmWmz5XmYm\mL1vEn<Zm<Lj2[mkDE4u0_mZ@h4ME]mD?^m%D`mamcmWAG;8=bmdmfmemgm>Jjlq@gIklnFllmFmlplfWslqlnlol#WqInKtlrliOvl1F@<ul;5v;wlwY{=;Bxlyl#8zl{l|lmS.Xk@]GL:cP=K:MQ8|1oGVVF?kCuoXCbWwoS3XGmQHVxovo};F3U=FR`;!O|o{oyoL3TI0K~o^0IV}om3UvHN"p!p>5Z<|;e8BD#pkK&p(Q?>nG6q7qU?)48q;MTG-U9q:qOG$ROV;qQ=04=>\4QN_?=qz?<q?q>q@qAq~A"AzJ>U:>9>BU"?/M5q_=K6qVCsDsM8FsGsJ0EsIsqKKs&PJ1HsOsQ5WsRsTsSs{7?1NsJsZ5PsQsUsMsc<}AVsZsLsH5n=\s$7p?~V2Mp4_2XsYs8I]s^sas_scsbs[sj?o3`s)Gr<ks?9ds-2~;cKmsis\9nsesfsjsaBlsoshs}<dOpsgsrs-W*Fssqs(B]8usts[4vswsxs:@i@qE{szsX4~sys|s}s!t#tI;"t$t>2&t%t.<WCaY`@LtQW[7Nt#AIFV43UPtOtQtZKRtAT`V`78A;ASt,>b4TtUt >Vt[tWtZt}:XtYtb8GL\tZ2SCcT7?]t4Eit5OINXKwKt=OW[@uPjtktltcw17mtkWntyf@>zfl:{fKO|f<T6<}f~fM<RH3N!g?4"g4IY8ID]WZBW7=VFND7&E#g_O$g%g&g7AiWpI8O/VUV'gm0(g)g\IoR->*gs0^Ha= gFH,gf;x8$Q-ggBx>J=3M.g/gn>ePgKPLL<0g(<wP1gxP2g3gB44g5g~I,N`C7gA1q38g9g[W@U:gLB:W;g<g=gj<eCB@>g?g)<@gAg6gP6BgCgDg:;^5FB`1Eg5TFg?8HgGgl7Igx2JgKgLgMgNgOgPg'SuKQgRgSgTgIIUgVgWgXgYgI=Zg>sW81H?s@sAs^9xMhX1:^B7n#79n8nU0;nVUoWCV=npJ<n>n@n?nrQ<G@Ca8gAFt_PGt[O:HHtItJtKtzY~8qepS`tLNa34qnRathObtLGT5d4dtctetftgt2:?0ht-7mR RO@<?#k_UHjsqx6#KMDgqhq{8iqD:ETR0jqkqlqmqnqoqqqpqUErqz6tq.RG^JK\3"5"9tDuqvqDA{A0Vwqxq*A8F[>yqO4zq2m1m`K^RAKXUbH_@!<Ak$PbVG6X8@kN8?k&3I9 Vt7J7g<>7FkGk90O?Ek}SHkIkN7BkDkvIWVMU2POk8NPk(531Rk%LVESkQk_ENk$JUk{0z:7XcqJkKkLkMkVk@fYkh?HRWk\kl8Xk:=XP70]k\D,V`4vB9<Zk[k`TjFTD_k'EuY12dkE=bkck,8QMekak3A"FsLfk0@8Rgk/8-8hk;GsMjkkkmkHPrknkqkyH|Qlkik98YOeDokpkZLHMr0vkuk22`8wkl1EL$D%Oyk"lrEzkEI_b~kNM!l[17S\R}k{k<30jTW tt3AVBViUJ>'t(R(t)t*tK>_S`IaIBsfJrL6b4KhN[V-t.t/t2t=:3tc00t1t"=U26t7tf602OO4t,45t8t9t'M:t;t<tRK=t>t?t^t<Ah< I^Que3\UR4\,05\Z=9\BX7\sSVI:\6\;\"C<\E\=\_N%VO\M\R\f= B8\K\N\>\R7E0G\>PA\(;<7L\F\?\[G?Q@\J\P\-NB\C\H\I\T2Q\UK7T[\_\&Lf\gC\\A?Y\z069e\S\D\V\tH`?;I=1"SZ\U\;F^\BW/C67QG)Cb\X\k\T\]\%>W\`\c\d\x\a\"]g\k<D4#Cg2z\r\o\|\n\pRh2WHcH{\m\w\u\#>t\]2s\v<h\D;s@T<i\j\q\v\y\45YHg;~\}\ S!]#]%]qR$]&]'])RI:)]6]1]4]0]NFr@/Il\.]7]p\/]8],]9]3]-]*D(]3@ A*] ]2]q;5](S:];]'CR]<]Q]=9U>z>J:J]E]?]K2C]K]$2U]>]PFP]T]bAF7N]O]D]=]M]QLI]B]HC<F.NL]H]A]F]\B)S*SS]tOxHf]G]`]dBa]W]xVY]X]p8V]OF-6b]y:aTg]P4Z]{?c]_]]]Y5[]\]^]/=d]e]u]ICbKr]aXQFt]tUs]p]l]o]h]nPXHn]i]j]rKm]M16@;<q]w]v]k]nE{]$^#^x]oC{BaU5N}]L2hD_J>Gz]|]~]"^*0N1,^&^6=oH!^%^)^(^'^-^LT3^*^.^Y@!16^1^2^&Q5^/^0^=P4^mJ9^8^7^;^e=X2jC:^:E<^YL*7eT=^?^"DA^>^@^:UB^.r";2B0EGB/riP]S=kf30r1r-Jg:3r5r4rdK:O2r4JORlBCN8rv07r>rO2AQ:r<riT;r6r?r=r9rGrDrFrJrBr@rEr{VAryG_IHrF905CrIrPrVrW;Ur\MkVRrTrr8KrNryB]ULrMrOrSrYr<Sj6qJd7WrXrZr]r[r\rQQQrIMON)Vcr[C`r/@lr^rarhrbrgrfrir_rdrjr,Seru2rr PurH;yrprvrxrzrsrqr{:{5orwrmrnrkr&s#s"strZH{r%sxC}r's)s$s|r s*s]B.s0s!s1s,s/s~r-s2s4s(s3s5s7P8syY9s7sdH6s:s;s@4Cn<s=s*Q,tFPPP\QNOV=CQb:iaBRBq92m1Cq@ID3rY%KDqTVEq@tFq,TGq@0AtBt|4[E;LdP`MHqsY;1.O$8JqKqC2QA0WIqLqNqvYaR#TCt9HDtMqOqc?PqTqVqQqQIaEcB|9SqUqS9[qV:}0YqXqRqZqWqlHJM]q=e\q^q_qeOEts=`qaqwN*R{q28{<[9f9YCSJhj@@u>ijjjkjljmjnjojG={u}u~u|ub=!v%4"v#v2lTQjY$v:n2U~S\LDJ@e%v/>)F%ZF<)6<8OH%<&Z'ZVLCH(Z}F5QiR6QG<2=d;)Z*ZHQ ZmPo6[BOKm7hIC7w>$V,Z-Z@FgW6J)U_KoU.Z_VJ40Z/ZkR1Z2Z3ZTJ4Z J5Z6ZO3oV7Z0;.58Z9Zn9/QhR:ZC8jOo2;Z<Zk=\NoS=ZsN>ZUSe;?Z5KPK@ZkGnVAZ5EA6BZL7N?CZDZ-KEZw5FZBA;WGZ8LjR1DHZ}5Q;IZ3PJZKZ=NLZMZNZw2QZOZhQPZUCRZSZTZUZ;P%Ry0VZ GWZw=!CXZYZ}C7LZZ[Z>@WF\Z]Z4G^Z_ZH9m;96xtytcM9u`ksO?;@:%TYatu*1r2uuwuQ:vu2Cyuxu41jU:819F2pTMO\0KUu;JV770L6Fa1:9|Va9!7z<Zj[jyLs9\j{43CQ7X:]jtT^jV<_;_j^A8B_TJW`jajdjbjcj^I38D6ejjJMIM4YbbEfj5@8Wgj,W|HSXMX^TyTDI.SS8`3bIvtU:wt_Wqt08TUO8pFC3rt,3=TwGttstKL$HutcW?E@u;uCuBu:VAu>TDuLuO0x5IuJu\EEuFuGuKu`>Huz8PuSug?r9<uMu7BxLy<NuOuQue6RuUu=uTu;Sl3$LVuWua>Xu_L[uH2YWYuZu\ubu`u_u]uau^udueucL?e85cuhu#Lfugu>uD1?uE5d2luiuW6mujukuZ4jTnuy3ouqupurusumI*9{Gc6IL&j53~Tl9yPmi*WniVBmHd:oipiqiaVrisiuitiviwiaGxiXTyiN=zi{iO=|i(8>A}i21T;u9~i!j"j#jx7-<dJN`/T=O7U$j^U%jAP<9G4Y11@f1g1h1=3hHAe_1IAo4(GXSyF8Q}9uB-SKT|=Be57Ce9;bUx=6T%N,AY3vLFeDeHeJeGeO5HF|5EevJIeTCE1#<7WKMMKJJSLLeKefD!Q7QMePe8MpVOe]5>MQe:6(Md9EJQ3YKlTRej7NeUe~4VeSeTe]R_BF1bS]6lKWevSi1t6ZeXeYe@5ER\e^e]e2G#R[ebTZU`eqWae\1{QbedeceeeXRK5_guZxZvZwZzZOPGDn00PyZJS*:"[qG|Z{Z[I}Z![^W~ZZA%[tS'[$[([<=I@#[&[#V)[-[.[,[B:$? [*[GT?2/[y90[;3&5<61[u62[I14[3[5[7[6[8[9[:[OSztuGCWdE|t}t{tF>oPS7MT*L"u!u(:~tVK$uR@j3*M%u#u4=(u)uM=8Ca?aK*u&u'upD,u<4mWW4 u.u-u/uQPQC)H0u1u2u3u4u5u7u6u8uI2TSMJo@XV0R?Ap=*8x<FvGvHvIvJvLvKviwMvNvDnEnFnkU$6HnGnInJn%GKnLn07v5MnOnNnF8PnQnRn[6.3SVFD51V8SnTn?TUG{>YN39VnUnXnWn%EYnZn.G[n/G\n'2]n^n_n`nanjWbncnX<dnKSzL,2eAen&G-Cfngnhninjnknlnmnnnonpnqnrntnsnun-MABvnwnxn!Uyn3Ozn{n|n}n!o~n"ou8zC#o$oB=?Ry2%o&o'oxR(o}V)oLF*o o4A,ozOxK.o-oz3x9/o0obP1o2of7?P3o4o5oqH`L6o7o8o9o:o`U;om4*C<o=o>o?o}N@o`B846Wu=GOCoAoBoDo'6|<b>LCEoFoGoOoHoIoJoBGqoM6KoLoMoF6>CNoPoQoRorUSowDToxDUoVod8w0WoXoYoZo[o\o]o^o5>ao_o`obocoMAdoeofogohoiojokoloX@mo-AnooopobO$3ECEcAIFcU1JN34rHGcPOHcd<IcJcFC"UVDk9ENKcvCLc'7s8R:McNcDTOcPcKQQcRcScTcVQUc{2;@Vc @WcXcYcZc[c78bZS6dZcZfZnHeZ@7tQuRsUW=hWhZgZ"0SMiZ=8J<=B$BB3jZ*B0D5=^OkZBI]1lZ86:T}3mZITUOcEnZoZpZjAUL]OgS!BqZeKrZfK~Rt8sZ/06OOUmKtZDc%A?v@vAvQD8HcQ[PEQ/<M9toF4:SBv{3Cvq5EvjS'v)Q)v(vcAW@"1mNhP vvO*vpU,v9Ct;.v-v^DXA*K<O/v0v1v6BT0yE2v`G&v8>2>e5G7??RCfCLXo8y=%QP00w1w,P002w3w4wJGO>7w6w^15w8w9w$NMH :8h9h:hB>tROTXI3R%6jG|qnO3KkPoggMK9Y6}qd0LK~q$T-BlADF1>!rU<"r#r$rCR5FGM%r1SE?bL&r'rUQn6(r)r_5*r r|2,r-r'Hg7)l*l l,l.F-l.lI73J8bOwPwM2QwSwRw;b"<<b=b>b?b@bAb97{R$=NJ%1GKBb|6DHCbH=}1Dbv6EbYDFbZO]9Gb!@Hbv2IbsAJbKbxBLbMbNbWJ8XeYcO%p0\mB&TTM1Q[3}G52?B`f;JafbfT>cf$WUMef]<dfffgfnB>=hffB':ifjfR3iQ%?kfoFlfmfnf-Fof'Ipfqfrf9esftfbBufvfhVwfxfG9;w:w>w<w!:?w@wBwAwDwCwEwFwGwhK_8TwUwVwXwZwWw[wYwWW\w]w^w_w`wK[*Xwem9}?j;IwGFHwJwLwKwMw:NNw'DcSOv3BPvQvRvSvTvVv 1WvXvYvZv[v\v]v^vJO_v`vavbvcvdvp@evfvgvhvivjvkvlvmvnvovpvqvrvsvtv(>uvvvwvxvzHyvzv{v|v}v~v!w"w#w$w%w&w'w(wn1)w*w w,w-w[A.w/wqD/p&<0pyC8E;Q1p2p3p4p5p<QlQ7p6p'TRM8p:p9p;p<pk8=ph:>p?pi>@pl6ApBpCpDp5HEpFpGptEHpIpJp=wKpLpMpNpOpW:PpQpRpSpTpUpVpXp%SWpYp:u9Bdwewfwgwhw4BjwkwsBptotiBawbwF;dYrJh@$pZ:-G,Dlwmwnwpwowqwtwswrwuwvwimjmkm<v=v>v&6>XD9;X1\sJwwxwyw{wzwG1|w}w~wkF4l]33v4vdA5v6v7v8v9v:v#H;vzA(9hmj9_Y!#"###g!%#&#'#(#)#*# #,#-#.#/#0#1#2#3#4#5#6#7#8#9#:#;#<#=#>#?#@#A#B#C#D#E#F#G#H#I#J#K#L#M#N#O#P#Q#R#S#T#U#V#W#X#Y#Z#[#\#]#^#_#`#a#b#c#d#e#f#g#h#i#j#k#l#m#n#o#p#q#r#s#t#u#v#w#x#y#z#{#|#}# !i!j!~#$#

( & : , * 0 . 4 2 9 % ' ) = > - 1   / 3 5 6 7 8 ? " ; < $ # ! e/!/"/#/$/%/&/'/(/)/*/ /,/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/[/\/]/^/_/`/a/b/c/d/-/.///0/1/2/3/4/5/6/7/8/9/:/;/</=/>/?/@/A/B/C/D/E/F/G/H/I/J/K/!zv,#z|/8z",.z,z#.$.-z%.#,/z1z0z&.>z2z3z6z$,5z4z7zy,(.'.%,z, z)z*z .9z*.<z=z[~?z{,@zAzBzCzS-Dz).(z!.!,EzFz`zazbzdz},cz}/8,^-9,:,;,ezfz[zgzhzizHzGz]--./...KzJzIzLzMz0.Pzi/QzOzNzRzVzh/SzTzUz1,Wz2.1.3.YzXz4.Zz&{:z%z\z]z^zf-?,6{@,>.A,?.9{7{@.8{:{;{g-A.<{={>{Y~?{3{2{a-_z5.4{9.nzozqzpzrz:.sztzuz.|vzxzwzp/zzc-d-yz<,{z|z}z!{~z"{#{e-b-jzkzlzmz/,*{[- {4,6.7.8.5{=.2|<.;.%{e|Z-h|f|g|i|j|Z..,G,d|H,H|G|I|5,K|J|L|M|o/N|F|O|Q|P|Q.R.6,R|6|7|i-c|N-'{~-9|:|p-;|<|>|=|M.?|r-A|@|q-S|T|"zc{O,e{H.d{f{g{j{k{h{l{I.o{i{p{m{o-q{y~t{v{y{r{w{J.n{u{s{m-x{"||{#|~{!|{{}{R}Z|$|z{%|&|'|)|K.(|n-*| |,|P,Z,U.1|R,;zS.s-j/k|l|o|m|[.T-',n|p|r|),q|(,u|w|k/y|t|v|U-s|x|z|~|{|!}}|||\."}V-$}*,W-%}].'}(}#}&} ,^.*})},}l/-},,8| }.}0}/}X-_.`.-,1}2}Y-5}4}3}6}W.[|j-\|b|X.]|^|_|Y.t/Q,`|F,l-a|({){7,D|E|s/W,=,-|L.z~/|0|B.G{H{J,I{K{L{J{M{P{C.D.N{T{U{O{S{R{F.Q{K,W{V{E.Y{X{G.\{Z{[{]{L,`{^{_{M,a{N,4|5|W}u,$zk-P}w/Q}k}j.x/l}m}n}t-l.Z}[}T}U}v-V}J}_,K}L}M}u-N}O}u}@}?}c.B}A}C}d.D}E}e.F}f.G}g.H}a.7}8}9}b.:};}I,<}=}>}".X}h.Y}i.p}q}r}s}t}o}k.%~&~i,'~z-(~)~ ~n.-~*~,~.~o.{-p.{/r.3,l,T~U~B,V~W~C,r/D,X~q/w.$~S}6~v.j,S~k,v}#~3|x,T.Y,U|V|v/u//~s.7~9~8~;~<~:~@~?~>~=~B~A~t.E~C~D~F~G~2,`-_-J~H~K~n/I~u.L~m/M~O~N~Q~R~'z{}|}h,}}x-X,~}!~"~y-${0~\,1~],2~3~4~^,5~z/O.P.|,q~.{I}w,r~s~t~u~v~w~\~^~]~p~,.B|N.C|U,Z~_~x.`~a~n,m,b~y.p,o,|-S,T,n~\-c~d~f/e~g~f~h~o~i~k~&,j~P-l~m~~/}~~~!-"-~,#-$-%-`,&-|.(-)-*-'- -,-a,b,--.-}-,{-{/{0{0,1{g/P~x~z.>-q,?-@-B-A-b{w}x}m.w-y}z}W|[,X|V.Y|C-D-E-F-G-H-I-J->,K-@{A{B{C{D{h-E{E,F{L-M-y/V,r,/-0-1-2-3-4-5-6-q.7-8-9-:-;-<-=-c,\}]}^}_}d,`}e,a}b}c}d}e}f,g,f}g}h}i}j}O-Q-&z{.R-s,t,{~|~@

S"S$S%S'S(S)S S,S-S/S0S1S2S3S4S5S6S7S8S<S=S@SBSDSFSKSLSMSPSTSXSYS[S]SeShSjSlSmSrSvSyS{S|S}S~S

U!U%U&U(U)U U-U2U4U5U6U8U9U:U;U=U@UBUEUGUHUKULUMUNUOUQURUSUTUWUXUYUZU[U]U^U_U`UbUcUhUiUkUoUpUqUrUsUtUyUzU}U

X"X#X%X&X'X(X)X X,X-X.X/X1X2X3X4X6X7X8X9X:X;X<X=X>X?X@XAXBXCXEXFXGXHXIXJXKXNXOXPXRXSXUXVXWXYXZX[X\X]X_X`XaXbXcXdXfXgXhXiXjXmXnXoXpXqXrXsXtXuXvXwXxXyXzX{X|X}X

d"d#d$d%d'd(d)d d.d/d0d1d2d3d5d6d7d8d9d;d<d>d@dBdCdIdKdLdMdNdOdPdQdSdUdVdWdYdZd[d\d]d_d`dadbdcdddedfdhdjdkdldndodpdqdrdsdtdudvdwd{d|d}d~d

e e!e"e#e$e&e'e(e)e*e,e-e0e1e2e3e7e:e<e=e@eAeBeCeDeFeGeJeKeMeNePeReSeTeWeXeZe\e_e`eaedeeegeheiejemeneoeqeseuevexeyeze{e|e}e~e

"P%Q%R%S%T%U%V%W%X%Y%Z%[%\%]%^%_%`%a%b%c%d%e%f%g%h%i%j%k%l%m%n%o%p%q%r%s%

!0"0#0$0%0&0'0(0)0

%<%4%,%$%

%q%r%s%

`!`'`)` `

e%f-f f'f/f

x4x7x%x-x x

~NzP}P\PGPCPLPZPIPePvPNPUPuPtPwPOP

]8^6^3^7^

c{cichczc]eVeQeYeWe_UOeXeUeTe

r6s%s4s)s:t*t3t"t%t5t6t4t/t

t&t(t%u&ukuju

a.bidodyd

duewexe

]!^"^#^ ^$^

t.uGuHu

h&h(h.hMh:h%h h,k/k-k1k4kmk

k%lzmcmdmvm

{1{ {-{/{2{8{

WHX%X

`IaJa aEa6a2a.aFa/aOa)a@a bh

d@d%d'd

kCpDpJpHpIpEpFp

 7.8.4151

"5#6#1#2#

.]._.g.W.Pk

&&.vC

**0*.*,*/*

[%]%^%7u

$c%d%

4= =3='=$=

?$?8?*?,? ?

:\0\7\;\

\$P$a$j$i$V$`$f$_$#%f%h%

_1_2_,_0_

 '3')'5'1'7'6(

1%F!(

%Fp>p3q

C.DnD

i.lIl_n

H.HuH

&\$\2\'\!\0\

5?6?2?:?

='>(>!>%>

869597989

= >)>->/>

 })}*}.}?

=:><>9>;>

;525.5>5;3

C'ETEUE.ET

s;s"u&u%u$u

*:(:=;<;

1.#.(.'.

LS.PLNLSLSPPPWP_PUP

]4^5^6^7^

#_$_%_&_'_(_)_*_ _

4u!%9u

"*")"'"("

%d&`&a&e&g&c&

%!%"%&%'%)%*%-%.%1%2%5%6%9%:$=%>%@%A%C%D%E%F%G%H%I%J%

[!\!]!^!

mQ.bx

{ | }9},

d6exe9j

]%sOu

m.t.zB}

w%xIyWy

%f?iCt

."4"W!'!#()!g"F!>!w)x)%"R"$!,"v),(y(v(z(/"!("(?!*(-(,)!)#)@!*)-)")$($)%)&(&)')((())())0)/(/) ( ).(.)'"0"(" "*"-")"A%B%C%D%E%F%G%H%I%J%K%L%M%N%O%P%Q%R%S%T%U%V%W%X%a%b%c%d%e%f%g%h%i%j%k%l%m%n%o%p%q%r%s%t%u%v%w%x%',!,",#,$,%,&,(,),*, ,,,-,.,/,0,1,2,3,4,5,6,7,8,9,:,;,<,=,>,?,@,A,Q,R,S,T,U,V,X,Y,Z,[,\,],^,_,`,a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,W,*!.!/!0!1!S"T"%!&!6"G!H!X!y)z){)|)})~)f"I!5"$'`"e"b"Y'J!w(x({(|(}(~(0%1%2%3%4%5%6%7%8%9%!%"%#%$%%%&%'%(%)%*%g!h!f!i!j!U"X"V"Y"W"!"""#"S!$"T!t!u!3"2"n!p!D!P! !|!}!{!z!r!s!1"E!q!-!o!V!A!U!B!C!l!m!x!y!v!w!A"Q!R!g(h(i(j(k(l(m(n(o(p(q(r(s(t(u(g)h)i)j)k)l)m)n)o)p)q)r)s)t)u)M)N)O)P)Q)R)S)T)U)V)W)X)Y)Z)[)\)])^)_)`)a)b)c)d)e)f)M(N(O(P(Q(R(S(T(U(V(W(X(Y(Z([(\(](^(_(`(a(b(c(d(e(f(!&,&"&-&#&H&G&.&$&B&A&/&&&F&E&1&%&D&C&0&'&<&I&J&7&K&L&2&)&>&M&N&9&O&P&4&(&Q&R&8&=&S&T&3&*&U&V&:&?&W&X&5& &Y&Z&;&[&\&@&]&^&_&`&a&b&c&d&6&F"a!`!C"G"H"K"J"I"L"c!b!:"9"e!d!8"7"_!^!B"[!]!\!D"E"Z!Y!O"N"P"Q"O!N!<"="@";">"?"M"["\"]"Z"!!"!#!(!4!5!6!7!8!9!:!;!<!=!k!2!3!!*"*#*$*%*&*'*(*)*** *,*-*.*/*0*1*2*3*4*5*6*7*8*9*:*;*<*=*>*?*@*A*B*C*D*E*F*G*H*I*J*K*L*M*N*O*P*Q*R*S*T*U*V*W*X*Y*Z*[*\*]*^*_*`*a*b*c*d*e*f*g*h*i*j*k*l*m*n*o*p*q*r*s*! " # $ % & ' ( ) *   , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v !$"$#$$$%$&$'$($)$*$ $,$-$.$/$0$1$2$3$4$5$6$7$8$9$:$;$<$=$>$?$@$A$B$C$D$E$F$G$H$I$J$K$L$M$N$O$P$Q$R$S$T$U$V$W$X$Y$Z$[$\$]$^$_$`$a$b$c$d$e$f$g$h$i$j$k$l$m$n$o$p$q$r$s$t$u$v$w$x$y$z${$|$}$~$1)2)3)4)5)6)7)8)9):);)<)=)>)?)@)A)B)C)D)E)F)G)H)I)J)K)L)_"1(2(3(4(5(6(7(8(9(:(;(<(=(>(?(@(A(B(C(D(E(F(G(H(I(J(K(L(^"I'J'K'L'M':';'\']'^'6'7'8'T'U'V'W'X'!'"'#'%' ','-'.'/'0'1'2'3'4'''(')'*'='>'e'f'g'h'a'b'c'?'@'A'B'C'D'E'F'G'H'N'O'P'Q'R'S'Z'['c"l'&'`'o'a"<'m'5'9'j'k'_'d"d'n'i'ilKoRv2X[m2_>_;yt\du&s`]&axN0\*ciqzM/|!S qQg,RyN}q?^:{9yRN c`kzNwKêJLTajc\-_kK/UuVxe@^#lMi'jvi;{igLofPA^,dLXqy_N$z2f{z=zHLMoUU"SQl'dRl1v{NQP?K$m(mB^bv\mu\9`NT5t[S5V$lfdjqlK@KrljPry%l_PjgkPQ\i[L}W[aZ6V_cC^D^!Jln#S7nOxHj8n,q%qNi<yyejlV]Bm%x:eX["JMQmnklE^`cIJirNU6vBNGV4c-qbjBW'sjMnk2Y%}UvbU5xuL5u-dkgUq;p5iILUzTaVWA\F^ozacsav\|ND[qxd\oe1\VUZsAKC[zYnS8z&}ok&tJL(s[s'[7vfOrpZKRgCWpv^h&ege#J'LIj6x%z.qNomK0vOoOi^wSNw\([xK!_a]Ju6ilgnnps?_KLAPRt:`@_`NR\j}vVJjih,cPs$Jx[G^pkVqbeLL{KcjA_mVPi9ncUSQpe4hCk*j|zvu<pT};`CN:P:wsXMw.d_TgP}l.RonWUdj"xkM?W1{lM2\lP}NpnBLmPwe|s"n3YtX7i.N"YqXOT'eRU)V"tWqXU=pPWPTOWjkk}m[E|BKU}Htjhsu^yoSSlB]7oTgJJ{Y}z*Vxtww,\WW"_>NpS$plagOKs)m>JotNv{^;P7Uqn(tx\'KNZf`%mrny\\y\srxytq|<Py[1W|K%p}KtUmM%J VBP>p=R$L6zMLzZOv8iuXNLMWQTmikJbY2}-cLV4Y'aSnCP3}dUhOCm2P~N(ZPxV}QxRxS\b]y{A]5c]mDN!Kc]]|/y{R!O(d6t~l.cmgA}bZ3Xd]opqvpzuQOZT\&\?oONY`VYTlKj?J0UiOmqOLxdmdXW'} j2vpO=ytf[KQsQi)s`PRicZRb"vtadZUg?u"O/M#O0M~q#P/a#x&J;wjrH^SiI^^}@JjyNQTnRT#Y(}YWNw>zVOpWakExz\C]_yoge}#v|Y)}ngeUPo1M"w2q1q2M Z'Jbc<{$Y:nSxz{$O{\cv*m!raN&z`yVlnd!yo{ky#n,j(JztVMv|ItTx&xJ^FrZWPSEXfj]sZddvrvB_}YvL:S/day&pSK<`JtzT*}by7tB}0|l}bJ=}gjC_RQbN$S }`_GrpgnP*sK^8vua3q#w)J%OD_0a?p$v6cFzoPm}D]w|?f-^?zqeDm%Rn}6uvaL^^|Wl]M7V3MUxXejOPOLj.j-jqS%SOw$n$P"rpP#rxw3P)[;SlJ&qUKgw^M$w@x]SPL&Osvwa\S~z'zYk'O/jod9iXqXXr`4f|\qsPc{rF[qPrP\OQS1LXw(K<k>d\tB\'p@fmJkhheC\^mrSwLTN gCK1a2wsSRS@u]_snqg4}HrRstnSbQLj_:iWYMurqGzxYBTevE]rg_mKJz[5h&S5}Iybd={$WENUNfV=eM^sl`mll>{k_xa>ysP*`bhTb}R(eSY^S8t<w}\lhgdwc(lqzretP/Re\%P4q1|xLF]Qz_w(zunN^sg,wDkam `G]3R?RLJ?{}ee]MXtluPmhRPXYfv*[`wYX#t]tQo5Y m7c;n4Ms`Mjulnh)K/qMJ)lkro}syAfXl,mNj_hO^&RtgVQBfcc0d4X%v^s%WhwFhf{f]~\ZX,Z0j8c*Jya1jlrnzUntylR{{p}=`cNFx.^E_>e-mjznM&m.mmp!]/mx|kXyL5M)z]aUbOm"]JyhjmekSTizaLddaGh[NU\5ws|sp/N5qRoHhqkTK>`xcij2|t``O%n*zCf2a Jdc;iVbrsVn2jvPYlKZ(O#][XNyUiQc<R,XLs{MVvugohyc;Rss{cP^0NwVYqAuD\;uQ^f\R^bmvnOjnp|c_StS3a4aStF_Vi [&v9cEk)t6MyR-ZcRQO\KzL]O)h;c:cZ`wn3\uS&W5v[WUajT#__}wPTm*K[d{a"K`S?d@{>ZMd9V@o|a9vG_1dg\h\VzvSZqrz}bOUxP_MKupd KDW~bZ].ZnJ9U!cch s)OwSqTdNrhue.g:Vl_@ddh5X\d9t6q^b5aoM'qeN]KcY,syP lS^iwuy^anK<cVxn[q}6w^tmrY[(p}aT^,`cmaSH_6Y,}SoAdkx,[F|-X:v_[SSGxNJAx4R4\9zOJ3|jjkjzPdmg]I_m_<nAoRL$]J_xS(q7MTo]dn_,K<iljK_?y/VFU*O)NxV7qxnYY_sHxFNfUftEfUooK_|'\gVIxRc=caO@pZlW]p{,l)pWzA{@R0eem-K0y%w.K/Z6X'S2{D}-l!{ienitssxAp/^0x`s/g-[5f(yX]YhVobS_b`|HW-}o_SLySpTG[U^tpPUYeG|V\`b0Z#slSKtE}}c1y{P[l<u$rNXOXwuav7Rl{H]hdARWx;VV^=w.laPu`3jVN%Lvlab>cH|pMvyp_?e?Na|0mQ};vOyZkAJ8RqMScf}mfzc*pPyb|'xeaynvgmj4|Bu\Wuph]mS|u?Z{LzS$tWoCTc{m{-`nj3{Bdgv]RL_I|)ev`3v~apKojpj@Z4xrkCdWiqdoJWNJ|asDKecEK4j=iIW[k1mCL>wK|tx7YSsTsdwQw7X1NBJ4{FKvpgUPjTL/K*t/iCuXii]sq{U;^{ts}r}&wI]ST(LAZULdYJzce<SpJDPPJ zkkxgeYWQ$s{Tc|XzUs Osk|UTS|MfYyb!bTkw`2d|Ld{ t=PqJ8o@Wznt}cSB{hU.[6a7x?`C{j]"b&nhvuvJ]bP&]k]yd/c|P|t<Ljwdeq_awwy9oXx)yYx=nFXcdNuY]gY9RCUeZPZYQXN^K,t{Zivsh,Opp}tH[@NTcOQuqrMkO8M&cZQ%r&rNd{S)qIrXoIf8Xsz5s$xsQHfZxi\W^_KlO_ttQ:Rr_7a#b|SfmI[zd^OPNSUus.wHosMOuseBpQJqj&PZY pgk@e5|Dd)LF}5j*e:__aQZ8ath}S$bJrfZ3wM}6sWnDu$X'r8Y9YIoNVKw._uh5RUSLt|ZhYkwIu<sRZ5S6hOV:tIw*LCpVLSP=S{[`KdSwv:UMsaKtk-t*|lwvhgZLwAen`}UfN |;U(r¹MrjGKtM/[Yo:My|s_gNBZ-Oyg(xbsrJ$_DTWLBe;MZoXn']&b@`0VJxz|~Y0^l]hZ`TyVWMX^xrVdEP.t(]EmVsY^fc(S0[Ze?c1[iUA`[oip2W}PiY~Pml)S)rDpbboiQyYiZhCZDZETzg`M0c2[D{cs%Yg{K]TP6f.`Z}5\x`1gpu\XFm9a@c@ypi[Yds6\idEpAcL|M|KrLrOd[qYz8qu}y`{g7|d|E{gc9XxvE\XL/`gt\o|O]o*r>},J;}G}2gQjt_lQ^dCe&Y<MesUm:Ygm5{lxg`YLFT%guU>S{|rdu_xhmxGNv}XhXMVgZLcJv_GpFp:XtqptLue|Ejsj[]W\}^yrGUPXHp!Q"QTYhVJY1ZGXb\Nstu9qSZjvuO.}RJ4_]W:z'n=uuxhmaT#QVaxyJ[yKTT\Y>nmwnRfaywm][h3[wQ0`bTWvyW]X}M r=MBx,r-J.J.OBc7\Z[;YsJSvxfujvjyv/OSJ/J0R:q3WCc}sZ^[^^ocb{nw_JWhN[[;qqi7zFP L(nzKyy}L~SPdnrUTM_8|PQMrRwTJYU^XYM)n<v[LIp||Ih~t|g^W\^,p~LaM:ao[2Z%Q8\vX$QbMj\wpJp>P\]VTVSPm!M5_x_!T2NJhukUcPu!u'Y eKfquEe#y[`kvqKjY"uQWxQxjyj3Z_ooqve?ndb?P,zQu3g>iNr4[N|n]4g4W4w>MiZ0OYwfsYN*NHK'PKpGPEd`[ZU'W@nvxRuim<YFe#uTZ'b|{\qtJzhiNxieb9PrT&QN_t|*S,L`oeeUP|[f|~Kjm1^cy"TvOPVjUnqKz!e1UmOkm2U<Ub}-s[}0i'Qc}3Nd}Nz0J'w1O"f6|-rao.sF\kY`h(avU}O]^QYjdOr?wfb(bVcQmyi1V2^h` S\k/_CJ|nC}vk2OlY=Y_X8T>ko]p]q]r]>YF{3O}n dEZlX(Q)b<^5gp[bopq4Oq[1`%_Ry}g#fq{0K.rgM\hWg@wcP!Z=L)QL]~c*Q*h6jzyLfXvGTKYRYKSwX)Zxu^^/r)xHXAnAys]zj=v;a?MTtMfO|"{\`;tUZ2yr{v[_^r[\xnwhkzR<qZzjZFZAw6gGe,VG\)a*b&UWTPr{j]`s{=qgbW}HN7j@|g}ow5W:o]q3^Kh]xG{HU_W)]1i-zYvtz*xnf\L<ao`?i}|NfWaOfqtsd{ddyconO>v2`~| QzWH{Wb#Txp(Wga?SdoEWbkg|"dhbPfh{htte<tUt6_9|BnuJeobK$T`^}ZFd>h^`4vRj{yB`dJ7g}j]Y4Z*ni{K[5Z>q,SI{O_@SWcfoP|@iSu\l7w8jyQH\9j^q6W5O(Ynl*]"M.h=aQrAi|R5[gs~XQ|2m/t#{A| n%TrtYnJ{cM;X[ewxTv)WIKQfLp.XSy~U<X0r bhsBolm8g~Z>L|rkZXbVmQV3`R|HkASMpwORmXTI\qW;_%sMt?q1xziK{UJTyJwHVh|=s~n~gBS6S-Lzv2VXRXgÉg-pL{!k&TM{=U_q{v4^kUHe${9Ta^#d7Wnx5^RVUy:gUkwUgo>a.ziVnV;gKl3U4N%{na(wN{=X}{i|6OGm,n]L'vzf$u\}3mINho?a[zcK)w&{9\@qHmCo-VN}!ht{'UvqSf^L2xk\6}je`qL[M]HTmY%u{fTfH}!V?}S|!o<gnQUfri0_`X:|/}Npa[Ie4mC`Xc{i(j7}'{Biw}Ybl\"hpfx}y}?v'gWfsTITzVrW@ab[Xf=gOp>s,b7up`8}hc'T|hRzoxSV4UPppw3n:jSjIm ],e!}P_3lQ_mm8xzw x`t:T3dZi6^?Y@YoVLY*Ze_ew2Ly_`W;Tz}3Ls[R_JNZnddO{7OCnjN-baWuzIU,xYgismXDcqpehz`Dn^Y"k#kB|;j hb^om#hqO<Tj|>gr|4V.b7SLz\z5mca,h]hio=t8O[i,QGZIkLh7^<VeS]zVZ1JHZ&_3yRrDJKNuM0}(UAqibJ\4l@z({(PlZnY{`jo^zD`9OJUbW/b8WMhZv"oZb|vP{-QdM.Qm\Nhyp5N|f{WVPu]qw}vw[j{\iAYruE`TjBy<jERQ{@g%kz_"c9WCi}h/hSr){%XKUHP/QcWF`"VpmsWT|WZ_LTr0Q`L}[?sQp;|0b%f[b^_G`oraLjVBg6N@s~MR{xx{w?h7h6m:\4Lwq8hvJ$dVtf_'_g_AaDiK\Ei#o&k#Kic{Q$oko4P#Mfh%oLSmZ:WUreuoY4yTUO}c[aq6l~{WS1Q1K2Q2KBqat5yCaBawk(_JK9f^x*ywJ7m8SVrYTEnpr2J;\xq7lJe@v]}cTbLTweWCS&XAvv]@M\eKeDa0h0tjsnZ;W1b*W{V_dVJ(k~[Bv;o}TH`9h&o$MtT![\[][\nKKU|kNAMS{ yTu)Y]iM[N]CgLllyLK|`(TSmoXWrxJoZTVMYnXArS_pZjb}`xX/w6ZWJXryX_zoOBYRpQd7s`zlo2b=TNYbt)TBMZgYr*Y>X-\kb|VyJZTWt!L:O8uCYhPEcxk1r;O-SahlN4`c^w]2rvs[v~W_xrw)PZf&u<WcL[f]]3Qmo^Vtdoax]OheJ!\5`,|-|'X8m6[pV/s%MqZ(XdL4QXJrZ'u(u&flUxUsZFcd^e^5Q6Q7Q3r^iSp4rTpdKT{fujcf^T_yx.p8Q_VWP!|noX\_i]e{}I`IV*TLe`iXP"|>T3bg^<\6RUu!N)uy]z]Up_vZrkdqr9l|}*aYJoo*uyl-xBrCvRW"yVpzp`vsiCr T3J&MCMZMOYDv]nDg4bb_[g1h.|Mekz<ObOvMpo>tMT8s!irrksWpWO_O@hAhcO"i*PAs PdT<o!X_YWs=\eLqmbq[T5bfJ.SfLSqguZJn{Eai_^nBw"X,]/p=V a6yuTIP'olbj[LNhuUwMS~s5P~`{_]f$hMK(o4nXZ9Q)_0sDL7N)oU_WmFn=oV|t[*o9xiuYcFa?Th^jpBs/S[JW|XmGaXt3V-]>UCq_nkVYtfW7Z{]O]#XYZXpDoXaTqrm[U\UDsWK6bqoU{XSP]Yp3K]U'M,P:QDq3eu{ai`}<|"Z#Z!RoRmbi^\N5rdPQ]Ha7[c_9mEqOs W,akcGnIazJ{pazZpgLtZ?LmN)UbzePVk_l|_Vwj^4K>o5L=Oro7bhL|p`VFq8b k5KQXNtwsFW;Q*wJmSWzXEvLQ|]}_eyJ`}r0SstIZ^f:xPh{XUj#VFv[r|d2hZZ\rV{2i-nczn\ju`f}p,WEu`ne[^]pY#iyqDrK`$i9b1ck|(M6L[p:f)MCsYa oEgi`Es@T?U.]|y@L"e8NRXVy*qQNGvk[~_aXswgW~T<QOe6K8ZDM>V:bXOL`yk}}hWXKbi:hGcMlNl?V'cV_h}an(v}];xQhWynNOl%iUVEM:m=Q>O;l1RiLDY|i>Q<l-e0wjLDS@V}V!a=^)v$Z$VFu"aFiEritlVSk=l\bk^\p?kNW?Q u}y\JFM6r~]7L8[iP]N@k"}KxVj0qN[CwO[$K`xW{Jk!`MN\TX}vR7rvz*vwzfX1tRhEJkLnb;b-waxls!^}dlc/]0]7KSh#a`R~p&irKsmY\M`Zw9[.L[ZGM1]/X#coNsr3xN`}ulkESl|[RkT"^fe0pDUtmmcBhum|W;m v8rHvfS]r?O,k@O(fi}AO_`l^"`?tobqYGq8K~y:[uZlv\ZdzO`2])fsomszkfy]J^U^Jd_}f,uudciKmdOSX3]lT9r7_NKX{YPR]tw\g%d#|;[:r}iJPVuEY4d'm=j~fDw-u`Y4JbxBO>l4eHMHnHgIM7yhqrYu[5JFYIX Y<mTXZ\<bm|`l~RGi*fpb;z.u*{{l?lX|eTCybniWvmm^lLncThxz4]5d0XUXjt9NaVRO6P"NnsxsL\KP$|JMTW#^`dIn]b~u,TQUpXCxWjWu?X@}-k*U(gJngJcx]TXjY{wm5e-Pqq=bHcUY*_<[dxzq6eosZ{`a,Yku6`HiOKIcn^>bo\%Vqb~V!Y@X[\=m8_%j-WysxmGuJack^rLxYjFSf[/upN~i6{rbrO9wsYKa]Z9Z{k9Kym``@t<}1_oc#`9}1pKM>m@UpczmdimU]gvT7eg[?bKntW]p N^gVVLa3hne"\P`5U!U[{KysK%tHzWVei\{P}v{%Z=[blwM^pIvo^1Sn|ChHqqNmytr6d9up\qc%h;r$^LZiJZcY|ZjDy$c]{JoDhLUWk-Y {YS"U^vvZQ`(iyu/z|kj`2cEUcqnULMYmAXlzkq<zbfezzb6J7d[jzu,{CO}kzx9_qa$R{uZP[P>j1Y7JgSex2S@b_reM,yMM.n.VjW`g.kYOM\{mp^kW%^W_P[Q[#U2p\\hJfxN\\jR[3i[w(c.Wa`:KQe\PAUJX)c$`)iGS]\.x8L.PrXJc/L-TQvLPFJBU:NGJ0zX_:uketo5]*Mrcw{Pw:}a}~v@QEh8dhaALmR>[b`IzMa8J`rIqq^_pDxLnr^IgsbagKcLcxO,o~}%|1zY_R`ZtJq#N<rcl%` w/k^e$a MtY&hNMiao|c`Ab$N&^~k]k`p[ttbHSkt5nXu_UeV0kctMctt2zuo_J1k?mI}&d$y3plegQGYWd]jwT:ZMZLyZa?[ELPl;Ks^*iHYcn=WDOMP&|{qR}AQ[cISO\mL'^;f!l9L^{bgAT(\BbXsSeYsFs[M,MC|gTBQ%yUhNcJTZ__{cg{xOc0ugXIY/xvo6]/nxM8^'||w1w;N!tMn.aCl~O?xbXhS(^dtBluYEyS]qV|lp|@m9Jdnar9^rVt^[_S[gzcXAt7]ur.TsV8]EO__>r!vKk|qGsk`|m[aenu^SzKq/P9]CQ1uFjap,vYukp:]?rEw"[vr:JuweKfnS`%NXV/TIiNSBtfK!q2k"q3k4ptK0T2s7{lugn2tmusObpNnLq8euWsceOFO3sXdyOZOMzcfbrnu;J\crNYV0netBXP\nL`UJvJ}VXOt&V>\T[GW~rMqCb^\_\-o f]y?j.oPtsN,f^NyUtcPM8U}w)\v^*\cr4i\RfivcJgNPwZ<Jhn^Zwr{b&L;ZinZu\wjaAN1T1}=f-{gxNabwouGO2ToLhTOnWw&`AV\acpdqq\'VutNqdr0Pol:y5kmTDbgi4k!j<x&NFyZ|3T9S^j iaaOSvt@jOa:Ljndp4snT@reqCtT`6k!WhK-y-idX3zEb=|Dl1X \$Uik;hWX.{aQ@[>uw^{JFwHOPaPntitNMU[O;],Nhi4TGd[uAz)^xTwo3S7kxo\uLmU[OqPq2u.Y,UFb#}e{ _ub-v3u5p%a]u"l}m4u8{#[JVYKTezs8k7`lWlq/eaUmWQQrayo<]\vepDtii{soT"L~w<_Mk7PBV-h/o%KiKhzFLgfGj$[IO|bzo^kHu^TU`0oGb/YgyegJOQaHb{oyzr\'`hxjK<KbV^u_u6nvbJS|oDQ1oEQ^PaY8`QM9sLg(V'N5THd4S9kuK]v#qGLJipa`u/{QK`{erpllpknKipL/W!su|$qV`2oQt!wQq|J}JNNHs:s~m&Zl`MxRKNkXyYy`JJZ&KHJnyl[1PoUsf"gYdadD|oytOfw<NEt#\=]Ft!xVhA[fp9dmv.y>]0WhX=KZyNxpym`3c3tBjfr6pV[dkgrUW6ThyAWUejiLWiSIb[|-M0L"jvd@P7p!nvWJbKbOz_kKV4tMmRd)j:d"sRMKvfqAm<hQngpLb*dauZmnWqQkilid`'ZT]#jCVtV_Z3oMb}ohrEogg}WNg\_GyvY,_ZV$\8pzUwdDVlt~o!p*^<Z|XTzel(|flKX9{SdyMSOjJTO=xGt_j[y7TekRa$jBza{mz"pqL#zwbNbuikahgWhxZKTvwEViTzzrL]w:^(N9p~dIdTdCj4o>Wb{SM5oiz&y=_Gw}x|x ^h[]cbaFQPvfkyZGlx^ix^cuNCzWeHlIs;d.f6o?\=NCXOPzOJsW`GQ.i=hDzObEz8y`\0{)X_e'ynvLvxbql`ZRqLRKO=J?]ovy^4z-Ugq>^@\HQIQ>xvKyTbuSaiX~xLO$}vNPzsL>f.vpUJQ>|qUiM5zPbwtTM#g%[Qb"Wcw&j!PZNk{&[^[eX`j*X`e[VFojxUdwNX`oWmtfMtLcuJda\Hy?|'hDX>K.\wWhp@]MOs\0Yif<dDjldedx{;L=d\MwY_]NmPY#eMy.MNO/vS}mk\V$e6U]Viy$gcVKQdVrUz^xWjXUO}X XK}\|(`sUY}#LyYjSuuGoZS=Z(h/\#pUM)`,^:p1n2nMvRnFVe`;saeKd#WB[~JOO!0"0#0$0%0&0'0(0)0*0 0,0-0.0/000102030405060708090:0;0<0=0>0?0@0A0B0C0D0E0F0G0H0I0J0K0L0M0N0O0P0Q0R0S0T0U0V0W0X0Y0Z0[0\0]0^0_0`0a0b0c0d0e0f0g0h0i0j0k0l0m0n0o0p0q0r0s0t0u0v0w0x0y0z0{0|0}0~0!1"1#1$1%1&1'1(1)1*1 1,1-1.1/101112131415161718191:1;1<1=1>1?1@1A1B1C1D1E1F1G1H1I1J1K1L1M1N1O1P1Q1R1S1T1U1V1W1X1Y1Z1[1\1]1^1_1`1a1b1c1d1e1f1g1h1i1j1k1l1m1n1o1p1q1r1s1t1u1v1w1x1y1z1{1|1}1~1!2"2#2$2%2&2'2(2)2*2 2,2-2.2/202122232425262728292:2;2<2=2>2?2@2A2B2C2D2E2F2G2H2I2J2K2L2M2N2O2P2Q2R2S2T2U2V2W2X2Y2Z2[2\2]2^2_2`2a2b2c2d2e2f2g2h2i2j2k2l2m2n2o2p2q2r2s2t2u2v2w2x2y2z2{2|2}2~2!3"3#3$3%3&3'3(3)3*3 3,3-3.3/303132333435363738393:3;3<3=3>3?3@3A3B3C3D3E3F3G3H3I3J3K3L3M3N3O3P3Q3R3S3T3U3V3W3X3Y3Z3[3\3]3^3_3`3a3b3c3d3e3f3g3h3i3j3k3l3m3n3o3p3q3r3s3t3u3v3w3x3y3z3{3|3}3~3!4"4#4$4%4&4'4(4)4*4 4,4-4.4/404142434445464748494:4;4<4=4>4?4@4A4B4C4D4E4F4G4H4I4J4K4L4M4N4O4P4Q4R4S4T4U4V4W4X4Y4Z4[4\4]4^4_4`4a4b4c4d4e4f4g4h4i4j4k4l4m4n4o4p4q4r4s4t4u4v4w4x4y4z4{4|4}4~4!5"5#5$5%5&5'5(5)5*5 5,5-5.5/505152535455565758595:5;5<5=5>5?5@5A5B5C5D5E5F5G5H5I5J5K5L5M5N5O5P5Q5R5S5T5U5V5W5X5Y5Z5[5\5]5^5_5`5a5b5c5d5e5f5g5h5i5j5k5l5m5n5o5p5q5r5s5t5u5v5w5x5y5z5{5|5}5~5!6"6#6$6%6&6'6(6)6*6 6,6-6.6/606162636465666768696:6;6<6=6>6?6@6A6B6C6D6E6F6G6H6I6J6K6L6M6N6O6P6Q6R6S6T6U6V6W6X6Y6Z6[6\6]6^6_6`6a6b6c6d6e6f6g6h6i6j6k6l6m6n6o6p6q6r6s6t6u6v6w6x6y6z6{6|6}6~6!7"7#7$7%7&7'7(7)7*7 7,7-7.7/707172737475767778797:7;7<7=7>7?7@7A7B7C7D7E7F7G7H7I7J7K7L7M7N7O7P7Q7R7S7T7U7V7W7X7Y7Z7[7\7]7^7_7`7a7b7c7d7e7f7g7h7i7j7k7l7m7n7o7p7q7r7s7t7u7v7w7x7y7z7{7|7}7~7!8"8#8$8%8&8'8(8)8*8 8,8-8.8/808182838485868788898:8;8<8=8>8?8@8A8B8C8D8E8F8G8H8I8J8K8L8M8N8O8P8Q8R8S8T8U8V8W8X8Y8Z8[8\8]8^8_8`8a8b8c8d8e8f8g8h8i8j8k8l8m8n8o8p8q8r8s8t8u8v8w8x8y8z8{8|8}8~8!9"9#9$9%9&9'9(9)9*9 9,9-9.9/909192939495969798999:9;9<9=9>9?9@9A9B9C9D9E9F9G9H9I9J9K9L9M9N9O9P9Q9R9S9T9U9V9W9X9Y9Z9[9\9]9^9_9`9a9b9c9d9e9f9g9h9i9j9k9l9m9n9o9p9q9r9s9t9u9v9w9x9y9z9{9|9}9~9!:":#:$:%:&:':(:):*: :,:-:.:/:0:1:2:3:4:5:6:7:8:9:::;:<:=:>:?:@:A:B:C:D:E:F:G:H:I:J:K:L:M:N:O:P:Q:R:S:T:U:V:W:X:Y:Z:[:\:]:^:_:`:a:b:c:d:e:f:g:h:i:j:k:l:m:n:o:p:q:r:s:t:u:v:w:x:y:z:{:|:}:~:!;";#;$;%;&;';(;);*; ;,;-;.;/;0;1;2;3;4;5;6;7;8;9;:;;;<;=;>;?;@;A;B;C;D;E;F;G;H;I;J;K;L;M;N;O;P;Q;R;S;T;U;V;W;X;Y;Z;[;\;];^;_;`;a;b;c;d;e;f;g;h;i;j;k;l;m;n;o;p;q;r;s;t;u;v;w;x;y;z;{;|;};~;!<"<#<$<%<&<'<(<)<*< <,<-<.</<0<1<2<3<4<5<6<7<8<9<:<;<<<=<><?<@<A<B<C<D<E<F<G<H<I<J<K<L<M<N<O<P<Q<R<S<T<U<V<W<X<Y<Z<[<\<]<^<_<`<a<b<c<d<e<f<g<h<i<j<k<l<m<n<o<p<q<r<s<t<u<v<w<x<y<z<{<|<}<~<!="=#=$=$=&='=(=)=*= =,=-=.=/=0=1=2=3=4=5=6=7=8=9=:=;=<===>=?=@=A=B=C=D=E=F=G=H=I=J=K=L=M=N=O=P=Q=R=S=T=U=V=W=X=Y=Z=[=\=]=^=_=`=a=b=c=d=e=f=g=h=i=j=k=l=m=n=o=p=q=r=s=t=u=v=w=x=y=z={=|=}=~=!>">#>$>%>&>'>(>)>*> >,>->.>/>0>1>2>3>4>5>6>7>8>9>:>;><>=>>>?>@>A>B>C>D>E>F>G>H>I>J>K>L>M>N>O>P>Q>R>S>T>U>V>W>X>Y>Z>[>\>]>^>_>`>a>b>c>d>e>f>g>h>i>j>k>l>m>n>o>p>q>r>s>t>u>v>w>x>y>z>{>|>}>~>!?"?#?$?%?&?'?(?)?*? ?,?-?.?/?0?1?2?3?4?5?6?7?8?9?:?;?<?=?>???@?A?B?C?D?E?F?G?H?I?J?K?L?M?N?O?P?Q?R?S?T?U?V?W?X?Y?Z?[?\?]?^?_?`?a?b?c?d?e?f?g?h?i?j?k?l?m?n?o?p?q?r?s?t?u?v?w?x?y?z?{?|?}?~?!@"@#@$@%@&@'@(@)@*@ @,@-@.@/@0@1@2@3@4@5@6@7@8@9@:@;@<@=@>@?@@@A@B@C@D@E@F@G@H@I@J@K@L@M@N@O@P@Q@R@S@T@U@V@W@X@Y@Z@[@\@]@^@_@`@a@b@c@d@e@f@g@h@i@j@k@l@m@n@o@p@q@r@s@t@u@v@w@x@y@z@{@|@}@~@!A"A#A$A%A&A'A(A)A*A A,A-A.A/A0A1A2A3A4A5A6A7A8A9A:A;A<A=A>A?A@AAABACADAEAFAGAHAIAJAKALAMANAOAPAQARASATAUAVAWAXAYAZA[A\A]A^A_A`AaAbAcAdAeAfAgAhAiAjAkAlAmAnAoApAqArAsAtAuAvAwAxAyAzA{A|A}A~A!B"B#B$B%B&B'B(B)B*B B,B-B.B/B0B1B2B3B4B5B6B7B8B9B:B;B<B=B>B?B@BABBBCBDBEBFBGBHBIBJBKBLBMBNBOBPBQBRBSBTBUBVBWBXBYBZB[B\B]B^B_B`BaBbBcBdBeBfBgBhBiBjBkBlBmBnBoBpBqBrBsBtBuBvBwBxByBzB{B|B}B~B!C"C#C$C%C&C'C(C)C*C C,C-C.C/C0C1C2C3C4C5C6C7C8C9C:C;C<C=C>C?C@CACBCCCDCECFCGCHCICJCKCLCMCNCOCPCQCRCSCTCUCVCWCXCYCZC[C\C]C^C_C`CaCbCcCdCeCfCgChCiCjCkClCmCnCoCpCqCrCsCtCuCvCwCxCyCzC{C|C}C~C!D"D#D$D%D&D'D(D)D*D D,D-D.D/D0D1D2D3D4D5D6D7D8D9D:D;D<D=D>D?D@DADBDCDDDEDFDGDHDIDJDKDLDMDNDODPDQDRDSDTDUDVDWDXDYDZD[D\D]D^D_D`DaDbDcDdDeDfDgDhDiDjDkDlDmDnDoDpDqDrDsDtDuDvDwDxDyDzD{D|D}D~D!E"E#E$E%E&E'E(E)E*E E,E-E.E/E0E1E2E3E4E5E6E7E8E9E:E;E<E=E>E?E@EAEBECEDEEEFEGEHEIEJEKELEMENEOEPEQERESETEUEVEWEXEYEZE[E\E]E^E_E`EaEbEcEdEeEfEgEhEiEjEkElEmEnEoEpEqErEsEtEuEvEwExEyEzE{E|E}E~E!F"F#F$F%F&F'F(F)F*F F,F-F.F/F0F1F2F3F4F5F6F7F8F9F:F;F<F=F>F?F@FAFBFCFDFEFFFGFHFIFJFKFLFMFNFOFPFQFRFSFTFUFVFWFXFYFZF[F\F]F^F_F`FaFbFcFdFeFfFgFhFiFjFkFlFmFnFoFpFqFrFsFtFuFvFwFxFyFzF{F|F}F~F!G"G#G$G%G&G'G(G)G*G G,G-G.G/G0G1G2G3G4G5G6G7G8G9G:G;G<G=G>G?G@GAGBGCGDGEGFGGGHGIGJGKGLGMGNGOGPGQGRGSGTGUGVGWGXGYGZG[G\G]G^G_G`GaGbGcGdGeGfGgGhGiGjGkGlGmGnGoGpGqGrGsGtGuGvGwGxGyGzG{G|G}G~G!H"H#H$H%H&H'H(H)H*H H,H-H.H/H0H1H2H3H4H5H6H7H8H9H:H;H<H=H>H?H@HAHBHCHDHEHFHGHHHIHJHKHLHMHNHOHPHQHRHSHTHUHVHWHXHYHZH[H\H]H^H_H`HaHbHcHdHeHfHgHhHiHjHkHlHmHnHoHpHqHrHsHtHuHvHwHxHyHzH{H|H}H~HPKVKgKOMhM-N{O"P8PPP]PTQUQXQ[Q\Q]Q^Q_Q`QbQcQdQeQfQhQiQjQkQmQoQpQrQvQzQ|Q}Q~Q"R#R'R(R)R*R R-R2R>RBRCRDRFRGRHRIRJRKRMRNRORPRQRRRSRTRURVRWRYRZR^R_RaRbRdReRfRgRhRiRjRkRpRqRrRsRtRuRwRxRfT|T%U U.U8VMVKWdWE[d[%\%]U]t]|^~^3_a_h_q`-amauc!d)d.e1e2e9e;e<eDeNePeReVeze{e|e~e!f$f'f-f/f0f1f3f7f8f<fDfFfGfJfRfVfYf\f_fafdfefffhfjfkflfofqfrfufvfwfyf!g&g)g*g,g-g0g?gAgFgGgKgMgOgPgSg_gdgfgwgghhhphqhwhyh{h~h'i,iLiwiAjejtjwj|j~j$k'k)k*k:k;k=kAkBkFkGkLkOkPkQkRkXk&l'l*l/l0l1l2l5l8l:l@lAlElFlIlJlUl]l^laldlglhlwlxlzl!m"m#mnm[n=rzr1s'tnttvvv8wHwSw[xpx!z"zfz)|!#"###$#%#&#'#(#)#*# #,#-#.#/#0#1#2#3#4#5#6#7#8#9#:#;#<#=#>#?#@#A#B#C#D#E#F#G#H#I#J#K#L#M#N#O#P#Q#R#S#T#U#V#W#X#Y#Z#[#,!]#^#_#`#a#b#c#d#e#f#g#h#i#j#k#l#m#n#o#p#q#r#s#t#u#v#w#x#y#z#{#|#}#&"K!L!~!~#M!\#

s&t*t)t.tbt

.GIzI}I

$ ' / 1 1 4 4 6 : <

0 0*0=0?0@0

CUWeXeYeZe[e\e`eaecedegeielene

ZT%f%W%`%l%c%Z%i%]%R%d%U%^%j%a%X%g%[%S%e%V%_%k%b%Y%h%\%Q%P%m%n%p%o%

;L0LBLCLQC%sJ

M.Nr<\O

U.Wex

m.dOl5Y

!"#$%&'()* ,-./0123456789:;~

!"#$%&'()* ,-./0123456789:;<=>?

!"$%&()* ,-.1

!"#&')* /01236

!"#%&'()* ,-

!$&'()* ,-/01

!"#$%&) -./0123

!$&'()*-/236

!#$%&'(),012345789;<=

!"#$%&'()*

"#$%&'()* ,-./0123

!"#$%&'()* ,

!"#&(*,-./234

!"#$%&'()*,-

!"#$%&'()* ,-.

!"$%&'() ,-./012

!"#$%&'()*

!#%&'()* ,-

"#$%&'( ,-01

!"$%&()* ,-.156789:<=>@

"#%&')* ,-./246789:

"#$%&'()* ,-.

!"#$%'() ,-/012345

!"#$%&')*

!"#$%&()* ,-./0

!"#$%&'()* ,-./013

!#$%'() ,-.

!"#%&'()*-.012456

!"#$%&'()* ./

!"#$%&) -./0125689:<

!"#$%&()* ,-./01

!"#$%&'*./0123

!#$%&'(),01234578

"#$%&'( -/01

!"#$%&'()* ,-./0

!"#$%'()* ,-

!"#&(* ,-./12

!"#$%&'()* ,-

!#$%'() ,-./01345

!#%&'()*-.01256

"&'()* -./012345678

!#$%&'(),.012345789;

"#$&'()* ,-./01234

!"#%&')* ,

!$%'() ,-.

!"#%&'()*-.01467

!"#$%&'()*-.01245

#'() ,/02346789:;<?

!$()* ,-01345

!"%&)* ,-.012345

!"#$') ,-./02345

!"#%&')* -.

#%'()* ,./0123456

!"$%&()* ,-.013

!"#$%&'()* ,-./

"$%&'(),-/01345

!#$%&'(),.01234589;

!"#$%&()* ,-./0145

!"#$%&'() -./0125689

!"#$%') ,-./023

"#$%'(* -/012346

!#$%&'()* ,-.012

!"$%&()* ,-.0135678

!#$%'()* ,-012456789<=

!"#$%&'()

!"#$%&'()* ,-./0123456789:;<=

!"#$%&'()* ,-./0123456789

!"#$%&'()* ,-./012345

!"#$%&'()* ,-./01

Z%T%i%f%`%P%l%}

O!wexe

ôfpf

wexe

%S%T%_%

%S%_%

%S%T%

ôfp

!2,4,6,7

! !!!"!#!$!

{!|!}!~!

" "!"""#"$"'" ","-"."/"0"

0$1$3$4$

%!%"%#%$%%%'%

B%D%E%F%

Q%S%T%U%V%

9&:&;&<&

' '!'"'$'%'&'''(')'*' ','-'.'/'0'2'3'4'5'6'8'9':'<'='>'?'@'

-(.(/(0(1(

8(:(;(=(

(*.*/*0*1*2*3*4*5*6*7*9*:*;*<*

4 5 6 7 8 9

!,",#,$,%,&,',

-!-"-#-$-%-&-

4-5-6-8-

#.$.%.&.'.(.).

 ...0.1.2.5.7.

WINDOWS-1251

WINDOWS-1252

WINDOWS-1256

WINDOWS-1255

WINDOWS-1258

WINDOWS-1253

WINDOWS-1250

WINDOWS-1257

WINDOWS-1254

ISO_646.IRV:1991

WINDOWS-874

CSSHIFTJIS

F%*.*f

CNotSupportedException

commctrl_DragListMsg

Afx:%x:%x:%x:%x:%x

Afx:%x:%x

COMCTL32.DLL

CCmdTarget

ole32.dll

__MSVCRT_HEAP_SELECT

user32.dll

iphlpapi.dll

SHLWAPI.dll

MPR.dll

WINMM.dll

WS2_32.dll

VERSION.dll

RASAPI32.dll

GetProcessHeap

WinExec

KERNEL32.dll

GetKeyState

GetViewportOrgEx

WINSPOOL.DRV

RegCloseKey

RegOpenKeyExA

RegCreateKeyExA

ADVAPI32.dll

ShellExecuteA

SHELL32.dll

OLEAUT32.dll

oledlg.dll

WSOCK32.dll

WININET.dll

GetCPInfo

CreateDialogIndirectParamA

UnhookWindowsHookEx

SetWindowsHookExA

SetViewportOrgEx

OffsetViewportOrgEx

SetViewportExtEx

ScaleViewportExtEx

GetViewportExtEx

comdlg32.dll

.PAVCException@@

.PAVCNotSupportedException@@

.PAVCFileException@@

(*.prn)|*.prn|

(*.*)|*.*||

Shell32.dll

Mpr.dll

Advapi32.dll

User32.dll

Gdi32.dll

Kernel32.dll

(&07-034/)7 '

?? / %d]

%d / %d]

: %d]

(*.WAV;*.MID)|*.WAV;*.MID|WAV

(*.WAV)|*.WAV|MIDI

(*.MID)|*.MID|

(*.txt)|*.txt|

(*.JPG;*.BMP;*.GIF;*.ICO;*.CUR)|*.JPG;*.BMP;*.GIF;*.ICO;*.CUR|JPG

(*.JPG)|*.JPG|BMP

(*.BMP)|*.BMP|GIF

(*.GIF)|*.GIF|

(*.ICO)|*.ICO|

(*.CUR)|*.CUR|

%s:%d

windows

out.prn

%d.%d

Bogus message code %d

(%d-%d):

%ld%c

(*.htm;*.html)|*.htm;*.html

VVV.dywt.com.cn

%s <%s>

Reply-To: %s

From: %s

To: %s

Subject: %s

Date: %s

Cc: %s

%a, %d %b %Y %H:%M:%S

SMTP

.PAVCOleException@@

.PAVCObject@@

.PAVCSimpleException@@

.PAVCMemoryException@@

.?AVCNotSupportedException@@

.PAVCResourceException@@

.PAVCUserException@@

.?AVCCmdTarget@@

.?AVCCmdUI@@

.?AVCTestCmdUI@@

.PAVCArchiveException@@

.PAVCOleDispatchException@@

zcÁ

c:\%original file name%.exe

#include "l.chs\afxres.rc" // Standard components

1, 0, 6, 6

- Skin.dll

&'()* ,-./

$&(*,-/14

(*.*)

1.0.0.0

416057221

%original file name%.exe_1332_rwx_10001000_00039000:

L$(h%f

SSh0j

msctls_hotkey32

TVCLHotKey

THotKey

\skinh.she

}uo,x6l5k%x-l h

9p%s m)t4`#b

e"m?c&y1`Ð<

SetViewportOrgEx

SetViewportExtEx

SetWindowsHookExA

UnhookWindowsHookEx

EnumThreadWindows

EnumChildWindows

`c%US.4/

!#$<#$#=

.text

`.rdata

@.data

.rsrc

@.UPX0

`.UPX1

`.reloc

Remove it with Ad-Aware

Click (here) to download and install Ad-Aware Free Antivirus.
Update the definition files.
Run a full scan of your computer.

Manual removal*

Terminate malicious process(es) (How to End a Process With the Task Manager):No processes have been created.
Delete the original Trojan file.
Delete or disinfect the following files created/modified by the Trojan:

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\sp_line_1[1].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\78072[1].htm (4794 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\c_4[1].gif (81 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\bg_9[1].gif (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\lazy_iframe[1].js (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\sc[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\more_boss[1].gif (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\10111ZM324[1].jpg (2696 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\tgbtn[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\t_8[1].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\ico_ann[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\faspbtn[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\tjrm_img011[1].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\tjrm_img07[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\xfv174[1].htm (1504 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\4399_14294510451[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\left[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\bg_4[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\zmxy3_20150115[2].css (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\4399[1].js (902 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\headerBg[1].gif (228 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\chkDomain[1].js (554 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\c[1].php (1827 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\t_lm[1].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\pic[1].gif (719 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\n_zm1[1].png (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\zb_nav_20131205[1].png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\bg_3[1].gif (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\0913524M015[1].gif (84 bytes)
%Documents and Settings%\%current user%\Cookies\index.dat (8192 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\bdsstyle[1].css (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\more_zb[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\bg_8[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\unilogin_package[2].js (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\base[1].css (12385 bytes)
C:\jedata.dll (88 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\nav_bg[1].gif (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\unilogin_package[1].js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\4399_10503158122[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\4399[2].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\zmxy3_20141010[2].js (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\tjrm_img09[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\sy_ico[1].gif (2 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@cnzz[1].txt (163 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\4399_17485812405[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\78072[2].htm (3324 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@mmstat[1].txt (168 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\c_2[1].gif (70 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\bg_6[1].gif (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\4399_11234392734[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\style[1].css (337 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\02163A05453[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\jcsp_1[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\jquery-1.2.1.pack[2].js (2177 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\bdshare[1].js (182 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\151JA35H9[1].gif (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\2616293441V[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\101634512c8[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\t_9[1].gif (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\10163ZO2N[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\1Q62S330N[1].gif (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\lmbtn[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\core[1].php (73 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\right[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\zmxy3_20141010[1].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\1016395W521[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\logo[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\libg_1[1].gif (899 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (916 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\c_1[1].gif (160 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\play_hs1202[1].js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\sszn[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\4399_16125310445[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (1504 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\trace_news[1].js (559 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\b_5[1].gif (317 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\play_hs1202[2].js (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\0G641442227[1].gif (2696 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\bg_5_20130716[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\t_4[1].gif (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\go_bbs[1].gif (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\1GQ340U13[1].gif (527 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\click[1].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\jquery-1.2.1.pack[1].js (1461 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\tjrm_img06[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (203 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\stat[1].php (1177 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\lb_ico_v1[1].png (652 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\t_3[1].gif (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\zm_add[1].png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\stat[1].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\c_5[1].gif (180 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\hottop[1].gif (857 bytes)
C:\Ãƒâ€ Ã‚Â¤Ã‚Â·ÃƒÂ´.she (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\new_icon_1[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\bg_7[1].png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\scbg[1].gif (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\n_mg_bg[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\bg_1[1].gif (791 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\zmxy3_20150115[1].css (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\xfv174[2].htm (954 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\ico_1[1].gif (44 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\logger[1].js (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\stat[1].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\ico[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\b_2[1].gif (250 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\libg_2[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\zrsp_1[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\shell_v2[1].js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\icon_keys[1].gif (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\b_1[1].gif (610 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\ftbtn[1].gif (477 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\ucenter[1].js (24109 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\topbg_20140506[1].jpg (3808 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\game_bg[1].gif (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\t_1[1].gif (599 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\t_6[1].gif (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\02104939B23[1].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\core[2].php (764 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\101144213249[1].jpg (4539 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\b_4[1].gif (244 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\libg_3[1].gif (542 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\bg[1].gif (5 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@4399[1].txt (161 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\05I7KPMB\is[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\t_2[1].gif (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\tjrm_img08[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\b_3[1].gif (248 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\c_3[1].gif (84 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\bds_s_v2[1].js (1649 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\t_5[1].gif (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\89AJKDYV\news_footer[1].js (961 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\more_boss_s[1].gif (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OX6J4PMZ\zj_btn[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OHYRGXIJ\xfv174[1].swf (4463 bytes)
Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Permalink

Back to the blog

e-mail

Google+

Twitter

Facebook

Gen.Variant.Graftor.20505_27077c3b86

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet

Gen.Variant.Graftor.20505_27077c3b86

E-mail

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet