Trojan.Generic.12105354_aafc24018e
HEUR:Trojan.Win32.Generic (Kaspersky), Trojan.Generic.12105354 (AdAware), Trojan-PSW.Win32.MSNPassword.FD, Trojan.Win32.FlyStudio.FD, mzpefinder_pcap_file.YR, TrojanFlyStudio.YR (Lavasoft MAS)
Behaviour: Trojan-PSW, Trojan
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
| Requires JavaScript enabled! |
|---|
MD5: aafc24018e398bd61bd9c857639dbd13
SHA1: 81b1389cd9eda9b3aa85af67ebb5e4bc79da3d63
SHA256: da4a998efc8de9e1b19116f7f30b07b74ca655c58bd2f436a64a3b3aa55d23cf
SSDeep: 49152:j1qCLVxwZt7y s8KuqGaX0ToIBAUZLYVnCf2E3:jPwZxxJBAUZLD
Size: 2150400 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6
Company: no certificate found
Created at: 2014-04-23 17:54:16
Analyzed on: WindowsXPESX SP3 32-bit
Summary:
Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).
Payload
No specific payload has been found.
Process activity
The Trojan creates the following process(es):
KINSTALLERS_66_109992.exe:2028
The Trojan injects its code into the following process(es):
%original file name%.exe:176
Mutexes
The following mutexes were created/opened:
c:!documents and settings!adm!local settings!history!history.ie5!mshist012014120820141209!
_!SHMSFTHISTORY!_
__DDrawCheckExclMode__
__DDrawExclMode__
DDrawWindowListMutex
DDrawDriverObjectListMutex
CTF.TMD.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003
CTF.Layouts.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003
CTF.Asm.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003
CTF.Compart.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003
CTF.LBES.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003
ZonesLockedCacheCounterMutex
ZonesCacheCounterMutex
ZonesCounterMutex
WininetProxyRegistryMutex
WininetConnectionMutex
WininetStartupMutex
c:!documents and settings!adm!local settings!history!history.ie5!
c:!documents and settings!adm!cookies!
c:!documents and settings!adm!local settings!temporary internet files!content.ie5!
_!MSFTHISTORY!_
RasPbFile
ShimCacheMutex
File activity
The process KINSTALLERS_66_109992.exe:2028 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temp\kingsoftkonline\KINSTALLERS_66_109992.exe.tmp (230271 bytes)
The process %original file name%.exe:176 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\ptui_ver[2].js (233 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\login[1].htm (1302 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\h[1].js (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\KINSTALLERS_66_109992.exe (59 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\21[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\login[1].htm (1511 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\index[1].htm (562 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\c_icon_2[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\login[1] (1282 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\clearcache[1].html (934 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\big_8[1].png (1113 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\qqtubiaoad[1].htm (3 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@heima8[1].txt (626 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\ptqrshow[1].png (433 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@heima8[2].txt (303 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\ptui_ver[1].js (175 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (164 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\clearcache[1].htm (2 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (182 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\www.cx90[1].xml (266 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\load[1].gif (771 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\h_login_17[1].js (2701 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (181 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\h[2].js (16 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\468X60_54502[1].jpg (13245 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\login[1] (2818 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\qqtbset.ini (1 bytes)
%Documents and Settings%\%current user%\Cookies\index.dat (5784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\desktop.ini (67 bytes)
The Trojan deletes the following file(s):
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\MSHist012013021120130218\index.dat (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\login[1].htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\h[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\MSHist012013030120130302 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\ptui_ver[1].js (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@heima8[1].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\login[1] (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\login[1] (0 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\MSHist012013021120130218 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\MSHist012013021820130225 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\MSHist012013021820130225\index.dat (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\clearcache[1].html (0 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\www.aaa[1].xml (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@heima8[2].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\MSHist012013030120130302\index.dat (0 bytes)
Registry activity
The process KINSTALLERS_66_109992.exe:2028 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "A3 69 27 47 1F 9D DC 47 90 2F EE 7D 5F EC DA A9"
The process %original file name%.exe:176 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012014120820141209]
"CacheRepair" = "0"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012014120820141209]
"CachePrefix" = ":2014120820141209:"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"@xpsp3res.dll,-20001" = "Diagnose Connection Problems..."
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012014120820141209]
"CachePath" = "%USERPROFILE%\Local Settings\History\History.IE5\MSHist012014120820141209\"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"
[HKCU\Software\Microsoft\Multimedia\DrawDib]
"vga.drv 1024x768x32(BGR 0)" = "31,31,31,31"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"
[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "%original file name%.exe"
[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012014120820141209]
"CacheLimit" = "8192"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 16 00 00 00 01 00 00 00 00 00 00 00"
[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1398264856"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"
[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "B9 5F C3 71 40 13 64 78 70 60 49 7E AF 47 61 FF"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012014120820141209]
"CacheOptions" = "11"
The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"
The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:
"ProxyBypass" = "1"
Proxy settings are disabled:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"
The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"
The Trojan deletes the following registry key(s):
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012013030120130302]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012013021120130218]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012013021820130225]
The Trojan deletes the following value(s) in system registry:
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"
Dropped PE files
| MD5 | File path |
|---|---|
| f729d886356835c780a1ec4486f60576 | c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\KINSTALLERS_66_109992.exe |
HOSTS file anomalies
No changes have been detected.
Rootkit activity
No anomalies have been detected.
Propagation
VersionInfo
Company Name: ???????
Product Name: ??QQ??????
Product Version: 1.0.0.0
Legal Copyright: ?????????
???? ????
?????????!??????/????!
?????? 2007-2011
Legal Trademarks:
Original Filename:
Internal Name:
File Version: 1.0.0.0
File Description: ???????QQ????????,???????????,??????
Comments: ???????QQ????????,???????????,??????
Language: English (United States)
PE Sections
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
|---|---|---|---|---|---|
| .text | 4096 | 650326 | 651264 | 5.15588 | b3c19bba6dbe0704d131617d4e08cc19 |
| .rdata | 655360 | 1292802 | 1294336 | 4.90897 | 18e99f95cbe5394f38aa9abb215e1627 |
| .data | 1949696 | 391434 | 90112 | 4.4202 | 9f1d5f3967162936296cbbbcc10eefbf |
| .rsrc | 2342912 | 109864 | 110592 | 3.58611 | d24edb7b2f687b17a845499fdc2b66c4 |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
URLs
| URL | IP |
|---|---|
| hxxp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank | |
| hxxp://hm.e.shifen.com/h.js?aba7628e14455a7d552e9e0e00843116 | |
| hxxp://tf01.dlmix.glb0.lxdns.com/duba/link/grthKAVSETUPS_66_0.exe | |
| hxxp://imgcache.qq.com.cdngc.net/ptlogin/ver/10104/js/h_login_17.js?max_age=604800&ptui_identifier=000D55E5F40B222963CF67F21EAB079C13ACFB15EB55766A14BF8CAB | |
| hxxp://imgcache.qq.com.cdngc.net/ptlogin/v4/style/20/images/c_icon_2.png | |
| hxxp://hm.e.shifen.com/hm.gif?cc=1&ck=1&cl=32-bit&ds=1024x768&et=0&fl=11.6&ja=1&ln=en-us&lo=0&nv=1&rnd=513287684&si=aba7628e14455a7d552e9e0e00843116&st=1&v=1.0.70&lv=1&tt=Untitled | |
| hxxp://imgcache.qq.com.cdngc.net/ptlogin/v4/style/0/images/load.gif | |
| hxxp://imgcache.qq.com.cdngc.net/ptlogin/v4/style/20/images/shouQ_v2/big_8.png | |
| hxxp://pv.heima8.com/index.php?p=153829341&b=100002856&itemid1=141900451&reffer=&url=http://www.cx90.net/soft/qqtubiaoad.htm | |
| hxxp://static.n.shifen.com/hmt/icon/21.gif | |
| hxxp://a1574.b.akamai.net/ptqrshow?appid=10000101&e=2&l=M&s=3&d=72&v=4&t=0.6339613223348628 | |
| hxxp://ui.ptlogin2.qq.com/cgi-bin/report?id=366447&union=256042 | |
| hxxp://ui.ptlogin2.qq.com/ptui_ver.js?v=0.5732770007842594 | |
| hxxp://ui.ptlogin2.qq.com/clearcache.html | |
| hxxp://ui.ptlogin2.qq.com/cgi-bin/report?id=358191&t=0.16310324923237268 | |
| hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001039122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001042122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001045122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://img.heima8.com/141653471/468X60_54502.jpg | |
| hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001048122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001051122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001054122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001057122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001060122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001063122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001066122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001069122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001072122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001075122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001078122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001081122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001084122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001087122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://eiv.baidu.com/hmt/icon/21.gif | |
| hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001069122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001066122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001081122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://imgcache.qq.com/ptlogin/v4/style/0/images/load.gif | |
| hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001057122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001042122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://ptlogin2.qq.com/ptqrshow?appid=10000101&e=2&l=M&s=3&d=72&v=4&t=0.6339613223348628 | |
| hxxp://imgcache.qq.com/ptlogin/v4/style/20/images/shouQ_v2/big_8.png | |
| hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001054122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001051122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://hm.baidu.com/hm.gif?cc=1&ck=1&cl=32-bit&ds=1024x768&et=0&fl=11.6&ja=1&ln=en-us&lo=0&nv=1&rnd=513287684&si=aba7628e14455a7d552e9e0e00843116&st=1&v=1.0.70&lv=1&tt=Untitled | |
| hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001048122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001063122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://imgcache.qq.com/ptlogin/ver/10104/js/h_login_17.js?max_age=604800&ptui_identifier=000D55E5F40B222963CF67F21EAB079C13ACFB15EB55766A14BF8CAB | |
| hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001072122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://hm.baidu.com/h.js?aba7628e14455a7d552e9e0e00843116 | |
| hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001078122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001045122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001060122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://imgcache.qq.com/ptlogin/v4/style/20/images/c_icon_2.png | |
| hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001084122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001075122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001039122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 | |
| d.union.ijinshan.com |
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
ET POLICY Unsupported/Fake Internet Explorer Version MSIE 5.
ET POLICY Windows 98 User-Agent Detected - Possible Malware or Non-Updated System
ET TROJAN VMProtect Packed Binary Inbound via HTTP - Likely Hostile
Traffic
GET /cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank HTTP/1.1
Accept: */*
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ui.ptlogin2.qq.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Connection: keep-alive
Keep-Alive: timeout=50, max=1024
Server: QZHTTP-2.38.20
Date: Mon, 08 Dec 2014 06:18:53 GMT
P3P: CP="CAO PSA OUR"
Cache-Control: max-age=86400
Set-Cookie: login_param=appid=10000101&s_url=http%3A//show.qq.com/inc/loginto.html%3Fmyurl%3Dhttp%253A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank; PATH=/; DOMAIN=ui.ptlogin2.qq.com;
Set-Cookie: uikey=66d7571f107441eb9ded2fbf721484b89c87c2db12000383af2ff0ac4790755a; PATH=/; DOMAIN=ptlogin2.qq.com;
Set-Cookie: pt_user_id=674337654367558593; EXPIRES=Thu, 05-Dec-2024 06:18:53 GMT; PATH=/; DOMAIN=ui.ptlogin2.qq.com;
Set-Cookie: ptui_identifier=000DB209E3A7BBE5C30E178284F064C14777F5239E6F84101A030D93; PATH=/; DOMAIN=ui.ptlogin2.qq.com;
Last-Modified: Tue, 02 Dec 2014 01:30:00 GMT
Content-Encoding: gzip
Content-Type: text/html
Content-Length: 6175...........<k..........U.... ..%.dJ.....8...s.....$$...pWkj.d'R$[.\
....].....c..s.b.......O.....0x...W9.m.3=.===.............N.Cod..{n...
6..P*...Q*..<.<...SO...$l:....n..Q*...(.C.......vq.R..Ai.....W.7
f...kY.<[email protected][..L..^as.F........^..l..
Pq\...^....\..m...8....#.....S....6..p\..r.8@.&.-.Z....b..s.m.....e"..
.vP........e.R.\T....T.h...M17q.7v.]....,u<...........eQ...\...]..
.:.....62UKC.}...kd.#..../v/.G{.Wa..[S....g9....c.h.k.E.Q......[<..
.Z..:..=.,.u...-..fO.....4......X....xT;*..X.=.x."[email protected]...^B..
.m...[t.T.........b........ .....Vw..Mq..../..}........bz....W.7?.....
<...Z*.. {.}.....K.{....w_.!us........}...;w.~....9..... .w..^.3@FQ
........k..O..lv......_~....{o..~....;[email protected]
.u}..}z...........@.....|.....^>}zv...W.N_.=.....O.....k/N.........
...U..`......p..?.^.A..............H[..9]...%.'...i......u.z..........
...:&.w~...G.~.w..."..^.......6.v...k.W...az...._....'{.o....W.]......
}?.;{[email protected]........}cz....... .w.....Oo........&
gt;.*.a..... ..._...gn..][email protected].."....4....A..Kw...)...a
n...l.u.*J. [email protected].........^.|z...w..~|sz.-......2..
....w.C;Ka.....m9...`.p.n.c..%V?:.a...K......I.w.......5.T.. .......;.
.p..;..L:.....lMQ..g.#.TF..b.E1...=.........V.e.ih.....9....n.Il....cg
..'..c..$.df.q).....A...M]...e..)Ke.....B.W....!....n..:.*b/K.O.v..x..
.A..z....S.9..%}.....W.@......@.<.u{...*...T7..3....g.C....n.?_)<
;...S7...B.V,g..~..z.....m.T....OH?<Q..3O..=w....O.k.6.S^......<<< skipped >>>
GET /cgi-bin/report?id=366447&union=256042 HTTP/1.1
Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ui.ptlogin2.qq.com
Connection: Keep-Alive
Cookie: login_param=appid=10000101&s_url=http%3A//show.qq.com/inc/loginto.html%3Fmyurl%3Dhttp%253A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank; pt_user_id=674337654367558593; ptui_identifier=000DB209E3A7BBE5C30E178284F064C14777F5239E6F84101A030D93; ptui_version=10104; uikey=66d7571f107441eb9ded2fbf721484b89c87c2db12000383af2ff0ac4790755a
HTTP/1.1 200 OK
Connection: keep-alive
Keep-Alive: timeout=50, max=1024
Server: QZHTTP-2.38.20
Date: Mon, 08 Dec 2014 06:18:57 GMT
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: text/html; charset=utf-8
Content-Length: 0....
GET /ptui_ver.js?v=0.5732770007842594 HTTP/1.1
Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ui.ptlogin2.qq.com
Connection: Keep-Alive
Cookie: login_param=appid=10000101&s_url=http%3A//show.qq.com/inc/loginto.html%3Fmyurl%3Dhttp%253A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank; pt_user_id=674337654367558593; ptui_identifier=000DB209E3A7BBE5C30E178284F064C14777F5239E6F84101A030D93; ptui_version=10104; uikey=66d7571f107441eb9ded2fbf721484b89c87c2db12000383af2ff0ac4790755a; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN
HTTP/1.1 200 OK
Server: QZHTTP-2.38.20
Connection: close
Date: Mon, 08 Dec 2014 06:18:58 GMT
Content-Length: 175
Last-Modified: Wed, 03 Dec 2014 07:47:27 GMT
Content-Type: application/x-javascript
Content-Encoding: gzip
Cache-Control: public; max-age=86400
Expires: Tue, 09 Dec 2014 06:18:58 GMT..........]....0.D.E.(.41}@...]t...1h .....~K...f8.....#'......"c.>
.[t....A.V...D........dD.sM._!.7IQ...dh@....:MT.cj0...,...[......|...w
.#......Y..._...Ao.:G%...[..y.H..N......
GET /ptlogin/v4/style/20/images/c_icon_2.png HTTP/1.1
Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: imgcache.qq.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Mon, 08 Dec 2014 06:18:56 GMT
Server: PWS/8.1.20.5
X-Px: ms h0-s2038.p9-jfk ( h0-s2029.p9-jfk), ht h0-s2029.p9-jfk.cdngp.net
ETag: "547ebff4-206c"
Cache-Control: max-age=7200
Expires: Mon, 08 Dec 2014 07:44:54 GMT
Age: 2042
Content-Length: 8300
Content-Type: image/png
Last-Modified: Wed, 03 Dec 2014 07:47:00 GMT
Connection: keep-alive.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e&
lt;....PLTE........z.......V4....kM.....;...........J...........r.....
....t.).....9.........c..y. ...J.......2......khk[.......!.........B..
.....s........0..............Y.0........................9.......q.....
.......&......E,.. .......P.)..=..`....)....~.,...XG....b.&...v.W....D
(............{.3l. ..................~.5TRT..................q.'m.5N..
........G.....7.........99<..........................tRNS..........
......................................................................
................................................8.Kg....IDATx....C....
....Z.y.4.*s..........1a.U.5:l...]'\...._...W.6.-......B..m...y.....(g
:...Y4..2.. .t.H.9.D...R."O..>[email protected].
.H..H..H..H..H..H..H..H..H..H..H..H..H..H..H.I2R*E..%7$=.$z..,.#.B.|..
=C(.i ;.........@......}.bg...Z{(I.Zw1e....9...w........y....x[A.{.>
;IgJo ..!I.m.a$)mj..H..H..H..H..H..H..H..H..H..H..H..H..H..H..H..H.I..
R$l}...T.|.Y...y5."W.....k..Vv.}.]..K..H [email protected]....*.....&.....E.
..u.y..o.ht.\/.$s.v.b.......k.}. ...Z.yRW..O...'6.v.z....e......c.....
..wF$........H...Q.T.%.N3"9}.z.k...k....p.`'W~....]~...&.......#..UpI.
3vr..8.........]......I....lP...3.O.;|b.%....?4...O^].3.I.I..> . a.
.......%F"...H.$]$..H...I.3.9.$uI..U.".......7...`F.*X.|.$.%1...H.....
...W..~./#.........H^.i....1"..OF$s7.a.'..s.Y9p.o&"..`.....>..'.x..
...._......{. .c.._oD....]....`..,.;F................p..9c$..D.%.p.:et
.......|K!I.'.`[email protected]*D$.$.I..FX..E...R...V3k.....I45<<< skipped >>>
GET /ptlogin/v4/style/0/images/load.gif HTTP/1.1
Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: imgcache.qq.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Mon, 08 Dec 2014 06:18:57 GMT
Server: PWS/8.1.20.5
X-Px: ht h0-s2038.p9-jfk.cdngp.net
ETag: "547ebff4-303"
Cache-Control: max-age=7200
Expires: Mon, 08 Dec 2014 06:32:02 GMT
Age: 6415
Content-Length: 771
Content-Type: image/gif
Last-Modified: Wed, 03 Dec 2014 07:47:00 GMT
Connection: keep-aliveGIF89a.....................................wul..y............!..NETSCA
PE2.0.....!.......,..........O.......{....Y..`....I.D8.. S.....(......
.D..(.I~.. .H`....Z.f....k.N..q...;'.L..!.......,..........N.......{..
@.1....Q]AiN.:..)S.T...,........b....$?...Q(0.).j.f....{....n.-~N....!
.......,..........M.........,Eeu......%5..E...f3. ......g(..<...L..
.D".X`.RJ.J.N..........9...=..!.......,..........N...J..Z.'B. ..q`....
.P)8./,S&.$.$.......y....D...."..`.R.ak.b.........m..^S....!.......,..
........M......Z.gJ.....}.H..I...b$.(.t..}.......~9..@Y,2..........i00
......|......t;..!.......,..........M...R..Z..R.. ..}.H..I.l....t.P0..
..B....v>.CG1.2...i.P....J.0.R-.....J....t;..!.......,..........M..
....Z..Z..$..}.H..I.l...at..0..........8..B d..L.I.B)...q80...&..t....
...3..;..
GET /duba/link/grthKAVSETUPS_66_0.exe HTTP/1.1
Host:d.union.ijinshan.com
Accept:*/*
User-Agent:Mozilla/4.0 (compatible; MSIE 5.00; Windows 98)
Connection:Keep-Alive
HTTP/1.0 200 OK
Date: Sun, 07 Dec 2014 13:22:57 GMT
Server: Tengine/2.0.3
Content-Type: application/octet-stream
Last-Modified: Sun, 19 Jan 2014 08:30:06 GMT
ETag: "52db8d0e-1e1d9f0"
Accept-Ranges: bytes
Content-Length: 31578608
Age: 60958
X-Cache: HIT from cache.51cdn.com
Via: 1.0 jxjj35:80 (Cdn Cache Server V2.0), 1.0 jg14:8888 (Cdn Cache Server V2.0)
Connection: closeHTTP/1.0 200 OK..Date: Sun, 07 Dec 2014 13:22:57 GMT..Server: Tengine/
2.0.3..Content-Type: application/octet-stream..Last-Modified: Sun, 19
Jan 2014 08:30:06 GMT..ETag: "52db8d0e-1e1d9f0"..Accept-Ranges: bytes.
.Content-Length: 31578608..Age: 60958..X-Cache: HIT from cache.51cdn.c
om..Via: 1.0 jxjj35:80 (Cdn Cache Server V2.0), 1.0 jg14:8888 (Cdn Cac
he Server V2.0)..Connection: close...M.....|._4.T......WU..{...$QF.]..
.?.O...9^R...0XR.K..vi..Bt.U...U......lgZn...#..6.... .K.;.B .P..Q.VP.
~(YR....#hO.91DE$._2..b...........vI...` ..tPWV..l3.;...X,....^.@u Z..
.v.....1.>7......~.Li[?.9}.f.....E.;...M..]..;...;..z,..Fvqa.9..sya
.}m...y.=LiXV.}.S.\G..v.\]f.S8JA..I.^|4x.!_...._|.j.h.....QN.d...Pd.%.
.SVW.e... ...}.~..........0.."._.\.....p..o.....;.s..=4;.w7_w_Z4..E...
N.(...]nm...&........"..H..:[email protected]./...l.M.Tv#......aJG...T6.R
S..]..LE.....}(X........w.O...z.H.R....M...[..]L.....$u..N.Q.)p..3..P.
.6.,.hU5..Tw'..srLov....uN2......~.h..P$..{....b3.....s.*..L.30...D.z.
yh..:S..`*Q,..yNq....4$.v......J...-zQ...b..B...?Q.M.....TP.W.........
.|.;.uZ...t....:.....(.j....[Y.T]u..,.....8....B..P..V....LO.Q.y.....h
........Q..]g.W3....P..'...,(....tM.I............W...Qj.V...s.h ...Jt.
..\&=.O..X$..S.....B....*u.HF[Y..Ea.}.?..8.`.W(...4...&h$....0t#...f&l
t;.......v.;.s.......2..tN.u..r.^_.lf.Y....f..#...E.....Pw"........;..
$....-hW..@..{."...H......4;..... .Z.n....q.........?...t..%....t.V..p
Ly.....a.Xh9.sI.;.X......l.....~...x..~.QV...}...@.;.}......h.~.......
.V..^}.O.....MZ......................@............................<<< skipped >>>
GET /ptlogin/ver/10104/js/h_login_17.js?max_age=604800&ptui_identifier=000D55E5F40B222963CF67F21EAB079C13ACFB15EB55766A14BF8CAB HTTP/1.1
Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: imgcache.qq.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Mon, 08 Dec 2014 06:18:56 GMT
Server: PWS/8.1.20.5
X-Px: rf-ht h0-s2038.p9-jfk ( h0-s2062.p9-jfk), ht h0-s2062.p9-jfk.cdngp.net
ETag: "547ec030-13ba0"
Cache-Control: max-age=600
Expires: Mon, 08 Dec 2014 06:26:34 GMT
Age: 142
Content-Length: 26502
Content-Type: application/x-javascript
Content-Encoding: gzip
Vary: Accept-Encoding
Px-Uncompress-Origin: 80800
Last-Modified: Wed, 03 Dec 2014 07:48:00 GMT
Connection: keep-alive................q ..TcFl....~.?......{..._..\]S..A.U$."...>.C^I ..g
.k.|....>.......lY....=..._...L ....Z.................S{...u.Mz.Y..
7..\.?.8..OT[....|6Y./......R.p.M........$,..pw........5.E.......k]Av3
B...N.J..J3......:q...........^.iJ..W,u.....Mm]..)...T...*J..:~......?
.........m.C.....7.../j..v:.....n....b..CW.Z.2..[../...v...K..k..w..Z)
.-..Q.n^i...So....-...G/[email protected]...~SYW(.>{wU...mo..=HT...h.w..W
7.....z...|....hK.m..7..?..J.....5...X3.M....A.b....LAW...S......-..y.
*....8..F..=...(>.`.eb...]...A8.t....d..pJr......8>>..!......
#...b.'RT..........?zx...'..../...{2w.P...G.y\.|6..V[w.....~O...Zz>
.Y.."#.................{.A......@.....)...s.....R2...[V.0r.8a.l...u.`Y
V...R.R..J2.5W4...5.I..{....:@Z`.....<.......#..J>..Wp.2.....8..
[K.......;......iW.SU...v...b?....jf_.X......F..w3...../j.m.].K.u'=.E#
.mH].S?H...n.}&...([email protected].......;Xpl\.P.I......./..F.6]......
.TI.8..C5.D[..."........U@..&t3.sWY..~...&*[email protected]
H ..../U...7..=...c...Y.h_....mP.........E{.#...z...2.}.....M.JO...V.`
..D,....z .z.4T..S.0..D.C)3..q..][email protected]!.i~ ..Bk....]._P..?u.
.l...Nd.....P....$.G7{....]1.>..%...8vD...$.).F.....g.;.dK#fd......
.M.......h..cM.So`...8.r..lE.?...Y.......g..]/.8S8..Z b9.~......A._...
......ym=.M.0A..,D.!..?".."%...0..o.x.tc.T.~.e../..(.8....Bl.^w.......
N.YX..o....,G........"....g...,.........]1..m.<h.D..u....=@1.......
..5..p.....e....(..y0$z.....R........J...hD..."(.{.?.zA.N...-...S...O-
.j. .mgH.....<..=N.-.......A<..L.....W\DDp=..}5.d.5.E.......<<< skipped >>>
GET /ptlogin/v4/style/20/images/shouQ_v2/big_8.png HTTP/1.1
Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: imgcache.qq.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Mon, 08 Dec 2014 06:18:57 GMT
Server: PWS/8.1.20.5
X-Px: ms h0-s2038.p9-jfk ( h0-s2071.p9-jfk), ht h0-s2071.p9-jfk.cdngp.net
ETag: "547ebff4-2c50"
Cache-Control: max-age=7200
Expires: Mon, 08 Dec 2014 07:45:11 GMT
Age: 2026
Content-Length: 11344
Content-Type: image/png
Last-Modified: Wed, 03 Dec 2014 07:47:00 GMT
Connection: keep-alive.PNG........IHDR.......,.....,)......tEXtSoftware.Adobe ImageReadyq.e&
lt;....PLTE......fff.A.............:........}}~.YxSR.~........v..YYX..
.[..853...-.....rrr...zzy^|.......{.....@@?vI9.f;.............../btrl.
... .........wo....aW...C'..........}.j2mOzmd....rK.........\F9.......
.....epuSRQ...vvv...~up.........Qsa...J..xxx....wltzy........../;jxn..
...........zy......[6(..tx..OjupWK.........,*)...KKI...__^{{{......'..
..}|||...x|s~.....qt|mll#|....................;Q.....tRNS.............
......................................................................
.............................................8.Kg..).IDATx....C.F....8
({Ij.e,t"....v.0.....{.S...$...%}...U..Oz..'$...we...'..k3.....4..3..Q
...a.......l2Qb>.U...d...%.l......,e.'.M......{!.......Bx;.Q"..4~..
9.Lx.B....Cb...veavl..S..mC.3O..;.2.1@..;.....q@.!...qQ3..R8..N&O.D].L
....Xl...p<.......8..q..*.4....lv...d.....d2..$&..O=f..L....`....Rg
g.'.O..]. .B2.p...If..arr..cvf...6....?Q..:..^.-...{@O^)O......s.>Q
....~...k`'K.f.O...?Q...D.....'.O...?Q...F]..mI........Y....?..^<.{
@...X.....,.P.....a~......Al...N...f. ~. ....H.R.3{......!...N$s..bB}.
.O.;.....wwg.........ow...3...4.x0..n..};s....}*..`.wS..3.U....g......
..wjw.YH..@.?..j2..1zwfqf....7.^..M/..>8HO.g.p...ss....!......`Ho..
r....._...f.".-F..*...'...\W.>..Y.D....P.]<...U...P.~.x.UOn...W[
.3......K?op.8..XQ........=..#..n....v..z..........Q...../..r.....]]]m
.P.........xo....P.......p...}.......tjwuz'.N..g......M.>]...... ..
....\..2.....U.-U'...D.5..J0k......q)Au......d){.-.&...a".F.$&....<<< skipped >>>
GET /h.js?aba7628e14455a7d552e9e0e00843116 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.cx90.net/soft/qqtubiaoad.htm
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: hm.baidu.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Etag: 6dae7ce3160235d7f0209753dbf796ad
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Type: application/javascript
Set-Cookie: HMACCOUNT=255C41503C8E7AD0; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Connection: Keep-Alive
Content-Length: 6565
Date: Mon, 08 Dec 2014 06:18:54 GMT
Server: apache...............(function(){var h={},mt={},c={id:"aba7628e14455a7d552e9
e0e00843116",dm:["cx90.net/soft/qqtubiaoad.htm"],js:"tongji.baidu.com/
hm-web/js/",etrk:[],icon:'/hmt/icon/21|gif|20|20',ctrk:false,align:-1,
nv:-1,vdur:1800000,age:31536000000,rec:0,rp:[],trust:0,vcard:0,qiao:0,
lxb:0,conv:0,apps:''};.[{w.......F.2i..d;nJ..M..7.M.m......H..#>d..
.J..;..%.y...9.@<...o........i..E......(7.l....=g.(....x........E..
1_...'...D.l"..P..$...e..Px...S..~.K~..Q..s.<.,.D4z.U.M]........){.
r...,vF.R...U.{....T..\.^>.l.F....^.T..i..%..$.Q..)..X7@g....,?...L
.._.n.$...C..^..<[..;...%V..<......H..9)JF.....%."......a..tuazI
..xHlM......1....S.........zq?.R.A.g..Oo>... ..F9.s..2..RA.r[o.iml.
X."_.Pb......N.... ].Y.}....no...0..p.........V&..Kh).X.M.....y...Kl..
|.$..O....ka.<.a.gl...{...K......9..a!..J...y*...>_....{......U|
.....r....h..J3Q.Y1...UY{.*5.h]-K.. [email protected]#3......leQ.HnoDnnn.......
?.)...PO...y.]..w.....R31.c;....m......./.O<......Z.....T...$Iu.7.2
@..............'.....n..8..j..SP[X.[|...m.......Rr..b..X.c,...c1...PX.
:..!'Py# .g[..5. [..;....H|.*\...,bO.A,<b...kl.%^D.H.v-.^.q..30...=
.G....%.j...E..$..q.TM`.yJ.-..c, .UL..Z.g9.]...4..J......i.<3..$...
.4.}........~.k.,..7....D...UQr..^..8Y....>.Kz.N...".. ....]..#..!.
l..cR..&.OI.....7....UJz.W....O...3. .'.I.|.U..Z...P....'Xc&..zp./...j
..7.=Y...!pyM...v.&..Z..e....O.E....r.....*.5M.".....hl..8.F.7..b..tv.
!:..).6.....j.>.c[.....kQl... .(...M...K.&.D.[........V..p.F=..o9..
j....UV...2.....>.Z.8....x.`.!N...u....A....|#O.....>%A..x..<<< skipped >>>
GET /hm.gif?cc=1&ck=1&cl=32-bit&ds=1024x768&et=0&fl=11.6&ja=1&ln=en-us&lo=0&nv=1&rnd=513287684&si=aba7628e14455a7d552e9e0e00843116&st=1&v=1.0.70&lv=1&tt=Untitled HTTP/1.1
Accept: */*
Referer: hXXp://VVV.cx90.net/soft/qqtubiaoad.htm
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: hm.baidu.com
Connection: Keep-Alive
Cookie: HMACCOUNT=255C41503C8E7AD0
HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Pragma: no-cache
Content-Type: image/gif
X-Content-Type-Options: nosniff
Connection: Keep-Alive
Content-Length: 43
Date: Mon, 08 Dec 2014 06:18:56 GMT
Server: apacheGIF89a.............!.......,...........L..;..
GET /hmt/icon/21.gif HTTP/1.1
Accept: */*
Referer: hXXp://VVV.cx90.net/soft/qqtubiaoad.htm
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: eiv.baidu.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Content-Type: image/gif
ETag: "762990053"
Accept-Ranges: bytes
Last-Modified: Tue, 13 Apr 2010 09:38:40 GMT
Expires: Wed, 16 Oct 2024 06:18:57 GMT
Cache-Control: max-age=311040000
Content-Length: 1119
Date: Mon, 08 Dec 2014 06:18:57 GMT
Server: BWS/1.0
Connection: Keep-AliveGIF89a........s..E.....M...................ZS.2-.YS.......2,.c[..D....
...0'..:..0.&..]Z..8..>..D.TM.................C................._..
^.....u..w........~........k.4......X..d.......=1.....a.c[.PH.h_.....b
..........PH........A..9....h`..J..1.......g`..W........2........z.#..
.p..m....jd........*.............[Q...........6..G..............6..t..
........... ..TL.....!....$....."..;0.....h.7-..............Z.........
....%..:.....H@....^W.QJ..'. !..........70.._. %.'...T.0'..Q.G?.ws....
-$........h.}w.....>...........L.....#.......:0.............\S.....
........*".....Q..............<..T.!...p.$...}........N..........d_
...........j.......VN.....o.....e........[............................
......................................................................
....................!.......,............u...,..>6.T.T..&T.".H. ...
.3^.PQ.G..:^..H.-.T....2#!........K..iP.&..03%X..x.P/^.$...`...G>Xd
....!..d.T...j.,..fQ..8l<..U%..G|.h.......$p..f......R..b.....*R@W"
2y..8..V3.LV`t.e..7.>.........\D..O.H.....$...^.]..).. ...9..E...d\
...V.U1..i......B]......c.P<0.i...v.]D..G .?p-.CD.Fi;>..v....r`.
.&........./.dp....`.....;HTTP/1.1 200 OK..Content-Type: image/gif..ET
ag: "762990053"..Accept-Ranges: bytes..Last-Modified: Tue, 13 Apr 2010
09:38:40 GMT..Expires: Wed, 16 Oct 2024 06:18:57 GMT..Cache-Control:
max-age=311040000..Content-Length: 1119..Date: Mon, 08 Dec 2014 06:18:
57 GMT..Server: BWS/1.0..Connection: Keep-Alive..<<< skipped >>>
GET /index.php?p=153829341&b=100002856&itemid1=141900451&reffer=&url=http://VVV.cx90.net/soft/qqtubiaoad.htm HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*
Referer: hXXp://VVV.cx90.net/soft/qqtubiaoad.htm
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: pv.heima8.com
Connection: Keep-Alive
HTTP/1.1 200 OK
Date: Mon, 08 Dec 2014 05:53:11 GMT
Server: Apache
X-Powered-By: PHP/5.4.10
Set-Cookie: hm_uid=1418017991.0507_2309; expires=Tue, 08-Dec-2015 05:53:11 GMT; path=/; domain=heima8.com
Set-Cookie: hm_uvcount=1; expires=Tue, 08-Dec-2015 05:53:11 GMT; path=/; domain=heima8.com
Set-Cookie: hm_uvltime=1418017991; expires=Tue, 08-Dec-2015 05:53:11 GMT; path=/; domain=heima8.com
Content-Length: 1901
Connection: close
Content-Type: text/html<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "htt
p://VVV.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">.<html xml
ns="hXXp://VVV.w3.org/1999/xhtml">.<head>.<meta http-equiv
="Content-Type" content="text/html; charset=utf-8" />.<title>
...............</title>.<style type="text/css">.<!--.bo
dy{margin:0px; padding:0px;}.div {margin:0px; padding:0px; text-align:
left;}.-->.</style>.<script type="text/javascript">.var
init_runint =1; .var iTimerID = 0;.var timespan = 5000;..function sho
wImp(id).{..for(var i=1;i<=1;i )..{...document.getElementById('key
_' i).style.display = "none";..}....document.getElementById('key_' id)
.style.display = "";.}..function show(id).{..showImp(id);...init_runin
t =id;....clearInterval(iTimerID);..iTimerID = setInterval('socall()',
timespan 1000);//......................}..function onmouseoverHandl
er(id).{..clearInterval(iTimerID);.}..function onmouseoutHandler().{..
clearInterval(iTimerID);..iTimerID = setInterval('socall()', timespan)
;.}...function socall().{..if(init_runint >= 1){.init_runint = 1;}.
.else{ init_runint ; }....showImp(init_runint);.}..</script>.&
lt;/head>.<body>.<div style="border:0px solid #CCCCCC;padd
ing:0px;width:468px;height:60px;">.. <div style="clear:both; w
idth:468px;height:60px;" onmouseout="onmouseoutHandler()" onmouseover=
"onmouseoverHandler(1)" id="key_1">. <div style="float:left;"&
gt;. .<div style='float:left;'><a target='_blank' href=<<< skipped >>>
GET /ptqrshow?appid=10000101&e=2&l=M&s=3&d=72&v=4&t=0.6339613223348628 HTTP/1.1
Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=66d7571f107441eb9ded2fbf721484b89c87c2db12000383af2ff0ac4790755a
HTTP/1.1 200 OK
Server: tencent http server
Accept-Ranges: bytes
Pragma: No-cache
P3P: CP="CAO PSA OUR"
Content-Type: image/png
Content-Length: 433
Date: Mon, 08 Dec 2014 06:18:57 GMT
Connection: keep-alive
Set-Cookie: qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN; PATH=/; DOMAIN=ptlogin2.qq.com;.PNG........IHDR...o...o.............pHYs................cIDAT8......
...Y...6.D.d......h..mX..oF.....=......._..<M.......T-V..&..L.....M
d.'G.......x....D..78....?......|?.w...`........'..Z...T.Q...H2Q..K.xg
r.m.8t...>.2......L@.[....$"...s..W.=.G-..L....v.Y...M....#.r..T..
.r. z..."Ry..W.t.....iU.5....n.m.,$.\.\.lw*"G_"q...C./....7.E.5....2.I
..s...6d..<.i..4S.^P=.fX...Rt....[.9}..9k..r.&.o...W.H...C...?....M
|....?;0.?....IEND.B`.....
GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001039122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1
Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN
HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 71
X-N: S
Date: Mon, 08 Dec 2014 06:19:00 GMT
Connection: keep-alive
X-N: SptuiCB('66','0','','0','.....................(1904244508)', '10000');.
.....
GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001042122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1
Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN
HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 70
X-N: S
Date: Mon, 08 Dec 2014 06:19:03 GMT
Connection: keep-alive
X-N: SptuiCB('66','0','','0','.....................(436238108)', '10000');..
....
GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001045122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1
Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN
HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 70
X-N: S
Date: Mon, 08 Dec 2014 06:19:06 GMT
Connection: keep-alive
X-N: SptuiCB('66','0','','0','.....................(457197616)', '10000');..
....
GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001048122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1
Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN
HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 71
X-N: S
Date: Mon, 08 Dec 2014 06:19:09 GMT
Connection: keep-alive
X-N: SptuiCB('66','0','','0','.....................(2537554844)', '10000');.
.....
GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001051122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1
Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN
HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 71
X-N: S
Date: Mon, 08 Dec 2014 06:19:12 GMT
Connection: keep-alive
X-N: SptuiCB('66','0','','0','.....................(3654311384)', '10000');.
.....
GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001054122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1
Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN
HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 71
Date: Mon, 08 Dec 2014 06:19:15 GMT
Connection: keep-aliveptuiCB('66','0','','0','.....................(2996850536)', '10000');.
.....
GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001057122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1
Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN
HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 70
X-N: S
Date: Mon, 08 Dec 2014 06:19:18 GMT
Connection: keep-alive
X-N: SptuiCB('66','0','','0','.....................(879766352)', '10000');..
....
GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001060122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1
Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN
HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 70
Date: Mon, 08 Dec 2014 06:19:21 GMT
Connection: keep-aliveptuiCB('66','0','','0','.....................(453010396)', '10000');..
....
GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001063122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1
Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN
HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 71
X-N: S
Date: Mon, 08 Dec 2014 06:19:24 GMT
Connection: keep-alive
X-N: SptuiCB('66','0','','0','.....................(1546674548)', '10000');.
.....
GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001066122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1
Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN
HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 71
X-N: S
Date: Mon, 08 Dec 2014 06:19:27 GMT
Connection: keep-alive
X-N: SptuiCB('66','0','','0','.....................(3891295104)', '10000');.
.....
GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001069122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1
Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN
HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 70
X-N: S
Date: Mon, 08 Dec 2014 06:19:30 GMT
Connection: keep-alive
X-N: SptuiCB('66','0','','0','.....................(414201072)', '10000');..
....
GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001072122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1
Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN
HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 71
X-N: S
Date: Mon, 08 Dec 2014 06:19:33 GMT
Connection: keep-alive
X-N: SptuiCB('66','0','','0','.....................(2753579980)', '10000');.
.....
GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001075122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1
Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN
HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 71
X-N: S
Date: Mon, 08 Dec 2014 06:19:36 GMT
Connection: keep-alive
X-N: SptuiCB('66','0','','0','.....................(1597005888)', '10000');.
.....
GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001078122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1
Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN
HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 71
X-N: S
Date: Mon, 08 Dec 2014 06:19:39 GMT
Connection: keep-alive
X-N: SptuiCB('66','0','','0','.....................(1516247056)', '10000');.
.....
GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001081122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1
Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN
GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001081122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1
Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%2
HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 71
Date: Mon, 08 Dec 2014 06:19:45 GMT
Connection: keep-aliveptuiCB('66','0','','0','.....................(2056273552)', '10000');.
.....
GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001084122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1
Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN
HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 71
Date: Mon, 08 Dec 2014 06:19:45 GMT
Connection: keep-aliveptuiCB('66','0','','0','.....................(2574275640)', '10000');.
.....
GET /cgi-bin/report?id=358191&t=0.16310324923237268 HTTP/1.1
Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ui.ptlogin2.qq.com
Connection: Keep-Alive
Cookie: login_param=appid=10000101&s_url=http%3A//show.qq.com/inc/loginto.html%3Fmyurl%3Dhttp%253A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank; pt_user_id=674337654367558593; ptui_identifier=000DB209E3A7BBE5C30E178284F064C14777F5239E6F84101A030D93; ptui_version=10104; uikey=66d7571f107441eb9ded2fbf721484b89c87c2db12000383af2ff0ac4790755a; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN
HTTP/1.1 200 OK
Connection: keep-alive
Keep-Alive: timeout=50, max=1024
Server: QZHTTP-2.38.20
Date: Mon, 08 Dec 2014 06:18:59 GMT
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: text/html; charset=utf-8
Content-Length: 0....
GET /cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank HTTP/1.1
Accept: */*
Accept-Language: en-us
Pragma: no-cache
Referer: hXXp://ui.ptlogin2.qq.com/clearcache.html#hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
If-Modified-Since: 0
Cache-Control: no-cache,no-store
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ui.ptlogin2.qq.com
Connection: Keep-Alive
Cookie: login_param=appid=10000101&s_url=http%3A//show.qq.com/inc/loginto.html%3Fmyurl%3Dhttp%253A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank; pt_user_id=674337654367558593; ptui_identifier=000DB209E3A7BBE5C30E178284F064C14777F5239E6F84101A030D93; ptui_version=10104; uikey=66d7571f107441eb9ded2fbf721484b89c87c2db12000383af2ff0ac4790755a; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN
HTTP/1.1 200 OK
Connection: keep-alive
Keep-Alive: timeout=50, max=1024
Server: QZHTTP-2.38.20
Date: Mon, 08 Dec 2014 06:19:00 GMT
P3P: CP="CAO PSA OUR"
Cache-Control: max-age=86400
Set-Cookie: login_param=appid=10000101&s_url=http%3A//show.qq.com/inc/loginto.html%3Fmyurl%3Dhttp%253A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank; PATH=/; DOMAIN=ui.ptlogin2.qq.com;
Set-Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; PATH=/; DOMAIN=ptlogin2.qq.com;
Set-Cookie: ptui_identifier=000E011DCDB5251EB9A96E244B170DF0BD0309CBBFA412670CB74B340C; PATH=/; DOMAIN=ui.ptlogin2.qq.com;
Last-Modified: Tue, 02 Dec 2014 01:30:00 GMT
Content-Encoding: gzip
Content-Type: text/html
Content-Length: 6168...........<kw.D......B9c..~..........;<2...dN..T..D-......9.&!.
d.9.!;.0@f.$..C a./..........J.n..3....n.{.....*...G.X[..'....@..|z...
..b.Px..V(.Y?"<...c?..yIX.e..\.4d.Px.qQ...k.......V9o..../..0."n..s
..2....Z&.N.t.i&`).--.....jky.\Y..9.1.6...i..ps.......5E..r..eCP... .9
t..E@.(.f..M..zmW...h.A.........#...3..r..l>......3?..mi.jn.M...i7.
...d..H...."...e....z.v........m.`...j*....Wl.4...~...AO.4:...3>...
...Lm"C1U../.]3..0.M.a.L..x..~e...5.M.'....:.^.A.LC.;....#.'...F^1....
.:.Q8..md...PGS...47..K.......5...aq....c....(...$.4.....d...%T....)..
A.AQ.6.........H...........a...Q.'/\.......L.^...k.s..o.:....w....dm..
@7....y.h.K/.......|....MJt....~r....n....c.8.....!.7.M... .(.-.U.....
a.../M..8........}........\.`|...k..@.......}...._..~.(.F..f)..'../o..
~.................v.....M..i......&..........{....w.....;...].x....{.~
.._....e....../....w..'m.}d.a>@.........>...%.z........K..n...{.
..s...w......#.m.....t.&...;{q......7....:......}..N........x...1...7.
.~B[........u..f......W.Q....Nq.^.<>..........'.'..7W.>}~|...
O..Y..6e..dr..K....F...\......8HZ=.z.$..Mp5...HH..........pc.._..v...3
.........".mP.'..... ................O...<........>..~e|........
2........G;Kad....e.*./..p.fXC..%V?:.a...I......Io.m..J......H.......i
.m.....m..&.j.V.Z..(.....e..TO........l...I.`.o..<.4T.....4....7P'6
......S......l.v%f.q).....A...MM..#E..)JE.....B..T.0;}p..J.P|t...^....
l....#....ue.<,..s..K....=....l...5..6.:jwd...q1..v.....I1.L...!.~r
..I.._Z..Tsux..............#...'.s.i.#.Ots.^].e.....k........@.*..<<< skipped >>>
GET /141653471/468X60_54502.jpg HTTP/1.1
Accept: */*
Referer: hXXp://pv.heima8.com/index.php?p=153829341&b=100002856&itemid1=141900451&reffer=&url=http://VVV.cx90.net/soft/qqtubiaoad.htm
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: img.heima8.com
Connection: Keep-Alive
Cookie: hm_uid=1418017991.0507_2309; hm_uvcount=1; hm_uvltime=1418017991
HTTP/1.1 200 OK
Date: Mon, 08 Dec 2014 06:19:14 GMT
Server: Apache/2.0.59 (Unix) PHP/5.3.9RC4
Last-Modified: Fri, 07 Dec 2012 06:37:25 GMT
ETag: "99c0ea-d4e6-72d53340"
Accept-Ranges: bytes
Content-Length: 54502
Connection: close
Content-Type: image/jpeg......JFIF.....H.H.....&Exif..MM.*.............................b......
.....j.(...........1.........r.2...........i....................'.....
..'.Adobe Photoshop CS3 Windows.2012:12:07 14:26:54...................
.....................<...........................................&.
(.........................................H.......H..........JFIF.....
H.H......Adobe_CM......Adobe.d........................................
......................................................................
........................................"................?............
..............................................................3......!
.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE..t6..U.e.....u..F'..
.............Vfv........7GWgw........................5.....!1..AQaq"..
2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te......u..F............
...Vfv........'7GWgw.................?......[..F..%.....g..w.....~.`..
..,....qd...._.o..........r.l.N[}0.........,u^.../...."..2q..y6...^..0
Vl$.......7..,..1O.|..Jz.1...^......c.HX...}6../C..~ao.....H.}.m..Y...
.6....w5......=m>...>........,h.*....Z..71.;..cq.;......~...8..&
gt;.2r,.e.w.}..k.l`uVT.......T..G..MG........?k.G.`%.!.(.v\..~...q..@.
.q...fGo... .......p#..w...w.b.....}9ma}.....A;w...m.V#u7.U...l.\.[&.
..2...............K"....S=..-}y...A....UN.}/.#_..G.M.. ..2..#..B....8.
.yz.~.>_o......<r...r.................Hm...{..;`?.sZ....c...?G.
_.h....Y...]G.L84I..?........6[..h...=.i~-u....fE_j..E.Q.W...[....Qe..
n.mm....f5.....VS[../[email protected]?......~.c<<< skipped >>>
GET /clearcache.html HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ui.ptlogin2.qq.com
Connection: Keep-Alive
Cookie: login_param=appid=10000101&s_url=http%3A//show.qq.com/inc/loginto.html%3Fmyurl%3Dhttp%253A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank; pt_user_id=674337654367558593; ptui_identifier=000DB209E3A7BBE5C30E178284F064C14777F5239E6F84101A030D93; ptui_version=10104; uikey=66d7571f107441eb9ded2fbf721484b89c87c2db12000383af2ff0ac4790755a; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN
HTTP/1.1 200 OK
Server: QZHTTP-2.38.20
Connection: close
Date: Mon, 08 Dec 2014 06:18:59 GMT
Content-Length: 934
Last-Modified: Wed, 03 Dec 2014 07:46:59 GMT
Content-Type: text/html
Content-Encoding: gzip
Cache-Control: public; max-age=86400
Expires: Tue, 09 Dec 2014 06:18:59 GMT...........U]o.E.}N......5.......NU.@*%.j..D.....N...3...../..U.K.B ..
..A%J.}...&....]...Q.X.=;s..w..;.......oo.H'1i........J.[mQ..m..mow...
..I.*..HYL..;.."...Q:..... d.z......r1tt...:.6...Y.a...9'N.^.....,0..h
F...Oz...Z"..j.;<....S..0......1.@7{:t...5a4.1l...m|........;N[....
.....|..4.(...0>.y.....G..~......./-...7.".)...G}.......E..>...H
.....L....w..U.Z.....S`W....,..'S$...~d.Dq ..w....UZ.Nj...=..\B(.w..J.
...X?.".3...Pq........b.......L..s.9...v.$...K[.....l.F3..6.2...X.:Nky
H.2)-.0 ..;......F!.s..."b#)...J.....?...I~&......{...k..U.|.5I<.me
..7M t..l.r...3L.g.......T.E..........!./..L......'.<.?......3l...=
}...E..|...-..z . [email protected]_.....7.(...>z....9d%O.c............
]...C........R).9..9.1..........2..6 `.rA..d.............e...m.]GN..r.
....<.=......SYr..{.g...}.J.V......_3\,...Lk....7...¬.u..r....9..
r.... .2.....,....n.T...R...[......z..%O.vmy.....C........f.>=....{
.m.fU/......w!&(v...7Q.N.....f...y.m.)..kR........
The Trojan connects to the servers at the folowing location(s):
.text
.rdata
@.data
.rsrc
t$(SSh
~%UVW
u$SShe
user32.dll
User32.dll
UxTheme.dll
{A0005538-9391-4dd9-B4D6-8EB7B9360F08}hXXp://world.show.qq.com/mall/inc/item.html
hXXp://wenwen.soso.com/z/SetMyCommonNew.htm?ch=new.gr.dh&ch=new.gr.dh
:hXXp://pay.qq.com
10665999
10660127
10661700
10666226
10661700
10666226
1066170035
10660127
10665999
1066170035
10661700341
10666226
10668828
10665999811000
1065710141000096
10661700513
10665999501000
10661700501000
1066622637161
1066170015
1066170015161
106662263000
1066170035813
10661700896
10661700341
106659993607
1066622685
10666226396 >
10657101410000915
10665999801
10665999381
1066170035617
1066599935617
1066170015
1062170015
10625700
10621700
hXXp://bd.qq.com/
hXXp://bd.qq.com
hXXp://service.qq.com/
hXXp://VVV.paipai.com
hXXp://client.pet.qq.com/pet.htm
hXXp://pet.qq.com/vip_get_pet/vip_get_pet.html
hXXp://act.pet.qq.com/pet.htm
hXXp://115.com/file/aqab99ht
hXXp://115.com/file/aqab99ht
VVV.cx90.net
KEmulator.exe
KQQ3_Common.jar
.QQLive
hXXp://live.qq.com/download.html
hXXp://my.paipai.com/cgi-bin/myppindex/buyer?PTAG=1015.33.1
#01 10 1
#02 500 9
#03 1500 25
#04 6000 100
#05 18000 300
#06 36000 600
hXXp://u.shurufa.qq.com/rank/pinyin_rank.html#
20149999
hXXp://soft.baidu.com/softwaresearch/s?tn=software&rn=10&wd=΢ÐÅ
http://pt5.3g.qq.com/s?aid=nLogin3gqq&auto=1&s_it=1&g_f=286&sid=AajEsQr7RNgOgjfiIusDTy21
wapex3.0.exe
wapex2.0.exe
hXXp://seller.paipai.com/remind.html?PTAG=40012.1.16&QTAG=3&LOGINTAG=1&CacheTime=1318738727
hXXp://shuqian.qq.com
hXXp://shuqian.qq.com/post/?1318738032
C$%cmb
.ppM|
aZ.mO
%-^
.hk;~
KERNEL32.DLL
COMCTL32.dll
GDI32.dll
MSIMG32.dll
MSVCRT.dll
MSVFW32.dll
USER32.dll
SkinH_EL.dll
hXXp://mq.qq.com/pages/open/open_choose.jsp
hXXp://imgcache.qq.com/qzone/web/load_login_3.htm
hXXp://imgcache.qq.com/
k%UPp
fg.VG
%C',@
>Ùd
\_temp\o.exe
`.rdata
KERNEL32.dll
MSVCP60.dll
WS2_32.dll
_acmdln
%d.%d.%d.%d
User-Agent:Mozilla/4.0 (compatible; MSIE 5.00; Windows 98)
HTTP/1.1
{Konline_1A4F0F3B-5516-4338-AB9A-3A562A2761FB}HTTP/1.1 20
hXXp://bo.duba.net:8080/pagetracer2/duba/__utm.gif?
E:\KINGSOFT_DUBA\Build\Build_Src\kisengine\kis_2011_sp4_fb\product\win32\dbginfo\konlineinstaller.pdb
Thawte Certification1
hXXp://ocsp.thawte.com0
.hXXp://crl.thawte.com/ThawteTimestampingCA.crl0
hXXp://ts-ocsp.ws.symantec.com07
hXXp://ts-aia.ws.symantec.com/tss-ca-g2.cer0<
hXXp://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
2Terms of use at hXXps://VVV.verisign.com/rpa (c)101.0,
/hXXp://csc3-2010-crl.verisign.com/CSC3-2010.crl0D
hXXps://VVV.verisign.com/rpa0
hXXp://ocsp.verisign.com0;
/hXXp://csc3-2010-aia.verisign.com/CSC3-2010.cer0
<VeriSign Class 3 Public Primary Certification Authority - G50
hXXps://VVV.verisign.com/cps0*
#hXXp://logo.verisign.com/vslogo.gif04
#hXXp://crl.verisign.com/pca3-g5.crl04
hXXp://ocsp.verisign.com0
hXXp://VVV.cx90.net/soft/qqtubiao/set1.txt
qqtbset.ini
hXXp://VVV.wz123.com/?cunxinsoft
hXXp://s.taobao.com/search?q=QQ×ê&commend=all&ssid=s5-e&bcoffset=1&sort=sale-desc#J_Filter
VVV.cx90.net/QQtb
KINSTALLERS_66_109992.exe
%du2$"
.unOZ
@hXXp://pay.qq.com/
name="loginUin" id="loginUin" value="
hXXp://cx90.net
hXXp://xui.ptlogin2.soso.com/cgi-bin/qlogin?domain=soso.com&lang=2052&qtarget=1&jumpname=&ptcss=¶m=u1%3Dhttp%253A%252F%252Fsobar.soso.com%252Flogin%252Fok%253Fw%253Dhttp%25253A%25252F%25252Fsobar.soso.com%25252F&css=&mibao_css=#1318736267718
hXXp://x.soso.com
&ADUIN=947562580&ADSESSION=1318726285&ADTAG=CLIENT.QQ.3493_MyTip.0#
hXXp://xf.qq.com/?ptlang=2052&frienduin=
hXXp://m609.mail.qq.com/cgi-bin/frame_html?sid=BlKpbMSa4pgCKhJc&r=c4f5ad0c9a3baa2d9a7d5f6d74cf2ac7
hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
hXXp://video.qq.com
hXXp://boke.qq.com/myhome.html
hXXp://xui.ptlogin2.qq.com/cgi-bin/qlogin?domain=qq.com&lang=2052&qtarget=0&jumpname=&appid=10000101&ptcss=undefined¶m=u1%3Dhttp%253A%252F%252Fshow.qq.com%252Finc%252Floginto.html%253Fmyurl%253Dhttp%25253A%252F%252Fshow.qq.com%252F&css=&mibao_css=&s_url=http%3A%2F%2Fshow.qq.com%2Finc%2Floginto.html%3Fmyurl%3Dhttp%253A%2F%2Fshow.qq.com%2F&low_login=0&style=11&authParamUrl=&needVip=1&ptui_version=10029
hXXp://show.qq.com/
hXXp://VVV.tenpay.com
hXXps://VVV.tenpay.com
hXXps://VVV.tenpay.com/cgi-bin/v1.0/manage_icon_page.cgi
hXXp://qqring.qq.com/
hXXp://style.qq.com/qqring/
hXXp://VVV.pengyou.com/index.php?mod=userinfo
hXXp://baike.soso.com/mySet.htm
hXXp://pay.qq.com/service/service.shtml?sid=19
.hXXp://s.taobao.com/search?q=VIPͼÊé&keyword=&commend=all&ssid=s5-e&search_type=item&atype=&tracelog=&sourceId=tb.index&rt=1318737217953
hXXp://city.qq.com/
hXXp://city.qq.com/user/rm.htm
hXXp://city.pengyou.com/user/user1.htm
hXXp://VVV.cx90.net
VVV.cx90.net/soft/qqtubiaoad.htmr
!$#*8!$*
!#$&&')!$)#$%
#$$())'((&''
!$#*8"(4"'1!%-!$* "&
" !## 9#*7"'0# 8")4"(2 #(!$)#-<#,:!&- #' $)
5==3::<<
%D|*I
.Lr@i
>>=11333
!$!$ #*8"'1!$* "&
" !## :# 9#*7!&/"'0#,;")5")4"(2 #(#,:"*6 "% #'
,3=!% "%
,>V-?W1?R25936:!Ck.Px,:K.8D
"@bÌ,Ii.Ll1Pr0Jg}
*Ov-T}9`
33434735:38C36=38B3593462;L3;J3;I39D37>2;J3;H3:F2=N26<37=358 :L.BX59=357345.G[
VVV.cx90.net
411127677
1.2.18
inflate 1.1.3 Copyright 1995-1998 Mark Adler
%*.*f
CNotSupportedException
commctrl_DragListMsg
Afx:%x:%x:%x:%x:%x
Afx:%x:%x
COMCTL32.DLL
CCmdTarget
MSWHEEL_ROLLMSG
ole32.dll
__MSVCRT_HEAP_SELECT
%$%,%4%<%
S%T%U%V%W%X%Y%Z%[%\%]%^%_%`%a%
b%c%d%e%f%g%h%i%j%k%l%
W%X%Y%Z%[%
Z%T%i%f%`%P%l%
%$%a%b%V%U%c%Q%W%]%\%[%
%<%^%_%Z%T%i%f%`%P%l%g%h%d%e%Y%X%R%S%k%j%
%,%$%4%<%
eZl%u
Q.YeY
R:\Sg|p5rL
e$e#e e4e5e7e6e8eKuHeVeUeMeXe^e]erexe
s4s/s)s%s>sNsOs
qq!r!x!/!L"k!^!-!y"_!`!!&"&$&%&&&'&(&)&*& &,&-&.&/&0&1&2&3&4&5&6&7&8&A&B&C&D&E&F&G&H&I&J&K&L&M&N&O&P&Q&R&S&T&U&V&W&X&''!'"'#'$'%'&'(')'*' ','-'.'/'0'1'2'3'4'5'6'7'8'9':';'<'='>'?'@'A'Q'R'S'T'U'V'X'Y'Z'['\']'^'_'`'a'b'c'd'e'f'g'h'i'j'k'l'm'n'o'p'q'W'>!=!B!F!G!H!I!w"x"E!D!s"l!m!("n!r" ","*"-"M"N"O"_"P"`":";"]!e"g"g!\"J"K"A"@"i"j"h!h"f"b"b!a"e!f!c"d">"?"<"="]"^"!(,("(-(#(.($(/(&(1(%(0('(<(7(2()(>(9(4(((8(=(3(*(:(?(5( (;(@(6(#"""%"$"'"&"!"~!{!}!|!~"z!y!j!i!v"u"t"!!"!#!7!9!:!;!R!S!T!U!V!W!X!Y!Z![!)"."L!M!A!!$"$#$$$%$&$'$($)$*$ $,$-$.$/$0$1$2$3$4$5$6$7$8$9$:$;$<$=$>$?$@$A$B$C$D$E$F$G$H$I$J$K$L$M$N$O$P$Q$R$S$T$U$V$W$X$Y$Z$[$\$]$^$_$`$a$b$c$d$e$f$g$h$i$j$k$l$m$n$o$p$q$r$s$ !,!5!6!!%"%#%$%%%&%'%(%)%*% %,%-%.%/%0%1%2%3%4%5%6%7%8%9%:%;%<$=%>%?%@%A%B%C%D%E%F%G%H%I%J%K%L%M%N%O%P%Q%R%S%T%U%V%W%X%Y%Z%[%\%]%^%_%`%a%b%c%d%e%f%g%h%i%j%k%l%m%n%o%p%q%r%s%t%u%v%&!<!3!4!l0zC7<|Kf>0;e><2TI?M"P/1n3#P$@BRV5:Jg>>NBJ$PfC%Pz6&P]40Cg<'P(P)P5GW57GcFC83KIi*Ph> P52e6p8iL&VpM}FE5,P-P;N=MhA/Pv;sF2P>1_8^8f0KOJO3:!03P4P5P4K6Pr8g0rK|5}5~5bD<N7P8P9PM?:=N?>P<P=PX5#:p2;P:P)JF;E;>B?PUIg@8!@PBPeBaNJ0AP>2D6gCo7CP$Gk4DPK0`8l4zI2HY5q2gPAElGFP<HbN-?G;w;@2QD"CJPL0cD;=4:$MNB?2IP>MEPGPn:HP$UPPSPQPB2;JKPOPs8H;&4TPLPcNx;MPRPUPNP!6M0"6A2%UyKnIt8/?7NXJ87½2S=YP^P\PWP/BZP]P[P]JXP.?sK_P`P$=mPPG6IhPpJ62lPfPoPRAD8\GG`nP]EcPv8u8aPZ<iPoJMCePq7bPjPdPQNkPAOf6p7pPqPuPN0PJtPsPwPvPdDr7xPE<&BeDv6yP65zP|P5Kf71;wH{PE:CM~P#Q}PD:}=97$QO6!Q"Q/F|A#6MK%Q=N&Q)Q'QNA(Q*Q,Q QHJ75.Q/Q/2-Qt<2Q1Q0QVP3Q~=4Q%MYL6Q5Q8Q7Q9Q:Qt058;7<={C$6h@w8n9<QHLFEy;;Q=Q^Eu3>Q~F4A@QAQ,Hx8;OBQ&6<J6Bq65Es7CQDQbF_1GQ}:FQF:HQnfIQAKJQKQLQi>L<'4OQMQ=LNQZIPQQQRQ_EVQTQUQSQc:WQjLdNXQ(@YQZ=ZQ|C?N`EER[Q%tE6\Q^Kh=|B^QdF_Q`Q.3aQ'6LFz1P=!HbQaEO?cQ,JZ@"4)4dQfQ:7eQsNi==HLJgQxMhQiQ~EjQ)@~:t7kQI;o9fDmQ'Bo:nQoQ0AlQqQ6Kd9pQu7^:mGtQrQ{Ij>{Qd3uQsQOAwQvQD3`7|Q-NxQ}QzQyQONy8C2tNu=XEe9"R#ReN O%Rz8$R/3&RVK<D&MYJ'RUp0F(R*43L!>)RgJ-R*@*RP6 R 4.7.R/R0R1R[<{8^LhLwFqJ2R3R5R7R6R8R=2LK|:9RYA">)6:R[H;R<R=R>R$Ih6e0?F?R==i@AR@R#>a8CR>HDR\H4BnB(6nF1CnGNKFRj@57GRHR,1u0m4(BQ5qMKR72JR*6LRqLMRRN|868NRPROR_?91^1QRRR78SRn52;TRtK5:Z5'MPA?H}<G=h<u<v=@HWRC1QA}8E8g6[R!C~B 6$>\RZRD2fB8<K;&1p3f9J;]R^RI5F3g9H5_DF>L!9yMGE~8/7gRc6JK]HfR^4aRbRdReR[5a?-JcR_Rc8`R$OrJhDb8p9hR]FlR~<v<oRmR#LjRsRnRqRF8?LrRtRvRp:BOkRiRuRpRxR#SzR~R!S{R>Si:13yR%Sv0$S%0JI"S|RwR}RH:&Sw0/S'S(S%>iK-S,S/E.S S416:0?)SbE*S"04S#M'>:S9S0SCB1SoB6S&>3SdL<77S8S5S;S2SASFSBS=SGS1AIS"9?S}CCS<S-4n4e3DS@Sv7JSHSSAJ5,6ESt6D1NSLS'TQSKSOSMSL;PSSSXSVSUS2CE2RSTS(>31WS^2bS|>^S\S]S_S=19AYSZSz3aSo4dS`ScS.JUF8HfSeSE3gSjSiShS9GkSlSnSmSpSsSqSoSrStSuSvSwSxSEQ|<M;s2x0DCyS$:O0^?zSG8q9|S{S`J}S!T~S"T#Tw7`1$T&T%T(TZE)T50_:=7OC*T T-T.Td:Q67K,T/TA:#93T%:3C0TZD4Tb?2T5T?76T7T$9@39T:T;T8T1T<T=TdKk>?T@T>TBT8Gh0VICT}>9<]Gp4k:YK2Fx7OBATDTDBETFTHTiD.4!ta1sJl>HEf:NT=J]Nt2JT:AMTcEIEdE9HMDI:ITv16EKTGTP?OTN=-6PThJ}AFDRTOKSTXT/JWTQTTTVT&:IJYTECu2m>[TZTh9\T^T]T`TUTbTaT_TN;Q?TAcT<@m0dG[DeTdTfTgThTiTQJjTF2kT<M03IRH=?BlTkL4LnTgB7E@BWIoTpT{1:<qTP0rTsTb1q4`FtJwTUAvT@7[KuTeEyTxT{TzT|1|T)>~T%C}T3Jw=[E!U%9"U!G^HQL%G U85EM/L,V#U&UEB8KJE'UeKJ:*>(UP;O;90H8 @Q0,U-U*U81/4)UEL1I(0y0Q;R0#02U0U<L3U1U/U1?.UZJd87U8U >4U,OLG6U':9UXI:U5U;L^G;U2I<U@U=UG2?U;<>Uy7LUEUBUdCAUCUDUFUGUr4IUHUJUn>MU\DE1KUNUOURUPUQUR;SU&9TUz;8BUUVUZ;'9RL(5I8WUX3XU9BYU#VZU[U\U^U_U`UpB'1i<B0WA045<(9fE!=14hCjD8095uJB<R5k@<<(MaU\5K:23c1,>H2bUFMI=d<cUs4RF)LdUeUYIgU(4w6fU242?kU!;I2jUhUlUiU GM\3?mU@NnUpU~CoU#@{;PBw<uIl@M<qU->rUsUS0:BR?tU3F.>/>uUm@0>vUwU`LxUF6"=yUzU\<,?tFT?xH"GI6{Uo5|U~6OF02S;}U"V!V}6~U8E0BKEH<XAzM$V%VVF3;'V(V)Vt4*V V,2;Ad4-V(LRBY3/V1V_4.V0V3V2V4V5V=F.6e26V;V9VwJvJgE8VT=7Vr?<Vj:BVCV=V33>VGVFVEVAV@VDVxJKVHVJVrMIV?Vs?LV7:MVNVQVPVOVhE:VWVSVRVTVUVXVfNYVVVZV`4[V]V\V^V_Vn@#=d=cA)98:*9p5`V9:J8aV&LCGbV 9,4'CR6T;[IAHcVu4fV!DeVdVgVkDc?U;J@SB"5"DhViVo>9KlVkVjV}IsVZKmVoVkKnVpV(HqV>JrV34?J/GtVuV,944vV88DM)Mv4xV#D-91>_H2>x=lDyJ9E.9\IyVYEB:K8mDC0n=/9GMzV{VQG|VwN-O~V}VG3!W$W%W#W@I3>'W&W"W(W)W*W-W W,W.Wd1nD/Wz7v26G0W{F[J1W.O2W@J5W!P1P0<uF6W]5$Dz07W&J09PCoDoL98L88W9W?We<%D/6:W IFC;W<W06=W>W@WvEAWBWCW4W3WDWA7'IL:7I&DKIEW4>F1FWGWrL`HJW}1,@IWHWB7TBNWLWKW'Ne8y=MWLE>=@FQWPWOWRWf8SW|I[=TWyHAF'D0EUW 54?,Iw4&GVWV;:K;K~1[WiCXWw2-XZW0GYWWWz9]WcWiWaW\EfW]I`WeWgNW;UB^W^5hW-@e1bWx2gW16dWjWlWvWtWqWpWxNrW2619z=yWkWoW_Wz2sWuWQC(:82mWxWwW36)Bf3C7nWzW}W!X=<'XpD{W%Xy2#X$X~W"Xg8*M54Y1&X:G-0aH\W,X0XeL)XiE.Xp>/XWFGO X1X{9K@T0*X(XZA|W4;FB=X[A8X5X6Xf<9X<X7X$=:X4X|L{L>X?XU03Xr6&064;XCXBXGXHXFXIXAXEXJXKX@X|;DXVB292X5?XXiJNXOXPXWXVX}K74TXE743QX8NSXV0UXLXRXYXD7MX]M M\X`X~AyNaX^X[XZX_X0J4FF7bX]XcX{712kX84iXjX):hXfXeXlXdXnX{2pXoX(DsXqXgX|7rXvXuXwXtXxXyXzXjJ|X{X?=.@f2|2}X?0L@~XCl!Ya7"Yo@#Y$Y:5%Y&Y'YWBM8aL<Kj=(Yp@=nbHj<M:)YGB'JqB,Y*Y-Y Y.Y1J70^IcH/Y2Y5>;50Y7Y6>1YDG^M3Y4Y8YjE5Y39^@FY4HrBdH-ZzJqDuK;Y!2jCDY4C>YEY@YGYCYBYoG<Y}2:Yq5sB6Y9Y49[@7>AYRGr5H3g3!?IYNYJY}7OY";i9&==Y};LYX;MYD0HY)Ds546KY'0C:6?rDTHQY^A*B ;RYTYPYaJ=D\A{JN<`Y_Yx?~7YY9>hF1GWY]Ax<\Y8>VY[YSGUY!7]3]Y NN:5CZY\@59d?f1<AXYE5G7OD^Y_AaYcY7BiYdYfYAIsDgY,MHM94.0eYbYx4g1hYIMlY;BsYmYjYqYSYnYrYBHkEkYoYH7q:]@wY&EtY`KuYvYNL"@b7}Y5;zYyY2G5F1E{Y|YoIEG#;q@PKI3%Z~YJM'Z#Z$Z`A"Z?Y&Z!Z Z,Z'E.Z$;)Z<5/Z(Z3Z2Z1Z4Z6Zq>5Z9Z7Z8ZpY;Z:ZxY<Z0ZY;=Z>Z@Z?ZAZ~269|J/@N8CZFZRI_5EZDZTGGZ56IZHZ:46;XFI7t?JZ0@(E_IKZLZMZ8J]UF@LIX:eHCHMEANOZP<PZ60T6M@`IQZB;GC[;7?RZ}Jw1\;UZSZVZ9NTZ{@WZ2BXZz4ZZYZ[Z\Z{4|F6Cl5];aA\=00]Z"2aZ79`Z ::>_Z;>@L*:W0N@fZ1@G1U=fKr:<>'@eZcZdZkC&[jZ~;89hZiZ8?gZ/;lZkZpZqZmZ"3nZoZUHaIJ7rZ2@=>RCG6sZwZK2tZvZuZk=HCE0xZyZ*DqNC;kJ=K"[{Z~Z}ZzZ![^F|Z#[l=$[KMxG%['[([)[J6H199*[ [q=bAXR>A=AXBG:rPn7-M~J~I,[s:?D-[/O>K D.[|4/[0[ZL$LvK\K%;2[k<QK4[7[6[y4`53[5[8[y?{MI0`:<B]<s>;[NE9[ B:[r>]L<[=[hMB[:9UG?[lE^ZbZO5GGA[>>DHG[zH>[D[C[O@mKSNgKL2^;HOF[u?E[@[O8L[J[M2H[N[T[HBAJV["IU[pG?K;4w@@=SD.MQ[P[R[O[W[M[K[S[I[lCxLF<t:::oKA3NDJFI1r@4@*7Y[;9|3[[t3a[^[s@K3,:J3O:\[e7K7mEZ[F0][_[M6,7<4K5b[y:qK7;c[0Io[32d[u[e[BNl[_Gt[g[40i[<9k[j[f[q[?>mTh8|Mh[tD#3-:`[p[a3n[r[nE~42\ILw[}4~[@K!\#\'\y[*CoE \|[(\"\9?,\3@*\=4POv[&\X0x[:L}["?GDs[%\z?/\q3!81\z[0\)\{[-\.\?\NF$\;\=\XDLMvI8\JB>\?A5\B\A\oF@\jFD\7\H6:\]=`G<\K64\6\3\0OZ39\C\53g:]1T\1OW\:?V\U\R\F\c\E\X\P\K\H\I\Q\"tN\=9HDdAL\G\J\MMjKO\Y\a\Z\g\e\`\_\PDeA]\[\b\h\uHn\i\l\f\tC8I\\d\@>OLx\k\"8#2_3S\A>p\w\y<r3.Cm\r\v\66L5t\!5KFs\u\o\q\`3IC|\z\i8y\!]X[{\}\~\,](]m[']&]#]j\%]$]*]&O-]{6)] ]'H.]2]/]sM0]^\3]4]516]g7!<U6$2_M8]7]:]=5V6>4=]<]>]N27C?]?4A]@]B]C]D]_;5@!:pIbJDOu;P:rNE]F]`;G]H]J]I]XK^=l<D;K]M]#?L]N]O]P]Q]R]T]S]U]%2JCV]&;L3W]BELT#5X]Y]lJhKGFZ]fH{HSL[]]]\]_]^]a]a;1Lb]c]$5d]f]e]e?9IJ1EHuDA=a5FH.<h]@4x1rFg]>9SCi]q]j]ABb5r]h7%5p]n]k]`M@DYFl]t]s]#7-2;:m]o]WKtBwK|]}]O2(J}L!^#<B>x]~]h176u]z]t@qGgHw]!Ky]$^"^{]"KHGc5%EmC%^#^YBv]K1NM0^/^v@,^lM6F&^EDL1?9)^'=.^-^(^ ^h3*^IG.Nt>u@6^4^MI1^3^:1@92O=3bIaM$3;?5^:^C>0M7^2^8^^NsEBF63U1>^A^CNdMH^B^?^TNE^J=G^L^qEJ^D^8CK^@^F^M^|0C^N^<?_=%J.:;^I^:E6@i3Q:D>=^B=L7<^R^m=:8a^[^t5OEV^_^/02192X^,BO^Q^A9b^]^U^\^ LZ^^^P8E>9CT^/MW^P^rES^Y^QO><~Kc^.Ho^;8`=e^/NB9r^n0p^d^j^l^OMg^.Ei^q^k^GLf^"<~^j3h^m^n^lBZBv^|^z^)E#_w^x^`^y5:I?<w93Ot^"_i1fAyGA4zN!LRD{^}^2A!_y^s^C4i7/_*_x@c3a=3_,_,D)_YDL_&_%_._(_'_-_!@$_0_1_B46_5_7_:_CE4_8_c7yB2_;G9_>_<_?_B_;_j9(G9^tM=_A_uB@_ _ioE_I_G_C_D_H_F_NIN_K_J_M_TFO_uCmB%@P_R_Q_u^S_gFT_P2tE=5^<R:'Of?j1V_U_Y_:C\_W_[_Z_@EY0uN^_(1`___]_X_#Kb_a_k1d_2Jc_5LG>3AF>{Nj_y@f_k_l1i_aGe_h_H>QHl_Q<z@o_g_'7m_PMp_&tO=q_r_.Gt_u_3GuEw_y_UNv_x_m1s_[Sz_gA8;|_{_$?YR}_!`n_~_"`zG#`$`%`&`^D(`'`)`*`_<cIlL `,`VA$<-`.`/`RJGH0`WG-D1`g2m5FL6L424ORK*J7@2`CF#83`T:5`4`6`7`8`>59`:`$8HH<`u>;`86=`?`>`@`Q8A`i6@A}9C`D`B`m<HF96F`,CE`5ObGI`K`H`TLJ`L`DNP`O`vC-G%8N`M`1M2MQ`n1v9b;R`S`U`C=W`V`X`M3Z`Y`\`[`<8(NL6&2j6a4hN^```a`Q2]`9;AD_`d`n<b`>7IHc`~`i`=8e5f`}M0NvBh`j`VNW6|HJGk`m`p`l`o`j8M1q`p?n`\Nt`$tr`u`g`s`<:v`w`~Mx`y`e`z`D4%<{`|`}`;1!a;I"a$4#a$a%a'a(a&aSI*a)a,a a-a.a0a/ay92a1aE4S?<E3a8@:;y14aQMcJ5aDE3MC9=?KC4R.Dh26a7a<a:a9aBZ&38aZ0*HJH1N=a;a\C&@ H-I?a,NM7@a>aVHAaBa[0v>GaDamFCa&5JaEaFaIaHa%IBAAA?5KaLaMaOaNaV1WahHQaSaUa>?VaTa@<PaRaBII>YaXaZa&</:wE[aKD]a!N\aiAbadaeaTCca`a^a_aaahafagaiakalamanajapaoaqaENtarasab4~LJJvauawaxa|ayaza{a}a~a!b"b#b/HPE$brG4I%b&b*E'3D9'b(b)b); b*b,b-biH.b/bis0b1b2b.;3bVG_KN1W14b6b5bpE9@9]7bAL8bF4WH9b:b;b\LUL>DjA=bb=J>@b?b>b}HG4)8FbCb??2LBbDbEbAbGbHb/Dc4eCIbJbMbg?DFNbSKKbLbQbPbObSbRbTbVbUbMJV=FNWb7FXbYb]b[b\bZb^b_b`bab7LbbpLcbNCjGk6;Cdb:6P@eb=:fbgb&8U:ibVEV:N5$KKGWE\9kbK>2NE9'8#Hmbobk8nbvDqb73lbjH01l:ROpbrbKJY@tbubsbN3{bzb'<|bwb}bxbXHvbyb"c!caK~bk0$c#cL>ÌA'c&c(chbjb*c)c(<iNR< c77@5'5c;4M1c0cDA-c/cK=@?.c,c*GM><IW:xE2c3cIcX6=O5A4cR2wD!J5cz56c8c9c)G:c;c<cY6S2EF(=d;=c)=J2CI>ckHEAAcBciGA??caC@cN>\0)5CcxDDcG@-L#IEcFcUCGNHcGco<Jcp0McKcT2N7LcF9r9fJNcTKPcQ@O1:2,0OcQcRcw>ScO3Ucj7f5Vcu6Wc|@MF`@u:XcbCkAZc\cYc[c"7]c&7g5RM_c`c.1ccv3bcacec^cfc)NgchctTjcickclc5NmcopO>ncocW=8Fpc(Cqc<Crc%6?Q]C3<H4sc"dvch5uc$dtcP>xcyc Ezc^3Z?dI|chBwc{c}c{:&d.I&HyEZ6%d#d5H~c^C{EzEv:8d(d*d-d.d d,d)d'd!dOJU25d2d7d6dsG'L;;0d9d4d3d/d1dI4=C}@"H>d$Ha@;dOH?dSJ[C:d<d=d@dD<FFEdDdAd6OJdNdKdGdHdMdBdURIdCdLdRdJ4OdPdQdTdSdvHUd|NmJZdWdVdR@Yd[dXd_d\d]dFd^d`dadFJbdbLN6)7cd4Jh?0Ldd3NtGFA4GM=@0idgded!4Q>jdhdfdndmdldkdodpd:@qdsdrdR88Aud|Etdvd5JlAG9wdHNydzd{d|de;}dO7j5*5!esLH9~d$efL<G3Ic=#eS<I9f;i56J"eGABKw:g;]D'e_NY:(eB?*eR>0:)e*=>8HA%e e&eP7.e2ek7-e6eJ9mM<03ek50e1e}E/e,e(3d@(88e5e7e4eQ73B9enAFeBe<e@ez<]0;eCeGeK9VLVD=eEe:e>C?e=0JL>e[6lHmAPNo=neHe~@DeIeKeyDNeJeTJK4KL^0Me}NLeo1lFOeVePeWeSe{GJ<UeReXeQeD=%KL=Te`e\e_e]eae[eAeS@KH^eYe!AR7 =%?6AdefegeceeeZebejeiezK 7helekeoeqe<;mereseteze;Eveuewexeye{e|eL4}e~e!f"f#f$f%f&f(f'f)f*f f.f,f-fa:S7VC3Hp=MGmH/fmX0f2feM1f4f3fSM5f~H6f9f8f7f:f27"AA5>f;f<f?f@f=f)1'2BfCfDfbM,=FfEfi?GfHfIfe4M4JfKf]KcMTM7OM9NfT<MfOf)<QBPfL9WLQfRfSfTfUf*<mLWf?CVfYfXfZf;@[f\f9J]foA^f_f~Nbfaf`f0Dcf&?dfef8Offgfifhf%HyF>O)HkfS>*IlfjfN4T8h;nH*8CKofmfN9O9i0h:YG_0tf@CXG[Bvfrfufpfsf&KU8}0qfxfyf9F;6&g=Gi;<[email protected]@S5zf|f{f}f&C>G1D#g"g~fU?eI%g$gP9SO5g)g*gp<(gx9'g g2D"J#A\B/g0g,g-g.gQ96g2gfIlK(I1g4g3gDK7g8g7A9g;g?g<g:g?G=g>g22Eg@gAgBg!BDgCgFgGgHgC?i2IgWN <-=j;WCJgKg11LgMgNgOgPg=6*ZQge@RgK<Sg0PTg^J\4$AX=qI.=UgR9VgLHdgXgIBuG?8Wg%AYgzD[gZg]g\g^g`g_gO4agbgcg1:INeg'?p1fggghgr0igjggIG<lg)320kgngNGD?V2'K]7\6mgj2#4q1rgjN]BDI~gW2|gzgqgogpgc<l6wCQFQ1tgsgygugxgPLwgX2}3{g}gT7#h,h-h 04hq0 h*h%h$h"h!hcC{B'h&h)hpAU7A1(hS9qA:h;hY2.28h.h6h=h7h5hvg3h/hP41h<h2h>h0h|GiM9hOhGh{?F5]6Bh[2T>EhZ:QEJhnJAhZ2V8)IKh?hHhRhChDh:FIhFh(KLh`0@hNhMhkGTh_h~3bhPhUhnM^hUM*NxCk3rIdh!F10]hYhrASh[h`h,G*0XhahxI\hWhU>/=,<XLGIghphZhw3x>ehjhsAfhmh_CnhVMch83ihlh,Lohhhkh)K!OshzhrhC<QhNJ"Lyhxhthuh61whqhUDvh~0"BCJ{h!iYH~hV>I<#i>6$iyI}hVh|hOO"FsI i1i2i%ivG/i'i)i3i(i,ir1eF-i0i&i&A*i';E?07tLyLr=7i5iNO4iuM6i8i9i<i:i#F;iMH.is==iBitAAi"iCiIA>i@i?i1]"]EiDivM<bFiGiHiW8T5Ji]Qu5:Ns6KiLinCMizF:0c2RiSiNi=;OiBGPiQi[iUiXiTiViWiX<YiACV7B3\i?3ai]i`i:H^i_iHIZHbi}Blihik2fi*KgidieijimikiiiciXCti*Lrisinipiqioif@9Oxiyi!j*?{i~iviui"j\2|i#j}izi3DwihG'j;M&j%j.j(j0jfM3j*j j/j2j1j)j,j=j6j4j5j:j;j*3B59j$j8j<j7j>j@j?jBjAjZiFjCjDjEjGjl7IjHj0=T9'^JjQ=93KjR1W>LjU9Mja0=INjj?UjRjoCSjPj^6OjVj67^B\jXj5BWjZjQj[j]joHYj^j`jS8TjA0_j[:vNajbjuA"Ncj5MdjejdJfj@:#NkjljX>jjgMgjij=@~?hjmj#Jojnjl3 Kpj|jrjsjtjujyjzjxjvjqjwj{j7p(2~j_6}j"k!k$k#k%k1=&k'k(k>@WM)k$JFG*k k 8,5,kk;AG-kP3.k0kwM/kF?1k2k3kQ44k5k6k7kQ38k9k:kr2(?;k<k=k@8{D>kW7V?Ak$F@k17?kwB-5BkCkY>m7Dk,K_@v5uLJAEkG?pCZ>FkIkJk>:BBHk[>>IGkl;S1NkX7n;m;MOMkLk'AM5CO:3\>KkPkQkOkX8@Mo;'GTk@@BC6MWkl8?@SkXkm8UkVkRkb@IF/C]2pHC54D[kYkLCA@R4Zk[?JN@O\kgk5Dfkckkkdk`k|D_k]k!Mp;ak^kekt=A8zBEKZ1b0%FikhkfFmkbklknk,8jkV9U<okXMrkuksk5Ipk`6tkvkzkwkykxk{k1<}k|khI!lY7~k"l#lD5Afy>$ln8%l&l>;NZ'l(l2=)l*l l,l-l C.l0l/l&F1l-K2l3l4l5lZF]>6lk9.P7l8l?I9lAl:l<l;l=lFK>l?l@lBl-3gDiIb:[email protected]_BqH=EFlGKl2Ll(OBDEOq;Kl1B\l(AxFPIOl?;r;^>eG-8NlMljIA<REQlRlX9PlSlTlVl#BUlf4XlWlYl[l]l^lV@O<_lR3`lvAalblkI/5cl6D[1dlq<v?-Bglflelmlklhljlilllw5plW@qlY8nlol)O7D)ArlulsltlYM'Fxlvlwlyl)m|l}l{lzl}D!m%m"m~l#m$m m&mX@(m*m'm-m3=,m.m/m2m1m0m4m3mvL6m5m7m8m:m9mH?;mm6<m>m?m@m=mAmV<Bm0537.8CmpF>EDmGm4<FmEmZ7HmS3Jm\:ImRmLmNmeJKmMmQmOm15PmSmZGXN4=Tm"MVmUmYmAMXmm3Wm\m[mZm2E]m^m_ml9%7`mambmI?cm-<dmem!R~Qfmpegm$C ?@GhmUJTD~9)C*1xKW?^7a6VJimkmjm`2vFlmwG3EmmR=omBL~mqmrmID`BwA(FpmU5ymvm%n)F`Csm~DSEtmxm`[email protected]$Bum)0"OzmaB5=J?|m{mo0}m/I'n[Fk?YCx6&n7M?1WJa2!n"n#n$n;F#Cc0(n)n#t=B*ns1LA/8ZM n,ExAW<,n/ne=-n A*Ad0KN1nrH3n2n0ndcT4nm5n4n6n8MaF.K7nY<8n9n:n!Ej0Y9:O>n47;n<ntIT39M?6TE?n@nAn"ECnBnSFDn6=`<[GqCr<l?EnFn]?GnHnInoM7=KnJnZ9s9@;Nnf=MnLniBo8C@0H9=On_>RnPnQnTnSnz>UnVnWnPHS:a<XnYn$NE=nLLNZnb6[n#E^nx3K?\n]n`DUK|6`nan_ncn_FC3gndnfnbnOoenkNZ8on4Ejnmnknpnqninvnt1hn-Hln`>[9HKd6F=<F-AtnnnsnCL8Dunrn,Aynxnwn/K{=zn_JT1FIrCx5|n]9,;{nm?n?!o#o{>"o$oS6EIb<#O~nx:?O&o%o'o}niFUEWD,oCC(o)o-7 o08*oa>y30o?:yAJD;3.o/oCD-o1o7o:o9o-E2o3o6o8o@6;o5o4o?o@oAo>o=ob>*F<oEoCoDoBoxBFoGoIoU4HozLToJoMoKoLoNoPoQoRoUoSoVoXoWo9DgLYo.AZoDJ[o 3<1W4V4\o]o^o_o`oX4U3^96Hboaoco\1foeodogojoG0holokonomooo.FpoqosorolItouoe:vowoIKKA$0KBxomI{oyo_9zoB8EJ}o!p~o"p!1X?|=Y4#pfG%p"1$pDDMN F|o&N18[My64N(7bB!g&p,3o?V3(p)p'pd7]:c>#1YN p.n*p.p,p-p/p0plN1p2pI@;H}?g4:Mm28=[85p4ps;6p3p(;:p-jVRw?8p%NqF 1c@6<7J@1mNkM;pEE{<<p=pL?>pnN9p@pBpAp?pCpDpzAb2Ep8LFpGp*O1[HpIpJpNpKpLpMpOpD@wLE@PpsHQpSsLLRpSpTpW3VpY?Wp$7Xp\pZp[ps3Yp]p^pH0_p`pd>apG5dpcpbpqk\JepfpgphpipjpZ4kplp#Gnp;2qppp$1A6GJ:D":`9g=\?sprpBMh4RH\F|?NN[7vpupKK,FP1wptpQIjMxpyp{pjB[3\3zpi428j4?E`N\8|p}p~p!q#q"qwI$q%q&q'q)q(q*qtHLf)?25 q,q,R;]SH{0;0t;0K~>-q_L.q\MB1A;/qn20q1q3q4q6q2q5q[47q8q9q:q;q=q<q?qBq>q@qAqCqB6s<DqEqa9Fq>3OGGqHqZCkFIq}GLBX1n6o6sCNqp6o2MqKqLqJqXqOqPqQqRqTqSqY=UqWq35Vq{A38YqMBZq-F[q`q^q]q_q\qbqaqdqC6cqeqfqhqgqiqkqjq|9lqmq<3nqoqq?pqqqrqsqb9tquqvqwqxq1Hzq&I{qyq}q|q~q!r"r#r$r%r&r'r(r)r*r r,r-r.r5]/rxd45!32:1r0r%L3r4r2r5rbK6r{5%O7r9r>0:r J8r;r<r=r>r?rnK-;z:/A@rCrArDrq8BrErFrGrKr*;dBLrIrHrJr_7PrOrNr30ZrVrWrSrYrUrb3LOXrTrRrQr\r_r^r]rII[rs0`rbro3Mr71drcrar-CpKZNerfrgrhrir;Djr7Horkrlr1KDLPFprqr>Fnrmr*2yrxru1vrursr{3rr2<)2c9|r{rzrwr}r~r%s$s&s-1!s"st99L#s2K s's,s)s(s\7-s.s/s*str0saD4s5s3s2s8s1s6s7s:s9s<s=s>sIO;skBm:?s@sAsBsCs48DsEs/<FsGsHsIsLsJs<OKsoNMs[NNs~GOsQsRsPsm9MLcKwV`]{K 2TsP5UsVsWsu9XsT`[LcBYs[sZs\s]s^s_s`sasbscsdsesfsgshs$E]8jsMAksls!Imsns7cZlmpospsrssstspNqsusvsxswszs{sys6N|s}sTc~s*!t!p!s!u!J!K!v!\!$!%!?!0#1#2#3#4#5#6#7#8#9#'!(!c!a!d!)!w!A#B#C#D#E#F#G#H#I#J#K#L#M#N#O#P#Q#R#S#T#U#V#W#X#Y#Z#N!@!O!0!2!.!a#b#c#d#e#f#g#h#i#j#k#l#m#n#o#p#q#r#s#t#u#v#w#x#y#z#P!C!Q!1!o!S%S'S(S)S S,S-S0S2S5S<S=S>SBSLSKSYS[SaScSeSlSmSrSyS~S
d d"d$d%d)d*d/d0d5d=d?dKdOdQdRdSdTdZd[d\d]d_d`dadcdmdsdtd{d}dB"p"C"m"l"n"4"1"k"D""*!*$***#*)*!).*2*1*4*3*@*?*B*A*P*R*Q*T*X*S*,)c*b*e*d*r*0)N)" ! $ * # ) A). 2 1 4 3 @ ? B A C)P R Q T X S L)c b e d r P)s '*' %*% (*( * ,*, /*/ -*- 0*0 ")B)7*7 6*6 8*8 5*5 :*: ;*; =*= <*>*> $)D)G*G E*E F*F D*E)&)F)H*H I*I G)J*J L*L K*K ))I)()H)M*M O*O N*N J) )K)W*W V*V -)M)Y*Y [*[ Z*Z \*\ ]*] _*_ ^*^ a*a `*` /)O)l*l i*i f*f k*k h*h j*j q*q t*t s*u*u w*w v*v &*& C*C U*U g*g p*p m*m o*o n*n 9 0"/"2"6"5"3"8"9"a&b&c&d&g&i&l&v&e&j&q&r&s&t&{&x&u&z&w&y&|&B'C'D'E'F'G'H'I'J'K'L'M'N'r's't'u'v'w'x'y'z'{'|'}'~'q"o"!0"0#0$0%0&0'0(0)0*0 0,0-0.0/000102030405060708090:0;0<0=0>0?0@0A0B0C0D0E0F0G0H0I0J0K0L0M0N0O0P0Q0R0S0T0U0V0W0X0Y0Z0[0\0]0^0`0a0b0c0d0e0f0g0h0i0j0k0l0m0n0o0p0_0q0r0s0t0u0v0w0x0y0z0{0|0}0~0!1"1#1$1%1&1'1(1)1*1 1,1-1.1/101112131415161718191:1;1<1=1>1?1@1A1B1C1D1E1F1G1H1I1J1K1L1M1N1O1P1Q1R1S1T1U1V1W1X1Y1Z1[1\1]1^1v1_1`1a1b1c1d1e1f1g1h1i1j1k1l1m1n1o1p1q1r1s1t1u1w1x1y1z1{1|1}1~1!2"2#2$2%2&2'2(2)2*2 2,2-2.2/202122232425262728292:2;2<2=2>2?2@2A2B2C2D2E2Q2F2G2H2I2J2K2L2M2N2O2P2R2S2T2U2V2W2X2Y2Z2[2\2]2^2_2`2a2b2c2d2e2f2g2h2i2j2k2l2m2n2o2p2q2r2s2t2u2v2w2x2y2z2{2|2}2~2!3"3#3$3%3&3'3(3)3*3 3,3-3.3/303132333435363738393:3;3<3=3>3?3@3A3B3C3D3E3F3G3H3I3J3K3L3M3N3O3P3Q3R3S3T3U3V3W3X3Y3Z3[3\3]3^3_3`3a3b3c3d3e3f3g3h3i3j3k3l3m3n3o3p3q3r3s3t3u3v3w3x3y3z3{3|3}3~3!4"4#4$4%4&4'4(4)4*4 4,4-4.4/404142434445464847494:4;4<4=4>4?4@4A4B4C4D4E4F4G4H4I4J4K4L4M4N4O4P4Q4R4S4T4U4V4W4X4Y4Z4[4\4]4^4_4`4a4b4c4d4e4f4g4h4i4j4k4l4m4n4o4p4q4r4s4t4u4v4w4x4y4z4{4|4}4~4!5"5#5$5%5&5'5(5)5*5 5,5-5.5/505152535455565758595:5;5<5=5>5?5@5A5B5C5D5E5F5G5H5I5J5K5L5M5N5O5P5Q5R5S5T5U5V5W5X5Y5Z5[5\5]5^5_5`5a5b5c5d5e5f5g5h5i5j5k5l5m5n5o5p5q5r5s5t5u5v5w5x5y5z5{5|5}5~5!6"6#6$6%6&6'6(6)6*6 6,6-6.6/606162636465666768696:6;6<6=6>6?6@6A6B6C6D6E6F6G6H6I6J6K6L6M6N6O6P6Q6R6S6T6U6V6W6X6Y6Z6[6\6]6^6_6`6a6b6c6d6e6f6g6h6i6j6k6l6m6p6q6n6o6r6s6t6u6v6w6x6y6z6{6}6~6|6!7"7#7$7%7&7'7(7)7*7 7,7-7.7/707172737475767778797:7;7<7=7>7?7@7A7B7C7D7E7F7G7H7I7J7K7L7M7N7O7P7Q7R7S7T7U7V7W7`7X7Y7Z7[7\7]7^7_7a7b7c7d7e7f7g7h7i7j7k7l7m7~7n7o7p7q7r7s7t7u7v7w7x7y7z7{7|7}7!8"8#8$8%8&8'8(8)8*8 8,8-8.8/808182838485868788898:8;8<8=8>8?8@8A8B8C8D8E8F8G8H8I8J8K8L8M8N8P8Q8O8R8S8T8U8V8W8X8Y8Z8[8\8]8^8_8`8a8b8c8d8e8g8h8i8j8k8l8m8n8o8p8q8r8s8t8u8v8w8x8y8z8{8|8}8~8!9"9#9$9%9&9'9(9)9*9 9,9-9.9/909192939495969798999:9;9<9=9>9?9@9A9B9C9D9E9F9G9H9I9J9K9L9M9N9O9P9Q9R9S9T9U9V9W9X9Y9Z9[9\9]9^9_9`9a9b9c9d9e9f9g9h9i9j9k9l9m9n9o9p9q9r9s9t9u9v9w9x9y9z9{9|9}9~9!:":#:$:%:&:':(:):*: :,:-:.:/:0:1:3:4:5:6:7:8:2:9:::;:<:=:>:?:@:A:B:C:D:E:F:G:H:I:J:K:L:M:N:O:P:Q:R:S:T:U:V:W:X:Y:Z:[:\:]:^:_:`:a:b:c:d:e:f:g:h:i:j:k:l:m:n:o:p:q:r:s:t:u:v:w:x:y:z:{:|:}:~:!;";#;$;%;&;';(;);*; ;,;-;.;/;0;1;2;3;4;5;6;7;8;9;:;;;=;<;>;?;@;A;B;C;D;E;G;H;I;J;F;K;L;M;N;O;P;Q;R;S;W;U;T;V;X;Y;Z;[;\;];^;_;`;a;b;c;d;e;f;g;h;i;j;k;l;m;n;o;p;q;r;tfs;t;u;v;w;x;z;y;{;|;};~;!<"<#<$<%<&<'<(<)<*< <,<.<-</<0<1<4<2<3<5<6<7<8<9<:<;<<<=<><?<@<A<B<C<D<E<F<G<H<I<J<K<L<M<N<O<P<R<Q<S<T<U<V<W<X<Y<Z<[<\<]<^<_<`<a<b<c<d<e<f<g<h<i<j<k<l<m<n<o<p<q<r<s<t<u<v<w<x<y<z<{<|<}<~<!="=#=$=$=&='=(=)=*= =,=-=.=/=2=0=1=3=4=5=6=7=8=9=:=;=<===>=?=@=A=B=C=D=E=F=G=H=I=J=K=L=M=N=O=P=Q=R=S=T=U=V=W=X=Y=Z=[=\=]=^=_=`=a=b=c=d=e=f=g=h=i=j=k=l=m=n=o=p=q=r=s=t=u=v=w=x=y=z={=|=}=~=!>">#>$>%>&>'>(>)>*> >,>->.>/>0>1>2>3>4>5>6>7>8>9>:>;><>=>>>?>@>A>B>C>D>E>F>G>H>I>J>K>L>M>N>O>P>Q>R>S>T>U>V>W>X>Y>Z>[>\>]>^>_>`>a>b>c>d>e>f>g>h>i>j>k>l>m>n>o>p>q>r>s>t>u>v>w>x>y>z>{>~>|>}>!?"?#?$?%?&?'?(?)?*? ?,?-?.?/?0?1?2?3?4?5?6?7?8?9?:?;?<?=?>???@?A?B?C?D?E?F?G?H?I?J?K?L?M?N?O?P?Q?R?S?T?U?V?W?X?Y?Z?[?\?]?^?_?`?a?b?c?d?e?f?g?h?i?j?k?l?m?n?o?p?q?r?s?t?u?v?w?x?y?z?{?|?}?~?!@"@#@$@%@&@'@(@)@*@ @,@-@.@/@0@1@2@3@4@5@6@7@8@9@:@;@<@=@>@?@@@A@B@C@D@E@F@G@H@I@J@K@L@M@N@O@P@Q@R@S@T@U@V@W@X@Y@Z@[@\@]@^@_@`@a@b@c@d@e@f@g@h@i@j@k@l@m@n@o@p@q@r@s@t@u@v@w@x@y@z@{@|@}@~@!A"A#A$A%A&A'A(A)A*A A,A-A.A/A0A1A2A3A4A5A6A7A8A9A:A;A<A=A>A?A@AAABACADAEAFAGAHAIAJAKALAMANAOAPAQARASATAUAVAWAXAYAZA[A\A]A^A_A`AaAbAcAdAeAfAgAhAiAjAkAlAmAnAoApAqArAsAtAuAvAwAxAyAzA{A|A}A~A!B"B#B$B%B&B'B(B)B*B B,B-B.B0B/B1B2B3B4B5B7B6B8B9B:B;B<B=B>B@BABBBDBEBGBHBIBJBLBCBFBKBMBNBOBPBQBRBSBTBUBVBWBXBYBZB[B\B]B^B_B`BaBbBcBdBeBfBgBhBiBjBkBlBmB?BnBoBpBqBrBsBtBuBvBwBxByBzB{B|B}B~B!C"C#C$C%C&C'C(C)C*C C,C-C.C/C0C1C2C3C4C5C6C7C9C:C;C<C=C>C?C@CACBCCCDCECFCGCHC8CJCKCLCMCOCNCPCQCRCSCTCUCVCWCXCYCZC[CIC\C]C^C_C`CaCbCcCdCeCfCgChCiCjCkClCmCnCoCpCqCrCsCtCuCvCwCxCyCzC{C|C}C~C!D"D#D$D%D&D'D(D)D*D D,D-D.D/D0D1D2D3D4D5D6D7D8D9D:D;D<D=D>D?D@DADBDCDDDEDFDGDHDIDJDKDLDMDNDODPDQDRDSDTDUDVDWDXDYDZD[D\D]D^D_D`DaDbDcDdDeDfDgDhDiDjDkDlDmDnDoDpDqDrDsDtDuDvDwDxDyDzD{D|D}D~D!E"E#E$E%E&E'E(E)E*E E,E-E.E/E0E1E2E3E4E5E6E7E8E9E:E;E<E=E>E?E@EAEBECEDEEEFEGEHEIEJEKEMELENEOEPEQERESETEUEVEWEXEYEZE[E\E]E^E_E`EaEbEcEdEeEfEgEhEiEjEkElEmEnEoEpEqErEsEtEuEvEwExEyEzE{E|E}E~E!F"F#F$F%F&F'F(F)F*F F,F-F.F/F0F1F2F3F4F5F6F7F8F9F:F;F<F=F>F?F@FAFBFCFDFEFFFGFHFIFJFKFLFMFNFOFPFQFRFSFTFUFVFWFXFYFZF[F\F]F^F_F`F6GaFbFcFdFeFfFgFhFiFjFkFlFmFnFoFpFqFrFsFtFuFvFwFxFyFzF{F|F}F~F!G"G#G$G%G&G'G(G)G*G G,G-G.G/G0G1G2G3G4G5G7G8G9G:G;G<G=G>G?G@GAGBGCGDGEGFGGGHGIGJGKGLGMGNGOGPGQGRGSGTGUGVGWGXGYGZG[G\G]G^G_G`GaGbGcGdGeGfGgGhGiGjGkGlGmGnGoGpGqGrGsGtGuGvGwGxGyGzG{G|G}G~G!H"H#H$H%H&H'H(H)H*H H,H-H.H/H0H1H2H3H4H5H6H7H8H9H:H;H<H=H>H?H@HAHBHCHDHEHFHGHHHIHJHKHLHSHMHNHOHPHQHRHTHUHVHWHXHYHZH[H\H]H^H_H`HaHbHcHdHeHfHgHhHiHjHkHlHmHnHoHpHqHrHsHtHuHvHwHxHyHzH{H|H}H~H!I"I#I$I%I&I'I(I)I*I I,I-I.I/I0I1I2I3I4I5I6I7I8I9I:I;I<IAI=I>I?I@IBICIDIEIFIGIHIIIJIKILIMINIOIPIQIRISITIUIVIWIXIYIZI[I\I]I^I_I`IaIbIcIdIeIfIgIhIiIjIkIlImInIoIpIqIrIsItIuIvIwIxIyIzI{I|I}I~I!J"J#J$J%J&J'J(J)J*J J,J-J.J/J0J1J2J3J4J5J6J7J8J9J:J;J<J=J>J?J@JAJBJCJDJEJFJGJHJIJJJKJLJMJNJOJPJQJRJSJTJUJVJWJXJYJZJ[J\J]J^J_J`JaJbJcJdJeJfJgJhJiJjJkJlJmJnJoJpJqJrJsJtJuJvJwJxJyJzJ{J|J}J~J!K"K#K$K%K&K'K(K)K*K K,K-K.K/K0K1K2K3K4K5K6K7K8K9K:K;K<K=K>K?K@KAKBKCKDKEKFKGKHKIKJKKKLKMKNKOKPKQKRKSKTKUKVKWKXKYKZK[K\K]K^K_K`KaKbKcKdKeKfKgKhKiKjKkKlKmKnKoKpKqKrKsKtKuKvKwKxKyKzK{K|K}K~K!L"L#L$L%L&L'L(L)L*L L,L-L.L/L0L1L2L3L4L5L6L7L8L9L:L;L<L=L>L?L@LALBLCLDLELFLGLHLILJLKLLLMLNLOLPLQLRLSLTLULVLWLXLYLZL[L\L]L^L_L`LaLbLcLdLeLfLgLhLiLjLkLlLmLnLoLpLqLrLsLtLuLvLwLxLyLzL{L|L}L~L!M"M#M$M%M&M'M(M)M*M M,M-M.M/M0M1M2M3M4M5M6M7M8M9M:M;M<M=M>M?M@MAMBMCMDMEMFMGMHMIMJMKMLMMMNMOMPMQMRMSMTMUMVMWMXMYMZM[M\M]M^M_M`MaMbMcMdMeMfMgMhMiMjMkMlMmMnMoMpMqMrMsMtMuMvMwMxMyMzM{M|M}M~M!N"N$N%N&N'N(N)N#N*N N,N-N.N/N0N1N2N3N4N5N6N7N8N9N:N;N<N=N>N?N@NANBNCNDNENFNGNHNINJNKNLNMNNNONPNQNRNSNTNUNVNWNXNYNZN[N\N]N^N_N`NaNbNcNdNeNfNgNhNiNjNkNlNmNnNoNpNqNrNsNtNuNvNwNxNyNzN{N|N}N~N!O"O#O$O%O&O'O(O)O*O O,O-O.O/O0O1O2O3O4O5O6O7O8O9O:O;O<O=O>O?O@OAOBOCODOEOFOGOHOIOJOKOLOMONOOOPOQOROSOTOUOVOWOXOYOZO[O\O]O^O_O`OaObOcOdOeOfOgOhOiOjOkOlOmOnOoOpOqOrOtOuOvOsOwOxOyOzO{O|O}O~O!P"P#P$P%P&P'P(P)P*P P,P.P/P0P1P-P2P3P4P5P7P8P9P:P;P6P<P=P>P?P@PAPBPCPDPEPFPGPHPIPJPKPLPMPNPOPPPQPRPSPTPUPVPWPXPYPZP[P\P]P^P_P`PaPbPcPdPePfPgPhPiPjPkPlPmPnPoPpPqPrPsPtPuPvPwPxPyPzP{P|P}P~P!Q"Q#Q$Q%Q&Q'Q(Q)Q*Q Q,Q-Q.Q/Q0Q1Q2Q3Q4Q5Q6Q7Q8Q9Q:Q;Q<Q=Q>Q?Q@QAQBQCQDQEQFQGQHQIQJQKQLQMQNQOQPQQQRQSQTQUQVQWQXQYQZQ[Q\Q]Q^Q_Q`QaQbQcQdQeQfQgQhQiQjQkQlQmQnQoQpQqQrQsQtQuQvQwQxQyQzQ{Q|Q}Q~Q!R"R#R$R%R&R'R(R)R*R R,R-R.R/R0R1R2R3R4R5R6R7R8R9R:R;R<R=R>R?R@RARBRCRDRERFRGRHRIRJRKRLRMRNRORPRQRRRSRTRURVRWRXRYRZR[R\R]R^R_R`RaRbRcRdReRfRgRhRiRjRkRlRmRnRoRpRqRrRsRtRvRwRxRuRyRzR{R|R}R~R!S"S#S$S%S&S'S(S)S*S S,S-S.S/S0S1S2S3S4S5S6S7S8S9S:S;S<S=S>S?S@SASBSCSDSESFSGSHSISJSKSLSMSNSOSPSQSRSSSTSUSVSWSXSYSZS[S\S]S^S_S`SaSbScSdSeSfSgShSiSjSkSlSmSnSoSpSqSrSsStSuSvSwSxSySzS{S|S}S~S!T"T#T$T%T&T'T(T)T*T T,T-T.T/T0T1T2T4T5T6T7T8T9T:T;T<T=T>T3T?T@TATBTCTDTETFTGTHTITJTKTLTMTNTOTPTQTRTSTTTUTVTWTXTYTZT[T\T]T^T_T`TaTbTcTdTeTfTgThTiTjTlTkTmTnToTpTqTrTsTtTuTvTwTxTyTzT{T|T}T~T!U"U#U$U%U&U'U(U)U*U U,U-U.U/U0U1U2U3U4U5U6U7U8U9U:U;U<U=U>U?U@UAUBUCUDUEUFUGUHUIUJUKULUMUNUOUPUQURUSUTUUUVUWUXUYUZU[U\U]U^U_U`UaUbUcUdUeUfUgUhUiUjUkUlUmUnUoUpUqUrUsUtUuUvUwUxUyUzU{U|U}U~U!V"V#V$V%V&V'V(V)V*V V,V-V.V/V0V1V2V3V4V5V6V7V8V9V:V;V<V=V>V?V@VAVBVCVDVEVGVHVIVJVKVFVLVMVNVOVPVQVRVSVTVVVWVXVUVYVZV[V\V]V^V_V`VaVbVcVdVeVfVgVhViVjVkVlVmVnVoVpVqVrVsVtVuVvVwVxVyVzV{V|V}V~V!W"W#W$W%W&W'W(W)W*W W,W-W.W/W0W1W2W3W4W5W6W7W8W9W:W;W<W=W>W?W@WAWBWCWDWEWFWGWHWIWJWKWLWMWNWOWPWQWRWSWTWUWVWWWXWYWZW[W\W]W^W_W`WaWbWdWeWfWgWhWiWjWkWlWmWnWoWpWqWrWsWtWuWvWwWxWyW>XcWzW{W|W}W~W!X"X#X$X%X&X'X(X)X*X X,X-X.X/X0X1X2X3XLX4X5X6X7X8X9X:X;X<X=X?X@XAXBXCXDXEXFXGXHXIXJXKXMXNXOXPXQXRXSXTXUXVXWXXXYXZX[X\X]X^X_X`XaXbXcXdXeXfXgXhXiXjXkXlXmXnXoXpXqXrXsXtXuXvXwXxXyXzX{X|X}X~X!Y"Y#Y$Y%Y&Y'Y(Y*Y Y,Y-Y.Y/Y0Y1Y2Y3Y4Y5Y6Y7Y8Y9Y:Y;Y<Y)Y=Y>Y?Y@YAYBYCYDYEYFYGYHYIYJYKYLYMYNYOYPYQYRYSYTYUYVYWYXYYYZY[Y\Y]Y^Y_Y`YaYbYcYdYeYfYtYgYhYiYjYkYlYmYnYoYpYqYrYsYuYvYwYxYyYzY{Y|Y}Y~Y!Z"Z#Z$Z%Z&Z'Z(Z)Z*Z Z,Z-Z.Z/Z0Z1Z2Z3Z4Z5Z6Zf87Z8Z9Z:Z;Z<Z=Z>Z?Z@ZAZBZCZDZEZFZGZHZIZJZKZmZLZMZNZOZPZQZRZSZTZUZVZWZXZYZZZ[Z\Z]Z^Z_Z`ZaZbZcZdZeZfZgZhZiZjZkZlZnZoZpZqZrZsZtZuZvZwZxZyZzZ{Z|Z}Z~Z!["[#[$[%[&['[([)[*[ [,[-[.[/[0[1[2[3[4[5[6[7[8[9[:[;[<[=[>[?[@[A[B[C[D[E[F[G[H[I[J[K[L[M[N[O[P[Q[R[S[T[U[V[W[X[Y[Z[[[\[][^[_[`[a[b[c[d[e[f[g[h[i[j[k[l[m[n[p[q[r[s[o[t[u[v[w[x[y[z[{[|[}[~[!\"\#\$\%\&\'\(\)\*\ \,\-\.\/\0\1\2\3\4\5\6\7\8\9\:\;\<\=\>\?\@\A\B\C\D\E\F\G\H\I\J\K\L\M\N\O\P\Q\R\S\T\U\V\W\X\Y\Z\[\\\]\^\_\`\a\b\c\d\e\f\g\h\i\j\k\l\m\n\o\p\q\r\s\t\u\v\w\x\y\z\{\|\}\~\!]"]#]$]%]&]'](])]*] ],]-].]/]0]1]2]3]4]5]6]7]8]9]:];]<]=]>]?]@]A]B]C]D]E]F]G]H]I]J]K]L]M]N]O]P]Q]R]S]T]U]V]W]X]Y]Z][]\]]]^]_]`]a]b]c]d]e]f]g]h]i]j]k]l]m]n]o]p]q]r]s]t]u]v]w]x]y]z]{]|]}]~]!^"^#^$^%^&^'^(^)^*^ ^,^-^.^/^0^1^2^3^4^5^6^7^8^9^?^:^;^<^=^>^@^A^B^C^D^E^F^G^H^I^N^J^K^L^M^O^P^Q^R^S^T^U^V^W^X^Y^Z^[^\^]^^^_^`^a^b^c^d^e^f^g^h^i^j^k^l^m^n^o^r^p^q^s^t^u^v^w^x^y^z^{^|^}^~^!_"_#_$_%_&_'_(_)_*_ _,_-_._/_0_2_1_3_4_5_6_7_8_9_:_;_<_=_>_?_@_A_B_C_D_E_F_G_H_I_J_K_L_M_N_O_P_Q_R_S_T_U_V_W_X_Y_Z_[_\_]_o_^___`_a_b_c_d_e_f_g_h_i_j_k_l_m_n_p_q_r_s_t_u_v_w_x_y_z_{_|_}_~_!`"`#`$`%`&`'`(`)`*` `,`-`.`/`0`1`2`3`4`5`6`7`8`9`:`;`<`=`>`?`@`A`B`C`D`E`F`G`H`I`J`K`L`M`N`O`P`Q`R`S`T`U`V`W`X`Y`Z`[`\`]`d`^`_```a`b`c`e`f`g`h`i`j`k`l`m`n`o`p`q`r`s`t`u`v`w`x`y`z`{`|`}`~`!a"a#a$a%a&a'a(a)a*a a,a-a.a/a0a1a2a3a4a5a6a7a8a9a:a;a<a=a>a?a@aAaBaCaDaEaFaGaHaIaJaKaLaMaNaOaPaQaRaTaUaVaSaWaXaYaZa[a\a]a^a_a`aaabacadaeafagahaiajakalamanaoapaqarasatauavawaxayaza{a}a~a!b"b#b$b|a-b%b&b'b(b)b*b b,b/b0b1b2b.b3b4b5b6b7b8b9b:b;b<b=b>b?b@bAbBbCbEbFbDbGbHbIbJbKbLbMbNbObPbQbRbSbTbUbVbWbXbYbZb[b\b]b^b_b`babbbcbdbebfbgbhbibjbkblbmbnbobpbqbrbsbtbubvbwbxbybzb{b|b}b~b!c"c#c$c%c&c'c(c)c*c c,c-c.c/c0c1c2c3c4c5c6c7c8c9c:c;c<c=c>c?c@cAcBcCcDcEcFcGcHcIcJcKcLcMcNcOcPcQcRcScTcUcVcWcXcYcZc[c\c]c^c_c`cacbcccdcecfcgchcicjckclcmcncocpcqcrcsctcucvcwcxcyczc{c|c}c~c!d"d#d$d%d&d'd(d)d*d d,d-d.d/d0d1d2d3d4d5d6d7d8d9d:d;d<d=d>d?d@dAdBdCdDdEdFdGdHdIdJdKdLdMdNdOdPdQdRdSdTdUdVdWdXdYdZd[d\d]d^d_d`dadbdcdddedfdgdhdidjdkdldmdndodpdqdrdsdtdudvdwdxdydzd{d|d}d~d!e"e#e$e%e&e'e(e)e*e e,e-e.e/e0e1e2e3e4e5e;e6e7e8e9e:e<e=e>e?e@eAeBeCeDeEeFeGeHeIeJeKeLeMeOePeNeQeReSeTeUeVeWeXeYeZe[e\e]e^e_e`eaebecedeeefehegeiejekelemeneoepeqereseteuevewexeyeze|e{e}e~e!f"f#f$f%f&f'f(f)f*f f,f-f.f/f0f1f2f3f4f5f6f7f8f9f:f;f<f=f>f?f@fAfBfCfDfEfFfGfHfIfJfKfLfMfNfOfPfQfRfSfTfUfVfWfXfYfZf[f\f]f^f_f`fafbfcfdfefffgfhfifjfkflfmfnfofpfqfrfsfufvfwfxfyfzf{f|f}f~f!g"g#g$g%g&g'g(g)g*g g,g-g.g/g0g1g2g3g4g5g6g7g8g9g:g;g<g=g>g?g@gAgBgCgDgEgFgGgHgIgJgKgLgMgNgOgPgQgRgSgTgUgVgWgXgYgZg[g\g]g^g_g`gagbgcgdgegfgjggghgigkglgmgngogpgqgrgsgtgvgwgxgygugzg{g|g}g(h~g!h"h#h$h%h&h'h)h*h h,h-h.h/h0h1h2h3h4h5h6h7h8h9h:h;h<h=h>h?h@hAhBhChDhEhFhGhHhIhJhKhLhMhNhOhPhQhRhShThUhVhWhXhYhZh[h\h]h^h_h`hahbhchdhehfhghhhihjhkhlhmhnhohphqhrhshthuhvhwhxhyhzh{h|h}h~h!i"i#i$i%i&i'i(i)i*i i,i-i.i/i0i1i2i3i4i5i6i7i8i9i:i;i<i=i>i?i@iAiBiCiDiEiFiGiHiIiJiLiMiKiNiOiPiQiRiSiTiUiViWiXiYiZi[i\i]i^i_i`iaibicidieifigihiiijikiliminioipiqirisitiuiviwixiyizi{i|i}i~i!j"j#j$j%j&j'j(j)j*j j,j-j.j/j0j1j2j3j4j5j6j7j8j9j:j;j<j=j>j?j@jAjBjCjDjEjFjGjHjIjJjKjLjMjNjOjPjQjRjSjTjUjVjWjXjYjZj[j\j]j^j_j`jajbjcjdjejfjgjhjijjjkjljmjnjojpjqjrjsjtjujvjwjxjyjzj{j|j}j~j!k"k#k$k%k&k'k(k)k*k k,k-k.k/k0k1k2k3k4k5k6k7k8k9k:k;k<k=k>k?k@kAkBkCkDkEkFkGkHkIkPkJkKkLkMkRkNkOkQkSkTkUkVkWkXkYkZk[k\k^k]k_k`kakbkckdkekfkgkhkikjkkkmknkoklkpkqkrksktkvkukwkxkykzk{k|k}k~k!l"l#l$l%l&l'l(l)l*l l,l-l.l/l0l1l2l3l4l5l6l7l8l9l:l;l<l=l>l?l@lAlBlClDlElFlGlHlIlJlKlLlNlOlMlPlQlRlSlTlUlVlWlXlYlZl[l\l]l^l_l`lalblcldlelflglhliljlklllmlnlolplqlrlsltlulvlwlxlylzl{l|l}l~l!m"m#m$m%m&m'm(m)m*m m,m-m.m/m0m1m2m3m4m5m6m7m8m9m:m;m<m=m>m?m@mAmBmCmDmEmFmGmHmImJmKmLmMmNmOmPmQmRmSmTmUmVmWmXmYmZm[m\m]m^m_m`mambmcm7"2!2"2#2$2%2&2'2(2)2
1 1!1"1#1$1%1&1'1(1)1
% %!%"%#%$%%%&%'%(%)%*% %,%-%.%/%0%1%2%3%4%5%6%7%8%9%:%;%<$=%>%?%@%A%B%C%D%E%F%G%H%I%J%K%
W%f?i
e.lFO
urlsS
u%urrGS
]']&].]$]
s"s9s%s,s8s1sPsMsWs`slsos~s
x<x%x,x#x)xNxmxVxWx&xPxGxLxjx
{.{1{ {%{${3{>{h!l!'!c!@!A!$("(((&(:(,(*(0(.(B!4(2(9(!(%('()(-(1(#( (/(3(5(6(7(8(&!%!!&"&$&%&&&'&(&)&*& &,&-&.&/&0&1&2&3&4&5&6&7&8&A&B&C&D&E&F&G&H&I&J&K&L&M&N&O&P&Q&R&S&T&U&V&W&X&''!'"'#'$'%'&'(')'*' ','-'.'/'0'1'2'3'4'5'6'7'8'9':';'<'='>'?'@'A'Q'R'S'T'U'V'X'Y'Z'['\']'^'_'`'a'b'c'd'e'f'g'h'i'j'k'l'm'n'o'p'q'W'*!,!.!/!0!1!-!k!d!e!y!f!m!q"r"s"t"u"v"w"x"y"z"{"|"{!|!z!}!J!G!F!L!X!^!O!N!D!E!I!H!R!S!`!_!C!K!W!V!U!Y!T!\!]!Z![!Q!M!P!Y"Z"["\"]"^"_"`"a"b"E"F"G"H"I"J"K"L"M"N"O"P"Q"R"S"T"U"V"W"X"1"2"3"4"5"6"7"8"9":";"<"=">"?"@"A"B"C"D"$)%)&)')()))*) ),)-).)/)0)1)2)3)4)5)6)7)8)9):);)<)=)>)?)@)A)B)C)D)E)F)G)H)I)J)K)L)M)N)O)P)Q)R)S)T)U)V)W)X)Y)Z)[)\)])^)_)`)a)b)c)d)e)f)g)h)i)j)k)l)m)n)o)v!u!x!w!t!s!p!r!q!o!n!b!a!!!"!#!(!)!4!5!6!7!8!9!:!;!>!?!~!2!3!<!=!!$"$#$$$%$&$'$($)$*$ $,$-$.$/$0$1$2$3$4$5$6$7$8$9$:$;$<$=$>$?$@$A$B$C$D$E$F$G$H$I$J$K$L$M$N$O$P$Q$R$S$T$U$V$W$X$Y$Z$[$\$]$^$_$`$a$b$c$d$e$f$g$h$i$j$k$l$m$n$o$p$q$r$s$!%"%#%$%%%&%'%(%)%*% %,%-%.%/%0%1%2%3%4%5%6%7%8%9%:%;%<$=%>%?%@%A%B%C%D%E%F%G%H%I%J%K%L%M%N%O%P%Q%R%S%T%U%V%W%X%Y%Z%[%\%]%^%_%`%a%b%c%d%e%f%g%h%i%j%k%l%m%n%o%p%q%r%s%t%u%v%$!E(F(G(H(I(J(K(L(M(N(O(P(Q(R(S(T(U(V(W(X(Y(Z([(\(](^(_(`(a(b(c(d(e(f(g(h(i(e"f"g"h"i"j"k"l"m"n";R!6_FrMIU}HOIBO"X;2kS$Xs3(WRG'X@JpG{15RT4 6?K)X*6=AOQ%I-Xv8>Q\cPVa7.4YA<XhM$5*NwVv@Y>/XKDC>1X4CeR.VZN'Uu:&7V@9FREGGT9K3RR?XE>rF2R0OgOiJ@XrBRBiH,GKAhSyUBJ~6!XZSw?FT%;AXeN.>(XGQ)P=XoYvM:?;=%:`Rz2`:6DmO)>$MAAWGqYtYKHiXZR2JJHlXjXFXv=MFp3kXq=i=THS4XBV2PWKJ{KLU68IOZYpX*GnXz4nATRmXGRoXGCvQYVrXuX~<[<NH]7B7sFxXARiN?<|7%7]PZVESo;a;qX!I0N 4sXKIvXWBwX1NyX.2@9#Yi0fAlIEKFK$Yh5 5;NM5!WtWSSeLN:"Y\Y`S}Xp7wW~XzX!YcD6StX]Y{XeEP@pQ[0Q<&Y%Y,Y.Y Y9J)Y6V^3(Y}@LJ*Y'Y0Y16)9@R@OBBD=lU`2HGk?-Y/YjNn:VGc1Y4m64Y!?^YNG~@8YWK}75Y7Y#1aS9YEP6Y1Y2Y)A3Ys<^P)8c>=Y:Y30BYDY61?Y95s>HLr:PRCYh= 3EYk>FY;Y_D>[email protected]<JY<YKY FIYvW#M!=LY<E5MMYGY%3~?58|@x0v4NYOY"4PY_4A0QY5IqORYEAVY.IUYTYWY[K)='FSYXYYYeH\@y6#XJT*TVPd3WUHOb9K?bCR6CMnYpY3556$>kH HK0 9yAbY<@29X9KPx1dF_>d5HWxQf<^J=<fYgXZDT8=Ha2YT0CaC"Z_H4P|>)EZ9#Z)T$Z{Y,6k7y1|Ye3v>v?1Rd@36~Y}Y;>`F<W!Z9Ar5hAu<U4]A}D8<27o7lY>F-?K;J5I[WP9M<0v3w;J[/:dT65s5VXPHV7PGWX/?;[XXLP.;>kPAuArTU844u3>IPEYE{@p1YXN9=5ZXFV"K/H2IL4L?t9[X\Xg6A<jLwO]X0GP9#=^LJF`X^X_X~0g>#Jt<18n8bXK=dXcX|EeXfX&A0Hl0&9S<qN=[SA/6zV,EY=>[?[x@">M@@[FJ*2BScC QB[U@C[1?<DZGD[hYWI49pNHT|0R4YPiYK^kY0X/;11W3NXQT3=o?;OPXK7QX%FxG=RRXdD.J'G&X}IgN\;k0*;-P01dW?W%5tBOD)272e12_<U(?,BUX1BTXTN`[email protected]!S#N4<4HQBm>6PaZdG'3r6|Lz@w@9QaQGX^2e@q:HX-TaOIXJXCOx3G>KXL[%HXO~HN2VSf20<QS K47"7eJ!H\Jd1pPQEE[~5Z?E9d>mA6_5_;VP=YUH0#6I?(L3_7JRSOX6RE:>K>L7_p54_uST3w8:_O:*<u5,M{Cs:t@BMrO8_EO@B9_pB}>_ALMwRM7A_D_q7I0V6T7,:}LT?1KtF(VE_bN33|N54GNp:aN=Q@_t4J3f8;_ED<_=_>_;E?_B_1TC_:GXNXDJ_O_\VI_Z_6NG:N_H_^EkIt:|CW>F_M_XE&UM:L>=S@8dVG_>9'?|AK_L_P_[_e_W_V_IWc_d_ke'RR_)?[TH?T_LO]_JQ^_'07FS_e:_6[M~9UT__lO%0g_Q_FQU_X_Y_\_);`_a_b_f_h_4Sg86Ej_ZI(ADD^?xO\Un_82_:l_A[dQtK=4&0q_FLr_m_i_k_o_p_=;s_t_#;[J(N'`*3&`!`~_YM|_z_P?DWLIx_!0}_{_"`(`H7!F6I2@u_>EDXy_vD#`$`%`%P4`dL1`&?/`9N `FI.@.`m:0:)`v_3`8`-49`2OH:0`zP,`{Tw_gE-`wS6`7`D`aP<`I`J`>`*`$IA`2`HJC`5`KNCKM`F`B`K`:`?`@`E`G`H`L`;`TKU`V`R`P`N<Q`B8EXjPoBO`=`T`S`W`\`X`vV03lW;KZ`{NY:a`]`-Rb`[`Y`_```^`d`wF,XkTf`IJe`A8g`h`i`c`?:gLj`yOk`BH@=RDl`m`tGDKn`X;6XrRo`EMZ6q`0T'@Q4'Np`r`L9z9<Ms`TFt`2T&Hv`u`w`AM%JZTW[Y[X[g9\[][X5Z[[[!3_[x;7V`[y>;7P[.L2?5;xWS?i?a<3L^[S0kNX79WBF$@9Lg[a[:Fc[h[wEj[i[@?f[e[94,@"Bb[d[MPm[]@r[b6s[R[89 Tl[Q?p[Q[f5k[e?n[q[y[!9#0qBG3o[x[RFt[u[w[v[~[rS:2}[$\{[z[|[`Ey;#\%\CLQ6@]!\"\5Gi6'\&\)\$1L50?_QB6(\zKsk\K~KAL{H*\nL \S[/\,\3>{J-\JI9D=G.\vTfP DU6T[Z1U[V[>:@H?JIH3WyIG?x:<R:b&48148DOgY&ObMmY`69R;99b7bs4lL Lr72XkQ;:'J7MDRd?P<a6E^F^<[YQfFNDn7\7|?`WuF<1H^1=WLJ^I^l5]IB0.E ELDi<}KC:yegHze}M1W>8hBQH{eJ6K<}Q!fnC$f~e%fWMA7|e}e#f]D(f'fCC^F*f7D"f<Jc=C9&fUP/N)f0f&R*=-f/fQ@LR'<1fvRKW~M^M&B f,f?=.f3f2f6f8foDHDj>oI7fp6dCiS4f5f"H=f9fEFqM;f<fi;>f:f7@$S?ftICfDfvP=CDCBfAfGf1OtkJfEf^<)I5<SOHfIfNfPfQfKfU5LfOf[DFfMfRfTfSfUfxYVfWfSW]f^fW?PTVWf4oKZfCXNW"POC_f><B9[f'Q":OB XkJne\fu7fHuD2e~D|K3e,UnSXJ20NKjMj:5e4eZWY9fV(6pMKR&15Jh3sIM?{PRJ6eB;\O,9WT&:gQ|OR<7e]Hm?v1^KE<D<zR\C\?;8BC.:"T^G/Dl2Q9;eHA/U<e>eg4T6BK0Q<5YJb7dI =>NpW!PYI{6Xfb<>3PIYf"3L^HSM^"RN^M>O^,J|R_3jeaD!>2NrDV>(Fc2S>|GkLl=]N:JAFle<P9UmetJ@MEBoeDBpexeMM=IYR(alSjKqF,a'a)a*a/am2 aZ8-a.a0a:51a3a8aRQ6a5akA7a@T2a:a604ay?9a;a>a<aEV?O=a?aMBk6xSMGe7~>@aAaGag3iF^4BQHaFaEaCaBa@18UDaKaLaJazoSaRa6GIaNaPaTaQaMaOaUaVaWaXaZa[a!N]g(4]V2Q23$9sWIG^>.9WNn2O[:<QRHKM0oOcYm=R1PJ<2'K 7&J#Ox`JU{`z`AE{L1Ay`cV/2DV[5x4!V/Oo0|`!a#3}`~`1C]C"ay7O;#a;D$a%a&a14I8=FjD"2RP[gC;WSDSc9Ob/WlGS124QbrP.BPbb?&SW5Rbj5mC}8.8SEO7TbSbH6yW%MXbVb|J5?9SUbWb.AH@[bZb*@NA\b]b^bH[SQ"M(=C^%X*?M[lRzF*ED^W1._=J1_-9}R%8k:Z3\5EUVCRO!;seretedMuH/5?Gve0lfei915<BhegeieMRjaNP.MeQJ2k1r1mECU0S\a]a[R93K1yMwU^a6>}4_a\:`a2;IBaalP=MbaC5GEcadaySea-Qfa"NgaB5haU;DP`bX1dRabI<LHcb~l}l/_bb>V|M&CCcRVgbhbGSlbl?mbeb@3nDnbCPv:ib^73;,LKKdbfbjbkbwbtbuTsb-EzUBE@2obrb/A<K!5yb1<qbTP9TubV9vbSGpb\W!mxb%m~bQJ5AP;V?c:!K&m#m"mV;'mtP$m^:w6!c26qL'9"O!GR?q6zb{b}b|bUD"cAS'cDG$O)c7:(cZ;#c$c*c&crNFS<;CTzD(m|P%cuC-c/12cB<,c?5iG0c*>oMs;hL/c1c'O.c)N];k5e>R2M391 cQ2,5_9h6kO7cL;GHJP8cn3)mzSdS*m9cbR5c^SP83c6c_74c"@:c8TH4;cE;wIeI=D m}B[;.??N<c6?o1wT>c-m?c):,m=c@c6:.68PC0.m/mA@Ac3EBc2\0mj8lN'jgPyJVH7OI3RNd=^cr;(j=U]F)j*j,j j.j-jX=/j>BA4w4';flel?7yKb1glHIhlilVJP^E2zTKFG0r4SHPM8?[?$G4V)@Q^(IoQ$Eg063EHb0v7zEs6RUP3<<-3q>Q0VRcJ%W6M669?[U'8WER^Y?UB@G$;(1jE{E'L'1V5(DS^:Qi3rCw7tV#5p24DiD-@T^h0DE`AU9\>XMN0OMV^P>>WU^PU]0bD#Bp<5S9@!E&2qT(@CJW^|U09-H)KY^=?4F'W0JCDV3R98V|j40f?tLZM?VNBNN"L.PSD25X^uU7<S;$02El4qU}jZ^&MlMfN\^1M&@=W[^F04:SIsDh>62L@pKq<;;75uEf^c^]>_^74]=`^mDFO`5^6ZJt5e^FUa^ML~FEE4Rr>SB=L83S=X?FMZQk4d^]^g^~j0Bb^@V'5t2h^r^m^q^`HaWo^hCaLe2>Rn^k^UN'4 ?>>R=i^.T^^j^?@l^s2i8'BA=u^x^ 2$4j4&Iv^QKc8w^z^y^BLa0n4:e/Pk2!kt^cIs^Z0!Rw1/Lp^$K*U{^]4&D}^~C!D!_LA|^o>2FE3vH:K~^$_2W73CAKG%2i4 WlD"_#_%_3:&_^@CIY2fG'_\G(_"kSK*_)_A2JE _\TAH,_p>-_'V7j6kUJ|XD8ž7~UJ9'PMtP5tCH>7k=0L=2AV1(3R8"IX68k4>}JCG{Us7DN Us13l_05l76OAzu1PeUSNo=b3 86U=mO69KBP=76l)JTE9l8lCB7l}P:l;leW<l=llF^NH<UH)5I><VgT.QqP8j9j:j5:1Ju?zM@j:0>j%@;j}2wCh;WRtN?j<jCjGP3S:4ACrWQUGJEjDjGjFjgVTOKjN;z=NILj9I~OJjNTMjOjmMIjNjnN^;?3UF0>zNgG'>PjGV@A]TQj>ORjnJ/E50TjSj_t:D)1_eUjoJVjWjXFXjYj;TzG7R|8Bj\2|BxTfLnWBTPSCksE~7Tk7K^kJ@{M/3ZF|k>D4N)D>1}TuJlVSFd6z;`P1IST(HK8>h<I;hn@SPD2e4<hHUE6=hxJ\8uL4@nQ?hBh<:-1\==jChFhKhLhIKe0 <99AhwMJhvNmUVADh6C{9&VHh`JfT@hEhGh9Gc7Ih]?RhWhUh\<O<[h^hZhz1X03DL8bF>HaHOhThVhq9XhuW{D\hi2Qhm<B?MhyVxAq2_hAJYh$Uj1;UNhPh06Sh]h8@wJ(K\Fu@ih#PrhjV`hahyQK:y8q8TTohnhlhp9RLfh&Nr?80qhph@Wdh)M#I8;[=jhbhcheh55ghEGkhmh0=.Wxhuh0Mvh:Ahh7Cp0thwh#9RINC`Nf@sK]L5PaJshl<yh^CeFw9t0XW,<oEDL&i-I"ib@C?~hW9{h$iNR#i2V5W'i7=|h}h!iVM,R2i)i*4;4 i(P%i~3,ic@*i9i8i.izh(i,?1i:i%B/iE8-i\S4i5i7iGiF@Ei0i;iq0<i%U>i?iAiqA6H=iBiCi3i6i1;@iw<DiFiJiNi[2Hi.7KiLiAU#DXia:Ii#STiWiPiOiAGRiYiH3SipOMiw3ViZi4L-OUi\i[i^iQi]i_iJC7GN46;@P#l7E{S$l%l[Fn?&l'l*P8Gh8(l9V}UK4=2dNgFaMu4@K_<bicijQeiy4di3QbJP2hifigi3Viijikili/l9EN6sRn5Y;1lcRcN8D?C>69XH1O1Q1~EP1 C1U$kA::L%k'k(k&k)k k*k,kOJ5XqC%CxF-kJD.k/k0kU7z71kbG3k$:uQ102k4k*5HBhG5k.K_c@S[Y!M-VsG`Yc;::bc O`cGI9:4QacjH/9-=X3[N@LhcictM-L3<jckcZP{FZ7_GJRVNdclcrIA3gccFec3mfc3IfE59;Ccc=E$AYBW2mc&;-DpcZ>{cucS:P7MSNVSUA94UXQ9PvG*H42ZCnc|coc(7wctc:7"Evc]E(2|F`D"Wa@yczc}c)Lsc>SC14mqcrcxc:PCFsT~c`='d&dsQ#d)dwH4O(d.deB46r="di:*d,d}6^V2d-d!dn;]M"GIEwA$d3G,===%dGWb2 dC</dk;0d(E1dcU#?:d7d;d=dVFF:K@!84d!T#:~=<d?MyD{OfI?SQO3d8d9diLNLT@5d0A6dPNA;S5sH'=GU,I"8JdLdDQ:R-:T:Cdm5MW@d}O?d\AJLgJWDTLHdGdAdDd-5YSFdyRc44;nI>4l;MQmL5meG(TKdUWBd$=EdfSIdxI>deS~GI6|T32WdBNMd<N[8VdJ?NSlCHEXdDMOdTdUd~:fO?URdPdNdeM*J#@&=SdH8gd4T[doAidgR_d`d*O]KZdQded\HcdgDbdad|3hda5LWfd,;RWOLxkddv9MVYd\dzB^dKBD@PBu12LN5od/FaFud)Bl@]Qnd.Dmdvdtd~B]dpd~JDUqdzQkdldrd NKE1G:BjdJA6L13{dsdzd}d|dN3:3wdydxdlE=@hT"eD0$e#e$<%e!e~dt1(e)e&e'e*eYF e-e,e/e.e`90e1ep;alpCF5R;iAnTD>FWVTS2>lAj/B64WQ432H;?@lKV?lAlElf>?LZE<>Fl~1Dl(Uc5Bl6Ac3Cl8KC@~LRAHlf:S@rVLQ>?37UIGlb;LL}=HH)OiMkEi7IQ8:IlJl@;Klbl:1Y79=LlfQMl;HQlSlM;e<Ol7I:CclUUPlsVRlNlTlUl?I(O\P,Q[HVluNlJZlYl>0WlXldl<HGA\l`Q[loT]lF[^l,1_l`l&W@E<k.0t>88/RV0y53X,K]c,Ff0FE9k:k;k@Q#Erj2D5DN@sjADoNpjtj|I#GXL~Nujvj,Og@wj?6xjyjzj{jqj.Hka87lama4WnaoaLSqaq?paR571sara|:ta79Q>|D]:F=uawa@6AO(JvaxU|Sxa|ayazaj@~a!bG@{a}a%bTA#b(b~2"bMCB2'b&b$b)b bIPmV(C,bWO.bo:`i-b*b ;3T0b/bai1b2b3b!L4b5b~PJBqSuM`gagA>jBdgcgfM5Cbg7;VOaAighgtg#2jgfglgkg:IdUeg)7ggngsgiVmgrgqg`0ugrGE@m@pApgvgvK"h!hAWzgyg{gwg~g}g|gUAYG}ECEmG#h&h%h'hw:xg$hpH*I)he9~Q(h*h-h.h'A/h0h,h4h h1h5h2h3h7h6hO9,p-p0Fj0?H_MMN1j2j?FI43jgUy]4j5j6jJ80_uIpLzI{ICS&K&8.pB18eoLISW<jIg5PDi5.n-;^g/n)32n1ng=0n7NOEtAN[3nsPTBhF,74nk3{;5n\g6n.=bqhJIRZp[p\pFAm8N>^p1E]pqQ`pL0j=_R_p/4h7fpep#FapbpC4cpnU[LR>2<hpgpdp!2"V8S7>,HjpwQLV[:ip;64M&F!Akpnpmppplp>;op5LrpU3T1sptpvpa4qpwpzpxpup}pyp|p~p!qAN$q#qvA{p]Jq4q11L&q'q,qNU)q3H"q q(q%q*q)0-q/q1q0q.q"Q2q3qo9G5W0Y0mTD5T=J;'p^8(p(0)pnM*p p$FeVdqeqsC[SQVhE/SfRAn;05UNQ`<P:x?G8A5LE"JKCBn?D"6lm$C1V`OomNE\6!Jmmpmqm<C4?nmtmrmfU_Csmvm#U#QumPCwmt?l>xmwL[QEWvU|m{mymzm}m&>/K!n=6"n@D~m^=G2C6%n:X#n&niCr3'n$n9O(nwB)n*n ^3FFGuVI52K n M,n0U-nDvG[#4,Cfq8JSR*VroX>C=soL6 0/J6m7myN/7s?8mkB0I9mvF3?<mxEPQ)W:m;mbQ?m@mDmHmFmNmhUImGm>miEFFiIRTAmBmCmEmy@!4h9PmQmJmOmxN6KLmMmuORmrA2SKm7Ho<pEVmo55B-0iK.1TmkMb5UmSmWmz5XmYm\mL1vEn<Zm<Lj2[mkDE4u0_mZ@h4ME]mD?^m%D`mamcmWAG;8=bmdmfmemgm>Jjlq@gIklnFllmFmlplfWslqlnlol#WqInKtlrliOvl1F@<ul;5v;wlwY{=;Bxlyl#8zl{l|lmS.Xk@]GL:cP=K:MQ8|1oGVVF?kCuoXCbWwoS3XGmQHVxovo};F3U=FR`;!O|o{oyoL3TI0K~o^0IV}om3UvHN"p!p>5Z<|;e8BD#pkK&p(Q?>nG6q7qU?)48q;MTG-U9q:qOG$ROV;qQ=04=>\4QN_?=qz?<q?q>q@qAq~A"AzJ>U:>9>BU"?/M5q_=K6qVCsDsM8FsGsJ0EsIsqKKs&PJ1HsOsQ5WsRsTsSs{7?1NsJsZ5PsQsUsMsc<}AVsZsLsH5n=\s$7p?~V2Mp4_2XsYs8I]s^sas_scsbs[sj?o3`s)Gr<ks?9ds-2~;cKmsis\9nsesfsjsaBlsoshs}<dOpsgsrs-W*Fssqs(B]8usts[4vswsxs:@i@qE{szsX4~sys|s}s!t#tI;"t$t>2&t%t.<WCaY`@LtQW[7Nt#AIFV43UPtOtQtZKRtAT`V`78A;ASt,>b4TtUt >Vt[tWtZt}:XtYtb8GL\tZ2SCcT7?]t4Eit5OINXKwKt=OW[@uPjtktltcw17mtkWntyf@>zfl:{fKO|f<T6<}f~fM<RH3N!g?4"g4IY8ID]WZBW7=VFND7&E#g_O$g%g&g7AiWpI8O/VUV'gm0(g)g\IoR->*gs0^Ha= gFH,gf;x8$Q-ggBx>J=3M.g/gn>ePgKPLL<0g(<wP1gxP2g3gB44g5g~I,N`C7gA1q38g9g[W@U:gLB:W;g<g=gj<eCB@>g?g)<@gAg6gP6BgCgDg:;^5FB`1Eg5TFg?8HgGgl7Igx2JgKgLgMgNgOgPg'SuKQgRgSgTgIIUgVgWgXgYgI=Zg>sW81H?s@sAs^9xMhX1:^B7n#79n8nU0;nVUoWCV=npJ<n>n@n?nrQ<G@Ca8gAFt_PGt[O:HHtItJtKtzY~8qepS`tLNa34qnRathObtLGT5d4dtctetftgt2:?0ht-7mR RO@<?#k_UHjsqx6#KMDgqhq{8iqD:ETR0jqkqlqmqnqoqqqpqUErqz6tq.RG^JK\3"5"9tDuqvqDA{A0Vwqxq*A8F[>yqO4zq2m1m`K^RAKXUbH_@!<Ak$PbVG6X8@kN8?k&3I9 Vt7J7g<>7FkGk90O?Ek}SHkIkN7BkDkvIWVMU2POk8NPk(531Rk%LVESkQk_ENk$JUk{0z:7XcqJkKkLkMkVk@fYkh?HRWk\kl8Xk:=XP70]k\D,V`4vB9<Zk[k`TjFTD_k'EuY12dkE=bkck,8QMekak3A"FsLfk0@8Rgk/8-8hk;GsMjkkkmkHPrknkqkyH|Qlkik98YOeDokpkZLHMr0vkuk22`8wkl1EL$D%Oyk"lrEzkEI_b~kNM!l[17S\R}k{k<30jTW tt3AVBViUJ>'t(R(t)t*tK>_S`IaIBsfJrL6b4KhN[V-t.t/t2t=:3tc00t1t"=U26t7tf602OO4t,45t8t9t'M:t;t<tRK=t>t?t^t<Ah< I^Que3\UR4\,05\Z=9\BX7\sSVI:\6\;\"C<\E\=\_N%VO\M\R\f= B8\K\N\>\R7E0G\>PA\(;<7L\F\?\[G?Q@\J\P\-NB\C\H\I\T2Q\UK7T[\_\&Lf\gC\\A?Y\z069e\S\D\V\tH`?;I=1"SZ\U\;F^\BW/C67QG)Cb\X\k\T\]\%>W\`\c\d\x\a\"]g\k<D4#Cg2z\r\o\|\n\pRh2WHcH{\m\w\u\#>t\]2s\v<h\D;s@T<i\j\q\v\y\45YHg;~\}\ S!]#]%]qR$]&]'])RI:)]6]1]4]0]NFr@/Il\.]7]p\/]8],]9]3]-]*D(]3@ A*] ]2]q;5](S:];]'CR]<]Q]=9U>z>J:J]E]?]K2C]K]$2U]>]PFP]T]bAF7N]O]D]=]M]QLI]B]HC<F.NL]H]A]F]\B)S*SS]tOxHf]G]`]dBa]W]xVY]X]p8V]OF-6b]y:aTg]P4Z]{?c]_]]]Y5[]\]^]/=d]e]u]ICbKr]aXQFt]tUs]p]l]o]h]nPXHn]i]j]rKm]M16@;<q]w]v]k]nE{]$^#^x]oC{BaU5N}]L2hD_J>Gz]|]~]"^*0N1,^&^6=oH!^%^)^(^'^-^LT3^*^.^Y@!16^1^2^&Q5^/^0^=P4^mJ9^8^7^;^e=X2jC:^:E<^YL*7eT=^?^"DA^>^@^:UB^.r";2B0EGB/riP]S=kf30r1r-Jg:3r5r4rdK:O2r4JORlBCN8rv07r>rO2AQ:r<riT;r6r?r=r9rGrDrFrJrBr@rEr{VAryG_IHrF905CrIrPrVrW;Ur\MkVRrTrr8KrNryB]ULrMrOrSrYr<Sj6qJd7WrXrZr]r[r\rQQQrIMON)Vcr[C`r/@lr^rarhrbrgrfrir_rdrjr,Seru2rr PurH;yrprvrxrzrsrqr{:{5orwrmrnrkr&s#s"strZH{r%sxC}r's)s$s|r s*s]B.s0s!s1s,s/s~r-s2s4s(s3s5s7P8syY9s7sdH6s:s;s@4Cn<s=s*Q,tFPPP\QNOV=CQb:iaBRBq92m1Cq@ID3rY%KDqTVEq@tFq,TGq@0AtBt|4[E;LdP`MHqsY;1.O$8JqKqC2QA0WIqLqNqvYaR#TCt9HDtMqOqc?PqTqVqQqQIaEcB|9SqUqS9[qV:}0YqXqRqZqWqlHJM]q=e\q^q_qeOEts=`qaqwN*R{q28{<[9f9YCSJhj@@u>ijjjkjljmjnjojG={u}u~u|ub=!v%4"v#v2lTQjY$v:n2U~S\LDJ@e%v/>)F%ZF<)6<8OH%<&Z'ZVLCH(Z}F5QiR6QG<2=d;)Z*ZHQ ZmPo6[BOKm7hIC7w>$V,Z-Z@FgW6J)U_KoU.Z_VJ40Z/ZkR1Z2Z3ZTJ4Z J5Z6ZO3oV7Z0;.58Z9Zn9/QhR:ZC8jOo2;Z<Zk=\NoS=ZsN>ZUSe;?Z5KPK@ZkGnVAZ5EA6BZL7N?CZDZ-KEZw5FZBA;WGZ8LjR1DHZ}5Q;IZ3PJZKZ=NLZMZNZw2QZOZhQPZUCRZSZTZUZ;P%Ry0VZ GWZw=!CXZYZ}C7LZZ[Z>@WF\Z]Z4G^Z_ZH9m;96xtytcM9u`ksO?;@:%TYatu*1r2uuwuQ:vu2Cyuxu41jU:819F2pTMO\0KUu;JV770L6Fa1:9|Va9!7z<Zj[jyLs9\j{43CQ7X:]jtT^jV<_;_j^A8B_TJW`jajdjbjcj^I38D6ejjJMIM4YbbEfj5@8Wgj,W|HSXMX^TyTDI.SS8`3bIvtU:wt_Wqt08TUO8pFC3rt,3=TwGttstKL$HutcW?E@u;uCuBu:VAu>TDuLuO0x5IuJu\EEuFuGuKu`>Huz8PuSug?r9<uMu7BxLy<NuOuQue6RuUu=uTu;Sl3$LVuWua>Xu_L[uH2YWYuZu\ubu`u_u]uau^udueucL?e85cuhu#Lfugu>uD1?uE5d2luiuW6mujukuZ4jTnuy3ouqupurusumI*9{Gc6IL&j53~Tl9yPmi*WniVBmHd:oipiqiaVrisiuitiviwiaGxiXTyiN=zi{iO=|i(8>A}i21T;u9~i!j"j#jx7-<dJN`/T=O7U$j^U%jAP<9G4Y11@f1g1h1=3hHAe_1IAo4(GXSyF8Q}9uB-SKT|=Be57Ce9;bUx=6T%N,AY3vLFeDeHeJeGeO5HF|5EevJIeTCE1#<7WKMMKJJSLLeKefD!Q7QMePe8MpVOe]5>MQe:6(Md9EJQ3YKlTRej7NeUe~4VeSeTe]R_BF1bS]6lKWevSi1t6ZeXeYe@5ER\e^e]e2G#R[ebTZU`eqWae\1{QbedeceeeXRK5_guZxZvZwZzZOPGDn00PyZJS*:"[qG|Z{Z[I}Z![^W~ZZA%[tS'[$[([<=I@#[&[#V)[-[.[,[B:$? [*[GT?2/[y90[;3&5<61[u62[I14[3[5[7[6[8[9[:[OSztuGCWdE|t}t{tF>oPS7MT*L"u!u(:~tVK$uR@j3*M%u#u4=(u)uM=8Ca?aK*u&u'upD,u<4mWW4 u.u-u/uQPQC)H0u1u2u3u4u5u7u6u8uI2TSMJo@XV0R?Ap=*8x<FvGvHvIvJvLvKviwMvNvDnEnFnkU$6HnGnInJn%GKnLn07v5MnOnNnF8PnQnRn[6.3SVFD51V8SnTn?TUG{>YN39VnUnXnWn%EYnZn.G[n/G\n'2]n^n_n`nanjWbncnX<dnKSzL,2eAen&G-Cfngnhninjnknlnmnnnonpnqnrntnsnun-MABvnwnxn!Uyn3Ozn{n|n}n!o~n"ou8zC#o$oB=?Ry2%o&o'oxR(o}V)oLF*o o4A,ozOxK.o-oz3x9/o0obP1o2of7?P3o4o5oqH`L6o7o8o9o:o`U;om4*C<o=o>o?o}N@o`B846Wu=GOCoAoBoDo'6|<b>LCEoFoGoOoHoIoJoBGqoM6KoLoMoF6>CNoPoQoRorUSowDToxDUoVod8w0WoXoYoZo[o\o]o^o5>ao_o`obocoMAdoeofogohoiojokoloX@mo-AnooopobO$3ECEcAIFcU1JN34rHGcPOHcd<IcJcFC"UVDk9ENKcvCLc'7s8R:McNcDTOcPcKQQcRcScTcVQUc{2;@Vc @WcXcYcZc[c78bZS6dZcZfZnHeZ@7tQuRsUW=hWhZgZ"0SMiZ=8J<=B$BB3jZ*B0D5=^OkZBI]1lZ86:T}3mZITUOcEnZoZpZjAUL]OgS!BqZeKrZfK~Rt8sZ/06OOUmKtZDc%A?v@vAvQD8HcQ[PEQ/<M9toF4:SBv{3Cvq5EvjS'v)Q)v(vcAW@"1mNhP vvO*vpU,v9Ct;.v-v^DXA*K<O/v0v1v6BT0yE2v`G&v8>2>e5G7??RCfCLXo8y=%QP00w1w,P002w3w4wJGO>7w6w^15w8w9w$NMH :8h9h:hB>tROTXI3R%6jG|qnO3KkPoggMK9Y6}qd0LK~q$T-BlADF1>!rU<"r#r$rCR5FGM%r1SE?bL&r'rUQn6(r)r_5*r r|2,r-r'Hg7)l*l l,l.F-l.lI73J8bOwPwM2QwSwRw;b"<<b=b>b?b@bAb97{R$=NJ%1GKBb|6DHCbH=}1Dbv6EbYDFbZO]9Gb!@Hbv2IbsAJbKbxBLbMbNbWJ8XeYcO%p0\mB&TTM1Q[3}G52?B`f;JafbfT>cf$WUMef]<dfffgfnB>=hffB':ifjfR3iQ%?kfoFlfmfnf-Fof'Ipfqfrf9esftfbBufvfhVwfxfG9;w:w>w<w!:?w@wBwAwDwCwEwFwGwhK_8TwUwVwXwZwWw[wYwWW\w]w^w_w`wK[*Xwem9}?j;IwGFHwJwLwKwMw:NNw'DcSOv3BPvQvRvSvTvVv 1WvXvYvZv[v\v]v^vJO_v`vavbvcvdvp@evfvgvhvivjvkvlvmvnvovpvqvrvsvtv(>uvvvwvxvzHyvzv{v|v}v~v!w"w#w$w%w&w'w(wn1)w*w w,w-w[A.w/wqD/p&<0pyC8E;Q1p2p3p4p5p<QlQ7p6p'TRM8p:p9p;p<pk8=ph:>p?pi>@pl6ApBpCpDp5HEpFpGptEHpIpJp=wKpLpMpNpOpW:PpQpRpSpTpUpVpXp%SWpYp:u9Bdwewfwgwhw4BjwkwsBptotiBawbwF;dYrJh@$pZ:-G,Dlwmwnwpwowqwtwswrwuwvwimjmkm<v=v>v&6>XD9;X1\sJwwxwyw{wzwG1|w}w~wkF4l]33v4vdA5v6v7v8v9v:v#H;vzA(9hmj9_Y!#"###g!%#'#(#)#*# #,#-#.#/#0#1#2#3#4#5#6#7#8#9#:#;#<#=#>#?#@#A#B#C#D#E#F#G#H#I#J#K#L#M#N#O#P#Q#R#S#T#U#V#W#X#Y#Z#[#\#]#^#_#`#a#b#c#d#e#f#g#h#i#j#k#l#m#n#o#p#q#r#s#t#u#v#w#x#y#z#{#|#}# !i!j!~#$#( & : , * 0 . 4 2 9 % ' ) = > - 1 / 3 5 6 7 8 ? " ; < $ # ! e/!/"/#/$/%/&/'/(/)/*/ /,/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/[/\/]/^/_/`/a/b/c/d/-/.///0/1/2/3/4/5/6/7/8/9/:/;/</=/>/?/@/A/B/C/D/E/F/G/H/I/J/K/!zv,#z|/8z",.z,z#.$.-z%.#,/z1z0z&.>z2z3z6z$,5z4z7zy,(.'.%,z, z)z*z .9z*.<z=z[~?z{,@zAzBzCzS-Dz).(z!.!,EzFz`zazbzdz},cz}/8,^-9,:,;,ezfz[zgzhzizHzGz]--./...KzJzIzLzMz0.Pzi/QzOzNzRzVzh/SzTzUz1,Wz2.1.3.YzXz4.Zz&{:z%z\z]z^zf-?,6{@,>.A,?.9{7{@.8{:{;{g-A.<{={>{Y~?{3{2{a-_z5.4{9.nzozqzpzrz:.sztzuz.|vzxzwzp/zzc-d-yz<,{z|z}z!{~z"{#{e-b-jzkzlzmz/,*{[- {4,6.7.8.5{=.2|<.;.%{e|Z-h|f|g|i|j|Z..,G,d|H,H|G|I|5,K|J|L|M|o/N|F|O|Q|P|Q.R.6,R|6|7|i-c|N-'{~-9|:|p-;|<|>|=|M.?|r-A|@|q-S|T|"zc{O,e{H.d{f{g{j{k{h{l{I.o{i{p{m{o-q{y~t{v{y{r{w{J.n{u{s{m-x{"||{#|~{!|{{}{R}Z|$|z{%|&|'|)|K.(|n-*| |,|P,Z,U.1|R,;zS.s-j/k|l|o|m|[.T-',n|p|r|),q|(,u|w|k/y|t|v|U-s|x|z|~|{|!}}|||\."}V-$}*,W-%}].'}(}#}&} ,^.*})},}l/-},,8| }.}0}/}X-_.`.-,1}2}Y-5}4}3}6}W.[|j-\|b|X.]|^|_|Y.t/Q,`|F,l-a|({){7,D|E|s/W,=,-|L.z~/|0|B.G{H{J,I{K{L{J{M{P{C.D.N{T{U{O{S{R{F.Q{K,W{V{E.Y{X{G.\{Z{[{]{L,`{^{_{M,a{N,4|5|W}u,$zk-P}w/Q}k}j.x/l}m}n}t-l.Z}[}T}U}v-V}J}_,K}L}M}u-N}O}u}@}?}c.B}A}C}d.D}E}e.F}f.G}g.H}a.7}8}9}b.:};}I,<}=}>}".X}h.Y}i.p}q}r}s}t}o}k.%~&~i,'~z-(~)~ ~n.-~*~,~.~o.{-p.{/r.3,l,T~U~B,V~W~C,r/D,X~q/w.$~S}6~v.j,S~k,v}#~3|x,T.Y,U|V|v/u//~s.7~9~8~;~<~:~@~?~>~=~B~A~t.E~C~D~F~G~2,`-_-J~H~K~n/I~u.L~m/M~O~N~Q~R~'z{}|}h,}}x-X,~}!~"~y-${0~\,1~],2~3~4~^,5~z/O.P.|,q~.{I}w,r~s~t~u~v~w~\~^~]~p~,.B|N.C|U,Z~_~x.`~a~n,m,b~y.p,o,|-S,T,n~\-c~d~f/e~g~f~h~o~i~k~&,j~P-l~m~~/}~~~!-"-~,#-$-%-`,&-|.(-)-*-'- -,-a,b,--.-}-,{-{/{0{0,1{g/P~x~z.>-q,?-@-B-A-b{w}x}m.w-y}z}W|[,X|V.Y|C-D-E-F-G-H-I-J->,K-@{A{B{C{D{h-E{E,F{L-M-y/V,r,/-0-1-2-3-4-5-6-q.7-8-9-:-;-<-=-c,\}]}^}_}d,`}e,a}b}c}d}e}f,g,f}g}h}i}j}O-Q-&z{.R-s,t,{~|~@ S"S$S%S'S(S)S S,S-S/S0S1S2S3S4S5S6S7S8S<S=S@SBSDSFSKSLSMSPSTSXSYS[S]SeShSjSlSmSrSvSyS{S|S}S~SU!U%U&U(U)U U-U2U4U5U6U8U9U:U;U=U@UBUEUGUHUKULUMUNUOUQURUSUTUWUXUYUZU[U]U^U_U`UbUcUhUiUkUoUpUqUrUsUtUyUzU}U
X"X#X%X&X'X(X)X X,X-X.X/X1X2X3X4X6X7X8X9X:X;X<X=X>X?X@XAXBXCXEXFXGXHXIXJXKXNXOXPXRXSXUXVXWXYXZX[X\X]X_X`XaXbXcXdXfXgXhXiXjXmXnXoXpXqXrXsXtXuXvXwXxXyXzX{X|X}Xd"d#d$d%d'd(d)d d.d/d0d1d2d3d5d6d7d8d9d;d<d>d@dBdCdIdKdLdMdNdOdPdQdSdUdVdWdYdZd[d\d]d_d`dadbdcdddedfdhdjdkdldndodpdqdrdsdtdudvdwd{d|d}d~de e!e"e#e$e&e'e(e)e*e,e-e0e1e2e3e7e:e<e=e@eAeBeCeDeFeGeJeKeMeNePeReSeTeWeXeZe\e_e`eaedeeegeheiejemeneoeqeseuevexeyeze{e|e}e~e"P%Q%R%S%T%U%V%W%X%Y%Z%[%\%]%^%_%`%a%b%c%d%e%f%g%h%i%j%k%l%m%n%o%p%q%r%s%
!0"0#0$0%0&0'0(0)0
%<%4%,%$%
%q%r%s%
`!`'`)` `
e%f-f f'f/f
x4x7x%x-x x
~NzP}P\PGPCPLPZPIPePvPNPUPuPtPwPOP
]8^6^3^7^
c{cichczc]eVeQeYeWe_UOeXeUeTer6s%s4s)s:t*t3t"t%t5t6t4t/t
t&t(t%u&ukuju
a.bidodyd
duewexe
]!^"^#^ ^$^
t.uGuHu
h&h(h.hMh:h%h h,k/k-k1k4kmk
k%lzmcmdmvm
{1{ {-{/{2{8{WHX%X
`IaJa aEa6a2a.aFa/aOa)a@a bh
d@d%d'd
kCpDpJpHpIpEpFp
7.8.4151
"5#6#1#2#
.]._.g.W.Pk
&&.vC
**0*.*,*/*
[%]%^%7u
$c%d%
4= =3='=$=
?$?8?*?,? ?
:\0\7\;\
\$P$a$j$i$V$`$f$_$#%f%h%
_1_2_,_0_
'3')'5'1'7'6(
1%F!(
%Fp>p3q
C.DnD
i.lIl_n
H.HuH
&\$\2\'\!\0\
5?6?2?:?
='>(>!>%>
869597989
= >)>->/>
})}*}.}?
=:><>9>;>
;525.5>5;3
C'ETEUE.ET
s;s"u&u%u$u
*:(:=;<;
1.#.(.'.
LS.PLNLSLSPPPWP_PUP
]4^5^6^7^
#_$_%_&_'_(_)_*_ _
4u!%9u
"*")"'"("%d&`&a&e&g&c&
%!%"%&%'%)%*%-%.%1%2%5%6%9%:$=%>%@%A%C%D%E%F%G%H%I%J%
[!\!]!^!
mQ.bx
{ | }9},d6exe9j
]%sOu
m.t.zB}
w%xIyWy
%f?iCt
."4"W!'!#()!g"F!>!w)x)%"R"$!,"v),(y(v(z(/"!("(?!*(-(,)!)#)@!*)-)")$($)%)&(&)')((())())0)/(/) ( ).(.)'"0"(" "*"-")"A%B%C%D%E%F%G%H%I%J%K%L%M%N%O%P%Q%R%S%T%U%V%W%X%a%b%c%d%e%f%g%h%i%j%k%l%m%n%o%p%q%r%s%t%u%v%w%x%',!,",#,$,%,&,(,),*, ,,,-,.,/,0,1,2,3,4,5,6,7,8,9,:,;,<,=,>,?,@,A,Q,R,S,T,U,V,X,Y,Z,[,\,],^,_,`,a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,W,*!.!/!0!1!S"T"%!&!6"G!H!X!y)z){)|)})~)f"I!5"$'`"e"b"Y'J!w(x({(|(}(~(0%1%2%3%4%5%6%7%8%9%!%"%#%$%%%&%'%(%)%*%g!h!f!i!j!U"X"V"Y"W"!"""#"S!$"T!t!u!3"2"n!p!D!P! !|!}!{!z!r!s!1"E!q!-!o!V!A!U!B!C!l!m!x!y!v!w!A"Q!R!g(h(i(j(k(l(m(n(o(p(q(r(s(t(u(g)h)i)j)k)l)m)n)o)p)q)r)s)t)u)M)N)O)P)Q)R)S)T)U)V)W)X)Y)Z)[)\)])^)_)`)a)b)c)d)e)f)M(N(O(P(Q(R(S(T(U(V(W(X(Y(Z([(\(](^(_(`(a(b(c(d(e(f(!&,&"&-&H&G&.&$&B&A&/&&&F&E&1&%&D&C&0&'&<&I&J&7&K&L&2&)&>&M&N&9&O&P&4&(&Q&R&8&=&S&T&3&*&U&V&:&?&W&X&5& &Y&Z&;&[&\&@&]&^&_&`&a&b&c&d&6&F"a!`!C"G"H"K"J"I"L"c!b!:"9"e!d!8"7"_!^!B"[!]!\!D"E"Z!Y!O"N"P"Q"O!N!<"="@";">"?"M"["\"]"Z"!!"!#!(!4!5!6!7!8!9!:!;!<!=!k!2!3!!*"*#*$*%*&*'*(*)*** *,*-*.*/*0*1*2*3*4*5*6*7*8*9*:*;*<*=*>*?*@*A*B*C*D*E*F*G*H*I*J*K*L*M*N*O*P*Q*R*S*T*U*V*W*X*Y*Z*[*\*]*^*_*`*a*b*c*d*e*f*g*h*i*j*k*l*m*n*o*p*q*r*s*! " # $ % & ' ( ) * , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v !$"$#$$$%$&$'$($)$*$ $,$-$.$/$0$1$2$3$4$5$6$7$8$9$:$;$<$=$>$?$@$A$B$C$D$E$F$G$H$I$J$K$L$M$N$O$P$Q$R$S$T$U$V$W$X$Y$Z$[$\$]$^$_$`$a$b$c$d$e$f$g$h$i$j$k$l$m$n$o$p$q$r$s$t$u$v$w$x$y$z${$|$}$~$1)2)3)4)5)6)7)8)9):);)<)=)>)?)@)A)B)C)D)E)F)G)H)I)J)K)L)_"1(2(3(4(5(6(7(8(9(:(;(<(=(>(?(@(A(B(C(D(E(F(G(H(I(J(K(L(^"I'J'K'L'M':';'\']'^'6'7'8'T'U'V'W'X'!'"'#'%' ','-'.'/'0'1'2'3'4'''(')'*'='>'e'f'g'h'a'b'c'?'@'A'B'C'D'E'F'G'H'N'O'P'Q'R'S'Z'['c"l'&'`'o'a"<'m'5'9'j'k'_'d"d'n'i'ilKoRv2X[m2_>_;yt\du&s`]&axN0\*ciqzM/|!S qQg,RyN}q?^:{9yRN c`kzNwKêJLTajc\-_kK/UuVxe@^#lMi'jvi;{igLofPA^,dLXqy_N$z2f{z=zHLMoUU"SQl'dRl1v{NQP?K$m(mB^bv\mu\9`NT5t[S5V$lfdjqlK@KrljPry%l_PjgkPQ\i[L}W[aZ6V_cC^D^!Jln#S7nOxHj8n,q%qNi<yyejlV]Bm%x:eX["JMQmnklE^`cIJirNU6vBNGV4c-qbjBW'sjMnk2Y%}UvbU5xuL5u-dkgUq;p5iILUzTaVWA\F^ozacsav\|ND[qxd\oe1\VUZsAKC[zYnS8z&}ok&tJL(s[s'[7vfOrpZKRgCWpv^h&ege#J'LIj6x%z.qNomK0vOoOi^wSNw\([xK!_a]Ju6ilgnnps?_KLAPRt:`@_`NR\j}vVJjih,cPs$Jx[G^pkVqbeLL{KcjA_mVPi9ncUSQpe4hCk*j|zvu<pT};`CN:P:wsXMw.d_TgP}l.RonWUdj"xkM?W1{lM2\lP}NpnBLmPwe|s"n3YtX7i.N"YqXOT'eRU)V"tWqXU=pPWPTOWjkk}m[E|BKU}Htjhsu^yoSSlB]7oTgJJ{Y}z*Vxtww,\WW"_>NpS$plagOKs)m>JotNv{^;P7Uqn(tx\'KNZf`%mrny\\y\srxytq|<Py[1W|K%p}KtUmM%J VBP>p=R$L6zMLzZOv8iuXNLMWQTmikJbY2}-cLV4Y'aSnCP3}dUhOCm2P~N(ZPxV}QxRxS\b]y{A]5c]mDN!Kc]]|/y{R!O(d6t~l.cmgA}bZ3Xd]opqvpzuQOZT\&\?oONY`VYTlKj?J0UiOmqOLxdmdXW'} j2vpO=ytf[KQsQi)s`PRicZRb"vtadZUg?u"O/M#O0M~q#P/a#x&J;wjrH^SiI^^}@JjyNQTnRT#Y(}YWNw>zVOpWakExz\C]_yoge}#v|Y)}ngeUPo1M"w2q1q2M Z'Jbc<{$Y:nSxz{$O{\cv*m!raN&z`yVlnd!yo{ky#n,j(JztVMv|ItTx&xJ^FrZWPSEXfj]sZddvrvB_}YvL:S/day&pSK<`JtzT*}by7tB}0|l}bJ=}gjC_RQbN$S }`_GrpgnP*sK^8vua3q#w)J%OD_0a?p$v6cFzoPm}D]w|?f-^?zqeDm%Rn}6uvaL^^|Wl]M7V3MUxXejOPOLj.j-jqS%SOw$n$P"rpP#rxw3P)[;SlJ&qUKgw^M$w@x]SPL&Osvwa\S~z'zYk'O/jod9iXqXXr`4f|\qsPc{rF[qPrP\OQS1LXw(K<k>d\tB\'p@fmJkhheC\^mrSwLTN gCK1a2wsSRS@u]_snqg4}HrRstnSbQLj_:iWYMurqGzxYBTevE]rg_mKJz[5h&S5}Iybd={$WENUNfV=eM^sl`mll>{k_xa>ysP*`bhTb}R(eSY^S8t<w}\lhgdwc(lqzretP/Re\%P4q1|xLF]Qz_w(zunN^sg,wDkam `G]3R?RLJ?{}ee]MXtluPmhRPXYfv*[`wYX#t]tQo5Y m7c;n4Ms`Mjulnh)K/qMJ)lkro}syAfXl,mNj_hO^&RtgVQBfcc0d4X%v^s%WhwFhf{f]~\ZX,Z0j8c*Jya1jlrnzUntylR{{p}=`cNFx.^E_>e-mjznM&m.mmp!]/mx|kXyL5M)z]aUbOm"]JyhjmekSTizaLddaGh[NU\5ws|sp/N5qRoHhqkTK>`xcij2|t``O%n*zCf2a Jdc;iVbrsVn2jvPYlKZ(O#][XNyUiQc<R,XLs{MVvugohyc;Rss{cP^0NwVYqAuD\;uQ^f\R^bmvnOjnp|c_StS3a4aStF_Vi [&v9cEk)t6MyR-ZcRQO\KzL]O)h;c:cZ`wn3\uS&W5v[WUajT#__}wPTm*K[d{a"K`S?d@{>ZMd9V@o|a9vG_1dg\h\VzvSZqrz}bOUxP_MKupd KDW~bZ].ZnJ9U!cch s)OwSqTdNrhue.g:Vl_@ddh5X\d9t6q^b5aoM'qeN]KcY,syP lS^iwuy^anK<cVxn[q}6w^tmrY[(p}aT^,`cmaSH_6Y,}SoAdkx,[F|-X:v_[SSGxNJAx4R4\9zOJ3|jjkjzPdmg]I_m_<nAoRL$]J_xS(q7MTo]dn_,K<iljK_?y/VFU*O)NxV7qxnYY_sHxFNfUftEfUooK_|'\gVIxRc=caO@pZlW]p{,l)pWzA{@R0eem-K0y%w.K/Z6X'S2{D}-l!{ienitssxAp/^0x`s/g-[5f(yX]YhVobS_b`|HW-}o_SLySpTG[U^tpPUYeG|V\`b0Z#slSKtE}}c1y{P[l<u$rNXOXwuav7Rl{H]hdARWx;VV^=w.laPu`3jVN%Lvlab>cH|pMvyp_?e?Na|0mQ};vOyZkAJ8RqMScf}mfzc*pPyb|'xeaynvgmj4|Bu\Wuph]mS|u?Z{LzS$tWoCTc{m{-`nj3{Bdgv]RL_I|)ev`3v~apKojpj@Z4xrkCdWiqdoJWNJ|asDKecEK4j=iIW[k1mCL>wK|tx7YSsTsdwQw7X1NBJ4{FKvpgUPjTL/K*t/iCuXii]sq{U;^{ts}r}&wI]ST(LAZULdYJzce<SpJDPPJ zkkxgeYWQ$s{Tc|XzUs Osk|UTS|MfYyb!bTkw`2d|Ld{ t=PqJ8o@Wznt}cSB{hU.[6a7x?`C{j]"b&nhvuvJ]bP&]k]yd/c|P|t<Ljwdeq_awwy9oXx)yYx=nFXcdNuY]gY9RCUeZPZYQXN^K,t{Zivsh,Opp}tH[@NTcOQuqrMkO8M&cZQ%r&rNd{S)qIrXoIf8Xsz5s$xsQHfZxi\W^_KlO_ttQ:Rr_7a#b|SfmI[zd^OPNSUus.wHosMOuseBpQJqj&PZY pgk@e5|Dd)LF}5j*e:__aQZ8ath}S$bJrfZ3wM}6sWnDu$X'r8Y9YIoNVKw._uh5RUSLt|ZhYkwIu<sRZ5S6hOV:tIw*LCpVLSP=S{[`KdSwv:UMsaKtk-t*|lwvhgZLwAen`}UfN |;U(r¹MrjGKtM/[Yo:My|s_gNBZ-Oyg(xbsrJ$_DTWLBe;MZoXn']&b@`0VJxz|~Y0^l]hZ`TyVWMX^xrVdEP.t(]EmVsY^fc(S0[Ze?c1[iUA`[oip2W}PiY~Pml)S)rDpbboiQyYiZhCZDZETzg`M0c2[D{cs%Yg{K]TP6f.`Z}5\x`1gpu\XFm9a@c@ypi[Yds6\idEpAcL|M|KrLrOd[qYz8qu}y`{g7|d|E{gc9XxvE\XL/`gt\o|O]o*r>},J;}G}2gQjt_lQ^dCe&Y<MesUm:Ygm5{lxg`YLFT%guU>S{|rdu_xhmxGNv}XhXMVgZLcJv_GpFp:XtqptLue|Ejsj[]W\}^yrGUPXHp!Q"QTYhVJY1ZGXb\Nstu9qSZjvuO.}RJ4_]W:z'n=uuxhmaT#QVaxyJ[yKTT\Y>nmwnRfaywm][h3[wQ0`bTWvyW]X}M r=MBx,r-J.J.OBc7\Z[;YsJSvxfujvjyv/OSJ/J0R:q3WCc}sZ^[^^ocb{nw_JWhN[[;qqi7zFP L(nzKyy}L~SPdnrUTM_8|PQMrRwTJYU^XYM)n<v[LIp||Ih~t|g^W\^,p~LaM:ao[2Z%Q8\vX$QbMj\wpJp>P\]VTVSPm!M5_x_!T2NJhukUcPu!u'Y eKfquEe#y[`kvqKjY"uQWxQxjyj3Z_ooqve?ndb?P,zQu3g>iNr4[N|n]4g4W4w>MiZ0OYwfsYN*NHK'PKpGPEd`[ZU'W@nvxRuim<YFe#uTZ'b|{\qtJzhiNxieb9PrT&QN_t|*S,L`oeeUP|[f|~Kjm1^cy"TvOPVjUnqKz!e1UmOkm2U<Ub}-s[}0i'Qc}3Nd}Nz0J'w1O"f6|-rao.sF\kY`h(avU}O]^QYjdOr?wfb(bVcQmyi1V2^h` S\k/_CJ|nC}vk2OlY=Y_X8T>ko]p]q]r]>YF{3O}n dEZlX(Q)b<^5gp[bopq4Oq[1`%_Ry}g#fq{0K.rgM\hWg@wcP!Z=L)QL]~c*Q*h6jzyLfXvGTKYRYKSwX)Zxu^^/r)xHXAnAys]zj=v;a?MTtMfO|"{\`;tUZ2yr{v[_^r[\xnwhkzR<qZzjZFZAw6gGe,VG\)a*b&UWTPr{j]`s{=qgbW}HN7j@|g}ow5W:o]q3^Kh]xG{HU_W)]1i-zYvtz*xnf\L<ao`?i}|NfWaOfqtsd{ddyconO>v2`~| QzWH{Wb#Txp(Wga?SdoEWbkg|"dhbPfh{htte<tUt6_9|BnuJeobK$T`^}ZFd>h^`4vRj{yB`dJ7g}j]Y4Z*ni{K[5Z>q,SI{O_@SWcfoP|@iSu\l7w8jyQH\9j^q6W5O(Ynl*]"M.h=aQrAi|R5[gs~XQ|2m/t#{A| n%TrtYnJ{cM;X[ewxTv)WIKQfLp.XSy~U<X0r bhsBolm8g~Z>L|rkZXbVmQV3`R|HkASMpwORmXTI\qW;_%sMt?q1xziK{UJTyJwHVh|=s~n~gBS6S-Lzv2VXRXgÉg-pL{!k&TM{=U_q{v4^kUHe${9Ta^#d7Wnx5^RVUy:gUkwUgo>a.ziVnV;gKl3U4N%{na(wN{=X}{i|6OGm,n]L'vzf$u\}3mINho?a[zcK)w&{9\@qHmCo-VN}!ht{'UvqSf^L2xk\6}je`qL[M]HTmY%u{fTfH}!V?}S|!o<gnQUfri0_`X:|/}Npa[Ie4mC`Xc{i(j7}'{Biw}Ybl\"hpfx}y}?v'gWfsTITzVrW@ab[Xf=gOp>s,b7up`8}hc'T|hRzoxSV4UPppw3n:jSjIm ],e!}P_3lQ_mm8xzw x`t:T3dZi6^?Y@YoVLY*Ze_ew2Ly_`W;Tz}3Ls[R_JNZnddO{7OCnjN-baWuzIU,xYgismXDcqpehz`Dn^Y"k#kB|;j hb^om#hqO<Tj|>gr|4V.b7SLz\z5mca,h]hio=t8O[i,QGZIkLh7^<VeS]zVZ1JHZ&_3yRrDJKNuM0}(UAqibJ\4l@z({(PlZnY{`jo^zD`9OJUbW/b8WMhZv"oZb|vP{-QdM.Qm\Nhyp5N|f{WVPu]qw}vw[j{\iAYruE`TjBy<jERQ{@g%kz_"c9WCi}h/hSr){%XKUHP/QcWF`"VpmsWT|WZ_LTr0Q`L}[?sQp;|0b%f[b^_G`oraLjVBg6N@s~MR{xx{w?h7h6m:\4Lwq8hvJ$dVtf_'_g_AaDiK\Ei#o&k#Kic{Q$oko4P#Mfh%oLSmZ:WUreuoY4yTUO}c[aq6l~{WS1Q1K2Q2KBqat5yCaBawk(_JK9f^x*ywJ7m8SVrYTEnpr2J;\xq7lJe@v]}cTbLTweWCS&XAvv]@M\eKeDa0h0tjsnZ;W1b*W{V_dVJ(k~[Bv;o}TH`9h&o$MtT![\[][\nKKU|kNAMS{ yTu)Y]iM[N]CgLllyLK|`(TSmoXWrxJoZTVMYnXArS_pZjb}`xX/w6ZWJXryX_zoOBYRpQd7s`zlo2b=TNYbt)TBMZgYr*Y>X-\kb|VyJZTWt!L:O8uCYhPEcxk1r;O-SahlN4`c^w]2rvs[v~W_xrw)PZf&u<WcL[f]]3Qmo^Vtdoax]OheJ!\5`,|-|'X8m6[pV/s%MqZ(XdL4QXJrZ'u(u&flUxUsZFcd^e^5Q6Q7Q3r^iSp4rTpdKT{fujcf^T_yx.p8Q_VWP!|noX\_i]e{}I`IV*TLe`iXP"|>T3bg^<\6RUu!N)uy]z]Up_vZrkdqr9l|}*aYJoo*uyl-xBrCvRW"yVpzp`vsiCr T3J&MCMZMOYDv]nDg4bb_[g1h.|Mekz<ObOvMpo>tMT8s!irrksWpWO_O@hAhcO"i*PAs PdT<o!X_YWs=\eLqmbq[T5bfJ.SfLSqguZJn{Eai_^nBw"X,]/p=V a6yuTIP'olbj[LNhuUwMS~s5P~`{_]f$hMK(o4nXZ9Q)_0sDL7N)oU_WmFn=oV|t[*o9xiuYcFa?Th^jpBs/S[JW|XmGaXt3V-]>UCq_nkVYtfW7Z{]O]#XYZXpDoXaTqrm[U\UDsWK6bqoU{XSP]Yp3K]U'M,P:QDq3eu{ai`}<|"Z#Z!RoRmbi^\N5rdPQ]Ha7[c_9mEqOs W,akcGnIazJ{pazZpgLtZ?LmN)UbzePVk_l|_Vwj^4K>o5L=Oro7bhL|p`VFq8b k5KQXNtwsFW;Q*wJmSWzXEvLQ|]}_eyJ`}r0SstIZ^f:xPh{XUj#VFv[r|d2hZZ\rV{2i-nczn\ju`f}p,WEu`ne[^]pY#iyqDrK`$i9b1ck|(M6L[p:f)MCsYa oEgi`Es@T?U.]|y@L"e8NRXVy*qQNGvk[~_aXswgW~T<QOe6K8ZDM>V:bXOL`yk}}hWXKbi:hGcMlNl?V'cV_h}an(v}];xQhWynNOl%iUVEM:m=Q>O;l1RiLDY|i>Q<l-e0wjLDS@V}V!a=^)v$Z$VFu"aFiEritlVSk=l\bk^\p?kNW?Q u}y\JFM6r~]7L8[iP]N@k"}KxVj0qN[CwO[$K`xW{Jk!`MN\TX}vR7rvz*vwzfX1tRhEJkLnb;b-waxls!^}dlc/]0]7KSh#a`R~p&irKsmY\M`Zw9[.L[ZGM1]/X#coNsr3xN`}ulkESl|[RkT"^fe0pDUtmmcBhum|W;m v8rHvfS]r?O,k@O(fi}AO_`l^"`?tobqYGq8K~y:[uZlv\ZdzO`2])fsomszkfy]J^U^Jd_}f,uudciKmdOSX3]lT9r7_NKX{YPR]tw\g%d#|;[:r}iJPVuEY4d'm=j~fDw-u`Y4JbxBO>l4eHMHnHgIM7yhqrYu[5JFYIX Y<mTXZ\<bm|`l~RGi*fpb;z.u*{{l?lX|eTCybniWvmm^lLncThxz4]5d0XUXjt9NaVRO6P"NnsxsL\KP$|JMTW#^`dIn]b~u,TQUpXCxWjWu?X@}-k*U(gJngJcx]TXjY{wm5e-Pqq=bHcUY*_<[dxzq6eosZ{`a,Yku6`HiOKIcn^>bo\%Vqb~V!Y@X[\=m8_%j-WysxmGuJack^rLxYjFSf[/upN~i6{rbrO9wsYKa]Z9Z{k9Kym``@t<}1_oc#`9}1pKM>m@UpczmdimU]gvT7eg[?bKntW]p N^gVVLa3hne"\P`5U!U[{KysK%tHzWVei\{P}v{%Z=[blwM^pIvo^1Sn|ChHqqNmytr6d9up\qc%h;r$^LZiJZcY|ZjDy$c]{JoDhLUWk-Y {YS"U^vvZQ`(iyu/z|kj`2cEUcqnULMYmAXlzkq<zbfezzb6J7d[jzu,{CO}kzx9_qa$R{uZP[P>j1Y7JgSex2S@b_reM,yMM.n.VjW`g.kYOM\{mp^kW%^W_P[Q[#U2p\\hJfxN\\jR[3i[w(c.Wa`:KQe\PAUJX)c$`)iGS]\.x8L.PrXJc/L-TQvLPFJBU:NGJ0zX_:uketo5]*Mrcw{Pw:}a}~v@QEh8dhaALmR>[b`IzMa8J`rIqq^_pDxLnr^IgsbagKcLcxO,o~}%|1zY_R`ZtJq#N<rcl%` w/k^e$a MtY&hNMiao|c`Ab$N&^~k]k`p[ttbHSkt5nXu_UeV0kctMctt2zuo_J1k?mI}&d$y3plegQGYWd]jwT:ZMZLyZa?[ELPl;Ks^*iHYcn=WDOMP&|{qR}AQ[cISO\mL'^;f!l9L^{bgAT(\BbXsSeYsFs[M,MC|gTBQ%yUhNcJTZ__{cg{xOc0ugXIY/xvo6]/nxM8^'||w1w;N!tMn.aCl~O?xbXhS(^dtBluYEyS]qV|lp|@m9Jdnar9^rVt^[_S[gzcXAt7]ur.TsV8]EO__>r!vKk|qGsk`|m[aenu^SzKq/P9]CQ1uFjap,vYukp:]?rEw"[vr:JuweKfnS`%NXV/TIiNSBtfK!q2k"q3k4ptK0T2s7{lugn2tmusObpNnLq8euWsceOFO3sXdyOZOMzcfbrnu;J\crNYV0netBXP\nL`UJvJ}VXOt&V>\T[GW~rMqCb^\_\-o f]y?j.oPtsN,f^NyUtcPM8U}w)\v^*\cr4i\RfivcJgNPwZ<Jhn^Zwr{b&L;ZinZu\wjaAN1T1}=f-{gxNabwouGO2ToLhTOnWw&`AV\acpdqq\'VutNqdr0Pol:y5kmTDbgi4k!j<x&NFyZ|3T9S^j iaaOSvt@jOa:Ljndp4snT@reqCtT`6k!WhK-y-idX3zEb=|Dl1X \$Uik;hWX.{aQ@[>uw^{JFwHOPaPntitNMU[O;],Nhi4TGd[uAz)^xTwo3S7kxo\uLmU[OqPq2u.Y,UFb#}e{ _ub-v3u5p%a]u"l}m4u8{#[JVYKTezs8k7`lWlq/eaUmWQQrayo<]\vepDtii{soT"L~w<_Mk7PBV-h/o%KiKhzFLgfGj$[IO|bzo^kHu^TU`0oGb/YgyegJOQaHb{oyzr\'`hxjK<KbV^u_u6nvbJS|oDQ1oEQ^PaY8`QM9sLg(V'N5THd4S9kuK]v#qGLJipa`u/{QK`{erpllpknKipL/W!su|$qV`2oQt!wQq|J}JNNHs:s~m&Zl`MxRKNkXyYy`JJZ&KHJnyl[1PoUsf"gYdadD|oytOfw<NEt#\=]Ft!xVhA[fp9dmv.y>]0WhX=KZyNxpym`3c3tBjfr6pV[dkgrUW6ThyAWUejiLWiSIb[|-M0L"jvd@P7p!nvWJbKbOz_kKV4tMmRd)j:d"sRMKvfqAm<hQngpLb*dauZmnWqQkilid`'ZT]#jCVtV_Z3oMb}ohrEogg}WNg\_GyvY,_ZV$\8pzUwdDVlt~o!p*^<Z|XTzel(|flKX9{SdyMSOjJTO=xGt_j[y7TekRa$jBza{mz"pqL#zwbNbuikahgWhxZKTvwEViTzzrL]w:^(N9p~dIdTdCj4o>Wb{SM5oiz&y=_Gw}x|x ^h[]cbaFQPvfkyZGlx^ix^cuNCzWeHlIs;d.f6o?\=NCXOPzOJsW`GQ.i=hDzObEz8y`\0{)X_e'ynvLvxbql`ZRqLRKO=J?]ovy^4z-Ugq>^@\HQIQ>xvKyTbuSaiX~xLO$}vNPzsL>f.vpUJQ>|qUiM5zPbwtTM#g%[Qb"Wcw&j!PZNk{&[^[eX`j*X`e[VFojxUdwNX`oWmtfMtLcuJda\Hy?|'hDX>K.\wWhp@]MOs\0Yif<dDjldedx{;L=d\MwY_]NmPY#eMy.MNO/vS}mk\V$e6U]Viy$gcVKQdVrUz^xWjXUO}X XK}\|(`sUY}#LyYjSuuGoZS=Z(h/\#pUM)`,^:p1n2nMvRnFVe`;saeKd#WB[~JOO!0"0#0$0%0&0'0(0)0*0 0,0-0.0/000102030405060708090:0;0<0=0>0?0@0A0B0C0D0E0F0G0H0I0J0K0L0M0N0O0P0Q0R0S0T0U0V0W0X0Y0Z0[0\0]0^0_0`0a0b0c0d0e0f0g0h0i0j0k0l0m0n0o0p0q0r0s0t0u0v0w0x0y0z0{0|0}0~0!1"1#1$1%1&1'1(1)1*1 1,1-1.1/101112131415161718191:1;1<1=1>1?1@1A1B1C1D1E1F1G1H1I1J1K1L1M1N1O1P1Q1R1S1T1U1V1W1X1Y1Z1[1\1]1^1_1`1a1b1c1d1e1f1g1h1i1j1k1l1m1n1o1p1q1r1s1t1u1v1w1x1y1z1{1|1}1~1!2"2#2$2%2&2'2(2)2*2 2,2-2.2/202122232425262728292:2;2<2=2>2?2@2A2B2C2D2E2F2G2H2I2J2K2L2M2N2O2P2Q2R2S2T2U2V2W2X2Y2Z2[2\2]2^2_2`2a2b2c2d2e2f2g2h2i2j2k2l2m2n2o2p2q2r2s2t2u2v2w2x2y2z2{2|2}2~2!3"3#3$3%3&3'3(3)3*3 3,3-3.3/303132333435363738393:3;3<3=3>3?3@3A3B3C3D3E3F3G3H3I3J3K3L3M3N3O3P3Q3R3S3T3U3V3W3X3Y3Z3[3\3]3^3_3`3a3b3c3d3e3f3g3h3i3j3k3l3m3n3o3p3q3r3s3t3u3v3w3x3y3z3{3|3}3~3!4"4#4$4%4&4'4(4)4*4 4,4-4.4/404142434445464748494:4;4<4=4>4?4@4A4B4C4D4E4F4G4H4I4J4K4L4M4N4O4P4Q4R4S4T4U4V4W4X4Y4Z4[4\4]4^4_4`4a4b4c4d4e4f4g4h4i4j4k4l4m4n4o4p4q4r4s4t4u4v4w4x4y4z4{4|4}4~4!5"5#5$5%5&5'5(5)5*5 5,5-5.5/505152535455565758595:5;5<5=5>5?5@5A5B5C5D5E5F5G5H5I5J5K5L5M5N5O5P5Q5R5S5T5U5V5W5X5Y5Z5[5\5]5^5_5`5a5b5c5d5e5f5g5h5i5j5k5l5m5n5o5p5q5r5s5t5u5v5w5x5y5z5{5|5}5~5!6"6#6$6%6&6'6(6)6*6 6,6-6.6/606162636465666768696:6;6<6=6>6?6@6A6B6C6D6E6F6G6H6I6J6K6L6M6N6O6P6Q6R6S6T6U6V6W6X6Y6Z6[6\6]6^6_6`6a6b6c6d6e6f6g6h6i6j6k6l6m6n6o6p6q6r6s6t6u6v6w6x6y6z6{6|6}6~6!7"7#7$7%7&7'7(7)7*7 7,7-7.7/707172737475767778797:7;7<7=7>7?7@7A7B7C7D7E7F7G7H7I7J7K7L7M7N7O7P7Q7R7S7T7U7V7W7X7Y7Z7[7\7]7^7_7`7a7b7c7d7e7f7g7h7i7j7k7l7m7n7o7p7q7r7s7t7u7v7w7x7y7z7{7|7}7~7!8"8#8$8%8&8'8(8)8*8 8,8-8.8/808182838485868788898:8;8<8=8>8?8@8A8B8C8D8E8F8G8H8I8J8K8L8M8N8O8P8Q8R8S8T8U8V8W8X8Y8Z8[8\8]8^8_8`8a8b8c8d8e8f8g8h8i8j8k8l8m8n8o8p8q8r8s8t8u8v8w8x8y8z8{8|8}8~8!9"9#9$9%9&9'9(9)9*9 9,9-9.9/909192939495969798999:9;9<9=9>9?9@9A9B9C9D9E9F9G9H9I9J9K9L9M9N9O9P9Q9R9S9T9U9V9W9X9Y9Z9[9\9]9^9_9`9a9b9c9d9e9f9g9h9i9j9k9l9m9n9o9p9q9r9s9t9u9v9w9x9y9z9{9|9}9~9!:":#:$:%:&:':(:):*: :,:-:.:/:0:1:2:3:4:5:6:7:8:9:::;:<:=:>:?:@:A:B:C:D:E:F:G:H:I:J:K:L:M:N:O:P:Q:R:S:T:U:V:W:X:Y:Z:[:\:]:^:_:`:a:b:c:d:e:f:g:h:i:j:k:l:m:n:o:p:q:r:s:t:u:v:w:x:y:z:{:|:}:~:!;";#;$;%;&;';(;);*; ;,;-;.;/;0;1;2;3;4;5;6;7;8;9;:;;;<;=;>;?;@;A;B;C;D;E;F;G;H;I;J;K;L;M;N;O;P;Q;R;S;T;U;V;W;X;Y;Z;[;\;];^;_;`;a;b;c;d;e;f;g;h;i;j;k;l;m;n;o;p;q;r;s;t;u;v;w;x;y;z;{;|;};~;!<"<#<$<%<&<'<(<)<*< <,<-<.</<0<1<2<3<4<5<6<7<8<9<:<;<<<=<><?<@<A<B<C<D<E<F<G<H<I<J<K<L<M<N<O<P<Q<R<S<T<U<V<W<X<Y<Z<[<\<]<^<_<`<a<b<c<d<e<f<g<h<i<j<k<l<m<n<o<p<q<r<s<t<u<v<w<x<y<z<{<|<}<~<!="=#=$=$=&='=(=)=*= =,=-=.=/=0=1=2=3=4=5=6=7=8=9=:=;=<===>=?=@=A=B=C=D=E=F=G=H=I=J=K=L=M=N=O=P=Q=R=S=T=U=V=W=X=Y=Z=[=\=]=^=_=`=a=b=c=d=e=f=g=h=i=j=k=l=m=n=o=p=q=r=s=t=u=v=w=x=y=z={=|=}=~=!>">#>$>%>&>'>(>)>*> >,>->.>/>0>1>2>3>4>5>6>7>8>9>:>;><>=>>>?>@>A>B>C>D>E>F>G>H>I>J>K>L>M>N>O>P>Q>R>S>T>U>V>W>X>Y>Z>[>\>]>^>_>`>a>b>c>d>e>f>g>h>i>j>k>l>m>n>o>p>q>r>s>t>u>v>w>x>y>z>{>|>}>~>!?"?#?$?%?&?'?(?)?*? ?,?-?.?/?0?1?2?3?4?5?6?7?8?9?:?;?<?=?>???@?A?B?C?D?E?F?G?H?I?J?K?L?M?N?O?P?Q?R?S?T?U?V?W?X?Y?Z?[?\?]?^?_?`?a?b?c?d?e?f?g?h?i?j?k?l?m?n?o?p?q?r?s?t?u?v?w?x?y?z?{?|?}?~?!@"@#@$@%@&@'@(@)@*@ @,@-@.@/@0@1@2@3@4@5@6@7@8@9@:@;@<@=@>@?@@@A@B@C@D@E@F@G@H@I@J@K@L@M@N@O@P@Q@R@S@T@U@V@W@X@Y@Z@[@\@]@^@_@`@a@b@c@d@e@f@g@h@i@j@k@l@m@n@o@p@q@r@s@t@u@v@w@x@y@z@{@|@}@~@!A"A#A$A%A&A'A(A)A*A A,A-A.A/A0A1A2A3A4A5A6A7A8A9A:A;A<A=A>A?A@AAABACADAEAFAGAHAIAJAKALAMANAOAPAQARASATAUAVAWAXAYAZA[A\A]A^A_A`AaAbAcAdAeAfAgAhAiAjAkAlAmAnAoApAqArAsAtAuAvAwAxAyAzA{A|A}A~A!B"B#B$B%B&B'B(B)B*B B,B-B.B/B0B1B2B3B4B5B6B7B8B9B:B;B<B=B>B?B@BABBBCBDBEBFBGBHBIBJBKBLBMBNBOBPBQBRBSBTBUBVBWBXBYBZB[B\B]B^B_B`BaBbBcBdBeBfBgBhBiBjBkBlBmBnBoBpBqBrBsBtBuBvBwBxByBzB{B|B}B~B!C"C#C$C%C&C'C(C)C*C C,C-C.C/C0C1C2C3C4C5C6C7C8C9C:C;C<C=C>C?C@CACBCCCDCECFCGCHCICJCKCLCMCNCOCPCQCRCSCTCUCVCWCXCYCZC[C\C]C^C_C`CaCbCcCdCeCfCgChCiCjCkClCmCnCoCpCqCrCsCtCuCvCwCxCyCzC{C|C}C~C!D"D#D$D%D&D'D(D)D*D D,D-D.D/D0D1D2D3D4D5D6D7D8D9D:D;D<D=D>D?D@DADBDCDDDEDFDGDHDIDJDKDLDMDNDODPDQDRDSDTDUDVDWDXDYDZD[D\D]D^D_D`DaDbDcDdDeDfDgDhDiDjDkDlDmDnDoDpDqDrDsDtDuDvDwDxDyDzD{D|D}D~D!E"E#E$E%E&E'E(E)E*E E,E-E.E/E0E1E2E3E4E5E6E7E8E9E:E;E<E=E>E?E@EAEBECEDEEEFEGEHEIEJEKELEMENEOEPEQERESETEUEVEWEXEYEZE[E\E]E^E_E`EaEbEcEdEeEfEgEhEiEjEkElEmEnEoEpEqErEsEtEuEvEwExEyEzE{E|E}E~E!F"F#F$F%F&F'F(F)F*F F,F-F.F/F0F1F2F3F4F5F6F7F8F9F:F;F<F=F>F?F@FAFBFCFDFEFFFGFHFIFJFKFLFMFNFOFPFQFRFSFTFUFVFWFXFYFZF[F\F]F^F_F`FaFbFcFdFeFfFgFhFiFjFkFlFmFnFoFpFqFrFsFtFuFvFwFxFyFzF{F|F}F~F!G"G#G$G%G&G'G(G)G*G G,G-G.G/G0G1G2G3G4G5G6G7G8G9G:G;G<G=G>G?G@GAGBGCGDGEGFGGGHGIGJGKGLGMGNGOGPGQGRGSGTGUGVGWGXGYGZG[G\G]G^G_G`GaGbGcGdGeGfGgGhGiGjGkGlGmGnGoGpGqGrGsGtGuGvGwGxGyGzG{G|G}G~G!H"H#H$H%H&H'H(H)H*H H,H-H.H/H0H1H2H3H4H5H6H7H8H9H:H;H<H=H>H?H@HAHBHCHDHEHFHGHHHIHJHKHLHMHNHOHPHQHRHSHTHUHVHWHXHYHZH[H\H]H^H_H`HaHbHcHdHeHfHgHhHiHjHkHlHmHnHoHpHqHrHsHtHuHvHwHxHyHzH{H|H}H~HPKVKgKOMhM-N{O"P8PPP]PTQUQXQ[Q\Q]Q^Q_Q`QbQcQdQeQfQhQiQjQkQmQoQpQrQvQzQ|Q}Q~Q"R#R'R(R)R*R R-R2R>RBRCRDRFRGRHRIRJRKRMRNRORPRQRRRSRTRURVRWRYRZR^R_RaRbRdReRfRgRhRiRjRkRpRqRrRsRtRuRwRxRfT|T%U U.U8VMVKWdWE[d[%\%]U]t]|^~^3_a_h_q`-amauc!d)d.e1e2e9e;e<eDeNePeReVeze{e|e~e!f$f'f-f/f0f1f3f7f8f<fDfFfGfJfRfVfYf\f_fafdfefffhfjfkflfofqfrfufvfwfyf!g&g)g*g,g-g0g?gAgFgGgKgMgOgPgSg_gdgfgwgghhhphqhwhyh{h~h'i,iLiwiAjejtjwj|j~j$k'k)k*k:k;k=kAkBkFkGkLkOkPkQkRkXk&l'l*l/l0l1l2l5l8l:l@lAlElFlIlJlUl]l^laldlglhlwlxlzl!m"m#mnm[n=rzr1s'tnttvvv8wHwSw[xpx!z"zfz)|!#"###$#%#'#(#)#*# #,#-#.#/#0#1#2#3#4#5#6#7#8#9#:#;#<#=#>#?#@#A#B#C#D#E#F#G#H#I#J#K#L#M#N#O#P#Q#R#S#T#U#V#W#X#Y#Z#[#,!]#^#_#`#a#b#c#d#e#f#g#h#i#j#k#l#m#n#o#p#q#r#s#t#u#v#w#x#y#z#{#|#}#&"K!L!~!~#M!\#s&t*t)t.tbt
.GIzI}I
$ ' / 1 1 4 4 6 : <
0 0*0=0?0@0
CUWeXeYeZe[e\e`eaecedegeielene
ZT%f%W%`%l%c%Z%i%]%R%d%U%^%j%a%X%g%[%S%e%V%_%k%b%Y%h%\%Q%P%m%n%p%o%
;L0LBLCLQC%sJ
M.Nr<\O
U.Wex
m.dOl5Y
!"#$%&'()* ,-./0123456789:;~
!"#$%&'()* ,-./0123456789:;<=>?
!"$%&()* ,-.1
!"#&')* /01236
!"#%&'()* ,-
!$&'()* ,-/01
!"#$%&) -./0123
!$&'()*-/236
!#$%&'(),012345789;<=
!"#$%&'()*
"#$%&'()* ,-./0123
!"#$%&'()* ,
!"#&(*,-./234
!"#$%&'()*,-
!"#$%&'()* ,-.
!"$%&'() ,-./012
!"#$%&'()*
!#%&'()* ,-
"#$%&'( ,-01
!"$%&()* ,-.156789:<=>@
"#%&')* ,-./246789:
"#$%&'()* ,-.
!"#$%'() ,-/012345
!"#$%&')*
!"#$%&()* ,-./0
!"#$%&'()* ,-./013
!#$%'() ,-.
!"#%&'()*-.012456
!"#$%&'()* ./
!"#$%&) -./0125689:<
!"#$%&()* ,-./01
!"#$%&'*./0123
!#$%&'(),01234578
"#$%&'( -/01
!"#$%&'()* ,-./0
!"#$%'()* ,-
!"#&(* ,-./12
!"#$%&'()* ,-
!#$%'() ,-./01345
!#%&'()*-.01256
"&'()* -./012345678
!#$%&'(),.012345789;
"#$&'()* ,-./01234
!"#%&')* ,
!$%'() ,-.
!"#%&'()*-.01467
!"#$%&'()*-.01245
#'() ,/02346789:;<?
!$()* ,-01345
!"%&)* ,-.012345
!"#$') ,-./02345
!"#%&')* -.
#%'()* ,./0123456
!"$%&()* ,-.013
!"#$%&'()* ,-./
"$%&'(),-/01345
!#$%&'(),.01234589;
!"#$%&()* ,-./0145
!"#$%&'() -./0125689
!"#$%') ,-./023
"#$%'(* -/012346
!#$%&'()* ,-.012
!"$%&()* ,-.0135678
!#$%'()* ,-012456789<=
!"#$%&'()
!"#$%&'()* ,-./0123456789:;<=
!"#$%&'()* ,-./0123456789
!"#$%&'()* ,-./012345
!"#$%&'()* ,-./01
Z%T%i%f%`%P%l%}
O!wexe
ôfpf
wexe
%S%T%_%
%S%_%
%S%T%
ôfp
!2,4,6,7
! !!!"!#!$!
{!|!}!~!" "!"""#"$"'" ","-"."/"0"
0$1$3$4$
%!%"%#%$%%%'%
B%D%E%F%
Q%S%T%U%V%
9&:&;&<&
' '!'"'$'%'&'''(')'*' ','-'.'/'0'2'3'4'5'6'8'9':'<'='>'?'@'-(.(/(0(1(
8(:(;(=(
(*.*/*0*1*2*3*4*5*6*7*9*:*;*<*
4 5 6 7 8 9
!,",#,$,%,&,',
-!-"-#-$-%-&-
4-5-6-8-
#.$.%.&.'.(.).
...0.1.2.5.7.
WINDOWS-1251
WINDOWS-1252
WINDOWS-1256
WINDOWS-1255
WINDOWS-1258
WINDOWS-1253
WINDOWS-1250
WINDOWS-1257
WINDOWS-1254
ISO_646.IRV:1991
WINDOWS-874
CSSHIFTJIS
AVIFIL32.dll
RASAPI32.dll
iphlpapi.dll
SHLWAPI.dll
MPR.dll
WINMM.dll
VERSION.dll
GetProcessHeap
WinExec
GetWindowsDirectoryA
GetCPInfo
GetKeyState
CreateDialogIndirectParamA
UnhookWindowsHookEx
SetWindowsHookExA
GetViewportOrgEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
GetViewportExtEx
WINSPOOL.DRV
comdlg32.dll
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
ADVAPI32.dll
ShellExecuteA
SHELL32.dll
OLEAUT32.dll
oledlg.dll
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetCrackUrlA
InternetCanonicalizeUrlA
WININET.dll
.PAVCException@@
.PAVCNotSupportedException@@
.PAVCFileException@@
(*.prn)|*.prn|
(*.*)|*.*||
Shell32.dll
Mpr.dll
Advapi32.dll
Gdi32.dll
Kernel32.dll
(&07-034/)7 '
?? / %d]
%d / %d]
: %d]
(*.WAV;*.MID)|*.WAV;*.MID|WAV
(*.WAV)|*.WAV|MIDI
(*.MID)|*.MID|
(*.txt)|*.txt|
(*.JPG;*.BMP;*.GIF;*.ICO;*.CUR)|*.JPG;*.BMP;*.GIF;*.ICO;*.CUR|JPG
(*.JPG)|*.JPG|BMP
(*.BMP)|*.BMP|GIF
(*.GIF)|*.GIF|
(*.ICO)|*.ICO|
(*.CUR)|*.CUR|
%s:%d
windows
out.prn
%d.%d
%d / %d
%d/%d
Bogus message code %d
(%d-%d):
%ld%c
(*.avi)|*.avi
RICHED32.DLL
RICHED20.DLL
WPFT532.CNV
WPFT632.CNV
EXCEL32.CNV
write32.wpc
Windows Write
mswrd632.wpc
Word for Windows 6.0
wword5.cnv
Word for Windows 5.0
mswrd832.cnv
mswrd632.cnv
Word 6.0/95 for Windows & Macintosh
html32.cnv
operator
keywords
(*.htm;*.html)|*.htm;*.html
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP/1.0
%s <%s>
Reply-To: %s
From: %s
To: %s
Subject: %s
Date: %s
Cc: %s
%a, %d %b %Y %H:%M:%S
SMTP
VVV.dywt.com.cn
.PAVCOleException@@
.PAVCObject@@
.PAVCSimpleException@@
.PAVCMemoryException@@
.?AVCNotSupportedException@@
.PAVCResourceException@@
.PAVCUserException@@
.?AVCCmdTarget@@
.?AVCCmdUI@@
.?AVCTestCmdUI@@
.PAVCArchiveException@@
.PAVCOleDispatchException@@
zcÁ
c:\%original file name%.exe
#include "l.chs\afxres.rc" // Standard components
<?xml version="1.0" encoding="UTF-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity name="E.App" processorArchitecture="x86" version="5.1.0.0" type="win32"/><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="x86" publicKeyToken="6595b64144ccf1df" language="*" /></dependentAssembly></dependency></assembly>PADPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGX
1, 0, 6, 6
?hXXp://d.union.ijinshan.com/duba/link/grthKAVSETUPS_66_0.exe@/s
2011,09,15,1501
konlineinstaller.exe
9,0,44813,1501
&'()* ,-./
$&(*,-/14
(*.*)
1.0.0.0
2007-2011
%original file name%.exe_176_rwx_00401000_0009F000:
t$(SSh
~%UVW
u$SShe
%original file name%.exe_176_rwx_10027000_00015000:
msctls_hotkey32
TVCLHotKey
THotKey
\skinh.she
}uo,x6l5k%x-l h
9p%s m)t4`#b
e"m?c&y1`Ð<
SetViewportOrgEx
SetViewportExtEx
SetWindowsHookExA
UnhookWindowsHookEx
EnumThreadWindows
EnumChildWindows
`c%US.4/
!#$<#$#=
.text
`.rdata
@.data
.rsrc
@.UPX0
`.UPX1
`.reloc
%-^
.hk;~
KINSTALLERS_66_109992.exe_2028:
.text
`.rdata
@.data
.rsrc
KERNEL32.dll
USER32.dll
MSVCP60.dll
WS2_32.dll
MSVCRT.dll
_acmdln
%d.%d.%d.%d
User-Agent:Mozilla/4.0 (compatible; MSIE 5.00; Windows 98)
HTTP/1.1
{Konline_1A4F0F3B-5516-4338-AB9A-3A562A2761FB}HTTP/1.1 20
hXXp://bo.duba.net:8080/pagetracer2/duba/__utm.gif?
?hXXp://d.union.ijinshan.com/duba/link/grthKAVSETUPS_66_0.exe@/s
2011,09,15,1501
konlineinstaller.exe
9,0,44813,1501
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Terminate malicious process(es) (How to End a Process With the Task Manager):
KINSTALLERS_66_109992.exe:2028
- Delete the original Trojan file.
- Delete or disinfect the following files created/modified by the Trojan:
%Documents and Settings%\%current user%\Local Settings\Temp\kingsoftkonline\KINSTALLERS_66_109992.exe.tmp (230271 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\ptui_ver[2].js (233 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\login[1].htm (1302 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\h[1].js (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\KINSTALLERS_66_109992.exe (59 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\21[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\login[1].htm (1511 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\index[1].htm (562 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\c_icon_2[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\clearcache[1].html (934 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\big_8[1].png (1113 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\qqtubiaoad[1].htm (3 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@heima8[1].txt (626 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\ptqrshow[1].png (433 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@heima8[2].txt (303 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\ptui_ver[1].js (175 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (164 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\clearcache[1].htm (2 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (182 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\www.cx90[1].xml (266 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\load[1].gif (771 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\h_login_17[1].js (2701 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (181 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\h[2].js (16 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\468X60_54502[1].jpg (13245 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\qqtbset.ini (1 bytes)
%Documents and Settings%\%current user%\Cookies\index.dat (5784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\desktop.ini (67 bytes) - Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
- Reboot the computer.
*Manual removal may cause unexpected system behaviour and should be performed at your own risk.