Trojan.Generic.12105354_aafc24018e

by malwarelabrobot on December 9th, 2014 in Malware Descriptions.

HEUR:Trojan.Win32.Generic (Kaspersky), Trojan.Generic.12105354 (AdAware), Trojan-PSW.Win32.MSNPassword.FD, Trojan.Win32.FlyStudio.FD, mzpefinder_pcap_file.YR, TrojanFlyStudio.YR (Lavasoft MAS)
Behaviour: Trojan-PSW, Trojan


The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Requires JavaScript enabled!

Summary
Dynamic Analysis
Static Analysis
Network Activity
Map
Strings from Dumps
Removals

MD5: aafc24018e398bd61bd9c857639dbd13
SHA1: 81b1389cd9eda9b3aa85af67ebb5e4bc79da3d63
SHA256: da4a998efc8de9e1b19116f7f30b07b74ca655c58bd2f436a64a3b3aa55d23cf
SSDeep: 49152:j1qCLVxwZt7y s8KuqGaX0ToIBAUZLYVnCf2E3:jPwZxxJBAUZLD
Size: 2150400 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6
Company: no certificate found
Created at: 2014-04-23 17:54:16
Analyzed on: WindowsXPESX SP3 32-bit


Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

No specific payload has been found.

Process activity

The Trojan creates the following process(es):

KINSTALLERS_66_109992.exe:2028

The Trojan injects its code into the following process(es):

%original file name%.exe:176

Mutexes

The following mutexes were created/opened:

c:!documents and settings!adm!local settings!history!history.ie5!mshist012014120820141209!
_!SHMSFTHISTORY!_
__DDrawCheckExclMode__
__DDrawExclMode__
DDrawWindowListMutex
DDrawDriverObjectListMutex
CTF.TMD.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003
CTF.Layouts.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003
CTF.Asm.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003
CTF.Compart.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003
CTF.LBES.MutexDefaultS-1-5-21-1844237615-1960408961-1801674531-1003
ZonesLockedCacheCounterMutex
ZonesCacheCounterMutex
ZonesCounterMutex
WininetProxyRegistryMutex
WininetConnectionMutex
WininetStartupMutex
c:!documents and settings!adm!local settings!history!history.ie5!
c:!documents and settings!adm!cookies!
c:!documents and settings!adm!local settings!temporary internet files!content.ie5!
_!MSFTHISTORY!_
RasPbFile
ShimCacheMutex

File activity

The process KINSTALLERS_66_109992.exe:2028 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\kingsoftkonline\KINSTALLERS_66_109992.exe.tmp (230271 bytes)

The process %original file name%.exe:176 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\ptui_ver[2].js (233 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\login[1].htm (1302 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\h[1].js (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\KINSTALLERS_66_109992.exe (59 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\21[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\login[1].htm (1511 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\index[1].htm (562 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\c_icon_2[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\login[1] (1282 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\clearcache[1].html (934 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\big_8[1].png (1113 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\qqtubiaoad[1].htm (3 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@heima8[1].txt (626 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\ptqrshow[1].png (433 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@heima8[2].txt (303 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\ptui_ver[1].js (175 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (164 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\clearcache[1].htm (2 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (182 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\www.cx90[1].xml (266 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\load[1].gif (771 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\h_login_17[1].js (2701 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (181 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\h[2].js (16 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\468X60_54502[1].jpg (13245 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\login[1] (2818 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\qqtbset.ini (1 bytes)
%Documents and Settings%\%current user%\Cookies\index.dat (5784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\desktop.ini (67 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\History\History.IE5\MSHist012013021120130218\index.dat (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\login[1].htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\h[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\MSHist012013030120130302 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\ptui_ver[1].js (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@heima8[1].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\login[1] (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\login[1] (0 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\MSHist012013021120130218 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\MSHist012013021820130225 (0 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\MSHist012013021820130225\index.dat (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\clearcache[1].html (0 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\www.aaa[1].xml (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@heima8[2].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\MSHist012013030120130302\index.dat (0 bytes)

Registry activity

The process KINSTALLERS_66_109992.exe:2028 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "A3 69 27 47 1F 9D DC 47 90 2F EE 7D 5F EC DA A9"

The process %original file name%.exe:176 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012014120820141209]
"CacheRepair" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012014120820141209]
"CachePrefix" = ":2014120820141209:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"@xpsp3res.dll,-20001" = "Diagnose Connection Problems..."

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012014120820141209]
"CachePath" = "%USERPROFILE%\Local Settings\History\History.IE5\MSHist012014120820141209\"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Multimedia\DrawDib]
"vga.drv 1024x768x32(BGR 0)" = "31,31,31,31"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "%original file name%.exe"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012014120820141209]
"CacheLimit" = "8192"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 16 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1398264856"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "B9 5F C3 71 40 13 64 78 70 60 49 7E AF 47 61 FF"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012014120820141209]
"CacheOptions" = "11"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following registry key(s):

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012013030120130302]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012013021120130218]
[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012013021820130225]

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

Dropped PE files

MD5 File path
f729d886356835c780a1ec4486f60576 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\KINSTALLERS_66_109992.exe

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name: ???????
Product Name: ??QQ??????
Product Version: 1.0.0.0
Legal Copyright: ?????????
???? ????
?????????!??????/????!
?????? 2007-2011
Legal Trademarks:
Original Filename:
Internal Name:
File Version: 1.0.0.0
File Description: ???????QQ????????,???????????,??????
Comments: ???????QQ????????,???????????,??????
Language: English (United States)

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Section MD5
.text 4096 650326 651264 5.15588 b3c19bba6dbe0704d131617d4e08cc19
.rdata 655360 1292802 1294336 4.90897 18e99f95cbe5394f38aa9abb215e1627
.data 1949696 391434 90112 4.4202 9f1d5f3967162936296cbbbcc10eefbf
.rsrc 2342912 109864 110592 3.58611 d24edb7b2f687b17a845499fdc2b66c4

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

URLs

URL IP
hxxp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank 112.90.83.106
hxxp://hm.e.shifen.com/h.js?aba7628e14455a7d552e9e0e00843116
hxxp://tf01.dlmix.glb0.lxdns.com/duba/link/grthKAVSETUPS_66_0.exe
hxxp://imgcache.qq.com.cdngc.net/ptlogin/ver/10104/js/h_login_17.js?max_age=604800&ptui_identifier=000D55E5F40B222963CF67F21EAB079C13ACFB15EB55766A14BF8CAB 174.35.73.107
hxxp://imgcache.qq.com.cdngc.net/ptlogin/v4/style/20/images/c_icon_2.png 174.35.73.107
hxxp://hm.e.shifen.com/hm.gif?cc=1&ck=1&cl=32-bit&ds=1024x768&et=0&fl=11.6&ja=1&ln=en-us&lo=0&nv=1&rnd=513287684&si=aba7628e14455a7d552e9e0e00843116&st=1&v=1.0.70&lv=1&tt=Untitled
hxxp://imgcache.qq.com.cdngc.net/ptlogin/v4/style/0/images/load.gif 174.35.73.107
hxxp://imgcache.qq.com.cdngc.net/ptlogin/v4/style/20/images/shouQ_v2/big_8.png 174.35.73.107
hxxp://pv.heima8.com/index.php?p=153829341&b=100002856&itemid1=141900451&reffer=&url=http://www.cx90.net/soft/qqtubiaoad.htm 61.160.249.221
hxxp://static.n.shifen.com/hmt/icon/21.gif
hxxp://a1574.b.akamai.net/ptqrshow?appid=10000101&e=2&l=M&s=3&d=72&v=4&t=0.6339613223348628
hxxp://ui.ptlogin2.qq.com/cgi-bin/report?id=366447&union=256042 112.90.83.106
hxxp://ui.ptlogin2.qq.com/ptui_ver.js?v=0.5732770007842594 112.90.83.106
hxxp://ui.ptlogin2.qq.com/clearcache.html 112.90.83.106
hxxp://ui.ptlogin2.qq.com/cgi-bin/report?id=358191&t=0.16310324923237268 112.90.83.106
hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001039122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0
hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001042122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0
hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001045122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0
hxxp://img.heima8.com/141653471/468X60_54502.jpg 114.80.206.86
hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001048122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0
hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001051122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0
hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001054122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0
hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001057122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0
hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001060122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0
hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001063122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0
hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001066122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0
hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001069122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0
hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001072122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0
hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001075122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0
hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001078122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0
hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001081122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0
hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001084122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0
hxxp://a1574.b.akamai.net/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001087122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0
hxxp://eiv.baidu.com/hmt/icon/21.gif 115.239.211.92
hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001069122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 184.84.243.64
hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001066122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 184.84.243.64
hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001081122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 184.84.243.64
hxxp://imgcache.qq.com/ptlogin/v4/style/0/images/load.gif 174.35.73.107
hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001057122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 184.84.243.64
hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001042122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 184.84.243.64
hxxp://ptlogin2.qq.com/ptqrshow?appid=10000101&e=2&l=M&s=3&d=72&v=4&t=0.6339613223348628 184.84.243.64
hxxp://imgcache.qq.com/ptlogin/v4/style/20/images/shouQ_v2/big_8.png 174.35.73.107
hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001054122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 184.84.243.64
hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001051122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 184.84.243.64
hxxp://hm.baidu.com/hm.gif?cc=1&ck=1&cl=32-bit&ds=1024x768&et=0&fl=11.6&ja=1&ln=en-us&lo=0&nv=1&rnd=513287684&si=aba7628e14455a7d552e9e0e00843116&st=1&v=1.0.70&lv=1&tt=Untitled 61.135.185.140
hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001048122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 184.84.243.64
hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001063122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 184.84.243.64
hxxp://imgcache.qq.com/ptlogin/ver/10104/js/h_login_17.js?max_age=604800&ptui_identifier=000D55E5F40B222963CF67F21EAB079C13ACFB15EB55766A14BF8CAB 174.35.73.107
hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001072122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 184.84.243.64
hxxp://hm.baidu.com/h.js?aba7628e14455a7d552e9e0e00843116 61.135.185.140
hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001078122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 184.84.243.64
hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001045122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 184.84.243.64
hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001060122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 184.84.243.64
hxxp://imgcache.qq.com/ptlogin/v4/style/20/images/c_icon_2.png 174.35.73.107
hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001084122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 184.84.243.64
hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001075122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 184.84.243.64
hxxp://ptlogin2.qq.com/ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001039122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 184.84.243.64
d.union.ijinshan.com 8.37.234.10


IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

ET POLICY Unsupported/Fake Internet Explorer Version MSIE 5.
ET POLICY Windows 98 User-Agent Detected - Possible Malware or Non-Updated System
ET TROJAN VMProtect Packed Binary Inbound via HTTP - Likely Hostile

Traffic

GET /cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank HTTP/1.1
Accept: */*
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ui.ptlogin2.qq.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Connection: keep-alive
Keep-Alive: timeout=50, max=1024
Server: QZHTTP-2.38.20
Date: Mon, 08 Dec 2014 06:18:53 GMT
P3P: CP="CAO PSA OUR"
Cache-Control: max-age=86400
Set-Cookie: login_param=appid=10000101&s_url=http%3A//show.qq.com/inc/loginto.html%3Fmyurl%3Dhttp%253A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank; PATH=/; DOMAIN=ui.ptlogin2.qq.com;
Set-Cookie: uikey=66d7571f107441eb9ded2fbf721484b89c87c2db12000383af2ff0ac4790755a; PATH=/; DOMAIN=ptlogin2.qq.com;
Set-Cookie: pt_user_id=674337654367558593; EXPIRES=Thu, 05-Dec-2024 06:18:53 GMT; PATH=/; DOMAIN=ui.ptlogin2.qq.com;
Set-Cookie: ptui_identifier=000DB209E3A7BBE5C30E178284F064C14777F5239E6F84101A030D93; PATH=/; DOMAIN=ui.ptlogin2.qq.com;
Last-Modified: Tue, 02 Dec 2014 01:30:00 GMT
Content-Encoding: gzip
Content-Type: text/html
Content-Length: 6175
...........<k..........U.... ..%.dJ.....8...s.....$$...pWkj.d'R$[.\
....].....c..s.b.......O.....0x...W9.m.3=.===.............N.Cod..{n...
6..P*...Q*..<.<...SO...$l:....n..Q*...(.C.......vq.R..Ai.....W.7
f...kY.<[email protected][..L..^as.F........^..l..
Pq\...^....\..m...8....#.....S....6..p\..r.8@.&.-.Z....b..s.m.....e"..
.vP........e.R.\T....T.h...M17q.7v.]....,u<...........eQ...\...]..
.:.....62UKC.}...kd.#..../v/.G{.Wa..[S....g9....c.h.k.E.Q......[<..
.Z..:..=.,.u...-..fO.....4......X....xT;*..X.=.x."[email protected]...^B..
.m...[t.T.........b........ .....Vw..Mq..../..}........bz....W.7?.....
<...Z*.. {.}.....K.{....w_.!us........}...;w.~....9..... .w..^.3@FQ
........k..O..lv......_~....{o..~....;[email protected]
.u}..}z...........@.....|.....^>}zv...W.N_.=.....O.....k/N.........
...U..`......p..?.^.A..............H[..9]...%.'...i......u.z..........
...:&.w~...G.~.w..."..^.......6.v...k.W...az...._....'{.o....W.]......
}?.;{[email protected]........}cz....... .w.....Oo........&
gt;.*.a..... ..._...gn..][email protected].."....4....A..Kw...)...a
n...l.u.*J. [email protected].........^.|z...w..~|sz.-......2..
....w.C;Ka.....m9...`.p.n.c..%V?:.a...K......I.w.......5.T.. .......;.
.p..;..L:.....lMQ..g.#.TF..b.E1...=.........V.e.ih.....9....n.Il....cg
..'..c..$.df.q).....A...M]...e..)Ke.....B.W....!....n..:.*b/K.O.v..x..
.A..z....S.9..%}.....W.@......@.<.u{...*...T7..3....g.C....n.?_)<
;...S7...B.V,g..~..z.....m.T....OH?<Q..3O..=w....O.k.6.S^......

<<< skipped >>>

GET /cgi-bin/report?id=366447&union=256042 HTTP/1.1

Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ui.ptlogin2.qq.com
Connection: Keep-Alive
Cookie: login_param=appid=10000101&s_url=http%3A//show.qq.com/inc/loginto.html%3Fmyurl%3Dhttp%253A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank; pt_user_id=674337654367558593; ptui_identifier=000DB209E3A7BBE5C30E178284F064C14777F5239E6F84101A030D93; ptui_version=10104; uikey=66d7571f107441eb9ded2fbf721484b89c87c2db12000383af2ff0ac4790755a


HTTP/1.1 200 OK
Connection: keep-alive
Keep-Alive: timeout=50, max=1024
Server: QZHTTP-2.38.20
Date: Mon, 08 Dec 2014 06:18:57 GMT
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: text/html; charset=utf-8
Content-Length: 0
....



GET /ptui_ver.js?v=0.5732770007842594 HTTP/1.1

Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ui.ptlogin2.qq.com
Connection: Keep-Alive
Cookie: login_param=appid=10000101&s_url=http%3A//show.qq.com/inc/loginto.html%3Fmyurl%3Dhttp%253A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank; pt_user_id=674337654367558593; ptui_identifier=000DB209E3A7BBE5C30E178284F064C14777F5239E6F84101A030D93; ptui_version=10104; uikey=66d7571f107441eb9ded2fbf721484b89c87c2db12000383af2ff0ac4790755a; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN


HTTP/1.1 200 OK
Server: QZHTTP-2.38.20
Connection: close
Date: Mon, 08 Dec 2014 06:18:58 GMT
Content-Length: 175
Last-Modified: Wed, 03 Dec 2014 07:47:27 GMT
Content-Type: application/x-javascript
Content-Encoding: gzip
Cache-Control: public; max-age=86400
Expires: Tue, 09 Dec 2014 06:18:58 GMT
..........]....0.D.E.(.41}@...]t...1h .....~K...f8.....#'......"c.>
.[t....A.V...D........dD.sM._!.7IQ...dh@....:MT.cj0...,...[......|...w
.#......Y..._...Ao.:G%...[..y.H..N......


GET /ptlogin/v4/style/20/images/c_icon_2.png HTTP/1.1
Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: imgcache.qq.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 08 Dec 2014 06:18:56 GMT
Server: PWS/8.1.20.5
X-Px: ms h0-s2038.p9-jfk ( h0-s2029.p9-jfk), ht h0-s2029.p9-jfk.cdngp.net
ETag: "547ebff4-206c"
Cache-Control: max-age=7200
Expires: Mon, 08 Dec 2014 07:44:54 GMT
Age: 2042
Content-Length: 8300
Content-Type: image/png
Last-Modified: Wed, 03 Dec 2014 07:47:00 GMT
Connection: keep-alive
.PNG........IHDR.....................tEXtSoftware.Adobe ImageReadyq.e&
lt;....PLTE........z.......V4....kM.....;...........J...........r.....
....t.).....9.........c..y. ...J.......2......khk[.......!.........B..
.....s........0..............Y.0........................9.......q.....
.......&......E,.. .......P.)..=..`....)....~.,...XG....b.&...v.W....D
(............{.3l. ..................~.5TRT..................q.'m.5N..
........G.....7.........99<..........................tRNS..........
......................................................................
................................................8.Kg....IDATx....C....
....Z.y.4.*s..........1a.U.5:l...]'\...._...W.6.-......B..m...y.....(g
:...Y4..2.. .t.H.9.D...R."O..>[email protected].
.H..H..H..H..H..H..H..H..H..H..H..H..H..H..H.I2R*E..%7$=.$z..,.#.B.|..
=C(.i ;.........@......}.bg...Z{(I.Zw1e....9...w........y....x[A.{.>
;IgJo ..!I.m.a$)mj..H..H..H..H..H..H..H..H..H..H..H..H..H..H..H..H.I..
R$l}...T.|.Y...y5."W.....k..Vv.}.]..K..H [email protected]....*.....&.....E.
..u.y..o.ht.\/.$s.v.b.......k.}. ...Z.yRW..O...'6.v.z....e......c.....
..wF$........H...Q.T.%.N3"9}.z.k...k....p.`'W~....]~...&.......#..UpI.
3vr..8.........]......I....lP...3.O.;|b.%....?4...O^].3.I.I..> . a.
.......%F"...H.$]$..H...I.3.9.$uI..U.".......7...`F.*X.|.$.%1...H.....
...W..~./#.........H^.i....1"..OF$s7.a.'..s.Y9p.o&"..`.....>..'.x..
...._......{. .c.._oD....]....`..,.;F................p..9c$..D.%.p.:et
.......|K!I.'.`[email protected]*D$.$.I..FX..E...R...V3k.....I45

<<< skipped >>>

GET /ptlogin/v4/style/0/images/load.gif HTTP/1.1

Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: imgcache.qq.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 08 Dec 2014 06:18:57 GMT
Server: PWS/8.1.20.5
X-Px: ht h0-s2038.p9-jfk.cdngp.net
ETag: "547ebff4-303"
Cache-Control: max-age=7200
Expires: Mon, 08 Dec 2014 06:32:02 GMT
Age: 6415
Content-Length: 771
Content-Type: image/gif
Last-Modified: Wed, 03 Dec 2014 07:47:00 GMT
Connection: keep-alive
GIF89a.....................................wul..y............!..NETSCA
PE2.0.....!.......,..........O.......{....Y..`....I.D8.. S.....(......
.D..(.I~.. .H`....Z.f....k.N..q...;'.L..!.......,..........N.......{..
@.1....Q]AiN.:..)S.T...,........b....$?...Q(0.).j.f....{....n.-~N....!
.......,..........M.........,Eeu......%5..E...f3. ......g(..<...L..
.D".X`.RJ.J.N..........9...=..!.......,..........N...J..Z.'B. ..q`....
.P)8./,S&.$.$.......y....D...."..`.R.ak.b.........m..^S....!.......,..
........M......Z.gJ.....}.H..I...b$.(.t..}.......~9..@Y,2..........i00
......|......t;..!.......,..........M...R..Z..R.. ..}.H..I.l....t.P0..
..B....v>.CG1.2...i.P....J.0.R-.....J....t;..!.......,..........M..
....Z..Z..$..}.H..I.l...at..0..........8..B d..L.I.B)...q80...&..t....
...3..;..


GET /duba/link/grthKAVSETUPS_66_0.exe HTTP/1.1
Host:d.union.ijinshan.com
Accept:*/*
User-Agent:Mozilla/4.0 (compatible; MSIE 5.00; Windows 98)
Connection:Keep-Alive


HTTP/1.0 200 OK
Date: Sun, 07 Dec 2014 13:22:57 GMT
Server: Tengine/2.0.3
Content-Type: application/octet-stream
Last-Modified: Sun, 19 Jan 2014 08:30:06 GMT
ETag: "52db8d0e-1e1d9f0"
Accept-Ranges: bytes
Content-Length: 31578608
Age: 60958
X-Cache: HIT from cache.51cdn.com
Via: 1.0 jxjj35:80 (Cdn Cache Server V2.0), 1.0 jg14:8888 (Cdn Cache Server V2.0)
Connection: close
HTTP/1.0 200 OK..Date: Sun, 07 Dec 2014 13:22:57 GMT..Server: Tengine/
2.0.3..Content-Type: application/octet-stream..Last-Modified: Sun, 19
Jan 2014 08:30:06 GMT..ETag: "52db8d0e-1e1d9f0"..Accept-Ranges: bytes.
.Content-Length: 31578608..Age: 60958..X-Cache: HIT from cache.51cdn.c
om..Via: 1.0 jxjj35:80 (Cdn Cache Server V2.0), 1.0 jg14:8888 (Cdn Cac
he Server V2.0)..Connection: close...M.....|._4.T......WU..{...$QF.]..
.?.O...9^R...0XR.K..vi..Bt.U...U......lgZn...#..6.... .K.;.B .P..Q.VP.
~(YR....#hO.91DE$._2..b...........vI...` ..tPWV..l3.;...X,....^.@u Z..
.v.....1.>7......~.Li[?.9}.f.....E.;...M..]..;...;..z,..Fvqa.9..sya
.}m...y.=LiXV.}.S.\G..v.\]f.S8JA..I.^|4x.!_...._|.j.h.....QN.d...Pd.%.
.SVW.e... ...}.~..........0.."._.\.....p..o.....;.s..=4;.w7_w_Z4..E...
N.(...]nm...&........"..H..:[email protected]./...l.M.Tv#......aJG...T6.R
S..]..LE.....}(X........w.O...z.H.R....M...[..]L.....$u..N.Q.)p..3..P.
.6.,.hU5..Tw'..srLov....uN2......~.h..P$..{....b3.....s.*..L.30...D.z.
yh..:S..`*Q,..yNq....4$.v......J...-zQ...b..B...?Q.M.....TP.W.........
.|.;.uZ...t....:.....(.j....[Y.T]u..,.....8....B..P..V....LO.Q.y.....h
........Q..]g.W3....P..'...,(....tM.I............W...Qj.V...s.h ...Jt.
..\&=.O..X$..S.....B....*u.HF[Y..Ea.}.?..8.`.W(...4...&h$....0t#...f&l
t;.......v.;.s.......2..tN.u..r.^_.lf.Y....f..#...E.....Pw"........;..
$....-hW..@..{."...H......4;..... .Z.n....q.........?...t..%....t.V..p
Ly.....a.Xh9.sI.;.X......l.....~...x..~.QV...}...@.;.}......h.~.......
.V..^}.O.....MZ......................@............................

<<< skipped >>>

GET /ptlogin/ver/10104/js/h_login_17.js?max_age=604800&ptui_identifier=000D55E5F40B222963CF67F21EAB079C13ACFB15EB55766A14BF8CAB HTTP/1.1
Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: imgcache.qq.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 08 Dec 2014 06:18:56 GMT
Server: PWS/8.1.20.5
X-Px: rf-ht h0-s2038.p9-jfk ( h0-s2062.p9-jfk), ht h0-s2062.p9-jfk.cdngp.net
ETag: "547ec030-13ba0"
Cache-Control: max-age=600
Expires: Mon, 08 Dec 2014 06:26:34 GMT
Age: 142
Content-Length: 26502
Content-Type: application/x-javascript
Content-Encoding: gzip
Vary: Accept-Encoding
Px-Uncompress-Origin: 80800
Last-Modified: Wed, 03 Dec 2014 07:48:00 GMT
Connection: keep-alive
................q ..TcFl....~.?......{..._..\]S..A.U$."...>.C^I ..g
.k.|....>.......lY....=..._...L ....Z.................S{...u.Mz.Y..
7..\.?.8..OT[....|6Y./......R.p.M........$,..pw........5.E.......k]Av3
B...N.J..J3......:q...........^.iJ..W,u.....Mm]..)...T...*J..:~......?
.........m.C.....7.../j..v:.....n....b..CW.Z.2..[../...v...K..k..w..Z)
.-..Q.n^i...So....-...G/[email protected]...~SYW(.>{wU...mo..=HT...h.w..W
7.....z...|....hK.m..7..?..J.....5...X3.M....A.b....LAW...S......-..y.
*....8..F..=...(>.`.eb...]...A8.t....d..pJr......8>>..!......
#...b.'RT..........?zx...'..../...{2w.P...G.y\.|6..V[w.....~O...Zz>
.Y.."#.................{.A......@.....)...s.....R2...[V.0r.8a.l...u.`Y
V...R.R..J2.5W4...5.I..{....:@Z`.....<.......#..J>..Wp.2.....8..
[K.......;......iW.SU...v...b?....jf_.X......F..w3...../j.m.].K.u'=.E#
.mH].S?H...n.}&...([email protected].......;Xpl\.P.I......./..F.6]......
.TI.8..C5.D[..."........U@..&t3.sWY..~...&*[email protected]
H ..../U...7..=...c...Y.h_....mP.........E{.#...z...2.}.....M.JO...V.`
..D,....z .z.4T..S.0..D.C)3..q..][email protected]!.i~ ..Bk....]._P..?u.
.l...Nd.....P....$.G7{....]1.>..%...8vD...$.).F.....g.;.dK#fd......
.M.......h..cM.So`...8.r..lE.?...Y.......g..]/.8S8..Z b9.~......A._...
......ym=.M.0A..,D.!..?".."%...0..o.x.tc.T.~.e../..(.8....Bl.^w.......
N.YX..o....,G........"....g...,.........]1..m.<h.D..u....=@1.......
..5..p.....e....(..y0$z.....R........J...hD..."(.{.?.zA.N...-...S...O-
.j. .mgH.....<..=N.-.......A<..L.....W\DDp=..}5.d.5.E.......

<<< skipped >>>

GET /ptlogin/v4/style/20/images/shouQ_v2/big_8.png HTTP/1.1

Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: imgcache.qq.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 08 Dec 2014 06:18:57 GMT
Server: PWS/8.1.20.5
X-Px: ms h0-s2038.p9-jfk ( h0-s2071.p9-jfk), ht h0-s2071.p9-jfk.cdngp.net
ETag: "547ebff4-2c50"
Cache-Control: max-age=7200
Expires: Mon, 08 Dec 2014 07:45:11 GMT
Age: 2026
Content-Length: 11344
Content-Type: image/png
Last-Modified: Wed, 03 Dec 2014 07:47:00 GMT
Connection: keep-alive
.PNG........IHDR.......,.....,)......tEXtSoftware.Adobe ImageReadyq.e&
lt;....PLTE......fff.A.............:........}}~.YxSR.~........v..YYX..
.[..853...-.....rrr...zzy^|.......{.....@@?vI9.f;.............../btrl.
... .........wo....aW...C'..........}.j2mOzmd....rK.........\F9.......
.....epuSRQ...vvv...~up.........Qsa...J..xxx....wltzy........../;jxn..
...........zy......[6(..tx..OjupWK.........,*)...KKI...__^{{{......'..
..}|||...x|s~.....qt|mll#|....................;Q.....tRNS.............
......................................................................
.............................................8.Kg..).IDATx....C.F....8
({Ij.e,t"....v.0.....{.S...$...%}...U..Oz..'$...we...'..k3.....4..3..Q
...a.......l2Qb>.U...d...%.l......,e.'.M......{!.......Bx;.Q"..4~..
9.Lx.B....Cb...veavl..S..mC.3O..;.2.1@..;.....q@.!...qQ3..R8..N&O.D].L
....Xl...p<.......8..q..*.4....lv...d.....d2..$&..O=f..L....`....Rg
g.'.O..]. .B2.p...If..arr..cvf...6....?Q..:..^.-...{@O^)O......s.>Q
....~...k`'K.f.O...?Q...D.....'.O...?Q...F]..mI........Y....?..^<.{
@...X.....,.P.....a~......Al...N...f. ~. ....H.R.3{......!...N$s..bB}.
.O.;.....wwg.........ow...3...4.x0..n..};s....}*..`.wS..3.U....g......
..wjw.YH..@.?..j2..1zwfqf....7.^..M/..>8HO.g.p...ss....!......`Ho..
r....._...f.".-F..*...'...\W.>..Y.D....P.]<...U...P.~.x.UOn...W[
.3......K?op.8..XQ........=..#..n....v..z..........Q...../..r.....]]]m
.P.........xo....P.......p...}.......tjwuz'.N..g......M.>]...... ..
....\..2.....U.-U'...D.5..J0k......q)Au......d){.-.&...a".F.$&....

<<< skipped >>>

GET /h.js?aba7628e14455a7d552e9e0e00843116 HTTP/1.1
Accept: */*
Referer: hXXp://VVV.cx90.net/soft/qqtubiaoad.htm
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: hm.baidu.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Etag: 6dae7ce3160235d7f0209753dbf796ad
Cache-Control: max-age=0, must-revalidate
Content-Encoding: gzip
Content-Type: application/javascript
Set-Cookie: HMACCOUNT=255C41503C8E7AD0; Path=/; Domain=hm.baidu.com; Expires=Sun, 18 Jan 2038 00:00:00 GMT
P3P: CP="CURa ADMa DEVa PSAo PSDo OUR BUS UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Connection: Keep-Alive
Content-Length: 6565
Date: Mon, 08 Dec 2014 06:18:54 GMT
Server: apache
...............(function(){var h={},mt={},c={id:"aba7628e14455a7d552e9
e0e00843116",dm:["cx90.net/soft/qqtubiaoad.htm"],js:"tongji.baidu.com/
hm-web/js/",etrk:[],icon:'/hmt/icon/21|gif|20|20',ctrk:false,align:-1,
nv:-1,vdur:1800000,age:31536000000,rec:0,rp:[],trust:0,vcard:0,qiao:0,
lxb:0,conv:0,apps:''};.[{w.......F.2i..d;nJ..M..7.M.m......H..#>d..
.J..;..%.y...9.@<...o........i..E......(7.l....=g.(....x........E..
1_...'...D.l"..P..$...e..Px...S..~.K~..Q..s.<.,.D4z.U.M]........){.
r...,vF.R...U.{....T..\.^>.l.F....^.T..i..%..$.Q..)..X7@g....,?...L
.._.n.$...C..^..<[..;...%V..<......H..9)JF.....%."......a..tuazI
..xHlM......1....S.........zq?.R.A.g..Oo>... ..F9.s..2..RA.r[o.iml.
X."_.Pb......N.... ].Y.}....no...0..p.........V&..Kh).X.M.....y...Kl..
|.$..O....ka.<.a.gl...{...K......9..a!..J...y*...>_....{......U|
.....r....h..J3Q.Y1...UY{.*5.h]-K.. [email protected]#3......leQ.HnoDnnn.......
?.)...PO...y.]..w.....R31.c;....m......./.O<......Z.....T...$Iu.7.2
@..............'.....n..8..j..SP[X.[|...m.......Rr..b..X.c,...c1...PX.
:..!'Py# .g[..5. [..;....H|.*\...,bO.A,<b...kl.%^D.H.v-.^.q..30...=
.G....%.j...E..$..q.TM`.yJ.-..c, .UL..Z.g9.]...4..J......i.<3..$...
.4.}........~.k.,..7....D...UQr..^..8Y....>.Kz.N...".. ....]..#..!.
l..cR..&.OI.....7....UJz.W....O...3. .'.I.|.U..Z...P....'Xc&..zp./...j
..7.=Y...!pyM...v.&..Z..e....O.E....r.....*.5M.".....hl..8.F.7..b..tv.
!:..).6.....j.>.c[.....kQl... .(...M...K.&.D.[........V..p.F=..o9..
j....UV...2.....>.Z.8....x.`.!N...u....A....|#O.....>%A..x..

<<< skipped >>>

GET /hm.gif?cc=1&ck=1&cl=32-bit&ds=1024x768&et=0&fl=11.6&ja=1&ln=en-us&lo=0&nv=1&rnd=513287684&si=aba7628e14455a7d552e9e0e00843116&st=1&v=1.0.70&lv=1&tt=Untitled HTTP/1.1

Accept: */*
Referer: hXXp://VVV.cx90.net/soft/qqtubiaoad.htm
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: hm.baidu.com
Connection: Keep-Alive
Cookie: HMACCOUNT=255C41503C8E7AD0


HTTP/1.1 200 OK
Cache-Control: private, max-age=0, no-cache
Pragma: no-cache
Content-Type: image/gif
X-Content-Type-Options: nosniff
Connection: Keep-Alive
Content-Length: 43
Date: Mon, 08 Dec 2014 06:18:56 GMT
Server: apache
GIF89a.............!.......,...........L..;..


GET /hmt/icon/21.gif HTTP/1.1
Accept: */*
Referer: hXXp://VVV.cx90.net/soft/qqtubiaoad.htm
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: eiv.baidu.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Content-Type: image/gif
ETag: "762990053"
Accept-Ranges: bytes
Last-Modified: Tue, 13 Apr 2010 09:38:40 GMT
Expires: Wed, 16 Oct 2024 06:18:57 GMT
Cache-Control: max-age=311040000
Content-Length: 1119
Date: Mon, 08 Dec 2014 06:18:57 GMT
Server: BWS/1.0
Connection: Keep-Alive
GIF89a........s..E.....M...................ZS.2-.YS.......2,.c[..D....
...0'..:..0.&..]Z..8..>..D.TM.................C................._..
^.....u..w........~........k.4......X..d.......=1.....a.c[.PH.h_.....b
..........PH........A..9....h`..J..1.......g`..W........2........z.#..
.p..m....jd........*.............[Q...........6..G..............6..t..
........... ..TL.....!....$....."..;0.....h.7-..............Z.........
....%..:.....H@....^W.QJ..'. !..........70.._. %.'...T.0'..Q.G?.ws....
-$........h.}w.....>...........L.....#.......:0.............\S.....
........*".....Q..............<..T.!...p.$...}........N..........d_
...........j.......VN.....o.....e........[............................
......................................................................
....................!.......,............u...,..>6.T.T..&T.".H. ...
.3^.PQ.G..:^..H.-.T....2#!........K..iP.&..03%X..x.P/^.$...`...G>Xd
....!..d.T...j.,..fQ..8l<..U%..G|.h.......$p..f......R..b.....*R@W"
2y..8..V3.LV`t.e..7.>.........\D..O.H.....$...^.]..).. ...9..E...d\
...V.U1..i......B]......c.P<0.i...v.]D..G .?p-.CD.Fi;>..v....r`.
.&........./.dp....`.....;HTTP/1.1 200 OK..Content-Type: image/gif..ET
ag: "762990053"..Accept-Ranges: bytes..Last-Modified: Tue, 13 Apr 2010
09:38:40 GMT..Expires: Wed, 16 Oct 2024 06:18:57 GMT..Cache-Control:
max-age=311040000..Content-Length: 1119..Date: Mon, 08 Dec 2014 06:18:
57 GMT..Server: BWS/1.0..Connection: Keep-Alive..

<<< skipped >>>

GET /index.php?p=153829341&b=100002856&itemid1=141900451&reffer=&url=http://VVV.cx90.net/soft/qqtubiaoad.htm HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*
Referer: hXXp://VVV.cx90.net/soft/qqtubiaoad.htm
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: pv.heima8.com
Connection: Keep-Alive


HTTP/1.1 200 OK
Date: Mon, 08 Dec 2014 05:53:11 GMT
Server: Apache
X-Powered-By: PHP/5.4.10
Set-Cookie: hm_uid=1418017991.0507_2309; expires=Tue, 08-Dec-2015 05:53:11 GMT; path=/; domain=heima8.com
Set-Cookie: hm_uvcount=1; expires=Tue, 08-Dec-2015 05:53:11 GMT; path=/; domain=heima8.com
Set-Cookie: hm_uvltime=1418017991; expires=Tue, 08-Dec-2015 05:53:11 GMT; path=/; domain=heima8.com
Content-Length: 1901
Connection: close
Content-Type: text/html
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "htt
p://VVV.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">.<html xml
ns="hXXp://VVV.w3.org/1999/xhtml">.<head>.<meta http-equiv
="Content-Type" content="text/html; charset=utf-8" />.<title>
...............</title>.<style type="text/css">.<!--.bo
dy{margin:0px; padding:0px;}.div {margin:0px; padding:0px; text-align:
left;}.-->.</style>.<script type="text/javascript">.var
init_runint =1; .var iTimerID = 0;.var timespan = 5000;..function sho
wImp(id).{..for(var i=1;i<=1;i )..{...document.getElementById('key
_' i).style.display = "none";..}....document.getElementById('key_' id)
.style.display = "";.}..function show(id).{..showImp(id);...init_runin
t =id;....clearInterval(iTimerID);..iTimerID = setInterval('socall()',
timespan 1000);//......................}..function onmouseoverHandl
er(id).{..clearInterval(iTimerID);.}..function onmouseoutHandler().{..
clearInterval(iTimerID);..iTimerID = setInterval('socall()', timespan)
;.}...function socall().{..if(init_runint >= 1){.init_runint = 1;}.
.else{ init_runint ; }....showImp(init_runint);.}..</script>.&
lt;/head>.<body>.<div style="border:0px solid #CCCCCC;padd
ing:0px;width:468px;height:60px;">.. <div style="clear:both; w
idth:468px;height:60px;" onmouseout="onmouseoutHandler()" onmouseover=
"onmouseoverHandler(1)" id="key_1">. <div style="float:left;"&
gt;. .<div style='float:left;'><a target='_blank' href=

<<< skipped >>>

GET /ptqrshow?appid=10000101&e=2&l=M&s=3&d=72&v=4&t=0.6339613223348628 HTTP/1.1
Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=66d7571f107441eb9ded2fbf721484b89c87c2db12000383af2ff0ac4790755a


HTTP/1.1 200 OK
Server: tencent http server
Accept-Ranges: bytes
Pragma: No-cache
P3P: CP="CAO PSA OUR"
Content-Type: image/png
Content-Length: 433
Date: Mon, 08 Dec 2014 06:18:57 GMT
Connection: keep-alive
Set-Cookie: qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN; PATH=/; DOMAIN=ptlogin2.qq.com;
.PNG........IHDR...o...o.............pHYs................cIDAT8...... 
...Y...6.D.d......h..mX..oF.....=......._..<M.......T-V..&..L.....M
d.'G.......x....D..78....?......|?.w...`........'..Z...T.Q...H2Q..K.xg
r.m.8t...>.2......L@.[....$"...s..W.=.G-..L....v.Y...M....#.r..T..
.r. z..."Ry..W.t.....iU.5....n.m.,$.\.\.lw*"G_"q...C./....7.E.5....2.I
..s...6d..<.i..4S.^P=.fX...Rt....[.9}..9k..r.&.o...W.H...C...?....M
|....?;0.?....IEND.B`.
....



GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001039122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1

Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN


HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 71
X-N: S
Date: Mon, 08 Dec 2014 06:19:00 GMT
Connection: keep-alive
X-N: S
ptuiCB('66','0','','0','.....................(1904244508)', '10000');.
.
....



GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001042122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1

Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN


HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 70
X-N: S
Date: Mon, 08 Dec 2014 06:19:03 GMT
Connection: keep-alive
X-N: S
ptuiCB('66','0','','0','.....................(436238108)', '10000');..
....



GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001045122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1

Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN


HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 70
X-N: S
Date: Mon, 08 Dec 2014 06:19:06 GMT
Connection: keep-alive
X-N: S
ptuiCB('66','0','','0','.....................(457197616)', '10000');..
....



GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001048122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1

Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN


HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 71
X-N: S
Date: Mon, 08 Dec 2014 06:19:09 GMT
Connection: keep-alive
X-N: S
ptuiCB('66','0','','0','.....................(2537554844)', '10000');.
.
....



GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001051122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1

Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN


HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 71
X-N: S
Date: Mon, 08 Dec 2014 06:19:12 GMT
Connection: keep-alive
X-N: S
ptuiCB('66','0','','0','.....................(3654311384)', '10000');.
.
....



GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001054122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1

Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN


HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 71
Date: Mon, 08 Dec 2014 06:19:15 GMT
Connection: keep-alive
ptuiCB('66','0','','0','.....................(2996850536)', '10000');.
.
....



GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001057122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1

Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN


HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 70
X-N: S
Date: Mon, 08 Dec 2014 06:19:18 GMT
Connection: keep-alive
X-N: S
ptuiCB('66','0','','0','.....................(879766352)', '10000');..
....



GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001060122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1

Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN


HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 70
Date: Mon, 08 Dec 2014 06:19:21 GMT
Connection: keep-alive
ptuiCB('66','0','','0','.....................(453010396)', '10000');..
....



GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001063122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1

Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN


HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 71
X-N: S
Date: Mon, 08 Dec 2014 06:19:24 GMT
Connection: keep-alive
X-N: S
ptuiCB('66','0','','0','.....................(1546674548)', '10000');.
.
....



GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001066122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1

Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN


HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 71
X-N: S
Date: Mon, 08 Dec 2014 06:19:27 GMT
Connection: keep-alive
X-N: S
ptuiCB('66','0','','0','.....................(3891295104)', '10000');.
.
....



GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001069122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1

Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN


HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 70
X-N: S
Date: Mon, 08 Dec 2014 06:19:30 GMT
Connection: keep-alive
X-N: S
ptuiCB('66','0','','0','.....................(414201072)', '10000');..
....



GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001072122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1

Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN


HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 71
X-N: S
Date: Mon, 08 Dec 2014 06:19:33 GMT
Connection: keep-alive
X-N: S
ptuiCB('66','0','','0','.....................(2753579980)', '10000');.
.
....



GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001075122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1

Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN


HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 71
X-N: S
Date: Mon, 08 Dec 2014 06:19:36 GMT
Connection: keep-alive
X-N: S
ptuiCB('66','0','','0','.....................(1597005888)', '10000');.
.
....



GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001078122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1

Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN


HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 71
X-N: S
Date: Mon, 08 Dec 2014 06:19:39 GMT
Connection: keep-alive
X-N: S
ptuiCB('66','0','','0','.....................(1516247056)', '10000');.
.
....



GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001081122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1

Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN

GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0®master=&fp=loginerroralert&action=0-0-1418001081122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1
Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%2
HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 71
Date: Mon, 08 Dec 2014 06:19:45 GMT
Connection: keep-alive
ptuiCB('66','0','','0','.....................(2056273552)', '10000');.
.
....



GET /ptqrlogin?aid=10000101&u1=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&ptredirect=0&ptlang=2052&from_ui=1&dumy=&low_login_enable=0&regmaster=&fp=loginerroralert&action=0-0-1418001084122&mibao_css=&t=1&g=1&js_ver=10104&js_type=1&login_sig=48CBX3-L8skcCXTveM7orvZYG69zpERpcM-S-WE0WE6JOLMmUkDFDIu5MTJ18N0b&pt_uistyle=17&pt_randsalt=0 HTTP/1.1

Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ptlogin2.qq.com
Connection: Keep-Alive
Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN


HTTP/1.1 200 OK
Server: Tencent Login Server/2.0.0
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: application/x-javascript; charset=utf-8
Content-Length: 71
Date: Mon, 08 Dec 2014 06:19:45 GMT
Connection: keep-alive
ptuiCB('66','0','','0','.....................(2574275640)', '10000');.
.
....


GET /cgi-bin/report?id=358191&t=0.16310324923237268 HTTP/1.1
Accept: */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ui.ptlogin2.qq.com
Connection: Keep-Alive
Cookie: login_param=appid=10000101&s_url=http%3A//show.qq.com/inc/loginto.html%3Fmyurl%3Dhttp%253A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank; pt_user_id=674337654367558593; ptui_identifier=000DB209E3A7BBE5C30E178284F064C14777F5239E6F84101A030D93; ptui_version=10104; uikey=66d7571f107441eb9ded2fbf721484b89c87c2db12000383af2ff0ac4790755a; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN


HTTP/1.1 200 OK
Connection: keep-alive
Keep-Alive: timeout=50, max=1024
Server: QZHTTP-2.38.20
Date: Mon, 08 Dec 2014 06:18:59 GMT
Pragma: no-cache
Cache-Control: no-cache; must-revalidate
Content-Type: text/html; charset=utf-8
Content-Length: 0
....



GET /cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank HTTP/1.1

Accept: */*
Accept-Language: en-us
Pragma: no-cache
Referer: hXXp://ui.ptlogin2.qq.com/clearcache.html#hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
If-Modified-Since: 0
Cache-Control: no-cache,no-store
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ui.ptlogin2.qq.com
Connection: Keep-Alive
Cookie: login_param=appid=10000101&s_url=http%3A//show.qq.com/inc/loginto.html%3Fmyurl%3Dhttp%253A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank; pt_user_id=674337654367558593; ptui_identifier=000DB209E3A7BBE5C30E178284F064C14777F5239E6F84101A030D93; ptui_version=10104; uikey=66d7571f107441eb9ded2fbf721484b89c87c2db12000383af2ff0ac4790755a; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN


HTTP/1.1 200 OK
Connection: keep-alive
Keep-Alive: timeout=50, max=1024
Server: QZHTTP-2.38.20
Date: Mon, 08 Dec 2014 06:19:00 GMT
P3P: CP="CAO PSA OUR"
Cache-Control: max-age=86400
Set-Cookie: login_param=appid=10000101&s_url=http%3A//show.qq.com/inc/loginto.html%3Fmyurl%3Dhttp%253A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank; PATH=/; DOMAIN=ui.ptlogin2.qq.com;
Set-Cookie: uikey=556be5b821e3a60f02be2325b1482809374aaa3e317611e0b7e51a13d38bb6bb; PATH=/; DOMAIN=ptlogin2.qq.com;
Set-Cookie: ptui_identifier=000E011DCDB5251EB9A96E244B170DF0BD0309CBBFA412670CB74B340C; PATH=/; DOMAIN=ui.ptlogin2.qq.com;
Last-Modified: Tue, 02 Dec 2014 01:30:00 GMT
Content-Encoding: gzip
Content-Type: text/html
Content-Length: 6168
...........<kw.D......B9c..~..........;<2...dN..T..D-......9.&!.
d.9.!;.0@f.$..C a./..........J.n..3....n.{.....*...G.X[..'....@..|z...
..b.Px..V(.Y?"<...c?..yIX.e..\.4d.Px.qQ...k.......V9o..../..0."n..s
..2....Z&.N.t.i&`).--.....jky.\Y..9.1.6...i..ps.......5E..r..eCP... .9
t..E@.(.f..M..zmW...h.A.........#...3..r..l>......3?..mi.jn.M...i7.
...d..H...."...e....z.v........m.`...j*....Wl.4...~...AO.4:...3>...
...Lm"C1U../.]3..0.M.a.L..x..~e...5.M.'....:.^.A.LC.;....#.'...F^1....
.:.Q8..md...PGS...47..K.......5...aq....c....(...$.4.....d...%T....)..
A.AQ.6.........H...........a...Q.'/\.......L.^...k.s..o.:....w....dm..
@7....y.h.K/.......|....MJt....~r....n....c.8.....!.7.M... .(.-.U.....
a.../M..8........}........\.`|...k..@.......}...._..~.(.F..f)..'../o..
~.................v.....M..i......&..........{....w.....;...].x....{.~
.._....e....../....w..'m.}d.a>@.........>...%.z........K..n...{.
..s...w......#.m.....t.&...;{q......7....:......}..N........x...1...7.
.~B[........u..f......W.Q....Nq.^.<>..........'.'..7W.>}~|...
O..Y..6e..dr..K....F...\......8HZ=.z.$..Mp5...HH..........pc.._..v...3
.........".mP.'..... ................O...<........>..~e|........
2........G;Kad....e.*./..p.fXC..%V?:.a...I......Io.m..J......H.......i
.m.....m..&.j.V.Z..(.....e..TO........l...I.`.o..<.4T.....4....7P'6
......S......l.v%f.q).....A...MM..#E..)JE.....B..T.0;}p..J.P|t...^....
l....#....ue.<,..s..K....=....l...5..6.:jwd...q1..v.....I1.L...!.~r
..I.._Z..Tsux..............#...'.s.i.#.Ots.^].e.....k........@.*..

<<< skipped >>>

GET /141653471/468X60_54502.jpg HTTP/1.1
Accept: */*
Referer: hXXp://pv.heima8.com/index.php?p=153829341&b=100002856&itemid1=141900451&reffer=&url=http://VVV.cx90.net/soft/qqtubiaoad.htm
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: img.heima8.com
Connection: Keep-Alive
Cookie: hm_uid=1418017991.0507_2309; hm_uvcount=1; hm_uvltime=1418017991


HTTP/1.1 200 OK
Date: Mon, 08 Dec 2014 06:19:14 GMT
Server: Apache/2.0.59 (Unix) PHP/5.3.9RC4
Last-Modified: Fri, 07 Dec 2012 06:37:25 GMT
ETag: "99c0ea-d4e6-72d53340"
Accept-Ranges: bytes
Content-Length: 54502
Connection: close
Content-Type: image/jpeg
......JFIF.....H.H.....&Exif..MM.*.............................b......
.....j.(...........1.........r.2...........i....................'.....
..'.Adobe Photoshop CS3 Windows.2012:12:07 14:26:54...................
.....................<...........................................&.
(.........................................H.......H..........JFIF.....
H.H......Adobe_CM......Adobe.d........................................
......................................................................
........................................"................?............
..............................................................3......!
.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE..t6..U.e.....u..F'..
.............Vfv........7GWgw........................5.....!1..AQaq"..
2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te......u..F............
...Vfv........'7GWgw.................?......[..F..%.....g..w.....~.`..
..,....qd...._.o..........r.l.N[}0.........,u^.../...."..2q..y6...^..0
Vl$.......7..,..1O.|..Jz.1...^......c.HX...}6../C..~ao.....H.}.m..Y...
.6....w5......=m>...>........,h.*....Z..71.;..cq.;......~...8..&
gt;.2r,.e.w.}..k.l`uVT.......T..G..MG........?k.G.`%.!.(.v\..~...q..@.
.q...fGo... .......p#..w...w.b.....}9ma}.....A;w...m.V#u7.U...l.\.[&.
..2...............K"....S=..-}y...A....UN.}/.#_..G.M.. ..2..#..B....8.
.yz.~.>_o......<r...r.................Hm...{..;`?.sZ....c...?G.
_.h....Y...]G.L84I..?........6[..h...=.i~-u....fE_j..E.Q.W...[....Qe..
n.mm....f5.....VS[../[email protected]?......~.c

<<< skipped >>>

GET /clearcache.html HTTP/1.1
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*
Referer: hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
Accept-Language: en-us
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)
Host: ui.ptlogin2.qq.com
Connection: Keep-Alive
Cookie: login_param=appid=10000101&s_url=http%3A//show.qq.com/inc/loginto.html%3Fmyurl%3Dhttp%253A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank; pt_user_id=674337654367558593; ptui_identifier=000DB209E3A7BBE5C30E178284F064C14777F5239E6F84101A030D93; ptui_version=10104; uikey=66d7571f107441eb9ded2fbf721484b89c87c2db12000383af2ff0ac4790755a; qrsig=7Ctyau9OyMqxTj10JHo36pY6L5*kJmjzWgMoaHPgI1FW5fVcDYgsRfo9gjemaKRN


HTTP/1.1 200 OK
Server: QZHTTP-2.38.20
Connection: close
Date: Mon, 08 Dec 2014 06:18:59 GMT
Content-Length: 934
Last-Modified: Wed, 03 Dec 2014 07:46:59 GMT
Content-Type: text/html
Content-Encoding: gzip
Cache-Control: public; max-age=86400
Expires: Tue, 09 Dec 2014 06:18:59 GMT
...........U]o.E.}N......5.......NU.@*%.j..D.....N...3...../..U.K.B ..
..A%J.}...&....]...Q.X.=;s..w..;.......oo.H'1i........J.[mQ..m..mow...
..I.*..HYL..;.."...Q:..... d.z......r1tt...:.6...Y.a...9'N.^.....,0..h
F...Oz...Z"..j.;<....S..0......1.@7{:t...5a4.1l...m|........;N[....
.....|..4.(...0>.y.....G..~......./-...7.".)...G}.......E..>...H
.....L....w..U.Z.....S`W....,..'S$...~d.Dq ..w....UZ.Nj...=..\B(.w..J.
...X?.".3...Pq........b.......L..s.9...v.$...K[.....l.F3..6.2...X.:Nky
H.2)-.0 ..;......F!.s..."b#)...J.....?...I~&......{...k..U.|.5I<.me
..7M t..l.r...3L.g.......T.E..........!./..L......'.<.?......3l...=
}...E..|...-..z . [email protected]_.....7.(...>z....9d%O.c............
]...C........R).9..9.1..........2..6 `.rA..d.............e...m.]GN..r.
....<.=......SYr..{.g...}.J.V......_3\,...Lk....7...¬.u..r....9..
r.... .2.....,....n.T...R...[......z..%O.vmy.....C........f.>=....{
.m.fU/......w!&(v...7Q.N.....f...y.m.)..kR........


The Trojan connects to the servers at the folowing location(s):

%original file name%.exe_176:

.text
.rdata
@.data
.rsrc
t$(SSh
~%UVW
u$SShe
user32.dll
User32.dll
UxTheme.dll
{A0005538-9391-4dd9-B4D6-8EB7B9360F08}
hXXp://world.show.qq.com/mall/inc/item.html
hXXp://wenwen.soso.com/z/SetMyCommonNew.htm?ch=new.gr.dh&ch=new.gr.dh
:hXXp://pay.qq.com
10665999
10660127
10661700
10666226
10661700
10666226
1066170035
10660127
10665999
1066170035
10661700341
10666226
10668828
10665999811000
1065710141000096
10661700513
10665999501000
10661700501000
1066622637161
1066170015
1066170015161
106662263000
1066170035813
10661700896
10661700341
106659993607
1066622685
10666226396 >
10657101410000915
10665999801
10665999381
1066170035617
1066599935617
1066170015
1062170015
10625700
10621700
hXXp://bd.qq.com/
hXXp://bd.qq.com
hXXp://service.qq.com/
hXXp://VVV.paipai.com
hXXp://client.pet.qq.com/pet.htm
hXXp://pet.qq.com/vip_get_pet/vip_get_pet.html
hXXp://act.pet.qq.com/pet.htm
hXXp://115.com/file/aqab99ht
hXXp://115.com/file/aqab99ht
VVV.cx90.net
KEmulator.exe
KQQ3_Common.jar
.QQLive
hXXp://live.qq.com/download.html
hXXp://my.paipai.com/cgi-bin/myppindex/buyer?PTAG=1015.33.1
#01 10 1
#02 500 9
#03 1500 25
#04 6000 100
#05 18000 300
#06 36000 600
hXXp://u.shurufa.qq.com/rank/pinyin_rank.html#
20149999
hXXp://soft.baidu.com/softwaresearch/s?tn=software&rn=10&wd=΢ÐÅ
http://pt5.3g.qq.com/s?aid=nLogin3gqq&auto=1&s_it=1&g_f=286&sid=AajEsQr7RNgOgjfiIusDTy21
wapex3.0.exe
wapex2.0.exe
hXXp://seller.paipai.com/remind.html?PTAG=40012.1.16&QTAG=3&LOGINTAG=1&CacheTime=1318738727
hXXp://shuqian.qq.com
hXXp://shuqian.qq.com/post/?1318738032
C$%cmb
.ppM|
 aZ.mO
%-^
.hk;~
KERNEL32.DLL
COMCTL32.dll
GDI32.dll
MSIMG32.dll
MSVCRT.dll
MSVFW32.dll
USER32.dll
SkinH_EL.dll
hXXp://mq.qq.com/pages/open/open_choose.jsp
hXXp://imgcache.qq.com/qzone/web/load_login_3.htm
hXXp://imgcache.qq.com/
k%UPp
fg.VG
%C',@
>Ùd
\_temp\o.exe
`.rdata
KERNEL32.dll
MSVCP60.dll
WS2_32.dll
_acmdln
%d.%d.%d.%d
User-Agent:Mozilla/4.0 (compatible; MSIE 5.00; Windows 98)
HTTP/1.1
{Konline_1A4F0F3B-5516-4338-AB9A-3A562A2761FB}
HTTP/1.1 20
hXXp://bo.duba.net:8080/pagetracer2/duba/__utm.gif?
E:\KINGSOFT_DUBA\Build\Build_Src\kisengine\kis_2011_sp4_fb\product\win32\dbginfo\konlineinstaller.pdb
Thawte Certification1
hXXp://ocsp.thawte.com0
.hXXp://crl.thawte.com/ThawteTimestampingCA.crl0
hXXp://ts-ocsp.ws.symantec.com07
 hXXp://ts-aia.ws.symantec.com/tss-ca-g2.cer0<
 hXXp://ts-crl.ws.symantec.com/tss-ca-g2.crl0(
2Terms of use at hXXps://VVV.verisign.com/rpa (c)101.0,
/hXXp://csc3-2010-crl.verisign.com/CSC3-2010.crl0D
hXXps://VVV.verisign.com/rpa0
hXXp://ocsp.verisign.com0;
/hXXp://csc3-2010-aia.verisign.com/CSC3-2010.cer0
<VeriSign Class 3 Public Primary Certification Authority - G50
hXXps://VVV.verisign.com/cps0*
#hXXp://logo.verisign.com/vslogo.gif04
#hXXp://crl.verisign.com/pca3-g5.crl04
hXXp://ocsp.verisign.com0
hXXp://VVV.cx90.net/soft/qqtubiao/set1.txt
qqtbset.ini
hXXp://VVV.wz123.com/?cunxinsoft
hXXp://s.taobao.com/search?q=QQ×ê&commend=all&ssid=s5-e&bcoffset=1&sort=sale-desc#J_Filter
VVV.cx90.net/QQtb
KINSTALLERS_66_109992.exe
%du2$"
.unOZ
@hXXp://pay.qq.com/
name="loginUin" id="loginUin" value="
hXXp://cx90.net
hXXp://xui.ptlogin2.soso.com/cgi-bin/qlogin?domain=soso.com&lang=2052&qtarget=1&jumpname=&ptcss=¶m=u1%3Dhttp%253A%252F%252Fsobar.soso.com%252Flogin%252Fok%253Fw%253Dhttp%25253A%25252F%25252Fsobar.soso.com%25252F&css=&mibao_css=#1318736267718
hXXp://x.soso.com
&ADUIN=947562580&ADSESSION=1318726285&ADTAG=CLIENT.QQ.3493_MyTip.0#
hXXp://xf.qq.com/?ptlang=2052&frienduin=
hXXp://m609.mail.qq.com/cgi-bin/frame_html?sid=BlKpbMSa4pgCKhJc&r=c4f5ad0c9a3baa2d9a7d5f6d74cf2ac7
hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=10000101&s_url=http://show.qq.com/inc/loginto.html?myurl=http%3A//show.qq.com/&target=self&f_url=loginerroralert&hide_title_bar=3&link_target=blank
hXXp://video.qq.com
hXXp://boke.qq.com/myhome.html
hXXp://xui.ptlogin2.qq.com/cgi-bin/qlogin?domain=qq.com&lang=2052&qtarget=0&jumpname=&appid=10000101&ptcss=undefined¶m=u1%3Dhttp%253A%252F%252Fshow.qq.com%252Finc%252Floginto.html%253Fmyurl%253Dhttp%25253A%252F%252Fshow.qq.com%252F&css=&mibao_css=&s_url=http%3A%2F%2Fshow.qq.com%2Finc%2Floginto.html%3Fmyurl%3Dhttp%253A%2F%2Fshow.qq.com%2F&low_login=0&style=11&authParamUrl=&needVip=1&ptui_version=10029
hXXp://show.qq.com/
hXXp://VVV.tenpay.com
hXXps://VVV.tenpay.com
hXXps://VVV.tenpay.com/cgi-bin/v1.0/manage_icon_page.cgi
hXXp://qqring.qq.com/
hXXp://style.qq.com/qqring/
hXXp://VVV.pengyou.com/index.php?mod=userinfo
hXXp://baike.soso.com/mySet.htm
hXXp://pay.qq.com/service/service.shtml?sid=19
.hXXp://s.taobao.com/search?q=VIPͼÊé&keyword=&commend=all&ssid=s5-e&search_type=item&atype=&tracelog=&sourceId=tb.index&rt=1318737217953
hXXp://city.qq.com/
hXXp://city.qq.com/user/rm.htm
hXXp://city.pengyou.com/user/user1.htm
hXXp://VVV.cx90.net
VVV.cx90.net/soft/qqtubiaoad.htmr
!$#*8!$*
!#$&&')!$)#$%
#$$())'((&''
!$#*8"(4"'1!%-!$* "&
" !## 9#*7"'0# 8")4"(2 #(!$)#-<#,:!&- #' $)
5==3::<<
%D|*I
.Lr@i
>>=11333
!$!$ #*8"'1!$* "&
" !## :# 9#*7!&/"'0#,;")5")4"(2 #(#,:"*6 "% #'
,3=!%  "%
,>V-?W1?R25936:!Ck.Px,:K.8D
"@bÌ,Ii.Ll1Pr0Jg}
*Ov-T}9`
33434735:38C36=38B3593462;L3;J3;I39D37>2;J3;H3:F2=N26<37=358 :L.BX59=357345.G[
VVV.cx90.net
411127677
1.2.18
inflate 1.1.3 Copyright 1995-1998 Mark Adler
%*.*f
CNotSupportedException
commctrl_DragListMsg
Afx:%x:%x:%x:%x:%x
Afx:%x:%x
COMCTL32.DLL
CCmdTarget
MSWHEEL_ROLLMSG
ole32.dll
__MSVCRT_HEAP_SELECT
%$%,%4%<%
S%T%U%V%W%X%Y%Z%[%\%]%^%_%`%a%
b%c%d%e%f%g%h%i%j%k%l%
W%X%Y%Z%[%
Z%T%i%f%`%P%l%
%$%a%b%V%U%c%Q%W%]%\%[%
%<%^%_%Z%T%i%f%`%P%l%g%h%d%e%Y%X%R%S%k%j%
%,%$%4%<%
eZl%u
Q.YeY
R:\Sg|p5rL
e$e#e e4e5e7e6e8eKuHeVeUeMeXe^e]erexe
s4s/s)s%s>sNsOs
qq!r!x!/!L"k!^!-!y"_!`!!&"&#&$&%&&&'&(&)&*& &,&-&.&/&0&1&2&3&4&5&6&7&8&A&B&C&D&E&F&G&H&I&J&K&L&M&N&O&P&Q&R&S&T&U&V&W&X&''!'"'#'$'%'&'(')'*' ','-'.'/'0'1'2'3'4'5'6'7'8'9':';'<'='>'?'@'A'Q'R'S'T'U'V'X'Y'Z'['\']'^'_'`'a'b'c'd'e'f'g'h'i'j'k'l'm'n'o'p'q'W'>!=!B!F!G!H!I!w"x"E!D!s"l!m!("n!r" ","*"-"M"N"O"_"P"`":";"]!e"g"g!\"J"K"A"@"i"j"h!h"f"b"b!a"e!f!c"d">"?"<"="]"^"!(,("(-(#(.($(/(&(1(%(0('(<(7(2()(>(9(4(((8(=(3(*(:(?(5( (;(@(6(#"""%"$"'"&"!"~!{!}!|!~"z!y!j!i!v"u"t"!!"!#!7!9!:!;!R!S!T!U!V!W!X!Y!Z![!)"."L!M!A!!$"$#$$$%$&$'$($)$*$ $,$-$.$/$0$1$2$3$4$5$6$7$8$9$:$;$<$=$>$?$@$A$B$C$D$E$F$G$H$I$J$K$L$M$N$O$P$Q$R$S$T$U$V$W$X$Y$Z$[$\$]$^$_$`$a$b$c$d$e$f$g$h$i$j$k$l$m$n$o$p$q$r$s$ !,!5!6!!%"%#%$%%%&%'%(%)%*% %,%-%.%/%0%1%2%3%4%5%6%7%8%9%:%;%<$=%>%?%@%A%B%C%D%E%F%G%H%I%J%K%L%M%N%O%P%Q%R%S%T%U%V%W%X%Y%Z%[%\%]%^%_%`%a%b%c%d%e%f%g%h%i%j%k%l%m%n%o%p%q%r%s%t%u%v%&!<!3!4!l0zC7<|Kf>0;e><2TI?M"P/1n3#P$@BRV5:Jg>>NBJ$PfC%Pz6&P]40Cg<'P(P)P5GW57GcFC83KIi*Ph> P52e6p8iL&VpM}FE5,P-P;N=MhA/Pv;sF2P>1_8^8f0KOJO3:!03P4P5P4K6Pr8g0rK|5}5~5bD<N7P8P9PM?:=N?>P<P=PX5#:p2;P:P)JF;E;>B?PUIg@8!@PBPeBaNJ0AP>2D6gCo7CP$Gk4DPK0`8l4zI2HY5q2gPAElGFP<HbN-?G;w;@2QD"CJPL0cD;=4:$MNB?2IP>MEPGPn:HP$UPPSPQPB2;JKPOPs8H;&4TPLPcNx;MPRPUPNP!6M0"6A2%UyKnIt8/?7NXJ87½2S=YP^P\PWP/BZP]P[P]JXP.?sK_P`P$=mPPG6IhPpJ62lPfPoPRAD8\GG`nP]EcPv8u8aPZ<iPoJMCePq7bPjPdPQNkPAOf6p7pPqPuPN0PJtPsPwPvPdDr7xPE<&BeDv6yP65zP|P5Kf71;wH{PE:CM~P#Q}PD:}=97$QO6!Q"Q/F|A#6MK%Q=N&Q)Q'QNA(Q*Q,Q QHJ75.Q/Q/2-Qt<2Q1Q0QVP3Q~=4Q%MYL6Q5Q8Q7Q9Q:Qt058;7<={C$6h@w8n9<QHLFEy;;Q=Q^Eu3>Q~F4A@QAQ,Hx8;OBQ&6<J6Bq65Es7CQDQbF_1GQ}:FQF:HQnfIQAKJQKQLQi>L<'4OQMQ=LNQZIPQQQRQ_EVQTQUQSQc:WQjLdNXQ(@YQZ=ZQ|C?N`EER[Q%tE6\Q^Kh=|B^QdF_Q`Q.3aQ'6LFz1P=!HbQaEO?cQ,JZ@"4)4dQfQ:7eQsNi==HLJgQxMhQiQ~EjQ)@~:t7kQI;o9fDmQ'Bo:nQoQ0AlQqQ6Kd9pQu7^:mGtQrQ{Ij>{Qd3uQsQOAwQvQD3`7|Q-NxQ}QzQyQONy8C2tNu=XEe9"R#ReN O%Rz8$R/3&RVK<D&MYJ'RUp0F(R*43L!>)RgJ-R*@*RP6 R 4.7.R/R0R1R[<{8^LhLwFqJ2R3R5R7R6R8R=2LK|:9RYA">)6:R[H;R<R=R>R$Ih6e0?F?R==i@AR@R#>a8CR>HDR\H4BnB(6nF1CnGNKFRj@57GRHR,1u0m4(BQ5qMKR72JR*6LRqLMRRN|868NRPROR_?91^1QRRR78SRn52;TRtK5:Z5'MPA?H}<G=h<u<v=@HWRC1QA}8E8g6[R!C~B 6$>\RZRD2fB8<K;&1p3f9J;]R^RI5F3g9H5_DF>L!9yMGE~8/7gRc6JK]HfR^4aRbRdReR[5a?-JcR_Rc8`R$OrJhDb8p9hR]FlR~<v<oRmR#LjRsRnRqRF8?LrRtRvRp:BOkRiRuRpRxR#SzR~R!S{R>Si:13yR%Sv0$S%0JI"S|RwR}RH:&Sw0/S'S(S%>iK-S,S/E.S S416:0?)SbE*S"04S#M'>:S9S0SCB1SoB6S&>3SdL<77S8S5S;S2SASFSBS=SGS1AIS"9?S}CCS<S-4n4e3DS@Sv7JSHSSAJ5,6ESt6D1NSLS'TQSKSOSMSL;PSSSXSVSUS2CE2RSTS(>31WS^2bS|>^S\S]S_S=19AYSZSz3aSo4dS`ScS.JUF8HfSeSE3gSjSiShS9GkSlSnSmSpSsSqSoSrStSuSvSwSxSEQ|<M;s2x0DCyS$:O0^?zSG8q9|S{S`J}S!T~S"T#Tw7`1$T&T%T(TZE)T50_:=7OC*T T-T.Td:Q67K,T/TA:#93T%:3C0TZD4Tb?2T5T?76T7T$9@39T:T;T8T1T<T=TdKk>?T@T>TBT8Gh0VICT}>9<]Gp4k:YK2Fx7OBATDTDBETFTHTiD.4!ta1sJl>HEf:NT=J]Nt2JT:AMTcEIEdE9HMDI:ITv16EKTGTP?OTN=-6PThJ}AFDRTOKSTXT/JWTQTTTVT&:IJYTECu2m>[TZTh9\T^T]T`TUTbTaT_TN;Q?TAcT<@m0dG[DeTdTfTgThTiTQJjTF2kT<M03IRH=?BlTkL4LnTgB7E@BWIoTpT{1:<qTP0rTsTb1q4`FtJwTUAvT@7[KuTeEyTxT{TzT|1|T)>~T%C}T3Jw=[E!U%9"U!G^HQL%G U85EM/L,V#U&UEB8KJE'UeKJ:*>(UP;O;90H8 @Q0,U-U*U81/4)UEL1I(0y0Q;R0#02U0U<L3U1U/U1?.UZJd87U8U >4U,OLG6U':9UXI:U5U;L^G;U2I<U@U=UG2?U;<>Uy7LUEUBUdCAUCUDUFUGUr4IUHUJUn>MU\DE1KUNUOURUPUQUR;SU&9TUz;8BUUVUZ;'9RL(5I8WUX3XU9BYU#VZU[U\U^U_U`UpB'1i<B0WA045<(9fE!=14hCjD8095uJB<R5k@<<(MaU\5K:23c1,>H2bUFMI=d<cUs4RF)LdUeUYIgU(4w6fU242?kU!;I2jUhUlUiU GM\3?mU@NnUpU~CoU#@{;PBw<uIl@M<qU->rUsUS0:BR?tU3F.>/>uUm@0>vUwU`LxUF6"=yUzU\<,?tFT?xH"GI6{Uo5|U~6OF02S;}U"V!V}6~U8E0BKEH<XAzM$V%VVF3;'V(V)Vt4*V V,2;Ad4-V(LRBY3/V1V_4.V0V3V2V4V5V=F.6e26V;V9VwJvJgE8VT=7Vr?<Vj:BVCV=V33>VGVFVEVAV@VDVxJKVHVJVrMIV?Vs?LV7:MVNVQVPVOVhE:VWVSVRVTVUVXVfNYVVVZV`4[V]V\V^V_Vn@#=d=cA)98:*9p5`V9:J8aV&LCGbV 9,4'CR6T;[IAHcVu4fV!DeVdVgVkDc?U;J@SB"5"DhViVo>9KlVkVjV}IsVZKmVoVkKnVpV(HqV>JrV34?J/GtVuV,944vV88DM)Mv4xV#D-91>_H2>x=lDyJ9E.9\IyVYEB:K8mDC0n=/9GMzV{VQG|VwN-O~V}VG3!W$W%W#W@I3>'W&W"W(W)W*W-W W,W.Wd1nD/Wz7v26G0W{F[J1W.O2W@J5W!P1P0<uF6W]5$Dz07W&J09PCoDoL98L88W9W?We<%D/6:W IFC;W<W06=W>W@WvEAWBWCW4W3WDWA7'IL:7I&DKIEW4>F1FWGWrL`HJW}1,@IWHWB7TBNWLWKW'Ne8y=MWLE>=@FQWPWOWRWf8SW|I[=TWyHAF'D0EUW 54?,Iw4&GVWV;:K;K~1[WiCXWw2-XZW0GYWWWz9]WcWiWaW\EfW]I`WeWgNW;UB^W^5hW-@e1bWx2gW16dWjWlWvWtWqWpWxNrW2619z=yWkWoW_Wz2sWuWQC(:82mWxWwW36)Bf3C7nWzW}W!X=<'XpD{W%Xy2#X$X~W"Xg8*M54Y1&X:G-0aH\W,X0XeL)XiE.Xp>/XWFGO X1X{9K@T0*X(XZA|W4;FB=X[A8X5X6Xf<9X<X7X$=:X4X|L{L>X?XU03Xr6&064;XCXBXGXHXFXIXAXEXJXKX@X|;DXVB292X5?XXiJNXOXPXWXVX}K74TXE743QX8NSXV0UXLXRXYXD7MX]M M\X`X~AyNaX^X[XZX_X0J4FF7bX]XcX{712kX84iXjX):hXfXeXlXdXnX{2pXoX(DsXqXgX|7rXvXuXwXtXxXyXzXjJ|X{X?=.@f2|2}X?0L@~XCl!Ya7"Yo@#Y$Y:5%Y&Y'YWBM8aL<Kj=(Yp@=nbHj<M:)YGB'JqB,Y*Y-Y Y.Y1J70^IcH/Y2Y5>;50Y7Y6>1YDG^M3Y4Y8YjE5Y39^@FY4HrBdH-ZzJqDuK;Y!2jCDY4C>YEY@YGYCYBYoG<Y}2:Yq5sB6Y9Y49[@7>AYRGr5H3g3!?IYNYJY}7OY";i9&==Y};LYX;MYD0HY)Ds546KY'0C:6?rDTHQY^A*B ;RYTYPYaJ=D\A{JN<`Y_Yx?~7YY9>hF1GWY]Ax<\Y8>VY[YSGUY!7]3]Y NN:5CZY\@59d?f1<AXYE5G7OD^Y_AaYcY7BiYdYfYAIsDgY,MHM94.0eYbYx4g1hYIMlY;BsYmYjYqYSYnYrYBHkEkYoYH7q:]@wY&EtY`KuYvYNL"@b7}Y5;zYyY2G5F1E{Y|YoIEG#;q@PKI3%Z~YJM'Z#Z$Z`A"Z?Y&Z!Z Z,Z'E.Z$;)Z<5/Z(Z3Z2Z1Z4Z6Zq>5Z9Z7Z8ZpY;Z:ZxY<Z0ZY;=Z>Z@Z?ZAZ~269|J/@N8CZFZRI_5EZDZTGGZ56IZHZ:46;XFI7t?JZ0@(E_IKZLZMZ8J]UF@LIX:eHCHMEANOZP<PZ60T6M@`IQZB;GC[;7?RZ}Jw1\;UZSZVZ9NTZ{@WZ2BXZz4ZZYZ[Z\Z{4|F6Cl5];aA\=00]Z"2aZ79`Z ::>_Z;>@L*:W0N@fZ1@G1U=fKr:<>'@eZcZdZkC&[jZ~;89hZiZ8?gZ/;lZkZpZqZmZ"3nZoZUHaIJ7rZ2@=>RCG6sZwZK2tZvZuZk=HCE0xZyZ*DqNC;kJ=K"[{Z~Z}ZzZ![^F|Z#[l=$[KMxG%['[([)[J6H199*[ [q=bAXR>A=AXBG:rPn7-M~J~I,[s:?D-[/O>K D.[|4/[0[ZL$LvK\K%;2[k<QK4[7[6[y4`53[5[8[y?{MI0`:<B]<s>;[NE9[ B:[r>]L<[=[hMB[:9UG?[lE^ZbZO5GGA[>>DHG[zH>[D[C[O@mKSNgKL2^;HOF[u?E[@[O8L[J[M2H[N[T[HBAJV["IU[pG?K;4w@@=SD.MQ[P[R[O[W[M[K[S[I[lCxLF<t:::oKA3NDJFI1r@4@*7Y[;9|3[[t3a[^[s@K3,:J3O:\[e7K7mEZ[F0][_[M6,7<4K5b[y:qK7;c[0Io[32d[u[e[BNl[_Gt[g[40i[<9k[j[f[q[?>mTh8|Mh[tD#3-:`[p[a3n[r[nE~42\ILw[}4~[@K!\#\'\y[*CoE \|[(\"\9?,\3@*\=4POv[&\X0x[:L}["?GDs[%\z?/\q3!81\z[0\)\{[-\.\?\NF$\;\=\XDLMvI8\JB>\?A5\B\A\oF@\jFD\7\H6:\]=`G<\K64\6\3\0OZ39\C\53g:]1T\1OW\:?V\U\R\F\c\E\X\P\K\H\I\Q\"tN\=9HDdAL\G\J\MMjKO\Y\a\Z\g\e\`\_\PDeA]\[\b\h\uHn\i\l\f\tC8I\\d\@>OLx\k\"8#2_3S\A>p\w\y<r3.Cm\r\v\66L5t\!5KFs\u\o\q\`3IC|\z\i8y\!]X[{\}\~\,](]m[']&]#]j\%]$]*]&O-]{6)] ]'H.]2]/]sM0]^\3]4]516]g7!<U6$2_M8]7]:]=5V6>4=]<]>]N27C?]?4A]@]B]C]D]_;5@!:pIbJDOu;P:rNE]F]`;G]H]J]I]XK^=l<D;K]M]#?L]N]O]P]Q]R]T]S]U]%2JCV]&;L3W]BELT#5X]Y]lJhKGFZ]fH{HSL[]]]\]_]^]a]a;1Lb]c]$5d]f]e]e?9IJ1EHuDA=a5FH.<h]@4x1rFg]>9SCi]q]j]ABb5r]h7%5p]n]k]`M@DYFl]t]s]#7-2;:m]o]WKtBwK|]}]O2(J}L!^#<B>x]~]h176u]z]t@qGgHw]!Ky]$^"^{]"KHGc5%EmC%^#^YBv]K1NM0^/^v@,^lM6F&^EDL1?9)^'=.^-^(^ ^h3*^IG.Nt>u@6^4^MI1^3^:1@92O=3bIaM$3;?5^:^C>0M7^2^8^^NsEBF63U1>^A^CNdMH^B^?^TNE^J=G^L^qEJ^D^8CK^@^F^M^|0C^N^<?_=%J.:;^I^:E6@i3Q:D>=^B=L7<^R^m=:8a^[^t5OEV^_^/02192X^,BO^Q^A9b^]^U^\^ LZ^^^P8E>9CT^/MW^P^rES^Y^QO><~Kc^.Ho^;8`=e^/NB9r^n0p^d^j^l^OMg^.Ei^q^k^GLf^"<~^j3h^m^n^lBZBv^|^z^)E#_w^x^`^y5:I?<w93Ot^"_i1fAyGA4zN!LRD{^}^2A!_y^s^C4i7/_*_x@c3a=3_,_,D)_YDL_&_%_._(_'_-_!@$_0_1_B46_5_7_:_CE4_8_c7yB2_;G9_>_<_?_B_;_j9(G9^tM=_A_uB@_ _ioE_I_G_C_D_H_F_NIN_K_J_M_TFO_uCmB%@P_R_Q_u^S_gFT_P2tE=5^<R:'Of?j1V_U_Y_:C\_W_[_Z_@EY0uN^_(1`___]_X_#Kb_a_k1d_2Jc_5LG>3AF>{Nj_y@f_k_l1i_aGe_h_H>QHl_Q<z@o_g_'7m_PMp_&tO=q_r_.Gt_u_3GuEw_y_UNv_x_m1s_[Sz_gA8;|_{_$?YR}_!`n_~_"`zG#`$`%`&`^D(`'`)`*`_<cIlL `,`VA$<-`.`/`RJGH0`WG-D1`g2m5FL6L424ORK*J7@2`CF#83`T:5`4`6`7`8`>59`:`$8HH<`u>;`86=`?`>`@`Q8A`i6@A}9C`D`B`m<HF96F`,CE`5ObGI`K`H`TLJ`L`DNP`O`vC-G%8N`M`1M2MQ`n1v9b;R`S`U`C=W`V`X`M3Z`Y`\`[`<8(NL6&2j6a4hN^```a`Q2]`9;AD_`d`n<b`>7IHc`~`i`=8e5f`}M0NvBh`j`VNW6|HJGk`m`p`l`o`j8M1q`p?n`\Nt`$tr`u`g`s`<:v`w`~Mx`y`e`z`D4%<{`|`}`;1!a;I"a$4#a$a%a'a(a&aSI*a)a,a a-a.a0a/ay92a1aE4S?<E3a8@:;y14aQMcJ5aDE3MC9=?KC4R.Dh26a7a<a:a9aBZ&38aZ0*HJH1N=a;a\C&@ H-I?a,NM7@a>aVHAaBa[0v>GaDamFCa&5JaEaFaIaHa%IBAAA?5KaLaMaOaNaV1WahHQaSaUa>?VaTa@<PaRaBII>YaXaZa&</:wE[aKD]a!N\aiAbadaeaTCca`a^a_aaahafagaiakalamanajapaoaqaENtarasab4~LJJvauawaxa|ayaza{a}a~a!b"b#b/HPE$brG4I%b&b*E'3D9'b(b)b); b*b,b-biH.b/bis0b1b2b.;3bVG_KN1W14b6b5bpE9@9]7bAL8bF4WH9b:b;b\LUL>DjA=bb=J>@b?b>b}HG4)8FbCb??2LBbDbEbAbGbHb/Dc4eCIbJbMbg?DFNbSKKbLbQbPbObSbRbTbVbUbMJV=FNWb7FXbYb]b[b\bZb^b_b`bab7LbbpLcbNCjGk6;Cdb:6P@eb=:fbgb&8U:ibVEV:N5$KKGWE\9kbK>2NE9'8#Hmbobk8nbvDqb73lbjH01l:ROpbrbKJY@tbubsbN3{bzb'<|bwb}bxbXHvbyb"c!caK~bk0$c#cL>ÌA'c&c(chbjb*c)c(<iNR< c77@5'5c;4M1c0cDA-c/cK=@?.c,c*GM><IW:xE2c3cIcX6=O5A4cR2wD!J5cz56c8c9c)G:c;c<cY6S2EF(=d;=c)=J2CI>ckHEAAcBciGA??caC@cN>\0)5CcxDDcG@-L#IEcFcUCGNHcGco<Jcp0McKcT2N7LcF9r9fJNcTKPcQ@O1:2,0OcQcRcw>ScO3Ucj7f5Vcu6Wc|@MF`@u:XcbCkAZc\cYc[c"7]c&7g5RM_c`c.1ccv3bcacec^cfc)NgchctTjcickclc5NmcopO>ncocW=8Fpc(Cqc<Crc%6?Q]C3<H4sc"dvch5uc$dtcP>xcyc Ezc^3Z?dI|chBwc{c}c{:&d.I&HyEZ6%d#d5H~c^C{EzEv:8d(d*d-d.d d,d)d'd!dOJU25d2d7d6dsG'L;;0d9d4d3d/d1dI4=C}@"H>d$Ha@;dOH?dSJ[C:d<d=d@dD<FFEdDdAd6OJdNdKdGdHdMdBdURIdCdLdRdJ4OdPdQdTdSdvHUd|NmJZdWdVdR@Yd[dXd_d\d]dFd^d`dadFJbdbLN6)7cd4Jh?0Ldd3NtGFA4GM=@0idgded!4Q>jdhdfdndmdldkdodpd:@qdsdrdR88Aud|Etdvd5JlAG9wdHNydzd{d|de;}dO7j5*5!esLH9~d$efL<G3Ic=#eS<I9f;i56J"eGABKw:g;]D'e_NY:(eB?*eR>0:)e*=>8HA%e e&eP7.e2ek7-e6eJ9mM<03ek50e1e}E/e,e(3d@(88e5e7e4eQ73B9enAFeBe<e@ez<]0;eCeGeK9VLVD=eEe:e>C?e=0JL>e[6lHmAPNo=neHe~@DeIeKeyDNeJeTJK4KL^0Me}NLeo1lFOeVePeWeSe{GJ<UeReXeQeD=%KL=Te`e\e_e]eae[eAeS@KH^eYe!AR7 =%?6AdefegeceeeZebejeiezK 7helekeoeqe<;mereseteze;Eveuewexeye{e|eL4}e~e!f"f#f$f%f&f(f'f)f*f f.f,f-fa:S7VC3Hp=MGmH/fmX0f2feM1f4f3fSM5f~H6f9f8f7f:f27"AA5>f;f<f?f@f=f)1'2BfCfDfbM,=FfEfi?GfHfIfe4M4JfKf]KcMTM7OM9NfT<MfOf)<QBPfL9WLQfRfSfTfUf*<mLWf?CVfYfXfZf;@[f\f9J]foA^f_f~Nbfaf`f0Dcf&?dfef8Offgfifhf%HyF>O)HkfS>*IlfjfN4T8h;nH*8CKofmfN9O9i0h:YG_0tf@CXG[Bvfrfufpfsf&KU8}0qfxfyf9F;6&g=Gi;<[email protected]@S5zf|f{f}f&C>G1D#g"g~fU?eI%g$gP9SO5g)g*gp<(gx9'g g2D"J#A\B/g0g,g-g.gQ96g2gfIlK(I1g4g3gDK7g8g7A9g;g?g<g:g?G=g>g22Eg@gAgBg!BDgCgFgGgHgC?i2IgWN <-=j;WCJgKg11LgMgNgOgPg=6*ZQge@RgK<Sg0PTg^J\4$AX=qI.=UgR9VgLHdgXgIBuG?8Wg%AYgzD[gZg]g\g^g`g_gO4agbgcg1:INeg'?p1fggghgr0igjggIG<lg)320kgngNGD?V2'K]7\6mgj2#4q1rgjN]BDI~gW2|gzgqgogpgc<l6wCQFQ1tgsgygugxgPLwgX2}3{g}gT7#h,h-h 04hq0 h*h%h$h"h!hcC{B'h&h)hpAU7A1(hS9qA:h;hY2.28h.h6h=h7h5hvg3h/hP41h<h2h>h0h|GiM9hOhGh{?F5]6Bh[2T>EhZ:QEJhnJAhZ2V8)IKh?hHhRhChDh:FIhFh(KLh`0@hNhMhkGTh_h~3bhPhUhnM^hUM*NxCk3rIdh!F10]hYhrASh[h`h,G*0XhahxI\hWhU>/=,<XLGIghphZhw3x>ehjhsAfhmh_CnhVMch83ihlh,Lohhhkh)K!OshzhrhC<QhNJ"Lyhxhthuh61whqhUDvh~0"BCJ{h!iYH~hV>I<#i>6$iyI}hVh|hOO"FsI i1i2i%ivG/i'i)i3i(i,ir1eF-i0i&i&A*i';E?07tLyLr=7i5iNO4iuM6i8i9i<i:i#F;iMH.is==iBitAAi"iCiIA>i@i?i1]"]EiDivM<bFiGiHiW8T5Ji]Qu5:Ns6KiLinCMizF:0c2RiSiNi=;OiBGPiQi[iUiXiTiViWiX<YiACV7B3\i?3ai]i`i:H^i_iHIZHbi}Blihik2fi*KgidieijimikiiiciXCti*Lrisinipiqioif@9Oxiyi!j*?{i~iviui"j\2|i#j}izi3DwihG'j;M&j%j.j(j0jfM3j*j j/j2j1j)j,j=j6j4j5j:j;j*3B59j$j8j<j7j>j@j?jBjAjZiFjCjDjEjGjl7IjHj0=T9'^JjQ=93KjR1W>LjU9Mja0=INjj?UjRjoCSjPj^6OjVj67^B\jXj5BWjZjQj[j]joHYj^j`jS8TjA0_j[:vNajbjuA"Ncj5MdjejdJfj@:#NkjljX>jjgMgjij=@~?hjmj#Jojnjl3 Kpj|jrjsjtjujyjzjxjvjqjwj{j7p(2~j_6}j"k!k$k#k%k1=&k'k(k>@WM)k$JFG*k k 8,5,kk;AG-kP3.k0kwM/kF?1k2k3kQ44k5k6k7kQ38k9k:kr2(?;k<k=k@8{D>kW7V?Ak$F@k17?kwB-5BkCkY>m7Dk,K_@v5uLJAEkG?pCZ>FkIkJk>:BBHk[>>IGkl;S1NkX7n;m;MOMkLk'AM5CO:3\>KkPkQkOkX8@Mo;'GTk@@BC6MWkl8?@SkXkm8UkVkRkb@IF/C]2pHC54D[kYkLCA@R4Zk[?JN@O\kgk5Dfkckkkdk`k|D_k]k!Mp;ak^kekt=A8zBEKZ1b0%FikhkfFmkbklknk,8jkV9U<okXMrkuksk5Ipk`6tkvkzkwkykxk{k1<}k|khI!lY7~k"l#lD5Afy>$ln8%l&l>;NZ'l(l2=)l*l l,l-l C.l0l/l&F1l-K2l3l4l5lZF]>6lk9.P7l8l?I9lAl:l<l;l=lFK>l?l@lBl-3gDiIb:[email protected]_BqH=EFlGKl2Ll(OBDEOq;Kl1B\l(AxFPIOl?;r;^>eG-8NlMljIA<REQlRlX9PlSlTlVl#BUlf4XlWlYl[l]l^lV@O<_lR3`lvAalblkI/5cl6D[1dlq<v?-Bglflelmlklhljlilllw5plW@qlY8nlol)O7D)ArlulsltlYM'Fxlvlwlyl)m|l}l{lzl}D!m%m"m~l#m$m m&mX@(m*m'm-m3=,m.m/m2m1m0m4m3mvL6m5m7m8m:m9mH?;mm6<m>m?m@m=mAmV<Bm0537.8CmpF>EDmGm4<FmEmZ7HmS3Jm\:ImRmLmNmeJKmMmQmOm15PmSmZGXN4=Tm"MVmUmYmAMXmm3Wm\m[mZm2E]m^m_ml9%7`mambmI?cm-<dmem!R~Qfmpegm$C ?@GhmUJTD~9)C*1xKW?^7a6VJimkmjm`2vFlmwG3EmmR=omBL~mqmrmID`BwA(FpmU5ymvm%n)F`Csm~DSEtmxm`[email protected]$Bum)0"OzmaB5=J?|m{mo0}m/I'n[Fk?YCx6&n7M?1WJa2!n"n#n$n;F#Cc0(n)n#t=B*ns1LA/8ZM n,ExAW<,n/ne=-n A*Ad0KN1nrH3n2n0ndcT4nm5n4n6n8MaF.K7nY<8n9n:n!Ej0Y9:O>n47;n<ntIT39M?6TE?n@nAn"ECnBnSFDn6=`<[GqCr<l?EnFn]?GnHnInoM7=KnJnZ9s9@;Nnf=MnLniBo8C@0H9=On_>RnPnQnTnSnz>UnVnWnPHS:a<XnYn$NE=nLLNZnb6[n#E^nx3K?\n]n`DUK|6`nan_ncn_FC3gndnfnbnOoenkNZ8on4Ejnmnknpnqninvnt1hn-Hln`>[9HKd6F=<F-AtnnnsnCL8Dunrn,Aynxnwn/K{=zn_JT1FIrCx5|n]9,;{nm?n?!o#o{>"o$oS6EIb<#O~nx:?O&o%o'o}niFUEWD,oCC(o)o-7 o08*oa>y30o?:yAJD;3.o/oCD-o1o7o:o9o-E2o3o6o8o@6;o5o4o?o@oAo>o=ob>*F<oEoCoDoBoxBFoGoIoU4HozLToJoMoKoLoNoPoQoRoUoSoVoXoWo9DgLYo.AZoDJ[o 3<1W4V4\o]o^o_o`oX4U3^96Hboaoco\1foeodogojoG0holokonomooo.FpoqosorolItouoe:vowoIKKA$0KBxomI{oyo_9zoB8EJ}o!p~o"p!1X?|=Y4#pfG%p"1$pDDMN F|o&N18[My64N(7bB!g&p,3o?V3(p)p'pd7]:c>#1YN p.n*p.p,p-p/p0plN1p2pI@;H}?g4:Mm28=[85p4ps;6p3p(;:p-jVRw?8p%NqF 1c@6<7J@1mNkM;pEE{<<p=pL?>pnN9p@pBpAp?pCpDpzAb2Ep8LFpGp*O1[HpIpJpNpKpLpMpOpD@wLE@PpsHQpSsLLRpSpTpW3VpY?Wp$7Xp\pZp[ps3Yp]p^pH0_p`pd>apG5dpcpbpqk\JepfpgphpipjpZ4kplp#Gnp;2qppp$1A6GJ:D":`9g=\?sprpBMh4RH\F|?NN[7vpupKK,FP1wptpQIjMxpyp{pjB[3\3zpi428j4?E`N\8|p}p~p!q#q"qwI$q%q&q'q)q(q*qtHLf)?25 q,q,R;]SH{0;0t;0K~>-q_L.q\MB1A;/qn20q1q3q4q6q2q5q[47q8q9q:q;q=q<q?qBq>q@qAqCqB6s<DqEqa9Fq>3OGGqHqZCkFIq}GLBX1n6o6sCNqp6o2MqKqLqJqXqOqPqQqRqTqSqY=UqWq35Vq{A38YqMBZq-F[q`q^q]q_q\qbqaqdqC6cqeqfqhqgqiqkqjq|9lqmq<3nqoqq?pqqqrqsqb9tquqvqwqxq1Hzq&I{qyq}q|q~q!r"r#r$r%r&r'r(r)r*r r,r-r.r5]/rxd45!32:1r0r%L3r4r2r5rbK6r{5%O7r9r>0:r J8r;r<r=r>r?rnK-;z:/A@rCrArDrq8BrErFrGrKr*;dBLrIrHrJr_7PrOrNr30ZrVrWrSrYrUrb3LOXrTrRrQr\r_r^r]rII[rs0`rbro3Mr71drcrar-CpKZNerfrgrhrir;Djr7Horkrlr1KDLPFprqr>Fnrmr*2yrxru1vrursr{3rr2<)2c9|r{rzrwr}r~r%s$s&s-1!s"st99L#s2K s's,s)s(s\7-s.s/s*str0saD4s5s3s2s8s1s6s7s:s9s<s=s>sIO;skBm:?s@sAsBsCs48DsEs/<FsGsHsIsLsJs<OKsoNMs[NNs~GOsQsRsPsm9MLcKwV`]{K 2TsP5UsVsWsu9XsT`[LcBYs[sZs\s]s^s_s`sasbscsdsesfsgshs$E]8jsMAksls!Imsns7cZlmpospsrssstspNqsusvsxswszs{sys6N|s}sTc~s*!t!p!s!u!J!K!v!\!$!%!?!0#1#2#3#4#5#6#7#8#9#'!(!c!a!d!)!w!A#B#C#D#E#F#G#H#I#J#K#L#M#N#O#P#Q#R#S#T#U#V#W#X#Y#Z#N!@!O!0!2!.!a#b#c#d#e#f#g#h#i#j#k#l#m#n#o#p#q#r#s#t#u#v#w#x#y#z#P!C!Q!1!o!
S%S'S(S)S S,S-S0S2S5S<S=S>SBSLSKSYS[SaScSeSlSmSrSyS~S
d d"d$d%d)d*d/d0d5d=d?dKdOdQdRdSdTdZd[d\d]d_d`dadcdmdsdtd{d}d
B"p"C"m"l"n"4"1"k"D""*!*$***#*)*!).*2*1*4*3*@*?*B*A*P*R*Q*T*X*S*,)c*b*e*d*r*0)N)" ! $ * # ) A). 2 1 4 3 @ ? B A C)P R Q T X S L)c b e d r P)s '*' %*% (*(  *  ,*, /*/ -*- 0*0 ")B)7*7 6*6 8*8 5*5 :*: ;*; =*= <*>*> $)D)G*G E*E F*F D*E)&)F)H*H I*I G)J*J L*L K*K ))I)()H)M*M O*O N*N J) )K)W*W V*V -)M)Y*Y [*[ Z*Z \*\ ]*] _*_ ^*^ a*a `*` /)O)l*l i*i f*f k*k h*h j*j q*q t*t s*u*u w*w v*v &*& C*C U*U g*g p*p m*m o*o n*n 9 0"/"2"6"5"3"8"9"a&b&c&d&g&i&l&v&e&j&q&r&s&t&{&x&u&z&w&y&|&B'C'D'E'F'G'H'I'J'K'L'M'N'r's't'u'v'w'x'y'z'{'|'}'~'q"o"!0"0#0$0%0&0'0(0)0*0 0,0-0.0/000102030405060708090:0;0<0=0>0?0@0A0B0C0D0E0F0G0H0I0J0K0L0M0N0O0P0Q0R0S0T0U0V0W0X0Y0Z0[0\0]0^0`0a0b0c0d0e0f0g0h0i0j0k0l0m0n0o0p0_0q0r0s0t0u0v0w0x0y0z0{0|0}0~0!1"1#1$1%1&1'1(1)1*1 1,1-1.1/101112131415161718191:1;1<1=1>1?1@1A1B1C1D1E1F1G1H1I1J1K1L1M1N1O1P1Q1R1S1T1U1V1W1X1Y1Z1[1\1]1^1v1_1`1a1b1c1d1e1f1g1h1i1j1k1l1m1n1o1p1q1r1s1t1u1w1x1y1z1{1|1}1~1!2"2#2$2%2&2'2(2)2*2 2,2-2.2/202122232425262728292:2;2<2=2>2?2@2A2B2C2D2E2Q2F2G2H2I2J2K2L2M2N2O2P2R2S2T2U2V2W2X2Y2Z2[2\2]2^2_2`2a2b2c2d2e2f2g2h2i2j2k2l2m2n2o2p2q2r2s2t2u2v2w2x2y2z2{2|2}2~2!3"3#3$3%3&3'3(3)3*3 3,3-3.3/303132333435363738393:3;3<3=3>3?3@3A3B3C3D3E3F3G3H3I3J3K3L3M3N3O3P3Q3R3S3T3U3V3W3X3Y3Z3[3\3]3^3_3`3a3b3c3d3e3f3g3h3i3j3k3l3m3n3o3p3q3r3s3t3u3v3w3x3y3z3{3|3}3~3!4"4#4$4%4&4'4(4)4*4 4,4-4.4/404142434445464847494:4;4<4=4>4?4@4A4B4C4D4E4F4G4H4I4J4K4L4M4N4O4P4Q4R4S4T4U4V4W4X4Y4Z4[4\4]4^4_4`4a4b4c4d4e4f4g4h4i4j4k4l4m4n4o4p4q4r4s4t4u4v4w4x4y4z4{4|4}4~4!5"5#5$5%5&5'5(5)5*5 5,5-5.5/505152535455565758595:5;5<5=5>5?5@5A5B5C5D5E5F5G5H5I5J5K5L5M5N5O5P5Q5R5S5T5U5V5W5X5Y5Z5[5\5]5^5_5`5a5b5c5d5e5f5g5h5i5j5k5l5m5n5o5p5q5r5s5t5u5v5w5x5y5z5{5|5}5~5!6"6#6$6%6&6'6(6)6*6 6,6-6.6/606162636465666768696:6;6<6=6>6?6@6A6B6C6D6E6F6G6H6I6J6K6L6M6N6O6P6Q6R6S6T6U6V6W6X6Y6Z6[6\6]6^6_6`6a6b6c6d6e6f6g6h6i6j6k6l6m6p6q6n6o6r6s6t6u6v6w6x6y6z6{6}6~6|6!7"7#7$7%7&7'7(7)7*7 7,7-7.7/707172737475767778797:7;7<7=7>7?7@7A7B7C7D7E7F7G7H7I7J7K7L7M7N7O7P7Q7R7S7T7U7V7W7`7X7Y7Z7[7\7]7^7_7a7b7c7d7e7f7g7h7i7j7k7l7m7~7n7o7p7q7r7s7t7u7v7w7x7y7z7{7|7}7!8"8#8$8%8&8'8(8)8*8 8,8-8.8/808182838485868788898:8;8<8=8>8?8@8A8B8C8D8E8F8G8H8I8J8K8L8M8N8P8Q8O8R8S8T8U8V8W8X8Y8Z8[8\8]8^8_8`8a8b8c8d8e8g8h8i8j8k8l8m8n8o8p8q8r8s8t8u8v8w8x8y8z8{8|8}8~8!9"9#9$9%9&9'9(9)9*9 9,9-9.9/909192939495969798999:9;9<9=9>9?9@9A9B9C9D9E9F9G9H9I9J9K9L9M9N9O9P9Q9R9S9T9U9V9W9X9Y9Z9[9\9]9^9_9`9a9b9c9d9e9f9g9h9i9j9k9l9m9n9o9p9q9r9s9t9u9v9w9x9y9z9{9|9}9~9!:":#:$:%:&:':(:):*: :,:-:.:/:0:1:3:4:5:6:7:8:2:9:::;:<:=:>:?:@:A:B:C:D:E:F:G:H:I:J:K:L:M:N:O:P:Q:R:S:T:U:V:W:X:Y:Z:[:\:]:^:_:`:a:b:c:d:e:f:g:h:i:j:k:l:m:n:o:p:q:r:s:t:u:v:w:x:y:z:{:|:}:~:!;";#;$;%;&;';(;);*; ;,;-;.;/;0;1;2;3;4;5;6;7;8;9;:;;;=;<;>;?;@;A;B;C;D;E;G;H;I;J;F;K;L;M;N;O;P;Q;R;S;W;U;T;V;X;Y;Z;[;\;];^;_;`;a;b;c;d;e;f;g;h;i;j;k;l;m;n;o;p;q;r;tfs;t;u;v;w;x;z;y;{;|;};~;!<"<#<$<%<&<'<(<)<*< <,<.<-</<0<1<4<2<3<5<6<7<8<9<:<;<<<=<><?<@<A<B<C<D<E<F<G<H<I<J<K<L<M<N<O<P<R<Q<S<T<U<V<W<X<Y<Z<[<\<]<^<_<`<a<b<c<d<e<f<g<h<i<j<k<l<m<n<o<p<q<r<s<t<u<v<w<x<y<z<{<|<}<~<!="=#=$=$=&='=(=)=*= =,=-=.=/=2=0=1=3=4=5=6=7=8=9=:=;=<===>=?=@=A=B=C=D=E=F=G=H=I=J=K=L=M=N=O=P=Q=R=S=T=U=V=W=X=Y=Z=[=\=]=^=_=`=a=b=c=d=e=f=g=h=i=j=k=l=m=n=o=p=q=r=s=t=u=v=w=x=y=z={=|=}=~=!>">#>$>%>&>'>(>)>*> >,>->.>/>0>1>2>3>4>5>6>7>8>9>:>;><>=>>>?>@>A>B>C>D>E>F>G>H>I>J>K>L>M>N>O>P>Q>R>S>T>U>V>W>X>Y>Z>[>\>]>^>_>`>a>b>c>d>e>f>g>h>i>j>k>l>m>n>o>p>q>r>s>t>u>v>w>x>y>z>{>~>|>}>!?"?#?$?%?&?'?(?)?*? ?,?-?.?/?0?1?2?3?4?5?6?7?8?9?:?;?<?=?>???@?A?B?C?D?E?F?G?H?I?J?K?L?M?N?O?P?Q?R?S?T?U?V?W?X?Y?Z?[?\?]?^?_?`?a?b?c?d?e?f?g?h?i?j?k?l?m?n?o?p?q?r?s?t?u?v?w?x?y?z?{?|?}?~?!@"@#@$@%@&@'@(@)@*@ @,@-@.@/@0@1@2@3@4@5@6@7@8@9@:@;@<@=@>@?@@@A@B@C@D@E@F@G@H@I@J@K@L@M@N@O@P@Q@R@S@T@U@V@W@X@Y@Z@[@\@]@^@_@`@a@b@c@d@e@f@g@h@i@j@k@l@m@n@o@p@q@r@s@t@u@v@w@x@y@z@{@|@}@~@!A"A#A$A%A&A'A(A)A*A A,A-A.A/A0A1A2A3A4A5A6A7A8A9A:A;A<A=A>A?A@AAABACADAEAFAGAHAIAJAKALAMANAOAPAQARASATAUAVAWAXAYAZA[A\A]A^A_A`AaAbAcAdAeAfAgAhAiAjAkAlAmAnAoApAqArAsAtAuAvAwAxAyAzA{A|A}A~A!B"B#B$B%B&B'B(B)B*B B,B-B.B0B/B1B2B3B4B5B7B6B8B9B:B;B<B=B>B@BABBBDBEBGBHBIBJBLBCBFBKBMBNBOBPBQBRBSBTBUBVBWBXBYBZB[B\B]B^B_B`BaBbBcBdBeBfBgBhBiBjBkBlBmB?BnBoBpBqBrBsBtBuBvBwBxByBzB{B|B}B~B!C"C#C$C%C&C'C(C)C*C C,C-C.C/C0C1C2C3C4C5C6C7C9C:C;C<C=C>C?C@CACBCCCDCECFCGCHC8CJCKCLCMCOCNCPCQCRCSCTCUCVCWCXCYCZC[CIC\C]C^C_C`CaCbCcCdCeCfCgChCiCjCkClCmCnCoCpCqCrCsCtCuCvCwCxCyCzC{C|C}C~C!D"D#D$D%D&D'D(D)D*D D,D-D.D/D0D1D2D3D4D5D6D7D8D9D:D;D<D=D>D?D@DADBDCDDDEDFDGDHDIDJDKDLDMDNDODPDQDRDSDTDUDVDWDXDYDZD[D\D]D^D_D`DaDbDcDdDeDfDgDhDiDjDkDlDmDnDoDpDqDrDsDtDuDvDwDxDyDzD{D|D}D~D!E"E#E$E%E&E'E(E)E*E E,E-E.E/E0E1E2E3E4E5E6E7E8E9E:E;E<E=E>E?E@EAEBECEDEEEFEGEHEIEJEKEMELENEOEPEQERESETEUEVEWEXEYEZE[E\E]E^E_E`EaEbEcEdEeEfEgEhEiEjEkElEmEnEoEpEqErEsEtEuEvEwExEyEzE{E|E}E~E!F"F#F$F%F&F'F(F)F*F F,F-F.F/F0F1F2F3F4F5F6F7F8F9F:F;F<F=F>F?F@FAFBFCFDFEFFFGFHFIFJFKFLFMFNFOFPFQFRFSFTFUFVFWFXFYFZF[F\F]F^F_F`F6GaFbFcFdFeFfFgFhFiFjFkFlFmFnFoFpFqFrFsFtFuFvFwFxFyFzF{F|F}F~F!G"G#G$G%G&G'G(G)G*G G,G-G.G/G0G1G2G3G4G5G7G8G9G:G;G<G=G>G?G@GAGBGCGDGEGFGGGHGIGJGKGLGMGNGOGPGQGRGSGTGUGVGWGXGYGZG[G\G]G^G_G`GaGbGcGdGeGfGgGhGiGjGkGlGmGnGoGpGqGrGsGtGuGvGwGxGyGzG{G|G}G~G!H"H#H$H%H&H'H(H)H*H H,H-H.H/H0H1H2H3H4H5H6H7H8H9H:H;H<H=H>H?H@HAHBHCHDHEHFHGHHHIHJHKHLHSHMHNHOHPHQHRHTHUHVHWHXHYHZH[H\H]H^H_H`HaHbHcHdHeHfHgHhHiHjHkHlHmHnHoHpHqHrHsHtHuHvHwHxHyHzH{H|H}H~H!I"I#I$I%I&I'I(I)I*I I,I-I.I/I0I1I2I3I4I5I6I7I8I9I:I;I<IAI=I>I?I@IBICIDIEIFIGIHIIIJIKILIMINIOIPIQIRISITIUIVIWIXIYIZI[I\I]I^I_I`IaIbIcIdIeIfIgIhIiIjIkIlImInIoIpIqIrIsItIuIvIwIxIyIzI{I|I}I~I!J"J#J$J%J&J'J(J)J*J J,J-J.J/J0J1J2J3J4J5J6J7J8J9J:J;J<J=J>J?J@JAJBJCJDJEJFJGJHJIJJJKJLJMJNJOJPJQJRJSJTJUJVJWJXJYJZJ[J\J]J^J_J`JaJbJcJdJeJfJgJhJiJjJkJlJmJnJoJpJqJrJsJtJuJvJwJxJyJzJ{J|J}J~J!K"K#K$K%K&K'K(K)K*K K,K-K.K/K0K1K2K3K4K5K6K7K8K9K:K;K<K=K>K?K@KAKBKCKDKEKFKGKHKIKJKKKLKMKNKOKPKQKRKSKTKUKVKWKXKYKZK[K\K]K^K_K`KaKbKcKdKeKfKgKhKiKjKkKlKmKnKoKpKqKrKsKtKuKvKwKxKyKzK{K|K}K~K!L"L#L$L%L&L'L(L)L*L L,L-L.L/L0L1L2L3L4L5L6L7L8L9L:L;L<L=L>L?L@LALBLCLDLELFLGLHLILJLKLLLMLNLOLPLQLRLSLTLULVLWLXLYLZL[L\L]L^L_L`LaLbLcLdLeLfLgLhLiLjLkLlLmLnLoLpLqLrLsLtLuLvLwLxLyLzL{L|L}L~L!M"M#M$M%M&M'M(M)M*M M,M-M.M/M0M1M2M3M4M5M6M7M8M9M:M;M<M=M>M?M@MAMBMCMDMEMFMGMHMIMJMKMLMMMNMOMPMQMRMSMTMUMVMWMXMYMZM[M\M]M^M_M`MaMbMcMdMeMfMgMhMiMjMkMlMmMnMoMpMqMrMsMtMuMvMwMxMyMzM{M|M}M~M!N"N$N%N&N'N(N)N#N*N N,N-N.N/N0N1N2N3N4N5N6N7N8N9N:N;N<N=N>N?N@NANBNCNDNENFNGNHNINJNKNLNMNNNONPNQNRNSNTNUNVNWNXNYNZN[N\N]N^N_N`NaNbNcNdNeNfNgNhNiNjNkNlNmNnNoNpNqNrNsNtNuNvNwNxNyNzN{N|N}N~N!O"O#O$O%O&O'O(O)O*O O,O-O.O/O0O1O2O3O4O5O6O7O8O9O:O;O<O=O>O?O@OAOBOCODOEOFOGOHOIOJOKOLOMONOOOPOQOROSOTOUOVOWOXOYOZO[O\O]O^O_O`OaObOcOdOeOfOgOhOiOjOkOlOmOnOoOpOqOrOtOuOvOsOwOxOyOzO{O|O}O~O!P"P#P$P%P&P'P(P)P*P P,P.P/P0P1P-P2P3P4P5P7P8P9P:P;P6P<P=P>P?P@PAPBPCPDPEPFPGPHPIPJPKPLPMPNPOPPPQPRPSPTPUPVPWPXPYPZP[P\P]P^P_P`PaPbPcPdPePfPgPhPiPjPkPlPmPnPoPpPqPrPsPtPuPvPwPxPyPzP{P|P}P~P!Q"Q#Q$Q%Q&Q'Q(Q)Q*Q Q,Q-Q.Q/Q0Q1Q2Q3Q4Q5Q6Q7Q8Q9Q:Q;Q<Q=Q>Q?Q@QAQBQCQDQEQFQGQHQIQJQKQLQMQNQOQPQQQRQSQTQUQVQWQXQYQZQ[Q\Q]Q^Q_Q`QaQbQcQdQeQfQgQhQiQjQkQlQmQnQoQpQqQrQsQtQuQvQwQxQyQzQ{Q|Q}Q~Q!R"R#R$R%R&R'R(R)R*R R,R-R.R/R0R1R2R3R4R5R6R7R8R9R:R;R<R=R>R?R@RARBRCRDRERFRGRHRIRJRKRLRMRNRORPRQRRRSRTRURVRWRXRYRZR[R\R]R^R_R`RaRbRcRdReRfRgRhRiRjRkRlRmRnRoRpRqRrRsRtRvRwRxRuRyRzR{R|R}R~R!S"S#S$S%S&S'S(S)S*S S,S-S.S/S0S1S2S3S4S5S6S7S8S9S:S;S<S=S>S?S@SASBSCSDSESFSGSHSISJSKSLSMSNSOSPSQSRSSSTSUSVSWSXSYSZS[S\S]S^S_S`SaSbScSdSeSfSgShSiSjSkSlSmSnSoSpSqSrSsStSuSvSwSxSySzS{S|S}S~S!T"T#T$T%T&T'T(T)T*T T,T-T.T/T0T1T2T4T5T6T7T8T9T:T;T<T=T>T3T?T@TATBTCTDTETFTGTHTITJTKTLTMTNTOTPTQTRTSTTTUTVTWTXTYTZT[T\T]T^T_T`TaTbTcTdTeTfTgThTiTjTlTkTmTnToTpTqTrTsTtTuTvTwTxTyTzT{T|T}T~T!U"U#U$U%U&U'U(U)U*U U,U-U.U/U0U1U2U3U4U5U6U7U8U9U:U;U<U=U>U?U@UAUBUCUDUEUFUGUHUIUJUKULUMUNUOUPUQURUSUTUUUVUWUXUYUZU[U\U]U^U_U`UaUbUcUdUeUfUgUhUiUjUkUlUmUnUoUpUqUrUsUtUuUvUwUxUyUzU{U|U}U~U!V"V#V$V%V&V'V(V)V*V V,V-V.V/V0V1V2V3V4V5V6V7V8V9V:V;V<V=V>V?V@VAVBVCVDVEVGVHVIVJVKVFVLVMVNVOVPVQVRVSVTVVVWVXVUVYVZV[V\V]V^V_V`VaVbVcVdVeVfVgVhViVjVkVlVmVnVoVpVqVrVsVtVuVvVwVxVyVzV{V|V}V~V!W"W#W$W%W&W'W(W)W*W W,W-W.W/W0W1W2W3W4W5W6W7W8W9W:W;W<W=W>W?W@WAWBWCWDWEWFWGWHWIWJWKWLWMWNWOWPWQWRWSWTWUWVWWWXWYWZW[W\W]W^W_W`WaWbWdWeWfWgWhWiWjWkWlWmWnWoWpWqWrWsWtWuWvWwWxWyW>XcWzW{W|W}W~W!X"X#X$X%X&X'X(X)X*X X,X-X.X/X0X1X2X3XLX4X5X6X7X8X9X:X;X<X=X?X@XAXBXCXDXEXFXGXHXIXJXKXMXNXOXPXQXRXSXTXUXVXWXXXYXZX[X\X]X^X_X`XaXbXcXdXeXfXgXhXiXjXkXlXmXnXoXpXqXrXsXtXuXvXwXxXyXzX{X|X}X~X!Y"Y#Y$Y%Y&Y'Y(Y*Y Y,Y-Y.Y/Y0Y1Y2Y3Y4Y5Y6Y7Y8Y9Y:Y;Y<Y)Y=Y>Y?Y@YAYBYCYDYEYFYGYHYIYJYKYLYMYNYOYPYQYRYSYTYUYVYWYXYYYZY[Y\Y]Y^Y_Y`YaYbYcYdYeYfYtYgYhYiYjYkYlYmYnYoYpYqYrYsYuYvYwYxYyYzY{Y|Y}Y~Y!Z"Z#Z$Z%Z&Z'Z(Z)Z*Z Z,Z-Z.Z/Z0Z1Z2Z3Z4Z5Z6Zf87Z8Z9Z:Z;Z<Z=Z>Z?Z@ZAZBZCZDZEZFZGZHZIZJZKZmZLZMZNZOZPZQZRZSZTZUZVZWZXZYZZZ[Z\Z]Z^Z_Z`ZaZbZcZdZeZfZgZhZiZjZkZlZnZoZpZqZrZsZtZuZvZwZxZyZzZ{Z|Z}Z~Z!["[#[$[%[&['[([)[*[ [,[-[.[/[0[1[2[3[4[5[6[7[8[9[:[;[<[=[>[?[@[A[B[C[D[E[F[G[H[I[J[K[L[M[N[O[P[Q[R[S[T[U[V[W[X[Y[Z[[[\[][^[_[`[a[b[c[d[e[f[g[h[i[j[k[l[m[n[p[q[r[s[o[t[u[v[w[x[y[z[{[|[}[~[!\"\#\$\%\&\'\(\)\*\ \,\-\.\/\0\1\2\3\4\5\6\7\8\9\:\;\<\=\>\?\@\A\B\C\D\E\F\G\H\I\J\K\L\M\N\O\P\Q\R\S\T\U\V\W\X\Y\Z\[\\\]\^\_\`\a\b\c\d\e\f\g\h\i\j\k\l\m\n\o\p\q\r\s\t\u\v\w\x\y\z\{\|\}\~\!]"]#]$]%]&]'](])]*] ],]-].]/]0]1]2]3]4]5]6]7]8]9]:];]<]=]>]?]@]A]B]C]D]E]F]G]H]I]J]K]L]M]N]O]P]Q]R]S]T]U]V]W]X]Y]Z][]\]]]^]_]`]a]b]c]d]e]f]g]h]i]j]k]l]m]n]o]p]q]r]s]t]u]v]w]x]y]z]{]|]}]~]!^"^#^$^%^&^'^(^)^*^ ^,^-^.^/^0^1^2^3^4^5^6^7^8^9^?^:^;^<^=^>^@^A^B^C^D^E^F^G^H^I^N^J^K^L^M^O^P^Q^R^S^T^U^V^W^X^Y^Z^[^\^]^^^_^`^a^b^c^d^e^f^g^h^i^j^k^l^m^n^o^r^p^q^s^t^u^v^w^x^y^z^{^|^}^~^!_"_#_$_%_&_'_(_)_*_ _,_-_._/_0_2_1_3_4_5_6_7_8_9_:_;_<_=_>_?_@_A_B_C_D_E_F_G_H_I_J_K_L_M_N_O_P_Q_R_S_T_U_V_W_X_Y_Z_[_\_]_o_^___`_a_b_c_d_e_f_g_h_i_j_k_l_m_n_p_q_r_s_t_u_v_w_x_y_z_{_|_}_~_!`"`#`$`%`&`'`(`)`*` `,`-`.`/`0`1`2`3`4`5`6`7`8`9`:`;`<`=`>`?`@`A`B`C`D`E`F`G`H`I`J`K`L`M`N`O`P`Q`R`S`T`U`V`W`X`Y`Z`[`\`]`d`^`_```a`b`c`e`f`g`h`i`j`k`l`m`n`o`p`q`r`s`t`u`v`w`x`y`z`{`|`}`~`!a"a#a$a%a&a'a(a)a*a a,a-a.a/a0a1a2a3a4a5a6a7a8a9a:a;a<a=a>a?a@aAaBaCaDaEaFaGaHaIaJaKaLaMaNaOaPaQaRaTaUaVaSaWaXaYaZa[a\a]a^a_a`aaabacadaeafagahaiajakalamanaoapaqarasatauavawaxayaza{a}a~a!b"b#b$b|a-b%b&b'b(b)b*b b,b/b0b1b2b.b3b4b5b6b7b8b9b:b;b<b=b>b?b@bAbBbCbEbFbDbGbHbIbJbKbLbMbNbObPbQbRbSbTbUbVbWbXbYbZb[b\b]b^b_b`babbbcbdbebfbgbhbibjbkblbmbnbobpbqbrbsbtbubvbwbxbybzb{b|b}b~b!c"c#c$c%c&c'c(c)c*c c,c-c.c/c0c1c2c3c4c5c6c7c8c9c:c;c<c=c>c?c@cAcBcCcDcEcFcGcHcIcJcKcLcMcNcOcPcQcRcScTcUcVcWcXcYcZc[c\c]c^c_c`cacbcccdcecfcgchcicjckclcmcncocpcqcrcsctcucvcwcxcyczc{c|c}c~c!d"d#d$d%d&d'd(d)d*d d,d-d.d/d0d1d2d3d4d5d6d7d8d9d:d;d<d=d>d?d@dAdBdCdDdEdFdGdHdIdJdKdLdMdNdOdPdQdRdSdTdUdVdWdXdYdZd[d\d]d^d_d`dadbdcdddedfdgdhdidjdkdldmdndodpdqdrdsdtdudvdwdxdydzd{d|d}d~d!e"e#e$e%e&e'e(e)e*e e,e-e.e/e0e1e2e3e4e5e;e6e7e8e9e:e<e=e>e?e@eAeBeCeDeEeFeGeHeIeJeKeLeMeOePeNeQeReSeTeUeVeWeXeYeZe[e\e]e^e_e`eaebecedeeefehegeiejekelemeneoepeqereseteuevewexeyeze|e{e}e~e!f"f#f$f%f&f'f(f)f*f f,f-f.f/f0f1f2f3f4f5f6f7f8f9f:f;f<f=f>f?f@fAfBfCfDfEfFfGfHfIfJfKfLfMfNfOfPfQfRfSfTfUfVfWfXfYfZf[f\f]f^f_f`fafbfcfdfefffgfhfifjfkflfmfnfofpfqfrfsfufvfwfxfyfzf{f|f}f~f!g"g#g$g%g&g'g(g)g*g g,g-g.g/g0g1g2g3g4g5g6g7g8g9g:g;g<g=g>g?g@gAgBgCgDgEgFgGgHgIgJgKgLgMgNgOgPgQgRgSgTgUgVgWgXgYgZg[g\g]g^g_g`gagbgcgdgegfgjggghgigkglgmgngogpgqgrgsgtgvgwgxgygugzg{g|g}g(h~g!h"h#h$h%h&h'h)h*h h,h-h.h/h0h1h2h3h4h5h6h7h8h9h:h;h<h=h>h?h@hAhBhChDhEhFhGhHhIhJhKhLhMhNhOhPhQhRhShThUhVhWhXhYhZh[h\h]h^h_h`hahbhchdhehfhghhhihjhkhlhmhnhohphqhrhshthuhvhwhxhyhzh{h|h}h~h!i"i#i$i%i&i'i(i)i*i i,i-i.i/i0i1i2i3i4i5i6i7i8i9i:i;i<i=i>i?i@iAiBiCiDiEiFiGiHiIiJiLiMiKiNiOiPiQiRiSiTiUiViWiXiYiZi[i\i]i^i_i`iaibicidieifigihiiijikiliminioipiqirisitiuiviwixiyizi{i|i}i~i!j"j#j$j%j&j'j(j)j*j j,j-j.j/j0j1j2j3j4j5j6j7j8j9j:j;j<j=j>j?j@jAjBjCjDjEjFjGjHjIjJjKjLjMjNjOjPjQjRjSjTjUjVjWjXjYjZj[j\j]j^j_j`jajbjcjdjejfjgjhjijjjkjljmjnjojpjqjrjsjtjujvjwjxjyjzj{j|j}j~j!k"k#k$k%k&k'k(k)k*k k,k-k.k/k0k1k2k3k4k5k6k7k8k9k:k;k<k=k>k?k@kAkBkCkDkEkFkGkHkIkPkJkKkLkMkRkNkOkQkSkTkUkVkWkXkYkZk[k\k^k]k_k`kakbkckdkekfkgkhkikjkkkmknkoklkpkqkrksktkvkukwkxkykzk{k|k}k~k!l"l#l$l%l&l'l(l)l*l l,l-l.l/l0l1l2l3l4l5l6l7l8l9l:l;l<l=l>l?l@lAlBlClDlElFlGlHlIlJlKlLlNlOlMlPlQlRlSlTlUlVlWlXlYlZl[l\l]l^l_l`lalblcldlelflglhliljlklllmlnlolplqlrlsltlulvlwlxlylzl{l|l}l~l!m"m#m$m%m&m'm(m)m*m m,m-m.m/m0m1m2m3m4m5m6m7m8m9m:m;m<m=m>m?m@mAmBmCmDmEmFmGmHmImJmKmLmMmNmOmPmQmRmSmTmUmVmWmXmYmZm[m\m]m^m_m`mambmcm7"
2!2"2#2$2%2&2'2(2)2
1 1!1"1#1$1%1&1'1(1)1
% %!%"%#%$%%%&%'%(%)%*% %,%-%.%/%0%1%2%3%4%5%6%7%8%9%:%;%<$=%>%?%@%A%B%C%D%E%F%G%H%I%J%K%
W%f?i
e.lFO
urlsS
u%urrGS
]']&].]$]
s"s9s%s,s8s1sPsMsWs`slsos~s
x<x%x,x#x)xNxmxVxWx&xPxGxLxjx
{.{1{ {%{${3{>{
h!l!'!c!@!A!$("(((&(:(,(*(0(.(B!4(2(9(!(%('()(-(1(#( (/(3(5(6(7(8(&!%!!&"&#&$&%&&&'&(&)&*& &,&-&.&/&0&1&2&3&4&5&6&7&8&A&B&C&D&E&F&G&H&I&J&K&L&M&N&O&P&Q&R&S&T&U&V&W&X&''!'"'#'$'%'&'(')'*' ','-'.'/'0'1'2'3'4'5'6'7'8'9':';'<'='>'?'@'A'Q'R'S'T'U'V'X'Y'Z'['\']'^'_'`'a'b'c'd'e'f'g'h'i'j'k'l'm'n'o'p'q'W'*!,!.!/!0!1!-!k!d!e!y!f!m!q"r"s"t"u"v"w"x"y"z"{"|"{!|!z!}!J!G!F!L!X!^!O!N!D!E!I!H!R!S!`!_!C!K!W!V!U!Y!T!\!]!Z![!Q!M!P!Y"Z"["\"]"^"_"`"a"b"E"F"G"H"I"J"K"L"M"N"O"P"Q"R"S"T"U"V"W"X"1"2"3"4"5"6"7"8"9":";"<"=">"?"@"A"B"C"D"$)%)&)')()))*) ),)-).)/)0)1)2)3)4)5)6)7)8)9):);)<)=)>)?)@)A)B)C)D)E)F)G)H)I)J)K)L)M)N)O)P)Q)R)S)T)U)V)W)X)Y)Z)[)\)])^)_)`)a)b)c)d)e)f)g)h)i)j)k)l)m)n)o)v!u!x!w!t!s!p!r!q!o!n!b!a!!!"!#!(!)!4!5!6!7!8!9!:!;!>!?!~!2!3!<!=!!$"$#$$$%$&$'$($)$*$ $,$-$.$/$0$1$2$3$4$5$6$7$8$9$:$;$<$=$>$?$@$A$B$C$D$E$F$G$H$I$J$K$L$M$N$O$P$Q$R$S$T$U$V$W$X$Y$Z$[$\$]$^$_$`$a$b$c$d$e$f$g$h$i$j$k$l$m$n$o$p$q$r$s$!%"%#%$%%%&%'%(%)%*% %,%-%.%/%0%1%2%3%4%5%6%7%8%9%:%;%<$=%>%?%@%A%B%C%D%E%F%G%H%I%J%K%L%M%N%O%P%Q%R%S%T%U%V%W%X%Y%Z%[%\%]%^%_%`%a%b%c%d%e%f%g%h%i%j%k%l%m%n%o%p%q%r%s%t%u%v%$!E(F(G(H(I(J(K(L(M(N(O(P(Q(R(S(T(U(V(W(X(Y(Z([(\(](^(_(`(a(b(c(d(e(f(g(h(i(e"f"g"h"i"j"k"l"m"n";R!6_FrMIU}HOIBO"X;2kS$Xs3(WRG'X@JpG{15RT4 6?K)X*6=AOQ%I-Xv8>Q\cPVa7.4YA<XhM$5*NwVv@Y>/XKDC>1X4CeR.VZN'Uu:&7V@9FREGGT9K3RR?XE>rF2R0OgOiJ@XrBRBiH,GKAhSyUBJ~6!XZSw?FT%;AXeN.>(XGQ)P=XoYvM:?;=%:`Rz2`:6DmO)>$MAAWGqYtYKHiXZR2JJHlXjXFXv=MFp3kXq=i=THS4XBV2PWKJ{KLU68IOZYpX*GnXz4nATRmXGRoXGCvQYVrXuX~<[<NH]7B7sFxXARiN?<|7%7]PZVESo;a;qX!I0N 4sXKIvXWBwX1NyX.2@9#Yi0fAlIEKFK$Yh5 5;NM5!WtWSSeLN:"Y\Y`S}Xp7wW~XzX!YcD6StX]Y{XeEP@pQ[0Q<&Y%Y,Y.Y Y9J)Y6V^3(Y}@LJ*Y'Y0Y16)9@R@OBBD=lU`2HGk?-Y/YjNn:VGc1Y4m64Y!?^YNG~@8YWK}75Y7Y#1aS9YEP6Y1Y2Y)A3Ys<^P)8c>=Y:Y30BYDY61?Y95s>HLr:PRCYh= 3EYk>FY;Y_D>[email protected]<JY<YKY FIYvW#M!=LY<E5MMYGY%3~?58|@x0v4NYOY"4PY_4A0QY5IqORYEAVY.IUYTYWY[K)='FSYXYYYeH\@y6#XJT*TVPd3WUHOb9K?bCR6CMnYpY3556$>kH HK0 9yAbY<@29X9KPx1dF_>d5HWxQf<^J=<fYgXZDT8=Ha2YT0CaC"Z_H4P|>)EZ9#Z)T$Z{Y,6k7y1|Ye3v>v?1Rd@36~Y}Y;>`F<W!Z9Ar5hAu<U4]A}D8<27o7lY>F-?K;J5I[WP9M<0v3w;J[/:dT65s5VXPHV7PGWX/?;[XXLP.;>kPAuArTU844u3>IPEYE{@p1YXN9=5ZXFV"K/H2IL4L?t9[X\Xg6A<jLwO]X0GP9#=^LJF`X^X_X~0g>#Jt<18n8bXK=dXcX|EeXfX&A0Hl0&9S<qN=[SA/6zV,EY=>[?[x@">M@@[FJ*2BScC QB[U@C[1?<DZGD[hYWI49pNHT|0R4YPiYK^kY0X/;11W3NXQT3=o?;OPXK7QX%FxG=RRXdD.J'G&X}IgN\;k0*;-P01dW?W%5tBOD)272e12_<U(?,BUX1BTXTN`[email protected]!S#N4<4HQBm>6PaZdG'3r6|Lz@w@9QaQGX^2e@q:HX-TaOIXJXCOx3G>KXL[%HXO~HN2VSf20<QS K47"7eJ!H\Jd1pPQEE[~5Z?E9d>mA6_5_;VP=YUH0#6I?(L3_7JRSOX6RE:>K>L7_p54_uST3w8:_O:*<u5,M{Cs:t@BMrO8_EO@B9_pB}>_ALMwRM7A_D_q7I0V6T7,:}LT?1KtF(VE_bN33|N54GNp:aN=Q@_t4J3f8;_ED<_=_>_;E?_B_1TC_:GXNXDJ_O_\VI_Z_6NG:N_H_^EkIt:|CW>F_M_XE&UM:L>=S@8dVG_>9'?|AK_L_P_[_e_W_V_IWc_d_ke'RR_)?[TH?T_LO]_JQ^_'07FS_e:_6[M~9UT__lO%0g_Q_FQU_X_Y_\_);`_a_b_f_h_4Sg86Ej_ZI(ADD^?xO\Un_82_:l_A[dQtK=4&0q_FLr_m_i_k_o_p_=;s_t_#;[J(N'`*3&`!`~_YM|_z_P?DWLIx_!0}_{_"`(`H7!F6I2@u_>EDXy_vD#`$`%`%P4`dL1`&?/`9N `FI.@.`m:0:)`v_3`8`-49`2OH:0`zP,`{Tw_gE-`wS6`7`D`aP<`I`J`>`*`$IA`2`HJC`5`KNCKM`F`B`K`:`?`@`E`G`H`L`;`TKU`V`R`P`N<Q`B8EXjPoBO`=`T`S`W`\`X`vV03lW;KZ`{NY:a`]`-Rb`[`Y`_```^`d`wF,XkTf`IJe`A8g`h`i`c`?:gLj`yOk`BH@=RDl`m`tGDKn`X;6XrRo`EMZ6q`0T'@Q4'Np`r`L9z9<Ms`TFt`2T&Hv`u`w`AM%JZTW[Y[X[g9\[][X5Z[[[!3_[x;7V`[y>;7P[.L2?5;xWS?i?a<3L^[S0kNX79WBF$@9Lg[a[:Fc[h[wEj[i[@?f[e[94,@"Bb[d[MPm[]@r[b6s[R[89 Tl[Q?p[Q[f5k[e?n[q[y[!9#0qBG3o[x[RFt[u[w[v[~[rS:2}[$\{[z[|[`Ey;#\%\CLQ6@]!\"\5Gi6'\&\)\$1L50?_QB6(\zKsk\K~KAL{H*\nL \S[/\,\3>{J-\JI9D=G.\vTfP DU6T[Z1U[V[>:@H?JIH3WyIG?x:<R:b&48148DOgY&ObMmY`69R;99b7bs4lL Lr72XkQ;:'J7MDRd?P<a6E^F^<[YQfFNDn7\7|?`WuF<1H^1=WLJ^I^l5]IB0.E ELDi<}KC:yegHze}M1W>8hBQH{eJ6K<}Q!fnC$f~e%fWMA7|e}e#f]D(f'fCC^F*f7D"f<Jc=C9&fUP/N)f0f&R*=-f/fQ@LR'<1fvRKW~M^M&B f,f?=.f3f2f6f8foDHDj>oI7fp6dCiS4f5f"H=f9fEFqM;f<fi;>f:f7@$S?ftICfDfvP=CDCBfAfGf1OtkJfEf^<)I5<SOHfIfNfPfQfKfU5LfOf[DFfMfRfTfSfUfxYVfWfSW]f^fW?PTVWf4oKZfCXNW"POC_f><B9[f'Q":OB XkJne\fu7fHuD2e~D|K3e,UnSXJ20NKjMj:5e4eZWY9fV(6pMKR&15Jh3sIM?{PRJ6eB;\O,9WT&:gQ|OR<7e]Hm?v1^KE<D<zR\C\?;8BC.:"T^G/Dl2Q9;eHA/U<e>eg4T6BK0Q<5YJb7dI =>NpW!PYI{6Xfb<>3PIYf"3L^HSM^"RN^M>O^,J|R_3jeaD!>2NrDV>(Fc2S>|GkLl=]N:JAFle<P9UmetJ@MEBoeDBpexeMM=IYR(alSjKqF,a'a)a*a/am2 aZ8-a.a0a:51a3a8aRQ6a5akA7a@T2a:a604ay?9a;a>a<aEV?O=a?aMBk6xSMGe7~>@aAaGag3iF^4BQHaFaEaCaBa@18UDaKaLaJazoSaRa6GIaNaPaTaQaMaOaUaVaWaXaZa[a!N]g(4]V2Q23$9sWIG^>.9WNn2O[:<QRHKM0oOcYm=R1PJ<2'K 7&J#Ox`JU{`z`AE{L1Ay`cV/2DV[5x4!V/Oo0|`!a#3}`~`1C]C"ay7O;#a;D$a%a&a14I8=FjD"2RP[gC;WSDSc9Ob/WlGS124QbrP.BPbb?&SW5Rbj5mC}8.8SEO7TbSbH6yW%MXbVb|J5?9SUbWb.AH@[bZb*@NA\b]b^bH[SQ"M(=C^%X*?M[lRzF*ED^W1._=J1_-9}R%8k:Z3\5EUVCRO!;seretedMuH/5?Gve0lfei915<BhegeieMRjaNP.MeQJ2k1r1mECU0S\a]a[R93K1yMwU^a6>}4_a\:`a2;IBaalP=MbaC5GEcadaySea-Qfa"NgaB5haU;DP`bX1dRabI<LHcb~l}l/_bb>V|M&CCcRVgbhbGSlbl?mbeb@3nDnbCPv:ib^73;,LKKdbfbjbkbwbtbuTsb-EzUBE@2obrb/A<K!5yb1<qbTP9TubV9vbSGpb\W!mxb%m~bQJ5AP;V?c:!K&m#m"mV;'mtP$m^:w6!c26qL'9"O!GR?q6zb{b}b|bUD"cAS'cDG$O)c7:(cZ;#c$c*c&crNFS<;CTzD(m|P%cuC-c/12cB<,c?5iG0c*>oMs;hL/c1c'O.c)N];k5e>R2M391 cQ2,5_9h6kO7cL;GHJP8cn3)mzSdS*m9cbR5c^SP83c6c_74c"@:c8TH4;cE;wIeI=D m}B[;.??N<c6?o1wT>c-m?c):,m=c@c6:.68PC0.m/mA@Ac3EBc2\0mj8lN'jgPyJVH7OI3RNd=^cr;(j=U]F)j*j,j j.j-jX=/j>BA4w4';flel?7yKb1glHIhlilVJP^E2zTKFG0r4SHPM8?[?$G4V)@Q^(IoQ$Eg063EHb0v7zEs6RUP3<<-3q>Q0VRcJ%W6M669?[U'8WER^Y?UB@G$;(1jE{E'L'1V5(DS^:Qi3rCw7tV#5p24DiD-@T^h0DE`AU9\>XMN0OMV^P>>WU^PU]0bD#Bp<5S9@!E&2qT(@CJW^|U09-H)KY^=?4F'W0JCDV3R98V|j40f?tLZM?VNBNN"L.PSD25X^uU7<S;$02El4qU}jZ^&MlMfN\^1M&@=W[^F04:SIsDh>62L@pKq<;;75uEf^c^]>_^74]=`^mDFO`5^6ZJt5e^FUa^ML~FEE4Rr>SB=L83S=X?FMZQk4d^]^g^~j0Bb^@V'5t2h^r^m^q^`HaWo^hCaLe2>Rn^k^UN'4 ?>>R=i^.T^^j^?@l^s2i8'BA=u^x^ 2$4j4&Iv^QKc8w^z^y^BLa0n4:e/Pk2!kt^cIs^Z0!Rw1/Lp^$K*U{^]4&D}^~C!D!_LA|^o>2FE3vH:K~^$_2W73CAKG%2i4 WlD"_#_%_3:&_^@CIY2fG'_\G(_"kSK*_)_A2JE _\TAH,_p>-_'V7j6kUJ|XD8ž7~UJ9'PMtP5tCH>7k=0L=2AV1(3R8"IX68k4>}JCG{Us7DN Us13l_05l76OAzu1PeUSNo=b3 86U=mO69KBP=76l)JTE9l8lCB7l}P:l;leW<l=llF^NH<UH)5I><VgT.QqP8j9j:j5:1Ju?zM@j:0>j%@;j}2wCh;WRtN?j<jCjGP3S:4ACrWQUGJEjDjGjFjgVTOKjN;z=NILj9I~OJjNTMjOjmMIjNjnN^;?3UF0>zNgG'>PjGV@A]TQj>ORjnJ/E50TjSj_t:D)1_eUjoJVjWjXFXjYj;TzG7R|8Bj\2|BxTfLnWBTPSCksE~7Tk7K^kJ@{M/3ZF|k>D4N)D>1}TuJlVSFd6z;`P1IST(HK8>h<I;hn@SPD2e4<hHUE6=hxJ\8uL4@nQ?hBh<:-1\==jChFhKhLhIKe0 <99AhwMJhvNmUVADh6C{9&VHh`JfT@hEhGh9Gc7Ih]?RhWhUh\<O<[h^hZhz1X03DL8bF>HaHOhThVhq9XhuW{D\hi2Qhm<B?MhyVxAq2_hAJYh$Uj1;UNhPh06Sh]h8@wJ(K\Fu@ih#PrhjV`hahyQK:y8q8TTohnhlhp9RLfh&Nr?80qhph@Wdh)M#I8;[=jhbhcheh55ghEGkhmh0=.Wxhuh0Mvh:Ahh7Cp0thwh#9RINC`Nf@sK]L5PaJshl<yh^CeFw9t0XW,<oEDL&i-I"ib@C?~hW9{h$iNR#i2V5W'i7=|h}h!iVM,R2i)i*4;4 i(P%i~3,ic@*i9i8i.izh(i,?1i:i%B/iE8-i\S4i5i7iGiF@Ei0i;iq0<i%U>i?iAiqA6H=iBiCi3i6i1;@iw<DiFiJiNi[2Hi.7KiLiAU#DXia:Ii#STiWiPiOiAGRiYiH3SipOMiw3ViZi4L-OUi\i[i^iQi]i_iJC7GN46;@P#l7E{S$l%l[Fn?&l'l*P8Gh8(l9V}UK4=2dNgFaMu4@K_<bicijQeiy4di3QbJP2hifigi3Viijikili/l9EN6sRn5Y;1lcRcN8D?C>69XH1O1Q1~EP1 C1U$kA::L%k'k(k&k)k k*k,kOJ5XqC%CxF-kJD.k/k0kU7z71kbG3k$:uQ102k4k*5HBhG5k.K_c@S[Y!M-VsG`Yc;::bc O`cGI9:4QacjH/9-=X3[N@LhcictM-L3<jckcZP{FZ7_GJRVNdclcrIA3gccFec3mfc3IfE59;Ccc=E$AYBW2mc&;-DpcZ>{cucS:P7MSNVSUA94UXQ9PvG*H42ZCnc|coc(7wctc:7"Evc]E(2|F`D"Wa@yczc}c)Lsc>SC14mqcrcxc:PCFsT~c`='d&dsQ#d)dwH4O(d.deB46r="di:*d,d}6^V2d-d!dn;]M"GIEwA$d3G,===%dGWb2 dC</dk;0d(E1dcU#?:d7d;d=dVFF:K@!84d!T#:~=<d?MyD{OfI?SQO3d8d9diLNLT@5d0A6dPNA;S5sH'=GU,I"8JdLdDQ:R-:T:Cdm5MW@d}O?d\AJLgJWDTLHdGdAdDd-5YSFdyRc44;nI>4l;MQmL5meG(TKdUWBd$=EdfSIdxI>deS~GI6|T32WdBNMd<N[8VdJ?NSlCHEXdDMOdTdUd~:fO?URdPdNdeM*J#@&=SdH8gd4T[doAidgR_d`d*O]KZdQded\HcdgDbdad|3hda5LWfd,;RWOLxkddv9MVYd\dzB^dKBD@PBu12LN5od/FaFud)Bl@]Qnd.Dmdvdtd~B]dpd~JDUqdzQkdldrd NKE1G:BjdJA6L13{dsdzd}d|dN3:3wdydxdlE=@hT"eD0$e#e$<%e!e~dt1(e)e&e'e*eYF e-e,e/e.e`90e1ep;alpCF5R;iAnTD>FWVTS2>lAj/B64WQ432H;?@lKV?lAlElf>?LZE<>Fl~1Dl(Uc5Bl6Ac3Cl8KC@~LRAHlf:S@rVLQ>?37UIGlb;LL}=HH)OiMkEi7IQ8:IlJl@;Klbl:1Y79=LlfQMl;HQlSlM;e<Ol7I:CclUUPlsVRlNlTlUl?I(O\P,Q[HVluNlJZlYl>0WlXldl<HGA\l`Q[loT]lF[^l,1_l`l&W@E<k.0t>88/RV0y53X,K]c,Ff0FE9k:k;k@Q#Erj2D5DN@sjADoNpjtj|I#GXL~Nujvj,Og@wj?6xjyjzj{jqj.Hka87lama4WnaoaLSqaq?paR571sara|:ta79Q>|D]:F=uawa@6AO(JvaxU|Sxa|ayazaj@~a!bG@{a}a%bTA#b(b~2"bMCB2'b&b$b)b bIPmV(C,bWO.bo:`i-b*b ;3T0b/bai1b2b3b!L4b5b~PJBqSuM`gagA>jBdgcgfM5Cbg7;VOaAighgtg#2jgfglgkg:IdUeg)7ggngsgiVmgrgqg`0ugrGE@m@pApgvgvK"h!hAWzgyg{gwg~g}g|gUAYG}ECEmG#h&h%h'hw:xg$hpH*I)he9~Q(h*h-h.h'A/h0h,h4h h1h5h2h3h7h6hO9,p-p0Fj0?H_MMN1j2j?FI43jgUy]4j5j6jJ80_uIpLzI{ICS&K&8.pB18eoLISW<jIg5PDi5.n-;^g/n)32n1ng=0n7NOEtAN[3nsPTBhF,74nk3{;5n\g6n.=bqhJIRZp[p\pFAm8N>^p1E]pqQ`pL0j=_R_p/4h7fpep#FapbpC4cpnU[LR>2<hpgpdp!2"V8S7>,HjpwQLV[:ip;64M&F!Akpnpmppplp>;op5LrpU3T1sptpvpa4qpwpzpxpup}pyp|p~p!qAN$q#qvA{p]Jq4q11L&q'q,qNU)q3H"q q(q%q*q)0-q/q1q0q.q"Q2q3qo9G5W0Y0mTD5T=J;'p^8(p(0)pnM*p p$FeVdqeqsC[SQVhE/SfRAn;05UNQ`<P:x?G8A5LE"JKCBn?D"6lm$C1V`OomNE\6!Jmmpmqm<C4?nmtmrmfU_Csmvm#U#QumPCwmt?l>xmwL[QEWvU|m{mymzm}m&>/K!n=6"n@D~m^=G2C6%n:X#n&niCr3'n$n9O(nwB)n*n ^3FFGuVI52K n M,n0U-nDvG[#4,Cfq8JSR*VroX>C=soL6 0/J6m7myN/7s?8mkB0I9mvF3?<mxEPQ)W:m;mbQ?m@mDmHmFmNmhUImGm>miEFFiIRTAmBmCmEmy@!4h9PmQmJmOmxN6KLmMmuORmrA2SKm7Ho<pEVmo55B-0iK.1TmkMb5UmSmWmz5XmYm\mL1vEn<Zm<Lj2[mkDE4u0_mZ@h4ME]mD?^m%D`mamcmWAG;8=bmdmfmemgm>Jjlq@gIklnFllmFmlplfWslqlnlol#WqInKtlrliOvl1F@<ul;5v;wlwY{=;Bxlyl#8zl{l|lmS.Xk@]GL:cP=K:MQ8|1oGVVF?kCuoXCbWwoS3XGmQHVxovo};F3U=FR`;!O|o{oyoL3TI0K~o^0IV}om3UvHN"p!p>5Z<|;e8BD#pkK&p(Q?>nG6q7qU?)48q;MTG-U9q:qOG$ROV;qQ=04=>\4QN_?=qz?<q?q>q@qAq~A"AzJ>U:>9>BU"?/M5q_=K6qVCsDsM8FsGsJ0EsIsqKKs&PJ1HsOsQ5WsRsTsSs{7?1NsJsZ5PsQsUsMsc<}AVsZsLsH5n=\s$7p?~V2Mp4_2XsYs8I]s^sas_scsbs[sj?o3`s)Gr<ks?9ds-2~;cKmsis\9nsesfsjsaBlsoshs}<dOpsgsrs-W*Fssqs(B]8usts[4vswsxs:@i@qE{szsX4~sys|s}s!t#tI;"t$t>2&t%t.<WCaY`@LtQW[7Nt#AIFV43UPtOtQtZKRtAT`V`78A;ASt,>b4TtUt >Vt[tWtZt}:XtYtb8GL\tZ2SCcT7?]t4Eit5OINXKwKt=OW[@uPjtktltcw17mtkWntyf@>zfl:{fKO|f<T6<}f~fM<RH3N!g?4"g4IY8ID]WZBW7=VFND7&E#g_O$g%g&g7AiWpI8O/VUV'gm0(g)g\IoR->*gs0^Ha= gFH,gf;x8$Q-ggBx>J=3M.g/gn>ePgKPLL<0g(<wP1gxP2g3gB44g5g~I,N`C7gA1q38g9g[W@U:gLB:W;g<g=gj<eCB@>g?g)<@gAg6gP6BgCgDg:;^5FB`1Eg5TFg?8HgGgl7Igx2JgKgLgMgNgOgPg'SuKQgRgSgTgIIUgVgWgXgYgI=Zg>sW81H?s@sAs^9xMhX1:^B7n#79n8nU0;nVUoWCV=npJ<n>n@n?nrQ<G@Ca8gAFt_PGt[O:HHtItJtKtzY~8qepS`tLNa34qnRathObtLGT5d4dtctetftgt2:?0ht-7mR RO@<?#k_UHjsqx6#KMDgqhq{8iqD:ETR0jqkqlqmqnqoqqqpqUErqz6tq.RG^JK\3"5"9tDuqvqDA{A0Vwqxq*A8F[>yqO4zq2m1m`K^RAKXUbH_@!<Ak$PbVG6X8@kN8?k&3I9 Vt7J7g<>7FkGk90O?Ek}SHkIkN7BkDkvIWVMU2POk8NPk(531Rk%LVESkQk_ENk$JUk{0z:7XcqJkKkLkMkVk@fYkh?HRWk\kl8Xk:=XP70]k\D,V`4vB9<Zk[k`TjFTD_k'EuY12dkE=bkck,8QMekak3A"FsLfk0@8Rgk/8-8hk;GsMjkkkmkHPrknkqkyH|Qlkik98YOeDokpkZLHMr0vkuk22`8wkl1EL$D%Oyk"lrEzkEI_b~kNM!l[17S\R}k{k<30jTW tt3AVBViUJ>'t(R(t)t*tK>_S`IaIBsfJrL6b4KhN[V-t.t/t2t=:3tc00t1t"=U26t7tf602OO4t,45t8t9t'M:t;t<tRK=t>t?t^t<Ah< I^Que3\UR4\,05\Z=9\BX7\sSVI:\6\;\"C<\E\=\_N%VO\M\R\f= B8\K\N\>\R7E0G\>PA\(;<7L\F\?\[G?Q@\J\P\-NB\C\H\I\T2Q\UK7T[\_\&Lf\gC\\A?Y\z069e\S\D\V\tH`?;I=1"SZ\U\;F^\BW/C67QG)Cb\X\k\T\]\%>W\`\c\d\x\a\"]g\k<D4#Cg2z\r\o\|\n\pRh2WHcH{\m\w\u\#>t\]2s\v<h\D;s@T<i\j\q\v\y\45YHg;~\}\ S!]#]%]qR$]&]'])RI:)]6]1]4]0]NFr@/Il\.]7]p\/]8],]9]3]-]*D(]3@ A*] ]2]q;5](S:];]'CR]<]Q]=9U>z>J:J]E]?]K2C]K]$2U]>]PFP]T]bAF7N]O]D]=]M]QLI]B]HC<F.NL]H]A]F]\B)S*SS]tOxHf]G]`]dBa]W]xVY]X]p8V]OF-6b]y:aTg]P4Z]{?c]_]]]Y5[]\]^]/=d]e]u]ICbKr]aXQFt]tUs]p]l]o]h]nPXHn]i]j]rKm]M16@;<q]w]v]k]nE{]$^#^x]oC{BaU5N}]L2hD_J>Gz]|]~]"^*0N1,^&^6=oH!^%^)^(^'^-^LT3^*^.^Y@!16^1^2^&Q5^/^0^=P4^mJ9^8^7^;^e=X2jC:^:E<^YL*7eT=^?^"DA^>^@^:UB^.r";2B0EGB/riP]S=kf30r1r-Jg:3r5r4rdK:O2r4JORlBCN8rv07r>rO2AQ:r<riT;r6r?r=r9rGrDrFrJrBr@rEr{VAryG_IHrF905CrIrPrVrW;Ur\MkVRrTrr8KrNryB]ULrMrOrSrYr<Sj6qJd7WrXrZr]r[r\rQQQrIMON)Vcr[C`r/@lr^rarhrbrgrfrir_rdrjr,Seru2rr PurH;yrprvrxrzrsrqr{:{5orwrmrnrkr&s#s"strZH{r%sxC}r's)s$s|r s*s]B.s0s!s1s,s/s~r-s2s4s(s3s5s7P8syY9s7sdH6s:s;s@4Cn<s=s*Q,tFPPP\QNOV=CQb:iaBRBq92m1Cq@ID3rY%KDqTVEq@tFq,TGq@0AtBt|4[E;LdP`MHqsY;1.O$8JqKqC2QA0WIqLqNqvYaR#TCt9HDtMqOqc?PqTqVqQqQIaEcB|9SqUqS9[qV:}0YqXqRqZqWqlHJM]q=e\q^q_qeOEts=`qaqwN*R{q28{<[9f9YCSJhj@@u>ijjjkjljmjnjojG={u}u~u|ub=!v%4"v#v2lTQjY$v:n2U~S\LDJ@e%v/>)F%ZF<)6<8OH%<&Z'ZVLCH(Z}F5QiR6QG<2=d;)Z*ZHQ ZmPo6[BOKm7hIC7w>$V,Z-Z@FgW6J)U_KoU.Z_VJ40Z/ZkR1Z2Z3ZTJ4Z J5Z6ZO3oV7Z0;.58Z9Zn9/QhR:ZC8jOo2;Z<Zk=\NoS=ZsN>ZUSe;?Z5KPK@ZkGnVAZ5EA6BZL7N?CZDZ-KEZw5FZBA;WGZ8LjR1DHZ}5Q;IZ3PJZKZ=NLZMZNZw2QZOZhQPZUCRZSZTZUZ;P%Ry0VZ GWZw=!CXZYZ}C7LZZ[Z>@WF\Z]Z4G^Z_ZH9m;96xtytcM9u`ksO?;@:%TYatu*1r2uuwuQ:vu2Cyuxu41jU:819F2pTMO\0KUu;JV770L6Fa1:9|Va9!7z<Zj[jyLs9\j{43CQ7X:]jtT^jV<_;_j^A8B_TJW`jajdjbjcj^I38D6ejjJMIM4YbbEfj5@8Wgj,W|HSXMX^TyTDI.SS8`3bIvtU:wt_Wqt08TUO8pFC3rt,3=TwGttstKL$HutcW?E@u;uCuBu:VAu>TDuLuO0x5IuJu\EEuFuGuKu`>Huz8PuSug?r9<uMu7BxLy<NuOuQue6RuUu=uTu;Sl3$LVuWua>Xu_L[uH2YWYuZu\ubu`u_u]uau^udueucL?e85cuhu#Lfugu>uD1?uE5d2luiuW6mujukuZ4jTnuy3ouqupurusumI*9{Gc6IL&j53~Tl9yPmi*WniVBmHd:oipiqiaVrisiuitiviwiaGxiXTyiN=zi{iO=|i(8>A}i21T;u9~i!j"j#jx7-<dJN`/T=O7U$j^U%jAP<9G4Y11@f1g1h1=3hHAe_1IAo4(GXSyF8Q}9uB-SKT|=Be57Ce9;bUx=6T%N,AY3vLFeDeHeJeGeO5HF|5EevJIeTCE1#<7WKMMKJJSLLeKefD!Q7QMePe8MpVOe]5>MQe:6(Md9EJQ3YKlTRej7NeUe~4VeSeTe]R_BF1bS]6lKWevSi1t6ZeXeYe@5ER\e^e]e2G#R[ebTZU`eqWae\1{QbedeceeeXRK5_guZxZvZwZzZOPGDn00PyZJS*:"[qG|Z{Z[I}Z![^W~ZZA%[tS'[$[([<=I@#[&[#V)[-[.[,[B:$? [*[GT?2/[y90[;3&5<61[u62[I14[3[5[7[6[8[9[:[OSztuGCWdE|t}t{tF>oPS7MT*L"u!u(:~tVK$uR@j3*M%u#u4=(u)uM=8Ca?aK*u&u'upD,u<4mWW4 u.u-u/uQPQC)H0u1u2u3u4u5u7u6u8uI2TSMJo@XV0R?Ap=*8x<FvGvHvIvJvLvKviwMvNvDnEnFnkU$6HnGnInJn%GKnLn07v5MnOnNnF8PnQnRn[6.3SVFD51V8SnTn?TUG{>YN39VnUnXnWn%EYnZn.G[n/G\n'2]n^n_n`nanjWbncnX<dnKSzL,2eAen&G-Cfngnhninjnknlnmnnnonpnqnrntnsnun-MABvnwnxn!Uyn3Ozn{n|n}n!o~n"ou8zC#o$oB=?Ry2%o&o'oxR(o}V)oLF*o o4A,ozOxK.o-oz3x9/o0obP1o2of7?P3o4o5oqH`L6o7o8o9o:o`U;om4*C<o=o>o?o}N@o`B846Wu=GOCoAoBoDo'6|<b>LCEoFoGoOoHoIoJoBGqoM6KoLoMoF6>CNoPoQoRorUSowDToxDUoVod8w0WoXoYoZo[o\o]o^o5>ao_o`obocoMAdoeofogohoiojokoloX@mo-AnooopobO$3ECEcAIFcU1JN34rHGcPOHcd<IcJcFC"UVDk9ENKcvCLc'7s8R:McNcDTOcPcKQQcRcScTcVQUc{2;@Vc @WcXcYcZc[c78bZS6dZcZfZnHeZ@7tQuRsUW=hWhZgZ"0SMiZ=8J<=B$BB3jZ*B0D5=^OkZBI]1lZ86:T}3mZITUOcEnZoZpZjAUL]OgS!BqZeKrZfK~Rt8sZ/06OOUmKtZDc%A?v@vAvQD8HcQ[PEQ/<M9toF4:SBv{3Cvq5EvjS'v)Q)v(vcAW@"1mNhP vvO*vpU,v9Ct;.v-v^DXA*K<O/v0v1v6BT0yE2v`G&v8>2>e5G7??RCfCLXo8y=%QP00w1w,P002w3w4wJGO>7w6w^15w8w9w$NMH :8h9h:hB>tROTXI3R%6jG|qnO3KkPoggMK9Y6}qd0LK~q$T-BlADF1>!rU<"r#r$rCR5FGM%r1SE?bL&r'rUQn6(r)r_5*r r|2,r-r'Hg7)l*l l,l.F-l.lI73J8bOwPwM2QwSwRw;b"<<b=b>b?b@bAb97{R$=NJ%1GKBb|6DHCbH=}1Dbv6EbYDFbZO]9Gb!@Hbv2IbsAJbKbxBLbMbNbWJ8XeYcO%p0\mB&TTM1Q[3}G52?B`f;JafbfT>cf$WUMef]<dfffgfnB>=hffB':ifjfR3iQ%?kfoFlfmfnf-Fof'Ipfqfrf9esftfbBufvfhVwfxfG9;w:w>w<w!:?w@wBwAwDwCwEwFwGwhK_8TwUwVwXwZwWw[wYwWW\w]w^w_w`wK[*Xwem9}?j;IwGFHwJwLwKwMw:NNw'DcSOv3BPvQvRvSvTvVv 1WvXvYvZv[v\v]v^vJO_v`vavbvcvdvp@evfvgvhvivjvkvlvmvnvovpvqvrvsvtv(>uvvvwvxvzHyvzv{v|v}v~v!w"w#w$w%w&w'w(wn1)w*w w,w-w[A.w/wqD/p&<0pyC8E;Q1p2p3p4p5p<QlQ7p6p'TRM8p:p9p;p<pk8=ph:>p?pi>@pl6ApBpCpDp5HEpFpGptEHpIpJp=wKpLpMpNpOpW:PpQpRpSpTpUpVpXp%SWpYp:u9Bdwewfwgwhw4BjwkwsBptotiBawbwF;dYrJh@$pZ:-G,Dlwmwnwpwowqwtwswrwuwvwimjmkm<v=v>v&6>XD9;X1\sJwwxwyw{wzwG1|w}w~wkF4l]33v4vdA5v6v7v8v9v:v#H;vzA(9hmj9_Y!#"###g!%#&#'#(#)#*# #,#-#.#/#0#1#2#3#4#5#6#7#8#9#:#;#<#=#>#?#@#A#B#C#D#E#F#G#H#I#J#K#L#M#N#O#P#Q#R#S#T#U#V#W#X#Y#Z#[#\#]#^#_#`#a#b#c#d#e#f#g#h#i#j#k#l#m#n#o#p#q#r#s#t#u#v#w#x#y#z#{#|#}# !i!j!~#$#
( & : , * 0 . 4 2 9 % ' ) = > - 1   / 3 5 6 7 8 ? " ; < $ # ! e/!/"/#/$/%/&/'/(/)/*/ /,/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/[/\/]/^/_/`/a/b/c/d/-/.///0/1/2/3/4/5/6/7/8/9/:/;/</=/>/?/@/A/B/C/D/E/F/G/H/I/J/K/!zv,#z|/8z",.z,z#.$.-z%.#,/z1z0z&.>z2z3z6z$,5z4z7zy,(.'.%,z, z)z*z .9z*.<z=z[~?z{,@zAzBzCzS-Dz).(z!.!,EzFz`zazbzdz},cz}/8,^-9,:,;,ezfz[zgzhzizHzGz]--./...KzJzIzLzMz0.Pzi/QzOzNzRzVzh/SzTzUz1,Wz2.1.3.YzXz4.Zz&{:z%z\z]z^zf-?,6{@,>.A,?.9{7{@.8{:{;{g-A.<{={>{Y~?{3{2{a-_z5.4{9.nzozqzpzrz:.sztzuz.|vzxzwzp/zzc-d-yz<,{z|z}z!{~z"{#{e-b-jzkzlzmz/,*{[- {4,6.7.8.5{=.2|<.;.%{e|Z-h|f|g|i|j|Z..,G,d|H,H|G|I|5,K|J|L|M|o/N|F|O|Q|P|Q.R.6,R|6|7|i-c|N-'{~-9|:|p-;|<|>|=|M.?|r-A|@|q-S|T|"zc{O,e{H.d{f{g{j{k{h{l{I.o{i{p{m{o-q{y~t{v{y{r{w{J.n{u{s{m-x{"||{#|~{!|{{}{R}Z|$|z{%|&|'|)|K.(|n-*| |,|P,Z,U.1|R,;zS.s-j/k|l|o|m|[.T-',n|p|r|),q|(,u|w|k/y|t|v|U-s|x|z|~|{|!}}|||\."}V-$}*,W-%}].'}(}#}&} ,^.*})},}l/-},,8| }.}0}/}X-_.`.-,1}2}Y-5}4}3}6}W.[|j-\|b|X.]|^|_|Y.t/Q,`|F,l-a|({){7,D|E|s/W,=,-|L.z~/|0|B.G{H{J,I{K{L{J{M{P{C.D.N{T{U{O{S{R{F.Q{K,W{V{E.Y{X{G.\{Z{[{]{L,`{^{_{M,a{N,4|5|W}u,$zk-P}w/Q}k}j.x/l}m}n}t-l.Z}[}T}U}v-V}J}_,K}L}M}u-N}O}u}@}?}c.B}A}C}d.D}E}e.F}f.G}g.H}a.7}8}9}b.:};}I,<}=}>}".X}h.Y}i.p}q}r}s}t}o}k.%~&~i,'~z-(~)~ ~n.-~*~,~.~o.{-p.{/r.3,l,T~U~B,V~W~C,r/D,X~q/w.$~S}6~v.j,S~k,v}#~3|x,T.Y,U|V|v/u//~s.7~9~8~;~<~:~@~?~>~=~B~A~t.E~C~D~F~G~2,`-_-J~H~K~n/I~u.L~m/M~O~N~Q~R~'z{}|}h,}}x-X,~}!~"~y-${0~\,1~],2~3~4~^,5~z/O.P.|,q~.{I}w,r~s~t~u~v~w~\~^~]~p~,.B|N.C|U,Z~_~x.`~a~n,m,b~y.p,o,|-S,T,n~\-c~d~f/e~g~f~h~o~i~k~&,j~P-l~m~~/}~~~!-"-~,#-$-%-`,&-|.(-)-*-'- -,-a,b,--.-}-,{-{/{0{0,1{g/P~x~z.>-q,?-@-B-A-b{w}x}m.w-y}z}W|[,X|V.Y|C-D-E-F-G-H-I-J->,K-@{A{B{C{D{h-E{E,F{L-M-y/V,r,/-0-1-2-3-4-5-6-q.7-8-9-:-;-<-=-c,\}]}^}_}d,`}e,a}b}c}d}e}f,g,f}g}h}i}j}O-Q-&z{.R-s,t,{~|~@ 
S"S$S%S'S(S)S S,S-S/S0S1S2S3S4S5S6S7S8S<S=S@SBSDSFSKSLSMSPSTSXSYS[S]SeShSjSlSmSrSvSyS{S|S}S~S
U!U%U&U(U)U U-U2U4U5U6U8U9U:U;U=U@UBUEUGUHUKULUMUNUOUQURUSUTUWUXUYUZU[U]U^U_U`UbUcUhUiUkUoUpUqUrUsUtUyUzU}U
X"X#X%X&X'X(X)X X,X-X.X/X1X2X3X4X6X7X8X9X:X;X<X=X>X?X@XAXBXCXEXFXGXHXIXJXKXNXOXPXRXSXUXVXWXYXZX[X\X]X_X`XaXbXcXdXfXgXhXiXjXmXnXoXpXqXrXsXtXuXvXwXxXyXzX{X|X}X
d"d#d$d%d'd(d)d d.d/d0d1d2d3d5d6d7d8d9d;d<d>d@dBdCdIdKdLdMdNdOdPdQdSdUdVdWdYdZd[d\d]d_d`dadbdcdddedfdhdjdkdldndodpdqdrdsdtdudvdwd{d|d}d~d
e e!e"e#e$e&e'e(e)e*e,e-e0e1e2e3e7e:e<e=e@eAeBeCeDeFeGeJeKeMeNePeReSeTeWeXeZe\e_e`eaedeeegeheiejemeneoeqeseuevexeyeze{e|e}e~e
"P%Q%R%S%T%U%V%W%X%Y%Z%[%\%]%^%_%`%a%b%c%d%e%f%g%h%i%j%k%l%m%n%o%p%q%r%s%
!0"0#0$0%0&0'0(0)0
%<%4%,%$%
%q%r%s%
`!`'`)` `
e%f-f f'f/f
x4x7x%x-x x
~NzP}P\PGPCPLPZPIPePvPNPUPuPtPwPOP
]8^6^3^7^
c{cichczc]eVeQeYeWe_UOeXeUeTe
r6s%s4s)s:t*t3t"t%t5t6t4t/t
t&t(t%u&ukuju
a.bidodyd
duewexe
]!^"^#^ ^$^
t.uGuHu
h&h(h.hMh:h%h h,k/k-k1k4kmk
k%lzmcmdmvm
{1{ {-{/{2{8{
WHX%X
`IaJa aEa6a2a.aFa/aOa)a@a bh
d@d%d'd
kCpDpJpHpIpEpFp
 7.8.4151
"5#6#1#2#
.]._.g.W.Pk
&&.vC
**0*.*,*/*
[%]%^%7u
$c%d%
4= =3='=$=
?$?8?*?,? ?
:\0\7\;\
\$P$a$j$i$V$`$f$_$#%f%h%
_1_2_,_0_
 '3')'5'1'7'6(
1%F!(
%Fp>p3q
C.DnD
i.lIl_n
H.HuH
&\$\2\'\!\0\
5?6?2?:?
='>(>!>%>
869597989
= >)>->/>
 })}*}.}?
=:><>9>;>
;525.5>5;3
C'ETEUE.ET
s;s"u&u%u$u
*:(:=;<;
1.#.(.'.
LS.PLNLSLSPPPWP_PUP
]4^5^6^7^
#_$_%_&_'_(_)_*_ _
4u!%9u
"*")"'"("
%d&`&a&e&g&c&
%!%"%&%'%)%*%-%.%1%2%5%6%9%:$=%>%@%A%C%D%E%F%G%H%I%J%
[!\!]!^!
mQ.bx
{ | }9},
d6exe9j
]%sOu
m.t.zB}
w%xIyWy
%f?iCt
."4"W!'!#()!g"F!>!w)x)%"R"$!,"v),(y(v(z(/"!("(?!*(-(,)!)#)@!*)-)")$($)%)&(&)')((())())0)/(/) ( ).(.)'"0"(" "*"-")"A%B%C%D%E%F%G%H%I%J%K%L%M%N%O%P%Q%R%S%T%U%V%W%X%a%b%c%d%e%f%g%h%i%j%k%l%m%n%o%p%q%r%s%t%u%v%w%x%',!,",#,$,%,&,(,),*, ,,,-,.,/,0,1,2,3,4,5,6,7,8,9,:,;,<,=,>,?,@,A,Q,R,S,T,U,V,X,Y,Z,[,\,],^,_,`,a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,W,*!.!/!0!1!S"T"%!&!6"G!H!X!y)z){)|)})~)f"I!5"$'`"e"b"Y'J!w(x({(|(}(~(0%1%2%3%4%5%6%7%8%9%!%"%#%$%%%&%'%(%)%*%g!h!f!i!j!U"X"V"Y"W"!"""#"S!$"T!t!u!3"2"n!p!D!P! !|!}!{!z!r!s!1"E!q!-!o!V!A!U!B!C!l!m!x!y!v!w!A"Q!R!g(h(i(j(k(l(m(n(o(p(q(r(s(t(u(g)h)i)j)k)l)m)n)o)p)q)r)s)t)u)M)N)O)P)Q)R)S)T)U)V)W)X)Y)Z)[)\)])^)_)`)a)b)c)d)e)f)M(N(O(P(Q(R(S(T(U(V(W(X(Y(Z([(\(](^(_(`(a(b(c(d(e(f(!&,&"&-&#&H&G&.&$&B&A&/&&&F&E&1&%&D&C&0&'&<&I&J&7&K&L&2&)&>&M&N&9&O&P&4&(&Q&R&8&=&S&T&3&*&U&V&:&?&W&X&5& &Y&Z&;&[&\&@&]&^&_&`&a&b&c&d&6&F"a!`!C"G"H"K"J"I"L"c!b!:"9"e!d!8"7"_!^!B"[!]!\!D"E"Z!Y!O"N"P"Q"O!N!<"="@";">"?"M"["\"]"Z"!!"!#!(!4!5!6!7!8!9!:!;!<!=!k!2!3!!*"*#*$*%*&*'*(*)*** *,*-*.*/*0*1*2*3*4*5*6*7*8*9*:*;*<*=*>*?*@*A*B*C*D*E*F*G*H*I*J*K*L*M*N*O*P*Q*R*S*T*U*V*W*X*Y*Z*[*\*]*^*_*`*a*b*c*d*e*f*g*h*i*j*k*l*m*n*o*p*q*r*s*! " # $ % & ' ( ) *   , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v !$"$#$$$%$&$'$($)$*$ $,$-$.$/$0$1$2$3$4$5$6$7$8$9$:$;$<$=$>$?$@$A$B$C$D$E$F$G$H$I$J$K$L$M$N$O$P$Q$R$S$T$U$V$W$X$Y$Z$[$\$]$^$_$`$a$b$c$d$e$f$g$h$i$j$k$l$m$n$o$p$q$r$s$t$u$v$w$x$y$z${$|$}$~$1)2)3)4)5)6)7)8)9):);)<)=)>)?)@)A)B)C)D)E)F)G)H)I)J)K)L)_"1(2(3(4(5(6(7(8(9(:(;(<(=(>(?(@(A(B(C(D(E(F(G(H(I(J(K(L(^"I'J'K'L'M':';'\']'^'6'7'8'T'U'V'W'X'!'"'#'%' ','-'.'/'0'1'2'3'4'''(')'*'='>'e'f'g'h'a'b'c'?'@'A'B'C'D'E'F'G'H'N'O'P'Q'R'S'Z'['c"l'&'`'o'a"<'m'5'9'j'k'_'d"d'n'i'ilKoRv2X[m2_>_;yt\du&s`]&axN0\*ciqzM/|!S qQg,RyN}q?^:{9yRN c`kzNwKêJLTajc\-_kK/UuVxe@^#lMi'jvi;{igLofPA^,dLXqy_N$z2f{z=zHLMoUU"SQl'dRl1v{NQP?K$m(mB^bv\mu\9`NT5t[S5V$lfdjqlK@KrljPry%l_PjgkPQ\i[L}W[aZ6V_cC^D^!Jln#S7nOxHj8n,q%qNi<yyejlV]Bm%x:eX["JMQmnklE^`cIJirNU6vBNGV4c-qbjBW'sjMnk2Y%}UvbU5xuL5u-dkgUq;p5iILUzTaVWA\F^ozacsav\|ND[qxd\oe1\VUZsAKC[zYnS8z&}ok&tJL(s[s'[7vfOrpZKRgCWpv^h&ege#J'LIj6x%z.qNomK0vOoOi^wSNw\([xK!_a]Ju6ilgnnps?_KLAPRt:`@_`NR\j}vVJjih,cPs$Jx[G^pkVqbeLL{KcjA_mVPi9ncUSQpe4hCk*j|zvu<pT};`CN:P:wsXMw.d_TgP}l.RonWUdj"xkM?W1{lM2\lP}NpnBLmPwe|s"n3YtX7i.N"YqXOT'eRU)V"tWqXU=pPWPTOWjkk}m[E|BKU}Htjhsu^yoSSlB]7oTgJJ{Y}z*Vxtww,\WW"_>NpS$plagOKs)m>JotNv{^;P7Uqn(tx\'KNZf`%mrny\\y\srxytq|<Py[1W|K%p}KtUmM%J VBP>p=R$L6zMLzZOv8iuXNLMWQTmikJbY2}-cLV4Y'aSnCP3}dUhOCm2P~N(ZPxV}QxRxS\b]y{A]5c]mDN!Kc]]|/y{R!O(d6t~l.cmgA}bZ3Xd]opqvpzuQOZT\&\?oONY`VYTlKj?J0UiOmqOLxdmdXW'} j2vpO=ytf[KQsQi)s`PRicZRb"vtadZUg?u"O/M#O0M~q#P/a#x&J;wjrH^SiI^^}@JjyNQTnRT#Y(}YWNw>zVOpWakExz\C]_yoge}#v|Y)}ngeUPo1M"w2q1q2M Z'Jbc<{$Y:nSxz{$O{\cv*m!raN&z`yVlnd!yo{ky#n,j(JztVMv|ItTx&xJ^FrZWPSEXfj]sZddvrvB_}YvL:S/day&pSK<`JtzT*}by7tB}0|l}bJ=}gjC_RQbN$S }`_GrpgnP*sK^8vua3q#w)J%OD_0a?p$v6cFzoPm}D]w|?f-^?zqeDm%Rn}6uvaL^^|Wl]M7V3MUxXejOPOLj.j-jqS%SOw$n$P"rpP#rxw3P)[;SlJ&qUKgw^M$w@x]SPL&Osvwa\S~z'zYk'O/jod9iXqXXr`4f|\qsPc{rF[qPrP\OQS1LXw(K<k>d\tB\'p@fmJkhheC\^mrSwLTN gCK1a2wsSRS@u]_snqg4}HrRstnSbQLj_:iWYMurqGzxYBTevE]rg_mKJz[5h&S5}Iybd={$WENUNfV=eM^sl`mll>{k_xa>ysP*`bhTb}R(eSY^S8t<w}\lhgdwc(lqzretP/Re\%P4q1|xLF]Qz_w(zunN^sg,wDkam `G]3R?RLJ?{}ee]MXtluPmhRPXYfv*[`wYX#t]tQo5Y m7c;n4Ms`Mjulnh)K/qMJ)lkro}syAfXl,mNj_hO^&RtgVQBfcc0d4X%v^s%WhwFhf{f]~\ZX,Z0j8c*Jya1jlrnzUntylR{{p}=`cNFx.^E_>e-mjznM&m.mmp!]/mx|kXyL5M)z]aUbOm"]JyhjmekSTizaLddaGh[NU\5ws|sp/N5qRoHhqkTK>`xcij2|t``O%n*zCf2a Jdc;iVbrsVn2jvPYlKZ(O#][XNyUiQc<R,XLs{MVvugohyc;Rss{cP^0NwVYqAuD\;uQ^f\R^bmvnOjnp|c_StS3a4aStF_Vi [&v9cEk)t6MyR-ZcRQO\KzL]O)h;c:cZ`wn3\uS&W5v[WUajT#__}wPTm*K[d{a"K`S?d@{>ZMd9V@o|a9vG_1dg\h\VzvSZqrz}bOUxP_MKupd KDW~bZ].ZnJ9U!cch s)OwSqTdNrhue.g:Vl_@ddh5X\d9t6q^b5aoM'qeN]KcY,syP lS^iwuy^anK<cVxn[q}6w^tmrY[(p}aT^,`cmaSH_6Y,}SoAdkx,[F|-X:v_[SSGxNJAx4R4\9zOJ3|jjkjzPdmg]I_m_<nAoRL$]J_xS(q7MTo]dn_,K<iljK_?y/VFU*O)NxV7qxnYY_sHxFNfUftEfUooK_|'\gVIxRc=caO@pZlW]p{,l)pWzA{@R0eem-K0y%w.K/Z6X'S2{D}-l!{ienitssxAp/^0x`s/g-[5f(yX]YhVobS_b`|HW-}o_SLySpTG[U^tpPUYeG|V\`b0Z#slSKtE}}c1y{P[l<u$rNXOXwuav7Rl{H]hdARWx;VV^=w.laPu`3jVN%Lvlab>cH|pMvyp_?e?Na|0mQ};vOyZkAJ8RqMScf}mfzc*pPyb|'xeaynvgmj4|Bu\Wuph]mS|u?Z{LzS$tWoCTc{m{-`nj3{Bdgv]RL_I|)ev`3v~apKojpj@Z4xrkCdWiqdoJWNJ|asDKecEK4j=iIW[k1mCL>wK|tx7YSsTsdwQw7X1NBJ4{FKvpgUPjTL/K*t/iCuXii]sq{U;^{ts}r}&wI]ST(LAZULdYJzce<SpJDPPJ zkkxgeYWQ$s{Tc|XzUs Osk|UTS|MfYyb!bTkw`2d|Ld{ t=PqJ8o@Wznt}cSB{hU.[6a7x?`C{j]"b&nhvuvJ]bP&]k]yd/c|P|t<Ljwdeq_awwy9oXx)yYx=nFXcdNuY]gY9RCUeZPZYQXN^K,t{Zivsh,Opp}tH[@NTcOQuqrMkO8M&cZQ%r&rNd{S)qIrXoIf8Xsz5s$xsQHfZxi\W^_KlO_ttQ:Rr_7a#b|SfmI[zd^OPNSUus.wHosMOuseBpQJqj&PZY pgk@e5|Dd)LF}5j*e:__aQZ8ath}S$bJrfZ3wM}6sWnDu$X'r8Y9YIoNVKw._uh5RUSLt|ZhYkwIu<sRZ5S6hOV:tIw*LCpVLSP=S{[`KdSwv:UMsaKtk-t*|lwvhgZLwAen`}UfN |;U(r¹MrjGKtM/[Yo:My|s_gNBZ-Oyg(xbsrJ$_DTWLBe;MZoXn']&b@`0VJxz|~Y0^l]hZ`TyVWMX^xrVdEP.t(]EmVsY^fc(S0[Ze?c1[iUA`[oip2W}PiY~Pml)S)rDpbboiQyYiZhCZDZETzg`M0c2[D{cs%Yg{K]TP6f.`Z}5\x`1gpu\XFm9a@c@ypi[Yds6\idEpAcL|M|KrLrOd[qYz8qu}y`{g7|d|E{gc9XxvE\XL/`gt\o|O]o*r>},J;}G}2gQjt_lQ^dCe&Y<MesUm:Ygm5{lxg`YLFT%guU>S{|rdu_xhmxGNv}XhXMVgZLcJv_GpFp:XtqptLue|Ejsj[]W\}^yrGUPXHp!Q"QTYhVJY1ZGXb\Nstu9qSZjvuO.}RJ4_]W:z'n=uuxhmaT#QVaxyJ[yKTT\Y>nmwnRfaywm][h3[wQ0`bTWvyW]X}M r=MBx,r-J.J.OBc7\Z[;YsJSvxfujvjyv/OSJ/J0R:q3WCc}sZ^[^^ocb{nw_JWhN[[;qqi7zFP L(nzKyy}L~SPdnrUTM_8|PQMrRwTJYU^XYM)n<v[LIp||Ih~t|g^W\^,p~LaM:ao[2Z%Q8\vX$QbMj\wpJp>P\]VTVSPm!M5_x_!T2NJhukUcPu!u'Y eKfquEe#y[`kvqKjY"uQWxQxjyj3Z_ooqve?ndb?P,zQu3g>iNr4[N|n]4g4W4w>MiZ0OYwfsYN*NHK'PKpGPEd`[ZU'W@nvxRuim<YFe#uTZ'b|{\qtJzhiNxieb9PrT&QN_t|*S,L`oeeUP|[f|~Kjm1^cy"TvOPVjUnqKz!e1UmOkm2U<Ub}-s[}0i'Qc}3Nd}Nz0J'w1O"f6|-rao.sF\kY`h(avU}O]^QYjdOr?wfb(bVcQmyi1V2^h` S\k/_CJ|nC}vk2OlY=Y_X8T>ko]p]q]r]>YF{3O}n dEZlX(Q)b<^5gp[bopq4Oq[1`%_Ry}g#fq{0K.rgM\hWg@wcP!Z=L)QL]~c*Q*h6jzyLfXvGTKYRYKSwX)Zxu^^/r)xHXAnAys]zj=v;a?MTtMfO|"{\`;tUZ2yr{v[_^r[\xnwhkzR<qZzjZFZAw6gGe,VG\)a*b&UWTPr{j]`s{=qgbW}HN7j@|g}ow5W:o]q3^Kh]xG{HU_W)]1i-zYvtz*xnf\L<ao`?i}|NfWaOfqtsd{ddyconO>v2`~| QzWH{Wb#Txp(Wga?SdoEWbkg|"dhbPfh{htte<tUt6_9|BnuJeobK$T`^}ZFd>h^`4vRj{yB`dJ7g}j]Y4Z*ni{K[5Z>q,SI{O_@SWcfoP|@iSu\l7w8jyQH\9j^q6W5O(Ynl*]"M.h=aQrAi|R5[gs~XQ|2m/t#{A| n%TrtYnJ{cM;X[ewxTv)WIKQfLp.XSy~U<X0r bhsBolm8g~Z>L|rkZXbVmQV3`R|HkASMpwORmXTI\qW;_%sMt?q1xziK{UJTyJwHVh|=s~n~gBS6S-Lzv2VXRXgÉg-pL{!k&TM{=U_q{v4^kUHe${9Ta^#d7Wnx5^RVUy:gUkwUgo>a.ziVnV;gKl3U4N%{na(wN{=X}{i|6OGm,n]L'vzf$u\}3mINho?a[zcK)w&{9\@qHmCo-VN}!ht{'UvqSf^L2xk\6}je`qL[M]HTmY%u{fTfH}!V?}S|!o<gnQUfri0_`X:|/}Npa[Ie4mC`Xc{i(j7}'{Biw}Ybl\"hpfx}y}?v'gWfsTITzVrW@ab[Xf=gOp>s,b7up`8}hc'T|hRzoxSV4UPppw3n:jSjIm ],e!}P_3lQ_mm8xzw x`t:T3dZi6^?Y@YoVLY*Ze_ew2Ly_`W;Tz}3Ls[R_JNZnddO{7OCnjN-baWuzIU,xYgismXDcqpehz`Dn^Y"k#kB|;j hb^om#hqO<Tj|>gr|4V.b7SLz\z5mca,h]hio=t8O[i,QGZIkLh7^<VeS]zVZ1JHZ&_3yRrDJKNuM0}(UAqibJ\4l@z({(PlZnY{`jo^zD`9OJUbW/b8WMhZv"oZb|vP{-QdM.Qm\Nhyp5N|f{WVPu]qw}vw[j{\iAYruE`TjBy<jERQ{@g%kz_"c9WCi}h/hSr){%XKUHP/QcWF`"VpmsWT|WZ_LTr0Q`L}[?sQp;|0b%f[b^_G`oraLjVBg6N@s~MR{xx{w?h7h6m:\4Lwq8hvJ$dVtf_'_g_AaDiK\Ei#o&k#Kic{Q$oko4P#Mfh%oLSmZ:WUreuoY4yTUO}c[aq6l~{WS1Q1K2Q2KBqat5yCaBawk(_JK9f^x*ywJ7m8SVrYTEnpr2J;\xq7lJe@v]}cTbLTweWCS&XAvv]@M\eKeDa0h0tjsnZ;W1b*W{V_dVJ(k~[Bv;o}TH`9h&o$MtT![\[][\nKKU|kNAMS{ yTu)Y]iM[N]CgLllyLK|`(TSmoXWrxJoZTVMYnXArS_pZjb}`xX/w6ZWJXryX_zoOBYRpQd7s`zlo2b=TNYbt)TBMZgYr*Y>X-\kb|VyJZTWt!L:O8uCYhPEcxk1r;O-SahlN4`c^w]2rvs[v~W_xrw)PZf&u<WcL[f]]3Qmo^Vtdoax]OheJ!\5`,|-|'X8m6[pV/s%MqZ(XdL4QXJrZ'u(u&flUxUsZFcd^e^5Q6Q7Q3r^iSp4rTpdKT{fujcf^T_yx.p8Q_VWP!|noX\_i]e{}I`IV*TLe`iXP"|>T3bg^<\6RUu!N)uy]z]Up_vZrkdqr9l|}*aYJoo*uyl-xBrCvRW"yVpzp`vsiCr T3J&MCMZMOYDv]nDg4bb_[g1h.|Mekz<ObOvMpo>tMT8s!irrksWpWO_O@hAhcO"i*PAs PdT<o!X_YWs=\eLqmbq[T5bfJ.SfLSqguZJn{Eai_^nBw"X,]/p=V a6yuTIP'olbj[LNhuUwMS~s5P~`{_]f$hMK(o4nXZ9Q)_0sDL7N)oU_WmFn=oV|t[*o9xiuYcFa?Th^jpBs/S[JW|XmGaXt3V-]>UCq_nkVYtfW7Z{]O]#XYZXpDoXaTqrm[U\UDsWK6bqoU{XSP]Yp3K]U'M,P:QDq3eu{ai`}<|"Z#Z!RoRmbi^\N5rdPQ]Ha7[c_9mEqOs W,akcGnIazJ{pazZpgLtZ?LmN)UbzePVk_l|_Vwj^4K>o5L=Oro7bhL|p`VFq8b k5KQXNtwsFW;Q*wJmSWzXEvLQ|]}_eyJ`}r0SstIZ^f:xPh{XUj#VFv[r|d2hZZ\rV{2i-nczn\ju`f}p,WEu`ne[^]pY#iyqDrK`$i9b1ck|(M6L[p:f)MCsYa oEgi`Es@T?U.]|y@L"e8NRXVy*qQNGvk[~_aXswgW~T<QOe6K8ZDM>V:bXOL`yk}}hWXKbi:hGcMlNl?V'cV_h}an(v}];xQhWynNOl%iUVEM:m=Q>O;l1RiLDY|i>Q<l-e0wjLDS@V}V!a=^)v$Z$VFu"aFiEritlVSk=l\bk^\p?kNW?Q u}y\JFM6r~]7L8[iP]N@k"}KxVj0qN[CwO[$K`xW{Jk!`MN\TX}vR7rvz*vwzfX1tRhEJkLnb;b-waxls!^}dlc/]0]7KSh#a`R~p&irKsmY\M`Zw9[.L[ZGM1]/X#coNsr3xN`}ulkESl|[RkT"^fe0pDUtmmcBhum|W;m v8rHvfS]r?O,k@O(fi}AO_`l^"`?tobqYGq8K~y:[uZlv\ZdzO`2])fsomszkfy]J^U^Jd_}f,uudciKmdOSX3]lT9r7_NKX{YPR]tw\g%d#|;[:r}iJPVuEY4d'm=j~fDw-u`Y4JbxBO>l4eHMHnHgIM7yhqrYu[5JFYIX Y<mTXZ\<bm|`l~RGi*fpb;z.u*{{l?lX|eTCybniWvmm^lLncThxz4]5d0XUXjt9NaVRO6P"NnsxsL\KP$|JMTW#^`dIn]b~u,TQUpXCxWjWu?X@}-k*U(gJngJcx]TXjY{wm5e-Pqq=bHcUY*_<[dxzq6eosZ{`a,Yku6`HiOKIcn^>bo\%Vqb~V!Y@X[\=m8_%j-WysxmGuJack^rLxYjFSf[/upN~i6{rbrO9wsYKa]Z9Z{k9Kym``@t<}1_oc#`9}1pKM>m@UpczmdimU]gvT7eg[?bKntW]p N^gVVLa3hne"\P`5U!U[{KysK%tHzWVei\{P}v{%Z=[blwM^pIvo^1Sn|ChHqqNmytr6d9up\qc%h;r$^LZiJZcY|ZjDy$c]{JoDhLUWk-Y {YS"U^vvZQ`(iyu/z|kj`2cEUcqnULMYmAXlzkq<zbfezzb6J7d[jzu,{CO}kzx9_qa$R{uZP[P>j1Y7JgSex2S@b_reM,yMM.n.VjW`g.kYOM\{mp^kW%^W_P[Q[#U2p\\hJfxN\\jR[3i[w(c.Wa`:KQe\PAUJX)c$`)iGS]\.x8L.PrXJc/L-TQvLPFJBU:NGJ0zX_:uketo5]*Mrcw{Pw:}a}~v@QEh8dhaALmR>[b`IzMa8J`rIqq^_pDxLnr^IgsbagKcLcxO,o~}%|1zY_R`ZtJq#N<rcl%` w/k^e$a MtY&hNMiao|c`Ab$N&^~k]k`p[ttbHSkt5nXu_UeV0kctMctt2zuo_J1k?mI}&d$y3plegQGYWd]jwT:ZMZLyZa?[ELPl;Ks^*iHYcn=WDOMP&|{qR}AQ[cISO\mL'^;f!l9L^{bgAT(\BbXsSeYsFs[M,MC|gTBQ%yUhNcJTZ__{cg{xOc0ugXIY/xvo6]/nxM8^'||w1w;N!tMn.aCl~O?xbXhS(^dtBluYEyS]qV|lp|@m9Jdnar9^rVt^[_S[gzcXAt7]ur.TsV8]EO__>r!vKk|qGsk`|m[aenu^SzKq/P9]CQ1uFjap,vYukp:]?rEw"[vr:JuweKfnS`%NXV/TIiNSBtfK!q2k"q3k4ptK0T2s7{lugn2tmusObpNnLq8euWsceOFO3sXdyOZOMzcfbrnu;J\crNYV0netBXP\nL`UJvJ}VXOt&V>\T[GW~rMqCb^\_\-o f]y?j.oPtsN,f^NyUtcPM8U}w)\v^*\cr4i\RfivcJgNPwZ<Jhn^Zwr{b&L;ZinZu\wjaAN1T1}=f-{gxNabwouGO2ToLhTOnWw&`AV\acpdqq\'VutNqdr0Pol:y5kmTDbgi4k!j<x&NFyZ|3T9S^j iaaOSvt@jOa:Ljndp4snT@reqCtT`6k!WhK-y-idX3zEb=|Dl1X \$Uik;hWX.{aQ@[>uw^{JFwHOPaPntitNMU[O;],Nhi4TGd[uAz)^xTwo3S7kxo\uLmU[OqPq2u.Y,UFb#}e{ _ub-v3u5p%a]u"l}m4u8{#[JVYKTezs8k7`lWlq/eaUmWQQrayo<]\vepDtii{soT"L~w<_Mk7PBV-h/o%KiKhzFLgfGj$[IO|bzo^kHu^TU`0oGb/YgyegJOQaHb{oyzr\'`hxjK<KbV^u_u6nvbJS|oDQ1oEQ^PaY8`QM9sLg(V'N5THd4S9kuK]v#qGLJipa`u/{QK`{erpllpknKipL/W!su|$qV`2oQt!wQq|J}JNNHs:s~m&Zl`MxRKNkXyYy`JJZ&KHJnyl[1PoUsf"gYdadD|oytOfw<NEt#\=]Ft!xVhA[fp9dmv.y>]0WhX=KZyNxpym`3c3tBjfr6pV[dkgrUW6ThyAWUejiLWiSIb[|-M0L"jvd@P7p!nvWJbKbOz_kKV4tMmRd)j:d"sRMKvfqAm<hQngpLb*dauZmnWqQkilid`'ZT]#jCVtV_Z3oMb}ohrEogg}WNg\_GyvY,_ZV$\8pzUwdDVlt~o!p*^<Z|XTzel(|flKX9{SdyMSOjJTO=xGt_j[y7TekRa$jBza{mz"pqL#zwbNbuikahgWhxZKTvwEViTzzrL]w:^(N9p~dIdTdCj4o>Wb{SM5oiz&y=_Gw}x|x ^h[]cbaFQPvfkyZGlx^ix^cuNCzWeHlIs;d.f6o?\=NCXOPzOJsW`GQ.i=hDzObEz8y`\0{)X_e'ynvLvxbql`ZRqLRKO=J?]ovy^4z-Ugq>^@\HQIQ>xvKyTbuSaiX~xLO$}vNPzsL>f.vpUJQ>|qUiM5zPbwtTM#g%[Qb"Wcw&j!PZNk{&[^[eX`j*X`e[VFojxUdwNX`oWmtfMtLcuJda\Hy?|'hDX>K.\wWhp@]MOs\0Yif<dDjldedx{;L=d\MwY_]NmPY#eMy.MNO/vS}mk\V$e6U]Viy$gcVKQdVrUz^xWjXUO}X XK}\|(`sUY}#LyYjSuuGoZS=Z(h/\#pUM)`,^:p1n2nMvRnFVe`;saeKd#WB[~JOO!0"0#0$0%0&0'0(0)0*0 0,0-0.0/000102030405060708090:0;0<0=0>0?0@0A0B0C0D0E0F0G0H0I0J0K0L0M0N0O0P0Q0R0S0T0U0V0W0X0Y0Z0[0\0]0^0_0`0a0b0c0d0e0f0g0h0i0j0k0l0m0n0o0p0q0r0s0t0u0v0w0x0y0z0{0|0}0~0!1"1#1$1%1&1'1(1)1*1 1,1-1.1/101112131415161718191:1;1<1=1>1?1@1A1B1C1D1E1F1G1H1I1J1K1L1M1N1O1P1Q1R1S1T1U1V1W1X1Y1Z1[1\1]1^1_1`1a1b1c1d1e1f1g1h1i1j1k1l1m1n1o1p1q1r1s1t1u1v1w1x1y1z1{1|1}1~1!2"2#2$2%2&2'2(2)2*2 2,2-2.2/202122232425262728292:2;2<2=2>2?2@2A2B2C2D2E2F2G2H2I2J2K2L2M2N2O2P2Q2R2S2T2U2V2W2X2Y2Z2[2\2]2^2_2`2a2b2c2d2e2f2g2h2i2j2k2l2m2n2o2p2q2r2s2t2u2v2w2x2y2z2{2|2}2~2!3"3#3$3%3&3'3(3)3*3 3,3-3.3/303132333435363738393:3;3<3=3>3?3@3A3B3C3D3E3F3G3H3I3J3K3L3M3N3O3P3Q3R3S3T3U3V3W3X3Y3Z3[3\3]3^3_3`3a3b3c3d3e3f3g3h3i3j3k3l3m3n3o3p3q3r3s3t3u3v3w3x3y3z3{3|3}3~3!4"4#4$4%4&4'4(4)4*4 4,4-4.4/404142434445464748494:4;4<4=4>4?4@4A4B4C4D4E4F4G4H4I4J4K4L4M4N4O4P4Q4R4S4T4U4V4W4X4Y4Z4[4\4]4^4_4`4a4b4c4d4e4f4g4h4i4j4k4l4m4n4o4p4q4r4s4t4u4v4w4x4y4z4{4|4}4~4!5"5#5$5%5&5'5(5)5*5 5,5-5.5/505152535455565758595:5;5<5=5>5?5@5A5B5C5D5E5F5G5H5I5J5K5L5M5N5O5P5Q5R5S5T5U5V5W5X5Y5Z5[5\5]5^5_5`5a5b5c5d5e5f5g5h5i5j5k5l5m5n5o5p5q5r5s5t5u5v5w5x5y5z5{5|5}5~5!6"6#6$6%6&6'6(6)6*6 6,6-6.6/606162636465666768696:6;6<6=6>6?6@6A6B6C6D6E6F6G6H6I6J6K6L6M6N6O6P6Q6R6S6T6U6V6W6X6Y6Z6[6\6]6^6_6`6a6b6c6d6e6f6g6h6i6j6k6l6m6n6o6p6q6r6s6t6u6v6w6x6y6z6{6|6}6~6!7"7#7$7%7&7'7(7)7*7 7,7-7.7/707172737475767778797:7;7<7=7>7?7@7A7B7C7D7E7F7G7H7I7J7K7L7M7N7O7P7Q7R7S7T7U7V7W7X7Y7Z7[7\7]7^7_7`7a7b7c7d7e7f7g7h7i7j7k7l7m7n7o7p7q7r7s7t7u7v7w7x7y7z7{7|7}7~7!8"8#8$8%8&8'8(8)8*8 8,8-8.8/808182838485868788898:8;8<8=8>8?8@8A8B8C8D8E8F8G8H8I8J8K8L8M8N8O8P8Q8R8S8T8U8V8W8X8Y8Z8[8\8]8^8_8`8a8b8c8d8e8f8g8h8i8j8k8l8m8n8o8p8q8r8s8t8u8v8w8x8y8z8{8|8}8~8!9"9#9$9%9&9'9(9)9*9 9,9-9.9/909192939495969798999:9;9<9=9>9?9@9A9B9C9D9E9F9G9H9I9J9K9L9M9N9O9P9Q9R9S9T9U9V9W9X9Y9Z9[9\9]9^9_9`9a9b9c9d9e9f9g9h9i9j9k9l9m9n9o9p9q9r9s9t9u9v9w9x9y9z9{9|9}9~9!:":#:$:%:&:':(:):*: :,:-:.:/:0:1:2:3:4:5:6:7:8:9:::;:<:=:>:?:@:A:B:C:D:E:F:G:H:I:J:K:L:M:N:O:P:Q:R:S:T:U:V:W:X:Y:Z:[:\:]:^:_:`:a:b:c:d:e:f:g:h:i:j:k:l:m:n:o:p:q:r:s:t:u:v:w:x:y:z:{:|:}:~:!;";#;$;%;&;';(;);*; ;,;-;.;/;0;1;2;3;4;5;6;7;8;9;:;;;<;=;>;?;@;A;B;C;D;E;F;G;H;I;J;K;L;M;N;O;P;Q;R;S;T;U;V;W;X;Y;Z;[;\;];^;_;`;a;b;c;d;e;f;g;h;i;j;k;l;m;n;o;p;q;r;s;t;u;v;w;x;y;z;{;|;};~;!<"<#<$<%<&<'<(<)<*< <,<-<.</<0<1<2<3<4<5<6<7<8<9<:<;<<<=<><?<@<A<B<C<D<E<F<G<H<I<J<K<L<M<N<O<P<Q<R<S<T<U<V<W<X<Y<Z<[<\<]<^<_<`<a<b<c<d<e<f<g<h<i<j<k<l<m<n<o<p<q<r<s<t<u<v<w<x<y<z<{<|<}<~<!="=#=$=$=&='=(=)=*= =,=-=.=/=0=1=2=3=4=5=6=7=8=9=:=;=<===>=?=@=A=B=C=D=E=F=G=H=I=J=K=L=M=N=O=P=Q=R=S=T=U=V=W=X=Y=Z=[=\=]=^=_=`=a=b=c=d=e=f=g=h=i=j=k=l=m=n=o=p=q=r=s=t=u=v=w=x=y=z={=|=}=~=!>">#>$>%>&>'>(>)>*> >,>->.>/>0>1>2>3>4>5>6>7>8>9>:>;><>=>>>?>@>A>B>C>D>E>F>G>H>I>J>K>L>M>N>O>P>Q>R>S>T>U>V>W>X>Y>Z>[>\>]>^>_>`>a>b>c>d>e>f>g>h>i>j>k>l>m>n>o>p>q>r>s>t>u>v>w>x>y>z>{>|>}>~>!?"?#?$?%?&?'?(?)?*? ?,?-?.?/?0?1?2?3?4?5?6?7?8?9?:?;?<?=?>???@?A?B?C?D?E?F?G?H?I?J?K?L?M?N?O?P?Q?R?S?T?U?V?W?X?Y?Z?[?\?]?^?_?`?a?b?c?d?e?f?g?h?i?j?k?l?m?n?o?p?q?r?s?t?u?v?w?x?y?z?{?|?}?~?!@"@#@$@%@&@'@(@)@*@ @,@-@.@/@0@1@2@3@4@5@6@7@8@9@:@;@<@=@>@?@@@A@B@C@D@E@F@G@H@I@J@K@L@M@N@O@P@Q@R@S@T@U@V@W@X@Y@Z@[@\@]@^@_@`@a@b@c@d@e@f@g@h@i@j@k@l@m@n@o@p@q@r@s@t@u@v@w@x@y@z@{@|@}@~@!A"A#A$A%A&A'A(A)A*A A,A-A.A/A0A1A2A3A4A5A6A7A8A9A:A;A<A=A>A?A@AAABACADAEAFAGAHAIAJAKALAMANAOAPAQARASATAUAVAWAXAYAZA[A\A]A^A_A`AaAbAcAdAeAfAgAhAiAjAkAlAmAnAoApAqArAsAtAuAvAwAxAyAzA{A|A}A~A!B"B#B$B%B&B'B(B)B*B B,B-B.B/B0B1B2B3B4B5B6B7B8B9B:B;B<B=B>B?B@BABBBCBDBEBFBGBHBIBJBKBLBMBNBOBPBQBRBSBTBUBVBWBXBYBZB[B\B]B^B_B`BaBbBcBdBeBfBgBhBiBjBkBlBmBnBoBpBqBrBsBtBuBvBwBxByBzB{B|B}B~B!C"C#C$C%C&C'C(C)C*C C,C-C.C/C0C1C2C3C4C5C6C7C8C9C:C;C<C=C>C?C@CACBCCCDCECFCGCHCICJCKCLCMCNCOCPCQCRCSCTCUCVCWCXCYCZC[C\C]C^C_C`CaCbCcCdCeCfCgChCiCjCkClCmCnCoCpCqCrCsCtCuCvCwCxCyCzC{C|C}C~C!D"D#D$D%D&D'D(D)D*D D,D-D.D/D0D1D2D3D4D5D6D7D8D9D:D;D<D=D>D?D@DADBDCDDDEDFDGDHDIDJDKDLDMDNDODPDQDRDSDTDUDVDWDXDYDZD[D\D]D^D_D`DaDbDcDdDeDfDgDhDiDjDkDlDmDnDoDpDqDrDsDtDuDvDwDxDyDzD{D|D}D~D!E"E#E$E%E&E'E(E)E*E E,E-E.E/E0E1E2E3E4E5E6E7E8E9E:E;E<E=E>E?E@EAEBECEDEEEFEGEHEIEJEKELEMENEOEPEQERESETEUEVEWEXEYEZE[E\E]E^E_E`EaEbEcEdEeEfEgEhEiEjEkElEmEnEoEpEqErEsEtEuEvEwExEyEzE{E|E}E~E!F"F#F$F%F&F'F(F)F*F F,F-F.F/F0F1F2F3F4F5F6F7F8F9F:F;F<F=F>F?F@FAFBFCFDFEFFFGFHFIFJFKFLFMFNFOFPFQFRFSFTFUFVFWFXFYFZF[F\F]F^F_F`FaFbFcFdFeFfFgFhFiFjFkFlFmFnFoFpFqFrFsFtFuFvFwFxFyFzF{F|F}F~F!G"G#G$G%G&G'G(G)G*G G,G-G.G/G0G1G2G3G4G5G6G7G8G9G:G;G<G=G>G?G@GAGBGCGDGEGFGGGHGIGJGKGLGMGNGOGPGQGRGSGTGUGVGWGXGYGZG[G\G]G^G_G`GaGbGcGdGeGfGgGhGiGjGkGlGmGnGoGpGqGrGsGtGuGvGwGxGyGzG{G|G}G~G!H"H#H$H%H&H'H(H)H*H H,H-H.H/H0H1H2H3H4H5H6H7H8H9H:H;H<H=H>H?H@HAHBHCHDHEHFHGHHHIHJHKHLHMHNHOHPHQHRHSHTHUHVHWHXHYHZH[H\H]H^H_H`HaHbHcHdHeHfHgHhHiHjHkHlHmHnHoHpHqHrHsHtHuHvHwHxHyHzH{H|H}H~HPKVKgKOMhM-N{O"P8PPP]PTQUQXQ[Q\Q]Q^Q_Q`QbQcQdQeQfQhQiQjQkQmQoQpQrQvQzQ|Q}Q~Q"R#R'R(R)R*R R-R2R>RBRCRDRFRGRHRIRJRKRMRNRORPRQRRRSRTRURVRWRYRZR^R_RaRbRdReRfRgRhRiRjRkRpRqRrRsRtRuRwRxRfT|T%U U.U8VMVKWdWE[d[%\%]U]t]|^~^3_a_h_q`-amauc!d)d.e1e2e9e;e<eDeNePeReVeze{e|e~e!f$f'f-f/f0f1f3f7f8f<fDfFfGfJfRfVfYf\f_fafdfefffhfjfkflfofqfrfufvfwfyf!g&g)g*g,g-g0g?gAgFgGgKgMgOgPgSg_gdgfgwgghhhphqhwhyh{h~h'i,iLiwiAjejtjwj|j~j$k'k)k*k:k;k=kAkBkFkGkLkOkPkQkRkXk&l'l*l/l0l1l2l5l8l:l@lAlElFlIlJlUl]l^laldlglhlwlxlzl!m"m#mnm[n=rzr1s'tnttvvv8wHwSw[xpx!z"zfz)|!#"###$#%#&#'#(#)#*# #,#-#.#/#0#1#2#3#4#5#6#7#8#9#:#;#<#=#>#?#@#A#B#C#D#E#F#G#H#I#J#K#L#M#N#O#P#Q#R#S#T#U#V#W#X#Y#Z#[#,!]#^#_#`#a#b#c#d#e#f#g#h#i#j#k#l#m#n#o#p#q#r#s#t#u#v#w#x#y#z#{#|#}#&"K!L!~!~#M!\#
s&t*t)t.tbt
.GIzI}I
$ ' / 1 1 4 4 6 : <
0 0*0=0?0@0
CUWeXeYeZe[e\e`eaecedegeielene
ZT%f%W%`%l%c%Z%i%]%R%d%U%^%j%a%X%g%[%S%e%V%_%k%b%Y%h%\%Q%P%m%n%p%o%
;L0LBLCLQC%sJ
M.Nr<\O
U.Wex
m.dOl5Y
!"#$%&'()* ,-./0123456789:;~
!"#$%&'()* ,-./0123456789:;<=>?
!"$%&()* ,-.1
!"#&')* /01236
!"#%&'()* ,-
!$&'()* ,-/01
!"#$%&) -./0123
!$&'()*-/236
!#$%&'(),012345789;<=
!"#$%&'()*
"#$%&'()* ,-./0123
!"#$%&'()* ,
!"#&(*,-./234
!"#$%&'()*,-
!"#$%&'()* ,-.
!"$%&'() ,-./012
!"#$%&'()* 
!#%&'()* ,-
"#$%&'( ,-01
!"$%&()* ,-.156789:<=>@
"#%&')* ,-./246789:
"#$%&'()* ,-.
!"#$%'() ,-/012345
!"#$%&')* 
!"#$%&()* ,-./0
!"#$%&'()* ,-./013
!#$%'() ,-.
!"#%&'()*-.012456
!"#$%&'()* ./
!"#$%&) -./0125689:<
!"#$%&()* ,-./01
!"#$%&'*./0123
!#$%&'(),01234578
"#$%&'( -/01
!"#$%&'()* ,-./0
!"#$%'()* ,-
!"#&(* ,-./12
!"#$%&'()* ,-
!#$%'() ,-./01345
!#%&'()*-.01256
"&'()* -./012345678
!#$%&'(),.012345789;
"#$&'()* ,-./01234
!"#%&')* ,
!$%'() ,-.
!"#%&'()*-.01467
!"#$%&'()*-.01245
#'() ,/02346789:;<?
!$()* ,-01345
!"%&)* ,-.012345
!"#$') ,-./02345
!"#%&')* -.
#%'()* ,./0123456
!"$%&()* ,-.013
!"#$%&'()* ,-./
"$%&'(),-/01345
!#$%&'(),.01234589;
!"#$%&()* ,-./0145
!"#$%&'() -./0125689
!"#$%') ,-./023
"#$%'(* -/012346
!#$%&'()* ,-.012
!"$%&()* ,-.0135678
!#$%'()* ,-012456789<=
!"#$%&'()
!"#$%&'()* ,-./0123456789:;<=
!"#$%&'()* ,-./0123456789
!"#$%&'()* ,-./012345
!"#$%&'()* ,-./01
Z%T%i%f%`%P%l%}
O!wexe
ôfpf
wexe
%S%T%_%
%S%_%
%S%T%
ôfp
!2,4,6,7
! !!!"!#!$!
{!|!}!~!
" "!"""#"$"'" ","-"."/"0"
0$1$3$4$
%!%"%#%$%%%'%
B%D%E%F%
Q%S%T%U%V%
9&:&;&<&
' '!'"'$'%'&'''(')'*' ','-'.'/'0'2'3'4'5'6'8'9':'<'='>'?'@'
-(.(/(0(1(
8(:(;(=(
(*.*/*0*1*2*3*4*5*6*7*9*:*;*<*
4 5 6 7 8 9 
!,",#,$,%,&,',
-!-"-#-$-%-&-
4-5-6-8-
#.$.%.&.'.(.).
 ...0.1.2.5.7.
WINDOWS-1251
WINDOWS-1252
WINDOWS-1256
WINDOWS-1255
WINDOWS-1258
WINDOWS-1253
WINDOWS-1250
WINDOWS-1257
WINDOWS-1254
ISO_646.IRV:1991
WINDOWS-874
CSSHIFTJIS
AVIFIL32.dll
RASAPI32.dll
iphlpapi.dll
SHLWAPI.dll
MPR.dll
WINMM.dll
VERSION.dll
GetProcessHeap
WinExec
GetWindowsDirectoryA
GetCPInfo
GetKeyState
CreateDialogIndirectParamA
UnhookWindowsHookEx
SetWindowsHookExA
GetViewportOrgEx
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
GetViewportExtEx
WINSPOOL.DRV
comdlg32.dll
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
ADVAPI32.dll
ShellExecuteA
SHELL32.dll
OLEAUT32.dll
oledlg.dll
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetCrackUrlA
InternetCanonicalizeUrlA
WININET.dll
.PAVCException@@
.PAVCNotSupportedException@@
.PAVCFileException@@
(*.prn)|*.prn|
(*.*)|*.*||
Shell32.dll
Mpr.dll
Advapi32.dll
Gdi32.dll
Kernel32.dll
(&07-034/)7 '
?? / %d]
%d / %d]
: %d]
(*.WAV;*.MID)|*.WAV;*.MID|WAV
(*.WAV)|*.WAV|MIDI
(*.MID)|*.MID|
(*.txt)|*.txt|
(*.JPG;*.BMP;*.GIF;*.ICO;*.CUR)|*.JPG;*.BMP;*.GIF;*.ICO;*.CUR|JPG
(*.JPG)|*.JPG|BMP
(*.BMP)|*.BMP|GIF
(*.GIF)|*.GIF|
(*.ICO)|*.ICO|
(*.CUR)|*.CUR|
%s:%d
windows
out.prn
%d.%d
%d / %d
%d/%d
Bogus message code %d
(%d-%d):
%ld%c
(*.avi)|*.avi
RICHED32.DLL
RICHED20.DLL
WPFT532.CNV
WPFT632.CNV
EXCEL32.CNV
write32.wpc
Windows Write
mswrd632.wpc
Word for Windows 6.0
wword5.cnv
Word for Windows 5.0
mswrd832.cnv
mswrd632.cnv
Word 6.0/95 for Windows & Macintosh
html32.cnv
operator
keywords
(*.htm;*.html)|*.htm;*.html
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP/1.0
%s <%s>
Reply-To: %s
From: %s
To: %s
Subject: %s
Date: %s
Cc: %s
%a, %d %b %Y %H:%M:%S
SMTP
VVV.dywt.com.cn
.PAVCOleException@@
.PAVCObject@@
.PAVCSimpleException@@
.PAVCMemoryException@@
.?AVCNotSupportedException@@
.PAVCResourceException@@
.PAVCUserException@@
.?AVCCmdTarget@@
.?AVCCmdUI@@
.?AVCTestCmdUI@@
.PAVCArchiveException@@
.PAVCOleDispatchException@@
zcÁ
c:\%original file name%.exe
#include "l.chs\afxres.rc" // Standard components
<?xml version="1.0" encoding="UTF-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity name="E.App" processorArchitecture="x86" version="5.1.0.0" type="win32"/><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="x86" publicKeyToken="6595b64144ccf1df" language="*" /></dependentAssembly></dependency></assembly>PADPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGX
1, 0, 6, 6
?hXXp://d.union.ijinshan.com/duba/link/grthKAVSETUPS_66_0.exe@/s
2011,09,15,1501
konlineinstaller.exe
9,0,44813,1501
&'()* ,-./
$&(*,-/14
(*.*)
1.0.0.0
2007-2011

%original file name%.exe_176_rwx_00401000_0009F000:

t$(SSh
~%UVW
u$SShe

%original file name%.exe_176_rwx_10027000_00015000:

msctls_hotkey32
TVCLHotKey
THotKey
\skinh.she
}uo,x6l5k%x-l h
9p%s m)t4`#b
e"m?c&y1`Ð<
SetViewportOrgEx
SetViewportExtEx
SetWindowsHookExA
UnhookWindowsHookEx
EnumThreadWindows
EnumChildWindows
`c%US.4/
!#$<#$#=
.text
`.rdata
@.data
.rsrc
@.UPX0
`.UPX1
`.reloc
%-^
.hk;~

KINSTALLERS_66_109992.exe_2028:

.text
`.rdata
@.data
.rsrc
KERNEL32.dll
USER32.dll
MSVCP60.dll
WS2_32.dll
MSVCRT.dll
_acmdln
%d.%d.%d.%d
User-Agent:Mozilla/4.0 (compatible; MSIE 5.00; Windows 98)
HTTP/1.1
{Konline_1A4F0F3B-5516-4338-AB9A-3A562A2761FB}
HTTP/1.1 20
hXXp://bo.duba.net:8080/pagetracer2/duba/__utm.gif?
?hXXp://d.union.ijinshan.com/duba/link/grthKAVSETUPS_66_0.exe@/s
2011,09,15,1501
konlineinstaller.exe
9,0,44813,1501


Remove it with Ad-Aware

  1. Click (here) to download and install Ad-Aware Free Antivirus.
  2. Update the definition files.
  3. Run a full scan of your computer.


Manual removal*

  1. Terminate malicious process(es) (How to End a Process With the Task Manager):

    KINSTALLERS_66_109992.exe:2028

  2. Delete the original Trojan file.
  3. Delete or disinfect the following files created/modified by the Trojan:

    %Documents and Settings%\%current user%\Local Settings\Temp\kingsoftkonline\KINSTALLERS_66_109992.exe.tmp (230271 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\ptui_ver[2].js (233 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\login[1].htm (1302 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\h[1].js (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\KINSTALLERS_66_109992.exe (59 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\21[1].gif (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\login[1].htm (1511 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\index[1].htm (562 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\c_icon_2[1].png (392 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\clearcache[1].html (934 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\big_8[1].png (1113 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\qqtubiaoad[1].htm (3 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@heima8[1].txt (626 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\ptqrshow[1].png (433 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Cookies\Current_User@heima8[2].txt (303 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\ptui_ver[1].js (175 bytes)
    %Documents and Settings%\%current user%\Cookies\[email protected][1].txt (164 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\clearcache[1].htm (2 bytes)
    %Documents and Settings%\%current user%\Cookies\[email protected][1].txt (182 bytes)
    %Documents and Settings%\%current user%\UserData\2Z89WTQV\www.cx90[1].xml (266 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\load[1].gif (771 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\h_login_17[1].js (2701 bytes)
    %Documents and Settings%\%current user%\Cookies\[email protected][1].txt (181 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\h[2].js (16 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\468X60_54502[1].jpg (13245 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\qqtbset.ini (1 bytes)
    %Documents and Settings%\%current user%\Cookies\index.dat (5784 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\desktop.ini (67 bytes)

  4. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
  5. Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

No votes yet

x

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Enjoy unique new features, lightning fast scans and a simple yet beautiful new look in our best antivirus yet!

For a quicker, lighter and more secure experience, download the all new adaware antivirus 12 now!

Download adaware antivirus 12
No thanks, continue to lavasoft.com
close x

Discover the new adaware antivirus 12

Our best antivirus yet

Download Now