Trojan.Win32.FlyStudio_42bbe53408

by malwarelabrobot on September 11th, 2015 in Malware Descriptions.

Trojan-PSW.Win32.MSNPassword.FD, Trojan.Win32.FlyStudio.FD, GenericEmailWorm.YR, TrojanFlyStudio.YR (Lavasoft MAS)
Behaviour: Trojan-PSW, Trojan, Worm, EmailWorm

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary

Dynamic Analysis

Static Analysis

Network Activity

Map

Strings from Dumps

Removals

MD5: 42bbe53408b5b20684184b74395da9f6
SHA1: 84a2ec979cbe6f4db7ca66e1f2b86cc04bf865f6
SHA256: 6eeed22e43d81c3c9c755e66292000f02c92bb2bd8c47829df147f971196e5cb
SSDeep: 49152:1e4P9QbA37C1BXMbEL836qdwk0cQHGiYYSzSY5voVU7zQY1jNQ s8KuqGaX0ToIU:5kArEqdwkLQHHhsSYt8 JBAUZLy
Size: 3485696 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6, MicrosoftVisualC, MicrosoftVisualCv50v60MFC, MicrosoftVisualC50, Armadillov171
Company: no certificate found
Created at: 2013-11-16 10:31:12
Analyzed on: WindowsXP SP3 32-bit

Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

Behaviour	Description
EmailWorm	Worm can send e-mails.

Process activity

The Trojan creates the following process(es):
No processes have been created.
The Trojan injects its code into the following process(es):

%original file name%.exe:668

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process %original file name%.exe:668 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\bg_1_20150824[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\zwsf2-3[1].gif (1759 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\game_bg[1].gif (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\c_1[1].gif (160 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\checkMobile[1].js (677 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\o[1].swf (157 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\CA7ASJVX (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\zrsp_1[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\sy_ico[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\zmxy3_20150824[2].css (24 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\111111111111111111111111111111111111111[1].htm (769 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\u=1136749690,815916792&fm=76[1].jpg (863 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\0f0000nHWaDGGJgmd7u1Zs[1].swf (711 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\nav_bg[1].gif (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\tjrm_img09[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\zm_add[1].png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\bg_6[1].gif (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\CAG1Y74L.gif (49 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\more_zb[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\pic[1].gif (719 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\lazy_iframe[1].js (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\jquery-1.2.1.pack[2].js (1740 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\tjrm_img08[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\ftbtn[1].gif (477 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\wh[1].js (2252 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\crossdomain[1].xml (889 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\logo[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\trace_news[1].js (559 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\zj_btn[1].gif (1 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\CPROID[1].xml (310 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\flash_ad_version[1].xml (119 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\click[2].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\0f00057I9_MLlocrKCGPLf[1].swf (3659 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\n_zm1[1].png (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\bg_7[1].png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\more_boss[1].gif (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\lmbtn[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\stat[1].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\zmxy3_20150824[1].css (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\petEIconv1450[1].swf (15340 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\style[1].css (337 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\libg_1[1].gif (899 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\topbg_20140506[1].jpg (4153 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\CACT2DFO.htm&cfv=11&tsr=0&tcn=1441846243&tpr=1441846242796&coa=at=image&rsi0=400&rsi1=300&tn=baidujson_patch (1291 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\go_bbs[1].gif (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\xgjv183[1].swf (295719 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\jcsp_1[1].jpg (2246 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx (1115 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\1GQ340U13[1].gif (527 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (926 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\b_2[1].gif (250 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\nova_fp[1].htm (114 bytes)
%Documents and Settings%\%current user%\Cookies\index.dat (6220 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\unilogin_package[2].js (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\t_9[1].gif (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\news_footer[1].js (961 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\tjrm_img011[1].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\10163ZO2N[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (1038 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\c[1].swf (547 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\crossdomain[1].xml (331 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\FuYun[1].swf (24485 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\c[1].php (1177 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\tgbtn[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\t_8[1].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\0f0000mUMeDPtm1xsKSa96[1].swf (759 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\CAURWTUV.swf (5872 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\bg_4[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\4399_16125310445[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\CAHCNU7N.gif (49 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\t_6[1].gif (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\0f000DTf8hHHd5tgwQ8C8f[1].swf (711 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@4399[1].txt (163 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\u=1887182047,2242671149&fm=76[1].jpg (3270 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\061051503Y1[1].jpg (4634 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@cnzz[1].txt (165 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\101634512c8[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\2GJ54T541[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\bdshare[1].js (182 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\crossdomain[1].xml (570 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@mmstat[1].txt (170 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\bg_5_20130716[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\sp_line_1[1].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\0f000DEUfr4hniEsJj_ROs[1].swf (759 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\zmxy3_20141010[2].js (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\1Q62S330N[1].gif (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\c[1].js (1928 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\logger[1].js (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\stat[1].php (1177 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\0913524M015[1].gif (84 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\u=1265655567,1529096812&fm=76[1].jpg (3150 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s8.4399.com\settings.sxx (196 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\CA638567.htm (5777 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\xml[1].xml (680 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\jquery-1.2.1.pack[1].js (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\zb_nav_20131205[1].png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\libg_3[1].gif (542 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\tjrm_img06[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\t_1[1].gif (599 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\new5[1].gif (177 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\desktop.ini (67 bytes)
C:\SkinH_EL.dll (88 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\click[1].js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\011K053B24[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\b_5[1].gif (317 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\u=1421353108,1764487604&fm=76[1].jpg (5722 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\play_hs1202[2].js (4 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (205 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\ucenter[1].js (19040 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\Commonv1270[1].swf (95193 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\libg_2[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\1016395W521[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\bdsstyle[1].css (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\zmxy3_20141010[1].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\u=3117833277,3572889005&fm=76[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\0f000PDTSGXtJ3W50fJSys[1].png (6249 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\u=1614745384,2134413757&fm=76[1].jpg (7273 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\ctrl_mo_v5[1].swf (42589 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (1521 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\right[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\bg_3[1].gif (1318 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\stat[1].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\c[2].js (2637 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\c_3[1].gif (84 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\core[1].php (73 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\unilogin_package[1].js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\icon_keys[1].gif (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\flash_ctrl_version[1].xml (530 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\4399[1].js (902 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\#SharedObjects\QEA5Z3QJ\cdn.comment.4399pk.com\seed4399Value.sxx (80 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\xgjv183[1].htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\78072[2].htm (4288 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\78072[1].htm (5157 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\ecom[1].xml (233 bytes)
%Documents and Settings%\%current user%\UserData\YJM90VAL\oXMLStore[1].xml (106 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\t_lm[1].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\t_4[1].gif (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\tjrm_img07[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\t_2[1].gif (1237 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\u=590893569,3884611603&fm=76[1].jpg (5748 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\c_4[1].gif (81 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@baidu[1].txt (198 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\02104939B23[1].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\A4399dv_base_main[1].swf (5973 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\n_mg_bg[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\xgjv183[1].htm (1744 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\scbg[1].gif (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\baiduImageRender[1].swf (638 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\b_4[1].gif (244 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\more_boss_s[1].gif (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\o[1].htm (1394 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\b_1[1].gif (610 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\CAAEB2CL.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\0f000F_vSMdFWGLTLIlBvs[1].jpg (3609 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\4399_10503158122[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\bg_9[1].gif (926 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\faspbtn[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\bds_s_v2[1].js (1753 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\4399_14294510451[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\baiduPatch[1].swf (810 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (889 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\ico_1[1].gif (44 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\hottop[1].gif (857 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\ico_ann[1].gif (1 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\#SharedObjects\QEA5Z3QJ\s8.4399.com\seed4399Value.sxx (80 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\A4399dv_base[1].swf (1629 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\lb_ico_v1[1].png (652 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\bg[1].gif (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\ico[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\gggggggggggggggggggggggggggggggggggggggg[1].htm (769 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\2F952341b8[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\shell_v2[1].js (1 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cdn.comment.4399pk.com\settings.sxx (229 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\c_2[1].gif (70 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\headerBg[1].gif (228 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\ac[1].js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\sszn[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\sc[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\ac[2].js (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\bg_8[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\4399[2].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\play_hs1202[1].js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\u=1520398955,2520422704&fm=76[1].jpg (6882 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\base[1].css (11713 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\c_5[1].gif (180 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\is[1].png (1992 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\t_3[1].gif (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\left[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\4399_11234392734[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\new_icon_1[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\logo-noborder-light[1].png (455 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\fp[1].htm (114 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\31114144J08[1].jpg (2628 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\wh[2].js (1520 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\crossdomain[2].xml (889 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\b_3[1].gif (248 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\core[2].php (764 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\0f000PMN_6_Z09Vbgll5of[1].swf (711 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\chkDomain[1].js (554 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\t_5[1].gif (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\MagicWeaponv1240[1].swf (649687 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\4399_17485812405[1].jpg (3 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\wh[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\c[1].js (0 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sol (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\play_hs1202[1].js (0 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (0 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cdn.comment.4399pk.com\settings.sol (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\xgjv183[1].htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\78072[1].htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\4399[1].js (0 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\jquery-1.2.1.pack[1].js (0 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s8.4399.com\settings.sol (0 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\www.aaa[1].xml (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\zmxy3_20141010[1].js (0 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\unilogin_package[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\click[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\ac[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\zmxy3_20150824[1].css (0 bytes)

Registry activity

The process %original file name%.exe:668 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012015091020150911]
"CacheOptions" = "11"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"@xpsp3res.dll,-20001" = "Diagnose Connection Problems..."

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"Name" = "%original file name%.exe"

[HKCU\Software\Microsoft\Direct3D\MostRecentApplication]
"Name" = "%original file name%.exe"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012015091020150911]
"CacheLimit" = "8192"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012015091020150911]
"CachePrefix" = ":2015091020150911:"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1A 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\DirectDraw\MostRecentApplication]
"ID" = "1384590672"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012015091020150911]
"CacheRepair" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "28 CF 18 E1 CC 11 98 03 E4 07 D8 AE 21 3E 25 35"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012015091020150911]
"CachePath" = "%USERPROFILE%\Local Settings\History\History.IE5\MSHist012015091020150911\"

[HKCU\Software\Microsoft\Multimedia\DrawDib]
"vga.drv 1276x846x32(BGR 0)" = "31,31,31,31"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following registry key(s):

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012014031720140318]

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

Dropped PE files

MD5	File path
147127382e001f495d1842ee7a9e7912	c:\SkinH_EL.dll

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name: ??
Product Name: ?????
Product Version: 3.0.9.7
Legal Copyright: ?? ????
Legal Trademarks:
Original Filename:
Internal Name:
File Version: 3.0.9.7
File Description: ?????
Comments: ??????????(http://www.eyuyan.com)
Language: Language Neutral

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Section MD5
.text	4096	966656	966656	4.59486	4f9829b0d8f143c2da14ae696b61ed4a
.rdata	970752	2357560	2359296	5.23291	3b0dab475d404b17f6458cb78df43d47
.data	3330048	393482	114688	3.65953	1c25e89336f17eca25c113a44c66619f
.rsrc	3727360	40960	40960	3.89926	17073b281e3cb5671a7a30cb6133927d

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

URLs

URL	IP
hxxp://www.vip5866.net/xiaoyao/111111111111111111111111111111111111111.html	162.218.54.132
hxxp://www.vip5866.net/xiaoyao/111111111111111111111111111111111111111.html?WebShieldDRSessionVerify=E4zdt2CZbuOfpIUMCUJr	162.218.54.132
hxxp://4399hw.xdwscache.ourglb0.com/flash/78072.htm
hxxp://www.vip5866.net/xiaoyao/gggggggggggggggggggggggggggggggggggggggg.html	162.218.54.132
hxxp://e.xdwscache.ourglb0.com/js/checkMobile.js
hxxp://4399hw.xdwscache.ourglb0.com/css/zmxy3_20150824.css
hxxp://4399hw.xdwscache.ourglb0.com/jss/jquery-1.2.1.pack.js
hxxp://4399hw.xdwscache.ourglb0.com/jss/trace_news.js
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/logo.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/bg.gif
hxxp://e.xdwscache.ourglb0.com/uploads/userup/1507/2F952341b8.jpg
hxxp://4399hw.xdwscache.ourglb0.com/moeryongshi/images/headerBg.gif
hxxp://4399hw.xdwscache.ourglb0.com/imageyx/seer2012/hottop.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/go_bbs.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/sc.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/topbg_20140506.jpg
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/game_bg.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/lb_ico_v1.png
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/zj_btn.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3/zm_add.png
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy2/icon_keys.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/bg_1_20150824.gif
hxxp://other.all.4399yyy.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.htm
hxxp://other.all.4399yyy.com/4399swf/js/chkDomain.js
hxxp://wmjs.wshifen.com/cpro/ui/c.js
hxxp://4399hw.xdwscache.ourglb0.com/resource/css/base.css
hxxp://4399hw.xdwscache.ourglb0.com/resource/ucenter.js
hxxp://4399hw.xdwscache.ourglb0.com/flashUniLogin/css/style.css?v=20121016
hxxp://other.all.4399yyy.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.swf
hxxp://4399hw.xdwscache.ourglb0.com/jss/unilogin_package.js
hxxp://cb.e.shifen.com/acom?di=u2279006&dcb=BAIDU_DUP2_define&dtm=BAIDU_DUP2_SETJSONADSLOT&dbv=0&dci=0&dri=0&dis=0&dai=1&dds=&drs=3&dvi=1441600610&ltu=http://www.4399.com/flash/78072.htm&liu=&ltr=&lcr=&ps=784x-2&psr=1276x846&par=1276x818&pcs=951x668&pss=990x880&pis=-1x-1&cfv=11&ccd=32&chi=0&cja=true&cpl=0&cmi=0&cce=true&col=en-us&cec=gb2312&cdo=-1&tsr=266&tlm=1441793824&tcn=1441846230&tpr=1441846229578&dpt=none&coa=&dpr=1&ti=é€ æ¢¦è¥¿æ¸¸3,é€ æ¢¦è¥¿æ¸¸å¤§é—¹å¤©åºç¯‡,4399é€ æ¢¦è¥¿æ¸¸3å°æ¸¸æˆ&baidu_id=
hxxp://cb.e.shifen.com/acom?adn=0&at=128&aurl=&cad=1&ccd=32&cec=gb2312&cfv=11&ch=0&col=en-us&conOP=0&cpa=1&cpro_lu=1,#dfe4f9,#000000,å®‹ä½“&dai=1&dis=0&layout_filter=rank&ltr=&ltu=http://www.4399.com/flash/78072.htm&lunum=6&n=80054191_cpr&pcs=951x668&pis=10000x10000&ps=784x-2&psr=1276x846&pss=990x880&qn=1a28bcd7a302e760&rad=&rsi0=980&rsi1=90&rsi5=4&rss0=&rss1=&rss2=&rss3=&rss4=&rss5=&rss6=&rss7=&scale=&skin=tabcloud_skin_5&stid=5&td_id=2279006&tn=baiduCustSTagLinkUnit&tpr=1441846229578&ts=1&version=2.0&xuanting=0&dtm=BAIDU_DUP2_SETJSONADSLOT&dc=2&di=u2279006&ti=é€ æ¢¦è¥¿æ¸¸3,é€ æ¢¦è¥¿æ¸¸å¤§é—¹å¤©åºç¯‡,4399é€ æ¢¦è¥¿æ¸¸3å°æ¸¸æˆ&tt=1441846229312.266.2281.2281
hxxp://e.xdwscache.ourglb0.com/uploads/userup/1405/101634512c8.jpg
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/c_1.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/bg_5_20130716.gif
hxxp://e.xdwscache.ourglb0.com/uploads/userup/1405/10163ZO2N.jpg
hxxp://4399hw.xdwscache.ourglb0.com/upload_pic/2015/4/20/4399_16125310445.jpg
hxxp://stat.d.4399api.net/crossdomain.xml
hxxp://4399hw.xdwscache.ourglb0.com/upload_pic/2015/6/5/4399_10503158122.jpg
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/bg_6.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/libg_1.gif
hxxp://e.xdwscache.ourglb0.com/uploads/userup/1405/1016395W521.jpg
hxxp://4399hw.xdwscache.ourglb0.com/upload_pic/2012/tjyx/tjrm_img07.jpg
hxxp://4399hw.xdwscache.ourglb0.com/upload_pic/2012/tjyx/tjrm_img09.jpg
hxxp://4399hw.xdwscache.ourglb0.com/upload_pic/2015/6/20/4399_14294510451.jpg
hxxp://4399hw.xdwscache.ourglb0.com/upload_pic/2012/tjyx/tjrm_img011.jpg
hxxp://e.xdwscache.ourglb0.com/upload_pic/2015/6/9/4399_11234392734.jpg
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/sszn.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/nav_bg.gif
hxxp://4399hw.xdwscache.ourglb0.com/upload_pic/2012/tjyx/tjrm_img06.jpg
hxxp://4399hw.xdwscache.ourglb0.com/upload_pic/2015/3/12/4399_17485812405.jpg
hxxp://e.xdwscache.ourglb0.com/uploads/userup/1502/02104939B23.jpg
hxxp://e.xdwscache.ourglb0.com/uploads/userup/1504/011K053B24.jpg
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/scbg.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3/bg_7.png
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3/n_mg_bg.png
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/c_2.gif
hxxp://t1.n.shifen.com/it/u=1136749690,815916792&fm=76
hxxp://t1.n.shifen.com/it/u=1421353108,1764487604&fm=76
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/ico_1.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/c_3.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/lmbtn.png
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/bg_8.png
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/tgbtn.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/ftbtn.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/faspbtn.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/more_boss.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/libg_2.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/more_boss_s.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/more_zb.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/bg_9.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/ico_ann.gif
hxxp://e.xdwscache.ourglb0.com/uploads/userup/1508/2GJ54T541.jpg
hxxp://wn.pos.e.shifen.com/adx.php?c=d25pZD1iOGYwNjZhY2YyNjZjMzljAHM9YjhmMDY2YWNmMjY2YzM5YwB0PTE0NDE4NDYyMjUAc2U9MQBidT00AHByaWNlPVZmRFQwUUFLT19aN2pFcGdXNUlBOHFnOEQ3dVllNzE2MWJ5ZTlBAGNoYXJnZV9wcmljZT1WZkRUMFFBS09fWjdqRXBnVzVJQThxZzhEN3VZZTcxNjFieWU5QQBzaGFyaW5nX3ByaWNlPVZmRFQwUUFLT19aN2pFcGdXNUlBOHFnOEQ3dVllNzE2MWJ5ZTlBAHdpbl9kc3A9NABjaG1kPTEAYmRpZD1ENDVEOEIxRjMyNzBBMUQ2QjQ4RjBDRDA5MENDRDVBQQBjcHJvaWQ9AGJjaG1kPTAAdj0xAGk9Mzk0OWEyMzU
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/c_4.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/t_lm.png
hxxp://wmjs.wshifen.com/cpro/ui/noexpire/img/2.0.1/logo-noborder-light.png
hxxp://e.xdwscache.ourglb0.com/uploads/userup/1508/31114144J08.jpg
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/t_5.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/t_6.gif
hxxp://stat.d.4399api.net/flash_ctrl_version.xml?ran=57098.376750946045
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3/jcsp_1.jpg
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3/sp_line_1.jpg
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/c_5.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/t_9.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3/zb_nav_20131205.png
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/libg_3.gif
hxxp://4399hw.xdwscache.ourglb0.com/jss/lazy_iframe.js
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/t_1.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3/n_zm1.png
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3/bg_3.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/bg_4.png
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/b_1.gif
hxxp://t1.n.shifen.com/it/u=1265655567,1529096812&fm=76
hxxp://e.xdwscache.ourglb0.com/new5.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/left.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/right.gif
hxxp://t1.n.shifen.com/it/u=590893569,3884611603&fm=76
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/t_2.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/b_2.gif
hxxp://4399hw.xdwscache.ourglb0.com/upload_pic/2012/tjyx/tjrm_img08.jpg
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/t_3.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/b_3.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/t_4.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/b_4.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3/new_icon_1.png
hxxp://t1.n.shifen.com/it/u=1520398955,2520422704&fm=76
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3/zrsp_1.jpg
hxxp://t1.n.shifen.com/it/u=1887182047,2242671149&fm=76
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/b_5.gif
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/t_8.png
hxxp://4399hw.xdwscache.ourglb0.com/jss/news_footer.js
hxxp://e.xdwscache.ourglb0.com/uploads/userup/1404/0913524M015.gif
hxxp://e.xdwscache.ourglb0.com/uploads/userup/1509/061051503Y1.jpg
hxxp://e.xdwscache.ourglb0.com/uploads/userup/1302/1Q62S330N.gif
hxxp://4399hw.xdwscache.ourglb0.com/crossdomain.xml
hxxp://t1.n.shifen.com/it/u=1614745384,2134413757&fm=76
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/newaobidao/ico.gif
hxxp://4399hw.xdwscache.ourglb0.com/js/bdshare.js?t=8103
hxxp://4399hw.xdwscache.ourglb0.com/control/zwsf2-3.gif?20120719
hxxp://4399hw.xdwscache.ourglb0.com/control/A4399dv_base.swf?20150512
hxxp://e.xdwscache.ourglb0.com/uploads/userup/1209/1GQ340U13.gif
hxxp://t1.n.shifen.com/it/u=3117833277,3572889005&fm=76
hxxp://4399hw.xdwscache.ourglb0.com/jss/zmxy3_20141010.js
hxxp://stat.d.4399api.net/flash_ad_version.xml?ran=0.453344420529902
hxxp://4399hw.xdwscache.ourglb0.com/control/A4399dv_base_main.swf?150527
hxxp://stat.d.4399api.net/flash_flow/log.js?g=100015389&u=4344a642c7b74da93f57eb6c358553c1&s=0190d1b28544545789b5e91707f4d317&r=14228085801
hxxp://stat.d.4399api.net/xml.php?ran=5480.840429663658&gameid=100015389&url=http://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.htm
hxxp://share.n.shifen.com/static/js/shell_v2.js?t=3
hxxp://share.n.shifen.com/static/js/logger.js?cdnversion=400513
hxxp://share.n.shifen.com/static/js/bds_s_v2.js?cdnversion=400513
hxxp://cb.e.shifen.com/crossdomain.xml
hxxp://share.n.shifen.com/static/css/bdsstyle.css?cdnversion=20131219
hxxp://cb.e.shifen.com/ecom?di=62872&tm=BAIDU_CLB_XML&asp_url=4399.com&return_type=1&ran=4343.795664608479
hxxp://share.n.shifen.com/static/images/is.png?cdnversion=20131219
hxxp://4399hw.xdwscache.ourglb0.com/flashzt/img/zmxy3_20120913/sy_ico.gif
hxxp://4399hw.xdwscache.ourglb0.com/jss/play_hs1202.js
hxxp://4399hw.xdwscache.ourglb0.com/jss/4399.js
hxxp://cpro.e.shifen.com/cpro/ui/baiduPatch.swf
hxxp://4399hw.xdwscache.ourglb0.com/js/click.js
hxxp://cb.e.shifen.com/ecom?di=u2075136&dtm=BAIDU_DUP_JSONTEMPLATE&dcf=2&dri=0&dvi=0.0&ltu=http://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.htm&cfv=11&tsr=0&tcn=1441846243&tpr=1441846242796&coa=at=image&rsi0=400&rsi1=300&tn=baidujson_patch
hxxp://all.cnzz.com.danuoyi.tbcache.com/c.php?id=30039538
hxxp://wmjs.wshifen.com/cpro/ui/renderer/baiduImageRender.swf
hxxp://oq.cnzz.com/stat.htm?id=30039538&r=&lg=en-us&ntime=none&cnzz_eid=1330140093-1441843467-&showp=1276x846&t=é€ æ¢¦è¥¿æ¸¸3,é€ æ¢¦è¥¿æ¸¸å¤§é—¹å¤©åºç¯‡,4399...&h=1&rnd=42606933	198.11.132.200
hxxp://all.cnzz.com.danuoyi.tbcache.com/core.php?web_id=30039538&t=q
hxxp://wn.pos.e.shifen.com/adx.php?c=d25pZD0xOGRjZDc5MjAxMzc1YmY5AHM9MThkY2Q3OTIwMTM3NWJmOQB0PTE0NDE4NDYyMzcAc2U9MQBidT0xAHByaWNlPVZmRFQzUUFKRGhKN2pFcGdXNUlBOHU5Q2k2eVZyejlpZzMwSGZ3AGNoYXJnZV9wcmljZT1WZkRUM1FBSkRoSjdqRXBnVzVJQTh1OUNpNnlWZ09VbGhBZ1NGQQBzaGFyaW5nX3ByaWNlPVZmRFQzUUFKRGhKN2pFcGdXNUlBOHU5Q2k2eVZnT1VsaEFnU0ZBAHdpbl9kc3A9MQBjaG1kPTEAYmRpZD1ENDVEOEIxRjMyNzBBMUQ2QjQ4RjBDRDA5MENDRDVBQQBjcHJvaWQ9AGJjaG1kPTAAdj0xAGk9OTA2ZDhkNzY
hxxp://stat.d.4399api.net/flash_flow/view.js?g=100015389&u=4344a642c7b74da93f57eb6c358553c1&s=0190d1b28544545789b5e91707f4d317&a=700&r=46246037213
hxxp://all.cnzz.com.danuoyi.tbcache.com/stat.php?id=4073713&web_id=4073713&show=pic
hxxp://all.cnzz.com.danuoyi.tbcache.com/core.php?web_id=4073713&show=pic&t=z
hxxp://oq.cnzz.com/stat.htm?id=4073713&r=&lg=en-us&ntime=none&cnzz_eid=1713335086-1441841440-&showp=1276x846&t=é€ æ¢¦è¥¿æ¸¸3,é€ æ¢¦è¥¿æ¸¸å¤§é—¹å¤©åºç¯‡,4399...&h=1&rnd=997698482	198.11.132.200
hxxp://wmpic.wshifen.com/media/v1/0f000DlV0rvHMAROYHhQOs.swf?url_type=1&id_283672787=media/v1/0f000F_vSMdFWGLTLIlBvs.jpg&id_1821494960=media/v1/0f000DEUfr4hniEsJj_ROs.swf&id_1821138705=media/v1/0f0000nHWaDGGJgmd7u1Zs.swf&id_283559607=media/v1/0f00057I9_MLlocrKCGPLf.swf&id_1821923174=media/v1/0f000PMN_6_Z09Vbgll5of.swf&id_317482787=media/v1/0f000DTf8hHHd5tgwQ8C8f.swf&id_283062295=media/v1/0f000PDTSGXtJ3W50fJSys.png&id_1843287851=media/v1/0f0000mUMeDPtm1xsKSa96.swf&snapshot=&
hxxp://all.cnzz.com.danuoyi.tbcache.com/img/pic.gif
hxxp://cb.e.shifen.com/wh/o.htm?ltr=&cf=u
hxxp://cnzz.mmstat.com/9.gif?abc=1&rnd=1176698887	42.120.219.171
hxxp://cnzz.mmstat.com/app.gif?&cna=4MF3Ds1dPwACAcLyYNo6RgNf	42.120.219.171
hxxp://wmpic.wshifen.com/media/v1/0f000DEUfr4hniEsJj_ROs.swf
hxxp://wmpic.wshifen.com/media/v1/0f000F_vSMdFWGLTLIlBvs.jpg
hxxp://ecomcbjs.wshifen.com/tpl/wh.js
hxxp://static.n.shifen.com/v.gif?pid=307&type=3071&sc=992,4842,1276,818&desturl=&apitype=1&linkid=iedi0vbq4nh&velo_load=2219&velo_cssload=500&velo_jsLoad=1781&cite_uid=480925&cite_type=1&cite_mini=1
hxxp://wmpic.wshifen.com/media/v1/0f0000nHWaDGGJgmd7u1Zs.swf
hxxp://cb.e.shifen.com/wh/c.swf?v=3
hxxp://ecomcbjs.wshifen.com/tpl/ac.js
hxxp://cb.e.shifen.com/wh/o.swf?v=1
hxxp://wmpic.wshifen.com/media/v1/0f00057I9_MLlocrKCGPLf.swf
hxxp://wmpic.wshifen.com/media/v1/0f000PMN_6_Z09Vbgll5of.swf
hxxp://wmpic.wshifen.com/media/v1/0f000DTf8hHHd5tgwQ8C8f.swf
hxxp://wmpic.wshifen.com/media/v1/0f000PDTSGXtJ3W50fJSys.png
hxxp://wmpic.wshifen.com/media/v1/0f0000mUMeDPtm1xsKSa96.swf
hxxp://eclick.e.shifen.com/nova_fp.htm?br=6&fp=6ACA8294BA753F17232790FBE9460180&fp2=6ACA8294BA753F17232790FBE9460180&ci=&bi=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1&im=0&wf=0&ct=2016&bp=&m=&t=0&ft=&_=1441846250687
hxxp://eclick.e.shifen.com/fp.htm?ci=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1&cn=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1&cu=&cl=&cf=&ce=&ff=u&cuid=&cuid2=&de=&bp=&nip=&_=1441846250281
hxxp://e.pos.e.shifen.com/b.php
hxxp://4399hw.xdwscache.ourglb0.com/control/ctrl_mo_v5.swf?20150416
hxxp://other.all.4399yyy.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/MagicWeaponv1240.swf
hxxp://other.all.4399yyy.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/FuYun.swf
hxxp://stat.d.4399api.net/flash_flow/end.js?g=100015389&u=4344a642c7b74da93f57eb6c358553c1&s=0190d1b28544545789b5e91707f4d317&a=700&r=13680342072
hxxp://stat.d.4399api.net/flashflowstatis/submitflowstatis.php?gameid=100015389&seedvalue=98f26cf2acbc7f1bbd3e193244e56347&adid=999&gamekey=asdf&nocache=1441846262031&os=Windows XP&lng=en&hosturl=hxxp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.htm&scres=1276x846&playurl=hxxp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.swf&fp=WIN 11,6,602,168&adLoadTime=0&adPlayTime=0&browser=Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)&ctrVer=5
hxxp://cpro.baidu.com/cpro/ui/baiduPatch.swf	58.217.200.77
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/libg_2.gif	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3/zm_add.png	203.130.61.92
hxxp://newsimg.5054399.com/uploads/userup/1507/2F952341b8.jpg	115.231.20.54
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/c_5.gif	203.130.61.92
hxxp://cpro.baidustatic.com/cpro/ui/c.js
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/sc.gif	203.130.61.92
hxxp://imga1.5054399.com/upload_pic/2012/tjyx/tjrm_img06.jpg	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3/new_icon_1.png	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/bg_1_20150824.gif	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/right.gif	203.130.61.92
hxxp://oz.cnzz.com/stat.htm?id=4073713&r=&lg=en-us&ntime=none&cnzz_eid=1713335086-1441841440-&showp=1276x846&t=é€ æ¢¦è¥¿æ¸¸3,é€ æ¢¦è¥¿æ¸¸å¤§é—¹å¤©åºç¯‡,4399...&h=1&rnd=997698482	198.11.132.200
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/bg_8.png	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3/jcsp_1.jpg	203.130.61.92
hxxp://stat.api.4399.com/flash_flow/end.js?g=100015389&u=4344a642c7b74da93f57eb6c358553c1&s=0190d1b28544545789b5e91707f4d317&a=700&r=13680342072	115.182.52.104
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/sszn.gif	203.130.61.92
hxxp://ptlogin.3304399.net/resource/css/base.css	203.130.61.92
hxxp://cpro.baidustatic.com/cpro/ui/renderer/baiduImageRender.swf
hxxp://www.4399.com/flashzt/img/newaobidao/ico.gif	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3/bg_7.png	203.130.61.92
hxxp://t11.baidu.com/it/u=1136749690,815916792&fm=76	180.97.33.30
hxxp://cb.baidu.com/ecom?di=62872&tm=BAIDU_CLB_XML&asp_url=4399.com&return_type=1&ran=4343.795664608479	115.239.210.141
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/t_lm.png	203.130.61.92
hxxp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.swf	119.147.149.116
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/more_zb.gif	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/more_boss_s.gif	203.130.61.92
hxxp://t12.baidu.com/it/u=1520398955,2520422704&fm=76	180.97.33.30
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/t_8.png	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/left.gif	203.130.61.92
hxxp://ubmcmm.baidustatic.com/media/v1/0f000DlV0rvHMAROYHhQOs.swf?url_type=1&id_283672787=media/v1/0f000F_vSMdFWGLTLIlBvs.jpg&id_1821494960=media/v1/0f000DEUfr4hniEsJj_ROs.swf&id_1821138705=media/v1/0f0000nHWaDGGJgmd7u1Zs.swf&id_283559607=media/v1/0f00057I9_MLlocrKCGPLf.swf&id_1821923174=media/v1/0f000PMN_6_Z09Vbgll5of.swf&id_317482787=media/v1/0f000DTf8hHHd5tgwQ8C8f.swf&id_283062295=media/v1/0f000PDTSGXtJ3W50fJSys.png&id_1843287851=media/v1/0f0000mUMeDPtm1xsKSa96.swf&snapshot=&
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/bg.gif	203.130.61.92
hxxp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.htm	119.147.149.116
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/go_bbs.gif	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/lb_ico_v1.png	203.130.61.92
hxxp://ubmcmm.baidustatic.com/media/v1/0f000F_vSMdFWGLTLIlBvs.jpg
hxxp://newsimg.5054399.com/uploads/userup/1405/10163ZO2N.jpg	115.231.20.54
hxxp://cb.baidu.com/crossdomain.xml	115.239.210.141
hxxp://c.cnzz.com/core.php?web_id=4073713&show=pic&t=z	195.27.31.246
hxxp://s4.img4399.com/flashUniLogin/css/style.css?v=20121016	203.130.61.92
hxxp://pos.baidu.com/acom?adn=0&at=128&aurl=&cad=1&ccd=32&cec=gb2312&cfv=11&ch=0&col=en-us&conOP=0&cpa=1&cpro_lu=1,#dfe4f9,#000000,å®‹ä½“&dai=1&dis=0&layout_filter=rank&ltr=&ltu=http://www.4399.com/flash/78072.htm&lunum=6&n=80054191_cpr&pcs=951x668&pis=10000x10000&ps=784x-2&psr=1276x846&pss=990x880&qn=1a28bcd7a302e760&rad=&rsi0=980&rsi1=90&rsi5=4&rss0=&rss1=&rss2=&rss3=&rss4=&rss5=&rss6=&rss7=&scale=&skin=tabcloud_skin_5&stid=5&td_id=2279006&tn=baiduCustSTagLinkUnit&tpr=1441846229578&ts=1&version=2.0&xuanting=0&dtm=BAIDU_DUP2_SETJSONADSLOT&dc=2&di=u2279006&ti=é€ æ¢¦è¥¿æ¸¸3,é€ æ¢¦è¥¿æ¸¸å¤§é—¹å¤©åºç¯‡,4399é€ æ¢¦è¥¿æ¸¸3å°æ¸¸æˆ&tt=1441846229312.266.2281.2281	115.239.210.141
hxxp://newsimg.5054399.com/uploads/userup/1405/1016395W521.jpg	115.231.20.54
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/nav_bg.gif	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3/n_zm1.png	203.130.61.92
hxxp://stat.api.4399.com/flash_ad_version.xml?ran=0.453344420529902	115.182.52.104
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/ico_1.gif	203.130.61.92
hxxp://newsimg.5054399.com/uploads/userup/1209/1GQ340U13.gif	115.231.20.54
hxxp://newsimg.5054399.com/uploads/userup/1508/2GJ54T541.jpg	115.231.20.54
hxxp://newsimg.5054399.com/js/checkMobile.js	115.231.20.54
hxxp://imga5.5054399.com/upload_pic/2015/6/9/4399_11234392734.jpg	203.130.61.92
hxxp://imga3.5054399.com/upload_pic/2015/4/20/4399_16125310445.jpg	203.130.61.92
hxxp://pcookie.cnzz.com/app.gif?&cna=4MF3Ds1dPwACAcLyYNo6RgNf	42.120.219.171
hxxp://s8.4399.com/4399swf/js/chkDomain.js	119.147.149.116
hxxp://bdimg.share.baidu.com/static/css/bdsstyle.css?cdnversion=20131219	61.135.162.21
hxxp://stat.api.4399.com/xml.php?ran=5480.840429663658&gameid=100015389&url=http://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.htm	115.182.52.104
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/tgbtn.gif	203.130.61.92
hxxp://www.4399.com/flash/78072.htm	203.130.61.92
hxxp://www.4399.com/jss/zmxy3_20141010.js	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/b_1.gif	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3/sp_line_1.jpg	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/bg_6.gif	203.130.61.92
hxxp://wn.pos.baidu.com/adx.php?c=d25pZD1iOGYwNjZhY2YyNjZjMzljAHM9YjhmMDY2YWNmMjY2YzM5YwB0PTE0NDE4NDYyMjUAc2U9MQBidT00AHByaWNlPVZmRFQwUUFLT19aN2pFcGdXNUlBOHFnOEQ3dVllNzE2MWJ5ZTlBAGNoYXJnZV9wcmljZT1WZkRUMFFBS09fWjdqRXBnVzVJQThxZzhEN3VZZTcxNjFieWU5QQBzaGFyaW5nX3ByaWNlPVZmRFQwUUFLT19aN2pFcGdXNUlBOHFnOEQ3dVllNzE2MWJ5ZTlBAHdpbl9kc3A9NABjaG1kPTEAYmRpZD1ENDVEOEIxRjMyNzBBMUQ2QjQ4RjBDRDA5MENDRDVBQQBjcHJvaWQ9AGJjaG1kPTAAdj0xAGk9Mzk0OWEyMzU	180.149.131.90
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/c_4.gif	203.130.61.92
hxxp://dup.baidustatic.com/tpl/ac.js
hxxp://newsimg.5054399.com/uploads/userup/1509/061051503Y1.jpg	115.231.20.54
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/b_2.gif	203.130.61.92
hxxp://www.4399.com/jss/unilogin_package.js	203.130.61.92
hxxp://ubmcmm.baidustatic.com/media/v1/0f00057I9_MLlocrKCGPLf.swf
hxxp://news.4399.com/js/bdshare.js?t=8103	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/c_3.gif	203.130.61.92
hxxp://nsclick.baidu.com/v.gif?pid=307&type=3071&sc=992,4842,1276,818&desturl=&apitype=1&linkid=iedi0vbq4nh&velo_load=2219&velo_cssload=500&velo_jsLoad=1781&cite_uid=480925&cite_type=1&cite_mini=1	115.239.211.92
hxxp://pos.baidu.com/wh/o.htm?ltr=&cf=u	115.239.210.141
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/topbg_20140506.jpg	203.130.61.92
hxxp://newsimg.5054399.com/uploads/userup/1404/0913524M015.gif	115.231.20.54
hxxp://ubmcmm.baidustatic.com/media/v1/0f000PDTSGXtJ3W50fJSys.png
hxxp://www.4399.com/jss/4399.js	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/lmbtn.png	203.130.61.92
hxxp://ptlogin.3304399.net/resource/ucenter.js	203.130.61.92
hxxp://ubmcmm.baidustatic.com/media/v1/0f000DEUfr4hniEsJj_ROs.swf
hxxp://bdimg.share.baidu.com/static/js/logger.js?cdnversion=400513	61.135.162.21
hxxp://newsimg.5054399.com/uploads/userup/1405/101634512c8.jpg	115.231.20.54
hxxp://pos.baidu.com/wh/o.swf?v=1	115.239.210.141
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/bg_4.png	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/b_4.gif	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/sy_ico.gif	203.130.61.92
hxxp://imga2.5054399.com/upload_pic/2012/tjyx/tjrm_img07.jpg	203.130.61.92
hxxp://bdimg.share.baidu.com/static/js/bds_s_v2.js?cdnversion=400513	61.135.162.21
hxxp://c.cnzz.com/core.php?web_id=30039538&t=q	195.27.31.246
hxxp://ubmcmm.baidustatic.com/media/v1/0f000PMN_6_Z09Vbgll5of.swf
hxxp://www.4399.com/jss/play_hs1202.js	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/c_1.gif	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/libg_1.gif	203.130.61.92
hxxp://newsimg.5054399.com/uploads/userup/1508/31114144J08.jpg	115.231.20.54
hxxp://cdn.comment.4399pk.com/crossdomain.xml	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/t_5.gif	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/bg_5_20130716.gif	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/faspbtn.gif	203.130.61.92
hxxp://t10.baidu.com/it/u=1265655567,1529096812&fm=76	180.97.33.30
hxxp://imga3.5054399.com/upload_pic/2012/tjyx/tjrm_img09.jpg	203.130.61.92
hxxp://www.4399.com/jss/news_footer.js	203.130.61.92
hxxp://newsimg.5054399.com/new5.gif	115.231.20.54
hxxp://pos.baidu.com/crossdomain.xml	115.239.210.141
hxxp://www.4399.com/flashzt/img/zmxy3/n_mg_bg.png	203.130.61.92
hxxp://bdimg.share.baidu.com/static/images/is.png?cdnversion=20131219	61.135.162.21
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/game_bg.gif	203.130.61.92
hxxp://cdn.comment.4399pk.com/control/ctrl_mo_v5.swf?20150416	203.130.61.92
hxxp://wn.pos.baidu.com/adx.php?c=d25pZD0xOGRjZDc5MjAxMzc1YmY5AHM9MThkY2Q3OTIwMTM3NWJmOQB0PTE0NDE4NDYyMzcAc2U9MQBidT0xAHByaWNlPVZmRFQzUUFKRGhKN2pFcGdXNUlBOHU5Q2k2eVZyejlpZzMwSGZ3AGNoYXJnZV9wcmljZT1WZkRUM1FBSkRoSjdqRXBnVzVJQTh1OUNpNnlWZ09VbGhBZ1NGQQBzaGFyaW5nX3ByaWNlPVZmRFQzUUFKRGhKN2pFcGdXNUlBOHU5Q2k2eVZnT1VsaEFnU0ZBAHdpbl9kc3A9MQBjaG1kPTEAYmRpZD1ENDVEOEIxRjMyNzBBMUQ2QjQ4RjBDRDA5MENDRDVBQQBjcHJvaWQ9AGJjaG1kPTAAdj0xAGk9OTA2ZDhkNzY	180.149.131.90
hxxp://bdimg.share.baidu.com/static/js/shell_v2.js?t=3	61.135.162.21
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/scbg.gif	203.130.61.92
hxxp://eclick.baidu.com/fp.htm?ci=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1&cn=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1&cu=&cl=&cf=&ce=&ff=u&cuid=&cuid2=&de=&bp=&nip=&_=1441846250281	123.125.115.164
hxxp://imga4.5054399.com/upload_pic/2012/tjyx/tjrm_img011.jpg	203.130.61.92
hxxp://icon.cnzz.com/img/pic.gif	195.27.31.246
hxxp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/FuYun.swf	119.147.149.116
hxxp://cdn.comment.4399pk.com/control/A4399dv_base.swf?20150512	203.130.61.92
hxxp://newsimg.5054399.com/uploads/userup/1504/011K053B24.jpg	115.231.20.54
hxxp://pos.baidu.com/wh/c.swf?v=3	115.239.210.141
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/libg_3.gif	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/t_4.gif	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/ftbtn.gif	203.130.61.92
hxxp://stat.api.4399.com/crossdomain.xml	115.182.52.104
hxxp://stat.api.4399.com/flash_flow/view.js?g=100015389&u=4344a642c7b74da93f57eb6c358553c1&s=0190d1b28544545789b5e91707f4d317&a=700&r=46246037213	115.182.52.104
hxxp://w.cnzz.com/c.php?id=30039538	1.99.192.14
hxxp://t11.baidu.com/it/u=1614745384,2134413757&fm=76	180.97.33.30
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/t_9.gif	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3/zrsp_1.jpg	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/more_boss.gif	203.130.61.92
hxxp://cpro.baidustatic.com/cpro/ui/noexpire/img/2.0.1/logo-noborder-light.png
hxxp://stat.api.4399.com/flashflowstatis/submitflowstatis.php?gameid=100015389&seedvalue=98f26cf2acbc7f1bbd3e193244e56347&adid=999&gamekey=asdf&nocache=1441846262031&os=Windows XP&lng=en&hosturl=hxxp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.htm&scres=1276x846&playurl=hxxp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.swf&fp=WIN 11,6,602,168&adLoadTime=0&adPlayTime=0&browser=Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)&ctrVer=5	115.182.52.104
hxxp://stat.api.4399.com/flash_flow/log.js?g=100015389&u=4344a642c7b74da93f57eb6c358553c1&s=0190d1b28544545789b5e91707f4d317&r=14228085801	115.182.52.104
hxxp://ubmcmm.baidustatic.com/media/v1/0f000DTf8hHHd5tgwQ8C8f.swf
hxxp://www.4399.com/jss/jquery-1.2.1.pack.js	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/t_1.gif	203.130.61.92
hxxp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/MagicWeaponv1240.swf	119.147.149.116
hxxp://stat.api.4399.com/flash_ctrl_version.xml?ran=57098.376750946045	115.182.52.104
hxxp://www.4399.com/jss/lazy_iframe.js	203.130.61.92
hxxp://dup.baidustatic.com/tpl/wh.js
hxxp://t11.baidu.com/it/u=1887182047,2242671149&fm=76	180.97.33.30
hxxp://t10.baidu.com/it/u=3117833277,3572889005&fm=76	180.97.33.30
hxxp://s25.cnzz.com/stat.php?id=4073713&web_id=4073713&show=pic	1.99.192.16
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/logo.gif	203.130.61.92
hxxp://imga4.5054399.com/upload_pic/2015/6/5/4399_10503158122.jpg	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/bg_9.gif	203.130.61.92
hxxp://4399stat.5054399.com/js/click.js	203.130.61.92
hxxp://pos.baidu.com/ecom?di=u2075136&dtm=BAIDU_DUP_JSONTEMPLATE&dcf=2&dri=0&dvi=0.0&ltu=http://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.htm&cfv=11&tsr=0&tcn=1441846243&tpr=1441846242796&coa=at=image&rsi0=400&rsi1=300&tn=baidujson_patch	115.239.210.141
hxxp://pos.baidu.com/acom?di=u2279006&dcb=BAIDU_DUP2_define&dtm=BAIDU_DUP2_SETJSONADSLOT&dbv=0&dci=0&dri=0&dis=0&dai=1&dds=&drs=3&dvi=1441600610&ltu=http://www.4399.com/flash/78072.htm&liu=&ltr=&lcr=&ps=784x-2&psr=1276x846&par=1276x818&pcs=951x668&pss=990x880&pis=-1x-1&cfv=11&ccd=32&chi=0&cja=true&cpl=0&cmi=0&cce=true&col=en-us&cec=gb2312&cdo=-1&tsr=266&tlm=1441793824&tcn=1441846230&tpr=1441846229578&dpt=none&coa=&dpr=1&ti=é€ æ¢¦è¥¿æ¸¸3,é€ æ¢¦è¥¿æ¸¸å¤§é—¹å¤©åºç¯‡,4399é€ æ¢¦è¥¿æ¸¸3å°æ¸¸æˆ&baidu_id=	115.239.210.141
hxxp://newsimg.5054399.com/uploads/userup/1502/02104939B23.jpg	115.231.20.54
hxxp://www.4399.com/jss/trace_news.js	203.130.61.92
hxxp://ec.pos.baidu.com/b.php	123.125.115.85
hxxp://ubmcmm.baidustatic.com/media/v1/0f0000mUMeDPtm1xsKSa96.swf
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/c_2.gif	203.130.61.92
hxxp://cdn.comment.4399pk.com/control/zwsf2-3.gif?20120719	203.130.61.92
hxxp://www.4399.com/imageyx/seer2012/hottop.gif	203.130.61.92
hxxp://eclick.baidu.com/nova_fp.htm?br=6&fp=6ACA8294BA753F17232790FBE9460180&fp2=6ACA8294BA753F17232790FBE9460180&ci=&bi=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1&im=0&wf=0&ct=2016&bp=&m=&t=0&ft=&_=1441846250687	123.125.115.164
hxxp://imga2.5054399.com/upload_pic/2015/6/20/4399_14294510451.jpg	203.130.61.92
hxxp://imga1.5054399.com/upload_pic/2015/3/12/4399_17485812405.jpg	203.130.61.92
hxxp://newsimg.5054399.com/uploads/userup/1302/1Q62S330N.gif	115.231.20.54
hxxp://ubmcmm.baidustatic.com/media/v1/0f0000nHWaDGGJgmd7u1Zs.swf
hxxp://www.4399.com/flashzt/img/zmxy3/bg_3.gif	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3/zb_nav_20131205.png	203.130.61.92
hxxp://cdn.comment.4399pk.com/control/A4399dv_base_main.swf?150527	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/zj_btn.gif	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/t_2.gif	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy2/icon_keys.gif	203.130.61.92
hxxp://t10.baidu.com/it/u=590893569,3884611603&fm=76	180.97.33.30
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/t_6.gif	203.130.61.92
hxxp://www.4399.com/css/zmxy3_20150824.css	203.130.61.92
hxxp://news.4399.com/moeryongshi/images/headerBg.gif	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/b_5.gif	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/b_3.gif	203.130.61.92
hxxp://t11.baidu.com/it/u=1421353108,1764487604&fm=76	180.97.33.30
hxxp://imga.5054399.com/upload_pic/2012/tjyx/tjrm_img08.jpg	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/t_3.gif	203.130.61.92
hxxp://www.4399.com/flashzt/img/zmxy3_20120913/ico_ann.gif	203.130.61.92
gprp.4399api.net	42.62.52.249

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

ET POLICY Unsupported/Fake Windows NT Version 5.0
ET POLICY Outdated Windows Flash Version IE

Traffic

GET /upload_pic/2015/6/5/4399_10503158122.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: imga4.5054399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sat, 20 Jun 2015 09:27:51 GMT

Cache-Control: max-age=31536000

Content-Length: 3703

Content-Type: image/jpeg

Last-Modified: Fri, 05 Jun 2015 02:50:31 GMT

Accept-Ranges: bytes

ETag: "8075e7623a9fd01:396"

Server: Microsoft-IIS/6.0

Age: 1

X-Via: 1.1 fuzhou185:8080 (Cdn Cache Server V2.0), 1.1 kf48:2 (Cdn Cache Server V2.0)

Connection: keep-alive
......Exif..II*.................Ducky.......P..... hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp
MM:InstanceID="xmp.iid:A9C91101090B11E5BA1E8EF6358ADE64" xmpMM:Documen
tID="xmp.did:A9C91102090B11E5BA1E8EF6358ADE64"> <xmpMM:DerivedFr
om stRef:instanceID="xmp.iid:A9C910FF090B11E5BA1E8EF6358ADE64" stRef:d
ocumentID="xmp.did:A9C91100090B11E5BA1E8EF6358ADE64"/> </rdf:Des
cription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?
>....Adobe.d.......................................................
......................................................................
....................*.D...............................................
............................................!12.."3.4.AQb5.aRS.q..B#E.
.Ccd%u6.8........................!1AQa...q...."2.B....#3....4.........
.....?..t?.V;..,......& 0......u<[email protected].............
...;.e.....l=.S*.!.Gg .4#...\Q.. |s..<d.{..T[..nU..2:#.Zv9.Z[.....1
..a.2^.....vj;........^,"..C.s.....ZP.Y....A.....c..R....0..s...C.....
...........7k..v..UY%Jy.$..]...i.-.h.,(.!@...#Dct......s..5siZ....<<< skipped >>>

GET /9.gif?abc=1&rnd=1176698887 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: cnzz.mmstat.com

Connection: Keep-Alive


HTTP/1.1 302 Found

Server: Tengine

Date: Thu, 10 Sep 2015 00:50:40 GMT

Content-Type: image/gif

Content-Length: 43

Connection: keep-alive

P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"

Set-Cookie: cna=4MF3Ds1dPwACAcLyYNo6RgNf; expires=Sun, 07-Sep-25 00:50:40 GMT; path=/; domain=.mmstat.com

Set-Cookie: sca=429856c2; path=/; domain=.cnzz.mmstat.com

Set-Cookie: atpsida=eb276f9e089846c85fea6f29_1441846240; expires=Sun, 07-Sep-25 00:50:40 GMT; path=/; domain=.cnzz.mmstat.com

Location: hXXp://pcookie.cnzz.com/app.gif?&cna=4MF3Ds1dPwACAcLyYNo6RgNf

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Pragma: no-cache
GIF89a.............!.......,...........L..;HTTP/1.1 302 Found..Server:
 Tengine..Date: Thu, 10 Sep 2015 00:50:40 GMT..Content-Type: image/gif
..Content-Length: 43..Connection: keep-alive..P3P: CP="NOI DSP COR CUR
a ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"..Set-Cookie: cna=4MF3Ds1dPw
ACAcLyYNo6RgNf; expires=Sun, 07-Sep-25 00:50:40 GMT; path=/; domain=.m
mstat.com..Set-Cookie: sca=429856c2; path=/; domain=.cnzz.mmstat.com..
Set-Cookie: atpsida=eb276f9e089846c85fea6f29_1441846240; expires=Sun, 
07-Sep-25 00:50:40 GMT; path=/; domain=.cnzz.mmstat.com..Location: htt
p://pcookie.cnzz.com/app.gif?&cna=4MF3Ds1dPwACAcLyYNo6RgNf..Expires: T
hu, 01 Jan 1970 00:00:01 GMT..Cache-Control: no-cache..Pragma: no-cach
e..GIF89a.............!.......,...........L..;..

GET /stat.htm?id=30039538&r=&lg=en-us&ntime=none&cnzz_eid=1330140093-1441843467-&showp=1276x846&t=é€ æ¢¦è¥¿æ¸¸3,é€ æ¢¦è¥¿æ¸¸å¤§é—¹å¤©åºç¯‡,4399...&h=1&rnd=42606933 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: oq.cnzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: Tengine/1.4.6

Date: Thu, 10 Sep 2015 00:50:38 GMT

Content-Type: image/gif

Content-Length: 43

Last-Modified: Mon, 09 Mar 2015 09:01:02 GMT

Connection: close

Accept-Ranges: bytes

GIF89a.............!.......,...........D..;..

GET /it/u=1265655567,1529096812&fm=76 HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/acom?adn=0&at=128&aurl=&cad=1&ccd=32&cec=gb2312&cfv=11&ch=0&col=en-us&conOP=0&cpa=1&cpro_lu=1,#dfe4f9,#000000,å®‹ä½“&dai=1&dis=0&layout_filter=rank<r=<u=http://VVV.4399.com/flash/78072.htm&lunum=6&n=80054191_cpr&pcs=951x668&pis=10000x10000&ps=784x-2&psr=1276x846&pss=990x880&qn=1a28bcd7a302e760&rad=&rsi0=980&rsi1=90&rsi5=4&rss0=&rss1=&rss2=&rss3=&rss4=&rss5=&rss6=&rss7=&scale=&skin=tabcloud_skin_5&stid=5&td_id=2279006&tn=baiduCustSTagLinkUnit&tpr=1441846229578&ts=1&version=2.0&xuanting=0&dtm=BAIDU_DUP2_SETJSONADSLOT&dc=2&di=u2279006&ti=é€ æ¢¦è¥¿æ¸¸3,é€ æ¢¦è¥¿æ¸¸å¤§é—¹å¤©åºç¯‡,4399é€ æ¢¦è¥¿æ¸¸3å°æ¸¸æˆ&tt=1441846229312.266.2281.2281

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: t10.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1


HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Content-Type: image/jpeg

Expires: Sat, 10 Oct 2015 10:50:29 GMT

Cache-Control: max-age=2628000

Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT

ETag: fa19dcdd1889b102389b37362dcc46b2

Content-Length: 33010

Date: Thu, 10 Sep 2015 00:50:29 GMT

Server: lighttpd
......JFIF.............C..............................................
......................C...............................................
............................."........................................
...G.........................!..1.A."Qa.q..#2....BR...3.$br....S.....c
....................................?......................!...1.AQa."
q.......2...#BR.r.$CSb..34c.............?....(#..C.[w.~..N~....t~4'j.d
(......j.W..X.|.#..>...<q.......?.....}.. .x .?....y.g.S.......B
#....l.|.~^1.-..?....-"...*3.9......~....H...?..3...'...6...~..t..=...
..[....z?N. .4.....QY....$..KSAe....].r...MM".....].....>]...z..4..
...N...\V...O.."#.8s/..B....=.....qM(]...d.n...q..g.UV..i....e..AUt..M
..w..0].n..d.........zU.~....dgx.~O.:z....l...........J....."Yj...<
iNX...4D.#..t...B.T..w.....-M;o.)y>#E..*O....('PXM.D......1...,y$.G
$...x..>....}$..vB....>.PU..,u...0N=Jy.*..N.4R...."..g9b|......%
...c...y....=..ee..SN.....-...P.Gl`Z.....p.|....#8..:..%..B..n...#..#.
RgC.H..`...........B...r.W..8.........'.../.8......U.....'.<..X..#.
}s.../2.d;......?xc .>..nz0.........=.......s....v.$.ntVz....t..R.$
...B.........*..Y.U.=(..xS..Q.y...V..j....(...jYjR.U.......l".$...Y...
.......2.....Ze.._.$$4...^[email protected] q......W..[..X...hf..d.OX..
0.-"[email protected][.$...(/47.m.e%....TKs........
.[.d.'.3b..f6.^.....i...x*d..v-#...........)..........Di...cM..=Y....2
......Wp.:u.J.B.B.?._.A.....L.h...j...[.0.{.j.B]}..T....]......[....o.
?.Ez..N2.>2.eI...\.0......YI.C..........(..%...t.A.a..A."o `.R.<<< skipped >>>

GET /it/u=3117833277,3572889005&fm=76 HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/acom?adn=0&at=128&aurl=&cad=1&ccd=32&cec=gb2312&cfv=11&ch=0&col=en-us&conOP=0&cpa=1&cpro_lu=1,#dfe4f9,#000000,å®‹ä½“&dai=1&dis=0&layout_filter=rank<r=<u=http://VVV.4399.com/flash/78072.htm&lunum=6&n=80054191_cpr&pcs=951x668&pis=10000x10000&ps=784x-2&psr=1276x846&pss=990x880&qn=1a28bcd7a302e760&rad=&rsi0=980&rsi1=90&rsi5=4&rss0=&rss1=&rss2=&rss3=&rss4=&rss5=&rss6=&rss7=&scale=&skin=tabcloud_skin_5&stid=5&td_id=2279006&tn=baiduCustSTagLinkUnit&tpr=1441846229578&ts=1&version=2.0&xuanting=0&dtm=BAIDU_DUP2_SETJSONADSLOT&dc=2&di=u2279006&ti=é€ æ¢¦è¥¿æ¸¸3,é€ æ¢¦è¥¿æ¸¸å¤§é—¹å¤©åºç¯‡,4399é€ æ¢¦è¥¿æ¸¸3å°æ¸¸æˆ&tt=1441846229312.266.2281.2281

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: t10.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1


HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Content-Type: image/jpeg

Expires: Sat, 10 Oct 2015 10:50:30 GMT

Cache-Control: max-age=2628000

Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT

ETag: 2ccc8bcfe310297aff9e697f8fac5ae5

Content-Length: 12006

Date: Thu, 10 Sep 2015 00:50:30 GMT

Server: lighttpd
......JFIF.............C..............................................
......................C...............................................
............................."........................................
>........................!..1A."Qa.2q.#R....B..$3br.C...%S..c......
..........................-........................!1A.."Q2.a.#Bq..3..
............?.......e4.dU.g&.i.....0...]....[s.<..\.(b0p.....7.w'..
.....l7...........h..........,..*6...c.....1.t.....W.0....... . ...#.}
 ...6A...c./......R2N....Zi.A!^...h ..n....c.xP`Ej.#..4.6..)4.....s1..
R..O.;E.'].. .......5x....d.|7o'.R.b..=.?l.q;.h..w..8....Y............
..'...*...%.......Zj....`..)I.....b........f>...n....q..#..sF.j... 
`U.L.8.P.. ...E.1..UYf..QF...C.....m......[cc..9.Q(..w..[.#....0v...l.
...nd8...m..*.............. ....Xg.VIyN..Q..........{..6U......9v'...O
.&>W.6.^..],\[....h..?..{..NMz.5..jq\..C...8.....6..U..5.x.Z..xZ...
H.......)...7.^F.a.._n......{MP." ..zz..}r...nn...3.e.2q].W..%....3..A
4:kq,.....M.2e.k.....z..A .....WE/..[._.dV.#'.T.....c....|..s.8.5Q..;`
...'.F{...K.r2A....!...(N..Z..Yx.[.H$..a.Wa.ia..Ie@. ..>.R.`...^N..
..,..=1..-...Z.\.v..........)Om....4.u.lf.%..;.D........m".k t..k.A.w.
k.........".c}.5.e..e.!....Dy.v.V.`eY.....~Eh.c.V..[F0.I.2vqW..m.[B...
.........7...5...<V.d)..l?:...E...2i.-.0....3...E(hj-..h..D.x}..5..
f.bY...QH{...}z....G*..&..?L..*h... .z>FA....I#b...S..q-..ju<..9
.g.zfx^5q..SrU..S.M*{r.......Z\..4........q..=&.m}..eg$......E..t/....
......i&.T..8Mo....{..0.u.Gl#....Y...a..F......-.3MZ..g.x.y..Y...-<<< skipped >>>

GET /img/pic.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: icon.cnzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: Tengine

Content-Type: image/gif

Content-Length: 719

Connection: keep-alive

Date: Wed, 09 Sep 2015 08:47:50 GMT

Last-Modified: Fri, 16 Jan 2009 08:10:47 GMT

Expires: Thu, 10 Sep 2015 08:47:50 GMT

Cache-Control: max-age=86400

Accept-Ranges: bytes

Via: cache1.l2de1[824,304-0,H], cache13.l2de1[824,0], cache1.de1[0,200-0,H], cache7.de1[0,0]

Age: 57770

X-Cache: HIT TCP_MEM_HIT dirn:1:79661768

X-Swift-SaveTime: Wed, 09 Sep 2015 08:47:51 GMT

X-Swift-CacheTime: 86400

GIF89a2.........f..3...33.............................................
.......................................!..NETSCAPE2.0.....!..Powered b
y AFEI.!.......,....2...... !.di.hjBl..p,....x......`P.(...GR.D6...CH.
...,..@8.... -..EQc.8...........`...."....................~"..H.......
.H......"...$....#.........."..........."Z.......*...%!.!.......,....2
...... !.di.hjBl..p,....x..|....p r..H.C.\&.H.tJu...#b......7..W.h....
...7..l..v..-....."....................~"..I........I......"...$....#.
........."..........."\.......*...%!.!.......,....2...... !.di.hjBl..p
,....x..|....p r..H.C.\&.H.tJu...#b......7..W.h.......7..l..v..-....."
....................~"..I........I......"...$....#..........".........
.."\.......*...%!.;HTTP/1.1 200 OK..Server: Tengine..Content-Type: ima
ge/gif..Content-Length: 719..Connection: keep-alive..Date: Wed, 09 Sep
 2015 08:47:50 GMT..Last-Modified: Fri, 16 Jan 2009 08:10:47 GMT..Expi
res: Thu, 10 Sep 2015 08:47:50 GMT..Cache-Control: max-age=86400..Acce
pt-Ranges: bytes..Via: cache1.l2de1[824,304-0,H], cache13.l2de1[824,0]
, cache1.de1[0,200-0,H], cache7.de1[0,0]..Age: 57770..X-Cache: HIT TCP
_MEM_HIT dirn:1:79661768..X-Swift-SaveTime: Wed, 09 Sep 2015 08:47:51 
GMT..X-Swift-CacheTime: 86400..GIF89a2.........f..3...33..............
......................................................................
!..NETSCAPE2.0.....!..Powered by AFEI.!.......,....2...... !.di.hjBl..
p,....x......`P.(...GR.D6...CH....,..@8.... -..EQc.8...........`....".
...................~"..H........H......"...$....#.........."......

<<< skipped >>>

GET /media/v1/0f00057I9_MLlocrKCGPLf.swf HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://ubmcmm.baidustatic.com/media/v1/0f000DlV0rvHMAROYHhQOs.swf?url_type=1&id_283672787=media/v1/0f000F_vSMdFWGLTLIlBvs.jpg&id_1821494

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ubmcmm.baidustatic.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 10 Sep 2015 00:50:43 GMT

Content-Type: application/x-shockwave-flash

Content-Length: 18716

Connection: close

Last-Modified: Sat, 25 Apr 2009 07:04:00 GMT

Expires: Wed, 06 Jul 2016 04:38:14 GMT

Age: 5602349

Cache-Control: max-age=31536000

media: media

Ohc-Content-Crc: 787365022

Server: hkg01-sys-jorcol06.hkg01.baidu.com
FWS..I..p...........D.....C.......H....86........JFIF.............C...
.................................  ...........  .......   .   ...C....
 ....     ....         ....                                  ........,
..".........................................K.........................
!.1.AQ."aq..#2..BRb....r.$34......CDSs....l.........................
..........:.......................!1..AQaq......"#2B....r..R.$%3Sb....
.........?..JR......)@)JP.R......)@)JP.R......)@)JP..?.3k.$wcu.......f
9."W....3.]..t.Oh. ...h....1$.9...lc<f.w.?.....t.Y.!..f.V.j...ir...
....{....r.d.i..f..2=ES.*..I.w..^.:....#.......2.....n...2..@|?(. .~..
.t....Ww.]..\..9#pU.."?...S.....u....]E..'-.I4..?.}qP}}.._Qh6F.......v
..c...>M.9%O.`..YoZP_.....{[email protected]....=..Vu. ..O.$R...w.......A
V.@.)@)JP.R......)@)JP.R......)@)JP.R......)@)JP.R......_.z...........
n......H*.c...8...t.?.....=...I. .j...=.&..-..2F.}G>uowlz._.Mr.Nw.[
..Za..].E....:..p....1s0.DW.Tj.d4.{F...o<o#.YJ.....*....h.H.O,..1o'
..s.m.....-....b..U..[...I....../... .T[(.....mK...<..../s...J. .?.
>....N..}....Zm...|.F.M...X....Z.z.....;.)JV'.....)@)JP.R......)@)J
P.R......)@)JP.R......)@ s.M.r..X...E.X...~..2...<.......i.....,...
rIc...&...t.oe..//u ?L^D.w...4.D...Y.~.9.P..7i..)=.....F7.B.....d/..2.
j...GG.;D..p..<....^.....W6.e.z.S./h.]..y.Y..O..L73&>..`[email protected]
9..\....%-}...>%..xv.T...>./.o..\|......W[....iU_..'..d,G.%G....
.?i.3..kx.........a...a.b...*.J.....E.|.F>k.h....:M...{o.........[i
.E...u[}..{..k.t(..I{(..c.M.._l....dO.....KI...m..!.X..~B.....VG..<<< skipped >>>

GET /upload_pic/2015/6/9/4399_11234392734.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: imga5.5054399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Wed, 02 Sep 2015 23:43:39 GMT

Cache-Control: max-age=31536000

Content-Length: 5114

Content-Type: image/jpeg

Last-Modified: Tue, 09 Jun 2015 03:23:43 GMT

Accept-Ranges: bytes

ETag: "8089e1af63a2d01:396"

Server: Microsoft-IIS/6.0

Age: 1

X-Via: 1.1 tzh57:80 (Cdn Cache Server V2.0), 1.1 yzh230:5 (Cdn Cache Server V2.0)

Connection: keep-alive
......Exif..II*.................Ducky.......T.....zhXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c01
4 79.151481, 2013/03/13-12:09:15        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:47d5f0a2-2649-fb4
f-b290-bfafaef6caef" xmpMM:DocumentID="xmp.did:5A3067040E5611E58EE2BD7
ADA32B5CA" xmpMM:InstanceID="xmp.iid:5A3067030E5611E58EE2BD7ADA32B5CA"
 xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <xmpMM:DerivedF
rom stRef:instanceID="xmp.iid:47d5f0a2-2649-fb4f-b290-bfafaef6caef" st
Ref:documentID="xmp.did:47d5f0a2-2649-fb4f-b290-bfafaef6caef"/> <
;/rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket
 end="r"?>....Adobe.d..............................................
......................................................................
.............................*.D......................................
........................................................!.123.4.6.Qa"b
5..ART.q.B#Sce78.C$.H9.......................!1A..Qq2..a.3...."B.....R
#..b.45....CS.E.............?.Fn2]N..... ..e*.>L...l..0o.F..C.m...K
Z..es.....^...|....$....J....7.7A...m..&.5.%..L..<. ...2g......@...
(....>....*%.d.8....:~..y{f.-z.C.?a............s6..x.xF.....i&.<<< skipped >>>

GET /js/click.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: 4399stat.5054399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 10 Sep 2015 00:50:36 GMT

Server: nginx

Content-Type: application/x-javascript

Last-Modified: Wed, 15 Jan 2014 06:56:45 GMT

Transfer-Encoding: chunked

Expires: Thu, 10 Sep 2015 00:50:38 GMT

Cache-Control: max-age=1

Content-Encoding: gzip

X-Via: 1.1 kf48:1 (Cdn Cache Server V2.0)

Connection: keep-alive
41b............}U.o.6..v.....DT.*...K<-.)6....uOA`0.%3.(....I....EY
...A......}p'.3..d..V....Zj..L.#M.<? {.[.hV...~........)......<.
[email protected]..[. .A=#mo4..1..u.?t.(]..Dv.:[email protected].
*.q.........4=.Fq.....**....Fm%W....!.....5j`.....U..e. .2P..I~$.f....
.......Je.<b.F./(.V<.oQ.....b.I.E.^1..)z..0&...T0OU2n...)..} ...
..a.%...E.......F...-..%ka0>.v.VY.>..I..`.....-g..?....IB^.3.^\.
.....XU...t.....JN......tr.-.t.J..`...H..V.fX.Z.".c.)./ 6......>..M
....=.^....igrp.l.m.//.m..vV....=.Y...$A... ... ...7\F....zr?....Ts..G
.v.....<\.0>.K..*.g:..0.[...g....Y....o.B.M!..ku..m.am.<=..&l
t;a....4r<.x2...&l.."av...............Ya.n([email protected].._2.
.U.vQ.z`f.?>~.....9.[n;...l.....=..^`..S..nvH.D.%...d.K...P:K)<V
..S....P..=........v.....E.Oi'bKuX.'.Ejk.{pknyH.n.g.t..9......n.y...d.
.a$...-..z.........,.Z.....Yb..Ov...@^j..TC..a.i].........i.....v..."O
.#.C..G...ln..D.........&.C......W.r *.o.......%1U..]..:X.jtD:.......R
5"[email protected]@|{<...}...j.;....M.
.}...H...?k.yH...Unc..(Q..Fi.^..t.6..U ..^"...z.F{......0..HTTP/1.1 20
0 OK..Date: Thu, 10 Sep 2015 00:50:36 GMT..Server: nginx..Content-Type
: application/x-javascript..Last-Modified: Wed, 15 Jan 2014 06:56:45 G
MT..Transfer-Encoding: chunked..Expires: Thu, 10 Sep 2015 00:50:38 GMT
..Cache-Control: max-age=1..Content-Encoding: gzip..X-Via: 1.1 kf48:1 
(Cdn Cache Server V2.0)..Connection: keep-alive..41b............}U.o.6
..v.....DT.*...K<-.)6....uOA`0.%3.(....I....EY...A......}p'.3..<<< skipped >>>

GET /4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.htm HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s8.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Wed, 09 Sep 2015 12:54:15 GMT

Server: 4399SERVER

Last-Modified: Wed, 09 Sep 2015 08:02:26 GMT

Accept-Ranges: bytes

Cache-Control: max-age=31536000

Expires: Thu, 08 Sep 2016 12:54:15 GMT

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 1170

Content-Type: text/html

Age: 42966

Via: http/1.1 4399SERVER (CDN CACHE V1.0), http/1.1 4399SERVER (CDN CACHE V1.0)

Connection: keep-alive
...........VMo.E.>7R..v $.........rl'..I.8B....xw......?~.g.PU.^.@R
.U....P.E.......wf7..CU....y..|..w.~....|...>..[.6...V..n .Q..P..J7
*....q.}...S......T...U#........(......?.....J..aLO!.......;.....o_..8
}.......^........O.=....X..,J.m......i.f...t.E$.......)'..../ON.^.....
...........,....'.l..2.....4s9...d..OdR....U......... .PX. #.$.......Z
 K..Y.5O.. {.?..f.ot..Q l5..nv.....vc.}.$.....J.Z....sd{.-.`?,...XG..$
..*..V;..n.....5...tY.Yprz.2..Q..l........3..=.3.~....y;5;:y.{&<z..
.l............{{.(.^g._.9....rv.x.b...ji$.cq.... .......d..9....g..M5.
"A..<(...GH...gIl...........t...p..q...R...,?.....5.U.P.e...V.h...9
w}0t.....k]&.....#K/..$=.[...V..z.]...B.......#..0....$.../7...\.X\...
.[.u...f'.Y.R.4..."1~.=UU.a...U.. 5Y..G.q......B...*...h.c......M...#.
Z."55...k.U.b...(..<.qH....K........uc...a3.....9....L.....:..:N.8.
\.).2..Pk..6[Ksm...k..i......Q.Tfg...".$..".6....!e.)..N( ...o.......!
..1q..TB...X............Y.....K7..w...l.0..G..wv..6.......Fn.`....^...
....M.'..x.N.S@<m...&.vd.....K.k,...^......RY...:....x.f../$..y._D.
.... ..>../c.2...<G..%5. ....6..F#cr..R}........TpV....R......r_
........_;.&.-I..|.'....Y6.%.._.....9.u}.nI...v".U.{....F....-....{@.s
@.......
<<< skipped >>>

GET /4399swf/js/chkDomain.js HTTP/1.1

Accept: */*

Referer: hXXp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s8.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Wed, 09 Sep 2015 16:24:46 GMT

Server: 4399SERVER

Last-Modified: Fri, 17 Sep 2010 03:21:31 GMT

Accept-Ranges: bytes

Cache-Control: max-age=31536000

Expires: Thu, 08 Sep 2016 16:24:46 GMT

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 352

Content-Type: application/javascript

Age: 30335

Via: http/1.1 4399SERVER (CDN CACHE V1.0), http/1.1 4399SERVER (CDN CACHE V1.0)

Connection: keep-alive
.......... K,RH.../-R.UHK.)N...*..&....].s.3..R.J.%%.V.....z&...z...J:
0QL......4u("..z.5.[...b.......8?.....aE,.w.%E>...%.. ...'.........
....... 3M.$.@..<3/%.\....3-.HA..;...:..9..rR..K2.....J9........Z..
...': V.........%[email protected]........%../,.|....k.>..g..
.G....W.9.tv..z....7..8}..w....'^o.wu....g?......g[....z...#..l9.LQI..
.Z...F.*...HTTP/1.1 200 OK..Date: Wed, 09 Sep 2015 16:24:46 GMT..Serve
r: 4399SERVER..Last-Modified: Fri, 17 Sep 2010 03:21:31 GMT..Accept-Ra
nges: bytes..Cache-Control: max-age=31536000..Expires: Thu, 08 Sep 201
6 16:24:46 GMT..Vary: Accept-Encoding..Content-Encoding: gzip..Content
-Length: 352..Content-Type: application/javascript..Age: 30335..Via: h
ttp/1.1 4399SERVER (CDN CACHE V1.0), http/1.1 4399SERVER (CDN CACHE V1
.0)..Connection: keep-alive............ K,RH.../-R.UHK.)N...*..&....].
s.3..R.J.%%.V.....z&...z...J:0QL......4u("..z.5.[...b.......8?.....aE,
.w.%E>...%.. ...'................ 3M.$.@..<3/%.\....3-.HA..;...:
..9..rR..K2.....J9........Z.....': V.........%[email protected].
.......%../,.|....k.>..g...G....W.9.tv..z....7..8}..w....'^o.wu....
g?......g[....z...#..l9.LQI...Z...F.*.......
<<< skipped >>>

GET /4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.swf HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.htm

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s8.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Wed, 09 Sep 2015 15:58:52 GMT

Server: 4399SERVER

Last-Modified: Wed, 09 Sep 2015 08:02:28 GMT

Accept-Ranges: bytes

Content-Length: 3149342

Cache-Control: max-age=31536000

Expires: Thu, 08 Sep 2016 15:58:52 GMT

Content-Type: application/x-shockwave-flash

Age: 31891

Via: http/1.1 4399SERVER (CDN CACHE V1.0), http/1.1 4399SERVER (CDN CACHE V1.0)

Connection: keep-alive
CWS...2.x....<...?>...53.A..."....N.BR.i..d.hf..R...J."*.F.m..)E
i...*.....kh...........].=...=..s.}.([email protected]@b..T.......!u.U.@.*`......$
DsyB;.M..)..........[....&f...&..&..F.a$L....F<...{|...0L...q.<.
.......M.0<* ...1...>$ ...eG.y".............."{fL......3I0.F....
.ql.p.S.9..7#.G..q...,~([...N...q......`......c.L..q.?.$F.g.....a(...]
.!bbC..a$[`.........M.x..l...7...k.2y..............)b...ctl.u.M......S
M.G....?{...K.T.3..v....$.,Y0......G}a..h1.6....(...--lm..<x..0..8.
@@pv.9...PK..*iv.....'..?.I{b_U]]-q..{.Q.......c..6?y..?.k........gZ..
:...eY.....T..gd.Q9..6.s.........`%.|...kB... .A./....1I9.|.E..u..\..w
L]]....g....5k..\...;J..x.2.........]........Ll\2xc.e...i.G.[..!....r.
.AE{...C.6..?wR..`..E.4.W5,..K0#.ddz.g.H.d..KC.......e..dW>IMV.iG.^
...O..E(...........?x)d.......s......1.e~..\9....$.Q.[1...&...wX...29x
...O.. .... ..ZUW ......v....&}.X[;...F.=.~.p1mmH........./..hL._.m...
.x...`B..M.....ISw|..3...r..T.).F..2..MA........|.$6..U..)_N]..3.:..$.
..s......'.}h..[..~....No?...5....v....|..|../...........W..5u....o..0
.<I.w..u.fS......d.S [email protected].....{..P.Hq...w..*..P...o...
0..-.Z.`s.e.2..].O..x.I1q,7jH..Pg.p.....r]GUU&.H.?.yx...Y.d...S.../...
r...GO....>o.........e.{...M.*._....}....B.....d.Z~r.n.x..k....`...
.....v... .lm.K......{v#.|...;.....G....;..~..|.`k.H...st\.....c.)[...
?..Q.]j.e......o.....G.>..k*.^.......C......V....o..l........7l./.y
.....~......ki....[>.a.u.l..... ....55E...C.....f.<..zo..X....6.
.c..'.g$.#.}..g...#O..?|.;..AE....O..0..L....5.`fr.7dz.NKo..n.yg.3<<< skipped >>>

GET /4399swf/upload_swf/ftp7/hanbao/20120107/6/MagicWeaponv1240.swf HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.swf/[[DYNAMIC]]/4

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s8.4399.com

Connection: Keep-Alive

Cookie: _4399stats_vid=14418462431248952


HTTP/1.1 200 OK

Date: Sun, 06 Sep 2015 10:29:39 GMT

Server: 4399SERVER

Last-Modified: Wed, 25 Jun 2014 07:40:52 GMT

Accept-Ranges: bytes

Content-Length: 6643368

Cache-Control: max-age=31536000

Expires: Mon, 05 Sep 2016 10:29:39 GMT

Content-Type: application/x-shockwave-flash

Age: 310871

Via: http/1.1 4399SERVER (CDN CACHE V1.0), http/1.1 4399SERVER (CDN CACHE V1.0)

Connection: keep-alive
c.m2.d2"..fA.L6Q6.,..........&. @K6IZ.H..Z..".(2.!d..H..._.....}U.....
.....93.}.Ow...L..,.......y..................S. 7.?...........8...' lr
=w.f.q....mk..3.I...V.e..(V4x.%{j...C..^.../....iz...8m......].$.....`
,.......Tz..-.../...@$.....tJ.n=..X|........cA ....wb...\.x:.{..%w.zD.
rMD...j....Z.u.....:CWS.u.j.x...wP.Y./*.......7w~....}..{....So..3....
."...(...no..)u.OA.M.z.Cn~.u.N.......*g...~.jx......Q...M...\..2._r.WT
..~.oi..J......_~;..R.V...O..W.. O....\CQ.M........R......,I.....q....
G..W....w..&!..\"Q&0..P...sm._..8dy=.iS..z].....CG....PD......G...;...
...^;uj.H...y.!........y...g....W.g....[.;=....U.**FD.....2xr(i75.s0..
...]La..T8.....,.J....7.............Hy....*........4r...W.|..i.f.O...C
.....u.U.......k....cN."!.&.../K........|.~.....D.,......<.S.......
B.<.:.n\......y.)...O?......Kx.?_Xh.^"P.}..e.:z.....%[5.}.9...Bo.g.
..'..^.0.fS...m.e^IY.....9..m...o7.fD....{......2.....2...N....$Q....M
...W.6$JF5...4....<..-.........p.|{...G...e.v."...<E(.t.7....H..
.....]Tn...K..(.M.F....]..Ag............y?..b...B.f..../....&F...?:...
h.CO...w.W....!.k..ZG..C.D......L.W.FH......D.i.>...L..s.wj.-......
U).E.D........-X[../4......O;.!.3....>.......2S...6...d..A...d...o.
q..$..]...4.n~-.>......z........t.j.L...OX...........Y.......vP..,h
.e.o~tO..(.....Jo-;`...c6?.....7..4JE.J..m.?l...ml..u=.7.B.y./........
...m....k......f<[email protected]*.~:.....=.......mdo...k...0w..e..y.
_..t7......,n...Z.....{.{.2.6..W_.!.OtH...AO....s.,.......;.X..8......
o.g.....K...3........RJ..\=!......{1....LG.......H]E;O...k..lY...^<<< skipped >>>

GET /resource/css/base.css HTTP/1.1

Accept: */*

Referer: hXXp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ptlogin.3304399.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Thu, 10 Sep 2015 01:38:01 GMT

Date: Thu, 10 Sep 2015 00:38:01 GMT

Server: nginx/1.4.1

Content-Type: text/css

Content-Length: 33079

Last-Modified: Fri, 19 Jun 2015 09:10:56 GMT

ETag: "5583dca0-8137"

Cache-Control: max-age=3600

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 jfzh181:8107 (Cdn Cache Server V2.0), 1.1 kf50:2 (Cdn Cache Server V2.0)

Connection: keep-alive
@charset "utf-8";../* CSS Document ..Use for:...Version:.1.0..Date:..2
011/08/10..Author:..f2er..Update:     2012/05/03..*/...login_embed_ifr
ame{border:none; width:100%;}...login_embed_iframe_hor{border:none; wi
dth:100%; height:100%}...login_horizon{height:31px; line-height:31px; 
/*padding:9px 0;height:12px;*/}...login_vertical{width:530px;} /*modif
y by qf 05-03*/../*............*/...mt5{ margin-top:5px;}...mt10{ marg
in-top:10px;}...mt20{ margin-top:20px;}...mt30{ margin-top:30px;}...mt
35{ margin-top:35px;}...w256{ width:256px;}..#popup_login_div{ width:4
00px; margin:0 auto; padding: 16px 0; }..#popup_reg_div{ padding: 0 0 
16px 0; }../*............*/...login_horizon legend,.login_vertical leg
end,.login_module legend{ display:none}../*login_horizon*/...iptw1{ wi
dth:73px;}...iptw2{ width:154px}...wtc{ width:352px;}...wframe{ /*widt
h:620px;*/ width:530px;}...wframepwd{width:280px;}...login_horizon a,.
login_vertical a{ color:#1278c0;vertical-align:middle;}../*......chrom
e..@media screen and (-webkit-min-device-pixel-ratio:0){..  .login_hor
izon a,.login_vertical a{...vertical-align:top;..  } ..}*/...login_hor
izon a:hover,.login_vertical a:hover{color:#ff5712}../*login_horizon*/
...login_horizon .login_hor,.login_horizon .login_btn{ float:left; mar
gin-right:10px; display:inline;}...login_horizon label{ color:#333}...
login_horizon .login_ipt,.login_vertical .login_ipt{ border:1px solid 
#ccc;/* width:144px;*/ padding:2px 3px; background:url(../images/sprit
eV2.png?v=131127) repeat-x 0 -31px; height:22px; line-height:22px;<<< skipped >>>

GET /v.gif?pid=307&type=3071&sc=992,4842,1276,818&desturl=&apitype=1&linkid=iedi0vbq4nh&velo_load=2219&velo_cssload=500&velo_jsLoad=1781&cite_uid=480925&cite_type=1&cite_mini=1 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: nsclick.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1


HTTP/1.1 200 OK

Accept-Ranges: bytes

Cache-Control: max-age=0

Content-Length: 0

Content-Type: image/gif

Date: Thu, 10 Sep 2015 00:50:41 GMT

Etag: "4280832337"

Expires: Thu, 10 Sep 2015 00:50:41 GMT

Last-Modified: Fri, 23 Oct 2009 08:06:04 GMT

Pragma: no-cache

Server: BWS/1.0

HTTP/1.1 200 OK..Accept-Ranges: bytes..Cache-Control: max-age=0..Conte
nt-Length: 0..Content-Type: image/gif..Date: Thu, 10 Sep 2015 00:50:41
 GMT..Etag: "4280832337"..Expires: Thu, 10 Sep 2015 00:50:41 GMT..Last
-Modified: Fri, 23 Oct 2009 08:06:04 GMT..Pragma: no-cache..Server: BW
S/1.0..

GET /cpro/ui/renderer/baiduImageRender.swf HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://cpro.baidu.com/cpro/ui/baiduPatch.swf

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: cpro.baidustatic.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 10 Sep 2015 00:50:38 GMT

Content-Type: application/x-shockwave-flash

Content-Length: 2005

Connection: close

ETag: "55efc6cd-7d5"

Last-Modified: Wed, 09 Sep 2015 05:42:37 GMT

Expires: Thu, 10 Sep 2015 06:52:17 GMT

Age: 64701

Cache-Control: max-age=86400

Accept-Ranges: bytes

Ohc-Content-Crc: 2925233685

Server: hkg01-sys-jorcol01.hkg01.baidu.com
CWS.....x..V[S......t..\l.ml.......$.B..X.....8.....M.M<.(3..)[....
T.!)..*...._`...{.._.U..sz$l....fJ.Ow..;.|}..!.."..g..aT......yUCh....
.B)q.tZ~.f.#. h............&SsssI3.L.'.1....~8..o.,&B...k...l...s.....
##]..f..m.....#.jn3y.......<...=....r]gqI..%...D~s:..s...!.w....O..
..-..Tf...g ..eR.t......).......n...8..4.'3.t6......l......'9.E&.....i
zZ.7r..<'<#....h.V....PR....^.....v......I......}1Y...'...nJP...
....L...`C.?.....".!|w......6..:.....*yn3...=_H.......Qrv..x.&..E...m 
. k.......b.8.J..KKY3?.-f.....|.=..6...I..l...fgK....9.6g..T6..)..f.J.
...l..........6.s...~.".6.Y..j.~...Y\.......=......~*[.......#.OR|....
.o1..........R..........D....<ar..>4....W......./........?..\n..
...g.vYi.U.Q.}..b....?L.(.....Q../..;.c[[email protected]...'......h
8])..W............._s[..v.(....W......}....k..........^.............%.
.......=........0...._..e...yM07..\...-.=..I.5.8Z.(......u[.P.Ow..z...
.VW...Rk.MQ.....x............J...6.....c.w/.....f&.6.......v.....u..=.
X........Px....J9......|.......".}.....}.E|..~.v=.n.5_.9.{....-...,..l
...-K..M.?.......w....{.....Z9.PuD=..J..........d...%]..........}.lU..
.&...O.*(.h...4...w...;n.D.D.........}........k..2..... ....... ...1..
.......Pr..J..FX$...=.}.k..JTJ4Jt.0J.J".D).Q..Z.%.T..Z?..Qr.....P.B.R.
2%C.^...%.)IP}.....R.&%.)...q...$MI....]l.`c..Yl.a#....%....l.X..{.}..
..x.({@Y...eE.J.-. ..6..X..Cl..G..u....B.#.~A...7)...1.7.... Fb.`. ...
F."..)..af.*.#..H..8...NbD..Wpo.J0.L..!...c.....J#.u|..i...B...pln.U..
.5.E.2..;j....._T...oW../....u{....\..;....T.g..|2.OS....z.~.\/B..<<< skipped >>>

GET /stat.php?id=4073713&web_id=4073713&show=pic HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s25.cnzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/javascript

Content-Length: 9938

Connection: keep-alive

Date: Wed, 09 Sep 2015 23:30:40 GMT

Last-Modified: Wed, 09 Sep 2015 23:30:40 GMT

Cache-Control: max-age=5400,s-maxage=5400

Via: cache16.l2de1[0,200-0,H], cache19.l2de1[0,0], cache8.de1[0,200-0,H], cache10.de1[1,0]

Age: 4799

X-Cache: HIT TCP_MEM_HIT dirn:-2:-2

X-Swift-SaveTime: Wed, 09 Sep 2015 23:35:50 GMT

X-Swift-CacheTime: 5090
(function(){function k(){this.c="4073713";this.R="z";this.N="pic";this
.K="";this.M="";this.r="1441841440";this.P="oz.cnzz.com";this.L="";thi
s.u="CNZZDATA" this.c;this.t="_CNZZDbridge_" this.c;this.F="_cnzz_CV" 
this.c;this.G="CZ_UUID" this.c;this.v="0";this.A={};this.a={};this.la(
)}function g(a,b){try{var c=.[];c.push("siteid=4073713");c.push("name=
" f(a.name));c.push("msg=" f(a.message));c.push("r=" f(h.referrer));c.
push("page=" f(e.location.href));c.push("agent=" f(e.navigator.userAge
nt));c.push("ex=" f(b));c.push("rnd=" Math.floor(2147483648*Math.rando
m()));(new Image).src="hXXp://jserr.cnzz.com/log.php?" c.join("&")}cat
ch(d){}}var h=document,e=window,f=encodeURIComponent,l=decodeURICompon
ent,n=unescape;k.prototype={la:function(){try{this.U(),this.J(),this.i
a(),this.H(),this.o(),this.ga(),.this.fa(),this.ja(),this.j(),this.ea(
),this.ha(),this.ka(),this.ca(),this.aa(),this.da(),this.pa(),e[this.t
]=e[this.t]||{},this.ba("_cnzz_CV")}catch(a){g(a,"i failed")}},na:func
tion(){try{var a=this;e._czc={push:function(){return a.B.apply(a,argum
ents)}}}catch(b){g(b,"oP failed")}},aa:function(){try{var a=e._czc;if(
"[object Array]"==={}.toString.call(a))for(var b=0;b<a.length;b  ){
var c=a[b];switch(c[0]){case "_setAccount":e._cz_account="[object Stri
ng]"==={}.toString.call(c[1])?c[1]:String(c[1]);.break;case "_setAutoP
ageview":"boolean"===typeof c[1]&&(e._cz_autoPageview=c[1])}}}catch(d)
{g(d,"cS failed")}},pa:function(){try{if("undefined"===typeof e._cz_ac
count||e._cz_account===this.c){e._cz_account=this.c;if("[object Ar<<< skipped >>>

GET /adx.php?c=d25pZD0xOGRjZDc5MjAxMzc1YmY5AHM9MThkY2Q3OTIwMTM3NWJmOQB0PTE0NDE4NDYyMzcAc2U9MQBidT0xAHByaWNlPVZmRFQzUUFKRGhKN2pFcGdXNUlBOHU5Q2k2eVZyejlpZzMwSGZ3AGNoYXJnZV9wcmljZT1WZkRUM1FBSkRoSjdqRXBnVzVJQTh1OUNpNnlWZ09VbGhBZ1NGQQBzaGFyaW5nX3ByaWNlPVZmRFQzUUFKRGhKN2pFcGdXNUlBOHU5Q2k2eVZnT1VsaEFnU0ZBAHdpbl9kc3A9MQBjaG1kPTEAYmRpZD1ENDVEOEIxRjMyNzBBMUQ2QjQ4RjBDRDA5MENDRDVBQQBjcHJvaWQ9AGJjaG1kPTAAdj0xAGk9OTA2ZDhkNzY HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://cpro.baidu.com/cpro/ui/baiduPatch.swf

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: wn.pos.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 10 Sep 2015 00:50:39 GMT

Content-Type: image/gif

Content-Length: 49

Connection: keep-alive

Expires: Mon, 26 Jul 1997 05:00:00 GMT

GIF89a...................!.......,...........T..;HTTP/1.1 200 OK..Serv
er: nginx..Date: Thu, 10 Sep 2015 00:50:39 GMT..Content-Type: image/gi
f..Content-Length: 49..Connection: keep-alive..Expires: Mon, 26 Jul 19
97 05:00:00 GMT..GIF89a...................!.......,...........T..;..

GET /crossdomain.xml HTTP/1.1

Accept: */*

Accept-Language: en-US

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: stat.api.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx/1.4.1

Date: Thu, 10 Sep 2015 00:50:28 GMT

Content-Type: text/xml

Content-Length: 570

Last-Modified: Mon, 28 Jul 2014 09:59:57 GMT

Connection: close

ETag: "53d61f1d-23a"

Accept-Ranges: bytes
<?xml version="1.0"?>..<!DOCTYPE cross-domain-policy SYSTEM '
hXXp://VVV.macromedia.com/xml/dtds/cross-domain-policy.dtd'>..<c
ross-domain-policy>...<allow-access-from domain="*.4399pk.com"/&
gt;...<allow-access-from domain="*.4399.com"/>...<allow-acces
s-from domain="*.4399.cn"/>...<allow-access-from domain="*.my439
9.com"/>...<allow-access-from domain="*.4399.net"/>...<all
ow-access-from domain="4399pk.com"/>...<allow-access-from domain
="*.4399api.com"/>...<allow-access-from domain="imga.4399.com"/&
gt;...<allow-access-from domain="imga1.4399.com"/>..</cross-d
omain-policy>....

GET /app.gif?&cna=4MF3Ds1dPwACAcLyYNo6RgNf HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Connection: Keep-Alive

Host: pcookie.cnzz.com


HTTP/1.1 200 OK

Server: Tengine

Date: Thu, 10 Sep 2015 00:50:41 GMT

Content-Type: image/gif

Content-Length: 43

Connection: keep-alive

P3P: CP="NOI DSP COR CURa ADMa DEVa PSAa PSDa OUR IND UNI PUR NAV"

Set-Cookie: cna=4MF3Ds1dPwACAcLyYNo6RgNf; expires=Sun, 07-Sep-25 00:50:41 GMT; path=/; domain=.cnzz.com

Expires: Thu, 01 Jan 1970 00:00:01 GMT

Cache-Control: no-cache

Pragma: no-cache

GIF89a.............!.......,...........L..;HTTP/1.1 200 OK..Server: Te
ngine..Date: Thu, 10 Sep 2015 00:50:41 GMT..Content-Type: image/gif..C
ontent-Length: 43..Connection: keep-alive..P3P: CP="NOI DSP COR CURa A
DMa DEVa PSAa PSDa OUR IND UNI PUR NAV"..Set-Cookie: cna=4MF3Ds1dPwACA
cLyYNo6RgNf; expires=Sun, 07-Sep-25 00:50:41 GMT; path=/; domain=.cnzz
.com..Expires: Thu, 01 Jan 1970 00:00:01 GMT..Cache-Control: no-cache.
.Pragma: no-cache..GIF89a.............!.......,...........L..;..

GET /flash_flow/log.js?g=100015389&u=4344a642c7b74da93f57eb6c358553c1&s=0190d1b28544545789b5e91707f4d317&r=14228085801 HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://cdn.comment.4399pk.com/control/A4399dv_base_main.swf?150527

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: stat.api.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx/1.4.2

Date: Thu, 10 Sep 2015 00:50:31 GMT

Content-Type: application/x-javascript

Content-Length: 0

Last-Modified: Thu, 05 Mar 2015 08:08:31 GMT

Connection: close

ETag: "54f80eff-0"

Expires: Thu, 10 Sep 2015 00:50:32 GMT

Cache-Control: max-age=1

Accept-Ranges: bytes

GET /flash_ad_version.xml?ran=0.453344420529902 HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.swf/[[DYNAMIC]]/2

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: stat.api.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx/1.4.1

Date: Thu, 10 Sep 2015 00:50:30 GMT

Content-Type: text/xml

Content-Length: 119

Last-Modified: Wed, 27 May 2015 03:14:00 GMT

Connection: close

ETag: "55653678-77"

Accept-Ranges: bytes
<?xml version="1.0" encoding="utf-8"?>..<info>hXXp://cdn.c
omment.4399pk.com/control/A4399dv_base_main.swf?150527</info>..

GET /flashflowstatis/submitflowstatis.php?gameid=100015389&seedvalue=98f26cf2acbc7f1bbd3e193244e56347&adid=999&gamekey=asdf&nocache=1441846262031&os=Windows XP&lng=en&hosturl=hXXp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.htm&scres=1276x846&playurl=hXXp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.swf&fp=WIN 11,6,602,168&adLoadTime=0&adPlayTime=0&browser=Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)&ctrVer=5 HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.swf/[[DYNAMIC]]/3

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: stat.api.4399.com

Connection: Keep-Alive

Cookie: _4399stats_vid=14418462431248952


HTTP/1.1 200 OK

Server: nginx/1.4.1

Date: Thu, 10 Sep 2015 00:50:56 GMT

Content-Type: text/html

Last-Modified: Mon, 25 Jun 2012 13:33:36 GMT

Transfer-Encoding: chunked

Connection: close

Vary: Accept-Encoding

Content-Encoding: gzip

15..................2......0..

GET /xiaoyao/111111111111111111111111111111111111111.html HTTP/1.1

Accept: image/gif, image/bmp, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*

Referer: hXXp://VVV.vip5866.net/xiaoyao/111111111111111111111111111111111111111.html

Accept-Language: zh-cn

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

Host: VVV.vip5866.net

Cache-Control: no-cache


HTTP/1.1 302 Found

Server: Safedog/4.0.0

Location: /xiaoyao/111111111111111111111111111111111111111.html?WebShieldDRSessionVerify=E4zdt2CZbuOfpIUMCUJr

Content-Length: 0

Connection: Close

Content-Type: text/html

GET /upload_pic/2012/tjyx/tjrm_img07.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: imga2.5054399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Sat, 13 Jun 2015 13:02:57 GMT

Cache-Control: max-age=31536000

Content-Length: 3257

Content-Type: image/jpeg

Last-Modified: Wed, 29 Feb 2012 09:18:04 GMT

Accept-Ranges: bytes

ETag: "0ae5fac3f6cc1:396"

Server: Microsoft-IIS/6.0

Age: 1

X-Via: 1.1 fuzhou184:8106 (Cdn Cache Server V2.0), 1.1 kf48:7 (Cdn Cache Server V2.0)

Connection: keep-alive
......Exif..II*.................Ducky.......<......hXXp://ns.adobe.
com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?&g
t; <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-
c060 61.134777, 2010/02/12-17:32:00        "> <rdf:RDF xmlns:rdf
="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description
 rdf:about="" xmlns:xmpRights="hXXp://ns.adobe.com/xap/1.0/rights/" xm
lns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.ado
be.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/
1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:7C3C9
0818062E1119A50B0F09DBE5343" xmpMM:DocumentID="xmp.did:48F37DFA62B611E
1987FB533819DF614" xmpMM:InstanceID="xmp.iid:48F37DF962B611E1987FB5338
19DF614" xmp:CreatorTool="Adobe Photoshop 7.0"> <xmpMM:DerivedFr
om stRef:instanceID="uuid:02cd31e0-62b0-11e1-a9f2-89007db68855" stRef:
documentID="adobe:docid:photoshop:3e3cd8bb-62a6-11e1-b37d-c0893894c906
"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> &l
t;?xpacket end="r"?>....Adobe.d....................................
......................................................................
.......................................*.D............................
...............................................................!1AQ2.4
.a"3..q...BRb.#C...r.c67.......................!1...Q.Aq2..a3...."#.r.
Cc$4............?..........rxY7..H.".-.L...4j,f.QW1.U}.).......5......
.j....e!/~Ko-.s..E...m..8M.q.SH3.......*..gu- R5....m......H.p....<<< skipped >>>

GET /adx.php?c=d25pZD1iOGYwNjZhY2YyNjZjMzljAHM9YjhmMDY2YWNmMjY2YzM5YwB0PTE0NDE4NDYyMjUAc2U9MQBidT00AHByaWNlPVZmRFQwUUFLT19aN2pFcGdXNUlBOHFnOEQ3dVllNzE2MWJ5ZTlBAGNoYXJnZV9wcmljZT1WZkRUMFFBS09fWjdqRXBnVzVJQThxZzhEN3VZZTcxNjFieWU5QQBzaGFyaW5nX3ByaWNlPVZmRFQwUUFLT19aN2pFcGdXNUlBOHFnOEQ3dVllNzE2MWJ5ZTlBAHdpbl9kc3A9NABjaG1kPTEAYmRpZD1ENDVEOEIxRjMyNzBBMUQ2QjQ4RjBDRDA5MENDRDVBQQBjcHJvaWQ9AGJjaG1kPTAAdj0xAGk9Mzk0OWEyMzU HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/acom?adn=0&at=128&aurl=&cad=1&ccd=32&cec=gb2312&cfv=11&ch=0&col=en-us&conOP=0&cpa=1&cpro_lu=1,#dfe4f9,#000000,å®‹ä½“&dai=1&dis=0&layout_filter=rank<r=<u=http://VVV.4399.com/flash/78072.htm&lunum=6&n=80054191_cpr&pcs=951x668&pis=10000x10000&ps=784x-2&psr=1276x846&pss=990x880&qn=1a28bcd7a302e760&rad=&rsi0=980&rsi1=90&rsi5=4&rss0=&rss1=&rss2=&rss3=&rss4=&rss5=&rss6=&rss7=&scale=&skin=tabcloud_skin_5&stid=5&td_id=2279006&tn=baiduCustSTagLinkUnit&tpr=1441846229578&ts=1&version=2.0&xuanting=0&dtm=BAIDU_DUP2_SETJSONADSLOT&dc=2&di=u2279006&ti=é€ æ¢¦è¥¿æ¸¸3,é€ æ¢¦è¥¿æ¸¸å¤§é—¹å¤©åºç¯‡,4399é€ æ¢¦è¥¿æ¸¸3å°æ¸¸æˆ&tt=1441846229312.266.2281.2281

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: wn.pos.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=D45
HTTP/1.1 200 OK

Server: nginx

Date: Thu, 10 Sep 2015 00:50:29 GMT

Content-Type: image/gif

Content-Length: 49

Connection: keep-alive

Expires: Mon, 26 Jul 1997 05:00:00 GMT

GIF89a...................!.......,...........T..;HTTP/1.1 200 OK..Serv
er: nginx..Date: Thu, 10 Sep 2015 00:50:29 GMT..Content-Type: image/gi
f..Content-Length: 49..Connection: keep-alive..Expires: Mon, 26 Jul 19
97 05:00:00 GMT..GIF89a...................!.......,...........T..;..

GET /nova_fp.htm?br=6&fp=6ACA8294BA753F17232790FBE9460180&fp2=6ACA8294BA753F17232790FBE9460180&ci=&bi=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1&im=0&wf=0&ct=2016&bp=&m=&t=0&ft=&_=1441846250687 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://pos.baidu.com/wh/o.htm?ltr=&cf=u

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: eclick.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 10 Sep 2015 00:50:45 GMT

Content-Type: text/html

Content-Length: 114

Last-Modified: Wed, 09 Sep 2015 09:43:23 GMT

Connection: keep-alive

ETag: "55efff3b-72"

Expires: Thu, 10 Sep 2015 00:50:45 GMT

Cache-Control: max-age=0

Accept-Ranges: bytes
<!DOCTYPE html>.<html>.    <head>.        <meta c
harset="UTF-8" />    .    </head>.    <body>.    </b
ody>.</html>.HTTP/1.1 200 OK..Server: nginx..Date: Thu, 10 Se
p 2015 00:50:45 GMT..Content-Type: text/html..Content-Length: 114..Las
t-Modified: Wed, 09 Sep 2015 09:43:23 GMT..Connection: keep-alive..ETa
g: "55efff3b-72"..Expires: Thu, 10 Sep 2015 00:50:45 GMT..Cache-Contro
l: max-age=0..Accept-Ranges: bytes..<!DOCTYPE html>.<html>
.    <head>.        <meta charset="UTF-8" />    .    </
head>.    <body>.    </body>.</html>...

GET /xiaoyao/111111111111111111111111111111111111111.html?WebShieldDRSessionVerify=E4zdt2CZbuOfpIUMCUJr HTTP/1.1

Accept: image/gif, image/bmp, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*

Referer: hXXp://VVV.vip5866.net/xiaoyao/111111111111111111111111111111111111111.html

Accept-Language: zh-cn

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

Host: VVV.vip5866.net

Cache-Control: no-cache

Connection: Keep-Alive


HTTP/1.1 302 Found

Server: Safedog/4.0.0

Location: /xiaoyao/111111111111111111111111111111111111111.html

Content-Length: 0

Connection: Close

Content-Type: text/html

GET /upload_pic/2015/6/20/4399_14294510451.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: imga2.5054399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Tue, 23 Jun 2015 05:47:32 GMT

Cache-Control: max-age=31536000

Content-Length: 4488

Content-Type: image/jpeg

Last-Modified: Sat, 20 Jun 2015 06:29:45 GMT

Accept-Ranges: bytes

ETag: "80d27e7f22abd01:396"

Server: Microsoft-IIS/6.0

Age: 1

X-Via: 1.1 fuzhou185:88 (Cdn Cache Server V2.0), 1.1 kf49:0 (Cdn Cache Server V2.0)

Connection: keep-alive
......JFIF.....H.H.....C..............................................
......................C...............................................
........................*.D..........................................0
.............................!"..1#A.3Qaq.2BR.........................
.........;......................!...1A.Q."aqB...#2....Rb....34r.......
.........?...=.H2.gR ln./0D..._~...O.....AP..g. ._..P.u..t...#..??|...
v...S........."..1a...d...7.v..`j.^....3...........Q...&,w..K. %i%%w5.
.b.N!.,.jQ"BJ`.'....E.a....L.&......".!D...r..<.)".,. .j&.......QSu
..........jW. ..J.L.k..q ..%...sv....T8.....%@......_..........V......
.pS)..A..ao\.5.R3.x.1.6..\i~'.<.WX...}.}..Dv4kd.6..6.J..A..m.4.SR..
%......J..H.@).$..8..Y`o.zB.@. ...$.{.i.....kB0M....p......M.....~U,.(
[..5.!......$.}5SRKaN.)..I"... _y.srp..$...BZR..CWo2.....D.0.w..q;|...
&5.yN....cm3.J^...)0 l...J....B...D.l..&|U....KF...........2N.)[email protected].
[email protected]&A..:D.r.c^qY8.....U...aR(...I.R\..[S...*i/.Jh)eN...$x.3.t
..Sj..^p.Z.d..E.....6.W...5.C...#}.....,...`.&s.:.K...V..W...bz.....D.
9......[ ...9....bP.....R..G...@PZ.(.......wW...uL....O......ME....1(.
..6!..c>[email protected]?.T..U..'6.C)..T......'`.$.$..I....R-..t.
(. ..I.......!=........v...bnb..=2...<.u.%1.l...@R[...m(.F......:.;
.9....)[email protected]@....M.F..mxd{C.u*n.....FF...S.. &
y...u..{.$.............s.}&7L.`X.ZT.. .J.~....'.)6..,.N.R..JT`...$..0`
..<..g ..Q...dv....2 d...........iIZ\I...F...Br...Hu...*...;...f.T4
.q.NZ.*.....l.gp.(..b.`5[.....5.D*..l..m:.-.B...C.#.....v#%..O&.h.<<< skipped >>>

GET /upload_pic/2015/3/12/4399_17485812405.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: imga1.5054399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 11 Jun 2015 06:29:52 GMT

Cache-Control: max-age=31536000

Content-Length: 3665

Content-Type: image/jpeg

Last-Modified: Thu, 12 Mar 2015 09:48:58 GMT

Accept-Ranges: bytes

ETag: "0e1bac2a95cd01:396"

Server: Microsoft-IIS/6.0

Age: 1

X-Via: 1.1 fuzhou186:8105 (Cdn Cache Server V2.0), 1.1 kf49:5 (Cdn Cache Server V2.0)

Connection: keep-alive
......Exif..II*.................Ducky.......<.....mhXXp://ns.adobe.
com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?&g
t; <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-
c011 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf
="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description
 rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRe
f="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://n
s.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:5D0F06563000E4
11852EB53B0A44B31E" xmpMM:DocumentID="xmp.did:04DB1C99C89A11E488D2C85C
A5C73E70" xmpMM:InstanceID="xmp.iid:04DB1C98C89A11E488D2C85CA5C73E70" 
xmp:CreatorTool="Adobe Photoshop CS5 Windows"> <xmpMM:DerivedFro
m stRef:instanceID="xmp.iid:4CF0251A4B33E411981CFDB0683AC9B4" stRef:do
cumentID="xmp.did:5D0F06563000E411852EB53B0A44B31E"/> </rdf:Desc
ription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&
gt;....Adobe.d........................................................
......................................................................
...................*.D................................................
......................................!..12.A"3..Qa4..B#6..Rbrc$5q..S.
DduF......................!1...AQaq"......2..BRr..3..#C.4.............
?...h.........sF4.r....jM.Z.w....i\.H=..WM....{[email protected]..`.
..1E.B.-*%Q......N.......w[}...E..i....Fxa8."! ."h.........6......)J..
.`......m..o.X.qG......."J... ..:...\.EMT.;0.Zy...R.n...Ra......eI<<< skipped >>>

GET /media/v1/0f0000nHWaDGGJgmd7u1Zs.swf HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://ubmcmm.baidustatic.com/media/v1/0f000DlV0rvHMAROYHhQOs.swf?url_type=1&id_283672787=media/v1/0f000F_vSMdFWGLTLIlBvs.jpg&id_1821494

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ubmcmm.baidustatic.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 10 Sep 2015 00:50:42 GMT

Content-Type: application/x-shockwave-flash

Content-Length: 3703

Connection: close

Last-Modified: Sat, 25 Apr 2009 07:04:00 GMT

Expires: Tue, 23 Aug 2016 05:50:24 GMT

Age: 1450818

Cache-Control: max-age=31536000

media: media

Ohc-Content-Crc: 1729803941

Server: hkg01-sys-jorcol02.hkg01.baidu.com
CWS.....x..W.\...?w..da.K."jP.%.....e...B.. L...C.IX.Z.b]Z\..\j....b].
.V....P..>.Sk..jk7j.. ..p}..........s.g....9........!Hv...7<z.@.
U_..IN.U...6....6...*....J^5Jn..(.....PF ..#1".6.l..#...........j,..-f
.;.........Z...J. ....z..11e..nSD...".NUl........d...:Eu..`.... ..b.m3
. ^.Y......k../..2...3../....6..*......v..0.6. .:K.,..............A...
.Xo.......,.V...`g...Z..pO.,.D.K*..&.1G...p...l.v&!Z.......V..F.bc.5h.
e. .#.O)8...,~...$..........?.d....`...,....$6V.t.U.....p..2.1eZF_Xl1.
..|...B#.(..Afb..:7.'..P2....8....4..}y..}.q@.?.4.ru.L...k4...A..`!..\
...%.._.z.... hR.g .}.......o~.8._...o..{.....O{..:.....>.....o.c..
E.....6gE3....2....R..J}........io^?..d"r.....h....  ..o.j..I.V]._.d.c
 /kb...j.z5....-......U..-n...f%o..F.....?..N.{.d...|............mu...
..V..aW/.S.V}.N..;Si..X..>?....h.*v......d.2.....a.,..gX...hK>..
.na$.[.....2Hod...^.=4z.....ov .O.....DXTl....F.7$.Io..g.>....q....
cK.....{..d*.....g.(mnJ.M.Cx....O,h..s....H..........$.A&..I..t.\N.*!.
S..V..U.o..."...u....y..f.LG....^...J"w....m...'1..i@..!,d.N....|..Y..
[email protected]#.......[..~)Q....D...c|...r...[w.{M..h;..S:k
).".t......k...D.J..rZINLX..Z.7..~......I<.x..:r&-:...b.;}.......L6
E..,"~p....1I....e.....r./.}......f;.*E..[.w.eQ.A...e..m.....*....G.|p
.'.Z.....C7...pN.F......].Y..W2.?%........9.fL.m#...y....%.o.........0
....O...7%{..S.......9A>D._U......HB....E:../6_.....}M..J.....5.n..
Y..m....11...~.s....].v&..K.M........,...~......Z..tNh..=._H..1d.a....
}.....u....M7C..^K..F^.....qG..A...8.....).A|.PN.0...<S.}.H.u..<<< skipped >>>

GET /upload_pic/2012/tjyx/tjrm_img09.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: imga3.5054399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 11 Jun 2015 06:29:51 GMT

Cache-Control: max-age=31536000

Content-Length: 3085

Content-Type: image/jpeg

Last-Modified: Wed, 29 Feb 2012 09:18:04 GMT

Accept-Ranges: bytes

ETag: "0ae5fac3f6cc1:396"

Server: Microsoft-IIS/6.0

Age: 1

X-Via: 1.1 fuzhou186:8080 (Cdn Cache Server V2.0), 1.1 kf49:9 (Cdn Cache Server V2.0)

Connection: keep-alive
......Exif..II*.................Ducky.......<......hXXp://ns.adobe.
com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?&g
t; <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-
c060 61.134777, 2010/02/12-17:32:00        "> <rdf:RDF xmlns:rdf
="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description
 rdf:about="" xmlns:xmpRights="hXXp://ns.adobe.com/xap/1.0/rights/" xm
lns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.ado
be.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/
1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:7C3C9
0818062E1119A50B0F09DBE5343" xmpMM:DocumentID="xmp.did:490DB7D562B611E
1987FB533819DF614" xmpMM:InstanceID="xmp.iid:490DB7D462B611E1987FB5338
19DF614" xmp:CreatorTool="Adobe Photoshop 7.0"> <xmpMM:DerivedFr
om stRef:instanceID="uuid:02cd31e0-62b0-11e1-a9f2-89007db68855" stRef:
documentID="adobe:docid:photoshop:3e3cd8bb-62a6-11e1-b37d-c0893894c906
"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> &l
t;?xpacket end="r"?>....Adobe.d....................................
......................................................................
.......................................*.D............................
...........................................................1.!Q..A"2..
aq..r3..Rb.#C4...B..D^..........................!1.AQ.aq.."2........
..BR#br..3C.............?..nq^.....m......./.a...PGR.y.W.xH........F..
.&..k.K-..dw.h:7.x..\[email protected]...;A..~6.q8...<.%}.{.a..[w...im..9b.j<<< skipped >>>

GET /js/checkMobile.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: newsimg.5054399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Wed, 07 Oct 2015 13:31:36 GMT

Date: Fri, 10 Apr 2015 13:31:36 GMT

Server: nginx/1.4.2

Content-Type: application/x-javascript

Content-Length: 677

Last-Modified: Mon, 30 Jun 2014 03:15:56 GMT

ETag: "53b0d66c-2a5"

Cache-Control: max-age=15552000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzh37:8 (Cdn Cache Server V2.0)

Connection: keep-alive
/**.. * ..........check_mobile("android..........................","ip
hone................................IPAD....................","ipad...
.....................");.. */..function check_mobile(){..    var url =
 '';..    var ua = navigator.userAgent;..    ua = ua ? ua.toLowerCase(
).replace(/-/g, "") : "";..    if (ua.match(/(Android)/i) || (ua.match
(/(U;)/i) && ua.match(/(Adr)/i))){url = arguments[0] || '';}..    if (
ua.match(/(iPhone|iPod)/i) || (ua.match(/(U;)/i) && ua.match(/(iPh)/i)
)){url =  arguments[1] || '';}..    if (ua.match(/(iPad)/i) || (ua.mat
ch(/(U;)/i) && ua.match(/(iPd)/i))){url =  arguments[2] || '';}..    i
f(url){..        location.href = url;..    }..}HTTP/1.1 200 OK..Expire
s: Wed, 07 Oct 2015 13:31:36 GMT..Date: Fri, 10 Apr 2015 13:31:36 GMT.
.Server: nginx/1.4.2..Content-Type: application/x-javascript..Content-
Length: 677..Last-Modified: Mon, 30 Jun 2014 03:15:56 GMT..ETag: "53b0
d66c-2a5"..Cache-Control: max-age=15552000..Accept-Ranges: bytes..Age:
 1..X-Via: 1.1 hzh37:8 (Cdn Cache Server V2.0)..Connection: keep-alive
../**.. * ..........check_mobile("android..........................","
iphone................................IPAD....................","ipad.
.......................");.. */..function check_mobile(){..    var url
 = '';..    var ua = navigator.userAgent;..    ua = ua ? ua.toLowerCas
e().replace(/-/g, "") : "";..    if (ua.match(/(Android)/i) || (ua.mat
ch(/(U;)/i) && ua.match(/(Adr)/i))){url = arguments[0] || '';}..    if
 (ua.match(/(iPhone|iPod)/i) || (ua.match(/(U;)/i) && ua.match(/(i<<< skipped >>>

GET /uploads/userup/1507/2F952341b8.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: newsimg.5054399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sat, 13 Feb 2016 11:31:03 GMT

Date: Mon, 17 Aug 2015 11:31:03 GMT

Server: nginx/1.4.2

Content-Type: image/jpeg

Content-Length: 5062

Last-Modified: Mon, 17 Aug 2015 09:44:57 GMT

ETag: "55d1ad19-13c6"

Cache-Control: max-age=15552000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzh36:7 (Cdn Cache Server V2.0)

Connection: keep-alive
......JFIF.....d.d......Ducky.......S......Adobe.d....................
......................................................................
......................................................................
......................................................................
................!1.A."...Qaq2B..7W3Ss4T...Rr#C.d^U6.................
......!1...AQ..a."S.q..2R......B..U.br3...#.4$%.............?...bz. .}
..R.9.Mp......7^%[email protected]...
e.{..y{].ze..s.E.\....$..T.....P..4w>.Z......F..MJ....y.....^.1[.}E
.6..Dt37..,....k)2:ln..OP.x..u .R&gq..>........%...i......:k.9..Le.
J.<|.*.h.....T..... .Q.h"......2...p.r.......e~9..c|*.O.<..uoAT.
....O......./...},.....D......z`......=[..B........W....~.Z.0A.Kr.....
....^...n.q_4..(...z`......=[..B....m7v8....(...z`....G.=...B....m7v8.
...(...z`..Wr.........^..u7v8....(...z`..Sr.........^..m7v8....(...z`.
...C.=...B....m7v8....(...z`.U-.~=...B....m7v8....(...z`.5=..=...B....
m7v8....(...z`.U=....o.=..........h....:...=T.,...p.=..........h....:.
...i...z.{...^..e?v8.....~.Z.0..=^.9.bE...2.d..}\.FB2...zL. c...S}....
..4.b.f.*..d....OQ'....B0Q..)>R~....q[...........@.......?..;...U~.
.....=1...S......t.$7 .....u....jUR..EVp.t.*...2i.P....]......#..uv...
..].A..bE."B..-..M?.hP.R..%.U...i.y.....KH.Fu)UR*..#.0...#.:.K....'...
.V....._...p..y#!..w4.)d...1./.ETE0....N<.6....W....G.A.. ...g.(l#.
........2h.t..$&.,.48..4.na.6.`...G...........)...J...*.2.f&I.[b5.;P..
...;.'...%!./...o....[>..,.....sq%....l..}.....|g..T.z....6..A&<<< skipped >>>

GET /uploads/userup/1405/101634512c8.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: newsimg.5054399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Wed, 07 Oct 2015 13:31:34 GMT

Date: Fri, 10 Apr 2015 13:31:34 GMT

Server: nginx/1.4.2

Content-Type: image/jpeg

Content-Length: 5179

Last-Modified: Sat, 10 May 2014 08:34:51 GMT

ETag: "536de4ab-143b"

Cache-Control: max-age=15552000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzh41:9 (Cdn Cache Server V2.0)

Connection: keep-alive
......JFIF.....H.H.....C..............................................
.........          ...C................                               
                  ......K.d...........................................
<..........................!.."1.2A.#BQaq.3....$r..RSb.............
........................5........................!1A.."Qaq..2.........
#B.3R.............?._q..B.......H..........H...Q.....T...<7T#<..
..GC.B.X..E.y.T.e.J.S...*h...,.A(Y.....Im.o-.....m.....q.YP...T.\@#...
P.O....~%0X...BAV..LT?5.t...H..2.......'...^IUuX.y......]A>D|....N%
..2...%.n!Xj##...>.^....p..V.G....RK.r...g.....B..t.y@ |...Q..g|.&g
t;j......B.Q.......!.ZZC.R..._....6.O.L;].B)...Z.^.C.........Ol...C%^d
.*..`...c*%.~..[.:.....[.|@v......e...f4ki.S.en..~hPV....j...pg.C..cen
[email protected]...=.'.2..^......1..D...........#....u7
U.e.I..>..<..^]...l.\.....l.PYp.......8.6.t.o2.........Zz.._....
y..;..A.....(.B@P. .._..b....R..\..:.`.x.m=.t....:2...rP..Q..X.8?.i..U
*....4N.f4..VY.2*.4.q.`....-_e.U.G...9.......R.m......~.......A.L.q...
iRe>b.<....F.Q.}0...<....|-..[.......U.6U%d..".La.......8.T.Z
.R...1Qs.}...ogH=..F.{...p.$.S.T.......>.E...$.j^.....7I.~b..=.%e..
.ruo..[,...oOiK.. ...P=...........M.3R.......%.3.hJ<.?.M....4.D...u
?.#.)er.u%qb...oeh.n......6.........d.~..D.S*..nLQ...M{6.s...T\....).l
1.L.$a8.k' <..v...(...X..s....u.G[.i,....HBI..}~x....q..&fN....Uj.9
o..2c.[...- .A.EB...:;{.....&3\}. ..)...A.4..Y..N...cW....WI..B..."...
...n....w..u.=.%.D....bS...-JQ.-....;z..v......U....H..<TG",vR.<<< skipped >>>

GET /uploads/userup/1405/1016395W521.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: newsimg.5054399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Wed, 07 Oct 2015 13:31:33 GMT

Date: Fri, 10 Apr 2015 13:31:33 GMT

Server: nginx/1.4.2

Content-Type: image/jpeg

Content-Length: 3992

Last-Modified: Sat, 10 May 2014 08:39:58 GMT

ETag: "536de5de-f98"

Cache-Control: max-age=15552000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzh40:4 (Cdn Cache Server V2.0)

Connection: keep-alive
......JFIF.....d.d......Ducky.......<......Adobe.d.................
......................................................................
..........................................................<.P......
......................................................................
...........!...1.A"2..Qa.#.q.BR3$4r.SD........................!1A.Qa".
.q....2...BR..r3..b..#............?...)......-....\[email protected].....$
'7...3..xe.`m.m.....y("...D^..4.p.KZ.x0QQ..|....#N..KEZ..#.,.|....U...
..b..../T.......2..4B..^...G..6c.T.V..v..B....hZ0yjUj.(.u)..|..B!F...P
c0..]<....W.ml.T)..1./q~C..8.R.P.V.2....TD.?......H-..3.&.9]..L..R.
pZk...2.".....D. O......l]H...8d..n....q.y.E...QQZ...<...8F.......i
.....9.y...d.n.UI.\.....j.....M.*..l..y....i...#.f.]H..3.].hI.).6.Sq.q
.U..tW.L. Pp.UAU_......*o......b...&....21:k..;F..UTU.*..Z.....,...D.A
...e....(..%.#.v.W....(l"U5..../-....n..ZFD..0..n..9z*.v6.c'2:.E..W...
$47...Rnd...WQ..(.%..\..JS,%wqNs3..J .......U*Q.A.m.L_..\...f=.&...(..
.G.....O.6...*.S,.....cF".H....4..&."2..H^Ba....w............!.!..r;N.
.R..G%...g .!7.|..7".A2t........Zn.i.]e..*. O.=8.........i.}..Q..Z!...
8...8....xg..;.js8.J.*..d.......t.!.. ..B..CS%.1.)\...shi..S..Q..;/.r.
m...Ga.......8([n..........?....8.KH\...r....A..&Z.o....k........:T..N
.a.....-... ......u..3.....P=!...Dq...&r.....k..D. ..z....><U:4.
.........?.s..,C.x7-.&A.!...t.......H.k..%U..R....$..3..$..."?.....5\|
&......E%wR..S2RR.,.pc.h.?./[email protected]... ...TO.<{.N..
F(_qN.....(.m..?....y....!.v...^.<9".0....Z.!.<0X..1..#.?..r<<< skipped >>>

GET /uploads/userup/1502/02104939B23.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: newsimg.5054399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Wed, 07 Oct 2015 13:31:33 GMT

Date: Fri, 10 Apr 2015 13:31:33 GMT

Server: nginx/1.4.2

Content-Type: image/jpeg

Content-Length: 2985

Last-Modified: Tue, 03 Feb 2015 08:00:53 GMT

ETag: "54d08035-ba9"

Cache-Control: max-age=15552000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzh39:6 (Cdn Cache Server V2.0)

Connection: keep-alive
......Exif..II*.................Ducky.......2......Adobe.d............
...............................................#"""#''''''''''........
..........................................!! !!''''''''''......>.R.
."....................................................................
..................!.1A2Qa"R.q#3S........Bbr.T%$U......................
.!..1AQaq"2....R...Bb#...S$T.............?.N.k.jP.Z..5.(...[..;}.."6${
=.9..H...\..FI..l.....\,.. Q*3..sV^..k}....2...1\.N.f.<.%} Q.t...-.
.....,[.>2\1...p.L>o.......(.%[email protected]%......x."....q.$.]y..
A..y)......r.1*.$Y.N.T.w.p1@.....;...\^..Kx.....N......a.3{..F-.[.%v.R
...L.^0...L.....#...`.'.i3.V......d.....:.2`.`c.J8.r.4[..h...k9.S....n
...Z'R.....5....]P......L.....lK.9A.f....5*M<.......K3u&.gL.....).H
..n..m.,........N8.%[j...M..]#s<.?.Y. ...8..]..*G.f..B.4..........O
.SL_.s.q~..@.{>.M'..?!.S.Y...U"vj...X...S."......|...."...t.......m
..UW..O.#..f-..b....1..q..._.O.h.l%.P.....|..h..9.N2.<...M...h@;...
".w...?..e,m....$.Z....-.....L{.u......-,u.d..v.#.&.."Y.....0....0..6.
$.y.p#...#i1..4..Y|V.R..............b....mOb..I.....yb.;.dn..I$I.....#
)..j...."!..VP%.](&B..j:...]..l...y[...B.316c}*9w.US~W.9.\Z...{...-..!
./..42.H..6....Cq.8{..5..g..I.l.D"f.,T..*.lr&..l...z.....t_1...).e....
!.H......9*[email protected]....{r...........[.2..%.........$..'....q.
.r...X|]......E........V.7.......O.m.5..........Ex....Z..R.......B3.6.
..|..h........7...C..q...;<G.......NW..6....oW.}....MI.;......Z?..)
{#[...Y*P..O.'.jI.g...'.^...&V.....4.....zj...(..I..fF:._.ii....g.<<< skipped >>>

GET /uploads/userup/1508/2GJ54T541.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: newsimg.5054399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 23 Feb 2016 23:28:52 GMT

Date: Thu, 27 Aug 2015 23:28:52 GMT

Server: nginx/1.4.2

Content-Type: image/jpeg

Content-Length: 17318

Last-Modified: Thu, 27 Aug 2015 09:45:48 GMT

ETag: "55dedc4c-43a6"

Cache-Control: max-age=15552000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzh38:1 (Cdn Cache Server V2.0)

Connection: keep-alive
......JFIF.....`.`.....0Exif..MM.*.......1..............VVV.meitu.com.
...C..................................................................
..C...................................................................
....Z.................................................................
}........!1A..Qa."q.2....#B...R..$3br........%&'()*456789:CDEFGHIJSTUV
WXYZcdefghijstuvwxyz..................................................
......................................................................
......w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFG
HIJSTUVWXYZcdefghijstuvwxyz...........................................
.........................................?....:...7....U...<.....;K
.[e.{*.........$.I>~{...W....._^..{.....e.....N.c.Yr..'}.{5...M.G..
R..... i-%(...I.*q....#..z..q.%..Qm4.............\S..|.......k]..S....
.....$....z... ;....y......v...........*.E....[......U..*b.8.i....f...
M.. #........$.u.O.....t:l.........7C.A9......%..y...[.1.<....wK...
.....;....kgo......{y`....|Q....O.|.-..>T..$p:`..^ul.P....t.._...e.
.R.e..J..t...q.$.....];..v.m.....5x>.<^.9.."..Z^.g..".2......}.v
P....}_....~G.f..b....]..EI.Q.j....U}...>..........;O..$.5..9.. .&g
t;....c....g.t......3.........s...9...ElT rU..I............/j....V....
..W.c..D".....V....W..%....Z....>....T.,z......P...?.5{_.h.?.5K...{
km]..{.....T......hV..'p..8[]...X..O.T..e..:.M.5f..I'd.&.}..x........W
.:h>...uhJ}..9<.P. n..<c....}&?.)AJ.[_f.w..?)....|.4.../..'8Y
..k .;.F.....;^.t.7P...}~...n.f._.i-.....|....NWMr~6.........?kO.'<<< skipped >>>

GET /new5.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: newsimg.5054399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Mon, 04 Jan 2016 10:02:10 GMT

Date: Wed, 08 Jul 2015 10:02:10 GMT

Server: nginx/1.4.2

Content-Type: image/gif

Content-Length: 177

Last-Modified: Fri, 04 Nov 2011 08:15:40 GMT

ETag: "4eb39f2c-b1"

Cache-Control: max-age=15552000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzh41:10 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a...................!..NETSCAPE2.0.....!.......,..........&...j..
....q..Q..db".X.......F'z.....P..!.......,............n..6y.LJ>."U.
.!.......,............11....3..g.=M.U..;....

GET /uploads/userup/1404/0913524M015.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: newsimg.5054399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Wed, 07 Oct 2015 13:31:34 GMT

Date: Fri, 10 Apr 2015 13:31:34 GMT

Server: nginx/1.4.2

Content-Type: image/gif

Content-Length: 84

Last-Modified: Wed, 09 Apr 2014 05:52:47 GMT

ETag: "5344e02f-54"

Cache-Control: max-age=15552000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzh36:5 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a...................!.......,..........%T..j......i.....d.8...._.
...4p,....B..;....

GET /uploads/userup/1302/1Q62S330N.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: newsimg.5054399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Wed, 07 Oct 2015 13:31:34 GMT

Date: Fri, 10 Apr 2015 13:31:34 GMT

Server: nginx/1.4.2

Content-Type: image/gif

Content-Length: 5566

Last-Modified: Mon, 18 Feb 2013 08:28:33 GMT

ETag: "5121e631-15be"

Cache-Control: max-age=15552000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzh38:4 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89aq.N....3.....................W.....CFf.....R...f.ff..e..D...X...
..h.U...K.U.f3.......lbX5Y.g.g....E..ff&.....333..E..?..3V......3.....
.....Q.Q.k$f$....v::......l[(@>..DDN{N..w.g..s..,..#........t>..
I.......V.........O......q..v....s.}....$.$c.c......3f3.s.......*=...k
....8.8.7.F$~....I.6/.W....J......aYp!(.......c.U#.....W*........V.t.O
`...........//....xx.G......M..z.1..x.R.R.ss.e2........D.}'..........\
\....X..s1B........~m. .....D ..........-....'.......AA...{;...6......
x$.U......e..xx.hN.....!I=>)=#....OO3z.......U>(.wQ......%'6....
f.....V..E..u%.....opa......XpCD.. ..s...:.:.O.V*(.!&.Za{s1._....]....
..=.....v....e....J.....o....r..f..../'..I...o.......W[....w8..G......
poo.....^....zWS..j..:.....fH....t..n.n........!..w#[email protected].
...{..c..qq../W@.......!.......,....q.N........H......*\.. .2...SE%..e
..4..........RK.?qT0\<0....0=Z../..n..`..#..;.b..)a....x\k5.^#jQ...
f..U..F.j(CF..C.T;....)E...v..B.O.0$t...c<...w....j4....pA6.*....g.
[h..\d... CNh.R.../....l..?8eN..r..*.7.h...P..)j.$D@...'2k.;...c....T.
.....l9`.D..<bA.....?.k$..$(..H.5./N...xC.9.n.'$.. .../,....p[.....
..0sJz.i.T1jp../.x..}B.R... s..a..V,..SM-...Jr...../.....<Q.&.AR..0
......../A4...C.w.3BX`.-.|...(.p.7j... .H.....x.......<...,...D^..r
..a....B4..!....n~\3.(-.P.5....yA......(.>....G*D.......2.<..4u4
..(.@[email protected] $.s...<@.5.p(fp..q.Gp...&.hF....AA-N.z.....F.)..
J....G..t........$.'....2,Gj...8.H..9.8...R.....H1m-..`..~x0....q....b
.*.A....HC...n...\.2I.T.p......4Rtr.......`$....,........G.d1.2...<<< skipped >>>

GET /uploads/userup/1209/1GQ340U13.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: newsimg.5054399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Wed, 07 Oct 2015 13:31:35 GMT

Date: Fri, 10 Apr 2015 13:31:35 GMT

Server: nginx/1.4.2

Content-Type: image/gif

Content-Length: 527

Last-Modified: Mon, 17 Sep 2012 10:13:40 GMT

ETag: "5056f7d4-20f"

Cache-Control: max-age=15552000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzh39:8 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89aV...............................................................
....................%..................!.......,....V.......aHdi.h..l.
..ALtm.x..|....pH,....r.DV...tJ.Z..lU..z../8C...aA..n..f.:..s..<...
.3~y..zt{.{.............d...t...|.........................f.e.d..|....
.....e...........f........e.......d..f...t.........|.......q... ....|.
..{..a....@|(..D......."...3.t...I.|P...s.@../[[email protected]
Q.H..].....O..........\.s. 0.]3T.*v,..].V......p...K..]...............
7..... ^......#/NP.A...3k.......CgFP ..;HTTP/1.1 200 OK..Expires: Wed,
 07 Oct 2015 13:31:35 GMT..Date: Fri, 10 Apr 2015 13:31:35 GMT..Server
: nginx/1.4.2..Content-Type: image/gif..Content-Length: 527..Last-Modi
fied: Mon, 17 Sep 2012 10:13:40 GMT..ETag: "5056f7d4-20f"..Cache-Contr
ol: max-age=15552000..Accept-Ranges: bytes..Age: 1..X-Via: 1.1 hzh39:8
 (Cdn Cache Server V2.0)..Connection: keep-alive..GIF89aV.............
......................................................................
%..................!.......,....V.......aHdi.h..l...ALtm.x..|....pH,..
..r.DV...tJ.Z..lU..z../8C...aA..n..f.:..s..<....3~y..zt{.{.........
....d...t...|.........................f.e.d..|.........e...........f..
......e.......d..f...t.........|.......q... ....|...{..a....@|(..D....
..."...3.t...I.|P...s.@../[[email protected]..].....O........
..\.s. 0.]3T.*v,..].V......p...K..]...............7..... ^......#/NP.A
...3k.......CgFP ..;..<<< skipped >>>

GET /control/A4399dv_base.swf?20150512 HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.swf

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: cdn.comment.4399pk.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 10 Sep 2015 00:44:17 GMT

Server: Apache/2.2.22 (Unix)

Last-Modified: Tue, 12 May 2015 06:07:14 GMT

ETag: "4c2676-65d-515dc4e4e2ca5"

Accept-Ranges: bytes

Content-Length: 1629

Content-Type: application/x-shockwave-flash

Age: 1

X-Via: 1.1 kf49:8 (Cdn Cache Server V2.0)

Connection: keep-alive
CWS.....x..V.r.........B.....I.....A..".!\\....\.<.`...9..93...9~;.
..<........U.....O......6.z.w.......3 .....`..rl.....9..m[7..r5y6.[
N..vVz.;,....i.t#M.#Y......3..E..s...R.............5..d}....;  c......
r..N.q.K...6..."3..*.l...n...-2T....^..M..8.^.'K.l2.<<6.zr3.n..z
^..e...Q...B..-5[P....c%WP. .#..u.........i)..V....:Oa..D7..?.|.Ln..(.
.........._/. .>.`.u.../..-...h..6..........#...j'8e0...K._M..l....
.....q...4.i......9....W..f..P..W...V....i.....R....j...._..2........R
...O.N...{.t..........n.G&]...f3...L..F..a..'.\I)...|n..\.^Cq. ....Wm2
..0.l.3.vV&R1.|}..52).7..\'l._..G..6.wd.M..Ea.u.~I..Cp7.J.........$...
.....1.........>s .^E ..S...&.O.^. ......h..i.Ej..m....7q..6..KS...
...'.C..3#*.t.}.<..R,.)....7.J......o.Z.7...4s.w.........1..{Kh....
.....M..v..NMG_.c.k..5........!..'.......%VQ..."MW;.!b]`Y....~_`...Q..
...i.n.GN..D...QbM.!:.zN.u_.=.q.EC...J..............OA..;..;.NH.......
2.h.......F..&..,.JT..L......J......F...mVJ/...w.n.B.._..q...f......./
....Z............<....9.(Y..[.i...vaT......]?....%B/].N..4.f.....].
#..'H.\].._M6.....c].... R....U)..=..C..M..... ..R._?.X...xhQ.A|%.&.[0
.......D6.$..""[email protected].. ....H. q..Q$.!.C.<......7..G.
.....Fb..KH.....~..=......*...|....~..#..#..`[email protected].!.v
............!7n.y.!..a.$.&0...$....@[email protected]&....(;vb.p......7x ..A
 ....A..WG.....!. ..T9.S.Q......x5.I.K.x.z.....K........G.\..BG.rpwb..
u>[._...W..,?_.........._.........X....n.....'....!..^w.V.....`.sH.
.,.!...1.0.Uy......=....gD...(.1..4.id..FM.....U.^D. U`$..qR.Q1..B<<< skipped >>>

GET /control/ctrl_mo_v5.swf?20150416 HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.swf

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: cdn.comment.4399pk.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 10 Sep 2015 00:44:28 GMT

Server: nginx/1.0.4

Content-Type: application/x-shockwave-flash

Last-Modified: Wed, 15 Apr 2015 08:16:02 GMT

ETag: "538199e-64b96-513bef5329480"

Accept-Ranges: bytes

Content-Length: 412566

Age: 1

X-Via: 1.1 kf49:10 (Cdn Cache Server V2.0)

Connection: keep-alive
CWS..v..x...uX.[...,..$..t..J.t...).hX..S.......T......T.;...n...u.~..
;...].A..\c.y.1.....L./D..A.. ...)... (.....$<ll..........b..$.=..&
.......#..................\.~..K_.WO.f)$......pp.8.]....Vh/.$3.OZ_...h
]=.-m.V(nk........7/...(..{.,1h.]4.YJ...Tr...Gjy.mQ......).#$..W.?.G).
.R..||\.B\...|.bB|b|..."b...h.C.GSu.....c...... ...............I.gs...
.....wM..._z...Ou......<..=1.(..........Fy..<.Q@.......]r..X.Z..
)H................'.(..'..($..({A^^..........bS@[{..\1?.l..l.h..M.....
..?.**..........*.\..W....T...r9.._..@...(..o........7K.O...$..u......
s..n.._......l.w..[._l...n.W..o..{?.o....o......O;6.<(g...'.R>x.
....E{.Xb.,.....-..<.\..hk'.Ko..-v....]..]..9.I!!y.....ZR0)" .k. ..
.A.D....... ..PTWWGA.._.c..........A.......2.!1%h...n.. ..$..K...A....
.IA....&.........1ob\..#."...t.8.o.........RY.........}......j..k...cG
....|.O..Y:>-z......:]...v.qz..q.. J.....Uq.S..t.R.R..n...=.:..,..}
Ga: #Z...&.^..i..}...CC.Y99.....""#...,.......([email protected]{oo...`.ES
a3....r........"66...D.OO..;}.8w.\8fc............3...a(J....,.........
..??....PKs.....W..2...u..[.aG.yaa ...;"*.....O.<.............o.zT#
.p.%."cw.>2&&.5r5.......o.yf..|0.......Yl...u.* 7...W..g.....vx./MZ
O...,J.\......>=?..q...(.F..&...Z.S...aF.&.iQ.Z...........D{xz*..&l
t;........$.j.77..../.IHH...o......ddl.].6...cR.....0.j{.?r....\-l.R..
......2....1.............;g#.....)..z .gT...:....hU..`m.2{.9........Y.
@\..........33.^....Y-$...]vy=&....-.........ml.av.....Dr....k....^uvv
.l.z4.{N.2._.!5.....\.....h9T..z..}......s........E..WGeG..L..)g-.<<< skipped >>>

GET /moeryongshi/images/headerBg.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: news.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 13 Dec 2015 10:51:36 GMT

Date: Tue, 16 Jun 2015 10:51:36 GMT

Server: nginx/1.4.2

Content-Type: image/gif

Content-Length: 228

Last-Modified: Mon, 24 Jan 2011 07:46:00 GMT

ETag: "4d3d2e38-e4"

Cache-Control: max-age=15552000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 zjjhdx32:80 (Cdn Cache Server V2.0), 1.1 kf50:4 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a.. .............................................................
.......................................!.......,...... ...a.$.dY.h.Vl.
./%.t]3x..|....0B,......l:%...B.Z...v..z...X@.....:.n.....A...........
.|.............!.;HTTP/1.1 200 OK..Expires: Sun, 13 Dec 2015 10:51:36 
GMT..Date: Tue, 16 Jun 2015 10:51:36 GMT..Server: nginx/1.4.2..Content
-Type: image/gif..Content-Length: 228..Last-Modified: Mon, 24 Jan 2011
 07:46:00 GMT..ETag: "4d3d2e38-e4"..Cache-Control: max-age=15552000..A
ccept-Ranges: bytes..Age: 1..X-Via: 1.1 zjjhdx32:80 (Cdn Cache Server 
V2.0), 1.1 kf50:4 (Cdn Cache Server V2.0)..Connection: keep-alive..GIF
89a.. ................................................................
....................................!.......,...... ...a.$.dY.h.Vl../%
.t]3x..|....0B,......l:%...B.Z...v..z...X@.....:.n.....A............|.
............!.;....

GET /js/bdshare.js?t=8103 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: news.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 10 Sep 2015 00:50:30 GMT

Server: nginx/1.4.2

Content-Type: application/x-javascript

Content-Length: 182

Last-Modified: Fri, 12 Oct 2012 05:57:24 GMT

ETag: "5077b144-b6"

Expires: Tue, 08 Mar 2016 00:50:30 GMT

Cache-Control: max-age=15552000

Accept-Ranges: bytes

X-Via: 1.1 kf49:6 (Cdn Cache Server V2.0)

Connection: keep-alive
document.getElementById("bdshare").style.display = '';..document.getEl
ementById("bdshell_js").src = "hXXp://bdimg.share.baidu.com/static/js/
shell_v2.js?t="   new Date().getHours();..HTTP/1.1 200 OK..Date: Thu, 
10 Sep 2015 00:50:30 GMT..Server: nginx/1.4.2..Content-Type: applicati
on/x-javascript..Content-Length: 182..Last-Modified: Fri, 12 Oct 2012 
05:57:24 GMT..ETag: "5077b144-b6"..Expires: Tue, 08 Mar 2016 00:50:30 
GMT..Cache-Control: max-age=15552000..Accept-Ranges: bytes..X-Via: 1.1
 kf49:6 (Cdn Cache Server V2.0)..Connection: keep-alive..document.getE
lementById("bdshare").style.display = '';..document.getElementById("bd
shell_js").src = "hXXp://bdimg.share.baidu.com/static/js/shell_v2.js?t
="   new Date().getHours();....

GET /static/js/bds_s_v2.js?cdnversion=400513 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: bdimg.share.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1


HTTP/1.1 200 OK

Content-Type: text/javascript

ETag: "3106555647"

Accept-Ranges: bytes

Last-Modified: Wed, 02 Sep 2015 08:24:02 GMT

Expires: Fri, 09 Sep 2016 00:50:33 GMT

Cache-Control: max-age=31536000

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 9985

Date: Thu, 10 Sep 2015 00:50:33 GMT

Server: apache
...........|.r.......;liQ..l...>`.Z}......C.0.!.$|i b.'bb.....|....
|...........k.sz.............t.`0...........p=...BAV..*[email protected]&
lt;.4t..%...[...T.z..........G.#.....jn.>..}.....|....i.......wM..K
..M.2.D...{,...[..Qx.....(.F...n......k.V...#...k-...e..\V.2....?.....
..3..=.#.{.w..........p}{[.....z .P.Y.V....K..b.H./..=..`\oa...... ...
L..U..-g.#.7....Z.'.1...?....;..;{.z..w..o.....cAI..0.....@8....?.....
.f.C.C..K..c..E.......q,.=....OsG.'...&ROM..3.z.D......D."m.. ".CX5...
..:<9Q.4..mw..VK.$u..t.~_.t..-.|.........u'....j.U'.....r.p.Eo...m6
c...(l=/.(...r...1.>.,...\.~.ci.Y.*.VgE...:5..>..Zi<.....0..}
...u\...||....].e...,~....= `..7...v..S..YTi....{H`.V0.po.....B..9...9
...`..Q...2..g62...Y6...Q...v...c.O.....q...x.....V}we...^..U......%Ua
...j>?...d..<.....r...C.y...j....p.P[.a..0.,.[......]..s...5}..3
{|K...4.W...d.h{C...b....9.Z.#.......D..]l.....-......7...N....$.... .
A.2...V.gE#.Z$@JX~..G>~...zYG..)Y.gS..=........q>:.....=..t.d=..
j0z...U>/[email protected]....<> ..}.!.K....0He.....
O|.'>.V..9>. .\......L7.L[Q...@....%>....5N.u^Vp.....k..0&`..
.2*..=-.a0.1.9......O..S#.i4.tt& ..ia.......7...8s#5.#....<_T.(....
=.....E...]....h.'..ie.E....:k...p. N............o.G.........@wp~.B..V
N.[F."..........5..m0...58..:.!.c.1...~/J.....$.x8._8/...(v...1..)...H
...2.SD...P.....D.07L..& .vV.a.......-.A........#.*.!vR9 ..=.nd.6..](.
......C:.t.K.A...aePi...B.T@....,...#ipS.*.t-N......W..Oo... ......=..
.r.<...^.x$..L......'XQ0p...IV.3V.c......Q c.7#T<;..c...s.P.<<< skipped >>>

GET /static/images/is.png?cdnversion=20131219 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: bdimg.share.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1


HTTP/1.1 200 OK

Content-Type: image/png

ETag: "2871681017"

Accept-Ranges: bytes

Last-Modified: Wed, 02 Sep 2015 08:24:02 GMT

Expires: Fri, 09 Sep 2016 00:50:34 GMT

Cache-Control: max-age=31536000

Content-Length: 12294

Date: Thu, 10 Sep 2015 00:50:34 GMT

Server: apache
.PNG........IHDR.......<.......5*....tEXtSoftware.Adobe ImageReadyq
.e<...$iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0M
pCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmp
tk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        ">
; <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"&
gt; <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xa
p/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="htt
p://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Ph
otoshop CS6 (Macintosh)" xmpMM:InstanceID="xmp.iid:FB2478DF60B711E38EB
0C15A38F52D2D" xmpMM:DocumentID="xmp.did:FB2478E060B711E38EB0C15A38F52
D2D"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FB2478DD60B71
1E38EB0C15A38F52D2D" stRef:documentID="xmp.did:FB2478DE60B711E38EB0C15
A38F52D2D"/> </rdf:Description> </rdf:RDF> </x:xmpme
ta> <?xpacket end="r"?>.Yl.....PLTE......."..j0..o...........
.hm.. ..N......k.1...P.dW.G/....D2....e..xV..0..........{..u.%y.......
.......LlG...-0\....!v............C.....q.f.....667...#..6y.Kl.....p.X
...............OM.30..........Y............oo."......q..........T5....
......Ug..... .....4d.......Z.?.WW-..4.L7..B........Y..J.1.....ii.....
....87...c...Z.....ts2..E..T..n.i .....N._.../1.H......OM.9T.wv..&..".
..v..!..K....J.........U........B...U..................*B....E........
..........]__K........A..........Q#Y...G.......n.R..Y......R..........
.....t..W..5[.........j...........}.r..U....}......y....3r...h2p.5<<< skipped >>>

GET /flash_flow/end.js?g=100015389&u=4344a642c7b74da93f57eb6c358553c1&s=0190d1b28544545789b5e91707f4d317&a=700&r=13680342072 HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://cdn.comment.4399pk.com/control/A4399dv_base_main.swf?150527

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: stat.api.4399.com

Connection: Keep-Alive

Cookie: _4399stats_vid=14418462431248952


HTTP/1.1 200 OK

Server: nginx/1.4.2

Date: Thu, 10 Sep 2015 00:50:52 GMT

Content-Type: application/x-javascript

Content-Length: 0

Last-Modified: Mon, 18 May 2015 03:26:13 GMT

Connection: close

ETag: "55595bd5-0"

Expires: Thu, 10 Sep 2015 00:50:53 GMT

Cache-Control: max-age=1

Accept-Ranges: bytes

GET /fp.htm?ci=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1&cn=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1&cu=&cl=&cf=&ce=&ff=u&cuid=&cuid2=&de=&bp=&nip=&_=1441846250281 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://pos.baidu.com/wh/o.htm?ltr=&cf=u

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: eclick.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 10 Sep 2015 00:50:45 GMT

Content-Type: text/html

Content-Length: 114

Last-Modified: Wed, 09 Sep 2015 09:43:23 GMT

Connection: keep-alive

ETag: "55efff3b-72"

Expires: Thu, 10 Sep 2015 00:50:45 GMT

Cache-Control: max-age=0

Accept-Ranges: bytes
<!DOCTYPE html>.<html>.    <head>.        <meta c
harset="UTF-8" />    .    </head>.    <body>.    </b
ody>.</html>...

GET /upload_pic/2012/tjyx/tjrm_img06.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: imga1.5054399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 11 Jun 2015 06:29:52 GMT

Cache-Control: max-age=31536000

Content-Length: 3160

Content-Type: image/jpeg

Last-Modified: Wed, 29 Feb 2012 09:18:04 GMT

Accept-Ranges: bytes

ETag: "0ae5fac3f6cc1:396"

Server: Microsoft-IIS/6.0

Age: 1

X-Via: 1.1 fuzhou188:8108 (Cdn Cache Server V2.0), 1.1 kf50:8 (Cdn Cache Server V2.0)

Connection: keep-alive
......Exif..II*.................Ducky.......<......hXXp://ns.adobe.
com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?&g
t; <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-
c060 61.134777, 2010/02/12-17:32:00        "> <rdf:RDF xmlns:rdf
="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description
 rdf:about="" xmlns:xmpRights="hXXp://ns.adobe.com/xap/1.0/rights/" xm
lns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.ado
be.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/
1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:7C3C9
0818062E1119A50B0F09DBE5343" xmpMM:DocumentID="xmp.did:48F37DF662B611E
1987FB533819DF614" xmpMM:InstanceID="xmp.iid:48F37DF562B611E1987FB5338
19DF614" xmp:CreatorTool="Adobe Photoshop 7.0"> <xmpMM:DerivedFr
om stRef:instanceID="uuid:02cd31e0-62b0-11e1-a9f2-89007db68855" stRef:
documentID="adobe:docid:photoshop:3e3cd8bb-62a6-11e1-b37d-c0893894c906
"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> &l
t;?xpacket end="r"?>....Adobe.d....................................
......................................................................
.......................................*.D............................
.............................................................!1Q2..Aa3
."4.qR.....Bb#C....s5E6........................1.AQ.2.!a...".#.q..Br.3
.4.................?....6.....2.m...I.;.F.O.&O6..m-4....k>..WM....9
...P. ......ex.y6...wh...M.K.X#).-RE.}....b..S..6.*...t.qS.=......<<< skipped >>>

GET /tpl/wh.js HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/wh/o.htm?ltr=&cf=u

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: dup.baidustatic.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 10 Sep 2015 00:50:41 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: close

Last-Modified: Wed, 02 Sep 2015 09:30:59 GMT

Expires: Thu, 10 Sep 2015 00:51:29 GMT

Age: 252

Cache-Control: max-age=300

Content-Encoding: gzip

Ohc-Content-Crc: 3247347698

Server: hkg01-sys-jorcol06.hkg01.baidu.com
[email protected]..*...{...,...SZ2....~...{.,.
gu.}u. ...;.5........d9?;........:.<.....l..}._<j.0.r8[.py..~i.?
..-......Iw....-//N..^...H...j^~>...<..F.....`~:.vz......=.{;|..
?....pv5.P...x1{4.uOg...<;,....^.~lZ....Z{.....x2.R.......;.N..t...
4^|??..B.......7./^..........h2...........h.fy1?=|.;.{>.98..NG....l
x<;=\..L..{_.G.....1o.OL........L...'....x.x6...}...~......dv}=.Ng.
...\......Mk.o......G]a3.....E..h.p.X.......O......C..F..1....y.y.v...
.........l.s....q.3.......Y-.<.3O./..y.g...d..-.......1^_...,..&ewV
F..........a.U.......Pr...g-......P..;...Y^|....."i..Z..X...d...u.....
..W(..tv..<:.z6.......4}.....7.&.....R......3=/..M.rvr>.........
L.d:...'....7.....................L.%%.C.PO.T.......6=.J?......x......
[email protected].^.(.c..[z..xq.......!..N.k...b.
..o......N..E..J...*...tw;......S....S.e......{..v....2.^O.....~...k.a
..."....jR..6MnOv...S}p.n.[.........i..F...bv...N.-.....FIH..|~]|.]..o
O.<...........Wo...........R.X..1;..lY........Z ..d.t...W......t...
~qur.....w........!....lry.(.....lqv...<..7Gg.....g..xq4\..._.,[...
?....x.......g........|.....3?.:A.}.]..&W.=..W......J.]i...PK..~.{...z
_nM.H........7....F..tj.)...3..".........Tz.uo.nG... ..0e..2.|8.=.....
.3z=E........;,........P..g.gZ.m.......P...............}v.Qjy.T'......
.S....i.y....,......`|1o..L...........l.L...7.N..T.wg..l.......cN.....
L..Q.F..\$......O..l..u[.I..-$.2..5.OE.....]V.1...v:..;.F....M.s...16.
..X'#%.z_.E..8."*..,J..._..;$........_............Y#....z.......C.<<< skipped >>>

GET /core.php?web_id=30039538&t=q HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: c.cnzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/javascript

Content-Length: 2572

Connection: keep-alive

Date: Thu, 10 Sep 2015 00:47:48 GMT

Last-Modified: Thu, 10 Sep 2015 00:47:48 GMT

Expires: Thu, 10 Sep 2015 01:02:48 GMT

Via: cache2.l2de1[0,200-0,H], cache36.l2de1[1,0], cache9.de1[0,200-0,H], cache2.de1[1,0]

Age: 170

X-Cache: HIT TCP_MEM_HIT dirn:-2:-2

X-Swift-SaveTime: Thu, 10 Sep 2015 00:48:15 GMT

X-Swift-CacheTime: 873
!function(){var p,q,r,a=encodeURIComponent,b="30039538",c="",d="",e="o
nline_v3.php",f="hqs10.cnzz.com",g="",h="text",i="q",j="全ਾ
3;统计",k=window["_CNZZDbridge_" b]["bobject"],l="http:",m
="1",n=l "//online.cnzz.com/online/" e,o=[];o.push("id=" b),o.push("h=
" f),o.push("on=" a(d)),o.push("s=" a(c)),n ="?" o.join("&"),"0"===m&&
k["callRequest"]([l "//cnzz.mmstat.com/9.gif?abc=1"]),g&&(""!==d?k["cr
eateScriptIcon"](n,"utf-8"):(q="z"==i?"hXXp://VVV.cnzz.com/stat/websit
e.php?web_id=" b:"hXXp://quanjing.cnzz.com","pic"===h?(r=l "//icon.cnz
z.com/img/" c ".gif",p="<a href='" q "' target=_blank title='" j "'
><img border=0 hspace=0 vspace=0 src='" r "'></a>"):p="
<a href='" q "' target=_blank title='" j "'>" j "</a>",k["
createIcon"]([p])))}();(function(){function n(){this.c()}var p=['http:
//VVV.4399.com/'],e=document,g=window,m=encodeURIComponent,q="unknow",
l=null;n.prototype={c:function(){if(!1===this.d())return!1;var a;this.
a(e,"mousedown",this.b);a=g.navigator.userAgent;l=e.documentElement&&0
!==e.documentElement.clientHeight?e.documentElement:e.body;a=a?a.toLow
erCase().replace(/-/g,""):"";for(var b="netscape;se 1.;se 2.;saayaa;36
0se;tencent;qqbrowser;mqqbrowser;maxthon;myie;theworld;konqueror;firef
ox;chrome;safari;msie 5.0;msie 5.5;msie 6.0;msie 7.0;msie 8.0;msie 9.0
;msie 10.0;Mozilla;opera".split(";"),..d=0;d<b.length;d =1)if(-1!==
a.indexOf(b[d])){q=b[d];break}},a:function(a,b,d){a.addEventListener?a
.addEventListener(b,d,!1):a.attachEvent?a.attachEvent("on" b,d):a[<<< skipped >>>

GET /core.php?web_id=4073713&show=pic&t=z HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: c.cnzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/javascript

Content-Length: 764

Connection: keep-alive

Date: Thu, 10 Sep 2015 00:50:39 GMT

Last-Modified: Thu, 10 Sep 2015 00:50:39 GMT

Expires: Thu, 10 Sep 2015 01:05:39 GMT

Via: cache23.l2de1[352,200-0,M], cache14.l2de1[353,0], cache8.de1[353,200-0,M], cache2.de1[354,0]

X-Cache: MISS TCP_REFRESH_MISS dirn:-2:-2

X-Swift-SaveTime: Thu, 10 Sep 2015 00:50:39 GMT

X-Swift-CacheTime: 900
!function(){var p,q,r,a=encodeURIComponent,b="4073713",c="pic",d="",e=
"online_v3.php",f="zs25.cnzz.com",g="1",h="pic",i="z",j="站ž
71;统计",k=window["_CNZZDbridge_" b]["bobject"],l="http:",
m="0",n=l "//online.cnzz.com/online/" e,o=[];o.push("id=" b),o.push("h
=" f),o.push("on=" a(d)),o.push("s=" a(c)),n ="?" o.join("&"),"0"===m&
&k["callRequest"]([l "//cnzz.mmstat.com/9.gif?abc=1"]),g&&(""!==d?k["c
reateScriptIcon"](n,"utf-8"):(q="z"==i?"hXXp://VVV.cnzz.com/stat/websi
te.php?web_id=" b:"hXXp://quanjing.cnzz.com","pic"===h?(r=l "//icon.cn
zz.com/img/" c ".gif",p="<a href='" q "' target=_blank title='" j "
'><img border=0 hspace=0 vspace=0 src='" r "'></a>"):p=
"<a href='" q "' target=_blank title='" j "'>" j "</a>",k[
"createIcon"]([p])))}();HTTP/1.1 200 OK..Server: Tengine..Content-Type
: application/javascript..Content-Length: 764..Connection: keep-alive.
.Date: Thu, 10 Sep 2015 00:50:39 GMT..Last-Modified: Thu, 10 Sep 2015 
00:50:39 GMT..Expires: Thu, 10 Sep 2015 01:05:39 GMT..Via: cache23.l2d
e1[352,200-0,M], cache14.l2de1[353,0], cache8.de1[353,200-0,M], cache2
.de1[354,0]..X-Cache: MISS TCP_REFRESH_MISS dirn:-2:-2..X-Swift-SaveTi
me: Thu, 10 Sep 2015 00:50:39 GMT..X-Swift-CacheTime: 900..!function()
{var p,q,r,a=encodeURIComponent,b="4073713",c="pic",d="",e="online_v3.
php",f="zs25.cnzz.com",g="1",h="pic",i="z",j="站长统
计",k=window["_CNZZDbridge_" b]["bobject"],l="http:",m="0",n=l "
//online.cnzz.com/online/" e,o=[];o.push("id=" b),o.push("h=" f),o<<< skipped >>>

GET /it/u=1421353108,1764487604&fm=76 HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/acom?adn=0&at=128&aurl=&cad=1&ccd=32&cec=gb2312&cfv=11&ch=0&col=en-us&conOP=0&cpa=1&cpro_lu=1,#dfe4f9,#000000,å®‹ä½“&dai=1&dis=0&layout_filter=rank<r=<u=http://VVV.4399.com/flash/78072.htm&lunum=6&n=80054191_cpr&pcs=951x668&pis=10000x10000&ps=784x-2&psr=1276x846&pss=990x880&qn=1a28bcd7a302e760&rad=&rsi0=980&rsi1=90&rsi5=4&rss0=&rss1=&rss2=&rss3=&rss4=&rss5=&rss6=&rss7=&scale=&skin=tabcloud_skin_5&stid=5&td_id=2279006&tn=baiduCustSTagLinkUnit&tpr=1441846229578&ts=1&version=2.0&xuanting=0&dtm=BAIDU_DUP2_SETJSONADSLOT&dc=2&di=u2279006&ti=é€ æ¢¦è¥¿æ¸¸3,é€ æ¢¦è¥¿æ¸¸å¤§é—¹å¤©åºç¯‡,4399é€ æ¢¦è¥¿æ¸¸3å°æ¸¸æˆ&tt=1441846229312.266.2281.2281

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: t11.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1


HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Content-Type: image/jpeg

Expires: Sat, 10 Oct 2015 10:50:28 GMT

Cache-Control: max-age=2628000

Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT

ETag: 2c177ea518d0e0e0f94aadf63bba2af0

Content-Length: 55544

Date: Thu, 10 Sep 2015 00:50:28 GMT

Server: lighttpd
......JFIF.............C..............................................
......................C...............................................
............................."........................................
...D............................!..1"A..#Q.2aq.$...B.%3.&45R..6DETbr..
...................................>.........................!..1."
A.Q.#2a.Bq.3.......b...$DRSr.............?............G.....YFO.>.)
...MM.....2.."...Fyd..jl%....{...J..M....&..z.....L:..sY.....`1..b..(X
..h.L\.Hb....)V....JG.7d....K..t....2A..]W..1F.!.=.}.d...".....X.NH."&
.Tw.......F..A....P1=;...o.#..\},i....qZ\........d..K..u.o...cX.aK.M.c
.2.....gu...Gh..k4u.....y......"<.5..RN..........L....]X.R.. M,..;\
[email protected].$......]....a....U..8.g.t...>..9.....#U..v.M.....DL..
.up...J5.R......Tlc9...y.c..Zd....4........%|....(.\..N..{.....-#7]..Z
9..i..=.Qzb.-.n.L..0.4.......L........Q...c/..2...Q.'..V6....5.....g..
.D...h/4..h...*[email protected]...)...<......s..7.ef. .%Eu.J...3.6.(....X.g.\.
.."....;Iz..%].UI.3.6.hD-U.p...^)..u.I.[..Goz.........g..n.pS....L."..
\)(...V...#.,...V......m`.Gx......(.W}..>....;.w./......."....i.}..
...... ...r5....gy..u..........!.4j....uE.W.....?.m.}Z=..*.`..|d.08...
...Ik..#......>..........->./.Z..[.....PL...z..RrS....I.9.U#....
..VQ...?O3....K..".r._#.ae.......T..SE..fr..&;",<..T.fC..&.h.S..6..
..Ii*.)eW..,2...L9.q....=&..l..D.}4...G2*.k\..L.....-f .E.g..~...2.UW.
.CWZ..-.5sKT.(...........rH....I...t...Y.RV..K.R.=$......W..5<f.ZZj
.So....7yLrC.......Fz..~.]&.\oz.I.~.. Eu.bL.u.......L.....7...`...<<< skipped >>>

GET /it/u=1614745384,2134413757&fm=76 HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/acom?adn=0&at=128&aurl=&cad=1&ccd=32&cec=gb2312&cfv=11&ch=0&col=en-us&conOP=0&cpa=1&cpro_lu=1,#dfe4f9,#000000,å®‹ä½“&dai=1&dis=0&layout_filter=rank<r=<u=http://VVV.4399.com/flash/78072.htm&lunum=6&n=80054191_cpr&pcs=951x668&pis=10000x10000&ps=784x-2&psr=1276x846&pss=990x880&qn=1a28bcd7a302e760&rad=&rsi0=980&rsi1=90&rsi5=4&rss0=&rss1=&rss2=&rss3=&rss4=&rss5=&rss6=&rss7=&scale=&skin=tabcloud_skin_5&stid=5&td_id=2279006&tn=baiduCustSTagLinkUnit&tpr=1441846229578&ts=1&version=2.0&xuanting=0&dtm=BAIDU_DUP2_SETJSONADSLOT&dc=2&di=u2279006&ti=é€ æ¢¦è¥¿æ¸¸3,é€ æ¢¦è¥¿æ¸¸å¤§é—¹å¤©åºç¯‡,4399é€ æ¢¦è¥¿æ¸¸3å°æ¸¸æˆ&tt=1441846229312.266.2281.2281

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: t11.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1


HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Content-Type: image/jpeg

Expires: Sat, 10 Oct 2015 10:50:30 GMT

Cache-Control: max-age=2628000

Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT

ETag: 138fa54f0ca099244d3a7f4f8a6c9734

Content-Length: 65099

Date: Thu, 10 Sep 2015 00:50:30 GMT

Server: lighttpd
......JFIF.............C..............................................
......................C...............................................
............................."........................................
...:.............................!...".1#..2AB.$3Qa%&45CRb............
.........................<...........................!..1."A.Q.#2aq
.B.3...$R...K..............?..XJ......#Q....%._dT..........U.......3
5y...Dk.."M...UV......G..EOUF..x._....F..:....F....Q....x..U..........
..w1Z=.|..Z._.....9[.S.......V.|.u<[email protected]..$..?...}.`.FXT.j..CyY
.v...;.......n.(...%."..W.$G'...V.5w.......V........m..Z..~(.?..>.F
.5..E.'._....r...*.._w. W.;..=........UUX....|...#.U<*.....;..D."*#
Q.........rxjy...TO.....2.!x...b.~@*......}........m..>B.G]......&g
t;?.SF@ZoE..[H.....b8.bH....Z.X......b..9..w....F...H...#...]....'.r1.
r=..w..}.Y..."..N.V:..].U.....=.-GG...UQX.ETr"yO-..7.S..R.....)..Q...G
5#.\...W....<9U.P.Q..W..Cx>@_;...|m.~=R...K.. ........m....$.>
;......_."....#....9.}k.G'.T_.......#|md..wH.#.I..{..TEr5^.-../.].^...
...O.....K"..0.H.....^."....."..<..Z.UsU.....e....X.c...4..........
...\...?.=W.'...B.qV.nN...$n<|.......,..!.!><.............B..
.!.{0J...=.d.{...?...1...._V#|....7x].........Dk.........s~..'."..|..T
_W.9...Q.9.:..j.._$L....w..V.\.r5.......dUi....>&....>....j.....
.1]..}.|...DD..FO.F....6...........n.h. .#....?...v ........ .`.......
>..3...Y..YRez{5.F.UO.......p.._..M}.N..VK..",h.......Dlm.......=].
..J.m. ....D..V.<..t.Do.g#...r......:.z,.9....F.Y.UW5...Z..EO_.<<< skipped >>>

GET /flashUniLogin/css/style.css?v=20121016 HTTP/1.1

Accept: */*

Referer: hXXp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s4.img4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 11 Sep 2015 06:14:35 GMT

Date: Wed, 12 Aug 2015 06:14:35 GMT

Server: nginx/1.6.1

Content-Type: text/css

Content-Length: 4316

Last-Modified: Thu, 14 May 2015 06:02:29 GMT

ETag: "55543a75-10dc"

Cache-Control: max-age=2592000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 zhj192:8108 (Cdn Cache Server V2.0), 1.1 kf48:2 (Cdn Cache Server V2.0)

Connection: keep-alive
@charset "utf-8";..body{background-color:#37383c;}../*login*/..#regbot
 {display:block;}...loginDiv{border:none;width:538px;background:none;}
...login_hd{background:url(../images1/tbg.gif) no-repeat;padding:37px 
25px 0; }..#login_tagnum{background:url(../images1/ptlogin.gif) repeat
-y 0 0;padding:0 5px;}...login_fd{background:url(../images1/ptlogin.gi
f) no-repeat -538px 0;height:23px;}...login_close{background:url(../im
ages1/closed.gif) no-repeat;width:15px;height:15px;top:8px;}...login_c
lose:hover{background-position:0 -15px;}...login_horizon .ptlogin_btn,
 .login_vertical .ptlogin_btn{background:url(../images1/spriteV4.png) 
no-repeat;width:73px; height:28px; overflow:hidden;}...login_horizon a
, .login_vertical a{color:#ffaa00;}...login_vertical .login_hor .q_tip
{color:#899999;}...login_vertical .login_hor label{color:#899999;}..#l
ogin_tag{height:28px;}..#login_tag li, #login_tag li a, #login_tag li.
selectTag, #login_tag li.selectTag a{background:url(../images1/ptlogin
_tab.gif) no-repeat;}..#login_tag li{width:84px;height:28px;padding:0;
text-align:center;}..#login_tag li a{width:84px;height:28px;padding:0;
text-align:center;line-height:28px;}..#login_tag li.selectTag a{backgr
ound-position:0 0;color:#fff;}..#login_tag li a{background-position:-8
4px 0;color:#464646;}..#login_tag li{top:1px;}...login_vertical #login
_simple_toregister{background:url(../images1/spriteV4.png) no-repeat -
74px 0;width:73px;height:28px;overflow:hidden;}...login_vertical .ptlo
gin_register{background:url(../images1/spriteV4.png) no-repeat 0 -<<< skipped >>>

GET /xiaoyao/111111111111111111111111111111111111111.html HTTP/1.1

Accept: image/gif, image/bmp, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*

Referer: hXXp://VVV.vip5866.net/xiaoyao/111111111111111111111111111111111111111.html

Accept-Language: zh-cn

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

Host: VVV.vip5866.net

Cache-Control: no-cache

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: private

Content-Length: 7613

Content-Type: text/html

Server: Microsoft-IIS/7.5

Set-Cookie: android_first=yes; expires=Thu, 10-Sep-2015 04:44:58 GMT; path=/

Set-Cookie: pc_first=yes; expires=Thu, 10-Sep-2015 16:44:58 GMT; path=/

Set-Cookie: ASPSESSIONIDCCDACSAD=HIPNPBBAGDLCAAPMLBBFJFFP; path=/

X-Powered-By: ASP.NET

Date: Wed, 09 Sep 2015 16:44:57 GMT
      ..<html xmlns="hXXp://VVV.w3.org/1999/xhtml">..<head>
;..    <title>....Lu.............. ......anquye.......... laoseg
e.... ...... ...... ...... 26UUU ...... ........777me ...... kkxkkx ..
....wyt ..........</title>..    <meta http-equiv="Content-Typ
e" content="text/html; charset=gb2312">..    <meta http-equiv="R
efresh" content="600">..    <SCRIPT LANGUAGE="JavaScript">..f
unction AsciiString(ascii)..{...strOutput = "";...for (i = 0; i < a
scii.length; i  )....strOutput  = "&#"   ascii[i]   ";";...return strO
utput;..}..</SCRIPT>..    <style type="text/css">..       
 td..        {..            font-family: "...." , "Verdana";..        
    font-size: 12px;..            color: #333333;..            text-de
coration: none;..        }..        div..        {..            font-f
amily: "....";..            font-size: 12px;..            color: #0000
00;..            text-decoration: none;..        }..        a:hover.. 
       {..            font-family: "....";..            font-size: 12p
x;..            color: #0000ff;..            text-decoration: none;.. 
       }..        a..        {..            font-family: "....";..    
        font-size: 12px;..            color: #3366ff;..            tex
t-decoration: none;..        }..        body..        {..            f
ont-family: "....";..            font-size: 12px;..            color: 
#000000;..            text-decoration: none;..            background:u
rl("hXXp://23.252.165.27/a1.jpg") no-repeat left top, ..url("http:<<< skipped >>>

GET /xiaoyao/gggggggggggggggggggggggggggggggggggggggg.html HTTP/1.1

Accept: image/gif, image/bmp, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*

Referer: hXXp://VVV.vip5866.net/xiaoyao/gggggggggggggggggggggggggggggggggggggggg.html

Accept-Language: zh-cn

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

Host: VVV.vip5866.net

Cache-Control: no-cache

Cookie: android_first=yes; pc_first=yes; ASPSESSIONIDCCDACSAD=HIPNPBBAGDLCAAPMLBBFJFFP


HTTP/1.1 200 OK

Cache-Control: private

Content-Length: 7610

Content-Type: text/html

Server: Microsoft-IIS/7.5

X-Powered-By: ASP.NET

Date: Wed, 09 Sep 2015 16:44:58 GMT
      ..<html xmlns="hXXp://VVV.w3.org/1999/xhtml">..<head>
;..    <title>....Lu.............. ......anquye.......... laoseg
e.... ...... ...... ...... 26UUU ...... ........777me ...... kkxkkx ..
....wyt ..........</title>..    <meta http-equiv="Content-Typ
e" content="text/html; charset=gb2312">..    <meta http-equiv="R
efresh" content="600">..    <SCRIPT LANGUAGE="JavaScript">..f
unction AsciiString(ascii)..{...strOutput = "";...for (i = 0; i < a
scii.length; i  )....strOutput  = "&#"   ascii[i]   ";";...return strO
utput;..}..</SCRIPT>..    <style type="text/css">..       
 td..        {..            font-family: "...." , "Verdana";..        
    font-size: 12px;..            color: #333333;..            text-de
coration: none;..        }..        div..        {..            font-f
amily: "....";..            font-size: 12px;..            color: #0000
00;..            text-decoration: none;..        }..        a:hover.. 
       {..            font-family: "....";..            font-size: 12p
x;..            color: #0000ff;..            text-decoration: none;.. 
       }..        a..        {..            font-family: "....";..    
        font-size: 12px;..            color: #3366ff;..            tex
t-decoration: none;..        }..        body..        {..            f
ont-family: "....";..            font-size: 12px;..            color: 
#000000;..            text-decoration: none;..            background:u
rl("hXXp://23.252.165.27/a1.jpg") no-repeat left top, ..url("http:<<< skipped >>>

GET /upload_pic/2012/tjyx/tjrm_img08.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: imga.5054399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 11 Jun 2015 06:17:37 GMT

Cache-Control: max-age=31536000

Content-Length: 3177

Content-Type: image/jpeg

Last-Modified: Wed, 29 Feb 2012 09:18:04 GMT

Accept-Ranges: bytes

ETag: "0ae5fac3f6cc1:396"

Server: Microsoft-IIS/6.0

Age: 1

X-Via: 1.1 fuzhou191:8105 (Cdn Cache Server V2.0), 1.1 kf48:5 (Cdn Cache Server V2.0)

Connection: keep-alive
......Exif..II*.................Ducky.......<......hXXp://ns.adobe.
com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?&g
t; <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.0-
c060 61.134777, 2010/02/12-17:32:00        "> <rdf:RDF xmlns:rdf
="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description
 rdf:about="" xmlns:xmpRights="hXXp://ns.adobe.com/xap/1.0/rights/" xm
lns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.ado
be.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/
1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:7C3C9
0818062E1119A50B0F09DBE5343" xmpMM:DocumentID="xmp.did:48F37DFE62B611E
1987FB533819DF614" xmpMM:InstanceID="xmp.iid:48F37DFD62B611E1987FB5338
19DF614" xmp:CreatorTool="Adobe Photoshop 7.0"> <xmpMM:DerivedFr
om stRef:instanceID="uuid:02cd31e0-62b0-11e1-a9f2-89007db68855" stRef:
documentID="adobe:docid:photoshop:3e3cd8bb-62a6-11e1-b37d-c0893894c906
"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> &l
t;?xpacket end="r"?>....Adobe.d....................................
......................................................................
.......................................*.D............................
...........................................................!1.AQ2.3.."
.4aqBb.R#$D...r...CSE.6.......................!1..A..2...Qaq.".Bb#C...
...$..R............?.-.....X.r...\[email protected].}...C......k.p..
.\)...;mB.y54.Z.I..C..<n4{....?...U.k...N...{....mk.A....Hy....<<< skipped >>>

GET /stat.htm?id=4073713&r=&lg=en-us&ntime=none&cnzz_eid=1713335086-1441841440-&showp=1276x846&t=é€ æ¢¦è¥¿æ¸¸3,é€ æ¢¦è¥¿æ¸¸å¤§é—¹å¤©åºç¯‡,4399...&h=1&rnd=997698482 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: oz.cnzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: Tengine/1.4.6

Date: Thu, 10 Sep 2015 00:50:39 GMT

Content-Type: image/gif

Content-Length: 43

Last-Modified: Mon, 09 Mar 2015 09:01:02 GMT

Connection: close

Accept-Ranges: bytes

GIF89a.............!.......,...........D..;..

GET /media/v1/0f000DTf8hHHd5tgwQ8C8f.swf HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://ubmcmm.baidustatic.com/media/v1/0f000DlV0rvHMAROYHhQOs.swf?url_type=1&id_283672787=media/v1/0f000F_vSMdFWGLTLIlBvs.jpg&id_1821494

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ubmcmm.baidustatic.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 10 Sep 2015 00:50:43 GMT

Content-Type: application/x-shockwave-flash

Content-Length: 2987

Connection: close

Last-Modified: Sat, 25 Apr 2009 07:04:00 GMT

Expires: Tue, 05 Jul 2016 08:39:43 GMT

Age: 5674260

Cache-Control: max-age=31536000

media: media

Ohc-Content-Crc: 3045326669

Server: hkg01-sys-jorcol06.hkg01.baidu.com
CWS.....x..W{[email protected].$-.K.B....FZ...r..m.L.Lr[Rp.>...u-&
gt;....].A...f.......u.*..S.].....::N.......{....|........N:..z@N..!h.
....k.i..#.o....h.w.C.Z<[..S.#.6...;.;.Y...[... m.*[UU......D6^..-X
...4.1>....p.(.Y..-.Z.............~.&...!$.l..J...k....Vt..H0....-^
....w.d{... ..t...J:|T`.p.....;.h.}.&.#.\0......J.d.....n6.........o5.
........NNJ.._].3......pw...e...s(eY.KtI$..:....).*.4g.WHY..(8...U....
.e.J{m..|..IL..g..D..t.......bff.6........n........8....)V.-......i\!.
n...8...=......=x.......#h......?..T........J.2f.....N...C..m..?1...&l
t;.\...(.t....(2..b$.._.JL.f..m.L,..............4.....&.c..0..G`......
....C?`.....8h.a4.G......#w..w4......{.-#.....y?%o..&...u......vL.#...
....&.o.....rz.....[..g......E./..|..]=..y}o'.b...vl......-.-.....%...
c.....s.>/.M..&..N......P....-G........Y..{.}......]....V..r.bmh...
.s*[email protected]._.l...=.-..u.*.{....8y.../.......
......c..h.t.v.Qlu...u..D.. .. .8....Xc...v...-K..X..#.\[email protected]/...
...=..q.cG...../...6...~r$H.|f....}.jJ.`X......8l.........`4.....M.=..
 .5..9..V...W5..............8J....$.#u.\.p...-^}.<;.......P57./..;.
.j0...L.......A.=...O4........6.|.&.....}....l{d........%.3f..;.CusS.&
gt;.9..9]..2u7.[..gj.Lq...~Wq.g..g......L3...G..........N...B.......g8
.....a..{..(3....5z..y]...........X..mr.O...{...1V.e...f-..Yb..s...k..
.m./Ok.....OD6..F.m....XdX.......w%6..o7.x..........G..............kwL
.t?.....7.y..T.....Y....q..V..{G;2.v..z...sc`[...C|r...S'. ..$.N.....#
...........{*G..._....y}.9.{'_"...b.,L:.>...[v..G.`...hc$n2mS..<<< skipped >>>

GET /crossdomain.xml HTTP/1.1

Accept: */*

Accept-Language: en-US

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: cdn.comment.4399pk.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Wed, 09 Sep 2015 23:52:35 GMT

Server: nginx/1.0.4

Content-Type: application/xml

Last-Modified: Wed, 17 Mar 2010 03:06:58 GMT

ETag: "5288176-14b-481f66842f880"

Accept-Ranges: bytes

Content-Length: 331

Age: 1

X-Via: 1.1 fuzhou189:8107 (Cdn Cache Server V2.0), 1.1 kf49:3 (Cdn Cache Server V2.0)

Connection: keep-alive
<?xml version="1.0"?>..<!DOCTYPE cross-domain-policy SYSTEM '
hXXp://VVV.macromedia.com/xml/dtds/cross-domain-policy.dtd'>..<c
ross-domain-policy>..    <site-control permitted-cross-domain-po
licies="all" />..    <allow-access-from domain="*" />..    &l
t;allow-http-request-headers-from domain="*" headers="*"/>..</cr
oss-domain-policy>......


GET /control/zwsf2-3.gif?20120719 HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.swf

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: cdn.comment.4399pk.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sun, 06 Dec 2015 08:06:06 GMT

Date: Mon, 07 Sep 2015 08:06:06 GMT

Server: Apache/2.2.22 (Unix)

Last-Modified: Wed, 07 Sep 2011 08:07:32 GMT

Accept-Ranges: bytes

Content-Length: 11208

Content-Type: image/gif

ETag: "5383f2e-2bc8-4ac556fa31900"

Cache-Control: max-age=7776000

Age: 1

X-Via: 1.1 kf48:2 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89a..P...........[#.Z".Z#AAC.......wH..........ee.........   ...kkl
......aab.........ZZ[.zz...............noq..X@@@....66qqq.JJ..........
..PPQ............$$$...............   ......===................l:.....
.....  ...000......xxy...............................$$...EEF....["...
............HHI.DD...............uvx..{..b...555....]&...}}~.b-TTU...u
uu.....lrrtCCC999LLM.]]...eefnor...........r}~.BBD.f1.==.........zz{..
...........UU.PPFFH......KKL..v.mm...NNP....h5.............|P._(...stv
............BAC.....~...WWX.......  ..................................
..wwz......ggh.\$AAA......__`...{|~...................................
...................ccc~.....RRS....uu............................\#.Z"
.........GGI.........................["...SSU.Z"[email protected].
.v....]$...!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begin="..." i
d="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta
/" x:xmptk="Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00    
    "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-synt
ax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adob
e.com/xap/1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:st
Ref="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="
Adobe Photoshop CS5 Windows" xmpMM:InstanceID="xmp.iid:CFA3FEFBD85011E
0A753A3E3D59E8251" xmpMM:DocumentID="xmp.did:CFA3FEFCD85011E0A753A3E3D
59E8251"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:CFA3FEF9D
85011E0A753A3E3D59E8251" stRef:documentID="xmp.did:CFA3FEFAD85011E<<< skipped >>>

GET /control/A4399dv_base_main.swf?150527 HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.swf/[[DYNAMIC]]/2

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: cdn.comment.4399pk.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 10 Sep 2015 00:44:21 GMT

Server: nginx/1.0.4

Content-Type: application/x-shockwave-flash

Last-Modified: Wed, 27 May 2015 03:09:16 GMT

ETag: "538dd79-b645-5170791730f00"

Accept-Ranges: bytes

Content-Length: 46661

Age: 1

X-Via: 1.1 kf49:3 (Cdn Cache Server V2.0)

Connection: keep-alive
CWS..o..x....|..y/...35.0.k...H. A..s`p..A....x....4.L. ..../..$[./Y.%
..M.v,...8.. ..$.. #)...y.#o....$...6.....`..$..... .......k....*|AQjg
.e.S.V.S....?e..w6c.>u0.pujr:..w.......nk.r.J..xknv.-........ba....
M..............Gg'f.&r...`z$win...V...B.3.f'E.....dv*;=.o..F.Pft....J.
.O..LN........xn.....l..L....-..:s.s......H.!9.......T_..E.pf.........
......\..(`2......51sidr"?....i..t...(..KeFg...\q.;..O.............{.c
z...X.ZC.3...D......F..l......Jy....'.w..>}.......o...`.%m.....}...
.GN....=.....<~.k..<......._u(...q.PZ..A].5.........tz..tf.T.H.b
...gG..."...#?.A....s.t&3p.o..D~.;..u.;.x..Yz./.=xp...........pS m...s
......N..g..q...^....f.......Nozr2w.`n...Dzp:OE.2....s6w..c*..N.&....h
V.....?>1....<..L.../Od.T..8v....<u....27}[email protected] ..3.....
v..5.....SY..>..g.D!J...s....:.P`0.G.s.....(.._....;...L...........
Ta"C....f'.........t...T....hz2{..-.S....L...N.>qn...Qw.. ....|.wr.
...\4..C.........3Y......xvrFCSZ{W.....qNd..X...r......F#..;.h{{.y..7.
u.........}....F.. .$ .O .....Xz...2'X..?..j..m..........-..r;XP....`u
p]pW.SZ..s....k..n.z.Z..r.Vp..;..Z.. Wk.........M\...-\up.6.6r....9...
..wr5..0W....j'W..{...k.8.....{\.....Q.S..V......a~#s.k...8[.Ad.G.\Q..
#.#t t!t#..e.>\...mn.*......~Ec.._..Z..l.x...Wq0..Wq2..s.. S0h.b...
.9.\..=..hf.B.aP1kR.`. [email protected].*.....Qy.B...)...).T
..cnN..W(.t....J{.....^....3.S.)..7|.r<h.:.,......HS..:t.B.mTZ.].J.
..-.......I;..R..J.......5.#...A.P..q.u...v.u...8.....[0...l...XU..X.B
.x..K3..`l06.7.....n.QuPN..y.5..|......h..JcM0W.B...Y%.h4FRMFS$.l4<<< skipped >>>

GET /uploads/userup/1405/10163ZO2N.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: newsimg.5054399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Wed, 07 Oct 2015 13:31:33 GMT

Date: Fri, 10 Apr 2015 13:31:33 GMT

Server: nginx/1.4.2

Content-Type: image/jpeg

Content-Length: 3450

Last-Modified: Sat, 10 May 2014 08:39:07 GMT

ETag: "536de5ab-d7a"

Cache-Control: max-age=15552000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzh36:2 (Cdn Cache Server V2.0)

Connection: keep-alive
......JFIF.....H.H.....C..............................................
.........          ...C................                               
                  ......K.d...........................................
8..........................!1."AQa..#2q..BR.$r.3...D..................
.................*.......................1..!."AQ2a.#3.Rq.............
?.I...5...R..|Fe...9..l.fG..t.&...).Q..1%Z.......<u..@. ........55l
u[9H..]~..8.i...._.............V.H..L.l..[......i..7.}..PqM5.....D*##.
..6...o.tr}..-...c....x.'.PNV2.o.u,....w...Wu(a......*..z..8.L........
] .B..k..f..4..-.?]^......b[.........N...0.#...........n2..k...a..YNi.
.....4.X.....K.......:...q4.-.y.lJ........|..q....#M.*>$...p..Uy..)
(s......p.}5......a.;...Y..~....k....<$.I..W.M.." }.............M]A
h..S..A..t..Ly.........G.=U..s..TQ...2ZO....x..9l.s.{5....85f.... ...(
..y...h....%~.......v...P........... .... (,5W...PU{...q.`yr$.(..I....
.!yI..v...s..s....JZ....bpo../...{J.........U_..{N.q_e.?e. ....|...}A.
........m...].MU.W...H.;....&K..Y.?....\.<Xq..V....ez:!R.7.......G.
......|..t..|\[email protected].......\w..._.#y.jUo......-"...u...Y$x...
%?...Y[lu[...x...2.Q.C)C...1.^=..)"..8...0.5..).,...%$.R..j....H.o/Vm 
".d.tM...,..R...c ...l...)..g).Xo.jh.{v.....rG.vI......}N..z..".....s.
.......Z...4{[email protected]..?.S.[.,.cC.i!.n..l.j.....i.s..2uM*./..z.\8...&....
?...`..b.....M.q....5}..%E.u.{...x.C.]..-.k.[.wHu?e._...7.5..OME~.SE..
........[=p9t.S.>..n.......,h-..T.h.~.x..O9.w..?..s....f=....l..>
;.. .d.UB...S........F...Yd.1.....w......K......2....u.*....".....<<< skipped >>>

GET /uploads/userup/1504/011K053B24.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: newsimg.5054399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Mon, 02 Nov 2015 09:54:46 GMT

Date: Wed, 06 May 2015 09:54:46 GMT

Server: nginx/1.4.2

Content-Type: image/jpeg

Content-Length: 23651

Last-Modified: Wed, 06 May 2015 09:49:15 GMT

ETag: "5549e39b-5c63"

Cache-Control: max-age=15552000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzh39:7 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89a..Z.....#......A.......`j..=...........5...b........Nk...yF.6.J.
..............,..2..m.....}.. ..................g.U.{!...\....G%...j..
._.W.....rX..".........:. ..\5b8......1.#.....N'/gM.R*........T..2z)SR
[email protected].......>Lz
.^.$Q-Y.GA.7..8.........n..effL....n...........y....h....7.(.? Y2Ix.h.
n.Q.@... u.........y..X...p.x....v..J.iN......(q.y..d.9Y.t3..8..ES....
.yvv../..\.......y..Z.......y 2...wPf.....I..H.........K.-yAD.........
.r..~h.....=.[.i.Y..................<<[email protected]
.b...e.T.Eh............5...O..r..........k[~..N.......|._xa......a%...
u....n....#.............?jq{.....*..X.n.......Z......]......9.....@...
..D.......RF.aG.cf.g4.[...............c..0........s...................
.#Y.M.eG........:...!..NETSCAPE2.0.....!..XMP DataXMP<?xpacket begi
n="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adob
e:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:
44:00        "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22
-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="htt
p://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0
/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:Or
iginalDocumentID="xmp.did:120cfaf6-e284-f24f-967a-2472fe49d2ff" xmpMM:
DocumentID="xmp.did:8F323BA1F3D211E4A17C947FC07F503C" xmpMM:InstanceID
="xmp.iid:8F323BA0F3D211E4A17C947FC07F503C" xmp:CreatorTool="Adobe Pho
toshop CC 2014 (Windows)"> <xmpMM:DerivedFrom stRef:instance<<< skipped >>>

GET /uploads/userup/1508/31114144J08.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: newsimg.5054399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Sat, 27 Feb 2016 03:59:55 GMT

Date: Mon, 31 Aug 2015 03:59:55 GMT

Server: nginx/1.4.2

Content-Type: image/jpeg

Content-Length: 26084

Last-Modified: Mon, 31 Aug 2015 03:41:44 GMT

ETag: "55e3ccf8-65e4"

Cache-Control: max-age=15552000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzh40:5 (Cdn Cache Server V2.0)

Connection: keep-alive
......JFIF.....`.`.....C..............................................
......................C...............................................
........................Z.............................................
....................}........!1A..Qa."q.2....#B...R..$3br........%&'()
*456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................
......................................................................
..........................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.
....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz.......................
.............................................................?..G,4.).
.f.%...$M(./[email protected].|k.R..z^.K.... ... V.....MJ.(.RrI.{.G..[.[...?.
......U/k?/.......o......??.__?..V..............=.........W...../.....
?.......U..kk}......g....??._.!............=......{j......%......G..7.
........>........_....mYmS..%^~...[..`i......_.*.k/.... ...[.=.....
........#.}........S.............??._.!......}|........g.}.......{j...
...%^^~_..@...?.......W..'.~.~_w.....................>.............
.....}C.W...../.....?.......U..~_w..ua...........`i......o....5{5.oe..
k........?/..n.??.N....#.}........S......?..{j......%......G..7.......
......m_.~....C..H...f.......T{Y.}..~o.z...m_.~.........g.....>....
.......W.....]^...W..=.............#.}[......w.../k>.{........l....
....W.......>................z.._7.wl....?.U.......H...V?..o.F.....
...yWu.K...........y.....v..`i......o.......G....../...5.........uy...
Zy......>..........i.}..o.....=.............#.}I.?...r~..\~....<<< skipped >>>

GET /uploads/userup/1509/061051503Y1.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: newsimg.5054399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Fri, 04 Mar 2016 03:34:17 GMT

Date: Sun, 06 Sep 2015 03:34:17 GMT

Server: nginx/1.4.2

Content-Type: image/jpeg

Content-Length: 35860

Last-Modified: Sun, 06 Sep 2015 02:51:50 GMT

ETag: "55ebaa46-8c14"

Cache-Control: max-age=15552000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzh37:3 (Cdn Cache Server V2.0)

Connection: keep-alive
......Exif..II*.................Ducky.......A......hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c01
4 79.156797, 2014/08/20-09:53:02        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:3C6FEB2DF400E511A
6C2B49D502FC653" xmpMM:DocumentID="xmp.did:CCEBC17B4BA211E5B621B9642BD
C39DC" xmpMM:InstanceID="xmp.iid:CCEBC17A4BA211E5B621B9642BDC39DC" xmp
:CreatorTool="Adobe Photoshop CC 2014 (Windows)"> <xmpMM:Derived
From stRef:instanceID="xmp.iid:176c8334-94b6-bb43-a2f7-f86c8ce1e59c" s
tRef:documentID="adobe:docid:photoshop:e68e249b-4af9-11e5-9723-e508ab8
0d214"/> </rdf:Description> </rdf:RDF> </x:xmpmeta&g
t; <?xpacket end="r"?>....Adobe.d...............................
......................................................................
............................................2.........................
......................................................................
!1A.Qa"2..q..#3..BRr.4..CS..b.$.5....c..E6.s.DTU.....%&8..............
........!1..AQ.aq"......2...BR..br#3.......CS..$...s4c.5............?.
Ouq..s...K .#2....n..w.....d.s..gQ...x.\......yI.{(e.:>..L.7......f
$.=...:go...?.'$....t&.9.eF..M........1......Hs...w.."..I,.-..;..8<<< skipped >>>

GET /media/v1/0f000F_vSMdFWGLTLIlBvs.jpg HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://ubmcmm.baidustatic.com/media/v1/0f000DlV0rvHMAROYHhQOs.swf?url_type=1&id_283672787=media/v1/0f000F_vSMdFWGLTLIlBvs.jpg&id_1821494

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ubmcmm.baidustatic.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 10 Sep 2015 00:50:41 GMT

Content-Type: image/jpeg

Content-Length: 31543

Connection: close

Last-Modified: Sat, 25 Apr 2009 07:04:00 GMT

Expires: Tue, 05 Jul 2016 08:39:43 GMT

Age: 5674258

Cache-Control: max-age=31536000

media: media

Ohc-Content-Crc: 1457943764

Server: hkg01-sys-jorcol05.hkg01.baidu.com
......JFIF.....d.d......Ducky.......X......Adobe.d....................
......................................................................
.......................................................,..............
......................................................................
...........!..1AQ...a".q...2R#....B.....X...3$W...b.S..r..%.HCuf.'....
..................!..1A..Q...aq..".T.....2......Br..SR3CD..b.4#...c...
..........?....w.j..1..D...9........T9...W.F.B.9...W.F.B.9...W.F.B.9..
.W.F.B..u.@.(..f0..e.=..V'KAWR. ......Q..kH......m..*...=.y.Z..CV...'`
.(1..V...yQ...{!'.f..i.........=_r..d..Xk..\..c..9....~.....:!.....f..
.......z........sY.y..7...?..I...C.j./..i..A...Mq.. .6.?M...k....u.yR.
...1..4&~...|9.v.-z......7..nz........E)....i.P.MB.....\xc..... ...y*.
.a...s.......h}..Jk....E.%....Ajd.pPUT...Y{.....W..v.../;..}...-....-S
j[.&..)2.=..........e.3...f...]....;..%...6.?A.QJ.L..........L.-Onl.[&
lt;'.K..!U......G..9......i~.g......h.6U....uIO.!. .../{..,......{....
..o......|....w.i.........q.....[...../v...v..aqG.r..u..}T.....jk.....
...q.......u.#....>e.....Z.N.v..>.....~b).....b...-....z...6!.l.
. ..6.. L|%y..#..<...u........e.........}.i.J...V..S......9........
.4...U1.G..T_v..*|..t.Vi.s-..[......?.g/|.ja....v....Eq.....K.........
....F..,....a...}.z..R~...*N~...&3...&[..*#.%.c~..%{...K.}.....?.f.vW.
dS.,}....I.............n.....L..X.....>........=w.-..._.....c...>
;......:.....[....X...i....u..~.cL4.o.I^.]q.}..........W...J..2K....%.
.......?v.......m?.C.$..z...>..j~....CC.YU~....|d..._.G...O..I4<<< skipped >>>

GET /it/u=1136749690,815916792&fm=76 HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/acom?adn=0&at=128&aurl=&cad=1&ccd=32&cec=gb2312&cfv=11&ch=0&col=en-us&conOP=0&cpa=1&cpro_lu=1,#dfe4f9,#000000,å®‹ä½“&dai=1&dis=0&layout_filter=rank<r=<u=http://VVV.4399.com/flash/78072.htm&lunum=6&n=80054191_cpr&pcs=951x668&pis=10000x10000&ps=784x-2&psr=1276x846&pss=990x880&qn=1a28bcd7a302e760&rad=&rsi0=980&rsi1=90&rsi5=4&rss0=&rss1=&rss2=&rss3=&rss4=&rss5=&rss6=&rss7=&scale=&skin=tabcloud_skin_5&stid=5&td_id=2279006&tn=baiduCustSTagLinkUnit&tpr=1441846229578&ts=1&version=2.0&xuanting=0&dtm=BAIDU_DUP2_SETJSONADSLOT&dc=2&di=u2279006&ti=é€ æ¢¦è¥¿æ¸¸3,é€ æ¢¦è¥¿æ¸¸å¤§é—¹å¤©åºç¯‡,4399é€ æ¢¦è¥¿æ¸¸3å°æ¸¸æˆ&tt=1441846229312.266.2281.2281

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: t11.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1


HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Content-Type: image/jpeg

Expires: Sat, 10 Oct 2015 10:50:28 GMT

Cache-Control: max-age=2628000

Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT

ETag: 9c9d906f612c000f3eba9f4c910c01d4

Content-Length: 18530

Date: Thu, 10 Sep 2015 00:50:28 GMT

Server: lighttpd
......JFIF.............C..............................................
......................C...............................................
............................."........................................
.a...........................!1..AQ."aq..#$235U.......BCRrsv....F7St
.....ETVbc.....dfu.&DFe.....................................B.........
...............!..1AQ...5aq....S..."4R#23BCT......$.D..............?..
[email protected]{../.].........) ;..<d.?.U{q..i....-.
R*.#.J......k.]b{H._.r...9.g(I...6..a.j..Gl.'|A..\....-...{.......]^..
..U"9....}........".t.e.J.'.;g...F..0..x.d.RV9 . .?...[.y..5tu....7!.V
.y?...E.;...."..{....Aq.....'...l......x..U.=u......h..j...B::Y.....@.
...4R.]@.....)...}.P......L.2m.........c @..q..|..v....A..<.g.>*
[q...6B.]..<..'..w..e?.j..b..V.~...>.g.)}'Y.JOC.~S..w..e?.j..b..
V.~...>.g.(t.g.(t='.> G}..S.....(.5l..-Q..Vq..I.|R.C.~S..w..e?.j
..b..V.~...>.g.(t.g.(t='.> G}..S.....(.5l..-Q..Vq..I.|R...?).Z;.
.....G..G..e?.j..b...:N...}.I.O...f.....>}.>.[)..T|...h..u....z?
.|V..4...-Q..Wv......z...R.A/..'......{%..'..:N...G....kqj.6.t...o.K..
3..l..)....IH.9..%4&..W8..r#..9..o..j.z.G2.e.\...!<.K.....e..yr...Z
n...."..... X....Ox....D..=Ii.. e.5Lhc-.8K.a....)..M..2......z*a.m...k
...t......u.f.GK{.......O]h.zV....k.[.x_O%...i1..e.|m...g*.|....#..Ui.
.,D.........?.A..%.......`M.9..m.{0.c..N.8.m.W.~.a..\.wL.wX..N..f.`..8
'.. .Q.....1.}.x...N.E....(o@;bmM...VzoZ8......R......Z...;...# ._[...
...pxv...m..E.r.Y;.....UO..Z.'....?......C...n..G.$.....r....t.T..<<< skipped >>>

GET /it/u=1887182047,2242671149&fm=76 HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/acom?adn=0&at=128&aurl=&cad=1&ccd=32&cec=gb2312&cfv=11&ch=0&col=en-us&conOP=0&cpa=1&cpro_lu=1,#dfe4f9,#000000,å®‹ä½“&dai=1&dis=0&layout_filter=rank<r=<u=http://VVV.4399.com/flash/78072.htm&lunum=6&n=80054191_cpr&pcs=951x668&pis=10000x10000&ps=784x-2&psr=1276x846&pss=990x880&qn=1a28bcd7a302e760&rad=&rsi0=980&rsi1=90&rsi5=4&rss0=&rss1=&rss2=&rss3=&rss4=&rss5=&rss6=&rss7=&scale=&skin=tabcloud_skin_5&stid=5&td_id=2279006&tn=baiduCustSTagLinkUnit&tpr=1441846229578&ts=1&version=2.0&xuanting=0&dtm=BAIDU_DUP2_SETJSONADSLOT&dc=2&di=u2279006&ti=é€ æ¢¦è¥¿æ¸¸3,é€ æ¢¦è¥¿æ¸¸å¤§é—¹å¤©åºç¯‡,4399é€ æ¢¦è¥¿æ¸¸3å°æ¸¸æˆ&tt=1441846229312.266.2281.2281

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: t11.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1


HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Content-Type: image/jpeg

Expires: Sat, 10 Oct 2015 10:50:29 GMT

Cache-Control: max-age=2628000

Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT

ETag: 1eba3f5f97ea600bc3d2f3f1ab177c73

Content-Length: 36917

Date: Thu, 10 Sep 2015 00:50:29 GMT

Server: lighttpd
......JFIF.............C..............................................
......................C...............................................
............................."........................................
...C...........................!..1."A..Q2a.#q.$B....R...3..LDb.r...
.......................................................?..5.,...*Y.q..
H....R{I.W...............2. .........PT....(..*.n......7..\f..{..%E~J.
GiR...;....$y.>.X.W.{..y)J#{?.'....i!#d...z.'^......!o8.aH.B.=....)
QQ  .E:.R.x..}`[email protected].#Z..G..s..%CK.e!....).....m..#
Z%G.y..F...#).8....H..&.-......|i2.c.;m.t.e...H........i.....`}...2f#.
Nx..y,88.?.T..%.........R...}..Oi..w..G......S..P...;..'...._e.|...$..
..3qn.....&.b-o....%.!Q.*........#./y....c.......-..i.w.g...2~Y..3...[
s..A.WI.9hI...\.kn .m..R ..8...y.N!_.../s.G=.b1?m.8O.......J4>.#...
h....w.........n9.......c..D.%.N.-p..K....h...I.}A....l...Nb.L,i2.....
.......q..a...Gl.._E..'.cu./.9.....~$.euo.|.'......,...F6..1..W.....T.
#...e..C.,.....<7..R.b...2y...s.F;..N-..sx..2.PWT.Z..s-cH3!.._.Df..
..6.....O3.2.!........x.k.a7.....k.v3'..^ [email protected]..!e{_.........
.k..O......8g...9......:.x...Yt.H...l..rNH.z;.j.3.s..Aym!.......).|=.F
.z.3d.......q=u..Y.....*x.\Z.T)...~.G.*..Xu.._......NqS8.JT|..1..s.X..
<..WyF9'..i...'...%...[...i...p.e.Q!n8..Y)Ct....N._J...S....K.....X
.[?f..w..;S...E..........D31..6.:.....?W|.~MK....{...}.H.....R&$.]o.*N
.R......%..}....F..?....E [email protected]"W.
d.."..vIiK......]uR\..S.L......1....2....H BO.{..Q..I..z..Mj....AH<<< skipped >>>

GET /media/v1/0f0000mUMeDPtm1xsKSa96.swf HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://ubmcmm.baidustatic.com/media/v1/0f000DlV0rvHMAROYHhQOs.swf?url_type=1&id_283672787=media/v1/0f000F_vSMdFWGLTLIlBvs.jpg&id_1821494

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ubmcmm.baidustatic.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 10 Sep 2015 00:50:44 GMT

Content-Type: application/x-shockwave-flash

Content-Length: 4165

Connection: close

Last-Modified: Sat, 25 Apr 2009 07:04:00 GMT

Expires: Tue, 23 Aug 2016 05:50:25 GMT

Age: 1450819

Cache-Control: max-age=31536000

media: media

Ohc-Content-Crc: 2534512844

Server: hkg01-sys-jorcol10.hkg01.baidu.com
CWS.....x..Xy\...?w..da.K..AY.!.......Q.!`\.&.@.!.$,..U.V...Km...wZ...
U....[y..?.Z....jm.my7.R.....f23......{..3.D.............B.n..h..$...I
j..FK..%..........ZZ=Lj2...F..!.G...#1".2.h.k"..Aa.}.R.......MF..O.M..
...gR...B *..>.Z..10...j.EI.. .&..d....tE.A....d5...I3...b"K..E.({.
t.....j2'..rz&c.c?.9...j...c^E..:0V...$....J..T..g.H%.5..%.Ry..~...}9.
.>. ....*..&9...X..........m,..K.d......}A..A[..hyTl.<>2:F".O
....3._...(...?..p&C... .R.....|..7._l....c..A..8...)._1.Mf-....p..b.0
.jF[Tb2Z..$0.$h!..x............os.Q..#x...........@.]Y....(o".?.3....!
.|`.4.....~.u.).....T...x`k......G..f...-...3r`.7.&..!......y.....8...
..D.-. ..W<..T..SO.=............\.<.k........x..L....B..e....{{.
............~s..C.zN...2...... .(.7%S.U..r.....|7.. . ..t.N.....S.y.6.
.....}........7....L|._..d\<....M5].2.t..*......*..h7....".{. X1c..
..:&.3..>q..`..7....Pb1......Yl...O...9....9>.....nY8c....w...X.
..J.......R..b}......c......<R....4_}.g.~.....3|.....&M0W.d.C /.b..
.mD..xn.2..|.........../.N]o.J.a..&....}.........q~].....[.lr.....F..a
U..Y.F..Y...D..1.3.....fD.`..zZ.t.*Z-.....,[email protected]##.....@...
...W.a.].........W.a.. @......'..~3H..p.[ezL..:..#N.$o..t.N.....&.....
.7gk....2...fI............@..,9..4Q..\.Y......].ZK..!.eC.KK....Ale1LXs
x....a..=8m..B..{aH.E.{......}.H...*..^.>...^H^.M_?......%p../y..D\
8..| ...&b.......!.s.`....g.......\.Z.....z&..h..4.'n..x._...=o.......
..;...~;..e..4....kg...H.^....{$....J.zM. Q...b......2B.?..|.>.  ..
.l...p.&.'..e.{...&/T..f.....r.c....[.5.E;Q..q.t..t.4.....6I.9....<<< skipped >>>

GET /resource/ucenter.js HTTP/1.1

Accept: */*

Referer: hXXp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ptlogin.3304399.net

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Thu, 10 Sep 2015 01:37:45 GMT

Date: Thu, 10 Sep 2015 00:37:45 GMT

Server: nginx/1.4.1

Content-Type: application/x-javascript

Content-Length: 46416

Last-Modified: Fri, 17 Jul 2015 08:10:58 GMT

ETag: "55a8b892-b550"

Cache-Control: max-age=3600

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 jfzh182:80 (Cdn Cache Server V2.0), 1.1 kf48:10 (Cdn Cache Server V2.0)

Connection: keep-alive
uni_login_type_key = "loginType";..uni_login_username_key = "username"
;..uni_login_uid_key = "uid";..uni_login_nick_key = "Pnick";..uni_logi
n_qqnick_key = "Qnick";..uni_login_puser_key = "Puser";..uni_login_ptu
sertype_key = "ptusertype";..uni_login_phonebinded = "phonebinded";..u
ni_login_lastLoginDate = "lastLoginDate";..uni_login_lastLoginAppGame 
= "lastLoginAppGame";..uni_login_lastLoginTime = "lastLoginTimeStamp";
..uni_login_type_qq = "qq";..uni_login_layout_horizontal = "horizontal
";..uni_login_layout_vertical = "vertical";.....var unionLoginProps = 
{};..function getCookieValue(propKey, defaultValue){...uniCookie = JK.
Passport.get();...if(!uniCookie)....return defaultValue;...return uniC
ookie[propKey] || defaultValue;..}..UniLogin = {};..UniLogin.getUid = 
function(){...return getCookieValue(uni_login_uid_key);..}..UniLogin.g
etUname = function(){...return getCookieValue(uni_login_username_key);
..}..UniLogin.getUserType = function(){...return getCookieValue(uni_lo
gin_ptusertype_key);..}..UniLogin.getQnick = function(){...return getC
ookieValue(uni_login_qqnick_key);..}..UniLogin.getNick = function(){..
.if (!UniLogin.getUid()) return null;...var nick = getCookieValue(uni_
login_nick_key);...if (!nick) {....return null;...} else {....if (nick
.replace(/[^x00-xFF]/g,'**').length < 2) {.....return null;....} el
se {.....return nick;....}...}..}..fetchNickTryCount = 0;..UniLogin.fe
tchNick = function(callback){..setTimeout(function(){....if (!UniLogin
.getUid()) return;....var nick = getCookieValue(uni_login_nick_key<<< skipped >>>

GET /xml.php?ran=5480.840429663658&gameid=100015389&url=http://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.htm HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://cdn.comment.4399pk.com/control/A4399dv_base_main.swf?150527

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: stat.api.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 10 Sep 2015 00:50:31 GMT

Server: Apache/2.4.7 (Unix)

Content-Length: 680

Connection: close

Content-Type: text/xml; charset=utf-8
<?xml version="1.0" encoding="UTF-8" ?>.<config><entry 
id="62872" category="brand" time2skip="12"><item src="hXXp://cb.
baidu.com/ecom?di=62872&tm=BAIDU_CLB_XML&asp_url=4399.com&
return_type=1" click_base="hXXp://stat.api.flashgame163.com/brand.php?
url=" /></entry><entry id="999" category="baidu" time2skip
="12" channel="417" code="u2075136" pubid="www4399com_tp_cpr" /><
;entry id="999" category="google" time2skip="12" channel="0000000398,g
ame398" pubid="ca-games-pub-9606551472994074" /><entry id="999" 
category="combrand" time2skip="12" width="640" height="640"><ite
m src="hXXp://cdn.comment.4399pk.com/control/4399.swf" link="" bgcolor
="0xb5e9f9" /></entry></config>..

GET /media/v1/0f000PDTSGXtJ3W50fJSys.png HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://ubmcmm.baidustatic.com/media/v1/0f000DlV0rvHMAROYHhQOs.swf?url_type=1&id_283672787=media/v1/0f000F_vSMdFWGLTLIlBvs.jpg&id_1821494

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ubmcmm.baidustatic.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 10 Sep 2015 00:50:44 GMT

Content-Type: image/png

Content-Length: 29758

Connection: close

Last-Modified: Sat, 25 Apr 2009 07:04:00 GMT

Expires: Fri, 19 Aug 2016 23:10:56 GMT

Age: 1733988

Cache-Control: max-age=31536000

media: media

Ohc-Content-Crc: 3985477588

Server: hkg01-sys-jorcol01.hkg01.baidu.com
.PNG........IHDR.......r......9......pHYs................ cHRM..z%....
..........u0...`..:....o._.F..s.IDATx...w.m.u....2..{..{9..w..I...I...
H.mY...Ql.5.I.r.....$~...9.l]K.,.*4)Rb. @......Sp..e..f....1.9.$..E...
...8...{.=..........3p..K.................<......|....Vi..`..25G.:.
1.Z(...|..G.k.A..9G..'[email protected]..~.<..
R..dQ.ts..7..........9.<.W..n.....S8'."gx..q.6.S?J...kA.2...$....".
$..J..8=s..S?...,6...[....o.%....I!Y........%...k..}....e.ee..[o.....o
...7..{a...B......o.k.7..{."....4...`....f/..[....A8[...._y.......`. .
t....^.....n;8B).u?..V...F .......\.....>..2r|!.Bv.... ........@u..
/....<.7x..7..{}.u#...a......v...^.#..B.\=#7......;... ldd.1..m.(.@
..(.DJ...!...7.?............72r........Rb...<..Q...[..l...8j[....G.
$I._....z. &..^.O.jR...z..&....B. ....zM.-.@!%R)...c...../E...%..$....
sg.i... .....A.X..?..'.lo..|...2..oi.yY........b8......D.I.E.TFw..$..`
.U.P.k2.b..c4.Q.'...f{[email protected].............)......3...\....J).w.PJ
..0......}.YO1.F..=.d.1...r.u..X'8:..&A..p.?Q.*...... .Y.T....FC*%....
Z<........\N-ox.},.,Q.....^Y....z..,.......R"..~.8'.p....7qi....A.s
ss......._7..cX.\....dh.....Z...../?......8..F..)Emgs..m./Y... .....{.
C.n...t...Z=....JU.ww..s).5?..p.3yC....^....}.`..j...x.Y...~..M._.....
j.<Y.g.8..h.e.s....{........=...y...:i.".xMc...1....hM._.Q/.(..m.o.
.K/.}...=.T2^Z>xfe.`>.%7....N...$.9.z...o.....{..ww7>q.......
........%%.0.Z.........?..no.......<....?...776......R..Y....<..
 $Y..B.z.....&o.......:Y...G...N0....:...XhKq.............8$O..J..<<< skipped >>>

GET /crossdomain.xml HTTP/1.1

Accept: */*

Accept-Language: en-US

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pos.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1


HTTP/1.1 200 OK

Accept-Ranges: bytes

Connection: keep-alive

Content-Length: 4121

Content-Type: text/xml

Date: Thu, 10 Sep 2015 00:50:37 GMT

Etag: "554c2327-1019"

Last-Modified: Fri, 08 May 2015 02:44:55 GMT

Server: nginx
<?xml version="1.0"?>..<!DOCTYPE cross-domain-policy SYSTEM "
hXXp://VVV.adobe.com/xml/dtds/cross-domain-policy.dtd">..<cross-
domain-policy>..    <site-control permitted-cross-domain-policie
s="master-only"/> ..    <allow-access-from domain="*.4399.com"/&
gt;..    <allow-http-request-headers-from domain="*.4399.com" heade
rs="SOAPAction"/>..    <allow-access-from domain="*.4399.net"/&g
t;..    <allow-http-request-headers-from domain="*.4399.net" header
s="SOAPAction"/>..    <allow-access-from domain="*.4399api.com"/
>..    <allow-http-request-headers-from domain="*.4399api.com" h
eaders="SOAPAction"/>..    <allow-access-from domain="*.4399dmw.
com"/>..    <allow-http-request-headers-from domain="*.4399dmw.c
om" headers="SOAPAction"/>..    <allow-access-from domain="*.439
9er.com"/>..    <allow-http-request-headers-from domain="*.4399e
r.com" headers="SOAPAction"/>..    <allow-access-from domain="*.
4399pk.com"/>..    <allow-http-request-headers-from domain="*.43
99pk.com" headers="SOAPAction"/>..    <allow-access-from domain=
"*.4399pk.net"/>..    <allow-http-request-headers-from domain="*
.4399pk.net" headers="SOAPAction"/>..    <allow-access-from doma
in="*.5054399.com"/>..    <allow-http-request-headers-from domai
n="*.5054399.com" headers="SOAPAction"/>..    <allow-access-from
 domain="*.61.com"/>..    <allow-http-request-headers-from domai
n="*.61.com" headers="SOAPAction"/>..    <allow-access-from <<< skipped >>>

GET /ecom?di=u2075136&dtm=BAIDU_DUP_JSONTEMPLATE&dcf=2&dri=0&dvi=0.0&ltu=http://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.htm&cfv=11&tsr=0&tcn=1441846243&tpr=1441846242796&coa=at=image&rsi0=400&rsi1=300&tn=baidujson_patch HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://cpro.baidu.com/cpro/ui/baiduPatch.swf

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pos.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1


HTTP/1.1 200 OK

Cache-Control: post-check=0, pre-check=0

Connection: keep-alive

Content-Length: 2593

Content-Type: application/json

Date: Thu, 10 Sep 2015 00:50:37 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Last-Modified: Thu Sep 10 08:50:37 2015

P3p: CP=" OTI DSP COR IVA OUR IND COM "

Pragma: no-cache

Server: nginx

{"qid" : "f95b370192d7dc18","conf" : "","slots" : [{"id" : "u2075136",
"index" : 0,"conf" : {"width" : 400, "height" : 300, "aurl" : "", "aco
lor" : "", "ext" : {"renderer":"hXXp://cpro.baidustatic.com/cpro/ui/re
nderer/baiduImageRender.swf"}},"ads" : [{"index" : 0,"data" : {"meta" 
: [{"title" : "","desc" : " ","surl" : "VVV.lqgongchengjixie.com","cur
l" : "hXXp://VVV.baidu.com/cpro.php?M1bK00j7o8q44N1gh_xzuIVMvbWost8JL5
jbcCaFSIevGG8StuJSNY44jIi2fq1k-cfHNpKFa59NNqBt4FQRYwSI2eCcquArBFpEv3Cr
NQoij-7iAEJIzYvCBln4.7Y_aWePH_YPiTvNOfq2c7Bm3rj6errOxaeHzYnxQjWhyAp7WW
8LJ.IgF_5y9YIZ0lQzq1ra3Yn1b4QhPEUitYn1b4TLIhQLNsUAq9u7q1IvmEuMwsPzqCmy
4BmytEnW0knW0knjTEPBq3uvGvnH61Qh9YUfKYUHYknHbYPjmv0Zwd5gRznjTdnHnv0Zwb
5HcsP1Rkn1m0IvsqnsKWUMw85gILI1f1rH-WUvdxIZKxmLKz0APCUyfqnfK1mv9VujYk0Z
Ps5Hf30AN3IjYs0A7bmvk9TLnqn6K1uAVxIWYs0ZIG5HD0TvwogLu-TMPGUv3q0A49TLws
5HD0TMnqn0KWuWYs0APYUHdBmy-bIRPdTLw2Tvq80A49IZRqrfKGIA-b5H00pgwGUhuEpy
fqn0KMTA-b5H00ThNhTA-b5H00mLKzUv-b5fKWUvdsUARqn0K9u7q15HD3uAPbP1bznjD1
P1NBuWb0UA7_5fK9IA-b5fK9IZw45fKLTLFW5H00myNxIA7z5fK1UZPzm1Ys0ZP_mv_qn0
K1UAVGujYs0AFduAI-I7q-XZKGujYs0A7GTjdcgd-8wM-7PYdCUfKdpg0quvGYN7GdHb-w
UAY0mv6qn0KYmgcqn6KbIZ0qnfK1uyk_ugFxpyfqnfKGTdq9TZ0qn0K9TZKxpyfqn0KWIg
PY5fKGTdqLpgF-UAN1T1Ys0ZI9T7qYXgK-5H00TAsqn0KVm1YvuAwBn17bPfKVIWYk0A4v
TjYsQW0snj0snj0s0AT45HD0uh-zTLwxThNMpyq85Hb40ZP-mvq8u7qzuyIGUv3qn0K1TL
0qnfK1TL0z5HD0IZws5HD0uA-1IZ0qn0K9mWYs0A7bXjYk0ZKhIZF9uARqnsKsTLwzmyw-
5HnsPfKspyfqn0KLTA-b5H00mywYXgK-5H00Tv-zuy4bugcqn0K1Iv-b5H00TLw4TARqn0
KWThnqPWczPjn0","bid" : "","res" : "hXXp://ubmcmm.baidustatic.com/

<<< skipped >>>

GET /wh/o.htm?ltr=&cf=u HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pos.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1


HTTP/1.1 200 OK

Accept-Ranges: bytes

Connection: keep-alive

Content-Length: 1394

Content-Type: text/html

Date: Thu, 10 Sep 2015 00:50:40 GMT

Etag: "55efc6cd-572"

Last-Modified: Wed, 09 Sep 2015 05:42:37 GMT

P3p: CP=" OTI DSP COR IVA OUR IND COM "

Server: nginx
<!DOCTYPE html>.<html>.    <head>.    </head>.
    <body>.        <style>.            .userData {behavior
:url(#default#userdata);}.            .client {behavior:url(#default#c
lientCaps);}.        </style>.        <div id="oPersistDiv" c
lass="userData"></div>.        <div id="clientDiv" class="
client"></div>.        <div id="oFlashDiv"></div>
.        <script src="hXXp://dup.baidustatic.com/tpl/wh.js"><
/script>.        <div id="cFlashDiv">.            <object 
classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase="hXXp://
download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=7
,0,19,0" width="1" height="1" id="BAIDU_CLB_ac_o_flash" title="BAIDU_C
LB_ac_o_flash" align="middle">.                <param name="allo
wScriptAccess" value="samedomain" />.                <param name
="movie" value="c.swf?v=3">.                <param name="quality
" value="high">.                <param name="wmode" value="trans
parent" />.                <embed wmode="transparent" name="BAID
U_CLB_ac_o_flash_embed" id="BAIDU_CLB_ac_o_flash" src="c.swf?v=3" swli
veconnect="true" quality="high" width="1" height="1" align="middle" al
lowscriptaccess="samedomain" type="application/x-shockwave-flash" plug
inspage="hXXp://VVV.macromedia.com/go/getflashplayer">.            
</object>            .        </div>.        <script sr
c="hXXp://dup.baidustatic.com/tpl/ac.js"></script>.    &l<<< skipped >>>

GET /wh/c.swf?v=3 HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://pos.baidu.com/wh/o.htm?ltr=&cf=u

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pos.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1


HTTP/1.1 200 OK

Accept-Ranges: bytes

Connection: keep-alive

Content-Length: 547

Content-Type: application/x-shockwave-flash

Date: Thu, 10 Sep 2015 00:50:42 GMT

Etag: "55efc6cd-223"

Last-Modified: Wed, 09 Sep 2015 05:42:37 GMT

Server: nginx
CWS.....x..Q.r.A.};.a'$...D..8y.KrM..*....)..aw...k..*7oz..[..*....g..
~...=..RQ.0........Y|....M.w.&..#......}t.D5..D. b.4;...p%.y....P.].4_
..........0....D.4.....%gIK.@.... %..1......K.K.o.?...B..!..Q.e2.U....
....q= .)b.......6$...T.&D...[G.}$.b...|.J..mg...J.....P.D.....y;.S...
.l..%.....{......^.....-O'X....H.co}d( u.X.n..9v..C...=L..F.NK.s.<Q
..b...f..WZ..LK..XU">0.\...........I...sy....xDY..:...j....7.....M.
..Fu:.MF...Yr.W....?.X.....g..kFs.lk.....<.s...N.....&.r..~o....ZSk
[z.....b...6..xi...].f...w~w.../.........s.^.....P.8b:.;..1.?....2HTTP
/1.1 200 OK..Accept-Ranges: bytes..Connection: keep-alive..Content-Len
gth: 547..Content-Type: application/x-shockwave-flash..Date: Thu, 10 S
ep 2015 00:50:42 GMT..Etag: "55efc6cd-223"..Last-Modified: Wed, 09 Sep
 2015 05:42:37 GMT..Server: nginx..CWS.....x..Q.r.A.};.a'$...D..8y.KrM
..*....)..aw...k..*7oz..[..*....g..~...=..RQ.0........Y|....M.w.&..#..
....}t.D5..D. b.4;...p%.y....P.].4_..........0....D.4.....%gIK.@.... %
..1......K.K.o.?...B..!..Q.e2.U........q= .)b.......6$...T.&D...[G.}$.
b...|.J..mg...J.....P.D.....y;.S....l..%.....{......^.....-O'X....H.co
}d( u.X.n..9v..C...=L..F.NK.s.<Q..b...f..WZ..LK..XU">0.\........
...I...sy....xDY..:...j....7.....M...Fu:.MF...Yr.W....?.X.....g..kFs.l
k.....<.s...N.....&.r..~o....ZSk[z.....b...6..xi...].f...w~w.../...
......s.^.....P.8b:.;..1.?....2..<<< skipped >>>

GET /media/v1/0f000DlV0rvHMAROYHhQOs.swf?url_type=1&id_283672787=media/v1/0f000F_vSMdFWGLTLIlBvs.jpg&id_1821494960=media/v1/0f000DEUfr4hniEsJj_ROs.swf&id_1821138705=media/v1/0f0000nHWaDGGJgmd7u1Zs.swf&id_283559607=media/v1/0f00057I9_MLlocrKCGPLf.swf&id_1821923174=media/v1/0f000PMN_6_Z09Vbgll5of.swf&id_317482787=media/v1/0f000DTf8hHHd5tgwQ8C8f.swf&id_283062295=media/v1/0f000PDTSGXtJ3W50fJSys.png&id_1843287851=media/v1/0f0000mUMeDPtm1xsKSa96.swf&snapshot=& HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://cpro.baidustatic.com/cpro/ui/renderer/baiduImageRender.swf

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ubmcmm.baidustatic.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 10 Sep 2015 00:50:40 GMT

Content-Type: application/x-shockwave-flash

Content-Length: 34111

Connection: close

Last-Modified: Sat, 25 Apr 2009 07:04:00 GMT

Expires: Tue, 23 Aug 2016 05:51:13 GMT

Age: 1450767

Cache-Control: max-age=31536000

media: media

Ohc-Content-Crc: 3749431240

Server: hkg01-sys-jorcol03.hkg01.baidu.com
CWS.....x....|SE.?~.....M...R[.R.@,m...@W(.Ev...4i"iR..Z}|[email protected]
.7P......;.......I...........3.9sf9g.....6!e. <.D.$Bm.Q. .k@.(.'..]
..k.s:Z..`%J'.p.Bm...../._\........3..RTPT4........c./8l.X....t.<m!
.....6..=t...a..........lv.8..V./.,(./..fG...h........... ...t......9G
.......~F...p.B..X[s.m.3...:Fok.{=A.3......<!.sl.........4...9S.Z.9
E...F.b........u.<-..H..E....E...*.....HkQEQ...Bk.................s
....X..m...9......Z.m-..N..Y385Z..f.9..1..T..*......V..k=2.....,\.3. .
.?.N.j........D..Bc........H.....V..y.....b.....W........:..../...1}).
Q.%.Rbs.,R.^5..I..I..I..I..Io.IO.I..I`V.,.CY.W.r.=..K.\9...M..W..~.>
;y....P.....7.N.?......Y=............M.sZ.O...OY}..?..9......q....1...
q..<s..'.7.......u..{...a.G...4......[U.`_Wn.8.q..{.}..s.v\.U....EO
.W......n05....-...L.I...^...x....{..].^z......?...I.tm....;3....}4..w
./Z.. ,..H..p.Nm./.<1a....{".w.Eg'....q.........o..g..q_`. >.|..
..............:..*...x..H...~]u.......Z....../.....p.....q.(.]..4'r..w
.b{V.c.nF(.........J...u.|.F..NG....m.E.m..".sq>G.m..i..&.=........
*..u.:.u 36}......l.3B..._0d..<.W..a.&...l..:u3....3A.lq.[....6..).
p......J.....g..j.pv..3.P.....X...y=...3..y=g....f4N.._...9p.N.....!gG
(yZ...9.9...m........`..Q=/..{A.6..U..*.K..{..)6..C...v..........'...&
lt;#......|A.N.i~.D.d....`.<@[email protected]
.......x=('.{....t,.]5S.....?Kg........N*..w.9(.2BV..4...R.i.Q.P*...k.
..m....8...4....VO.........3.!.7....c.Z~.'......Z......D.>V5.gk.1..
[...)..B...LO..}.A..9..........Q...........V."g.....}d.i.._..C..w.<<< skipped >>>

GET /static/js/shell_v2.js?t=3 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: bdimg.share.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1


HTTP/1.1 200 OK

Content-Type: text/javascript

ETag: "195811193"

Accept-Ranges: bytes

Last-Modified: Wed, 02 Sep 2015 08:24:24 GMT

Expires: Fri, 09 Sep 2016 00:50:32 GMT

Cache-Control: max-age=31536000

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 571

Date: Thu, 10 Sep 2015 00:50:32 GMT

Server: apache
...........SQk.0.. ...D..n...3...A..Z.RJQ..."[F.x...}..7i;..........s 
.d..J. ;..].........I...........n..%.d......|.SVn*.1.k.H[5.......{....
..%e=..]H..P....k..jpl..]#[email protected].#.=....7.....B."..l-B6...6L..^&`.".
....!.....j59.A...VVm..w.Yc(1.F.z)P...u.p.........R..(..R..0;..~..P...
.B..?%..#.aDY...2;!@...[9...`...........}[email protected].. ,]p.d.|...
..K........(nE..B..G...5.Z.\4..*/.Qt1.1l..c]O..w.k..{..7a..`..... ....
...0R..aL[4...k[..........H...U.}.^..6<....i.<.........>[email protected].
.Xr....=e.....a...V..7E.J.VO...(.....'..~.?&}....|.._._.1._...H....i&l
t;N.uP......`.o...;o.......


GET /static/js/logger.js?cdnversion=400513 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: bdimg.share.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1


HTTP/1.1 200 OK

Content-Type: text/javascript

ETag: "3115046507"

Accept-Ranges: bytes

Last-Modified: Wed, 02 Sep 2015 08:24:24 GMT

Expires: Fri, 09 Sep 2016 00:50:32 GMT

Cache-Control: max-age=31536000

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 2401

Date: Thu, 10 Sep 2015 00:50:32 GMT

Server: apache
...........X.o.8.. .Q.....d.......{..E.6...1.E.l.2..('...~....;iq(..3|
...............-.]9k......c...!.(.K.._........(.\.:J.%....rK0Mw[\'.b9.
.e...Dr.0"..S....P.Yt.I....f..|...D;k/....U....-E.C..y...M..[.....DK%t
..@:..HZdHh...Y............'.r....L...........\2h.P..q...V..........r.
....1.r..-..-.zA;.n{........mwd.....1v..f.[qR.,..1.....{..?.Jk.Y.Z....
..%......!,.2.c.......k....s=.m.f0g.d.B-.J.%...g....x.....-.}.eMH.VuJ}
..3..2[G..H.!bGfuG...7.N=..wR[...V`b.&..e.....E.-.V.a...M.v.d..^pou.Aw
..W.F$..SS.qm..M..-iil....Kd....\2u~w..sRB.UnTx...w..<#...3~.. .]..
..).Z........z..w.........?....=....l.A...".{^.....X.(.j.?kO....;.....
...< }O.k..W...(.. m.. .../..d..~~1...N...V.N../...../..P.....wN.&l
t;p.YIg..... ..Z....T...L.....5...q .^V0E..-......"...M|.|......G@R...
.....WI........c.Z..j.......2..Hd...E......d.........p...S.1..0..h.y@[
...8..J&...lq%.t#sD[U......:...0...25\....=SfwY#...6.b........gv/.3...
,[email protected]'_R.. [email protected]...../.\...r3....Y....R
......H.?.pA.....`.W..d...k..2.G.A"^.a.....-.....2...P..9..5c;..U.2...
.....7..b.l...k...|J.... ......X.r..).N.SI....x..H...kt{[.."...... .-.
....T..4..........v..nF.B...@.....!.......9.e.....7..E.c............$J
.c8....(.aH#.....1.\l......~%0.{..[D*.FU....!Tz.h...... .p.mq2/.T...u`
_;...[s..\gv....[.M.c. ...a8<..k.l..6..Ob...u.M....S7Gh...Ai...Nd,.
?.M..........y....#..|.....n...............j.......s........k}R....?.3
[email protected]........`UW.3X,.dV...!...U.|b.......L.k..g._."..&G.|..f...$....
P. I/.#6..0$...............~...O6.....}.Zx.vyA.f.....(...r,...C...<<< skipped >>>

GET /static/css/bdsstyle.css?cdnversion=20131219 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: bdimg.share.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1


HTTP/1.1 200 OK

Content-Type: text/css

ETag: "1303106933"

Accept-Ranges: bytes

Last-Modified: Wed, 02 Sep 2015 08:24:24 GMT

Expires: Fri, 09 Sep 2016 00:50:34 GMT

Cache-Control: max-age=31536000

Vary: Accept-Encoding

Content-Encoding: gzip

Content-Length: 2007

Date: Thu, 10 Sep 2015 00:50:34 GMT

Server: apache
...........Z.....~.5.E...../..6...w.A...EY.H...2..~...{...6.{...&.sdc7
.hf .<...s......w.......~.....*|..UJ..h...~[.....1}R.....P>.*y..
.}.K...j..O...^.0'.= . ,I..b.X.A.....C..W...,.i......1..?......y...0..
8....n?f..AF.:...6I..E../,/[email protected]=([.
.D.m8.j....;..m.......X}...0a..5 Y..o..o....9,..#~..*. ../]..... ..4.-
.}Ke`{...#.4..........uG....^.4.8..l......N...e`...g,6.%.....d......Fd
..?......d)/...._H..^P..Qm...].....i.ip....wB.?.[........k).4....t....
g......Y"fU..S.e|[email protected].^......:d/.bh;...I5Q.L..:.6q.......R..?..Ym
.nr 1k....1s.6...S.:..#..k:v..F,"....Z^.#A.X.......45Ws.A....._.5|..v.
f.Mp%.X..H$.oj.J...w .6.~.5._7....Xh#...&.0...7..r4h..`I....o...,'{Z}d
..,[email protected]..............[.........D.....<..................
[..X.....i.*.7?...h..X....X... .B...j.E..=..%Y..]..m.2Q.Q#. ".u..D..?.
oK......I.Z]z....."&.....zF}K......3R.J..:.}.[:.R....G.m..O.8....^##..
...A'Y.Pw....b...G;.........".=.. [.6.z#..z..3.. .f.;.G`.)Dw.. .ma....
..G....d\..$..:.*&...L.#.<.}VO..G=.!...=.......L{t9..5.XOl.....c.DG
"...f...... .?."S......l<..c...mXg..f...t....u....m...k......-.....
,.l.u.JR,..6.....b.h...im.....<...g=Z.....e.`......d....u....*S..s.
..1.2._4.......u.....I8}......~D....][email protected]. .. <.`... .VS3.
...xw.u...mk.ZG...........T?...Z..=N.H).....P.P6.v8...I..%.=!>9.TYl
'....d.2.TW.a1$..}.u..:C......ZKf.x...)....Y}[email protected].
....2L..H.$0.L.Q..[U...r........^zm....c....,e....V..7.".>.h.|.<
M..........mA..-.....L...Iv.c....q|.o~.Q}A.Z~.]...I...R.....mc....<<< skipped >>>

GET /flash_flow/view.js?g=100015389&u=4344a642c7b74da93f57eb6c358553c1&s=0190d1b28544545789b5e91707f4d317&a=700&r=46246037213 HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://cdn.comment.4399pk.com/control/A4399dv_base_main.swf?150527

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: stat.api.4399.com

Connection: Keep-Alive

Cookie: _4399stats_vid=14418462431248952


HTTP/1.1 200 OK

Server: nginx/1.4.2

Date: Thu, 10 Sep 2015 00:50:39 GMT

Content-Type: application/x-javascript

Content-Length: 0

Last-Modified: Thu, 05 Mar 2015 08:08:35 GMT

Connection: close

ETag: "54f80f03-0"

Expires: Thu, 10 Sep 2015 00:50:40 GMT

Cache-Control: max-age=1

Accept-Ranges: bytes

GET /wh/o.swf?v=1 HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://pos.baidu.com/wh/o.htm?ltr=&cf=u

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pos.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1


HTTP/1.1 200 OK

Accept-Ranges: bytes

Connection: keep-alive

Content-Length: 157

Content-Type: application/x-shockwave-flash

Date: Thu, 10 Sep 2015 00:50:44 GMT

Etag: "55efc6cd-9d"

Last-Modified: Wed, 09 Sep 2015 05:42:37 GMT

Server: nginx

CWS.....x.3.bX..........{.^....?............b..............7..Ofq.Cq~Q
.CVbYbqrQfA.U.TBC.!.89. .AI.!.85'.a./.@6.(.`.......d3......Af.;.;#H...
.$..&.g......?.' HTTP/1.1 200 OK..Accept-Ranges: bytes..Connection: ke
ep-alive..Content-Length: 157..Content-Type: application/x-shockwave-f
lash..Date: Thu, 10 Sep 2015 00:50:44 GMT..Etag: "55efc6cd-9d"..Last-M
odified: Wed, 09 Sep 2015 05:42:37 GMT..Server: nginx..CWS.....x.3.bX.
.........{.^....?............b..............7..Ofq.Cq~Q.CVbYbqrQfA.U.T
BC.!.89. .AI.!.85'.a./.@6.(.`.......d3......Af.;.;#H....$..&.g......?.
' ..

GET /it/u=1520398955,2520422704&fm=76 HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/acom?adn=0&at=128&aurl=&cad=1&ccd=32&cec=gb2312&cfv=11&ch=0&col=en-us&conOP=0&cpa=1&cpro_lu=1,#dfe4f9,#000000,å®‹ä½“&dai=1&dis=0&layout_filter=rank<r=<u=http://VVV.4399.com/flash/78072.htm&lunum=6&n=80054191_cpr&pcs=951x668&pis=10000x10000&ps=784x-2&psr=1276x846&pss=990x880&qn=1a28bcd7a302e760&rad=&rsi0=980&rsi1=90&rsi5=4&rss0=&rss1=&rss2=&rss3=&rss4=&rss5=&rss6=&rss7=&scale=&skin=tabcloud_skin_5&stid=5&td_id=2279006&tn=baiduCustSTagLinkUnit&tpr=1441846229578&ts=1&version=2.0&xuanting=0&dtm=BAIDU_DUP2_SETJSONADSLOT&dc=2&di=u2279006&ti=é€ æ¢¦è¥¿æ¸¸3,é€ æ¢¦è¥¿æ¸¸å¤§é—¹å¤©åºç¯‡,4399é€ æ¢¦è¥¿æ¸¸3å°æ¸¸æˆ&tt=1441846229312.266.2281.2281

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: t12.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1


HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Content-Type: image/jpeg

Expires: Sat, 10 Oct 2015 10:50:29 GMT

Cache-Control: max-age=2628000

Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT

ETag: 6468e3658a2e7461e28c6bd1727ddf35

Content-Length: 53731

Date: Thu, 10 Sep 2015 00:50:29 GMT

Server: lighttpd
......JFIF.............C..............................................
......................C...............................................
............................."........................................
...B.............................!."1....#2A.QBaq.$%3...46R.Cb.r......
.................................G..........................!1A.."Qaq.
..2......#B..$Rbr.34...C...Sc................?..G........5.Y[Y..P.h.(.
...6d...)T.h\3........R.._...RO..5......V.J.9..T.5.oG..R<.h`...}.a.
......(CzK,O.:{.j....H .s.`\..u...{7s..yn..N..W.{..F.m1.e..]c:;Q...E.7
....4;.F..Y.Eo2-L<s#....o"UE..<v..J..j..[.f.;..D.....|r:.{O~....
...iuA.SCN...ku..Cn)...u..<.Kd..y.--.(.q..yE....4.;...'N.....zixq..
./..W...5.w..l].?....5.\....;.c.. e.z. ....qY.....w....3../ .'..k.3...
b$...o..y....D..".L8..^.....J'D]G..... ...K.........;..K}E.V.M..,.....
z3.c.]I..T.eU..Yc.\]...A]..l...s..c......jgq9_.x.w.?jPS.a.ju....\.. G.
s;.0..o..........8v.]u.YU.d5q..R...}.6...2 2. ...uP6....[)E8cJ.R......
....'.v....(.\..{H..."P.;.EH...ZS..F...I='..DS...W.!E..S.E...S.UQ.9T..
8...9Q..^~y....?...........U....)O.'U.......2|.6z..E.e....}.6..x.X.W..
..R.qq.Z..(.......T./.rz.b......."........v.7.......{.....3,........%.
...L...pF.......uXV.F[{4..k....4........h.....r.|eZP...1..]...>`s-.
.r5...F......}.!)..T..P.V.|...}..sK.^&...5.,.2.p`.mMe.#...(..../....*.
$...c.r.|..!.u.;....5k.Mk...v k[.][..d.-..G]Qy.:..!.9.....U..Qn....r..
.'P9.Y(..e.<.~.........M......_....h........R....c.q?.P..H.q./....X
..]=...ng3...C#....b.f....i.....U.t.....Y..'..n...m.XZ..t$.R...."N<<< skipped >>>

GET /flash/78072.htm HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Wed, 09 Sep 2015 23:43:55 GMT

Date: Wed, 09 Sep 2015 23:13:55 GMT

Server: nginx

Content-Type: text/html

Last-Modified: Wed, 09 Sep 2015 10:17:04 GMT

Transfer-Encoding: chunked

Cache-Control: max-age=1800

Content-Encoding: gzip

Age: 5778

X-Via: 1.1 shjcl69:8080 (Cdn Cache Server V2.0), 1.1 kf50:3 (Cdn Cache Server V2.0)

Connection: keep-alive
400a...............s.../..'....:....C...m...f...=.8.h....dI..s........
....c...h4"4Kh@....<l.1f.7.o;.oeVVeug7. {[..aWVw.j.rX.r.O..g.......
(..r..l........|u,...!.{f.3e/m....e...lwS.......>]......e..[Z......
>......i_l.....,...k.n..rMuKu.........8XW..V..3.J.?.?.IW....iI.....
5...}}m...........4...U....-5o....O.U.O75....Wi..U^.S>.........6.[j
 ..G...M.......5.....:..........e......Z.TS..<].R.T.n.[..T....7...)
k.j.../K.W?z0......-..(.;F......o...w..5.5...8v*..D..<...;V...1..-e
-......_O.O........3j..[[email protected]....=...L....O*...<....j
.V=...W=&......f........O.....;C......>.8Q >.gZ../w=...'.H}. .W.
p.1g........=_............g...3~.o.L..;#..........=.....zf..Fg........
.?5u{...{='Z.....w|....v........t..\.s...........}........'...#.....%.
}.~o....[<%P......4...f>E*,.t.....G.|66....i._S.R.O...yB...;.G.x
.PM.....k...1].*M..o....=eu..}...0>....d......`3\=........Ap.5.....
.k.....R.a......t.>p...J..*.r...xl..l*.....5..l8.\S.p..$.^....h..x.
cO2.T].zYm..rP...H...=%>......z.W......M...L^..I..1|...u.^...7[b.$.
K.H.v..a_..}.{...Y8h.(h*<.K.?P......t..Cu./........6.4......d.O....
..2.v-............M=.f|1s./|..MB.'...k.j.}.k.9...81:..!)...{s..~JK....
NM76z}.Pel-.-..?....F...~~.p.......xB.....u.........dY%.....C..O.j.{T.
...W{.........&.. ....s.f.ce...F...m....&..2........U.P.o..4F......'s.
<..g.<_.J.&.......w.7.}xS...oS<X{.6..N..h..K.U....W....gF&>
;9w.t..7.C.u......B....Xj"fmL......5...a ....{.........X...j.I........
.u......fq..G.u........[..V.....I#n...2....g.e.y.=2z~.Z..Z.....fK$<<< skipped >>>

GET /css/zmxy3_20150824.css HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Wed, 09 Dec 2015 00:50:18 GMT

Date: Thu, 10 Sep 2015 00:50:18 GMT

Server: nginx

Content-Type: text/css

Last-Modified: Mon, 24 Aug 2015 06:04:44 GMT

Transfer-Encoding: chunked

Cache-Control: max-age=7776000

Content-Encoding: gzip

X-Via: 1.1 zw13:8107 (Cdn Cache Server V2.0), 1.1 kf48:7 (Cdn Cache Server V2.0)

Connection: keep-alive
1661.............=...Hrg.W..0...T|.].{g./{1.. ...R.DjD....S.|.......|.
.8"2#32IJbWu...^........q.iu.....>l.8....?.........*W......o~......
,.E...n...)........p.*..i.1I..,]}....b.x8.............(.....p.....K}.;
lo^.O..2..8.G.M..nw.?.........W.:.F.d}[.O.`...SZ..bQ.E...w.o......y.6.
.I.i...?....vW,..c.^..."..S...<..O...~W...~........'......y.(..EV.w
.u..qU.k.P#.....C. @..........u}.....n.....^$ ........P.....Vw;._.....
<.....n...Axk..E.l....n.^..-.qP.^rR.W.-0...9.%j.Q.\s.x....:.5...T.S
...f.>..gVC.>..#.cY.H..|......QC.V..0A .WZ/...v ......P.X.h. ...
'..!~....7.g.../[email protected]|...`.........:...E./W_n.......
..9._.a....S .a...,.O...2;............<.Sc...,....@9>h..."..P.u.
>X...xR...M.p....U)e.M...~..58.#..m3B#Q.u..dd.>...2..:."A....2.*
.6./c...LN.....[A=:266;.(\U..Zz.....Qm...8..~w8..:-......l...C.0.3g...
.x...q8.......e ..`....r.{>A...8%.}.%...\^.b.AuL.&..yWlX..dl.......
P=....M..[.....}Z..E.V........W..s.C......p..q.ej-.#..l....n.._.u.....
h..... ..C.oY..O$....5.RG..f....bQ....C.$.."f......P3.H..Nm=........%.
.. ....~.....E..5].TXO ...a%)..._..92*h....#.....V.Q4x..-x.J.....F..W.
...3I.0D.c.XB..Y.i.Y.R.K:...i........2lK.V.*..m..D2..bk...<W...W..~
...`GI......X.TZ1....... ...{)..........r0.....H.....)m..K4.WN=1.`.9A.
n.=..9,...J.BWP...:.....<...yA...5....f.....d... .T'HD,.....h.@...}
.-.N{[email protected]<.. 9.Qb.|...^.....G:j...U..._0{Z\...`X...7.5.vu>
;.......Sz.2v..?........]7.L.\r..C...i('.4.v.._..O.}Z-..C....o..).P..U
..i...)....{...y..JG.zU.,.:....X..$$./.4..y.p4...ca..?.....cZ....S<<< skipped >>>

GET /jss/trace_news.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Wed, 09 Dec 2015 00:50:19 GMT

Date: Thu, 10 Sep 2015 00:50:19 GMT

Server: nginx

Content-Type: application/x-javascript

Content-Length: 559

Last-Modified: Wed, 26 Feb 2014 01:36:00 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

X-Via: 1.1 shjcl69:8080 (Cdn Cache Server V2.0), 1.1 kf49:5 (Cdn Cache Server V2.0)

Connection: keep-alive
function tracking(e){...e = e ? e : window.event;...var s = e.srcEleme
nt ? e.srcElement : e.target;...var a = s.tagName;..//.var u = s.href;
..        var u = s.href ? s.href : s.src;...var t = s.innerText ? s.i
nnerText : s.textContent;..    if (a == "B"||a == "STRONG"){..        
a = "A";....u = s.parentNode.href;..    }...if (a == "IMG"){....t = u;
....u = s.parentNode.href;...}...if(a == "A" || a == "IMG"){....try{..
...new Image().src = "hXXp://tracenews.5054399.com/trace.js?addd=" a "
&uddd=" escape(u) "&tddd=" t;....}catch(ex){}...}...return true;..}..<
/font>....

GET /flashzt/img/zmxy3_20120913/bg.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:35 GMT

Date: Wed, 09 Sep 2015 21:34:35 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 5892

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx166:8080 (Cdn Cache Server V2.0), 1.1 kf49:1 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89aP.Q.............................................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................!.......,....P.Q......;
.?C.BA:7A.84..C...C..54C=.&.:.@......=..A?.".46.<:.@4$=.?>;;...:
@B.?@.:[email protected]..<...;[email protected].<..9....6;.C6:B .@p.
..... A|..1.HA..|...p...:t........6.......A.....X..... .#... |0."/....
.....G........U.hBt....`..Bx.H& ....j...u..b..d..!.....an......6|T.2dH
[email protected].... ...9.T..C.........X..#...&d..^..... ....#.A.b... 1.I 
[email protected] ...5...@@[email protected]*.. AB.......C.J.Cj`
4.`....x.....%D..Q0..78 ...|[email protected]|0..Al..k.T.@
.......P..": .......;7`5.F.. ...><..T.....<`c...$I..6..C.F...
y?`...A,[email protected]#.Ce.D.`.
..H.....B.....A....'[email protected]\9...ahh.;0r..B.FL&..`...l..
..l`[email protected]=0.........ER.s........kV:.....X`....`..5...Q...C....,
....A.C......P..@|.........&V`.dC..C....`... ..E..@...`C.{......q.....
.......XA.....`[email protected]...?7&..<. ....!.BIb ...!`. ...U.
=.....\.......]:.q..@l`8.=\uu.6.|A.>$.....paR..@.`.....I.p.X6 ..k..
..YI...$4X.. >...S%#........%[email protected]@..\...or..
.............;...E9.@[email protected]..;.[....q9..5.@."..<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/go_bbs.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:33 GMT

Date: Wed, 09 Sep 2015 21:34:33 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 4339

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx166:8080 (Cdn Cache Server V2.0), 1.1 kf49:0 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89a...........l......[......[Y.S/...8...z.u.6.-Z)..M..-7b2`......e$
..a..................pL...........V......*..ri.d..G..l....D."s...K...M
i..J...............}.z).....U........j.s..r)..H.....E...o3.........8..
Y.wm..R7X.UzR.....3.....|.....D...KrF...nP4o."..<.q.5#.7J.....*....
...........0...zd...)... ....E"H...A........Q.....6..M.. .......|..:..
...F.YH/QvKQ<..Q&...g{......"..!.......)...........>...<.d.$S
....ia...=FnCAi:..#.....Ec._..0.yAs.o...yi'.v.G...m.j\L........]}s..&l
t;.........^..I.E...2....."...ybQ...].Y........ ..5.|a.....%.y...%....
V.......QLG..$... Q......,..&.....B..2.sB..S..[.P .....3.c.n.j........
T..K..I..5.....P.................R.. ...>_..{.:h=..C..[..i...<=B
..."E.....................S..............g..n..w.....E..K........?..L.
...|......]..`@'...c..QA0...i...!.......,............S.p.'B.~..M.r....
..J.H.....3j......sHe.$P .88<[email protected].;.=.
B...9;..3......`.<0I_$L....K....h..].......E.....~..y..'VV.1{L...L.
d..)^......#K.L........p&..|.vh.........B!. a0O.%../....s............[
..8.:..0I..0..Q......`..C1.........O......._.>|>`...0.z..<..4
......S... ..a`.......L0...ur`..M......O>.".a'.f....,8@'(j8..,.. ..
.....j.`....#..n....N0G?#...&`4G./a....$xBB......`L!O"x..e..(3.......;
x...3..f-h.0.._6...At2.........p...x......E.(v2...F*.......(D.C....&..
(..|m..F/r.Y..3....E..A'....M.....0........H;6..K.4..F$.p9..ADa.-*Da.-
.,..-V....;.a...X....*c..D.....Xa..3.....X....X...vx.....l...C..-DD...
..A..Q(.....2.......C...5..a..v..2...`k2..CC".4`.68...6...E*.... \<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/topbg_20140506.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:35 GMT

Date: Wed, 09 Sep 2015 21:34:35 GMT

Server: nginx

Content-Type: image/jpeg

Content-Length: 53115

Last-Modified: Wed, 30 Apr 2014 03:01:28 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx166:8080 (Cdn Cache Server V2.0), 1.1 kf49:10 (Cdn Cache Server V2.0)

Connection: keep-alive
......Exif..II*.................Ducky..............Adobe.d............
...................".....""......""(),)("559955AAAAAAAAAAAAAAA........
..............*.....*6'""""'603,,,30;;66;;AAAAAAAAAAAAAAA...........".
......................................................................
........!1A.Qaq.........."2..BRr..b#3..S...C4..cs..$..................
....!1.QaqA"2........B.#3.Rbr.............?..e.. ..$.:..r..)...$]R....
H.=.*.32.C.=8.uS.......NpG.i....:g,"_"..uZ<.r.y.c..qo4.M(%IR.W.3[..
-..)...E-..1..|..Qn.....9.E.s.H..9.K....39.Q.bR..3.Rg>a.Z-..s3.b...
....rR*.(.U .r..B.vRe.g.b......B.8.2...n....N*ER....U#.1y.SV..r...n.3&
gt;..wJ.Z..B........Jf..U.......&j..R.7V*.T6JWD.*.2.Y..$.2.c/C..[O?..*
....7......=H.9z[......=^.(..>kV.n=....1\|.........................
......................................................................
...........................U6.%..^...s....W..cD..u%Y.$."t..î....J..E
..%Alj...d...sI ..b...F..Y**..-.e..h......fj*R...3QP5QVf......Y.......
ITZKj....#b..rdrfy..R[\.y. .7b..l.............&..^..fdi...Y.....i.e. #
 ,..bT#I*F..P. .P...........N|..E6y)....T.&.9..;A..=.j..MT.....ff.%...
s.*.......?M...........n....E.....9G.......I.ih.<.}.o;...9ts..,...L
.2.0..3QQH.K.b.....LTTR..9.....t.#fjn.r..fti..oM.)$..Rih.CJ1....>. 
.o...W?.G.....n>..q..y.......|....:.Gc.OF8.....y.......p....xy.1..V
z.-......9....9.\...[..T.JE.%....y.*ER'....uN.R.4..U.,j.]K`..?(......1
.3.....Y.,..$6.........**d..D..-Z...#.E.Ji.u.4..ir.3.zC1....W...X.....
.F..H....b.........~i.)..Rc..../....<.../[email protected].<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/zj_btn.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:37 GMT

Date: Wed, 09 Sep 2015 21:34:37 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 1226

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 bjdam110:88 (Cdn Cache Server V2.0), 1.1 kf48:9 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89ag...............................................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................!.......,....g........&
gt;)P.............)>..6(....G...............(6.#;....M.............
..;#P.M7O.............7M...2O.%N............%.O2..M8. ..I........H....
.Vt.....'....8 ..(./b.8q#G. ;~...b...I.<YRc..I.8yRHB...B...3...=w.$
...E.H....4...J}.e.3D..5$..8....`.F.K.l..b..%.Vm..c.[.. .m]..L..Y.G.".
4..L8......Q\.0c... N<y.d...g......=.. r......hT].u...]...;....s.d=
[....S.`P.....H,(R......D."}....._..}:u...{..={.....(..D...\PP....(...
........g_.r.._.........`..P.........,....^[email protected].!. ....%.xb.)...\#..b
. .....P.^!....... .......D&....J".$.L.iQ.NVY..Q.)..CB.@..\PH..,!..B..
f.Q....B..'.k.I'...i..s....t.)(......E..B.<.p...FjQ..\.i..b:...b.).
.V...rqz...Fz..<4.B!.4....0a..............{...4...4. ........F ...V
[email protected].............. o..*...............,....l...'..._.
[email protected].....'..g....w... ..2......A..C......0..C."...;....
<<< skipped >>>

GET /flashzt/img/zmxy2/icon_keys.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:44 GMT

Date: Wed, 09 Sep 2015 21:34:44 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 8973

Last-Modified: Sat, 09 Jul 2011 02:16:23 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx165:88 (Cdn Cache Server V2.0), 1.1 kf48:7 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89ad.............o.QFV............XZobev......8Fu.........P|....^j.
......-Dn... F.(Q.W..,Hx?`.dt.HP]r..r..p..V...........T..f..y........Q
..[.....l..{.....a..x................................3.3f.f3f3........
....S.E/.....3..f.3............T....rf..3f.f.3..f...?u.^..s..k....w...
.. ........3......../...........:..(..9..f............................
................................}{f...................................
...3............~zn.......................3..f.......................i
..w...........p.....cwQ".~DzY0..p..s.......hB..X..y.....3.f3........t.
V!.......B..P!kD#..Z......uA.h:._A).jN.}g.......H!..p.................
....mmmfff............................................................
......................................................................
...........!.......,....d..........v.`....*\......#2<2."...3j..q.E.
 C...q... ...b....Zb.DI.&B*Yr...1...Zl.5.3K.0_...bC...P...Ju#N._.....j
..S...H....[.>..v.[.e..E..kW.o..4..l.2i......@#Je...um.*..O......O2
k.`$r.)>...M..."..6.`w..._......m.^....v...v.F..[...N...>......3
.z...$..j....u.......].......J~...b.....~|g..)..>.......y6.g...&...
.6....F(...V..A.Yh.E.i.RI...b..)..K-.....i..O.i.SN ....I..#RGe1F.6....
Ph.UVa..$BCr5Z.s..d.M..e.J.).....e.g.....P...E.8..Z...e/y...t.1.....Di
|....d...h........Vn........(vN.:]..i..t.A.)..PZ^y.!*^.....x.M....z...
y."._3..W ...8 ... ....k...&...6ax...U4".......F..3.......d.O..J..>
.....&.-.8..hT............kc.6<...`m.).U......;!.....W\.`..fF.pc..i
..,...eP.I'g.....}.yZ..K..k.......G.n0......{3...7.WB..s.EKG.q..Lb<<< skipped >>>

GET /jss/unilogin_package.js HTTP/1.1

Accept: */*

Referer: hXXp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 20:56:00 GMT

Date: Wed, 09 Sep 2015 20:56:00 GMT

Server: nginx

Content-Type: application/x-javascript

Last-Modified: Thu, 07 May 2015 06:16:12 GMT

Transfer-Encoding: chunked

Cache-Control: max-age=7776000

Content-Encoding: gzip

Age: 1

X-Via: 1.1 shjc71:80 (Cdn Cache Server V2.0), 1.1 kf49:7 (Cdn Cache Server V2.0)

Connection: keep-alive
613.............X.o.G...R...O...H@...*..J.B....u.[_.9.^o..R...M.V.....
..E.RH..q0(/.P[..y.JU.....{>'...pvg~......5........i..f..=~<..Z.
....g...[1. ..EYGs.Z...YL'.ds........q...&.l.jit..j(..S.R.....&.(J.=6@
.)......JLc..V..r.`..J.*....ci...|..$d...%O...=Qy5.@<..!.K*~...b.kg
)s...6$5:K....0..KX.D!A..v.lh.. ..F`O... ....a.l. ..qy..I.J.Tz{q.i.c.I
*..$.[..)b.G.El.d..........NY.N..kL...\....th....'.B.c.5vP...Pt.Ab$.J.
g..K9.t,.....X1.o.,...9,.9lYa..47R....*.6..m.......u.....2R.1b..*..6..
'7x~..jO...XB.B.#...RC..J.-.)...........~...&.6.K.0EW\#....L.Y..._.2.|
.....><....I....;.*.".I.T.#.0....tm..........A....g|o4)<H3..=
E4.....M..k.U..9.....nb.w.D....k...hG.......''..F...59XB....`$.g......
j......N.............>.....i...Y>.L.1x..3......?G.(.Mg....J....]
.].....P....~.a........3.........0...... ...%.!.....cz.!."..a.x...1^.0
.....v4.)..R....k........u6.w[W..nl...;....v.=}.^.v.xz......o.X...C#u.
U<?...q...h.eu...7p}.........8.V.@u.$.=WT.. ....:r....,QBV...9..&..
]...Um=............K...].0.C....).y.M....q..9qK...Kl.}.!NU<. $...".
.M!......w....>d..$#'.g.nn$.G...[..4...R.!.........{.)ff..|)8......
.....v....'..V^..l....t... .}s.........L.!.M.0..`~"z.(*}..X.uJy.f.sN.*
=..53z%Q}.36.....J..y..Z.8~dl|......6<..r...<..\1.<.....3...i
.>......w.....Z. ..>..w.%{..........^..!z.......%.Z{..._Z....g.2
;...\../*..x].W8.(....~..f{.....*.........N..__......o..O~..........t.
^. .<....?2.D..4./C..~x..J7....3>...)..P.....].Bs.c.j....o<.k
A..........px.%.....V.#........^[........6bHa../.]......."(.....K.<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/bg_5_20130716.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:41 GMT

Date: Wed, 09 Sep 2015 21:34:41 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 2042

Last-Modified: Tue, 16 Jul 2013 01:47:34 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx166:8080 (Cdn Cache Server V2.0), 1.1 kf50:6 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89a..C.............................................................
................................................\\\...................
.................................................................!..XM
P DataXMP<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> &
lt;x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011
 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="ht
tp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf
:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:/
/ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sT
ype/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpM
M:InstanceID="xmp.iid:74504210EDB611E2B540ACB23FF9BCD2" xmpMM:Document
ID="xmp.did:74504211EDB611E2B540ACB23FF9BCD2"> <xmpMM:DerivedFro
m stRef:instanceID="xmp.iid:7450420EEDB611E2B540ACB23FF9BCD2" stRef:do
cumentID="xmp.did:7450420FEDB611E2B540ACB23FF9BCD2"/> </rdf:Desc
ription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?&
gt;...................................................................
...............................................................~}|{zyx
wvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJIHGFEDCBA@?>=<;:98
76543210/.-, *)('&%$#"! .................................!.......,....
[email protected]}:......^.h..*J..m......uR.:...{O}$#..
ay...V.W.W.}..X.X.........r.....v.......|......r!..#......v.....N.....
. ......m.#... .$... #.......... ...................&..8o..y..v...<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/libg_1.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:45 GMT

Date: Wed, 09 Sep 2015 21:34:45 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 899

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx165:88 (Cdn Cache Server V2.0), 1.1 kf48:0 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89aS.:.............................................................
......k.....................................................t.........
....................q.....m.................m.................~.....{.
....q..............x..n....................~.................j........
......................................................................
...............................................!.......,....S.:.......
..7V...........AM,"...@.. W........... ..U!...9.........R... .......?#
..H......I5>.V....V.......V......V.............V.....V.....d%A....8
8..........N"?r.-...Qc...=f..R$4..Mnd.R.G.-].\.S.I..l> XR'..9}..*.$
..E..M:N_M..8>.Z.(UaV.F.8U.).H....V...f.M..v...m.A)d.....m1..K....s
...)....|..M<.-..8..sz..dPKf.D.....P...P..,..pp..!..M..kX.#....".0.
$F............^..`a...J0.(@......0.n.A.........y....H. =...0....A.....
....u...G^{*p..."`B...XpD..F(...Vh...f(..4.....L...$.h..(....,.8.%....
;HTTP/1.1 200 OK..Expires: Tue, 08 Dec 2015 21:34:45 GMT..Date: Wed, 0
9 Sep 2015 21:34:45 GMT..Server: nginx..Content-Type: image/gif..Conte
nt-Length: 899..Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT..Cache-Co
ntrol: max-age=7776000..Accept-Ranges: bytes..Age: 1..X-Via: 1.1 hzsx1
65:88 (Cdn Cache Server V2.0), 1.1 kf48:0 (Cdn Cache Server V2.0)..Con
nection: keep-alive..GIF89aS.:........................................
...........................k..........................................
...........t.............................q.....m.................m....
.............~.....{.....q..............x..n....................~.

<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/sszn.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:46 GMT

Date: Wed, 09 Sep 2015 21:34:46 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 2150

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx166:8080 (Cdn Cache Server V2.0), 1.1 kf49:9 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89aS......1.....)..N.....B..=..m..J..$..2..>..........."..R..E..
.m....6..J..*...........t..f..<.....6..8..>......\s.}.2..S......
..I..T..A..A..,........5.....E.....D..<...Vk...].....P.....O..b..$.
.a.."..Y..Z.....-..H..%..*.....i.....(..6..6...........^...........T..
!..@..:.....=../..&.....#.. ..&.."...d|...U.....$..9..4..?........a..[
[email protected]*........%........g..e..]..Y..U..W..Q..B..?..F..?..9.
.;..:..(..........................?..L..>.......s...Z.....<..F..
[email protected]........@
.....c..&..1........F....z<.....E.....Q..I..:..7..:..7...........W.
.;...u.;[email protected]....."..D..D..!.....-..
...q..D..L...u.M..=..G...........!..<..b..e..9..R..8..8..D..9..H..I
..K..:[email protected]..(..Y.....8...a....!.......,....S.......'..% F....*\..
.......UK.@\.8D.&...P a...`...W.......Z..u3bdV.....:....$@.(R....(QbIZ
....M.Vi.. . J.d...K..h.D.z.(....r..f...3gH.|....#J....c...:..h....!b.
\.`......I.<..)IP..Je...Qe4L*...(P.<]Z....K...2c......h. ...-{.x
.;G0....(...1...)_...T.J.H...,H9L.R_.:v..'.i....,.K.......o.4t..F.....
.Q& ?.(..-.lF.%...N.h.SJ(....Yd..V.....0....?k.5".y..E.^.....!'...PAc.
..3......eKA..'.Q..-...O..F..k.>..(#.d..W|..2.....]....`...1...e._.
.c.^.Y.-C.b....p.$..u.YS.P.G..T.I.|..?.2....2..1.V....F..TD...&z..J ..
..H....(.vT..o..b...Z.'.e*Zk.f.Z.;.$X$)..4./.|..G..!B)..Z..V..G..BJk..
.. .....u..".?.A.@ ...*.".......K.......>...a&...a...?Sm..g....A).P
A ..r.... ..#H B&.....H\.-.'...?.....l../'[email protected]... .<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/scbg.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:55 GMT

Date: Wed, 09 Sep 2015 21:34:55 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 5156

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 shjcl69:8080 (Cdn Cache Server V2.0), 1.1 kf49:10 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89a..M.....;*K..T....jn./...[...pD.G6....G4s. ...........l.te..G.}l
......qOJk&........J6.YM.gX..e.*1yc/1pj.gi{.E:~y...sV*..U..qp)......g.
........%(-Dy.....VS.....Z....ZLg..t ...K......e...zn0RVLTW.....p.....
......Hx14j=B...SL0.yw..pI~...6.....[P......k\..Q.eZ..f.?,Q<*X.....
..I_........f*.weWx.7........s..vu.'...Cx.@^&8F8..s..{.....ND\jf......
fah7...k.......fd.u....Z......2...t..@[email protected]:Zd3B.......r..f.....
...F..C....S....9W`TvFlD.t%...q........v..P.......~k........xY/#..\.oZ
|4..cP..~..............i..^.....L..\e ...U.{h...........m.ve..........
xa..V.aR..p........IO|.G|.b.......c.....s..`...Y...........Iz.Y..z.'..
u..p...\.6..G......m.$....xpq..[e].....^..\[email protected]...>"$...J.Jb. ..y
.~~{.(;fN..g'..|.)..}......A=G..r....o^..........xe..!.g$*Y......r..p.
.h..c..m`.......s!.......,......M........H......*\......#J.H.....3j...
... C..I....(S.\[email protected].*].....P.J.J....X.j.
.....Mc......}h..]..m......K....x............L...... ^......#K.L..e.S.
..!p....B..M.t.='NxHa.....c..M.....s...........N...... _......y?.<.
...I.i....w.om..........._.........O...............(....h...&. }I.3]u.
...?I.c...f.....a!"..f..7hh..(....,....0.(..4.h..8....<....@.)..D.i
..H&.......@....>.Ti..Xb............#6<.Z.h....l....p.)..t.i..x.
...|......*....j...&......O>.8...S....6.gA..T...<lr.!.4j........
.......*....*...>.!.T.......Z. ....=<.H..6....F ...Vk...R....J. 
.%[email protected]. ,.o...2.|..*.$.....k........j.).QV..!.e....yj,. ..........Wl.
..g....n.k......$.y.......U<.....,..4.l..8...........,.#..P,..|<<< skipped >>>

GET /flashzt/img/zmxy3/n_mg_bg.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:56 GMT

Date: Wed, 09 Sep 2015 21:34:56 GMT

Server: nginx

Content-Type: image/png

Content-Length: 1920

Last-Modified: Fri, 14 Jun 2013 09:48:10 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 shjcl69:8080 (Cdn Cache Server V2.0), 1.1 kf50:3 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR.......f.......|7....tEXtSoftware.Adobe ImageReadyq.e&
lt;... iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS5 Windows" xmpMM:InstanceID="xmp.iid:1D872F76D4D111E292D2D069A2
92083F" xmpMM:DocumentID="xmp.did:1D872F77D4D111E292D2D069A292083F">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1D872F74D4D111E292D2
D069A292083F" stRef:documentID="xmp.did:1D872F75D4D111E292D2D069A29208
3F"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>_t.8....PLTE......y..G..<..;.....`..b.....
t.....}..g..d..c..{..a........~..u..e..p..j..l..k..o..i..r..n..m..w...
..x..>..?.....s..v..|[email protected]..=..[..F..V..Z..C.
.U..R..K..N..L..M.....C..D..?..B........E..Y..S..A..X.._..T..Q..P..^..
W..A..:..J..M..f..\..=..a..]..}..:..9.................f..2..q..d......
..c..j.....*..{..e..<..v..z..^..E..`.....^.....K..x.....d.....a....
....-..h..|..`..l.....1..k.....................LIDATx....VZQ.E.#I.`.D.
 *M.4..$.w......^.y..u_c~o0....X.q...A..`.h....9.;_.2.;..g..[.@[e...[.
.Z.........OS..B.,...3}.b*U...........C.n|HF.I$7..I..5H.J......R.M<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/ico_1.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:57 GMT

Date: Wed, 09 Sep 2015 21:34:57 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 44

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx166:8080 (Cdn Cache Server V2.0), 1.1 kf49:9 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a........@m...!.......,...............;....

GET /flashzt/img/zmxy3_20120913/lmbtn.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:47 GMT

Date: Wed, 09 Sep 2015 21:34:47 GMT

Server: nginx

Content-Type: image/png

Content-Length: 1279

Last-Modified: Mon, 04 Aug 2014 07:28:20 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 shjcl69:8080 (Cdn Cache Server V2.0), 1.1 kf49:5 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR...N..........a......tEXtSoftware.Adobe ImageReadyq.e&
lt;...&iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CC 2014 (Windows)" xmpMM:InstanceID="xmp.iid:DF5C3F66120E11E495A2
CD5988523C9A" xmpMM:DocumentID="xmp.did:DF5C3F67120E11E495A2CD5988523C
9A"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:DF5C3F64120E11
E495A2CD5988523C9A" stRef:documentID="xmp.did:DF5C3F65120E11E495A2CD59
88523C9A"/> </rdf:Description> </rdf:RDF> </x:xmpmet
a> <?xpacket end="r"?>[email protected]...............%.(,. ).*,. 
...&.)".'&.*).*.......................................................
..M..x....IDATx....v.0.D.q.]uRw...WVl.6.....H..x.~.....?&r....g*......
.J..N......E... ..:......5....{.T.7i~...5........>..........G.p.b.~
..5......d.!.}......A.17.X..*.4.Q..Q....?....B.$......;....l.,E.6.u...
..8.....cI.......0vYn..!..Y.z..,riW.o^..T.5..~N....o.....`....1...M...
.IEND.B`.....
<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/tgbtn.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:48 GMT

Date: Wed, 09 Sep 2015 21:34:48 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 1672

Last-Modified: Fri, 13 Sep 2013 02:12:53 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 shjcl69:8080 (Cdn Cache Server V2.0), 1.1 kf49:6 (Cdn Cache Server V2.0)

Connection: keep-alive
[email protected]. -. .........".'&.)%.($.*...............
.......................................!..XMP DataXMP<?xpacket begi
n="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adob
e:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:
56:27        "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22
-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights=
"hXXp://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="hXXp://ns.adobe.com
/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceR
ef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpRights:Marked="False"
 xmpMM:OriginalDocumentID="uuid:4184B9D9CCF8E111BB4D96CAE4A07F0E" xmpM
M:DocumentID="xmp.did:4FCD00351C1411E3913B8A3F3EE50EB9" xmpMM:Instance
ID="xmp.iid:4FCD00341C1411E3913B8A3F3EE50EB9" xmp:CreatorTool="Adobe P
hotoshop CS2 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.
iid:2A653C2E141CE31180E9A4FB6B745738" stRef:documentID="uuid:4184B9D9C
CF8E111BB4D96CAE4A07F0E"/> </rdf:Description> </rdf:RDF>
; </x:xmpmeta> <?xpacket end="r"?>........................
......................................................................
....................................~}|{zyxwvutsrqponmlkjihgfedcba`_^]
\[ZYXWVUTSRQPONMLKJIHGFEDCBA@?>=<;:9876543210/.-, *)('&%$#"! ...
..............................!.......,[email protected]..%.tm.x.
......pH,....r.l:..([email protected][email protected].`....z..4`.f...x[....x.....!........}_
..............`.........._...............................^......a.<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/faspbtn.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:49 GMT

Date: Wed, 09 Sep 2015 21:34:49 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 1723

Last-Modified: Fri, 13 Sep 2013 02:12:53 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 shjcl69:8080 (Cdn Cache Server V2.0), 1.1 kf49:7 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89aM...........................-. ,. &.)(. %.(%.(..................
.......................................!..XMP DataXMP<?xpacket begi
n="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adob
e:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:
56:27        "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22
-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights=
"hXXp://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="hXXp://ns.adobe.com
/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceR
ef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpRights:Marked="False"
 xmpMM:OriginalDocumentID="uuid:4184B9D9CCF8E111BB4D96CAE4A07F0E" xmpM
M:DocumentID="xmp.did:4FCD00391C1411E3913B8A3F3EE50EB9" xmpMM:Instance
ID="xmp.iid:4FCD00381C1411E3913B8A3F3EE50EB9" xmp:CreatorTool="Adobe P
hotoshop CS2 Windows"> <xmpMM:DerivedFrom stRef:instanceID="xmp.
iid:2A653C2E141CE31180E9A4FB6B745738" stRef:documentID="uuid:4184B9D9C
CF8E111BB4D96CAE4A07F0E"/> </rdf:Description> </rdf:RDF>
; </x:xmpmeta> <?xpacket end="r"?>........................
......................................................................
....................................~}|{zyxwvutsrqponmlkjihgfedcba`_^]
\[ZYXWVUTSRQPONMLKJIHGFEDCBA@?>=<;:9876543210/.-, *)('&%$#"! ...
..............................!.......,....M......`qPdi.h..l...R.tm.x.
...d..pH,...dR.l:...tJ.V...6..t.X.xL.s.[s9.]o...\N.s.s.=..G.x.t...yq..
.......ed.....c.............e........c............................<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/libg_2.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:58 GMT

Date: Wed, 09 Sep 2015 21:34:58 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 2223

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx166:8080 (Cdn Cache Server V2.0), 1.1 kf49:1 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89aK.^.............................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,....K.^........H......*\.._.....`....5I2fD..#.. =.
.)....'I.D.1......C.oI.-M.8i.._..>w....h.'...t....'N..L.....T.6..e.
?$JfF....)[email protected]$.c....)[email protected][email protected]{[email protected] h."
.. i_h.B.`[email protected].%A.L......". ..6h..@^.@..... ...
.... .0.U..S.....Bi0....$a..................`..jI.s.&.%....br.?......0
h....2....#....(".f..a|OX...,......U....h#[email protected].....*.......
.D.H<AC.KV._.4...?p.a.......I8...`Zi..O....|.i%.`4A`..( g..l...M.b.
.KZ...2:....*.B.mn..$..9I.;"..(.T.... ...h0......E.e....6..BK.4....-..
.W2>.%.,.........#[email protected]..."zb....B..!R.J.O\1...Np..e.1.......Mp.#.
......../..,Kl.2.....0....*.B...!G..'...K..E'......:1.#......NqA..]0E.
Z|@2..h..-.h.r~.,`K.b.<s~..A.?u..s~.......;.}^.....,}..c...$.Hm<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/more_zb.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:54 GMT

Date: Wed, 09 Sep 2015 21:34:54 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 2770

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx166:8080 (Cdn Cache Server V2.0), 1.1 kf50:10 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89a.. .... @....,`.Ei....i..O{..ggw.............x.......jR.......xg
....[P.m)........j..*......Qq]..*[email protected].&.....k...N....>h......r..
.............;..8&.........,. Q.....................p...........6...!.
......,...... ......pH,.....Bj.L..tJ.Z...v..^".pd..D...z...<!.|N...
.BX.9....x..........!.#G".%>......>.`|................%."E"...-.
..%.{b... .........B#......:...!.{}...........?............{~.~......%
.BX......j:.....E.o>@..c...~.3j..B..K'j....D..|"HP..B.. ...!qb.?.f.
[email protected]....>H.x..;..e..0Q.M{F...K....H...H.-....,.aB
...,[email protected]...... ^......#K^[email protected]..
M....4l..a...../@........=..K... ...N].....k.......f.....x.7...^..y.4,
.............4......=..g.t.. .y.%[email protected].....\.... ~8@..!......
@u.......(C...8#.8...|.}..........v.i.I..t0..C.:.p  .M.....`...nH@.`.)
&......c.).....!.p.i.t...b.m.."w1d.g.;zdA}.l....-......_5.....c.s..2.0
C.b.0]...*j.......d....6`!....$u8..gu.\...p.Qj.)n.......u..0j...y.wji@
[email protected]..@`..VUp....k...|....".....:.j..B.l....l..:0....K@...)....k....
...8.J..'....3.. ...k... ...jU....^ .i.....z.6....0........g......'./.
...?..3.3h.....[/.7..)..#.........||.....C..|..RK.x...ApU.VE..D.YPp.R.
....J<C.......v8.......n.....>.....-.....i.0\....l.0.\ ......w..
.nv.J]P..l.....p'g.......0t..zQ.....PNq...`..........,[email protected].
{.=:.3t.u....).=.~....`m..e.{K<@.C.....n..2.`.........e.j....h..M..
Y. V.f.<.ZH{f....4..),|[email protected]......`..lmf.*....-.@`.A.....-j@..
....b..J...LL...`..rjf~......&z..2....H.22.Y#$..!6,.0.......e.1...<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/ico_ann.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:35:00 GMT

Date: Wed, 09 Sep 2015 21:35:00 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 1108

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx165:88 (Cdn Cache Server V2.0), 1.1 kf48:10 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89a.......B.....!..XMP DataXMP<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS5 Windows" xmpMM:InstanceID="xmp.iid:573F6AF9FFB211E098C4CA8B9A
0ADD05" xmpMM:DocumentID="xmp.did:573F6AFAFFB211E098C4CA8B9A0ADD05">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:573F6AF7FFB211E098C4
CA8B9A0ADD05" stRef:documentID="xmp.did:573F6AF8FFB211E098C4CA8B9A0ADD
05"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>.............................................
......................................................................
...............~}|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJIH
GFEDCBA@?>=<;:9876543210/.-, *)('&%$#"! ........................
.........!.......,..................loFK%..V...;....
<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/t_lm.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:35:01 GMT

Date: Wed, 09 Sep 2015 21:35:01 GMT

Server: nginx

Content-Type: image/png

Content-Length: 4937

Last-Modified: Mon, 04 Aug 2014 07:28:20 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 shjc71:80 (Cdn Cache Server V2.0), 1.1 kf50:7 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR...B...-.............tEXtSoftware.Adobe ImageReadyq.e&
lt;...&iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.5-c021 79.155772, 2014/01/13-19:44:00        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CC 2014 (Windows)" xmpMM:InstanceID="xmp.iid:D56F89F8120D11E49973
98D7653D7193" xmpMM:DocumentID="xmp.did:D56F89F9120D11E4997398D7653D71
93"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:D56F89F6120D11
E4997398D7653D7193" stRef:documentID="xmp.did:D56F89F7120D11E4997398D7
653D7193"/> </rdf:Description> </rdf:RDF> </x:xmpmet
a> <?xpacket end="r"?>P.br....PLTE...Zg....wy.8NcW........9..
.....................d.......................5../5Rsn.j..JSy..........
........3F[{..,..9..t..h...........AGhEVh...J..ht..........,.~...~....
..........k..:..c..-~m...;........(..kj.nl....5.xSd|..................
XZ.'[email protected]{aR......................K
n~-..0..h..... .b5.....kz....SHt...F..z..t........,..Bt{`g.q........|u
.(........Ra.an.......EOp................{.......;.....R..uj....f`.Vw.
uz....=|.Ly.<.....=ls...<|x4.~...Yfn...o{....<ah.............
.....><ag.....oc./.y...............ff....m_.W..9............<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/t_6.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:35:02 GMT

Date: Wed, 09 Sep 2015 21:35:02 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 5202

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 shjcl69:8080 (Cdn Cache Server V2.0), 1.1 kf50:1 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89aB.6...................00/............y........O..............\..
...................................................j..................
.....1..............T................................e..@.............
................I............................................$p.......
......q..p).........................................zj......2y........
........................F3..u....9#.........j;9.......................
..........................gW.P9..........^O.........|J:............KOM
............M...{}.YH........................Auq...ug]................
................s....................r..k................o\...........
.....................................x.]..............................
...............4.....p.......z............j...........................
...........!.......,....B.6.....E..."..y..*\......#J.H.....3j....G.<
;b.. p.."...[.....0c..I....8s.......@..\..............P.J.J....,......
..`.....HA%c..]...Z%....K....2........U...L...... ^..n...#K..x....yV..
....s.....s...S.F.B...5,... T.........o.3(..N...... _.........M..%..B.
[.D.........~F)...._.......P.O...C5By.....y .#....h...d....PB...F(...V
h...f..........AF...P..(..". .s!>..8!.... .....$.,.`'.< ..D.i..H
J../(.`".e.s..T.h..IfY.......`...)..3.)...c)b....p.)..t.i..x...=.8...v
(b.&..i...\.g......or..){..c.j.....v..............lb....b......%....'.
............R).{d.`&......6....F ...Vkm.s.j.%.h{.$..a..A.....,.k=....=
.N;C$.......k,...{-8.D./...l...z.jl..r..5.i...NbC...!."s. .. ..e=$.l..
$..,)...o......4.l3..XaE.7..D...Ls.V8#..H'...^4...^..D.A...w.4..&s<<< skipped >>>

GET /flashzt/img/zmxy3/sp_line_1.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:35:03 GMT

Date: Wed, 09 Sep 2015 21:35:03 GMT

Server: nginx

Content-Type: image/jpeg

Content-Length: 2079

Last-Modified: Thu, 07 Nov 2013 07:12:52 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 shjcl69:8080 (Cdn Cache Server V2.0), 1.1 kf50:5 (Cdn Cache Server V2.0)

Connection: keep-alive
......Exif..II*.................Ducky.......d..... hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp
MM:InstanceID="xmp.iid:3A3844F4475211E3A7C6EBD43CA1FE60" xmpMM:Documen
tID="xmp.did:3A3844F5475211E3A7C6EBD43CA1FE60"> <xmpMM:DerivedFr
om stRef:instanceID="xmp.iid:3A3844F2475211E3A7C6EBD43CA1FE60" stRef:d
ocumentID="xmp.did:3A3844F3475211E3A7C6EBD43CA1FE60"/> </rdf:Des
cription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?
>....Adobe.d.......................................................
......................................................................
......................................................................
.....................................Q....R'..r.7!..#$%g2Bb..3c..&fvw.
........................&6Q..$d%eu.q..b.#c!Aa2B3.".............?....`6
......._I......F...>....&?.u.p...Qw........'....e.}...2....(.c....8
.....^.O.......^..X..{.,.@..."h.Y.Z...^.a.z.B......7....W'6...mgYj0...
..'...T.0....pkTsRp.$........<B..O....'...t.m.:.X!.kU..p.R..3X...R.
..i..oh....S..l..X!.kV....G.T.r....q6=....P...N..k.. ...J[..sj.T .<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/c_5.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:35:04 GMT

Date: Wed, 09 Sep 2015 21:35:04 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 180

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx165:88 (Cdn Cache Server V2.0), 1.1 kf48:8 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a.......j.....!.......,...........D.................H............
...............fL*......J...df.j............N....{X~....... ......(8..
Gx......Hb..)9IYi..y......Y..:JZjz:.P..;....

GET /flashzt/img/zmxy3/zb_nav_20131205.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:35:04 GMT

Date: Wed, 09 Sep 2015 21:35:04 GMT

Server: nginx

Content-Type: image/png

Content-Length: 5455

Last-Modified: Tue, 03 Dec 2013 06:48:22 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx166:8080 (Cdn Cache Server V2.0), 1.1 kf50:7 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR...X...4.....a.......tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:5A84F4695B4311E3B1C990F5
C16B460B" xmpMM:DocumentID="xmp.did:5A84F46A5B4311E3B1C990F5C16B460B"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5A84F4675B4311E3B1
C990F5C16B460B" stRef:documentID="xmp.did:5A84F4685B4311E3B1C990F5C16B
460B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>..$....pPLTE.......I.?V..G.........:..=....
....I........G...........J.....7..|..{..1..o..q.W..[..l&..!..[.U......
A.`.....f......f..G..>..&..,..A..c.x8..7.s0..P..W........K.z9......
.....~.v4...........6..............E.q-..^..r.}=._...6..i..u..n..]..-.
[email protected]!.Y.._.....t9..#..I..R..V....{<..%..&..
...x.....y.Q......D..u..E.....L.T...K..U.x7.l/..{...._...e..f..n.Z..W.
..l..u....i*.U...j..g..(..B..J.t2.o*..7..;...........Q..P..W..'.].....
.}....|<..v..Y........j..j.....r..........P...<..)..$..N.d..{;..
C.....F.c...i.....p.....6..t..p..T.....O..H..d.N...x.\...h.R.....e<<< skipped >>>

GET /jss/lazy_iframe.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Wed, 09 Dec 2015 00:23:27 GMT

Date: Thu, 10 Sep 2015 00:23:27 GMT

Server: nginx

Content-Type: application/x-javascript

Content-Length: 1268

Last-Modified: Sun, 10 Nov 2013 09:24:37 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx165:80 (Cdn Cache Server V2.0), 1.1 kf48:3 (Cdn Cache Server V2.0)

Connection: keep-alive
function F_Resize(h){..document.getElementById(F_FRAME_ID).height = h;
..//window.scrollTo(0,$("#" F_FRAME_ID).offset().top);..}..var get_scr
een_height = function(){..  if(window.self&&self.innerHeight) return s
elf.innerHeight;..  if(document.documentElement&&document.documentElem
ent.clientHeight) return document.documentElement.clientHeight;..  ret
urn document.body.clientHeight;..},..get_scroll_top = function(){..  i
f(typeof(window.pageYOffset) != "undefined") return window.pageYOffset
;..  if(document.documentElement && document.documentElement.scrollTop
) return document.documentElement.scrollTop;..  if(document.body) retu
rn document.body.scrollTop;..},..get_offset_top = function(o){..  var 
offset_t = o.offsetTop;..  while(o=o.offsetParent){..    offset_t  = o
.offsetTop;..  }..  return offset_t;..};..function chg_src(){..  var s
creenH = get_screen_height(), scrollT = get_scroll_top();..  var ifram
eH = get_offset_top(document.getElementById('CommFrame'));..  if (pars
eInt(screenH) parseInt(scrollT) > parseInt(iframeH) - 200){..    do
cument.getElementById('CommFrame').src = F_URL;..    $(window).unbind(
"scroll", chg_src);..    $(window).unbind("resize", chg_src);..  }..}.
.$(window).bind("scroll", chg_src);$(window).bind("resize", chg_src);c
hg_src();......
<<< skipped >>>

GET /flashzt/img/zmxy3/n_zm1.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:43 GMT

Date: Wed, 09 Sep 2015 21:34:43 GMT

Server: nginx

Content-Type: image/png

Content-Length: 7680

Last-Modified: Sun, 17 Feb 2013 05:36:18 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx165:88 (Cdn Cache Server V2.0), 1.1 kf48:5 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR...l...A.....[.......tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:FDB69C70710011E29052A0DA
A111BA9D" xmpMM:DocumentID="xmp.did:FDB69C71710011E29052A0DAA111BA9D"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FDB69C6E710011E290
52A0DAA111BA9D" stRef:documentID="xmp.did:FDB69C6F710011E29052A0DAA111
BA9D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>...Z....PLTE...Xe....RRRz.....=Jj......}}}y
.................1pk......jjj:..vv.......;;;-QXXXX]..3................
.,,,...333......ft....)..so....19S.....................nnnDKk...I..G..
b........FVy...uuu......R`y*..zzz...aaalk.lv....qqqMMM(.|...3..QV|HHH.
..eee.........DDDAAA...(.t...\\\'..<..&&&...............an.......&.
.WY.:..[j.6.x...kg.Duy......Jhz..._`....!!!ry.5..;..3.....p|.D:`CWmajx
...JNt...3..V..zs./..g.....;.tbQ.Us....mz.RDt7..9.....Z..hd....3..~w.r
l....hn....... .t......cg.&.ldp....gh...........................n.....
......t.........~wG..Q..Y........cjq...i..m_..................lO..<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/bg_4.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:45 GMT

Date: Wed, 09 Sep 2015 21:34:45 GMT

Server: nginx

Content-Type: image/png

Content-Length: 3863

Last-Modified: Fri, 12 Jul 2013 05:47:46 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx166:8080 (Cdn Cache Server V2.0), 1.1 kf50:9 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR.......W.....q..C....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:FC023941EA9711E2ADE9A0F6
B57AB29A" xmpMM:DocumentID="xmp.did:FC023942EA9711E2ADE9A0F6B57AB29A"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:FC02393FEA9711E2AD
E9A0F6B57AB29A" stRef:documentID="xmp.did:FC023940EA9711E2ADE9A0F6B57A
B29A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>...4....PLTE...............................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
..................................................................<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/b_1.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:46 GMT

Date: Wed, 09 Sep 2015 21:34:46 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 610

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 shjc71:88 (Cdn Cache Server V2.0), 1.1 kf48:3 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89a.......D..s....................!.......,...........HJ1>..I..8
....`(.di.h..l..p,.tm.x..............r.l:...tJ.Z.._p.h<...xL.....z.
ng|.-.......~.....np.rCt...........Q.@\].............O...B..v........|
.Z.D__........&.q..............................u...........]E.u.......
.........H..A%... ......#J.H.....3j....... C..I....(S.\.....0....C^..8
[email protected].*].....P.J.J....X.j....Pi5........h..].....p...K...
.e............L........[i!.y.#K.L.....3k>.X,...C..M.....S.^......c.
.M.....s...........N...............K.N......k..........O......._......
...O.............'..(....h...&....6....F(...Vh...f....B...;....


GET /flashzt/img/zmxy3_20120913/right.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:53 GMT

Date: Wed, 09 Sep 2015 21:34:53 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 1037

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 shjcl69:8080 (Cdn Cache Server V2.0), 1.1 kf49:2 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a.......G.....O..B....................c.......................k..
..................\..@..>...........t..............................
..h..b........w.....a..e...........m..............z.................R.
..........p...........g...........q..~.......................t........
...i..a...........................................................x...
..............m..............}........................................
.......}..{.....l..l.....<.........................................
......................................................................
......................................................................
......................................................................
......................................................................
.................!.......,.............<.H...;..*L.&...2...# .B....
1b... .2......*i.0`.....$!..`.....00......`^,X....;=.4.a.L.6=.4.9.Q.?.
.....AL...X.c!..#....4 P.:C..Y..$...~T."GHZ..`L.....D]I..Ab..3,.h.z...
.o"DX.G...3.qx......Hv."bG.9O.Tyy1c.C&.. CC$I..&L.r....$...8.K...;nt>....

GET /flashzt/img/zmxy3_20120913/b_2.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:35:05 GMT

Date: Wed, 09 Sep 2015 21:35:05 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 250

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 shjcl69:8080 (Cdn Cache Server V2.0), 1.1 kf50:4 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89am..................J.....H..R.....c..............3.....g..W.....
...4.....f.....V..j....................!.......,....m.....w.uidi.h..l.
.p,.tm.x..<;A.IoH,....r.\=0.A.I.Z....W.8...vL...h....4...#M...x.c  
4.....................................m.!.;....

GET /flashzt/img/zmxy3_20120913/b_3.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:35:06 GMT

Date: Wed, 09 Sep 2015 21:35:06 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 248

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx166:8080 (Cdn Cache Server V2.0), 1.1 kf49:7 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a\..................J.....H..R.....c..............3.....g..W.....
...4.....f.....V..j....................!.......,....\.....u.uidi.h..l.
.p,.tm.x....E..pH,....rYz`(..sJ.Z..,.Pq....xL...(...h....zN... .@@h...
.................................l.!.;....

GET /flashzt/img/zmxy3_20120913/t_4.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:35:06 GMT

Date: Wed, 09 Sep 2015 21:35:06 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 5530

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 shjcl69:8080 (Cdn Cache Server V2.0), 1.1 kf49:4 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89aB.6............e.........O................................y.....
..........j........................................]..................
...........1........T..k..........................e........@..........
.......I...............................................$p..........q..
.......Y...........z..............g...............v............2y.....
..............gN.sro...............KOM.........ab`....................
..................~...9;9........].....2..............................
.................................................uJ...................
................).....................................~...............
..y............................ug]..................................g.
............|J:.j......................j..............................
...........!.......,....B.6.....M..."..y..*\......#J.H.....3j....G.;b.
. p .!...[[email protected].............`
....OH.$c..]....$....K....2........U...L...... ^..n...#K..x....yV..9r.
.^.....3...S.N. G..7:.[.!.........N.8.(Q2.S.$Jy.....V....K.N......k...
.w.?^......._....1.....W.....$v....ea..5s.8..y.h`..@..$hH.. ....|.Vh..
.f....u.a(^0rC*.ihbv....=,... ..2...\3.2dL"..<........2...K~.....L6
...PF)..TVi..X*...#.s..7\...c.i..e.`...d...m....-F'.:...... .....*..d.
.. ....(......F*...V.b......c..O'h.Zf-LXj*.s....q*9.....B. ..S.......[
..M..8..--.j...&....6....F .....O7.d.-!..X./.. n..d......n.....#s.!.:.
.C..[......k.2i.....,....'....&.........."...t......j.....?..c2>...
H.m|A.(0..3.i.1. .....'[email protected]'....xqq..0....\.E-......,..

<<< skipped >>>

GET /flashzt/img/zmxy3/new_icon_1.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Wed, 09 Dec 2015 00:50:30 GMT

Date: Thu, 10 Sep 2015 00:50:30 GMT

Server: nginx

Content-Type: image/png

Content-Length: 2647

Last-Modified: Tue, 12 Nov 2013 08:28:28 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

X-Via: 1.1 hzsx166:8080 (Cdn Cache Server V2.0), 1.1 kf49:9 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR...(...(...... H_....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:17A6F24A4B7411E3948596CD
F3D1624D" xmpMM:DocumentID="xmp.did:17A6F24B4B7411E3948596CDF3D1624D"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:17A6F2484B7411E394
8596CDF3D1624D" stRef:documentID="xmp.did:17A6F2494B7411E3948596CDF3D1
624D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>W..y....PLTE.............2V................
............_.2.....................~..k..h.......................Kx.8
Z.,H....../..I...;\....*A.............W...........d...................
.......6R....w..Ff.*?...................>\...-......Da.............
.....................Qt.Gb..................................@V........
..4G.f....,...x..=P................Nf.......d.....y..EY..........}..AR
.<L*YgE..m............{.......................MaY...v...........Yk.
...............9ED..D|......................Y..C..Y..*[email protected]..'R
LW..A|sY.yW..'F<...)>6...............'<-k.v...C]J{.....CZ<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/sy_ico.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive

Cookie: bdshare_firstime=1441846240468


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:35:14 GMT

Date: Wed, 09 Sep 2015 21:35:14 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 2053

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 shjc71:88 (Cdn Cache Server V2.0), 1.1 kf48:7 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89a8............o{.dpv.47....tz....KO.35...........................
......................................................................
......................................................................
.......IPT........................t.....q..|...............IL...."#...
............dqx......................HL.HL.........6<?.........FMQ.
...ILs...sy.........prs...............frw............>>>r~...
..........{...........334.............................................
.............GJ.;>..............................................dh.
........SSS.........q|..y....OOOccc...................................
....mop......___...s}..........................kp.szu.........|.......
......................................................................
..........................!.......,....8.......}.x.......*\.....>N.
..B....2j......./*Y....!?>[email protected].
.~.\..J....X.fu..........D..|h..]...[.f.....`?~g ...7M..Q...L...{..I..
....,*..G.r.G.XQ.D.....>....E..86..{.....=.j.(..J.[....7.......{.p.
.j.[\PE.z...!B...qXNi."..5_.....O^......W/O..z.T..A..<.n.M[...3p...
@(.L.I..&..q.).`..(H.<...CA-L O.!....z$..6..r.....".,..b....B..L.BA
.@0...\.H }.2.0..!........4.d.1>)...`0.....!......<..L,...L.....
).8...n....r.i...0.A..q....\...sl.F..L.....p...B.c..D.@..\....pP.<!
......j...P.D..Pb..........*.... [email protected]..
.D.....Q...\ B.R....^.R..~|..... .?..;.q.F ...P...I.S....l...'.....[D&
lt;I...?.X.@>.D`...w... ..q..8`..#.........0.,..4......1..70...<<< skipped >>>

GET /jss/4399.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive

Cookie: bdshare_firstime=1441846240468; cookie_hs=4399.com|||%u9020%u68A6%u897F%u6E383%u4E4B%u5927%u95F9%u5929%u5EAD%u7BC7||78072||0


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:53 GMT

Date: Wed, 09 Sep 2015 21:34:53 GMT

Server: nginx

Content-Type: application/x-javascript

Last-Modified: Sun, 10 Nov 2013 09:24:38 GMT

Transfer-Encoding: chunked

Cache-Control: max-age=7776000

Content-Encoding: gzip

Age: 1

X-Via: 1.1 hzsx166:8106 (Cdn Cache Server V2.0), 1.1 kf50:10 (Cdn Cache Server V2.0)

Connection: keep-alive
386.............U.j.@.}V.....H. .>&U .B..)4/..#[ {SYkV.......O./tf.
b.v...y.z...........v.k.'...&*.z....x..U.. V...\q^..b...y..#.U...f....
x.VOb.....k..M6.....iC9.KJ.2./..2z.u!...W.`....k.L..).[U.C.%..h.$q..*.
...wphI........MEmC>`&.M/'z.:.eUM.\...7k.=..|....e.u..2..5. j^...KW
..%*.`.|......>...\.....7.zT.)8.'bzA..I...H.<.<c..a.K.^...|..
#....3.{G.<.E.#.9.o.......&>.tl.1...).9.H.;$'...X.M*<.Xp.....
>'....IO.6.}.n.~x....T...?2xp.M....|F2..>.U..U.oj..C...i.R...}..
.U~.&.1!...Ma.q_67uG.K.c...wA...{..S...V-.j..]"..M......l>n.....|.!
..k\{g..8... t..Kv.R[....>...^.<.tb..K...d.6.h..0.....k|....x@s.
...l....S<.E1..2/....v.zCCq.T..5.....x..,F..c1I....J.Z.#.......#.\.
z...}.\.A.... ..;.......&..c..r........9.,.....]Y..\..W.....F.....?.m.
..$~c..8i..<CQh.C........2....o..?.N[.Os..2.>....4.....b;....{..
.@w. ..O.Y..#\a.]..k.I.....YJ....%...n.k`......x..O..]g..^.7.......8..
.=...3c.........^...?t......c.....J...Z'.s.....0..HTTP/1.1 200 OK..Exp
ires: Tue, 08 Dec 2015 21:34:53 GMT..Date: Wed, 09 Sep 2015 21:34:53 G
MT..Server: nginx..Content-Type: application/x-javascript..Last-Modifi
ed: Sun, 10 Nov 2013 09:24:38 GMT..Transfer-Encoding: chunked..Cache-C
ontrol: max-age=7776000..Content-Encoding: gzip..Age: 1..X-Via: 1.1 hz
sx166:8106 (Cdn Cache Server V2.0), 1.1 kf50:10 (Cdn Cache Server V2.0
)..Connection: keep-alive..386.............U.j.@.}V.....H. .>&U .B.
.)4/..#[ {SYkV.......O./tf.b.v...y.z...........v.k.'...&*.z....x..U.. 
V...\q^..b...y..#.U...f....x.VOb.....k..M6.....iC9.KJ.2./..2z.u!..<<< skipped >>>

GET /crossdomain.xml HTTP/1.1

Accept: */*

Accept-Language: en-US

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: cb.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1


HTTP/1.1 200 OK

Accept-Ranges: bytes

Connection: keep-alive

Content-Length: 4121

Content-Type: text/xml

Date: Thu, 10 Sep 2015 00:50:34 GMT

Etag: "554c2327-1019"

Last-Modified: Fri, 08 May 2015 02:44:55 GMT

Server: nginx
<?xml version="1.0"?>..<!DOCTYPE cross-domain-policy SYSTEM "
hXXp://VVV.adobe.com/xml/dtds/cross-domain-policy.dtd">..<cross-
domain-policy>..    <site-control permitted-cross-domain-policie
s="master-only"/> ..    <allow-access-from domain="*.4399.com"/&
gt;..    <allow-http-request-headers-from domain="*.4399.com" heade
rs="SOAPAction"/>..    <allow-access-from domain="*.4399.net"/&g
t;..    <allow-http-request-headers-from domain="*.4399.net" header
s="SOAPAction"/>..    <allow-access-from domain="*.4399api.com"/
>..    <allow-http-request-headers-from domain="*.4399api.com" h
eaders="SOAPAction"/>..    <allow-access-from domain="*.4399dmw.
com"/>..    <allow-http-request-headers-from domain="*.4399dmw.c
om" headers="SOAPAction"/>..    <allow-access-from domain="*.439
9er.com"/>..    <allow-http-request-headers-from domain="*.4399e
r.com" headers="SOAPAction"/>..    <allow-access-from domain="*.
4399pk.com"/>..    <allow-http-request-headers-from domain="*.43
99pk.com" headers="SOAPAction"/>..    <allow-access-from domain=
"*.4399pk.net"/>..    <allow-http-request-headers-from domain="*
.4399pk.net" headers="SOAPAction"/>..    <allow-access-from doma
in="*.5054399.com"/>..    <allow-http-request-headers-from domai
n="*.5054399.com" headers="SOAPAction"/>..    <allow-access-from
 domain="*.61.com"/>..    <allow-http-request-headers-from domai
n="*.61.com" headers="SOAPAction"/>..    <allow-access-from <<< skipped >>>

GET /ecom?di=62872&tm=BAIDU_CLB_XML&asp_url=4399.com&return_type=1&ran=4343.795664608479 HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://cdn.comment.4399pk.com/control/A4399dv_base_main.swf?150527

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: cb.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1


HTTP/1.1 200 OK

Cache-Control: post-check=0, pre-check=0

Connection: keep-alive

Content-Length: 233

Content-Type: text/xml;charset=UTF-8

Date: Thu, 10 Sep 2015 00:50:34 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Last-Modified: Thu Sep 10 08:50:34 2015

P3p: CP=" OTI DSP COR IVA OUR IND COM "

Pragma: no-cache

Server: nginx
<?xml version="1.0" encoding="utf-8"?><adm xmlns="hXXp://cb.b
aidu.com" xmlns:xsi="hXXp://VVV.w3.org/2001/XMLSchema-instance" xsi:sc
hemaLocation="hXXp://cb.baidu.com hXXp://cb.baidu.com/xsd/BAIDU_CLB_XM
L.xsd"><status>0</status></adm>.HTTP/1.1 200 OK..
Cache-Control: post-check=0, pre-check=0..Connection: keep-alive..Cont
ent-Length: 233..Content-Type: text/xml;charset=UTF-8..Date: Thu, 10 S
ep 2015 00:50:34 GMT..Expires: Mon, 26 Jul 1997 05:00:00 GMT..Last-Mod
ified: Thu Sep 10 08:50:34 2015..P3p: CP=" OTI DSP COR IVA OUR IND COM
 "..Pragma: no-cache..Server: nginx..<?xml version="1.0" encoding="
utf-8"?><adm xmlns="hXXp://cb.baidu.com" xmlns:xsi="hXXp://VVV.w
3.org/2001/XMLSchema-instance" xsi:schemaLocation="hXXp://cb.baidu.com
 hXXp://cb.baidu.com/xsd/BAIDU_CLB_XML.xsd"><status>0</sta
tus></adm>...

GET /cpro/ui/c.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: cpro.baidustatic.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 10 Sep 2015 00:50:21 GMT

Content-Type: application/x-javascript

Content-Length: 28139

Connection: close

ETag: "55efff3b-6deb"

Last-Modified: Wed, 09 Sep 2015 09:43:23 GMT

Expires: Thu, 10 Sep 2015 00:57:30 GMT

Age: 3171

Cache-Control: max-age=3600

Content-Encoding: gzip

Ohc-Content-Crc: 1033074224

Server: hkg01-sys-jorcol02.hkg01.baidu.com
....f..U..c.js..Ziw....._!.f.d.Sr....F.2.u..ehn*.Y .R.%Q%)'...~.......
.}.......>#0.}.{../.4...;...{.E.mz....=X,z..M.{-.._......v.Y.e..lg{
!..._di...%?..5_m..V..c...ml.lsYn.U..u.#.{...o.co...z.E)Yy........F{v.
'V!E....)...eK....N.......;.s.^.P.......fe....h.v.ZXQ.2..0[.."].2.Z.).
.pC..g|.g..X....9..^`.....S......VD\'..6.x2.MY...S.....F\..J,%Ot{.....
8.....V/..M.3.G.~.....}._.o.h`.Z...m..........o.O...b.?.S...OnG8.n.\.v
...%,r.o.h....&........D...J.....N4...%...........zqi.yAvO..A-..f:.=.5
.4.G....../.....b>c).OO0..7.......e.. ..<wDE.^I.C...7....R.I.`9.
...0..{.....M1C...<.>.c...}..-s_s..m...-.5k.............s..>.
.1..]e.R,....J...Yu.W...U..&_........`s...1.{.A.q......f..g...i.HX.T5.
........Y..{.= <.......H..g#..(.>.p .X........1........Z.......d
. >I..D*I...'?..m.....j..^.gl.......k;.....&.$....D....#.U.y..-.I7.
...%.6e|....Q\.B0...!O..O.D......."y...')".......A.].......%.*I,n..E.h
..".........w'.....{4...@q>....r6.#..g..... .q.....X.y...Z..l.,.C#.
.-..Z.Im.Y.7...EJ...EXf.%..y.g0|...s....:u..\.R..A....'.wz$E.^.g.R...q
.Mw$....k2. z(...k....>.i......HY..K_4..0}..{..!.`H"H.7alI.[.L..8..
....\...,fDrDg.h&.]O...[|...1...o:...^.....p...$..Ko%.r`...j.....~.9.v
6......9...qpX......xG.........b.....DP ...........$LN.Y.7.Y.,.....T..
Z.....].Y...k....2OW................J. V....4.M.]... ..e.a.-.X)0...y..
,.^l.....$O>.{zf.-..........B....$T.JN..X..vq`M.)..V.,.$.G..r..G...
.EN.''.Xu.`.,M..kD^.d&...V..l..sY... ...=h.,....lJ.D.....b(lJ....ZPV.P
.b1i..... ..cZ.Q....|{.S..F}nVp.S....eU.C;.T.....c..b(..L..x`qk Wa<<< skipped >>>

GET /tpl/ac.js HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/wh/o.htm?ltr=&cf=u

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: dup.baidustatic.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 10 Sep 2015 00:50:43 GMT

Content-Type: application/x-javascript

Transfer-Encoding: chunked

Connection: close

Last-Modified: Thu, 16 Jul 2015 08:55:00 GMT

Expires: Thu, 10 Sep 2015 00:52:50 GMT

Age: 173

Cache-Control: max-age=300

Content-Encoding: gzip

Ohc-Content-Crc: 1751464740

Server: hkg01-sys-jorcol07.hkg01.baidu.com
63f.............VmS.:....0.;A.hM.v..vU........~.\F..X..\Y&....=r.B.;s.
.d..t$...<G8o....L.....s*...wQ...i....<.&.."....kg...Z..o.f....r
~..^.X....Y\.M...V.o_.'...Q.....C.W$.*.^,."$.........E.. ..!...V......
...66............N9...i#.,6.NO....u._^...g.....r.S0.."........".]....%
....;|Ws.(P....5..`.s....B..=..9..0......RU..$.....Z2.....S.../.r...6`
.?Q.x.3...v.......].....'....`h..B.i.....k.`ho..{(.)/..0$@9D%...j.....
..`.....6S..EQ. .N*...!.v..7....8g..V......w{.}............G./.qVb.B.x
. [email protected].......,|..G.1 .hC.i..6.}.Fi..5..N..Ku..c$r.....
.R0.[.......j.'..g.a.#I7.i.(..l.'..S.u&d.}.....e.l}..I.}QS.0F..ED...1|
.[z.W..._."..W......P. .Qv$..zQo...5I.7AhI....:).k......k.T.".V...B..&
lt;..n..uHe.(.UW.......}m...f.!..^ t..2.P...G(..?.^-.. .a.7.D2........
01Y..bi .M...u...a....r.<..`.Nl......(...2..R..9..`...k..p..g......
...............#.;.dK.\R...Psg..F......X6*....X..g'W......m.{dGD.T0...
................7.&..D$.s.o. DB......A...m...p....E.W.<.d.V2p......
.:.}n...\.............pp.....t.3]j.\Vh).A!........\.5.l..d..{.b.s..D.m
i.B.l...2..n..._]...Z..Bm]...*.m.......'(...4:.m..........YPK.%...b...
..J._-...h.NC.....s....3....,.; k{.Y..f....b4.......>.t.[[email protected].
...m..`?...XLS ...};.;(..i7..M.$..x.o7...h...}9.e..M)_,.fN.Bo.g.IA..IP
.......`0.......N.......g\..X..........B'..&.IE.H*[email protected]..
..R%-.....]..&.z..,Sp~. ./....P..@..*....<.*.2`.....d...........v.M
.z.(.p.f...g_W.....&....xo .s..{r...2....&.z..m].l..r......q...Z......
...8.7. ........~.......>......i..-...*Q..i.ez.U.Q:z.6.........<<< skipped >>>

GET /cpro/ui/baiduPatch.swf HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://cdn.comment.4399pk.com/control/A4399dv_base_main.swf?150527

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: cpro.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 10 Sep 2015 00:50:35 GMT

Content-Type: application/x-shockwave-flash

Content-Length: 14743

Last-Modified: Wed, 09 Sep 2015 09:43:23 GMT

Connection: keep-alive

ETag: "55efff3b-3997"

Expires: Fri, 11 Sep 2015 00:50:35 GMT

Cache-Control: max-age=86400

Accept-Ranges: bytes
CWS..i..x..|.`T...;..7o.$.!. :...$.}.Y.@".dsc ...3.d....V.(.;.R.....k.
.Uk.3I..Tkk...y.u. .~...d..i?..w....{[email protected]...
{6..5$f.u..H2.8..h..M.6M..../.8c................l....>l.GR(.%..hc2.
k.p;P.kJ.=lX............XMhB0V_.9.X4qBq.....%.d.6......9%..../.4~....'
..8yf..q..g......nfx.6..rX.;1=...Z.a/j..C/...(..H......X..1T.<..5..
!....e......d.!..(....h.vf..y.../(.R\:.l....fL/.?m.....eS.....v...V..6
.....j......YjU...hC.....'M* ..........^C...Pmy<V/w.1.O.XRG.....$.;
3.C1.4.?...V..,..C..b.?b.Q..............ml...._.,...x...t.<.....X.&
gt;...hl....L.h..D$...).14>\.HDf.u"v.RQ....(.D{{.QnE.N..N..M..=mI.h
....KJ..-S..e......t..".j.y&*.s}.Z...[.........Us.N.........{ZS.U5...I
oM Z..,..Ff....HD..c........C..c..../....KqL.md).e.r.75.Y....FMS......
.&..t...C...6..<.......-....E..X..G....A/./..d=a..4......Q....3.u..
[email protected]"....4.".........9.7..D.af......`.6.
/..{......5.z..d2....P..C.o.......V%.>/..l.p8c.)..E..n...'/..m.Eks7
rU2Z.Mn).5..V...`..nH7....M.Dra(..ZY>~z.}.j........X..vG..=0..p Z..
.t.!...P=.%Cy.....M...~..[?..0....Z..'p..c$.V......M.YQGm...$..c..B...
.Y...O.3.....q?..../...{h\..4....F.jQ<..............!.9..5......<
;..._.d..n......-......=.!.X..!.........z.y....#[email protected]
....e....=.Q)Ed.<LAG..B....?1.-HY<....^`w...Q.@]"4.S....cM....WP
..wi............{X7].9..@a_=..(.......M .[....:.{....i,fh.ObI.r...h]c]
(......;6..F....9..y..........R.~a.~z.O..l'....8jd7...7.P.$..%.w1n\.y.
..e....k.....]....`...%.W.>....VF..eP..leHw...=.v.!{.......e...<<< skipped >>>

GET /b.php HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/wh/o.htm?ltr=&cf=u

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ec.pos.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1


HTTP/1.1 200 OK

Server: nginx

Date: Thu, 10 Sep 2015 00:50:45 GMT

Content-Type: text/html; charset=UTF-8

Transfer-Encoding: chunked

Connection: keep-alive

X-Powered-By: PHP/5.6.0

0..HTTP/1.1 200 OK..Server: nginx..Date: Thu, 10 Sep 2015 00:50:45 GMT
..Content-Type: text/html; charset=UTF-8..Transfer-Encoding: chunked..
Connection: keep-alive..X-Powered-By: PHP/5.6.0..0..

GET /acom?di=u2279006&dcb=BAIDU_DUP2_define&dtm=BAIDU_DUP2_SETJSONADSLOT&dbv=0&dci=0&dri=0&dis=0&dai=1&dds=&drs=3&dvi=1441600610<u=http://VVV.4399.com/flash/78072.htm&liu=<r=&lcr=&ps=784x-2&psr=1276x846&par=1276x818&pcs=951x668&pss=990x880&pis=-1x-1&cfv=11&ccd=32&chi=0&cja=true&cpl=0&cmi=0&cce=true&col=en-us&cec=gb2312&cdo=-1&tsr=266&tlm=1441793824&tcn=1441846230&tpr=1441846229578&dpt=none&coa=&dpr=1&ti=é€ æ¢¦è¥¿æ¸¸3,é€ æ¢¦è¥¿æ¸¸å¤§é—¹å¤©åºç¯‡,4399é€ æ¢¦è¥¿æ¸¸3å°æ¸¸æˆ&baidu_id= HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pos.baidu.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Cache-Control: post-check=0, pre-check=0

Connection: keep-alive

Content-Length: 1176

Content-Type: text/javascript;charset=UTF-8

Date: Thu, 10 Sep 2015 00:50:25 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Last-Modified: Thu Sep 10 08:50:25 2015

P3p: CP=" OTI DSP COR IVA OUR IND COM "

P3p: CP=" OTI DSP COR IVA OUR IND COM "

Pragma: no-cache

Server: nginx

Set-Cookie: BAIDUID=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1; expires=Fri, 09-Sep-46 00:50:25 GMT; max-age=31536000; path=/; domain=.baidu.com; version=1
BAIDU_DUP2_define('request!u2279006_0',[],{deps:['nova/painter/inlayFi
xed1392089005'],data:{"id" : "u2279006","_isMlt" : 4,"sw" : 980,"sh" :
 90,"_html" : {"adn":"0", "at":"128", "aurl":"", "cad":"1", "ccd":"32"
, "cec":"gb2312", "cfv":"11", "ch":"0", "col":"en-us", "conOP":"0", "c
pa":"1", "cpro_lu":"1,#dfe4f9,#000000,......", "dai":"1", "dis":"0", "
layout_filter":"rank", "ltr":"", "ltu":"hXXp://VVV.4399.com/flash/7807
2.htm", "lunum":"6", "n":"80054191_cpr", "pcs":"951x668", "pis":"10000
x10000", "ps":"784x-2", "psr":"1276x846", "pss":"990x880", "qn":"1a28b
cd7a302e760", "rad":"", "rsi0":"980", "rsi1":"90", "rsi5":"4", "rss0":
"", "rss1":"", "rss2":"", "rss3":"", "rss4":"", "rss5":"", "rss6":"", 
"rss7":"", "scale":"", "skin":"tabcloud_skin_5", "stid":"5", "td_id":"
2279006", "tn":"baiduCustSTagLinkUnit", "tpr":"1441846229578", "ts":"1
", "version":"2.0", "xuanting":"0"},"_html_old" : "cpro_template=baidu
CustSTagLinkUnit|cpro_stid=5|cpro_skin=tabcloud_skin_5|cpro_cpro_lu=1,
#dfe4f9,#000000,......|cpro_client=80054191_cpr|cpro_at=linkunit|cpro_
layout_filter=rank|cpro_cad=1|cpro_w=980|cpro_h=90|cpro_version=2.0","
qn" : "1a28bcd7a302e760","_qid" : "1a28bcd7a302e760"}});....
<<< skipped >>>

GET /acom?adn=0&at=128&aurl=&cad=1&ccd=32&cec=gb2312&cfv=11&ch=0&col=en-us&conOP=0&cpa=1&cpro_lu=1,#dfe4f9,#000000,å®‹ä½“&dai=1&dis=0&layout_filter=rank&ltr=&ltu=http://VVV.4399.com/flash/78072.htm&lunum=6&n=80054191_cpr&pcs=951x668&pis=10000x10000&ps=784x-2&psr=1276x846&pss=990x880&qn=1a28bcd7a302e760&rad=&rsi0=980&rsi1=90&rsi5=4&rss0=&rss1=&rss2=&rss3=&rss4=&rss5=&rss6=&rss7=&scale=&skin=tabcloud_skin_5&stid=5&td_id=2279006&tn=baiduCustSTagLinkUnit&tpr=1441846229578&ts=1&version=2.0&xuanting=0&dtm=BAIDU_DUP2_SETJSONADSLOT&dc=2&di=u2279006&ti=é€ æ¢¦è¥¿æ¸¸3,é€ æ¢¦è¥¿æ¸¸å¤§é—¹å¤©åºç¯‡,4399é€ æ¢¦è¥¿æ¸¸3å°æ¸¸æˆ&tt=1441846229312.266.2281.2281 HTTP/1.1

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml xml, */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pos.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1


HTTP/1.1 200 OK

Cache-Control: post-check=0, pre-check=0

Connection: keep-alive

Content-Length: 34797

Content-Type: text/html

Date: Thu, 10 Sep 2015 00:50:25 GMT

Expires: Mon, 26 Jul 1997 05:00:00 GMT

Last-Modified: Thu Sep 10 08:50:25 2015

P3p: CP=" OTI DSP COR IVA OUR IND COM "

Pragma: no-cache

Server: nginx
<!DOCTYPE html>.<html>.<head>.<meta charset="utf-
8" />.<title>.    .............</title>.<style type=
"text/css">.body{margin:0;padding:0;font-size:14px;font-family:aria
l,'microsoft yahei',\5b8b\4f53,sans-serif}body *{margin:0;padding:0;fo
nt-size:100%}body em{font-style:normal}body ul,body ol{list-style:none
}body img{border:0}body .cur-item .item-img{-moz-background-clip:paddi
ng;-webkit-background-clip:padding-box;background-clip:padding-box}bod
y .clearfix:after{clear:both;content:'\20';height:0;display:block}body
 .clear{clear:both;height:0;line-height:0;font-size:0;visibility:hidde
n;overflow:hidden}body .yahei{font-family:"microsoft yahei",".........
...E\8F6F\96C5\9ED1",Tahoma,Arial,Helvetica,STHeiti}body .heiti{font-f
amily:SimHei,STHeiti,"microsoft yahei","............E\8F6F\96C5\9ED1",
Tahoma,Arial,Helvetica}.s-hl-content{position:relative}.s-hl-content .
s-bd-logo{height:20px;width:100px;background:url('hXXp://su.bdstatic.c
om/static/cun/img/bd_logo_78626fb5.png') no-repeat left top;background
-position:0 0}.s-hl-content .s-bd-logo:hover{background-position:0 -20
px}.s-hl-content .s-bd-logo{text-decoration:none;cursor:pointer;displa
y:block;overflow:hidden;position:absolute;bottom:0;right:0;z-index:214
7483647}.s-hl-content .s-bd-logo-small:hover{background-position:-70px
 0;_filter:progid:DXImageTransform.Microsoft.AlphaImageLoader(enabled=
true,src="hXXp://su.bdstatic.com/static/cun/img/logo_border_dark_fe7d5
068.png",sizingMethod="crop")}.s-hl-content .s-bd-logo-small{posit<<< skipped >>>

GET /c.php?id=30039538 HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: w.cnzz.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: Tengine

Content-Type: application/javascript

Content-Length: 9937

Connection: keep-alive

Date: Thu, 10 Sep 2015 00:04:27 GMT

Last-Modified: Thu, 10 Sep 2015 00:04:27 GMT

Cache-Control: max-age=5400,s-maxage=5400

Via: cache43.l2de1[0,200-0,H], cache49.l2de1[0,0], cache6.nl1[0,200-0,H], cache8.nl1[0,0]

Age: 2771

X-Cache: HIT TCP_MEM_HIT dirn:11:86887886

X-Swift-SaveTime: Thu, 10 Sep 2015 00:05:12 GMT

X-Swift-CacheTime: 5355
(function(){function k(){this.c="30039538";this.R="q";this.N="";this.K
="";this.M="";this.r="1441843467";this.P="oq.cnzz.com";this.L="";this.
u="CNZZDATA" this.c;this.t="_CNZZDbridge_" this.c;this.F="_cnzz_CV" th
is.c;this.G="CZ_UUID" this.c;this.v="1";this.A={};this.a={};this.la()}
function g(a,b){try{var c=.[];c.push("siteid=30039538");c.push("name="
 f(a.name));c.push("msg=" f(a.message));c.push("r=" f(h.referrer));c.p
ush("page=" f(e.location.href));c.push("agent=" f(e.navigator.userAgen
t));c.push("ex=" f(b));c.push("rnd=" Math.floor(2147483648*Math.random
()));(new Image).src="hXXp://jserr.cnzz.com/log.php?" c.join("&")}catc
h(d){}}var h=document,e=window,f=encodeURIComponent,l=decodeURICompone
nt,n=unescape;k.prototype={la:function(){try{this.U(),this.J(),this.ia
(),this.H(),this.o(),this.ga(),.this.fa(),this.ja(),this.j(),this.ea()
,this.ha(),this.ka(),this.ca(),this.aa(),this.da(),this.pa(),e[this.t]
=e[this.t]||{},this.ba("_cnzz_CV")}catch(a){g(a,"i failed")}},na:funct
ion(){try{var a=this;e._czc={push:function(){return a.B.apply(a,argume
nts)}}}catch(b){g(b,"oP failed")}},aa:function(){try{var a=e._czc;if("
[object Array]"==={}.toString.call(a))for(var b=0;b<a.length;b  ){v
ar c=a[b];switch(c[0]){case "_setAccount":e._cz_account="[object Strin
g]"==={}.toString.call(c[1])?c[1]:String(c[1]);.break;case "_setAutoPa
geview":"boolean"===typeof c[1]&&(e._cz_autoPageview=c[1])}}}catch(d){
g(d,"cS failed")}},pa:function(){try{if("undefined"===typeof e._cz_acc
ount||e._cz_account===this.c){e._cz_account=this.c;if("[object Arr<<< skipped >>>

GET /4399swf/upload_swf/ftp7/hanbao/20120107/6/FuYun.swf HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.swf/[[DYNAMIC]]/4

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: s8.4399.com

Connection: Keep-Alive

Cookie: _4399stats_vid=14418462431248952


HTTP/1.1 200 OK

Date: Tue, 08 Sep 2015 07:53:40 GMT

Server: 4399SERVER

Last-Modified: Wed, 30 Oct 2013 08:20:49 GMT

Accept-Ranges: bytes

Content-Length: 161867

Cache-Control: max-age=31536000

Expires: Wed, 07 Sep 2016 07:53:40 GMT

Content-Type: application/x-shockwave-flash

Age: 147431

Via: http/1.1 4399SERVER (CDN CACHE V1.0), http/1.1 4399SERVER (CDN CACHE V1.0)

Connection: keep-alive
CWS..Q..x...ep....;bfffff&..bf..-ff..Y..".,ffff....k..........."...*3.
.{[email protected]..~gSs^.qI.Ov...........#/...............
...3 .  .P.................f.&.V..V.......;...PQ.m..._F...m..45a2.5.3.
wuabad..25.5wp.3r.4rt..21.m..................%?......Z......:...K..}"f
'.......D~...{....3.~k3.8.19:;.....d.4.G.?U~.pt3..r.4s.t...w...#....2&
.fF.......~....[..Y..J|......5.....2..2p3p....#.L....\..G.7O......A.AI
DUUSQE.0.....h...`..1...w.X0..$...q...T.../n..a.V.M... ......@[email protected]
........Cp..K.XDq..-...E...p3(....D....mt....R(........J(.!....J...hM.
.....~.....`.G.I>m.k|..Y7.7.$b.D..........xt..F.?|.c.clB.....3zIG..
.(?d-"c`....e..GD.g.Y|.hj...5N....Z.`[email protected]@@p....y{....S5.
.gzsg..x4..M^..ag.....1>...vt...mcq....?..........d.Z}.|tt......#..
..j.....9jIS........1.3.W../b..."e..NQ\\...B.Pk.%..y/......|.-d}}}....
 ??......yW...6.O..kwn...B...&......r........H...n.G}....$.f...k....KN
.d...'....U-uu..nCI....t|..Y.ff2::.Y..*.r...>d.......aI.........*..
.... nm...z..~.8:*..%'.q0..$k(..jw2_...l../L`...Mu...p7R\RRVB"d:Q..t.d
.T1...........Z~...D!.xum. P."...........h.b.k....a .`%D.2v[.....fs.p.
..q...dkgg.r.F.[f..C,.v.)..V........ ...^#.......E...'.../*.J~k...l?..
......v7?... ..'...V$.m.....O.~*..|[&.[.%..W..4K......4KKK.iW..s...,Bd
..&.`..O7.#K.....\,,.....Cy..;.7au..e>s:d...x.R.JR%..u.n..J'.x.?..G
..x.<.:l.........WA9gooo..Z.ZL...k.f..L.5..<..rPG._QmB.......Y}.
=^1Ex...`.....j...b...(l..D......*.omm].z.3..>@....r*.hw;.. ......H
88C.n....P..0...![[[.^^...^^.q..@G/s.k.g.l4...[....... =2......pjn<<< skipped >>>

GET /upload_pic/2012/tjyx/tjrm_img011.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: imga4.5054399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 11 Jun 2015 06:29:54 GMT

Cache-Control: max-age=31536000

Content-Length: 2384

Content-Type: image/jpeg

Last-Modified: Wed, 07 Mar 2012 08:20:21 GMT

Accept-Ranges: bytes

ETag: "801028233bfccc1:396"

Server: Microsoft-IIS/6.0

Age: 1

X-Via: 1.1 fuzhou188:8108 (Cdn Cache Server V2.0), 1.1 kf50:8 (Cdn Cache Server V2.0)

Connection: keep-alive
......JFIF.....H.H.....C..............................................
.........""""""""""...C................             !      !!!   !!!!!
!!!"""""""""""""""......*.D..........................................6
.........................!..."1AQB..2a..#$3q..5Rr.....................
.............6........................!1..AQa."2q.....#b..3BRr........
........?......K.KH=....p..AV..<.......y.XHFa...`.hU...5..7.v<..
.Tr!=..#].x 4.o.....F...:..KD.......K.7..A.v.....X('.....\.....)^.F[..
<c.^.....|W.I.x.I..V........6....S.7;QPy.....om.E(k3.........}2.^VV
@..O9........:..J..5.(...C...;.V5...s.|*.N..].tu......J.m.]*..F.ED..VB
Q%.K.^.O>...~..t$U......3.......TU4..ER.....7..?.h.ZF..C.K#d.!6....
-b..{.q...|.m....q.T8.2..)..&.I...}....:.T^..9N.h:_2..uU..............
....Th.UT....3..K.qq${.p.6....L(0VP..Qt.D..r.~....TV.#y...m...:...y..8
_N>t.....Q5....W|... ...-..>...R.:..E....s..v.=.......c.... .n..
7..$J:....i..'...b....=.;8_......:**.5.9....)./....q..........{U.E.p..
3C/.nLqSN..8.g.......a...f...S...-........$..d.nJ!n....j./..$5.%....1'
[qJv..........$.Ff..N'o.{'.....%[email protected]..*.
....l|.Y.%A..-...g7..Aobx.h.w..~....z"~)WtR.Q..).......D.%x...r.?.....
x.&.....u[...o.....B..(!..b.PUGb.....eX.........,........Q.[k..6.[<
..ox..{uu....V.....a..e'rM&p.P.FTcZ.....U...i....&u%..m}.2Alj....).=..
.r.:;nee..Ge.......C:BuMVJ..R.kn.ISi.U..\.;@...w**.]....#.....3._.-d..
.1...(.K..........M........\.<s..B.Q ...].n..n.f.;..ku .....::.[..m
$...h...O..{?_..M.@"[email protected].;..r.S.;...UW..jd..%.....M..Q.}ydM...o<<< skipped >>>

GET /it/u=590893569,3884611603&fm=76 HTTP/1.1

Accept: */*

Referer: hXXp://pos.baidu.com/acom?adn=0&at=128&aurl=&cad=1&ccd=32&cec=gb2312&cfv=11&ch=0&col=en-us&conOP=0&cpa=1&cpro_lu=1,#dfe4f9,#000000,å®‹ä½“&dai=1&dis=0&layout_filter=rank<r=<u=http://VVV.4399.com/flash/78072.htm&lunum=6&n=80054191_cpr&pcs=951x668&pis=10000x10000&ps=784x-2&psr=1276x846&pss=990x880&qn=1a28bcd7a302e760&rad=&rsi0=980&rsi1=90&rsi5=4&rss0=&rss1=&rss2=&rss3=&rss4=&rss5=&rss6=&rss7=&scale=&skin=tabcloud_skin_5&stid=5&td_id=2279006&tn=baiduCustSTagLinkUnit&tpr=1441846229578&ts=1&version=2.0&xuanting=0&dtm=BAIDU_DUP2_SETJSONADSLOT&dc=2&di=u2279006&ti=é€ æ¢¦è¥¿æ¸¸3,é€ æ¢¦è¥¿æ¸¸å¤§é—¹å¤©åºç¯‡,4399é€ æ¢¦è¥¿æ¸¸3å°æ¸¸æˆ&tt=1441846229312.266.2281.2281

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: t10.baidu.com

Connection: Keep-Alive

Cookie: BAIDUID=D45D8B1F3270A1D6B48F0CD090CCD5AA:FG=1


HTTP/1.1 200 OK

Access-Control-Allow-Origin: *

Content-Type: image/jpeg

Expires: Sat, 10 Oct 2015 10:50:29 GMT

Cache-Control: max-age=2628000

Last-Modified: Thu, 01 Jan 1970 00:00:00 GMT

ETag: 399152db2830c4260d460e0c3c49a1d7

Content-Length: 54743

Date: Thu, 10 Sep 2015 00:50:29 GMT

Server: lighttpd
......JFIF.............C..............................................
......................C...............................................
............................."........................................
...C............................!.."1..A..#2Q.$3BRaq....%'CS..8Fbr....
.................................H.........................!.1..AQ."a.
2q...#....$BR.Sb..3Ccr.....&Dd................?..dX.n..*....j.i..U...@
..q[.q......R..L.%...O.Hs......WXT...:....A...2...9q9.\..:..........Mc
..S............Fvm.b..7....8..]s.Sb...........D.[..........Y}..=b...Ir
:...}W.......S..]..~x1'5............ex...d560..w.m e..R..>.zsV...-.
.t.E..u...jm.I-t1.p....h...H..g......!....8.4......mSI.16.*UZI.~.2rA$`
..2....2:hY%N..2.l..........b.".}]G6.5..I..j.-..............J.O.)..|ur
3..h....%@.w.X..%Z]....j.5..... .g..|....r.?....>..&!E...B.u>...
.....L.....W..y..\r.b.w2ku.Qq7..4.g...[.#.]Uk..N.z.q.R...{.w.,(......c
....t.d.;6O.a.Q...?....Q..6.p.OV.x.aE!n..X .f....m.'4...'8..8.......h.
..*[email protected];KJK./.....Se.X....u..k(..N>=..Yr#.......
<...x."=.....&K._#..&.......i......6.j'....r..]..E#.j$*.6Y.....I.8.
j.d...0.1.........-Gm.......'..U.QP..u."<U..}.~.....:[.....xj. i...
..a$3.,h........8...9....h*.i*a....Ia.._....v..!.VV.0..u.....[hS...UGP
...h.....|.....#....._>..U.dq4..F..;i...9. ...."y..<1E....sm.EqQ
I.%^DH;.(D......y..x.W....2........8...K@.(.. ..v.l....i.'..o....p.q I
..r.L{.....>..."...8&7..dV?  TD0I.NH. s.zM.V6..0..B].......a..&N..[
Qb....G.~k..q..`..'..'.C..~.e.E.L..uE....>.%..@N.'........ 8.. <<< skipped >>>

GET /media/v1/0f000DEUfr4hniEsJj_ROs.swf HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://ubmcmm.baidustatic.com/media/v1/0f000DlV0rvHMAROYHhQOs.swf?url_type=1&id_283672787=media/v1/0f000F_vSMdFWGLTLIlBvs.jpg&id_1821494

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ubmcmm.baidustatic.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 10 Sep 2015 00:50:41 GMT

Content-Type: application/x-shockwave-flash

Content-Length: 5499

Connection: close

Last-Modified: Sat, 25 Apr 2009 07:04:00 GMT

Expires: Tue, 23 Aug 2016 05:50:24 GMT

Age: 1450817

Cache-Control: max-age=31536000

media: media

Ohc-Content-Crc: 4102855565

Server: hkg01-sys-jorcol07.hkg01.baidu.com
CWS.....x..8{\SW........$H.PHL.k@.._..&....A...Gn....R.`.v.&1.iu..8.v.
...M...Q.R..G.lgw.ZmQ...Z.b........'....v....}.s......................
..d....:.-.kjjU.v.....*.8..S^R.y......;:7..[.dI.......A.umq3.....;.j.@
......aZ;..T..vt3.s.|M.n......5I.n q....7.U2.x."d...tt..L....Zmt.\....
.a..f..Q.........S8.N..ttV..v.G....o.R..n......!.w.)...q9...V{w...]..m
 V.o.b.*-.N.LA......jr........isT.1./3E%o.......vo..79.........vM...GU
.v.."mYQ.V5oQ......S.R.......=..U.Fr...#v...f.G.....V/..G.q........)]9
[email protected].:..[:.....P...U.2|.{...5.z.o...b../.>.....U...*.Zx
...-z.l....]...T^.F....^n...!.G'.....Ya..~..;...Z....S..........`C.h!.
[..-....T.. .K..v.1...'..L..M......>..rt%.L}.k...A.6.....&...YnBG..
.j(.../...b....W..=........'y,p..%?.]....|.?..X<.......W.._....q.l3
Wfk.....l.:..`.....c0.........G......V..X./?^9.T...3..........BU.oA`..
q.A..o.e...3E../_......p...MJy...qp..........S.=...CG..W...OE.E.aY.7..
..y.u.M.k=......>....2..|1Z1M.n...g...J.|.6....r...L)4.. .&f....s..
zg..od..W.%....[.p .,.L...i....L......mra.l.../..b...^.]..NO~..3c.,JU.
 L'.8t....j..w%H6S!.H...)(..#.HG...5.....c....M/...Q.r....q,..f&4..J..
....3M..,....Y`4.x..r.0.t...\...6@".X.x..l..SG.<D'....U%g ...o.....
.....{.,.......Y#.n.W..p.b.>...#......Do.b....L. ...;>.(.d..O.C.
........1/.?..G.........<..y...........lE.o..<d......C.??.......
..........8.Wh..[D.........6..M../......7y....`O.pc..5."....x.|..)e...
...(5......J..3.>..D!..x.X`*w.....;~~..I.DKh....p&..y.gI...7..>.
..~.JQ486..#I.:|..N.{}..$.._....%.c.&.Eo...`g./2bj_.......^:.....?<<< skipped >>>

GET /flash_ctrl_version.xml?ran=57098.376750946045 HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://s8.4399.com/4399swf/upload_swf/ftp7/hanbao/20120107/6/xgjv183.swf

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: stat.api.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Server: nginx/1.4.1

Date: Thu, 10 Sep 2015 00:50:29 GMT

Content-Type: text/xml

Content-Length: 530

Last-Modified: Tue, 12 May 2015 06:16:51 GMT

Connection: close

ETag: "55519ad3-212"

Accept-Ranges: bytes
<?xml version="1.0" encoding="utf-8"?>.<resInfos>..<inf
o resName="zwsf">hXXp://cdn.comment.4399pk.com/control/zwsf2-3.gif?
20120719</info>..<info resName="ctrl">hXXp://cdn.comment.4
399pk.com/control/ctrl_mo_v4.swf?20140327</info>..<info resNa
me="ads">hXXp://cdn.comment.4399pk.com/control/A4399dv_base.swf?201
50512</info>..<info resName="ctrl_v5">hXXp://cdn.comment.4
399pk.com/control/ctrl_mo_v5.swf?20150416</info>..<info resNa
me="tools_as3">hXXp://cdn.comment.4399pk.com/control/open4399tools_
AS3.swf?20130617</info>.</resInfos>...

GET /jss/jquery-1.2.1.pack.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Wed, 09 Dec 2015 00:50:18 GMT

Date: Thu, 10 Sep 2015 00:50:18 GMT

Server: nginx

Content-Type: application/x-javascript

Last-Modified: Sun, 10 Nov 2013 09:24:37 GMT

Transfer-Encoding: chunked

Cache-Control: max-age=7776000

Content-Encoding: gzip

X-Via: 1.1 hzsx166:8107 (Cdn Cache Server V2.0), 1.1 kf49:6 (Cdn Cache Server V2.0)

Connection: keep-alive
39f2..............y_.J......h.$R,.......B....d;@..E6f..m..b^...U.@..{.
.9cI.^..k.j....JOJ'....g)..(....gW....Y.m.Gk......R......A.xZ.;A)Y\\*.
...K...._.O....3:.T..e..t6.d.I.-]....4=.J[..%......k..................
o/g.L...?^..Y. ._l...RRiV..b.4.X]\,.{...D.^va..........f.R.U.y.....3.w
9.L.......Nx.f.8.....Np3......y.Z}.......$..N..B ....w..?[..Jmuo:...Qo
<:.y....u3.SN.A..MG.._........=~.....V'...-..}..\...h8?.....G..A.(.
u.r....... Q...h....W......oW:i|.r.3...."...b..|..k..>......l..... 
.. .#..[.....n.~|^Z.K..^.^.J.V.Kki...........F.^Z.,.....{ j.<....u.
...W.. 4....L...|{z....G...$(?...=;z.G.............t-.<Ooj..o.N..nX
.<..z....oy..z.<...=....?z.....v..d&z.:tU}......V....~.*{T...e;.
.Q...V..d.(..n........J=z.. ...m.....r.(....)[email protected].^..4.#
uLOQ....b...x....T.....8...=...O..b...n(..=Z..c:.s..mX.4=c~/\...l..w..
..b......R M?.Z.z.....n.d.^.-.b...._.:..o....R._\._.,Q...._.2..P.TP.Z.
^/ . ...w>..............n...........X..=..g..|ai...>..Y.dy... Q.
[email protected].........{[email protected]....
]... ..g.xm.=z...AW.B5...1...Z..LS......]..(...rb.`...K..i9u.1.....f..
A.....iz.....a...k.'$D.. ._j..a.z.b...z.W..> v..R]..uk....[V....7..
.....k...b...[..}E.qX......n.3I.EL,...O....]-.o.`...........D3....-...
......Q..j'..jW........X,3..I..=..........E.G.._8.V~vT...(..0..Q...(..
g.1.V..J5...K.6..i......K. .K."6.Q....a.K.....{O. .n..nY..........u.~.
[email protected].%;^."vh9v.......$.{~.`... [email protected]}.F..i.
...:...o.....,J[..O.uAM$`...p..][email protected][s..V....:<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/logo.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:33 GMT

Date: Wed, 09 Sep 2015 21:34:33 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 2503

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx166:8080 (Cdn Cache Server V2.0), 1.1 kf50:9 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89az....................,...M.............Y......R..2..:..I........
.R.....f......wC..Z...R ............................r(.....<..0..2.
...c.z........=...n%Z..A....n.O...|.......R...k..Mv...s2.`..q=..j....i
"n...u'........5^.......b...........D.c,........M........d............
.l;.f#..3..B........c^.......w.......~-..W....K...b.z-....uC..K..D.K..
....]....m'.....].......e6.|;......y.....e...w*.....C.e1.E..^......k..
..z0.....z..{..\.[.....E..j$.e&....o.....M...5..9.v....n....1..6._..Y.
<...K.,....s.J.6.....$..0..8..(..4..&..2..:..*.........M.b.....g...
.h.......P....t.....j..b..>...........F..v..I..w.....6...x...q._-.G
..\..B..N..[..p?.p,.t)k....~.h:...L..P............o"..a..ia...k,.{H.f9
..e..f.I..e(.C......N........r.g...p.}*..V.}S..D.|*.},.x .............
yH....p..l...t......!.......,....z..............8..}P......#J.H1b.*...
..q.G......1cG.....F.[<M0c..I....5.. qR...'M...S.O.........'..]....
..'6i... ..E.rE.E,W....4. .Q.p.....`......A(..*..,B./Z..=..Y|......iY\
...[=...6.2.v7.5....i-.......P..p.....l......../..... .A.D.. .Wd^"..P.
 p....r.o....?C.........C..4.'.....\e..*#/....... k^...K}..a.-u.......
....c.......^ A..&T.!......X1!..'....&!.......P..A.V8.....y..?.xR..B..
K.H"Id....d.Vx.GA.x".O.....&..%...(.?Jx.C-h.)@Fu...I..........L.t.._~.
...E.J..... n...I.H#. .8...cT:.l&...  ."M...1RAb.c.!..A..~..MAv..H....
J....A.AP.c.....DFa.qH...S ..x.....QP#.......Z.]v..CA ... ......x..)..
.......%$.[o...4....a/.3.<..#.Z.=...hA8 .W..........3.-0.(....(..3.
(..d.(....(.4.@#..\W....A..$...'..H$..(PA.<...G....xH\..H#...-.<<< skipped >>>

GET /imageyx/seer2012/hottop.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 22:50:50 GMT

Date: Wed, 09 Sep 2015 22:50:50 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 857

Last-Modified: Sat, 20 Apr 2013 02:58:00 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx165:8107 (Cdn Cache Server V2.0), 1.1 kf49:3 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
......................................................................
...........!.......,..........6....H.........p.......H..... ^,.......j
.).c.....T......;....

GET /flashzt/img/zmxy3_20120913/sc.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:34 GMT

Date: Wed, 09 Sep 2015 21:34:34 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 2967

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 shjcl69:8080 (Cdn Cache Server V2.0), 1.1 kf50:1 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89aw............P...f..[..q-..y............... v....,[..c."m......2
....x....aq...xZ'.3.....o5...4..t..R....{m.Hu2Gb*!.OLH......hR2.X..d..
...{h..#.9v.....{WR^....B.>HT...^..Fx.xM.............~pj..Y....:.c.
.5p..4l...........,..L...K..'h...:....G.........[. W...........4..V=Sd
......Q...c.......S*F..=G...<g...)d.e.1......E:0..7...........t.$J.
}%..Y........YT.............-.I...........dQ.Q.Ujc....B.rhd......"R..N
...C.P1.\C........3..C:'Bs[H...K.......$...:>[email protected]._..O1Qs..."Mz
....'1 `.=}..7b.2^........2........5.........5n../`..........*I[....."
8TX..D..6..;..?..2~.H..L..q........QczS............. ...v..~ -!..!..?.
....v..<...M..U.u.....T...}........./........Y.>~Ibj....."..P..,
..v..w....% ......... q.L..0H]/Rc..R..U.k...........N.......AUnf...P.d
...R.a...V.........=..=...!.......,....w.........................H..H.
....3j...cGW<d..PH.....&I.!....c..I.&...~.L....._..X.2C.S..*].....P
.J....=..,bq..a..=....AB...........p...K....x...........H..C....X;bH..
8.!g.....K..i.......C..M...(..,H.....7$.b.&E..7643.yD.o~...N...... _.&
lt;..F.....'...o...#.]...:...S...NW...S.....B...*.(.....O.......^,`..E
.[ha........F.F,.6........rt .;G....P`b..f.....l.....(....c..6:0......
[email protected].[.8.%[l.@}F...'3V9#.W,...>.`....b....Y&.lx....PP@z.."...
0..?....?....|>.......K.6...,.X../6n.L.?.B....c.'tv:.4.5.A.L.I..t..
. ..2.)......v...zF...4..j......?.D..?.&.......>.$..?.L......K .h.K
.."..?..j....... `..0....#.p..;.....O$.E.&.....^!...;.O ..{i...2...T.q
... ...N.l..P.K....O.....>....>.....4..../`PD.k..M1....(....<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/game_bg.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:36 GMT

Date: Wed, 09 Sep 2015 21:34:36 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 17568

Last-Modified: Fri, 21 Sep 2012 09:31:28 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx166:8080 (Cdn Cache Server V2.0), 1.1 kf49:8 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a..........z...........utu....................................g..
........................u..w..DEE.....................................
............................................u.........................
.......Y...vz.............................................o...........
....................................[~.{..............................
...z..............................{...................................
....n.....................................................b...........
............j.....|..............^........~...........................
......................................................................
......................................................................
.............................................aaa......................
...........!.......,.............8.ac ....*$x.....#Jt..`......x..F..1V
...$H.%.nTy..J..?..ic#..7q...o..r.r......a...M..fR...]...*....M.$.A..`
.....,..h..e.d...I.6..`K..w.........}`.A..a....m0...$H.C.L.N.$.3O.l...
.3.....4..p..^.....s... .....o......$....p...*.$T."......K.N}z....k...
.w.H.S....2d...._.........O..}..X..?......8....h...2....2...I@.`... ..
.e.a.>.F....v....6.-%....o........*..hc.5..#*...J @..K ...I<.$..
.G..d<P:[email protected]%..i..A..)...Md.D.Q...l....?...*..b'.v..'.w..g..
[email protected]........*(......p.B(.qZJ.....'...Zh..n.)..b:*..F.j$.....'.....
.........!......D..!...k...Z........V....FR.1.$......ZX.}..ma........n
......]....A..x..w..F.`.....Y....D.`U8..B\(..28.`..~ ..#...W.R,q.....e
.0...,.Q..0...r4..\.8....<[email protected]...@^ .B...L7.4}[email protected]..#..

<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/lb_ico_v1.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:37 GMT

Date: Wed, 09 Sep 2015 21:34:37 GMT

Server: nginx

Content-Type: image/png

Content-Length: 652

Last-Modified: Fri, 01 Aug 2014 07:21:22 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx165:88 (Cdn Cache Server V2.0), 1.1 kf48:8 (Cdn Cache Server V2.0)

Connection: keep-alive

.PNG........IHDR..............Fg.....tEXtSoftware.Adobe ImageReadyq.e&
lt;....PLTE......................................7........G.....=..V..
...1..=.....b..c..L..E.....^../..l.....n...!%...-..4..K.....]..>..w
.....*..f.................2../..M..D..\..J.....W.....0.....j..c.....,.
....Y.................J..6...../..a..X..Y..R..f........s..6..k........
k..........ZtRNS......................................................
.......................................o....IDATx.b....0..S....L.!..".
.@4;B..../7L."f.`....d.C..8.CM...."..v...I. ...Fr2..\5Uy..=.X#m.#.t.@b
^...!.*.L...0uZ,.>.<"f...p..6.....p..#H.\..f.F.....B..vdD...0\..
PB..Hy.pA......BZdJ.......IEND.B`.....

GET /flashzt/img/zmxy3/zm_add.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:38 GMT

Date: Wed, 09 Sep 2015 21:34:38 GMT

Server: nginx

Content-Type: image/png

Content-Length: 6369

Last-Modified: Tue, 13 Jan 2015 07:48:19 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx165:88 (Cdn Cache Server V2.0), 1.1 kf48:2 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR.......G.............tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:70D8E8579AF711E49A46A9E9
9F340B05" xmpMM:DocumentID="xmp.did:70D8E8589AF711E49A46A9E99F340B05"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:70D8E8559AF711E49A
46A9E99F340B05" stRef:documentID="xmp.did:70D8E8569AF711E49A46A9E99F34
0B05"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>H.......PLTEW.K..................R......"..
.......-..j.......k...WV]e....w..e.W..m.........V.....-......z.#.....X
P....e. .......n3.....X.....................z.......\..............k..
y,C..t4RdF}.......w..h....\y. e4.........i.R.7...v...g...d..A..S......
....v.............R.x.....0t.............2s..........=...8zOe..1......
.....p.....m..)..............g.Y...?..Y.....$..a.X\...S...O..jM...P...
jh.....i.....Wn.......a...^.,-.E....x......T.ey..............(O..~....
..?.....v..NN...Q.............1n..&......S......].......=|.......?....
.......^..%R......l...{..%`..(M.3|jwxu..i..#.....2..............C.<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/bg_1_20150824.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:39 GMT

Date: Wed, 09 Sep 2015 21:34:39 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 1005

Last-Modified: Mon, 24 Aug 2015 02:49:42 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 shjcl69:80 (Cdn Cache Server V2.0), 1.1 kf50:10 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89a..b.............................................................
......................................................................
.................................................................!....
...,[email protected]:...tJ.Z...v..z...xL.....z.n.....S.p...~...
......................................................................
............................F..................................H......
*.4p....#J.(.....3j...V.. C..I....&S.\...<..c..I..1.6s....g%..>.
..Jt'..H.*]..(..P.J..t...X.f......`mq.K....?-.]...[Dc...K.j..x...yw...
.S..L..a... ^.._...#KF.x.....U.....].?..MzT...S..tz.......M.....s...{.
...{..N.......=...s...K..5:....Z.........W.~......_........|/..}{.....
.?...z._.......&..Mj-.... ....."a..f.P..v..!>.~(...\H..(..b.,......
(".2..!.6..!.:.. .>.. .B.y..F&...J6y..NF...RVy..Vf...ZvY..^....b.Y.
.f....j.Y..n....r.y..v....z.y..~..........&*...6....FJ...V....fj...v..
..................:.........Z..............*,`[email protected]@... ...F....0..
..P....v..... ....k........i .......;HTTP/1.1 200 OK..Expires: Tue, 08
 Dec 2015 21:34:39 GMT..Date: Wed, 09 Sep 2015 21:34:39 GMT..Server: n
ginx..Content-Type: image/gif..Content-Length: 1005..Last-Modified: Mo
n, 24 Aug 2015 02:49:42 GMT..Cache-Control: max-age=7776000..Accept-Ra
nges: bytes..Age: 1..X-Via: 1.1 shjcl69:80 (Cdn Cache Server V2.0), 1.
1 kf50:10 (Cdn Cache Server V2.0)..Connection: keep-alive..GIF89a..b..
......................................................................
..................................................................<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/c_1.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:40 GMT

Date: Wed, 09 Sep 2015 21:34:40 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 160

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx166:8080 (Cdn Cache Server V2.0), 1.1 kf50:4 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a................s..............!.......,..........e......I..8...
.`(.di.h..l..p,.tm.x..............r.l:...tJ.Z.._p.h<...xL.....z.ng|
.-.......~.....np.r...;....

GET /flashzt/img/zmxy3_20120913/bg_6.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:45 GMT

Date: Wed, 09 Sep 2015 21:34:45 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 13918

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx166:8080 (Cdn Cache Server V2.0), 1.1 kf50:5 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89a.............%''................................................
..g..Veff..............I...............kmmbaJ.........TUU......u{{! .}
....z..gmrr.....f............y|}............333......X\\.........ejjBD
D...^cc........\...qo7JLLBB5VVV.....>.....................:==...NQQ
...VYY......EJJ..lpuu.........>@A..[.....O...WbZ79:B@#..M....005A9.
....V........WIMPQO$..............................21'......qqq........
..........;>M...........................a_-SWW.........!"".........
......agf.........sxxjoo.$.477...ISQ... --10.s..RQ>[__...DFG.......
......................................................................
....z..............D..........................fpl...qwv......ghi......
.............................................186...FHI', .............
..sts........i.........!.......,...............H......*\......#J.H....
.3j...... C..I....(S.\.....0c..I....8s........V..J....H.*].....P.J.J..
..X.j......`...K....h..] ...U....;Bn..x............L...... ^......#K.L
.....3k....g.w.........?.^......c..M.....s...zo..p...M...... _........
.m0x^...k..........g.}....E.X.........O...............(....h...&....6.
...F(....h.iveH.?.v... .(..$.h..(....,....0.(..4.h..8..J.<....@.)..
D.i....v.A.%y..PF)..TVi.......\v...`.)c...7..b....l..f.Z.)..t.i..d...@
..w....*.. .I...&.....)P.v-*...V..%[email protected]..........).tE...
...*f......P...|.. ..8.J...&k.|.6....F.!8.Vk..J.*...v.*... ....)......
....n..Vw.....&........7....<%...l0.e.{n.Z..J(Dx(.3.W.-.B6.p..Nl...
....D&..:..L..^|..:..,..S.i2.*..2.3....|..c..px................?..<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/nav_bg.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:55 GMT

Date: Wed, 09 Sep 2015 21:34:55 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 18944

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 shjcl69:8080 (Cdn Cache Server V2.0), 1.1 kf50:10 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89a..6.......7..`..\...........Y..J..Q..a..[........S..j..t........
y..`.....Iu.............\..h..m..t..q.....[..|..{.....e.....f.....C..d
..u.....~.....#.#j..d..x..............N......}${........u..U..q.......
.3..............n.....]..]..t..Z..b.....g..:...........V..:.......${..
}.....f..m.....h.. ..m..]..<...z%......C.....^.."...q ..3.l/f..R..}
.....P.....d..n..l..Q..h..R..e..p..i..t.....v.."}..u)............l..a.
.^..[.....Y...t&k..z../..,......y)D..y..j.....a..Z..I..s.....I.....K..
*.....q..h..n.....o.....?...z.W..j..=..Z.....&. .w#P.....m..H.........
..U..c..U...........R~.V........X........g..g..p..C........'..l..o..&.
.........#.."F.a...................u<...&.Hg.y.........6.T......W.m
......h..\........f..c.....M........o..k....._....................e...
.....i..w...k0...!.......,......6........B......*\......#J.H.....3j...
... C..I....(S.\..%.5.j.p.AC..7m....g..<...Jt.Q.H.&=..)..K.:..u...X
.j..5 ..^.v......h..5.6m..n......\.t.....l..Ah.....5...'F..1...#;..y..
..)k..93...Cw.......O.6.:u...c.....l..o........{....x.....O.|.s..c.j..
..z..M..];....w..........7.>}.........|....................."h`....
...6....VH...fh...n.a. B....YW.4...".*.... ....0.hc.8....;....>....
@.)d.H....L&...NF...OV)..T^.e.\b..._v...b....d.if.l....jz...|.2.5.XcM6
.H......g....g6..I(...*(....'...*.....i..*....BZ(..~.i....i....(..^...
..vJ....*....:k...j)........J,....l.......&.....k....[.....,..N.m..R{-
..r.m...k....................n...[n....o... ....Kp..4....0.B5.l.1.....
...,..$..r.,..../....2....4.ls.<[email protected]'m..H/.t.P3-..SG<<< skipped >>>

GET /flashzt/img/zmxy3/bg_7.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:56 GMT

Date: Wed, 09 Sep 2015 21:34:56 GMT

Server: nginx

Content-Type: image/png

Content-Length: 6652

Last-Modified: Fri, 14 Jun 2013 09:48:10 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 shjc71:80 (Cdn Cache Server V2.0), 1.1 kf50:10 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR.......I.....g.......tEXtSoftware.Adobe ImageReadyq.e&
lt;... iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS5 Windows" xmpMM:InstanceID="xmp.iid:5A051F80D4D211E29B0DCD53E3
B7DEE5" xmpMM:DocumentID="xmp.did:5A051F81D4D211E29B0DCD53E3B7DEE5">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:5A051F7ED4D211E29B0D
CD53E3B7DEE5" stRef:documentID="xmp.did:5A051F7FD4D211E29B0DCD53E3B7DE
E5"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>.^q....;PLTE............j...N..$#.Z..a4V.....
.........d'.:y........b/.D?...........pZ....{.z1...........T..l.cS...l
.S...........KZ.....1...f...s..,...Q.......n..5yE.......6.<u..L.G..
.{.cg...K.Y.H.......qV..l.....R.....Ro...................n............
...........P..3.....,..C.........x.................o.....@...~s.......
......[.....itRNS.....................................................
.....................................................7f.....IDATx....[
.F..%.m'....o..`cl.}ih......6I&.........;...`..;3....y..\....WI..?Q.K.
.^..^..^..^..^..^..^..^..^..^..^..^..^..^..^..^..^..^..^..^..^..^.<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/c_2.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:57 GMT

Date: Wed, 09 Sep 2015 21:34:57 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 70

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx166:8080 (Cdn Cache Server V2.0), 1.1 kf49:0 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89am......j.....!.......,....m......D.................H........P..;
....

GET /flashzt/img/zmxy3_20120913/c_3.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:57 GMT

Date: Wed, 09 Sep 2015 21:34:57 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 84

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 shjcl69:8080 (Cdn Cache Server V2.0), 1.1 kf50:3 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a\......j.....!.......,....\..... D.............{...H......&a...L
.............;....

GET /flashzt/img/zmxy3_20120913/bg_8.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:58 GMT

Date: Wed, 09 Sep 2015 21:34:58 GMT

Server: nginx

Content-Type: image/png

Content-Length: 9570

Last-Modified: Fri, 27 Sep 2013 02:27:37 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 shjc71:88 (Cdn Cache Server V2.0), 1.1 kf48:3 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR..............P......tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:61621FFF271B11E3B6A0AAB9
5D0E2A6B" xmpMM:DocumentID="xmp.did:61622000271B11E3B6A0AAB95D0E2A6B"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:61621FFD271B11E3B6
A0AAB95D0E2A6B" stRef:documentID="xmp.did:61621FFE271B11E3B6A0AAB95D0E
2A6B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>.l......PLTE.b..................oq G.......
.V......l.6......445..........sr....FG......uvw..HCEF........."##Z./..
.........i.....R.......`..4,Q)<.wvf..\aaqKI.Y..n-cee...Q?1......x68
...............UWW.1ondX.............:@.,{..o....RM.......O&....F$..*.
4..Nh.....2|...Ta........O...nrr.!...l.....Q.......W..12tzz.[8...{}~P.
....knn........{.EbNRR...........]....|............Reij.$#.......P...b
..n....-^...._fyoc...D.*...q!#.......f9...d_T5...Cx:OF",1JLL...YUM....
.....> '....... %..z...~....F...............<>=............82
 .............kwL_\...............;'2..........l....Zkg..B.E3.....<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/ftbtn.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:49 GMT

Date: Wed, 09 Sep 2015 21:34:49 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 477

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx166:8080 (Cdn Cache Server V2.0), 1.1 kf50:6 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89a@.....................,.*...G.F$.*(. #.'......%.(...............
.......................................!.......,[email protected]
..%.tm.x.......pH,....r.l:..([email protected].`..k.....z...;ov....#.|\.w...
~....a`..............a........_................................^......
....`......._....^...............^[email protected]
x..C.."J...K...(b.B1....=f..1"..(SZ~I..KK0(].|[email protected](..H
.*].....N3H.J....X.j......`...K......4......p...K....!..;....


GET /flashzt/img/zmxy3_20120913/more_boss.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:51 GMT

Date: Wed, 09 Sep 2015 21:34:51 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 3077

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx165:88 (Cdn Cache Server V2.0), 1.1 kf48:10 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89a..*....^..D..D..B..J..Y..X..K..L..T..U..P..M..W..Q..O..U..N..M..
S..V..R...................................{....................}......
...........|..e....................Y..............~...........`..W....
..........V.....z..]..|..w.....a.....d..h..^.....k..g.....r........Y..
......u..Z..........................|..............m..b.....l........y
........o.....j........g...........l.....p..a.....s..q...........\..v.
....T........c....._........|..w...........z...........f........^..d..
r........o..X...........`........q.....f.....u..M..x........p..O......
..i.....t..G..[..]..F..\..I..F..\..^..E..`..C.._..Z..H................
......................................................................
......................................................................
...........!.......,......*......%.4H.....*\......#J.H........$0... C.
.I..I;.J.1.....0c..I....8s...s..L.z..J....HY.......P.J.J....X.j....U&l
t;....K....h..].....p...E....x............L...... ^......#K.L......i..
.....C..M.....S........c..M.....s....7.c....N...... _.......K.N.......
......h....N~..Jb.._.......[....-4..{.T).w...(...Z......E2.$h...E(a2&8
. #.f.........\........8.h..,..C2..."..4`..8....a....'...... .. $s..L6
.$.E.........T..d.a.(..f.xB...`..c.y&...iF2.4`../....x.)$.|....~.8..-t
....$s(....D2...g.'....8.....&*.....'.xR.'..J.i..FX)..v..*...A...P`...
l...-....2.!l.P2!...4....>k`..R...J8i...:....:....B`[email protected]...?4.
.@[email protected].. P.Tl...#@........T8...J<.p..F... .,r.P.l2.
.$.... ...Pn.../.a.......!..n.#...... 2..( [email protected]<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/more_boss_s.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:51 GMT

Date: Wed, 09 Sep 2015 21:34:51 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 3201

Last-Modified: Tue, 18 Sep 2012 02:20:38 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx165:88 (Cdn Cache Server V2.0), 1.1 kf48:6 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89a..*....D..^..D..B..J..Y..X..K..L..W..P..M..U..T..Q..M..O..N..U..
V..R..S......................................{..............}..|......
..............e.....~..........................|..`........Y..........
.k...........].....m..b........z.....|........a.....^.....V..w.....Z..
W........\..n...........h...........r..l........o..g..d.....z..u......
.....y.......................u..w........_.....v..x..D.....o..X..l....
....o.....d..b...........j....._..s..T..f.......................^..f..
..................t..[.................h........`..i..y.....c........q
.....p.....N..i.....b..O..G..[..]..F..\..I..F..\..^..E..`..C.._..Z..H.
......................................................................
......................................................................
...........!.......,......*......9...Q....*\......#J.H......%.$..!. C.
.I...C.n-[.....0c..I....8s..I.. [email protected].....$.X.....P.J.J....X.j.JU...`
...K....h..].....j...K....x............;...... ^......#K.L.2dc.3k.....
..C..M.....G.[......c..M.....s..m........N...... _.......K.N......k..}
;.8.....>........_..".m.o..........C.;/8....&..7...&....Z....&..3.D
.... ....Z.....`..$.hb.%8....X..........P..8...(8.x....)..D....5$Y..E.
..354.@/H..d..8...H8#F..X ...8....$.eG...$.^.(.._.........w..g.58....|
...A.X'..6*e..D*...N.`.......l...e.$..^L.d..tIC....A.Hh..(...*...Fq)..
X: ....&..jZj..N....n ..)D...4.!m.eF.*..t....~.`......V.I...z..3.H.n.C
8....h ......3W8..... .3..!......... .... .34t[...Z....l.....|...jP...
..q..\.m..X...6..3.<....>....=g./..2... 4.i..(... l...?.I...<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/bg_9.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:59 GMT

Date: Wed, 09 Sep 2015 21:34:59 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 9202

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 shjcl69:8080 (Cdn Cache Server V2.0), 1.1 kf49:2 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89a.......022/Q\..J..c......uxx.......T!...j._...egh......u......e.
UXX....A#.....b.............y]......]aaLuz..........,..4..............
.....G.|oO)...K......w..........c../[email protected].........
...........L"c.......q.....8..........g...-.Y............)............
..K............z~.........%.I"....d>..\........z...i...Z.....X2...2
......S3.....6.....z..9.gN.....{'...Y...........<$.....|......>x
.lpp.E0......PTT...........f#...mN.Y"....n?...-d....,/..`........E"...
.^.......^......O3.r..sN.......C ........'9L.......m[@...s...f(..S....
.........\@.f..#.....`...3.J/xsB:......wM....g.,G..D(..-.......s_QVH..
.....y..........s..$%%.......P"................V!.....................
........F......................J0HKKTJ:3b...o.x..........[....._y^\.}.
n..t..Vu.j?.........!.......,[email protected]......*\......#J.H.....3j
...... C..I....(S.\[email protected][email protected].*].....P.J.J....X
.j....O........X.h..].....p...K....xo..I6.......L...... ^l./..8.3.L...
..3k....d.....M.....S.^......c..M.....s...........N...... _.\7hh2...G.
.....k...........O......._.........O..y?..........=.]M5.g...&....6....
F..~.Vh...v.`L.I... .(..$.h.......,..!L.....4.h..8.._.:..#..uX..D.i..H
&._0J6.d{..9..TVi..X..d.\r.%t.N...d.i...m...?~...p.)..H.I..'..!.|.....
.i.:.(.D..(.. .6..X{:*...V........;.".....D .Zj.w..).....*.....C.;|*..
..*..............kl........z...F...O.z....y...v{c.......2`...nrL.}\s.1
..0.............. ^ ...@#.*.........l....?..1...]..g....S... .,2.}Tw.6
..l.1(kc1....V...2..0..3...w...B.....p.......h .....,5..\.2u'...uu<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/c_4.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:35:01 GMT

Date: Wed, 09 Sep 2015 21:35:01 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 81

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx166:8080 (Cdn Cache Server V2.0), 1.1 kf49:1 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89aB......j.....!.......,....B.....(D.............g`x.H....j......L
Gm.....@..;....

GET /flashzt/img/zmxy3_20120913/t_5.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:35:02 GMT

Date: Wed, 09 Sep 2015 21:35:02 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 5473

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx165:88 (Cdn Cache Server V2.0), 1.1 kf48:2 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89aB.6.....{.N...r...........................................y.....
j..........................\..........................................
........1.....T.....@...........|J:.........e.........................
.I...........................................................$p.......
......q..........................2y.................d/.[...........Y..
...................s.n...............k.....[.g...........}3.......}L..
............................................o\........................
.................#....................................................
....;.......u .YH....................%................................
...............z....Y.....x.........2................uJ...........&...
..........w.....9#...........................j........................
...........!.......,....B.6.....I....E.z..*\......#J.H.....3j....G.9^.
. p.. ...[[email protected]........`
..../HA$c..]...Z$....K....2........U...L...... ^..n...#K..x....yV...2.
.`[email protected]:. ..................N...... _..8....w.....y.x.k..
{.......O.....u.....'0.f....>p..V........=.H.~.qI*.&....6....F(...V
...#....3P`..c.(..!.P...T.".)...~*.rK&..Q.!.....<[email protected]
'$6..-..)../....Xf.....B.1~..J#~.B...l...l....p.)..t.i....c..|.!.{. ..
..Z...\$p....Y....BG"[email protected]...*..................".........@..
k.U........&.$BG6v.1..:... k.!...Vk...f....v.........,2......-{.P...(P
....k......<~d..([email protected],.....kl.,.L.3.....FR....!.$
`. ..,.Ze=0.,..0.bH"....!. .@=....!..cG.4'.t=.....J_`..P....1C.A..<<< skipped >>>

GET /flashzt/img/zmxy3/jcsp_1.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:35:03 GMT

Date: Wed, 09 Sep 2015 21:35:03 GMT

Server: nginx

Content-Type: image/jpeg

Content-Length: 20782

Last-Modified: Thu, 07 Nov 2013 07:12:52 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 shjcl69:8080 (Cdn Cache Server V2.0), 1.1 kf49:7 (Cdn Cache Server V2.0)

Connection: keep-alive
......Exif..II*.................Ducky.......d..... hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http:
//ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/s
Type/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmp
MM:InstanceID="xmp.iid:44F48F38475111E3BBCCCE2D9E5A3778" xmpMM:Documen
tID="xmp.did:44F48F39475111E3BBCCCE2D9E5A3778"> <xmpMM:DerivedFr
om stRef:instanceID="xmp.iid:44F48F36475111E3BBCCCE2D9E5A3778" stRef:d
ocumentID="xmp.did:44F48F37475111E3BBCCCE2D9E5A3778"/> </rdf:Des
cription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?
>....Adobe.d.......................................................
......................................................................
....................4.................................................
.................................................Q...$..&6....RC4_W.
!1A"..a#23d.E..q.bcD.V.Gw.........................#3.aC..4.U..!."B..1A
c.Qb$.q.2.....S.euE&..R...D6............?......2..trGz<..nn...i.3._
s;.......z...FVg.&.VFv&f.Q......8G..o{..Wy...J.Zj..<6..$.p.DT ...JR
.*Q.I3.6.0..&~M..~.z[...aN.T5..e......a.Z...b..D%%)I(.....E..........t
Ir.]s...w.. [email protected].*1..1..WD..<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/t_9.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:35:04 GMT

Date: Wed, 09 Sep 2015 21:35:04 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 5372

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 shjcl69:8080 (Cdn Cache Server V2.0), 1.1 kf50:7 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89a..4...............................k..$p........f.O..............
.......w....N..2y....................................................A
........]..................................................^......}L..
.......j...g......%.u ......x....................\.............s0.....
..z.......g...................z......y.......gN.......................
............................J............z.....x......z.........[.....
................I................[...........(........................
..;................j...*......l.................b......uJ.............
.....zzw.........................}3........v......4..............l..f.
.T.G..x....."............R........X...Y......(...et=...{..............
.d/.................................j.................................
...........!.......,......4......QrD...x..*\......#J.H.....3j...... C.
.I....(S.\.....0cf|e..#[email protected].*].....P.J.J....X.j......`
...K....h.........f..K....x............|uV#G...#......#K.L.......ct,..
..C..M.....S.....?..c..M.......k./.......N..c... _.......C.N..........
.........}......_o.<....../.=......?..\}..(....h...&....6....F(...V
h...f....v... .(..$.h..(J..{)....0.(..4.h..8....<.......`(G.Q...X..
.L6...PF)..TVi..Xf...\v...`.)..d.i.._....g....S....t.i..r.)[email protected]`F
.H.q..y..e..6....F*...Nj...f....v:i.Aa)........TPH$.......... ].!.....
..... ).. ....k...&....6....F ...Vk...f....v..... .......YHbI..t.....Z
J..........2......:.......8.......r...G,...Wl...g....w.1...tl/..#I....
....Q/...KL...\.%5|.....QC..(...5.].#.(./.L.p..P..E.5Dm..ACq..\w..<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/libg_3.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:35:04 GMT

Date: Wed, 09 Sep 2015 21:35:04 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 542

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx166:8080 (Cdn Cache Server V2.0), 1.1 kf50:7 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89af......U.].........!.......,....f............#...........H..)...
[email protected]........".8L.u..`..J......j...........0N..Zf.la.......s-5..
.....X.g.g.......6.W.YI.7Ia...h..Z%y.Z...dZ....:....*..Z..K.kI.[y....)
..k...lH..\....<..l.(.}.y.}...N.M.(.xN..>g.>V...^L....5....O.
..X...........l(..3..%R.S..E...7^a......GJ.yQ...&Ouly.^ ..^.......,[..
..bO.?...8tdQ.G!&...`..OC..9Ua..Waf=.UgW.2oF..t,..fI.U..*[.h....1.L...
 Y...`.....;#.b.N.;~.$.....S.LC2..(,s...3..!4.>.A4...W.n.z4...g..l.
....'....7....'.n\.....3g..yg..}S...:v......]9.......!......(..;>....

GET /flashzt/img/zmxy3_20120913/t_1.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:42 GMT

Date: Wed, 09 Sep 2015 21:34:42 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 599

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx166:8080 (Cdn Cache Server V2.0), 1.1 kf50:9 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a.......D..s....................!.......,...........H...0.I..8...
.`(.di.h..l..p,.tm.x..|....pH,....r.l:...tJ.Z...v..z.`. @.....z.n....|
N.....~...............................................................
......................................................................
...H...J...#&.....#J.H.....3j....... C..I....(S.\.....0c..I..M...a.i..
[email protected].*].....P.J.J....X.j......`...K....D..K.`.Z.p...K....x....
........)...... ^......#K..x0%...`.......C..M..d.....d.....c..M.6_}...
.i........N.0n..X._........>.......k....V...z.O.......EN,........w}
a.............c....h......B.&....F(.b.&..;....

GET /flashzt/img/zmxy3/bg_3.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:44 GMT

Date: Wed, 09 Sep 2015 21:34:44 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 19606

Last-Modified: Sat, 09 Mar 2013 01:57:08 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx166:8080 (Cdn Cache Server V2.0), 1.1 kf50:6 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89a1.......<..sN...csS...............t.&0M......y..4.........mY.
.....U..H.........Fh..."..&..9............P.......Z........un.)..*....
.).................Ua.........t"V.......X..A.........F.......e........
m..s.....*.I.z.i..3H^1.j.........C..q..............K.f................
......5d...-.....q[....p...m6....R%.............,..#)..x.K....jTx.....
..............)q.zh3H.......5..gs.............[hM0.....U........ayb...
;....P...M..<....."..M.G.........5..p..0......~.1..............H...
[email protected]; ........E..=.....x.........?I3.
.0.................?..R.................8.....`Y.....1:.........Y.....
*`....X.............................P..W............j. ..?.......=5...
.........>|[email protected].....![[email protected]....._..\....
.......O........B..?!..XMP DataXMP<?xpacket begin="..." id="W5M0MpC
ehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk
="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> 
<rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
; <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/
1.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:
//ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Phot
oshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:C049D57D87B311E2B164820
45EDE6CCD" xmpMM:DocumentID="xmp.did:C049D57E87B311E2B16482045EDE6CCD"
> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C049D57B87B311E2B
16482045EDE6CCD" stRef:documentID="xmp.did:C049D57C87B311E2B164820<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/left.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:34:47 GMT

Date: Wed, 09 Sep 2015 21:34:47 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 1036

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 shjcl69:8080 (Cdn Cache Server V2.0), 1.1 kf50:4 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a..........G.....O..B...........c..............z.................
[email protected].....\..>.....m..l..}........h......
..a...........b.................i................................p....
.......................................................e..}...........
......w.....t......................................m...........~.....a
.............................{..T..l....................q...........g.
................<..................................................
......................................................................
......................................................................
......................................................................
......................................................................
.................!.......,...................F..2*@P...."DXA......9.0.
L.6`.$Ap....Z.,X......2Z......!.......8a.$.!............9#.d...G.?1.&l
t;..##..W..9D'....2...CM..8..P...WD5.\(q....T..........*xs'..D_.L.ZW..
(H,X.S........ ....Rv.=....>@....3.F.M..........L.PG..<...T..@@.
;....

GET /flashzt/img/zmxy3_20120913/t_2.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:35:05 GMT

Date: Wed, 09 Sep 2015 21:35:05 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 4750

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx166:8080 (Cdn Cache Server V2.0), 1.1 kf50:7 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89am.4................4........D.....[.....LLl...9..t..k..Iv....C..
......4.g...B........d..3.Fk..x.....l..I.....`.%u...........H}........
..:k.......?8d=..;.....<..2y....s..;JlT..C..ux.nhp:..:.....].....G6
.......Yf....=.....? y...W.....D..O..y..:Y.U........;........[..Mc.<
;..<v....S........9.....H.....`........=.....hVlMi.....~.A..<'V.
...........;........Wx....JH....3.....e.....3.,...Tl.X?Xb..B\.;d..sxe}
....`..{[email protected][d|Ae....hr.]..;..N..;..:..R\....<..9.q
9.....@.....=..I.....o..Kr.......<*.6..?..C........e}.......A..RN..
..F_.>...........4....................$p.q.........................
........................................{.....S.....=.....EW..........
3..9..Y..............Ns.e..=.Q...w..~..EC.......QD...._o.j............
................................!.......,....m.4........vCC....*\.....
.#J.H.....3j.......5..&..'....[.....0c..I....8s.......@......)..L. ...
..P.J.J.*..Im..g....`...K...[7P.].....pw.(./...x..e.........{p.....G-.
.....a2.L.....i....L...C.v.yf.AA6.d..Z.6.c..\X....o......G..1...L51.vD
........K.N......k.......jC.gg.]..<$.. [email protected]........(...
Z.^<......*.I.(.C.$;....c.1..}D3. .,[email protected]....,....0.(..4.h#....
..<..`.>..#..&.c4m.3...4yJ......., .6][email protected].." .0.A.f.
...p.).......x.y'.......4....$...wP.H.<4@@........i)......Lhz..4...
.yF...y. .>..`........w..K-............ ....K.....F......p...).. ..
.6P...t..........:......... ..xF  ..0.....b).L.;.....p...l...'.....i..
.G.p. dyA..^......h. .1...H.J'.....r..r........*..77.q.L@\....KB.&<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/t_3.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:35:12 GMT

Date: Wed, 09 Sep 2015 21:35:12 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 4560

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 shjc71:88 (Cdn Cache Server V2.0), 1.1 kf48:1 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89a\.4.....}l...O...uu........................Gqo...............k.I
2.#...........{H......................v............z......yo......O...
dd:..............'........]....v.tg...............{....n..r....ZZ.....
...........jj.......wl..v.......................r....yq..z............
1.....,hhk..............e||...'....x........s.zj...A...|m.sce......|{.
............m^..p..q........u...............................}n........
u...........o...................i[..q........................$p.......
...q....p............2y...........................p..q................
...................................................................|..
......W..yc.................&p............m..........vf....xht........
......w.d.o`..~...............H...wjj.................................
...........!.......,....\.4......([email protected]..*\......#J.H.....3j.........
[email protected][email protected]<.J.. ....P.J.J......%....
..`...K.,O|x..2.....p..,d....x......A.......!.... .ix.....7.L..e../k..
.j...C..iX....S.^}.W6q.0..!.....s...........N..q..J.G-.B.............k
...x.x.....O..y9.....a...*...!(...................h y... ..}.........H
a^.{.......B..b.....B..(....,.. >0.([email protected].....{?....H..A
......I...)j.h..3D... ....`.)&.Sf9#.XD...l....p.)..t.i../.... ..M.....
.6.".....$.E....X...>XpR...0...i.ai.X..F.3..$...........3.......c..
............ ....c.......0.`C.5..C.Q.B.........._. $.,.jp..<...B.).
.E........ .........../.....3`...Nr.....p...G,...Wl...g....w.q..k C...
...&....k..J(..3H.`..a Ex _......i......;C./.`0./.L..IC.,..`...V.C<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/b_4.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:35:07 GMT

Date: Wed, 09 Sep 2015 21:35:07 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 244

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx165:88 (Cdn Cache Server V2.0), 1.1 kf48:2 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89aB..................J.....H..R.....c..............3.....g..W.....
...4.....f.....V..j....................!.......,....B.....q.uidi.h..l.
.p,.tm.x....I..pH,...d.......tJ.Z..B..0(...xL.*..@. .0...|N.0..B#.....
.............................i.!.;....

GET /flashzt/img/zmxy3/zrsp_1.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:35:09 GMT

Date: Wed, 09 Sep 2015 21:35:09 GMT

Server: nginx

Content-Type: image/jpeg

Content-Length: 11256

Last-Modified: Thu, 07 Nov 2013 07:12:52 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 shjc71:80 (Cdn Cache Server V2.0), 1.1 kf49:9 (Cdn Cache Server V2.0)

Connection: keep-alive
......Exif..II*.................Ducky.......d..... hXXp://ns.adobe.com
/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> 
<x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c01
1 66.145661, 2012/02/06-14:56:27        "> <rdf:RDF xmlns:rdf="h
ttp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rd
f:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="
hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.a
dobe.com/xap/1.0/" xmpMM:DocumentID="xmp.did:AF608084475911E3A7AFC49BE
0AFFEEA" xmpMM:InstanceID="xmp.iid:AF608083475911E3A7AFC49BE0AFFEEA" x
mp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFr
om stRef:instanceID="xmp.iid:4C2A5E3F475111E39230A2E5FDEDE007" stRef:d
ocumentID="xmp.did:4C2A5E40475111E39230A2E5FDEDE007"/> </rdf:Des
cription> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?
>....Adobe.d.......................................................
......................................................................
....................4."...............................................
...................................................Q....6..bC$45.&F..W
!1.%A"#.a.q2.9...R..cd.UV8I..........................#3.!Qa..4..1"BCU.
..A..c.q2$.b...7....rT...S6.............?..U........U.......3..u...}..
...n..T.D...t..R.d..\..8..Q.g.^.x...Sj.........U..y...g...5........*mS
=..>...!J...=s....]F...z}.X7.M.g.tg.:c.)W.Q..w..W...3..O......L.N..
GL|.*.J<...3..u..{u...`..6.....h....^.G....q^..X.n.>.,....3.<<< skipped >>>

GET /flashzt/img/zmxy3_20120913/b_5.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:35:13 GMT

Date: Wed, 09 Sep 2015 21:35:13 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 317

Last-Modified: Thu, 13 Sep 2012 06:35:26 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 shjcl69:8080 (Cdn Cache Server V2.0), 1.1 kf50:4 (Cdn Cache Server V2.0)

Connection: keep-alive

GIF89a.......I..............c...........R........X........g.....3..f..
............4..W..j....................!.......,...........`..di.h..l.
.p,.tm.x..|....pH,....r..e$..tJ.Z...v..z.....x0,..z.n....|N.. ..@a....
.......................]..................]...........................
..................................!.;....

GET /flashzt/img/zmxy3_20120913/t_8.png HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 21:35:13 GMT

Date: Wed, 09 Sep 2015 21:35:13 GMT

Server: nginx

Content-Type: image/png

Content-Length: 4901

Last-Modified: Fri, 27 Sep 2013 02:27:37 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

Age: 1

X-Via: 1.1 hzsx165:88 (Cdn Cache Server V2.0), 1.1 kf48:8 (Cdn Cache Server V2.0)

Connection: keep-alive
.PNG........IHDR.......4.......K.....tEXtSoftware.Adobe ImageReadyq.e&
lt;..."iTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:54C77830271B11E381D8EC9B
4F192540" xmpMM:DocumentID="xmp.did:54C77831271B11E381D8EC9B4F192540"&
gt; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:54C7782E271B11E381
D8EC9B4F192540" stRef:documentID="xmp.did:54C7782F271B11E381D8EC9B4F19
2540"/> </rdf:Description> </rdf:RDF> </x:xmpmeta>
; <?xpacket end="r"?>&..'....PLTE...w}~...n....g...........73...
......wSN........a............(.l....?..H.............................
H.e.|....-............y....L...e.h.f.../.v..u/-.......&....7...k../ ..
.......q5..........l..W.k....n......X.xG...T(.....N,[email protected]
.....s.W.y......)).C.....E.z.nwM............w.eP....%.....x..R..{Pwn..
.pvv..............$..o...$..2..............H.....v.......... lO,|ue.r.
............8tv ..........<]q].^.................~...g..6..........
.....k...u!....j.:..O.................................................
.j.............................$p.q..N.................2y.......].<<< skipped >>>

GET /jss/news_footer.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Wed, 09 Dec 2015 00:50:30 GMT

Date: Thu, 10 Sep 2015 00:50:30 GMT

Server: nginx

Content-Type: application/x-javascript

Content-Length: 961

Last-Modified: Sun, 04 Jan 2015 02:52:24 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

X-Via: 1.1 shjcl69:88 (Cdn Cache Server V2.0), 1.1 kf49:9 (Cdn Cache Server V2.0)

Connection: keep-alive
var cyl_footer_str = '<a href="hXXp://my.4399.com/joinus/index.html
" rel="external nofollow" >........</a> | ';..cyl_footer_str 
 = '<a href="hXXp://my.4399.com/joinus/contact.html" rel="external 
nofollow" >........</a> | ';..cyl_footer_str  = '<a href="
hXXp://my.4399.com/joinus/zhaopin.html" rel="external nofollow" >..
......</a> | ';..cyl_footer_str  = '<a href="hXXp://VVV.4399.
com/zs/wenwangwen.html" rel="external nofollow" >......[2012]0810-0
15..</a> | '..cyl_footer_str  = '<a href="hXXp://VVV.4399.com
/zs/chuban.html" rel="external nofollow" >........(..)..06..</a&
gt; <br/> ';..cyl_footer_str  = '...................... ........
.... ............ ............ ............ ............ ............ 
............<br>';..cyl_footer_str  = 'Copyright © 2004 - 2
015 4399.com All Rights Reserved. ........................  ........  
<a href="hXXp://VVV.miitbeian.gov.cn/" rel="external nofollow" >
ICP....B2-20040099</a>';..document.write(cyl_footer_str);..t>....

GET /flashzt/img/newaobidao/ico.gif HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Wed, 09 Dec 2015 00:50:30 GMT

Date: Thu, 10 Sep 2015 00:50:30 GMT

Server: nginx

Content-Type: image/gif

Content-Length: 1100

Last-Modified: Fri, 04 May 2012 07:53:01 GMT

Cache-Control: max-age=7776000

Accept-Ranges: bytes

X-Via: 1.1 shjcl69:80 (Cdn Cache Server V2.0), 1.1 kf50:7 (Cdn Cache Server V2.0)

Connection: keep-alive
GIF89a.............!..XMP DataXMP<?xpacket begin="..." id="W5M0MpCe
hiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk=
"Adobe XMP Core 5.0-c060 61.134777, 2010/02/12-17:32:00        "> &
lt;rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#">
 <rdf:Description rdf:about="" xmlns:xmp="hXXp://ns.adobe.com/xap/1
.0/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http:/
/ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photo
shop CS5 Windows" xmpMM:InstanceID="xmp.iid:2C2150B595BE11E1B9E0EBB92F
9208F0" xmpMM:DocumentID="xmp.did:2C2150B695BE11E1B9E0EBB92F9208F0">
; <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2C2150B395BE11E1B9E0
EBB92F9208F0" stRef:documentID="xmp.did:2C2150B495BE11E1B9E0EBB92F9208
F0"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> 
<?xpacket end="r"?>.............................................
......................................................................
...............~}|{zyxwvutsrqponmlkjihgfedcba`_^]\[ZYXWVUTSRQPONMLKJIH
GFEDCBA@?>=<;:9876543210/.-, *)('&%$#"! ........................
.........!.......,...........D..i......;....


GET /jss/zmxy3_20141010.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Expires: Wed, 09 Dec 2015 00:50:31 GMT

Date: Thu, 10 Sep 2015 00:50:31 GMT

Server: nginx

Content-Type: application/x-javascript

Last-Modified: Sat, 11 Oct 2014 02:18:28 GMT

Transfer-Encoding: chunked

Cache-Control: max-age=7776000

Content-Encoding: gzip

X-Via: 1.1 hzsx165:8080 (Cdn Cache Server V2.0), 1.1 kf49:8 (Cdn Cache Server V2.0)

Connection: keep-alive
8b8.............Y.o....,...8..)..H9..6=tK..X.....i P..te..HJ.b..).aE..
y..2....X..A....a.P.../[.b...w.."%..S......}~......K!..f*...;8....../.
.s........[.....e.....dJ./...b...m..s7..Z..cS.w...,......X..)..5huy...
H]...C.Q.;.K.!`...n.>w;..x-.dW.u.......%.r.f7~..T.;r.d....)......D 
.m.5.37.&k.......D:.,.`[email protected]....`..%.v^f,.D .%~'.c)..e.mk..Dh '.
K...B.n.....R~....X.s&...P$J...0.T...xOx......T_......y.T......t..huU.
)-Y..........W.|..W..........?.......=x....w*.....g......Q"......q....
.<qJ.Z.......9.UO......<g......T9Y.......Fi..x.Ve".{>... .;.j
s...#%.......s..0)Q...)M e.. .....nh..../.n([email protected].
..6...3....y~.W..B.I...\..,....s.N2.........3.#..HJ.M...R....V..-...G8
..r..l..HW*[B......H.D9w].........PW}.L..Zsn6..U.h2.Dy......e..c..)b,.
>r>R..Z...O......t....][u.}./.. .^.lf.gi.H....\..`-..q.~...i....
o.H..U..:...kj..Du.H.,[email protected]|
.#9xM..d=....[0t,Qq....A...m.._O...!@.$Q.#)k...7B..X...zM.!.&..."L.K..
c..C3b.\......7f0.}.EmR..`.....SGuV....8....4.s..aJX..C6..Xj[.......U7
."T..@..[.~....*.hg,.....`.....p...".95p.{..g.......'O>....7......O
....T.._.............p...@.)..(...9|"..K$.4J........z.|...o....M9i.g..
q]..c6.......05.B..O.=p._e.F..Ho..L.4!..Y.v.X.:._..f.w..f*.e4aE..{PQU.
....H....]bJ.......ZM....x..z.B}.&W@C&V....E*.P'...$/c/\\22...'E Y_O..
.$k....VR/.2... ..'_.....@.&j....8...UB.7.U.6I.*..xq......w(t.E....s..
....H.!./.b(M9&q.m.q.K/./.LrC...k...<|H...B..v..<.(..P...e......
.z.^....x.H...."TyW.....i2./L.%#.0...].uz-.:L/...k.5........Zp.N.8<<< skipped >>>

GET /jss/play_hs1202.js HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: VVV.4399.com

Connection: Keep-Alive

Cookie: bdshare_firstime=1441846240468


HTTP/1.1 200 OK

Expires: Tue, 08 Dec 2015 22:11:49 GMT

Date: Wed, 09 Sep 2015 22:11:49 GMT

Server: nginx

Content-Type: application/x-javascript

Last-Modified: Sun, 10 Nov 2013 09:24:36 GMT

Transfer-Encoding: chunked

Cache-Control: max-age=7776000

Content-Encoding: gzip

Age: 1

X-Via: 1.1 shjcl69:80 (Cdn Cache Server V2.0), 1.1 kf49:6 (Cdn Cache Server V2.0)

Connection: keep-alive
5f9.............W.n.6..n... ..X)..'......t...b.v...%Q..Y4D*...........
s...d.u]...S...?~.Gt.T.*D.~.n.3.JE..y......\._-.N...R-K...\.lI........
....'.... _.q[p.bsNVw.FR.vN"..=.c.i.;...`.q.C.u... .........m..#X.....
%(..?.....$*2...):..Ts..........n_N....2...b.u...J^.......&..Eu3`.mH..
.wnI..m*.....F.B .. ...5A -5.o.4..&...s...r.{.%c..L.`..6A3tB..q|yr..;1
k...E.....{g<....x....L........;.vNp:}."H.....IS.t.....g.>c...3S
.V.....K....8..b.]..9k...a......y.>..a. ^r._.....\W-6b.e....h.#.p..
{D...N.v...:Q......bJ....7.!....j.....T..vR$9On-....Tmy>.e.U...2U7&
lt;. cW%V.q......T....d.<H....GZ..h....MHdp..;.{V....c[p...1.R.2..V
.&....5.......v k-\....sr...u..n.....M....fK.5...I.].P....'.X....).N..
..*.y.)p..d,=.).T..-AF..,E.to..eA^.,.9......d.cL.S..:.O.......p....N.h
r....hre.....}.-.ZlL/U.J.... .. .Nym..wB.E.D...F....Z.mN.....e.M`...u.
.h/j.v.'..1Y.k1..#...dL..C.m.{eGj.Qb..}..:...Q..5}aMi.M...][email protected].....
.r......Z#..y..B;......$..m\sv.^..\.`...uB0....y.z68..q....0H.,..%..t.
...).-.6.....N......a.....3.bj......}....Q....n.f...9./_i.|.C.....`|..
1..-^G..h..Euk.y9..p..9..G.K.t.Q.8..........$<9u......._.c..<.J.
*....:3l.C......^.5........J.%..PT......=.H.;T....aB;f.%.gXw......e.{.
.|[email protected]....[./...k....yH<g..Dp..Eb.O.>.J.RTs.H..xM..@V...
.?$....s........B..p..@x*..1.....C]4...L%..P.. ...C....:..4...W...}...
/.q.]9D3x.......3}....tD3_.....{.)x.C...P.R..B..>..ey.t..B.#..r....
.[U.....o.=.6..6...w....g.[.....C.i....2.....c..\_.....C...B:F......).
^./.:us....A.."@s.[.Evq4.......4..to.t...O.6Lq..j.......<.N.?..<<< skipped >>>

GET /media/v1/0f000PMN_6_Z09Vbgll5of.swf HTTP/1.1

Accept: */*

Accept-Language: en-US

Referer: hXXp://ubmcmm.baidustatic.com/media/v1/0f000DlV0rvHMAROYHhQOs.swf?url_type=1&id_283672787=media/v1/0f000F_vSMdFWGLTLIlBvs.jpg&id_1821494

x-flash-version: 11,6,602,168

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ubmcmm.baidustatic.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 10 Sep 2015 00:50:43 GMT

Content-Type: application/x-shockwave-flash

Content-Length: 3221

Connection: close

Last-Modified: Sat, 25 Apr 2009 07:04:00 GMT

Expires: Tue, 23 Aug 2016 05:50:24 GMT

Age: 1450819

Cache-Control: max-age=31536000

media: media

Ohc-Content-Crc: 4016866748

Server: hkg01-sys-jorcol09.hkg01.baidu.com
CWS.....x..W{p...?gW.#..X.e...L,.l................v.5.#K..62$..F....'i
.O.iE...4...7.7Me.v\......r'6.R3q..%.t.s}... .s..s.....}..q....O^.....
[email protected].........{[email protected].{y>Tm.....l..e..>kyUU..Va..(...H.
.g.........F....B./.0.s........i...Q.....*=n ..z.......cE.wuW0...uL(..
..A.5Z......g....?...Z....w.c.`....0.r.,.>M..zY./...E<..........
..-s.{....2.S.E...2[Vf.%.=..[.e=B..H.7....x../j)..........e.qu\...5...
....\].........f,_[].....E{.........t..F.,Y......n.......l_.....;.....
K;.XqO........ 8.d\..y.v..<[email protected]`.|/.%....u....T...
M...r.}7.W..l5.(/.......N._[.r...2....n.M....t.....h.E....._/=2 O|....
......./..1..q..~*...%.DF2...J..#.....O...e......n xc.>[email protected]
......Y....9M.O..M}.&..*... ...p`..r*....W..b..2...*......tw......~.S^
J....;.............h.p%.........U.......L...K...oM...vr..7..........&g
t;H.b....[@...)~..`.n.....aY.%).............\KS...t)..]m=2L....S}..8^_
......W...<9ZkL.....2..I.1t......gf.rpk=...|]]H..l...t)..._@'......
$\........xQ.....k..........W{d.... o..2t.g`.....='..'..)(I..;...g..G.
......b.k.F....Ht..3,...i./........:^..-w..Yg.|[..@.[Z.......L'..y.c..
..Bb$.....^[email protected];.-.w7./M.h....W....;..u3.ubdE....)..
H.{rN..S....?Q1sU]x.%...C..N.~...Y.50;...de....i..9.&.Qg-."...y.D.=..H
.....B...>1......x....@>4w.r.v4....P..../..]u.... P.o&.:.{.V..|.
`.w..S.g...........T........s$...<.V......:....7....b....Io.....%%.
&....F.w]37y...W/..t..oM..u...-....e.5...Ny...Xa.X........"....DE.)j..
.A.}n....$P^[..1q. [email protected].............%1.b,g..6-HJ.#...........i<<< skipped >>>

GET /cpro/ui/noexpire/img/2.0.1/logo-noborder-light.png HTTP/1.1

Accept: */*

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: cpro.baidustatic.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 10 Sep 2015 00:50:28 GMT

Content-Type: image/png

Content-Length: 455

Connection: close

ETag: "554709f0-1c7"

Last-Modified: Mon, 04 May 2015 05:56:00 GMT

Expires: Thu, 01 May 2025 07:56:51 GMT

Age: 11120017

Cache-Control: max-age=315360000

Accept-Ranges: bytes

Ohc-Content-Crc: 1686557776

Server: hkg01-sys-jorcol08.hkg01.baidu.com
.PNG........IHDR.....................IDATx....K.Q..%(.[....9.).......!
Z.........c...$.........".....T~........B..................s..2...s...
V5N.O&..D".v.i8.R...d2I.F.8..[....f.,...\.S4..}..C.......G..A.t:.T.T..
p.......lI.6...d.T.b.H.t....BA..Z...*......OUU.2....z=...g,....C......
D0.J.J....(.8...1F.1.k.N.....B,.3....,..y.Z....!=.s..f3.4...,v.].....!
l.}B..JA..d...]........jA....n..%.D..-w3.}\..9.NQj"..`0Hv.].........d.
.w..s.....W.G|....}..._....IEND.B`...

GET /upload_pic/2015/4/20/4399_16125310445.jpg HTTP/1.1

Accept: */*

Referer: hXXp://VVV.4399.com/flash/78072.htm

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: imga3.5054399.com

Connection: Keep-Alive


HTTP/1.1 200 OK

Date: Thu, 11 Jun 2015 06:29:57 GMT

Cache-Control: max-age=31536000

Content-Length: 3016

Content-Type: image/jpeg

Last-Modified: Mon, 20 Apr 2015 08:12:53 GMT

Accept-Ranges: bytes

ETag: "80f0a1cc417bd01:396"

Server: Microsoft-IIS/6.0

Age: 1

X-Via: 1.1 fuzhou184:8107 (Cdn Cache Server V2.0), 1.1 kf50:0 (Cdn Cache Server V2.0)

Connection: keep-alive
......JFIF.....H.H.....C..............................................
......................C...............................................
........................*.D...........................................
4............................!"1.A#2Qa..$BRb................7.......................!..A."1Q.2aq....#3B...$Rr...b....
.........?.).n)u.Z.}....)P.v..d.wu.W.....e^........2.......29e....\.vo
..n.8...-."....1n..y].R..........E..)=..W9...i.)u....HOt..\Z&.&.Rx....
....)#j...P....K.........s.t.nX..Ve.N[@...!).......K..H...|..;.....4ME
8V../...o..f.*...uKi(.......yl".>...?/ULe.G.;..9.%I./"..n..../.-S..
.>.".4.....f.F.9iR........]M......:.........M..L&QT?.y.....,.(]5.M 
[email protected].._m...G.".j.X...p.L..qQ.4......O..v.K..5...R.H.Y.x..>
...ERc.......{X...x1.....D.p..Wk.....Fj*N`.$ .=|.z...T.tB|L*.a.>.-w
:k....]..N.n..u...y...X.#6..O.(...P0. ...<u..3.I...Ja...eYsj.....p.
W...I5.J....Q........(...C.p~."Oc.L*.#..).CrPTk[...y.46m...kp..m......
.G..... j?e$.../b..n...b;-g............9Ti2...k...q6]..w..r........*..
.......p7.^l.1O.....[.....U..ub..6.....V.:j.%!..`.v...<.Q.V.1......
.........X ..V...(....a.k.......S...;M..;F.K...!.,.P.Q..f..w4.z..x..#.
.a;,.. ....By.....y.....u|......W.cqy.dS..L.P..-.q...*..S..&.O..e.%B.P
=....=`R;u....G.T7......A1L.$q1...........@^J.. .j*..E..h..... b....%.
..P-.o..[.Z.Tit.g:[email protected]@m....3E.....2..X.K.H.w
....{.....\UN._.......</[email protected]....]..N..K.PW"....E.-...|
QW.*.$..}_...).r...Uzh...x..."....Z.2g......".t.`2..B...G.....nh.{<<< skipped >>>

The Trojan connects to the servers at the folowing location(s):

%original file name%.exe_668:

.text

.rdata

@.data

.rsrc

t$(SSh

~%UVW

u$SShe

KERNEL32.DLL

kernel32.dll

shlwapi.dll

wininet.dll

SkinH_EL.dll

user32.dll

GetAsyncKeyState

HttpOpenRequestA

HttpSendRequestA

HttpQueryInfoA

EnumWindows

{A068799B-7551-46b9-8CA8-EEF8357AFEA4}

{A0005538-9391-4dd9-B4D6-8EB7B9360F08}

68 00 78 00 66 00 62 00

0.090000

hXXp://VVV.supan.la/853341.html

73 00 79 00 62 00 68 00

0.015000

99999999

javascript:document.body.contentEditable='false'; void 0

hXXp://VVV.supan.la/853350.html

73 00 78 00 68 00 79 00

VVV.mgzm520.com

0.0058000

73 00 64 00 63 00 63 00

72 00 65 00 73 00 73 00 34 00

72 00 65 00 73 00 73 00 32 00

hXXp://VVV.4399.com/flash/78072.htm

72 00 65 00 73 00 73 00 31 00

72 00 65 00 73 00 73 00 33 00

0.020000

VVV.4399.com

hXXp://

hXXps://

hXXp://VVV.vip5866.net/10.htm

hXXp://VVV.vip5866.net/11.htm

hXXp://VVV.vip5866.net/12.htm

hXXp://VVV.vip5866.net/13.htm

hXXp://VVV.vip5866.net/14.htm

hXXp://VVV.mgzm520.com/

%s;7*

0%x@w

%C^L:

%s T5

]E4%F(

.Funr

k%UPp

fg.VG

%C',@

>Ùd

0'.Ll

[I(3/#N0.bd

j"%u=w

q%Xn`

@|H.NI

.wdd!

S|%u4

*.Ea]S

Q.CGo

fTpe

.LLbX

-.Mdl

\-A}=3K

Y:.akpS

$.Zcqn

u.Jck~

zx/%FN[

ce_%D

%C@0H

%s=\RI

}j%c%Y)

Rx.GR

4o#.dM

IeS`%C

[n 4\.UY

,4.qO,

gQ'.Io

%cLur?

s%DHB

]I%%X

5r.US

:mD].tB

f%fUZ

.fOuV12

*_.dC

&-N}<

({?.cQm

.Cqx~c

.`.Qw

**.dU

!n]%x

%X,Cr

&.PFy{xh

.um ZZE7L

/^p%u$

I.NoQY

zu.ew

D/.nT

q.7.qE

W>^T%S

%XiR^

1%SqlnD

U[5%u

.OW74

"E.jV

c T.Om

*U%XOd

D%FW@

.gM>$slt

B.iR%

vv#%sY7x

.TY3F

kEY94

.nyBK

wN%U/

4.Ky%t

.h.fO

.TK$N

%dRB:W

[I9%f

8o%sx

.WE= T!N

#?%s(C(

Rd.hYp

.TX=6

,%x)E

R%X4C (

$7.Gs

d,.bw p

o .Kb

KOz-%c Rd

zkey0

=.Lw/Ch

!c%SGd

A.YA'

`.yV8

.qL8d0{

m>[So;.yd]

_ÎW,

%UZtQ

.Fu:#

SShXuy@

f.kz"

@o.Ns

i.IK(

9rBÀ

.nm[&

.DDU0

%f$8C

\SkinH_EL.dll

C$%cmb

.ppM|

 aZ.mO

%-^

.hk;~

COMCTL32.dll

GDI32.dll

MSIMG32.dll

MSVCRT.dll

MSVFW32.dll

USER32.dll

hXXp://VVV.vip5866.net/xiaoyao/111111111111111111111111111111111111111.html

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

http=

HTTP/1.1

Accept: image/gif, image/bmp, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*

Content-Type: application/x-www-form-urlencoded

hXXp://VVV.vip5866.net/xiaoyao/gggggggggggggggggggggggggggggggggggggggg.html

hXXp://VVV.supan.la/853343.html

p_sshh

nsqld

javascript:document.body.contentEditable='true'; document.designMode='on'; void 0

hXXp://VVV.supan.la/853347.html

[email protected]

.exe|.rar|.zip|.gif|.jpg|.mp3|.rm

46081722

CE5.6.1

hXXp://zhidao.baidu.com/question/575561188.html

hXXp://zhidao.baidu.com/question/572214641.html

hXXp://zhidao.baidu.com/question/574689836.html

1.hXXp://zhidao.baidu.com/question/572460132.html

2.hXXp://zhidao.baidu.com/question/574774659.html

3.hXXp://zhidao.baidu.com/question/569731138.html

4.hXXp://zhidao.baidu.com/question/576275781.html

5.hXXp://zhidao.baidu.com/question/569143628.html

6.hXXp://zhidao.baidu.com/question/556206973.html

7.hXXp://zhidao.baidu.com/question/570302789.html

8.hXXp://zhidao.baidu.com/question/574689836.html

9.hXXp://zhidao.baidu.com/question/575641545.html

10.hXXp://zhidao.baidu.com/question/575097849.html

11.hXXp://zhidao.baidu.com/question/574296222.html

12.hXXp://zhidao.baidu.com/question/573057672.html

13.hXXp://zhidao.baidu.com/question/572433959.html

14.hXXp://zhidao.baidu.com/question/574836584.html

:VVV.mgzm520.com

VVV.mgzm520.com|

(*.*)|*.*

vs.3.sw

vs.2.sw

ps.3.sw

ps.2.sw

Corrupt JPEG data: found marker 0xx instead of RST%d

Warning: unknown JFIF revision number %d.d

Corrupt JPEG data: %u extraneous bytes before marker 0xx

Inconsistent progression sequence for component %d coefficient %d

Unknown Adobe color transform code %d

Obtained XMS handle %u

Freed XMS handle %u

Unrecognized component IDs %d %d %d, assuming YCbCr

JFIF extension marker: RGB thumbnail image, length %u

JFIF extension marker: palette thumbnail image, length %u

JFIF extension marker: JPEG-compressed thumbnail image, length %u

Opened temporary file %s

Closed temporary file %s

Ss=%d, Se=%d, Ah=%d, Al=%d

Component %d: dc=%d ac=%d

Start Of Scan: %d components

Component %d: %dhx%dv q=%d

Start Of Frame 0xx: width=%u, height=%u, components=%d

Smoothing not supported with nonstandard sampling ratios

RST%d

At marker 0xx, recovery action %d

Selected %d colors for quantization

Quantizing to %d colors

Quantizing to %d = %d*%d*%d colors

%4u %4u %4u %4u %4u %4u %4u %4u

Unexpected marker 0xx

Miscellaneous marker 0xx, length %u

with %d x %d thumbnail image

JFIF extension marker: type 0xx, length %u

Warning: thumbnail image size does not match data length %u

JFIF APP0 marker: version %d.d, density %dx%d %d

= = = = = = = =

Obtained EMS handle %u

Freed EMS handle %u

Define Restart Interval %u

Define Quantization Table %d precision %d

Define Huffman Table 0xx

Define Arithmetic Table 0xx: 0xx

Unknown APP14 marker (not Adobe), length %u

Unknown APP0 marker (not JFIF), length %u

Adobe APP14 marker: version %d, flags 0xx 0xx, transform %d

Unsupported marker type 0xx

Failed to create temporary file %s

Unsupported JPEG process: SOF type 0xx

Cannot quantize to more than %d colors

Cannot quantize to fewer than %d colors

Cannot quantize more than %d color components

Insufficient memory (case %d)

Not a JPEG file: starts with 0xx 0xx

Quantization table 0xx was not defined

Huffman table 0xx was not defined

Backing store not supported

Cannot transcode due to multiple use of quantization table %d

Maximum supported image dimension is %u pixels

Empty JPEG image (DNL not supported)

Bogus DQT index %d

Bogus DHT index %d

Bogus DAC value 0x%x

Bogus DAC index %d

Unsupported color conversion request

Too many color components: %d, max %d

Buffer passed to JPEG library is too small

JPEG parameter struct mismatch: library thinks size is %u, caller expects %u

Improper call to JPEG library in state %d

Invalid scan script at entry %d

Invalid progressive parameters at scan script entry %d

Invalid progressive parameters Ss=%d Se=%d Ah=%d Al=%d

Unsupported JPEG data precision %d

Invalid memory pool code %d

Wrong JPEG library version: library is %d, caller expects %d

IDCT output block size %d not supported

Invalid component ID %d in SOS

Bogus message code %d

0123456789ABCDEF1.0.5

inflate 1.1.4 Copyright 1995-2002 Mark Adler

%$%,%4%<%

S%T%U%V%W%X%Y%Z%[%\%]%^%_%`%a%

b%c%d%e%f%g%h%i%j%k%l%

W%X%Y%Z%[%

Z%T%i%f%`%P%l%

%$%a%b%V%U%c%Q%W%]%\%[%

%<%^%_%Z%T%i%f%`%P%l%g%h%d%e%Y%X%R%S%k%j%

%,%$%4%<%

eZl%u

Q.YeY

R:\Sg|p5rL

e$e#e e4e5e7e6e8eKuHeVeUeMeXe^e]erexe

s4s/s)s%s>sNsOs

qq!r!x!/!L"k!^!-!y"_!`!!&"&#&$&%&&&'&(&)&*& &,&-&.&/&0&1&2&3&4&5&6&7&8&A&B&C&D&E&F&G&H&I&J&K&L&M&N&O&P&Q&R&S&T&U&V&W&X&''!'"'#'$'%'&'(')'*' ','-'.'/'0'1'2'3'4'5'6'7'8'9':';'<'='>'?'@'A'Q'R'S'T'U'V'X'Y'Z'['\']'^'_'`'a'b'c'd'e'f'g'h'i'j'k'l'm'n'o'p'q'W'>!=!B!F!G!H!I!w"x"E!D!s"l!m!("n!r" ","*"-"M"N"O"_"P"`":";"]!e"g"g!\"J"K"A"@"i"j"h!h"f"b"b!a"e!f!c"d">"?"<"="]"^"!(,("(-(#(.($(/(&(1(%(0('(<(7(2()(>(9(4(((8(=(3(*(:(?(5( (;(@(6(#"""%"$"'"&"!"~!{!}!|!~"z!y!j!i!v"u"t"!!"!#!7!9!:!;!R!S!T!U!V!W!X!Y!Z![!)"."L!M!A!!$"$#$$$%$&$'$($)$*$ $,$-$.$/$0$1$2$3$4$5$6$7$8$9$:$;$<$=$>$?$@$A$B$C$D$E$F$G$H$I$J$K$L$M$N$O$P$Q$R$S$T$U$V$W$X$Y$Z$[$\$]$^$_$`$a$b$c$d$e$f$g$h$i$j$k$l$m$n$o$p$q$r$s$ !,!5!6!!%"%#%$%%%&%'%(%)%*% %,%-%.%/%0%1%2%3%4%5%6%7%8%9%:%;%<$=%>%?%@%A%B%C%D%E%F%G%H%I%J%K%L%M%N%O%P%Q%R%S%T%U%V%W%X%Y%Z%[%\%]%^%_%`%a%b%c%d%e%f%g%h%i%j%k%l%m%n%o%p%q%r%s%t%u%v%&!<!3!4!l0zC7<|Kf>0;e><2TI?M"P/1n3#P$@BRV5:Jg>>NBJ$PfC%Pz6&P]40Cg<'P(P)P5GW57GcFC83KIi*Ph> P52e6p8iL&VpM}FE5,P-P;N=MhA/Pv;sF2P>1_8^8f0KOJO3:!03P4P5P4K6Pr8g0rK|5}5~5bD<N7P8P9PM?:=N?>P<P=PX5#:p2;P:P)JF;E;>B?PUIg@8!@PBPeBaNJ0AP>2D6gCo7CP$Gk4DPK0`8l4zI2HY5q2gPAElGFP<HbN-?G;w;@2QD"CJPL0cD;=4:$MNB?2IP>MEPGPn:HP$UPPSPQPB2;JKPOPs8H;&4TPLPcNx;MPRPUPNP!6M0"6A2%UyKnIt8/?7NXJ87½2S=YP^P\PWP/BZP]P[P]JXP.?sK_P`P$=mPPG6IhPpJ62lPfPoPRAD8\GG`nP]EcPv8u8aPZ<iPoJMCePq7bPjPdPQNkPAOf6p7pPqPuPN0PJtPsPwPvPdDr7xPE<&BeDv6yP65zP|P5Kf71;wH{PE:CM~P#Q}PD:}=97$QO6!Q"Q/F|A#6MK%Q=N&Q)Q'QNA(Q*Q,Q QHJ75.Q/Q/2-Qt<2Q1Q0QVP3Q~=4Q%MYL6Q5Q8Q7Q9Q:Qt058;7<={C$6h@w8n9<QHLFEy;;Q=Q^Eu3>Q~F4A@QAQ,Hx8;OBQ&6<J6Bq65Es7CQDQbF_1GQ}:FQF:HQnfIQAKJQKQLQi>L<'4OQMQ=LNQZIPQQQRQ_EVQTQUQSQc:WQjLdNXQ(@YQZ=ZQ|C?N`EER[Q%tE6\Q^Kh=|B^QdF_Q`Q.3aQ'6LFz1P=!HbQaEO?cQ,JZ@"4)4dQfQ:7eQsNi==HLJgQxMhQiQ~EjQ)@~:t7kQI;o9fDmQ'Bo:nQoQ0AlQqQ6Kd9pQu7^:mGtQrQ{Ij>{Qd3uQsQOAwQvQD3`7|Q-NxQ}QzQyQONy8C2tNu=XEe9"R#ReN O%Rz8$R/3&RVK<D&MYJ'RUp0F(R*43L!>)RgJ-R*@*RP6 R 4.7.R/R0R1R[<{8^LhLwFqJ2R3R5R7R6R8R=2LK|:9RYA">)6:R[H;R<R=R>R$Ih6e0?F?R==i@AR@R#>a8CR>HDR\H4BnB(6nF1CnGNKFRj@57GRHR,1u0m4(BQ5qMKR72JR*6LRqLMRRN|868NRPROR_?91^1QRRR78SRn52;TRtK5:Z5'MPA?H}<G=h<u<v=@HWRC1QA}8E8g6[R!C~B 6$>\RZRD2fB8<K;&1p3f9J;]R^RI5F3g9H5_DF>L!9yMGE~8/7gRc6JK]HfR^4aRbRdReR[5a?-JcR_Rc8`R$OrJhDb8p9hR]FlR~<v<oRmR#LjRsRnRqRF8?LrRtRvRp:BOkRiRuRpRxR#SzR~R!S{R>Si:13yR%Sv0$S%0JI"S|RwR}RH:&Sw0/S'S(S%>iK-S,S/E.S S416:0?)SbE*S"04S#M'>:S9S0SCB1SoB6S&>3SdL<77S8S5S;S2SASFSBS=SGS1AIS"9?S}CCS<S-4n4e3DS@Sv7JSHSSAJ5,6ESt6D1NSLS'TQSKSOSMSL;PSSSXSVSUS2CE2RSTS(>31WS^2bS|>^S\S]S_S=19AYSZSz3aSo4dS`ScS.JUF8HfSeSE3gSjSiShS9GkSlSnSmSpSsSqSoSrStSuSvSwSxSEQ|<M;s2x0DCyS$:O0^?zSG8q9|S{S`J}S!T~S"T#Tw7`1$T&T%T(TZE)T50_:=7OC*T T-T.Td:Q67K,T/TA:#93T%:3C0TZD4Tb?2T5T?76T7T$9@39T:T;T8T1T<T=TdKk>?T@T>TBT8Gh0VICT}>9<]Gp4k:YK2Fx7OBATDTDBETFTHTiD.4!ta1sJl>HEf:NT=J]Nt2JT:AMTcEIEdE9HMDI:ITv16EKTGTP?OTN=-6PThJ}AFDRTOKSTXT/JWTQTTTVT&:IJYTECu2m>[TZTh9\T^T]T`TUTbTaT_TN;Q?TAcT<@m0dG[DeTdTfTgThTiTQJjTF2kT<M03IRH=?BlTkL4LnTgB7E@BWIoTpT{1:<qTP0rTsTb1q4`FtJwTUAvT@7[KuTeEyTxT{TzT|1|T)>~T%C}T3Jw=[E!U%9"U!G^HQL%G U85EM/L,V#U&UEB8KJE'UeKJ:*>(UP;O;90H8 @Q0,U-U*U81/4)UEL1I(0y0Q;R0#02U0U<L3U1U/U1?.UZJd87U8U >4U,OLG6U':9UXI:U5U;L^G;U2I<U@U=UG2?U;<>Uy7LUEUBUdCAUCUDUFUGUr4IUHUJUn>MU\DE1KUNUOURUPUQUR;SU&9TUz;8BUUVUZ;'9RL(5I8WUX3XU9BYU#VZU[U\U^U_U`UpB'1i<B0WA045<(9fE!=14hCjD8095uJB<R5k@<<(MaU\5K:23c1,>H2bUFMI=d<cUs4RF)LdUeUYIgU(4w6fU242?kU!;I2jUhUlUiU GM\3?mU@NnUpU~CoU#@{;PBw<uIl@M<qU->rUsUS0:BR?tU3F.>/>uUm@0>vUwU`LxUF6"=yUzU\<,?tFT?xH"GI6{Uo5|U~6OF02S;}U"V!V}6~U8E0BKEH<XAzM$V%VVF3;'V(V)Vt4*V V,2;Ad4-V(LRBY3/V1V_4.V0V3V2V4V5V=F.6e26V;V9VwJvJgE8VT=7Vr?<Vj:BVCV=V33>VGVFVEVAV@VDVxJKVHVJVrMIV?Vs?LV7:MVNVQVPVOVhE:VWVSVRVTVUVXVfNYVVVZV`4[V]V\V^V_Vn@#=d=cA)98:*9p5`V9:J8aV&LCGbV 9,4'CR6T;[IAHcVu4fV!DeVdVgVkDc?U;J@SB"5"DhViVo>9KlVkVjV}IsVZKmVoVkKnVpV(HqV>JrV34?J/GtVuV,944vV88DM)Mv4xV#D-91>_H2>x=lDyJ9E.9\IyVYEB:K8mDC0n=/9GMzV{VQG|VwN-O~V}VG3!W$W%W#W@I3>'W&W"W(W)W*W-W W,W.Wd1nD/Wz7v26G0W{F[J1W.O2W@J5W!P1P0<uF6W]5$Dz07W&J09PCoDoL98L88W9W?We<%D/6:W IFC;W<W06=W>W@WvEAWBWCW4W3WDWA7'IL:7I&DKIEW4>F1FWGWrL`HJW}1,@IWHWB7TBNWLWKW'Ne8y=MWLE>=@FQWPWOWRWf8SW|I[=TWyHAF'D0EUW 54?,Iw4&GVWV;:K;K~1[WiCXWw2-XZW0GYWWWz9]WcWiWaW\EfW]I`WeWgNW;UB^W^5hW-@e1bWx2gW16dWjWlWvWtWqWpWxNrW2619z=yWkWoW_Wz2sWuWQC(:82mWxWwW36)Bf3C7nWzW}W!X=<'XpD{W%Xy2#X$X~W"Xg8*M54Y1&X:G-0aH\W,X0XeL)XiE.Xp>/XWFGO X1X{9K@T0*X(XZA|W4;FB=X[A8X5X6Xf<9X<X7X$=:X4X|L{L>X?XU03Xr6&064;XCXBXGXHXFXIXAXEXJXKX@X|;DXVB292X5?XXiJNXOXPXWXVX}K74TXE743QX8NSXV0UXLXRXYXD7MX]M M\X`X~AyNaX^X[XZX_X0J4FF7bX]XcX{712kX84iXjX):hXfXeXlXdXnX{2pXoX(DsXqXgX|7rXvXuXwXtXxXyXzXjJ|X{X?=.@f2|2}X?0L@~XCl!Ya7"Yo@#Y$Y:5%Y&Y'YWBM8aL<Kj=(Yp@=nbHj<M:)YGB'JqB,Y*Y-Y Y.Y1J70^IcH/Y2Y5>;50Y7Y6>1YDG^M3Y4Y8YjE5Y39^@FY4HrBdH-ZzJqDuK;Y!2jCDY4C>YEY@YGYCYBYoG<Y}2:Yq5sB6Y9Y49[@7>AYRGr5H3g3!?IYNYJY}7OY";i9&==Y};LYX;MYD0HY)Ds546KY'0C:6?rDTHQY^A*B ;RYTYPYaJ=D\A{JN<`Y_Yx?~7YY9>hF1GWY]Ax<\Y8>VY[YSGUY!7]3]Y NN:5CZY\@59d?f1<AXYE5G7OD^Y_AaYcY7BiYdYfYAIsDgY,MHM94.0eYbYx4g1hYIMlY;BsYmYjYqYSYnYrYBHkEkYoYH7q:]@wY&EtY`KuYvYNL"@b7}Y5;zYyY2G5F1E{Y|YoIEG#;q@PKI3%Z~YJM'Z#Z$Z`A"Z?Y&Z!Z Z,Z'E.Z$;)Z<5/Z(Z3Z2Z1Z4Z6Zq>5Z9Z7Z8ZpY;Z:ZxY<Z0ZY;=Z>Z@Z?ZAZ~269|J/@N8CZFZRI_5EZDZTGGZ56IZHZ:46;XFI7t?JZ0@(E_IKZLZMZ8J]UF@LIX:eHCHMEANOZP<PZ60T6M@`IQZB;GC[;7?RZ}Jw1\;UZSZVZ9NTZ{@WZ2BXZz4ZZYZ[Z\Z{4|F6Cl5];aA\=00]Z"2aZ79`Z ::>_Z;>@L*:W0N@fZ1@G1U=fKr:<>'@eZcZdZkC&[jZ~;89hZiZ8?gZ/;lZkZpZqZmZ"3nZoZUHaIJ7rZ2@=>RCG6sZwZK2tZvZuZk=HCE0xZyZ*DqNC;kJ=K"[{Z~Z}ZzZ![^F|Z#[l=$[KMxG%['[([)[J6H199*[ [q=bAXR>A=AXBG:rPn7-M~J~I,[s:?D-[/O>K D.[|4/[0[ZL$LvK\K%;2[k<QK4[7[6[y4`53[5[8[y?{MI0`:<B]<s>;[NE9[ B:[r>]L<[=[hMB[:9UG?[lE^ZbZO5GGA[>>DHG[zH>[D[C[O@mKSNgKL2^;HOF[u?E[@[O8L[J[M2H[N[T[HBAJV["IU[pG?K;4w@@=SD.MQ[P[R[O[W[M[K[S[I[lCxLF<t:::oKA3NDJFI1r@4@*7Y[;9|3[[t3a[^[s@K3,:J3O:\[e7K7mEZ[F0][_[M6,7<4K5b[y:qK7;c[0Io[32d[u[e[BNl[_Gt[g[40i[<9k[j[f[q[?>mTh8|Mh[tD#3-:`[p[a3n[r[nE~42\ILw[}4~[@K!\#\'\y[*CoE \|[(\"\9?,\3@*\=4POv[&\X0x[:L}["?GDs[%\z?/\q3!81\z[0\)\{[-\.\?\NF$\;\=\XDLMvI8\JB>\?A5\B\A\oF@\jFD\7\H6:\]=`G<\K64\6\3\0OZ39\C\53g:]1T\1OW\:?V\U\R\F\c\E\X\P\K\H\I\Q\"tN\=9HDdAL\G\J\MMjKO\Y\a\Z\g\e\`\_\PDeA]\[\b\h\uHn\i\l\f\tC8I\\d\@>OLx\k\"8#2_3S\A>p\w\y<r3.Cm\r\v\66L5t\!5KFs\u\o\q\`3IC|\z\i8y\!]X[{\}\~\,](]m[']&]#]j\%]$]*]&O-]{6)] ]'H.]2]/]sM0]^\3]4]516]g7!<U6$2_M8]7]:]=5V6>4=]<]>]N27C?]?4A]@]B]C]D]_;5@!:pIbJDOu;P:rNE]F]`;G]H]J]I]XK^=l<D;K]M]#?L]N]O]P]Q]R]T]S]U]%2JCV]&;L3W]BELT#5X]Y]lJhKGFZ]fH{HSL[]]]\]_]^]a]a;1Lb]c]$5d]f]e]e?9IJ1EHuDA=a5FH.<h]@4x1rFg]>9SCi]q]j]ABb5r]h7%5p]n]k]`M@DYFl]t]s]#7-2;:m]o]WKtBwK|]}]O2(J}L!^#<B>x]~]h176u]z]t@qGgHw]!Ky]$^"^{]"KHGc5%EmC%^#^YBv]K1NM0^/^v@,^lM6F&^EDL1?9)^'=.^-^(^ ^h3*^IG.Nt>u@6^4^MI1^3^:1@92O=3bIaM$3;?5^:^C>0M7^2^8^^NsEBF63U1>^A^CNdMH^B^?^TNE^J=G^L^qEJ^D^8CK^@^F^M^|0C^N^<?_=%J.:;^I^:E6@i3Q:D>=^B=L7<^R^m=:8a^[^t5OEV^_^/02192X^,BO^Q^A9b^]^U^\^ LZ^^^P8E>9CT^/MW^P^rES^Y^QO><~Kc^.Ho^;8`=e^/NB9r^n0p^d^j^l^OMg^.Ei^q^k^GLf^"<~^j3h^m^n^lBZBv^|^z^)E#_w^x^`^y5:I?<w93Ot^"_i1fAyGA4zN!LRD{^}^2A!_y^s^C4i7/_*_x@c3a=3_,_,D)_YDL_&_%_._(_'_-_!@$_0_1_B46_5_7_:_CE4_8_c7yB2_;G9_>_<_?_B_;_j9(G9^tM=_A_uB@_ _ioE_I_G_C_D_H_F_NIN_K_J_M_TFO_uCmB%@P_R_Q_u^S_gFT_P2tE=5^<R:'Of?j1V_U_Y_:C\_W_[_Z_@EY0uN^_(1`___]_X_#Kb_a_k1d_2Jc_5LG>3AF>{Nj_y@f_k_l1i_aGe_h_H>QHl_Q<z@o_g_'7m_PMp_&tO=q_r_.Gt_u_3GuEw_y_UNv_x_m1s_[Sz_gA8;|_{_$?YR}_!`n_~_"`zG#`$`%`&`^D(`'`)`*`_<cIlL `,`VA$<-`.`/`RJGH0`WG-D1`g2m5FL6L424ORK*J7@2`CF#83`T:5`4`6`7`8`>59`:`$8HH<`u>;`86=`?`>`@`Q8A`i6@A}9C`D`B`m<HF96F`,CE`5ObGI`K`H`TLJ`L`DNP`O`vC-G%8N`M`1M2MQ`n1v9b;R`S`U`C=W`V`X`M3Z`Y`\`[`<8(NL6&2j6a4hN^```a`Q2]`9;AD_`d`n<b`>7IHc`~`i`=8e5f`}M0NvBh`j`VNW6|HJGk`m`p`l`o`j8M1q`p?n`\Nt`$tr`u`g`s`<:v`w`~Mx`y`e`z`D4%<{`|`}`;1!a;I"a$4#a$a%a'a(a&aSI*a)a,a a-a.a0a/ay92a1aE4S?<E3a8@:;y14aQMcJ5aDE3MC9=?KC4R.Dh26a7a<a:a9aBZ&38aZ0*HJH1N=a;a\C&@ H-I?a,NM7@a>aVHAaBa[0v>GaDamFCa&5JaEaFaIaHa%IBAAA?5KaLaMaOaNaV1WahHQaSaUa>?VaTa@<PaRaBII>YaXaZa&</:wE[aKD]a!N\aiAbadaeaTCca`a^a_aaahafagaiakalamanajapaoaqaENtarasab4~LJJvauawaxa|ayaza{a}a~a!b"b#b/HPE$brG4I%b&b*E'3D9'b(b)b); b*b,b-biH.b/bis0b1b2b.;3bVG_KN1W14b6b5bpE9@9]7bAL8bF4WH9b:b;b\LUL>DjA=bb=J>@b?b>b}HG4)8FbCb??2LBbDbEbAbGbHb/Dc4eCIbJbMbg?DFNbSKKbLbQbPbObSbRbTbVbUbMJV=FNWb7FXbYb]b[b\bZb^b_b`bab7LbbpLcbNCjGk6;Cdb:6P@eb=:fbgb&8U:ibVEV:N5$KKGWE\9kbK>2NE9'8#Hmbobk8nbvDqb73lbjH01l:ROpbrbKJY@tbubsbN3{bzb'<|bwb}bxbXHvbyb"c!caK~bk0$c#cL>ÌA'c&c(chbjb*c)c(<iNR< c77@5'5c;4M1c0cDA-c/cK=@?.c,c*GM><IW:xE2c3cIcX6=O5A4cR2wD!J5cz56c8c9c)G:c;c<cY6S2EF(=d;=c)=J2CI>ckHEAAcBciGA??caC@cN>\0)5CcxDDcG@-L#IEcFcUCGNHcGco<Jcp0McKcT2N7LcF9r9fJNcTKPcQ@O1:2,0OcQcRcw>ScO3Ucj7f5Vcu6Wc|@MF`@u:XcbCkAZc\cYc[c"7]c&7g5RM_c`c.1ccv3bcacec^cfc)NgchctTjcickclc5NmcopO>ncocW=8Fpc(Cqc<Crc%6?Q]C3<H4sc"dvch5uc$dtcP>xcyc Ezc^3Z?dI|chBwc{c}c{:&d.I&HyEZ6%d#d5H~c^C{EzEv:8d(d*d-d.d d,d)d'd!dOJU25d2d7d6dsG'L;;0d9d4d3d/d1dI4=C}@"H>d$Ha@;dOH?dSJ[C:d<d=d@dD<FFEdDdAd6OJdNdKdGdHdMdBdURIdCdLdRdJ4OdPdQdTdSdvHUd|NmJZdWdVdR@Yd[dXd_d\d]dFd^d`dadFJbdbLN6)7cd4Jh?0Ldd3NtGFA4GM=@0idgded!4Q>jdhdfdndmdldkdodpd:@qdsdrdR88Aud|Etdvd5JlAG9wdHNydzd{d|de;}dO7j5*5!esLH9~d$efL<G3Ic=#eS<I9f;i56J"eGABKw:g;]D'e_NY:(eB?*eR>0:)e*=>8HA%e e&eP7.e2ek7-e6eJ9mM<03ek50e1e}E/e,e(3d@(88e5e7e4eQ73B9enAFeBe<e@ez<]0;eCeGeK9VLVD=eEe:e>C?e=0JL>e[6lHmAPNo=neHe~@DeIeKeyDNeJeTJK4KL^0Me}NLeo1lFOeVePeWeSe{GJ<UeReXeQeD=%KL=Te`e\e_e]eae[eAeS@KH^eYe!AR7 =%?6AdefegeceeeZebejeiezK 7helekeoeqe<;mereseteze;Eveuewexeye{e|eL4}e~e!f"f#f$f%f&f(f'f)f*f f.f,f-fa:S7VC3Hp=MGmH/fmX0f2feM1f4f3fSM5f~H6f9f8f7f:f27"AA5>f;f<f?f@f=f)1'2BfCfDfbM,=FfEfi?GfHfIfe4M4JfKf]KcMTM7OM9NfT<MfOf)<QBPfL9WLQfRfSfTfUf*<mLWf?CVfYfXfZf;@[f\f9J]foA^f_f~Nbfaf`f0Dcf&?dfef8Offgfifhf%HyF>O)HkfS>*IlfjfN4T8h;nH*8CKofmfN9O9i0h:YG_0tf@CXG[Bvfrfufpfsf&KU8}0qfxfyf9F;6&g=Gi;<[email protected]@S5zf|f{f}f&C>G1D#g"g~fU?eI%g$gP9SO5g)g*gp<(gx9'g g2D"J#A\B/g0g,g-g.gQ96g2gfIlK(I1g4g3gDK7g8g7A9g;g?g<g:g?G=g>g22Eg@gAgBg!BDgCgFgGgHgC?i2IgWN <-=j;WCJgKg11LgMgNgOgPg=6*ZQge@RgK<Sg0PTg^J\4$AX=qI.=UgR9VgLHdgXgIBuG?8Wg%AYgzD[gZg]g\g^g`g_gO4agbgcg1:INeg'?p1fggghgr0igjggIG<lg)320kgngNGD?V2'K]7\6mgj2#4q1rgjN]BDI~gW2|gzgqgogpgc<l6wCQFQ1tgsgygugxgPLwgX2}3{g}gT7#h,h-h 04hq0 h*h%h$h"h!hcC{B'h&h)hpAU7A1(hS9qA:h;hY2.28h.h6h=h7h5hvg3h/hP41h<h2h>h0h|GiM9hOhGh{?F5]6Bh[2T>EhZ:QEJhnJAhZ2V8)IKh?hHhRhChDh:FIhFh(KLh`0@hNhMhkGTh_h~3bhPhUhnM^hUM*NxCk3rIdh!F10]hYhrASh[h`h,G*0XhahxI\hWhU>/=,<XLGIghphZhw3x>ehjhsAfhmh_CnhVMch83ihlh,Lohhhkh)K!OshzhrhC<QhNJ"Lyhxhthuh61whqhUDvh~0"BCJ{h!iYH~hV>I<#i>6$iyI}hVh|hOO"FsI i1i2i%ivG/i'i)i3i(i,ir1eF-i0i&i&A*i';E?07tLyLr=7i5iNO4iuM6i8i9i<i:i#F;iMH.is==iBitAAi"iCiIA>i@i?i1]"]EiDivM<bFiGiHiW8T5Ji]Qu5:Ns6KiLinCMizF:0c2RiSiNi=;OiBGPiQi[iUiXiTiViWiX<YiACV7B3\i?3ai]i`i:H^i_iHIZHbi}Blihik2fi*KgidieijimikiiiciXCti*Lrisinipiqioif@9Oxiyi!j*?{i~iviui"j\2|i#j}izi3DwihG'j;M&j%j.j(j0jfM3j*j j/j2j1j)j,j=j6j4j5j:j;j*3B59j$j8j<j7j>j@j?jBjAjZiFjCjDjEjGjl7IjHj0=T9'^JjQ=93KjR1W>LjU9Mja0=INjj?UjRjoCSjPj^6OjVj67^B\jXj5BWjZjQj[j]joHYj^j`jS8TjA0_j[:vNajbjuA"Ncj5MdjejdJfj@:#NkjljX>jjgMgjij=@~?hjmj#Jojnjl3 Kpj|jrjsjtjujyjzjxjvjqjwj{j7p(2~j_6}j"k!k$k#k%k1=&k'k(k>@WM)k$JFG*k k 8,5,kk;AG-kP3.k0kwM/kF?1k2k3kQ44k5k6k7kQ38k9k:kr2(?;k<k=k@8{D>kW7V?Ak$F@k17?kwB-5BkCkY>m7Dk,K_@v5uLJAEkG?pCZ>FkIkJk>:BBHk[>>IGkl;S1NkX7n;m;MOMkLk'AM5CO:3\>KkPkQkOkX8@Mo;'GTk@@BC6MWkl8?@SkXkm8UkVkRkb@IF/C]2pHC54D[kYkLCA@R4Zk[?JN@O\kgk5Dfkckkkdk`k|D_k]k!Mp;ak^kekt=A8zBEKZ1b0%FikhkfFmkbklknk,8jkV9U<okXMrkuksk5Ipk`6tkvkzkwkykxk{k1<}k|khI!lY7~k"l#lD5Afy>$ln8%l&l>;NZ'l(l2=)l*l l,l-l C.l0l/l&F1l-K2l3l4l5lZF]>6lk9.P7l8l?I9lAl:l<l;l=lFK>l?l@lBl-3gDiIb:[email protected]_BqH=EFlGKl2Ll(OBDEOq;Kl1B\l(AxFPIOl?;r;^>eG-8NlMljIA<REQlRlX9PlSlTlVl#BUlf4XlWlYl[l]l^lV@O<_lR3`lvAalblkI/5cl6D[1dlq<v?-Bglflelmlklhljlilllw5plW@qlY8nlol)O7D)ArlulsltlYM'Fxlvlwlyl)m|l}l{lzl}D!m%m"m~l#m$m m&mX@(m*m'm-m3=,m.m/m2m1m0m4m3mvL6m5m7m8m:m9mH?;mm6<m>m?m@m=mAmV<Bm0537.8CmpF>EDmGm4<FmEmZ7HmS3Jm\:ImRmLmNmeJKmMmQmOm15PmSmZGXN4=Tm"MVmUmYmAMXmm3Wm\m[mZm2E]m^m_ml9%7`mambmI?cm-<dmem!R~Qfmpegm$C ?@GhmUJTD~9)C*1xKW?^7a6VJimkmjm`2vFlmwG3EmmR=omBL~mqmrmID`BwA(FpmU5ymvm%n)F`Csm~DSEtmxm`[email protected]$Bum)0"OzmaB5=J?|m{mo0}m/I'n[Fk?YCx6&n7M?1WJa2!n"n#n$n;F#Cc0(n)n#t=B*ns1LA/8ZM n,ExAW<,n/ne=-n A*Ad0KN1nrH3n2n0ndcT4nm5n4n6n8MaF.K7nY<8n9n:n!Ej0Y9:O>n47;n<ntIT39M?6TE?n@nAn"ECnBnSFDn6=`<[GqCr<l?EnFn]?GnHnInoM7=KnJnZ9s9@;Nnf=MnLniBo8C@0H9=On_>RnPnQnTnSnz>UnVnWnPHS:a<XnYn$NE=nLLNZnb6[n#E^nx3K?\n]n`DUK|6`nan_ncn_FC3gndnfnbnOoenkNZ8on4Ejnmnknpnqninvnt1hn-Hln`>[9HKd6F=<F-AtnnnsnCL8Dunrn,Aynxnwn/K{=zn_JT1FIrCx5|n]9,;{nm?n?!o#o{>"o$oS6EIb<#O~nx:?O&o%o'o}niFUEWD,oCC(o)o-7 o08*oa>y30o?:yAJD;3.o/oCD-o1o7o:o9o-E2o3o6o8o@6;o5o4o?o@oAo>o=ob>*F<oEoCoDoBoxBFoGoIoU4HozLToJoMoKoLoNoPoQoRoUoSoVoXoWo9DgLYo.AZoDJ[o 3<1W4V4\o]o^o_o`oX4U3^96Hboaoco\1foeodogojoG0holokonomooo.FpoqosorolItouoe:vowoIKKA$0KBxomI{oyo_9zoB8EJ}o!p~o"p!1X?|=Y4#pfG%p"1$pDDMN F|o&N18[My64N(7bB!g&p,3o?V3(p)p'pd7]:c>#1YN p.n*p.p,p-p/p0plN1p2pI@;H}?g4:Mm28=[85p4ps;6p3p(;:p-jVRw?8p%NqF 1c@6<7J@1mNkM;pEE{<<p=pL?>pnN9p@pBpAp?pCpDpzAb2Ep8LFpGp*O1[HpIpJpNpKpLpMpOpD@wLE@PpsHQpSsLLRpSpTpW3VpY?Wp$7Xp\pZp[ps3Yp]p^pH0_p`pd>apG5dpcpbpqk\JepfpgphpipjpZ4kplp#Gnp;2qppp$1A6GJ:D":`9g=\?sprpBMh4RH\F|?NN[7vpupKK,FP1wptpQIjMxpyp{pjB[3\3zpi428j4?E`N\8|p}p~p!q#q"qwI$q%q&q'q)q(q*qtHLf)?25 q,q,R;]SH{0;0t;0K~>-q_L.q\MB1A;/qn20q1q3q4q6q2q5q[47q8q9q:q;q=q<q?qBq>q@qAqCqB6s<DqEqa9Fq>3OGGqHqZCkFIq}GLBX1n6o6sCNqp6o2MqKqLqJqXqOqPqQqRqTqSqY=UqWq35Vq{A38YqMBZq-F[q`q^q]q_q\qbqaqdqC6cqeqfqhqgqiqkqjq|9lqmq<3nqoqq?pqqqrqsqb9tquqvqwqxq1Hzq&I{qyq}q|q~q!r"r#r$r%r&r'r(r)r*r r,r-r.r5]/rxd45!32:1r0r%L3r4r2r5rbK6r{5%O7r9r>0:r J8r;r<r=r>r?rnK-;z:/A@rCrArDrq8BrErFrGrKr*;dBLrIrHrJr_7PrOrNr30ZrVrWrSrYrUrb3LOXrTrRrQr\r_r^r]rII[rs0`rbro3Mr71drcrar-CpKZNerfrgrhrir;Djr7Horkrlr1KDLPFprqr>Fnrmr*2yrxru1vrursr{3rr2<)2c9|r{rzrwr}r~r%s$s&s-1!s"st99L#s2K s's,s)s(s\7-s.s/s*str0saD4s5s3s2s8s1s6s7s:s9s<s=s>sIO;skBm:?s@sAsBsCs48DsEs/<FsGsHsIsLsJs<OKsoNMs[NNs~GOsQsRsPsm9MLcKwV`]{K 2TsP5UsVsWsu9XsT`[LcBYs[sZs\s]s^s_s`sasbscsdsesfsgshs$E]8jsMAksls!Imsns7cZlmpospsrssstspNqsusvsxswszs{sys6N|s}sTc~s*!t!p!s!u!J!K!v!\!$!%!?!0#1#2#3#4#5#6#7#8#9#'!(!c!a!d!)!w!A#B#C#D#E#F#G#H#I#J#K#L#M#N#O#P#Q#R#S#T#U#V#W#X#Y#Z#N!@!O!0!2!.!a#b#c#d#e#f#g#h#i#j#k#l#m#n#o#p#q#r#s#t#u#v#w#x#y#z#P!C!Q!1!o!

S%S'S(S)S S,S-S0S2S5S<S=S>SBSLSKSYS[SaScSeSlSmSrSyS~S

d d"d$d%d)d*d/d0d5d=d?dKdOdQdRdSdTdZd[d\d]d_d`dadcdmdsdtd{d}d

B"p"C"m"l"n"4"1"k"D""*!*$***#*)*!).*2*1*4*3*@*?*B*A*P*R*Q*T*X*S*,)c*b*e*d*r*0)N)" ! $ * # ) A). 2 1 4 3 @ ? B A C)P R Q T X S L)c b e d r P)s '*' %*% (*(  *  ,*, /*/ -*- 0*0 ")B)7*7 6*6 8*8 5*5 :*: ;*; =*= <*>*> $)D)G*G E*E F*F D*E)&)F)H*H I*I G)J*J L*L K*K ))I)()H)M*M O*O N*N J) )K)W*W V*V -)M)Y*Y [*[ Z*Z \*\ ]*] _*_ ^*^ a*a `*` /)O)l*l i*i f*f k*k h*h j*j q*q t*t s*u*u w*w v*v &*& C*C U*U g*g p*p m*m o*o n*n 9 0"/"2"6"5"3"8"9"a&b&c&d&g&i&l&v&e&j&q&r&s&t&{&x&u&z&w&y&|&B'C'D'E'F'G'H'I'J'K'L'M'N'r's't'u'v'w'x'y'z'{'|'}'~'q"o"!0"0#0$0%0&0'0(0)0*0 0,0-0.0/000102030405060708090:0;0<0=0>0?0@0A0B0C0D0E0F0G0H0I0J0K0L0M0N0O0P0Q0R0S0T0U0V0W0X0Y0Z0[0\0]0^0`0a0b0c0d0e0f0g0h0i0j0k0l0m0n0o0p0_0q0r0s0t0u0v0w0x0y0z0{0|0}0~0!1"1#1$1%1&1'1(1)1*1 1,1-1.1/101112131415161718191:1;1<1=1>1?1@1A1B1C1D1E1F1G1H1I1J1K1L1M1N1O1P1Q1R1S1T1U1V1W1X1Y1Z1[1\1]1^1v1_1`1a1b1c1d1e1f1g1h1i1j1k1l1m1n1o1p1q1r1s1t1u1w1x1y1z1{1|1}1~1!2"2#2$2%2&2'2(2)2*2 2,2-2.2/202122232425262728292:2;2<2=2>2?2@2A2B2C2D2E2Q2F2G2H2I2J2K2L2M2N2O2P2R2S2T2U2V2W2X2Y2Z2[2\2]2^2_2`2a2b2c2d2e2f2g2h2i2j2k2l2m2n2o2p2q2r2s2t2u2v2w2x2y2z2{2|2}2~2!3"3#3$3%3&3'3(3)3*3 3,3-3.3/303132333435363738393:3;3<3=3>3?3@3A3B3C3D3E3F3G3H3I3J3K3L3M3N3O3P3Q3R3S3T3U3V3W3X3Y3Z3[3\3]3^3_3`3a3b3c3d3e3f3g3h3i3j3k3l3m3n3o3p3q3r3s3t3u3v3w3x3y3z3{3|3}3~3!4"4#4$4%4&4'4(4)4*4 4,4-4.4/404142434445464847494:4;4<4=4>4?4@4A4B4C4D4E4F4G4H4I4J4K4L4M4N4O4P4Q4R4S4T4U4V4W4X4Y4Z4[4\4]4^4_4`4a4b4c4d4e4f4g4h4i4j4k4l4m4n4o4p4q4r4s4t4u4v4w4x4y4z4{4|4}4~4!5"5#5$5%5&5'5(5)5*5 5,5-5.5/505152535455565758595:5;5<5=5>5?5@5A5B5C5D5E5F5G5H5I5J5K5L5M5N5O5P5Q5R5S5T5U5V5W5X5Y5Z5[5\5]5^5_5`5a5b5c5d5e5f5g5h5i5j5k5l5m5n5o5p5q5r5s5t5u5v5w5x5y5z5{5|5}5~5!6"6#6$6%6&6'6(6)6*6 6,6-6.6/606162636465666768696:6;6<6=6>6?6@6A6B6C6D6E6F6G6H6I6J6K6L6M6N6O6P6Q6R6S6T6U6V6W6X6Y6Z6[6\6]6^6_6`6a6b6c6d6e6f6g6h6i6j6k6l6m6p6q6n6o6r6s6t6u6v6w6x6y6z6{6}6~6|6!7"7#7$7%7&7'7(7)7*7 7,7-7.7/707172737475767778797:7;7<7=7>7?7@7A7B7C7D7E7F7G7H7I7J7K7L7M7N7O7P7Q7R7S7T7U7V7W7`7X7Y7Z7[7\7]7^7_7a7b7c7d7e7f7g7h7i7j7k7l7m7~7n7o7p7q7r7s7t7u7v7w7x7y7z7{7|7}7!8"8#8$8%8&8'8(8)8*8 8,8-8.8/808182838485868788898:8;8<8=8>8?8@8A8B8C8D8E8F8G8H8I8J8K8L8M8N8P8Q8O8R8S8T8U8V8W8X8Y8Z8[8\8]8^8_8`8a8b8c8d8e8g8h8i8j8k8l8m8n8o8p8q8r8s8t8u8v8w8x8y8z8{8|8}8~8!9"9#9$9%9&9'9(9)9*9 9,9-9.9/909192939495969798999:9;9<9=9>9?9@9A9B9C9D9E9F9G9H9I9J9K9L9M9N9O9P9Q9R9S9T9U9V9W9X9Y9Z9[9\9]9^9_9`9a9b9c9d9e9f9g9h9i9j9k9l9m9n9o9p9q9r9s9t9u9v9w9x9y9z9{9|9}9~9!:":#:$:%:&:':(:):*: :,:-:.:/:0:1:3:4:5:6:7:8:2:9:::;:<:=:>:?:@:A:B:C:D:E:F:G:H:I:J:K:L:M:N:O:P:Q:R:S:T:U:V:W:X:Y:Z:[:\:]:^:_:`:a:b:c:d:e:f:g:h:i:j:k:l:m:n:o:p:q:r:s:t:u:v:w:x:y:z:{:|:}:~:!;";#;$;%;&;';(;);*; ;,;-;.;/;0;1;2;3;4;5;6;7;8;9;:;;;=;<;>;?;@;A;B;C;D;E;G;H;I;J;F;K;L;M;N;O;P;Q;R;S;W;U;T;V;X;Y;Z;[;\;];^;_;`;a;b;c;d;e;f;g;h;i;j;k;l;m;n;o;p;q;r;tfs;t;u;v;w;x;z;y;{;|;};~;!<"<#<$<%<&<'<(<)<*< <,<.<-</<0<1<4<2<3<5<6<7<8<9<:<;<<<=<><?<@<A<B<C<D<E<F<G<H<I<J<K<L<M<N<O<P<R<Q<S<T<U<V<W<X<Y<Z<[<\<]<^<_<`<a<b<c<d<e<f<g<h<i<j<k<l<m<n<o<p<q<r<s<t<u<v<w<x<y<z<{<|<}<~<!="=#=$=$=&='=(=)=*= =,=-=.=/=2=0=1=3=4=5=6=7=8=9=:=;=<===>=?=@=A=B=C=D=E=F=G=H=I=J=K=L=M=N=O=P=Q=R=S=T=U=V=W=X=Y=Z=[=\=]=^=_=`=a=b=c=d=e=f=g=h=i=j=k=l=m=n=o=p=q=r=s=t=u=v=w=x=y=z={=|=}=~=!>">#>$>%>&>'>(>)>*> >,>->.>/>0>1>2>3>4>5>6>7>8>9>:>;><>=>>>?>@>A>B>C>D>E>F>G>H>I>J>K>L>M>N>O>P>Q>R>S>T>U>V>W>X>Y>Z>[>\>]>^>_>`>a>b>c>d>e>f>g>h>i>j>k>l>m>n>o>p>q>r>s>t>u>v>w>x>y>z>{>~>|>}>!?"?#?$?%?&?'?(?)?*? ?,?-?.?/?0?1?2?3?4?5?6?7?8?9?:?;?<?=?>???@?A?B?C?D?E?F?G?H?I?J?K?L?M?N?O?P?Q?R?S?T?U?V?W?X?Y?Z?[?\?]?^?_?`?a?b?c?d?e?f?g?h?i?j?k?l?m?n?o?p?q?r?s?t?u?v?w?x?y?z?{?|?}?~?!@"@#@$@%@&@'@(@)@*@ @,@-@.@/@0@1@2@3@4@5@6@7@8@9@:@;@<@=@>@?@@@A@B@C@D@E@F@G@H@I@J@K@L@M@N@O@P@Q@R@S@T@U@V@W@X@Y@Z@[@\@]@^@_@`@a@b@c@d@e@f@g@h@i@j@k@l@m@n@o@p@q@r@s@t@u@v@w@x@y@z@{@|@}@~@!A"A#A$A%A&A'A(A)A*A A,A-A.A/A0A1A2A3A4A5A6A7A8A9A:A;A<A=A>A?A@AAABACADAEAFAGAHAIAJAKALAMANAOAPAQARASATAUAVAWAXAYAZA[A\A]A^A_A`AaAbAcAdAeAfAgAhAiAjAkAlAmAnAoApAqArAsAtAuAvAwAxAyAzA{A|A}A~A!B"B#B$B%B&B'B(B)B*B B,B-B.B0B/B1B2B3B4B5B7B6B8B9B:B;B<B=B>B@BABBBDBEBGBHBIBJBLBCBFBKBMBNBOBPBQBRBSBTBUBVBWBXBYBZB[B\B]B^B_B`BaBbBcBdBeBfBgBhBiBjBkBlBmB?BnBoBpBqBrBsBtBuBvBwBxByBzB{B|B}B~B!C"C#C$C%C&C'C(C)C*C C,C-C.C/C0C1C2C3C4C5C6C7C9C:C;C<C=C>C?C@CACBCCCDCECFCGCHC8CJCKCLCMCOCNCPCQCRCSCTCUCVCWCXCYCZC[CIC\C]C^C_C`CaCbCcCdCeCfCgChCiCjCkClCmCnCoCpCqCrCsCtCuCvCwCxCyCzC{C|C}C~C!D"D#D$D%D&D'D(D)D*D D,D-D.D/D0D1D2D3D4D5D6D7D8D9D:D;D<D=D>D?D@DADBDCDDDEDFDGDHDIDJDKDLDMDNDODPDQDRDSDTDUDVDWDXDYDZD[D\D]D^D_D`DaDbDcDdDeDfDgDhDiDjDkDlDmDnDoDpDqDrDsDtDuDvDwDxDyDzD{D|D}D~D!E"E#E$E%E&E'E(E)E*E E,E-E.E/E0E1E2E3E4E5E6E7E8E9E:E;E<E=E>E?E@EAEBECEDEEEFEGEHEIEJEKEMELENEOEPEQERESETEUEVEWEXEYEZE[E\E]E^E_E`EaEbEcEdEeEfEgEhEiEjEkElEmEnEoEpEqErEsEtEuEvEwExEyEzE{E|E}E~E!F"F#F$F%F&F'F(F)F*F F,F-F.F/F0F1F2F3F4F5F6F7F8F9F:F;F<F=F>F?F@FAFBFCFDFEFFFGFHFIFJFKFLFMFNFOFPFQFRFSFTFUFVFWFXFYFZF[F\F]F^F_F`F6GaFbFcFdFeFfFgFhFiFjFkFlFmFnFoFpFqFrFsFtFuFvFwFxFyFzF{F|F}F~F!G"G#G$G%G&G'G(G)G*G G,G-G.G/G0G1G2G3G4G5G7G8G9G:G;G<G=G>G?G@GAGBGCGDGEGFGGGHGIGJGKGLGMGNGOGPGQGRGSGTGUGVGWGXGYGZG[G\G]G^G_G`GaGbGcGdGeGfGgGhGiGjGkGlGmGnGoGpGqGrGsGtGuGvGwGxGyGzG{G|G}G~G!H"H#H$H%H&H'H(H)H*H H,H-H.H/H0H1H2H3H4H5H6H7H8H9H:H;H<H=H>H?H@HAHBHCHDHEHFHGHHHIHJHKHLHSHMHNHOHPHQHRHTHUHVHWHXHYHZH[H\H]H^H_H`HaHbHcHdHeHfHgHhHiHjHkHlHmHnHoHpHqHrHsHtHuHvHwHxHyHzH{H|H}H~H!I"I#I$I%I&I'I(I)I*I I,I-I.I/I0I1I2I3I4I5I6I7I8I9I:I;I<IAI=I>I?I@IBICIDIEIFIGIHIIIJIKILIMINIOIPIQIRISITIUIVIWIXIYIZI[I\I]I^I_I`IaIbIcIdIeIfIgIhIiIjIkIlImInIoIpIqIrIsItIuIvIwIxIyIzI{I|I}I~I!J"J#J$J%J&J'J(J)J*J J,J-J.J/J0J1J2J3J4J5J6J7J8J9J:J;J<J=J>J?J@JAJBJCJDJEJFJGJHJIJJJKJLJMJNJOJPJQJRJSJTJUJVJWJXJYJZJ[J\J]J^J_J`JaJbJcJdJeJfJgJhJiJjJkJlJmJnJoJpJqJrJsJtJuJvJwJxJyJzJ{J|J}J~J!K"K#K$K%K&K'K(K)K*K K,K-K.K/K0K1K2K3K4K5K6K7K8K9K:K;K<K=K>K?K@KAKBKCKDKEKFKGKHKIKJKKKLKMKNKOKPKQKRKSKTKUKVKWKXKYKZK[K\K]K^K_K`KaKbKcKdKeKfKgKhKiKjKkKlKmKnKoKpKqKrKsKtKuKvKwKxKyKzK{K|K}K~K!L"L#L$L%L&L'L(L)L*L L,L-L.L/L0L1L2L3L4L5L6L7L8L9L:L;L<L=L>L?L@LALBLCLDLELFLGLHLILJLKLLLMLNLOLPLQLRLSLTLULVLWLXLYLZL[L\L]L^L_L`LaLbLcLdLeLfLgLhLiLjLkLlLmLnLoLpLqLrLsLtLuLvLwLxLyLzL{L|L}L~L!M"M#M$M%M&M'M(M)M*M M,M-M.M/M0M1M2M3M4M5M6M7M8M9M:M;M<M=M>M?M@MAMBMCMDMEMFMGMHMIMJMKMLMMMNMOMPMQMRMSMTMUMVMWMXMYMZM[M\M]M^M_M`MaMbMcMdMeMfMgMhMiMjMkMlMmMnMoMpMqMrMsMtMuMvMwMxMyMzM{M|M}M~M!N"N$N%N&N'N(N)N#N*N N,N-N.N/N0N1N2N3N4N5N6N7N8N9N:N;N<N=N>N?N@NANBNCNDNENFNGNHNINJNKNLNMNNNONPNQNRNSNTNUNVNWNXNYNZN[N\N]N^N_N`NaNbNcNdNeNfNgNhNiNjNkNlNmNnNoNpNqNrNsNtNuNvNwNxNyNzN{N|N}N~N!O"O#O$O%O&O'O(O)O*O O,O-O.O/O0O1O2O3O4O5O6O7O8O9O:O;O<O=O>O?O@OAOBOCODOEOFOGOHOIOJOKOLOMONOOOPOQOROSOTOUOVOWOXOYOZO[O\O]O^O_O`OaObOcOdOeOfOgOhOiOjOkOlOmOnOoOpOqOrOtOuOvOsOwOxOyOzO{O|O}O~O!P"P#P$P%P&P'P(P)P*P P,P.P/P0P1P-P2P3P4P5P7P8P9P:P;P6P<P=P>P?P@PAPBPCPDPEPFPGPHPIPJPKPLPMPNPOPPPQPRPSPTPUPVPWPXPYPZP[P\P]P^P_P`PaPbPcPdPePfPgPhPiPjPkPlPmPnPoPpPqPrPsPtPuPvPwPxPyPzP{P|P}P~P!Q"Q#Q$Q%Q&Q'Q(Q)Q*Q Q,Q-Q.Q/Q0Q1Q2Q3Q4Q5Q6Q7Q8Q9Q:Q;Q<Q=Q>Q?Q@QAQBQCQDQEQFQGQHQIQJQKQLQMQNQOQPQQQRQSQTQUQVQWQXQYQZQ[Q\Q]Q^Q_Q`QaQbQcQdQeQfQgQhQiQjQkQlQmQnQoQpQqQrQsQtQuQvQwQxQyQzQ{Q|Q}Q~Q!R"R#R$R%R&R'R(R)R*R R,R-R.R/R0R1R2R3R4R5R6R7R8R9R:R;R<R=R>R?R@RARBRCRDRERFRGRHRIRJRKRLRMRNRORPRQRRRSRTRURVRWRXRYRZR[R\R]R^R_R`RaRbRcRdReRfRgRhRiRjRkRlRmRnRoRpRqRrRsRtRvRwRxRuRyRzR{R|R}R~R!S"S#S$S%S&S'S(S)S*S S,S-S.S/S0S1S2S3S4S5S6S7S8S9S:S;S<S=S>S?S@SASBSCSDSESFSGSHSISJSKSLSMSNSOSPSQSRSSSTSUSVSWSXSYSZS[S\S]S^S_S`SaSbScSdSeSfSgShSiSjSkSlSmSnSoSpSqSrSsStSuSvSwSxSySzS{S|S}S~S!T"T#T$T%T&T'T(T)T*T T,T-T.T/T0T1T2T4T5T6T7T8T9T:T;T<T=T>T3T?T@TATBTCTDTETFTGTHTITJTKTLTMTNTOTPTQTRTSTTTUTVTWTXTYTZT[T\T]T^T_T`TaTbTcTdTeTfTgThTiTjTlTkTmTnToTpTqTrTsTtTuTvTwTxTyTzT{T|T}T~T!U"U#U$U%U&U'U(U)U*U U,U-U.U/U0U1U2U3U4U5U6U7U8U9U:U;U<U=U>U?U@UAUBUCUDUEUFUGUHUIUJUKULUMUNUOUPUQURUSUTUUUVUWUXUYUZU[U\U]U^U_U`UaUbUcUdUeUfUgUhUiUjUkUlUmUnUoUpUqUrUsUtUuUvUwUxUyUzU{U|U}U~U!V"V#V$V%V&V'V(V)V*V V,V-V.V/V0V1V2V3V4V5V6V7V8V9V:V;V<V=V>V?V@VAVBVCVDVEVGVHVIVJVKVFVLVMVNVOVPVQVRVSVTVVVWVXVUVYVZV[V\V]V^V_V`VaVbVcVdVeVfVgVhViVjVkVlVmVnVoVpVqVrVsVtVuVvVwVxVyVzV{V|V}V~V!W"W#W$W%W&W'W(W)W*W W,W-W.W/W0W1W2W3W4W5W6W7W8W9W:W;W<W=W>W?W@WAWBWCWDWEWFWGWHWIWJWKWLWMWNWOWPWQWRWSWTWUWVWWWXWYWZW[W\W]W^W_W`WaWbWdWeWfWgWhWiWjWkWlWmWnWoWpWqWrWsWtWuWvWwWxWyW>XcWzW{W|W}W~W!X"X#X$X%X&X'X(X)X*X X,X-X.X/X0X1X2X3XLX4X5X6X7X8X9X:X;X<X=X?X@XAXBXCXDXEXFXGXHXIXJXKXMXNXOXPXQXRXSXTXUXVXWXXXYXZX[X\X]X^X_X`XaXbXcXdXeXfXgXhXiXjXkXlXmXnXoXpXqXrXsXtXuXvXwXxXyXzX{X|X}X~X!Y"Y#Y$Y%Y&Y'Y(Y*Y Y,Y-Y.Y/Y0Y1Y2Y3Y4Y5Y6Y7Y8Y9Y:Y;Y<Y)Y=Y>Y?Y@YAYBYCYDYEYFYGYHYIYJYKYLYMYNYOYPYQYRYSYTYUYVYWYXYYYZY[Y\Y]Y^Y_Y`YaYbYcYdYeYfYtYgYhYiYjYkYlYmYnYoYpYqYrYsYuYvYwYxYyYzY{Y|Y}Y~Y!Z"Z#Z$Z%Z&Z'Z(Z)Z*Z Z,Z-Z.Z/Z0Z1Z2Z3Z4Z5Z6Zf87Z8Z9Z:Z;Z<Z=Z>Z?Z@ZAZBZCZDZEZFZGZHZIZJZKZmZLZMZNZOZPZQZRZSZTZUZVZWZXZYZZZ[Z\Z]Z^Z_Z`ZaZbZcZdZeZfZgZhZiZjZkZlZnZoZpZqZrZsZtZuZvZwZxZyZzZ{Z|Z}Z~Z!["[#[$[%[&['[([)[*[ [,[-[.[/[0[1[2[3[4[5[6[7[8[9[:[;[<[=[>[?[@[A[B[C[D[E[F[G[H[I[J[K[L[M[N[O[P[Q[R[S[T[U[V[W[X[Y[Z[[[\[][^[_[`[a[b[c[d[e[f[g[h[i[j[k[l[m[n[p[q[r[s[o[t[u[v[w[x[y[z[{[|[}[~[!\"\#\$\%\&\'\(\)\*\ \,\-\.\/\0\1\2\3\4\5\6\7\8\9\:\;\<\=\>\?\@\A\B\C\D\E\F\G\H\I\J\K\L\M\N\O\P\Q\R\S\T\U\V\W\X\Y\Z\[\\\]\^\_\`\a\b\c\d\e\f\g\h\i\j\k\l\m\n\o\p\q\r\s\t\u\v\w\x\y\z\{\|\}\~\!]"]#]$]%]&]'](])]*] ],]-].]/]0]1]2]3]4]5]6]7]8]9]:];]<]=]>]?]@]A]B]C]D]E]F]G]H]I]J]K]L]M]N]O]P]Q]R]S]T]U]V]W]X]Y]Z][]\]]]^]_]`]a]b]c]d]e]f]g]h]i]j]k]l]m]n]o]p]q]r]s]t]u]v]w]x]y]z]{]|]}]~]!^"^#^$^%^&^'^(^)^*^ ^,^-^.^/^0^1^2^3^4^5^6^7^8^9^?^:^;^<^=^>^@^A^B^C^D^E^F^G^H^I^N^J^K^L^M^O^P^Q^R^S^T^U^V^W^X^Y^Z^[^\^]^^^_^`^a^b^c^d^e^f^g^h^i^j^k^l^m^n^o^r^p^q^s^t^u^v^w^x^y^z^{^|^}^~^!_"_#_$_%_&_'_(_)_*_ _,_-_._/_0_2_1_3_4_5_6_7_8_9_:_;_<_=_>_?_@_A_B_C_D_E_F_G_H_I_J_K_L_M_N_O_P_Q_R_S_T_U_V_W_X_Y_Z_[_\_]_o_^___`_a_b_c_d_e_f_g_h_i_j_k_l_m_n_p_q_r_s_t_u_v_w_x_y_z_{_|_}_~_!`"`#`$`%`&`'`(`)`*` `,`-`.`/`0`1`2`3`4`5`6`7`8`9`:`;`<`=`>`?`@`A`B`C`D`E`F`G`H`I`J`K`L`M`N`O`P`Q`R`S`T`U`V`W`X`Y`Z`[`\`]`d`^`_```a`b`c`e`f`g`h`i`j`k`l`m`n`o`p`q`r`s`t`u`v`w`x`y`z`{`|`}`~`!a"a#a$a%a&a'a(a)a*a a,a-a.a/a0a1a2a3a4a5a6a7a8a9a:a;a<a=a>a?a@aAaBaCaDaEaFaGaHaIaJaKaLaMaNaOaPaQaRaTaUaVaSaWaXaYaZa[a\a]a^a_a`aaabacadaeafagahaiajakalamanaoapaqarasatauavawaxayaza{a}a~a!b"b#b$b|a-b%b&b'b(b)b*b b,b/b0b1b2b.b3b4b5b6b7b8b9b:b;b<b=b>b?b@bAbBbCbEbFbDbGbHbIbJbKbLbMbNbObPbQbRbSbTbUbVbWbXbYbZb[b\b]b^b_b`babbbcbdbebfbgbhbibjbkblbmbnbobpbqbrbsbtbubvbwbxbybzb{b|b}b~b!c"c#c$c%c&c'c(c)c*c c,c-c.c/c0c1c2c3c4c5c6c7c8c9c:c;c<c=c>c?c@cAcBcCcDcEcFcGcHcIcJcKcLcMcNcOcPcQcRcScTcUcVcWcXcYcZc[c\c]c^c_c`cacbcccdcecfcgchcicjckclcmcncocpcqcrcsctcucvcwcxcyczc{c|c}c~c!d"d#d$d%d&d'd(d)d*d d,d-d.d/d0d1d2d3d4d5d6d7d8d9d:d;d<d=d>d?d@dAdBdCdDdEdFdGdHdIdJdKdLdMdNdOdPdQdRdSdTdUdVdWdXdYdZd[d\d]d^d_d`dadbdcdddedfdgdhdidjdkdldmdndodpdqdrdsdtdudvdwdxdydzd{d|d}d~d!e"e#e$e%e&e'e(e)e*e e,e-e.e/e0e1e2e3e4e5e;e6e7e8e9e:e<e=e>e?e@eAeBeCeDeEeFeGeHeIeJeKeLeMeOePeNeQeReSeTeUeVeWeXeYeZe[e\e]e^e_e`eaebecedeeefehegeiejekelemeneoepeqereseteuevewexeyeze|e{e}e~e!f"f#f$f%f&f'f(f)f*f f,f-f.f/f0f1f2f3f4f5f6f7f8f9f:f;f<f=f>f?f@fAfBfCfDfEfFfGfHfIfJfKfLfMfNfOfPfQfRfSfTfUfVfWfXfYfZf[f\f]f^f_f`fafbfcfdfefffgfhfifjfkflfmfnfofpfqfrfsfufvfwfxfyfzf{f|f}f~f!g"g#g$g%g&g'g(g)g*g g,g-g.g/g0g1g2g3g4g5g6g7g8g9g:g;g<g=g>g?g@gAgBgCgDgEgFgGgHgIgJgKgLgMgNgOgPgQgRgSgTgUgVgWgXgYgZg[g\g]g^g_g`gagbgcgdgegfgjggghgigkglgmgngogpgqgrgsgtgvgwgxgygugzg{g|g}g(h~g!h"h#h$h%h&h'h)h*h h,h-h.h/h0h1h2h3h4h5h6h7h8h9h:h;h<h=h>h?h@hAhBhChDhEhFhGhHhIhJhKhLhMhNhOhPhQhRhShThUhVhWhXhYhZh[h\h]h^h_h`hahbhchdhehfhghhhihjhkhlhmhnhohphqhrhshthuhvhwhxhyhzh{h|h}h~h!i"i#i$i%i&i'i(i)i*i i,i-i.i/i0i1i2i3i4i5i6i7i8i9i:i;i<i=i>i?i@iAiBiCiDiEiFiGiHiIiJiLiMiKiNiOiPiQiRiSiTiUiViWiXiYiZi[i\i]i^i_i`iaibicidieifigihiiijikiliminioipiqirisitiuiviwixiyizi{i|i}i~i!j"j#j$j%j&j'j(j)j*j j,j-j.j/j0j1j2j3j4j5j6j7j8j9j:j;j<j=j>j?j@jAjBjCjDjEjFjGjHjIjJjKjLjMjNjOjPjQjRjSjTjUjVjWjXjYjZj[j\j]j^j_j`jajbjcjdjejfjgjhjijjjkjljmjnjojpjqjrjsjtjujvjwjxjyjzj{j|j}j~j!k"k#k$k%k&k'k(k)k*k k,k-k.k/k0k1k2k3k4k5k6k7k8k9k:k;k<k=k>k?k@kAkBkCkDkEkFkGkHkIkPkJkKkLkMkRkNkOkQkSkTkUkVkWkXkYkZk[k\k^k]k_k`kakbkckdkekfkgkhkikjkkkmknkoklkpkqkrksktkvkukwkxkykzk{k|k}k~k!l"l#l$l%l&l'l(l)l*l l,l-l.l/l0l1l2l3l4l5l6l7l8l9l:l;l<l=l>l?l@lAlBlClDlElFlGlHlIlJlKlLlNlOlMlPlQlRlSlTlUlVlWlXlYlZl[l\l]l^l_l`lalblcldlelflglhliljlklllmlnlolplqlrlsltlulvlwlxlylzl{l|l}l~l!m"m#m$m%m&m'm(m)m*m m,m-m.m/m0m1m2m3m4m5m6m7m8m9m:m;m<m=m>m?m@mAmBmCmDmEmFmGmHmImJmKmLmMmNmOmPmQmRmSmTmUmVmWmXmYmZm[m\m]m^m_m`mambmcm7"

2!2"2#2$2%2&2'2(2)2

1 1!1"1#1$1%1&1'1(1)1

% %!%"%#%$%%%&%'%(%)%*% %,%-%.%/%0%1%2%3%4%5%6%7%8%9%:%;%<$=%>%?%@%A%B%C%D%E%F%G%H%I%J%K%

W%f?i

e.lFO

urlsS

u%urrGS

]']&].]$]

s"s9s%s,s8s1sPsMsWs`slsos~s

x<x%x,x#x)xNxmxVxWx&xPxGxLxjx

{.{1{ {%{${3{>{

h!l!'!c!@!A!$("(((&(:(,(*(0(.(B!4(2(9(!(%('()(-(1(#( (/(3(5(6(7(8(&!%!!&"&#&$&%&&&'&(&)&*& &,&-&.&/&0&1&2&3&4&5&6&7&8&A&B&C&D&E&F&G&H&I&J&K&L&M&N&O&P&Q&R&S&T&U&V&W&X&''!'"'#'$'%'&'(')'*' ','-'.'/'0'1'2'3'4'5'6'7'8'9':';'<'='>'?'@'A'Q'R'S'T'U'V'X'Y'Z'['\']'^'_'`'a'b'c'd'e'f'g'h'i'j'k'l'm'n'o'p'q'W'*!,!.!/!0!1!-!k!d!e!y!f!m!q"r"s"t"u"v"w"x"y"z"{"|"{!|!z!}!J!G!F!L!X!^!O!N!D!E!I!H!R!S!`!_!C!K!W!V!U!Y!T!\!]!Z![!Q!M!P!Y"Z"["\"]"^"_"`"a"b"E"F"G"H"I"J"K"L"M"N"O"P"Q"R"S"T"U"V"W"X"1"2"3"4"5"6"7"8"9":";"<"=">"?"@"A"B"C"D"$)%)&)')()))*) ),)-).)/)0)1)2)3)4)5)6)7)8)9):);)<)=)>)?)@)A)B)C)D)E)F)G)H)I)J)K)L)M)N)O)P)Q)R)S)T)U)V)W)X)Y)Z)[)\)])^)_)`)a)b)c)d)e)f)g)h)i)j)k)l)m)n)o)v!u!x!w!t!s!p!r!q!o!n!b!a!!!"!#!(!)!4!5!6!7!8!9!:!;!>!?!~!2!3!<!=!!$"$#$$$%$&$'$($)$*$ $,$-$.$/$0$1$2$3$4$5$6$7$8$9$:$;$<$=$>$?$@$A$B$C$D$E$F$G$H$I$J$K$L$M$N$O$P$Q$R$S$T$U$V$W$X$Y$Z$[$\$]$^$_$`$a$b$c$d$e$f$g$h$i$j$k$l$m$n$o$p$q$r$s$!%"%#%$%%%&%'%(%)%*% %,%-%.%/%0%1%2%3%4%5%6%7%8%9%:%;%<$=%>%?%@%A%B%C%D%E%F%G%H%I%J%K%L%M%N%O%P%Q%R%S%T%U%V%W%X%Y%Z%[%\%]%^%_%`%a%b%c%d%e%f%g%h%i%j%k%l%m%n%o%p%q%r%s%t%u%v%$!E(F(G(H(I(J(K(L(M(N(O(P(Q(R(S(T(U(V(W(X(Y(Z([(\(](^(_(`(a(b(c(d(e(f(g(h(i(e"f"g"h"i"j"k"l"m"n";R!6_FrMIU}HOIBO"X;2kS$Xs3(WRG'X@JpG{15RT4 6?K)X*6=AOQ%I-Xv8>Q\cPVa7.4YA<XhM$5*NwVv@Y>/XKDC>1X4CeR.VZN'Uu:&7V@9FREGGT9K3RR?XE>rF2R0OgOiJ@XrBRBiH,GKAhSyUBJ~6!XZSw?FT%;AXeN.>(XGQ)P=XoYvM:?;=%:`Rz2`:6DmO)>$MAAWGqYtYKHiXZR2JJHlXjXFXv=MFp3kXq=i=THS4XBV2PWKJ{KLU68IOZYpX*GnXz4nATRmXGRoXGCvQYVrXuX~<[<NH]7B7sFxXARiN?<|7%7]PZVESo;a;qX!I0N 4sXKIvXWBwX1NyX.2@9#Yi0fAlIEKFK$Yh5 5;NM5!WtWSSeLN:"Y\Y`S}Xp7wW~XzX!YcD6StX]Y{XeEP@pQ[0Q<&Y%Y,Y.Y Y9J)Y6V^3(Y}@LJ*Y'Y0Y16)9@R@OBBD=lU`2HGk?-Y/YjNn:VGc1Y4m64Y!?^YNG~@8YWK}75Y7Y#1aS9YEP6Y1Y2Y)A3Ys<^P)8c>=Y:Y30BYDY61?Y95s>HLr:PRCYh= 3EYk>FY;Y_D>[email protected]<JY<YKY FIYvW#M!=LY<E5MMYGY%3~?58|@x0v4NYOY"4PY_4A0QY5IqORYEAVY.IUYTYWY[K)='FSYXYYYeH\@y6#XJT*TVPd3WUHOb9K?bCR6CMnYpY3556$>kH HK0 9yAbY<@29X9KPx1dF_>d5HWxQf<^J=<fYgXZDT8=Ha2YT0CaC"Z_H4P|>)EZ9#Z)T$Z{Y,6k7y1|Ye3v>v?1Rd@36~Y}Y;>`F<W!Z9Ar5hAu<U4]A}D8<27o7lY>F-?K;J5I[WP9M<0v3w;J[/:dT65s5VXPHV7PGWX/?;[XXLP.;>kPAuArTU844u3>IPEYE{@p1YXN9=5ZXFV"K/H2IL4L?t9[X\Xg6A<jLwO]X0GP9#=^LJF`X^X_X~0g>#Jt<18n8bXK=dXcX|EeXfX&A0Hl0&9S<qN=[SA/6zV,EY=>[?[x@">M@@[FJ*2BScC QB[U@C[1?<DZGD[hYWI49pNHT|0R4YPiYK^kY0X/;11W3NXQT3=o?;OPXK7QX%FxG=RRXdD.J'G&X}IgN\;k0*;-P01dW?W%5tBOD)272e12_<U(?,BUX1BTXTN`[email protected]!S#N4<4HQBm>6PaZdG'3r6|Lz@w@9QaQGX^2e@q:HX-TaOIXJXCOx3G>KXL[%HXO~HN2VSf20<QS K47"7eJ!H\Jd1pPQEE[~5Z?E9d>mA6_5_;VP=YUH0#6I?(L3_7JRSOX6RE:>K>L7_p54_uST3w8:_O:*<u5,M{Cs:t@BMrO8_EO@B9_pB}>_ALMwRM7A_D_q7I0V6T7,:}LT?1KtF(VE_bN33|N54GNp:aN=Q@_t4J3f8;_ED<_=_>_;E?_B_1TC_:GXNXDJ_O_\VI_Z_6NG:N_H_^EkIt:|CW>F_M_XE&UM:L>=S@8dVG_>9'?|AK_L_P_[_e_W_V_IWc_d_ke'RR_)?[TH?T_LO]_JQ^_'07FS_e:_6[M~9UT__lO%0g_Q_FQU_X_Y_\_);`_a_b_f_h_4Sg86Ej_ZI(ADD^?xO\Un_82_:l_A[dQtK=4&0q_FLr_m_i_k_o_p_=;s_t_#;[J(N'`*3&`!`~_YM|_z_P?DWLIx_!0}_{_"`(`H7!F6I2@u_>EDXy_vD#`$`%`%P4`dL1`&?/`9N `FI.@.`m:0:)`v_3`8`-49`2OH:0`zP,`{Tw_gE-`wS6`7`D`aP<`I`J`>`*`$IA`2`HJC`5`KNCKM`F`B`K`:`?`@`E`G`H`L`;`TKU`V`R`P`N<Q`B8EXjPoBO`=`T`S`W`\`X`vV03lW;KZ`{NY:a`]`-Rb`[`Y`_```^`d`wF,XkTf`IJe`A8g`h`i`c`?:gLj`yOk`BH@=RDl`m`tGDKn`X;6XrRo`EMZ6q`0T'@Q4'Np`r`L9z9<Ms`TFt`2T&Hv`u`w`AM%JZTW[Y[X[g9\[][X5Z[[[!3_[x;7V`[y>;7P[.L2?5;xWS?i?a<3L^[S0kNX79WBF$@9Lg[a[:Fc[h[wEj[i[@?f[e[94,@"Bb[d[MPm[]@r[b6s[R[89 Tl[Q?p[Q[f5k[e?n[q[y[!9#0qBG3o[x[RFt[u[w[v[~[rS:2}[$\{[z[|[`Ey;#\%\CLQ6@]!\"\5Gi6'\&\)\$1L50?_QB6(\zKsk\K~KAL{H*\nL \S[/\,\3>{J-\JI9D=G.\vTfP DU6T[Z1U[V[>:@H?JIH3WyIG?x:<R:b&48148DOgY&ObMmY`69R;99b7bs4lL Lr72XkQ;:'J7MDRd?P<a6E^F^<[YQfFNDn7\7|?`WuF<1H^1=WLJ^I^l5]IB0.E ELDi<}KC:yegHze}M1W>8hBQH{eJ6K<}Q!fnC$f~e%fWMA7|e}e#f]D(f'fCC^F*f7D"f<Jc=C9&fUP/N)f0f&R*=-f/fQ@LR'<1fvRKW~M^M&B f,f?=.f3f2f6f8foDHDj>oI7fp6dCiS4f5f"H=f9fEFqM;f<fi;>f:f7@$S?ftICfDfvP=CDCBfAfGf1OtkJfEf^<)I5<SOHfIfNfPfQfKfU5LfOf[DFfMfRfTfSfUfxYVfWfSW]f^fW?PTVWf4oKZfCXNW"POC_f><B9[f'Q":OB XkJne\fu7fHuD2e~D|K3e,UnSXJ20NKjMj:5e4eZWY9fV(6pMKR&15Jh3sIM?{PRJ6eB;\O,9WT&:gQ|OR<7e]Hm?v1^KE<D<zR\C\?;8BC.:"T^G/Dl2Q9;eHA/U<e>eg4T6BK0Q<5YJb7dI =>NpW!PYI{6Xfb<>3PIYf"3L^HSM^"RN^M>O^,J|R_3jeaD!>2NrDV>(Fc2S>|GkLl=]N:JAFle<P9UmetJ@MEBoeDBpexeMM=IYR(alSjKqF,a'a)a*a/am2 aZ8-a.a0a:51a3a8aRQ6a5akA7a@T2a:a604ay?9a;a>a<aEV?O=a?aMBk6xSMGe7~>@aAaGag3iF^4BQHaFaEaCaBa@18UDaKaLaJazoSaRa6GIaNaPaTaQaMaOaUaVaWaXaZa[a!N]g(4]V2Q23$9sWIG^>.9WNn2O[:<QRHKM0oOcYm=R1PJ<2'K 7&J#Ox`JU{`z`AE{L1Ay`cV/2DV[5x4!V/Oo0|`!a#3}`~`1C]C"ay7O;#a;D$a%a&a14I8=FjD"2RP[gC;WSDSc9Ob/WlGS124QbrP.BPbb?&SW5Rbj5mC}8.8SEO7TbSbH6yW%MXbVb|J5?9SUbWb.AH@[bZb*@NA\b]b^bH[SQ"M(=C^%X*?M[lRzF*ED^W1._=J1_-9}R%8k:Z3\5EUVCRO!;seretedMuH/5?Gve0lfei915<BhegeieMRjaNP.MeQJ2k1r1mECU0S\a]a[R93K1yMwU^a6>}4_a\:`a2;IBaalP=MbaC5GEcadaySea-Qfa"NgaB5haU;DP`bX1dRabI<LHcb~l}l/_bb>V|M&CCcRVgbhbGSlbl?mbeb@3nDnbCPv:ib^73;,LKKdbfbjbkbwbtbuTsb-EzUBE@2obrb/A<K!5yb1<qbTP9TubV9vbSGpb\W!mxb%m~bQJ5AP;V?c:!K&m#m"mV;'mtP$m^:w6!c26qL'9"O!GR?q6zb{b}b|bUD"cAS'cDG$O)c7:(cZ;#c$c*c&crNFS<;CTzD(m|P%cuC-c/12cB<,c?5iG0c*>oMs;hL/c1c'O.c)N];k5e>R2M391 cQ2,5_9h6kO7cL;GHJP8cn3)mzSdS*m9cbR5c^SP83c6c_74c"@:c8TH4;cE;wIeI=D m}B[;.??N<c6?o1wT>c-m?c):,m=c@c6:.68PC0.m/mA@Ac3EBc2\0mj8lN'jgPyJVH7OI3RNd=^cr;(j=U]F)j*j,j j.j-jX=/j>BA4w4';flel?7yKb1glHIhlilVJP^E2zTKFG0r4SHPM8?[?$G4V)@Q^(IoQ$Eg063EHb0v7zEs6RUP3<<-3q>Q0VRcJ%W6M669?[U'8WER^Y?UB@G$;(1jE{E'L'1V5(DS^:Qi3rCw7tV#5p24DiD-@T^h0DE`AU9\>XMN0OMV^P>>WU^PU]0bD#Bp<5S9@!E&2qT(@CJW^|U09-H)KY^=?4F'W0JCDV3R98V|j40f?tLZM?VNBNN"L.PSD25X^uU7<S;$02El4qU}jZ^&MlMfN\^1M&@=W[^F04:SIsDh>62L@pKq<;;75uEf^c^]>_^74]=`^mDFO`5^6ZJt5e^FUa^ML~FEE4Rr>SB=L83S=X?FMZQk4d^]^g^~j0Bb^@V'5t2h^r^m^q^`HaWo^hCaLe2>Rn^k^UN'4 ?>>R=i^.T^^j^?@l^s2i8'BA=u^x^ 2$4j4&Iv^QKc8w^z^y^BLa0n4:e/Pk2!kt^cIs^Z0!Rw1/Lp^$K*U{^]4&D}^~C!D!_LA|^o>2FE3vH:K~^$_2W73CAKG%2i4 WlD"_#_%_3:&_^@CIY2fG'_\G(_"kSK*_)_A2JE _\TAH,_p>-_'V7j6kUJ|XD8ž7~UJ9'PMtP5tCH>7k=0L=2AV1(3R8"IX68k4>}JCG{Us7DN Us13l_05l76OAzu1PeUSNo=b3 86U=mO69KBP=76l)JTE9l8lCB7l}P:l;leW<l=llF^NH<UH)5I><VgT.QqP8j9j:j5:1Ju?zM@j:0>j%@;j}2wCh;WRtN?j<jCjGP3S:4ACrWQUGJEjDjGjFjgVTOKjN;z=NILj9I~OJjNTMjOjmMIjNjnN^;?3UF0>zNgG'>PjGV@A]TQj>ORjnJ/E50TjSj_t:D)1_eUjoJVjWjXFXjYj;TzG7R|8Bj\2|BxTfLnWBTPSCksE~7Tk7K^kJ@{M/3ZF|k>D4N)D>1}TuJlVSFd6z;`P1IST(HK8>h<I;hn@SPD2e4<hHUE6=hxJ\8uL4@nQ?hBh<:-1\==jChFhKhLhIKe0 <99AhwMJhvNmUVADh6C{9&VHh`JfT@hEhGh9Gc7Ih]?RhWhUh\<O<[h^hZhz1X03DL8bF>HaHOhThVhq9XhuW{D\hi2Qhm<B?MhyVxAq2_hAJYh$Uj1;UNhPh06Sh]h8@wJ(K\Fu@ih#PrhjV`hahyQK:y8q8TTohnhlhp9RLfh&Nr?80qhph@Wdh)M#I8;[=jhbhcheh55ghEGkhmh0=.Wxhuh0Mvh:Ahh7Cp0thwh#9RINC`Nf@sK]L5PaJshl<yh^CeFw9t0XW,<oEDL&i-I"ib@C?~hW9{h$iNR#i2V5W'i7=|h}h!iVM,R2i)i*4;4 i(P%i~3,ic@*i9i8i.izh(i,?1i:i%B/iE8-i\S4i5i7iGiF@Ei0i;iq0<i%U>i?iAiqA6H=iBiCi3i6i1;@iw<DiFiJiNi[2Hi.7KiLiAU#DXia:Ii#STiWiPiOiAGRiYiH3SipOMiw3ViZi4L-OUi\i[i^iQi]i_iJC7GN46;@P#l7E{S$l%l[Fn?&l'l*P8Gh8(l9V}UK4=2dNgFaMu4@K_<bicijQeiy4di3QbJP2hifigi3Viijikili/l9EN6sRn5Y;1lcRcN8D?C>69XH1O1Q1~EP1 C1U$kA::L%k'k(k&k)k k*k,kOJ5XqC%CxF-kJD.k/k0kU7z71kbG3k$:uQ102k4k*5HBhG5k.K_c@S[Y!M-VsG`Yc;::bc O`cGI9:4QacjH/9-=X3[N@LhcictM-L3<jckcZP{FZ7_GJRVNdclcrIA3gccFec3mfc3IfE59;Ccc=E$AYBW2mc&;-DpcZ>{cucS:P7MSNVSUA94UXQ9PvG*H42ZCnc|coc(7wctc:7"Evc]E(2|F`D"Wa@yczc}c)Lsc>SC14mqcrcxc:PCFsT~c`='d&dsQ#d)dwH4O(d.deB46r="di:*d,d}6^V2d-d!dn;]M"GIEwA$d3G,===%dGWb2 dC</dk;0d(E1dcU#?:d7d;d=dVFF:K@!84d!T#:~=<d?MyD{OfI?SQO3d8d9diLNLT@5d0A6dPNA;S5sH'=GU,I"8JdLdDQ:R-:T:Cdm5MW@d}O?d\AJLgJWDTLHdGdAdDd-5YSFdyRc44;nI>4l;MQmL5meG(TKdUWBd$=EdfSIdxI>deS~GI6|T32WdBNMd<N[8VdJ?NSlCHEXdDMOdTdUd~:fO?URdPdNdeM*J#@&=SdH8gd4T[doAidgR_d`d*O]KZdQded\HcdgDbdad|3hda5LWfd,;RWOLxkddv9MVYd\dzB^dKBD@PBu12LN5od/FaFud)Bl@]Qnd.Dmdvdtd~B]dpd~JDUqdzQkdldrd NKE1G:BjdJA6L13{dsdzd}d|dN3:3wdydxdlE=@hT"eD0$e#e$<%e!e~dt1(e)e&e'e*eYF e-e,e/e.e`90e1ep;alpCF5R;iAnTD>FWVTS2>lAj/B64WQ432H;?@lKV?lAlElf>?LZE<>Fl~1Dl(Uc5Bl6Ac3Cl8KC@~LRAHlf:S@rVLQ>?37UIGlb;LL}=HH)OiMkEi7IQ8:IlJl@;Klbl:1Y79=LlfQMl;HQlSlM;e<Ol7I:CclUUPlsVRlNlTlUl?I(O\P,Q[HVluNlJZlYl>0WlXldl<HGA\l`Q[loT]lF[^l,1_l`l&W@E<k.0t>88/RV0y53X,K]c,Ff0FE9k:k;k@Q#Erj2D5DN@sjADoNpjtj|I#GXL~Nujvj,Og@wj?6xjyjzj{jqj.Hka87lama4WnaoaLSqaq?paR571sara|:ta79Q>|D]:F=uawa@6AO(JvaxU|Sxa|ayazaj@~a!bG@{a}a%bTA#b(b~2"bMCB2'b&b$b)b bIPmV(C,bWO.bo:`i-b*b ;3T0b/bai1b2b3b!L4b5b~PJBqSuM`gagA>jBdgcgfM5Cbg7;VOaAighgtg#2jgfglgkg:IdUeg)7ggngsgiVmgrgqg`0ugrGE@m@pApgvgvK"h!hAWzgyg{gwg~g}g|gUAYG}ECEmG#h&h%h'hw:xg$hpH*I)he9~Q(h*h-h.h'A/h0h,h4h h1h5h2h3h7h6hO9,p-p0Fj0?H_MMN1j2j?FI43jgUy]4j5j6jJ80_uIpLzI{ICS&K&8.pB18eoLISW<jIg5PDi5.n-;^g/n)32n1ng=0n7NOEtAN[3nsPTBhF,74nk3{;5n\g6n.=bqhJIRZp[p\pFAm8N>^p1E]pqQ`pL0j=_R_p/4h7fpep#FapbpC4cpnU[LR>2<hpgpdp!2"V8S7>,HjpwQLV[:ip;64M&F!Akpnpmppplp>;op5LrpU3T1sptpvpa4qpwpzpxpup}pyp|p~p!qAN$q#qvA{p]Jq4q11L&q'q,qNU)q3H"q q(q%q*q)0-q/q1q0q.q"Q2q3qo9G5W0Y0mTD5T=J;'p^8(p(0)pnM*p p$FeVdqeqsC[SQVhE/SfRAn;05UNQ`<P:x?G8A5LE"JKCBn?D"6lm$C1V`OomNE\6!Jmmpmqm<C4?nmtmrmfU_Csmvm#U#QumPCwmt?l>xmwL[QEWvU|m{mymzm}m&>/K!n=6"n@D~m^=G2C6%n:X#n&niCr3'n$n9O(nwB)n*n ^3FFGuVI52K n M,n0U-nDvG[#4,Cfq8JSR*VroX>C=soL6 0/J6m7myN/7s?8mkB0I9mvF3?<mxEPQ)W:m;mbQ?m@mDmHmFmNmhUImGm>miEFFiIRTAmBmCmEmy@!4h9PmQmJmOmxN6KLmMmuORmrA2SKm7Ho<pEVmo55B-0iK.1TmkMb5UmSmWmz5XmYm\mL1vEn<Zm<Lj2[mkDE4u0_mZ@h4ME]mD?^m%D`mamcmWAG;8=bmdmfmemgm>Jjlq@gIklnFllmFmlplfWslqlnlol#WqInKtlrliOvl1F@<ul;5v;wlwY{=;Bxlyl#8zl{l|lmS.Xk@]GL:cP=K:MQ8|1oGVVF?kCuoXCbWwoS3XGmQHVxovo};F3U=FR`;!O|o{oyoL3TI0K~o^0IV}om3UvHN"p!p>5Z<|;e8BD#pkK&p(Q?>nG6q7qU?)48q;MTG-U9q:qOG$ROV;qQ=04=>\4QN_?=qz?<q?q>q@qAq~A"AzJ>U:>9>BU"?/M5q_=K6qVCsDsM8FsGsJ0EsIsqKKs&PJ1HsOsQ5WsRsTsSs{7?1NsJsZ5PsQsUsMsc<}AVsZsLsH5n=\s$7p?~V2Mp4_2XsYs8I]s^sas_scsbs[sj?o3`s)Gr<ks?9ds-2~;cKmsis\9nsesfsjsaBlsoshs}<dOpsgsrs-W*Fssqs(B]8usts[4vswsxs:@i@qE{szsX4~sys|s}s!t#tI;"t$t>2&t%t.<WCaY`@LtQW[7Nt#AIFV43UPtOtQtZKRtAT`V`78A;ASt,>b4TtUt >Vt[tWtZt}:XtYtb8GL\tZ2SCcT7?]t4Eit5OINXKwKt=OW[@uPjtktltcw17mtkWntyf@>zfl:{fKO|f<T6<}f~fM<RH3N!g?4"g4IY8ID]WZBW7=VFND7&E#g_O$g%g&g7AiWpI8O/VUV'gm0(g)g\IoR->*gs0^Ha= gFH,gf;x8$Q-ggBx>J=3M.g/gn>ePgKPLL<0g(<wP1gxP2g3gB44g5g~I,N`C7gA1q38g9g[W@U:gLB:W;g<g=gj<eCB@>g?g)<@gAg6gP6BgCgDg:;^5FB`1Eg5TFg?8HgGgl7Igx2JgKgLgMgNgOgPg'SuKQgRgSgTgIIUgVgWgXgYgI=Zg>sW81H?s@sAs^9xMhX1:^B7n#79n8nU0;nVUoWCV=npJ<n>n@n?nrQ<G@Ca8gAFt_PGt[O:HHtItJtKtzY~8qepS`tLNa34qnRathObtLGT5d4dtctetftgt2:?0ht-7mR RO@<?#k_UHjsqx6#KMDgqhq{8iqD:ETR0jqkqlqmqnqoqqqpqUErqz6tq.RG^JK\3"5"9tDuqvqDA{A0Vwqxq*A8F[>yqO4zq2m1m`K^RAKXUbH_@!<Ak$PbVG6X8@kN8?k&3I9 Vt7J7g<>7FkGk90O?Ek}SHkIkN7BkDkvIWVMU2POk8NPk(531Rk%LVESkQk_ENk$JUk{0z:7XcqJkKkLkMkVk@fYkh?HRWk\kl8Xk:=XP70]k\D,V`4vB9<Zk[k`TjFTD_k'EuY12dkE=bkck,8QMekak3A"FsLfk0@8Rgk/8-8hk;GsMjkkkmkHPrknkqkyH|Qlkik98YOeDokpkZLHMr0vkuk22`8wkl1EL$D%Oyk"lrEzkEI_b~kNM!l[17S\R}k{k<30jTW tt3AVBViUJ>'t(R(t)t*tK>_S`IaIBsfJrL6b4KhN[V-t.t/t2t=:3tc00t1t"=U26t7tf602OO4t,45t8t9t'M:t;t<tRK=t>t?t^t<Ah< I^Que3\UR4\,05\Z=9\BX7\sSVI:\6\;\"C<\E\=\_N%VO\M\R\f= B8\K\N\>\R7E0G\>PA\(;<7L\F\?\[G?Q@\J\P\-NB\C\H\I\T2Q\UK7T[\_\&Lf\gC\\A?Y\z069e\S\D\V\tH`?;I=1"SZ\U\;F^\BW/C67QG)Cb\X\k\T\]\%>W\`\c\d\x\a\"]g\k<D4#Cg2z\r\o\|\n\pRh2WHcH{\m\w\u\#>t\]2s\v<h\D;s@T<i\j\q\v\y\45YHg;~\}\ S!]#]%]qR$]&]'])RI:)]6]1]4]0]NFr@/Il\.]7]p\/]8],]9]3]-]*D(]3@ A*] ]2]q;5](S:];]'CR]<]Q]=9U>z>J:J]E]?]K2C]K]$2U]>]PFP]T]bAF7N]O]D]=]M]QLI]B]HC<F.NL]H]A]F]\B)S*SS]tOxHf]G]`]dBa]W]xVY]X]p8V]OF-6b]y:aTg]P4Z]{?c]_]]]Y5[]\]^]/=d]e]u]ICbKr]aXQFt]tUs]p]l]o]h]nPXHn]i]j]rKm]M16@;<q]w]v]k]nE{]$^#^x]oC{BaU5N}]L2hD_J>Gz]|]~]"^*0N1,^&^6=oH!^%^)^(^'^-^LT3^*^.^Y@!16^1^2^&Q5^/^0^=P4^mJ9^8^7^;^e=X2jC:^:E<^YL*7eT=^?^"DA^>^@^:UB^.r";2B0EGB/riP]S=kf30r1r-Jg:3r5r4rdK:O2r4JORlBCN8rv07r>rO2AQ:r<riT;r6r?r=r9rGrDrFrJrBr@rEr{VAryG_IHrF905CrIrPrVrW;Ur\MkVRrTrr8KrNryB]ULrMrOrSrYr<Sj6qJd7WrXrZr]r[r\rQQQrIMON)Vcr[C`r/@lr^rarhrbrgrfrir_rdrjr,Seru2rr PurH;yrprvrxrzrsrqr{:{5orwrmrnrkr&s#s"strZH{r%sxC}r's)s$s|r s*s]B.s0s!s1s,s/s~r-s2s4s(s3s5s7P8syY9s7sdH6s:s;s@4Cn<s=s*Q,tFPPP\QNOV=CQb:iaBRBq92m1Cq@ID3rY%KDqTVEq@tFq,TGq@0AtBt|4[E;LdP`MHqsY;1.O$8JqKqC2QA0WIqLqNqvYaR#TCt9HDtMqOqc?PqTqVqQqQIaEcB|9SqUqS9[qV:}0YqXqRqZqWqlHJM]q=e\q^q_qeOEts=`qaqwN*R{q28{<[9f9YCSJhj@@u>ijjjkjljmjnjojG={u}u~u|ub=!v%4"v#v2lTQjY$v:n2U~S\LDJ@e%v/>)F%ZF<)6<8OH%<&Z'ZVLCH(Z}F5QiR6QG<2=d;)Z*ZHQ ZmPo6[BOKm7hIC7w>$V,Z-Z@FgW6J)U_KoU.Z_VJ40Z/ZkR1Z2Z3ZTJ4Z J5Z6ZO3oV7Z0;.58Z9Zn9/QhR:ZC8jOo2;Z<Zk=\NoS=ZsN>ZUSe;?Z5KPK@ZkGnVAZ5EA6BZL7N?CZDZ-KEZw5FZBA;WGZ8LjR1DHZ}5Q;IZ3PJZKZ=NLZMZNZw2QZOZhQPZUCRZSZTZUZ;P%Ry0VZ GWZw=!CXZYZ}C7LZZ[Z>@WF\Z]Z4G^Z_ZH9m;96xtytcM9u`ksO?;@:%TYatu*1r2uuwuQ:vu2Cyuxu41jU:819F2pTMO\0KUu;JV770L6Fa1:9|Va9!7z<Zj[jyLs9\j{43CQ7X:]jtT^jV<_;_j^A8B_TJW`jajdjbjcj^I38D6ejjJMIM4YbbEfj5@8Wgj,W|HSXMX^TyTDI.SS8`3bIvtU:wt_Wqt08TUO8pFC3rt,3=TwGttstKL$HutcW?E@u;uCuBu:VAu>TDuLuO0x5IuJu\EEuFuGuKu`>Huz8PuSug?r9<uMu7BxLy<NuOuQue6RuUu=uTu;Sl3$LVuWua>Xu_L[uH2YWYuZu\ubu`u_u]uau^udueucL?e85cuhu#Lfugu>uD1?uE5d2luiuW6mujukuZ4jTnuy3ouqupurusumI*9{Gc6IL&j53~Tl9yPmi*WniVBmHd:oipiqiaVrisiuitiviwiaGxiXTyiN=zi{iO=|i(8>A}i21T;u9~i!j"j#jx7-<dJN`/T=O7U$j^U%jAP<9G4Y11@f1g1h1=3hHAe_1IAo4(GXSyF8Q}9uB-SKT|=Be57Ce9;bUx=6T%N,AY3vLFeDeHeJeGeO5HF|5EevJIeTCE1#<7WKMMKJJSLLeKefD!Q7QMePe8MpVOe]5>MQe:6(Md9EJQ3YKlTRej7NeUe~4VeSeTe]R_BF1bS]6lKWevSi1t6ZeXeYe@5ER\e^e]e2G#R[ebTZU`eqWae\1{QbedeceeeXRK5_guZxZvZwZzZOPGDn00PyZJS*:"[qG|Z{Z[I}Z![^W~ZZA%[tS'[$[([<=I@#[&[#V)[-[.[,[B:$? [*[GT?2/[y90[;3&5<61[u62[I14[3[5[7[6[8[9[:[OSztuGCWdE|t}t{tF>oPS7MT*L"u!u(:~tVK$uR@j3*M%u#u4=(u)uM=8Ca?aK*u&u'upD,u<4mWW4 u.u-u/uQPQC)H0u1u2u3u4u5u7u6u8uI2TSMJo@XV0R?Ap=*8x<FvGvHvIvJvLvKviwMvNvDnEnFnkU$6HnGnInJn%GKnLn07v5MnOnNnF8PnQnRn[6.3SVFD51V8SnTn?TUG{>YN39VnUnXnWn%EYnZn.G[n/G\n'2]n^n_n`nanjWbncnX<dnKSzL,2eAen&G-Cfngnhninjnknlnmnnnonpnqnrntnsnun-MABvnwnxn!Uyn3Ozn{n|n}n!o~n"ou8zC#o$oB=?Ry2%o&o'oxR(o}V)oLF*o o4A,ozOxK.o-oz3x9/o0obP1o2of7?P3o4o5oqH`L6o7o8o9o:o`U;om4*C<o=o>o?o}N@o`B846Wu=GOCoAoBoDo'6|<b>LCEoFoGoOoHoIoJoBGqoM6KoLoMoF6>CNoPoQoRorUSowDToxDUoVod8w0WoXoYoZo[o\o]o^o5>ao_o`obocoMAdoeofogohoiojokoloX@mo-AnooopobO$3ECEcAIFcU1JN34rHGcPOHcd<IcJcFC"UVDk9ENKcvCLc'7s8R:McNcDTOcPcKQQcRcScTcVQUc{2;@Vc @WcXcYcZc[c78bZS6dZcZfZnHeZ@7tQuRsUW=hWhZgZ"0SMiZ=8J<=B$BB3jZ*B0D5=^OkZBI]1lZ86:T}3mZITUOcEnZoZpZjAUL]OgS!BqZeKrZfK~Rt8sZ/06OOUmKtZDc%A?v@vAvQD8HcQ[PEQ/<M9toF4:SBv{3Cvq5EvjS'v)Q)v(vcAW@"1mNhP vvO*vpU,v9Ct;.v-v^DXA*K<O/v0v1v6BT0yE2v`G&v8>2>e5G7??RCfCLXo8y=%QP00w1w,P002w3w4wJGO>7w6w^15w8w9w$NMH :8h9h:hB>tROTXI3R%6jG|qnO3KkPoggMK9Y6}qd0LK~q$T-BlADF1>!rU<"r#r$rCR5FGM%r1SE?bL&r'rUQn6(r)r_5*r r|2,r-r'Hg7)l*l l,l.F-l.lI73J8bOwPwM2QwSwRw;b"<<b=b>b?b@bAb97{R$=NJ%1GKBb|6DHCbH=}1Dbv6EbYDFbZO]9Gb!@Hbv2IbsAJbKbxBLbMbNbWJ8XeYcO%p0\mB&TTM1Q[3}G52?B`f;JafbfT>cf$WUMef]<dfffgfnB>=hffB':ifjfR3iQ%?kfoFlfmfnf-Fof'Ipfqfrf9esftfbBufvfhVwfxfG9;w:w>w<w!:?w@wBwAwDwCwEwFwGwhK_8TwUwVwXwZwWw[wYwWW\w]w^w_w`wK[*Xwem9}?j;IwGFHwJwLwKwMw:NNw'DcSOv3BPvQvRvSvTvVv 1WvXvYvZv[v\v]v^vJO_v`vavbvcvdvp@evfvgvhvivjvkvlvmvnvovpvqvrvsvtv(>uvvvwvxvzHyvzv{v|v}v~v!w"w#w$w%w&w'w(wn1)w*w w,w-w[A.w/wqD/p&<0pyC8E;Q1p2p3p4p5p<QlQ7p6p'TRM8p:p9p;p<pk8=ph:>p?pi>@pl6ApBpCpDp5HEpFpGptEHpIpJp=wKpLpMpNpOpW:PpQpRpSpTpUpVpXp%SWpYp:u9Bdwewfwgwhw4BjwkwsBptotiBawbwF;dYrJh@$pZ:-G,Dlwmwnwpwowqwtwswrwuwvwimjmkm<v=v>v&6>XD9;X1\sJwwxwyw{wzwG1|w}w~wkF4l]33v4vdA5v6v7v8v9v:v#H;vzA(9hmj9_Y!#"###g!%#&#'#(#)#*# #,#-#.#/#0#1#2#3#4#5#6#7#8#9#:#;#<#=#>#?#@#A#B#C#D#E#F#G#H#I#J#K#L#M#N#O#P#Q#R#S#T#U#V#W#X#Y#Z#[#\#]#^#_#`#a#b#c#d#e#f#g#h#i#j#k#l#m#n#o#p#q#r#s#t#u#v#w#x#y#z#{#|#}# !i!j!~#$#

( & : , * 0 . 4 2 9 % ' ) = > - 1   / 3 5 6 7 8 ? " ; < $ # ! e/!/"/#/$/%/&/'/(/)/*/ /,/L/M/N/O/P/Q/R/S/T/U/V/W/X/Y/Z/[/\/]/^/_/`/a/b/c/d/-/.///0/1/2/3/4/5/6/7/8/9/:/;/</=/>/?/@/A/B/C/D/E/F/G/H/I/J/K/!zv,#z|/8z",.z,z#.$.-z%.#,/z1z0z&.>z2z3z6z$,5z4z7zy,(.'.%,z, z)z*z .9z*.<z=z[~?z{,@zAzBzCzS-Dz).(z!.!,EzFz`zazbzdz},cz}/8,^-9,:,;,ezfz[zgzhzizHzGz]--./...KzJzIzLzMz0.Pzi/QzOzNzRzVzh/SzTzUz1,Wz2.1.3.YzXz4.Zz&{:z%z\z]z^zf-?,6{@,>.A,?.9{7{@.8{:{;{g-A.<{={>{Y~?{3{2{a-_z5.4{9.nzozqzpzrz:.sztzuz.|vzxzwzp/zzc-d-yz<,{z|z}z!{~z"{#{e-b-jzkzlzmz/,*{[- {4,6.7.8.5{=.2|<.;.%{e|Z-h|f|g|i|j|Z..,G,d|H,H|G|I|5,K|J|L|M|o/N|F|O|Q|P|Q.R.6,R|6|7|i-c|N-'{~-9|:|p-;|<|>|=|M.?|r-A|@|q-S|T|"zc{O,e{H.d{f{g{j{k{h{l{I.o{i{p{m{o-q{y~t{v{y{r{w{J.n{u{s{m-x{"||{#|~{!|{{}{R}Z|$|z{%|&|'|)|K.(|n-*| |,|P,Z,U.1|R,;zS.s-j/k|l|o|m|[.T-',n|p|r|),q|(,u|w|k/y|t|v|U-s|x|z|~|{|!}}|||\."}V-$}*,W-%}].'}(}#}&} ,^.*})},}l/-},,8| }.}0}/}X-_.`.-,1}2}Y-5}4}3}6}W.[|j-\|b|X.]|^|_|Y.t/Q,`|F,l-a|({){7,D|E|s/W,=,-|L.z~/|0|B.G{H{J,I{K{L{J{M{P{C.D.N{T{U{O{S{R{F.Q{K,W{V{E.Y{X{G.\{Z{[{]{L,`{^{_{M,a{N,4|5|W}u,$zk-P}w/Q}k}j.x/l}m}n}t-l.Z}[}T}U}v-V}J}_,K}L}M}u-N}O}u}@}?}c.B}A}C}d.D}E}e.F}f.G}g.H}a.7}8}9}b.:};}I,<}=}>}".X}h.Y}i.p}q}r}s}t}o}k.%~&~i,'~z-(~)~ ~n.-~*~,~.~o.{-p.{/r.3,l,T~U~B,V~W~C,r/D,X~q/w.$~S}6~v.j,S~k,v}#~3|x,T.Y,U|V|v/u//~s.7~9~8~;~<~:~@~?~>~=~B~A~t.E~C~D~F~G~2,`-_-J~H~K~n/I~u.L~m/M~O~N~Q~R~'z{}|}h,}}x-X,~}!~"~y-${0~\,1~],2~3~4~^,5~z/O.P.|,q~.{I}w,r~s~t~u~v~w~\~^~]~p~,.B|N.C|U,Z~_~x.`~a~n,m,b~y.p,o,|-S,T,n~\-c~d~f/e~g~f~h~o~i~k~&,j~P-l~m~~/}~~~!-"-~,#-$-%-`,&-|.(-)-*-'- -,-a,b,--.-}-,{-{/{0{0,1{g/P~x~z.>-q,?-@-B-A-b{w}x}m.w-y}z}W|[,X|V.Y|C-D-E-F-G-H-I-J->,K-@{A{B{C{D{h-E{E,F{L-M-y/V,r,/-0-1-2-3-4-5-6-q.7-8-9-:-;-<-=-c,\}]}^}_}d,`}e,a}b}c}d}e}f,g,f}g}h}i}j}O-Q-&z{.R-s,t,{~|~@

S"S$S%S'S(S)S S,S-S/S0S1S2S3S4S5S6S7S8S<S=S@SBSDSFSKSLSMSPSTSXSYS[S]SeShSjSlSmSrSvSyS{S|S}S~S

U!U%U&U(U)U U-U2U4U5U6U8U9U:U;U=U@UBUEUGUHUKULUMUNUOUQURUSUTUWUXUYUZU[U]U^U_U`UbUcUhUiUkUoUpUqUrUsUtUyUzU}U

X"X#X%X&X'X(X)X X,X-X.X/X1X2X3X4X6X7X8X9X:X;X<X=X>X?X@XAXBXCXEXFXGXHXIXJXKXNXOXPXRXSXUXVXWXYXZX[X\X]X_X`XaXbXcXdXfXgXhXiXjXmXnXoXpXqXrXsXtXuXvXwXxXyXzX{X|X}X

d"d#d$d%d'd(d)d d.d/d0d1d2d3d5d6d7d8d9d;d<d>d@dBdCdIdKdLdMdNdOdPdQdSdUdVdWdYdZd[d\d]d_d`dadbdcdddedfdhdjdkdldndodpdqdrdsdtdudvdwd{d|d}d~d

e e!e"e#e$e&e'e(e)e*e,e-e0e1e2e3e7e:e<e=e@eAeBeCeDeFeGeJeKeMeNePeReSeTeWeXeZe\e_e`eaedeeegeheiejemeneoeqeseuevexeyeze{e|e}e~e

"P%Q%R%S%T%U%V%W%X%Y%Z%[%\%]%^%_%`%a%b%c%d%e%f%g%h%i%j%k%l%m%n%o%p%q%r%s%

!0"0#0$0%0&0'0(0)0

%<%4%,%$%

%q%r%s%

`!`'`)` `

e%f-f f'f/f

x4x7x%x-x x

~NzP}P\PGPCPLPZPIPePvPNPUPuPtPwPOP

]8^6^3^7^

c{cichczc]eVeQeYeWe_UOeXeUeTe

r6s%s4s)s:t*t3t"t%t5t6t4t/t

t&t(t%u&ukuju

a.bidodyd

duewexe

]!^"^#^ ^$^

t.uGuHu

h&h(h.hMh:h%h h,k/k-k1k4kmk

k%lzmcmdmvm

{1{ {-{/{2{8{

WHX%X

`IaJa aEa6a2a.aFa/aOa)a@a bh

d@d%d'd

kCpDpJpHpIpEpFp

 7.8.4151

"5#6#1#2#

.]._.g.W.Pk

&&.vC

**0*.*,*/*

[%]%^%7u

$c%d%

4= =3='=$=

?$?8?*?,? ?

:\0\7\;\

\$P$a$j$i$V$`$f$_$#%f%h%

_1_2_,_0_

 '3')'5'1'7'6(

1%F!(

%Fp>p3q

C.DnD

i.lIl_n

H.HuH

&\$\2\'\!\0\

5?6?2?:?

='>(>!>%>

869597989

= >)>->/>

 })}*}.}?

=:><>9>;>

;525.5>5;3

C'ETEUE.ET

s;s"u&u%u$u

*:(:=;<;

1.#.(.'.

LS.PLNLSLSPPPWP_PUP

]4^5^6^7^

#_$_%_&_'_(_)_*_ _

4u!%9u

"*")"'"("

%d&`&a&e&g&c&

%!%"%&%'%)%*%-%.%1%2%5%6%9%:$=%>%@%A%C%D%E%F%G%H%I%J%

[!\!]!^!

mQ.bx

{ | }9},

d6exe9j

]%sOu

m.t.zB}

w%xIyWy

%f?iCt

."4"W!'!#()!g"F!>!w)x)%"R"$!,"v),(y(v(z(/"!("(?!*(-(,)!)#)@!*)-)")$($)%)&(&)')((())())0)/(/) ( ).(.)'"0"(" "*"-")"A%B%C%D%E%F%G%H%I%J%K%L%M%N%O%P%Q%R%S%T%U%V%W%X%a%b%c%d%e%f%g%h%i%j%k%l%m%n%o%p%q%r%s%t%u%v%w%x%',!,",#,$,%,&,(,),*, ,,,-,.,/,0,1,2,3,4,5,6,7,8,9,:,;,<,=,>,?,@,A,Q,R,S,T,U,V,X,Y,Z,[,\,],^,_,`,a,b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,W,*!.!/!0!1!S"T"%!&!6"G!H!X!y)z){)|)})~)f"I!5"$'`"e"b"Y'J!w(x({(|(}(~(0%1%2%3%4%5%6%7%8%9%!%"%#%$%%%&%'%(%)%*%g!h!f!i!j!U"X"V"Y"W"!"""#"S!$"T!t!u!3"2"n!p!D!P! !|!}!{!z!r!s!1"E!q!-!o!V!A!U!B!C!l!m!x!y!v!w!A"Q!R!g(h(i(j(k(l(m(n(o(p(q(r(s(t(u(g)h)i)j)k)l)m)n)o)p)q)r)s)t)u)M)N)O)P)Q)R)S)T)U)V)W)X)Y)Z)[)\)])^)_)`)a)b)c)d)e)f)M(N(O(P(Q(R(S(T(U(V(W(X(Y(Z([(\(](^(_(`(a(b(c(d(e(f(!&,&"&-&#&H&G&.&$&B&A&/&&&F&E&1&%&D&C&0&'&<&I&J&7&K&L&2&)&>&M&N&9&O&P&4&(&Q&R&8&=&S&T&3&*&U&V&:&?&W&X&5& &Y&Z&;&[&\&@&]&^&_&`&a&b&c&d&6&F"a!`!C"G"H"K"J"I"L"c!b!:"9"e!d!8"7"_!^!B"[!]!\!D"E"Z!Y!O"N"P"Q"O!N!<"="@";">"?"M"["\"]"Z"!!"!#!(!4!5!6!7!8!9!:!;!<!=!k!2!3!!*"*#*$*%*&*'*(*)*** *,*-*.*/*0*1*2*3*4*5*6*7*8*9*:*;*<*=*>*?*@*A*B*C*D*E*F*G*H*I*J*K*L*M*N*O*P*Q*R*S*T*U*V*W*X*Y*Z*[*\*]*^*_*`*a*b*c*d*e*f*g*h*i*j*k*l*m*n*o*p*q*r*s*! " # $ % & ' ( ) *   , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H I J K L M N O P Q R S T U V W X Y Z [ \ ] ^ _ ` a b c d e f g h i j k l m n o p q r s t u v !$"$#$$$%$&$'$($)$*$ $,$-$.$/$0$1$2$3$4$5$6$7$8$9$:$;$<$=$>$?$@$A$B$C$D$E$F$G$H$I$J$K$L$M$N$O$P$Q$R$S$T$U$V$W$X$Y$Z$[$\$]$^$_$`$a$b$c$d$e$f$g$h$i$j$k$l$m$n$o$p$q$r$s$t$u$v$w$x$y$z${$|$}$~$1)2)3)4)5)6)7)8)9):);)<)=)>)?)@)A)B)C)D)E)F)G)H)I)J)K)L)_"1(2(3(4(5(6(7(8(9(:(;(<(=(>(?(@(A(B(C(D(E(F(G(H(I(J(K(L(^"I'J'K'L'M':';'\']'^'6'7'8'T'U'V'W'X'!'"'#'%' ','-'.'/'0'1'2'3'4'''(')'*'='>'e'f'g'h'a'b'c'?'@'A'B'C'D'E'F'G'H'N'O'P'Q'R'S'Z'['c"l'&'`'o'a"<'m'5'9'j'k'_'d"d'n'i'ilKoRv2X[m2_>_;yt\du&s`]&axN0\*ciqzM/|!S qQg,RyN}q?^:{9yRN c`kzNwKêJLTajc\-_kK/UuVxe@^#lMi'jvi;{igLofPA^,dLXqy_N$z2f{z=zHLMoUU"SQl'dRl1v{NQP?K$m(mB^bv\mu\9`NT5t[S5V$lfdjqlK@KrljPry%l_PjgkPQ\i[L}W[aZ6V_cC^D^!Jln#S7nOxHj8n,q%qNi<yyejlV]Bm%x:eX["JMQmnklE^`cIJirNU6vBNGV4c-qbjBW'sjMnk2Y%}UvbU5xuL5u-dkgUq;p5iILUzTaVWA\F^ozacsav\|ND[qxd\oe1\VUZsAKC[zYnS8z&}ok&tJL(s[s'[7vfOrpZKRgCWpv^h&ege#J'LIj6x%z.qNomK0vOoOi^wSNw\([xK!_a]Ju6ilgnnps?_KLAPRt:`@_`NR\j}vVJjih,cPs$Jx[G^pkVqbeLL{KcjA_mVPi9ncUSQpe4hCk*j|zvu<pT};`CN:P:wsXMw.d_TgP}l.RonWUdj"xkM?W1{lM2\lP}NpnBLmPwe|s"n3YtX7i.N"YqXOT'eRU)V"tWqXU=pPWPTOWjkk}m[E|BKU}Htjhsu^yoSSlB]7oTgJJ{Y}z*Vxtww,\WW"_>NpS$plagOKs)m>JotNv{^;P7Uqn(tx\'KNZf`%mrny\\y\srxytq|<Py[1W|K%p}KtUmM%J VBP>p=R$L6zMLzZOv8iuXNLMWQTmikJbY2}-cLV4Y'aSnCP3}dUhOCm2P~N(ZPxV}QxRxS\b]y{A]5c]mDN!Kc]]|/y{R!O(d6t~l.cmgA}bZ3Xd]opqvpzuQOZT\&\?oONY`VYTlKj?J0UiOmqOLxdmdXW'} j2vpO=ytf[KQsQi)s`PRicZRb"vtadZUg?u"O/M#O0M~q#P/a#x&J;wjrH^SiI^^}@JjyNQTnRT#Y(}YWNw>zVOpWakExz\C]_yoge}#v|Y)}ngeUPo1M"w2q1q2M Z'Jbc<{$Y:nSxz{$O{\cv*m!raN&z`yVlnd!yo{ky#n,j(JztVMv|ItTx&xJ^FrZWPSEXfj]sZddvrvB_}YvL:S/day&pSK<`JtzT*}by7tB}0|l}bJ=}gjC_RQbN$S }`_GrpgnP*sK^8vua3q#w)J%OD_0a?p$v6cFzoPm}D]w|?f-^?zqeDm%Rn}6uvaL^^|Wl]M7V3MUxXejOPOLj.j-jqS%SOw$n$P"rpP#rxw3P)[;SlJ&qUKgw^M$w@x]SPL&Osvwa\S~z'zYk'O/jod9iXqXXr`4f|\qsPc{rF[qPrP\OQS1LXw(K<k>d\tB\'p@fmJkhheC\^mrSwLTN gCK1a2wsSRS@u]_snqg4}HrRstnSbQLj_:iWYMurqGzxYBTevE]rg_mKJz[5h&S5}Iybd={$WENUNfV=eM^sl`mll>{k_xa>ysP*`bhTb}R(eSY^S8t<w}\lhgdwc(lqzretP/Re\%P4q1|xLF]Qz_w(zunN^sg,wDkam `G]3R?RLJ?{}ee]MXtluPmhRPXYfv*[`wYX#t]tQo5Y m7c;n4Ms`Mjulnh)K/qMJ)lkro}syAfXl,mNj_hO^&RtgVQBfcc0d4X%v^s%WhwFhf{f]~\ZX,Z0j8c*Jya1jlrnzUntylR{{p}=`cNFx.^E_>e-mjznM&m.mmp!]/mx|kXyL5M)z]aUbOm"]JyhjmekSTizaLddaGh[NU\5ws|sp/N5qRoHhqkTK>`xcij2|t``O%n*zCf2a Jdc;iVbrsVn2jvPYlKZ(O#][XNyUiQc<R,XLs{MVvugohyc;Rss{cP^0NwVYqAuD\;uQ^f\R^bmvnOjnp|c_StS3a4aStF_Vi [&v9cEk)t6MyR-ZcRQO\KzL]O)h;c:cZ`wn3\uS&W5v[WUajT#__}wPTm*K[d{a"K`S?d@{>ZMd9V@o|a9vG_1dg\h\VzvSZqrz}bOUxP_MKupd KDW~bZ].ZnJ9U!cch s)OwSqTdNrhue.g:Vl_@ddh5X\d9t6q^b5aoM'qeN]KcY,syP lS^iwuy^anK<cVxn[q}6w^tmrY[(p}aT^,`cmaSH_6Y,}SoAdkx,[F|-X:v_[SSGxNJAx4R4\9zOJ3|jjkjzPdmg]I_m_<nAoRL$]J_xS(q7MTo]dn_,K<iljK_?y/VFU*O)NxV7qxnYY_sHxFNfUftEfUooK_|'\gVIxRc=caO@pZlW]p{,l)pWzA{@R0eem-K0y%w.K/Z6X'S2{D}-l!{ienitssxAp/^0x`s/g-[5f(yX]YhVobS_b`|HW-}o_SLySpTG[U^tpPUYeG|V\`b0Z#slSKtE}}c1y{P[l<u$rNXOXwuav7Rl{H]hdARWx;VV^=w.laPu`3jVN%Lvlab>cH|pMvyp_?e?Na|0mQ};vOyZkAJ8RqMScf}mfzc*pPyb|'xeaynvgmj4|Bu\Wuph]mS|u?Z{LzS$tWoCTc{m{-`nj3{Bdgv]RL_I|)ev`3v~apKojpj@Z4xrkCdWiqdoJWNJ|asDKecEK4j=iIW[k1mCL>wK|tx7YSsTsdwQw7X1NBJ4{FKvpgUPjTL/K*t/iCuXii]sq{U;^{ts}r}&wI]ST(LAZULdYJzce<SpJDPPJ zkkxgeYWQ$s{Tc|XzUs Osk|UTS|MfYyb!bTkw`2d|Ld{ t=PqJ8o@Wznt}cSB{hU.[6a7x?`C{j]"b&nhvuvJ]bP&]k]yd/c|P|t<Ljwdeq_awwy9oXx)yYx=nFXcdNuY]gY9RCUeZPZYQXN^K,t{Zivsh,Opp}tH[@NTcOQuqrMkO8M&cZQ%r&rNd{S)qIrXoIf8Xsz5s$xsQHfZxi\W^_KlO_ttQ:Rr_7a#b|SfmI[zd^OPNSUus.wHosMOuseBpQJqj&PZY pgk@e5|Dd)LF}5j*e:__aQZ8ath}S$bJrfZ3wM}6sWnDu$X'r8Y9YIoNVKw._uh5RUSLt|ZhYkwIu<sRZ5S6hOV:tIw*LCpVLSP=S{[`KdSwv:UMsaKtk-t*|lwvhgZLwAen`}UfN |;U(r¹MrjGKtM/[Yo:My|s_gNBZ-Oyg(xbsrJ$_DTWLBe;MZoXn']&b@`0VJxz|~Y0^l]hZ`TyVWMX^xrVdEP.t(]EmVsY^fc(S0[Ze?c1[iUA`[oip2W}PiY~Pml)S)rDpbboiQyYiZhCZDZETzg`M0c2[D{cs%Yg{K]TP6f.`Z}5\x`1gpu\XFm9a@c@ypi[Yds6\idEpAcL|M|KrLrOd[qYz8qu}y`{g7|d|E{gc9XxvE\XL/`gt\o|O]o*r>},J;}G}2gQjt_lQ^dCe&Y<MesUm:Ygm5{lxg`YLFT%guU>S{|rdu_xhmxGNv}XhXMVgZLcJv_GpFp:XtqptLue|Ejsj[]W\}^yrGUPXHp!Q"QTYhVJY1ZGXb\Nstu9qSZjvuO.}RJ4_]W:z'n=uuxhmaT#QVaxyJ[yKTT\Y>nmwnRfaywm][h3[wQ0`bTWvyW]X}M r=MBx,r-J.J.OBc7\Z[;YsJSvxfujvjyv/OSJ/J0R:q3WCc}sZ^[^^ocb{nw_JWhN[[;qqi7zFP L(nzKyy}L~SPdnrUTM_8|PQMrRwTJYU^XYM)n<v[LIp||Ih~t|g^W\^,p~LaM:ao[2Z%Q8\vX$QbMj\wpJp>P\]VTVSPm!M5_x_!T2NJhukUcPu!u'Y eKfquEe#y[`kvqKjY"uQWxQxjyj3Z_ooqve?ndb?P,zQu3g>iNr4[N|n]4g4W4w>MiZ0OYwfsYN*NHK'PKpGPEd`[ZU'W@nvxRuim<YFe#uTZ'b|{\qtJzhiNxieb9PrT&QN_t|*S,L`oeeUP|[f|~Kjm1^cy"TvOPVjUnqKz!e1UmOkm2U<Ub}-s[}0i'Qc}3Nd}Nz0J'w1O"f6|-rao.sF\kY`h(avU}O]^QYjdOr?wfb(bVcQmyi1V2^h` S\k/_CJ|nC}vk2OlY=Y_X8T>ko]p]q]r]>YF{3O}n dEZlX(Q)b<^5gp[bopq4Oq[1`%_Ry}g#fq{0K.rgM\hWg@wcP!Z=L)QL]~c*Q*h6jzyLfXvGTKYRYKSwX)Zxu^^/r)xHXAnAys]zj=v;a?MTtMfO|"{\`;tUZ2yr{v[_^r[\xnwhkzR<qZzjZFZAw6gGe,VG\)a*b&UWTPr{j]`s{=qgbW}HN7j@|g}ow5W:o]q3^Kh]xG{HU_W)]1i-zYvtz*xnf\L<ao`?i}|NfWaOfqtsd{ddyconO>v2`~| QzWH{Wb#Txp(Wga?SdoEWbkg|"dhbPfh{htte<tUt6_9|BnuJeobK$T`^}ZFd>h^`4vRj{yB`dJ7g}j]Y4Z*ni{K[5Z>q,SI{O_@SWcfoP|@iSu\l7w8jyQH\9j^q6W5O(Ynl*]"M.h=aQrAi|R5[gs~XQ|2m/t#{A| n%TrtYnJ{cM;X[ewxTv)WIKQfLp.XSy~U<X0r bhsBolm8g~Z>L|rkZXbVmQV3`R|HkASMpwORmXTI\qW;_%sMt?q1xziK{UJTyJwHVh|=s~n~gBS6S-Lzv2VXRXgÉg-pL{!k&TM{=U_q{v4^kUHe${9Ta^#d7Wnx5^RVUy:gUkwUgo>a.ziVnV;gKl3U4N%{na(wN{=X}{i|6OGm,n]L'vzf$u\}3mINho?a[zcK)w&{9\@qHmCo-VN}!ht{'UvqSf^L2xk\6}je`qL[M]HTmY%u{fTfH}!V?}S|!o<gnQUfri0_`X:|/}Npa[Ie4mC`Xc{i(j7}'{Biw}Ybl\"hpfx}y}?v'gWfsTITzVrW@ab[Xf=gOp>s,b7up`8}hc'T|hRzoxSV4UPppw3n:jSjIm ],e!}P_3lQ_mm8xzw x`t:T3dZi6^?Y@YoVLY*Ze_ew2Ly_`W;Tz}3Ls[R_JNZnddO{7OCnjN-baWuzIU,xYgismXDcqpehz`Dn^Y"k#kB|;j hb^om#hqO<Tj|>gr|4V.b7SLz\z5mca,h]hio=t8O[i,QGZIkLh7^<VeS]zVZ1JHZ&_3yRrDJKNuM0}(UAqibJ\4l@z({(PlZnY{`jo^zD`9OJUbW/b8WMhZv"oZb|vP{-QdM.Qm\Nhyp5N|f{WVPu]qw}vw[j{\iAYruE`TjBy<jERQ{@g%kz_"c9WCi}h/hSr){%XKUHP/QcWF`"VpmsWT|WZ_LTr0Q`L}[?sQp;|0b%f[b^_G`oraLjVBg6N@s~MR{xx{w?h7h6m:\4Lwq8hvJ$dVtf_'_g_AaDiK\Ei#o&k#Kic{Q$oko4P#Mfh%oLSmZ:WUreuoY4yTUO}c[aq6l~{WS1Q1K2Q2KBqat5yCaBawk(_JK9f^x*ywJ7m8SVrYTEnpr2J;\xq7lJe@v]}cTbLTweWCS&XAvv]@M\eKeDa0h0tjsnZ;W1b*W{V_dVJ(k~[Bv;o}TH`9h&o$MtT![\[][\nKKU|kNAMS{ yTu)Y]iM[N]CgLllyLK|`(TSmoXWrxJoZTVMYnXArS_pZjb}`xX/w6ZWJXryX_zoOBYRpQd7s`zlo2b=TNYbt)TBMZgYr*Y>X-\kb|VyJZTWt!L:O8uCYhPEcxk1r;O-SahlN4`c^w]2rvs[v~W_xrw)PZf&u<WcL[f]]3Qmo^Vtdoax]OheJ!\5`,|-|'X8m6[pV/s%MqZ(XdL4QXJrZ'u(u&flUxUsZFcd^e^5Q6Q7Q3r^iSp4rTpdKT{fujcf^T_yx.p8Q_VWP!|noX\_i]e{}I`IV*TLe`iXP"|>T3bg^<\6RUu!N)uy]z]Up_vZrkdqr9l|}*aYJoo*uyl-xBrCvRW"yVpzp`vsiCr T3J&MCMZMOYDv]nDg4bb_[g1h.|Mekz<ObOvMpo>tMT8s!irrksWpWO_O@hAhcO"i*PAs PdT<o!X_YWs=\eLqmbq[T5bfJ.SfLSqguZJn{Eai_^nBw"X,]/p=V a6yuTIP'olbj[LNhuUwMS~s5P~`{_]f$hMK(o4nXZ9Q)_0sDL7N)oU_WmFn=oV|t[*o9xiuYcFa?Th^jpBs/S[JW|XmGaXt3V-]>UCq_nkVYtfW7Z{]O]#XYZXpDoXaTqrm[U\UDsWK6bqoU{XSP]Yp3K]U'M,P:QDq3eu{ai`}<|"Z#Z!RoRmbi^\N5rdPQ]Ha7[c_9mEqOs W,akcGnIazJ{pazZpgLtZ?LmN)UbzePVk_l|_Vwj^4K>o5L=Oro7bhL|p`VFq8b k5KQXNtwsFW;Q*wJmSWzXEvLQ|]}_eyJ`}r0SstIZ^f:xPh{XUj#VFv[r|d2hZZ\rV{2i-nczn\ju`f}p,WEu`ne[^]pY#iyqDrK`$i9b1ck|(M6L[p:f)MCsYa oEgi`Es@T?U.]|y@L"e8NRXVy*qQNGvk[~_aXswgW~T<QOe6K8ZDM>V:bXOL`yk}}hWXKbi:hGcMlNl?V'cV_h}an(v}];xQhWynNOl%iUVEM:m=Q>O;l1RiLDY|i>Q<l-e0wjLDS@V}V!a=^)v$Z$VFu"aFiEritlVSk=l\bk^\p?kNW?Q u}y\JFM6r~]7L8[iP]N@k"}KxVj0qN[CwO[$K`xW{Jk!`MN\TX}vR7rvz*vwzfX1tRhEJkLnb;b-waxls!^}dlc/]0]7KSh#a`R~p&irKsmY\M`Zw9[.L[ZGM1]/X#coNsr3xN`}ulkESl|[RkT"^fe0pDUtmmcBhum|W;m v8rHvfS]r?O,k@O(fi}AO_`l^"`?tobqYGq8K~y:[uZlv\ZdzO`2])fsomszkfy]J^U^Jd_}f,uudciKmdOSX3]lT9r7_NKX{YPR]tw\g%d#|;[:r}iJPVuEY4d'm=j~fDw-u`Y4JbxBO>l4eHMHnHgIM7yhqrYu[5JFYIX Y<mTXZ\<bm|`l~RGi*fpb;z.u*{{l?lX|eTCybniWvmm^lLncThxz4]5d0XUXjt9NaVRO6P"NnsxsL\KP$|JMTW#^`dIn]b~u,TQUpXCxWjWu?X@}-k*U(gJngJcx]TXjY{wm5e-Pqq=bHcUY*_<[dxzq6eosZ{`a,Yku6`HiOKIcn^>bo\%Vqb~V!Y@X[\=m8_%j-WysxmGuJack^rLxYjFSf[/upN~i6{rbrO9wsYKa]Z9Z{k9Kym``@t<}1_oc#`9}1pKM>m@UpczmdimU]gvT7eg[?bKntW]p N^gVVLa3hne"\P`5U!U[{KysK%tHzWVei\{P}v{%Z=[blwM^pIvo^1Sn|ChHqqNmytr6d9up\qc%h;r$^LZiJZcY|ZjDy$c]{JoDhLUWk-Y {YS"U^vvZQ`(iyu/z|kj`2cEUcqnULMYmAXlzkq<zbfezzb6J7d[jzu,{CO}kzx9_qa$R{uZP[P>j1Y7JgSex2S@b_reM,yMM.n.VjW`g.kYOM\{mp^kW%^W_P[Q[#U2p\\hJfxN\\jR[3i[w(c.Wa`:KQe\PAUJX)c$`)iGS]\.x8L.PrXJc/L-TQvLPFJBU:NGJ0zX_:uketo5]*Mrcw{Pw:}a}~v@QEh8dhaALmR>[b`IzMa8J`rIqq^_pDxLnr^IgsbagKcLcxO,o~}%|1zY_R`ZtJq#N<rcl%` w/k^e$a MtY&hNMiao|c`Ab$N&^~k]k`p[ttbHSkt5nXu_UeV0kctMctt2zuo_J1k?mI}&d$y3plegQGYWd]jwT:ZMZLyZa?[ELPl;Ks^*iHYcn=WDOMP&|{qR}AQ[cISO\mL'^;f!l9L^{bgAT(\BbXsSeYsFs[M,MC|gTBQ%yUhNcJTZ__{cg{xOc0ugXIY/xvo6]/nxM8^'||w1w;N!tMn.aCl~O?xbXhS(^dtBluYEyS]qV|lp|@m9Jdnar9^rVt^[_S[gzcXAt7]ur.TsV8]EO__>r!vKk|qGsk`|m[aenu^SzKq/P9]CQ1uFjap,vYukp:]?rEw"[vr:JuweKfnS`%NXV/TIiNSBtfK!q2k"q3k4ptK0T2s7{lugn2tmusObpNnLq8euWsceOFO3sXdyOZOMzcfbrnu;J\crNYV0netBXP\nL`UJvJ}VXOt&V>\T[GW~rMqCb^\_\-o f]y?j.oPtsN,f^NyUtcPM8U}w)\v^*\cr4i\RfivcJgNPwZ<Jhn^Zwr{b&L;ZinZu\wjaAN1T1}=f-{gxNabwouGO2ToLhTOnWw&`AV\acpdqq\'VutNqdr0Pol:y5kmTDbgi4k!j<x&NFyZ|3T9S^j iaaOSvt@jOa:Ljndp4snT@reqCtT`6k!WhK-y-idX3zEb=|Dl1X \$Uik;hWX.{aQ@[>uw^{JFwHOPaPntitNMU[O;],Nhi4TGd[uAz)^xTwo3S7kxo\uLmU[OqPq2u.Y,UFb#}e{ _ub-v3u5p%a]u"l}m4u8{#[JVYKTezs8k7`lWlq/eaUmWQQrayo<]\vepDtii{soT"L~w<_Mk7PBV-h/o%KiKhzFLgfGj$[IO|bzo^kHu^TU`0oGb/YgyegJOQaHb{oyzr\'`hxjK<KbV^u_u6nvbJS|oDQ1oEQ^PaY8`QM9sLg(V'N5THd4S9kuK]v#qGLJipa`u/{QK`{erpllpknKipL/W!su|$qV`2oQt!wQq|J}JNNHs:s~m&Zl`MxRKNkXyYy`JJZ&KHJnyl[1PoUsf"gYdadD|oytOfw<NEt#\=]Ft!xVhA[fp9dmv.y>]0WhX=KZyNxpym`3c3tBjfr6pV[dkgrUW6ThyAWUejiLWiSIb[|-M0L"jvd@P7p!nvWJbKbOz_kKV4tMmRd)j:d"sRMKvfqAm<hQngpLb*dauZmnWqQkilid`'ZT]#jCVtV_Z3oMb}ohrEogg}WNg\_GyvY,_ZV$\8pzUwdDVlt~o!p*^<Z|XTzel(|flKX9{SdyMSOjJTO=xGt_j[y7TekRa$jBza{mz"pqL#zwbNbuikahgWhxZKTvwEViTzzrL]w:^(N9p~dIdTdCj4o>Wb{SM5oiz&y=_Gw}x|x ^h[]cbaFQPvfkyZGlx^ix^cuNCzWeHlIs;d.f6o?\=NCXOPzOJsW`GQ.i=hDzObEz8y`\0{)X_e'ynvLvxbql`ZRqLRKO=J?]ovy^4z-Ugq>^@\HQIQ>xvKyTbuSaiX~xLO$}vNPzsL>f.vpUJQ>|qUiM5zPbwtTM#g%[Qb"Wcw&j!PZNk{&[^[eX`j*X`e[VFojxUdwNX`oWmtfMtLcuJda\Hy?|'hDX>K.\wWhp@]MOs\0Yif<dDjldedx{;L=d\MwY_]NmPY#eMy.MNO/vS}mk\V$e6U]Viy$gcVKQdVrUz^xWjXUO}X XK}\|(`sUY}#LyYjSuuGoZS=Z(h/\#pUM)`,^:p1n2nMvRnFVe`;saeKd#WB[~JOO!0"0#0$0%0&0'0(0)0*0 0,0-0.0/000102030405060708090:0;0<0=0>0?0@0A0B0C0D0E0F0G0H0I0J0K0L0M0N0O0P0Q0R0S0T0U0V0W0X0Y0Z0[0\0]0^0_0`0a0b0c0d0e0f0g0h0i0j0k0l0m0n0o0p0q0r0s0t0u0v0w0x0y0z0{0|0}0~0!1"1#1$1%1&1'1(1)1*1 1,1-1.1/101112131415161718191:1;1<1=1>1?1@1A1B1C1D1E1F1G1H1I1J1K1L1M1N1O1P1Q1R1S1T1U1V1W1X1Y1Z1[1\1]1^1_1`1a1b1c1d1e1f1g1h1i1j1k1l1m1n1o1p1q1r1s1t1u1v1w1x1y1z1{1|1}1~1!2"2#2$2%2&2'2(2)2*2 2,2-2.2/202122232425262728292:2;2<2=2>2?2@2A2B2C2D2E2F2G2H2I2J2K2L2M2N2O2P2Q2R2S2T2U2V2W2X2Y2Z2[2\2]2^2_2`2a2b2c2d2e2f2g2h2i2j2k2l2m2n2o2p2q2r2s2t2u2v2w2x2y2z2{2|2}2~2!3"3#3$3%3&3'3(3)3*3 3,3-3.3/303132333435363738393:3;3<3=3>3?3@3A3B3C3D3E3F3G3H3I3J3K3L3M3N3O3P3Q3R3S3T3U3V3W3X3Y3Z3[3\3]3^3_3`3a3b3c3d3e3f3g3h3i3j3k3l3m3n3o3p3q3r3s3t3u3v3w3x3y3z3{3|3}3~3!4"4#4$4%4&4'4(4)4*4 4,4-4.4/404142434445464748494:4;4<4=4>4?4@4A4B4C4D4E4F4G4H4I4J4K4L4M4N4O4P4Q4R4S4T4U4V4W4X4Y4Z4[4\4]4^4_4`4a4b4c4d4e4f4g4h4i4j4k4l4m4n4o4p4q4r4s4t4u4v4w4x4y4z4{4|4}4~4!5"5#5$5%5&5'5(5)5*5 5,5-5.5/505152535455565758595:5;5<5=5>5?5@5A5B5C5D5E5F5G5H5I5J5K5L5M5N5O5P5Q5R5S5T5U5V5W5X5Y5Z5[5\5]5^5_5`5a5b5c5d5e5f5g5h5i5j5k5l5m5n5o5p5q5r5s5t5u5v5w5x5y5z5{5|5}5~5!6"6#6$6%6&6'6(6)6*6 6,6-6.6/606162636465666768696:6;6<6=6>6?6@6A6B6C6D6E6F6G6H6I6J6K6L6M6N6O6P6Q6R6S6T6U6V6W6X6Y6Z6[6\6]6^6_6`6a6b6c6d6e6f6g6h6i6j6k6l6m6n6o6p6q6r6s6t6u6v6w6x6y6z6{6|6}6~6!7"7#7$7%7&7'7(7)7*7 7,7-7.7/707172737475767778797:7;7<7=7>7?7@7A7B7C7D7E7F7G7H7I7J7K7L7M7N7O7P7Q7R7S7T7U7V7W7X7Y7Z7[7\7]7^7_7`7a7b7c7d7e7f7g7h7i7j7k7l7m7n7o7p7q7r7s7t7u7v7w7x7y7z7{7|7}7~7!8"8#8$8%8&8'8(8)8*8 8,8-8.8/808182838485868788898:8;8<8=8>8?8@8A8B8C8D8E8F8G8H8I8J8K8L8M8N8O8P8Q8R8S8T8U8V8W8X8Y8Z8[8\8]8^8_8`8a8b8c8d8e8f8g8h8i8j8k8l8m8n8o8p8q8r8s8t8u8v8w8x8y8z8{8|8}8~8!9"9#9$9%9&9'9(9)9*9 9,9-9.9/909192939495969798999:9;9<9=9>9?9@9A9B9C9D9E9F9G9H9I9J9K9L9M9N9O9P9Q9R9S9T9U9V9W9X9Y9Z9[9\9]9^9_9`9a9b9c9d9e9f9g9h9i9j9k9l9m9n9o9p9q9r9s9t9u9v9w9x9y9z9{9|9}9~9!:":#:$:%:&:':(:):*: :,:-:.:/:0:1:2:3:4:5:6:7:8:9:::;:<:=:>:?:@:A:B:C:D:E:F:G:H:I:J:K:L:M:N:O:P:Q:R:S:T:U:V:W:X:Y:Z:[:\:]:^:_:`:a:b:c:d:e:f:g:h:i:j:k:l:m:n:o:p:q:r:s:t:u:v:w:x:y:z:{:|:}:~:!;";#;$;%;&;';(;);*; ;,;-;.;/;0;1;2;3;4;5;6;7;8;9;:;;;<;=;>;?;@;A;B;C;D;E;F;G;H;I;J;K;L;M;N;O;P;Q;R;S;T;U;V;W;X;Y;Z;[;\;];^;_;`;a;b;c;d;e;f;g;h;i;j;k;l;m;n;o;p;q;r;s;t;u;v;w;x;y;z;{;|;};~;!<"<#<$<%<&<'<(<)<*< <,<-<.</<0<1<2<3<4<5<6<7<8<9<:<;<<<=<><?<@<A<B<C<D<E<F<G<H<I<J<K<L<M<N<O<P<Q<R<S<T<U<V<W<X<Y<Z<[<\<]<^<_<`<a<b<c<d<e<f<g<h<i<j<k<l<m<n<o<p<q<r<s<t<u<v<w<x<y<z<{<|<}<~<!="=#=$=$=&='=(=)=*= =,=-=.=/=0=1=2=3=4=5=6=7=8=9=:=;=<===>=?=@=A=B=C=D=E=F=G=H=I=J=K=L=M=N=O=P=Q=R=S=T=U=V=W=X=Y=Z=[=\=]=^=_=`=a=b=c=d=e=f=g=h=i=j=k=l=m=n=o=p=q=r=s=t=u=v=w=x=y=z={=|=}=~=!>">#>$>%>&>'>(>)>*> >,>->.>/>0>1>2>3>4>5>6>7>8>9>:>;><>=>>>?>@>A>B>C>D>E>F>G>H>I>J>K>L>M>N>O>P>Q>R>S>T>U>V>W>X>Y>Z>[>\>]>^>_>`>a>b>c>d>e>f>g>h>i>j>k>l>m>n>o>p>q>r>s>t>u>v>w>x>y>z>{>|>}>~>!?"?#?$?%?&?'?(?)?*? ?,?-?.?/?0?1?2?3?4?5?6?7?8?9?:?;?<?=?>???@?A?B?C?D?E?F?G?H?I?J?K?L?M?N?O?P?Q?R?S?T?U?V?W?X?Y?Z?[?\?]?^?_?`?a?b?c?d?e?f?g?h?i?j?k?l?m?n?o?p?q?r?s?t?u?v?w?x?y?z?{?|?}?~?!@"@#@$@%@&@'@(@)@*@ @,@-@.@/@0@1@2@3@4@5@6@7@8@9@:@;@<@=@>@?@@@A@B@C@D@E@F@G@H@I@J@K@L@M@N@O@P@Q@R@S@T@U@V@W@X@Y@Z@[@\@]@^@_@`@a@b@c@d@e@f@g@h@i@j@k@l@m@n@o@p@q@r@s@t@u@v@w@x@y@z@{@|@}@~@!A"A#A$A%A&A'A(A)A*A A,A-A.A/A0A1A2A3A4A5A6A7A8A9A:A;A<A=A>A?A@AAABACADAEAFAGAHAIAJAKALAMANAOAPAQARASATAUAVAWAXAYAZA[A\A]A^A_A`AaAbAcAdAeAfAgAhAiAjAkAlAmAnAoApAqArAsAtAuAvAwAxAyAzA{A|A}A~A!B"B#B$B%B&B'B(B)B*B B,B-B.B/B0B1B2B3B4B5B6B7B8B9B:B;B<B=B>B?B@BABBBCBDBEBFBGBHBIBJBKBLBMBNBOBPBQBRBSBTBUBVBWBXBYBZB[B\B]B^B_B`BaBbBcBdBeBfBgBhBiBjBkBlBmBnBoBpBqBrBsBtBuBvBwBxByBzB{B|B}B~B!C"C#C$C%C&C'C(C)C*C C,C-C.C/C0C1C2C3C4C5C6C7C8C9C:C;C<C=C>C?C@CACBCCCDCECFCGCHCICJCKCLCMCNCOCPCQCRCSCTCUCVCWCXCYCZC[C\C]C^C_C`CaCbCcCdCeCfCgChCiCjCkClCmCnCoCpCqCrCsCtCuCvCwCxCyCzC{C|C}C~C!D"D#D$D%D&D'D(D)D*D D,D-D.D/D0D1D2D3D4D5D6D7D8D9D:D;D<D=D>D?D@DADBDCDDDEDFDGDHDIDJDKDLDMDNDODPDQDRDSDTDUDVDWDXDYDZD[D\D]D^D_D`DaDbDcDdDeDfDgDhDiDjDkDlDmDnDoDpDqDrDsDtDuDvDwDxDyDzD{D|D}D~D!E"E#E$E%E&E'E(E)E*E E,E-E.E/E0E1E2E3E4E5E6E7E8E9E:E;E<E=E>E?E@EAEBECEDEEEFEGEHEIEJEKELEMENEOEPEQERESETEUEVEWEXEYEZE[E\E]E^E_E`EaEbEcEdEeEfEgEhEiEjEkElEmEnEoEpEqErEsEtEuEvEwExEyEzE{E|E}E~E!F"F#F$F%F&F'F(F)F*F F,F-F.F/F0F1F2F3F4F5F6F7F8F9F:F;F<F=F>F?F@FAFBFCFDFEFFFGFHFIFJFKFLFMFNFOFPFQFRFSFTFUFVFWFXFYFZF[F\F]F^F_F`FaFbFcFdFeFfFgFhFiFjFkFlFmFnFoFpFqFrFsFtFuFvFwFxFyFzF{F|F}F~F!G"G#G$G%G&G'G(G)G*G G,G-G.G/G0G1G2G3G4G5G6G7G8G9G:G;G<G=G>G?G@GAGBGCGDGEGFGGGHGIGJGKGLGMGNGOGPGQGRGSGTGUGVGWGXGYGZG[G\G]G^G_G`GaGbGcGdGeGfGgGhGiGjGkGlGmGnGoGpGqGrGsGtGuGvGwGxGyGzG{G|G}G~G!H"H#H$H%H&H'H(H)H*H H,H-H.H/H0H1H2H3H4H5H6H7H8H9H:H;H<H=H>H?H@HAHBHCHDHEHFHGHHHIHJHKHLHMHNHOHPHQHRHSHTHUHVHWHXHYHZH[H\H]H^H_H`HaHbHcHdHeHfHgHhHiHjHkHlHmHnHoHpHqHrHsHtHuHvHwHxHyHzH{H|H}H~HPKVKgKOMhM-N{O"P8PPP]PTQUQXQ[Q\Q]Q^Q_Q`QbQcQdQeQfQhQiQjQkQmQoQpQrQvQzQ|Q}Q~Q"R#R'R(R)R*R R-R2R>RBRCRDRFRGRHRIRJRKRMRNRORPRQRRRSRTRURVRWRYRZR^R_RaRbRdReRfRgRhRiRjRkRpRqRrRsRtRuRwRxRfT|T%U U.U8VMVKWdWE[d[%\%]U]t]|^~^3_a_h_q`-amauc!d)d.e1e2e9e;e<eDeNePeReVeze{e|e~e!f$f'f-f/f0f1f3f7f8f<fDfFfGfJfRfVfYf\f_fafdfefffhfjfkflfofqfrfufvfwfyf!g&g)g*g,g-g0g?gAgFgGgKgMgOgPgSg_gdgfgwgghhhphqhwhyh{h~h'i,iLiwiAjejtjwj|j~j$k'k)k*k:k;k=kAkBkFkGkLkOkPkQkRkXk&l'l*l/l0l1l2l5l8l:l@lAlElFlIlJlUl]l^laldlglhlwlxlzl!m"m#mnm[n=rzr1s'tnttvvv8wHwSw[xpx!z"zfz)|!#"###$#%#&#'#(#)#*# #,#-#.#/#0#1#2#3#4#5#6#7#8#9#:#;#<#=#>#?#@#A#B#C#D#E#F#G#H#I#J#K#L#M#N#O#P#Q#R#S#T#U#V#W#X#Y#Z#[#,!]#^#_#`#a#b#c#d#e#f#g#h#i#j#k#l#m#n#o#p#q#r#s#t#u#v#w#x#y#z#{#|#}#&"K!L!~!~#M!\#

s&t*t)t.tbt

.GIzI}I

$ ' / 1 1 4 4 6 : <

0 0*0=0?0@0

CUWeXeYeZe[e\e`eaecedegeielene

ZT%f%W%`%l%c%Z%i%]%R%d%U%^%j%a%X%g%[%S%e%V%_%k%b%Y%h%\%Q%P%m%n%p%o%

;L0LBLCLQC%sJ

M.Nr<\O

U.Wex

m.dOl5Y

!"#$%&'()* ,-./0123456789:;~

!"#$%&'()* ,-./0123456789:;<=>?

!"$%&()* ,-.1

!"#&')* /01236

!"#%&'()* ,-

!$&'()* ,-/01

!"#$%&) -./0123

!$&'()*-/236

!#$%&'(),012345789;<=

!"#$%&'()*

"#$%&'()* ,-./0123

!"#$%&'()* ,

!"#&(*,-./234

!"#$%&'()*,-

!"#$%&'()* ,-.

!"$%&'() ,-./012

!"#$%&'()*

!#%&'()* ,-

"#$%&'( ,-01

!"$%&()* ,-.156789:<=>@

"#%&')* ,-./246789:

"#$%&'()* ,-.

!"#$%'() ,-/012345

!"#$%&')*

!"#$%&()* ,-./0

!"#$%&'()* ,-./013

!#$%'() ,-.

!"#%&'()*-.012456

!"#$%&'()* ./

!"#$%&) -./0125689:<

!"#$%&()* ,-./01

!"#$%&'*./0123

!#$%&'(),01234578

"#$%&'( -/01

!"#$%&'()* ,-./0

!"#$%'()* ,-

!"#&(* ,-./12

!"#$%&'()* ,-

!#$%'() ,-./01345

!#%&'()*-.01256

"&'()* -./012345678

!#$%&'(),.012345789;

"#$&'()* ,-./01234

!"#%&')* ,

!$%'() ,-.

!"#%&'()*-.01467

!"#$%&'()*-.01245

#'() ,/02346789:;<?

!$()* ,-01345

!"%&)* ,-.012345

!"#$') ,-./02345

!"#%&')* -.

#%'()* ,./0123456

!"$%&()* ,-.013

!"#$%&'()* ,-./

"$%&'(),-/01345

!#$%&'(),.01234589;

!"#$%&()* ,-./0145

!"#$%&'() -./0125689

!"#$%') ,-./023

"#$%'(* -/012346

!#$%&'()* ,-.012

!"$%&()* ,-.0135678

!#$%'()* ,-012456789<=

!"#$%&'()

!"#$%&'()* ,-./0123456789:;<=

!"#$%&'()* ,-./0123456789

!"#$%&'()* ,-./012345

!"#$%&'()* ,-./01

Z%T%i%f%`%P%l%}

O!wexe

ôfpf

wexe

%S%T%_%

%S%_%

%S%T%

ôfp

!2,4,6,7

! !!!"!#!$!

{!|!}!~!

" "!"""#"$"'" ","-"."/"0"

0$1$3$4$

%!%"%#%$%%%'%

B%D%E%F%

Q%S%T%U%V%

9&:&;&<&

' '!'"'$'%'&'''(')'*' ','-'.'/'0'2'3'4'5'6'8'9':'<'='>'?'@'

-(.(/(0(1(

8(:(;(=(

(*.*/*0*1*2*3*4*5*6*7*9*:*;*<*

4 5 6 7 8 9

!,",#,$,%,&,',

-!-"-#-$-%-&-

4-5-6-8-

#.$.%.&.'.(.).

 ...0.1.2.5.7.

WINDOWS-1251

WINDOWS-1252

WINDOWS-1256

WINDOWS-1255

WINDOWS-1258

WINDOWS-1253

WINDOWS-1250

WINDOWS-1257

WINDOWS-1254

ISO_646.IRV:1991

WINDOWS-874

CSSHIFTJIS

%*.*f

CNotSupportedException

commctrl_DragListMsg

Afx:%x:%x:%x:%x:%x

Afx:%x:%x

COMCTL32.DLL

CCmdTarget

ole32.dll

__MSVCRT_HEAP_SELECT

iphlpapi.dll

SHLWAPI.dll

MPR.dll

WINMM.dll

WS2_32.dll

VERSION.dll

RASAPI32.dll

GetProcessHeap

WinExec

GetWindowsDirectoryA

GetCPInfo

KERNEL32.dll

GetKeyState

GetKeyboardLayout

VkKeyScanExA

keybd_event

CreateDialogIndirectParamA

UnhookWindowsHookEx

SetWindowsHookExA

GetViewportOrgEx

SetViewportOrgEx

OffsetViewportOrgEx

SetViewportExtEx

ScaleViewportExtEx

GetViewportExtEx

WINSPOOL.DRV

comdlg32.dll

RegCloseKey

RegOpenKeyExA

RegOpenKeyA

RegCreateKeyExA

ADVAPI32.dll

ShellExecuteA

SHELL32.dll

OLEAUT32.dll

oledlg.dll

WININET.dll

.PAVCException@@

.PAVCNotSupportedException@@

.PAVCFileException@@

(*.prn)|*.prn|

(*.*)|*.*||

Shell32.dll

Mpr.dll

Advapi32.dll

User32.dll

Gdi32.dll

Kernel32.dll

(&07-034/)7 '

?? / %d]

%d / %d]

: %d]

(*.WAV;*.MID)|*.WAV;*.MID|WAV

(*.WAV)|*.WAV|MIDI

(*.MID)|*.MID|

(*.txt)|*.txt|

(*.JPG;*.BMP;*.GIF;*.ICO;*.CUR)|*.JPG;*.BMP;*.GIF;*.ICO;*.CUR|JPG

(*.JPG)|*.JPG|BMP

(*.BMP)|*.BMP|GIF

(*.GIF)|*.GIF|

(*.ICO)|*.ICO|

(*.CUR)|*.CUR|

%s:%d

windows

out.prn

%d.%d

%d / %d

%d/%d

(%d-%d):

%ld%c

(*.htm;*.html)|*.htm;*.html

VVV.dywt.com.cn

\d3d9.dll

[%s:%d]

Range: bytes=%s-

[%s:%d]

PASS %s

PASS ******

USER %s

E:\dev\e\static_link\static_libs\source\downlib\mystrlib.cpp

SIZE %s

PORT

User-Agent: %s

Mozilla/4.0 (compatible; MSIE 5.00; Windows 98)

Referer: %s

Host: %s

GET %s HTTP/1.1

HTTP/1.0

Cookie: %s

%d, %s

\\192.168.0.129\TCP\1037

NSPlayer/9.0.0.2980; {%s}; Host: %s

rmff_fix_header: assuming data.size=%i

rmff_fix_header: assuming data.num_packets=%i

rmff_fix_header: assuming prop.num_packets=%i

rmff_fix_header: setting prop.data_offset from %i to %i

rmff_fix_header: correcting prop.num_streams from %i to %i

rmff_fix_header: correcting prop.size from %i to %i

%s %s %s

Session: %s

Cseq: %u

%*s %s

%*s %u

CSeq: %u

rtsp://%s:%i

rtsp://%s:%i/%s

ClientID: Linux_2.4_6.0.9.1235_play32_RN01_EN_586

GUID: 00000000-0000-0000-0000-000000000000

[%s:%d]

User-Agent: RealMedia Player Version 6.0.9.1235 (linux-2.0-libc6-i386-gcc2.95)

Range: npt=%s-

%s/streamid=1

%s/streamid=0

Transport: x-pn-tng/tcp;mode=play,rtp/avp/tcp;unicast;mode=play

If-Match: %s

RealChallenge2: %s, sd=%s

Title: %s

Copyright: %s

Author: %s

real: Content-length for description too big (> %uMB)!

Require: com.real.retain-entity-for-setup

SupportsMaximumASMBandwidth: 1

Bandwidth: %u

Challenge1: %s

hash output: %x %x %x %x

hash input: %x %x %x %x

stream=%u;rule=%u,

Illegal character '%c' in input.

%s <%s>

Reply-To: %s

From: %s

To: %s

Subject: %s

Date: %s

Cc: %s

%a, %d %b %Y %H:%M:%S

SMTP

IndexedColor

nFaceIndexes

faceIndexes

FloatKeys

TimedFloatKeys

tfkeys

AnimationKey

keyType

nKeys

keys

nUrls

urls

?.vW@

.PAVCOleException@@

.PAVCObject@@

.PAVCSimpleException@@

.PAVCMemoryException@@

.?AVCNotSupportedException@@

.PAVCResourceException@@

.PAVCUserException@@

.?AVCCmdTarget@@

.?AVCCmdUI@@

.?AVCTestCmdUI@@

.PAVCArchiveException@@

.PAVCOleDispatchException@@

zcÁ

866.net

xiaoyao/gggggggggggggggggggggggggggggggggggggggg.html

g.html

c:\%original file name%.exe

#include "l.chs\afxres.rc" // Standard components

123456789

1, 0, 6, 6

&'()* ,-./

$&(*,-/14

! !(!!"#")""

>?:)<:>?:)<

>?:)<)>?:<<;>?:

123456789:;

!! ##%%&&$$''  (**),,,//

(){()))?,

?;<=;,;<]

(/) )-),

]:;<)>?,

(*.*)

3.0.9.7

(hXXp://VVV.eyuyan.com)

%original file name%.exe_668_rwx_10001000_00039000:

L$(h%f

SSh0j

msctls_hotkey32

TVCLHotKey

THotKey

\skinh.she

}uo,x6l5k%x-l h

9p%s m)t4`#b

e"m?c&y1`Ð<

SetViewportOrgEx

SetViewportExtEx

SetWindowsHookExA

UnhookWindowsHookEx

EnumThreadWindows

EnumChildWindows

`c%US.4/

!#$<#$#=

.text

`.rdata

@.data

.rsrc

@.UPX0

`.UPX1

`.reloc

Remove it with Ad-Aware

Click (here) to download and install Ad-Aware Free Antivirus.
Update the definition files.
Run a full scan of your computer.

Manual removal*

Terminate malicious process(es) (How to End a Process With the Task Manager):No processes have been created.
Delete the original Trojan file.
Delete or disinfect the following files created/modified by the Trojan:

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\bg_1_20150824[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\zwsf2-3[1].gif (1759 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\game_bg[1].gif (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\c_1[1].gif (160 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\checkMobile[1].js (677 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\o[1].swf (157 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\CA7ASJVX (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\zrsp_1[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\sy_ico[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\zmxy3_20150824[2].css (24 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\111111111111111111111111111111111111111[1].htm (769 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\u=1136749690,815916792&fm=76[1].jpg (863 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\0f0000nHWaDGGJgmd7u1Zs[1].swf (711 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\nav_bg[1].gif (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\tjrm_img09[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\zm_add[1].png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\bg_6[1].gif (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\CAG1Y74L.gif (49 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\more_zb[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\pic[1].gif (719 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\lazy_iframe[1].js (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\jquery-1.2.1.pack[2].js (1740 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\tjrm_img08[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\ftbtn[1].gif (477 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\wh[1].js (2252 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\crossdomain[1].xml (889 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\logo[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\trace_news[1].js (559 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\zj_btn[1].gif (1 bytes)
%Documents and Settings%\%current user%\UserData\2Z89WTQV\CPROID[1].xml (310 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\flash_ad_version[1].xml (119 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\click[2].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\0f00057I9_MLlocrKCGPLf[1].swf (3659 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\n_zm1[1].png (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\bg_7[1].png (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\more_boss[1].gif (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\lmbtn[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\stat[1].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\zmxy3_20150824[1].css (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\petEIconv1450[1].swf (15340 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\style[1].css (337 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\libg_1[1].gif (899 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\topbg_20140506[1].jpg (4153 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\CACT2DFO.htm&cfv=11&tsr=0&tcn=1441846243&tpr=1441846242796&coa=at=image&rsi0=400&rsi1=300&tn=baidujson_patch (1291 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\go_bbs[1].gif (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\xgjv183[1].swf (295719 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\jcsp_1[1].jpg (2246 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\settings.sxx (1115 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\1GQ340U13[1].gif (527 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (926 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\b_2[1].gif (250 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\nova_fp[1].htm (114 bytes)
%Documents and Settings%\%current user%\Cookies\index.dat (6220 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\unilogin_package[2].js (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\t_9[1].gif (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\news_footer[1].js (961 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\tjrm_img011[1].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\10163ZO2N[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (1038 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\c[1].swf (547 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\crossdomain[1].xml (331 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\FuYun[1].swf (24485 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\c[1].php (1177 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\tgbtn[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\t_8[1].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\0f0000mUMeDPtm1xsKSa96[1].swf (759 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\CAURWTUV.swf (5872 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\bg_4[1].png (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\4399_16125310445[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\CAHCNU7N.gif (49 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\t_6[1].gif (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\0f000DTf8hHHd5tgwQ8C8f[1].swf (711 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@4399[1].txt (163 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\u=1887182047,2242671149&fm=76[1].jpg (3270 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\061051503Y1[1].jpg (4634 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@cnzz[1].txt (165 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\101634512c8[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\2GJ54T541[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\bdshare[1].js (182 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\crossdomain[1].xml (570 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@mmstat[1].txt (170 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\bg_5_20130716[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\sp_line_1[1].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\0f000DEUfr4hniEsJj_ROs[1].swf (759 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\zmxy3_20141010[2].js (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\1Q62S330N[1].gif (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\c[1].js (1928 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\logger[1].js (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\stat[1].php (1177 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\0913524M015[1].gif (84 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\u=1265655567,1529096812&fm=76[1].jpg (3150 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#s8.4399.com\settings.sxx (196 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\CA638567.htm (5777 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\xml[1].xml (680 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\jquery-1.2.1.pack[1].js (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\zb_nav_20131205[1].png (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\libg_3[1].gif (542 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\tjrm_img06[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\t_1[1].gif (599 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\new5[1].gif (177 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\desktop.ini (67 bytes)
C:\SkinH_EL.dll (88 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\click[1].js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\011K053B24[1].jpg (776 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\b_5[1].gif (317 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\u=1421353108,1764487604&fm=76[1].jpg (5722 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\play_hs1202[2].js (4 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][1].txt (205 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\ucenter[1].js (19040 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\Commonv1270[1].swf (95193 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\libg_2[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\1016395W521[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\bdsstyle[1].css (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\zmxy3_20141010[1].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\u=3117833277,3572889005&fm=76[1].jpg (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\0f000PDTSGXtJ3W50fJSys[1].png (6249 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\u=1614745384,2134413757&fm=76[1].jpg (7273 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\ctrl_mo_v5[1].swf (42589 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (1521 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\right[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\bg_3[1].gif (1318 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\stat[1].gif (43 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\c[2].js (2637 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\c_3[1].gif (84 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\core[1].php (73 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\unilogin_package[1].js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\icon_keys[1].gif (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\flash_ctrl_version[1].xml (530 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\4399[1].js (902 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\#SharedObjects\QEA5Z3QJ\cdn.comment.4399pk.com\seed4399Value.sxx (80 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\xgjv183[1].htm (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\78072[2].htm (4288 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\78072[1].htm (5157 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\ecom[1].xml (233 bytes)
%Documents and Settings%\%current user%\UserData\YJM90VAL\oXMLStore[1].xml (106 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\t_lm[1].png (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\t_4[1].gif (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\tjrm_img07[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\t_2[1].gif (1237 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\u=590893569,3884611603&fm=76[1].jpg (5748 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\c_4[1].gif (81 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@baidu[1].txt (198 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\02104939B23[1].jpg (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\A4399dv_base_main[1].swf (5973 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\n_mg_bg[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\xgjv183[1].htm (1744 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\scbg[1].gif (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\baiduImageRender[1].swf (638 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\b_4[1].gif (244 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\more_boss_s[1].gif (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\o[1].htm (1394 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\b_1[1].gif (610 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\CAAEB2CL.htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\0f000F_vSMdFWGLTLIlBvs[1].jpg (3609 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\4399_10503158122[1].jpg (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\bg_9[1].gif (926 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\faspbtn[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\bds_s_v2[1].js (1753 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\4399_14294510451[1].jpg (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\baiduPatch[1].swf (810 bytes)
%Documents and Settings%\%current user%\Cookies\[email protected][2].txt (889 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\ico_1[1].gif (44 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\hottop[1].gif (857 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\ico_ann[1].gif (1 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\#SharedObjects\QEA5Z3QJ\s8.4399.com\seed4399Value.sxx (80 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\A4399dv_base[1].swf (1629 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\lb_ico_v1[1].png (652 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\bg[1].gif (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\ico[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\gggggggggggggggggggggggggggggggggggggggg[1].htm (769 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\2F952341b8[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\shell_v2[1].js (1 bytes)
%Documents and Settings%\%current user%\Application Data\Macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#cdn.comment.4399pk.com\settings.sxx (229 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\c_2[1].gif (70 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\headerBg[1].gif (228 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\ac[1].js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\sszn[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\sc[1].gif (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\ac[2].js (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\bg_8[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\4399[2].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\play_hs1202[1].js (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\u=1520398955,2520422704&fm=76[1].jpg (6882 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\base[1].css (11713 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\c_5[1].gif (180 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\is[1].png (1992 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\IVPM0D6O\t_3[1].gif (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\left[1].gif (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\4399_11234392734[1].jpg (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\new_icon_1[1].png (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\logo-noborder-light[1].png (455 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\fp[1].htm (114 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\31114144J08[1].jpg (2628 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\wh[2].js (1520 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\crossdomain[2].xml (889 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\b_3[1].gif (248 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\core[2].php (764 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\0f000PMN_6_Z09Vbgll5of[1].swf (711 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\GTAOUJZ3\chkDomain[1].js (554 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\t_5[1].gif (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\SXIZCD23\MagicWeaponv1240[1].swf (649687 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\KDMZSP6J\4399_17485812405[1].jpg (3 bytes)
Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Permalink

Back to the blog

e-mail

Google+

Twitter

Facebook

Trojan.Win32.FlyStudio_42bbe53408

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet

Trojan.Win32.FlyStudio_42bbe53408

E-mail

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet