Gen.Variant.Strictor.27510_7eb6141752 – Adaware

Gen:Variant.Strictor.27510 (B) (Emsisoft), Gen:Variant.Strictor.27510 (AdAware), Trojan-PSW.Win32.MSNPassword.FD, Trojan.Win32.FlyStudio.FD, GenericEmailWorm.YR, GenericPhysicalDrive0.YR, TrojanFlyStudio.YR (Lavasoft MAS)Behaviour: Trojan-PSW, Trojan, Worm, EmailWorm

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary

MD5: 7eb6141752628eb24a15f83b7f75ebac

SHA1: 064f5a81fb02d2857333c2881a65132603ff1895

SHA256: 929e68a91d9d066cfbb0b45b3d62f63ede436d436834435c9db5eedba5095ffc

SSDeep: 98304:quUv6jk7CeBnvEg95Od3BtnqhPYBrBk8BFPS3uiEbpo9j2GwJab8UhBbMS2/vZUd: Wk7BBnMVoJVnaq

Size: 3633152 bytes

File type: EXE

Platform: WIN32

Entropy: Packed

PEID: UPolyXv05_v6

Company: no certificate found

Created at: 2016-04-13 16:53:23

Analyzed on: WindowsXP SP3 32-bit

Summary: Trojan-PSW. Trojan program intended for stealing users passwords.

Dynamic Analysis

Payload

Behaviour	Description
EmailWorm	Worm can send e-mails.

Process activity

The Trojan creates the following process(es):No processes have been created.The Trojan injects its code into the following process(es):

%original file name%.exe:1504

Mutexes

The following mutexes were created/opened:No objects were found.

File activity

The process %original file name%.exe:1504 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\1462415256509930926[1].jpg (18917 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\ping_tcss_ied[2].js (12 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\1462083277[1].jpg (11504 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\xui[1].js (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\client_2012[1].htm (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\adrecommend_48[1].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\client_2012[1].shtml (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\tgadshow.min[1].js (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\qlogin[1].htm (896 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\1462326671686817369[1].jpg (8244 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@125[2].txt (1917 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\gshow[1].htm (465 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@125[1].txt (2488 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@speed.qq[1].txt (132 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\1462324179681352953[1].jpg (6136 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\tgact_more[1].css (254 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\arr2[1].png (237 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\Info_new_48[2].js (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\Info_new_48[1].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\ping_tcss_ied[1].js (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\desktop.ini (159 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\1462491340419877308[1].jpg (7964 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\1462415228199805834[1].jpg (9264 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\1462055587704299265[1].jpg (12989 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\dot[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\tgact_more[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\eas[1].php (65 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@qq[1].txt (139 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\tgact_more[2].css (497 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\bg[1].jpg (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\recommendReport[1].txt (37 bytes)
%Documents and Settings%\%current user%\Cookies\index.dat (8676 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\1462416531767829987[1].jpg (7728 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\adrecommend_48[2].js (16 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\tgadshow.min[2].js (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\icons[1].gif (845 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\desktop.ini (67 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\Info_new_48[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\ping_tcss_ied[1].js (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@125[2].txt (0 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@125[1].txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\adrecommend_48[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\client_2012[1].shtml (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\tgadshow.min[1].js (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\tgact_more[1].css (0 bytes)

Registry activity

The process %original file name%.exe:1504 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016050820160509]
"CacheRepair" = "0"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache]
"@xpsp3res.dll,-20001" = "Diagnose Connection Problems..."

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016050820160509]
"CacheLimit" = "8192"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016050820160509]
"CachePrefix" = ":2016050820160509:"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016050820160509]
"CacheOptions" = "11"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1B 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "70 36 93 C2 2C F3 47 D8 3F AE 8F 23 FF CC AE 7C"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\Microsoft\Multimedia\DrawDib]
"vga.drv 1276x846x32(BGR 0)" = "31,31,31,31"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012016050820160509]
"CachePath" = "%USERPROFILE%\Local Settings\History\History.IE5\MSHist012016050820160509\"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following registry key(s):

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012014031720140318]

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

Dropped PE files

There are no dropped PE files.

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

Removals

Remove it with Ad-Aware

Click (here) to download and install Ad-Aware Free Antivirus.
Update the definition files.
Run a full scan of your computer.

Manual removal*

Terminate malicious process(es) (How to End a Process With the Task Manager):No processes have been created.
Delete the original Trojan file.
Delete or disinfect the following files created/modified by the Trojan:
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\1462415256509930926[1].jpg (18917 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\ping_tcss_ied[2].js (12 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\1462083277[1].jpg (11504 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\xui[1].js (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\client_2012[1].htm (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\adrecommend_48[1].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\client_2012[1].shtml (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\tgadshow.min[1].js (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\qlogin[1].htm (896 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\1462326671686817369[1].jpg (8244 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@125[2].txt (1917 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\gshow[1].htm (465 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@125[1].txt (2488 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@speed.qq[1].txt (132 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\1462324179681352953[1].jpg (6136 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\tgact_more[1].css (254 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\arr2[1].png (237 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\Info_new_48[2].js (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\Info_new_48[1].js (2 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\ping_tcss_ied[1].js (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\History\History.IE5\desktop.ini (159 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\1462491340419877308[1].jpg (7964 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\1462415228199805834[1].jpg (9264 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\1462055587704299265[1].jpg (12989 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\dot[1].png (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\tgact_more[1].png (392 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\eas[1].php (65 bytes)
%Documents and Settings%\%current user%\Cookies\Current_User@qq[1].txt (139 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\tgact_more[2].css (497 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\bg[1].jpg (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\recommendReport[1].txt (37 bytes)
%Documents and Settings%\%current user%\Cookies\index.dat (8676 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\1462416531767829987[1].jpg (7728 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\adrecommend_48[2].js (16 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\tgadshow.min[2].js (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\icons[1].gif (845 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\desktop.ini (67 bytes)
Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Static Analysis

VersionInfo

Company Name: ???????
Product Name: WujiDruj
Product Version: 1.0.0.0
Legal Copyright: ??????? ???????? ??????????????????????
Legal Trademarks:
Original Filename:
Internal Name:
File Version: 1.0.0.0
File Description: ??????? QQ365990609 ????????,?????????,?????
Comments: ??????????(http://www.eyuyan.com)
Language: English (United States)

Company Name: ???????Product Name: WujiDrujProduct Version: 1.0.0.0Legal Copyright: ??????? ???????? ??????????????????????Legal Trademarks: Original Filename: Internal Name: File Version: 1.0.0.0File Description: ??????? QQ365990609 ????????,?????????,?????Comments: ??????????(http://www.eyuyan.com)Language: English (United States)

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Section MD5
.text	4096	1064490	1064960	5.11336	26dfdc0e0e66bc296d923091cb2b5e77
.rdata	1069056	2348066	2351104	4.89102	baeb669ab39c2de5d18267935b0c797b
.data	3420160	568811	110592	4.53373	3bac4c6edbb3c09cb236b3c16c10b75f
.rsrc	3989504	96516	98304	4.66794	b15044988a5c2a182b17aaaffea2c8c9
.text	4087808	911	4096	1.63262	a0d74533ea317a64a2023a95a43c55ec

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Network Activity

URLs

URL	IP
hxxp://x2.tcdn.qq.com/home/client_2012.shtml
hxxp://x2.tcdn.qq.com/images/speed/tgact/tgact_more.css
hxxp://x2.tcdn.qq.com/images/speed/act/a20121106client/bg.jpg
hxxp://x2.tcdn.qq.com/images/speed/act/a20121106client/arr2.png
hxxp://x2.tcdn.qq.com/images/speed/tgact/tgact_more.png
hxxp://x2.tcdn.qq.com/images/speed/act/a20121106client/dot.png
hxxp://ssd.tcdn.qq.com/ping_tcss_ied.js
hxxp://x2.tcdn.qq.com/images/clientpop/js/tgadshow.min.js
hxxp://x2.tcdn.qq.com/images/js/mms/speed.qq.com.js?random=1462690478198
hxxp://x2.tcdn.qq.com/images/clientpop/adrecommend/adrecommend_48.js?v=1462690477963
hxxp://x2.tcdn.qq.com/images/clientpop/speed/adrecommend/1462083277/1462083277.jpg?_r=1462690477963
hxxp://ac.o2.qq.com/php/gshow.php?loc_id=16_3214abe0434e3db6b529e0c73f7e110c&data_type=jsonp	14.17.32.229
hxxp://pingfore.qq.com/pingd?dm=client.speed.qq.com&url=/home/client_2012.shtml&arg=-&rdm=-&rurl=-&rarg=-&ied_rf=--&ied_qq=-&pvid=8291483752&scr=1276x846&scl=32-bit&lang=en-us&java=1&cc=x86&pf=Win32&tz=-3&flash=11.0&ct=lan&vs=o3.0.2&custvar=-&ext=235&reserved1=&rand=56280&tt=	203.205.128.137
hxxp://apps.game.qq.com/client_pop/recommendReport?bid=speed&act_type=5&algo=4&uin=0&recommend_id=0&t=1462690477963&loc=3594&id=177719&act_id=23721&table_type=1&e_code=228699	117.144.244.45
hxxp://p21.tcdn.qq.com/time/qqadv/Info_new_48.js?v=1462690477963
hxxp://x2.tcdn.qq.com/upload/adw/image/201605/1462326671686817369.jpg
hxxp://x2.tcdn.qq.com/upload/adw/image/201605/1462055587704299265.jpg
hxxp://apps.game.qq.com/eas/comm/eas.php?m=SendLog&show_ads=48.5088.178119.229558\|48.5087.177724.228706\|48.5086.178503.229569\|48.3596.178710.229780\|48.3595.178493.229556\|48.3593.177718.228717\|48.3592.178492.229555&click_type=1&t=1462690479994	117.144.244.45
hxxp://x2.tcdn.qq.com/upload/adw/image/201605/1462416531767829987.jpg
hxxp://x2.tcdn.qq.com/upload/adw/image/201605/1462491340419877308.jpg
hxxp://x2.tcdn.qq.com/upload/adw/image/201605/1462415256509930926.jpg
hxxp://x2.tcdn.qq.com/upload/adw/image/201605/1462324179681352953.jpg
hxxp://x2.tcdn.qq.com/upload/adw/image/201605/1462415228199805834.jpg
hxxp://ui.ptlogin2.qq.com/cgi-bin/qlogin?domain=qq.com&lang=2052&qtarget=1&jumpname=payjump&ptcss=&param=url%3Dhttp%253A%2F%2Fpay.qq.com%2F&css=&mibao_css=&low_login=0&ptui_version=10031
hxxp://bbs.125.la/blog-227084-538.html	162.159.209.70
hxxp://imgcache.qq.com.cdngc.net/ptlogin/ver/10031/js/xui.js?v=10007	151.249.89.25
hxxp://imgcache.qq.com.cdngc.net/ptlogin/v4/style/0/images/icons.gif	151.249.89.25
hxxp://imgcache.qq.com.cdngc.net/ptlogin/v4/style/0/images/load.gif	151.249.89.25
hxxp://bbs.125.la/blog-227084-542.html	162.159.209.70
hxxp://ossweb-img.qq.com/upload/adw/image/201605/1462415256509930926.jpg	203.205.151.216
hxxp://speed.qq.com/home/client_2012.shtml	203.205.151.215
hxxp://ossweb-img.qq.com/images/clientpop/adrecommend/adrecommend_48.js?v=1462690477963	203.205.151.216
hxxp://ossweb-img.qq.com/upload/adw/image/201605/1462324179681352953.jpg	203.205.151.216
hxxp://ossweb-img.qq.com/upload/adw/image/201605/1462415228199805834.jpg	203.205.151.216
hxxp://ossweb-img.qq.com/images/clientpop/js/tgadshow.min.js	203.205.151.216
hxxp://ossweb-img.qq.com/upload/adw/image/201605/1462055587704299265.jpg	203.205.151.216
hxxp://ossweb-img.qq.com/upload/adw/image/201605/1462416531767829987.jpg	203.205.151.216
hxxp://ossweb-img.qq.com/images/clientpop/speed/adrecommend/1462083277/1462083277.jpg?_r=1462690477963	203.205.151.216
hxxp://ossweb-img.qq.com/images/speed/act/a20121106client/arr2.png	203.205.151.216
hxxp://xui.ptlogin2.qq.com/cgi-bin/qlogin?domain=qq.com&lang=2052&qtarget=1&jumpname=payjump&ptcss=&param=url%3Dhttp%253A%2F%2Fpay.qq.com%2F&css=&mibao_css=&low_login=0&ptui_version=10031	163.177.72.188
hxxp://ossweb-img.qq.com/images/speed/tgact/tgact_more.png	203.205.151.216
hxxp://ossweb-img.qq.com/images/speed/tgact/tgact_more.css	203.205.151.216
hxxp://ossweb-img.qq.com/images/js/mms/speed.qq.com.js?random=1462690478198	203.205.151.216
hxxp://ossweb-img.qq.com/upload/adw/image/201605/1462491340419877308.jpg	203.205.151.216
hxxp://ossweb-img.qq.com/upload/adw/image/201605/1462326671686817369.jpg	203.205.151.216
hxxp://ossweb-img.qq.com/images/speed/act/a20121106client/bg.jpg	203.205.151.216
hxxp://pingjs.qq.com/ping_tcss_ied.js	203.205.151.211
hxxp://ossweb-img.qq.com/images/speed/act/a20121106client/dot.png	203.205.151.216
hxxp://imgcache.qq.com/ptlogin/ver/10031/js/xui.js?v=10007	151.249.89.25
hxxp://game.qq.com/time/qqadv/Info_new_48.js?v=1462690477963	203.205.149.164
hxxp://imgcache.qq.com/ptlogin/v4/style/0/images/icons.gif	151.249.89.25

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

GET /images/speed/act/a20121106client/arr2.png HTTP/1.1

Accept: */*

Referer: hXXp://speed.qq.com/home/client_2012.shtml

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ossweb-img.qq.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: X2_Platform

Connection: keep-alive

Date: Sun, 08 May 2016 06:54:35 GMT

Cache-Control: max-age=86400

Expires: Mon, 09 May 2016 06:54:35 GMT

Last-Modified: Fri, 07 Dec 2012 06:34:19 GMT

Content-Type: image/png

Content-Length: 237

Access-Control-Allow-Origin: *

X-Cache-Lookup: Hit From Disktank

.PNG........IHDR.......%.....a.......tEXtSoftware.Adobe ImageReadyq.e<...aIDATx.b.p.... ...gd@.L.8....`.../^D.IX...t........,.*...:..cTb.$.3..cbu ... .?.I...p.%...t.....`...0rbw./....IEND.B`./* |xGv00|4deb7d0244f2577d4abbc46de14e57a1 */....

GET /images/clientpop/js/tgadshow.min.js HTTP/1.1

Accept: */*

Referer: hXXp://speed.qq.com/home/client_2012.shtml

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ossweb-img.qq.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: X2_Platform

Connection: keep-alive

Date: Sun, 08 May 2016 06:54:36 GMT

Cache-Control: max-age=600

Expires: Sun, 08 May 2016 07:04:36 GMT

Last-Modified: Tue, 15 Mar 2016 04:08:32 GMT

Content-Type: application/x-javascript

Content-Length: 4609

Content-Encoding: gzip

Access-Control-Allow-Origin: *

X-Cache-Lookup: Hit From Disktank Gz

...........;.s.6.........$'N..h.q.6}....w?..4..I.(.%(;~...../..%;..._^&.I.b..]............^f...o.......o...(.7k.... .g).=zGK.O99...~I.M......&^.2 ..g.....e.!.e........r.......u.<f.wLN.~......EAyY..e..6%#NDKz...sj...L.Z......La..|3..._..CF#2..g..`w.... _.6...g.....>-..,].K....l...'...X..p.A.z.Z...{......~...)8j....T.............&X..2a....}.:...|..../`...._..8...?.0[..x....I....t.MA.S.z|.Y....1....N..Bw..t.x?Lb.7..>.x.....0.M.....m....."....Eb..<...4.N.3DL..}|... _.........<O...f...c:.G.0s0.l....g...lq...s.(..l|0.|~.$.I..?.< Jg.k........._/....^.. .l..)~=....p.8.}..:..K....w....>..{...........?|1.........Xx..:...3.E(xe.....i..,Y.r..6.C..$.;v..,......7..A3hI...9h...w.|.c.{.......*.=P5.....[.o..e..kt.....rh...{&..K.1....O.....}..._<...._.._........%..n.S?.g..#.h.]..z...RVx..m..`.....@...W.......=4.X...*.....~.e..../O..M.:....../.fw......2...3w.....w.....C.OA@..@ ... ..|b../....z8...".....5.<.....<.B..I@.H*X....$<..&e<.9C...D.E...>..a...-H.....2.%.o..U......aAH........%.ne.s..lu...:...y<..]<m.. f..07.M.@5....Y0....u...q^B2..V.b.....>.l.%........S:$.uJ.b.......5......2w.........].2x.`R.H..q.`.{1.@.)......T.G.6..EA....e)....L..p@.../A.....H.L...Zq.$.C.B.@..F......'... ..9....bq.r........Ep..1..VX.M....u:Q../..x......*I.z....QX.f.X.....].#B..(..&Q...........''.o>.....B.....t.s[mQ..K.>.tV.L*...//.V..?T..[6..........2;.?.;.Hs..../.H.....y.$\..Gqzd'...*..f4......v c..8.L.!E{..u./.....j....,-.t...^.sR..<O......Tv....t.s<.'T...g...z......&e ..@|H..>..Q......K.(A

<<< skipped >>>

GET /images/clientpop/adrecommend/adrecommend_48.js?v=1462690477963 HTTP/1.1

Accept: */*

Referer: hXXp://speed.qq.com/home/client_2012.shtml

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ossweb-img.qq.com

Connection: Keep-Alive

Cookie: pgv_pvid=8291483752; pgv_info=pgvReferrer=&ssid=s6116220956

HTTP/1.1 200 OK

Server: X2_Platform

Connection: keep-alive

Date: Sun, 08 May 2016 06:54:37 GMT

Cache-Control: max-age=600

Expires: Sun, 08 May 2016 07:04:37 GMT

Last-Modified: Sun, 08 May 2016 06:20:38 GMT

Content-Type: application/x-javascript

Content-Length: 2004

Content-Encoding: gzip

Access-Control-Allow-Origin: *

X-Cache-Lookup: Hit From Disktank Gz

............[O#7...........UUiUu_..U....-$.$@..R....3..cO.l.."..a......>..|..?]}..e.W.L}..d.K..<....K).4VV,'.../'.'.JBNNO~.e..~..8.j............pG.<....o....1..JQ....\.....;.....7..x........b.P.g.....y1....ivU-...fR...d8X.VU9.d.}./.V3..3A...s.... .( .q...!......bHL.e1.age.x>^N....yY}&DId".WW......y...g.....!..W....W.....~....yv.2 /..t.=..SCG(...}:..........\.. .i.....t...3.....?s..bY\.0...)......d......R.t.tEs8{.."X./..Ss...VJ.................).O7..u(....B.t..........*....Z....W..p....(..k..E=<=?...0*.&3..A|..)>2...V.Od.A...f.....9...2$#.c....P..)2.'....z...8..4...E._q.d.....$...Q4.....#|<yQ.%...R$..........X...Y. .fO)"..`.i.&..r.h8."4B.{DdI..fy.b).....R...p...dj...DB$.QthF`]..v...Y$eC..Q.....2....&M.7*.....%B... ...#.ww.".... ,..x...#..4.".h:u ..\Y....1.....H...M...k.N&."\.:.j....i..~Z.D...E....4)r[..suj?Y...l0~,..Q...d.C.$....K.F"...m....bT...l.I...o.4.R...D7......q<[..%Sj.E.$.#L.;ci.0.Y..@../6a6..c.M.G..<.qI.w........gc......o..p....,]..T.B-.....%.!.....U. I3p/.A/.b}..."*.p..:8.........ktK...Jt........^.7.&.......L@...g..1..n....g}z...........m....K.....>m.6....=.>{.. ...V.q.......n.9f.=f...[.E.s......W.l......UF.3[..I...H...~v..e...x.)..;E.:.Cw.z.w..g$".........$.....O>......W.OOF.....r.i[h..d..Q-1..$`.*...".J-.k.-..>..D.qa[HXt..k\..]I.=~..~...^...DQ...)...0i...X;...De.!....Ei.........k..F....:I.w....n#.K_a..^3.#......9.i.......0o....I.{.F:.. ..{.V....b.... .qT$..P.L2.A.....A...1..S...f4...fI.s..V...h.4}y.Z.....XA......!oo..Y.F..`V=,..W....5.,q^W.0...j8.b,.T.X.....Z...

<<< skipped >>>

GET /upload/adw/image/201605/1462326671686817369.jpg HTTP/1.1

Accept: */*

Referer: hXXp://speed.qq.com/home/client_2012.shtml

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ossweb-img.qq.com

Connection: Keep-Alive

Cookie: pgv_pvid=8291483752; pgv_info=pgvReferrer=&ssid=s6116220956

HTTP/1.1 200 OK

Server: X2_Platform

Connection: keep-alive

Date: Sun, 08 May 2016 06:54:39 GMT

Cache-Control: max-age=15768000

Expires: Sun, 06 Nov 2016 18:54:39 GMT

Last-Modified: Wed, 04 May 2016 09:51:12 GMT

Content-Type: image/jpeg

Content-Length: 67561

Access-Control-Allow-Origin: *

X-Cache-Lookup: Hit From Disktank

......Exif..II*.................Ducky.......U......hXXp://ns.adobe.com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="hXXp://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:3127878A0513E4119700E2455585A83C" xmpMM:DocumentID="xmp.did:F901C98911D711E69120CCE4DE8F0B15" xmpMM:InstanceID="xmp.iid:F901C98811D711E69120CCE4DE8F0B15" xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:a456a5c3-38a5-2c48-9690-94cfeebfc152" stRef:documentID="xmp.did:3127878A0513E4119700E2455585A83C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...................................................................................................................................................................................................................................................!...1AQa"2..qR......Br.#3..b..$45.%....CSc..DTU.&6..sdtVW........Fv.......................!1..A.Qaq."...2....BR...br..#3S.....C.$...c.DT.s...4%U..t5E..............?...F..s..5:..6.H..@.O..L}H.F..............?.?..._.o...

<<< skipped >>>

GET /upload/adw/image/201605/1462491340419877308.jpg HTTP/1.1

Accept: */*

Referer: hXXp://speed.qq.com/home/client_2012.shtml

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ossweb-img.qq.com

Connection: Keep-Alive

Cookie: pgv_pvid=8291483752; pgv_info=pgvReferrer=&ssid=s6116220956

HTTP/1.1 200 OK

Server: X2_Platform

Connection: keep-alive

Date: Sun, 08 May 2016 06:54:40 GMT

Cache-Control: max-age=15768000

Expires: Sun, 06 Nov 2016 18:54:40 GMT

Last-Modified: Fri, 06 May 2016 07:35:40 GMT

Content-Type: image/jpeg

Content-Length: 73251

Access-Control-Allow-Origin: *

X-Cache-Lookup: Hit From Disktank

......Exif..II*.................Ducky.......U......hXXp://ns.adobe.com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="hXXp://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:3127878A0513E4119700E2455585A83C" xmpMM:DocumentID="xmp.did:2B1D89CF134011E68174F17F0FD03990" xmpMM:InstanceID="xmp.iid:2B1D89CE134011E68174F17F0FD03990" xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:415753e5-fed9-bd46-8fb6-bf4da36b2992" stRef:documentID="xmp.did:3127878A0513E4119700E2455585A83C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d....................................................................................................................................................................................................................................................!.1A..Qa".2.q.B#...Rb3$..r4%5...CSTW....c..6V....d..U.'.......t.E..fv.......................!1..AQ.aq".....2....B..Rb.#..r..3S...T....C$.s4D5E.c.%U.............?.....^..hP.hP.|..(S....[(....?a..>GM. j.......Jl.-...

<<< skipped >>>

GET /upload/adw/image/201605/1462324179681352953.jpg HTTP/1.1

Accept: */*

Referer: hXXp://speed.qq.com/home/client_2012.shtml

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ossweb-img.qq.com

Connection: Keep-Alive

Cookie: pgv_pvid=8291483752; pgv_info=pgvReferrer=&ssid=s6116220956

HTTP/1.1 200 OK

Server: X2_Platform

Connection: keep-alive

Date: Sun, 08 May 2016 06:54:41 GMT

Cache-Control: max-age=15768000

Expires: Sun, 06 Nov 2016 18:54:41 GMT

Last-Modified: Wed, 04 May 2016 09:09:39 GMT

Content-Type: image/jpeg

Content-Length: 48358

Access-Control-Allow-Origin: *

X-Cache-Lookup: Hit From Disktank

......Exif..II*.................Ducky.......U......hXXp://ns.adobe.com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="hXXp://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:3127878A0513E4119700E2455585A83C" xmpMM:DocumentID="xmp.did:9357865511C711E69DCBE8F2D92C0241" xmpMM:InstanceID="xmp.iid:9357865411C711E69DCBE8F2D92C0241" xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:61c78992-cd48-8b46-bcc4-3cb4fe987f4e" stRef:documentID="xmp.did:3127878A0513E4119700E2455585A83C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d................................................................................................................................................................................................................................................!..1A..Q".aq2...B#.....R3.b$....4D%5..r.CScT.U.V....s..Eu..&......t..e6Fv..8.......................!1..A.Qaq....."2....BR.....b#Sc..r..3....Cs..$T.U6...4D..5E.t.&d%.............?...D&......[b.CMyW.D....$.[......FG...a.^1.

<<< skipped >>>

GET /upload/adw/image/201605/1462415228199805834.jpg HTTP/1.1

Accept: */*

Referer: hXXp://speed.qq.com/home/client_2012.shtml

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ossweb-img.qq.com

Connection: Keep-Alive

Cookie: pgv_pvid=8291483752; pgv_info=pgvReferrer=&ssid=s6116220956

HTTP/1.1 200 OK

Server: X2_Platform

Connection: keep-alive

Date: Sun, 08 May 2016 06:54:42 GMT

Cache-Control: max-age=15768000

Expires: Sun, 06 Nov 2016 18:54:42 GMT

Last-Modified: Thu, 05 May 2016 10:27:08 GMT

Content-Type: image/jpeg

Content-Length: 70523

Access-Control-Allow-Origin: *

X-Cache-Lookup: Hit From Disktank

......Exif..II*.................Ducky.......U......hXXp://ns.adobe.com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="hXXp://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:3127878A0513E4119700E2455585A83C" xmpMM:DocumentID="xmp.did:1D1B320312A311E6A3A7A22355782BA5" xmpMM:InstanceID="xmp.iid:1D1B320212A311E6A3A7A22355782BA5" xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:90481ce3-e96e-7546-8433-0e9fb5f33880" stRef:documentID="xmp.did:3127878A0513E4119700E2455585A83C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d....................................................................................................................................................................................................................................................!.1A..Q".aq2....B#.R3$....brS45..T%U&6V...Cs.W...c.dtef7X........................!1..AQ.aq"....2.....R..B.#..br.S......3D..$Ccs.4T....%U............?........-.%*V.7.|4V..c........y'...)[......~...*.p.h..}.]l.F......W.

<<< skipped >>>

GET /ptlogin/ver/10031/js/xui.js?v=10007 HTTP/1.1

Accept: */*

Referer: hXXp://xui.ptlogin2.qq.com/cgi-bin/qlogin?domain=qq.com&lang=2052&qtarget=1&jumpname=payjump&ptcss=&param=url%3Dhttp%253A%2F%2Fpay.qq.com%2F&css=&mibao_css=&low_login=0&ptui_version=10031

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: imgcache.qq.com

Connection: Keep-Alive

Cookie: pgv_pvid=8291483752; pgv_info=pgvReferrer=&ssid=s6116220956

HTTP/1.1 200 OK

Date: Sun, 08 May 2016 06:55:03 GMT

Server: PWS/8.1.36.0005

X-Px: ms h0-s1100.p11-fra ( h0-s1178.p11-fra), rf-ht h0-s1178.p11-fra ( h0-s1031.p7-icn), ht h0-s1031.p7-icn.cdngp.net

ETag: "5191feec-22b7"

Cache-Control: max-age=600

Expires: Sun, 08 May 2016 07:02:11 GMT

Age: 173

Content-Length: 3477

Content-Type: application/x-javascript

Content-Encoding: gzip

Vary: Accept-Encoding

Px-Uncompress-Origin: 8887

Last-Modified: Tue, 14 May 2013 09:07:56 GMT

Connection: keep-alive

...........Y.w.F.. .3.R`.5v.p.O.>._cp&Y.....b!.:|...oUw..Ofw...RuuuwU.W...c....>(....0....5..sBm.......r:....m....C....\NVz.....t.d93.I.]...-`.o.....K.aO.k..>{.Q..oe.T{UB..?.w..J...JT. w..............u..k...#X.k...u.W.B.j..0......V......,........{..T.. ...BM...?.o].Y.*...]k.8...0B..V..._<.....lK0../|.......h.M.gF..B..VS6#j... .n...A.b3....KJ..sJ[2k..%1Ye..^4...Y.i.30N.N..ho../.p.nE..Q!...J)i....H.......}&.....<.x.d.*.'..........X8.5.Q....Y..y...a. .....F..5v...F..?.......3n.d:H.....d.=.....-.........f..5.W.......Fe..(jw4..|>.<>..-./.....z2....,y4<.......mg.......i..........f.N/..^7>o. kex#P..... .mt...f3g...V.....J....m.q_.w...6W.......3va.....).......E.......W9....8.?.......e..........,...;....o..h...e....9?.H.5......y..8x...,....F.../p@.}.E*;..t.V.[."8..a1..)....".q&.65p.p7......nu..y...0...$.<..n...U..Y..u..(1......@..3^~$.....>.kA4..X.B..9^^.f.b3.D...r...#..>..R..C.Dr....?....;......R..p.<..cS}5]'......s.tO...XsP.9.6.........>.. .u.[...`.:.!.X}.@../8V..i.6c5..i....g..*..6....!.d.Q|X..rp....K9&..._..s.#...].sj<...@`.......tW.F<..?..2..1...n......)... ^..3...oO..?..n...Gk...V|q#....Q.?..z.....6..>zqam...^"'Y.\.a....F........M..f.K..;...m,(.....(DU.....ip.).M....C.<m..;...&..5.=.a2=. W..e.Z1.s...V.../.p..Ki....r.. ........<..N.Z.....q.]..e@.A.#.M.i.5.)\,;....R......_.y$......pn.fEi}.....^<..>7..C1Wc..WTW..M|].@..`..l.".....D.9i.}.P_W.BI@z#...#.U....i....)..,). D.4Qs.{.22a. 4.(.P.....aK#..w..........^.4.._...&......$........Z..dz..=....'.k....Iz

<<< skipped >>>

GET /cgi-bin/qlogin?domain=qq.com&lang=2052&qtarget=1&jumpname=payjump&ptcss=&param=url%3Dhttp%253A%2F%2Fpay.qq.com%2F&css=&mibao_css=&low_login=0&ptui_version=10031 HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: xui.ptlogin2.qq.com

Connection: Keep-Alive

Cookie: pgv_pvid=8291483752; pgv_info=pgvReferrer=&ssid=s6116220956

HTTP/1.1 200 OK

Date: Sun, 08 May 2016 06:53:13 GMT

Content-Type: text/html

Content-Length: 5890

Connection: keep-alive

Server: QZHTTP-2.38.20

P3P: CP="CAO PSA OUR"

Cache-Control: max-age=604800

Set-Cookie: pt_local_token=1846423606; PATH=/; DOMAIN=ptlogin2.qq.com;

Last-Modified: Thu, 08 Mar 2012 02:04:00 GMT

<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "http://VVV.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xmlns="hXXp://VVV.w3.org/1999/xhtml">..<head>..<meta http-equiv="X-UA-Compatible" content="IE=EmulateIE7" />..<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />..<style type="text/css">u{text-decoration:none}body{font-family:Tahoma,Verdana,Arial,......;font-size:12px;margin:0}.clear{clear:both;font-size:0;line-height:0;height:0}#login{margin:0 auto;float:none;width:320px;padding:0 0 10px 50px}.linemid{padding:10px 8px 0 30px;color:gray}.btn_select,.btn_gray{border:0;color:#2473a2;width:103px;height:28px;padding-left:2px;cursor:pointer;font-weight:bold;font-size:14px}.btn_select{background:url(hXXp://imgcache.qq.com/ptlogin/v4/style/0/images/icons.gif) no-repeat -102px -130px}.btn_gray{background:url(hXXp://imgcache.qq.com/ptlogin/v4/style/0/images/icons.gif) no-repeat -102px -225px}#login #list_uin img{padding:7px;background:url(hXXp://imgcache.qq.com/ptlogin/v4/style/0/images/icons.gif) no-repeat 0 -329px}#list_uin li{list-style:none;padding:0 0 0 28px; padding-left:12px;width:270px;word-wrap:break-word;min-height:20px;clear:both}#list_uin li input{float:left;margin-bottom:5px;width:20px}#list_uin label{margin:2px 0 0 4px;float:left;width:220px}#login p{padding:8px 15px 12px 32px;margin:0;font-size:12px;color:#535353}.x_lowLogin{padding:10px 0 0 28px;display:none}</style>..<script type="text/javascript">..var g_begTim

<<< skipped >>>

GET /home/client_2012.shtml HTTP/1.1

Accept: */*

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: speed.qq.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: X2_Platform

Connection: keep-alive

Date: Sun, 08 May 2016 06:54:33 GMT

Cache-Control: max-age=120

Expires: Sun, 08 May 2016 06:56:33 GMT

Last-Modified: Sun, 08 May 2016 06:50:00 GMT

Content-Type: text/html

Content-Length: 3418

Content-Encoding: gzip

X-Cache-Lookup: Hit From Disktank Gz

...........Z.o.U...K....vm..g..........(.Eh.E....}...;3....L...........--.4.4.@...h ......"....;3.8NZV..6Q.q....;.{..c....8.......6.ccx#.m.r.R..:eE...K.e...T.R...#.....pk3...E..yU.Y.d..D.p..mV...n{.Dt....t.4#D(*..u.lU..z..&......6.O.&.f..:..`.....m .....Cg?:.|.../.^Z.....o..s.zVUW..........5.|../W.\...........9.1...<eq9t..0f.}.:.|..................?.r.....7N.x...O.k_].J\..../\]} .\.........."....7....|... ...C.vs......$.Z~O..~..S........K?....;........[..Sw......tF.... k....).d.{&..M..J.2SQ....c..:6. ......O^x.7..$...3.^;y!.j.M.r0.zme..?..z.B._^.....c....N....- ;...n.Z2o8............2o7e.B.j..)..l..m.]S6.....l.:3e..M&{...d.X.P..V..V..ir..z.d..nfNJ.M.v\V..*$..Ut.i.[..'..d..8.....LQ.7.r....B...{.a4$n@...Lg...-.M ..g......J....a. ...d...F.X[.H.....J.JOX.hr7. .m..>d......|..........;V.3.......1g1...$Uz1......yF.a..u.X .}....6`.0..r..gV/....o...G...o.U....8..........$.i;..G..|....>.t..e.........j..%..k.`..P..,.....-...]......E.,*.P.....0.....,..E2...U.g..|...o...|..6Y. .....f..Y......y..e4.g3.X.Z.E......6lp....6..Ohu.."...vY.n.$Z.^...Zwm.....O.aV...01Y.......<,V#.9..;..u.D......z....Y.m..."..BuO.~.P......a{...LB....a...F..U|.I&.1&..K......U7m}."...........:`.....yi..y.6..ZC.T.9.swPZ..>...4.p0fF...d.....?..k..?7.!..8V,M..... .b....Qc./..:Nf3x*....=.t1.O..dWh..TF...6...o.....J{v...z-.O-....x..bX!S.RF4..$LR...n....R..C.4.%hs.>......'.C.<.L.....]9...>.pk...0...94.B....l.c0<C..U%1.z2O"-.5...c..5...Zk.>..]..7.O.t..#..=/L..gr.U.....E.'......it-..%/1..f...v.I...:..:......z.9.Y.\.j'..jtQ%.(D.../

<<< skipped >>>

GET /images/speed/tgact/tgact_more.css HTTP/1.1

Accept: */*

Referer: hXXp://speed.qq.com/home/client_2012.shtml

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ossweb-img.qq.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: X2_Platform

Connection: keep-alive

Date: Sun, 08 May 2016 06:54:34 GMT

Cache-Control: max-age=86400

Expires: Mon, 09 May 2016 06:54:34 GMT

Last-Modified: Fri, 14 Nov 2014 08:43:25 GMT

Content-Type: text/css

Content-Length: 254

Content-Encoding: gzip

Access-Control-Allow-Origin: *

X-Cache-Lookup: Hit From Disktank Gz

.............j.0.....C......k.<..Q.&m.jn..Z...R'.:......sO.cW7X...J....D....\ .idI.f.G..,.......u..y..d...V....n.N,D^9U#..U.=...r8)..pf.H.,'_.E.'.Bp...M`..)..... ..p..........G...Y....ez....%....B......[_,.?n...fM.u..(...i.m 3!...y....Y....,...|.f...........

GET /images/speed/act/a20121106client/bg.jpg HTTP/1.1

Accept: */*

Referer: hXXp://speed.qq.com/home/client_2012.shtml

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ossweb-img.qq.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: X2_Platform

Connection: keep-alive

Date: Sun, 08 May 2016 06:54:35 GMT

Cache-Control: max-age=86400

Expires: Mon, 09 May 2016 06:54:35 GMT

Last-Modified: Thu, 10 Jan 2013 02:06:37 GMT

Content-Type: image/jpeg

Content-Length: 1320

Access-Control-Allow-Origin: *

X-Cache-Lookup: Hit From Disktank

......JFIF.....d.d.....C............................. .....!%0)!#-$..*9*-13666 (;?:4>0563...C...........3"."33333333333333333333333333333333333333333333333333......W..................................................................!1aqA...............................................................?...^..5....?...4......Y.f..Z.@.PZ.@..P(......(...PJ.@.PJ...@.....A(%...A*.@....P(&.%Q*.....PM.M.M.v.t..dJ.{O.R......\.Z.Ah...AsAh...@.PZ...-..@.P(...@.P*.Q(.....n....%..P(%..PJ.....A..7A...........M.v...f.........AsEZ"...\.(-..f..(-...(...@.P(.....@.U..@.U....A*.T*.T*...P(..t..A7A(&.....&.&.3@.....[..."n.R..3Ah..........Z...PZ.@.\.......Ah...P(.....A(.B.P(...@....@.PJ.DJ)@....PM.M.M.M.gt........QR..(..........\.(...Ah.....P(.....@.PZ...A(.....T..@.PJ.T....PJ.P7A(..t..P7A..(&.&.3..O=j....@.P(-.sD(5..@.P(-..Ah-..@.P(.....@.P(-........C...(...A(%..@.P(%..PJ..t....PJ...@.zy.Q.eX...@.pU.\....P....@.P(.....Ah..........@.....A(.....P(....AA( ..t.@..w@...PM...u#..Vu..(.(..`..@.(.P(..(...D(......PQO...p..Q....@.PJ...P(..J..%...@...........P{ycu.-.j.. 0..(....h(...o..T..@...h-.J.........(......@.....P(....!.*PA.J.......A7@....M.{...e.q.gQYA4..L.... .*.Q...f...D.i..@.P(...P.h%..@.Q.R.PPJ...(.....D.(........gA..@4T.>.8.Yr.V7..j*h.......V.@..guQ1F.QJ.j..j..nb..O`.. ,.X.O.:~...C.........@H.....N..w..........@@....4.G..nt>....

<<< skipped >>>

GET /images/speed/tgact/tgact_more.png HTTP/1.1

Accept: */*

Referer: hXXp://speed.qq.com/home/client_2012.shtml

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ossweb-img.qq.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: X2_Platform

Connection: keep-alive

Date: Sun, 08 May 2016 06:54:35 GMT

Cache-Control: max-age=86400

Expires: Mon, 09 May 2016 06:54:35 GMT

Last-Modified: Fri, 14 Nov 2014 12:18:23 GMT

Content-Type: image/png

Content-Length: 9909

Access-Control-Allow-Origin: *

X-Cache-Lookup: Hit From Disktank

.PNG........IHDR...S...b.....,.......tEXtSoftware.Adobe ImageReadyq.e<...fiTXtXML:com.adobe.xmp.....<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="hXXp://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:2467B85FD66BE411BCF2E7461F18FF0A" xmpMM:DocumentID="xmp.did:4C875F916BF811E495B2AE6501B00617" xmpMM:InstanceID="xmp.iid:4C875F906BF811E495B2AE6501B00617" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2A67B85FD66BE411BCF2E7461F18FF0A" stRef:documentID="xmp.did:2467B85FD66BE411BCF2E7461F18FF0A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...C..".IDATx..]yt].y.{.{.l......Z..`....1..!@.I.KR.&9'Mr..&..I9....?...'i.Ph....`. f5.l...wY.-..$...7...........{.'.......yt...|..7....Z{.W..h.s...?>b.Wo..`.......bY..Y.P....1..?..B...w...-.8....g.|...J......O1.................v..T%....M.F......Q.......!(..._..........s......V~.1..[.:..&~.}1N,.u..G...W..........u.aX..h...v.\.x.%....X8..1.dE.c.....iV.8......UB..`(........Y?v......0....@|.rB^.J.w;I._...Ou...z.*...J@......]1.@%y.\.Z.a.......x.#........TG...y.. .C..'.D.&..kCF..@U.e&....h.....@....rW......?Vt....J....#....x7..

<<< skipped >>>

GET /images/speed/act/a20121106client/dot.png HTTP/1.1

Accept: */*

Referer: hXXp://speed.qq.com/home/client_2012.shtml

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ossweb-img.qq.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: X2_Platform

Connection: keep-alive

Date: Sun, 08 May 2016 06:54:36 GMT

Cache-Control: max-age=86400

Expires: Mon, 09 May 2016 06:54:36 GMT

Last-Modified: Wed, 28 Nov 2012 09:15:11 GMT

Content-Type: image/png

Content-Length: 1463

Access-Control-Allow-Origin: *

X-Cache-Lookup: Hit From Disktank

.PNG........IHDR...2............?....tEXtSoftware.Adobe ImageReadyq.e<... IDATx..X]HcG.......Wc.KWE..4l]JP.n.Z./.-R....P.....>t[a...G......W)...Ev........n.....f5....Mr...I.%ls.I.=.1.....s.9sF...!..P.0...tN.....1.*.EZ.:HO~}.........@.I.2...;@T...3;.=.y..XXX....\...u...3...q...X,...........>l...(.....\.m......u..s.........Swp....._..g'..9.p0Ttvv^ZYY..(....H.....c1..........<.....p............oV57''9.......n.......\G*.......^..a..*..5..F.....U..;..~.G.....lx3..J..D"0..?......a...8.......c...i9.......up...A@.9"3'.;#2.0....|.....E3Y ....Jj..;...HY.*m.a.6.6...H ,........].P.S...Q-..=..L,--]... .E..Q.^hmm.kzz.4.....30.R/8....."...&:..T..1j.,...50U.......a.,.i......=C..522B .....j.../B...\Z....!..#..3.X........cN(E.../.....Mz....v.....gA..K...J....>-.|2..0..".Xoe...e..~.pi..|1 .8.....{.PB6.Q..e.....u...PI.8..........2B.....R.#t.T]]....~(.p..p.w(R...I.<A.......^....j...E..*.HQ....xh@i.<..V..B.I.SG.MMM~..iJ4.....EU.......9-G....?.F.\JVx.W'''....)..c?<..QF...\..S... .......@.A:::B.............L..._S~.%B..............afj...ie..DG333................k.......o....moq..=....:......5.....)......f)..aA..}}}........b}Z..........7..N.mt.2...A..K.}......VG....;UJ.(.^... 044..v._.E...$....Au...G`|||..t.i&..Vy$.L*....?.&e?......UT]I..HP.. 1...a..rh?............n..C.=...hfm.q..3...d...B..*..5fC.G. ...2.)..W..3P.......Hz.........O(c.e..{....%:O]...v...U..8<....D..zG...Z.S..........e.c...7..:.......d_....DS....IEND.B`./* |xGv00|5ffc0d0776967b236228f0897789e8f0 */....

<<< skipped >>>

GET /images/js/mms/speed.qq.com.js?random=1462690478198 HTTP/1.1

Accept: */*

Referer: hXXp://speed.qq.com/home/client_2012.shtml

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ossweb-img.qq.com

Connection: Keep-Alive

Cookie: pgv_pvid=8291483752; pgv_info=pgvReferrer=&ssid=s6116220956

HTTP/1.1 200 OK

Server: X2_Platform

Connection: keep-alive

Date: Sun, 08 May 2016 06:54:37 GMT

Cache-Control: max-age=600

Expires: Sun, 08 May 2016 07:04:37 GMT

Last-Modified: Sun, 28 Jun 2015 05:30:02 GMT

Content-Type: application/x-javascript

Content-Length: 0

Access-Control-Allow-Origin: *

X-Cache-Lookup: Hit From Disktank

....

GET /images/clientpop/speed/adrecommend/1462083277/1462083277.jpg?_r=1462690477963 HTTP/1.1

Accept: */*

Referer: hXXp://speed.qq.com/home/client_2012.shtml

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ossweb-img.qq.com

Connection: Keep-Alive

Cookie: pgv_pvid=8291483752; pgv_info=pgvReferrer=&ssid=s6116220956

HTTP/1.1 200 OK

Server: X2_Platform

Connection: keep-alive

Date: Sun, 08 May 2016 06:54:37 GMT

Cache-Control: max-age=86400

Expires: Mon, 09 May 2016 06:54:37 GMT

Last-Modified: Sun, 01 May 2016 06:15:06 GMT

Content-Type: image/jpeg

Content-Length: 62564

Access-Control-Allow-Origin: *

X-Cache-Lookup: Hit From Disktank

......Exif..II*.................Ducky.......U......hXXp://ns.adobe.com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="hXXp://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:3127878A0513E4119700E2455585A83C" xmpMM:DocumentID="xmp.did:DFE0B3450DBD11E69D55B5B0AC67F731" xmpMM:InstanceID="xmp.iid:DFE0B3440DBD11E69D55B5B0AC67F731" xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:21276987-52f6-4241-90c3-8870d914b45e" stRef:documentID="xmp.did:3127878A0513E4119700E2455585A83C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d....................................................................................................................................................................................................................................................!1..A.Qaq".....2#..BRbr...3$....CSt%......4.5&'.csT.......V.........................!1..AQ.a"..q...2...BR#.br....3....S$..Cs..4..c..t.T5....d...%Uu6............?..r.....D.eD.%.r....J:..h<.q.-TRyp.#Rs.p6H.....)XB.F.

<<< skipped >>>

GET /upload/adw/image/201605/1462055587704299265.jpg HTTP/1.1

Accept: */*

Referer: hXXp://speed.qq.com/home/client_2012.shtml

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ossweb-img.qq.com

Connection: Keep-Alive

Cookie: pgv_pvid=8291483752; pgv_info=pgvReferrer=&ssid=s6116220956

HTTP/1.1 200 OK

Server: X2_Platform

Connection: keep-alive

Date: Sun, 08 May 2016 06:54:39 GMT

Cache-Control: max-age=15768000

Expires: Sun, 06 Nov 2016 18:54:39 GMT

Last-Modified: Sun, 01 May 2016 06:33:07 GMT

Content-Type: image/jpeg

Content-Length: 61118

Access-Control-Allow-Origin: *

X-Cache-Lookup: Hit From Disktank

......Exif..II*.................Ducky.......U......hXXp://ns.adobe.com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="hXXp://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:3127878A0513E4119700E2455585A83C" xmpMM:DocumentID="xmp.did:710226A00DB511E685C7A79A515A123F" xmpMM:InstanceID="xmp.iid:7102269F0DB511E685C7A79A515A123F" xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:b14f86a7-3634-7448-a125-510e44a9ff51" stRef:documentID="xmp.did:3127878A0513E4119700E2455585A83C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d.....................................................................................................................................................................................................................................................!1AQ..a"..q..2#..BR....b3..r..C$4%v.9...S..dt.&w.:.s..c.T.Uu...8.........................!1..AQ.aq"......2...B..Rr.#34.b........$5s.C.Sc.%............?...e......P..P.c...J..'/.9.{]8Jx...y...w.u..........y .^.......p.

<<< skipped >>>

GET /upload/adw/image/201605/1462416531767829987.jpg HTTP/1.1

Accept: */*

Referer: hXXp://speed.qq.com/home/client_2012.shtml

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ossweb-img.qq.com

Connection: Keep-Alive

Cookie: pgv_pvid=8291483752; pgv_info=pgvReferrer=&ssid=s6116220956

HTTP/1.1 200 OK

Server: X2_Platform

Connection: keep-alive

Date: Sun, 08 May 2016 06:54:39 GMT

Cache-Control: max-age=15768000

Expires: Sun, 06 Nov 2016 18:54:39 GMT

Last-Modified: Thu, 05 May 2016 10:48:51 GMT

Content-Type: image/jpeg

Content-Length: 74991

Access-Control-Allow-Origin: *

X-Cache-Lookup: Hit From Disktank

......Exif..II*.................Ducky.......U......hXXp://ns.adobe.com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.5-c021 79.154911, 2013/10/29-11:47:16 "> <rdf:RDF xmlns:rdf="http://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="hXXp://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:3127878A0513E4119700E2455585A83C" xmpMM:DocumentID="xmp.did:7CD6FDF812AB11E6A059C8EB8869D37C" xmpMM:InstanceID="xmp.iid:7CD6FDF712AB11E6A059C8EB8869D37C" xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:ff97b88b-05b6-ec40-99e8-cf6bccf49957" stRef:documentID="xmp.did:3127878A0513E4119700E2455585A83C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d....................................................................................................................................................................................................................................................!..1..A.Q".aq2#...B..R3...br$.....CSc4%...s..T5Uu...t....e.&6F........................!1..AQ.aq....."2..B.....Rb..#r.3.......4.CScs..$T...D%5................?....k..mb..o......GS..Uv.]:)B..X..I.....}t.J......R'.......

<<< skipped >>>

GET /upload/adw/image/201605/1462415256509930926.jpg HTTP/1.1

Accept: */*

Referer: hXXp://speed.qq.com/home/client_2012.shtml

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ossweb-img.qq.com

Connection: Keep-Alive

Cookie: pgv_pvid=8291483752; pgv_info=pgvReferrer=&ssid=s6116220956

HTTP/1.1 200 OK

Server: X2_Platform

Connection: keep-alive

Date: Sun, 08 May 2016 06:54:40 GMT

Cache-Control: max-age=15768000

Expires: Sun, 06 Nov 2016 18:54:40 GMT

Last-Modified: Thu, 05 May 2016 10:27:36 GMT

Content-Type: image/jpeg

Content-Length: 81198

Access-Control-Allow-Origin: *

X-Cache-Lookup: Hit From Disktank

......Exif..II*.................Ducky.......U......hXXp://ns.adobe.com/xap/1.0/.<?xpacket begin="..." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c067 79.157747, 2015/03/30-23:40:42 "> <rdf:RDF xmlns:rdf="http://VVV.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpRights="hXXp://ns.adobe.com/xap/1.0/rights/" xmlns:xmpMM="hXXp://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="hXXp://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="hXXp://ns.adobe.com/xap/1.0/" xmpRights:Marked="False" xmpMM:OriginalDocumentID="xmp.did:3127878A0513E4119700E2455585A83C" xmpMM:DocumentID="xmp.did:CD6CEB87129911E6ADD4E7431534F008" xmpMM:InstanceID="xmp.iid:CD6CEB86129911E6ADD4E7431534F008" xmp:CreatorTool="Adobe Photoshop CC (Windows)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:9ae984b2-5c18-164f-a481-010c0ef4ab4f" stRef:documentID="xmp.did:3127878A0513E4119700E2455585A83C"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d....................................................................................................................................................................................................................................................!.1A".Q..aq2#...B...R3$..bS.....c4..r.C..Td%5.....EUe'.&W.......................!1..AQ.aq"......2..BR..br#....3.....CS..cs..$....4%.T5............?..c.r......*nJ..#.J.E...qd..n-.]......)E..>..4..I.V.nqd..*.dy.R. M.

<<< skipped >>>

GET /ptlogin/v4/style/0/images/icons.gif HTTP/1.1

Accept: */*

Referer: hXXp://xui.ptlogin2.qq.com/cgi-bin/qlogin?domain=qq.com&lang=2052&qtarget=1&jumpname=payjump&ptcss=&param=url%3Dhttp%253A%2F%2Fpay.qq.com%2F&css=&mibao_css=&low_login=0&ptui_version=10031

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: imgcache.qq.com

Connection: Keep-Alive

Cookie: pgv_pvid=8291483752; pgv_info=pgvReferrer=&ssid=s6116220956

HTTP/1.1 200 OK

Date: Sun, 08 May 2016 06:55:03 GMT

Server: PWS/8.1.36.0005

X-Px: rf-ht h0-s1100.p11-fra ( h0-s1214.p11-fra), rf-ht h0-s1214.p11-fra ( h0-s1032.p7-icn), ht h0-s1032.p7-icn.cdngp.net

ETag: "5506987c-1ede"

Cache-Control: max-age=7200

Expires: Sun, 08 May 2016 08:41:22 GMT

Age: 822

Content-Length: 7902

Content-Type: image/gif

Last-Modified: Mon, 16 Mar 2015 08:46:52 GMT

Connection: keep-alive

GIF89as.r.................................................^....A...................! ............B.....}....................1)-t....................j...........................................................c..>..p[E............z...........q.....u.....j.........................................Z.................b..................................................^................................!.......,....s.r.....'..........X......'...............................X.............................X......................................)....Fz%.K.1.......*\......#J.H.....3".........I.....'K.S..e..0..\).&..-m...RgO.3w..94(..F..T.t...P.J.J.*..X...*....%Fr.K....h..].....p....KWn..x....p...'..\....... ^......#K.L.....3C..w..................@...c.....k..g....v.......|....q ..{.....K...te...k..0...'....F......_.........O..............z....B.Y_:.....6.........ZP...b(a..n.!......!.8..".h..(..b.0....2.x..8....;>...@.._.D.i...&i`..q.1..PF)..P>Y..Db...\....^....Y.Y&.[..&._....o....r....l.y..|......J....j(.5$...p\..gIzV..p.....f....v.....*....j.............".....j..<........... ....k...&....6...MD m...X...8....L.....;m.........n....n........ko...................0..$....7....G,....`...< ........C ...$.l.....2.*[.2./.... ..2.7..3.;.,..<....=.-t.H..t.L....PG-..TS...Xg...(t.5...$.....I......_....p{..._....(..w.|....}..w...>.............G....W....d....w.y......].`..80 6.............n............../....o|..$..........Q..U...GF0....w...../.....o.............3 ....a..X.!A!K.....0...@......L......:......'H..Z.......

<<< skipped >>>

GET /time/qqadv/Info_new_48.js?v=1462690477963 HTTP/1.1

Accept: */*

Referer: hXXp://speed.qq.com/home/client_2012.shtml

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: game.qq.com

Connection: Keep-Alive

Cookie: pgv_pvid=8291483752; pgv_info=pgvReferrer=&ssid=s6116220956

HTTP/1.1 200 OK

Server: X2S_Platform

Connection: keep-alive

Date: Sun, 08 May 2016 06:54:38 GMT

Cache-Control: max-age=60

Expires: Sun, 08 May 2016 06:55:38 GMT

Last-Modified: Sun, 08 May 2016 06:00:08 GMT

Content-Type: application/x-javascript

Content-Length: 2133

Content-Encoding: gzip

Keep-Alive: timeout=60

X-Cache-Lookup: Hit From Disktank Gz

...........Y.n.G...C..d.....F. ...9....-...QO.....S=..P.\..l. zMQ.S]....O...W..w....._.y.......{... ..(..|X.]Q.Ee.9.\..._....bN.Wo.^......g.....d..f..j5[..g..tP......g.....?[.~Y.WG..o.'/...}..........1..... |~...g....Gr...J................hb....?_.2....F........a.......b=;..p5.\...}Z..._]Z......W2..g ...........P\..BN....v(.N{......k.h.............hT\.Q.b..;..$L..;tL............O.#Ji...-..(.(.EeS.....(.@....>.....:d\.1.IE..;..c..Y4h....=.B ..kf -...... ._..[.W./.....8..'X.!H..g@.#}......37..':..J..d-.x.E.*...TX-..gS......A9..9F....Z..'A.ez...=P.j....[..sA~..Zp....D.p.y...............FYA......r....7!..pp?Dr...)..{..!V...%I.c.v..!O..."N...f......w"..J.........l77..O..g.p\...r.p..s.L)(.;.......q..7.....\.I.Rw-.<UoS..h_.t<....W._............BT.j...4.c._.A^....U.....r.........8j.S#..'N......P..8.lh.S...`]D...G08e%)w0J].b ..An.N..w.....~.QoP.. ....v..Y .4&h....]..u..M.......,...A..O.......G1........t...w.*a..n.o..%.(`.............GfW... L.[f#e...b...d...,... ....7..f)<h.$.}...EE....6.Fh..\:...y........"..p&..=k._.....w..o.)..aX0o8.4.......O......9.Se..O.,5n..J.|..i..8/J0O&6.<[...F.#g...k....:.!.d.A%...:...6.......jW...L....I-b.E.<A....3.=..(..[....0...[.d.p.<........"7.....h.j*M=..c.Rk'.o...n5.{..-....y)....y.....d.L..;2....7..L...8n`.\}u.[..u..j....L.2.....c...'...z..&Tyr.W.......2DH.o...c.h..e...;......k..C......e...3....-.....a....;..n.dw'...J..t L.(I.y..Qz....4.....u...7.2.._...x.y.,....q..<.........E^Z.....X.,.J.Y|....fkd..Bfjh..@...i=./<.ZA........a.............aoe..l^....v<.I.L..

<<< skipped >>>

GET /client_pop/recommendReport?bid=speed&act_type=5&algo=4&uin=0&recommend_id=0&t=1462690477963&loc=3594&id=177719&act_id=23721&table_type=1&e_code=228699 HTTP/1.1

Accept: */*

Referer: hXXp://speed.qq.com/home/client_2012.shtml

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: apps.game.qq.com

Connection: Keep-Alive

Cookie: pgv_pvid=8291483752; pgv_info=pgvReferrer=&ssid=s6116220956

HTTP/1.1 200 OK

Server: nginx

Date: Sun, 08 May 2016 06:54:38 GMT

Content-Type: text/plain; charset=utf-8

Content-Length: 37

Connection: keep-alive

var report_ret={"iRet":0,"sMsg":"OK"}HTTP/1.1 200 OK..Server: nginx..Date: Sun, 08 May 2016 06:54:38 GMT..Content-Type: text/plain; charset=utf-8..Content-Length: 37..Connection: keep-alive..var report_ret={"iRet":0,"sMsg":"OK"}....

GET /eas/comm/eas.php?m=SendLog&show_ads=48.5088.178119.229558|48.5087.177724.228706|48.5086.178503.229569|48.3596.178710.229780|48.3595.178493.229556|48.3593.177718.228717|48.3592.178492.229555&click_type=1&t=1462690479994 HTTP/1.1

Accept: */*

Referer: hXXp://speed.qq.com/home/client_2012.shtml

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: apps.game.qq.com

Connection: Keep-Alive

Cookie: pgv_pvid=8291483752; pgv_info=pgvReferrer=&ssid=s6116220956

HTTP/1.1 200 OK

Server: nginx

Date: Sun, 08 May 2016 06:54:39 GMT

Content-Type: application/json

Content-Length: 65

Connection: keep-alive

X-Powered-By: PHP/5.2.14p1

Access-Control-Allow-Methods: GET,POST

Access-Control-Allow-Headers: Content-Type

Access-Control-Allow-Credentials: true

..window['SendLog_RES'] = {"ret_code":"0","msg":"OK","data":null}HTTP/1.1 200 OK..Server: nginx..Date: Sun, 08 May 2016 06:54:39 GMT..Content-Type: application/json..Content-Length: 65..Connection: keep-alive..X-Powered-By: PHP/5.2.14p1..Access-Control-Allow-Methods: GET,POST..Access-Control-Allow-Headers: Content-Type..Access-Control-Allow-Credentials: true....window['SendLog_RES'] = {"ret_code":"0","msg":"OK","data":null}..

GET /blog-227084-538.html HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

Accept: */*

Host: bbs.125.la

Cache-Control: no-cache

HTTP/1.1 200 OK

Date: Sun, 08 May 2016 06:55:02 GMT

Content-Type: text/html; charset=gbk

Transfer-Encoding: chunked

Connection: keep-alive

Set-Cookie: __cfduid=dde24ddea8d121be247f7044d3883815a1462690501; expires=Mon, 08-May-17 06:55:01 GMT; path=/; domain=.125.la; HttpOnly

Vary: Accept-Encoding,Accept-Encoding

X-Powered-By: PHP/5.2.17

Set-Cookie: BJgu_ecc9_saltkey=lvvI1mqB; expires=Tue, 07-Jun-2016 06:54:48 GMT; path=/; domain=.125.la; httponly

Set-Cookie: BJgu_ecc9_lastvisit=1462686888; expires=Tue, 07-Jun-2016 06:54:48 GMT; path=/; domain=.125.la

Set-Cookie: BJgu_ecc9_sid=Ywwwq9; expires=Mon, 09-May-2016 06:54:48 GMT; path=/; domain=.125.la

Set-Cookie: BJgu_ecc9_lastact=1462690488 home.php space; expires=Mon, 09-May-2016 06:54:48 GMT; path=/; domain=.125.la

Set-Cookie: BJgu_ecc9_viewid=blog_538; path=/; domain=.125.la

Set-Cookie: BJgu_ecc9_sid=Ywwwq9; expires=Mon, 09-May-2016 06:54:48 GMT; path=/; domain=.125.la

Server: yunjiasu-nginx

CF-RAY: 29fb00f465af371a-ARN

edd..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "hXXp://VVV.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">.<html xmlns="hXXp://VVV.w3.org/1999/xhtml">.<head>.<meta http-equiv="Content-Type" content="text/html; charset=gbk"/>.<title>.... - ................ ........</title>.<meta name="keywords" content="...."/>.<meta name="description" content="..28.. ,........"/>.<meta name="generator" content="Discuz! X3.1"/>.<meta name="author" content="Discuz! Team and Comsenz UI Team"/>.<meta name="copyright" content="2001-2013 Comsenz Inc."/>.<meta name="MSSmartTagsPreventParsing" content="True"/>.<meta http-equiv="MSThemeCompatible" content="Yes"/>.<base href="hXXp://bbs.125.la/"/><link rel="stylesheet" type="text/css" href="data/cache/style_1_common.css?Ou0"/><link rel="stylesheet" type="text/css" href="data/cache/style_1_home_space.css?Ou0"/><script type="text/javascript">var STYLEID = '1', STATICURL = 'static/', IMGDIR = 'static/image/common', VERHASH = 'Ou0', charset = 'gbk', discuz_uid = '0', cookiepre = 'BJgu_ecc9_', cookiedomain = '.125.la', cookiepath = '/', showusercard = '0', attackevasive = '0', disallowfloat = 'newthread', creditnotice = '2|......|..,3|....|..,4|....|.. ,5|......|..,6|....|..', defaultstyle = '', REPORTURL = 'aHR0cDovL2Jicy4xMjUubGEvYmxvZy0yMjcwODQtNTM4Lmh0bWw=', SITEURL = 'hXXp://bbs.125.la/', JSPATH = 'static/js/', DYNAMICURL = '';</script>.<script src="static/js

<<< skipped >>>

GET /blog-227084-542.html HTTP/1.1

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

Accept: */*

Host: bbs.125.la

Cache-Control: no-cache

Cookie: __cfduid=dde24ddea8d121be247f7044d3883815a1462690501; BJgu_ecc9_saltkey=lvvI1mqB; BJgu_ecc9_lastvisit=1462686888; BJgu_ecc9_sid=Ywwwq9; BJgu_ecc9_lastact=1462690488 home.php space; BJgu_ecc9_viewid=blog_538

HTTP/1.1 200 OK

Date: Sun, 08 May 2016 06:55:07 GMT

Content-Type: text/html; charset=gbk

Transfer-Encoding: chunked

Connection: keep-alive

Vary: Accept-Encoding,Accept-Encoding

X-Powered-By: PHP/5.2.17

Set-Cookie: BJgu_ecc9_lastact=1462690492 home.php space; expires=Mon, 09-May-2016 06:54:52 GMT; path=/; domain=.125.la

Set-Cookie: BJgu_ecc9_viewid=blog_542; path=/; domain=.125.la

Set-Cookie: BJgu_ecc9_sid=Ywwwq9; expires=Mon, 09-May-2016 06:54:52 GMT; path=/; domain=.125.la

Server: yunjiasu-nginx

CF-RAY: 29fb0114a891371a-ARN

6a29..<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "hXXp://VVV.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">.<html xmlns="hXXp://VVV.w3.org/1999/xhtml">.<head>.<meta http-equiv="Content-Type" content="text/html; charset=gbk"/>.<title>........ - ................ ........</title>.<meta name="keywords" content="........"/>.<meta name="description" content="..hXXp://tianyou8.ys168.com.. ,........"/>.<meta name="generator" content="Discuz! X3.1"/>.<meta name="author" content="Discuz! Team and Comsenz UI Team"/>.<meta name="copyright" content="2001-2013 Comsenz Inc."/>.<meta name="MSSmartTagsPreventParsing" content="True"/>.<meta http-equiv="MSThemeCompatible" content="Yes"/>.<base href="hXXp://bbs.125.la/"/><link rel="stylesheet" type="text/css" href="data/cache/style_1_common.css?Ou0"/><link rel="stylesheet" type="text/css" href="data/cache/style_1_home_space.css?Ou0"/><script type="text/javascript">var STYLEID = '1', STATICURL = 'static/', IMGDIR = 'static/image/common', VERHASH = 'Ou0', charset = 'gbk', discuz_uid = '0', cookiepre = 'BJgu_ecc9_', cookiedomain = '.125.la', cookiepath = '/', showusercard = '0', attackevasive = '0', disallowfloat = 'newthread', creditnotice = '2|......|..,3|....|..,4|....|.. ,5|......|..,6|....|..', defaultstyle = '', REPORTURL = 'aHR0cDovL2Jicy4xMjUubGEvYmxvZy0yMjcwODQtNTQyLmh0bWw=', SITEURL = 'http://bbs.125.la/', JSPATH = 'static/js/', DYNAMICURL = '';</scri

<<< skipped >>>

GET /pingd?dm=client.speed.qq.com&url=/home/client_2012.shtml&arg=-&rdm=-&rurl=-&rarg=-&ied_rf=--&ied_qq=-&pvid=8291483752&scr=1276x846&scl=32-bit&lang=en-us&java=1&cc=x86&pf=Win32&tz=-3&flash=11.0&ct=lan&vs=o3.0.2&custvar=-&ext=235&reserved1=&rand=56280&tt= HTTP/1.1

Accept: */*

Referer: hXXp://speed.qq.com/home/client_2012.shtml

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pingfore.qq.com

Connection: Keep-Alive

Cookie: pgv_pvid=8291483752; pgv_info=pgvReferrer=&ssid=s6116220956

HTTP/1.1 200 OK

Connection: Keep-Alive

Content-Length: 0

HTTP/1.1 200 OK..Connection: Keep-Alive..Content-Length: 0..

GET /php/gshow.php?loc_id=16_3214abe0434e3db6b529e0c73f7e110c&data_type=jsonp HTTP/1.1

Accept: */*

Referer: hXXp://speed.qq.com/home/client_2012.shtml

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: ac.o2.qq.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: nginx/1.4.4

Date: Sun, 08 May 2016 06:54:38 GMT

Content-Type: text/html

Transfer-Encoding: chunked

Connection: close

Vary: Accept-Encoding

X-Powered-By: PHP/5.3.6

Cache-Control: no-cache,no-store

Content-Encoding: gzip

14a..............mK.0...K.EA....N.........4...t...!c...:..P.9......V..F.........8#.dmZ.@4.9..h.Iy.x..M.JEd.....Ht.z?....`G5.......a.$n.N..7}...,].h.:9%.9.0B3..A........e..i..yMSV...,9..:..f.......;....I'..;..i...........i J......"....4._Fl..4(.^{....9......a....O..6....u...5,<.`.U.=.9.fL..dZ../c..V..><DV..}@.1.=.p...6ht...>..g2.I......0..

GET /ping_tcss_ied.js HTTP/1.1

Accept: */*

Referer: hXXp://speed.qq.com/home/client_2012.shtml

Accept-Language: en-us

Accept-Encoding: gzip, deflate

User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022; .NET4.0C)

Host: pingjs.qq.com

Connection: Keep-Alive

HTTP/1.1 200 OK

Server: NWS_UGC_HY

Connection: keep-alive

Date: Sun, 08 May 2016 06:54:35 GMT

Cache-Control: max-age=600

Expires: Sun, 08 May 2016 07:04:35 GMT

Last-Modified: Thu, 16 Jan 2014 09:31:32 GMT

Content-Type: application/x-javascript

Content-Length: 4686

Content-Encoding: gzip

X-Cache-Lookup: Hit From Disktank Gz

...........Z.s.8.. 6.O!#.....,.Z.8.I.rL...L.^.-A......l...._..!.N...JY .n..u....#.....mqO...e....EP.,>..U9..D.z........W......._.........o..$...E..X}...L.W.Ml;..=.I...Z0.;).?.......W..,....<.....$.l.xj.T;.h..\.2...=m2....lh........U<.G......7MA!..n.".tnS>.o.c..=)....b`..G...\......j.d9j.,.B...x._I...}Q...m.......].n..$.y............R.....0.yY`I.B_..w|..^.O..Y:..3.r....S>....N.y.]G....C..f.5.a..E...,.i"s..=...:c.a{..3_...K.J.&.U.u.....:.~.....?.....>.Z$...... ../....tr'..?...,...B.Ya....7J&.........r. ....C....y..4.W.`\.%Y(y1.."..<.ptL0..l....cwoP..4...N.F.!.7.....a..-....d.(.3.w]........Y....l....J......p......"..pu.....=....`R.4..~Z.]/J;.....(....(..).%n.?|...}..u4..<...9U.........4.8._.V]a..U..O(....%.&...coI...r.l._.\v:..SA"e2..,P...t....t......Z./Z.....{a=z<VC............Ac.0. ..|.%K...ZX})J.@.kW..t. S;.L...iea. ...79..A:.\.`..|..f%&..... ............Juc...G.._>.."..T;.Mv.K.z..j...j.E*d.d.~...p....u.@...[&..B.k...Vn.....'.vK.6...^D,.z.....uB.D...C.6..u.^.!Is.U..-...vm.........|....@m..:.1..W...l9KeY. .5..0...6....e..g.A".UR..,..A.S..>......I6z..K.D..Z.....[........Tp,... ...-.....).F1.x.mY.'|N...I.o.2...~..~.'1kK.p.;..I....6?...p....V...B...u.....7.*yk .......iu.Z.[_..(...P.;.. ..9.Q..b.\.. .`t..JpGm.....3oMb.......B@j.h.1...>.L.."t..$...(.......d...e....k...ro.zo.U..!V........-..e...4.=.'..7.h......(b.........V...y....d.4...........ZX..se.l_..._.i..b....J...."r.....]/.8.8p..}.......{.^..yC7xvq.....b...h..O.j....A.....B.s/....../....O.....Ko..........Ck.h..".[$...zS..b2Ip

<<< skipped >>>

Map

The Trojan connects to the servers at the folowing location(s):

Strings from Dumps

%original file name%.exe_1504:

.text

.rdata

@.data

.rsrc

@.text

t$(SSh

~%UVW

u$SShe

user32.dll

wininet.dll

ole32.dll

shlwapi.dll

kernel32.dll

Msimg32.dll

MsgWaitForMultipleObjects

EnumWindows

HttpOpenRequestA

HttpSendRequestA

HttpQueryInfoA

GetAsyncKeyState

MapVirtualKeyA

keybd_event

EnumChildWindows

{E5000198-4471-40e2-92BC-D0BA075BDBB2}

{E60056EA-07A8-4bf5-B6F0-DF05DE6FAE1F}

{A068799B-7551-46b9-8CA8-EEF8357AFEA4}

{A0005538-9391-4dd9-B4D6-8EB7B9360F08}

hXXp://web20070.web-60.com

hXXp://cache.tv.qq.com/qqplayerout.swf?auto=1&playertype=4&v=t10834o3l2c

hXXp://cache.tv.qq.com/qqplayerout.swf?auto=1&playertype=4&v=o108381y6cg

hXXp://cache.tv.qq.com/qqplayerout.swf?auto=1&playertype=4&v=w1083pr6gpv

C:\Windows\WinwsUpdatec1.txt

C:\Windows\WinwsUpdatec2.txt

hXXp://cache.tv.qq.com/qqplayerout.swf?auto=1&playerty

hXXp://static.video.qq.com/TPout.swf?auto=1&vid=9G2WoEmWS6k

hXXp://cache.tv.qq.com/qqplayerout.swf?auto=1&playertype=4&v=w1083ppdhqq

hXXp://cache.tv.qq.com/qqplayerout.swf?auto=1&playertype=4&v=n1083gmkv91

GameApp.exe

GAMEAPP.exe

@qq.com

hXXp://cache.tv.qq.com/qqplayerout.swf?auto=1&playertype=4&v=d10837qkfpr

hXXp://guanjia.qq.com/web_clinic/detail/89_detail.html?title=Ã¨â€¦Â¾Ã¨Â®Â¯Ã¤Â¸â€œÃ¥Å’Âº&id=2

hXXp://bbs.125.la/blog-227084-535.html

@hXXp://bbs.125.la/blog-227084-531.html

365990609

hXXp://iframe.ip138.com/ic.asp

Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; 125LA; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022)

http=

https

HTTP/1.1

Content-Type: application/x-www-form-urlencoded

hXXps://

hXXp://

Adodb.Stream

smtp.qq.com

hXXp://cache.tv.qq.com/qqplayerout.swf?auto=1&playertype=4&v=z1083vcvx1b

C:\Windows\QQ

hXXp://check.ptlogin2.qq.com/check?uin=

&aid=15002005&u1=http://qz.qq.com&h=1&ptredirect=1&ptlang=2052&from_ui=1&dumy=&fp=loginerroralert&action=3-14-10797&mibao_css=&t=1&g=1

hXXp://ptlogin2.qq.com/login?u=

Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)

Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-shockwave-flash, application/vnd.ms-excel, application/vnd.ms-powerpoint, application/msword, */*

skey=

hXXp://user.qzone.qq.com/365990609

%WinDir%\WinwsUpdatec.txt

Ã¶66'

x.ll..

L>O%C

\Configuration.ini

hXXp://bbs.125.la/blog-227084-538.html

.iqW>

"3/%F

%du2$"

.unOZ

hXXp://pay.qq.com/

hXXp://cache.tv.qq.com/qqplayerout.swf?auto=1&playertype=4&v=d1083f7ssi5

hXXp://cache.tv.qq.com/qqplayerout.swf?auto=1&playertype=4&v=c1083hwedc9

@C:\Windows\WinwsUpdatec.txt

@C:\Windows\WinwsUpdateuc.txt

hXXp://cache.tv.qq.com/qqplayerout.swf?auto=1&playertype=4&v=b108349x0oh

hXXp://cache.tv.qq.com/qqplayerout.swf?auto=1&playertype=4&v=z1083ui4nmt

hXXp://captcha.qq.com/getimage?aid=15002005&uin=

hXXp://cache.tv.qq.com/qqplayerout.swf?auto=1&playertype=4&v=m108303tqjj

C$%cmb

.ppM|

aZ.mO

%-^

.hk;~

KERNEL32.DLL

COMCTL32.dll

GDI32.dll

MSIMG32.dll

MSVCRT.dll

MSVFW32.dll

USER32.dll

SkinH_EL.dll

hXXp://cache.tv.qq.com/qqplayerout.swf?auto=1&playertype=4&v=m1083qk99oa

%S4WD

hg%fpM

S.Ac9SR

0.I%3s

,wAe.kI

aiUy'4xu

%c*@j

.eH'y

{&%U)

lj%4U

xe%CNs

9F.cLe

hJK.ZH

O.qt0

hXXps://aq.qq.com/cn2/findpsw/pc/pc_find_pwd_input_account?source_id=1003&ptlang=2052&aquin=

hXXp://vliveachy.tc.qq.com/videoctfs.tc.qq.com/y0133nqqnhj.mp4?vkey=FD296FE169DCC8244BDD36D93E2E67CE46A539B3D7B747A6BD99C2A41551F18BDE0977B4FD51AD709A088B24B473731CDFABD910570D68D3&ocid=378740652

8.1-9.23

hXXp://cache.tv.qq.com/qqplayerout.swf?auto=1&playertype=4&v=g1083hl38om

hXXp://cache.tv.qq.com/qqplayerout.swf?auto=1&playertype=4&v=b10837izwsd

hXXp://cache.tv.qq.com/qqplayerout.swf?auto=1&playertype=4&v=c10836debcg

hXXp://cache.tv.qq.com/qqplayerout.swf?auto=1&playertype=4&v=e10839eolun

hXXp://cache.tv.qq.com/qqplayerout.swf?auto=1&playertype=4&v=m1083rs1ogl

hXXp://cache.tv.qq.com/qqplayerout.swf?auto=1&playertype=4&v=s1083jny137

hXXp://bbs.125.la/blog-227084-542.html

hXXp://cache.tv.qq.com/qqplayerout.swf?auto=1&playertype=4&v=c10837vaxpl

hXXp://pan.baidu.com/s/1mgKBKA8

$@user32.dll

-PT%.QV

bd#%F

LB.BB

%0U"AM

@foxmail.com

@163.com

@hotmail.cn

@live.cn

@tom.com

@vip.163.com

@139.com

@126 .com

@188.com

@sina.com

@yahoo.com.cn

@21cn.com

@sohu.com

Y4zqtf8/&rpid=362277265&resourceId=362277265_04_05_99/v.swf

hXXp://VVV.ulead.com

hXXp://oscar.teclink.net/~bshanks/kcs.

new3.bmp

hXXp://hi.baidu.com/djppzompuabejrd/item/f6121ec36a45f7e8ee183bfa

hXXp://hi.baidu.com/djppzompuabejrd/item/278113c6343c91e597445226

876005160@qq.com

)hXXp://ns.adobe.com/xap/1.0/

" id="W5M0MpCehiHzreSzNTczkc9d"?>

%5u6V(h

%1U)3J

3U%FtP

%u}qLS3

W.aPJ

Ãž%PD@

%x(tJ9Dy

$ÃVR

Bg.rG

,8.aP

G}%U)D

%SLQV

f6'sQH%U

.dKrN

x.HP

H}V%Uf

VVV.meitu.com

hXXp://speed.qq.com/home/client_2012.shtml

876005160

37Wx

&e.PI

~%xoL

~"IXn.VI

.WN6km$

.comment {color:green}

.hcdGAr

hXXp://player.youku.com/player.php/sid/XMTUyNTY2MDA4OA==/v.swf

hXXp://player.youku.com/player.php/sid/XNTg4NjY4NjUy/v.swf

hXXp://user.qzone.qq.com/365990609/blog/1458951080

, #&')*)

-0-(0%()(

NqS.UE

r6.uO

%D 8%

.SOCU

20000-49999

4000-19999

800-3999

80001-160000

40001-80000

12001-40000

4002-12000

1601-4000

801-1600

10001-50000

5001-10000

1501-5000

301-1500

hXXp://pan.baidu.com/s/1jsrvS

=...~462

5%!%s555

%" "_0,0

7222~333

hXXp://speed.qq.com/act/a20110801zzlb/

hXXps://shenghuo.alipay.com/send/payment/fill.htm?_ad=c&_adType=alipay_my_home_aide01&optEmail=123456789@qq.com&payAmount=

hXXp://xui.ptlogin2.qq.com/cgi-bin/qlogin?domain=qq.com&lang=2052&qtarget=1&jumpname=payjump&ptcss=&param=url%3Dhttp%253A%2F%2Fpay.qq.com%2F&css=&mibao_css=&low_login=0&ptui_version=10031

365990609

hXXp://VVV.111ttt.com/fmp/index.htm

^%f?"

,T.Wd

@eY.ei

D11R%SY%

".kf2

WS[1%X

GÃYi

.krb.2

y*o%u

.Ero`

T%Ub2

B.dBr

L%-5R}

55%xyuX

.RiaL[r>

.CPcSba

3NRpb.Nx

g.Pqoxv

%XV>r

.nJeJ

hXXp://VVV.tudou.com/v/FGR-Y4zqtf8/&rpid=362277265&resourceId=362277265_04_05_99/v.swf

1.2.18

%*.*f

CNotSupportedException

commctrl_DragListMsg

Afx:%x:%x:%x:%x:%x

Afx:%x:%x

COMCTL32.DLL

CCmdTarget

MSWHEEL_ROLLMSG

__MSVCRT_HEAP_SELECT

%$%,%4%

S%T%U%V%W%X%Y%Z%[%\%]%^%_%`%a%

b%c%d%e%f%g%h%i%j%k%l%

W%X%Y%Z%[%

Z%T%i%f%`%P%l%

%$%a%b%V%U%c%Q%W%]%\%[%

%,%$%4%

eZl%u

Q.YeY

R:\Sg|p5rL

e$e#e e4e5e7e6e8eKuHeVeUeMeXe^e]erexe

s4s/s)s%s>sNsOs

qq!r!x!/!L"k!^!-!y"_!`!!&"&$&%&&&'&(&)&*& &,&-&.&/&0&1&2&3&4&5&6&7&8&A&B&C&D&E&F&G&H&I&J&K&L&M&N&O&P&Q&R&S&T&U&V&W&X&''!'"'#'$'%'&'(')'*' ','-'.'/'0'1'2'3'4'5'6'7'8'9':';''?'@'A'Q'R'S'T'U'V'X'Y'Z'['\']'^'_'`'a'b'c'd'e'f'g'h'i'j'k'l'm'n'o'p'q'W'>!=!B!F!G!H!I!w"x"E!D!s"l!m!("n!r" ","*"-"M"N"O"_"P"`":";"]!e"g"g!\"J"K"A"@"i"j"h!h"f"b"b!a"e!f!c"d">"?"(9(4(((8(=(3(*(:(?(5( (;(@(6(#"""%"$"'"&"!"~!{!}!|!~"z!y!j!i!v"u"t"!!"!#!7!9!:!;!R!S!T!U!V!W!X!Y!Z![!)"."L!M!A!!$"$#$$$%$&$'$($)$*$ $,$-$.$/$0$1$2$3$4$5$6$7$8$9$:$;$$?$@$A$B$C$D$E$F$G$H$I$J$K$L$M$N$O$P$Q$R$S$T$U$V$W$X$Y$Z$[$\$]$^$_$`$a$b$c$d$e$f$g$h$i$j$k$l$m$n$o$p$q$r$s$ !,!5!6!!%"%#%$%%%&%'%(%)%*% %,%-%.%/%0%1%2%3%4%5%6%7%8%9%:%;%%?%@%A%B%C%D%E%F%G%H%I%J%K%L%M%N%O%P%Q%R%S%T%U%V%W%X%Y%Z%[%\%]%^%_%`%a%b%c%d%e%f%g%h%i%j%k%l%m%n%o%p%q%r%s%t%u%v%&!0;e>>NBJ$PfC%Pz6&P]40Cg P52e6p8iL&VpM}FE5,P-P;N=MhA/Pv;sF2P>1_8^8f0KOJO3:!03P4P5P4K6Pr8g0rK|5}5~5bDP

B?PUIg@8!@PBPeBaNJ0AP>2D6gCo7CP$Gk4DPK0`8l4zI2HY5q2gPAElGFPMEPGPn:HP$UPPSPQPB2;JKPOPs8H;&4TPLPcNx;MPRPUPNP!6M0"6A2%UyKnIt8/?7NXJ87Â½2S=YP^P\PWP/BZP]P[P]JXP.?sK_P`P$=mPPG6IhPpJ62lPfPoPRAD8\GG`nP]EcPv8u8aPZQ~F4A@QAQ,Hx8;OBQ&6L{Qd3uQsQOAwQvQD3`7|Q-NxQ}QzQyQONy8C2tNu=XEe9"R#ReN O%Rz8$R/3&RVK)RgJ-R*@*RP6 R 4.7.R/R0R1R[)6:R[H;RR$Ih6e0?F?R==i@AR@R#>a8CR>HDR\H4BnB(6nF1CnGNKFRj@57GRHR,1u0m4(BQ5qMKR72JR*6LRqLMRRN|868NRPROR_?91^1QRRR78SRn52;TRtK5:Z5'MPA?H}\RZRD2fB8F>L!9yMGE~8/7gRc6JK]HfR^4aRbRdReR[5a?-JcR_Rc8`R$OrJhDb8p9hR]FlR~Si:13yR%Sv0$S%0JI"S|RwR}RH:&Sw0/S'S(S%>iK-S,S/E.S S416:0?)SbE*S"04S#M'>:S9S0SCB1SoB6S&>3SdL31WS^2bS|>^S\S]S_S=19AYSZSz3aSo4dS`ScS.JUF8HfSeSE3gSjSiShS9GkSlSnSmSpSsSqSoSrStSuSvSwSxSEQ|?T@T>TBT8Gh0VICT}>9HEf:NT=J]Nt2JT:AMTcEIEdE9HMDI:ITv16EKTGTP?OTN=-6PThJ}AFDRTOKSTXT/JWTQTTTVT&:IJYTECu2m>[TZTh9\T^T]T`TUTbTaT_TN;Q?TAcT~T%C}T3Jw=[E!U%9"U!G^HQL%G U85EM/L,V#U&UEB8KJE'UeKJ:*>(UP;O;90H8 @Q0,U-U*U81/4)UEL1I(0y0Q;R0#02U0U4U,OLG6U':9UXI:U5U;L^G;U2IUy7LUEUBUdCAUCUDUFUGUr4IUHUJUn>MU\DE1KUNUOURUPUQUR;SU&9TUz;8BUUVUZ;'9RL(5I8WUX3XU9BYU#VZU[U\U^U_U`UpB'1iH2bUFMI=drUsUS0:BR?tU3F.>/>uUm@0>vUwU`LxUF6"=yUzU\VGVFVEVAV@VDVxJKVHVJVrMIV?Vs?LV7:MVNVQVPVOVhE:VWVSVRVTVUVXVfNYVVVZV`4[V]V\V^V_Vn@#=d=cA)98:*9p5`V9:J8aV&LCGbV 9,4'CR6T;[IAHcVu4fV!DeVdVgVkDc?U;J@SB"5"DhViVo>9KlVkVjV}IsVZKmVoVkKnVpV(HqV>JrV34?J/GtVuV,944vV88DM)Mv4xV#D-91>_H2>x=lDyJ9E.9\IyVYEB:K8mDC0n=/9GMzV{VQG|VwN-O~V}VG3!W$W%W#W@I3>'W&W"W(W)W*W-W W,W.Wd1nD/Wz7v26G0W{F[J1W.O2W@J5W!P1P0W@WvEAWBWCW4W3WDWA7'IL:7I&DKIEW4>F1FWGWrL`HJW}1,@IWHWB7TBNWLWKW'Ne8y=MWLE>=@FQWPWOWRWf8SW|I[=TWyHAF'D0EUW 54?,Iw4&GVWV;:K;K~1[WiCXWw2-XZW0GYWWWz9]WcWiWaW\EfW]I`WeWgNW;UB^W^5hW-@e1bWx2gW16dWjWlWvWtWqWpWxNrW2619z=yWkWoW_Wz2sWuWQC(:82mWxWwW36)Bf3C7nWzW}W!X=/XWFGO X1X{9K@T0*X(XZA|W4;FB=X[A8X5X6XfX?XU03Xr6&064;XCXBXGXHXFXIXAXEXJXKX@X|;DXVB292X5?XXiJNXOXPXWXVX}K74TXE743QX8NSXV0UXLXRXYXD7MX]M M\X`X~AyNaX^X[XZX_X0J4FF7bX]XcX{712kX84iXjX):hXfXeXlXdXnX{2pXoX(DsXqXgX|7rXvXuXwXtXxXyXzXjJ|X{X?=.@f2|2}X?0L@~XCl!Ya7"Yo@#Y$Y:5%Y&Y'YWBM8aL;50Y7Y6>1YDG^M3Y4Y8YjE5Y39^@FY4HrBdH-ZzJqDuK;Y!2jCDY4C>YEY@YGYCYBYoGAYRGr5H3g3!?IYNYJY}7OY";i9&==Y};LYX;MYD0HY)Ds546KY'0C:6?rDTHQY^A*B ;RYTYPYaJ=D\A{JNhF1GWY]AxVY[YSGUY!7]3]Y NN:5CZY\@59d?f15Z9Z7Z8ZpY;Z:ZxYZ@Z?ZAZ~269|J/@N8CZFZRI_5EZDZTGGZ56IZHZ:46;XFI7t?JZ0@(E_IKZLZMZ8J]UF@LIX:eHCHMEANOZP_Z;>@L*:W0N@fZ1@G1U=fKr:'@eZcZdZkC&[jZ~;89hZiZ8?gZ/;lZkZpZqZmZ"3nZoZUHaIJ7rZ2@=>RCG6sZwZK2tZvZuZk=HCE0xZyZ*DqNC;kJ=K"[{Z~Z}ZzZ![^F|Z#[l=$[KMxG%['[([)[J6H199*[ [q=bAXR>A=AXBG:rPn7-M~J~I,[s:?D-[/O>K D.[|4/[0[ZL$LvK\K%;2[k;[NE9[ B:[r>]L>DHG[zH>[D[C[O@mKSNgKL2^;HOF[u?E[@[O8L[J[M2H[N[T[HBAJV["IU[pG?K;4w@@=SD.MQ[P[R[O[W[M[K[S[I[lCxLF<::oka3ndjfi1r>mTh8|Mh[tD#3-:`[p[a3n[r[nE~42\ILw[}4~[@K!\#\'\y[*CoE \|[(\"\9?,\3@*\=4POv[&\X0x[:L}["?GDs[%\z?/\q3!81\z[0\)\{[-\.\?\NF$\;\=\XDLMvI8\JB>\?A5\B\A\oF@\jFD\7\H6:\]=`GOLx\k\"8#2_3S\A>p\w\y4=]]N27C?]?4A]@]B]C]D]_;5@!:pIbJDOu;P:rNE]F]`;G]H]J]I]XK^=l9SCi]q]j]ABb5r]h7%5p]n]k]`M@DYFl]t]s]#7-2;:m]o]WKtBwK|]}]O2(J}L!^#x]~]h176u]z]t@qGgHw]!Ky]$^"^{]"KHGc5%EmC%^#^YBv]K1NM0^/^v@,^lM6F&^EDL1?9)^'=.^-^(^ ^h3*^IG.Nt>u@6^4^MI1^3^:1@92O=3bIaM$3;?5^:^C>0M7^2^8^^NsEBF63U1>^A^CNdMH^B^?^TNE^J=G^L^qEJ^D^8CK^@^F^M^|0C^N^=^B=L79CT^/MW^P^rES^Y^QO>_<_ _ioe_i_g_c_d_h_f_nin_k_j_m_tfo_ucmb>3AF>{Nj_y@f_k_l1i_aGe_h_H>QHl_Q59`:`$8HH;`86=`?`>`@`Q8A`i6@A}9C`D`B`m7IHc`~`i`=8e5f`}M0NvBh`j`VNW6|HJGk`m`p`l`o`j8M1q`p?n`\Nt`$tr`u`g`s`<:v a-a.a0a h-i>aVHAaBa[0v>GaDamFCa&5JaEaFaIaHa%IBAAA?5KaLaMaOaNaV1WahHQaSaUa>?VaTa@YaXaZa&[aKD]a!N\aiAbadaeaTCca`a^a_aaahafagaiakalamanajapaoaqaENtarasab4~LJJvauawaxa|ayaza{a}a~a!b"b#b/HPE$brG4I%b&b*E'3D9'b(b)b); b*b,b-biH.b/bis0b1b2b.;3bVG_KN1W14b6b5bpE9@9]7bAL8bF4WH9b:b;b\LUL>DjA=bb=J>@b?b>b}HG4)8FbCb??2LBbDbEbAbGbHb/Dc4eCIbJbMbg?DFNbSKKbLbQbPbObSbRbTbVbUbMJV=FNWb7FXbYb]b[b\bZb^b_b`bab7LbbpLcbNCjGk6;Cdb:6P@eb=:fbgb&8U:ibVEV:N5$KKGWE\9kbK>2NE9'8#Hmbobk8nbvDqb73lbjH01l:ROpbrbKJY@tbubsbN3{bzb'ÃŒA'c&c(chbjb*c)c(ckHEAAcBciGA??caC@cN>\0)5CcxDDcG@-L#IEcFcUCGNHcGcoScO3Ucj7f5Vcu6Wc|@MF`@u:XcbCkAZc\cYc[c"7]c&7g5RM_c`c.1ccv3bcacec^cfc)NgchctTjcickclc5NmcopO>ncocW=8Fpc(Cqcxcyc Ezc^3Z?dI|chBwc{c}c{:&d.I&HyEZ6%d#d5H~c^C{EzEv:8d(d*d-d.d d,d)d'd!dOJU25d2d7d6dsG'L;;0d9d4d3d/d1dI4=C}@"H>d$Ha@;dOH?dSJ[C:djdhdfdndmdldkdodpd:@qdsdrdR88Aud|Etdvd5JlAG9wdHNydzd{d|de;}dO7j5*5!esLH9~d$efL0:)e*=>8HA%e e&eP7.e2ek7-e6eJ9mMC?e=0JL>e[6lHmAPNo=neHe~@DeIeKeyDNeJeTJK4KL^0Me}NLeo1lFOeVePeWeSe{GJf;fO)HkfS>*IlfjfN4T8h;nH*8CKofmfN9O9i0h:YG_0tf@CXG[Bvfrfufpfsf&KU8}0qfxfyf9F;6&g=Gi;G1D#g"g~fU?eI%g$gP9SO5g)g*gpg22Eg@gAgBg!BDgCgFgGgHgC?i2IgWN h0h|GiM9hOhGh{?F5]6Bh[2T>EhZ:QEJhnJAhZ2V8)IKh?hHhRhChDh:FIhFh(KLh`0@hNhMhkGTh_h~3bhPhUhnM^hUM*NxCk3rIdh!F10]hYhrASh[h`h,G*0XhahxI\hWhU>/=,ehjhsAfhmh_CnhVMch83ihlh,Lohhhkh)K!OshzhrhCI6$iyI}hVh|hOO"FsI i1i2i%ivG/i'i)i3i(i,ir1eF-i0i&i&A*i';E?07tLyLr=7i5iNO4iuM6i8i9ii@i?i1]"]EiDivMj@j?jBjAjZiFjCjDjEjGjl7IjHj0=T9'^JjQ=93KjR1W>LjU9Mja0=INjj?UjRjoCSjPj^6OjVj67^B\jXj5BWjZjQj[j]joHYj^j`jS8TjA0_j[:vNajbjuA"Ncj5MdjejdJfj@:#NkjljX>jjgMgjij=@~?hjmj#Jojnjl3 Kpj|jrjsjtjujyjzjxjvjqjwj{j7p(2~j_6}j"k!k$k#k%k1=&k'k(k>@WM)k$JFG*k k 8,5,kk;AG-kP3.k0kwM/kF?1k2k3kQ44k5k6k7kQ38k9k:kr2(?;kkW7V?Ak$F@k17?kwB-5BkCkY>m7Dk,K_@v5uLJAEkG?pCZ>FkIkJk>:BBHk[>>IGkl;S1NkX7n;m;MOMkLk'AM5CO:3\>KkPkQkOkX8@Mo;'GTk@@BC6MWkl8?@SkXkm8UkVkRkb@IF/C]2pHC54D[kYkLCA@R4Zk[?JN@O\kgk5Dfkckkkdk`k|D_k]k!Mp;ak^kekt=A8zBEKZ1b0%FikhkfFmkbklknk,8jkV9U$ln8%l&l>;NZ'l(l2=)l*l l,l-l C.l0l/l&F1l-K2l3l4l5lZF]>6lk9.P7l8l?I9lAl:ll?l@lBl-3gDiIb:W9OI_2NHElS4U@DlIlyCcLGlHl.5JlcG_BqH=EFlGKl2Ll(OBDEOq;Kl1B\l(AxFPIOl?;r;^>eG-8NlMljIAm?m@m=mAmVEDmGm4n47;nRnPnQnTnSnz>UnVnWnPHS:a[9HKd6F="o$oS6EIby30o?:yAJD;3.o/oCD-o1o7o:o9o-E2o3o6o8o@6;o5o4o?o@oAo>o=ob>*F#1YN p.n*p.p,p-p/p0plN1p2pI@;H}?g4:Mm28=[85p4ps;6p3p(;:p-jVRw?8p%NqF 1c@6pnN9p@pBpAp?pCpDpzAb2Ep8LFpGp*O1[HpIpJpNpKpLpMpOpD@wLE@PpsHQpSsLLRpSpTpW3VpY?Wp$7Xp\pZp[ps3Yp]p^pH0_p`pd>apG5dpcpbpqk\JepfpgphpipjpZ4kplp#Gnp;2qppp$1A6GJ:D":`9g=\?sprpBMh4RH\F|?NN[7vpupKK,FP1wptpQIjMxpyp{pjB[3\3zpi428j4?E`N\8|p}p~p!q#q"qwI$q%q&q'q)q(q*qtHLf)?25 q,q,R;]SH{0;0t;0K~>-q_L.q\MB1A;/qn20q1q3q4q6q2q5q[47q8q9q:q;q=qq@qAqCqB6s3OGGqHqZCkFIq}GLBX1n6o6sCNqp6o2MqKqLqJqXqOqPqQqRqTqSqY=UqWq35Vq{A38YqMBZq-F[q`q^q]q_q\qbqaqdqC6cqeqfqhqgqiqkqjq|9lqmq0:r J8r;rr?rnK-;z:/A@rCrArDrq8BrErFrGrKr*;dBLrIrHrJr_7PrOrNr30ZrVrWrSrYrUrb3LOXrTrRrQr\r_r^r]rII[rs0`rbro3Mr71drcrar-CpKZNerfrgrhrir;Djr7Horkrlr1KDLPFprqr>Fnrmr*2yrxru1vrursr{3rr2sIO;skBm:?s@sAsBsCs48DsEs/

S%S'S(S)S S,S-S0S2S5SSBSLSKSYS[SaScSeSlSmSrSyS~S

S%S'S(S)S S,S-S0S2S5SSBSLSKSYS[SaScSeSlSmSrSyS~S

d d"d$d%d)d*d/d0d5d=d?dKdOdQdRdSdTdZd[d\d]d_d`dadcdmdsdtd{d}d

d d"d$d%d)d*d/d0d5d=d?dKdOdQdRdSdTdZd[d\d]d_d`dadcdmdsdtd{d}d

B"p"C"m"l"n"4"1"k"D""*!*$***#*)*!).*2*1*4*3*@*?*B*A*P*R*Q*T*X*S*,)c*b*e*d*r*0)N)" ! $ * # ) A). 2 1 4 3 @ ? B A C)P R Q T X S L)c b e d r P)s '*' %*% (*( * ,*, /*/ -*- 0*0 ")B)7*7 6*6 8*8 5*5 :*: ;*; =*= *> $)D)G*G E*E F*F D*E)&)F)H*H I*I G)J*J L*L K*K ))I)()H)M*M O*O N*N J) )K)W*W V*V -)M)Y*Y [*[ Z*Z \*\ ]*] _*_ ^*^ a*a `*` /)O)l*l i*i f*f k*k h*h j*j q*q t*t s*u*u w*w v*v &*& C*C U*U g*g p*p m*m o*o n*n 9 0"/"2"6"5"3"8"9"a&b&c&d&g&i&l&v&e&j&q&r&s&t&{&x&u&z&w&y&|&B'C'D'E'F'G'H'I'J'K'L'M'N'r's't'u'v'w'x'y'z'{'|'}'~'q"o"!0"0#0$0%0&0'0(0)0*0 0,0-0.0/000102030405060708090:0;00?0@0A0B0C0D0E0F0G0H0I0J0K0L0M0N0O0P0Q0R0S0T0U0V0W0X0Y0Z0[0\0]0^0`0a0b0c0d0e0f0g0h0i0j0k0l0m0n0o0p0_0q0r0s0t0u0v0w0x0y0z0{0|0}0~0!1"1#1$1%1&1'1(1)1*1 1,1-1.1/101112131415161718191:1;11?1@1A1B1C1D1E1F1G1H1I1J1K1L1M1N1O1P1Q1R1S1T1U1V1W1X1Y1Z1[1\1]1^1v1_1`1a1b1c1d1e1f1g1h1i1j1k1l1m1n1o1p1q1r1s1t1u1w1x1y1z1{1|1}1~1!2"2#2$2%2&2'2(2)2*2 2,2-2.2/202122232425262728292:2;22?2@2A2B2C2D2E2Q2F2G2H2I2J2K2L2M2N2O2P2R2S2T2U2V2W2X2Y2Z2[2\2]2^2_2`2a2b2c2d2e2f2g2h2i2j2k2l2m2n2o2p2q2r2s2t2u2v2w2x2y2z2{2|2}2~2!3"3#3$3%3&3'3(3)3*3 3,3-3.3/303132333435363738393:3;33?3@3A3B3C3D3E3F3G3H3I3J3K3L3M3N3O3P3Q3R3S3T3U3V3W3X3Y3Z3[3\3]3^3_3`3a3b3c3d3e3f3g3h3i3j3k3l3m3n3o3p3q3r3s3t3u3v3w3x3y3z3{3|3}3~3!4"4#4$4%4&4'4(4)4*4 4,4-4.4/404142434445464847494:4;44?4@4A4B4C4D4E4F4G4H4I4J4K4L4M4N4O4P4Q4R4S4T4U4V4W4X4Y4Z4[4\4]4^4_4`4a4b4c4d4e4f4g4h4i4j4k4l4m4n4o4p4q4r4s4t4u4v4w4x4y4z4{4|4}4~4!5"5#5$5%5&5'5(5)5*5 5,5-5.5/505152535455565758595:5;55?5@5A5B5C5D5E5F5G5H5I5J5K5L5M5N5O5P5Q5R5S5T5U5V5W5X5Y5Z5[5\5]5^5_5`5a5b5c5d5e5f5g5h5i5j5k5l5m5n5o5p5q5r5s5t5u5v5w5x5y5z5{5|5}5~5!6"6#6$6%6&6'6(6)6*6 6,6-6.6/606162636465666768696:6;66?6@6A6B6C6D6E6F6G6H6I6J6K6L6M6N6O6P6Q6R6S6T6U6V6W6X6Y6Z6[6\6]6^6_6`6a6b6c6d6e6f6g6h6i6j6k6l6m6p6q6n6o6r6s6t6u6v6w6x6y6z6{6}6~6|6!7"7#7$7%7&7'7(7)7*7 7,7-7.7/707172737475767778797:7;77?7@7A7B7C7D7E7F7G7H7I7J7K7L7M7N7O7P7Q7R7S7T7U7V7W7`7X7Y7Z7[7\7]7^7_7a7b7c7d7e7f7g7h7i7j7k7l7m7~7n7o7p7q7r7s7t7u7v7w7x7y7z7{7|7}7!8"8#8$8%8&8'8(8)8*8 8,8-8.8/808182838485868788898:8;88?8@8A8B8C8D8E8F8G8H8I8J8K8L8M8N8P8Q8O8R8S8T8U8V8W8X8Y8Z8[8\8]8^8_8`8a8b8c8d8e8g8h8i8j8k8l8m8n8o8p8q8r8s8t8u8v8w8x8y8z8{8|8}8~8!9"9#9$9%9&9'9(9)9*9 9,9-9.9/909192939495969798999:9;99?9@9A9B9C9D9E9F9G9H9I9J9K9L9M9N9O9P9Q9R9S9T9U9V9W9X9Y9Z9[9\9]9^9_9`9a9b9c9d9e9f9g9h9i9j9k9l9m9n9o9p9q9r9s9t9u9v9w9x9y9z9{9|9}9~9!:":#:$:%:&:':(:):*: :,:-:.:/:0:1:3:4:5:6:7:8:2:9:::;:<:>:?:@:A:B:C:D:E:F:G:H:I:J:K:L:M:N:O:P:Q:R:S:T:U:V:W:X:Y:Z:[:\:]:^:_:`:a:b:c:d:e:f:g:h:i:j:k:l:m:n:o:p:q:r:s:t:u:v:w:x:y:z:{:|:}:~:!;";#;$;%;&;';(;);*; ;,;-;.;/;0;1;2;3;4;5;6;7;8;9;:;;;=;;?;@;A;B;C;D;E;G;H;I;J;F;K;L;M;N;O;P;Q;R;S;W;U;T;V;X;Y;Z;[;\;];^;_;`;a;b;c;d;e;f;g;h;i;j;k;l;m;n;o;p;q;r;tfs;t;u;v;w;x;z;y;{;|;};~;!=?=@=A=B=C=D=E=F=G=H=I=J=K=L=M=N=O=P=Q=R=S=T=U=V=W=X=Y=Z=[=\=]=^=_=`=a=b=c=d=e=f=g=h=i=j=k=l=m=n=o=p=q=r=s=t=u=v=w=x=y=z={=|=}=~=!>">#>$>%>&>'>(>)>*> >,>->.>/>0>1>2>3>4>5>6>7>8>9>:>;>=>>>?>@>A>B>C>D>E>F>G>H>I>J>K>L>M>N>O>P>Q>R>S>T>U>V>W>X>Y>Z>[>\>]>^>_>`>a>b>c>d>e>f>g>h>i>j>k>l>m>n>o>p>q>r>s>t>u>v>w>x>y>z>{>~>|>}>!?"?#?$?%?&?'?(?)?*? ?,?-?.?/?0?1?2?3?4?5?6?7?8?9?:?;?=?>???@?A?B?C?D?E?F?G?H?I?J?K?L?M?N?O?P?Q?R?S?T?U?V?W?X?Y?Z?[?\?]?^?_?`?a?b?c?d?e?f?g?h?i?j?k?l?m?n?o?p?q?r?s?t?u?v?w?x?y?z?{?|?}?~?!@"@#@$@%@&@'@(@)@*@ @,@-@.@/@0@1@2@3@4@5@6@7@8@9@:@;@@?@@@A@B@C@D@E@F@G@H@I@J@K@L@M@N@O@P@Q@R@S@T@U@V@W@X@Y@Z@[@\@]@^@_@`@a@b@c@d@e@f@g@h@i@j@k@l@m@n@o@p@q@r@s@t@u@v@w@x@y@z@{@|@}@~@!A"A#A$A%A&A'A(A)A*A A,A-A.A/A0A1A2A3A4A5A6A7A8A9A:A;AA?A@AAABACADAEAFAGAHAIAJAKALAMANAOAPAQARASATAUAVAWAXAYAZA[A\A]A^A_A`AaAbAcAdAeAfAgAhAiAjAkAlAmAnAoApAqArAsAtAuAvAwAxAyAzA{A|A}A~A!B"B#B$B%B&B'B(B)B*B B,B-B.B0B/B1B2B3B4B5B7B6B8B9B:B;BB@BABBBDBEBGBHBIBJBLBCBFBKBMBNBOBPBQBRBSBTBUBVBWBXBYBZB[B\B]B^B_B`BaBbBcBdBeBfBgBhBiBjBkBlBmB?BnBoBpBqBrBsBtBuBvBwBxByBzB{B|B}B~B!C"C#C$C%C&C'C(C)C*C C,C-C.C/C0C1C2C3C4C5C6C7C9C:C;CC?C@CACBCCCDCECFCGCHC8CJCKCLCMCOCNCPCQCRCSCTCUCVCWCXCYCZC[CIC\C]C^C_C`CaCbCcCdCeCfCgChCiCjCkClCmCnCoCpCqCrCsCtCuCvCwCxCyCzC{C|C}C~C!D"D#D$D%D&D'D(D)D*D D,D-D.D/D0D1D2D3D4D5D6D7D8D9D:D;DD?D@DADBDCDDDEDFDGDHDIDJDKDLDMDNDODPDQDRDSDTDUDVDWDXDYDZD[D\D]D^D_D`DaDbDcDdDeDfDgDhDiDjDkDlDmDnDoDpDqDrDsDtDuDvDwDxDyDzD{D|D}D~D!E"E#E$E%E&E'E(E)E*E E,E-E.E/E0E1E2E3E4E5E6E7E8E9E:E;EE?E@EAEBECEDEEEFEGEHEIEJEKEMELENEOEPEQERESETEUEVEWEXEYEZE[E\E]E^E_E`EaEbEcEdEeEfEgEhEiEjEkElEmEnEoEpEqErEsEtEuEvEwExEyEzE{E|E}E~E!F"F#F$F%F&F'F(F)F*F F,F-F.F/F0F1F2F3F4F5F6F7F8F9F:F;FF?F@FAFBFCFDFEFFFGFHFIFJFKFLFMFNFOFPFQFRFSFTFUFVFWFXFYFZF[F\F]F^F_F`F6GaFbFcFdFeFfFgFhFiFjFkFlFmFnFoFpFqFrFsFtFuFvFwFxFyFzF{F|F}F~F!G"G#G$G%G&G'G(G)G*G G,G-G.G/G0G1G2G3G4G5G7G8G9G:G;GG?G@GAGBGCGDGEGFGGGHGIGJGKGLGMGNGOGPGQGRGSGTGUGVGWGXGYGZG[G\G]G^G_G`GaGbGcGdGeGfGgGhGiGjGkGlGmGnGoGpGqGrGsGtGuGvGwGxGyGzG{G|G}G~G!H"H#H$H%H&H'H(H)H*H H,H-H.H/H0H1H2H3H4H5H6H7H8H9H:H;HH?H@HAHBHCHDHEHFHGHHHIHJHKHLHSHMHNHOHPHQHRHTHUHVHWHXHYHZH[H\H]H^H_H`HaHbHcHdHeHfHgHhHiHjHkHlHmHnHoHpHqHrHsHtHuHvHwHxHyHzH{H|H}H~H!I"I#I$I%I&I'I(I)I*I I,I-I.I/I0I1I2I3I4I5I6I7I8I9I:I;II?I@IBICIDIEIFIGIHIIIJIKILIMINIOIPIQIRISITIUIVIWIXIYIZI[I\I]I^I_I`IaIbIcIdIeIfIgIhIiIjIkIlImInIoIpIqIrIsItIuIvIwIxIyIzI{I|I}I~I!J"J#J$J%J&J'J(J)J*J J,J-J.J/J0J1J2J3J4J5J6J7J8J9J:J;JJ?J@JAJBJCJDJEJFJGJHJIJJJKJLJMJNJOJPJQJRJSJTJUJVJWJXJYJZJ[J\J]J^J_J`JaJbJcJdJeJfJgJhJiJjJkJlJmJnJoJpJqJrJsJtJuJvJwJxJyJzJ{J|J}J~J!K"K#K$K%K&K'K(K)K*K K,K-K.K/K0K1K2K3K4K5K6K7K8K9K:K;KK?K@KAKBKCKDKEKFKGKHKIKJKKKLKMKNKOKPKQKRKSKTKUKVKWKXKYKZK[K\K]K^K_K`KaKbKcKdKeKfKgKhKiKjKkKlKmKnKoKpKqKrKsKtKuKvKwKxKyKzK{K|K}K~K!L"L#L$L%L&L'L(L)L*L L,L-L.L/L0L1L2L3L4L5L6L7L8L9L:L;LL?L@LALBLCLDLELFLGLHLILJLKLLLMLNLOLPLQLRLSLTLULVLWLXLYLZL[L\L]L^L_L`LaLbLcLdLeLfLgLhLiLjLkLlLmLnLoLpLqLrLsLtLuLvLwLxLyLzL{L|L}L~L!M"M#M$M%M&M'M(M)M*M M,M-M.M/M0M1M2M3M4M5M6M7M8M9M:M;MM?M@MAMBMCMDMEMFMGMHMIMJMKMLMMMNMOMPMQMRMSMTMUMVMWMXMYMZM[M\M]M^M_M`MaMbMcMdMeMfMgMhMiMjMkMlMmMnMoMpMqMrMsMtMuMvMwMxMyMzM{M|M}M~M!N"N$N%N&N'N(N)N#N*N N,N-N.N/N0N1N2N3N4N5N6N7N8N9N:N;NN?N@NANBNCNDNENFNGNHNINJNKNLNMNNNONPNQNRNSNTNUNVNWNXNYNZN[N\N]N^N_N`NaNbNcNdNeNfNgNhNiNjNkNlNmNnNoNpNqNrNsNtNuNvNwNxNyNzN{N|N}N~N!O"O#O$O%O&O'O(O)O*O O,O-O.O/O0O1O2O3O4O5O6O7O8O9O:O;OO?O@OAOBOCODOEOFOGOHOIOJOKOLOMONOOOPOQOROSOTOUOVOWOXOYOZO[O\O]O^O_O`OaObOcOdOeOfOgOhOiOjOkOlOmOnOoOpOqOrOtOuOvOsOwOxOyOzO{O|O}O~O!P"P#P$P%P&P'P(P)P*P P,P.P/P0P1P-P2P3P4P5P7P8P9P:P;P6P
P?P@PAPBPCPDPEPFPGPHPIPJPKPLPMPNPOPPPQPRPSPTPUPVPWPXPYPZP[P\P]P^P_P`PaPbPcPdPePfPgPhPiPjPkPlPmPnPoPpPqPrPsPtPuPvPwPxPyPzP{P|P}P~P!Q"Q#Q$Q%Q&Q'Q(Q)Q*Q Q,Q-Q.Q/Q0Q1Q2Q3Q4Q5Q6Q7Q8Q9Q:Q;QQ?Q@QAQBQCQDQEQFQGQHQIQJQKQLQMQNQOQPQQQRQSQTQUQVQWQXQYQZQ[Q\Q]Q^Q_Q`QaQbQcQdQeQfQgQhQiQjQkQlQmQnQoQpQqQrQsQtQuQvQwQxQyQzQ{Q|Q}Q~Q!R"R#R$R%R&R'R(R)R*R R,R-R.R/R0R1R2R3R4R5R6R7R8R9R:R;RR?R@RARBRCRDRERFRGRHRIRJRKRLRMRNRORPRQRRRSRTRURVRWRXRYRZR[R\R]R^R_R`RaRbRcRdReRfRgRhRiRjRkRlRmRnRoRpRqRrRsRtRvRwRxRuRyRzR{R|R}R~R!S"S#S$S%S&S'S(S)S*S S,S-S.S/S0S1S2S3S4S5S6S7S8S9S:S;SS?S@SASBSCSDSESFSGSHSISJSKSLSMSNSOSPSQSRSSSTSUSVSWSXSYSZS[S\S]S^S_S`SaSbScSdSeSfSgShSiSjSkSlSmSnSoSpSqSrSsStSuSvSwSxSySzS{S|S}S~S!T"T#T$T%T&T'T(T)T*T T,T-T.T/T0T1T2T4T5T6T7T8T9T:T;TT3T?T@TATBTCTDTETFTGTHTITJTKTLTMTNTOTPTQTRTSTTTUTVTWTXTYTZT[T\T]T^T_T`TaTbTcTdTeTfTgThTiTjTlTkTmTnToTpTqTrTsTtTuTvTwTxTyTzT{T|T}T~T!U"U#U$U%U&U'U(U)U*U U,U-U.U/U0U1U2U3U4U5U6U7U8U9U:U;UU?U@UAUBUCUDUEUFUGUHUIUJUKULUMUNUOUPUQURUSUTUUUVUWUXUYUZU[U\U]U^U_U`UaUbUcUdUeUfUgUhUiUjUkUlUmUnUoUpUqUrUsUtUuUvUwUxUyUzU{U|U}U~U!V"V#V$V%V&V'V(V)V*V V,V-V.V/V0V1V2V3V4V5V6V7V8V9V:V;VV?V@VAVBVCVDVEVGVHVIVJVKVFVLVMVNVOVPVQVRVSVTVVVWVXVUVYVZV[V\V]V^V_V`VaVbVcVdVeVfVgVhViVjVkVlVmVnVoVpVqVrVsVtVuVvVwVxVyVzV{V|V}V~V!W"W#W$W%W&W'W(W)W*W W,W-W.W/W0W1W2W3W4W5W6W7W8W9W:W;WW?W@WAWBWCWDWEWFWGWHWIWJWKWLWMWNWOWPWQWRWSWTWUWVWWWXWYWZW[W\W]W^W_W`WaWbWdWeWfWgWhWiWjWkWlWmWnWoWpWqWrWsWtWuWvWwWxWyW>XcWzW{W|W}W~W!X"X#X$X%X&X'X(X)X*X X,X-X.X/X0X1X2X3XLX4X5X6X7X8X9X:X;XY?Y@YAYBYCYDYEYFYGYHYIYJYKYLYMYNYOYPYQYRYSYTYUYVYWYXYYYZY[Y\Y]Y^Y_Y`YaYbYcYdYeYfYtYgYhYiYjYkYlYmYnYoYpYqYrYsYuYvYwYxYyYzY{Y|Y}Y~Y!Z"Z#Z$Z%Z&Z'Z(Z)Z*Z Z,Z-Z.Z/Z0Z1Z2Z3Z4Z5Z6Zf87Z8Z9Z:Z;ZZ?Z@ZAZBZCZDZEZFZGZHZIZJZKZmZLZMZNZOZPZQZRZSZTZUZVZWZXZYZZZ[Z\Z]Z^Z_Z`ZaZbZcZdZeZfZgZhZiZjZkZlZnZoZpZqZrZsZtZuZvZwZxZyZzZ{Z|Z}Z~Z!["[#[$[%[&['[([)[*[ [,[-[.[/[0[1[2[3[4[5[6[7[8[9[:[;[[?[@[A[B[C[D[E[F[G[H[I[J[K[L[M[N[O[P[Q[R[S[T[U[V[W[X[Y[Z[[[\[][^[_[`[a[b[c[d[e[f[g[h[i[j[k[l[m[n[p[q[r[s[o[t[u[v[w[x[y[z[{[|[}[~[!\"\#\$\%\&\'\*\ \,\-\.\/\0\1\2\3\4\5\6\7\8\9\:\;\\?\@\A\B\C\D\E\F\G\H\I\J\K\L\M\N\O\P\Q\R\S\T\U\V\W\X\Y\Z\[\\\]\^\_\`\a\b\c\d\e\f\g\h\i\j\k\l\m\n\o\p\q\r\s\t\u\v\w\x\y\z\{\|\}\~\!]"]#]$]%]&]'](])]*] ],]-].]/]0]1]2]3]4]5]6]7]8]9]:];]]?]@]A]B]C]D]E]F]G]H]I]J]K]L]M]N]O]P]Q]R]S]T]U]V]W]X]Y]Z][]\]]]^]_]`]a]b]c]d]e]f]g]h]i]j]k]l]m]n]o]p]q]r]s]t]u]v]w]x]y]z]{]|]}]~]!^"^#^$^%^&^'^(^)^*^ ^,^-^.^/^0^1^2^3^4^5^6^7^8^9^?^:^;^^@^A^B^C^D^E^F^G^H^I^N^J^K^L^M^O^P^Q^R^S^T^U^V^W^X^Y^Z^[^\^]^^^_^`^a^b^c^d^e^f^g^h^i^j^k^l^m^n^o^r^p^q^s^t^u^v^w^x^y^z^{^|^}^~^!_"_#_$_%_&_'_(_)_*_ _,_-_._/_0_2_1_3_4_5_6_7_8_9_:_;_<_>_?_@_A_B_C_D_E_F_G_H_I_J_K_L_M_N_O_P_Q_R_S_T_U_V_W_X_Y_Z_[_\_]_o_^___`_a_b_c_d_e_f_g_h_i_j_k_l_m_n_p_q_r_s_t_u_v_w_x_y_z_{_|_}_~_!`"`#`$`%`&`'`(`)`*` `,`-`.`/`0`1`2`3`4`5`6`7`8`9`:`;``?`@`A`B`C`D`E`F`G`H`I`J`K`L`M`N`O`P`Q`R`S`T`U`V`W`X`Y`Z`[`\`]`d`^`_```a`b`c`e`f`g`h`i`j`k`l`m`n`o`p`q`r`s`t`u`v`w`x`y`z`{`|`}`~`!a"a#a$a%a&a'a(a)a*a a,a-a.a/a0a1a2a3a4a5a6a7a8a9a:a;aa?a@aAaBaCaDaEaFaGaHaIaJaKaLaMaNaOaPaQaRaTaUaVaSaWaXaYaZa[a\a]a^a_a`aaabacadaeafagahaiajakalamanaoapaqarasatauavawaxayaza{a}a~a!b"b#b$b|a-b%b&b'b(b)b*b b,b/b0b1b2b.b3b4b5b6b7b8b9b:b;bb?b@bAbBbCbEbFbDbGbHbIbJbKbLbMbNbObPbQbRbSbTbUbVbWbXbYbZb[b\b]b^b_b`babbbcbdbebfbgbhbibjbkblbmbnbobpbqbrbsbtbubvbwbxbybzb{b|b}b~b!c"c#c$c%c&c'c(c)c*c c,c-c.c/c0c1c2c3c4c5c6c7c8c9c:c;cc?c@cAcBcCcDcEcFcGcHcIcJcKcLcMcNcOcPcQcRcScTcUcVcWcXcYcZc[c\c]c^c_c`cacbcccdcecfcgchcicjckclcmcncocpcqcrcsctcucvcwcxcyczc{c|c}c~c!d"d#d$d%d&d'd(d)d*d d,d-d.d/d0d1d2d3d4d5d6d7d8d9d:d;dd?d@dAdBdCdDdEdFdGdHdIdJdKdLdMdNdOdPdQdRdSdTdUdVdWdXdYdZd[d\d]d^d_d`dadbdcdddedfdgdhdidjdkdldmdndodpdqdrdsdtdudvdwdxdydzd{d|d}d~d!e"e#e$e%e&e'e(e)e*e e,e-e.e/e0e1e2e3e4e5e;e6e7e8e9e:ee?e@eAeBeCeDeEeFeGeHeIeJeKeLeMeOePeNeQeReSeTeUeVeWeXeYeZe[e\e]e^e_e`eaebecedeeefehegeiejekelemeneoepeqereseteuevewexeyeze|e{e}e~e!f"f#f$f%f&f'f(f)f*f f,f-f.f/f0f1f2f3f4f5f6f7f8f9f:f;ff?f@fAfBfCfDfEfFfGfHfIfJfKfLfMfNfOfPfQfRfSfTfUfVfWfXfYfZf[f\f]f^f_f`fafbfcfdfefffgfhfifjfkflfmfnfofpfqfrfsfufvfwfxfyfzf{f|f}f~f!g"g#g$g%g&g'g(g)g*g g,g-g.g/g0g1g2g3g4g5g6g7g8g9g:g;gg?g@gAgBgCgDgEgFgGgHgIgJgKgLgMgNgOgPgQgRgSgTgUgVgWgXgYgZg[g\g]g^g_g`gagbgcgdgegfgjggghgigkglgmgngogpgqgrgsgtgvgwgxgygugzg{g|g}g(h~g!h"h#h$h%h&h'h)h*h h,h-h.h/h0h1h2h3h4h5h6h7h8h9h:h;hh?h@hAhBhChDhEhFhGhHhIhJhKhLhMhNhOhPhQhRhShThUhVhWhXhYhZh[h\h]h^h_h`hahbhchdhehfhghhhihjhkhlhmhnhohphqhrhshthuhvhwhxhyhzh{h|h}h~h!i"i#i$i%i&i'i(i)i*i i,i-i.i/i0i1i2i3i4i5i6i7i8i9i:i;ii?i@iAiBiCiDiEiFiGiHiIiJiLiMiKiNiOiPiQiRiSiTiUiViWiXiYiZi[i\i]i^i_i`iaibicidieifigihiiijikiliminioipiqirisitiuiviwixiyizi{i|i}i~i!j"j#j$j%j&j'j(j)j*j j,j-j.j/j0j1j2j3j4j5j6j7j8j9j:j;jj?j@jAjBjCjDjEjFjGjHjIjJjKjLjMjNjOjPjQjRjSjTjUjVjWjXjYjZj[j\j]j^j_j`jajbjcjdjejfjgjhjijjjkjljmjnjojpjqjrjsjtjujvjwjxjyjzj{j|j}j~j!k"k#k$k%k&k'k(k)k*k k,k-k.k/k0k1k2k3k4k5k6k7k8k9k:k;kk?k@kAkBkCkDkEkFkGkHkIkPkJkKkLkMkRkNkOkQkSkTkUkVkWkXkYkZk[k\k^k]k_k`kakbkckdkekfkgkhkikjkkkmknkoklkpkqkrksktkvkukwkxkykzk{k|k}k~k!l"l#l$l%l&l'l(l)l*l l,l-l.l/l0l1l2l3l4l5l6l7l8l9l:l;ll?l@lAlBlClDlElFlGlHlIlJlKlLlNlOlMlPlQlRlSlTlUlVlWlXlYlZl[l\l]l^l_l`lalblcldlelflglhliljlklllmlnlolplqlrlsltlulvlwlxlylzl{l|l}l~l!m"m#m$m%m&m'm(m)m*m m,m-m.m/m0m1m2m3m4m5m6m7m8m9m:m;mm?m@mAmBmCmDmEmFmGmHmImJmKmLmMmNmOmPmQmRmSmTmUmVmWmXmYmZm[m\m]m^m_m`mambmcm7"

B"p"C"m"l"n"4"1"k"D""*!*$***#*)*!).*2*1*4*3*@*?*B*A*P*R*Q*T*X*S*,)c*b*e*d*r*0)N)" ! $ * # ) A). 2 1 4 3 @ ? B A C)P R Q T X S L)c b e d r P)s '*' %*% (*( * ,*, /*/ -*- 0*0 ")B)7*7 6*6 8*8 5*5 :*: ;*; =*= *> $)D)G*G E*E F*F D*E)&)F)H*H I*I G)J*J L*L K*K ))I)()H)M*M O*O N*N J) )K)W*W V*V -)M)Y*Y [*[ Z*Z \*\ ]*] _*_ ^*^ a*a `*` /)O)l*l i*i f*f k*k h*h j*j q*q t*t s*u*u w*w v*v &*& C*C U*U g*g p*p m*m o*o n*n 9 0"/"2"6"5"3"8"9"a&b&c&d&g&i&l&v&e&j&q&r&s&t&{&x&u&z&w&y&|&B'C'D'E'F'G'H'I'J'K'L'M'N'r's't'u'v'w'x'y'z'{'|'}'~'q"o"!0"0#0$0%0&0'0(0)0*0 0,0-0.0/000102030405060708090:0;00?0@0A0B0C0D0E0F0G0H0I0J0K0L0M0N0O0P0Q0R0S0T0U0V0W0X0Y0Z0[0\0]0^0`0a0b0c0d0e0f0g0h0i0j0k0l0m0n0o0p0_0q0r0s0t0u0v0w0x0y0z0{0|0}0~0!1"1#1$1%1&1'1(1)1*1 1,1-1.1/101112131415161718191:1;11?1@1A1B1C1D1E1F1G1H1I1J1K1L1M1N1O1P1Q1R1S1T1U1V1W1X1Y1Z1[1\1]1^1v1_1`1a1b1c1d1e1f1g1h1i1j1k1l1m1n1o1p1q1r1s1t1u1w1x1y1z1{1|1}1~1!2"2#2$2%2&2'2(2)2*2 2,2-2.2/202122232425262728292:2;22?2@2A2B2C2D2E2Q2F2G2H2I2J2K2L2M2N2O2P2R2S2T2U2V2W2X2Y2Z2[2\2]2^2_2`2a2b2c2d2e2f2g2h2i2j2k2l2m2n2o2p2q2r2s2t2u2v2w2x2y2z2{2|2}2~2!3"3#3$3%3&3'3(3)3*3 3,3-3.3/303132333435363738393:3;33?3@3A3B3C3D3E3F3G3H3I3J3K3L3M3N3O3P3Q3R3S3T3U3V3W3X3Y3Z3[3\3]3^3_3`3a3b3c3d3e3f3g3h3i3j3k3l3m3n3o3p3q3r3s3t3u3v3w3x3y3z3{3|3}3~3!4"4#4$4%4&4'4(4)4*4 4,4-4.4/404142434445464847494:4;44?4@4A4B4C4D4E4F4G4H4I4J4K4L4M4N4O4P4Q4R4S4T4U4V4W4X4Y4Z4[4\4]4^4_4`4a4b4c4d4e4f4g4h4i4j4k4l4m4n4o4p4q4r4s4t4u4v4w4x4y4z4{4|4}4~4!5"5#5$5%5&5'5(5)5*5 5,5-5.5/505152535455565758595:5;55?5@5A5B5C5D5E5F5G5H5I5J5K5L5M5N5O5P5Q5R5S5T5U5V5W5X5Y5Z5[5\5]5^5_5`5a5b5c5d5e5f5g5h5i5j5k5l5m5n5o5p5q5r5s5t5u5v5w5x5y5z5{5|5}5~5!6"6#6$6%6&6'6(6)6*6 6,6-6.6/606162636465666768696:6;66?6@6A6B6C6D6E6F6G6H6I6J6K6L6M6N6O6P6Q6R6S6T6U6V6W6X6Y6Z6[6\6]6^6_6`6a6b6c6d6e6f6g6h6i6j6k6l6m6p6q6n6o6r6s6t6u6v6w6x6y6z6{6}6~6|6!7"7#7$7%7&7'7(7)7*7 7,7-7.7/707172737475767778797:7;77?7@7A7B7C7D7E7F7G7H7I7J7K7L7M7N7O7P7Q7R7S7T7U7V7W7`7X7Y7Z7[7\7]7^7_7a7b7c7d7e7f7g7h7i7j7k7l7m7~7n7o7p7q7r7s7t7u7v7w7x7y7z7{7|7}7!8"8#8$8%8&8'8(8)8*8 8,8-8.8/808182838485868788898:8;88?8@8A8B8C8D8E8F8G8H8I8J8K8L8M8N8P8Q8O8R8S8T8U8V8W8X8Y8Z8[8\8]8^8_8`8a8b8c8d8e8g8h8i8j8k8l8m8n8o8p8q8r8s8t8u8v8w8x8y8z8{8|8}8~8!9"9#9$9%9&9'9(9)9*9 9,9-9.9/909192939495969798999:9;99?9@9A9B9C9D9E9F9G9H9I9J9K9L9M9N9O9P9Q9R9S9T9U9V9W9X9Y9Z9[9\9]9^9_9`9a9b9c9d9e9f9g9h9i9j9k9l9m9n9o9p9q9r9s9t9u9v9w9x9y9z9{9|9}9~9!:":#:$:%:&:':(:):*: :,:-:.:/:0:1:3:4:5:6:7:8:2:9:::;:<:>:?:@:A:B:C:D:E:F:G:H:I:J:K:L:M:N:O:P:Q:R:S:T:U:V:W:X:Y:Z:[:\:]:^:_:`:a:b:c:d:e:f:g:h:i:j:k:l:m:n:o:p:q:r:s:t:u:v:w:x:y:z:{:|:}:~:!;";#;$;%;&;';(;);*; ;,;-;.;/;0;1;2;3;4;5;6;7;8;9;:;;;=;;?;@;A;B;C;D;E;G;H;I;J;F;K;L;M;N;O;P;Q;R;S;W;U;T;V;X;Y;Z;[;\;];^;_;`;a;b;c;d;e;f;g;h;i;j;k;l;m;n;o;p;q;r;tfs;t;u;v;w;x;z;y;{;|;};~;!=?=@=A=B=C=D=E=F=G=H=I=J=K=L=M=N=O=P=Q=R=S=T=U=V=W=X=Y=Z=[=\=]=^=_=`=a=b=c=d=e=f=g=h=i=j=k=l=m=n=o=p=q=r=s=t=u=v=w=x=y=z={=|=}=~=!>">#>$>%>&>'>(>)>*> >,>->.>/>0>1>2>3>4>5>6>7>8>9>:>;>=>>>?>@>A>B>C>D>E>F>G>H>I>J>K>L>M>N>O>P>Q>R>S>T>U>V>W>X>Y>Z>[>\>]>^>_>`>a>b>c>d>e>f>g>h>i>j>k>l>m>n>o>p>q>r>s>t>u>v>w>x>y>z>{>~>|>}>!?"?#?$?%?&?'?(?)?*? ?,?-?.?/?0?1?2?3?4?5?6?7?8?9?:?;?=?>???@?A?B?C?D?E?F?G?H?I?J?K?L?M?N?O?P?Q?R?S?T?U?V?W?X?Y?Z?[?\?]?^?_?`?a?b?c?d?e?f?g?h?i?j?k?l?m?n?o?p?q?r?s?t?u?v?w?x?y?z?{?|?}?~?!@"@#@$@%@&@'@(@)@*@ @,@-@.@/@0@1@2@3@4@5@6@7@8@9@:@;@@?@@@A@B@C@D@E@F@G@H@I@J@K@L@M@N@O@P@Q@R@S@T@U@V@W@X@Y@Z@[@\@]@^@_@`@a@b@c@d@e@f@g@h@i@j@k@l@m@n@o@p@q@r@s@t@u@v@w@x@y@z@{@|@}@~@!A"A#A$A%A&A'A(A)A*A A,A-A.A/A0A1A2A3A4A5A6A7A8A9A:A;AA?A@AAABACADAEAFAGAHAIAJAKALAMANAOAPAQARASATAUAVAWAXAYAZA[A\A]A^A_A`AaAbAcAdAeAfAgAhAiAjAkAlAmAnAoApAqArAsAtAuAvAwAxAyAzA{A|A}A~A!B"B#B$B%B&B'B(B)B*B B,B-B.B0B/B1B2B3B4B5B7B6B8B9B:B;BB@BABBBDBEBGBHBIBJBLBCBFBKBMBNBOBPBQBRBSBTBUBVBWBXBYBZB[B\B]B^B_B`BaBbBcBdBeBfBgBhBiBjBkBlBmB?BnBoBpBqBrBsBtBuBvBwBxByBzB{B|B}B~B!C"C#C$C%C&C'C(C)C*C C,C-C.C/C0C1C2C3C4C5C6C7C9C:C;CC?C@CACBCCCDCECFCGCHC8CJCKCLCMCOCNCPCQCRCSCTCUCVCWCXCYCZC[CIC\C]C^C_C`CaCbCcCdCeCfCgChCiCjCkClCmCnCoCpCqCrCsCtCuCvCwCxCyCzC{C|C}C~C!D"D#D$D%D&D'D(D)D*D D,D-D.D/D0D1D2D3D4D5D6D7D8D9D:D;DD?D@DADBDCDDDEDFDGDHDIDJDKDLDMDNDODPDQDRDSDTDUDVDWDXDYDZD[D\D]D^D_D`DaDbDcDdDeDfDgDhDiDjDkDlDmDnDoDpDqDrDsDtDuDvDwDxDyDzD{D|D}D~D!E"E#E$E%E&E'E(E)E*E E,E-E.E/E0E1E2E3E4E5E6E7E8E9E:E;EE?E@EAEBECEDEEEFEGEHEIEJEKEMELENEOEPEQERESETEUEVEWEXEYEZE[E\E]E^E_E`EaEbEcEdEeEfEgEhEiEjEkElEmEnEoEpEqErEsEtEuEvEwExEyEzE{E|E}E~E!F"F#F$F%F&F'F(F)F*F F,F-F.F/F0F1F2F3F4F5F6F7F8F9F:F;FF?F@FAFBFCFDFEFFFGFHFIFJFKFLFMFNFOFPFQFRFSFTFUFVFWFXFYFZF[F\F]F^F_F`F6GaFbFcFdFeFfFgFhFiFjFkFlFmFnFoFpFqFrFsFtFuFvFwFxFyFzF{F|F}F~F!G"G#G$G%G&G'G(G)G*G G,G-G.G/G0G1G2G3G4G5G7G8G9G:G;GG?G@GAGBGCGDGEGFGGGHGIGJGKGLGMGNGOGPGQGRGSGTGUGVGWGXGYGZG[G\G]G^G_G`GaGbGcGdGeGfGgGhGiGjGkGlGmGnGoGpGqGrGsGtGuGvGwGxGyGzG{G|G}G~G!H"H#H$H%H&H'H(H)H*H H,H-H.H/H0H1H2H3H4H5H6H7H8H9H:H;HH?H@HAHBHCHDHEHFHGHHHIHJHKHLHSHMHNHOHPHQHRHTHUHVHWHXHYHZH[H\H]H^H_H`HaHbHcHdHeHfHgHhHiHjHkHlHmHnHoHpHqHrHsHtHuHvHwHxHyHzH{H|H}H~H!I"I#I$I%I&I'I(I)I*I I,I-I.I/I0I1I2I3I4I5I6I7I8I9I:I;II?I@IBICIDIEIFIGIHIIIJIKILIMINIOIPIQIRISITIUIVIWIXIYIZI[I\I]I^I_I`IaIbIcIdIeIfIgIhIiIjIkIlImInIoIpIqIrIsItIuIvIwIxIyIzI{I|I}I~I!J"J#J$J%J&J'J(J)J*J J,J-J.J/J0J1J2J3J4J5J6J7J8J9J:J;JJ?J@JAJBJCJDJEJFJGJHJIJJJKJLJMJNJOJPJQJRJSJTJUJVJWJXJYJZJ[J\J]J^J_J`JaJbJcJdJeJfJgJhJiJjJkJlJmJnJoJpJqJrJsJtJuJvJwJxJyJzJ{J|J}J~J!K"K#K$K%K&K'K(K)K*K K,K-K.K/K0K1K2K3K4K5K6K7K8K9K:K;KK?K@KAKBKCKDKEKFKGKHKIKJKKKLKMKNKOKPKQKRKSKTKUKVKWKXKYKZK[K\K]K^K_K`KaKbKcKdKeKfKgKhKiKjKkKlKmKnKoKpKqKrKsKtKuKvKwKxKyKzK{K|K}K~K!L"L#L$L%L&L'L(L)L*L L,L-L.L/L0L1L2L3L4L5L6L7L8L9L:L;LL?L@LALBLCLDLELFLGLHLILJLKLLLMLNLOLPLQLRLSLTLULVLWLXLYLZL[L\L]L^L_L`LaLbLcLdLeLfLgLhLiLjLkLlLmLnLoLpLqLrLsLtLuLvLwLxLyLzL{L|L}L~L!M"M#M$M%M&M'M(M)M*M M,M-M.M/M0M1M2M3M4M5M6M7M8M9M:M;MM?M@MAMBMCMDMEMFMGMHMIMJMKMLMMMNMOMPMQMRMSMTMUMVMWMXMYMZM[M\M]M^M_M`MaMbMcMdMeMfMgMhMiMjMkMlMmMnMoMpMqMrMsMtMuMvMwMxMyMzM{M|M}M~M!N"N$N%N&N'N(N)N#N*N N,N-N.N/N0N1N2N3N4N5N6N7N8N9N:N;NN?N@NANBNCNDNENFNGNHNINJNKNLNMNNNONPNQNRNSNTNUNVNWNXNYNZN[N\N]N^N_N`NaNbNcNdNeNfNgNhNiNjNkNlNmNnNoNpNqNrNsNtNuNvNwNxNyNzN{N|N}N~N!O"O#O$O%O&O'O(O)O*O O,O-O.O/O0O1O2O3O4O5O6O7O8O9O:O;OO?O@OAOBOCODOEOFOGOHOIOJOKOLOMONOOOPOQOROSOTOUOVOWOXOYOZO[O\O]O^O_O`OaObOcOdOeOfOgOhOiOjOkOlOmOnOoOpOqOrOtOuOvOsOwOxOyOzO{O|O}O~O!P"P#P$P%P&P'P(P)P*P P,P.P/P0P1P-P2P3P4P5P7P8P9P:P;P6P
P?P@PAPBPCPDPEPFPGPHPIPJPKPLPMPNPOPPPQPRPSPTPUPVPWPXPYPZP[P\P]P^P_P`PaPbPcPdPePfPgPhPiPjPkPlPmPnPoPpPqPrPsPtPuPvPwPxPyPzP{P|P}P~P!Q"Q#Q$Q%Q&Q'Q(Q)Q*Q Q,Q-Q.Q/Q0Q1Q2Q3Q4Q5Q6Q7Q8Q9Q:Q;QQ?Q@QAQBQCQDQEQFQGQHQIQJQKQLQMQNQOQPQQQRQSQTQUQVQWQXQYQZQ[Q\Q]Q^Q_Q`QaQbQcQdQeQfQgQhQiQjQkQlQmQnQoQpQqQrQsQtQuQvQwQxQyQzQ{Q|Q}Q~Q!R"R#R$R%R&R'R(R)R*R R,R-R.R/R0R1R2R3R4R5R6R7R8R9R:R;RR?R@RARBRCRDRERFRGRHRIRJRKRLRMRNRORPRQRRRSRTRURVRWRXRYRZR[R\R]R^R_R`RaRbRcRdReRfRgRhRiRjRkRlRmRnRoRpRqRrRsRtRvRwRxRuRyRzR{R|R}R~R!S"S#S$S%S&S'S(S)S*S S,S-S.S/S0S1S2S3S4S5S6S7S8S9S:S;SS?S@SASBSCSDSESFSGSHSISJSKSLSMSNSOSPSQSRSSSTSUSVSWSXSYSZS[S\S]S^S_S`SaSbScSdSeSfSgShSiSjSkSlSmSnSoSpSqSrSsStSuSvSwSxSySzS{S|S}S~S!T"T#T$T%T&T'T(T)T*T T,T-T.T/T0T1T2T4T5T6T7T8T9T:T;TT3T?T@TATBTCTDTETFTGTHTITJTKTLTMTNTOTPTQTRTSTTTUTVTWTXTYTZT[T\T]T^T_T`TaTbTcTdTeTfTgThTiTjTlTkTmTnToTpTqTrTsTtTuTvTwTxTyTzT{T|T}T~T!U"U#U$U%U&U'U(U)U*U U,U-U.U/U0U1U2U3U4U5U6U7U8U9U:U;UU?U@UAUBUCUDUEUFUGUHUIUJUKULUMUNUOUPUQURUSUTUUUVUWUXUYUZU[U\U]U^U_U`UaUbUcUdUeUfUgUhUiUjUkUlUmUnUoUpUqUrUsUtUuUvUwUxUyUzU{U|U}U~U!V"V#V$V%V&V'V(V)V*V V,V-V.V/V0V1V2V3V4V5V6V7V8V9V:V;VV?V@VAVBVCVDVEVGVHVIVJVKVFVLVMVNVOVPVQVRVSVTVVVWVXVUVYVZV[V\V]V^V_V`VaVbVcVdVeVfVgVhViVjVkVlVmVnVoVpVqVrVsVtVuVvVwVxVyVzV{V|V}V~V!W"W#W$W%W&W'W(W)W*W W,W-W.W/W0W1W2W3W4W5W6W7W8W9W:W;WW?W@WAWBWCWDWEWFWGWHWIWJWKWLWMWNWOWPWQWRWSWTWUWVWWWXWYWZW[W\W]W^W_W`WaWbWdWeWfWgWhWiWjWkWlWmWnWoWpWqWrWsWtWuWvWwWxWyW>XcWzW{W|W}W~W!X"X#X$X%X&X'X(X)X*X X,X-X.X/X0X1X2X3XLX4X5X6X7X8X9X:X;XY?Y@YAYBYCYDYEYFYGYHYIYJYKYLYMYNYOYPYQYRYSYTYUYVYWYXYYYZY[Y\Y]Y^Y_Y`YaYbYcYdYeYfYtYgYhYiYjYkYlYmYnYoYpYqYrYsYuYvYwYxYyYzY{Y|Y}Y~Y!Z"Z#Z$Z%Z&Z'Z(Z)Z*Z Z,Z-Z.Z/Z0Z1Z2Z3Z4Z5Z6Zf87Z8Z9Z:Z;ZZ?Z@ZAZBZCZDZEZFZGZHZIZJZKZmZLZMZNZOZPZQZRZSZTZUZVZWZXZYZZZ[Z\Z]Z^Z_Z`ZaZbZcZdZeZfZgZhZiZjZkZlZnZoZpZqZrZsZtZuZvZwZxZyZzZ{Z|Z}Z~Z!["[#[$[%[&['[([)[*[ [,[-[.[/[0[1[2[3[4[5[6[7[8[9[:[;[[?[@[A[B[C[D[E[F[G[H[I[J[K[L[M[N[O[P[Q[R[S[T[U[V[W[X[Y[Z[[[\[][^[_[`[a[b[c[d[e[f[g[h[i[j[k[l[m[n[p[q[r[s[o[t[u[v[w[x[y[z[{[|[}[~[!\"\#\$\%\&\'\*\ \,\-\.\/\0\1\2\3\4\5\6\7\8\9\:\;\\?\@\A\B\C\D\E\F\G\H\I\J\K\L\M\N\O\P\Q\R\S\T\U\V\W\X\Y\Z\[\\\]\^\_\`\a\b\c\d\e\f\g\h\i\j\k\l\m\n\o\p\q\r\s\t\u\v\w\x\y\z\{\|\}\~\!]"]#]$]%]&]'](])]*] ],]-].]/]0]1]2]3]4]5]6]7]8]9]:];]]?]@]A]B]C]D]E]F]G]H]I]J]K]L]M]N]O]P]Q]R]S]T]U]V]W]X]Y]Z][]\]]]^]_]`]a]b]c]d]e]f]g]h]i]j]k]l]m]n]o]p]q]r]s]t]u]v]w]x]y]z]{]|]}]~]!^"^#^$^%^&^'^(^)^*^ ^,^-^.^/^0^1^2^3^4^5^6^7^8^9^?^:^;^^@^A^B^C^D^E^F^G^H^I^N^J^K^L^M^O^P^Q^R^S^T^U^V^W^X^Y^Z^[^\^]^^^_^`^a^b^c^d^e^f^g^h^i^j^k^l^m^n^o^r^p^q^s^t^u^v^w^x^y^z^{^|^}^~^!_"_#_$_%_&_'_(_)_*_ _,_-_._/_0_2_1_3_4_5_6_7_8_9_:_;_<_>_?_@_A_B_C_D_E_F_G_H_I_J_K_L_M_N_O_P_Q_R_S_T_U_V_W_X_Y_Z_[_\_]_o_^___`_a_b_c_d_e_f_g_h_i_j_k_l_m_n_p_q_r_s_t_u_v_w_x_y_z_{_|_}_~_!`"`#`$`%`&`'`(`)`*` `,`-`.`/`0`1`2`3`4`5`6`7`8`9`:`;``?`@`A`B`C`D`E`F`G`H`I`J`K`L`M`N`O`P`Q`R`S`T`U`V`W`X`Y`Z`[`\`]`d`^`_```a`b`c`e`f`g`h`i`j`k`l`m`n`o`p`q`r`s`t`u`v`w`x`y`z`{`|`}`~`!a"a#a$a%a&a'a(a)a*a a,a-a.a/a0a1a2a3a4a5a6a7a8a9a:a;aa?a@aAaBaCaDaEaFaGaHaIaJaKaLaMaNaOaPaQaRaTaUaVaSaWaXaYaZa[a\a]a^a_a`aaabacadaeafagahaiajakalamanaoapaqarasatauavawaxayaza{a}a~a!b"b#b$b|a-b%b&b'b(b)b*b b,b/b0b1b2b.b3b4b5b6b7b8b9b:b;bb?b@bAbBbCbEbFbDbGbHbIbJbKbLbMbNbObPbQbRbSbTbUbVbWbXbYbZb[b\b]b^b_b`babbbcbdbebfbgbhbibjbkblbmbnbobpbqbrbsbtbubvbwbxbybzb{b|b}b~b!c"c#c$c%c&c'c(c)c*c c,c-c.c/c0c1c2c3c4c5c6c7c8c9c:c;cc?c@cAcBcCcDcEcFcGcHcIcJcKcLcMcNcOcPcQcRcScTcUcVcWcXcYcZc[c\c]c^c_c`cacbcccdcecfcgchcicjckclcmcncocpcqcrcsctcucvcwcxcyczc{c|c}c~c!d"d#d$d%d&d'd(d)d*d d,d-d.d/d0d1d2d3d4d5d6d7d8d9d:d;dd?d@dAdBdCdDdEdFdGdHdIdJdKdLdMdNdOdPdQdRdSdTdUdVdWdXdYdZd[d\d]d^d_d`dadbdcdddedfdgdhdidjdkdldmdndodpdqdrdsdtdudvdwdxdydzd{d|d}d~d!e"e#e$e%e&e'e(e)e*e e,e-e.e/e0e1e2e3e4e5e;e6e7e8e9e:ee?e@eAeBeCeDeEeFeGeHeIeJeKeLeMeOePeNeQeReSeTeUeVeWeXeYeZe[e\e]e^e_e`eaebecedeeefehegeiejekelemeneoepeqereseteuevewexeyeze|e{e}e~e!f"f#f$f%f&f'f(f)f*f f,f-f.f/f0f1f2f3f4f5f6f7f8f9f:f;ff?f@fAfBfCfDfEfFfGfHfIfJfKfLfMfNfOfPfQfRfSfTfUfVfWfXfYfZf[f\f]f^f_f`fafbfcfdfefffgfhfifjfkflfmfnfofpfqfrfsfufvfwfxfyfzf{f|f}f~f!g"g#g$g%g&g'g(g)g*g g,g-g.g/g0g1g2g3g4g5g6g7g8g9g:g;gg?g@gAgBgCgDgEgFgGgHgIgJgKgLgMgNgOgPgQgRgSgTgUgVgWgXgYgZg[g\g]g^g_g`gagbgcgdgegfgjggghgigkglgmgngogpgqgrgsgtgvgwgxgygugzg{g|g}g(h~g!h"h#h$h%h&h'h)h*h h,h-h.h/h0h1h2h3h4h5h6h7h8h9h:h;hh?h@hAhBhChDhEhFhGhHhIhJhKhLhMhNhOhPhQhRhShThUhVhWhXhYhZh[h\h]h^h_h`hahbhchdhehfhghhhihjhkhlhmhnhohphqhrhshthuhvhwhxhyhzh{h|h}h~h!i"i#i$i%i&i'i(i)i*i i,i-i.i/i0i1i2i3i4i5i6i7i8i9i:i;ii?i@iAiBiCiDiEiFiGiHiIiJiLiMiKiNiOiPiQiRiSiTiUiViWiXiYiZi[i\i]i^i_i`iaibicidieifigihiiijikiliminioipiqirisitiuiviwixiyizi{i|i}i~i!j"j#j$j%j&j'j(j)j*j j,j-j.j/j0j1j2j3j4j5j6j7j8j9j:j;jj?j@jAjBjCjDjEjFjGjHjIjJjKjLjMjNjOjPjQjRjSjTjUjVjWjXjYjZj[j\j]j^j_j`jajbjcjdjejfjgjhjijjjkjljmjnjojpjqjrjsjtjujvjwjxjyjzj{j|j}j~j!k"k#k$k%k&k'k(k)k*k k,k-k.k/k0k1k2k3k4k5k6k7k8k9k:k;kk?k@kAkBkCkDkEkFkGkHkIkPkJkKkLkMkRkNkOkQkSkTkUkVkWkXkYkZk[k\k^k]k_k`kakbkckdkekfkgkhkikjkkkmknkoklkpkqkrksktkvkukwkxkykzk{k|k}k~k!l"l#l$l%l&l'l(l)l*l l,l-l.l/l0l1l2l3l4l5l6l7l8l9l:l;ll?l@lAlBlClDlElFlGlHlIlJlKlLlNlOlMlPlQlRlSlTlUlVlWlXlYlZl[l\l]l^l_l`lalblcldlelflglhliljlklllmlnlolplqlrlsltlulvlwlxlylzl{l|l}l~l!m"m#m$m%m&m'm(m)m*m m,m-m.m/m0m1m2m3m4m5m6m7m8m9m:m;mm?m@mAmBmCmDmEmFmGmHmImJmKmLmMmNmOmPmQmRmSmTmUmVmWmXmYmZm[m\m]m^m_m`mambmcm7"

2!2"2#2$2%2&2'2(2)2

2!2"2#2$2%2&2'2(2)2

1 1!1"1#1$1%1&1'1(1)1

1 1!1"1#1$1%1&1'1(1)1

% %!%"%#%$%%%&%'%(%)%*% %,%-%.%/%0%1%2%3%4%5%6%7%8%9%:%;%%?%@%A%B%C%D%E%F%G%H%I%J%K%

% %!%"%#%$%%%&%'%(%)%*% %,%-%.%/%0%1%2%3%4%5%6%7%8%9%:%;%%?%@%A%B%C%D%E%F%G%H%I%J%K%

W%f?i

W%f?i

e.lFO

e.lFO

urlsS

urlsS

u%urrGS

u%urrGS

]']&].]$]

]']&].]$]

s"s9s%s,s8s1sPsMsWs`slsos~s

s"s9s%s,s8s1sPsMsWs`slsos~s

x
x
{.{1{ {%{${3{>{

{.{1{ {%{${3{>{

h!l!'!c!@!A!$("(((&(:(,(*(0(.(B!4(2(9(!(%('()(-(1(#( (/(3(5(6(7(8(&!%!!&"&$&%&&&'&(&)&*& &,&-&.&/&0&1&2&3&4&5&6&7&8&A&B&C&D&E&F&G&H&I&J&K&L&M&N&O&P&Q&R&S&T&U&V&W&X&''!'"'#'$'%'&'(')'*' ','-'.'/'0'1'2'3'4'5'6'7'8'9':';''?'@'A'Q'R'S'T'U'V'X'Y'Z'['\']'^'_'`'a'b'c'd'e'f'g'h'i'j'k'l'm'n'o'p'q'W'*!,!.!/!0!1!-!k!d!e!y!f!m!q"r"s"t"u"v"w"x"y"z"{"|"{!|!z!}!J!G!F!L!X!^!O!N!D!E!I!H!R!S!`!_!C!K!W!V!U!Y!T!\!]!Z![!Q!M!P!Y"Z"["\"]"^"_"`"a"b"E"F"G"H"I"J"K"L"M"N"O"P"Q"R"S"T"U"V"W"X"1"2"3"4"5"6"7"8"9":";""?"@"A"B"C"D"$)%)&)')()))*) ),)-).)/)0)1)2)3)4)5)6)7)8)9):);))?)@)A)B)C)D)E)F)G)H)I)J)K)L)M)N)O)P)Q)R)S)T)U)V)W)X)Y)Z)[)\)])^)_)`)a)b)c)d)e)f)g)h)i)j)k)l)m)n)o)v!u!x!w!t!s!p!r!q!o!n!b!a!!!"!#!(!)!4!5!6!7!8!9!:!;!>!?!~!2!3!$?$@$A$B$C$D$E$F$G$H$I$J$K$L$M$N$O$P$Q$R$S$T$U$V$W$X$Y$Z$[$\$]$^$_$`$a$b$c$d$e$f$g$h$i$j$k$l$m$n$o$p$q$r$s$!%"%#%$%%%&%'%(%)%*% %,%-%.%/%0%1%2%3%4%5%6%7%8%9%:%;%%?%@%A%B%C%D%E%F%G%H%I%J%K%L%M%N%O%P%Q%R%S%T%U%V%W%X%Y%Z%[%\%]%^%_%`%a%b%c%d%e%f%g%h%i%j%k%l%m%n%o%p%q%r%s%t%u%v%$!E(F(G(H(I(J(K(L(M(N(O(P(Q(R(S(T(U(V(W(X(Y(Z([(\(](^(_(`(a(b(c(d(e(f(g(h(i(e"f"g"h"i"j"k"l"m"n";R!6_FrMIU}HOIBO"X;2kS$Xs3(WRG'X@JpG{15RT4 6?K)X*6=AOQ%I-Xv8>Q\cPVa7.4YA/XKDC>1X4CeR.VZN'Uu:&7V@9FREGGT9K3RR?XE>rF2R0OgOiJ@XrBRBiH,GKAhSyUBJ~6!XZSw?FT%;AXeN.>(XGQ)P=XoYvM:?;=%:`Rz2`:6DmO)>$MAAWGqYtYKHiXZR2JJHlXjXFXv=MFp3kXq=i=THS4XBV2PWKJ{KLU68IOZYpX*GnXz4nATRmXGRoXGCvQYVrXuX~=Y:Y30BYDY61?Y95s>HLr:PRCYh= 3EYk>FY;Y_D>YAY@Y.U5VcGHYYkH HK0 9yAbYd5HWxQf)EZ9#Z)T$Z{Y,6k7y1|Ye3v>v?1Rd@36~Y}Y;>`FF-?K;J5I[WP9MkPAuArTU844u3>IPEYE{@p1YXN9=5ZXFV"K/H2IL4L?t9[X\Xg6A#Jt[?[x@">M@@[FJ*2BScC QB[U@C[1?6PaZdG'3r6|Lz@w@9QaQGX^2e@q:HX-TaOIXJXCOx3G>KXL[%HXO~HN2VSf20mA6_5_;VP=YUH0#6I?(L3_7JRSOX6RE:>K>L7_p54_uST3w8:_O:*_ALMwRM7A_D_q7I0V6T7,:}LT?1KtF(VE_bN33|N54GNp:aN=Q@_t4J3f8;_ED<_>_;E?_B_1TC_:GXNXDJ_O_\VI_Z_6NG:N_H_^EkIt:|CW>F_M_XE&UM:L>=S@8dVG_>9'?|AK_L_P_[_e_W_V_IWc_d_ke'RR_)?[TH?T_LO]_JQ^_'07FS_e:_6[M~9UT__lO%0g_Q_FQU_X_Y_\_);`_a_b_f_h_4Sg86Ej_ZI(ADD^?xO\Un_82_:l_A[dQtK=4&0q_FLr_m_i_k_o_p_=;s_t_#;[J(N'`*3&`!`~_YM|_z_P?DWLIx_!0}_{_"`(`H7!F6I2@u_>EDXy_vD#`$`%`%P4`dL1`&?/`9N `FI.@.`m:0:)`v_3`8`-49`2OH:0`zP,`{Tw_gE-`wS6`7`D`aP`*`$IA`2`HJC`5`KNCKM`F`B`K`:`?`@`E`G`H`L`;`TKU`V`R`P`N;7P[.L2?5;xWS?i?a{J-\JI9D=G.\vTfP DU6T[Z1U[V[>:@H?JIH3WyIG?x:8hBQH{eJ6KoI7fp6dCiS4f5f"H=f9fEFqM;ff:f7@$S?ftICfDfvP=CDCBfAfGf1OtkJfEf^eg4T6BK0QNpW!PYI{6Xfb3PIYf"3L^HSM^"RN^M>O^,J|R_3jeaD!>2NrDV>(Fc2S>|GkLl=]N:JAFlea@aAaGag3iF^4BQHaFaEaCaBa@18UDaKaLaJazoSaRa6GIaNaPaTaQaMaOaUaVaWaXaZa[a!N]g(4]V2Q23$9sWIG^>.9WNn2O[:}4_a\:`a2;IBaalP=MbaC5GEcadaySea-Qfa"NgaB5haU;DP`bX1dRabIV|M&CCcRVgbhbGSlbl?mbeb@3nDnbCPv:ib^73;,LKKdbfbjbkbwbtbuTsb-EzUBE@2obrb/AoMs;hL/c1c'O.c)N];k5e>R2M391 cQ2,5_9h6kO7cL;GHJP8cn3)mzSdS*m9cbR5c^SP83c6c_74c"@:c8TH4;cE;wIeI=D m}B[;.??Nc-m?c):,m=c@c6:.68PC0.m/mA@Ac3EBc2\0mj8lN'jgPyJVH7OI3RNd=^cr;(j=U]F)j*j,j j.j-jX=/j>BA4w4';flel?7yKb1glHIhlilVJP^E2zTKFG0r4SHPM8?[?$G4V)@Q^(IoQ$Eg063EHb0v7zEs6RUP3Q0VRcJ%W6M669?[U'8WER^Y?UB@G$;(1jE{E'L'1V5(DS^:Qi3rCw7tV#5p24DiD-@T^h0DE`AU9\>XMN0OMV^P>>WU^PU]0bD#Bp62L@pKq_^74]=`^mDFO`5^6ZJt5e^FUa^ML~FEE4Rr>SB=L83S=X?FMZQk4d^]^g^~j0Bb^@V'5t2h^r^m^q^`HaWo^hCaLe2>Rn^k^UN'4 ?>>R=i^.T^^j^?@l^s2i8'BA=u^x^ 2$4j4&Iv^QKc8w^z^y^BLa0n4:e/Pk2!kt^cIs^Z0!Rw1/Lp^$K*U{^]4&D}^~C!D!_LA|^o>2FE3vH:K~^$_2W73CAKG%2i4 WlD"_#_%_3:&_^@CIY2fG'_\G(_"kSK*_)_A2JE _\TAH,_p>-_'V7j6kUJ|XD8Å¾7~UJ9'PMtP5tCH>7k=0L=2AV1(3R8"IX68k4>}JCG{Us7DN Us13l_05l76OAzu1PeUSNo=b3 86U=mO69KBP=76l)JTE9l8lCB7l}P:l;leWj%@;j}2wCh;WRtN?j<4acrwqugjejdjgjfjgvtokjn>&k&dsQ&b&h&K&&F&q&&niCr3
&PJ1HsOsQ5WsRsTsSs&t&&Q5&j53&u&TTM1Q&w&&
&&&&&&&&&&&&&&&&&&&&&&&&&&A&B&C&D&E&F&G&H&I&J&K&L&M&N&O&P&Q&R&S&T&U&V&W&X&&&&&<_>&UM:L&&&&CCcRVgbhbGSlbl&Iv&D&_<4acrwqugjejdjgjfjgvtokjn>&k&dsQ&b&h&K&&F&q&&niCr3
&PJ1HsOsQ5WsRsTsSs&t&&Q5&j53&u&TTM1Q&w&&
&&&&&&&
&&&&&&&
&U
&U
&X
&X
&e
&e
&
&
&t&ukuju
&t&ukuju
&h
&h
&&
&&
&
&
&u
&u
&_
&_
&&a&e&g&c&
&&a&e&g&c&
&
&
&&&&&&&&&H&G&&&B&A&&&&F&E&&&D&C&&&&M&N&&O&P&&&Q&R&&&S&T&&&U&V&:&&W&X&&&Y&Z&&&&&&&_&&a&b&c&d&&F&&&&s&axN0&&J&S5&m.mmp&wI&Y&TM&&u&V&y&j&&&&&&&&&&&:<:>&&&&&A&B&C&D&E&F&G&H&
&&&&&&&&&H&G&&&B&A&&&&F&E&&&D&C&&&&M&N&&O&P&&&Q&R&&&S&T&&&U&V&:&&W&X&&&Y&Z&&&&&&&_&&a&b&c&d&&F&&&&s&axN0&&J&S5&m.mmp&wI&Y&TM&&u&V&y&j&&&&&&&&&&&:<:>&&&&&A&B&C&D&E&F&G&H&
&t
&t
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&
&:&&
&:&&
&
&
&
&
&
&
&
&
&
&

&y1