Analysis Date2013-12-30 18:04:40
MD5479c3419efcd3fdfd6e464dc5c1ff2bd
SHA149a3ba5c0d447657e2cffc62f88b759fef504ea3

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
SectionEsp0 md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0
SectionEsp1 md5: 9933c15672517983338d7816085355a1 sha1: 02c59cf4cf021e30e420203a5ecd502c3529952a size: 640512
Section.rsrc md5: 7cd709844465eeb94e1a8902e1311765 sha1: c84c42b10a585756deb6e7d6cdce1c528f3f1184 size: 105472
Section.Esp md5: bb530b3ed1ff64390e829056e9ab407c sha1: 5dca78ba67c25ae81bd9e074607f9649c0edabbe size: 512
Timestamp2013-07-02 12:31:28
VersionLegalCopyright: 朋来阁出品
FileVersion: 1.0.0.0
Comments: 朋来阁出品
ProductName: 朋来阁出品
ProductVersion: 1.0.0.0
FileDescription: 朋来阁出品
PEhash86dfa245f6682d8a407c299dcb1886aa6fa0bc95
AVmcafeeFlyagent

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

RegistryHKEY_CURRENT_USER\Software\Microsoft\Multimedia\DrawDib\vga.drv 1024x768x24(BGR 0) ➝
31,31,31,31\\x00
RegistryHKEY_CURRENT_CONFIG\Software\Microsoft\windows\CurrentVersion\Internet Settings\ProxyEnable ➝
NULL
RegistryHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass ➝
1
Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\12b02.tmp
Creates File\Device\Afd\AsyncConnectHlp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\140cf.tmp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\1392c.tmp
Creates FileC:\Documents and Settings\Administrator\Cookies\index.dat
Creates FilePIPE\lsarpc
Creates File\Device\Afd\Endpoint
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temp\1392c.tmp
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temp\12b02.tmp
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temp\140cf.tmp
Creates Mutexc:!documents and settings!administrator!local settings!history!history.ie5!
Creates MutexWininetConnectionMutex
Creates Mutexc:!documents and settings!administrator!cookies!
Creates Mutexc:!documents and settings!administrator!local settings!temporary internet files!content.ie5!
Winsock DNSssy274434193.web-231.com
Winsock DNSwww.bestgaozhuji.com
Winsock DNSftp77149.web-89.com

Network Details:

DNSssy274434193.web-231.com
Type: A
182.18.22.131
DNSsk140.webcname.net
Type: A
182.18.22.18
DNSftp77149.web-89.com
Type: A
182.18.22.18
DNSwww.bestgaozhuji.com
Type: A
Flows TCP192.168.1.1:1033 ➝ 182.18.22.131:80
Flows TCP192.168.1.1:1034 ➝ 182.18.22.18:80
Flows TCP192.168.1.1:1035 ➝ 182.18.22.18:80
Flows TCP192.168.1.1:1036 ➝ 182.18.22.18:80
Flows TCP192.168.1.1:1037 ➝ 182.18.22.131:80
Flows TCP192.168.1.1:1038 ➝ 182.18.22.18:80
Flows TCP192.168.1.1:1039 ➝ 182.18.22.18:80
Flows TCP192.168.1.1:1040 ➝ 182.18.22.131:80
Flows TCP192.168.1.1:1041 ➝ 182.18.22.18:80

Raw Pcap

Strings
080404B0
1.0.0.0
Comments
DEFAULT_ICON
FileDescription
FileVersion
LegalCopyright
ProductName
ProductVersion
StringFileInfo
TEXTINCLUDE
Translation
VarFileInfo
VS_VERSION_INFO
/;~;$}
"/ %-=
)08/,|H
0BI!v)Kp
/+0E~/
0E1-%h
0}G''iRZ;G
0\jPlc
0kh&XFT
+0[naX
0qy+E}G
'0[te~
0UQ68-
\0>UU+)
0$u|X9
0Y*L{T
1=1#`#&
"%+11#!m
148>Wv
17WK#~
.1A@ru/2PT
(#(1DBLYvJVe
1d]*XK
1e5Q<%
1f{_)CB[R
1{GF9"
1"&k>N3
&1$$oo
[1p|lA:
1P#MY7g
1sKT:x
1v\	^p!&
,1_w<g
1-[ WN#
.|1zk;
&	21G3<^}
22bcob
,22.eQ
22(;sG
22	^Xu;*3;0
|290NA
~=]2a"
2./ex5[
&+2>FUg
2\GXU>A
(!2H6h1
+2>i<`
)2=QGd
2s"D1r
{2u-*VD
.\2W-F
`|2X5L
2YxY&'b
{33gop
 3a)%}@
%3B7Km
3@}_:CP
~3|d%GHq
3dTv9,'
3$dV`Uif
&3F '5Q
3;FW5@Pp3<Lp5:C\
%]3L}Fu
{+3N*D
)3OZyI
3PE^&E
\3[phv1
3qD%UT
3sJ4Byc=.
3TREk)
3Uvn/=
3WoNFJ
3Yo(iE
41zX,H
4}^7Znu
[;4$A*
 -4[av
+4Ax?R!
?4bN=X
4JCG=x~
 -4?Nd
4O23Uf
~4`[{Oc
4S$z_5*
4U`.l Q
((4V:=
}$4zb4
4~&zvR
|<58*u
5|'a~i
5AT >qlA
5"A$wR
5bf{HKq
5!gkMB
5`ii?95
5'Irzy
5j!+MD
5mw"xd
.5&<n#
5o`;,2
=5Q~)6-.
>5/q7fp
5QFVL+
5QgQr5
5Qr!WY
5sA;;n
5'"(?U
.%5],Vz
5	X#66
63=@M(
:64Dra
!,66;L
68J*_+
6A-3Zam5
6aMW.B
6boLk(
6c'm>n
#,6DCXz
6:E"<@$L
6mIq&[
6(Nsv\Z
6>`qE$h 
6REKVGV
6RQ!]DwK?+
$=6sB27
6T~}hb
~6tUO6e1
!6yV6-
(\%`7	
747520747520      
%~7(ca5
7C!	AZ
/:7Dt'
	7#{]Gj
7+H6	(
-7"h\^7
:7Hh"<
7KMBV9Ta
&7:MKR
7#N7^E
>7 'od
7sR'-7
7te]F o
>7T.KflY
7wD"n)
7\wv\=
7 XE Y
7 |yg1
`^7ZpB
81Oa;z
8/4eYDI
8[!7%@
88s|L&
89D^L*$%N;sa
*8=Baz
8@{	FW
:	8L A[;R
8\Ln``J
8M~J7.E1
8N7AXD
8n/"ztQ
,8ofUf
8PtEFh
_8p`uTMX
8QCD4$
8*RTLW
8<'%RU
"8S!Qn
8T$y:J
*8v_pN
908"1Y
93)mz6R
9'D@Rcj
9 GMmI
9gpq6X
)9HN);IMg
#9JxL^
=$9N6=y
@9S>Ul
<(9Uox
9@u`:Y[
9;XC>,
9yEwxv
9|&?+z
.9zko*
9ZR`};W
a0'L#x|
* A7$1
+AAhV:_
A/BeT3J0
AcJ$T%qv
aD4|$K
Ad]4NC
ADVAPI32.dll
Af3f\}f[
a(h//V
a-Ie	$;
&aj .%
AJa5%J
))aLD%,
AM;cw<d
aoCgy]
A$^]rc
aSE,k7
/aSn2|
A.t1nhrO?5/
A]t2HT
avi{2%
.A	 wE
 a|y9:l
a?zdgi
,azP6*
[;{B%$
*'b13/
\b$1ye
b:2.Pc
,B5sAw-
B%9,i!J0>
B=aC7Y
!BbCV:
BBD;*;
bBeuex
.BCFj)
#/b`{D
@|BD|X
$] ~Bdxm
[<B~e1*
#b ehY
"bf-\+
Bfvznb
B{,.G`
BH:Ha#!1
}bJ	5*
bjh1`Wt
bK"^n0{
bL hK[
bm3#m;^
BN4;xaj_yn
bp9@?G
bP{oQOr
)bq{~8^
BrxkIgv
\	&)bs
\bTQmjmz
B trT$
bU'f3_
(-bv[P
B)yjrf
`bZJj1X
c0&O/z>
c0Ui,'
/~^c&3
C63-CT
C{7aMr
($c7t9
ca3Z+<
-c?<A9
CAY-^`
c&C<{>'
cDFRHj
cd/UL_
Cf-xC=
C*	?g?*
cGd_Y\
ChooseColorA
c|IewS-
C=JC@,
(C"`&jL
*~ClE@nA8O
Cm~I@(:
!cmv";
[.+CM/V
$co2H|H
COMCTL32.dll
comdlg32.dll
"cooz;
cp5TX{
cp~8Ci
Cp!CM]
#Cqy N
CS1N2l
Cs;S>h
CtT%@T
>.C~;u
CUI!#N
!'c;U)|M7?
cv1~qU
	;C?	vu
:C.?wYRCle
 cZ8Hk.
/czK?e#$
<]*`d-
:D"+' +
`D0;#:
D0K	!8
D8PhT9
'`D_'c'
Dcy.8V
*~}`DD
_dd$VN0
dEJ?%/X
D	}.eNQ
DeR|0=
>dFA.{
Dg56Ff
dGL9$A
D`JC/DO\A
dLulU[
Dm~!I~?`*
]dMKp}%
!DN5iE]
DnL=h`
Dno~grj
\dPdt[k_
dP*{/#:F
d;pVRY
+d_"=q
d<!q_1F
Dqn/=V
DragFinish
-Ds5Y9
D(.seNO
DT9&K[
}d)*tmZ
%Dv-	\
DV^4SD
,'d;Vl[u
dw4M-=
 _d$Xb
]D<x=nl
dxSSo]
Dz53s_l
,D#zpY[
]]_e				
(e|0C&BWCO
'e1+xk
({E3s	*
E#B#o]
E>%Ctwb
+[}?Ee
 eE)1&
>Ehb*]
Ej^%mo
ek{W dJmi
e,l9bP
Elc S~%
e=MzHAR
EndDoc
enF(1j
e]N>tP
EOMY)T
%!eq]	
^e(QP*
'eR;h&A
eS~^`g
eSZJ;q
ET.'>"
E._TX4;
][,?Eu
EWD~	3o$
ExitProcess
Eyl$PAz
EY{"|r=d
}e`]Z^
f/06IP_r
F3*j'&
f5#3`-
F5v8UJd
~)F7F:v9F(
F85I$[
F&a1wMq
{=FaaY
(fbj]	+
Fb%]p#
FC!6iY
*fc%Qu
FFn]QA[
	fggC=
F)i6YX
F~%JMl;
F)\K`;
FLKruI1
fM]'ck
[`fN$.
~Fnb=S?M
fpnqm=
FpO~H"
f	pQ8x:
fqiw0C
F	r$~C
@#\FS!
"\~fTn
Fv0JQY
")fv;hE
FVRe_S
+f>w4.^
FwfU7.
fWZb/b
#f	x=T
fXZ!vn
[_f-yb
.fYcZc
F<ydQ!
fYp^tC
>FYy^u
<=fZ GN*S
&FZ*J"
^G';&&
 +G0;Ll
g1[,gg
g1Xyie
G2g3Jx
{G(#3C
G5:>}XS
g8E,bp
>_%Ga2
gBh,wm
gC,F*G
G&?$(d
GDI32.dll
g<=D|U
ge`^[!
GetAdaptersInfo
GetProcAddress
@,Gf$E'
gg"42Kz
GH8w?{
gIGS0v"
|#g/+j
G}kQ(vfCq
Gky:G 
@#~GlA
G.{MBe
g:`N2 V
G#N&PJ
G(pFTs
G[pjW~6
		?GPV
}g+RjOW
>gSu}jB
!_GTis
gT/^O;
G)$+un{
g\W;)(
Gyt}73
^'+gyTn
G=|ywj("u
g^zx\Q
	|H22UR
h/5xJb7
h,6@$8
h7N)=4
h_[:$8lT%
h 90N	[
HA0#>0
HAJ&pZu
`.hb3e!
Hb.r70Q
"Hc\7:
H}cU1X
H<d1E#];
:hdc.a!+?@g
HD}}Ep
hD}Kj^
>>&&HDT
|:H>eMi<
?heTYF
h%gkL;.)
HHKl8Q
H'hNC79
HiQh7x{	
hIxwIh
H Jb$!,
h?!JNBH
Hj{;&r
HK$b9|+y
H&K%wmw
H$<L4`
<]hN!89_P
Hn?$Lf]
H<'OB*
/-/HQ`
h[q5Y:oF
hqb&d-|
Hq&QpS
*,H}R\
ht/D\}
>h<`tV|
>*_Hvb
Hv=Bnf9Rc$
hv\I%\
h+}VUM}.q\
|hW'nL
hwZ7WSS
H.YE<W
#]hYY&q
hZ6+	m[i
H$Z=aRa3j
i0p`uI3
i17s$(c
I3Aa0rf
i-3HSR"
I4]H0K
'!i5h`
I7cu!3\0
$ i9(;
$[i#a>
[I%bi.m
IBYla9k=
I;c0!M
%iC#DJ
~Ieq-e
IF4,::
Ig Du~
IG:=l=K^
IhA%Syy
i`^hSq
ii8JVZ)
~ii}t#
I^k ik
IK	V|^
@il^?nB
InternetOpenA
iOF@+MY7%L
"IoH%cy
&ip3<:
IP;dCv
iphlpapi.dll
\ipo{B
?IPs~b
"IQ(WE
IRL./DQ
ISz(;2
itL;(/
iV<AHt
ivpt'3U
Ix_$oK
IxuTo@4
_/iY)I
@`~I:Z
Iz>PCU
j,*/{{
?,(}_J
j23\Wh&
J5+9rG
J7hH%]
J_A>u_*,
J"D9JN
jdu	hf
JEpMe|
>>J HI
JiNK1yU
JlD{C~
JLuCI|
J"M1hSh
jM'DYM7
jmoe-dv
JN}joW
jp!zrJ
}=j<r[a
|@JSA0
%JT\%AQ
J"t](Sp
ju1(	?
j?VeGYa
jz@5U}
#j(zEwPC
+jzL-Q)
K|-?<=
	k09]>3\
k0EqUk^"
K(0)z1hT
k3|6P?
,k#4.2N
k+>!."6(,:
kBHQN}
KC5:EU
K&]cM]
kd<*7d
Ke+%QJdD
KERNEL32.DLL
k[E_`ypaM
*>K.fa
)kfC$<4
\k	;h3
.+k,hL
kIcQ}u&
kjio"!!#
`kjJJ@
KK+/h]
kl?[&%
kL_V	Iv
?kMOJl
Km%/Z:
k}O>wf
kp9-}9
;Kp~Z10
kqv"A@
/k+[}r
Kr>$1s
KrdTajz
KRF[Ui
k{rTU^
-k\sT(
!KtM|7d
kU4E|O
K)uJNUg
kUn6x-b{UD
k)#Vd]
kV]N-/paZ
:kvQ8>Z
K/wl/=
k_wZ.U
kx!(`5
-K'x:F8D
kY[RA+m
$kzPu^
\k"ZwD
~ ^L+	
;[;L!*
{[l1mHB
*l*2:6z
l2Z:Hg
L6HjY|WIk
L,8:=@
@'laH|2
LaIVGs
LB!a%{
lb#Xy%9Bs.-c
lC8cBab
lC e]V
ldNikQ
L#e7B>
;)Le_d
?l_e%T
l)<F_<8
LFE%|t
!lgB	%
l.gTtF
/^@L(h
%-Lh5.h
L;Ht_V!$
lh{TXd
l@`i.!
L-<i?>^
_li8@C
lJ9Smr
Ljs+Jx
lkw~,,-0
ll-&)5Ui]
LlQ$>P
lN#<a,f
LoadLibraryA
'^&L!Q"
+L[qQ)
lrDt"w
lS^BQ3
lS*[Ee
!ltY4Tq
lU\$2&+
l,uaI5o
 lV15@3
LxxZgsA
 LXZ$3
]\>Ly?f
lYVm<b}
L+*zoN8
l,{]zT
?m_@_&
M0asN`
M0?S*APuY
"$m*1>
/M1,aF.
m 4.faJ
m&5fwp
~`m5{m
m`6]jGO
/M-#7$
m7n4Xc
M96C,P
&m^9{9O
mbela:}
McuyCJ
\m.euBOO
Mf&3[d
mFom<QM
}MfP%@
MG	rp)k
.M?jcT
Mk,q|M*
m-M5w=
	^m}MGN
MO|"pT
m&OY	*
}M<p>-
~mP*28
mQ_#T/`}(
MQvZ{L
mstwYi
mTO0m.A
MU8D(	
?Mv9i[R
mX2H;5
+MYo:3
MZUnt|
&.N_(*!
}N`5h,
)n%7*|R:G
n	{a=x
nC!m-?x
"[ncVQv
ND2^dp
NdU,Uc
n=DVpd
nfF	(j
+nFUnw
(n|Ghb
ng-Y9j!
nH>GQ/
n%hHnV
nkAAT'
{nM1/=
$(*n$mA
<nMcwA}/
nND]i!3
n?*.^q
nu6Q7$
NU*^B.g
NV:V^%i
/&nvW;
~nWP)FW
NX29l|wKY
nzL:,e
N/@{zy
;o2MwO
O,2,qKB
,(o"3m
O4|eiM
o4n$Sr
`]O77<M
o7GLvsV
oBkTu3
O>CTi'
O;:d~qMv
~oefcX
O= \FY
-	Ogc{
o~GV[7
oJ-	@{
@o:'\K
+O?K*8
~_OL(&2
ole32.dll
OLEAUT32.dll
oledlg.dll
OleRun
oLg8}Rc
O+n"QZ
o.)'oaKr
=OoEQD'
oO`v??
OpenPrinterA
Op'x c1K
	@O\"Q
'Oq2`m
oQh{Hb
`|o)[qV
os<o}k
O$tM,Y
\OTnIl
OuR]z<p
ovG{4B/
ovT&|x
-Ow6GM`
oZF24o
`p4#rw
P>5!~'y;B
&p6	+|
P6E{-n
p6!!]n
p,8(H+
PAnz?3
PAO"@n
&p/BDxT#4JW
pBNV%C
P{CJuVY
Pck|*e
PE,$`]DHm
PG)W)}
PHD[zq!
p^H='n
"ph^QQ
phx^iG
pjddmY
p%j-Sr
+PlE>}K
P;l)pc
P= LUS
+]PM]5
	pMsVQ
pM,Y@ym
P N0Bi
`PNlP7
P<pO)Q
p^Ps+h
P p'u>
pqf!;n
p]QZPDS
Ps7pmZ
p{{t.p
p}T	pn
pT#zD$E
pwMY4t
p}zXJa
-+	&>q
(q1@.0
q26m900Fk
q2	[R*
/\Q3n2f
]Q$&4[n
.Q4Z!!
+Q/5xdU
q\!?6jW(6
#q6|o6k
\q#9qh
q@aA8|PPL
qav@	i	
qB&V~E
Q>C[Of4
&QDC@A
qeB9$`
|qGoftj
qGwx2i	
qhVFp'
)q)i6SZ
Q(i!f3B
Q[i/zU'
Qj1NV!
q@l/5U
QN]E=?
&+Qn!u
^)QO/Uu
Q;O$Vt
{"]qp]
qp[ea/
qQezK4
?qq$J3
q!Q#YI
qQY}kPl
q^R<+B
qR&}T.
qT?dDo-
Quk9=N
qV9&FsAP
[q(VIi
qwo"#^
QW,\wu
'|QX1-
q}Xs?E
qXsi|\Xx
qZGZ h
:*`' R
R1_9>_
R1F,DPi
!+;R$->^3C`
R49OGi
.r9#\B	
RASAPI32.dll
RasHangUpA
Rboq(.45*156%+/0!'*+
rc/A%s
RegCloseKey
R !/G! >
rh3OGX
RHAP!Qx?[
}ri|,?
.RI,lr
RIyM][
rkx4^XOWK
rL=/`gP
!R~/]O
{ro@3$
rO[|qg
rqr!2-
Rr,|h}%
RrTiCG
rTKCKr
!RULx!
R<Vh"3
Rv`Nw8!7*
R%Vu1u
$_rw(H
Rw|?rv%
r}`}Y\
rzAF],@
R^Zoz=
RZ>Z=T
:$=S{"
$!S8*|
S9Jn!\Da
<s/9o!
sAUN32
sa.uY0e:q
S !@bu
SC-(<}QV
s:# #d
sdtI16
sDywOy)
-"S(}e
]sFGE"
SHELL32.dll
sITI;*
;s*=\J
sK.+{A~`G|
SKG2#T
Smfj*Y
s(`O@V}kZ
sOvZp^O:G
,sq9N~H
ssB(>D
SsP/k:
ST?Omo~
suM"="
|(SUrQ
SV# j&p
SVRAC;
$S!XF/
S`(xsA
T1CU91
T%?2Uo
{T2+UV
T4IJZE
t4+Txb
t=5]Z?
^), T7:
T7-z2f
>T+9IJ
Tc@<|a
TE&V"1
t,faue
\tGB\o
~\TGjCl
!This program cannot be run in DOS mode.
TH\vi	X
&tiC|etU
Tk7~pZ
]tl&f^
tL;*K!Q
Tm9'hIP
(+[T+QT
~tr*b`
@=^tT\>doN
T)TNUX
|t=T;,U
tu((L7$
T_V;>z
~$Tw|L8D"
`T(Wsj
]T>W&|Y
 tY 	DTTP7=x
+	'~+U
U0*oBL
,u<$	0T
@u&1Xa1
U$?3]b=
> U-3YD
u$7!!aj
 U#7q1
U8!EP{
U*91,e
^U9u14xq_
u:a$|Az
Uby:pN
uc%U/u
]Uek /
UfG=F.
U%F x6
_UiUcn
@uMWC~]'Fg=cMwS#
U}>\=ot
USER32.dll
}U-)T@6
UtR2mb^
uV%2uX
>)U%)x
{UXu:Lj	
?UYTfd
~$#,v>
V`06[UT@;}
V0A*M~
V?*2d;Z
v<3I9L?O
v \4[l
_\V6UV
$v8>K*k
V8Kr%K>
V%9M'/P
V~bSct
vB`v6d_ 
VD7>|s
VerQueryValueA
VERSION.dll
vfKtsX
}]VG40
vG)rnH
)V{h,28n
!V,?.>HI
;Vi\O(
VirtualAlloc
VirtualFree
VirtualProtect
vjCw	`
/VjS`&
vMWP2-
vo#G&|
voi,.z].JVk
Vo@TMz[
VRn>B3
v@@RZz
VS0"'Q
Vs93-#
?]VSKr}~
vsS@@6
vT7U^:
]vTOv1
\vUA/{0r
}v	v$V
VwL|r^x}
V	Xv#WTKu
:vy6*W
#[v")yy
?vz^)+
*vz=A}
-%!W++^
`w+0x/
w%?$")1-^d
(W%2~n
W^4js<
=*W4X]
W!5\~VF
WADtt(
>wAs#UE
waveOutOpen
;{w}'B
Wb_HxX
? Wcb*&
"&W,dH
WFQz3m2
WGk+#Y
})>WgV
WININET.dll
WINMM.dll
WINSPOOL.DRV
W%j1{0
Wjyf*t'
{W?/K^
W)kkN1
<wL/+aL
/W-#Lch
wLjd;P;
<wmHi<
(Wm]p	
W~MZ<i)7
w+<%o`
wP0M74
WPDIov#
+WRcp5
wrFDs#
W>Rm-?
WS2_32.dll
wszFQ;9	m0@
wVn@p^
WV?'"O
^WV	Y[Y
X02%Ox6
x";0I2~
x4?cTP
X6BD8)Va
-X"ai/
xAlV<eh%p
^Xcbdx
X@C:i:v
!)/Xe|
x;**EY
x^f[Jc
#X|Fl^
X]^f$uj
$X$H`H
XO&5}z
XO# RD
XQ\W5#
&]xr&f
XTblr	
XU5pW}
.x}VxNB
'x%xf&
\XxSv<
XZHmp34Oh
y0SGs0
^=y>3M
{&YbC!M0
YD(q|h
YEr@(<uYB
<~yFlv
Y*F+ n
yFQ=%*
yhU^2,H
-'[Y_l
YleT0"
y`]mnU
#yN]dwU
&y#nSI
YnXgFEJ
y'olPIGJ
/Yp1ej
yp?H&^
yPO*&<
%^yq]~
yqLXTe
Yr!!O!X
ySMF"G
yV2A;6K
yx`j7{
|/Yy/+`
Yz$8XD
|"YZ`g
z{4c>k$4-
Z5;pfF.g
	#Z5V;C
\.z6{n$`
z7F-[=
Z9)4n<
z9F%a_
Zax7Ey
ZDs1uWN
Z/gc2P
Z'HNwf
ZkA 9Q
z}`]}Mc
zmP\i}A
Zn{%Hk 
Z\{qy'
'zRGo&
\#zRU@F)
zT4mRO
	"^Z{Ub2N#
{ZVrgk}a(
Z"V'XT
?/|Zx^|
{ZX808
;ZzvZo