Analysis Date2014-09-22 15:30:49
MD521323364ae7436a0b55ccffd580962ba
SHA183266d3823a124a49d34dba0c929013a0a6ccb1a

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: a6199c3211ad6b379695057846114921 sha1: 13a2df6d7ebf24e2bbf9c88e6a0b1605fe20b83b size: 12288
Section.rdata md5: 12933bf774ed4bab5188cc43b538b82b sha1: 5afae767d8dbe04eef2c5f8c657b614e24411a28 size: 4096
Section.data md5: 3ed569458cc3aa7a48c2847841df3cde sha1: 2c6d82e0cb114d728046a645a1f2c75e6429f152 size: 4096
Section.rsrc md5: 809ef84af32dfe5b6c891af4a288140e sha1: 43db9ecf9ec8e83f97c5dae8f1a4cb0df9f7a5b3 size: 733184
Timestamp2010-02-12 18:45:10
PEhashd61a2d473eead5a7be7bb21d642debca170cb33e
IMPhashca24d4e19e6835b8470fcd3223329599

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\malware.exe
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\subfile.jpg
Creates ProcessC:\Documents and Settings\Administrator\Local Settings\Temp\\malware.exe
Creates Processcmd.exe /c start C:\Documents and Settings\Administrator\Local Settings\Temp\subfile.jpg

Process
↳ C:\Documents and Settings\Administrator\Local Settings\Temp\subfile.jpg

Creates ProcessC:\Documents and Settings\Administrator\Local Settings\Temp\subfile.jpg
Creates ProcessC:\Documents and Settings\Administrator\Local Settings\Temp\subfile.jpg

Process
↳ C:\Documents and Settings\Administrator\Local Settings\Temp\\malware.exe

RegistryHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\APP Paths\CMD.exe\ ➝
C:\WINDOWS\system32\CMD.bat\\x00
RegistryHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{AA7BE134-9ACE-2457-ABD0-3AE14579BDE1}\StubPath ➝
C:\WINDOWS\system32\conme.vbs\\x00
RegistryHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass ➝
1
RegistryHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\APP Paths\Regedit.exe\ ➝
C:\WINDOWS\system32\Regedit.bat\\x00
RegistryHKEY_CURRENT_USER\Software\Microsoft\Windows Script\Settings\JITDebug ➝
NULL
RegistryHKEY_CURRENT_CONFIG\Software\Microsoft\windows\CurrentVersion\Internet Settings\ProxyEnable ➝
NULL
RegistryHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\APP Paths\msconfig.exe\ ➝
C:\WINDOWS\system32\msconfig.bat\\x00
RegistryHKEY_LOCAL_MACHINE\SOFTWARE\360Safe\safemon\LeakShowed ➝
NULL
RegistryHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\APP Paths\Taskmgr.exe\ ➝
C:\WINDOWS\system32\Taskmgr.bat\\x00
Creates FileC:\WINDOWS\system32\Taskmgr.bat
Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
Creates FileC:\WINDOWS\system32\msconfig.bat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Creates FileC:\WINDOWS\system32\conme.vbs
Creates FileC:\Documents and Settings\Administrator\Cookies\index.dat
Creates Filec:\breg.dll
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\wghai[1].htm
Creates FileC:\WINDOWS\system32\wings.bak
Creates FileC:\WINDOWS\system32\Txplatfrom.exe
Creates FileC:\WINDOWS\system32\CMD.bat
Creates FilePIPE\lsarpc
Creates File\Device\Afd\Endpoint
Creates FileC:\WINDOWS\system32\Regedit.bat
Creates ProcessC:\WINDOWS\system32\Txplatfrom.exe
Creates Mutexc:!documents and settings!administrator!local settings!history!history.ie5!
Creates MutexWininetConnectionMutex
Creates Mutexc:!documents and settings!administrator!cookies!
Creates Mutexc:!documents and settings!administrator!local settings!temporary internet files!content.ie5!
Winsock DNSwww.zwscl.com.cn
Winsock DNSwww.wghai.com

Process
↳ C:\Documents and Settings\Administrator\Local Settings\Temp\subfile.jpg

Process
↳ C:\WINDOWS\system32\Txplatfrom.exe

RegistryHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\APP Paths\CMD.exe\ ➝
C:\WINDOWS\system32\CMD.bat\\x00
RegistryHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\APP Paths\Regedit.exe\ ➝
C:\WINDOWS\system32\Regedit.bat\\x00
RegistryHKEY_CURRENT_CONFIG\Software\Microsoft\windows\CurrentVersion\Internet Settings\ProxyEnable ➝
NULL
RegistryHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{AA7BE134-9ACE-2457-ABD0-3AE14579BDE1}\StubPath ➝
C:\WINDOWS\system32\conme.vbs\\x00
RegistryHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\APP Paths\msconfig.exe\ ➝
C:\WINDOWS\system32\msconfig.bat\\x00
RegistryHKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\APP Paths\Taskmgr.exe\ ➝
C:\WINDOWS\system32\Taskmgr.bat\\x00
RegistryHKEY_LOCAL_MACHINE\SOFTWARE\360Safe\safemon\LeakShowed ➝
NULL
RegistryHKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass ➝
1
Creates FileC:\WINDOWS\system32\Taskmgr.bat
Creates FileC:\Documents and Settings\Administrator\Local Settings\History\History.IE5\index.dat
Creates FileC:\WINDOWS\system32\msconfig.bat
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\wghai[2].htm
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\index.dat
Creates FileC:\WINDOWS\system32\conme.vbs
Creates FileC:\Documents and Settings\Administrator\Cookies\index.dat
Creates FileC:\WINDOWS\system32\CMD.bat
Creates FilePIPE\lsarpc
Creates File\Device\Afd\Endpoint
Creates FileC:\WINDOWS\system32\Regedit.bat
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\658HSJSD\wghai[1].htm
Winsock DNSwww.zwscl.com.cn
Winsock DNSwww.wghai.com

Network Details:

DNSwww.for-ever.cn
Type: A
208.73.211.245
DNSwww.for-ever.cn
Type: A
208.73.211.245
DNSwww.zwscl.com.cn
Type: A
DNSwww.wghai.com
Type: A
HTTP GEThttp://www.wghai.com/?fromuid=2787477
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP GEThttp://www.wghai.com/?fromuid=2787477
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
Flows TCP192.168.1.1:1032 ➝ 208.73.211.245:80
Flows TCP192.168.1.1:1033 ➝ 208.73.211.245:80

Raw Pcap
0x00000000 (00000)   47455420 2f3f6672 6f6d7569 643d3237   GET /?fromuid=27
0x00000010 (00016)   38373437 37204854 54502f31 2e310d0a   87477 HTTP/1.1..
0x00000020 (00032)   41636365 70743a20 696d6167 652f6769   Accept: image/gi
0x00000030 (00048)   662c2069 6d616765 2f782d78 6269746d   f, image/x-xbitm
0x00000040 (00064)   61702c20 696d6167 652f6a70 65672c20   ap, image/jpeg, 
0x00000050 (00080)   696d6167 652f706a 7065672c 20617070   image/pjpeg, app
0x00000060 (00096)   6c696361 74696f6e 2f782d73 686f636b   lication/x-shock
0x00000070 (00112)   77617665 2d666c61 73682c20 6170706c   wave-flash, appl
0x00000080 (00128)   69636174 696f6e2f 766e642e 6d732d65   ication/vnd.ms-e
0x00000090 (00144)   7863656c 2c206170 706c6963 6174696f   xcel, applicatio
0x000000a0 (00160)   6e2f766e 642e6d73 2d706f77 6572706f   n/vnd.ms-powerpo
0x000000b0 (00176)   696e742c 20617070 6c696361 74696f6e   int, application
0x000000c0 (00192)   2f6d7377 6f72642c 202a2f2a 0d0a5265   /msword, */*..Re
0x000000d0 (00208)   66657265 723a2068 7474703a 2f2f7777   ferer: http://ww
0x000000e0 (00224)   772e7767 6861692e 636f6d2f 3f66726f   w.wghai.com/?fro
0x000000f0 (00240)   6d756964 3d323738 37343737 0d0a4163   muid=2787477..Ac
0x00000100 (00256)   63657074 2d4c616e 67756167 653a207a   cept-Language: z
0x00000110 (00272)   682d636e 0d0a5573 65722d41 67656e74   h-cn..User-Agent
0x00000120 (00288)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000130 (00304)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000140 (00320)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000150 (00336)   352e3029 0d0a486f 73743a20 7777772e   5.0)..Host: www.
0x00000160 (00352)   77676861 692e636f 6d0d0a43 61636865   wghai.com..Cache
0x00000170 (00368)   2d436f6e 74726f6c 3a206e6f 2d636163   -Control: no-cac
0x00000180 (00384)   68650d0a 0d0a                         he....

0x00000000 (00000)   47455420 2f3f6672 6f6d7569 643d3237   GET /?fromuid=27
0x00000010 (00016)   38373437 37204854 54502f31 2e310d0a   87477 HTTP/1.1..
0x00000020 (00032)   41636365 70743a20 696d6167 652f6769   Accept: image/gi
0x00000030 (00048)   662c2069 6d616765 2f782d78 6269746d   f, image/x-xbitm
0x00000040 (00064)   61702c20 696d6167 652f6a70 65672c20   ap, image/jpeg, 
0x00000050 (00080)   696d6167 652f706a 7065672c 20617070   image/pjpeg, app
0x00000060 (00096)   6c696361 74696f6e 2f782d73 686f636b   lication/x-shock
0x00000070 (00112)   77617665 2d666c61 73682c20 6170706c   wave-flash, appl
0x00000080 (00128)   69636174 696f6e2f 766e642e 6d732d65   ication/vnd.ms-e
0x00000090 (00144)   7863656c 2c206170 706c6963 6174696f   xcel, applicatio
0x000000a0 (00160)   6e2f766e 642e6d73 2d706f77 6572706f   n/vnd.ms-powerpo
0x000000b0 (00176)   696e742c 20617070 6c696361 74696f6e   int, application
0x000000c0 (00192)   2f6d7377 6f72642c 202a2f2a 0d0a5265   /msword, */*..Re
0x000000d0 (00208)   66657265 723a2068 7474703a 2f2f7777   ferer: http://ww
0x000000e0 (00224)   772e7767 6861692e 636f6d2f 3f66726f   w.wghai.com/?fro
0x000000f0 (00240)   6d756964 3d323738 37343737 0d0a4163   muid=2787477..Ac
0x00000100 (00256)   63657074 2d4c616e 67756167 653a207a   cept-Language: z
0x00000110 (00272)   682d636e 0d0a5573 65722d41 67656e74   h-cn..User-Agent
0x00000120 (00288)   3a204d6f 7a696c6c 612f342e 30202863   : Mozilla/4.0 (c
0x00000130 (00304)   6f6d7061 7469626c 653b204d 53494520   ompatible; MSIE 
0x00000140 (00320)   362e303b 2057696e 646f7773 204e5420   6.0; Windows NT 
0x00000150 (00336)   352e3029 0d0a486f 73743a20 7777772e   5.0)..Host: www.
0x00000160 (00352)   77676861 692e636f 6d0d0a43 61636865   wghai.com..Cache
0x00000170 (00368)   2d436f6e 74726f6c 3a206e6f 2d636163   -Control: no-cac
0x00000180 (00384)   68650d0a 0d0a                         he....


Strings
..
.
Adobe Photoshop
Adobe Photoshop 7.0
DEFAULT_ICON
MYEXE1
MYEXE2(
TEXTINCLUDE
                                                       
                                                                                                    
  ""++
"! $! $! $! $! $! $! $! $ 
[ /#^^
$! !  !"
$! $! #! $! $
$! %#"%! $ 
$[|: <
*?.?%<
#! $! $ 
#! $! $! $
#! $! $! $ 
#! $! $! $! $! $! $! $ 
#! $! $! $! $! $! $! $! $! $! $! $! $! $! $! $! $! $ 
#! $#"&! $! $! #! $! $ 
#!{[ ;
=]0%=2dEE+$
`~?0-b
0cZ#C<
>0e[~O
!#0e(X
0G'sLx
0h:t:p
'0h~Y>-
0l!\|4U
0"+OUC
0+R64>
0}r]PK9r
!	0v~>q5
0XslsBY
0yIGoaN
0z?g#3
/0Z*nq
0Z")tt.
104659POS#"&KJNLKO! $TSV215215_^a0/2LKM
,11%^6 +z
11b$G4r
:12Fk<
13sa)9
14bU#z
19wV,g
$	1?9y
(1by!@@%}
+-1$e[
1i3!8g?]Bl
!)&1iB
1jN%JH
1Mi,s[
1$nRzq
1<rArU
,1%REdBbB
1-!~tW
1X1REU
}"_1yk^
? <2+&
%2*>:}
2003:02:12 10:48:16
2\=%3I
23qaPhr1
23qP@4
?&26<b
2 9yuh
2AORV.
2BcDV}bw
2Cd/WY
"2C$+!I
2e2lP(
"<2=Fh
?2@`>G
|2%G;iH
2h; 5}[I
|2H*\C
2o.}='
2_/>su
2twW/$
	2UA;h4
>2'VEX<R*
:+2'x2v
2xY8_`!\
[_2y{[
2y~O4j
31hHl+~|(
35hxUN
[3"+7$
3<#7$R<
3$9?301
}&?3~b
.&3cdF
/3%$/dn
3|-E#p0
3~`i:7
3,OU,:
3UtaUe#
3!V`o0
`3w2]=
3}xl7Ne
??3@YAXPAX@Z
42q44e=
4?3j>e
4?7,iu
49P$@T
49r*A{2
4-)cv/
%-~4fH
4g1Fy1
4gUwD\
'4h'4h
4JaqY)
4jw\Q:
4Ko.ywL
4{]LWE
4nT?OL
4o0kZ4
4O6~`h
4|P!Zp
4R!GB?
4U99 1
4V'fBj
?4X\k>]
4y2_(h
4Yg$4u`
 "$5:3
570l["
59	X;$
5c\2fF&
\5@">d
{5D3%3\!
 *5G"~
5He<J0
5>&jpQ
5? K7k
5kd`(x
5!K/@O
5M>OJh
)5N;/r<qS*Z
<"5oD:U
5=OSId7"y
""5p%I
5;q/!P+
_5~R~{
5r\dn-W+
5{sou4
>5SP*)^
5tkwu;
5VPx?RC
`6_0EP
61hXC(
649_VBL
663\qdYY
6;6{y<
\6!bRx
$6f9<_
6?H#dD
6$H.Ow
6i1J%K+
6i>Y}ZA
6|J=K8_/Z
}6k;mN
&6M0?,
6Q70mN
,6) ?R
6	/&,@$R
6(R m3
6RQ\cWz
6-*-s$n
6sPIgw
6t/!ZY
6V)$n<Q
,6;| x
/6z1$o
#[6:ZI
)?;?7`
7{}7.u
78wNA8
?7?:?9?,5
79l}[5
 "7AhL
7aVUu!
""7~b;
7b;dAV'
,7Gjux
7g_LsN
'7GWgw
7iQheYZB
7Ju`az
7kz[hZ
7NQ+Tgq
7nu+o(Kgu
"@7!nX$qX$pW#pW#qX$pX$oX#pX$pX$pX#oX#pX#pX#qW$rX#0-" 
7rw9	K
"7TPjHfh
$7`vK5-KI
{7ZqgC
8a^4b7
8b2ZZ5
8bix_*k
8>d"*v
8,h;@h
8m 1o=
*}8	%n
8rMO@F
?8SZ#6^'$
8Tbt?J
8$vDcE
8Z^MmOH
92nPyk
&93F"$U
93L@C^
?&?95]
9+@;6\
98GF5z
|\9+"|{A
9a6RJ*[
_9EFy2
;9gbMG|y
9 HdHU
)9IYiy
}9kA[i[
9`^Kix
9KruQ=
9l2Pe!h
;\9lMj>
*9U*9U0X
9UCq2*
*9U,KpEw
9V~e7*
9~Wi^f
>9W(Y}
9Z']#]?
=9"(zq
@<A'*%
`A1rRy
?[A_26
A8<yr$
#_^a_^a 
!A~;~A
AaU>;W#D
>'%#aAV
A]CX8H
aDcB)+1
Adobe_CM
Adobe Photoshop 7.0
<?adobe-xap-filters esc="CR"?>
/._[[Ae
AE84RjV7
:|AePP
=AF	<bE
}|aFq#
aftORB
"AHVv)j
Ai!>W_2
Aiygiceq$
altTagTEXT
'al"wO
A$M4p,
aM+B?d
ape{In
aPLn5;
APw#&M&
^A$QEtaFV
[Aqp.'
@A !qUo{
aRjhjq
		</array>
		<array>
			</array>
			<array>
					</array>
					<array>
A@;Sl%
As=v8z
aT'`{!
	'auJEn{
autoGenerated
AvnFg`
aV;z(OT
~{]~aX
Ay:{;K
-B2'v@
$)b7mT(
?<B8Wr
bcE<[?IB
beK&Tx@4
!(}b]F
bFdb16
bgColorTypeenum
bGU1sr
b?/h)#
bHPvQ]
BiF_PP
	#biUj
bJ5#s 
BJ(6[@
b]jO-'
?)~bk:	
!#++,bL<
 b|M2$l
bottomOutsetlong
boundsObjc
bP94y*
BP#Oki
bq<KV	
b'r7?v'u
}brCLT
BRE4e45
BREOB~l
B,$s+x
*|{bT*%
*"BTCh}
Btomlong
/bTZkv
BU+ZTW
^BVEf_
?,|Bvf
$bvPmx;
bv=r$[
| ^'&bw
b;WA2|
bw;''m
bXcyUg
~@BY6 
b~Y.H2
B~YO$(Iws
[:!BYT_
BzV7e%k
C'=]<*+\
C2UY$2
C4A0`J/
C59u$~
c5e-(P<v
C5HRU$
c+6X*=
C<89D 
CallWindowProcA
CBD0020/30/20/30/30/30/30/30/30/20/30/30/20/20/20/20/30/30/20/20/30/30/30/30/30/2A@C
\$*%cC
C$C!+A
CC.$I>
**{:CDY
CE42)VGS
cellTextIsHTMLbool
cellTextTEXT
C#,her
C<jOk &\
)cJqdbi
`c+jTY
ck5x/a9
>ckCv#xYB[
ckWHvNr
C~li^yo
CloseHandle
CLSIDqg3
cmd.exe /c 
CmM~(?!
Cn{Pa	<
*CnTI#
command.com /c 
coqu+p
cosum,V
Coyeqmo{m:
CqAJ	|
{cqd'^
,~~CqHb
cqmnVt2Ci
C"R?'?
CreateFileA
CreatePipe
CreateProcessA
{cug}gk
C,W@t!S
cw	WU^km
=CXcMe
c$XP_K~F
C *XT(
Cygqi3
cyysw4r4
?-~C~Zk
cZpweu
+(./{d
d|352F
+D<&#6
d7:9@B
d.~&9*
+DAK/#
@.data
					<date>2000-07-28T22:57:04Z</date>
				<date>2003-02-06T02:07:52Z</date>
					<date>2003-02-06T02:07:52Z</date>
					<date>2003-02-12T18:45:49Z</date>
db+P:{
d(E0.2
dE;6}n
default
dEU6te
dF3!i%
~D~g~m[~o
;-$DGY
)d^h(~/
dH{]h@
</dict>
<dict>
	</dict>
	<dict>
		</dict>
		<dict>
			</dict>
			<dict>
				</dict>
				<dict>
<>DIim
DispatchMessageA
d$IZP{
dJ)Ictd^e
dk-jtF
d\mOF$
D~N~r^k
dnU)N$
<!DOCTYPE plist PUBLIC "-//Apple Computer//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
 *DOp^
"^DpLL
d	R-dBU!^
D	s`C)
~d>:<	sgo(
{d@S$Z2PP
d,V>F.
	dW-=]
dwl8~mBx
@d$W#v
dXJIVs
;dY[aCl
dz#~eh
E>0	{%
e11Ly>
#e1!x$
E|2L@.vb
E*2UlI
+`#E	4
e5SPA#
E7-a/w
e9bc!L
E9	oXy
eAu	dU
EAUTMq
#eAz<E
)eD2D?e
{ED}t2
EDuU0pwHI
<EEM(2
%E]EM6
EeN;6`F
#Eeo3q
\Ee\,sC7
}EeS*n*	=
@EEzTa&
\efu@\
eG}g98
EIUK%v
(ei'Xa
e<n2Uf
}#<.eP
er,DwBs
e=RPGy
ESAcGyam
e$SI@"c
ESliceBGColorType
ESliceHorzAlign
ESliceOrigin
ESliceType
ESliceVertAlign
eT5dPMz-{x
Et~nPG
ET?U`h
eu>'@$;
eU(c5$
*?eUFB
[EunXQ
E)=Uz^
e(>%V+E?x
 !!/e+W
,eWT[Wf,
ExitProcess
E~[~~yz
EzNO%p9
;f_)2 
$"+F$3g!1_!#8
f3iOv[t
f4vg.H
F7Ep?f
F	9)41
f95	vb
f9mK#OY
	<false/>
		<false/>
^_>F"b
 fc5=Lnl
Fcz7cC
F?f8T"
F"f*c 
fffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff
F\F)R*Gl0
FH%X9$3
[?F\I" ]
FindResourceA
-f}Inm58
fJ)xmDz[x~e_
FKZT_Q
!FL!\P
&FNJ|Ej2q
FN\];Y
f&#-NYZq5
fo3ize
F~O~}k
fpF:vL[
FPM9r,q
"Fp*M*H
F[sO	bb
fsv_S|-
fu`"*#n*
^Fu~\YMX
Fvl'k_o
.fx46w
f[x-cig
fXgEtq
+_fXSi
_Fx'@TH
  /f(Y
/-~fyCB
fy"K	I
(G2lp1
G&6bmj
G/%8 j
|GB;c	
G;%B,h
GCLce%
&#g`D[
GDupli
GetCommandLineA
GetEnvironmentVariableA
GetExitCodeProcess
GetMessageA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetVersionExA
GFHGGIHGIHGJHGJHGJHGJHGJHGJHGJHGKHGJHGJGFJHGJGFJGFJHGKGFJHGKHGJHGJGFJHGJHGJHGJHGJHGKHGKHGKHGJFEF 
_/[G{g
gH>ETF
*~Gi:g
g,*@Jw
gKZ%U5
	`g_+nf
`[Gom;
(~G~oy
GP.d,A
GPF$[ 
g++pfT\
gpMr+[
@(g_R1
groupIDlong
^[Gskr
G)tV'=AC
/">g'v
G$$W&&
gw@mR%
Gxj:]:
G	~\~Y
g]~{ySF
~g~z~R~K^i
~^[h>[
<h	/>{(
+^|H((
H\%0xL7
~H2AMumi
h2'vCg
H:2WpG
H}97Ow:
	*Ha	U
 hB4p*
|)hCzb
HD#)E;
`h}DF$P
H/e2!^f A
HeapAlloc
HeapFree
HeapReAlloc
He"hdV
h~E~Si
 Hf9"7?
hF<LLv]Q
,[(Hg*
#]hH()Lq
Hhttp://ns.adobe.com/xap/1.0/
h%^I"0
H/~i81	n
H'IP<L
>hj*;{
Hj%0)OH
.HJv"f
?:~^hk
\>'H)k
H[^kFg
hkN>zu
>&<(Hll
h)M:$i
?hn|r|H	
h~!>|o0j
>H}OnT
	horzAlignenum
h+P3^^
h(QjKegf@
HSlO$g)f
h)	sO4
"h soz
HU_"+;
"HuKID
#HVY8;H	
H%YE~2
"*.;<I
%!i3|A
:I%7"i
I8.+GU4e
I8oXHHs
i8Y@Ux
Ib6j>!Q
,i-b-f*
`iBw?FFEb
]IByr[
i~C~S~jZ
*ICVU^
iCZ{a]
idR$):H
-IdVU 5Mi
' id='W5M0MpCehiHzreSzNTczkc9d'?>
	IDwhP
i:eIl2
IerE/B7
ierehD
IFG@A=
ifrzp^8
iG&Mi{g{mmygq
~I~g~p/
IhEY@S
I-H:GX
I,+iBV
I"\id	
IiQ9bo
`iJ5pS"wp
?i;-k\
]>i.l|
I]@/L'
Iln"Yat=C
\IM*|L
I@{n;e
				<integer>0</integer>
					<integer>0</integer>
				<integer>1</integer>
					<integer>1</integer>
io3Csu
IP*|0H
iq'/BW
iQV5 Wt
\IR5KW
I^?	=rc
I=sB}2Co
IsBadReadPtr
It/5YGy
IUkOUF
_&i^V:
iV&(",
iv`3V:
IW!@^C
*$I}wk
iwqOVD
iWYQ#r
IXjq^k`49
iy;0-DcT
^_iz.0
iZCBt?0]
j1""J%
j2L9<3
J3jVZ8
J3|<Tnk
j5Ys<w
+j6S7W
\J8yVm
$j~d_2
jdgpC*
JdL8Jm
~ J}%F$
J,;:gD_
J?H8&%N
JIyRH,
jJ.J$G:
%JKa,f&H
JKX=H4
.jl,oQT
=}JN	A
J>Pwn9/1k
j{p'z\
^jRB!c
?*[jr	uCn]
J;sf6~
{JtTom
jvz2>g
#JwGz!
^jwS}Z
)J^@Z9}#
JZGts#
*:JZjz
(;K;=>
K!$ -%
k:1~c&
	?K1.[m
K1	WcZ
K37rMr
k4c"E0
~k71^]
K;7rNFb
k;[{8l
?~K,8w@/
K{9VKXo
K9~YU<
[K;;akmn
kaU}qm
-KAZ#k
K=bTTq$}
k-c%HQ
K)c!lR
K-E64 
/Keo}6
KERN0L32.8dl
kernel32
kernel32.dll
KERNEL32.dll
keW"t#zV
		<key>com.apple.print.PageFormat.PMAdjustedPageRect</key>
					<key>com.apple.print.PageFormat.PMAdjustedPageRect</key>
		<key>com.apple.print.PageFormat.PMAdjustedPaperRect</key>
					<key>com.apple.print.PageFormat.PMAdjustedPaperRect</key>
	<key>com.apple.print.PageFormat.PMHorizontalRes</key>
				<key>com.apple.print.PageFormat.PMHorizontalRes</key>
	<key>com.apple.print.PageFormat.PMOrientation</key>
				<key>com.apple.print.PageFormat.PMOrientation</key>
	<key>com.apple.print.PageFormat.PMScaling</key>
				<key>com.apple.print.PageFormat.PMScaling</key>
	<key>com.apple.print.PageFormat.PMVerticalRes</key>
				<key>com.apple.print.PageFormat.PMVerticalRes</key>
	<key>com.apple.print.PageFormat.PMVerticalScaling</key>
				<key>com.apple.print.PageFormat.PMVerticalScaling</key>
		<key>com.apple.print.PaperInfo.PMPaperName</key>
					<key>com.apple.print.PaperInfo.PMPaperName</key>
		<key>com.apple.print.PaperInfo.PMUnadjustedPageRect</key>
					<key>com.apple.print.PaperInfo.PMUnadjustedPageRect</key>
		<key>com.apple.print.PaperInfo.PMUnadjustedPaperRect</key>
					<key>com.apple.print.PaperInfo.PMUnadjustedPaperRect</key>
		<key>com.apple.print.PaperInfo.ppd.PMPaperName</key>
					<key>com.apple.print.PaperInfo.ppd.PMPaperName</key>
	<key>com.apple.print.subTicket.paper_info_ticket</key>
	<key>com.apple.print.ticket.APIVersion</key>
		<key>com.apple.print.ticket.APIVersion</key>
				<key>com.apple.print.ticket.client</key>
					<key>com.apple.print.ticket.client</key>
		<key>com.apple.print.ticket.creator</key>
			<key>com.apple.print.ticket.creator</key>
		<key>com.apple.print.ticket.itemArray</key>
			<key>com.apple.print.ticket.itemArray</key>
				<key>com.apple.print.ticket.modDate</key>
					<key>com.apple.print.ticket.modDate</key>
	<key>com.apple.print.ticket.privateLock</key>
		<key>com.apple.print.ticket.privateLock</key>
				<key>com.apple.print.ticket.stateFlag</key>
					<key>com.apple.print.ticket.stateFlag</key>
	<key>com.apple.print.ticket.type</key>
		<key>com.apple.print.ticket.type</key>
k]H=>3
K,h75,I$
K~\~Hhw
KjVsysS
;kKk1;\%
Kk;y//gK{kH
k_lG4_G
K}M4mK
k].meZY
\KORY^
KoUu4v
?+KqK+
<k)S$u
K|T#jd
K#:Trg:
ktsn"P
$K,t`Y	
KubdYA
Kum"h4
kv2It_*
kV~^ht
K~_vIKi
KVNWNI
K-}W2y
kw|ou=CQ
KWsF`z
#K>~Y}
kyVh&P
$?=l?,
!|~")L .
L1AJ5E
)L[1G"
	l!~5Z2,
?<<L8H|
l$c@9n
$lcaUa]
L>{DO9
L.DRVT
Leftlong
leftOutsetlong
LEj(	,h~
LE.q3n7\
~l~E~V
l|FX'H
~l~gy3
l,-!i.
l.I!j!!
lknONP
L&kq2E ym
LK.WEu
+LK=wO
:LLKnM
=L{n~d#
LoadLibraryA
LoadResource
LockResource
l.o#%Z
LpSD~y-
l-! Qa
lstrcpyn
L):t25
lT-KPQ
l_u_6CP
l!U$;I
luZ2i9-
lv>8a.
Lv>{(xm
:Lw^	2-~'
LwKl5m
_L;wr9
"&Lw*u
l,xh-d
{lXkwLf
%lxTK2r20E
+LYsZ 
ly!&wp
LZO=y*
lZ~u~WyC
)m2[+F
	m4ZSA
M5i3D=*
	m:5rB
M*78xa
m@An	n
MCQ^F!%
m? D%g:
me\MIZ
memmove
MessageBoxA
,MFfIg
?,Mf}o/ig
m~("fQ{
+M?h|dr
mHRhRx%
MI9Ry2
Migoci
M!JfwM
m\k?V"
#/ML:=
MlU(zG
#mm/1J
Mm#5I&-
mm.n.o%
"M_N@Q
MNy`HxH
)m_Op}
mo.*Zd
Mpd[?&
mQ~2>"~
mQ'n=F
Mqni4O
Mqoce=
_m$q$q
mr4,?-
M#R6V:
M'R79S
MsgeTEXT
"MsH6Sa
MSVCRT.dll
m#tE.EO
mt=jko
mu	5k_+
MuCtiBy
]Mvj3q
mVZ	6O!
`{.mX!
Mx[E+S
MYEXE1
MYEXE2
}mYPI6
>}n+;[
N;:0dW
?:n?0n
%n2piG
>-n^2v
n4KmoN
N4v%>T
n@(5`:
;n8g'mv
N\8q*5
n"9hOD
n>9h(Y
NA&M~;
nAOfFi
n*B5_![Ns
) nC$*
N"CBn#($
NCzlyz
N#d*:bF
 N*djDT
'nEA`>
NG. c@
%NH=4^
N,h_f W-
;/NH%U&
<NI([}B
NI)@D%
NJcUV3g
NJDeY@s
Nk4|PT
nK=y?.
$n~%$l<1A
>NM@=A
(nmfIR
NNH1o	wE
NN}Op%PlM
N*NZgk 
#n-OQk
>No&~_Z
n+P<~y Q
\Nq;ExO
nq{g0IC
nullTEXT
/NVaYB
_&nvEA[&
&nv`^"rK
NWfB(k
%n,Wy(
`n!w+Z
{nyb2[{
N,Y=[v
;[{-_O
%)$O# 
O2A}uq
O2qx8fH
+o3Y]s&!
O6*E@$TlF
!o6>k!
O9[^j#Q
)o\9x4
oae2Hq
oAWn\YB
<O%~BOZ
OBq6J*
=oe%Y0
Ofu^D|
[O.[h6rX
O H*iC
*O+^+ k
O{kmxah
O["M3F
O#\ma >
o{OEUU`V
oOlp4ti
o&}P(H
[oQhU~%
originenum
oR@KQY
+ORm D
ORzddv
oT ?(`
O|>!+T
o?.?.uO4Y
O&vbIfbIbw')
;O<^~Vy
@~O~w~]
=OW,)o_
?.~o~Wy
OW~+!Z
O<xocd
~}~Oy[
/OYeDUw
o(~[yoQ
-OZe&<+[
O"Z~l<g
O}zPra
_\P1;{
p2D,y9>
P4TQAy;
P9^l:C'
$P9,sH&y
')+?pA
p+AC^[
PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADwingbywings_jpg   
'Pb	B~1
PBtWI(^
p;?bZ+u<
<p%{<c
@PdM=>F
P	DOaP
PeekMessageA
PeekNamedPipe
>@Pe@RQ1
pFF!32
PF`IV:
P}fK+VVf
+pG;l(
Photoshop 3.0
Ph!#yL
PI3!vE-
P)Ig )
$PIRj8
P)J{Xg
</plist>
<plist version="1.0">
P<M(2md
$pM2X8
pN''3	X
p/?Nkw
PnWn?<dh0
P;o^91
)pPu9t
pq3(ho
P.<Qqe
program internal error number is %d. (0x%Xh)
p&S?2?
p	sbM>
P\s~IY
pT<>&,
  (PV5
%:PW6=C
=pY[JL
P&&Z 2
Pz\q)UN
p'Z]*Z
(q-{=>~-\_
q:#1[_X	
}q3O3D
\q4&9P
Q5*f9+1T
\ Qb%o
QcV,	C
^Q`.Df
qdo}xEk
)q(d$T&
_}q.f2
Q,fkgn)<|
qI};#V
qk/0\Z
"_Ql	}
Q&N`J4!l
Q O%(a
q}oOR!:q
}>qo#Z
QP3S`h
qps#"&[Z\/.2$#'ZY[/.30/3_^aYX[.-1
*Q|ri2
@|q^*Rj
QRK}I9
 q"[rU
q~=si3
&Qsk"M
)qTzm]
qU0-et
=Q}Uc_O
que}io9
QV9S$kT
 QV!Ta
({(;Qw
QW%*?J
/QXvqo
QY8,B<
(qZFy'
,%Qzi<M
QZ[s5c
!<`r(<
r?<2<ID-
!#r|2T
r3;[`=
r3|U96
r-")4.
r:%@5Q
%	R$7~1
|rB<[-
rbLh+TT
r~B~tk
r`cm3M
`.rdata
 </rdf:Description>
 <rdf:Description about='uuid:69f43160-4009-11d7-a53a-98d3ad4b1f00'
</rdf:RDF>
<rdf:RDF xmlns:rdf='http://www.w3.org/1999/02/22-rdf-syntax-ns#' xmlns:iX='http://ns.adobe.com/iX/1.0/'>
rD'#n&
|<rDuX
ReadFile
						<real>0.0</real>
						<real>-18</real>
				<real>1</real>
						<real>576</real>
						<real>594</real>
				<real>72</real>
						<real>734</real>
						<real>774</real>
R~E~Yy
r#f2*r
~R~f~uK
@r'fWj
Rghtlong
 $r=hzm
r"I1]$
ri2~{~~
R)iEyd
rightOutsetlong
Ri~G>L
rI#qFV
r	i*TR
`RiZ3J
=(r ,J
.(rjm1
r@K0;S
R>*l9lw
@R?L?O
RM06Sa
rNi_tWL?
r?O6Wo
`RO$PPKR
(<r,@p
.r=}?P
RPWWWj
rqP*h:
R(<rL*
,|rs7Ll
RsX8Mw
rUn$T=
RXEtlL
,^R{[Y
Rz3PeS
S29v	Z
s(3, #
S4^~-8$
/s5dcU8
s6k7p@
s77nl]
s(agNo
sBA^4=
s@~b]k
sbx?9|/
SC~Gf'
Sf>d*NBQ
S!FhKt
SfWS:R
Sfxgp8<	*
{+sg@b
s@G%'b2X
S~g~M~HXyC
S$Gnwpg
shg$"Z
)shqwY
([~sI 
SizeofResource
-S}*jz
^S	Kdx
Skz$Im
sliceIDlong
slicesVlLs
@s|LK6
S LttW
S_n-5 Z
SnXY>\
sN\$Z0
SP>E5(
#SpI5ju8
#sP:u9tqD
Sp)z?Y
sq(^*]
sQFc@:
s~[~r~h~K
srMo0%dIB
SrO@*2<&Cd
start 
	<string>00.20</string>
		<string>00.20</string>
		<string>com.apple.printingmanager</string>
			<string>com.apple.printingmanager</string>
				<string>com.apple.printingmanager</string>
					<string>com.apple.printingmanager</string>
	<string>com.apple.print.PageFormatTicket</string>
		<string>com.apple.print.PaperInfoTicket</string>
			<string>com.apple.print.pm.PostScript</string>
					<string>com.apple.print.pm.PostScript</string>
					<string>Letter</string>
					<string>na-letter</string>
strncmp
strncpy
_strnicmp
Sub3I2
\subfile.jpg
subfile.jpg
S[uipD
"s*v$n
S@XVch
sY+s1P
s*zF .,a7
~@~SZ~F~V
+[[t2\\L
T/2mfg
t3eC p$A@
\t4zR|
t5LV[s
t'9|$pt
_T,ak3K*U
:T,cC4
tcU#jP
~=@t$d
%Td+,u^@
te=ASPF[
Tepdco
TEWjoV T
!This program cannot be run in DOS mode.
ti1XTg
T|=j|k
tkMBsm
Tl{dbv
tmqPag
#tO6~li
Top long
	topOutsetlong
TOs -jP
##.T(P
TranslateMessage
$tRjjFRc
TrlE$d
"TrRQ2
tsvRQS
T;(;Tx
Tvt/CAStf
TWlAfT.L
&Ty	2|A
t/<ykZ
Typeenum
TYydkz
*TY,zzL~
&tz"7=
-T*zNH
U^0Y22"
u3`+Ns4
U4daR)R
U9s4<v
UA@6!B
"*UbiM(*
}UbT)'
ucD-iF
(^U#cQ
$u=~Dt 
_]UdYQhz(
-Ue#E8N
Ue}JI:
U>EN8g
ue/Ph?g
U\e_S_9
~U~gyk
\uH(^)au
U@hiV"
uI}-9n9<
U?I,P"
ui$r4S
uK8VK[
{ukcm-
uK)VX%^
UmB=;R:Z
+un\ID/6
Un(O.'
u%{=Oce
U~%PKw
u }qmt
\u#|rc
u%)RKrXo
urlTEXT
USER32.dll
]Us]]r
)<UT-MI
UVsWcZ
\$,UVW
	UW!~*
UXD,e!
u?<~^y
.uy5-:
+	u;-Z
{Uz1#/y
'~(v+(
v[:1ca
,'v<-4
v41]4?
v4`*<2
"V*4E\0
+]V4pY
,(!V5f
'V;	`6E
~v7bED
v9Ayo-
	V9E9!;Tu
v9G_+	
}V9sS	EL
<VABKt
VaW4EEPY
'&vbgLW
VBl*G!
=V'dHY
	vertAlignenum
|Vg| 5%Wc<
^VgeUPv
VHJD6_
-~_~Vi
V-%If.
viReum
v)lvkf
V;Lyy=
V:|N*w
[}VoGN[
VPORM@
=V__R-,
~V~@~R~J
#^|VSW
[vt-Vjt
[(VV'-n}<
vxC1:)
V+xP,1
| ?VXW
W$`11d
W1GsnM
w>=22,k
W3GuouixR
;w<3+,u7
W+3|#z>
w;9vR}F
WaitForSingleObject
\W'a>p
wbUQh(
 WCPo2jnFF
weG$F>!Jn{
W!exCjM*{
~w~gY~J~X
W!=GYT
!!&-!W[&hl$PU!"( 
wi]A5 
wj@"1`
w/{K]ly
[Wl$RP
w{megq{u*ZYZ
'wmH2e
WnA\7'
%'|WnhY
wop}wl[!q
[>WPb9
@@WP"llX
wQ15Hy8&
_wQJ)xn
W~+QN;
WriteFile
WS2R_{
ws{'dwI;
wsprintfA
wVdw?j
]w,Voq
Ww>^.4
wxs~i\
[wzYhPe
@x=$++
>=,}/X
x,3VVV!
}X6Q)f
x`6R#N
%x]7WG
x~9Q%B$;2
X%<AdH
XA-OT|
  <xapMM:DocumentID>adobe:docid:photoshop:69f43159-4009-11d7-a53a-98d3ad4b1f00</xapMM:DocumentID>
XbR{/&
+X#di\
XEc@LG
Xe	,Wv
(Xf.G%(
Xh@+{$
XhDem\.
x/h`G&
Xkhofo7Y
  xmlns:xapMM='http://ns.adobe.com/xap/1.0/mm/'>
<?xml version="1.0" encoding="UTF-8"?>
X[mMa*_
 Xm-R8m
<?xpacket begin='
<?xpacket end='w'?>
,("XR)
	XRfi5#v
XRX`NEwm
?X^s:(
%xtO,XO
XtuU>JF
xupJb}
x	utje
Xv=2Eb)
X@(va!
xWze5JM
xX2<n9+)
</x:xapmeta>
<x:xapmeta xmlns:x='adobe:ns:meta/' x:xaptk='XMP toolkit 2.8.2-33, framework 1.5'>
XxjI&o
(~`XZK
| )+!y
}=[	y$#
/Y%;^?
Y&0G?P
>Y0HbE
Y0RVY{
^$Y2U$
;[Y\3-
Y3l#H_C
y5IY/E
y7wwbY
Y81;3*
	=Y9!$
YA<7WRE&
YagU&p
YAN4@E
YCUZ0I
Y	?D	 
ye#lZ)
Y	(Eps
/yeul%6
yf9(C^
Yg/ke,
)Yh*fg
&yh" T%<
$Yi6QX
_YI$aJq=Oq
Y.jcvC
yjf}G~B
yjLTF4=
~_yk]]
=YK0DE
YKG-e=0
?)~[ykN
YKNf~0
>Y>L${
y~L~H~g[~T
,ylj:t
Yl-$_QbF
?Ymbk[+Kf
+yNsC[
yO9e$ns:U
yP~'% "
~&<yQk
;yq>LMLA0U
;yRNF[U4
yR-Z_GKK
`y+S}[
<<,y=S
y")-s%9
yS!w@=
Yukkuo5
[yVh%P
Yv\iWF
Y+V`SC$LC/El
Yw]Ie0
?.ywNy
?"yX( 
#YX[104GFJedg! #SRU?>B#"%ihl@?B98<RQUEDG547TSV[Z]('*sru;:>)(,rru98<769ZY]YX[A@C
_Y]Y\Fd
~YyvM*
"yz9WC
yz<DN(
{yZkYa
yZM"GK
+yZ-{V
Z`	 4YO.[
z"=6Tw
+Z}8i+
Z9@^JA
za$01/"
#za#v<["PR
~Z~cy#
+ZdA$3
~z~d\~R
Z=D Uy
Zg+W6_
%%ZJiG
%z k$wlFd
/zm\A,d
,Z{mBY(n
zm;l4}
}Zo1yc
ZoO(Ny
z+p*X:
<,+	ZrI
!ZrjPW*
Zs+;&_@|+
ZS'J6WC
z.s}r>
zt4>8F
zt9lj\
z%TG!3+!$#"'%"90$pX!
$?Zt{=J
#zTO:t
#zu'I+$\
ZUjnO3
]+ZU{kmZ
-z{)un
zvvzLn
{zv)zy
Zw$0!x
<ZWl[X
_/~z~[y
#[~Z~]y3
/~Zy6	
Z";Z0%ajJ
zZkN>io