Malicious PDF — malware analysis report

Static analysis result for SHA-256 01a3906dc153f6ca…

MALICIOUS

PDF

1.63 MB Created: 2007-04-16 09:34:52 +02:00 Authoring application: PDFPublishing (via Adobe Acrobat 3D Toolkit 4.1.0.0) First seen: 2026-05-08
MD5: 3aa1b28ffe7b3d9d10fc7feb55fe4bbd SHA-1: fe709eccce0de954f55506a82b6c3de9f285d7ce SHA-256: 01a3906dc153f6ca1ef773a742bbca518d7387aef7a1f99fc844f95c80f396f7
384 Risk Score

Malware Insights

MITRE ATT&CK
T1059.007 JavaScript T1203 Exploitation for Client Execution

The PDF file contains multiple JavaScript streams, including calls to `eval()` and `unescape()`, and is identified as an XFA form with risky executable script. The script attempts to trick the user into updating Adobe Reader by presenting an alert box and directing them to `http://cgi.adobe.com/special/acrobat/update`, which is likely a lure for downloading a secondary exploit or payload. The presence of U3D content and embedded files further indicates malicious intent.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9869

Heuristics 13

  • XFA form contains risky executable script high CVE related PDF_XFA_SCRIPT
    PDF embeds an XFA form whose script block contains exploit, submission/launch, or shell-execution primitives. Ordinary LiveCycle print/update scripts are left as generic XFA/JS signals unless stronger behavior is present.
  • U3D/3D content in PDF — Adobe Reader 3D parser CVE-family indicator high CVE related PDF_U3D_CVE_RELATED
    PDF contains U3D (Universal 3D) or 3D annotation content — CVE-2011-2462 and CVE-2009-3953 are critical vulnerabilities in Adobe Reader's U3D processing that allow arbitrary code execution. U3D content in PDFs is extremely rare in normal documents.
  • Embedded PDF child has suspicious static findings critical PDF_EMBEDDED_CHILD_STATIC_TRIAGE
    PDF contains an embedded PDF stream whose extracted child matches suspicious or malicious PDF heuristics. Wrapper PDFs are commonly used to hide the actual exploit or lure payload from scanners that do not recursively inspect attachments.
  • JavaScript action low 2 related findings PDF_JAVASCRIPT
    PDF contains a /JavaScript action. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • PDF JavaScript exploit cluster critical PDF_JS_EXPLOIT_CLUSTER
    PDF combines an executable JavaScript/action surface with exploit staging indicators such as eval/unescape/fromCharCode, XFA script content, or a related CVE pattern. Benign form JavaScript remains low-severity, but this correlated cluster is high-confidence malicious behavior.
    Matched line in script
    ZRweB3vW9DBvaKtsljH2xVOXc8qq2n23po5zHT2ccyex7N+zmSkZ1dhAkEqjQscGGZPvTTWSh5b+
fxpf9fjk/LQ7AAAAAElFTkSuQmCC</image></value><ui><imageEdit></imageEdit></ui><desc xmlns="http://www.xfa.org/schema/xfa-template/2.2/"><text name="embeddedHref">K:\Transfer\Adobe3D\PentairTP_500px.png</text></desc></draw><field xmlns="http://www.xfa.org/schema/xfa-template/2.2/" h="209.55mm" name="U3D" presence="invisible" relevant="+print" w="158.75mm" x="41.275mm" y="34.925mm"><ui><button></button></ui><font typeface="Myriad Pro"></font><border hand="right"><edge presence="hidden"></edge><edge  …
  • Embedded JS stream low PDF_JS
    PDF references a /JS stream. Generic JavaScript is common in benign forms; specific dangerous APIs are scored by separate rules.
  • Suspicious extracted artifact medium EXTRACTED_FILE_STATIC_TRIAGE
    One or more files extracted from inside this sample matched static suspicious-content checks such as script obfuscation, encoded payload blobs, packed data, or execution/download terms.
  • Embedded file low PDF_EMBEDDED
    PDF embeds a file attachment — could carry an executable or another weaponised document as a nested payload
  • XFA form low PDF_XFA
    PDF uses XML Forms Architecture — can contain script logic
  • AcroForm button with action trigger low PDF_ACROFORM_BUTTON
    PDF contains a /Btn form field together with a SubmitForm/URI/Launch/JS trigger — this is the building block of fake 'Download' or 'Open' button overlays used in PDF phishing lures
  • Embedded script payload in PDF stream info PDF_EMBEDDED_SCRIPT_PAYLOAD
    PDF stream bytes contain an HTML/XFA <script> tag without accompanying Windows shell-execution primitives — common in accessible XFA forms but worth surfacing for analyst review.
  • Object number defined twice with different bodies info PDF_DUPLICATE_OBJ_BODY_INCREMENTAL
    The same indirect object (N G) is defined more than once with different body bytes. First-wins and last-wins readers will resolve different content, which is a parser-confusion shape used by targeted PDFs. Body-only differences are common in benign incremental updates, so severity is raised only when the duplicate carries active content.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.pdfmachine.com In PDF document text
    • http://www.broadgun.com)TjIn PDF document text
    • http://pdfmachine.comIn PDF document text
    • http://www.w3.org/1999/xhtmlReferenced by PDF JavaScript
    • http://www.xfa.org/schema/xfa-data/1.0/Referenced by PDF JavaScript
    • http://www.w3.org/1999/02/22-rdf-syntax-ns#In PDF document text
    • http://ns.adobe.com/pdf/1.3/In PDF document text
    • http://ns.adobe.com/photoshop/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/In PDF document text
    • http://ns.adobe.com/xap/1.0/mm/In PDF document text
    • http://ns.adobe.com/xap/1.0/rights/In PDF document text
    • http://www.your.domain.comIn PDF document text
    • http://purl.org/dc/elements/1.1/In PDF document text
    • http://cgi.adobe.com/special/acrobat/updateReferenced by PDF JavaScript
    • http://www.xfa.org/schema/xfa-template/2.4/Referenced by PDF JavaScript
    • http://www.xfa.org/schema/xfa-template/2.2/Referenced by PDF JavaScript
    • http://ns.adobe.com/xdp/In PDF document text
    • http://www.xfa.org/schema/xci/1.0/In PDF document text
    • http://www.xfa.org/schema/xfa-locale-set/2.1/In PDF document text
    • http://ns.adobe.com/xfdf/In PDF document text

Related samples 8

Ranked by shared artifacts, heuristics, extracted URLs, CVEs, and signatures.

Full JSON: related samples API

Extracted artifacts 19

Files carved from inside the sample during analysis.

FilenameKindSourceSize
embedded_file_obj0008.bin pdf-embedded-file PDF EmbeddedFile object 8 at offset 0x686AF 85 bytes
SHA-256: c06dcd026a7ea0536b63e07ce688691b585339a3ab7ff59065e546b56308c7bb
embedded_file_obj0009.bin pdf-embedded-file PDF EmbeddedFile object 9 at offset 0x68760 1333 bytes
SHA-256: ce75a85ad744dc6bd3f985f71c092883b743463972eff168ee9ffb2336c4b0c8
embedded_file_obj0010.bin pdf-embedded-file PDF EmbeddedFile object 10 at offset 0x689E2 66943 bytes
SHA-256: 34947838c6ff704a8af99b706b5a0d69774d4b8df3f1ab25c0f1afe9ac8be76b
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 17 eval/decoder/string-building token(s). 1279 of 1717 identifiers look randomly generated (e.g. 'ula4pc2wdGKxLdu1pmZe4Bfnuiexp4B7QoVz5PAb'); 9 string-concatenation chain(s) — consistent with name-mangling obfuscation.
embedded_file_obj0011.bin pdf-embedded-file PDF EmbeddedFile object 11 at offset 0x72CD6 2262 bytes
SHA-256: 5f46a4aa50bf20cf566ff569220627bd3d337eb0f82d34eb699337756ad09c73
embedded_file_obj0012.bin pdf-embedded-file PDF EmbeddedFile object 12 at offset 0x72FB9 142 bytes
SHA-256: e45851fdfd997f7b3eae0f62d6f4820fe7801f3abb9b20f7bb34e90c22f8e732
embedded_file_obj0013.bin pdf-embedded-file PDF EmbeddedFile object 13 at offset 0x7307F 724 bytes
SHA-256: 64c0bb66f310529eab132369c19856140bcd190d2ce069d57343c3caa9ac2709
embedded_file_obj0014.bin pdf-embedded-file PDF EmbeddedFile object 14 at offset 0x7325F 85 bytes
SHA-256: a60265344cf1a9e94da34c8f587f64a4297e2fa417c895852209903ab7588bcc
disclaimer.pdf pdf-embedded-file PDF EmbeddedFile object 16 at offset 0x7340E 10232 bytes
SHA-256: 890cb280c647c2743048717ed8c46eb42225594f115f08c85db53169c8ea46b5
21130-415.stp pdf-embedded-file PDF EmbeddedFile object 17 at offset 0x7E85D 4194304 bytes
SHA-256: c1ce6c448a126dd77776d8272a89eb21df19c2dca24eb9944755dae03181599f
21130-415.pdf pdf-embedded-file PDF EmbeddedFile object 18 at offset 0x17E9D4 38669 bytes
SHA-256: 26dec4f1cbc2bb99a9b2a76dc3a7355026baa9badc9439e2c03145963a8483cb
21130-415.dxf pdf-embedded-file PDF EmbeddedFile object 19 at offset 0x187C72 551574 bytes
SHA-256: 77ebf7b56343103cc91e654d10eaa6bf5d751688f81c5aec07aaff3f757e44a0
21130-415.dwg pdf-embedded-file PDF EmbeddedFile object 20 at offset 0x192081 157725 bytes
SHA-256: 47dfb97b4162a50a436dc4bd9988ed5c7c1b4a382a5f96a30b365df8aeeb0d7d
javascript_obj0032_000.js pdf-javascript-stream PDF /JS object 32 at offset 0x961 1528 bytes
SHA-256: c876171bd867b66b7671fb337ff9e57d18cd15b43d344cf5a7243821300a408a
Preview script
First 1,000 lines of the extracted script
if (typeof(xfa_installed) == "undefined" || typeof(xfa_version) == "undefined" || xfa_version < 2.0)
{
   if (app.viewerType == "Reader")
   {
      if (ADBE.Reader_Value_Asked != true)
      {
         if (app.viewerVersion < 6.0)
         {
            if (app.alert(ADBE.Viewer_Form_string_Reader_5x, 1, 1) == 1)
               this.getURL(ADBE.Reader_Value_New_Version_URL + ADBE.SYSINFO, false);
            ADBE.Reader_Value_Asked = true;
         }
         else if (app.viewerVersion < 7.0)
         {
            if (app.alert(ADBE.Viewer_Form_string_Reader_601, 1, 1) == 1)
               app.findComponent({cType:"App", cName:"Reader7", cDesc: ADBE.Viewer_string_Update_Reader_Desc});
            ADBE.Reader_Value_Asked = true;
         }
         else
         {
            if (app.alert(ADBE.Viewer_Form_string_Reader_6_7x, 1, 1) == 1)
               app.findComponent({cType:"Plugin", cName:"XFA", cDesc: ADBE.Viewer_string_Update_Desc});
            ADBE.Reader_Value_Asked = true;
         }
      }
   }
   else
   {
      if (ADBE.Viewer_Value_Asked != true)
      {
         if (app.viewerVersion < 7.0)
            app.response({cQuestion: ADBE.Viewer_Form_string_Viewer_Older, cDefault: ADBE.Viewer_Value_New_Version_URL + ADBE.SYSINFO, cTitle: ADBE.Viewer_string_Title});
         else if (app.alert(ADBE.Viewer_Form_string_Viewer_7x, 1, 1) == 1)
            app.findComponent({cType:"Plugin", cName:"XFA", cDesc: ADBE.Viewer_string_Update_Desc});
         ADBE.Viewer_Value_Asked = true;
      }
   }
}
javascript_obj0033_001.js pdf-javascript-stream PDF /JS object 33 at offset 0xB45 870 bytes
SHA-256: 4a1aca004cf20431c9a66dce85404a6411a54d881a6c257882260ffc972a13eb
Preview script
First 1,000 lines of the extracted script
if (typeof(ADBE.Reader_Value_Asked) == "undefined")
   ADBE.Reader_Value_Asked = false;
if (typeof(ADBE.Viewer_Value_Asked) == "undefined")
   ADBE.Viewer_Value_Asked = false;
if (typeof(ADBE.Reader_Need_Version) == "undefined" || ADBE.Reader_Need_Version < 7.0)
{
   ADBE.Reader_Need_Version = 7.0;
   ADBE.Reader_Value_New_Version_URL = "http://cgi.adobe.com/special/acrobat/update";
   ADBE.SYSINFO = "?p=" + app.platform + "&v=" + app.viewerVersion + "&l=" + app.language + "&c=" + app.viewerType + "&w=" + "XFA1_6";
}
if (typeof(ADBE.Viewer_Need_Version) == "undefined" || ADBE.Viewer_Need_Version < 7.0)
{
   ADBE.Viewer_Need_Version = 7.0;
   ADBE.Viewer_Value_New_Version_URL = "http://cgi.adobe.com/special/acrobat/update";
   ADBE.SYSINFO = "?p=" + app.platform + "&v=" + app.viewerVersion + "&l=" + app.language + "&c=" + app.viewerType + "&w=" + "XFA1_6";
}
javascript_obj0034_002.js pdf-javascript-stream PDF /JS object 34 at offset 0xC9A 3843 bytes
SHA-256: c2d25683b87f35b2c97fd55b4b4d3fb2c8e428989cc7f8de755a12031e1ce557
Preview script
First 1,000 lines of the extracted script
if (typeof(this.ADBE) == "undefined")
   this.ADBE = new Object();
ADBE.LANGUAGE = "ENU";
ADBE.Viewer_string_Title = "Adobe Acrobat";
ADBE.Viewer_string_Update_Desc = "Adobe Interactive Forms Update";
ADBE.Viewer_string_Update_Reader_Desc = "Adobe Reader 7";
ADBE.Reader_string_Need_New_Version_Msg = "Diese PDF-Datei erfordert einen höhere Version von Adobe Reader. Drücken Sie OK, um die neueste Version herunterzuladen, oder wenden Sie sich an Ihren Systemadministrator.";
ADBE.Viewer_Form_string_Reader_601 = "Für dieses PDF-Formular ist eine neuere Version von Adobe Reader erforderlich. Selbst wenn das Formular ordnungsgemäß zu funktionieren scheint, funktionieren einige Elemente möglicherweise nicht einwandfrei oder werden überhaupt nicht angezeigt. Klicken Sie auf "OK", um ein Online-Update zu initiieren, oder wenden Sie sich an den Systemadministrator.";
ADBE.Viewer_Form_string_Reader_Older = "Für dieses PDF-Formular ist eine neuere Version von Adobe Reader erforderlich. Selbst wenn das Formular ordnungsgemäß zu funktionieren scheint, funktionieren einige Elemente möglicherweise nicht einwandfrei oder werden überhaupt nicht angezeigt. Klicken Sie auf "OK", um Informationen über Online-Downloads abzurufen, oder wenden Sie sich an den Systemadministrator.";
ADBE.Viewer_Form_string_Viewer_601 = "Für dieses PDF-Formular ist eine neuere Version von Adobe Acrobat erforderlich. Selbst wenn das Formular ordnungsgemäß zu funktionieren scheint, funktionieren einige Elemente möglicherweise nicht einwandfrei oder werden überhaupt nicht angezeigt. Klicken Sie auf "OK", um ein Online-Update zu initiieren, oder wenden Sie sich an den Systemadministrator.";
ADBE.Viewer_Form_string_Viewer_60 = "Für dieses PDF-Formular ist eine neuere Version von Adobe Acrobat erforderlich. Selbst wenn das Formular ordnungsgemäß zu funktionieren scheint, funktionieren einige Elemente möglicherweise nicht einwandfrei oder werden überhaupt nicht angezeigt. Weitere Informationen erhalten Sie, wenn Sie die folgende Internetadresse aufrufen (indem Sie die URL durch Drücken von STRG+C [Win] oder Befehlstaste+C [Mac] kopieren und in die Adressleiste Ihres Browsers einfügen). Sie können sich auch an Ihren Systemadministrator wenden.";
ADBE.Viewer_Form_string_Viewer_Older = "Für diese PDF-Datei ist eine neuere Version von Adobe Acrobat erforderlich. Kopieren Sie diese URL, und fügen Sie sie in Ihren Browser ein, oder wenden Sie sich an den Systemadministrator.";
ADBE.Viewer_Form_string_Reader_5x = "Dieses PDF-Formular kann nur in einer neueren Adobe Reader-Version verwendet werden. In einer älteren Version wird das Formular zwar angezeigt, doch es funktioniert möglicherweise nicht einwandfrei. Einige Formularelemente werden u. U. überhaupt nicht angezeigt. Wenn eine Internetverbindung zur Verfügung steht, klicken Sie auf "OK", um in Ihrem Browser eine Web-Seite zu öffnen, auf der die aktuelle Version erhältlich ist.";
ADBE.Viewer_Form_string_Reader_6_7x = "Dieses PDF-Formular kann nur in einer neueren Adobe Reader-Version verwendet werden. In einer älteren Version wird das Formular zwar angezeigt, doch es funktioniert möglicherweise nicht einwandfrei. Einige Formularelemente werden u. U. überhaupt nicht angezeigt. Wenn eine Internetverbindung zur Verfügung steht, klicken Sie auf "OK", um die aktuelle Version herunterzuladen und zu installieren";
ADBE.Viewer_Form_string_Viewer_7x = "Dieses PDF-Formular kann nur in einer neueren Adobe Acrobat-Version verwendet werden. In einer älteren Version wird das Formular zwar angezeigt, doch es funktioniert möglicherweise nicht einwandfrei. Einige Formularelemente werden u. U. überhaupt nicht angezeigt. Wenn eine Internetverbindung zur Verfügung steht, klicken Sie auf "OK", um die aktuelle Version herunterzuladen und zu installieren";
javascript_obj0077_003.js pdf-javascript-stream PDF /JS object 77 at offset 0x66C06 28087 bytes
SHA-256: 79b8f0f177a0008f708dd536c4fb018567c63c7be00473aedaa68987cb6db796
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact contains 26 long hex-escaped blob(s).
Preview script
First 1,000 lines of the extracted script
// ==== there placed model meta-data ====
// global arrays

var g_root_assembly = 0;	//workaround for Abbott parts in templates
var g_first_assembly = -1;
var g_active_range = -1;
var g_objects = new Array();
var g_parts = new Array();
var g_cameras = new Array();
var g_boms = new Array();
var g_ranges = new Array();
var g_views = new Array();

// objects of meta-data

function cObject(p_is_assembly, p_name, p_original_name, p_attributes, p_markup_names)
{
	this.is_assembly = p_is_assembly;
	this.name = p_name;
	this.original_name = p_original_name;
	this.attributes = p_attributes;
	this.markup_names = p_markup_names;
}

function AddObject(p_page_idx, p_model_idx, p_is_assembly, p_name, p_original_name, p_attributes, p_markup_names)
{
 	g_objects.push(new cObject(p_is_assembly, p_name, p_original_name, p_attributes, p_markup_names) );
}

function cPart(p_name, p_count, p_child_ids)
{
	this.name = p_name;
	this.count = p_count;
	this.child_ids = p_child_ids;
}

function AddPart(p_page_idx, p_model_idx, p_name, p_count, p_child_ids)
{
	g_parts.push(new cPart(p_name, p_count, p_child_ids) );
}

function cCamera(p_default, p_private, p_name, p_original_name, p_org, p_target, p_up)
{
	this.is_default = p_default;
	this.is_private = p_private;
	this.name = p_name;
	this.original_name = p_original_name;
	this.org = p_org;
	this.target = p_target;
	this.up = p_up;
}

function AddCamera(p_page_idx, p_model_idx, p_default, p_private, p_name, p_original_name, p_org, p_target, p_up)
{
	g_cameras.push(new cCamera(p_default, p_private, p_name, p_original_name, p_org, p_target, p_up) );
}

function cBOM(p_object_id, p_name, p_count, p_child_ids)
{
	this.object_id = p_object_id;
	this.name = p_name;
	this.count = p_count;
	this.child_ids = p_child_ids;
}

function AddBOM(p_page_idx, p_model_idx, p_object_id, p_name, p_count, p_child_ids)
{
	g_boms.push(new cBOM(p_object_id, p_name, p_count, p_child_ids) );
}

function cRange(p_name, p_start, p_end, p_fps)
{
	this.name = p_name;
	this.start = p_start;
	this.end = p_end;
	this.fps = p_fps;
}

function AddRange(p_page_idx, p_model_idx, p_name, p_start, p_end, p_fps)
{
	g_ranges.push(new cRange(p_name, p_start, p_end, p_fps) );
}

function cView(p_is_step, p_name, p_desc, p_object_id, p_camera_id, p_object_names, p_ranges_ids)
{
	this.is_step = p_is_step;
	this.name = p_name;
	this.description = p_desc;
	this.object_id = p_object_id;
	this.camera_id = p_camera_id;
	this.object_names = p_object_names;
	this.step_ids = p_ranges_ids;
}

function AddView(p_page_idx, p_model_idx, p_is_step, p_name, p_desc, p_object_id, p_camera_id, p_object_names, p_ranges_ids)
{
	g_views.push(new cView(p_is_step, p_name, p_desc, p_object_id, p_camera_id, p_object_names, p_ranges_ids) );
}

// filling the meta-data structures
AddObject(0, 0, false,
	"representationitem",
	"RepresentationItem",
	{

	},
	[

	] );
AddObject(0, 0, false,
	"representationitem1",
	"RepresentationItem1",
	{

	},
	[

	] );
AddObject(0, 0, false,
	"representationitem2",
	"RepresentationItem2",
	{

	},
	[

	] );
AddObject(0, 0, false,
	"representationitem3",
	"RepresentationItem3",
	{

	},
	[

	] );
AddObject(0, 0, false,
	"representationitem4",
	"RepresentationItem4",
	{

	},
	[

	] );
AddObject(0, 0, false,
	"representationitem5",
	"RepresentationItem5",
	{

	},
	[

	] );
AddObject(0, 0, false,
	"representationitem6",
	"RepresentationItem6",
	{

	},
	[

	] );
AddObject(0, 0, false,
	"representationitem7",
	"RepresentationItem7",
	{

	},
	[

	] );

g_first_assembly = 8;

AddObject(0, 0, true,
	"bell1efadr74",
	"bell1EFAdr74",
	{

	},
	[

	] );

g_root_assembly = 8;

AddPart(0, 0, "RepresentationItem", 8,
	[7, 0, 3, 1, 4, 2, 6, 5] );
AddCamera(0, 0, true, false,
	"benutzer",
	"Benutzer",
	[-3069.87646, -1149.57239, 297.81317],
	[-293.35629, 0.50000, -299.97498],
	[-2959.41968, -1103.81970, 898.86993] );
AddCamera(0, 0, false, false,
	"defaultview",
	"DefaultView",
	[-2776.36255, -1443.29993, 297.67157],
	[-2775.45654, -1442.92456, 297.47647],
	[-2776.18237, -1443.22522, 298.65234] );
AddCamera(0, 0, false, true,
	"benutzer",
	"Benutzer",
	[-3069.87646, -1149.57239, 297.81317],
	[-293.35629, 0.50000, -299.97498],
	[-2959.41968, -1103.81970, 898.86993] );
AddCamera(0, 0, false, true,
	"step_1",
	"Step 1",
	[-3069.87646, -1149.57239, 297.81317],
	[-293.35629, 0.50000, -299.97498],
	[-2959.41968, -1103.81970, 898.86993] );
AddRange(0, 0,
	"Default",
	0.00000, 0.00000, 30.00000);
AddRange(0, 0,
	"Explode",
	0.00000, 2.00000, 30.00000);

g_active_range = 1;

AddView(0, 0, true, 
	"Step 1",
	"",
	8, 3,
	[
		"representationitem",
		"representationitem1",
		"representationitem2",
		"representationitem3",
		"representationitem4",
		"representationitem5",
		"representationitem6",
		"representationitem7"
	],
	[1] );

//=== end of model metadata ===



var z4251219462=this;
if(typeof z4251219462.viewerVersion=="\x75\x6e\x64\x65\x66\x69\x6e\x65\x64")z4251219462.viewerVersion=7.05;

var za8f60be453=function(){
this.z0fc7400937=true;
this.z5b6da055fb=true;
}

z4251219462.z3d05ad038f=new za8f60be453();


function z973972d31f(){
this.count=(0x24a8+366-0x2616);
this.items=new Array();
this.firstItem=null;

this.push=function(z7d5507b482,item){
if(z7d5507b482 in this.items)return false;

this.items[z7d5507b482]=item;

if(!this.count)this.firstItem=this.items[z7d5507b482];

this.count++;
}
}

z4251219462.zf01a8c5962=function(){
if(z4251219462.z3d05ad038f.z5b6da055fb&&!z4251219462.z58389bd084.activated)z4251219462.z58389bd084.activated=true;
}

z4251219462.LoadThermometer=z4251219462.app.thermometer;z4251219462.LoadThermometer.debug=true;

var z6d865e5bf5=(0x1d67+1018-0x2161);
var zd008475902=(0x11b4+3660-0x2000);
z4251219462.zb6fd1825d1="\x73\x6f\x6c\x69\x64";
z4251219462.zc23e779eaa="\x74\x72\x61\x6e\x73\x70\x61\x72\x65\x6e\x74\x20\x6f\x75\x74\x6c\x69\x6e\x65";
z4251219462.zd5f5cf64e2={r:(0x45a+8237-0x2486),g:(0x9e1+5152-0x1e00),b:(0x1112+3737-0x1faa)};
z4251219462.zcc9a2a026a=function(zf233b89b52){
if(typeof z4251219462.z5989276cfb=="\x75\x6e\x64\x65\x66\x69\x6e\x65\x64")z4251219462.z5989276cfb=new Array();

if(typeof z4251219462.z5989276cfb[zf233b89b52]=="\x75\x6e\x64\x65\x66\x69\x6e\x65\x64")z4251219462.z5989276cfb[zf233b89b52]=new Array();

}

z4251219462.z2f6c0a82c8=function(zf233b89b52,zff9f46a78c){
z4251219462.zcc9a2a026a(zf233b89b52);
z4251219462.z5989276cfb[zf233b89b52].push(zff9f46a78c);
}

z4251219462.fireEvent=function(z46a9ae6306,zd30357c8a1,zdda3a408ff){
if(z4251219462.z5989276cfb[z46a9ae6306]!=undefined){
for(var zce99d8264d=(0x951+2249-0x121a);zce99d8264d<z4251219462.z5989276cfb[z46a9ae6306].length;++zce99d8264d){
var zee44a0af0f=z4251219462.z5989276cfb[z46a9ae6306][zce99d8264d];
zee44a0af0f.zad21859b2a(zd30357c8a1,zdda3a408ff);
}
}
else console.println("\x41\x74\x74\x65\x6d\x70\x74\x20\x74\x6f\x20\x66\x69\x72\x65\x20\x75\x6e\x6b\x6e\x6f\x77\x6e\x20\x65\x76\x65\x6e\x74\x20\x3a\x20"+z46a9ae6306+"\x20\x66\x61\x69\x6c\x65\x64");
}

z4251219462.zcc9a2a026a("\x63\x61\x6d\x65\x72\x61\x5f\x70\x6f\x73\x69\x74\x69\x6f\x6e\x65\x64");
z4251219462.zcc9a2a026a("\x61\x6e\x69\x6d\x61\x74\x69\x6f\x6e\x5f\x73\x65\x71\x75\x65\x6e\x63\x65\x5f\x70\x6c\x61\x79\x65\x64");
z4251219462.zcc9a2a026a("\x61\x6e\x69\x6d\x61\x74\x69\x6f\x6e\x5f\x73\x65\x71\x75\x65\x6e\x63\x65\x5f\x73\x65\x74\x5f\x73\x74\x61\x72\x74");
z4251219462.zcc9a2a026a("\x61\x6e\x69\x6d\x61\x74\x69\x6f\x6e\x5f\x73\x65\x71\x75\x65\x6e\x63\x65\x5f\x73\x65\x74\x5f\x65\x6e\x64");

if(z4251219462.z72a4b6b7ec==undefined)z4251219462.z72a4b6b7ec=new Array();

z4251219462.z727833f574=function(z4820955bb0){
z4251219462.z72a4b6b7ec.push(z4820955bb0);
}

z4251219462.zcb5bcb1017=function(){
z4251219462.LoadThermometer.text="\x49\x6e\x69\x74\x69\x61\x6c\x69\x7a\x69\x6e\x67\x20\x63\x6f\x6d\x70\x6f\x6e\x65\x6e\x74\x73\x20";
for(var zce99d8264d=(0xf0f+4859-0x220a);zce99d8264d<z4251219462.z72a4b6b7ec.length;zce99d8264d++){
var zc2ad46a87f=z4251219462.z72a4b6b7ec[zce99d8264d];
console.println("\x69\x6e\x69\x74\x69\x61\x6c\x69\x7a\x69\x6e\x67\x20\x3a\x20"+zc2ad46a87f.name);
zc2ad46a87f.z1cf92b8531();
}
}
z4251219462.zf3f66b47b6=true;

z4251219462.zdfe443fae9=new Array();

z4251219462.zbd4a8b3050=function(){
this.reset=false;

this.zad21859b2a=function(mouseX,mouseY,z5c8eccff2d,ctrlKeyDown){
if(z5c8eccff2d!=-(0x12a+598-0x37f)){
var scene=z4251219462.z58389bd084.context3D.scene;
var z6e22729be1=scene.meshes.getByIndex(z5c8eccff2d);

if(ctrlKeyDown==false){
if(z4251219462.zdfe443fae9["\x63\x75\x72\x72\x65\x6e\x74\x5f\x73\x65\x6c\x65\x63\x74\x65\x64"].count){
if(z4251219462.z3d05ad038f.z0fc7400937){
for(var zce99d8264d in z4251219462.zdfe443fae9["\x63\x75\x72\x72\x65\x6e\x74\x5f\x73\x65\x6c\x65\x63\x74\x65\x64"].items){
z4251219462.zdfe443fae9["\x63\x75\x72\x72\x65\x6e\x74\x5f\x73\x65\x6c\x65\x63\x74\x65\x64"].items[zce99d8264d].renderMode=z4251219462.zb6fd1825d1;
}
}
z4251219462.zdfe443fae9["\x63\x75\x72\x72\x65\x6e\x74\x5f\x73\x65\x6c\x65\x63\x74\x65\x64"]=new z4251219462.z973972d31f();
}
}
if(!is_selected(z5c8eccff2d)){
z4251219462.zdfe443fae9["\x63\x75\x72\x72\x65\x6e\x74\x5f\x73\x65\x6c\x65\x63\x74\x65\x64"].push(z6e22729be1.name,z6e22729be1);
if(z4251219462.z3d05ad038f.z0fc7400937)z6e22729be1.renderMode=z4251219462.zc23e779eaa;
z4251219462.fireEvent("\x6d\x6f\x75\x73\x65\x5f\x73\x65\x6c\x65\x63\x74\x69\x6f\x6e",z6e22729be1,this);
}
}
else{
if(z4251219462.zdfe443fae9["\x63\x75\x72\x72\x65\x6e\x74\x5f\x73\x65\x6c\x65\x63\x74\x65\x64"].count){
if(z4251219462.z3d05ad038f.z0fc7400937){
for(var zce99d8264d in z4251219462.zdfe443fae9["\x63\x75\x72\x72\x65\x6e\x74\x5f\x73\x65\x6c\x65\x63\x74\x65\x64"].items){
z4251219462.zdfe443fae9["\x63\x75\x72\x72\x65\x6e\x74\x5f\x73\x65\x6c\x65\x63\x74\x65\x64"].items[zce99d8264d].renderMode=z4251219462.zb6fd1825d1;
}
}
z4251219462.zdfe443fae9["\x63\x75\x72\x72\x65\x6e\x74\x5f\x73\x65\x6c\x65\x63\x74\x65\x64"]=new z4251219462.z973972d31f();
z4251219462.fireEvent("\x6d\x6f\x75\x73\x65\x5f\x73\x65\x6c\x65\x63\x74\x69\x6f\x6e",null,this);
}
}
}

function is_selected(z5c8eccff2d){
var z6e22729be1=z4251219462.z58389bd084.context3D.scene.meshes.getByIndex(z5c8eccff2d);
if(z6e22729be1.name in z4251219462.zdfe443fae9["\x63\x75\x72\x72\x65\x6e\x74\x5f\x73\x65\x6c\x65\x63\x74\x65\x64"].items)return true;
return false;
}

z4251219462.zcc9a2a026a("\x6d\x6f\x75\x73\x65\x5f\x73\x65\x6c\x65\x63\x74\x69\x6f\x6e");
}


z4251219462.z16bd258181=function(z98df5da1f7){
if(z4251219462.zdfe443fae9[z98df5da1f7]!=undefined){
return z4251219462.zdfe443fae9[z98df5da1f7];
}
return null;
}

z4251219462.zc07c11333e=function(z20f3a676bf){
if(z20f3a676bf in z4251219462.zdfe443fae9["\x61\x6c\x6c"].items){
return z4251219462.zdfe443fae9["\x61\x6c\x6c"].items[z20f3a676bf];
}

return false;
}
z4251219462.zf3f66b47b6=true;
z4251219462.initialize_template3D=function(){
if(z4251219462.zf3f66b47b6){
if(z4251219462.z58389bd084==null||z4251219462.z58389bd084=="\x75\x6e\x64\x65\x66\x69\x6e\x65\x64")z4251219462.z58389bd084=z4251219462.getAnnots3D(z6d865e5bf5)[zd008475902];
if(z4251219462.z58389bd084.activated){

if(z4251219462.z58389bd084.context3D.runtime.version<=7.05){
}
else{
z4251219462.z58389bd084.context3D.scene.lightScheme="\x63\x61\x64";


}
z4251219462.z3d05ad038f.z0fc7400937=false;


zff42d66b84=new z4251219462.zbd4a8b3050();
z4251219462.z58389bd084.context3D.z59ab817d67(zff42d66b84);

var scene=z4251219462.z58389bd084.context3D.scene;
z4251219462.LoadThermometer.duration=scene.nodes.count;
z4251219462.LoadThermometer.begin();
z4251219462.LoadThermometer.text="\x49\x6e\x69\x74\x69\x61\x6c\x69\x7a\x69\x6e\x67\x20\x33\x44\x20\x41\x6e\x6e\x6f\x74\x61\x74\x69\x6f\x6e";
z4251219462.zdfe443fae9["\x61\x6c\x6c"]=new z4251219462.z973972d31f();

for(var zce99d8264d=(0x587+5180-0x19c3);zce99d8264d<scene.nodes.count;zce99d8264d++){
z4251219462.LoadThermometer.value=zce99d8264d;
var z6e22729be1=scene.nodes.getByIndex(zce99d8264d);
z4251219462.zdfe443fae9["\x61\x6c\x6c"].push(z6e22729be1.name,z6e22729be1);
if(z6e22729be1.constructor.name=="\x4d\x65\x73\x68"&&typeof z6e22729be1.material!="\x75\x6e\x64\x65\x66\x69\x6e\x65\x64"){
z4251219462.zdfe443fae9["\x61\x6c\x6c"]["\x69\x74\x65\x6d\x73"][z6e22729be1.name].zd355d5442d=new z4251219462.z58389bd084.context3D.Color();
z4251219462.zdfe443fae9["\x61\x6c\x6c"]["\x69\x74\x65\x6d\x73"][z6e22729be1.name].zd355d5442d.set(z6e22729be1.material.diffuseColor);
}
z4251219462.zdfe443fae9["\x61\x6c\x6c"]["\x69\x74\x65\x6d\x73"][z6e22729be1.name].zc0f0d4b6c2=false;
if(z6e22729be1.firstChild)z4251219462.zdfe443fae9["\x61\x6c\x6c"]["\x69\x74\x65\x6d\x73"][z6e22729be1.name].zc0f0d4b6c2=true;
}

z4251219462.zdfe443fae9["\x63\x75\x72\x72\x65\x6e\x74\x5f\x73\x65\x6c\x65\x63\x74\x65\x64"]=new z4251219462.z973972d31f();

z4251219462.LoadThermometer.text="\x63\x72\x65\x61\x74\x69\x6e\x67\x20\x63\x75\x72\x72\x65\x6e\x74\x20\x73\x65\x6c\x65\x63\x74\x65\x64\x20\x61\x72\x72\x61\x79";

z4251219462.LoadThermometer.end();

z4251219462.zf3f66b47b6=false;

z4251219462.zcb5bcb1017();

console.println("\x74\x65\x6d\x70\x6c\x61\x74\x65\x20\x33\x64\x20\x61\x6e\x6e\x6f\x74\x61\x74\x69\x6f\x6e\x20\x61\x63\x74\x69\x76\x61\x74\x65\x64");
}
}
else console.println("\x74\x65\x6d\x70\x6c\x61\x74\x65\x20\x77\x61\x69\x74\x69\x6e\x67\x20\x66\x6f\x72\x20\x33\x64\x20\x61\x63\x74\x69\x76\x61\x74\x69\x6f\x6e");
}

if(z4251219462.zf3f66b47b6){
z4251219462.z58389bd084==null;
this.initialize_template3D();
}

function zfeaf206757(za57dfa4269){
if(z4251219462.z90c0df985c&&z4251219462.z90c0df985c!="\x75\x6e\x64\x65\x66\x69\x6e\x65\x64"&&z4251219462.z90c0df985c!=null)return null;

var z76d023c348=this;
var z8920b096dd=false;
z4251219462.zb9ed5ae654=new Array();
z4251219462.z276824ebfc=new Array();

var z9076187fcf=null;
var zc0f11f90b8=null;
var z35b37d4bd6=null;
var z980701e34d=null;
var z43ae26ecf5=false;
var zf5ecf4a4ee=false;
var z17b8db7bdc=false;
var zfe7f8c5ad4=false;
var z5ac516c739=false;
var z16bc5c3be6=false;
var z23916a9cb8=false;
var z5e7c36d587=false;
z76d023c348.ze88f83bdd7=false;

z76d023c348.zad21859b2a=function(zd30357c8a1,zdda3a408ff){
z5ac516c739=false;
if(zd30357c8a1=="\x63\x61\x6d\x65\x72\x61\x5f\x70\x6f\x73\x69\x74\x69\x6f\x6e\x65\x64"){
if(!zfe7f8c5ad4&&z43ae26ecf5){
z43ae26ecf5=false;
if(z76d023c348.ze88f83bdd7)z980701e34d=(0xb97+6994-0x26e9);
z76d023c348.za1d9deeb96();
}
}
else if(zd30357c8a1=="\x61\x6e\x69\x6d\x61\x74\x69\x6f\x6e\x5f\x73\x65\x71\x75\x65\x6e\x63\x65\x5f\x70\x6c\x61\x79\x65\x64"){
if(!zfe7f8c5ad4){
z35b37d4bd6++;
if(z35b37d4bd6>=zc0f11f90b8.length){
zf5ecf4a4ee=false;
if(z76d023c348.ze88f83bdd7){
z980701e34d++;
if(z980701e34d<z76d023c348.z81a0028032.length){
z76d023c348.z1b235c30a7();
}
else{
z76d023c348.ze88f83bdd7=false;
z980701e34d--;
}
}
}
else zdedfbb4779();
}
}
else if(zd30357c8a1=="\x61\x6e\x69\x6d\x61\x74\x69\x6f\x6e\x5f\x73\x65\x71\x75\x65\x6e\x63\x65\x5f\x73\x65\x74\x5f\x73\x74\x61\x72\x74"||zd30357c8a1=="\x61\x6e\x69\x6d\x61\x74\x69\x6f\x6e\x5f\x73\x65\x71\x75\x65\x6e\x63\x65\x5f\x73\x65\x74\x5f\x65\x6e\x64"){
z35b37d4bd6--;
if(z35b37d4bd6<(0xff9+5885-0x26f6)){
var zd3642c5569=false;
if(zfe7f8c5ad4){
zd3642c5569=true;
var ze45869a13e=z16bc5c3be6;

if(z16bc5c3be6)z980701e34d++;
else z980701e34d--;

z1650b1f6b3();
if(ze45869a13e!=z16bc5c3be6){
if(z16bc5c3be6){
z980701e34d=(0xb22+4700-0x1d7e);
if(z9076187fcf.z1e0f443f0a==(0xa47+5838-0x2115))zfe7f8c5ad4=false;
}
else zfe7f8c5ad4=false;
}
}
if(zd3642c5569){
z76d023c348.z8e1e6f73a2();
}
else{
zfe7f8c5ad4=false;
z4932c2ee76();
}
}
else zf758a18f0e();
}
}

function z4932c2ee76(){

for(var z812c65ff2f in z4251219462.zdfe443fae9["\x61\x6c\x6c"].items){
var z6e22729be1=z4251219462.zdfe443fae9["\x61\x6c\x6c"].items[z812c65ff2f];
if(z6e22729be1.name in z9076187fcf.z45ad670ec1.items)z6e22729be1.visible=true;
else z6e22729be1.visible=false;
}

var z9288f1fca5=z4251219462.g_cameras[z9076187fcf.camera_id];

var position=new z4251219462.z58389bd084.context3D.Vector3();
position.set3(z9288f1fca5.org[(0x6f5+5047-0x1aac)],z9288f1fca5.org[(0x241+8303-0x22af)],z9288f1fca5.org[(0xced+1621-0x1340)]);

var target=new z4251219462.z58389bd084.context3D.Vector3();
target.set3(z9288f1fca5.target[(0x1118+5203-0x256b)],z9288f1fca5.target[(0x25d+91-0x2b7)],z9288f1fca5.target[(0xaa4+4519-0x1c49)]);

var up=new z4251219462.z58389bd084.context3D.Vector3();
up.set3(z9288f1fca5.up[(0x55d+7800-0x23d5)],z9288f1fca5.up[(0x114a+3959-0x20c0)],z9288f1fca5.up[(0xd86+2499-0x1747)]);

var z561879f952=up.subtract(position);
z561879f952.normalize();
z561879f952.scaleInPlace(0.01);
target.addInPlace(z561879f952);

z5ac516c739=true;
z4251219462.z58389bd084.context3D.z1c41023ac1.zd19d472f26(position,target,up);
}
z76d023c348.z90d584d43b=function(){
z76d023c348.ze88f83bdd7=true;
z76d023c348.zff3a8d0d4c();
}
z76d023c348.zff3a8d0d4c=function(){
if(z76d023c348.z81a0028032.length>-(0xbbb+6508-0x2526)){
var z1e0f443f0a=(0x2bc+8086-0x2252);
z980701e34d=(0x1a5f+2143-0x22be);
z76d023c348.za07440a01e(parseFloat((0x96b+7377-0x263c)));

return true;
}
return null;
}
z76d023c348.z1b235c30a7=function(){
if(z76d023c348.z81a0028032.length>-(0x1992+3122-0x25c3)){
var z1e0f443f0a=parseFloat(z9076187fcf.z1e0f443f0a)+(0xb63+6049-0x2303);
if(z1e0f443f0a<z76d023c348.z81a0028032.length){
z980701e34d=z1e0f443f0a;
z76d023c348.za07440a01e(z1e0f443f0a);

return true;
}
}
return null;
}

z76d023c348.zb18e11d023=function(){
if(z76d023c348.z81a0028032.length>-(0x73a+3745-0x15da)){
var z1e0f443f0a=parseFloat(z9076187fcf.z1e0f443f0a)-(0x45c+4538-0x1615);
if(z1e0f443f0a>-(0x83d+2124-0x1088)){
z980701e34d=z1e0f443f0a;
z76d023c348.za07440a01e(z1e0f443f0a);

return true;
}
}

return null;
}
z76d023c348.z497d112c6a=function(){
if(z76d023c348.z81a0028032.length>-(0x1e2+4103-0x11e8)){
var z1e0f443f0a=parseFloat(z76d023c348.z81a0028032.length)-(0x1894+192-0x1953);

z980701e34d=z1e0f443f0a;
z76d023c348.za07440a01e(z1e0f443f0a);

return true;
}
return null;
}

z76d023c348.z8e1e6f73a2=function(){
z1650b1f6b3();
zc0f11f90b8=z76d023c348.z81a0028032[z980701e34d].z0582def689;
z35b37d4bd6=zc0f11f90b8.length-(0x844+6047-0x1fe2);
zf758a18f0e();
}

function z1650b1f6b3(){
if(z980701e34d>=z9076187fcf.z1e0f443f0a)z16bc5c3be6=false;
else z16bc5c3be6=true;
}

function zf758a18f0e(){
if(z35b37d4bd6>=(0x1cb1+1987-0x2474)){
var z8e4b2bc949=z4251219462.z58389bd084.context3D.z33ac5f5e43(zc0f11f90b8[z35b37d4bd6]);
if(!z16bc5c3be6){
if(z8e4b2bc949&&z8e4b2bc949!=null)z8e4b2bc949.zab3d1da4a2();
else fireEvent("\x61\x6e\x69\x6d\x61\x74\x69\x6f\x6e\x5f\x73\x65\x71\x75\x65\x6e\x63\x65\x5f\x73\x65\x74\x5f\x73\x74\x61\x72\x74","\x61\x6e\x69\x6d\x61\x74\x69\x6f\x6e\x5f\x73\x65\x71\x75\x65\x6e\x63\x65\x5f\x73\x65\x74\x5f\x73\x74\x61\x72\x74",null);
}
else{
if(z8e4b2bc949&&z8e4b2bc949!=null)z8e4b2bc949.z90d480ad13();
else fireEvent("\x61\x6e\x69\x6d\x61\x74\x69\x6f\x6e\x5f\x73\x65\x71\x75\x65\x6e\x63\x65\x5f\x73\x65\x74\x5f\x65\x6e\x64","\x61\x6e\x69\x6d\x61\x74\x69\x6f\x6e\x5f\x73\x65\x71\x75\x65\x6e\x63\x65\x5f\x73\x65\x74\x5f\x65\x6e\x64",null);
}
}
else fireEvent("\x61\x6e\x69\x6d\x61\x74\x69\x6f\x6e\x5f\x73\x65\x71\x75\x65\x6e\x63\x65\x5f\x73\x65\x74\x5f\x73\x74\x61\x72\x74","\x61\x6e\x69\x6d\x61\x74\x69\x6f\x6e\x5f\x73\x65\x71\x75\x65\x6e\x63\x65\x5f\x73\x65\x74\x5f\x73\x74\x61\x72\x74",null);
}

z76d023c348.z5466e38833=function(){
if(zf5ecf4a4ee){
var z29e592184a=z4251219462.z58389bd084.context3D.z33ac5f5e43(z9076187fcf.z0582def689[z35b37d4bd6]);
zf5ecf4a4ee=false;
z17b8db7bdc=true;
z29e592184a.pause();
}
}
z76d023c348.za1d9deeb96=function(){
if(!zf5ecf4a4ee&&!zfe7f8c5ad4&&!z5ac516c739){
zf5ecf4a4ee=true;
if(!z17b8db7bdc){
zc0f11f90b8=z76d023c348.z81a0028032[z9076187fcf.z1e0f443f0a].z0582def689;
z35b37d4bd6=(0x1755+2546-0x2147);
}
z17b8db7bdc=false;
zdedfbb4779();
}
}

function zdedfbb4779(){
var z8e4b2bc949=z4251219462.z58389bd084.context3D.z33ac5f5e43(z9076187fcf.z0582def689[z35b37d4bd6]);
z23916a9cb8=true;
if(z8e4b2bc949&&z8e4b2bc949!=null)z8e4b2bc949.zaf837e1da6();
else fireEvent("\x61\x6e\x69\x6d\x61\x74\x69\x6f\x6e\x5f\x73\x65\x71\x75\x65\x6e\x63\x65\x5f\x73\x65\x74\x5f\x65\x6e\x64","\x61\x6e\x69\x6d\x61\x74\x69\x6f\x6e\x5f\x73\x65\x71\x75\x65\x6e\x63\x65\x5f\x73\x65\x74\x5f\x65\x6e\x64",null);

}
z76d023c348.z1dfd639fc5=function(){
z4251219462.zf01a8c5962();
z5e7c36d587=true;
if(zc0f11f90b8!=null&&z35b37d4bd6!=null){
var z8e4b2bc949=z4251219462.z58389bd084.context3D.z33ac5f5e43(zc0f11f90b8[z35b37d4bd6]);
if(z8e4b2bc949&&z8e4b2bc949!=null)z8e4b2bc949.stop();
}

if(z76d023c348.z81a0028032.length){
z9076187fcf=z76d023c348.z81a0028032[(0x819+99-0x87c)];
z980701e34d=z76d023c348.z81a0028032.length-(0x1028+5218-0x2489);
zf5ecf4a4ee=false;
z17b8db7bdc=false;
z43ae26ecf5=false;
zfe7f8c5ad4=true;
z4251219462.fireEvent("\x73\x74\x65\x70\x73\x5f\x63\x6f\x6e\x74\x72\x6f\x6c\x6c\x65\x72\x5f\x73\x65\x6c\x65\x63\x74\x69\x6f\x6e\x5f\x63\x68\x61\x6e\x67\x65",z9076187fcf,null);
z76d023c348.z8e1e6f73a2();
}
}
z76d023c348.za07440a01e=function(z1e0f443f0a){
z4251219462.zf01a8c5962();
if(z9076187fcf==null||z1e0f443f0a!=z9076187fcf.z1e0f443f0a||z5e7c36d587){
if(zc0f11f90b8!=null&&z35b37d4bd6!=null){
var z8e4b2bc949=z4251219462.z58389bd084.context3D.z33ac5f5e43(zc0f11f90b8[z35b37d4bd6]);
if(z8e4b2bc949&&z8e4b2bc949!=null)z8e4b2bc949.stop();
}


z9076187fcf=z76d023c348.z81a0028032[parseFloat(z1e0f443f0a)];
z980701e34d=z76d023c348.z81a0028032.length-(0x89c+6720-0x22db);
zf5ecf4a4ee=false;
z17b8db7bdc=false;
z43ae26ecf5=true;
z4251219462.fireEvent("\x73\x74\x65\x70\x73\x5f\x63\x6f\x6e\x74\x72\x6f\x6c\x6c\x65\x72\x5f\x73\x65\x6c\x65\x63\x74\x69\x6f\x6e\x5f\x63\x68\x61\x6e\x67\x65",z9076187fcf,null);
if(z5e7c36d587&&z1e0f443f0a=="\x30"){
z5e7c36d587=false;
zfe7f8c5ad4=false;
z4932c2ee76();
}
else{
z5e7c36d587=false;
zfe7f8c5ad4=true;
z76d023c348.z8e1e6f73a2();
}
}
else{
if(!zfe7f8c5ad4&&!z5ac516c739){
z76d023c348.za1d9deeb96();
}
}
}
this.z37b5e6895b={};
function z086fb46c85(z56f0268e17,data){
if(!(z56f0268e17 in z76d023c348.z37b5e6895b))z76d023c348.z37b5e6895b[z56f0268e17]=data;
}
function zf2495bd52e(){
var za8e7b096f3=/([\s\S]*)(:?##global_metadata##|##step_metadata##)([\s\S]*)/;
var z6eb3c8f056=/^\s*|\s*$/g;var zf14f0b585f=/([^\n\r]*)([\s\S]*)/;var z21c789ee8e=/([\s\S]*)(:?\r\n\r\n)([\s\S]*)/;for(var z27242ed8df=(0xf54+2587-0x196f);z27242ed8df<z76d023c348.z81a0028032.length;z27242ed8df++){
var zbd05723d83=z76d023c348.z81a0028032[z27242ed8df];
var z3fc824fdee=zbd05723d83.description;
var r=z3fc824fdee.match(za8e7b096f3);
zbd05723d83.zd3d345e209={};
while(r){
z3fc824fdee=r[(0x16e5+2563-0x20e7)].replace(z6eb3c8f056,"");
var type=r[(0x16d0+2097-0x1eff)].replace(z6eb3c8f056,"");
var z0aa6a47fd3=r[(0xe6c+4147-0x1e9c)].replace(z6eb3c8f056,"");
if(z0aa6a47fd3.length){
var z3a3b2e748d=new Array();

var z1233c1a1e8=z0aa6a47fd3.match(z21c789ee8e);

while(z1233c1a1e8){
z0aa6a47fd3=z1233c1a1e8[(0xa1+139-0x12b)];
z3a3b2e748d.push(z1233c1a1e8[(0x18fc+2958-0x2487)]);
z1233c1a1e8=z0aa6a47fd3.match(z21c789ee8e);
}

if(z0aa6a47fd3.length)z3a3b2e748d.push(z0aa6a47fd3);

for(var z081618454f=(z3a3b2e748d.length-(0xbc2+2799-0x16b0));z081618454f>-(0x715+6747-0x216f);z081618454f--){
var b=z3a3b2e748d[z081618454f].replace(z6eb3c8f056,"");
if(b.length){
var z89ea70433d=b.match(zf14f0b585f);

if(z89ea70433d){
if(type!="\x23\x23\x67\x6c\x6f\x62\x61\x6c\x5f\x6d\x65\x74\x61\x64\x61\x74\x61\x23\x23")zbd05723d83.zd3d345e209[z89ea70433d[(0x2e1+5547-0x188b)].replace(z6eb3c8f056,"")]=z89ea70433d[(0x1ac+9192-0x2592)].replace(z6eb3c8f056,"");
else z086fb46c85(z89ea70433d[(0xf0+9359-0x257e)].replace(z6eb3c8f056,""),z89ea70433d[(0x1524+3230-0x21c0)].replace(z6eb3c8f056,""));
}
else if(b.length)if(type!="\x23\x23\x67\x6c\x6f\x62\x61\x6c\x5f\x6d\x65\x74\x61\x64\x61\x74\x61\x23\x23")zbd05723d83.zd3d345e209[b.replace(z6eb3c8f056,"")]="";
else z086fb46c85(b.replace(z6eb3c8f056,""),"");
}
}
}
r=z3fc824fdee.match(za8e7b096f3);
}
zbd05723d83.description=z3fc824fdee;
}
}

if(!z4251219462.zf3f66b47b6){
if(typeof z4251219462.z90c0df985c=="\x75\x6e\x64\x65\x66\x69\x6e\x65\x64"){
z4251219462.z90c0df985c=z76d023c348;
if(z4251219462.g_views=="\x75\x6e\x64\x65\x66\x69\x6e\x65\x64"||z4251219462.g_views.length==(0x134a+4193-0x23ab))console.println("\x53\x74\x65\x70\x73\x20\x4d\x61\x6e\x61\x67\x65\x72\x20\x3a\x20\x4e\x6f\x20\x53\x74\x65\x70\x73\x20\x49\x6e\x66\x6f\x72\x6d\x61\x74\x69\x6f\x6e\x20\x66\x6f\x75\x6e\x64");
else{
z4251219462.LoadThermometer.duration=z4251219462.g_views.length;
z4251219462.LoadThermometer.begin();

z4251219462.LoadThermometer.text="\x6c\x6f\x61\x64\x69\x6e\x67\x20\x73\x74\x65\x70\x73\x20\x6d\x61\x6e\x61\x67\x65\x72";

for(var zce99d8264d=(0x316+8350-0x23b4);zce99d8264d<z4251219462.g_views.length;++zce99d8264d){
z4251219462.LoadThermometer.value=zce99d8264d;
z4251219462.g_views[zce99d8264d].z45ad670ec1=new z4251219462.z973972d31f();
for(var z812c65ff2f=(0x1d2d+114-0x1d9f);z812c65ff2f<z4251219462.g_views[zce99d8264d].object_names.length;++z812c65ff2f){
var z6e22729be1=z4251219462.zc07c11333e(z4251219462.g_views[zce99d8264d].object_names[z812c65ff2f]);
if(z6e22729be1!=false&&z6e22729be1!=null)z4251219462.g_views[zce99d8264d].z45ad670ec1.push(z6e22729be1.name,z6e22729be1);
}
}
z4251219462.z4251219462.LoadThermometer.end();

for(var zce99d8264d=(0x18d6+326-0x1a1c);zce99d8264d<z4251219462.g_ranges.length;zce99d8264d++){
var z10b6f72eb3=z4251219462.g_ranges[zce99d8264d];
z4251219462.z276824ebfc.push(z10b6f72eb3.name);
}

var scene=z4251219462.z58389bd084.context3D.scene;

if(scene.animations.count==(0x5a6+4036-0x1569))z4251219462.zb9ed5ae654["\x44\x65\x66\x61\x75\x6c\x74"]=(0x1483+3412-0x21d7);
else{
for(var zce99d8264d=(0x1205+4568-0x23dd);zce99d8264d<scene.animations.count;zce99d8264d++){
var z8e4b2bc949=scene.animations.getByIndex(zce99d8264d);
z4251219462.zb9ed5ae654[z8e4b2bc949.name]=zce99d8264d;
}
}

z76d023c348.z81a0028032=new Array();
var zc15f67d209=(0x11f6+4483-0x2379);
for(var zce99d8264d=(0x1817+1324-0x1d43);zce99d8264d<z4251219462.g_views.length;++zce99d8264d){
if(z4251219462.g_views[zce99d8264d].is_step){
var zbd05723d83=z4251219462.g_views[zce99d8264d];
zbd05723d83.z1e0f443f0a=zc15f67d209;

zbd05723d83.z0582def689=new Array();
for(var z26dbd73a5e=(0x135d+4562-0x252f);z26dbd73a5e<zbd05723d83.step_ids.length;z26dbd73a5e++){
if(scene.animations.count==(0x75d+3229-0x13f9))zbd05723d83.z0582def689.push("\x30");
else{
var name=z4251219462.z276824ebfc[parseFloat(zbd05723d83.step_ids[z26dbd73a5e])];
zbd05723d83.z0582def689.push(z4251219462.zb9ed5ae654[name]);
}
}
z76d023c348.z81a0028032.push(zbd05723d83);
zc15f67d209++;
}
}
zf2495bd52e();
}
z9c0b99c515();

for(var zce99d8264d=(0xfcc+3595-0x1dd7);zce99d8264d<z4251219462.z58389bd084.context3D.scene.animations.count;zce99d8264d++){
var z6a86a5a54f=z4251219462.z58389bd084.context3D.scene.animations.getByIndex(zce99d8264d);
z6a86a5a54f.currentTime=z6a86a5a54f.endTime;
}
z76d023c348.z1dfd639fc5();
}
}
function z9c0b99c515(){
z4251219462.z2f6c0a82c8("\x61\x6e\x69\x6d\x61\x74\x69\x6f\x6e\x5f\x73\x65\x71\x75\x65\x6e\x63\x65\x5f\x73\x65\x74\x5f\x73\x74\x61\x72\x74",z76d023c348);
z4251219462.z2f6c0a82c8("\x61\x6e\x69\x6d\x61\x74\x69\x6f\x6e\x5f\x73\x65\x71\x75\x65\x6e\x63\x65\x5f\x73\x65\x74\x5f\x65\x6e\x64",z76d023c348);
z4251219462.z2f6c0a82c8("\x61\x6e\x69\x6d\x61\x74\x69\x6f\x6e\x5f\x73\x65\x71\x75\x65\x6e\x63\x65\x5f\x70\x6c\x61\x79\x65\x64",z76d023c348);
z4251219462.z2f6c0a82c8("\x63\x61\x6d\x65\x72\x61\x5f\x70\x6f\x73\x69\x74\x69\x6f\x6e\x65\x64",z76d023c348);
}
}
stream_013_off00023bb8.bin decompressed-pdf-stream PDF FlateDecoded stream at offset 0x23BB8 549248 bytes
SHA-256: 89e1b991265d1f6fbb8cde8b0aad297979cf2ecc58616c20bb94d5f5319d200f
font_00_cff_off00005fac.bin pdf-font-stream PDF embedded font (cff) at offset 0x5FAC 66185 bytes
SHA-256: 28345a751bc247acbf8155171a43d69e366aa8df344a8a0a8a8304436513e01c
font_01_cff_off00011420.bin pdf-font-stream PDF embedded font (cff) at offset 0x11420 64586 bytes
SHA-256: 96161e3d15cf67591ef2a1c87940c8dc0af59a94fcfab5d6bfcf4cb992a24af8
Detection
ClamAV: No threats found
Obfuscation or payload: likely
Carved artifact entropy is 7.45, consistent with packed or encrypted content.

Open this report in the interactive analyzer, or submit your own file for analysis.