Gen.Variant.Strictor.80213_33a0777aa7

by malwarelabrobot on August 17th, 2015 in Malware Descriptions.

Gen:Variant.Strictor.80213 (B) (Emsisoft), Gen:Variant.Strictor.80213 (AdAware), Trojan-PSW.Win32.MSNPassword.FD, Trojan.Win32.FlyStudio.FD, GenericEmailWorm.YR, TrojanFlyStudio.YR (Lavasoft MAS)
Behaviour: Trojan-PSW, Trojan, Worm, EmailWorm


The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Requires JavaScript enabled!

Summary
Dynamic Analysis
Static Analysis
Network Activity
Map
Strings from Dumps
Removals

MD5: 33a0777aa7a17f6fe8dff799ae2066f5
SHA1: cee4f425c5a3a28eb541a254bf4d2207d4cd0b2a
SHA256: 9f6e525808c54e752c99cd8a4b1cca25c2f00ce098712c8a3b477fe8d86de98a
SSDeep: 196608:SuUzl9uOwHL 0tB5hsPj4a WVyKPZqvZEgvqGZvYXa:6wrTt9sP1 WLKZpvnZvMa
Size: 9240576 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: MicrosoftVisualC, MicrosoftVisualCv50v60MFC, MicrosoftVisualC50, Armadillov171, UPolyXv05_v6
Company: CWSAU
Created at: 2015-05-19 17:53:28
Analyzed on: WindowsXP SP3 32-bit


Summary:

Trojan-PSW. Trojan program intended for stealing users passwords.

Payload

Behaviour Description
EmailWorm Worm can send e-mails.


Process activity

The Trojan creates the following process(es):

%original file name%.exe:816

The Trojan injects its code into the following process(es):
No processes have been created.

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process %original file name%.exe:816 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\pic\ëɪ.jpg (3 bytes)
C:\pic\M4A1-TGC.jpg (1552 bytes)
C:\pic\AK47-»Æ×ê.jpg (1552 bytes)
C:\pic\M4A1-PING.jpg (6 bytes)
C:\pic\¼ÓÌØÁÖ»ú¹Øǹ.jpg (4 bytes)
C:\pic\ÍõÕßÖ®ÐÄ.jpg (784 bytes)
C:\pic\AK47-»áÔ±.jpg (1552 bytes)
C:\pic\Ê¥µ®AWP.jpg (6 bytes)
C:\pic\M60-A.jpg (3 bytes)
C:\pic\±ÞÅÚÊÖÀ×.jpg (4 bytes)
C:\pic\¿Â¶ûÌØ˫ǹ-Red.jpg (8 bytes)
C:\pic\ÂüÍÓÂÞ.jpg (784 bytes)
C:\pic\ÓÄÁ鱦±¦ÊÖÀ×.jpg (5 bytes)
C:\pic\¸£×ÖÊÖÀ×.jpg (6 bytes)
C:\ESPI11.dll (122 bytes)
C:\pic\ÒøÔÂÆø´¸.jpg (3 bytes)
C:\pic\M4A1-ÀÇÑÀ.jpg (5 bytes)
C:\pic\´¿½ð¾üÓÃÌúÇÂ.jpg (11 bytes)
C:\pic\M4A1-Í»»÷ÊÖ.jpg (5 bytes)
C:\pic\L86-ÑÇÂíÑ·.jpg (1552 bytes)
C:\pic\G3A3-SS.jpg (784 bytes)
C:\pic\ÁÔºüÕß.jpg (784 bytes)
C:\pic\Barrett-²ÔÁú.jpg (4992 bytes)
C:\pic\ÓÀ¾ÃAK47-»ð÷è÷ë.jpg (13 bytes)
C:\pic\»ðÓ¥ÊÖÀ×.jpg (13 bytes)
C:\pic\ÓÀ¾ÃAK47-÷è÷ë.jpg (2392 bytes)
C:\pic\»Æ½ðM4A1-XÁúÎÆ.jpg (7 bytes)
C:\pic\M4A1-»ðÓ¥.jpg (784 bytes)
C:\pic\AK47-ÎÞÓ°.jpg (61102 bytes)
C:\pic\M4A1-Ë®¾§.jpg (6 bytes)
%System%\ESPI11.dll (601 bytes)
C:\pic\À×Éß¼ÓÌØÁÖ.jpg (8 bytes)
C:\pic\ÂíÀ´½£.jpg (4 bytes)
C:\pic\5ºÅ±³°ü.jpg (10 bytes)
C:\pic\°×ÀÇ.jpg (784 bytes)
C:\pic\»Æ½ð-RPK.jpg (8 bytes)
C:\pic\¼ÓÌØÁÖ-ÈÛÑÒ.jpg (4 bytes)
C:\pic\7ºÅ±³°ü.jpg (10 bytes)
C:\pic\À×±©.jpg (784 bytes)
C:\pic\¾Þ´¸ÊÖÀ×.jpg (1552 bytes)
C:\pic\FEI.jpg (1856 bytes)
C:\pic\΢ЦÊÖÁñ.jpg (6 bytes)
C:\pic\»Æ½ðëɪ.jpg (8 bytes)
C:\pic\ÊÖÀ×-»Æ×ê.jpg (784 bytes)
C:\pic\M4A1-°×Òø.jpg (12 bytes)
C:\pic\AUG-A.jpg (7 bytes)
C:\pic\¾¯¹÷.jpg (3 bytes)
C:\pic\M4A1-red.jpg (7 bytes)
C:\pic\M4A1-ÏèÁú.jpg (8 bytes)
C:\pic\6ºÅ±³°ü.jpg (9 bytes)
C:\pic\M4A1-ºÚ»¢.jpg (2 bytes)
C:\pic\QTÊÖÀ×.jpg (6 bytes)
C:\pic\M4A1-»¢Æ¤.jpg (7 bytes)
C:\pic\ÁéºüÕß.jpg (784 bytes)
C:\pic\M4A1-Ó£.jpg (5 bytes)
C:\pic\M4A1-×ÏË®¾§.jpg (1552 bytes)
C:\pic\ÁúÁÛ.jpg (3 bytes)
C:\pic\M4A1-X.jpg (784 bytes)
C:\pic\½ðÅ£×ù.jpg (4992 bytes)
C:\pic\ÓÀ¾ÃMA41-õ¹å¾«Áé.jpg (13 bytes)
C:\pic\M4A1-QT.jpg (8 bytes)
C:\pic\ÓÀ¾ÃM4A1-À×Éñ.jpg (1856 bytes)
C:\pic\ÜÔÀòAK47.jpg (7 bytes)
C:\pic\AWM-Red.jpg (6 bytes)
C:\pic\min.jpg (1552 bytes)
C:\pic\Ê¥µ®AK47.jpg (7 bytes)
C:\pic\ÌÀÄ·Ñ·-Ê¥µ®.jpg (16 bytes)
C:\pic\À×ÉßAWM.jpg (6 bytes)
C:\pic\»ÃÓ°.jpg (1552 bytes)
C:\pic\ҹõ¹å.jpg (784 bytes)
C:\pic\ÓÀ¾ÃRPK-ÅÌÁú.jpg (1856 bytes)
C:\pic.zip (22433 bytes)
C:\pic\¼²±¬ÊÖÀ×.jpg (7 bytes)
C:\pic\²¨Èû¶¬.jpg (784 bytes)
C:\pic\M4A1-Ê¥µ®.jpg (11 bytes)
C:\pic\΢ЦÊÖÀ×.jpg (6 bytes)
C:\pic\»Æ½ð×óÂÖ.jpg (8 bytes)
C:\pic\õ¹åÊÖÀ×.jpg (5 bytes)
C:\pic\·ÛÉ«AWP.jpg (6 bytes)
C:\pic\Ml2l6-°µ½ð.jpg (784 bytes)
C:\pic\ÊÖ¸«-ÏèÁú.jpg (9 bytes)
C:\pic\¸«×Ó.jpg (4 bytes)
C:\pic\M4A1-ÇáÆï±ø.jpg (5 bytes)
C:\pic\KAC-Ò«Áú.jpg (1856 bytes)
C:\pic\ÜÔÀòXM8.jpg (8 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OXEJS1AZ\login[1].htm (97 bytes)
C:\pic\»Æ½ðÊÖ¸«.jpg (8 bytes)
C:\pic\ÊÖ¸«-»áÔ±.jpg (1552 bytes)
C:\pic\Barrett-»ÙÃð.jpg (15 bytes)
C:\pic\¼ÓÌØÁÖ-ÀÇÑÀ.jpg (5 bytes)
C:\pic\ÓÀ¾ÃM4A1-ºÚÁú.jpg (13 bytes)
C:\pic\JIA.jpg (1552 bytes)
C:\pic\º£±ªÍ»»÷¶Ó.jpg (784 bytes)
C:\pic\ÌúÇÂ-Red.jpg (8 bytes)
C:\pic\GLL-°µ½ð.jpg (784 bytes)
C:\pic\Thumbs.db (13368 bytes)
C:\pic\¸ß±¬ÊÖÀ×-SS.jpg (784 bytes)
C:\pic\M4A1-ɳĮ·ç±©.jpg (5 bytes)
C:\pic\M4A1-S.jpg (5 bytes)
C:\pic\´¿½ðM4A1.jpg (1552 bytes)
C:\pic\MG3-´¿½ð.jpg (784 bytes)
C:\pic\ÓÀ¾ÃÌÀÄ·Ñ·-ÁÒÁú.jpg (1856 bytes)
C:\pic\PSG-1.jpg (3 bytes)
C:\pic\ÓÀ¾ÃAWM-ÌìÁú.jpg (14 bytes)
C:\pic\»Æ½ðÌÀÄ·Ñ·.jpg (8 bytes)
C:\pic\SUZY.jpg (1856 bytes)
C:\pic\µ¶·æ.jpg (784 bytes)
%WinDir%\empty.exe (9 bytes)
C:\pic\°åש.jpg (784 bytes)
C:\pic\Ê¥µ®½ÚÊÖÀ×.jpg (13 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\S1IFODA7\login[1].htm (601 bytes)
C:\pic\ŸŸìF—.jpg (3 bytes)
C:\pic\¾üÓÃÊÖ¸«-Ò«Áú.jpg (15 bytes)
C:\pic\Ìú´¸.jpg (784 bytes)
C:\pic\QBZ95-A.jpg (5 bytes)
C:\pic\Äá²´¶û-Õ½Áú.jpg (6 bytes)
C:\pic\M4A1-ÇàÍ­.jpg (8 bytes)
C:\pic\M4A1-·ÛÉ«.jpg (6 bytes)
C:\pic\´¿½ðAK-47.jpg (13 bytes)
C:\pic\»Æ½ðγ¹Ë¹ÌØ.jpg (7 bytes)
C:\pic\ºÚÓ¥.jpg (784 bytes)
C:\pic\M4A1-ÒþÏ®.jpg (5 bytes)
C:\pic\XM8-Ê¥µ®.jpg (784 bytes)
C:\pic\ɳӥ-ÐÞÂÞ.jpg (12 bytes)
C:\pic\»Æ½ðAWM.jpg (8 bytes)
C:\pic\»Æ½ðM4A1.jpg (9 bytes)
C:\pic\Barrett-Ò«Áú.jpg (2392 bytes)
C:\pic\ÓÀ¾ÃM4A1-ºÚÆïÊ¿.jpg (1856 bytes)
C:\pic\M4A1-QQ»áÔ±.jpg (7 bytes)
C:\pic\AWM-Ê¥µ®.jpg (6 bytes)
C:\pic\°®Ö®À×.jpg (6 bytes)
C:\pic\4ºÅ±³°ü.jpg (10 bytes)
C:\pic\·É»¢¶Ó.jpg (784 bytes)
C:\pic\Barrett-ÏèÁú.jpg (7 bytes)
C:\pic\ÉóÅÐÕß.jpg (784 bytes)
C:\pic\À¼.jpg (784 bytes)
C:\pic\MG3-ÏèÁú.jpg (7 bytes)
C:\pic\»Æ½ðÎÚ×È.jpg (9 bytes)
C:\pic\ÇéÈËÊÖÀ×.jpg (6 bytes)
C:\pic\ÊÖ¸«-SS.jpg (784 bytes)
C:\pic\M4A1-T.jpg (7 bytes)
C:\pic\M4A1-XS-Ò«Áú.jpg (1856 bytes)
C:\pic\»¢Æ¤³å·æǹ.jpg (8 bytes)
C:\pic\°µÒ¹.jpg (6584 bytes)
C:\pic\Å˶àÀ­.jpg (784 bytes)
C:\pic\M4A1-SS-ÜÔÀò.jpg (784 bytes)
C:\pic\ÓÀ¾ÃÍÀÁúÄá²´¶û.jpg (1856 bytes)

The Trojan deletes the following file(s):

C:\ESPI11.dll (0 bytes)
%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OXEJS1AZ\login[1].htm (0 bytes)

Registry activity

The process %original file name%.exe:816 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Directory" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4]
"CacheLimit" = "65452"
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "3C 00 00 00 1A 00 00 00 01 00 00 00 00 00 00 00"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"AppData" = "%Documents and Settings%\%current user%\Application Data"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000003]
"PackedCatalogItem" = "43 3A 5C 57 49 4E 44 4F 57 53 5C 73 79 73 74 65"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000005]
"PackedCatalogItem" = "43 3A 5C 57 49 4E 44 4F 57 53 5C 73 79 73 74 65"

[HKLM\System\CurrentControlSet\Hardware Profiles\0001\Software\Microsoft\windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Personal" = "%Documents and Settings%\%current user%\My Documents"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd73-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\System\CurrentControlSet\Services\WinSock2\ESPI11]
"1003" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cookies" = "%Documents and Settings%\%current user%\Cookies"

[HKLM\System\CurrentControlSet\Services\WinSock2\ESPI11]
"1001" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache2"

[HKLM\System\CurrentControlSet\Services\WinSock2\ESPI11]
"1004" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"
"1005" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd75-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000004]
"PackedCatalogItem" = "43 3A 5C 57 49 4E 44 4F 57 53 5C 73 79 73 74 65"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Desktop" = "%Documents and Settings%\All Users\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Cache" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files"

[HKLM\System\CurrentControlSet\Services\WinSock2\ESPI11]
"1002" = "25 53 79 73 74 65 6D 52 6F 6F 74 25 5C 73 79 73"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common Documents" = "%Documents and Settings%\All Users\Documents"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CacheLimit" = "65452"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2]
"CacheLimit" = "65452"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000001]
"PackedCatalogItem" = "43 3A 5C 57 49 4E 44 4F 57 53 5C 73 79 73 74 65"

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "B5 EC 76 2F 4B 5B A7 69 B0 01 F2 8C DD 47 2D 86"

[HKLM\System\CurrentControlSet\Services\WinSock2\ESPI11]
"FileName" = "%System%\ESPI11.dll"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Desktop" = "%Documents and Settings%\%current user%\Desktop"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"MigrateProxy" = "1"

[HKLM\System\CurrentControlSet\Services\WinSock2\Parameters\Protocol_Catalog9\Catalog_Entries\000000000002]
"PackedCatalogItem" = "43 3A 5C 57 49 4E 44 4F 57 53 5C 73 79 73 74 65"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{c155cd72-744b-11e2-8294-806d6172696f}]
"BaseClass" = "Drive"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{b98117e8-75ca-11e2-81b2-000c293708fb}]
"BaseClass" = "Drive"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3]
"CachePath" = "%Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\Cache3"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths]
"Paths" = "4"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"History" = "%Documents and Settings%\%current user%\Local Settings\History"

The Trojan modifies IE settings for security zones to map all local web-nodes with no dots which do not refer to any zone to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "1"

The Trojan modifies IE settings for security zones to map all web-nodes that bypassing the proxy to the Intranet Zone:

"ProxyBypass" = "1"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan modifies IE settings for security zones to map all urls to the Intranet Zone:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName" = "1"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

Dropped PE files

MD5 File path
b4c2caaa15d4e505ad2858ab15eafb58 c:\WINDOWS\system32\ESPI11.dll

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

Company Name: CF????
Product Name: CF????
Product Version: 1.0.0.0
Legal Copyright: CF????
Legal Trademarks:
Original Filename:
Internal Name:
File Version: 1.0.0.0
File Description: CF????
Comments: CF????
Language: Language Neutral

PE Sections

Name Virtual Address Virtual Size Raw Size Entropy Section MD5
.text 4096 1992571 1994752 4.3504 01448de15923bece428e7aefc95877a1
.rdata 1998848 6718228 6721536 5.12399 c9ecf904d2b9f22714fd53b5f907dcd1
.data 8720384 385130 106496 4.04264 7fc40713f15533124d3de25f3e06487e
.rsrc 9109504 411372 413696 3.44551 7e138ff2ec15e09cf2e1aaf112451e63

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

URLs

URL IP
hxxp://api.iukuai.com/login 118.193.171.48
hxxp://api.iukuai.com/login.html 118.193.171.48


IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

GET /login.html HTTP/1.1
Referer: hXXp://api.iukuai.com/login.html
Accept: */*
Accept-Language: zh-cn
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; 125LA; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022)
Host: api.iukuai.com
Cache-Control: no-cache


HTTP/1.1 200 OK
Date: Sun, 16 Aug 2015 01:25:57 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-Powered-By: PHP/5.3.19
Set-Cookie: PHPSESSID=c97e87egc8ggu77oqnrfmi6913; path=/
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Content-Type:text/html; charset=utf-8
Cache-control: private
Content-Length: 6715
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN" "htt
p://VVV.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">..<html xm
lns="hXXp://VVV.w3.org/1999/xhtml">..<head>..<meta http-eq
uiv="Content-Type" content="text/html; charset=utf-8" />..<title
>...............</title>..<link href="/Public/css/common.c
ss" rel="stylesheet" type="text/css" />..<link  type="text/css" 
rel="stylesheet" href="/Public/js/formvalidator35/style/modivalidator.
css" ></link>..<script src="/Public/js/jquery-1.4.2.min.js
" type="text/javascript"></script>..<script src="/Public/j
s/formvalidator35/formValidator.js" type="text/javascript"></scr
ipt>..<script src="/Public/js/formvalidator35/formValidatorRegex
.js" type="text/javascript" charset="UTF-8"></script>..<sc
ript type="text/javascript"> ..$(document).ready(function(){..     
                        ...$(".username,.verify").focus(function(){...
....$(this).css({ background:"#FEFBBD" });$(this).parent().parent().pa
rent().css({ border:"1px solid  #CEDEC3 ",background:"#F4FCFE" }) })..
                    .blur(function(){.......$(this).css({ background:"
#F2F8F5" });$(this).parent().parent().parent().css({ border:"1px solid
  #fff ",background:"#fff" })...})........$.formValidator.initConfig({
formid:"form1",onerror:function(msg){alert(msg)},onsuccess:function(){
}});.. ..$.formValidator.getInitConfig("1").wideword = false;....$("#u
sername").formValidator({onshow:"..................,3-20...",onfoc
<<< skipped >>>

POST /login HTTP/1.1


Referer: hXXp://api.iukuai.com/login
Accept: */*
Accept-Language: zh-cn
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; 125LA; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022)
Host: api.iukuai.com
Content-Length: 73
Cache-Control: no-cache
Cookie: PHPSESSID=c97e87egc8ggu77oqnrfmi6913

username=hongniu521&password=112255a&pay=55414a23f9efe31734f08cad8294c476
HTTP/1.1 200 OK
Date: Sun, 16 Aug 2015 01:25:58 GMT
Server: Microsoft-IIS/6.0
X-Powered-By: ASP.NET
X-Powered-By: PHP/5.3.19
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-type: text/html;charset=utf-8
Content-Length: 97
{"success":1,"info":"\u767b\u5f55\u6210\u529f\uff01","goto":"http:\/\/
api.iukuai.com\/user.html"}HTTP/1.1 200 OK..Date: Sun, 16 Aug 2015 01:
25:58 GMT..Server: Microsoft-IIS/6.0..X-Powered-By: ASP.NET..X-Powered
-By: PHP/5.3.19..Expires: Thu, 19 Nov 1981 08:52:00 GMT..Cache-Control
: no-store, no-cache, must-revalidate, post-check=0, pre-check=0..Prag
ma: no-cache..Content-type: text/html;charset=utf-8..C..

The Trojan connects to the servers at the folowing location(s):

%original file name%.exe_816:

.text
`.rdata
@.data
.rsrc
t$(SSh
~%UVW
u$SShe
user32.dll
gdi32.dll
User32.dll
kernel32.dll
GDI32.DLL
msimg32.dll
comctl32.dll
COMCTL32.DLL
wininet.dll
advapi32.dll
gdiplus.dll
version.dll
ws2_32.dll
GdiPlus.dll
Gdiplus.dll
ole32.dll
shlwapi.dll
SetWindowsHookExA
UnhookWindowsHookEx
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
GdiplusShutdown
GdipSetStringFormatHotkeyPrefix
GdipGetStringFormatHotkeyPrefix
GdipSetPenLineJoin
GdipGetPenLineJoin
o@{B96B3CAF-0728-11D3-9D7B-0000F81EF32E}
crossfire.exe
 381086333
127.0.0.1
VVV.cf10999.com/spjc.html
hXXp://api.iukuai.com/user/order.html
%Program Files%\Tencent\QQ\zccg.txt
Mozilla/4.0 (compatible; MSIE 9.0; Windows NT 6.1; 125LA; .NET CLR 2.0.50727; .NET CLR 3.0.04506.648; .NET CLR 3.5.21022)
http=
https
HTTP/1.1
Content-Type: application/x-www-form-urlencoded
hXXps://
hXXp://
.html
hXXp://api.iukuai.com/user/excha/
&cardPass=
hXXp://api.iukuai.com/excha/
hXXp://id.qq.com/
id.qq.com
hXXp://VVV.cf10999.com/tg/userad.asp?username=
hXXp://VVV.cf10999.com/tg/useradlink.asp?username=
&src_uin=VVV.feifeiboke.com&fid=blog&spec=100
hXXp://q.qlogo.cn/headimg_dl?bs=qq&dst_uin=
hXXp://VVV.waqiang.com/index.php/url/shorten
C:\pic\
(,"(-%*-&)-%).!'.
!!#%%#%&) ,!#$
! -.&()#%% --000'''((($$$&&&%%%
&3$&&--!%%
!023$&&*,,)  
 - ,.!-1".4!-3  3
)3&,7$*5
3,6=%*(% &
%'(')*'))
   '''))),,,&&&---222
79:#%&689
>@@#%%---%%%,,,)))
8V&Cb.Mn.Su,Y
!#$*,-,..:<<133%''(((***(((,,,***
?\ Kl%Uy0a
 /  / & "& 
   (')78<
!"&!"&"#'!"&
&&&(((***"""(((***&&&---   !!!
777)))&%'89=
&' *)-.-/"!#---   &%'
578%$& *,$#%%%33FFF422)'&&$#0.-%&$* )/0.&'%'*()  & *&* (,-%*-%(,),0*) ,**-  -  -  ***,***** ,*),*),*),*),*),*',*),*, '/,'/,(/,(/,(/ */* -  ,) *) *)-*)-*(.*(.*(.*(. *.) , *,) ,*) )))((((((((( )( )(,*),*),*).*),*) )()*()))()'()'()'()'()'&'%%&$%&$&'#()%* '* '(,&15*")"
! '39 ,0
!$#2&%', -&%'(')
CBF*) '&(&&&111"$$-//'))(**'))')))  &* *,-015)*. *. *. *, *,) ,*) (* ) ,) ,) ,' ,' ,' ,' ,)  - */,(- *- *- *- *-     ) ,) ,'*.'*.'*/'*/&*/'*/ *. *.-). *.,(- (**'))&( (*-().)*.)*/* /* 0* /*,*)-()-((.()-*)-*)-,) ,) -  ,** )) )(.*)/ *.*))*(
$#!.6#-7
$" ,(( )
!(')0/1.-/(')"$%
%'( -.$&'
 *.)(,, -(')'&(
$ !%*((( .,",,"**))#('#
"%(-0,')1%%1&
4,% %$ (()*()*& ('"- 
,- *- *- 
$', ,0#$(
*-2  1&).
( 0$%)"#'
015%%   1--3
HIM'(,) ,, -      ,,,,-  ,*./-453/0.)*(,- ,- ***...%'(%'(HJKTVWYZ^^_cbcgabfYZ^ABF9:>\]a?@D459]^b%&*QSTIKL467Y[\245*,-')* -.'(,-.2/04./3,-1%&*$%)./3-/0*,-&()%'((*  -.*,-(* $#%('))(*('))(**) )))&&&((())))))))))))*********'))'))'))'))'))'))'))')))))))))))(((((((((((('''))))))))))))))))))))))))533644422200644=;;><<:88755977;99<:::88866644533302524635302302524746746857635524524635635524213324245245134134134-/0(* 134-/0134578134,./-/0213324413413524746968968857<9;:79968:79:79857746866644643532532643754754754:87754976532310532310643444333222333333222222444444333444333000333444111666333///111---,,,666111111222444444333222222111)))//////---,,,,,,///,,,222777777777;;;999666;;;999999999888666666888:::<<<999000111777999888///:::///444555222666333222222777777444111---...555444///000999;;;555333666222666999888777888999999777777777888999888675564:;9<=;;<:675/20/20364897421643643976?=<=;:421/-,.,,)'',**311755;99=;;;99564120,- '(&'(&)*(./-120666888999999999;;;;;;999;;;===???>>>>>>===:::666444333444555555444555777222444444333333333333111111111000000000000111222111000//////000000000000000//////...............------------------,,,,,,///............---,,,,,,,,,,,,   ******,,,---,,,...------///...      ---,,,   ,,,---...------...---,,,,,,,,,,,,,,,   ***)))***   ***)))((()))   ***   ***))))))******)))''''''((()))))))))(((((()))***      ***   ,,,---0.-2/ 2/ 30,3/.40/1/.1/.1/.20/3101/[email protected]%#"###
$$*  1,,2"!*! )! )
"&"%)$' "%)()-* /) ,&()&()) ,) ,')*(* (* (**'))'))'))'))'))(**(**(**(**(**(**(**(**)))))))))))))))(((((((((((((((((((((((((((((((((0..3111//.,,422?==A??;99;99<::=;;><<=;;<::;99:88857;8:;8:968857:79;8::79A>@:793021.0413857968546245356245134245356134,./467.01467;=>467/12134134324413413524746968<9;=:<968968;8:<9;:79857857:79533:87;98643421865976643976643865421421754532865444333444666666444444555888777888666333555666222333666888>>>666000888000666666555444444444666888666555333222666;;;666///---333111000888:::888;;;666888999888444000///000666...(((888<<<...444999777111>>>:::---000222555888;;;::::::===:::333000444666666666:::===999222666666444333777;;;;;;888===:::888999;;;<<<:::8977777866663645777:87:8586;<:@>==;:9765321/.., 1/.0..200977:8853342286677745345345323101/-.,* )()'%%%'''(((&&&&&&'''&&&$$$))))))((('''   222666777???===;;;:::666222222444222333333333444555555333333222111000000111111222222111000000111222222222//////...------...000111...//////000000///...---000///...---.........---***,,,   ((((((,,,...,,,---,,,,,,...,,,))))))***...------......---,,,---///...---,,,------------***,,,,,,   ))))))   ---(((***   ******   ***((('''((()))******)))(((''')))***            ---./-0, 1.*30,30,40/40/3104215321/.20/0.-1/.xvu976'%$###
**0$$***0
015348006''-117''-;<@
75;-,0)(*, -,-1!"&
#'(,-3566:;79:578578688;=>8::79:8::6893554668::35579979:356245578689467466688999888444333666888888444555888999:::888333333///   )))%%%!!!###'''---   000......000...000555777666222000000000///222111111000000000000000111///---,,,   ,,,...///000111111000...---------,,,------,,,---......,,,000---,,,...000000000///---,,,,,,------   ***   ***   ---...............000111///---   ,,,,,,***,,,---......---,,,      ,,,,,,,,,   ***   ,,,---,,,   *********   ,,,---,,,---......---------0.-40/50-61.61.72/830843843621732200311.,,USSjhhCAA///$$$"""
&%), -, -, -***(')(') *,, -, -*) &%' *,/.0(' (' '&*
ikl356/12133JLL577244prrWYY577'))///"""---,,,))),,,***'''((((((''''''''''''''''''65765776898:<;=@?ADCEFEGONPVUWVUWNMOHGIHGIHGIEDFJIKKJLJIKJIKMLNNMOONPSRTPOQMLNMLNLKMIHJJIKLKMKJLIKLJLMJLMIKLIKLKMNKMNIKLKMNGIJDFGEGHGIJIKLHJKGIJFEGBACCBDKJLRQSSRTPOQMLNIHJIHJKJLNMOQPRQPRONPLKMLLLOOOOOOMMMMMMNNNNNNLLLIIIOOOMMMFFFEEEFFFHHHJJJJJJIIIJJJKKKLLLKKKJJJJJJJJJIIIJJJKKKKKKKKKLLLNNNMMMOOOPPPOOOMMMLLLLLLMMMKKKNNNOOONNNMMMMMMMMMLLLMMMLLLLLLLLLLLLMMMLLLLLLNNNPPPLLLEEEDDDMMMQQQOOOKKKEEEBBBFFFLLLMMMIIIDDDDDDJJJOOOSSSSSSLLLJJJOOOVVVQQQQQQEEEPPPIIIPPPQQQOOOVVVNNN???;;;:::777777555444222666666000111:::???<<<888777:::;;;<<<>=?>?CDGLGJOACK46>&'1#$.*,6ACN@BM>@K8<G5:C16?.3<-2;*-5*.3,/4,/4,/4/2747<8;?01503734834834856:8:;:<=13446756:467467578578356578466666777:::;;;:::888<<<:::;;;:::666555777555333444555555444333000...222111444///---///---///,,,...//////000444666777333333333222222222333333111000...---------//////,,,...//////.........///   ,,,,,,---...//////...000.........///000/////////,,,      ******,,,...---,,,,,,,,,---...///000///000///---,,,---...------.........---,,,,,,,,,------,,,         ,,,---------,,,,,,,,,,,,---...,,,------.........///20/41-61.61.72/830830843843843:65200422200FDDnllQOO111$$$###"""
pqumopwyz\^_"$%8:;vxxHJJ"$$nppceeXZZrttKKK%%%,,,))))))   )))&&&''''''&&&&&&&&&''''''(((>@A=?@<>?=?@@BCDFGEGHFHIEGHJLMKMNFHICEFFHIKMNMOPHJKLNOMOPMOPOQRMOPKMNMOPLNOKMNLNOKMNGIJHJKLNOKMNKMNLNOLNOKMNKMNLNOLNOKMNGIJHJKHJKGIJEGHFHIHJKJLMDFGDFGCEFEGHKMNPRSLNOEGHLNOLNOLNONPQPRSOQRKMNGIJNPQNPQMOPLNOLNOLNOKMNJLMIKLLNOHJKCEFEGHHJKHJKIKLIIIIIIIIIIIIKKKKKKJJJHHHLLLKKKKKKKKKKKKKKKMMMOOOMMMLLLLLLMMMNNNOOOOOONNNJJJMMMOOONNNNNNNNNMMMLLLOOOOOONNNNNNOOOOOOOOONNNKKKOOOMMMGGGHHHPPPRRROOOKKKLLLLLLKKKJJJKKKMMMMMM<<<999888DDDRRRTTTOOONNNNNNPPPOOOIIIIIIDDDDDDHHHGGGKKKCCC999;;;===888444111111222666666000111;;;555444777999777777<<<?AB@CHHKSDGO24>&(2')412@:=KDGVCFUADS>CR>DQ?ERAGTBHU@CQ;?J68C24?/1< -7&(2!#-) 3-08/27*-2),1,/4-05),1038.15.1636:78<56:348245134023133355888999897675<<<:::::::::777777777555111333111,,,///777:::666444333666000///444444777777666333000...///...,,,333333333333444444555555333222111000///.........***   ---...------...///---------............///---///000///...---------...,,,      ,,,,,,...000...------------...//////   ,,,,,,   ***,,,......//////...---,,,,,,------------------,,,         ,,,,,,------------------,,,---.../////////00031072/93.72/72/8308307327326219541//422422<::pnn\ZZ777&&&###""" &&&///111000...---///000///---,,,---000111000000111000000000000000111000///000000////////////000000)))***---000000//////000000////////////000///.........//////////////////102/.0, -.-/, -1020/1*) "!#! "! "
__e((.PPVyy
 -.gijdfg
!/.1?-0>04?/3>$(3)-8 /:#'2#'2!%0
^ae%(,( /-04jno}
xz{.01)(*)(*%$&, -RQS0/1"!#.-/-,.)(**) (')'&(-,.*) (((((()))*********)))(((BHOCIPDJQFLSGLUGLUHMVHMVINWJOXKOZLP[LP[MQ\MQ\NS\NS\NT[NT[OU\PV]RX_RX_RX_V\cV\cV\cU[bU[bU[bV\cV\cU[bSY^QW\PWZRX]V]`\`e^cfX]`RWZLQTKPQMPTNRSORVPSWNQVQTYPSXKNSORWWZ_X[`RUZSV[SV[RUZRUZSV[UX]X[`Y\aY^aX]`W\_V[^V[^V[^V[^V[^PUXJORJORLQTHMPFKNHMPHMPHKOJLMJLMJLMJLMJLMKMNKMNLNONPQPRSPRSOQRNPQNPQNPQLOSKNRMNRNOSNOSOPTPOQPOQONPOOORPPSQQSQQSQPVRQTRQRSQUVTVWUVWUTUSRSQMNLGHF=><>?=EFDNOMTUSUVTSTRRSQYZXWXVVWUTUSTUSUVTVVVWWWXXXWWWUUUTTTTSUUTVUTVTSUVVVZZZ___```YYYPPPMMMOOOUUUUUUVVVVVVRRRKKKEEECCCBAC?>@:9;657768:9;<;=<;=;:<=<>=<><;==<>879657879CCCBAC9:>13;==IEFTEGY@AU@CX=?W@D\?C[EJ_DI^:@SCI\=DW:AT6=P;BU6=P3:M7>Q6=P4;N:AT=DW7>Q<CV>EX;BUCI\>BT38G04F(-<7;M6;J?CU;@O@DV?DS8<N27F-1C,1@/3E,/>%'2%&0$%/#%-!# "%*#& $',%&*#$(!"&#$(()- ,0  1* /-,.   , -000102//////000000,-  ,*/0.231231/0../-'''   000111,.. ---///11586031,/--0.3647:87:86979:6784675786786453333333222222102/.0.-//.0/.00002001/.8656438650.-/-,*('644311/--.,,.,,.,,1//3117868979:89:867523112023123134233301/---./-...///444000,,,---///---   ***---///111111///------------      ---.........//////000000/////////111532941=63>83=72?62A84A84A84<6193.832954200-,.UTXjlmZY[TTT///###!!!"""!!!###!!!***000111111333333111111222333333222222222333333333333333333222222111111000000000000000000000///------000111//////111111000000000111000000///000000000000000000000000///000111111000//////000...///////////////000111000000111111111000...,,,$$$***111333111...///000111000......///000///...//////////////////...,,,......---      ------,,,------,,,   ,,,,,,------,,,,,,   ,,,,,,,,,,,,   ,,,   ******,,,------------)))---...555......,,,,,,---......---,,,,,,,,,.........---------,,,,,,,,,---...------,,,---...*,,,10
=@UDG\TWlNQf58M9<Q@CX7:O>AV@CX;?W<@X<@X<AV;@U9>S8=R8>Q8>Q6<O8<O8>Q<@S;AT<?T;?R;?Q9=O=?Q@DVDFX?CU?BQ>CRDGV?DS<?N6;J8;J6;J58G03A.0;-.8)*4&'1$&.#%-&%.&&,&&,215:9=98<4350/1/,.)(* *.* /-.2/12./3 -. -.-/00/1-,....444888777897:;9:::;;;777:::555888999BBBVVVLLL>?=342/0.231675786421865865643311311200200302413413302413746849746A@BDDDEEE@@@:::666444222222111000////////////...000......///111000000222111   $$$!!!###***000643:52>83B:3B:3E<3H=5I>6G>4G>5C;4B<7:52;76<::213baceeefff222JJJ222111$$$###%%%###'''...333222111222222222333333222222222222444555555555555555444444222333555666666555555444666111...111333222222333555444222222333444444444444444444333333333333333333222222222333333222111000111333333333222222222222111000111111222222222000333555333...---111555)))***,,,///222222111///000111111222222000---   ///---,,,......---,,,---,,,,,,,,,,,,,,,,,,,,,   ////////////000000///...,,,,,,,,,,,,,,,---...///...111...222,,,000---/////////......---,,,---...//////............///000///...---......///...---./-)*('(&/0.01/,- ...,,,...,,,)))***   , --,.-,.*) '&(&%',,,222///((('''///333./-)*(,- * ))*(1200/1/.0/.0(')-,.0/1.-/&%')(*.-/ *, *,(')%$&*)  *,***))))))(((((())))))***8<A9=B9=B:>C:>C9=B9=B8<A8<A8<A9=B9=B9=B9=B8<A8<A:=E9<D9<D:=E=@H?BJ?BJ?BJ@CKADLCFNDGOEHPFIQFIQGJRHMVELUFJUDIRDHSDIRDIREJSCHQAFO@EN@EN?DM<AJ<AJ=BKADL>AI?BJJMU[^fgjrjmuhksadldgojmunqyjmu`ck\_g]`haej^bg[_dZ^cZ^cY]bVZ_SW\JNSJNSMQVLPUGKPFJOHLQFJOILTJMUJMUJMUJMUJMUKNVKNVILTLOWORZNQYMPXMPXORZRU]QW^QW^RX_RX_UX`UX`SV^RU]RV[SW\VY^VY^UX]UX]UX]VY^VY^VY^X[`Z]bY\aWZ_WZ_Y\aVY^WZ_Z]b]`e^af]`e^af_bg_ch\`eY]bZ^c^bgaej`di_ch^bg[_d\`e`di_ch[_d]afdhmbeiacd`bcbde_abZ\][]^acd^`a[]^[]^^`a\^_SUVLNOKMNKMNLNNJLLFHHDFFGIIHJJFHHCEEFHHKMMGIILNNBDDDFFGIIGJHFIGHMLDIHDIL7;@:?HDHSGJXDGVFJ\DH[>DWAGZFL_
!  ! %&0 ! 
sssrrrjjj___SSS777,,,&&&&&&$$$"""&&&///555777777777888999999888777666999666555777999999:::;;;888999777555555666555333666444333555888999888777666666666666666666555666666777666555555666555222444333333444444333444555111444666444///***&&&%%%   111555666555333111///000------222444444444777777///)))111333222777111777///'''$$$)))///333444//////............//////222111000..................///111111000////////////000000000///...//////222000...///111222111//////000000000///.........111000//////000000000000.........//////000000////////////000///000000111333///,,,...000000......//////..................------...------,,,      (((((((((((((((((((((((())))))***   ,,,---------,,,   ))))))*********)));>F;>F;>F;>F;>F:=E:=E:=E;?D;?D;?D:>C:>C:>C:>C;?D:>C:>C:>C:>C;?D;?D;?D;?D;?D;?D;?D;?D;?D;?D;?D;?D<?C<?C<?C<?C<?D=@E>AF>AF?CH?CH?BJ?BJ?BJ?BJ?BJ@CK>CL>CL=BK=BK>CL?DMAFOBGP>CL?DMBGPCHQDIRDIRDIRDIRGISEGQCEOACM@BL@BL@BL@BLBDNCEOEGQHJTKMWLNXMOYNPZQT\SV^WZbY\dZ]e[^f]`h_bjWZbVYaVYaUX`TW_QT\QT\SV^Y\dZ]eZ]eZ]eZ]eY\dWZbVYaY\dX[cX[cY\dY\dX[cX[cX[c]`h\_gZ]eY\dX[cY\d\_g^ai\_g_bjadl`ck_bj`ckadladl_akacmdfpdfpbdnacmbemdgoehpdgofiqgjrdhmbfkdhmeinmpxnqyknvgjrehpfiqgjrfiqfiqehp_bjWZbRU]RU]QT\OSXOSXMQVLPULPUKOTIMRJNSLPULPUMQVNRWNRWNRWOSXPTYPTYLPUINQIMR@DIHLQHLQKOTEINDFPGISPSaMP^HL^LPbAGZ8>QCGY26Hgk}w{
!%"#'$&'%'((')---444555222999444000333999:::444...444555999777444;;;111GGGVVV888   333,,,"""&&&%#"1 &2(!7-#F:.TE5WG6ZH7]K:YI8ZJ=WK?XMEE=6G@=EA@866a__
___/0.rrrEEE444 ))'%%*(('''!!!$$$---888888888999999888777777999777666888999999888999888999888777777777666333222666666222///111666999888::::::999888:::999777666999;;;;;;888666555666777555444666777666555555555666777999999999888777;;;555444888:::777666888666888888666777:::777222)))555666999555111888333555444222000//////111222111111000///---***'''&&&///000222333444333111000333111111222444444222///222222222222222222222222////////////000000000000111111222111000/////////222111000///////////////000...---///000...---....-/0/12132130/1/.0/.0/.0111///...///...------///,,,------.........-------,.-,., -, -, -, --,.-,.------............------...------------...000000,,,   ))))))         ***?AK@BL@BLACMADL@CK@CK?BJ@CK?BJ>BG=AF<@E<@E<@E<@E9?F:@G;AH;AH;AH;AH;AH<BI<BI<BI<AJ<BI<AJ<AJ=BK?AK>@J?BJ@AK?BJ?BJ>AI?BJ>DK@CK@FMBDNAFODHSAEP>BM@DODFPDFPDFPEGQGISGISEGQDGODIRCIPDJQDJQEKRFLSEKREKRFKTFKTFKTFKTEJSEJSEKREKREKRDJQCIPBHOCIPDJQDJQEHPFHPDGLBEJBEJBDLACKADLCFNEHPILTLOWKNVHJTGISJLVMOYQS]RU]QS]ORZNPZOQ[NPZMOYNQYNQYNQYNQYPS[QT\SV^TW_WZbV\c[^f[ah_bj^dk`ck^dk`ckagnfiqbho]`hTZaSV^RU]Z]e`di\^fVY^LOTY\a[]eZ\d^`h]_g\_g\_gU[bQW^V\c^dkdjqbkoekrflsfiqcfndfnego_ai\^fY[cWYaVX`VX`VX`UW_QT\ORZNQYORZRU]TW_TW_SV^PS[UX`Z]e[^fY\dVYaTW_RV[PUXOTWELOOUZGMRPV]KPYRVaKOZJP[NT_PVaNT_IOZJP[NT_LR_JO^KP_LQ`MRaKP_JN`JN`HL_IM`JNaJNaKObLPcMPeNQfPUjMRgDH`@D\DH`DIbCFbCGc@B`LPmDFd=A^LPmz~
LRe15HAEXEI\
6,÷.L</J:*TD3VF6ZK;SF8PE7OF9RI<YQD
2*#C7-J:-G7'N>.SB5M=0J<0J>2A8 I@3PG9bXF
ld]gcbXW[44:!"&&()"#!%&"!##$&'134356023467689:<=9;<8:;:<=BDEMOPUWXUWXRTUMOPHJK>@A;=>>@A79:13479:/12245356134023023-/0) ,3568:;<>?:<=9;<;=>>@A@BC6898:;134-/0,./:<=;=>79:23789=;<@78<89==>B>@A;=>9;<8:;8::9;;;==<>>:=;8;9:<=:<=57879:689.01.01356023689689467578578689:<=8:;:<=<>?;=>79:3565789;<9;<79:57857868979:79:689777999999777666666555555777666777888888777666666666555555666777777777777777777666555555666777888777555555555444777888444666666555555555666888888777666777888777555555666999555222666888222///555333///   *********,,,...777666555444333444555777555444333111000000111222---------.........000444000111222333333333222222111111111000............//////...---   ******   >BMAEPDHSEITFJUGKVGKVFJUHKYILZJM[KN\KN\KN\JM\IL[JM[ILZILZILZIMXHLWGKVEITFJUEITEJSEJSFKTHMVJOXKPYLP[IMXFJUDHSEGREGRDFPCEO@BJDGL__eoptjlmZ\\@BB,/-111///.../11/12,./*-1.15AEJPTY_elhnugnweludktcjs`fq`fqagrbhsbhsagr`fq_epipyipyipyipyipyipyhoxhoxgitikvjlwikvhlwjnylo}kn|lo}jm{hkyjm{gmzdjwagt`fscftdguehvgjxjnymq|pt
nXP?JE6:6 ;:0--')*&23/ ,(#$"!" '''000/.0)(,&' ()- ,0015689;=><>?:<=;>B8;?:=A>AE<?C58<67;9:>348<=A<=A9:><=A9:>215.-16898:;<>??AB=?@8:;@BCRTUdfg\^_CEF8:;@BC:<=578 -./04-.2./3/04,-1-.2./3,-1()- ,0 ,0,-134889=89=:;?:;?12601512678<)*.34878<89=:;?34856:9:>78<9:>78<<=A:;??@D:;?89=12678<67;56:348/04./3,-123756:67;:;?89=89=78<56:67;78<56:67;56:78<23767;:;?/04,-112667;9:>89=/04 ,0-.2348/0434878<78<3480152374594894893782670450453564679;<79:68979:89=9:>:9=87;87987998:87987987998:98::9;98:5460/1/.0324879;:<::::::::::::888777777888666555666777666555666999564564564453453453564564342342231231231231342333213213102102213213102102102/.0.-/0/10/1.-/.-/.-/...---,,,---.........---HLWIMXKOZKOZLO]MP^NQ_NQ_NQ_NQ_MP^LO]LO^KN\KN]KN\ILZILZILZHKYGJXGJXHKYHKYIMXIMXHLWGKVGKVJNYMQ\OS^PSaMP^ILZGJXGJXFIWDGUBFQAEPAEPAEPBFQEITJOXQU`UZc^bgfjonrwrv{rv{sw|sw|rv{ouzpv{tz
VZ[%)* /0(,-CGH}
~uqjd_c^[mih][[WTV]\`[Z\```[\ZYZXPQO@@@888768102)*.* /* /)*.,-1348<>?BDE<?C:=A:=A=@D@CG@CG?BF>AE67;89=>?C?@D?@DDEICDH;<@<>?@BCCEFDFGBDE:<=79:<>?=?@BDE?AB9;<=?@EGH;=>?AB9:>:;?>?C<=A9:><=A>?C:;?348015* /* /3489:>67;459015>?C<=A67;3489:>>?C45956:237()-,-134834889=:;?<=A=>B56:56:67;9:>,-1#$(459459015126=>B56:-.2126/0423745956:89=:;?=>BBCG;<@>?C=>B<=A56:12678<67;78<12656:67;@AE:;?>?C=>B67;9:><=A;<@67;2371262378;@58=36;36:148-04.1514879:35613424568879957713379:68968968979:8:;689578578689578467578689689467689688577688799799799688577688577577577688577355777555444444555666555444666444333222444555555555333555666666444222333444444444333111000000///---...000000000...,,,,,,,,,CITCITDJUCIVBHUBHUCIVCIVEKXEKXEKXEKXDJWDIXCHWCHWEHVCFTADRADRBESCFTDGUDGUEHVFIWHKYILZJM[LO]MP^OR`NR]LP[IMXHLWHKYHKYFIWEHVDGVDGVEHWJM\ORaQTcQSeQTcY\kZ`m\bo\bo\bo]cn\bmZajW]hY_j[al^doagrcitflygmzhm|ejychwchw`et[`oZ_n]bqfkzhn{kq~kq~jp}io|jp}jp{js|gpyipykr{ot}qv
]be$()-//,./.01) ,[]^oqrqstkmn:<=* / ,0015UVZstxjmrhksfhrdfpfhrhksiltfiqcfn?BG"%*$' '*.EHL`cgZ]aEHL')*')*023378IMN_cdX]`X]`W[`W[`V\aX^cY_fZ`gY_fX^cfin]`dbeibeiaejbfkY]bW[`UY^W[`W[`[_dbejcfkbejfindhmfjoaej^bgadl^ai[^f_bjZ]e`ckadlehpjnseinkot
zypkjxst{yy_^`ZY]tsuWWWNOMBCA9:8999===<;=768(* (* &' $%)'(,./356:9:>;>B:=A:=A<?C=@D;>B9<@8;?<?C;>B@AE=>B89==>B@AE:;?@AE=>B:;?>?CFGKFGK@AE>?CABFGHLABF9:>>?C:;?:;?9:>56:56:78<67;56:;<@?@D;<@126;<@=>B89=237/04348<=A67;56:78<:;?<=A-.2./3 ,0015126)*.,-145945967;459:;?67;01578<:;?CDH78<)*.BCG=>B56:78<67;67;56:<=A7:>47;47;259.15-04.15,/303758<.15,/3*-1&)-.15148),10388;@8;@36;/2769>?BG@CH=@E9<A9<A<?D?BG?BG?BG79A58=58=7:?69>47<58<9<@9=>6:;79:8:;:<<;==9;;799:<=89=78<78<9:>9:>89=78<01534867;67;78<78<45913479:68968968979:79:68957879:8:;79:578689689578245466466577577577466466355466355244244133133244244244244355244244244244244244244133/11.00/11.00 --....../////////...---,,,AGTAGTBHUBHUCHWCIVDIXEJYEJYEJYEJYDIXCHWBGVAEW@ETBETADRADRADRCFTDGUDGUDGUGJXGJXHKYILZILZKN\LO^MP^MQ\JNYGKVFJUGJXGJXFIWDGUDGVDGVEHWHKZLO^PSbQSeQSeSWiW\k[_q[`o[`o[anY_lW]hTZeW]hX^iX^iX^i[an`fschw_ds^cr_dschwchw^cr]bq_dschwgl{jo~jp}hn{gmzgmzdlyenxclueluipypu~sx
[`a -- --,./) ,(* BDEvxynpqprsGIJ* /-.2)*.GHLz{
_de --.00'))022,./ -.fhivxywyzXZ[(* /12(* ACDwx|y|
" !%-.29:>:;?9<@=@D<?C;>B<?C:=A8;?;>B7:>=@DBEIADH;>B8;?:=A=@D?BF>AE>AE?BF?BF=@D;>B;>B=@D>AE?BF?BF>AE=@D<?C<?C9<@<?C<?C9<@7:>7:>47;03758<25936:47;25936:7:>7:>:=A36:.15259:=A<?C58<,/325936:36:47;;>B:=A:=A:=A:=A8;?36:25958<36:-04*-1.15( /36::=A-04037,/3037038038038 .3*-225:36;7:?47<:=B<?D>AF9<A.16-05149:=E14<*-5),4*-2( 0&)-&)-.15037/34/346897999;;>@A?BF9<@>AE;>B9<@8;?58<<?C8;?7:>69=58<69=7:>7:>7:>9:>9;<9;<8:;79:6896898:;68957846757857857868979:35635635646757857868979:356023023245356356245356245355466355244133/11.00/11133133.00.00022133/11.-//.0-,., -/.0.-/, -.-/GM`HNaHNaHNaHNaHNaIObIObEJ_EJ_DI^CH]AF[@EZ>CX=CV?FW?FW?FWAHYCJ[DK\DJ]DK\?EX@GXAGZBH[BH[CI\EK^FM^EI[DIXDIXDIXEJYEJYEI[EI[DHZFJ\HL^JN`JN`KOaKObLPcINcJQeLSgNUhNUhLTeKSdJRcLSdMTcNUfOVgQXiU\mY`q]cv_ex]cv\bu[at\bu]cv^dw`fyci|cj{cj{dk|el}fm~el}el{clzdmzdkzckxcjyemzhn{gmzdgucgrehvimxlo}jp{kq~lr}pv
FIN9=BILQMPUZ]badhknrhkopswADH,./.01!#$^`axz{z|}txyIMN) ,134%'(023efjilphkogjncgldhmgkpbhmaglelo[_`,..-12 /0%).6:?djqbho^dkekrcfnlow?BG$','(,'*.AEJptyjnsgkpgjrfiqegqgisjoxlqzns|mr{lrynt{sy
$"%)'*.69=<?C?BF?BF@CGCFJBEI?BF?BF<?C@CGCFJCFJ@CG=@D=@D>AE>AF=@E<?D<?D:=B8;@8;@:=B:=B;>C;>C9<A7:?7:?8;@:=B8;?9<@9<@58<47;58<47;14847;.151489<@69=25969=;>B;>C9<A8;@9<A<?D<?D9<A69>47<69>47<25:/278;@:=B69>,/4,/425:69>149-05/2725:58=14925:58=25:58=,/4 .336;58=,/447<25:9<A8;@8;@9<A36;7:?25:.1625:25:58=;?D9=B8<A6:?.27&*/*-247<03747;58<6:;6:;267.23156037-05038/27-05.16.1658=9<A9<A8;@8;@9<A:=B:=B:=A9<@:=A9<@7:>69=69=7:>9<@58<14814836:36:03703747;67;67;56:45945956:56:45967;459348348459348348467245245245467467245023/12134023023023023023134134-/0/12.01,./.01,./ -.-/0EK^EK^FL_FL_FL_GM`IObJPcMRgNShPUjRWlSXmSXmSXmSYlKQdIQbIPaGNaHNaFM`EK^CJ]EK^DK^FL_EL_EJ_DK^FK`FL_JPcIObHNaGM`FL_EK^EK^DJ]JPcJPcKQdKQdJOdINcHMbHMbHNeIOfKRfLSgKRfJQdHObGO`KRcKRcLSdNUfPWhRXkW]p\av\av\av\bu[atZ`s\bu^dwagzbh{agz`gxahycj{dk|dk|cj{ck|clzel}dkzcj{cjyfkzflydgvfiwil{kq~ms
),0 .2*.//34{
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`CI\DJ]FL_HNaJPcKQdKQdKQdT[nR\nT[nS\pV]qU^rW^rU^rPWkNWkOVjKThJPgFOcFLcFLcCI`CI`DJaEKbEKbGMdHNeHNeGMdHNeIOfIOfIOfIOfJPgKQhKSjKSjKSjLUiMThMTgKReKReJQdIPcKReLSfNTgOTiTYnZ_tY^sZ_t[`u[`u[`u\av^cx`ezdj}bh{`fy`fy`fyagz`fy^dw_fy`hyah{aizagzahycgyejydhzhm|ko
_bf&* ,/3/34045(,-/34-12#'(.23.01.01-/0*,--/0&()MQR~
[[[000()']]]
&* /34%)*9=>\_c-04'*.'*.WZ^
?BG'(,*-1%(-MQV}
7:>),0%(,9<@
=@D( /.15&).knr
|{}'''%%˜:
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`HO`IPaIPaIPaIPaFL_FL_EL_EL_EL_CL`CL`CL`FOcGPdHQeIRfIQhLSgMSjNTkOVqMUrLTqKSpJRoJSnJSnJSnLUpKVqNWrNYtR]xVa|Yd
24<%(---3* /}~
;<@ ,0()-67;
:;?)*.)*.459{|
$),0015126)*.$%))*.#$(
$!"&$%)()-,-1,-1,-101556:-/0.01.01-/0.01/12-/0) ,CLYCLYCLZCLZDM[CLZDKZCJYBIXCJYDK\EL]FM^FM^FM^GN_IM_IM_GM`GM`GNaGNaEOaEOaGPdGPdHQeGPdIPdIPdIPdJQeGOfGOfGOfFNeFNeGOfGOfGOfGRhHSiJUkLWmLXpMZpNZrM[rP^uN^uN]wM\vO[wO[wP[yQ\zP[{Q\|T_
*,-.01')*58<}~
66<**0 -.   ~
!%)*.)*.* /* /()-&' '(,)*.(* *,-,./,./ -. -.*,-) ,EN[DMZCLZCLZCLZBKYAHW@GVBIXBIXCJ[DK\DK\EL]EL]EL]FJ\FJ\DJ]DJ]DK^DK^BL^BL^CM_CL`DMaDMaFMaFMaGNbGNbHRdHRdHRdISeIRfJTfKThLUiKVjKVjKVlKVjIVlHViHUkGTjIWmHXoJXoKXrKXrLXtNZvOZxR]{S^|Va
467,./-/0,-1klv}
,/4,-1()-879
7:? .3'*/9<@
:>C'*. ,0-,.wvxRQU(' -.2&' tw|
quzimreinaejZ^c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aHRcHUeHUeFRdFRdISeISeISdHRcHRcHRdHRdGSeKThJUiLWkNYoQ\rP\tT^vR^vR^vS_wT_zVbzXc~Xd|VbzXe{Ye}Yf|Xd|Xd|We|Xf}Xf}[i
tx}14<),4$&.PRZ
;==&'%,./*.//27}
/12///) ,( 0|
799'(&/12),0 .3}
" !%%&* ,0 ,0)*.* /,-1JQ`IP_IP_IP_JQ`JQ`HO^FM\GL[FKZDIXDIXDIXDIXDIXDIXAHWAHW<DQ:BO=ER?HRCKXKT^HP]GO\GO\IP_HQ_FO]GO`HPaHO^GP^GO`FN_DN`CM_CM_CM_FPbBL^CJ]FM`FN_DL]GN]KTbKRaLUcQXgQZhPYgS\jV^oR\mQ[mPZlV_sVauQ\pR]qVawS^rS^rS_qT_sVbtWbvXcwZeyZg}_l
"' #(!$)
sssSRT$#%)*.lmqtw|sv{|
!&"%* #(
qt|orzgjrfiqcfnadlbemdgocfn_bjX\aW[`]`h[^fORZMPXQT\NQYMPXPS[SU_RT^OQ[NPZPR\RT^GLUINWLQZOT]OT]OT]MR[LQZNS\NS\ 0927@OT]INWGLULQZQV_SXaOT]INWEJSAFOBGPGLUDIR>CLBGPFKT>CL8=F;@I=BKDIR?DMDIR?DMAFO<AJ@EN;@I;@IAFO:?H;@I>CL;@I;@I?DMDIRAFOAFOCHQBGPBGPBHO?EL>AI<?G@CKEHP?BJ58@59>>BG>BG:>C59>7;@=AF>BG?CHDHM?CH8<A8<A>BG=AF7;@15:-1658=038/2758=14969>36;,/4 .3*-2.16.16&).!$)&).*-2*-1'*.( /( / #'
"&LSdKRcIPaGN_HL^FJ\CHW@ET@ET?DS>CR>CRBETCFUDGUDGUCFTCFTCEPBDOCEOCFNILTUX`hksdjq[`iLR]EKXFLYFKZDIXFIWFIWGJYEJYFJ\EL]EL]FM^GN_GN]KQ^MQ\FKT>AI<?DAAG;<@467)*.* /237-0469=MRUagl{
qt|lowlowjmufiqflsgmtiovfls^dk`fmdjqagnY_f[ah]bk]bk[`iX]fW\eX]fTXcTXcTXcTXcSWbQU`OS^NR]QU`NR]59D>BMQU`MQ\QU`OS^OS^HLWCGRIMXOS^KOZCGRCGRJNY@DOBFQGKVAEP=AL?CN?CNCGR@DOEITBFQDHS?CNDHS@DO9=H@DO<@K>BMDHS>BM;?J8<GBGPAFOEJSJOXKPYLQZJPWDJQDGO;>F;>FEHPFIQ<?G69A8;CAEJCGL>BG8<A9=B;?D<@E>BG8<A=AF:>C9=B;?D15:.27:>C58=36;;>C7:?038*-2/27-05&).,/425:/27),1 .3149149-0403736:.15'*.'*.*-1( /MTeKRcJQbIPaJN`HL^FKZDIX?DS>CR=BQ=BQ@CRADSADRBES@CQ@DO?AL>@J>AI=@HFHPTV^giqbemY[eMR[HLWFLYFKZEHWGHVGHVGGWEHWCHWDIXBIZBIXCJYJP]JNY@FM9=B9<@=?@=?@213///*) ...43513379:FJKEJKT[^ekpmu|rz
UZ[&((-//, --/0)*.AEJ
8<="$$5&()'*.038
!3$)8 $/
02:#& ./3 -.' ,(-.,05
qs}68@%(,-//031.00.23*-1HKS
72/732<78
&/ (/ 3:|
<9530,*&%!
kgf4/.aZW
fn{_gt[cpajxXbsS]nYct[evV`qYarZbsW_pV^oW^oW^oX_pX_pW^oV]nQXgRYhRYhRYhV[jY^mZ`mY_lX^kY_lZ^iX\gUYdTXcTXcTXcPT_SWbW[fX\gW[fUYdUYdUYdUYdVZeW[fVZeRVaPT_RVaW[fRW`BHO06='-4&,3)/625=8;CBEMILTRU]Y\d^`h]_gWYaQS[LNXKMWJLVIKUHJTGISEGQCEOCEOCEOCEOCEODFPCEOBDNACMDFQDFQBDO@BM@BMACNACN?ALCHKEJMGLOHMPHMPHMPHMPHMPJORJORKPSJORJORJORKPSKPSKPSLQTMRUOTWQVYTY\V[^W\_Z]aX[_Y\`[^b\_c[^b^aecfjdgkdgkehlfimgjnhkoklpklplnomopnpqprsqstrtutvwvxyxz{xz{y{|{}~{}~|~
~~~}}}~~~
!" &'#'(&%&"
~~~}}}~}
&$##$"%&$%&$!"
$""&$$$"!0.-)'&)($('#&%!"!
$"")''/-,"
%#"*('(&%-,(('#%$ %$ $$
kpyafoafochq_dm_bj]`h[^fZ]e\_g\_gX[cSV^WZbVYaY\dZ]eTZaSY`SY`RU]PRZCCI54=A@IXW`UT]LNVXZbYZdYZdXZdXZdXZdXZdVXcRT^VYaX\aZ]e\`e]`h[_dY\dX\aY\dX\aWZbVZ_X[cY]bX[cUX`PRZ[Zc`_h]\e^]fa`iXZbJLTY[cVX`UW_WYaX[cVYaSV^SV^RU]PS[NQYMPXKNVHKSEHPCFNBEMBEMADL?BJ=@H:=E8;C69A58@48=36>48=69A7;@69A48=>BG>BG>BG>BG?CH?CH@DIAEJ>BG@DIBFKCGLCGLCGLCGLDHMEJMFKNGLOGLOGLOHMPJORLQTOTWOTWOTWPUXQVYRWZRWZQVYTX]TX]UY^VZ_W[`X\aY^aZ_bZ_b\ad^cf`ehchkglokpsorvuwxwyzy{|{}~|~
 (#41,/,'0-)0-)/,(-*&
 ($ ($)($*)%)($*)%*)%%$ $#
30 ..(  %- #.,$52*1.&2/*30 1.)0-(#
,)%,)%*)% *&*)%*)%)($$#
%$ -,(.-)'$
-)(0 (4-*2 (
2/ 11   %. &. &2.)1-(41,41,2/*2/*)&!
,)%,)%, '-,( *&)($('#$#
%$ -,(0.- *&
 --( )'*(,*)2.-/*'/(%1*'"
*'#..(**$-*%. &/ &2.)41,41,2/*30 . &
*'#-*&, '.-), '*)%('#$#
%$ , '/0.120!
04/32.0-)1,).)&-(%*%"
)&"10,/.*1.*1.*0 (3. 41,30 30 41,2/*
(%!/,( *&.-)-,( *&)($%$ $#
&'#475<?=0/ 
/3.10, *&61.50-/*'.)&
0/ 32.2/ 2/ 1,)4/,41,30 52-52-41,&#
0-), '/.*-,(, ' *&('#$#
#$ *,,475./-
 /)//)--'61.50-3. /*'
*)C/1.*2/ 2-*4/,52-2/*63.63.30 . &!
0-)/.*0/ .-), '-,(*)%%$ "#
-//7:8<=;$$
)-'11 33-3. 2-*72/3. #
 *&7622/ 30,3. 3. 41,0-(74/41,0-(2/*
/,(21-21-.-), '.-), '&%!"#
44.  %4/,2-*61.4/,0-)
&%!21-21-1.*50-3. 0-(52-2/*1.)63.2/*(%!%"
43/10,-,(-,(.-).-))($!"
.0*,,&:734/,3. 52.2/ 
10,43/0/ 41-3. 41,52-30 30 63.41, ($&#
 ,(.-);8461.2-*74041-
,-)54032.41-2/ 63.41,30 52-52-41,. '%"
54076232..-)0/ 54021-&'#
,2-'($0/ 2/ 50-72/74043/('#
)*&54054052.2/ 74/2/*41,63.52-52-/,(#
/.*651651/.*/.*651540 ,(
310. '1.*85163/540.-)
%'!22,77163.2/*63.2/*52-85063.63.0-)$!
('#651;:621-.-)43/65101-
01/1.*0-)63/52.43/0/ 
540?>:7620/ 32.762451
"#! ,*3/.1-,52.52.44.00*) %
21->=9:9532.43/873784%,%
777$%#., 2.-52.52.33-//)22,
-,(;:6:955404519849:6(/(
1/.., 32.0/ 52-55/22,(("##
,,&76277111 01(63.74/52.41-40// *#! "
231?@>451,0 6737;6371
&*$9=8<?=)))
888(& /-,(0/ 41,52-33-//)('#$#
372;?:675
*.):>9=><
)  577,..
#'"6:5?@>!"
{}~{}~{}~|~
?@>./-43//.*30 85041,41,43/)($$#
[\Z&'‡3/.*41,52-41,52-52./,('&"('#B?:@=8-*–151,62-<8373.63.52-*)%('#01-451/3.04/04/261.2-*.) $
wxv()'76232.41,63.52-63.63/0-)('#)($@=8B?:1.)85062-62-;7284/96163., ')($,-)12..2- /*/3.261.2- /*"&!' &<@;AE@#$"
12021-0/ 52-74/63.63.7401.* ($*'#961C@;51,62-63 74,:7/85-97/53 ..(**$)*&12.340/0,-1,372/3. /*&*%%)$6:5EID-1,
JKI/.*10,52-74/63.63.85130,,)%*'#1.)A>99503/*63 85-96.:7/:8064,30 ..( *&12.78412.,0 37204/,0 *.)$(#04/GKF8<7
qon-*&;6372/72/72/71,62-71,5/* $!1*'<61B<7?92?92B=4D@5C?4DB8><2<:2><430 -*ˆ245113-02,55/33-**$))#24.FJEBHC
5321/.72/72/=72@:5<74;639413. ,'$/*'62-84/73.73.84/:6195040 1.&0-%. &)&!-*c.66044.33-11 -.*&'#
 *&984?>:873CC=??9??9BB<CC=CC=BC:CD;NOF_^Ta]RUQF<7.ecYfd\
=;:- *50-72/>83B<7=85:528302-* &#,'$3/*51,73.62-73.73.62-2.)0,'/ &. ''$ (("33-66055/33-00** '#$
11 77166055/22,)*&"#
-*&/,(73.:619414/,2-*.)&(# (# ,'$,'$3/*2.)2.)3/*2.)/ &-)$.*%'$
-,(55/55/44.22,,.($&
'&" ($2.)40 4/,0 (.)&,'$&!
2.)1-(1-(1-(0,',(# '"*'"!
)($22,22,11 //)$&
. '/,(,('($#$!
 ($. '-*%,)$-*% (#'$
'$ -*&. &*'"(% %"
!" $%#"!
*)%*)%#"
'&"52.962A@<::4HHBEE?==7EE?DB:@>686.HF>OLDSPHc`X<91gd\pnf
$%!)'&#!
xnqh`cZ\_Vjkastj34*,-#;<29:0ZXPNLDgd\b_WGC>[WRf`[XRMhb]GB?&'%uww
>@@*/.UWW;@?{}}
|sqlc
'%$564786()'
0.&/-% ( 86.;;511 #$
#$" .,47504/
)  586=>:67312.01-' &
&'#$("&*% --.-/)(**((**$(&
*( '&"413*(.~}
"!%%"$'%$)'
'$ :7341-
D:^``~
! $...CEEoqr
/--(((, -[]^
&("24.NPJ>>8
-0.jki_`^XYUVWS@A=
11  *&-,("!
%&""#!!" ,*)0.-#"
::400*%%
63.spknjeUQL51,$
?9.haP
!!!"""%&$&'%'(&()')*()*(* ) ,* ,*./-./-,- ,- ./-./-,- /0.01//0../-./-./- ,*'($
qrp/0.hie
MF%C= 2,
&%!&'%"#!
{lkgMJFROKMJE63.EB=b`X
O@0SC6K;.jZMkZMuaVkWFjU9XF
59..,!0*
47.RSIkg\kcVL?1P;,_>.
wc_ZWQL}vsqli;98UUUhjjKPO
%-&,0*2/ -(%   
'))466 --,,,
% &-* 0.25310,0.-466-12
()%%'! -') %&'#"#!$%#%&$$%#%&$&'%&'%$%#'(&&'%&'%&'%&'%%&$#$""#!&'%%&"%#""#
%$ #$ %$ "
(((342/-, ($%
&%!)  .32302644897253054156
0#!1$, #*&&   
oz~itxdprdmpeoogqqisshrrlttpxxsz}t{~u|
'''777<<<;;;::::872.-%
ww}ttzrrxqqwmmsggmcciYY_XX^UU[QQWMMSJJPHHNEHMFINEHMCFKBEJCFKFINKNSMQVKOTKOTJNSIMRIMRJNSHLQEINGKPDGLBEJBEJADI?BGBEIFIM>CF>CF>CF>CF>CF>CF?DG@DICEMCEMDFNDFNDFNEHMEGODGLFINEHMDGLCFKBEJADH@CH?DG?DG=BE=BE>CF>CF=AF?CHBFKAEJDHMILTMPXPS[TW_X[c[^f^di`fk]ch_fiotwx|}dffGHF
p.aS"@6
!'&("$%"$%"$%
#$"$%!#$!"&!#$"#'#%&"#'"$% !%
"# #' $%
NRMTXSXYU__YKHC2/*C@;A@<IHDDEABC?EGADEACE?>?;PRL$%!24.ce_ac]bd^egafgccd``a]_`\aa[dd^ee_dd^cc]ee_ee_cc]bb\``Z``Zaa[cc]cc]bb\``Zbb\bb\eb]cc]c`[^_V^[VZ[RcaY`aX_]UYZQZXP[\RcaYih^hhZcdTa`RccUcbT^^P__QbeVddX]_SacWZ^R\]S]aVWXNYZP]^U`^V`^V][S[YQ[YQ][S`^VcaY_]U_]Ua_Wa_W][S][S^_VX[RW\SX]TZ_V]_Y]_Y\^X\^X]_Y\]Yab^cd`_`\bc_dea^_[HE@
)(*.-/(')(** --*,,,..!&%%''),*'))%(&(**( )(**.1/'))
" "" .,.00),*'))(-,', "'&&*  0/' ,!&%"$%(-,)-.
!"' , /0' ,
d:qX6]N.PF$VK%_I
,-  ,(&'%./-01/-0.)   #!,..031###./-****,,%''*,,)  ', 
#$ 451/.*-*&0-)&#
,)$41,)&!2/* (#*'",)%0-)0, ,(' '& *&/.*..(..(..(//)//)//)..(//)'(
() * "/0'* ",-$* "--'..(1.)..(/,',,&--'--'  %) %))#*,&22,-/)&("&&   (00*//)*)%
%'($'%"#
8,*7 ) "
1/.63/:61<832/':8.42',,
01'21'20&75 31'86 31&*(
32(65 &%
32(.-#21'10&- #.,$0-%/-%/,$- #,*",*".,$,-$,*"'(
)* 0/!'*( 12)%%
., 30,%"
54001-9=8
zYxdAt^;q^9kY4cS.dR-ya=
64,63 -*";7273231101/./-10,11 20(/-#
45394160 *$
*'"*&%- *#"
3*&2,%/ &1.&95096.62-74,1-(;4 @7)@5
6-$6,%*$
72)=8/@;2LE<XRGZTI_YLcZPe]PldWqj[qi\sl]vm_wo^xoa{sb}tf~ve~ug~ve~ugyq`vm_rjYjaSf^Mf]Od[Mb[Lc[NbYLYPBWL>_UDf\KeYGaUCh\JvlZ
B<1G>4LB8J>4K?5RC:SC7[I>YG<`LAfRGaNFTC@PD@K?=G@=HC@GD@ED@HGCJFEC@<4/.HC@D?>NIHOKJJGBKK?MM?LL>ML>PLAXUGd[Q`VL]QGiXOnYQrXQsVQtVQzZUx^Wh]Ob[J\UFaYH`VD]P:f[=pd<oa0|p6
,)%,)a.LGDYTQXTOF@;LF?KE@HB;IA:HA8H@9LE<PI@PJ?QJASMBUNEXRGZSJZTImf]pj_yri~xm}vm|vk{tkvofog`phasibmd[g\Tf\RaXKXL@J?1H=/C8*C8*B7)B7)J?1J>2MC9B9/B8182-941usrxwypquorwsv{vy~tw|tuyuvzuwxqstilplosknrfimfimhkobeiWZ^Z]b\_d_bg`ch`ch^af^af^af]`e]`eadidglbejadi_bgY\a[^c^af]`e[^c\_d]`eX[`PSXbfk^bgTX]TX]UY^TX]VZ_QUZRV[TX]QUZMQVNRWRV[RV[NRWMQVMQVIMRFJOGKPEINDHMGKP
 '"62-&"
=3)6,"G=3YOEVKCVKCXNGSGAXLF\QIeXP`SK[LC`QHaQJjZTeVS\PLULHVPKUQLTOLURNXUQ830C>;NIF1,)MJFPOKTRJSQFWWGWTFVSEb\OhbUf^QbYLl`VkZQ_LDhQIeKEmPKpSNoUNp`Sf[M[QGZOGYNFUKAYO>YR9bY7f_4d] j_ qc.wf3ua1wa1xb.wa-w^,pX*nV,qY5jU9YH3OB4=4 %
', */.,..578244*,,
--'882* )355"$$(**
j_s_TfTIeUIaQE`SE]SB\R@_VB^S=dYC\O9[M:[N8SF,UH.XK1K=&,
30(?=5'(&
"& "& "#
$%!&%!%$ '$ '$ &!
#! #!"#!*(( '&*$%& !#
&%!'&"'&"&%!%&"%&"$%! $
$(#%)#!$
%%)*$)(#'"* '%$ $!
0-)63/ '&"
/0.cfddff`bb>@A
$'%#&$*,,
#$"/-,#"
)(*, -'&($$$
&%'()'$%#
///###"#'
!%& .inq
<<<444!#$
***222$$$555;;;56401/%'' --"%#
78.,-$ !
%'!882 -'##
()')))@@@
0/ 63/:95/,(%%
ghrabl\]g`akhisnoymnxijtdeojkumnxklvjkuklvhiscdn^`jacmdfpceobdnacm`bl_ak_al]_j\^i\^i[]hY[fXZeY[eVXbPS[LOWNQYQT\RU]PS[NQY
381086333 
381086333
hXXp://api.iukuai.com/login.html
username=hongniu521&password=112255a&pay=
hXXp://api.iukuai.com/login
\empty.exe
`.data
could not empty working set for process #%d [%s]
could not empty working set for process #%d
USAGE: empty.exe {pid | task-name}
AdjustTokenPrivileges failed with %d
LookupPrivilegeValue failed with %d
OpenProcessToken failed with %d
empty.pdb
KERNEL32.dll
msvcrt.dll
ADVAPI32.dll
CloseWindowStation
SetProcessWindowStation
OpenWindowStationA
GetProcessWindowStation
EnumWindows
EnumWindowStationsA
USER32.dll
ntdll.dll
OLEAUT32.dll
$ "-6#0<
!!)))***,,,$$$)))"""
 -!-0".4!,3
*2!*4% 6
&6(/1$)&
ORWlotLOSadf%'((* 356MOO,..))))))   %%%SSS
cdg,-0(* ')*'(,;<CGHO>?F ,2$%*()-')*)****)'(& ,* * )(*  ,)()$$%#"#&&&(((   )))(((*)) *) *)-, ,,),,) ,(.-). )- ), *, *- *-* .  . ,-* .* -)).)*/* . *.*)**)(  ), ), ( )*,)* () %,-&.,&-,%, $)*('* '  & ,% -"*.
!!! !!!"""###"""
444###%%(
&%"#$!#$!#%##$#"$$ #$ "####%$#&%#$$###"$$"$%"$%"#%!"%!"% %"
%# %#!&#!&##%##$"#$"$#"%#"&#"&$!#$"#$"#$""%"!$! $!!%"!$"!$" $" $!$#!($ &#!$#"""#
''')))$$$)))(((,,,555
..0)) $$%...DCC1/.'%$, *()'-.,&(&( *& *' ,%*-'*.**,,**-  ,   ** ***,*),*),*),*(,**,).,'/,(/,(/ *.* ,* *) *)-*(.*(.*(.**.**,) ,*)*((((((*)( )(,*),*)-*) )()*())(()'()'()'&'%%&$&'#()%* ')-' 0'
/.0('',-,'((*, (**'))(**'* ,.1 ,0 *. *- *,)*,)* ) ,) ,' ,' ,' ,*  .,)- *- *- *,  * ,) ,'*.'*/'*/'*/ *.,). *.,(,*')*'),().)*.)*/* 0* ,),(),((-)),*),,) , * *)*)'-*).*)(*(
77;*),)(*?>@
666555555333333444222000'''VVV...111111222444333333444333333333222000,,,---///111///000111222000222222///000444444222111333666555434323101323445212212223212001000/./,,,,,,---...---......//////000000...000111111111///111000111222222444444555222111111555222000111///000222333333333333333333111333333333111111333444000222...111333333555333666555555333222555666333333222111444545001../...--- **,  ,  )(). /324666555455455344455354566365.0/011344434434434323433333111111111233333333111222111111111111111111000///000/////////000000......//////...///.........//////...---,,,,,,,,,,,,------...//////   ***   ,,,***))))))***)))''')))))))))))))))(((************   ))))))******))))))))))))((((((((('''&&&'''((((((((()))))))))'''''''''(((((((((((('''((()))***(((*)(,  0.-20-20-0- 1/-/-,.--(''"!!
248)*.TTX
''-&&,339
-/3 ,0:9=
1//977?==:88:88<::<:::88/..}{|746746524857857;8:635413635746424334245134245.01.01/12467578.01012324413524746968:79:79968;8:968746756754754532754754976865754421532643444333444444333555555666333333444444444444333000333333444444333333333000111///111111...333555777999888999999888555444555888000444777666444444777444333333444888888666222222333222777:::777555555777666888:::999999777999:::787898:;9686253364786876976:879763100.--  200644866:88675231./- ,* ,*-.,///111111222222111444555555888888777777777666333555333444333333444222222000000000111222000///000111111000///.........///---.........------.........------,,,,,,   ))),,,,,,...---...,,,***,,,---,,,---------...---,,,,,,,,,,,,***   ***))))))   ******))))))***((('''((())))))((()))***   ***   ---0.,2/ 30,3/.20/20/20/310421][Z643$##
249'(,, -114
.--978?>><:;=;<>===;<<;;311
LLR((.fin
<;=>=?DCEA@B<;=@?A657213213879<;=68957835668979:467356689:<=79:134:9;:9;65765776865743598:;:<879546656;;;???999999:::999::::::<<<666555888<<<>>>:::888===>>>999666555666666555:::<<<;;;:::;;;<<<888444666888888888999;;;<<<999777666444666@@@@@@444222666333///222444111666555///444111000999:::===999888555666555999???:::444333888999999777:::777:9:;;=9;<8:;35624435646748959:388365342,- ()(,-,5649:8897897786675564786253243577466577566222///111333333---,,,%%%!!!###$$$)))000666888777777444333333222222555111...000111///000000111222333111///.........//////------......---...---,,,...---      ------***,,,---      ,,,---///---,,,      ...///...---,,,---      ,,,   ******,,,)))   ,,,   ))))))******   ,,,,,,      ,,,------//.3/.30,41-41-51/40/0.-20/0..RPPTRR'&&
BACBACFEGA@B>=?BAC;:<768657;:<=<>:<=;=>:<=>@A?AB:<=9;<>@A=?@79:79:=<>=<>=<>98:546879<;=@?AA@B>=?<;=<;<AAABBB;;;888777;;;BBB@@@???999:::>>>@@@BBB@@@???AAAAAA<<<777333111444999>>>@@@@@@BBBCCCBBB>>>:::===@@@@@@===999888999888888555111777@@@999111333555777;;;999888555<<<;;;::::::000999@@@666888;;;999444666888888777666777333555:::>>>888555777>>?8:;34867;237126./3-04148047*.1%)*!##,--566999:::::9676666776565786686586577466577688:::<<<999666777;;;888444222///   &&&$$$"""$$$)))000444222444777777888222111000222444222000000000000111222111...,,,,,,...111///...---,,,,,,...---,,,...,,,---,,,---...---...,,,   ------   ,,,   ------------......,,,      ***   ,,,,,,                  ***      *********      ,,,---------,,,/.-3/.30,41-52.62052120/3101/.NLLYWW/.."""
.01......,,, ,*-.,/0.01/,- * *--.,./ -.NOQSTXdeibdhQTX>AE;>ADGK@CGEIKVZ[HLM<@A%)* /0259ruzlotUX]~
A?E, -, -***(')*)  *- *,'&(,,.**- *.&%)$#'.-1438DCGVUYzy}kkm/.0,,,...((())),,,---222   ,,,---(**%'(.0146779:DFGNPRLNO467BDE023]_`PST%'(%'' ..)  .14RUZTW\LOTqtyX[`qtynqvTW\
LMNLMNMNPMNONOPMNPLMNKLNHIJJKMKLMJLMKMNJLMKMNLNOIKLHJKGIJFHIGIJIKLEGHCDFEFHMNPOPRIJKKLMKLNNOPPQSMNOJKLNOPNOPLNNMNOLMNIKKLMNGIIEFGHIJIJKIIIIIIJJJKKKJJJIIIJJJKKKKKKKKKMMMNNNMMMMMMNNNNNNNNNKKKNNNNNNNNNMMMLLLNNNMMMMMMNNNNNNMMMNNNKKKGGGNNNQQQLLLIIIIIIJJJLLLKKK??????IIIRRRNNNOOOPPPNNNIIIGGGIIIJJJMMMBBB;;;;;;666222222555444111999888777888888<<<?ADEHN@CK02;()502??BOADQ=AO;AL;@L;AL7;F47@02;-/8 -6*,3-/6027-/4.15037/2603624857:469356245234466999999888;;;:::999666777333333111000555555333333222///222333444222000000111111333333333333444333111///.........   ---...---......------............//////............,,,      ,,,///...------...///...------   ,,,......///---,,,,,,---------,,,,,,   ,,,,,,------------,,,---...//////21062.72.72/830731732843310422;99geeGFF)))### ###---000///...000///------000//////000000///000000000000000/////////000***,,,///000///000/////////000///......////////////-./..///0--/002445446;:=FEHSRUddgttv
GFJ/,--,,* )* )* )  *,,,***,,,,,,(((        ,  ,***---***   ,,,...      ,,,, -, -435-,.,,-,,,)  )  *,,*,,*,, ,-, ----///,,,,,,   /// ,*-.,-.,,-, -.ABFwx|vw{ppvHHN::@\\bRRXQQWBAJ87?FFL==CRRXFFL-.2459him9:>)*.YZ^acfBDEacd/12ikl79:[\]
jln*,- -.nps
**.BBFIHLAAD""$
.-.gfhsrtrqsmln
)(**) /.0213
&%%1"#-"#.$$.$&. ,5')1
!%"!&%%(&&(##%
! !&%'"!"
!$#%&%($$&
$$$&&& !!!$$$"""
"""((())(.*(2-(3-'5-(5.' & 0*%%!
'''&&&%%%
$$$&&&%%%&&&!!! ###(((
$$$'''))),,,///111000000//////...YYY
) .(),&'*
%')*,/!"%
 ,0.04$&)
**,336346,-.
./0:<><<?023
!" """$&!"#
(**,..#%%
4!"" ,,#$#
""$(),(*,"$&
&'*136358468
!!!*  '))4
"$*46>23<'(.
" !"-()602;
#$&#$& ,/
?&''*  &''
*,413<%&/
***555666;::888<<<-.-
$$' )-1 /4( 0
"!!533311422<:9755-, 
,,,000111444333111333[[[
%#$0.//-.0..866311- *
"*,/ -0*,/
'&(('*,*,2120.0-,,
,,,.........vvv%%%      ,,,   ))))))***
!&' &( /15
!"%&(*358* -&'*"#%
/0613;.08
&%*'',(',**.&&*((*
#%') .( -
(( .14.0312546956:68; -/
&&-..5..5 ,4* 3!#)
###:::   $$$
2"""!!!   
%%ÌC111***!!!###" %
!!!///555777555666555444^^^
&( 037&( 
().23:(*/
&'-129-/5*
35:35:249
&&&%%%&&&   (((
444666???&&&
"""***"""!!!
"!"&')-$&)
!!!$$$)))---...222,,,)))!!!
:0'=3)6-"-&
,,,,,,---...www&&&,,,,,,,,,,,,*********
;AH<BI<BI<BI=CJ>CL>CL>CL>CL>CL?CM@BL@BL>BK=CJ>DK?ELBHO@EM?DMBFPBFQCGPBFOCGPEIRFJSEIRFLSFLSGMSGMTFLRFKRGJSHKTGJSFIRFJQFJQEIPDIOEJPEJPDHNGJODGLBEJADJADKCFNGJRLOWNQYMPYNPYPR[RT^RT^RT^TV`SU^RU]RU]SV^TW_VYaWZbU[bU[bU[bV\cV\cV\cV\cZ`gZ`gZ`g[ahafkbej`chbejbekehnbdl`bj^ai[ahY^fW]dV^dV]dX^eX]eZ\d\^fZ\dY[c[]e[^fWZbSV^RU]TW_WZbY\dY\dY\dZ]e[^fZ]eZ]eY^cU[_LSWPV]RVaMP\KP^PUcLR_IO[LR]JQ[MQ^KO]MQ_NQ`LP`MPaLOaKN`LNaNPcNPeLPdLQeJNeLQgKOhIMgHLfCGaEJcBIa@G^FLbMRfTWl\_tY\pUXm_bweh|rv
!#&!"& "%
*,/259* .
"#*,/( .*.1-03*.1
"#& -0"$&
\]_7:=036
.148<?8;=:=?"$%
( -'*,'*,'*, "$
"#%*,.*,.:=?*-.
#-/524:%(. "(!#&
$$'-/2'*,#&(
579LOSVY^\bgagl`gl\cj]`hY\cRT[JLR56;
,,0237025'(*
=?@)*,%&)
#&'#&&-/0
`crKN]JM\9<N:=N<>L<=I9:C;;A?>A>>??@?<=;;<9>?><<<000222222000666tttfffLLLEEE???>;<-'%;/*I9.N<.ZH8YH7QD6LB4OF9aYK
!"#%'"$%
9:<FIKKNPQTXX[`Y\cWZbUWaQS^PQ^JJZBDSDFSHJQJMSGJPFIOHKRGIRFHQFGSHIULMYKKXIJXGJYGJZHJZHJZGJZJL\IL\GJ[IL\HJ[FJ\@E[CG]CH^AF\AF\AF\BG]AE\@D\>BY>BYAE\=AY>BX:>V:>V;?W=AYAE]FJbIMeOSjX^rNTgPVi^dw@FYKQdx~
%'*&(*589-00
!!"#%&(,017:=-/1 .0*,.&'*"#%
!""#&&)*,.0035256035.12*,.%'(!"#
"$&.03/26.24
}tojcbbCFG* -***##"((*9;<=?@=?@;=>;=>=?@:<=689134.01.01.01023467134245<>?<>?<>?9;<578689?AB8:;79:9;<;=>9;<9;<9;<;=>8:;8:;:;>:;?67;2354676899;<8:;799799:<<:<<;=>6899;<4679;<9;<8:;356689;=>ccd
"#%*/17&& 
dddVVVPPPBCC21./*#@4*J;.VF9TE8E8 @4(>2&@5(XL9
%&)/26/26,04*.3
/2625:36;
pppdddVVVGHH441,& ?5*H;.QA4PA4E9-D8,C7 =2%UJ9
JM[HKYHLXGKVGKVFJUEITCHQCGPBFNAEM?BK8;D69A78A68@57>9;@QSW_bc^bcRTT@@@212  ,) ,%(*&(,25:HLQX^dZ`h[aiZ_hW\eUZcUZcUZcV[dV\dX^f\bj_em_enagobeoegqdeobfpegscfrbeq`co`eq^dpX`lY_k]`m^anaeofjtimvloymq{pt~qu~pt}ot|lpzjnxeisbfpaenadnaenaeobeodgqeisejsgktcgojmueiq^ai\`g[^g[^g[`i]cl^fo^en_en^em`dkbdhabbeddgdedacd_beaeaae`dhaej`dj`ci^bg_cg^af^bf`dhaeibgncgpbgobhochofipiksjmtgjqbel`bi^_g_ahadjbdkdgnhkrimsjnthlrhksbem_bj^`i`akbcm_agX[`UZ[SXYRWXRWXRWXNUUIPQJNRIMRLPUMQVOSXRV[X\a^bgaeifknkpspuxpuxuz}v{~otwlqthmpjosnrwnrwfjoafhbff_dcZ^^eijgklbffkoqrvxlprdhjjnqrv{qtznqwimskovfhq_bk^ai]`iNPYILUUW`X[d>AJ58A>AJPRZLNULNTDFM8:C9;D8;E9=I:=K9=J8<J=@O;>M9<K:<K8:I:<L:<K9=L7<K9<K<?L=?J=>HA@I@@G;;ACCGDDHccdMMM555///   ,,,%%ªA
@5.fZU
259137137137
/04--1 ,0  /
/04015//3-.134856:77;-.2-.2/0466:
30.kd_qh_|ob
#--.ieb
102102.-/0/1
:::989556999
}upnrmlolm[Z]hgiWWVKLJ??>;;;;:;012)*,'(,'(,.039:=;>B:=A;>B>AE<?C:=A;=A=?C>?C<=A@AE<=A>?B=>BBCFDEH>?B?@DDEH>?B<=@<=A:;?78<89=89=89==>B:;?45989=34823756:78<67;9:>9:>237126126/04 ,034856:67;:;?45967;<=A78</04<=A56:78<67;56:78<36:36:14813725936:58<037,.2.04137.1558=79>46;9;@>@E<?D:<A:=A;>C;>B8:A58=58=47<25:69=7;<68979:9;;8::79989<78;89<9:=79<34745857:68;67:35768968868979:68968979:689578689467456466566566566355466355233233344344344455344244244344{||)**/00/11-//-../////////
>=<=<;766544=<<
,..,..,./
,...00 -.
!$%)1379;?<?C=@D<?C=@D:=A:=A>AEBEI>AE:=A<?C?BF>AE>AF=@D;>B;>B<?D>AE=@E<?C;>B;>B;>B:=A7:>7:>25947;14847;36:58<8;?8;@25947<;>B8;?03736;36:69=9<@:=A8;?58<36:47;038,/4.15.157:>/26.16/27149038-0514958=69>8;@;>C8;@0380388;B15<,07 .3'*/*-1/26047156689799;>@8;?:=A7:>69=69>9<@7:?69=7:>8;?8;?9:>9;=8:<79;68:79;57836757846857957945735757857868:357134135357246356245466355134/11.01yzz(**.01022022..0..0,,..-/
bdf/04-.2KLPvy}159&).( /&)-),0.15.04-/0*,-MOPeghnqrUYZ*,-/12<>@mnrpswilpaejbfkdindik588)-.)-1;?Dgmtflsinvps{TW] -2) /DGLrv{kotjmuiktikulqzpu~ot|nt{sy
!%$' 58<>AE=@D?BFBEI?BF@CG=@D<?CADHCFJ<?C:=B:=B<?D:=B8;@9<A7:?7:?58=47<47<8;?<?C:=A7:>9<@:=A69=0377:>8;?47;9<@58=;>C;>C69>69>:=B8;@36;.1636;58=58=/2736;8;@:=B;>C>AF8;@58=9<A47<25:/27 .358=47<36;36;8;@7:?/2769>8;@7;@37<8<A:>C48=:=B;>B69=-03/347;<>AE:=B8;@69>47<36;25:14925:36;47<58=69=69=58<7:>9<@9<@9<@7:>9<@7:>7:>8:>89=56:56:67;45978<56:348126126237245/12245245134023wxy&((.01,./ -.,./023.01.01
qrx,-2) .LPQ
Y^`),0,.256:=>@?ACAEGIMNOSTPTT697,00',.GKPpw~nt}ns{sv~nqv36:*-126;jnsvz
./4) .AEF
JNO /0-12[^a.15'*.SVZ
34:) /79<
<@E*.1,//-00011-..*-.',.)-.*- .11',.OTXty
adi037#&*-05@CHBEJAEJDGLFINKNSLOTHKPDHMCGLCFK@CH@CHADI?AG?AF=@E>AF<?D:=B=@E<?D9<@<?D<?C9<@9<@7:?7:>;>B9<@8;?9<@9<A8;@9<A:=B9<A9<A:=B8;@69>69>9<A6:?69>25:48=59>7;@;>C;>C9<A7:@04:25;26;7;@6:?59>15:04937<7;@6:?:>C48=48<37;7;?:>B:>B9>A47<03815:/38*-2.1626;7;@7;@26;48=15:/3804915:37<48=47>7:@8;A8<A:>C=@E9<A8;@7:?25:03736:57;8:>9;?01523756:57;/15 -1/15/15&' )*.* /,-1237 ,0tuw!"%'(, ,0./3-/1-/0) ,,./
VY_),0)-.QUW~
psxDHM /46:?48=9=B:>C9=B:>C?CH?CH=AF;?D<BG=BG@DI@CH=?D=>DADICFKADI>BG=BG<@E:=B=@E<?D:=B:=B8;@:=B;>C:=B9<A:=B:=B:=B;>C:=B9<A9<A;>C8;@9<A;>C7:?7:>58<58=69>7:?58=;>C=@E<?D68@02:25<37<37<59>48=37<8<A9=B:>C:>C;?D<@E9=B15:26;:>C:>C26;0499=B48=37<59>)-226;-16/3804915:.270497;@7;@6:?26;69A14<),437<>AF9<A9<A=@E;>C69=;>B8;?69=148-04.15.15/26( /*-1'*. #'( /015 ,0$%)%&*
! !%qru##',-1,-1126.02.01-/0.01
RT\) 0)*.kjnZ[_ ,0-.2dfkpsx149'*.WZ^x{
fio-04)-.GKM
>>>***111,,,%%%:::
mlt228,-.KLL
47< /06:<
cfm,/3*/1*.0,.2'*.UX]
9<A69>038/2758=69> .3.16-.4 ,2./5006./4'(.tux""'"#)!"' !'
$ !%&' )*.
<?D8;@8;@:=B14969>25:038149/27 .3149 .3&).qsv
),003825:25:14925:25:-05
-/325:03836;36;36;58=149
-04/38 .3-0525:14914936;
DHMHLQAEJ@DI>BG=AF>BG?CH8>C27<26;049 /4-16}
.15149/2736;7:? .3.1658=
-/347<36;/27038 .3-05/27
$"!42132.32.43/873:95?>:?@<GGAOOFWUKQMB\XM
|~~{}}}~}|}}}
ow}aioLRWPUZ[`e^cibgmejqejq_ekY^dIMSGKOPUZDILJMQPTXNSWNRVNQV>BFPTYRV[SX\TZ_W[b\_d[^dZ]bVZ_RV[ACG=?C;>B>ADIKPHKOGIO9:?46:2489:@57<9:@>AF?AGACI>@E9<ACGMBFM47;>BH>BG:>D59>),0),/*-18<A=AGBFMGLRKPWJOWJOWHMTINUINUJOVOT[RW]OSXLPTJMR6:?CGM9<AAEKEHPFHQFIRHKTEGN?AHPSZEFMGJPSV\NSX;>B8:?8:??AGIOUKSYOV]T[cX_h]cl\ak[^iX[eVYeXZf]_iadobeo_dmLOVGIPHJP;=B8:>::@?@FOQXSW\SY^NTXPTWbgkdhlVX[fijvyz
'%" &"0*&1,(.*')%""
*'",)#1-'4/)4/*1,'.)%&$ '&!/.)20,10 ,,'#&"
'%"530-,)## ""
{|}135:<>8:< ,.
,.246;-04
*'#.-)**%!!
=?@=>@=>@
356;<>679124/12)* 
'),68>*,0
4686688:<
"##012666;<<
*,.026,.2*-058<*,0
**,-.1'(,$%)
),0*,0 !%
()*,-.113
,,.DEGHJL8:;
444<<<344
%&'9;=,-.
,-.NPR`cfilpbeiXZ^RTW679347MORTVY^^fMLY
%&*)*. -1*,1)*/* 0*,1,.2-.3*-0$&*136
'(-24:58=),0
))*111)))
223<==122
667>>>...
-026;=*,/
$&)*-0"#&
%&* ,1').
 -.CEGLOQ568
 .15:<(*.
#$&*)*.*,1*,1)*.* 0*,0*-1 -2) /#&)
"""222:::222
,-.ABCGIJJKKHII
/01566(((
 .05:<*,/
&*,047&),
rtv.156:>37<149(*.pqs
,/27<?8<@*.0'*-&(*#&("%' .1#&(
"$(*-279<
$& 26<59?' /
444***)))
55.BA:DD@
 ,,&&(%%&&&(
9:<568)* 
 ,.::<<=><<>}}}
%(*-04-04"%(
--*((%SSR
zyysqqkdd^YYRSSLOPGBC:NOFXYPWWNPNF^\TZWOWTL]YTd_Zljf.0.lnn
}svmadZfh^klb;<278.AA7PNE_[SSOH^ZTc]Xe_Z=97VXW
}||{|wvyvrwsotwruvttsrpmpkjnjhkjgklkpsntwotwnsshkjmpmorpx{yotr}
331453!"
310==;675/0.
976@?>9:8564
!" -.*-.* /* /*%)$
|784')%)-(
JKG_^ZGEA3/ ,'$-*&-*'-, (* oop###1/.1/.yxy
7898::(**
((&0/.&&%0/.332
/.)SQLeb^YVR953=86`ZVe`VVQA~yn50!:4!2.
-- <;;644544
221>@<12/
)*&ORN/2.wzv
.0./00465'((
"%"-1-/2/
cef''(KKK<=;@D?imgkpgntjhkc^_XVVPTTM[[Uff`lnhqsmOQKEH?@E<KLDNKFRNIYUPYUPZWRZWR[XSZYSYYS[[UYYSTUKOPFuvn]]Vlkgdc_yvrc`[URL[ZQgg\$#
\]_*-/%()
...  *""!
8;?25;$'  $'
.14046[\^
()*--/,,-"#$
& '-'/0 . ('))
13-.0*OQKnpjpqntusvwuyzxxywwxvvwuuvtuvttusrsqrqmqoknmgmkgmkglkehhced^bc[`aYa`Z]]WXXRWWRXXRYYQ]\TcbY_^UaaWdbWnmc__S:90RPGRQGXWNUSIVTKTSJUTJQPGZYP\YPa_V`_UUSISSHQRFHI>EF<=>6
*,,/11(((
  '#*&,1/2300/-245"''
'($(*$) %$%"#$"%&$%&$&'%%&$&'%&'%&'%&'%$%#"#!&'$%$"##
$$ $$ "#
(($ /.212664353055$'(
1%"/%,)%$20
,)#12079:>:=<::8=95::%&'
!$!!" $$!
9;<89<468&')##&#%&
"$$(*&* 035$&%
;630,*%"
eK*|R.pF%xH
2428:7;;8('$*(%/. //,./,./ /0- ,)!"
788=@@>@B=>@;<>;<=9:<9;=9;>79;78;68:135 -0 ,/34768:358125/13/13/13.02/03.02,.0*,/* .LOTLOTMPUILQHKPEHMBEJCFKCFKADI
c9fS/ZM%cN!xX(
/,*32.))$'&
..(86 94&-&
##"222   
//$-* 1-(1. 
h`Q@5%[email protected][N2VG*gV8
%%"00.QPNsrmge_
64.EC>%!
 &!)$ (!
>2#@2#G7(N<.ZG9YD8UC7SD=RHANHBJF@EB<MHCWPLYOJ]PK\NK\OLi^Wh^UmcZne\md[pg_lcZnbZtf^{kc
:75vsshhh::;kkklljZZWggbbb_mnk^`Z`d[dg^pqh
n8|d.ya-{a3
vkOB8D7,VI@VJBTJCUKEVNHZRK`WO[PG_SJhXQcTOYNGVOHTNHVQKID>D>9C=8FA;URLYTJ[UG\TGd[NiaTcZNf[PZKBYH@YE?gQKkUMo_QgYM`SK\OG[PB\T;b[8d\1j^1n_4n\3q]1nY mW-kT/
"$".1.[[[$
VC8^MEVHBQGDSMJUQMPMI_]VWTKZULfVMhVM^QGXODUNDYQHOF=OF<G?6OH?\WObWLdTGfWKl]Ri]R`VL^VLE>5JA9?80WOHbVMr^PvbUlYQdTK`RG]R@]V=aY;bY:aU8aS8bR2^M `N.VC)
2-'950\\[$
}.1)*1,")(&,.
$'&*,-.1104216069379236/35.46/35-46.45.34,33,55.57/4:03:/3927<58<79;8<<8<;8=:7<74;63;958958968;8:<9><:B?>C;<@89=66944:86<=9;=8:>9<?;:>9:>98=87;7:;8=>;8:78=;8=87<19=09;/::144/9675558;:=A=RPNSMJ.)#97.
A4%F;03-&A=:
68:36:258) ,
wxx"%&) .uvw
0/.HGEYWWe``ic^ibYed]fiddeadeacb^cb^gd`eb^fc_gdajfejgeigeihdgeajgbjh`hf^ifaggaeeacd`cd`ee_ff_cf`cg`dgaffbed`gfaihchidfjejkfnkgmjejiclkfkkeghcghbiiclhcgd_fd^jh`kjehhjSSZ-.6( / 00 .*..* )%"
226.04'( {{|
&&%'(&*)% )"*&
643;::111
456KLNaceRTV
67;/03)*-
$&(&'*&')
&'*77;569
[\].01677
)-.FHJ
/0.GHD22.
,-/%%'!"#
!" ""'))
[email protected]@k\Nnc[
& .EKNy~
!!!   ***666231())')(
%&$&'$340&'##$!
<>@<>?=?@?@AACCCCDDEEEFFGFGGGHGGHGHHGHHGGHFGGFGGFGGGGHGHHHIIHIIGHHHIIGHHGGGFGGFGGEFFEFFEFFEFFGGGGGGGHHGHHFGGFGGGHHGHHGHHGHHGGGFGGFGGHGIHGIHGIGGHGGHGFGFEFEEFFEGFEGEEFDEEEEFEEFEEFDEFCDECCECCECCEBCDAAD@AC@@A?@A?@A?@A>>@=>?=>?<=><<><<>;<=;<>;<>;<><=?<=?<=>;<>;<>:;=:;=:;<8:;8:;89:688577688577.00%''(**/10022344.// ,,233778457457125/0334756957867957956856845746856857946857878:78:56846846846835745746846846846867978:78:78:79;89;79;79;79;89;8:<8:=9:>::>:;?;<@>?B?@B@ACACDACCACDBDEBDEBDEBDEACDABD@BC@BBABCACCACCBDDCCCCCCCCCCDDCDDCDDDEEEFFFGGFGGFGGEFFEFFEFFFGGGHHGHHHHHHHHHHHIIIIIIIIIJKKJKKJKKJKKIJJIIJHIIHIIHIIHIIGHIGHHGHHGHHGHHHIIIIIJKKJKKJKKKKLKLLKLLKKKJKKJKKIJJIJJHIIGHHEEFBCCABBBCCBCCCCDCDEDEEDEEDEEDEECDDCCDCCDCDECDECDEDEEEFGGGHGHIGHIHIIHIIIIJIIJIJJIJJIIIHIIHIIHIIGHHHIIHIIGHHGHHHIIHIIIJJIJJJKKKKKKKKKLLKLLKLLKLLKLLKLLJKKJKKIJKIJJIJJIIJIIJIIJIIJIIJIIJHIIIIIHIIHIIHHIGGIDDFCCEEEGGHHHIIIIJJKKJKKKKLKLLKKLKLLKLLKLLKLLKKLJKKJKKIJKIJKIIJHIIHIIGHIGHHGHHGGHFGGFGGFGGFGGEFGEFGEFFEFGEFGEEGEEGDEFDDFDCDCDDBCCABCBCCCCDCCECCECCECDECDEDDEDDDDDDCCDDCDEDEEDEEEEEEFEEFEEFEEFFDFEDEDDEDDECDECCEBCD@AC?AB=?@<>?:;>78:34635779;8:<:;=:;=:<=:<=:;<9:<:9=88;55834733712513624736857:58:57978:689578578578467356346246014,,0&' %%)((, ,/**.((,**.* /**.)*-'' %&*'(,'(,&' &&*%&*%&*$%)$$)#$(##("#'
3<<bLjB.ND_
9l%X>
.feef6h
f\t.PY?
3bR%d
L_uv-S}
o?.ec
`g=%c
]%CXGZ
*.aRtl
dM{%XU
.VZHC
jxD%X
[g%6s
%8À",i
CSs%U
'Je%S
jMw%D
jq%DU
\%CXl
7)4(>8 .
.6.aQXlP
.cdSsMA_
.lKnea
()./.* *,)
*>&3:25"
4.nal
a).lbl
It.NJ
Kn%f"&
$VqZþ ]W)qe
471)/5-?5-
.LI JN-HL.
~%xnE
->8$)$<5
.mO.m#h-
-4=$:'$:
1* 6(()445<,-00
.LPWo\
%f"7_2"*`
.Drygbi;":
5),*18<)$"9$:5$
.'667../6!?&.
udpX
5-2832$[
U;&%U
.teSW
5=3.!>*:.2
%Xz.11
. $'61'.).8\
O 0%d
%UC}#
5=?)%/19'>
MR*.DY
Hx.nA
y.AU"
Oy.ut
49:?5>?3116:<2
7.Nc]
cmdm
u-S}0
uExe
ziuekEYKE
?Bcmsg
%x[20u
VVV.^\
.imA3
D%1XK
.gisbe|x
pic/AUG-A.jpg
.vwak
pic/AWM-Red.jpg
! "'&"$$
%U/wd%2
#%#!!%!!
N.uXM
sL%u'ju
.hl\!
K.mv l
x%u3 
xi$.rSm
.jm Y
r.bC.
UA$%F
A:\"H=^
.kd|AZ
1]/%SV
.XWTtN
t.HrrE
pic/FEI.jpg
/< 0(8$4,
~.ZYT
.Jf{f.
pic/G3A3-SS.jpg
..FNrn
~U%c\
=$46.>!1)9%
-T}iX
LtCp
pic/JIA.jpg
-7.Fw
#%FVBEW
Q,5.Co
Ê"'`|
.nCF#Q
{<.Pl
fD.aj 
M%dk<
%X?Swe
/W.gs:A
%UE9'
pic/M4A1-PING.jpg
[ %Us
%SH3;
pic/M4A1-QT.jpg
!1.#!&&!
:>2.oh
L%uzCZ
pic/M4A1-red.jpg
pic/M4A1-S.jpg
s.MmSmI
t.UJj
O.nD(
,Oo).Qq=(
.klt:
pic/M4A1-T.jpg
pic/M4A1-TGC.jpg
!w.lt
pic/M4A1-X.jpg
y.kg}
$M.xW
*y.Mm
 0dNv%8X
Q.xBmJ
.uUa&L
\7.FXz
.Je}S
%C!>a*Y#
f.ren
.kFo}a
3?O)zj1x%C
:%Ue|
g\?.XPgQ
.mk?)W
.Nr;*]
oE.cm
$($,"%-# '
Z<!V.hjW
%8uqr
%XMBr
].YT]
ÍP!
uU%u'EuM
%UU5%%
P<.vB
hX.Kw 
pic/M60-A.jpg
>l.FDZ
pic/min.jpg
-9%5-=#/
<BxCmD
pic/PSG-1.jpg
pic/QBZ95-A.jpg
i.Re~
& $"$ &"$"!&&!
*  (,.!%-
pic/SUZY.jpg
pic/Thumbs.db
.ozL~
4.DF[
& oIP%u{
r.zib
%.uq*
qay.mp
%XrfGK
,{a2.Ml
.Xm(tqv@$M
%sV3%'
i^O%S*t{
pp.bY
6WeBi
.O~
F:\KyTyp
.zp7d]u-
*Q%Uu
z.NJz
stJSb%Uzz
A2T%d_
_nl%FJ
B.zl~;
%s8PC
8Fr.Nl
 x%X7
`.IC?
*%d;2
?084<95=3;7
0z.UZ
)OUVlpZ4%X
9%c Wx
y!.LN3
.tzmL3D
AK47.jpg
AWP.jpg
Ddt%C
w.MDW
xo.EN
g#.VV
nW-P}
Z,
s6!%S
,[4%C
E.Qs\y
Y[.Lzws.%
.nb$'4M
[uˆu-
t.Eb'j,
32000112
OI.qQM
F=,Msg
-SS.jpg
:hf.iA
rOE.EJA5
V#%dN
Bp 1s.oJ
.eBbC
*;G.CM
v.Gac
h.WUMG
h(X.Kr%
9D.js
&wd%x
L_*%U
6).Us[
Y.vXV
HK2LI%p.ud
Wx~.cE}&
d.fFi
pG
E%cP ;
Wq.SMxC
?%Dv'
a.CXXz
C.tE8W
f~.TT
.Urv^
z.XOW
.bk/1?
>_%F]
%p.Xwg
V_%U|
.GAM9
\Úp
-Red.jpg
#""!" #!!
?>195=3;7
}%F[;
%F!i"
..Ae5i
l.aS|?V
4rlf9D!%X
s.n%D
x9:%s9
 &.fw
3M8weB
!AL%s
gt%uW
>.fy)
^\.hm
G.eMe
HVCrTlbQ
].cp*`
N.NlT
,{.aF
O=8%U8
3 jA%c]%?
;.Smr
.WWiRF
.bo_7
gef~%3s:
.zCCe
P.zb-
.eW_;
e.aN<5
}.HW)
;=.wd
se*
b-GSoD}6
RO.QF
 .Dg~
%.c~I
u%cz^
%SSAa?
/.OL0x
.fLH\
JH:%s
P9}%c
40%s.}
'h.atf
TnNNN.Nn..
wFY#%d
&S.ic}V7,
.UZ~S
w%/-%C}>
urlV
\)(.%*$$*%#))%))#.
9M8I%d}
MSGWSs
2zE%Ui[
}.MTc
AK-47.jpg
M4A1.jpg
a.ki,
0Mht%0sf
V.cM.
x%%Up
XM8.jpg
/.iW:
Hf%x_
Z#%u5
l6\%us
iTcP_
X%u K
X.JcY
N%X=a
xkt.Rk3&
%DZ6t
.RTDc
AWM.jpg
O&keyk{m
'}|}@:::
-RPK.jpg
b%U2p
Ïn2
' "'&"$$
fk%fY
 ]%u"
:sM%seC|
C:\pic.zip
!!!$$$,,,.../////////---   ************   ,,,,,,   ******      ,,,***            ******      ,,,,,,         ,,,,,,,,,,,,,,,                  ,,,,,,      ***   ***      ,,,,,,***   ,,,---,,,   ******   ,,,---------,,,   *********   ,,,,,,   ***))))))***      ,,,,,,,,,,,,,,,---///,,,   ,,,,,,***   ,,,------,,,,,,,,,,,,,,,,,,,,,         ,,,               ,,,      ***,,,,,,,,,,,,   ,,,---,,,   ******         ,,,,,,,,,------------      ,,,---,,,,,,,,,***((((((,,,,,,   ***,,,,,,,,,------   )))***,,,,,,*********)))(((***(((***   ***(((((()))(((''''''&&&%%%%%%$$$$$$$$$%%%&&&&&&(((***)))((((((***(((%%%$$$%%%'''((('''&&&''')))((('''''''''%%%%%%%%%%%%$$$%%%%%%&&&&&&'''%%%%%%&&&&&&%%%%%%%%%%%%%%%&&&%%%%%%&&&&&&&&&&&&&&&''''''''''''&&&%%%$$$$$$%%%%%%&&&&&&&&&&&&'''''''''((('''((((((((()))'''(((((((((((('''&&&&&&&&&'''&&&&&&&&&&&&&&&&&&%%%&&&(((***(((((((((((('''&&&&&&&&&&&&'''(((***)))((('''((('''&&&&&&'''((((((''''''''''''(((((((((*)),*)- *., /-,0.-0.-/-,/-,/-,/-,., -.,,, ***(((&&&'''(((((((((&&&'''((((((''''''&&&&&&&&&'''%'(%'($&'$&'&() "#DFGkmnmopIKL'))QSSNNO667!""%$&012,-.778IJJ:9;133** %&'$%&$#%"$$&&''&(%$&'&('&((')(')(')(')(')(')(')((('''''''''''''''((()))(((((((((&&&'''((((((((((((((()))))))))(((((((((((((((''''''''''''(((((((((((((((((())))))))))))))))))))))))))))))************)))))))*()))))))*())))))))))))))))))*********         ****** **-  ,*) ****** ))  )  *     ***,**,**.* .* ,********)**(**)  (* ))*)(*(())*)./-"''"*1#1>"7I$?Q&EZ-Mg6Uq>\uJcuH[j9FR(2=
1? 5G';N.BT8IV8GP1:C&.5
!!!%%%***,,,---...---                           ***)))***         ******   ,,,---,,,   ******      ,,,      ******         ***   ------,,,   ---   ***   ---///...---,,,,,,...---,,,,,,      ,,,---......,,,------------------......///---,,,            ,,,---......,,,---......---   ***      ---//////......------,,,         ,,,---------,,,,,,,,,---...///......------,,,,,,,,,,,,,,,---,,,---......---,,,   ,,,,,,---......---------,,,,,,,,,,,,,,,   ,,,------,,,            ,,,,,,   ***)))((((((((((((((((((,,,***)))'''&&&&&&%%%$$$$$$###""""""###$$$%%%''')))*********   ***)))))))))******))))))((('''&&&&&&&&&%%%&&&'''(((((()))''''''((((((((((((''''''''''''&&&&&&%%%%%%%%%%%%&&&&&&&&&'''&&&%%%%%%%%%%%%%%%'''(((((()))'''&&&%%%%%%%%%%%%%%%%%%%%%%%%&&&'''''''''((()))((('''''''''))))))******)))'''%%%%%%&&&(((((('''&&&%%%%%%&&&''''''''''''''''''&&&&&&&&&&&&&&&&&&&&&&&&(((((())))))(((&&&%%%&&&&&&''')))(((''''''&&&&&&'''((()))***(((   ...//////1/.20/31.30,2/ 2/ 0/ /.,., ,**((('''&&&&&&&&&&&&&&&&&&&&&'''''''''''''''''''''%%%%%%'''***(((!!!<<<ddeoqr -.HKLprvqsvUXZlmq}
(,!(-#)-%*-&)-&).$(. %-
4G!<P(EZ.Lc2Qk4Ur8^
8T =[Û)Ii-Oq2Vy8`
.........---,,,------...---------......,,,*********   ---,,,***'''''')))***)))***   ---...//////............---,,,,,,,,,---------,,,,,,,,,,,,,,,---,,,,,,,,,------         ------,,,,,,,,,,,,,,,---,,,,,,---///...------------,,,         ---,,,                              ,,,,,,      ***         )))))))))))))))))))))***   ,,,   ***************            ---,,,      ******)))******))))))'''$$$######$$$&&&)))   ---//////......---,,,,,,,,,,,,,,,***   ,,,,,,,,,,,,   ,,,,,,---///...---------......------,,,   ,,,,,,,,,   ---......------///---......//////...---------,,,,,,,,,,,,---------......---,,,---......///...------------///...---,,,      ,,,------...------------------------------,,,,,,,,,,,,,,,,,,,,,,,,,,,,,,   ,,,,,,,,,,,,   ,,,------...............------,,,,,,,,,,,,,,,,,,---------,,,,,,---------,,,               ,,,,,,,,,,,,   ,,,------------,,,------,,,)))   ,,,---,,,   ((('''&&&&&&&&&&&&&&&&&&''')))***))))))((((((((((((((()))************)))***)))((((((((())))))))))))(((((()))))))))))))))((('''''''''&&&&&&&&&&&&&&&&&&&&&&&&&&&%%%&&&&&&&&&&&&&&&&&&&&&&&&&&&'''&&&%%%%%%%%%%%%%%%%%%&&&&&&''''''&&&%%%%%%$$$%%%%%%%%%%%%&&&((((((((((((((()))(((''''''&&&(((((((((((()))'''&&&&&&'''(((&&&&&&&&&&&&'''''''''&&&%%%%%%''''''''''''''''''''''''''''''&&&''''''''''''''''''''''''((((((((((((((('''&&&&&&&&&&&&((((((   ---.../..1/.20/31.30,2/ 1.*1.*/- - * ))'''&&&&&&&&&&&&''''''''''''''''''''''''''''''%%%''''''&&&"""&&&)))...QRS|}
*1! 3" 4# 5$ 5!'0"%0 $0
&9 &.&'%-,!''
^^dkkqiioTTZcdhxy}qrvmnrqsvkmn[]^lnoprsacdfhicefGII:<<<>? -.HJK?AB578245*,-')*) ,*,,(*****&&&&&&&&&%%%%%%((('''&&&'''((($$$&&&'''&&&$$$   ******   )))***,,,   (((---***''''''**** * ,* ,** ** )  ** *  *,,,---      ******   ,,,((('''(((   **** )  *  * ,****)))((((((''')))))))))))))))))))))))))))))))))))))))))))))************)**(**(**(**(**(**(**(**(**(**')*)( *),*)-*),)) ')*%'(%()$()$)*&* %*,$*,#*,#*,#).#)/$)0%)0&*/(*.((,&',%',$',#(. &.
$-'*( , * 
[]apswWZ^OQUdgktw{uw{vy}mos`cgmpsegk^adgjnjmq/25jmqmpsjmplorXY] -.HJKacdRTU
!"*,-(**&(()  (** ""&&&***((()))   )))&&&%%%***'''"""
%%% ###)))---"""(((------***---&&&('(, ,...(())(**) )()&%'.-. *,)))(((***,,,***))))))***(((()()()))))*))(*))))))))))))((((((((((((((((((((((((((((((*((*(()))))))))))))))******)))'''((())))))***(**(**(**(**() **.**/**/**.)*-)(*((*'()'((())(()()))**)***  , ,-,--,-,,- -,*.*(-(% &$ %$*&"*&!)'#*)$,-#-/  .  / ,0
(5*36&*&&,%!&&
000000000000/////////...000...///000111000,,,******   ---/////////...000000000222333111///...---,,,------------,,,------,,,,,,                  ---         ,,,,,,   ,,,------))),,,......------//////...,,,------,,,,,,---............------,,,         ,,,,,,,,,,,,,,,   ---...///000///...---,,,,,,***   ,,,,,,,,,            ,,,      ,,,,,,---......------,,,,,,,,,------------------------......---------,,,---...000111000///......---,,,,,,,,,,,,,,,************         *********---.../////////......//////000222000000000111111///.........000000111222333111//////000222000000000000000//////......///111111000000///....../////////---...//////000000///......---//////000000000111000//////..................---------------............///000111000000000000/////////000222222111000///111000///////////////......---,,,,,,,,,,,,------------------------------------,,,   ***)))))))))(((((()))   ------------            *********      ,,,...---,,,         ,,,,,,,,,                  ***************      ************************)))((((((((('''''''''''''''(((((((((((((((((((((((((((((('''&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&((('''&&&%%%%%%%%%&&&&&&&&&%%%&&&&&&%%%%%%%%%&&&&&&&&&&&&%%%&&&%%%%%%%%%&&&&&&%%%%%%&&&&&&$$$%%%&&&&&&&&&&&&&&&'''''''''&&&&&&&&&&&&&&&&&&&&&'''''''''((('''&&&&&&&&&'''&&&&&&&&&%%%###$$$%%%&&&&&&''''''(((((())))))***   ---...0.-/-,0. 1.*2/ 2/ 2/ 0.,., , *)))'''&&&&&&'''((((((((((((((((((((((((((((((''')))'''&&&'''&&&'''...FFGedgddjoqxWYaWYasu}}
PQT/13#%') ,')*')*'(** 067>BCJGHODEL<=D0/7((.%&*&' (),*,-&()'((******()''(&* ) ,* , *) )(*)() * ,,-''(&&'$#$#"#$#$%%%)))'''))),,,))))))((((((**)(''-, ,**,**-,, **-,),-),,)  (  '.-)/,*. )- (-,), *,**, *-  -* -**.  . ,. ,. ,-* .**.**.* -))-)).)*/**/* / *- *.*)-*)**)( *(  ), ), ),,),*( )) )*,) -))*') %*,&,,&--%.,'--%-,%- $  %)*('**'* '  '  & ,& ,% -# ."*. *.
3J.Ia:Uj6M] 2<
,,,((()))    *,
#/lUv
111111000000000
222222222222222333
444333333
.BO.Mb
111000000111
---,,,   ,,,   
***   ,,,
222111///
000111222
444333333222
111111111222
222444333
333333333
222222222
333222111
222111111
...---...
111222333444444333
111000222
333333222
000000222
111111111
000000000
111111111222222
111///...
---000///
444333222
111111222
222111222333
"""&$$("#&$%("#&!!%
333444444
222111333222
222333333
111222111
---///...,,,***
,,,---...
555555555444333
444444333
000///...---
333333222111111
333222333
444444444
111222111000///...///
222222444333
222111222
555444444
222333444
222333222
111111000
000111111
000222333
333444555444444
111111222333333222
222333555333
...///...
   000111
222333111///...
111000...
444111///
000222444333222
444444333222
111333444
///000222///
222333444333
111...---///333
333111000
333222111111000
333555333333
111000...///000222444555
111222333
111222222
222444555
444666777666555
445223001102
223102101
555222000333
444555444333222333
444333222333
3332222224445555553333337775555555555554441112224446668885553332222223332222222223336564453231010/0////////////.--,**-,,-,,,* *()'%&)')-*.1/2526667777666566566677566455344455576265465587487232,/.-/.010333555534424534434534434423434545333111000000111222111122233244444222111222222222222222222222000111111111111000111111111000000//////...//////000000000///........./////////...............---------...///000//////.........------------------------......---...---...///...------)))   ,,,,,,---,,,******(((((()))******)))(((((()))***)))(((((()))***)))))))))************               ***))))))))))))***))))))((())))))***))))))(((((()))))))))((('''&&&'''((((((((())))))((((((((()))))))))(((''''''(((((((((((((((((((((((())))))((((((((())))))))))))))))''*)( *), *., /-,0.-1/.20.30.2/-/- 1/-1/.., 10/-  )(('%%$$#
,,,---///111///000
4351020/1102546768
324/.0.-/2130/1213
102102213/.0
--.,,,   ,,,---
333...---111555
444111***000555
###)))   ,,,,,,   ---,,,      ***)))(((((((((((()))(((''''''''')))            ,,,,,,,,,,,,,,,               ))))))******   ,,,------------...,,,)))(((((()))*********)))******)))))))))******))))))((())))))))))))))))))***   ,,,---...///---***)))         ,,,---xxx&&&...ppp
! (&&,*)0..643987::9998777555444333333222222222222333244244344555333333111000111333444555666888666555444444444333222111000///111222333222111111111000///000000////////////000000000000222111111111000111111000000000000000//////......------------000///......---,,,            ---,,,,,,,,,,,,,,,,,,      ,,,---      ,,,......,,,   ,,,---************))))))((())))))***,,,         ,,,,,,*********   ---,,,,,,,,,,,,,,,   ******)))   *********         ***)))(((***   ***)))(((((()))))))))((('''''''''''''''((()))))))))************************      -,,/-,., - *., 0.-31042131031020/1/.3101/.., 1/.CA@?=<., $"!$#""""
~~~}}~}}
!###%%$&'#$$"#&'( &(  "%,.1}}
422200200533<::?===;;:88866:88;99<::=;;;99977866866745524746857746524524746857857857;8:857524413413524635635535324334245245245134134245023,./ -.245.01023467689245.01.01012223324413413413524746968:79:79:79;8::79968:79;8::79857746857867644754754643532532754865754865:87865865754532310532532532654444333333333444444333333333555555444555555333111333555333222555444333333444000...333444111333333444444444333333333444222---000111000//////111111000...000555555555666:::999888888;;;888999999999888555444444666777:::777111///444999666666555444999111444777555000333333333333444777888777666555222111111444444222222555888;;;888666555444333555777777777777999:::999999999888888777888:::9998887867869:8:;99:9897464142243364586786654976976865976<:99765321/.0.-/---  /--200644644866:88;9998756434201/-., ,** ) ,*,- -.,./.000222333333333333444444333222555666777777777888999999777777888666777666666555444444555555222444444444333333444444333222222111000000000000000111111222111000/////////000111111111000000/////////............//////---..................---------///...............---------,,,   ,,,      )))))),,,------,,,...------...///---   ***   ,,,---,,,,,,,,,---...---------......---,,,,,,,,,,,,,,,,,,,,,   )))         ***)))((()))      )))   ******))))))*********)))''''''(((((()))))))))((((((((()))***         ***   ,,,,-,.--0-,2/ 2/ 2/ 30,3/.40/20/20/20/20/20/31020/310=;:fdcKIH., %$####
, ,- ,/./534<:<?=??>?=<=;:;?=?@?@?=><;<;9:=<==<=<:;989:8:;9;;9;<:<><>@>@@>@=;=<:<<:<B@B:9;5351021/1202535879:8:99:3565784673562453565785782451344671342455789;<8:;57824502312498:868757535435657879979979868435646979:9;;9;979757646646757444:99=<<<;;877654877:99988877988877876876877987766544433655666666888999999888666666777999===:::999777666444555666666555333555777999;;;999666777777555888999888777555333444555666777777666666666666999;;;:::888555222555555444444555777:::===???;;;777555444555666333000...///222222000000444777444444333333111444666555333,,,555777888;;;;;;999999999999888888666444222777;;;;;;:::888777666666777777777888777555555:::;;;999888889;;<<;<;;<9:;9:;9:;7995675766765676776876874876996:95985886879:88864320/.-- -- //-10/432664543554776887886654554554665565675353242242353354132021/10/10......---   ***   ------,,,,,,   ***)))(((&&&$$$&&&)))   ,,,111222555666888999888777666666666444444444222333444333222222555333222000...///111000000///000000000000000111222333333222000///...............////////////............///.........---......------,,,---///...---         ,,,,,,            ,,,------      ,,,---,,,      ,,,---------,,,,,,,,,,,,,,,---............------,,,,,,---,,,,,,      ,,,,,,,,,   ******         )))***            ***)))))))))((()))******         ************   ,,,,,,,,,,,,,,,---././/.2.-2/ 30,30,41-41.41.41/41041020/1/.20/20/1/.,**caa[YY?=<'&%"""
#(&*,/124786:;79:578578578799;=>9;;79:79:8::68946646668879935568879:578356245467689578467466688899999777444333555777888888555555666888999:::999666333333000---***)))&&&######%%%(((---   ...///......000//////111555777666444222000000000000000222111111111000000000000000000111///...---,,,   ,,,---...///000111111111000...------------,,,---------,,,---......------000...,,,---...000000000000///---,,,,,,,,,------   ******   ***   ,,,---..................000111000...---   ,,,,,,   ***,,,---.........---,,,         ,,,,,,,,,,,,   ***   ,,,,,,---,,,   ************   ,,,,,,---,,,---.........---------.--1.-40/50-61.61.61.72/830842843843621732411200200.,,MKKb``ZXX?==///&&&###
'%'.13;02:/19./7*.5' 2#(. $ 
"""%%%&&&''''''&&&&&&&&&''''''&&&$$$$$$%%%%%%&&&&&&%%%%%%%%%&&&&&&&&&%%%%%%%%%&&&&&&&&&&&&%%%&&&&&&''''''''''''&&&%%%%%%$$$""""""###%%%''''''&&&%%%&&&'''&&&%%%%%%%%%%%%&&&%%%%%%%%%%%%%%%&&&&&&&&&&&&%%%%%%&&&&&&&&& ""#%%$&&%'''(($&' -.IKLhjkz|~
~}}||}||}|}}|~
}}~|}~|~
}|}||~}}
}}}|||{||{||{}}|~
}}}|||{|
!)!#*&(/,.5.08 -3%',"$)
~~}||~||~}}
TUV-/0,./,./-/0,.//12/12.01-/0.01.01-/0
TTV,-1./3237358-/0.01.01.01-/0.01/12.01
RRT**0  1  1* /()-'(,()-)*.* / ,0* /* /
PPS%% %% %% $%)"#'"#'%&*()- ,0 ,0)*.* /
$"#'&' )*.) /)*.*,0
"&!$(#%)$&*'*. -1
"& #'$' ),0
!%!$(&)-
"'!$)#&*$'  #' #' #' #'
Y[]7:?36;038.16.16,/4.16038/27*-2-0525:
Z[]<?C<?C;>B:=A47<58=36;038.16.1625:149
~}~}|~~}~~~
::?::@228228117339
005117117//5117
..3//5//5--3006
--2--3,,2  1006
--2,,2))/  1228
--2,,2'(-,,255;
/04015* //05:;?
11,661883-.)
''!660*,&
txwfigY[YPSQLNLFIGDFDEFEFFFEEDAA@===;;;98976664310-0/*//*01,:;6BD@CF@jje
ux|lps^cdAFGDLLHNOHOOFNNDLLBJJAHJCJLFNNHPPKQRMRSMQRLPQJNOINMILLHJKHJJLNNJOOKNNKMMJLLJLLKMMLMMLMMKLMKJLJLLJLMHKLEIJ?CD>BC267166@EDQVUPTRPRRORQLOMDGE9:823101/342675342342564786786897676222..-., ('$&% %& (*$24.HJDDE?``Z
''!'&"#"
))#, '*)%)($"!
--*442110))')(%*(&(&#
%$ '&"%$ $#
'&"32.A@<LKGONJKIEC@<8511.*0-)/ (.)&-(%-(%.)&/*'/*'.)(.)*% ! &&<97QMKURN^[UtrjyxnaaV45 78.STJpqh
#%%)   -.]_`
  %//),,&%%
44.HHBSSNKJFONJJJG<=;%&%
!! "" ""!""!##"$$#$$#%%$%%$&&%&&%(('))'(('((&((&))())((('(('()()*)))())((('(('((&&&$##!
/0 78412.9:6562* '
%%%"""##"###$$$%%%&&&(('))()))* ),- -.,./-/0.01.12012/230231341342563674563342342564564453342453564453453342342342120./-* '$%!451jje
%$ %&##$"
3(!;/'5("/"
zNhZ.LA
v{ynsqlnnmoowww}}}{{{wxvpqolliihdff_de\fg^Z[QCD;-.& ,(
NPQ&'(../OOOYYY=><695HLGeidjnhhldlsjnukinece_^^XTTNNNHMMGPPJVVP``Zllfssmmoiwystvpbd^MOINQHUXORVMTXO]_Wa^Y_[Vb^Yhd_okfqmhqmhrnirojspkrojspkrqkqqkppjppjqqkqqkpqiopfmnd[]RSTI_`WpqhQRI^^Wjieihd`^Zgd`wtpeb]TQLTRLfd\VUKSSH88,
J9$TA.WC1ZF5t`O
tyh.bS!QD
=7.faW}yn|{n{ylspato_yq_}r_
YB"bI,aG.dL8nYHyhXxjZpeSi^KfZFf[GeZHj_HxjJ
ltzhpvemsdlqclpenrhpujrwlrxlrwkrylrzlrykqyjpxlrzhpufmsbio^fk\biW_fU\cSZaPW^MRZJQXHOVGNUFMTHMVGNWHNWIMWGLUHMUHNSJNUKOVLQWNQYLQWJPVHNTGMSGNUIOTIPVIPVIOTIOVIOTGMSCIQAGNAGN?EL?CK>AI>AH?CH?BG>AE<@C;?C=@D=AD=@E=@E=@E<@G<@G<@G;@H=BI?EL?EL@FM@FMAFMAGLBGMAGLAGLBHMEKPEKPFKPEJNBILBGJAFIBGIBFHBFGEGGDFFEEFDEECDEDCCCDDDEECDCABBDDDHHHPPOYYXbccoooqsr
7 ö0K<6G<6A?7DF>>D:/5-$%
,&!//) 0) 2**0)*-&1-)2-*310.0.!'$
$#%XWY
('"77188333-53.75.64.42-21,20 22-32.21,/0*1. /. .. .. ./,/.-.0-//-0/-11-32-33-44.22,00*..(11 22,00 ..(22-33-22-21,00 /.* )%%"
$'!!("$,&*/ /1-2/ / (.-,)  
6x`%UC
#$ -.*!"
kvzgrvdprcmpclodmpforgpsjrulsvmtwovypwzqw{qw|qw|pv{ntylqvjothmsgjragn^bj[_fV\cTW_OU\MQYJNUFKSEGQCGPBEOBDNBFMDHMCGLBFKBFKCGLDHMFJOGLQHNSJPUNTYNTYMSXLRWKQVKQVJPUIOTGMRDJPAFO?DM>BJ>AI>AH=AF<@E;?C;>B:=A<?C<?C<?D<?D<?D;?D<@E<AG=CJ?DLBDNBDNCEOCEODFPEGQEGQEHPEHPEHPCFNCFNCFNCFNCFNCFNBEMAEKAEJAEJ@DIAEJAEJAEJ@DI?CH?CH@DIAEJCGLEINBGJ@EIAFJDILGKPJORMRVPTXSWZRVYQUVSUT[[Xkjc
#%3033*,,***
% % ()/,.2024210,0.-232033)--
y]^S.dV(
')$')#*,& -' ,')*'&'%()'* )* ))*(* ) ,* ,** )* ),-  ,* ,* ,* ,* ,** ))*(()'()'* ))*')(&('%&'#('#&'#(($(($'($)($%&!#$
"$%-//...
'%%@>>, ,
%&#--* )&%!
&'$)*' ,(-.*13.9;6?@<@A=>?<>?=@A?@A?>?==><=><>?=>?==><=><>?=>?=>?=>?=>?=>?==><<=;<=;;<:<=;;<:;;9::88:7::78:7:;8;;8:<9<<99;68968967:589457256156156133122/01.00-00-//,..*// //,00 00,11,/0 ./*/0 ./)23-/0*01 56/22.44/54/32-/0 1/ 22-32.21-01,64011,21-43.33.53/44/21-1/ 20-41.1/,1.,0. 0. 20-00,,-(-.(12,01,12-45033../*22.%&"
'('/0/4431/..*((" 92.nhc
2& 1#'.#))$'%&
1213558;;>;>?:==:;:;99=:7=:6::/23
iklEGH455***...TUSUVTTUSUVTUWUTVTSVTTWUTWUTWUSUSRURSUSSUSSVTTWUTWUTWUTWUUXVVXVUXVUXVVXVTVTOPL`_[hgckjfgfb_^ZGFB11/'(&)*(./-897BDCLNNRTTSUUPRRNPPLMMKKKIGGMIH=86?84ga\
w|}tyzqvypuxpuxqvyrwzqvykpsejm`eh\bfY`eV]aRY]NVYKRUHPSFNQHNPJPQJRRMSSKQRKPQLQRNSUPTXOTWPSXPSXQTYQTYPRWOOTNNSMMRMMSKKQGGMCDI@AF==B<=B;<@:;?89>67;55:349348137/26/26/26/27.16.16/2714936;47<37<37;26:15905804926:15:/48.26.16-05.1503714925:36:7:>=@D?CG<AD=BE=BE=BE>CF?DG?DG@EH@EIBFJDFLDFLEGMEGMEHNEHNFINFINFINFIMGJNFIMEHLDGKCFJBEIBEGADGADG@EF?CE=AC=AC>BD?DEAEG@EHBFJDHLFJNHKOIMQLOUOSYRV\WZ`Z]c]`f`ciaejaejfknimrjotmswu{
C@8/-Û:dc[}~v
!#"'(!&( %(
#$ $&"$(!$( #'
#% #'!%& #'
#$!$%"$&!#%!#&!#&!#&"#'#%'"$("$'#$&!"&
#$ $& $' $&
"&!$& $'
$ "$ "% "%"$&&)-
,  ^_`|~
#"$(&#'&!%$ $##'&"&%!$$"&%%)( $#
#"#'&$''#'%"&%!&%!&% %%
$$ $%!&&
#%!&(!&(
"$!$&!$&
"" #$!$$!$%
"# #$!$$ #$!#$##&#%'#%("#' #%!$& $%!$%!$&!&&#%'"&&"%'"%& %%"%&"'&
""!%%"%%#''"&%#&&%((%'(%''%&'%&'$&'&&(&((&')&'(%'(%')#&'#&'#&'#'(%')%)*$()"$&
"#"$&&()'(*%'(%'(,.0
10.YYY~
" *,, -*) ))**,  ,, -,,.-), #'&&(') )) )'*)')() *( )(***- -.-(**#%$"$#$'& - .0/*- (*)' *)-,(-,$)(%*)( ,).-( ,$('#&&$(()-,)-- $%$'(),-*./' ,
[]^2231/0422-**0.-31//0--.*02..1-.0-.1---*.-*/. // /.*-,),,(-,)--)..).. 00,// --*,,(/. --), ',,).. //,,-*-., ,*')'* )-/, *)**(.- -, ,- * ** )* *)*)#'$
$%$-/-))'/.-.-   ),,)/. **'))&  (, (  '**&  (,,*-, /,,,  ,**- *,,*  )*,) -),-) -*,-* -*,-*,-) -(,-( -' -',-'*-'* % -'-/),-' ,&,,),-)-,*-,* ,),*(* ', (,,(,,) ,(,-)* ((*'(*',,)) ''(%'(%)*&* &,-'--)--* ,),,)
* '340/.*- '/,(,)%'$
,)$2/*-*%-*%1.) (#*'" ($. '0-)0, -)( '& (&, '/.*..(..(..(..(//)//)//)//)..(//)))!() )*! ,#/0' ,# ,# ,#  #--'..(0.)0.)..(/,'-,&--'--'--'  %) %)*$)*$,-'22,.0*) %&'!''!  %/0'00)00*..(*)%
"$&'$&$"#
20/$%# !
UTU/-,31.41.95274.53,65-54 00#(45 44*72 62*72 73,62*40(40(62 73 62 40)51)62 73 61*51*62 62 51)41)64-64,53 30)1-&. $/ $3.'4/(3.'3/(3/(41*53,54,..&$$
a_[*($*(%URO
$! 3/,(%
^\[<:7@<7A=7C>8A=5?=3@=2<:.=<.DD6EE7?>0?:0@;1C=3D>4C=4B<2@;1@;1?:0@;1IC9KF<FA7?9/:4*?9/B<2@;1?90?:0A>4C@5?;0?9/D?5HC9>9/<5 <5 <6,:4*>8.=8.><1B@5?=320"'99.@?4=;0<:/=:/A>3EC7=:.30$53'85*75):7 97 ;8,<9/=:0<8096-:7.=91>:2;8096.64 53*53 74,74,64 53*42(20&<:0CA7=;120B(43(98-<:076,53*53 64,74,75,74 53 42*42)32)53 44 43 32*12(10'01(01(00&12';9/;:087-87.88/-,&!"
"" .-*52.(%
znaYMNF:KB6OG:NF:VNBQJ>NI<TPBcaSGE7@?1QPChfX\YLMK=RO@b^OliZYTFEA3GD5EB3?<.KF8JH9NI<PK?PL@PJ@KG=KG<MH>NJ?MI@LG?KF=JE<JF=LH?NI@MI@MH?KG=IE;[WLieZb_SJF:62'C@3TQEWSHLJ?JH>JH?KI@LI@LJALJ@LJ@KI?IH>HG>IH>II?LKAMLBMMCLKAMMCKJ@EE;ED8XVKUSHVTIVUJQPGBA8TTK
cWO=6.HF>EF<JKARRGRQEKI>NI@QNEQNHPMIPMHNLBUPA[U?c\>pgA
|ytojwqjpjaldZqj^oi[hcRqm\zwcigSb`KkfTpi[sk]ri\ogYnfXogYofYnfXphZum`
.0$12&-,!/ !3/'2.)1. 20,/,$51„!=8
11050./*%("
'#!(%$)'%!
 %!-'" $!)"
90%XOE
keYA<3,(!*&"RPOtstuuyrrwrswssxrqvonsllpjjnjjnklpkkojknhjnjmqilpilpjmqjmqhkocfjbeicfjgjnjmqhkohkphkpilpgjodgkbeiadiadi`ch`ch`ch_bg^af\_d[^cZ]bX[`X[`[^cY\aX[`X[`Z]bY\aVY^QTYORWMPULOTNRWPSXORWNQVORWQTYQUZOSXMPUMPUKOTIMRHKP
w~{qxuovsenkgpmhpmhmkjkiedcb_^a]\`^]a]\_\[`]\`]\^\[c_^a^]b_^ebahedkgfjhgjgfhedfechieehccea`b^]a\_`\]_][^\Z][X[YRUSPTRW[Y[^\Y^\adb^b`_cb]_^VYWWZXW[VY[XXZWUXTTUSTWSUWTSURMPLIJHKNJJLIIKHHKGHIGFJEKNJMNKKLGNNHHE@JHDONKQONJHHJIJKJMGGLBBHBAJBCLCFNDHOCIPCIPCIPEKRGMSGMRCGLEJNHMPHMPGLOEJMGLOINQJORINQHMPFKNEJMDILCHKCHKCHKBGJAFI@DH>BG?CH>DI?EJBHMEKRGMTIOVJPWKQXOU\OU\TY^W[`Y]b]`ecfkdgkQSU--,
-*Q*5.'4)
i8|d8r[3eP.YG QD-=4# &
PF=5,"90&H>4VLBUJATJAUJCUKDRF?VJCYMF_RJcUM_QI\MD_OFaQIbRKgWQcTP]PMWLHSKHTNJSOJRNJROKTQMVSO?;8>97FA>HC@4/,HDAOMIQOJSQHRPEUUFVTEVSEWTF`ZMe_Rf_Rd\OcYNj^TjZQeSJeOGhQIgLGlPKpSNqUOpXPo`Rg\N_UI[QG[PGZOFWMAXN?[R<^U9dZ6h`5ia0kb-pd.tf/yg2ye2yd2{d2|f1yc.x`,u] s[,rY.rZ4nX6cP5WG2OB3@6 .(!
%*)',,&((,./-./)   "!
STWSUWTVXUVXUWYUWYUWYUWYVWYVXZWX[WY[XY\XY\XZ\Y[]Y[]Z\^Z\^Z\^Z\]Z\][\\[\\Z[[Y[[YZ[YZ[Z[\Z[\Y[\XY[YY\XY\XY\WY\VY\VY\VZ\VY]WZ]WZ]Y[]Y\^[\_[]_\^`\]`[]_[\^Z\^Y[]XX]XY\UWZRTWNRTJLODHJCFICFJBEIADG>@C;=A:<@;<@9:?57;45:55:77;77<57:56;78<78<238359348237025.14 /1,/2,03 /1*-0 /1 .1 .1 .1,/2-13.14/14.14.04/25036026/25/14,/2,/2-/3-/3 -2),1) 0'*/%).%(-'*/&)/&).( 0*-2( 0'*0( 1*,1)*0)*/) 0* 1* 1()/().().').&(,&'-%',%',%',%',%',&(,%',$& #%)$&)&( (),'' $%*'(-HISGISFHSFHSGITHJUGJTEJSDIRCJQELSFNSHOTJOUMPWKNUJNTKOULPVLPVLPVLOVKOUKNUJNTJMSILRILR&( &( &( %'*$&)#%)"$)#$)#%)#&*#&*$' %(,%(,%(-%).'*.( /*.2,03,/3,/1/14035(* 
rG}oBzj;wd2t_,s\)u\*x].wZ.oS*tX4z`@}eIybI{gP{jUzjVvhVwj[ym`ynazod{sh|vmxtkyvn|{u
/% 2'!4*$4*%0&!0'!2)#4 &4,%4 %&
.'!1*%.'#,&",'$.)&,'%.)&.*'/ (1,)40 0 &1 &2,'4,(8/ 7. 4,)1*'.)&.*&-*&,)&,*'. (/,(!
(&", '.,)0-(0,&1-&1,%1,&3/(72 94-72,40*4/)71,2 &,% ,$ 0'",!
1'$6 (8,)8.)<3 :2*80)5.(4,(2 '1*%0*#0 "0, 2.
$! (##*&%)%#*&" &",'#.)$.)$*& '!
*'#,(#,)#
* .OQVOQVPRXQSYQSYQSYPSYPQZNQYOQZPQZORZNQYNQYORZORZNQYNQYMPXLOWLOWKNVJMUGJRPPR
<>@qvyotwkotkotkotkotjmsgjrehpcfnbemadmceoceoceoceobdnbemcfndgoehpfiqfiqgjr^_`
bac999TTTOOONMMOOOPOOOOOOOOONNONNPNNPMMPNMQONQONRPOPNNQOOMMMMMMNNNJJJNNNQSSHJK?BCadh
381086333
VVV.cf10999.com
2010062701
2010060901
1000004201
2010061601
2010066902
2010066802
2010066702
2010066604
2010066504
2010066004
3010000501
3010000401
3010000601
3010000701
2010069201
2010069804
2010069704
2010069604
2010069504
1000004703
2010074301
2010073701
2010074104
2010074402
2010074504
2010074604
2010074704
2010074804
2010074904
2010075004
\ESPI11.dll
.inidata
@.reloc
CNotSupportedException
CCmdTarget
commctrl_DragListMsg
__MSVCRT_HEAP_SELECT
RegCloseKey
RegOpenKeyExA
WS2_32.dll
COMCTL32.dll
GetCPInfo
GetKeyState
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
GDI32.dll
WINSPOOL.DRV
comdlg32.dll
SHELL32.dll
SWNPM.dll
.PAVCException@@
.PAVCArchiveException@@
.PAVCObject@@
.PAVCSimpleException@@
.PAVCMemoryException@@
.?AVCNotSupportedException@@
.?AVCCmdTarget@@
.?AVCCmdUI@@
.?AVCTestCmdUI@@
4"5(5,50545
8!8/878=8
3"32383|3"4
2 3=3Q3^3h3r3z3
4 41484[4}4
9$9(9,90989
<0=4=8=<=
2010057101
2010053601
2010044501
2010044601
2010037901
2010038001
2010042601
2010053701
2010042701
2010040701
2010049501
2010058801
2010024104
2010013804
2010013304
2010014304
2010009504
2010018404
2010014204
2010042204
2010010404
2010008504
2010014104
2010046301
2010046401
2010016303
2010016404
2010035303
2010012204
2010023004
2010015504
2010019202
2010015604
2010019402
2010019302
2010039701
2010039601
2010039401
2010039301
2010027102
2010027002
2010007104
2010012104
2010012803
2010012903
2010012703
2010013104
2010009904
2010010004
2010010104
2010006104
2010006204
2010006304
2010008404
1000001101
1000001301
1000001501
1000001201
2010028102
2010018904
2010037201
2010037101
2010014704
2010014401
2010018803
2010036001
1000003403
1000000901
1000001401
1000000501
1000000701
1000000804
1000001001
1000002001
1000002103
1000002201
1000002703
1000002903
1000003003
1000003103
1000003203
2010035504
2010008104
2010010704
2010007504
2010044804
2010037701
2010041801
2010011104
2010022602
2010056103
2010029504
2010044904
2010031004
2010028904
2010026704
2010042304
2010015404
2010009304
2010034304
2010047704
2010054304
2010054001
2010053901
2010054101
2010054604
2010029701
2010006004
2010051105
.zhmk
Y@{B96B3CAB-0728-11D3-9D7B-0000F81EF32E}
0.0.0.0
O'i%x
O%5U< -4
9*%Fh
[-6}FMN
tP.TR
][%xw
v.ok"
XP%Dy
k*)%F-I
236676333
l.MV5>
^F.se
hXXp://ui.ptlogin2.qq.com/cgi-bin/login?appid=1006102&hide_title_bar=1&f_url=loginerroralert&no_verifyimg=1&qlogin_jumpname=jump&hide_close_icon=1&s_url=hXXp://id.qq.com/
inflate 1.1.3 Copyright 1995-1998 Mark Adler
F%D,3
%*.*f
Afx:%x:%x:%x:%x:%x
Afx:%x:%x
iphlpapi.dll
SHLWAPI.dll
MPR.dll
WINMM.dll
VERSION.dll
RASAPI32.dll
GetProcessHeap
WinExec
GetViewportOrgEx
RegDeleteKeyA
RegCreateKeyExA
RegEnumKeyA
RegOpenKeyA
ShellExecuteA
oledlg.dll
WSOCK32.dll
InternetCrackUrlA
InternetCanonicalizeUrlA
WININET.dll
CreateDialogIndirectParamA
GetViewportExtEx
.PAVCNotSupportedException@@
.PAVCFileException@@
(*.prn)|*.prn|
(*.*)|*.*||
Shell32.dll
Mpr.dll
Advapi32.dll
Gdi32.dll
Kernel32.dll
(&07-034/)7 '
?? / %d]
%d / %d]
: %d]
(*.WAV;*.MID)|*.WAV;*.MID|WAV
(*.WAV)|*.WAV|MIDI
(*.MID)|*.MID|
(*.txt)|*.txt|
(*.JPG;*.BMP;*.GIF;*.ICO;*.CUR)|*.JPG;*.BMP;*.GIF;*.ICO;*.CUR|JPG
(*.JPG)|*.JPG|BMP
(*.BMP)|*.BMP|GIF
(*.GIF)|*.GIF|
(*.ICO)|*.ICO|
(*.CUR)|*.CUR|
%s:%d
windows
out.prn
%d.%d
%d / %d
%d/%d
Bogus message code %d
(%d-%d):
%ld%c
%s\ESPI%d.dll
hXXp://dywt.com.cn
[email protected]
 86(0411)88995834
 86(0411)88995831
Windows
(ESPINN.dll(NN
This is a runtime library file for EPL applications. The EPL is a software development environment. For details please visit VVV.dywt.com.cn/info
CallerInfoCopyCmd
SetIPPort
GetIPPort
"C:\Windows\System32\ESPI11.dll"
ProviderInstallCopyCmd
SockDataCopyCmd
SockAddrCopyCmd
enetintercept_fnSockAddrSetIPPort
enetintercept_fnSockAddrGetIPPort
enetintercept_fnInstallCopyCmd
enetintercept_fnSockDataCopyCmd
enetintercept_fnSockAddrCopyCmd
enetintercept_fnCallerInfoCopyCmd
hXXp://VVV.eyuyan.com
 86(0411)39895834
 86(0411)39895831
DelAllKeyValues
DelKeyValue
GetAllKeys
GetKeyValue
AddKeyValue
DSGetErrMsg
BiTreeGetCurNodeKey
ListGetCurNodeKey
ListUpdateNodeFromKey
ListRemoveNodeFromKey
edatastructure_fnMapDelAllKeyValues
edatastructure_fnMapDelKeyValue
edatastructure_fnMapGetAllKeys
edatastructure_fnMapGetKeyValue
edatastructure_fnMapAddKeyValue
edatastructure_fnBiTreeGetCurNodeKey
edatastructure_fnListGetCurNodeKey
edatastructure_fnListUpdateNodeFromKey
edatastructure_fnListRemoveNodeFromKey
1.1.3
VVV.dywt.com.cn
(*.htm;*.html)|*.htm;*.html
Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0)
HTTP/1.0
%s <%s>
Reply-To: %s
From: %s
To: %s
Subject: %s
Date: %s
Cc: %s
%a, %d %b %Y %H:%M:%S
SMTP
.PAVCOleException@@
.PAVCResourceException@@
.PAVCUserException@@
.PAVCOleDispatchException@@
zcÁ
c:\%original file name%.exe
#include "l.chs\afxres.rc" // Standard components
5.2.3790.0 built by: dnsrv_dev(v-smgum)
empty.exe
Windows
Operating System
5.2.3790.0
(2004-2010)
(*.*)
1.0.0.0


Remove it with Ad-Aware

  1. Click (here) to download and install Ad-Aware Free Antivirus.
  2. Update the definition files.
  3. Run a full scan of your computer.


Manual removal*

  1. Terminate malicious process(es) (How to End a Process With the Task Manager):

    %original file name%.exe:816

  2. Delete the original Trojan file.
  3. Delete or disinfect the following files created/modified by the Trojan:

    C:\pic\ëɪ.jpg (3 bytes)
    C:\pic\M4A1-TGC.jpg (1552 bytes)
    C:\pic\AK47-»Æ×ê.jpg (1552 bytes)
    C:\pic\M4A1-PING.jpg (6 bytes)
    C:\pic\¼ÓÌØÁÖ»ú¹Øǹ.jpg (4 bytes)
    C:\pic\ÍõÕßÖ®ÐÄ.jpg (784 bytes)
    C:\pic\AK47-»áÔ±.jpg (1552 bytes)
    C:\pic\Ê¥µ®AWP.jpg (6 bytes)
    C:\pic\M60-A.jpg (3 bytes)
    C:\pic\±ÞÅÚÊÖÀ×.jpg (4 bytes)
    C:\pic\¿Â¶ûÌØ˫ǹ-Red.jpg (8 bytes)
    C:\pic\ÂüÍÓÂÞ.jpg (784 bytes)
    C:\pic\ÓÄÁ鱦±¦ÊÖÀ×.jpg (5 bytes)
    C:\pic\¸£×ÖÊÖÀ×.jpg (6 bytes)
    C:\ESPI11.dll (122 bytes)
    C:\pic\ÒøÔÂÆø´¸.jpg (3 bytes)
    C:\pic\M4A1-ÀÇÑÀ.jpg (5 bytes)
    C:\pic\´¿½ð¾üÓÃÌúÇÂ.jpg (11 bytes)
    C:\pic\M4A1-Í»»÷ÊÖ.jpg (5 bytes)
    C:\pic\L86-ÑÇÂíÑ·.jpg (1552 bytes)
    C:\pic\G3A3-SS.jpg (784 bytes)
    C:\pic\ÁÔºüÕß.jpg (784 bytes)
    C:\pic\Barrett-²ÔÁú.jpg (4992 bytes)
    C:\pic\ÓÀ¾ÃAK47-»ð÷è÷ë.jpg (13 bytes)
    C:\pic\»ðÓ¥ÊÖÀ×.jpg (13 bytes)
    C:\pic\ÓÀ¾ÃAK47-÷è÷ë.jpg (2392 bytes)
    C:\pic\»Æ½ðM4A1-XÁúÎÆ.jpg (7 bytes)
    C:\pic\M4A1-»ðÓ¥.jpg (784 bytes)
    C:\pic\AK47-ÎÞÓ°.jpg (61102 bytes)
    C:\pic\M4A1-Ë®¾§.jpg (6 bytes)
    %System%\ESPI11.dll (601 bytes)
    C:\pic\À×Éß¼ÓÌØÁÖ.jpg (8 bytes)
    C:\pic\ÂíÀ´½£.jpg (4 bytes)
    C:\pic\5ºÅ±³°ü.jpg (10 bytes)
    C:\pic\°×ÀÇ.jpg (784 bytes)
    C:\pic\»Æ½ð-RPK.jpg (8 bytes)
    C:\pic\¼ÓÌØÁÖ-ÈÛÑÒ.jpg (4 bytes)
    C:\pic\7ºÅ±³°ü.jpg (10 bytes)
    C:\pic\À×±©.jpg (784 bytes)
    C:\pic\¾Þ´¸ÊÖÀ×.jpg (1552 bytes)
    C:\pic\FEI.jpg (1856 bytes)
    C:\pic\΢ЦÊÖÁñ.jpg (6 bytes)
    C:\pic\»Æ½ðëɪ.jpg (8 bytes)
    C:\pic\ÊÖÀ×-»Æ×ê.jpg (784 bytes)
    C:\pic\M4A1-°×Òø.jpg (12 bytes)
    C:\pic\AUG-A.jpg (7 bytes)
    C:\pic\¾¯¹÷.jpg (3 bytes)
    C:\pic\M4A1-red.jpg (7 bytes)
    C:\pic\M4A1-ÏèÁú.jpg (8 bytes)
    C:\pic\6ºÅ±³°ü.jpg (9 bytes)
    C:\pic\M4A1-ºÚ»¢.jpg (2 bytes)
    C:\pic\QTÊÖÀ×.jpg (6 bytes)
    C:\pic\M4A1-»¢Æ¤.jpg (7 bytes)
    C:\pic\ÁéºüÕß.jpg (784 bytes)
    C:\pic\M4A1-Ó£.jpg (5 bytes)
    C:\pic\M4A1-×ÏË®¾§.jpg (1552 bytes)
    C:\pic\ÁúÁÛ.jpg (3 bytes)
    C:\pic\M4A1-X.jpg (784 bytes)
    C:\pic\½ðÅ£×ù.jpg (4992 bytes)
    C:\pic\ÓÀ¾ÃMA41-õ¹å¾«Áé.jpg (13 bytes)
    C:\pic\M4A1-QT.jpg (8 bytes)
    C:\pic\ÓÀ¾ÃM4A1-À×Éñ.jpg (1856 bytes)
    C:\pic\ÜÔÀòAK47.jpg (7 bytes)
    C:\pic\AWM-Red.jpg (6 bytes)
    C:\pic\min.jpg (1552 bytes)
    C:\pic\Ê¥µ®AK47.jpg (7 bytes)
    C:\pic\ÌÀÄ·Ñ·-Ê¥µ®.jpg (16 bytes)
    C:\pic\À×ÉßAWM.jpg (6 bytes)
    C:\pic\»ÃÓ°.jpg (1552 bytes)
    C:\pic\ҹõ¹å.jpg (784 bytes)
    C:\pic\ÓÀ¾ÃRPK-ÅÌÁú.jpg (1856 bytes)
    C:\pic.zip (22433 bytes)
    C:\pic\¼²±¬ÊÖÀ×.jpg (7 bytes)
    C:\pic\²¨Èû¶¬.jpg (784 bytes)
    C:\pic\M4A1-Ê¥µ®.jpg (11 bytes)
    C:\pic\΢ЦÊÖÀ×.jpg (6 bytes)
    C:\pic\»Æ½ð×óÂÖ.jpg (8 bytes)
    C:\pic\õ¹åÊÖÀ×.jpg (5 bytes)
    C:\pic\·ÛÉ«AWP.jpg (6 bytes)
    C:\pic\Ml2l6-°µ½ð.jpg (784 bytes)
    C:\pic\ÊÖ¸«-ÏèÁú.jpg (9 bytes)
    C:\pic\¸«×Ó.jpg (4 bytes)
    C:\pic\M4A1-ÇáÆï±ø.jpg (5 bytes)
    C:\pic\KAC-Ò«Áú.jpg (1856 bytes)
    C:\pic\ÜÔÀòXM8.jpg (8 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\OXEJS1AZ\login[1].htm (97 bytes)
    C:\pic\»Æ½ðÊÖ¸«.jpg (8 bytes)
    C:\pic\ÊÖ¸«-»áÔ±.jpg (1552 bytes)
    C:\pic\Barrett-»ÙÃð.jpg (15 bytes)
    C:\pic\¼ÓÌØÁÖ-ÀÇÑÀ.jpg (5 bytes)
    C:\pic\ÓÀ¾ÃM4A1-ºÚÁú.jpg (13 bytes)
    C:\pic\JIA.jpg (1552 bytes)
    C:\pic\º£±ªÍ»»÷¶Ó.jpg (784 bytes)
    C:\pic\ÌúÇÂ-Red.jpg (8 bytes)
    C:\pic\GLL-°µ½ð.jpg (784 bytes)
    C:\pic\Thumbs.db (13368 bytes)
    C:\pic\¸ß±¬ÊÖÀ×-SS.jpg (784 bytes)
    C:\pic\M4A1-ɳĮ·ç±©.jpg (5 bytes)
    C:\pic\M4A1-S.jpg (5 bytes)
    C:\pic\´¿½ðM4A1.jpg (1552 bytes)
    C:\pic\MG3-´¿½ð.jpg (784 bytes)
    C:\pic\ÓÀ¾ÃÌÀÄ·Ñ·-ÁÒÁú.jpg (1856 bytes)
    C:\pic\PSG-1.jpg (3 bytes)
    C:\pic\ÓÀ¾ÃAWM-ÌìÁú.jpg (14 bytes)
    C:\pic\»Æ½ðÌÀÄ·Ñ·.jpg (8 bytes)
    C:\pic\SUZY.jpg (1856 bytes)
    C:\pic\µ¶·æ.jpg (784 bytes)
    %WinDir%\empty.exe (9 bytes)
    C:\pic\°åש.jpg (784 bytes)
    C:\pic\Ê¥µ®½ÚÊÖÀ×.jpg (13 bytes)
    %Documents and Settings%\%current user%\Local Settings\Temporary Internet Files\Content.IE5\S1IFODA7\login[1].htm (601 bytes)
    C:\pic\ŸŸìF—.jpg (3 bytes)
    C:\pic\¾üÓÃÊÖ¸«-Ò«Áú.jpg (15 bytes)
    C:\pic\Ìú´¸.jpg (784 bytes)
    C:\pic\QBZ95-A.jpg (5 bytes)
    C:\pic\Äá²´¶û-Õ½Áú.jpg (6 bytes)
    C:\pic\M4A1-ÇàÍ­.jpg (8 bytes)
    C:\pic\M4A1-·ÛÉ«.jpg (6 bytes)
    C:\pic\´¿½ðAK-47.jpg (13 bytes)
    C:\pic\»Æ½ðγ¹Ë¹ÌØ.jpg (7 bytes)
    C:\pic\ºÚÓ¥.jpg (784 bytes)
    C:\pic\M4A1-ÒþÏ®.jpg (5 bytes)
    C:\pic\XM8-Ê¥µ®.jpg (784 bytes)
    C:\pic\ɳӥ-ÐÞÂÞ.jpg (12 bytes)
    C:\pic\»Æ½ðAWM.jpg (8 bytes)
    C:\pic\»Æ½ðM4A1.jpg (9 bytes)
    C:\pic\Barrett-Ò«Áú.jpg (2392 bytes)
    C:\pic\ÓÀ¾ÃM4A1-ºÚÆïÊ¿.jpg (1856 bytes)
    C:\pic\M4A1-QQ»áÔ±.jpg (7 bytes)
    C:\pic\AWM-Ê¥µ®.jpg (6 bytes)
    C:\pic\°®Ö®À×.jpg (6 bytes)
    C:\pic\4ºÅ±³°ü.jpg (10 bytes)
    C:\pic\·É»¢¶Ó.jpg (784 bytes)
    C:\pic\Barrett-ÏèÁú.jpg (7 bytes)
    C:\pic\ÉóÅÐÕß.jpg (784 bytes)
    C:\pic\À¼.jpg (784 bytes)
    C:\pic\MG3-ÏèÁú.jpg (7 bytes)
    C:\pic\»Æ½ðÎÚ×È.jpg (9 bytes)
    C:\pic\ÇéÈËÊÖÀ×.jpg (6 bytes)
    C:\pic\ÊÖ¸«-SS.jpg (784 bytes)
    C:\pic\M4A1-T.jpg (7 bytes)
    C:\pic\M4A1-XS-Ò«Áú.jpg (1856 bytes)
    C:\pic\»¢Æ¤³å·æǹ.jpg (8 bytes)
    C:\pic\°µÒ¹.jpg (6584 bytes)
    C:\pic\Å˶àÀ­.jpg (784 bytes)
    C:\pic\M4A1-SS-ÜÔÀò.jpg (784 bytes)
    C:\pic\ÓÀ¾ÃÍÀÁúÄá²´¶û.jpg (1856 bytes)

  4. Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
  5. Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

No votes yet


Lavasoft is the maker of Ad-Aware, the world's most popular anti-malware software with over 450 million downloads.
© 2026 Lavasoft. All rights reserved.
Terms Of Use |   Privacy Policy


x

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Enjoy unique new features, lightning fast scans and a simple yet beautiful new look in our best antivirus yet!

For a quicker, lighter and more secure experience, download the all new adaware antivirus 12 now!

Download adaware antivirus 12
No thanks, continue to lavasoft.com
close x

Discover the new adaware antivirus 12

Our best antivirus yet

Download Now