Gen.Variant.Razy.42300_6ba3dc3eb1 – Adaware

Dynamic Analysis

Payload

No specific payload has been found.

Process activity

The Trojan creates the following process(es):

%original file name%.exe:464
mnreksb6ivb4jw.exe:1232
byxbcwhbn.exe:4252
wmbcvximtt.exe:5348
wmbcvximtt.exe:3460
mnreksb4qnb4jwayzaiml.exe:2532

The Trojan injects its code into the following process(es):No processes have been created.

Mutexes

The following mutexes were created/opened:No objects were found.

File activity

The process %original file name%.exe:464 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%System%\wzpkepbduu\tst (10 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\mnreksb4qnb4jwayzaiml.exe (7386 bytes)

The Trojan deletes the following file(s):

%Documents and Settings%\%current user%\Local Settings\Temp\mnreksb4qnb4jwayzaiml.exe (0 bytes)

The process byxbcwhbn.exe:4252 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%System%\wzpkepbduu\tst (10 bytes)

The process wmbcvximtt.exe:5348 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%System%\wzpkepbduu\tst (10 bytes)

The process wmbcvximtt.exe:3460 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%System%\wzpkepbduu\tst (10 bytes)
%WinDir%\Temp\mnreksb6ivb4jw.exe (35 bytes)
%System%\byxbcwhbn.exe (7547 bytes)
%System%\wzpkepbduu\cfg (204 bytes)
%System%\wzpkepbduu\run (10 bytes)
%System%\wzpkepbduu\rng (8 bytes)

The Trojan deletes the following file(s):

%WinDir%\Temp\mnreksb6ivb4jw.exe (0 bytes)

The process mnreksb4qnb4jwayzaiml.exe:2532 makes changes in the file system.

The Trojan creates and/or writes to the following file(s):

%System%\wzpkepbduu\tst (10 bytes)
%System%\wmbcvximtt.exe (7547 bytes)
%System%\drivers\etc\hosts (22 bytes)
%System%\wzpkepbduu\etc (10 bytes)

The Trojan deletes the following file(s):

%System%\drivers\etc\hosts (0 bytes)

Registry activity

The process mnreksb6ivb4jw.exe:1232 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "01 33 E4 96 E8 A6 8A C5 02 B2 C1 5E C1 9E 3B 33"

The process wmbcvximtt.exe:3460 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "EB EF B1 26 93 02 9C 84 85 65 CB 29 0B 52 D7 EE"

[HKLM\SOFTWARE\Microsoft\Security Center]
"AntiVirusOverride" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders]
"Common AppData" = "%Documents and Settings%\All Users\Application Data"

[HKLM\SOFTWARE\Microsoft\Security Center]
"FirewallOverride" = "1"
"FirewallDisableNotify" = "1"

Antivirus notifications are disabled:

[HKLM\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = "1"

The process mnreksb4qnb4jwayzaiml.exe:2532 makes changes in the system registry.

The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Cryptography\RNG]
"Seed" = "21 6F C2 89 31 05 BF 21 4C AC 4A EB BF FC 0A FF"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Debugger Defender Security Hardware Offline UPnP" = "%System%\wmbcvximtt.exe"

Dropped PE files

There are no dropped PE files.

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

Removals

Remove it with Ad-Aware

Click (here) to download and install Ad-Aware Free Antivirus.
Update the definition files.
Run a full scan of your computer.

Manual removal*

Terminate malicious process(es) (How to End a Process With the Task Manager):
%original file name%.exe:464
mnreksb6ivb4jw.exe:1232
byxbcwhbn.exe:4252
wmbcvximtt.exe:5348
wmbcvximtt.exe:3460
mnreksb4qnb4jwayzaiml.exe:2532
Delete the original Trojan file.
Delete or disinfect the following files created/modified by the Trojan:
%System%\wzpkepbduu\tst (10 bytes)
%Documents and Settings%\%current user%\Local Settings\Temp\mnreksb4qnb4jwayzaiml.exe (7386 bytes)
%WinDir%\Temp\mnreksb6ivb4jw.exe (35 bytes)
%System%\byxbcwhbn.exe (7547 bytes)
%System%\wzpkepbduu\cfg (204 bytes)
%System%\wzpkepbduu\run (10 bytes)
%System%\wzpkepbduu\rng (8 bytes)
%System%\wmbcvximtt.exe (7547 bytes)
%System%\drivers\etc\hosts (22 bytes)
%System%\wzpkepbduu\etc (10 bytes)
Delete the following value(s) in the autorun key (How to Work with System Registry):
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Debugger Defender Security Hardware Offline UPnP" = "%System%\wmbcvximtt.exe"
Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Static Analysis

VersionInfo

No information is available.

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Section MD5
.text	4096	829451	829952	4.44793	ec4959202c149ad1483f5cb865110346
.rdata	835584	323742	324096	4.79373	993e77e874964a28c6ebdf87d76350fc
.data	1163264	42372	7680	3.18906	0c5e28d35dafe60eb19651c2034cef0a

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Network Activity

URLs

URL	IP
hxxp://ableread.net/index.php?method=validate&mode=sox&v=046&sox=4a65cc03&lenhdr	23.253.126.58
hxxp://nailthere.net/index.php?method=validate&mode=sox&v=046&sox=4a65cc03&lenhdr	98.139.135.129
hxxp://melbourneit.hotkeysparking.com/index.php?method=validate&mode=sox&v=046&sox=4a65cc03&lenhdr
hxxp://naildeep.com/index.php?method=validate&mode=sox&v=046&sox=4a65cc03&lenhdr	74.220.199.8
hxxp://offercity.net/index.php?method=validate&mode=sox&v=046&sox=4a65cc03&lenhdr	77.233.245.245
hxxp://hilldance.net/index.php?method=validate&mode=sox&v=046&sox=4a65cc03&lenhdr	8.5.1.16
hxxp://threeonly.net/index.php?method=validate&mode=sox&v=046&sox=4a65cc03&lenhdr	8.5.1.16

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

Traffic

GET /index.php?method=validate&mode=sox&v=046&sox=4a65cc03&lenhdr HTTP/1.0

Accept: */*

Connection: close

Host: ableread.net

HTTP/1.1 404 Not Found

Server: nginx 1.1.19

Date: Wed, 18 May 2016 07:58:19 GMT

X-Malware-Sinkhole: Arbor Networks

Connection: close

GET /index.php?method=validate&mode=sox&v=046&sox=4a65cc03&lenhdr HTTP/1.0

Accept: */*

Connection: close

Host: offercity.net

HTTP/1.1 404 Not Found

Server: Apache/2.2.16 (Debian)

Vary: Accept-Encoding

Content-Type: text/html; charset=iso-8859-1

Date: Wed, 18 May 2016 08:00:13 GMT

X-Varnish: 562722624

Age: 0

Via: 1.1 varnish

Connection: close

<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN">.<html><head>.<title>404 Not Found</title>.</head><body>.<h1>Not Found</h1>.<p>The requested URL /index.php was not found on this server.</p>.<hr>.<address>Apache/2.2.16 (Debian) Server at offercity.net Port 80</address..

GET /index.php?method=validate&mode=sox&v=046&sox=4a65cc03&lenhdr HTTP/1.0

Accept: */*

Connection: close

Host: nailthere.net

HTTP/1.0 500 Internal Server Error

Date: Wed, 18 May 2016 07:59:20 GMT

P3P: policyref="hXXp://info.yahoo.com/w3c/p3p.xml", CP="CAO DSP COR CUR ADM DEV TAI PSA PSD IVAi IVDi CONi TELo OTPi OUR DELi SAMi OTRi UNRi PUBi IND PHY ONL UNI PUR FIN COM NAV INT DEM CNT STA POL HEA PRE LOC GOV"

Content-Type: text/html; charset=iso-8859-1

Age: 4

Server: ATS/5.0.1

<h1 style='color:#497A97;font-size:12pt;font-weight:bold'>500 - Internal Server Error..

GET /index.php?method=validate&mode=sox&v=046&sox=4a65cc03&lenhdr HTTP/1.0

Accept: */*

Connection: close

Host: threeonly.net

HTTP/1.1 200 OK

Cache-Control: no-cache

Pragma: no-cache

Content-Length: 6650

Content-Type: text/html; charset=utf-8

Expires: -1

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

p3p: CP="CAO PSA OUR"

Set-Cookie: SessionID=aae9bfff-c3c8-447b-918b-503e0c74ddb7; path=/

Set-Cookie: VisitorID=2a757f48-18b4-4efd-869f-e126640795a6&Exp=5/18/2019 12:59:31 AM; expires=Sat, 18-May-2019 07:59:31 GMT; path=/

X-Powered-By: ASP.NET

Date: Wed, 18 May 2016 07:59:30 GMT

Connection: close

<!doctype html>..<html>.....<head>...<meta charset="utf-8"/>...<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/>...<meta name="viewport" content="width=device-width, initial-scale=1"/>.. ..<title>Threeonly.net</title>..<meta name="keywords" content="cash advance debt consolidation insurance threeonly.net" />..<meta name="description" content="Find Cash Advance, Debt Consolidation and more at Threeonly.net. Get the best of Insurance or Free Credit Report, browse our section on Cell Phones or learn about Life Insurance. Threeonly.net is the site for Cash Advance." />..<script src='hXXp://code.jquery.com/jquery-latest.min.js' type='text/javascript'></script>..<script language='JavaScript' src='/js/standard.js?rte=1&tm=2&dn=threeonly.net&tid=1020'></script>..<meta name='google' value='notranslate' />..<script type='text/javascript' language='JavaScript' src='/js/google_caf.js?rte=1&tm=2&dn=threeonly.net&tid=1020'></script>..<script type='text/javascript' language='JavaScript' src='http://VVV.google.com/adsense/domains/caf.js'></script>..<script type='text/javascript'>..var pageOptions =..{.. 'domainRegistrant' : 'as-drid-2864613873876811',.. 'relatedSearchBaseUrl': 'http://threeonly.net/?ac=2&slt=8&slr=1&lpt=1',.. 'resultsPageBaseUrl': 'http://threeonly.net/?ac=2&slt=8&slr=1&lpt=1',.. 'pageLoadedCallback': google_callback,.. 'pubId': 'dp-demandmedia31_3ph',.. 'ch

<<< skipped >>>

GET /index.php?method=validate&mode=sox&v=046&sox=4a65cc03&lenhdr HTTP/1.0

Accept: */*

Connection: close

Host: hilldance.net

HTTP/1.1 200 OK

Cache-Control: no-cache

Pragma: no-cache

Content-Length: 6653

Content-Type: text/html; charset=utf-8

Expires: -1

Server: Microsoft-IIS/8.5

X-AspNet-Version: 4.0.30319

p3p: CP="CAO PSA OUR"

Set-Cookie: SessionID=03583045-3638-4961-a3b0-6c0313407cc0; path=/

Set-Cookie: VisitorID=dc3fa1c5-2b57-41b1-ba96-28afb8e2a1dc&Exp=5/18/2019 12:59:30 AM; expires=Sat, 18-May-2019 07:59:30 GMT; path=/

X-Powered-By: ASP.NET

Date: Wed, 18 May 2016 07:59:29 GMT

Connection: close

<!doctype html>..<html>.....<head>...<meta charset="utf-8"/>...<meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1"/>...<meta name="viewport" content="width=device-width, initial-scale=1"/>.. ..<title>Hilldance.net</title>..<meta name="keywords" content="cash advance debt consolidation insurance hilldance.net" />..<meta name="description" content="Find Cash Advance, Debt Consolidation and more at Hilldance.net. Get the best of Insurance or Free Credit Report, browse our section on Cell Phones or learn about Life Insurance. Hilldance.net is the site for Cash Advance." />..<script src='hXXp://code.jquery.com/jquery-latest.min.js' type='text/javascript'></script>..<script language='JavaScript' src='/js/standard.js?rte=1&tm=2&dn=hilldance.net&tid=1020'></script>..<meta name='google' value='notranslate' />..<script type='text/javascript' language='JavaScript' src='/js/google_caf.js?rte=1&tm=2&dn=hilldance.net&tid=1020'></script>..<script type='text/javascript' language='JavaScript' src='http://VVV.google.com/adsense/domains/caf.js'></script>..<script type='text/javascript'>..var pageOptions =..{.. 'domainRegistrant' : 'as-drid-2864613873876811',.. 'relatedSearchBaseUrl': 'http://hilldance.net/?ac=2&slt=8&slr=1&lpt=1',.. 'resultsPageBaseUrl': 'http://hilldance.net/?ac=2&slt=8&slr=1&lpt=1',.. 'pageLoadedCallback': google_callback,.. 'pubId': 'dp-demandmedia31_3ph',.. 'ch

<<< skipped >>>

GET /index.php?method=validate&mode=sox&v=046&sox=4a65cc03&lenhdr HTTP/1.0

Accept: */*

Connection: close

Host: naildeep.com

HTTP/1.1 200 OK

Date: Wed, 18 May 2016 07:59:34 GMT

Server: Apache/2.2.31 (CentOS)

Connection: close

Content-Type: text/html; charset=ISO-8859-1

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://VVV.w3.org/TR/html4/loose.dtd">.<html>.<head>.<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">.<title>Welcome naildeep.com - Hostmonster.com</title>.<link href="//VVV.hostmonster.com/media/shared/info/index/_hm/home.css" rel="stylesheet" type="text/css">.<link href="//VVV.hostmonster.com/media/shared/general/_hm/homestyle.css" rel="stylesheet" type="text/css">.<script type="text/javascript" src="//VVV.hostmonster.com/media/shared/general/_hm/home.js"></script>.<style type="text/css">..rollover a { display:block; height:27px;width:140px; background: url('//VVV.hostmonster.com/media/shared/general/_hm/cplogin.gif') no-repeat 0 0;} ..rollover a:hover { background: url('//www.hostmonster.com/media/shared/general/_hm/cplogin_down.gif') no-repeat 0 0; }..sub_bottom { background: inherit }..cbl { background: inherit }..cbr { background: inherit }.</style>.<meta name="revisit-after" content="10">.<meta name="ROBOTS" content="NOINDEX, NOFOLLOW"> .<script type="text/javascript" src="hXXp://cdn.dsultra.com/js/registrar.js"></script>.</head>.<body>.<script type="text/javascript"> if (window.top !== window.self) {document.write = "";window.top.location = window.self.location; setTimeout(function(){document.body.innerHTML='';},1);window.self.onload=function(evt){document.body.innerHTML='';};} </script>.<table w

<<< skipped >>>

Map

The Trojan connects to the servers at the folowing location(s):

Strings from Dumps

wmbcvximtt.exe_3460:

.text

`.rdata

@.data

%.Qfj

>.YG

xSSSh

FTPjKS

FtPj;S

C.PjRV

N`Mkrwau lmese qcjaphge imgefea ubm agmepemd mmpak pbogoe njmaipd fafpip bkl vpyuyosdi drmubc ceddalo gmafuvdr ravjoso tclag cogzoecie yntamdpuln paqpubf jdousefl hpbec hhjirif gja akbyowgbe oliuvkizal jnc vgm grujeuse jofgoscl cfdej amxja gfn ubjcume vmpeuo bzgau xle zfjog znjivrjig mmgobsb mjxu puof gdtazs pfegicn lgp szlem dduwebwboj jnm dlzoxconu idjdupizem gupwijfeta nsxofesveb znceqrf ajfopegt lmd lldi dtumojalr ahmcig gckell pbdafc ndsopm fida bbwe cjgeve ljra eibddanp lgxerkaede mql sldahau mvufogvjis oisksuabcw vtsea dtjucn yppab efoxoa bdsuzif gdkilcm icnzuye xbzolgwe oiswwucn bvyo hftiulsb pego ghrinfmaln vofocusvb otdj ftcugvg qljemdz mbcuagtcum tihbav srfe cjdai diavdig ngmogqalo fugp nfge dkje gclab xpif tvje cbki amfone clrevx qur fflaoa wuvca fcecis vlnogbcup nipwosa h

Yzep sniogibbxu duj rjca ludsex obrehupiu znoozulz zbcos gubmenjali afloranpu mhoooroade njikojnd bfbi tcge mcdusf jiucegef lffoidzrak jhgiq sshedglu jdto fddiefkr jcoamu eusrmiao xknadegto hkmuu dwlu nbviwcy hcelexfzij pmcojjmic lbtowb pce wrse ltjiu njtue xfbib gtvurlgi psciqdoj jnjuq bpoqifmga mdebaues bdbigqmev jhemaojs tls zpa vazeligi udfuekoxms glfucfj ssmojb ymjucaspa mrb gcs adu dlbeslace onnje vntojz igjgogjeel jwb fleojijz vfnaskbec jflo ultone sdzeiao udu riti zcducmga urcraggufe ppdasbfah dmhos euwktebs mlv pkmeljwes mcjeveg lsafof myneprla rjcusec xvg flih mypotacd dbkew idjronpnun exoxsuajj xvaixabd liuxdam vlacoiz bmgohq

KcmD

vddio bnia jmri mtveueunif tjdubmj ucd kogqaek llo cdh sco cbeca zfiob jglimpu vxviuuus ddzodpgem jpedu tlnixpi klvanmjil fcwaurrson ggar llinuees xgzasi ylijujpfom mbdabdlubp zzp xcil fmker cncotn dwp dolgole hbauroftno gjelanemdu dbdujgej gnkesgc yrluinfbe rfbufeuma kspa udlmobb ojqsaufbei ojq ckbasrba ihnlau lmre djgij pld eqdotibl keutniaj qsnoim rffiuuh fblaljfohe enjti cmdudesisu mlfu dxcuejhma mmnuibtde icxt cysu ffdozbcivp dwneb esocuafipd puejc svraemjfom tccijaf goemcesg ysziw fmmunhyuk lsvegytofr xovd bnbinazs aomj fmixaok jdcuepi uxsmefusi tzajiertgu lxzelz nblubxpehb gsnetloxoz ppau dcw bxjoyfja sfxacfaw btgil cbhiroszeb yqumodlwig raj touisliq lzu ifplujyhou nyme tipkefox efsyojym ekedroeao abce dbbigwv faecx gzmebfpag gzmi ccma lugcee gtkofnd atddaolrs polsoztsi auo uabby rth lyge:{

5^@%F

lurnajnnac nyfatcfew cgsojn nqdu zazdu bgofalsgub cwwek jggiow cjgofafoj dfubufwc lfgiwi sjt lfsixbjiab wsru glrag smpibg zccaof ihex niavrola cjfu rdzuo niga ljz ljbonlgu xqviec ozaioqsexf ngvucah pwc jysisn msg mubbeb tpo psjifz numpun odsdu oeptgogs jpmeozllu sgloc dbmufdex emjio efuaz tivf bzdomcpu ganlajf fzdinsfir rswosc cgya ecmucig mdn gfeeceo cwt eukdsaz cfocuodmdo lsogacbg nfyefbfua iodkusejac lornamlb tipbo iaffju pbdu mugciegz blece ftew rfvifgcowj oryraj lfnivsr jcnollun calzeecbc gkmijp pucuje mdteenjl whwafjeoxe sdcaofwrum ogorjojny grlusbluel uvgzifxe bsof yzlugpo iwbrukwq yesfejw dbb ygnee mypomvbua affid mqsezr mfnifug arduoiu jgli cijt ogbxo vpjao

eawl fldubz mep eadm fbgahrloya jznovadz jadg djb bxjun dszomsoosi xmjiyj fdr dbxickzog cmduuvi paj opcji jcholugjai qbp ipon gspa oailjpeoos uzj wfmovdda nnvapyn vvduttluri rorakolyya qug dfm cuetja jmfe dlde prarulvi usvmumbko nrpodmfoa evcgeijrb bds fxlacjno cbsufu pbvalqf imual lybefvdieo imac fgpolszo lmmuii pcqupzju oclsaxcfi jzcegrbu gyig hbbugnm ddhozpyi whu hwsiap pmnasaale bxubufrn ufredip dinc uosufecob wyh dru dscalf cdemaulb lgozonlw uktduidii pgdinnuzo sen crruf ppdum juikpim tlyiojwa ssjid cgnitrcegg etrdayl pbnedmufa frm cpagag pldudcqo oegumvoaq snbazndo zrc wbcigkqaea sblum liesfo mdpaptcem agznefjhu wttegjhu fxtij jktorpxi t

Zglfuqdufu zpeb cem cngawcupeu dla vpjiufnl objkafcne izisenoe fnuge mqtis dyzo bbz ndjeetawp frzobgo ept mfjos wigkuddove ddlu rqkemcu ryme bdlitxpu qmpau sjigaes uudu jcevulgm lra sju aubulzouf ogd cci lnbuch adf ejfgoa fmjojmt snepad umbo zmgufuenva jeecyadp flsofd deimgas igbwopj cgcilj kwburls ggc fxtan miip debpizvicu rhbifvjem ssgop pbgai mlzul mtlaglle incjei pmbaqgwecu lrjeyyqaci illfim tkcasv vycoejej akspajhg cscem dlnu dwmug agmvissyut rige bguc dpgejknij odpepa pfaduyk jbfel kszaaoog ccj jfnouh sunp nuyu sqgu ilbdi tbjex jibr fxbecjhelf fxlibgonia olta elau dnbodfpox gjg cftu bjfeatab xdsalloijo zzcugva mmjiogdp pckeir cxruvnati fsa tpsaqdig osjguni icmjilpeka fgwennp djdapcaofe chpopvqif laedam zijaouk kfad zad gdjuifnf tscaijm atpga wsdodiqj atJEB/

eIbmuofelrz avbcuf bfp ipmibuclo ubembel pdexo fsl bican pno diudxigxi zrnizgoej ddedeudp acer ppasedadp tdr mrl dedzibtpo cyzup legeoeyu bcjivu slnocnjusn vxbec lfsiavon cicm nseanuu ejolyoe bwq jfloq gjdurecjau lemofivnj dwagurnvin bijaev cms fiftactza sivx jbvufjd coiv vloavii jjleimouc igjlaico qgumu zsjenue mebnopkm pvsim vvlis gqxig abs kewup fogkooqns fem vbc giaebbe bbjuew tdfupl lpmumbzu leb jzr bnzarts vcfozcg gmm hsgetvr afcduyqjec eopzbipklu adnnujf bbwoj fvyojvuco vnja pesfirxhu zlcije clt qbnemifva wiluwed ucigti szzigqcoo bynedp fdji onkxiofj bal dae dgieti ijfe sjgua lpin lwa xrboc ifggu iojteki ihf bgovorrc blc xrb dpfaxugagi vuhdudb xslipflo wftotbi sovzand pjubob jdjep mecte dpbu yffoadtl rpnaczeha udzpokjt lyariy npnecngic wgzoe\

pbmesferuy iqjajosj cafyum cmpodmce xpouvuf svfons msgaj oasd micfogbvuu agvbaifdr nzdi jpye tetjevvc gyku ljnohymiru tlideztnu gwj cvgaclzos pgm qifevegdd umfe ppeeoma cbisakczu srjazipco eaabgj cfufev lbawul bruefabzos vmfo gsgi jlpovamkuo bvorof pzjujbemed vsnoio xneau smuiadopup ylariwobf jxieael blne ksqiyflak lbladu fde kzd upeg ikewjoiqdq oaddifacs eusncueg gomu mzlom nid xcfolrarir zgguif mtleijjv feusum qgi lbibuossv nmdedpj amluaca icgucerm taucacud upqjira gnzehnxae mjyi spfouispk nqilat nzje ekhpoudhje dln zzceatpbes fjnabmbib dbea plbofo jspipcle ikfref sdrajvfeb dhbekste rnzopwp admhajumwu lzbam woifsa fndibrr bcpelm cfdif pipinac ibqocuclri lalne pghennefef fvpEpT

UhW.SF|*

=1umdb mpciwrol mhhab zlesiin llqocdrit ojtibe uewed evovje avfl anbjo ufdebeg lfbe nqmayj llfoov fnduk snsiogfjoa vfjabcuduw ncfa shkavzd gxfondmims enncag nnfadp fmgo psg mjduecil brpesd dnpa cse rpbeadjle vrnex ppjio nzt bybavvda sfjenzf fdqicecz vdn feamnapnm npdujj sjlu bsjuusuv tpl revtebg qufgufe fmvuy osxipoogjb sfvegv gczae usbcip ylona unae hlloyi olle cnr ftsilpya dpfoksz bfqamlpo tfdu nfwoukd jgkuduf pitb czjaogo yzatalr pcapoafgbi cmcunnmeej iacce nhfafr gbcijpzo lmfubanob egoxfibn wipr tgi ditigugi iuvspelk snlixlh isoessubgb ciki jppiuunag ubfsierbw dpfiprg dydom ziai uqbcufibru rdbit unjfudpd sts ugjiloc ijgnui vpge sjtigihpal yqnir mhsodyvu zll vwliiddk pbseudezpe lfjok gxc glquamr gvp nad bmjorbw cjp pl

yfcuitq ohcisin dvbinbdu rjahep pzra nuqbugp mien udfozu obgesavzua jdob eojds aag eujpguaayr blq lsja xkjeedgxed qnmultok abb scadu kpu fgtelevfij cfnedn listixa scafe dfcufv jphajkm cnihado evrba albuvinbfi vasb hzeyevqnac zmtu qevraypw bbcof ofbjam qpn rffala vtkiblg ppogi dqicipgid gbketgjo utous ldipud gca tjritmz psejogczei mgmejngo cflejl afgdofj zicnadg dbjujf dselugeq zzbegc usrriegdn agn bbpadd oftvodf ggladncuon clfedl ftli fduilusvaz zmorablpep argmoplleo oexe mtwaetgda jdi ibddiecc efnloloope jeoutm tpporo atorc faffovr gpn ortcuj hckuflmoj tepjezd sft mphuffa buq ioanvboct orfnuf ojsmisb cenro fntudn lgsibgawox eraddiizw csjof qpceo gibfivsqup cgupizn fuyenedsc hfzivygi waltaar ubsbajhmia lpbogf nap nbfazd vatpao rgmipcruoa iccgovna ctpoelyqi ugjvis sjmibcmoy

yzru jjuilep edrinoi udlm pncaus fjiar fbtofminue bmoaijiuun vqudo sasficnj sgluujfmue cenm jicbufjgul lqciqlvi fjdo jrduj jxufifre tusj uvcgo nmjijwt mtn djpugl vpnigd kgxamljoma ogl vsceb dkta nbagujot cxla elgmuyac bdlosn iedugpi galepumnoj tfnoqmci gzeugulahv lto gbp utpta bqkockke gpib jvd emk fedi dumol cllegrgutu sndissra gnpuowg anucdund ljji pwdaxc yijjuk sotkollvo qzlec ndi zuemnefijd ofvpawt csdacnifoc oypelifl gdbiflo fojqommy frfadaa eujhisuipf iujflu smfudacpo sfipemhf qxbuo jkcoso oejag orf xdfosgv lbjovsla pudlocvoci gdmu dsb imjgaqj ayqbi mgyiogog jlticl kmiihedkp scfomelbe ipqd cgfuts oxder fnhovltijj cerco fepgecmd mimolahnn mfbij ffd bvvindf plteqi ghfo lpmufj eovidlej mjgue obxsasqz fgno sjjiufgbe nehbelfoki mikvaos ft

.nwjayq cxg eirs amiw ivw oorof dfnagcdac fkjibufvu qcdegkpa zwie bbri gtawiopfc yhhabxd ofcujuafj cti wjjounl zbmai mnlaoyvf adcodon cglisybo uyzj ulqciqumv gjuzu ssg ogfoliid dboyebbbaq exih fkbedpfa gqji cdwodgdi cfavaqmu qomv vasnejj pdjuoa rbju ciylaipdk lpxoljp aoqebaeb uluhzof jnbeccc dbdojig cmgim ktgong lgope cdomob qxibew kubg lfnacncodp cvvacmav vapfokj lpdoi pubbi tti mdge rdm nhsues ecmvupbla ouhznibf mjsefgipua bnzo wemb jbuijo pee gocmil hnmidztor cczasfa elscafpd jdoc giu fdg iccqew bjcoejre yxtagoos hzute fpjamg dru pgxefax cccoaiz igtoiqobjh assgop lyhain fjd cmzewuz labvacu lblaegzbas leccad eupduvupa midnoovd lwzosa gllayqm ekocmed sur

M*ogzbedhl lqnah btugufabj meerdeccuu bcojojjaja vfpafl hgsetzbe bjlin vjji popkum php fbmeze gjcepl fma tetcia ljmatr yxiiyuizc rbgi csc ytnonjxo ojfseu bbpaudoq isdguif tzujocnl hbreubmj pzbus nmenuohvp ueopicn xpr fsli ldzizzm poizfat crgoufdbu bfbeeef rbalaofn omlsurlmo claqaasjji tauclinj lvziufck gdipiimf ufjj olvwijncei gpt zglejiplia uyf dgxo jeidyufny zbgidlg jbeisobirc abff vjj ofm govvipsfi medpuc cncop ftje daancasv othatucp olizso dmhooqgsa xvfi bamugopnz lhm tcilaalbgi pvdoet vnapo ely uclvemm uxl oirpnut otsnatqili ftkeb vmzedggi hcpodimifi lelnaanql gdla luagzimbma dmmesxcod iiijtijapf egcrojss jbc jisqamv zqlilbfu ntirag scluzsf jsapuc o

aobwd lee tsayixmf cvse iulfsunzl ftriidg tjdibyrorg pwdiios ptjepdme kscu slnisatil fgci hgtijeabde gichusp julhiovtu rxabugr rgbedavd ugzutacfc djlo msje dalumumob pvusilmubo uflginyvor noiyul lhreinbd ieifp fule gvdol bdumod kdopuggsoy lmzar tbn sjde gtdorjx pzsabjbuv bngam sqweai nfobevupw jxrefylit lsenujy jjb ptjuvv iorbcuumo jhbayudz ushduodn kgejoziht itaw tvbotjn smsog sbdavsda gfboilnfa bam lsvaejva gbguvoy dfoosuope izo gfpumepm obopmasuu gnocezniri bsonudth fjbas veemguhnmi bnsub injoca kffil mameze ccne pgud lvnu dbnaemhp dyre tup grtag mmko ubgomada anoatbale ithbapof vjlobes nhzop ilelcon usvji umddojd egsl pqfulmyudd uibsyapp iljdolppo ljse nfjilwgi zntug iobds gbbigfj bdp flkeygeg ahotsae lafateb twla

ayeb blfibbzei blsax pvfikgw tcbifdjih pmfebo egrvonez cgfojjv sgdudcd usagiv hscufncu ctgiadzj rdoeziunzb vlfeccne bxg tbyuiv yvca bno vdaiv oiipginee jshojeunv fqrazglis apllerrm hiujhib duagju fkipuf jacy ldsamdm ecsfubao ezbmir jticogea pjwujf rkre apdd mczau jxe ygn tfj laj djuofangfe jsmadig roglas mcje gviveky pjlaghsi nfxupnpe gkawi zmioyufnvi rdbijlpio licneuj wms juwicilzo uolmsuhlmi zgsu dkbargs usf vfetaph coenqafq mjf agqoamegy izuiifc ldme qtpubqel ucgyoci opfvebbsik svk moen tlleg fdcovm cmduy vbv lav bcgifl oxsp laonzibg jbnadgvojp jvzaxi ggaloz ljcecffeqc lkci mmbaiqfus rass bbcuhxcacb afpriinran fog P

mml gmsofaic pdju ocl cmdabplu gzdunn dvgung yome gxjipcveg anclajdse fvgiykbed cglubnesa sapmee jjxiaulv zfmovfja nis nfadulgg tnm ssotucym puj pxcuuprho epn vld nlovo kfuganq rzwuld mggepacu isjvaogg egulj jib rnlota sryoqbad dbeta lnqayapf gnze fgkicl rbpocyj uzvxevul jbob oahig cuenug cvb oceijbes lclu bbs awu fglesvm aabpyu oog mainuzi uvk cof ecsnedgsu tcewai miojmeecv andligm zfdinsjozx esftiegmb cmweg ugblobteum xuxmema qjgauvdwu mimmavl eburso nansai ilfso nswus wwbaldcaj tgferfko geqkutpa odmvoddwos tvzijfip hwxenffuvu juuzf libde dxajawtco liezfixj lekhecu camobibiz ujzdiipbte useaajusod clpim gtb frbendbivg suofnisz mwme limgospaj ddook ikfla jftociblar farbor vuomisid okn zni cbj fknoclbag ltpetwbo fqnibvi fwso ejog g

\.uz!

..ld%

r'.an

nbog inz vopzo jceodeswbu rim mocme eje aynd fim nlzojddawr rjfizbli mygoxjbog suryiwe jjzihengoo snfobmiru dsyoygviu pzjegawop fjsopvono nle dptas lvovipic lnwebd yrjozarn upiyti dnm alufnaag vlnidpru yfgusnpaxd jcbuigt ansdatsla bmc flijogr shceixe avtqoy bbjug bjitijcu zmlalkdeju dtz esgciff myracbiva jjunun szjassfu dmkoprd iou dcso llsosb vvdigegne gjulo iiiifcasu vjnoc hqreultw vnbi fvjigqhojb jgfisfdag cdxise ncp vdcimf lxbubaibra rjbuoinjze voibpaza ffviyi uprb ryrateppaf fvrojgyu tbfenappic hms iicdnul caazukibe jbdosdj wpjemtofeg fsl nisda grg cmjutbze eai axggoupgga jddonssa namgif evw oas sjao jrcuv fyi tdheprwasa nevcanv vozudu mbr tdimeonqqa lbugupf oem fsguzkge mjlixblo jzsaok ffoijuoea ldtiz ujnfuueoi vbbehjgud smfiag

gvutujrpi fijuanec ejcvio dtdazmcerd nboreejhc eulni rdtili bnideljzan pcjilmme rraodu egykesi npufuhudpa vomn tbse lfa cndanzb hldaleji dbfa avkz gonb ncsiunnaj ndvoe glcoortx oamp fcgavddizu bwt xzzoznle dmjin ombgusc dbolopun hqr obtisu oecjnebs mllijmti lpgecujga gdij plumimadh jevcoeohr gkgecb fitsu hmferac cpgegyda pxmudk molci zgyu dleg anmwebht staii sqnodetda unncagn joj uocd svpescxa knsa bxsis wmfadsnojm fagop ftifuapf bfzupbo gbmed qwza hjdujl uimedjejm jiwopepf gnjeux lmcogclumb fffucgdev dubuq dsco csm mao zgg bvavio lcal iritb efqpi ilmbif igh llconungu bhi ofgdecsca umcfozr kwmoskg odykoacmpu pzcojdbu nuungi qrm dzbinbrup redijizbda srma rrgadme zdeeidofrz ndyudrle psyuchpe cceju dcajiqvx boyoqigcku abccimis

4rab uoywnigufe sgle zlaqeedhso aaibm cjucute xjpobzv hdsulv gccofum qokme gnjoj afgzeg tenatoo bgjob ktf kssoupdd rgib groo nboigomsg qbju sms ffpestxejm hizoco glbiut czle yscep rnra nbeiqumosa jicxuzbueo jircaib ozk pdifajffo oflk fkhezjd sedsosjj gnnoss mpamu kdgibwnuc gqri aiiajtvams nbm nspeb cmagetafbo icecno lgli smzufjcu opgsocr nkc jegef iduoaplio tmjiiallc ilmal cvtejpkib gddefnmo tasifa bdqo vfitoboaur uppbo nqtaf gdges daj dtaneiaglf pawsog xptaeer ieoo mim ltkusld vkeve mlcuazl gflavdnaeb ydud eunirc dmhawlni mfsahasco mzobibdhof efb otcmejdv pbsoadng vvnevcnu nmap ldb ongexib dbbei ifder bcjumzfo kpzeig jlbe cjcaegl uwdaifomk xdn vneuvustde bei dldiatzla jksuq zrraicjp satgufagp rclojnluf wpdayvba ejgji

cmjie ceenbus uddwu zpqox vddomz fblackwiv aagacdop jteoop liwvo gpfanrcuu zcbemmn gcpatpsiv nedcieleu pjovosmlep txefezmbue jiuzyaccui vpib psbec vuf gbge sdpag iesnkeviyu qjekeib frm ktjaiemsg pobvumvzem wddabedome mqsisn ljkoinv cdledxg penzofcil wbyo plojoduei gvnoxvj jblosugj sdxoz hpge dddu dbbojwlav abtedoempg pbg naqt gmfufbval jhbilbjije bdpa oanrsofcbu jnlof bvx kjkatnnox ggnoskb cdbeonivpi cfpu clcim llj qwl cjoelaimls ptsacnu zbpeii rrbops vsjiciql aslti dnvupr ugg lgteg tmrojp tlgokbbuus zyido ffnazebx liwl jxeagegu pss ing ignlutjpes jvp nah hthaf dtoeb kni lec plsoppokeu cjrohba ohnjafcta rfgeisjlez gsco{[Lz

N%gT%s

wea gszi lbj onz bbdif fikiiraru wdura ujdfersl heocdofeal anjfoln qnimee fdlurae oqwpadh jleb vrtolfvi gqivorce laccaout ogr oyrn yboupu gyzadw bbtotolvev bmesi lvfi llsunduog scgo ejcjobcito cco fpaseo oiocmjeppj rszaizdfu newzopnv jsjobplio youzuce lhr mwtifidj jgfoom smxo gmhu bgeg injkimz dfijibjevi rovaobaaud kiuxocelxu mpuxall juqd anfr iugzp otd assu xmitour nbadugjdup gvfewbcaj wpwewofbik pvleblvisb jnva movjopogg nbcihnn ojbt nvmo czmicn tzbe gjmuaf bjcacalc ncqo hbojunc jebnonlu jho tsriqafxo bigeso iyccijtfo pdbomdde icb pmj ldneooo alm scledqrezt gtwajd nnhafadbi gflosyvid xstiiujjbi ojmj xgfu vva aplsevuyap rdgonnralj jbfikkzeuf bxifeo msgobvb guemp evdjij eill bbfirlsodd imtvagua tae

epj woaaqhae bnluzn morhupsse lpgogz kbifidzif cfbori obfemopa mjg nhf lpjeclkoq bxyugv zejguwtha qcwok mnnuj jii lbusefemhe ucmdimrfi ecndil dcewodyula tctoc nxozat gdjoppsarz ntpumpa udd gpji ilfidexo laeayq poynigf easepuraeg qpziuombza ntduplg mnfoagj zsalujyd tdc bpoobufbv majvajb celku ssn bbcobdb moc mtpuuvdte lzfiqkp csadaeiaob eequmupisp bbneugsfew dpbibdl ngujonwvek glcull ujwfo gdun nclopuur lbec ogpjigjz mmdazaxos czanux ohpmaet uikgfo odmjoeslub viraqucpc gmiji ajpowopqad wgdistlafu lgf vabzils jwfuleppoc eha cgrujdgicp dufk wlm tlficacb bcnugjm jru eecwe zmwejmdog gndohlsodu octiodab lipqicnvo iolzpuunjb nma vvtagls fniejulrh mdacukurac bbt xjibuzbelu sfnei sjeqad gofpamd rlcohrf uuajzilofk ibpcopbz fbvau krseiiflbo jwy alecd zhcued zao pomnoc faopahiig sc

~ggaeb uned vtko zcaiekozu fqbeof fjk xmvo mfab nanliojn heqcod pnpujzf qgdaceecc iglzo zpjujpsu iiglgafqgu nud zzbaavo rrseelmzer gttu gbsum gwmujlbuld ezz bbvupgmib pjozubasf rcs dcvo rgv jscegu ddcogsmobn ltsucqx ogfmo chrejnmad bbpasjgow amzuzeinwl bsievizme vqga tbgi fpiexuxpu sma nbgeum ujufdudae acpfo pjcif wpt pddenglu gdnemgveb sbef eynnamb fadne tfuem drsujva xjrebcn gfana fvrepbkit tbvewnmi cjf uocaco lfovu vsnu sexvea lpipedmpef wmjibfi gmje ubfwusbzo qoldajgdao dhvimg pmayahb icnci lvotei sunguwr jfluawj fya jfcouvmago vmzeosso dujpok iemfofo dnd eut mbtimuabip klu mzjijpgam drlunakb kedmifdvam cxtuoplci efqfaf fbnuzawfuy mgnuucf xzt qjy fnbolq fgip mwj gbrotkadaq ifeinop uji lzyoceel nlyiircy foa ixeelbu lojvuebuf vdduofsv cgbop ldm )

ibgnuftd gbfoirul pgteslme uebj biztumlnuc sbok gudgacm uggsa faln kcdosfvatu abf qwsarpjau pjlozfla nodacenjv vbmoos fpusue xjo pexveboicf gkpaassjat ddoj jcleb aecnge uofduba ditfugfs dmma csc knwemadm flqu ypb qujpof puatdot jpgazfobuf grpu acfb jloanun ujgsai nnzofcta fjoi pweidim mbkuccek jaldanhgo pnsauux rbado obfxitjeri uhrfed mmfu mducosgm gfveql mgiq pbmeaikd puxsoszb mmrasjs dmboyefnuc ngmaminguf ftipo rupleoe zbto lhpucdv bbmohordux cayomu arlt nqfiv ezzgius drhifnaie dit clpe ycbosndof ool afa otclagt jfvamji nnde tgseszm sffi iwgjoidjn ujgz jzce ekwonifrm edardisnm idfieu qtf wcobaac qhjevs bocnatbb mdburlse gdvuar dowu iwcasodsf bvtov qsse azapxev botjot olwomuwn pjfirdja ndpea rd

rjlif fpzix irlkuc sbreibca ppitavgh ikqbadoz dflozgsa jdn xgfioc dgyusmi wirzijv dab ofnaiv rndidenf vrlamkbos uequ eswgagexxe ffxuxgtum ntpefamn sdogu ckd lriki fjcujtg ozahs gdneb yosv ihdgusdd edykuzm mdpaqo vnd lunjuj cskacfji flfuj otddu cmv kws xjbodf srqozsehi gdpasc bzjutsa lhr bbnigbd pbnezfhut pzgudtje nbbaad udpco mhpi usnbenwwi brtabv vogd mlcainmj rclolddoe biuzg epp vfg dsdi dszeo mojbadic pfjutflowx agibm agmewazm laofpaaug jrae pgitafec ldd siugz sozbiujmnu ogdlep aaxeec mfo iqdm fynog bttibhvet jifnuo mjpedk vadpijbdae qnetasto bmume slhae efemtarti fcdojp uyqsopu nivhox kgluq huubbo jhja fce smc jmpoa nabjamc

*"qffa onjbanfau woy jtko dcvemdniqd hpvagfikex ecfl stgaifb egjliifb nlcerfilo qrjeco lajz sfeg iujescang edqbapbd cjno usjga rdgo finkudaug eewrzapav seppazkmab fpdavyl jhsuxfogo sncuauu xzo twbowa cxneqjf vdl obhcuf iprlej ioec ddkacc mzdoedvpo zqejudp dvmuhlp hwelabg bivcin atbusagn cuncebcfum xgduvlcas znoujedib lmqudmpom ifl bglebgjinf buu kbbuffgu iljc sclov ccpeumbdam tjlo jsdar bptizjnuq gduioo djgemp elslayuqo ejcvee ujlvovewor tlpe ofbfiag cfbifc gsarua doxesumon dcfa fxpuoicy mbgind lnmampote aufwtubbge jodu cnfod ngbiwlp xaf cglo vijleot qfbuuj igdo ndjifrfecp cpcifjfawr gcy fae cjcupusnua pmbek miepb szdifgzo rjoluepslu aeo crd bjmu mjluwddar zcru iveuqfeoti ujfzae itoun ulsgoud wpcolfma kaku uptae udvof jpdim wlnonz,

.PsFu

?ieihcle goysa mdfor zieuf dtg cgalampum nfm zxaxa gvibaqgpu dgpejjfujn mcnifdsuba ssw loh xfl cwwidojg wjuubeub bdlujilcis gudu gacquhc zdmodrpi lmsodmopi ccsos wqopo mab bgwivebmol soneufioan uhnyonlxo rsbidvs dgpievkt ejlpok ejo nnowudpm afvcahgc cdce ldno zzmuavk dojjabg ccsebms txle emjiunaf zzbuife flve ecun vgepe vcpaibgr zlluctd ggpivco iaosai cwj eoau gpquo bvenegr oueiznz xjma ggdortisel cnpeetf giocxo gpvedibc cjtaklj upo scru idizmodpo flibornbud favtaiigf pild medtucpi njsaznuf mjjuqvifi tabfamrnaf cxcecgbam dbb dilri usvmo sbp dvd yhpauud diblalz baiueymo agtifo jsi nfjamr asta erpnowzn omf zcg obdo ztceebchob bdwu ojfojimmm a

;'buogpad fkzovlgo aegzhireo ouupfzo dnfojlima euabq lbsaalmmu jcv xcini tpnea psbi nuj gsgebuvye jaalg eycni buawmio fatfiu melxi lpvojxfef jmv fcojelch mzluorwebo nscue lziaiwof ygdipclum aojij tmudu vtauhenbxa blcuyngop jgojudh omfjejdm tamatig ssief xglormc tdcalkci lulsads lmdezj eiplsicb bjbe xfzimdiot mwdoczeyo lyrovmada vsuouifi deplonlz uhldegic kfnuvhhiz tbtonpfoi jdvoissn sftoqcis trhemglatc bvfiiz ahndavu pseha ibt lmlemjdujy ooizande gtfidu ljziobmfem fuugva sffect cxx eepdoj fls ffiyeki cffuucxl rlxuvmgozd lzjo omp sgqad gdpabpdu lcnachjuz dcji oeffjezhgo ldo ubdwehsj pmcosfcib orrbay hqg xjsoitdr afjsotg prce tmtamlp jqloff cpn gsedovk dmt lurr mgbepbmag mlap mesbesedu dkvub xottaqj nluep cojvosdfor pzli tyloswfo bjl sjc pgge gbego tbm d

rkbunv gddilayfig hdjibl dmna ruecpe qvpuifvyi jcfiustje nrcevudz fpbecr fpihiuqsfo lqnocbwebv dpjovbmoei tgegu eenxv udb dyuza wqaragnf dgcuibp qxcovn lrnind ispqiffd bobcoy bvemalclo cunmofzw srlojvgeo jmb rhifak fjodat cdmavzdar nsejilve dvbefjite bsy jrmoevmpu inppuzhlaa uqw gro naomqav dtpicrden fpku ojndoehi oonjpu bidloadcd czsuniitne pnaxijmz iodbibe wnv mcweglutoc evu jryazbv ulsazeip lssinamb ehzxu aofl mucjogncab sit osxovih vscirul kcleuo guy yilen lcimiofdj tjyagox uotcujouin azxga zjacuse ncnosbje vvlig ldne zdesosg pujneggdo mdbub cwbadsga votsic rpvibtzilt fdpaf nbvansdea ifupejipz smfo mtpo fghe qxkimbfo blgiwx yembegp jgdamr gapv sjmo wfofidgr wgh

[cxjag pogneja umlbemfdal dnpilo crfeeo vomjogc phv llvoi oxakjeddz txg dspeurzre tikt acbfut jlc sztadjn lam ldqitcpag amck panpit sgeozimfd avfliwelf fgf odgemebf allligon laivn puhlej smfujzj ice mlqewbrilu fgz sesbo ssed fmzenompid tuv elfecanafg lyduy fbajafss ccjeju bevbe epbrutdci gdkub beduj iupxrouab gpbugbsofl vphasx ccku emolxoijk usjafetgn rocsui dlhipzcumz uhgusu dlqi daaej alcz dgn ymxagwel obtyujtaq tvlieszde pispa zrriuc jeuefsoad erzucibisl cwgunfso xjsact rdfo cilaoj rdyijpv czwomb vmbeiz usrb cfs ocban sbuo rwjeo cuni dijveagomd ssjipz nfme cjn uprbormcu aecuwfejhr idprebeasp btxo lbtizfxaep nrfeiehc brrii uabegjoft oicd fbaegalmhi xdnuscdeds wcm gog nxgisdj fmialuijc cyoo oyzsejos lri dmafetzja ibrum tvhadb ctcoa iqcgeiqqs

lnafejdn jrluffdemp stfedpani utrbawrle jones lgjuxapdu frjol pxuc msgiu jsudu vcwilglifo cmjabeedz rsjaasvw qzma mfosompge ddiyo pcugup fdpegujse apbgusmp bqren srgu grgu bdcigcdi gnisogzo jmvinvkuj tnj acdludnga edd zlcoadwg ywlejlmars datge faba fluso mzje uaghrarji njzaovv lpvo tgsowam aubauwdas btapopp jbgejsqa tyujibn lwlujhmeja jwupu anjcad egctegio dmjeatbsoa hfgoosutat ncleuc gdnerf onmrun bld zcojugnn oazbgeni jgmufsb kagpedd xvlospniu ovacjia jsqekdidaf bcsa nibudenr mvjomnsopf luywu gfca pfb gucepiab cousa mmdovi hbf mfbozpama zgve nelwarmpa lpfexgh uvgsu sujmiz njge apfi zof gvcagztub pbutiifs ujbfo bildazbvum szcagamfo jhceoblci owzoeca sdmib vsfamjsax tersiuvb ego gzbe ckqudgoti mlkaknvemc fpe uyceofufsc jbpaa fcjesc dmkienajov imppolmic ipmzaC[;

xgebulegp bvsagofmeo elvsicgj jzb flbeoldm mtpotjlou pybuvqfoj ecbevug mybo gjmu ncjebgr mumfa cby jgdujk opungac ejcvab egr esy oeszruplre pdme nlijauzl zudpuzuect cdnuauxecp aemytaey bbaziskna avcged hspo abcsap fyzojejen dppu ukmca fdgadqtu sjjouwb oizb mfiyifd lftajry ampbuym lczixlyub jjgu dfhajnk ascmovlme reagf rpe rcse neejj fzmuy fqg fgiacenyr izyl pcduhc pmdaugcg mwju olbb sjmesvcutl leu bvxuo nazet zis blmimnq oslur tdluniac jallo hmizi colkexsm fubdihy gbda mdaupef kpihul tum zrrozn cbjaodo vfnebslali jjcavmde fjmiwluf pagcaue bhdid gdpagxf nqmussg rpbaht aufn bcbocebca eeosxogi jrme mdbordr sblamtka nne ieai stsacsfa zkfaquosse pednedofna zulzapljo tgkelgc macaheaeu abkpagoc fyzesuci"JG

zfrosotu xcaocif mjquj nbquo mobawiof wodg bankuiue oqx rwnibts rsululll suntiuncvo efj nnonoydlej rutosis tspineyr letpib gosegudj bvpizut suc aefuatafa cftig fcdepgp tgpugaifvu jziapi ojappe scgufgnagv gzlomostuv zojuj uuzpvumex zwwobfn ogbm lrpecay cdbew sxg hmgepfci ini mzecunlohe sbv eka qbxu slyarjpim nnruedbfa dzyexzyib fmrap eoabi jbbeagx aavlgezakc eswkiuppe dgsukdcitc otaodi jlgibcbaj obaaeatfu evxfo dcbo umdeti npiaqo cmyobo mgvuwbled jpih ccselpg euadnb jre lsdod decficl xnlodncecj bexrannmar bajrutpv bccacf ztniau jsbuzvjuz dcyifwki evjgudrcoy ltxu mlhogdvodo rvniqb henxuxm bcsurrge pjvajbbu bvdi pbpapdte nbou jgpetqimot pbwopk ntelutfj lkki nij wvhuf omg lnefauntun crtoe ptosoda

.CwPf

bibqocaafe mqla sfmuiusmja gfjivupuf bssihlu olhri noiu idcbiikjr ccwaiptpu cfzafgusoi pdluccbiz blvunijgi fcioga ivjdincf dnbe hnfofjge eagcgay jrmiqj daglacc jsdoacowp trci cfjuwa bibcougyec afccilmxo anrnu drje pliteuqi seso xgizur spcebsviwc vvzusdna jmlohvlic lfzaand poblamugdo cbpuluuemi trcofrq ppc zgdepoacge macn diamrimdju aompwotrc igjt nvfovtfas sncexf iev eifxsamv mdmajx hndadfra mlwupfj bdlefgcao hmo mbco ezf tmgaarpfev ccrontviil semcogs qcjorsfu spea dabpidf tagbafa uuaf vcyo vuuvpoe zfdambs nntusgopo rfceiivcea jzleofimb lze ulig gav iylxuws nucg ltmend nnqao vsosu zgp spcombyi aelu dqaug fvejiju ojfcudpgu ddze

.PTR,

YTsgcic emfmurvse zfnoweb ggbuglasew ptnacjza tpadi ajuxf onjeno vbkensja bphofbt aljvilgn jqvedsd sftup cojmazb ujiuccunp xzfono qsla evgwaasm cix jlbir gikd rwfosjlun snd hqdanvkiu qhfuec vgfoeb ghto xov rjjulunuhu tuiltu amdi wczejs ipff cubnikff pehboqtbu afkfaos fsawugg hglobld gdoa kfn gvcumszaes fnekuncso zcca sabwumdje kbnabls ethgazdr wkaagodcle fcrodgs qao fkeiqo wtuog lyvooxb iebzdoy ffzoisl qwlafummi vpsutazgu bsah csnuewzvov djpul onsg dsbuaxsf odsguls kcbatcl pcdef pdu bsronzbasb icupgobd edldasd ngbocvb foibfegp qap tcjivt ebedvu bduremsjas xsnibmhisl yjpo dhbima atspadpw yaijoiq frbefblig pbopumulg bpgaoal uvftijvnua rtlagtjoa nbna qgb sqfo lgcurn iaazckin pdejulmlu jzraz jjsaco mfgijds elauoffiu ikehgum kqyacg bcduuh vlgaqfad rlk eacomahimt pizbeuxvp dall

=.tKw

cmd.exe

Visual C CRT: Not enough memory to complete call to strerror.

Broken pipe

Inappropriate I/O control operation

Operation not permitted

portuguese-brazilian

GetProcessWindowStation

operator

GDI32.dll

GetKeyboardType

USER32.dll

GetCPInfo

PeekNamedPipe

GetProcessHeap

KERNEL32.dll

zcÃ

%System%\byxbcwhbn.exe

|.exe

wWATCHDOGPROC "c:\windows\system32\wmbcvximtt.exe"

%System%\wmbcvximtt.exe

mscoree.dll

KERNEL32.DLL

- Attempt to initialize the CRT more than once.

- CRT not initialized

- floating point support not loaded

WUSER32.DLL

byxbcwhbn.exe_4252: