Who Must Pay Bribes and How Much? Evidence from a Cross-Section of Firms