The only public installer (https://links.fortinet.com/forticlient/win/vpnagent) is an interactive-only stub that downloads an exe with silent args, so I thought I’d rev the download process to get the silent installer. But it’s very cooked. I guess they reused the firmware update protocol from their appliances???
At least the silent installer is simple, the MSI it uses is just a PE resource.
meta:
id: forticlient
title: FortiClientVPN.exe, not the stub
imports:
- microsoft_pe
- microsoft_cfb
seq:
- id: pe
type: microsoft_pe
instances:
data:
value: pe.pe.sections[3].resource_table.id_entries[4].subdirectory.named_entries[1].subdirectory.id_entries[0].data_entry
msi:
type: microsoft_cfb
pos: (data.data_rva - data._parent.section_virtual_address) + data._parent.section_file_offset
size: data.len_resource_data_entryPOST http://forticlient.fortinet.net/fdsupdate HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; FCT 7.4.3; Windows NT 5.1)
Cache-Control: no-cache
0000 50 55 54 46 30 32 30 35 30 30 30 30 01 00 00 00 PUTF02050000....
0010 90 01 00 00 40 00 00 00 32 30 32 36 30 32 31 36 ....@...20260216
0020 30 39 30 39 00 00 00 00 00 00 00 00 00 00 00 00 0909............
0030 00 00 00 00 00 00 00 00 00 00 00 00 6e d3 98 60 ............n..`
0040 46 43 50 43 46 43 50 20 43 6f 6d 6d 61 6e 64 00 FCPCFCP Command.
0050 46 43 50 52 00 00 00 00 30 30 30 30 30 30 30 30 FCPR....00000000
0060 30 30 32 36 30 32 31 36 30 39 30 39 00 00 01 00 002602160909....
0070 10 01 00 00 80 00 00 00 00 00 00 00 00 00 00 00 ................
0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00b0 00 00 00 00 00 00 00 00 29 cf ab d0 48 b4 0e 6d ........)...H..m
00c0 05 2b e0 6c 34 b1 bb 87 c9 4a 03 32 bb c9 bc 33 .+.l4....J.2...3
00d0 a6 75 84 4d df a2 f2 81 e9 dd 35 ca c8 13 a8 8a .u.M......5.....
00e0 49 86 64 bf c0 84 79 9f 7e 39 31 57 0f bc 95 af I.d...y.~91W....
00f0 aa eb 74 26 bf 01 f2 da 22 a8 8e 27 59 be bd f8 ..t&...."..'Y...
0100 cb 02 34 27 ff 2d 9b 5d f2 29 02 ec a2 83 04 44 ..4'.-.].).....D
0110 d4 82 34 c3 ca 00 81 b6 e2 1d 0a e6 29 c9 c5 31 ..4.........)..1
0120 82 ff 41 a6 0d e2 b1 cd 19 9c c4 e6 c1 19 de ee ..A.............
0130 57 88 a4 39 36 77 7a e4 6a 0f 38 97 ac fd cf aa W..96wz.j.8.....
0140 ed 1e 6d 02 11 ab 26 0e 5c 55 44 5a 22 7a 8f 1e ..m...&.\UDZ"z..
0150 89 26 2e 26 19 f2 c7 2b 31 19 7d 63 ae b9 fb 4c .&.&...+1.}c...L
0160 53 01 f3 6d ac db c9 70 df 41 55 c9 64 24 e0 a8 S..m...p.AU.d$..
0170 1f db fc 03 d6 1f 2b cc 64 6e 94 41 ed 59 27 9b ......+.dn.A.Y'.
0180 a6 f6 72 b0 04 ee e8 fc 50 31 39 97 1e 01 6d af ..r.....P19...m.
0190 cd 52 49 89 42 21 75 da bd 2d 7b aa 6e 69 b5 ec .RI.B!u..-{.ni..
01a0 7c 0f 85 36 54 42 36 2c c2 ff 32 b7 56 6c 69 3f |..6TB6,..2.Vli?
01b0 5c e8 d6 db 8a 1e ff ef c3 18 6d 2f 74 e8 f4 01 \.........m/t...
01c0 d3 57 93 d5 e7 c1 2e 9a 4b 24 0d 27 33 dd 91 8c .W......K$.'3...
0000 50 55 54 46 30 32 30 35 30 30 30 30 02 00 00 00 PUTF02050000....
0010 6b 02 00 00 40 00 00 00 32 30 32 36 30 32 31 36 k...@...20260216
0020 30 39 30 39 00 00 00 00 00 00 00 00 00 00 00 00 0909............
0030 00 00 00 00 00 00 00 00 00 00 00 00 0e d9 e9 12 ................
0040 46 43 50 52 46 43 50 20 52 65 73 70 6f 6e 73 65 FCPRFCP Response
0050 20 4f 62 6a 65 63 74 00 30 30 30 30 30 32 36 30 Object.00000260
0060 32 31 36 30 39 30 39 30 30 30 30 30 00 00 01 00 216090900000....
0070 b0 00 00 00 80 00 00 00 30 30 30 30 30 30 30 30 ........00000000
0080 30 30 30 30 30 00 00 00 00 00 00 00 00 00 00 00 00000...........
0090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00b0 00 00 00 00 00 00 00 00 7b 61 cc 7c c1 c1 e9 6c ........{a.|...l
00c0 05 2b e0 6c 34 b1 bb 87 03 50 66 72 98 00 04 84 .+.l4....Pfr....
00d0 4b db dc a1 dd 6b e0 7f 3b 15 2f fb a7 2a 51 ec K....k..;./..*Q.
00e0 92 f1 f7 5c 00 a3 f2 b1 0c 29 bb 1d 44 f2 d9 39 ...\.....)..D..9
00f0 50 15 ab 2c a1 b5 0a 7d 51 23 87 5a ba ec 1f a3 P..,...}Q#.Z....
0100 57 92 d6 3f e8 b5 88 c5 18 30 a5 9a c6 72 fe 55 W..?.....0...r.U
0110 44 94 8f e3 a1 76 85 7d c0 14 08 34 95 66 9d 62 D....v.}...4.f.b
0120 76 93 0d fb da 50 ee 32 b5 ed 2a 3e e0 fd d2 8e v....P.2..*>....
0130 cb 5d 21 c8 73 07 cb af 9c b8 e6 fc 03 86 b9 6c .]!.s..........l
0140 54 2e c2 ec dc 50 f6 77 dc 5c a6 dc cd 98 d8 b3 T....P.w.\......
0150 f3 76 b8 74 7f e0 90 10 d1 2d 6d fd a8 9f 87 58 .v.t.....-m....X
0160 5f c3 4c 03 53 89 71 c1 c7 61 40 d7 40 0f 71 4c _.L.S.q..a@.@.qL
0170 46 44 4e 49 46 44 4e 49 3a 20 73 65 72 76 65 72 FDNIFDNI: server
0180 20 6c 69 73 74 00 00 00 30 30 30 30 30 32 36 30 list...00000260
0190 32 30 34 31 37 31 38 30 30 30 30 30 00 00 00 00 204171800000....
01a0 bb 00 00 00 80 00 00 00 30 30 30 30 30 30 30 30 ........00000000
01b0 30 30 30 30 30 00 00 00 00 00 00 00 00 00 00 00 00000...........
01c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
01d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
01e0 00 00 00 00 00 00 00 00 fb a9 1b 78 14 7e d3 d0 ...........x.~..
01f0 53 65 72 69 61 6c 4e 75 6d 62 65 72 3d 46 50 54 SerialNumber=FPT
0200 2d 46 43 53 2d 42 42 59 32 2d 39 30 31 7c 41 64 -FCS-BBY2-901|Ad
0210 64 72 65 73 73 3d 31 37 33 2e 32 34 33 2e 31 33 dress=173.243.13
0220 38 2e 37 36 3a 34 34 33 7c 46 44 4e 4c 69 73 74 8.76:443|FDNList
0230 65 6e 65 72 3d 7c 54 69 6d 65 5a 6f 6e 65 3d 2d ener=|TimeZone=-
0240 38 7c 41 64 64 72 49 50 76 36 3d 0d 0a 53 65 72 8|AddrIPv6=..Ser
0250 69 61 6c 4e 75 6d 62 65 72 3d 46 50 54 2d 46 43 ialNumber=FPT-FC
0260 53 2d 50 4c 41 31 2d 39 30 31 7c 41 64 64 72 65 S-PLA1-901|Addre
0270 73 73 3d 32 30 39 2e 34 30 2e 31 30 36 2e 36 36 ss=209.40.106.66
0280 3a 34 34 33 7c 46 44 4e 4c 69 73 74 65 6e 65 72 :443|FDNListener
0290 3d 7c 54 69 6d 65 5a 6f 6e 65 3d 2d 36 7c 41 64 =|TimeZone=-6|Ad
02a0 64 72 49 50 76 36 3d 0d 0a 0d 0a drIPv6=....
POST http://forticlient.fortinet.net/fdsupdate HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; FCT 7.4.3; Windows NT 5.1)
Cache-Control: no-cache
0000 50 55 54 46 30 32 30 35 30 30 30 30 01 00 00 00 PUTF02050000....
0010 90 01 00 00 40 00 00 00 32 30 32 36 30 32 31 36 ....@...20260216
0020 30 39 31 30 00 00 00 00 00 00 00 00 00 00 00 00 0910............
0030 00 00 00 00 00 00 00 00 00 00 00 00 e0 2c 23 91 .............,#.
0040 46 43 50 43 46 43 50 20 43 6f 6d 6d 61 6e 64 00 FCPCFCP Command.
0050 46 43 50 52 00 00 00 00 30 30 30 30 30 30 30 30 FCPR....00000000
0060 30 30 32 36 30 32 31 36 30 39 31 30 00 00 01 00 002602160910....
0070 10 01 00 00 80 00 00 00 00 00 00 00 00 00 00 00 ................
0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00b0 00 00 00 00 00 00 00 00 13 74 ef af 20 d5 01 79 .........t.. ..y
00c0 05 2b e0 6c 34 b1 bb 87 c9 4a 03 32 bb c9 bc 33 .+.l4....J.2...3
00d0 a6 75 84 4d df a2 f2 81 e9 dd 35 ca c8 13 a8 8a .u.M......5.....
00e0 49 86 64 bf c0 84 79 9f 7e 39 31 57 0f bc 95 af I.d...y.~91W....
00f0 aa eb 74 26 bf 01 f2 da 22 a8 8e 27 59 be bd f8 ..t&...."..'Y...
0100 cb 02 34 27 ff 2d 9b 5d f2 29 02 ec a2 83 04 44 ..4'.-.].).....D
0110 d4 82 34 c3 ca 00 81 b6 e2 1d 0a e6 29 c9 c5 31 ..4.........)..1
0120 82 ff 41 a6 0d e2 b1 cd 19 9c c4 e6 c1 19 de ee ..A.............
0130 57 88 a4 39 36 77 7a e4 6a 0f 38 97 ac fd cf aa W..96wz.j.8.....
0140 ed 1e 6d 02 11 ab 26 0e 5c 55 44 5a 22 7a 8f 1e ..m...&.\UDZ"z..
0150 a9 7a a0 f4 ac ca 97 dc 48 2b e5 c3 c0 44 96 4e .z......H+...D.N
0160 44 d0 b0 49 74 d6 4e 79 ed 7f 8a f4 d9 3f ba 44 D..It.Ny.....?.D
0170 ac 6a 78 10 95 9a f0 fd 9f d6 e7 1a 12 e7 28 0c .jx...........(.
0180 63 4a 4a af 12 5c 0b cc 77 88 c1 c1 da 1d 63 67 cJJ..\..w.....cg
0190 30 7b 14 2d da ee d3 b0 99 32 94 ff d5 aa 52 b7 0{.-.....2....R.
01a0 bd 5a 94 3d 2a 4d f0 2b 96 52 a6 1e cb 33 b4 e6 .Z.=*M.+.R...3..
01b0 0e 40 74 26 19 f9 ec 4c f5 43 42 d5 0a 6c bd b7 .@t&...L.CB..l..
01c0 23 bd e3 f5 60 d0 a7 0e 2a 30 05 e6 5e a8 b6 8d #...`...*0..^...
0000 50 55 54 46 30 32 30 35 30 30 30 30 02 00 00 00 PUTF02050000....
0010 90 25 02 00 40 00 00 00 32 30 32 36 30 32 31 36 .%..@...20260216
0020 30 39 30 39 00 00 00 00 00 00 00 00 00 00 00 00 0909............
0030 00 00 00 00 00 00 00 00 00 00 00 00 a0 99 80 19 ................
0040 46 43 50 52 46 43 50 20 52 65 73 70 6f 6e 73 65 FCPRFCP Response
0050 20 4f 62 6a 65 63 74 00 30 30 30 30 30 32 36 30 Object.00000260
0060 32 31 36 30 39 30 39 30 30 30 30 30 00 00 01 00 216090900000....
0070 b0 00 00 00 80 00 00 00 30 30 30 30 30 30 30 30 ........00000000
0080 30 30 30 30 30 00 00 00 00 00 00 00 00 00 00 00 00000...........
0090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00b0 00 00 00 00 00 00 00 00 b5 1f 47 52 cc 4a 14 b5 ..........GR.J..
00c0 05 2b e0 6c 34 b1 bb 87 03 50 66 72 98 00 04 84 .+.l4....Pfr....
00d0 4b db dc a1 dd 6b e0 7f d2 d2 4a b1 eb 07 b5 f6 K....k....J.....
00e0 8e c4 62 48 5f 36 17 36 ff b4 82 ad 09 4e 99 9d ..bH_6.6.....N..
00f0 5e 89 1c 0f b1 e5 f7 f5 15 83 e7 a3 2f 83 63 21 ^.........../.c!
0100 b7 0f 22 34 73 9a 4c 56 2a 2a 30 e9 d3 c5 0a 61 .."4s.LV**0....a
0110 b2 50 83 ee 78 4d 31 1e 83 5c 2a a9 33 f8 20 f5 .P..xM1..\*.3. .
0120 12 6f 0c 70 7a f9 47 9c ab 5d 17 14 2b 83 b2 17 .o.pz.G..]..+...
0130 83 bc d5 a7 d3 36 38 6c d8 ef d5 e9 33 42 02 6b .....68l....3B.k
0140 1f a7 8a 2a a7 49 33 25 0e 99 ab cf 19 35 a9 63 ...*.I3%.....5.c
0150 7f f4 ca 15 d1 4f f0 f4 70 5b 0e 90 41 48 56 92 .....O..p[..AHV.
0160 5f 6b 24 08 32 90 13 c2 f3 9e 40 44 8f 18 fb 8c _k$.2.....@D....
0170 46 45 43 54 00 00 00 00 00 00 00 00 00 00 00 00 FECT............
0180 00 00 00 00 00 00 00 00 30 30 30 30 30 32 36 30 ........00000260
0190 32 30 36 30 33 33 37 30 30 30 30 30 01 00 01 00 206033700000....
01a0 e0 23 02 00 80 00 00 00 30 31 30 30 30 30 30 30 .#......01000000
01b0 30 30 30 30 30 00 00 00 00 00 00 00 00 00 00 00 00000...........
01c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
01d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
01e0 00 00 00 00 00 00 00 00 f8 49 4e 9b 1e 4a 9f 5d .........IN..J.]
01f0 ce 55 70 f7 90 d2 61 25 8f d7 e9 3e 2c 78 07 76 .Up...a%...>,x.v
0200 c5 33 15 99 93 dc 8e 6d 59 50 e5 fd 69 19 f2 73 .3.....mYP..i..s
0210 d1 fe 84 b8 29 04 aa ad 8b 57 ec 48 95 67 90 76 ....)....W.H.g.v
0220 91 49 76 3a d8 dd 8a d4 d0 28 b0 56 39 ed 0b 42 .Iv:.....(.V9..B
0230 2e ac 92 2b 49 a4 3f 09 24 7a 1f f6 6b 0f be 99 ...+I.?.$z..k...
0240 63 3c 54 40 3e e7 52 08 00 21 dd 41 8f 77 3a 08 c<T@>.R..!.A.w:.
0250 ad 0d 07 5f d6 07 04 db ce 85 ce d4 e6 b3 0f f2 ..._............
0260 4a 65 98 8e 16 43 50 07 75 2f a3 80 9b a3 57 52 <snip>
POST http://forticlient.fortinet.net/fdsupdate HTTP/1.1
User-Agent: Mozilla/4.0 (compatible; FCT 7.4.3; Windows NT 5.1)
Cache-Control: no-cache
0000 50 55 54 46 30 32 30 35 30 30 30 30 01 00 00 00 PUTF02050000....
0010 a0 01 00 00 40 00 00 00 32 30 32 36 30 32 31 36 ....@...20260216
0020 30 39 31 30 00 00 00 00 00 00 00 00 00 00 00 00 0910............
0030 00 00 00 00 00 00 00 00 00 00 00 00 26 6f 26 27 ............&o&'
0040 46 43 50 43 46 43 50 20 43 6f 6d 6d 61 6e 64 00 FCPCFCP Command.
0050 46 43 50 52 00 00 00 00 30 30 30 30 30 30 30 30 FCPR....00000000
0060 30 30 32 36 30 32 31 36 30 39 31 30 00 00 01 00 002602160910....
0070 20 01 00 00 80 00 00 00 00 00 00 00 00 00 00 00 ...............
0080 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0090 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00b0 00 00 00 00 00 00 00 00 1f 7f 3c ff ec bc 09 ab ..........<.....
00c0 05 2b e0 6c 34 b1 bb 87 c9 4a 03 32 bb c9 bc 33 .+.l4....J.2...3
00d0 64 51 b2 89 1f 0f ea 5b c8 87 2f 8c fa 2f 4e d6 dQ.....[../../N.
00e0 4e bd d1 9c 1b 29 d2 9c 07 55 5a 0d 88 51 ad 07 N....)...UZ..Q..
00f0 1b 74 4a f8 ad d9 4e f7 83 d5 81 0f 7f 5e 8d 1f .tJ...N......^..
0100 19 c1 dc 9f 3b f3 24 ba 3b d8 7a c0 85 98 d8 b8 ....;.$.;.z.....
0110 3b 82 ad 4c 98 d9 f2 ed 36 9b a0 8e 2e ad b7 c3 ;..L....6.......
0120 a3 8f 1c 9f 9c 4b 2c 13 0e 87 8a ee 2e 8a 24 10 .....K,.......$.
0130 d7 2c 34 4e a9 03 9f fc 64 81 60 09 67 a7 8d 56 .,4N....d.`.g..V
0140 02 56 7a d9 6e 07 78 7c 0c 85 33 4d 80 e7 b9 cd .Vz.n.x|..3M....
0150 2a 9e 27 2c 6f 36 65 11 91 2f 75 47 59 33 56 25 *.',o6e../uGY3V%
0160 b7 c1 41 09 ae 6a 89 d0 cf 5e 7d 54 44 f3 cd 5f ..A..j...^}TD.._
0170 9b e3 73 42 ff 93 87 b3 e1 c1 49 d0 c9 25 a1 8a ..sB......I..%..
0180 c2 a7 82 9a 71 9a 69 cd f5 d9 4f 25 54 8a f6 d1 ....q.i...O%T...
0190 63 57 82 a9 74 e7 f5 97 e7 d2 9c 26 52 00 3c 87 cW..t......&R.<.
01a0 b7 57 1a 03 dc e1 9f 78 65 91 72 a5 74 fa ab 98 .W.....xe.r.t...
01b0 52 4e 93 96 fc 70 c0 3a ab 8c 2c b3 9d 25 bf 2a RN...p.:..,..%.*
01c0 cf 49 41 75 c9 4a 1c e5 02 52 0e ed 5e 7b 66 12 .IAu.J...R..^{f.
01d0 18 90 74 a8 b6 47 de ab 0b f4 17 4e bf ae 61 25 ..t..G.....N..a%
0000 00 15 5d e7 0e cb 00 15 5d 56 6b 36 08 00 45 00 ..].....]Vk6..E.
0010 05 dc 07 b8 40 00 34 06 96 2a d1 28 6a 42 ac 14 ....@.4..*.(jB..
0020 bb ba 00 50 d3 31 1b 19 9f 35 df 01 c3 fc 50 10 ...P.1...5....P.
0030 00 f5 08 6f 00 00 50 55 54 46 30 32 30 35 30 30 ...o..PUTF020500
0040 30 30 02 00 00 00 30 56 3f 0a 40 00 00 00 32 30 00....0V?.@...20
0050 32 36 30 32 31 36 30 39 30 39 00 00 00 00 00 00 2602160909......
0060 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
0070 00 00 95 9d 12 bc 46 43 50 52 46 43 50 20 52 65 ......FCPRFCP Re
0080 73 70 6f 6e 73 65 20 4f 62 6a 65 63 74 00 30 30 sponse Object.00
0090 30 30 30 32 36 30 32 31 36 30 39 30 39 30 30 30 0002602160909000
00a0 30 30 00 00 01 00 a0 00 00 00 80 00 00 00 30 30 00............00
00b0 30 30 30 30 30 30 30 30 30 30 30 00 00 00 00 00 00000000000.....
00c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 24 84 ..............$.
00f0 c9 35 81 85 51 ad 05 2b e0 6c 34 b1 bb 87 03 50 .5..Q..+.l4....P
0100 66 72 98 00 04 84 4b db dc a1 dd 6b e0 7f d2 d2 fr....K....k....
0110 4a b1 eb 07 b5 f6 8e c4 62 48 5f 36 17 36 ff b4 J.......bH_6.6..
0120 82 ad 09 4e 99 9d 5e 89 1c 0f b1 e5 f7 f5 15 83 ...N..^.........
0130 e7 a3 2f 83 63 21 b7 0f 22 34 73 9a 4c 56 2a 2a ../.c!.."4s.LV**
0140 30 e9 d3 c5 0a 61 65 84 1a 08 16 da e5 4c f3 c5 0....ae......L..
0150 64 18 24 0b 70 e1 7a 91 dd 90 73 01 b9 fd 35 3f d.$.p.z...s...5?
0160 25 7a 5e 80 f6 4c 86 48 02 15 ab cd a6 ff ae 2b %z^..L.H.......+
0170 5e 5f bd fb 67 61 ac c1 24 c1 a5 97 6e b4 ed 67 ^_..ga..$...n..g
0180 22 08 8c 93 e4 b1 aa a0 bf 16 22 21 5d 5a 0a 96 "........."!]Z..
0190 91 f3 14 1a e4 aa 46 49 4d 47 46 69 72 6d 77 61 ......FIMGFirmwa
01a0 72 65 20 49 6d 61 67 65 00 00 00 00 00 00 30 34 re Image......04
01b0 30 30 33 32 35 31 32 30 39 31 39 32 34 32 38 30 0032512091924280
01c0 33 30 01 00 01 00 90 54 3f 0a 80 00 00 00 30 37 30.....T?.....07
01d0 30 30 34 30 30 30 30 30 30 30 30 00 00 00 00 00 00400000000.....
01e0 f0 00 4d 52 34 2d 47 41 2d 50 33 00 00 00 00 00 ..MR4-GA-P3.....
01f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 00 ................
0200 04 00 00 00 00 00 00 00 00 00 00 00 00 00 8d d5 ................
0210 62 db 44 c0 20 11 ba 95 c8 c0 0b 69 ee 57 2b d2 b.D. ......i.W+.
0220 e9 08 df ed b9 7d 51 7e d5 09 36 ee 74 25 25 d1 .....}Q~..6.t%%.
0230 7b 2a 6f 42 91 11 ac 7e fc 5d 09 01 e1 e0 75 d2 {*oB...~.]....u.
0240 51 05 c4 29 b6 0e 50 db 6b 8e 44 0c 65 69 5f a7 Q..)..P.k.D.ei_.
0250 3c 2e d9 ec b2 e1 f9 6e 57 8b a0 67 5a 2b bd ce <......nW..gZ+..
0260 54 58 3c 72 74 17 06 63 5a f3 25 94 27 8a b3 b3 TX<rt..cZ.%.'...
0270 0a 1a 0c d2 00 03 26 ff cb d3 a9 c6 48 f8 d9 87 ......&.....H...
0280 87 d7 e3 23 39 a2 2a 80 b1 11 05 28 a1 6a aa 29 ...#9.*....(.j.)
0290 9c bf 9a 95 ff fb ad 90 4e 72 dd bc 19 66 98 93 ........Nr...f..
02a0 cd cd f1 1f e3 86 6d c7 34 ac 04 18 39 12 eb 1e ......m.4...9...
02b0 59 77 ff a4 dd b2 a0 74 8e b0 f0 b8 9f 34 cb 74 Yw.....t.....4.t
02c0 f9 a4 bf 3f 94 59 09 32 60 1d 33 b1 07 24 37 2e ...?.Y.2`.3..$7.
02d0 ed d5 d2 bb 49 2e f6 e2 be ce 4a 31 e9 da 47 a3 ....I.....J1..G.
02e0 b0 b6 68 c3 42 fa f8 2e aa 40 c7 51 be 95 97 73 ..h.B....@.Q...s
02f0 7f c3 66 19 4d d8 ea 86 54 be 12 65 54 b5 25 7e ..f.M...T..eT.%~
0300 35 32 5e 54 df b0 fc 4f e6 07 fb ca 3b 1b ca ab 52^T...O....;...
0310 83 87 76 27 ab 9a cd 39 0e 1c 79 67 51 a5 c7 ea ..v'...9..ygQ...
0320 6f 9f 7c f1 ed 43 f9 ec 91 d7 86 73 77 8b cf 5d o.|..C.....sw..]
0330 2b fc df bb 11 71 3f 9c 81 fd f5 e0 8a ff 9d ca +....q?.........
0340 42 a2 f3 10 1b 92 e3 21 2e 21 66 c8 b0 30 22 ec B......!.!f..0".
0350 8b ea ac bc 8f 6c f0 6e 64 f6 7e 37 98 53 3b a1 .....l.nd.~7.S;.
0360 10 8d ed f8 dd 6d c3 21 1c b5 17 d1 8d 95 65 47 .....m.!......eG
0370 4b c9 fb 91 9e 80 2a 90 28 09 78 a9 2b a1 c3 1d K.....*.(.x.+...
0380 d2 a4 09 c8 a8 44 28 10 45 19 d3 a3 25 1b ff 71 .....D(.E...%..q
0390 45 2a 58 b7 56 64 5f d5 54 ef b7 47 71 c5 3a ce E*X.Vd_.T..Gq.:.
03a0 90 d1 96 cc 55 04 d9 b3 19 da 45 7a a0 e1 56 33 ....U.....Ez..V3
03b0 57 e0 25 af 4e 82 0e ef e3 14 bd a9 0d 2f 45 da W.%.N......../E.
03c0 d1 56 f0 e9 a6 84 a2 7a de b4 20 e4 09 a7 91 f6 .V.....z.. .....
03d0 00 86 9a 46 59 73 ec f3 b4 e9 3f 91 22 82 81 e6 ...FYs....?."...
03e0 37 45 a4 72 da 25 8c 38 01 ed 55 35 3a 84 f1 a8 7E.r.%.8..U5:...
03f0 d5 a7 a9 dd 6d b5 19 f7 7f 73 30 60 52 82 6f cb ....m....s0`R.o.
0400 73 25 70 d9 1d ae 3e 15 26 b5 f2 bc c6 fc 25 f2 s%p...>.&.....%.
0410 6b ef 90 22 b8 d8 c6 4b ab 2b f8 15 df 15 f8 0c k.."...K.+......
0420 40 53 f4 bf bf 5f b5 22 11 75 83 8d b6 67 f9 a2 @S..._.".u...g..
0430 1c 71 36 e0 67 0b d2 d3 8e 76 6e 63 73 d4 dd 46 .q6.g....vncs..F
0440 f3 67 43 f1 33 ec de be 8c 70 2a 59 a3 54 75 07 .gC.3....p*Y.Tu.
0450 dd 27 e8 7d bc 78 c2 a6 94 9c fc b8 62 b0 ac 54 .'.}.x......b..T
0460 f3 f3 40 76 41 d7 b7 94 28 52 01 9b 95 46 6a 4d ..@vA...(R...FjM
0470 bc 94 16 86 c0 8a 22 84 1f ae e2 3e e6 42 70 bb ......"....>.Bp.
0480 71 d3 32 48 6f da cb bc 79 f4 dd af 49 38 3b 17 q.2Ho...y...I8;.
0490 1b 31 93 18 0a 3d c2 fa e8 43 ed be 5d 13 c9 d2 .1...=...C..]...
04a0 2a f4 b5 26 02 1b 1d 75 01 c5 9a 80 42 5a 48 30 *..&...u....BZH0
04b0 5a 81 3b 65 34 7d d1 0b 75 59 6d 00 c3 5b ba 9b Z.;e4}..uYm..[..
04c0 3b 03 8c 69 9e 01 51 c5 3a a5 c3 da c1 15 18 1d ;..i..Q.:.......
04d0 48 77 46 18 ec 7e 03 10 b6 cc e7 f6 44 b7 bd 98 HwF..~......D...
04e0 7a cb 3d bd 01 44 76 65 dd aa 14 eb 35 4d 2a 3f z.=..Dve....5M*?
04f0 81 0b 86 02 84 4d 21 a5 d2 56 85 e8 4e 5c 76 4e .....M!..V..N\vN
0500 58 38 dd 69 35 54 1e dd 82 cf 04 18 3e 27 0b ce X8.i5T......>'..
0510 15 21 41 53 a8 63 3d 90 4e 12 84 66 e8 3a 21 82 .!AS.c=.N..f.:!.
0520 de 06 3f e5 0e 74 c8 64 da d7 df 27 5c c8 4b 79 ..?..t.d...'\.Ky
0530 19 15 27 bb 53 09 e4 e5 9f d6 15 ba 05 e1 7f 1e ..'.S...........
0540 d4 3c 99 2c 01 8e d9 86 71 e6 ed 7a e3 16 5e 97 .<.,....q..z..^.
0550 09 4b 5e 66 52 6a f7 17 16 e0 40 02 69 f1 8b a8 .K^fRj....@.i...
0560 18 57 f8 77 12 17 76 34 30 4f 52 68 8e 7c 94 47 .W.w..v40ORh.|.G
0570 78 1d b8 e2 e1 eb 61 67 5f 28 93 a3 8d 58 02 d1 x.....ag_(...X..
0580 80 c0 4f 37 85 b2 4b c5 79 ff 94 af 0e 00 f5 6c ..O7..K.y......l
0590 0e 42 1d 71 52 e3 11 c1 cd e3 95 da c9 2f 11 75 .B.qR......../.u
05a0 e9 76 69 40 6f 0e e9 ed 79 4f ae 0f 24 7d d6 ae .vi@o...yO..$}..
05b0 ef e2 6d c0 8e ed d4 b1 e5 22 9a 19 4b 1c 22 d3 ..m......"..K.".
05c0 81 6f f9 ce d8 53 ba 1e 84 8a 7d a1 3c 18 53 bc .o...S....}.<.S.
05d0 e2 00 9f 54 12 38 db ff a5 c3 68 d6 8a 2c aa 8a ...T.8....h..,..
05e0 ee bf c5 07 09 6e 4c 95 ee 54 .....nL..T<snip>