Analysis Date2018-03-28 19:21:09
MD55c69f105aea56c45f55c3fd6cf852f60
SHA153f86f51ebf2c3d02b5d93e9abed213526935df6

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section md5: 31d7b2e6472b1adb9cbc7c22f9393550 sha1: 34975af0af046447a5e63a2fd15a14d6495de108 size: 223232
Section md5: 7733da0b1ca0bfcb1b1617edd7cbce9d sha1: 3efca1b2ead7801374bf9256c987a771bc311b70 size: 53248
Section md5: 86c84d7aedf0b7fc4b7603d9ea82ef00 sha1: be14048474a67827888713e2cf45f7fe2a1edee4 size: 5632
Section.rsrc md5: 73964b36e711d16686ce6eb14e5b8cd3 sha1: fa2ca6ed06ba621d45652340191a41b42d420dd6 size: 352256
Section.gogo md5: 81962649839c15f118b5e313dd1febd8 sha1: 38edfbdb747f5c5a0820b0bc49279077782818cd size: 317952
Section.adata md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0
Timestamp2014-01-14 09:59:52
VersionLegalCopyright: Copyright (C) 2014-2015
ProductVersion11: 1, 3sdfsdf, 0, 1
FileVersion: 1, 1wer3, 0, 1
FileVersion11: 1, 1dsfsdfds, 0, 1
LegalCopyright11: Copyright (C) 2014-2015
ProductVersion: 1, 3sdfw234sdfsdf, 0, 1
FileDescription: sdfsdfx.,cxvbmx.cvmbf
PackerASProtect v1.2
PEhashb728d1ed63fa855fc13625ae4b3b2e61e73ff954
AVArcabit (arcavir)Gen:Variant.Adware.Symmi.37537
AVAuthentiumNo Virus
AVGrisoft (avg)FakeAV_r.XR
AVAvira (antivir)TR/Crypt.XPACK.Gen7
AVAlwil (avast)Evo-gen [Susp]
AVAd-AwareGen:Variant.Adware.Symmi.37537
AVBitDefenderGen:Variant.Adware.Symmi.37537
AVBullGuardError Scanning File
AVClamAVError Scanning File
AVDr. WebTrojan.FakeAV.16405
AVEmsisoftGen:Variant.Adware.Symmi.37537
AVMicroWorld (escan)Gen:Variant.Adware.Symmi.37537
AVCA (E-Trust Ino)Error Scanning File
AVFortinetW32/FakeAV.AC!tr
AVFrisk (f-prot)No Virus
AVF-SecureNo Virus
AVIkarusError Scanning File
AVK7Riskware ( 0040eff71 )
AVKasperskyError Scanning File
AVMalwareBytesTrojan.FakeAV
AVMcafeeFakeAlert-FTE!5C69F105AEA5
AVMicrosoft Security EssentialsRogue:Win32/FakePAV
AVNANOTrojan.Win32.Dapato.cuudgm
AVEset (nod32)Win32/AdWare.WindowsExpertConsole.AI
AVPadvishNo Virus
AVCAT (quickheal)No Virus
AVRisingNo Virus
AV360 SafeNo Virus
AVSUPERAntiSpywareTrojan.Agent/Gen-Waster
AVSymantecTrojan.FakeAV!gen123
AVTrend MicroTROJ_SPNV.01HS14
AVTwisterNo Virus
AVVirusBlokAda (vba32)TrojanDropper.Dapato
AVWindows DefenderRogue:Win32/FakePAV
AVZillya!Error Scanning File

Runtime Details:

Screenshot

Process
↳ C:\Windows\System32\lsass.exe

Process
↳ C:\Users\Phil\AppData\Local\Temp\53f86f51ebf2c3d02b5d93e9abed213526935df6.exe

Process
↳ C:\Users\Phil\AppData\Roaming\safe-woyn.exe

Process
↳ C:\Windows\SysWOW64\cmd.exe

Creates File\??\NUL

Process
↳ C:\Windows\SysWOW64\mshta.exe

Creates MutexLocal\!PrivacIE!SharedMemory!Mutex
Creates Mutex
Creates MutexRasPbFile
Creates FileC:\Windows\Globalization\Sorting\sortdefault.nls
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
Creates FileC:\Users\Phil\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
Creates FileC:\Users\Phil\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
RegistryHKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\mshta_RASAPI32\EnableFileTracing ➝
0
RegistryHKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\mshta_RASAPI32\EnableConsoleTracing ➝
0
RegistryHKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\mshta_RASAPI32\FileTracingMask ➝
4294901760
RegistryHKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\mshta_RASAPI32\ConsoleTracingMask ➝
4294901760
RegistryHKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\mshta_RASAPI32\MaxFileSize ➝
1048576
RegistryHKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Tracing\mshta_RASAPI32\FileDirectory ➝
%windir%\tracing

Process
↳ C:\Windows\SysWOW64\sc.exe

Creates FileC:\Windows\SysWOW64\en-US\KERNELBASE.dll.mui
Creates FileC:\Windows\SysWOW64\en-US\sc.exe.mui

Process
↳ C:\Windows\SysWOW64\sc.exe

Creates FileC:\Windows\SysWOW64\en-US\sc.exe.mui

Network Details:

DNScheckip.dyndns.com
Type: A
216.146.38.70
DNScheckip.dyndns.com
Type: A
216.146.39.70
DNScheckip.dyndns.com
Type: A
216.146.43.70
DNScheckip.dyndns.com
Type: A
91.198.22.70
DNScheckip.dyndns.org
Type: A
HTTP GEThttp://checkip.dyndns.org/
User-Agent: Mozilla/4.0
HTTP GEThttp://93.115.86.197/?0=13&1=0&2=11&3=i&4=2600&5=1&6=1111&7=bfjrwbtosl
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; .NET CLR 2.0.50727)
Flows TCP192.168.1.1:1031 ➝ 216.146.38.70:80
Flows TCP192.168.1.1:1033 ➝ 93.115.86.197:80

Raw Pcap
0x00000000 (00000)   47455420 2f6e6373 692e7478 74204854   GET /ncsi.txt HT
0x00000010 (00016)   54502f31 2e310d0a 436f6e6e 65637469   TP/1.1..Connecti
0x00000020 (00032)   6f6e3a20 436c6f73 650d0a55 7365722d   on: Close..User-
0x00000030 (00048)   4167656e 743a204d 6963726f 736f6674   Agent: Microsoft
0x00000040 (00064)   204e4353 490d0a48 6f73743a 20777777    NCSI..Host: www
0x00000050 (00080)   2e6d7366 746e6373 692e636f 6d0d0a0d   .msftncsi.com...
0x00000060 (00096)   0a                                    .

0x00000000 (00000)   47455420 2f6e6373 692e7478 74204854   GET /ncsi.txt HT
0x00000010 (00016)   54502f31 2e310d0a 436f6e6e 65637469   TP/1.1..Connecti
0x00000020 (00032)   6f6e3a20 436c6f73 650d0a55 7365722d   on: Close..User-
0x00000030 (00048)   4167656e 743a204d 6963726f 736f6674   Agent: Microsoft
0x00000040 (00064)   204e4353 490d0a48 6f73743a 20777777    NCSI..Host: www
0x00000050 (00080)   2e6d7366 746e6373 692e636f 6d0d0a0d   .msftncsi.com...
0x00000060 (00096)   0a                                    .

0x00000000 (00000)   47455420 2f6e6373 692e7478 74204854   GET /ncsi.txt HT
0x00000010 (00016)   54502f31 2e310d0a 436f6e6e 65637469   TP/1.1..Connecti
0x00000020 (00032)   6f6e3a20 436c6f73 650d0a55 7365722d   on: Close..User-
0x00000030 (00048)   4167656e 743a204d 6963726f 736f6674   Agent: Microsoft
0x00000040 (00064)   204e4353 490d0a48 6f73743a 20777777    NCSI..Host: www
0x00000050 (00080)   2e6d7366 746e6373 692e636f 6d0d0a0d   .msftncsi.com...
0x00000060 (00096)   0a                                    .

0x00000000 (00000)   47455420 2f204854 54502f31 2e310d0a   GET / HTTP/1.1..
0x00000010 (00016)   55736572 2d416765 6e743a20 4d6f7a69   User-Agent: Mozi
0x00000020 (00032)   6c6c612f 342e300d 0a486f73 743a2063   lla/4.0..Host: c
0x00000030 (00048)   6865636b 69702e64 796e646e 732e6f72   heckip.dyndns.or
0x00000040 (00064)   670d0a0d 0a0d0a48 6f73743a 20777777   g......Host: www
0x00000050 (00080)   2e6d7366 746e6373 692e636f 6d0d0a0d   .msftncsi.com...
0x00000060 (00096)   0a                                    .

0x00000000 (00000)   504f5354 202f3365 31363236 34372d63   POST /3e162647-c
0x00000010 (00016)   3364382d 34346333 2d393937 622d3061   3d8-44c3-997b-0a
0x00000020 (00032)   63396135 66363838 33322f20 48545450   c9a5f68832/ HTTP
0x00000030 (00048)   2f312e31 0d0a4361 6368652d 436f6e74   /1.1..Cache-Cont
0x00000040 (00064)   726f6c3a 206e6f2d 63616368 650d0a43   rol: no-cache..C
0x00000050 (00080)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000060 (00096)   0d0a5072 61676d61 3a206e6f 2d636163   ..Pragma: no-cac
0x00000070 (00112)   68650d0a 436f6e74 656e742d 54797065   he..Content-Type
0x00000080 (00128)   3a206170 706c6963 6174696f 6e2f736f   : application/so
0x00000090 (00144)   61702b78 6d6c0d0a 55736572 2d416765   ap+xml..User-Age
0x000000a0 (00160)   6e743a20 57534441 50490d0a 436f6e74   nt: WSDAPI..Cont
0x000000b0 (00176)   656e742d 4c656e67 74683a20 3733330d   ent-Length: 733.
0x000000c0 (00192)   0a486f73 743a2031 39322e31 36382e31   .Host: 192.168.1
0x000000d0 (00208)   30302e31 39333a35 3335370d 0a0d0a3c   00.193:5357....<
0x000000e0 (00224)   3f786d6c 20766572 73696f6e 3d22312e   ?xml version="1.
0x000000f0 (00240)   30222065 6e636f64 696e673d 22757466   0" encoding="utf
0x00000100 (00256)   2d38223f 3e3c736f 61703a45 6e76656c   -8"?><soap:Envel
0x00000110 (00272)   6f706520 786d6c6e 733a736f 61703d22   ope xmlns:soap="
0x00000120 (00288)   68747470 3a2f2f77 77772e77 332e6f72   http://www.w3.or
0x00000130 (00304)   672f3230 30332f30 352f736f 61702d65   g/2003/05/soap-e
0x00000140 (00320)   6e76656c 6f706522 20786d6c 6e733a77   nvelope" xmlns:w
0x00000150 (00336)   73613d22 68747470 3a2f2f73 6368656d   sa="http://schem
0x00000160 (00352)   61732e78 6d6c736f 61702e6f 72672f77   as.xmlsoap.org/w
0x00000170 (00368)   732f3230 30342f30 382f6164 64726573   s/2004/08/addres
0x00000180 (00384)   73696e67 2220786d 6c6e733a 6c6d733d   sing" xmlns:lms=
0x00000190 (00400)   22687474 703a2f2f 73636865 6d61732e   "http://schemas.
0x000001a0 (00416)   6d696372 6f736f66 742e636f 6d2f7769   microsoft.com/wi
0x000001b0 (00432)   6e646f77 732f6c6d 732f3230 30372f30   ndows/lms/2007/0
0x000001c0 (00448)   38223e3c 736f6170 3a486561 6465723e   8"><soap:Header>
0x000001d0 (00464)   3c777361 3a546f3e 75726e3a 75756964   <wsa:To>urn:uuid
0x000001e0 (00480)   3a336531 36323634 372d6333 64382d34   :3e162647-c3d8-4
0x000001f0 (00496)   3463332d 39393762 2d306163 39613566   4c3-997b-0ac9a5f
0x00000200 (00512)   36383833 323c2f77 73613a54 6f3e3c77   68832</wsa:To><w
0x00000210 (00528)   73613a41 6374696f 6e3e6874 74703a2f   sa:Action>http:/
0x00000220 (00544)   2f736368 656d6173 2e786d6c 736f6170   /schemas.xmlsoap
0x00000230 (00560)   2e6f7267 2f77732f 32303034 2f30392f   .org/ws/2004/09/
0x00000240 (00576)   7472616e 73666572 2f476574 3c2f7773   transfer/Get</ws
0x00000250 (00592)   613a4163 74696f6e 3e3c7773 613a4d65   a:Action><wsa:Me
0x00000260 (00608)   73736167 6549443e 75726e3a 75756964   ssageID>urn:uuid
0x00000270 (00624)   3a666531 66363065 352d3733 30332d34   :fe1f60e5-7303-4
0x00000280 (00640)   3864622d 39333230 2d393031 38363964   8db-9320-901869d
0x00000290 (00656)   33643733 613c2f77 73613a4d 65737361   3d73a</wsa:Messa
0x000002a0 (00672)   67654944 3e3c7773 613a5265 706c7954   geID><wsa:ReplyT
0x000002b0 (00688)   6f3e3c77 73613a41 64647265 73733e68   o><wsa:Address>h
0x000002c0 (00704)   7474703a 2f2f7363 68656d61 732e786d   ttp://schemas.xm
0x000002d0 (00720)   6c736f61 702e6f72 672f7773 2f323030   lsoap.org/ws/200
0x000002e0 (00736)   342f3038 2f616464 72657373 696e672f   4/08/addressing/
0x000002f0 (00752)   726f6c65 2f616e6f 6e796d6f 75733c2f   role/anonymous</
0x00000300 (00768)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000310 (00784)   613a5265 706c7954 6f3e3c77 73613a46   a:ReplyTo><wsa:F
0x00000320 (00800)   726f6d3e 3c777361 3a416464 72657373   rom><wsa:Address
0x00000330 (00816)   3e75726e 3a757569 643a6462 32313261   >urn:uuid:db212a
0x00000340 (00832)   37332d38 6561632d 34636462 2d613962   73-8eac-4cdb-a9b
0x00000350 (00848)   352d6237 66323833 63633438 30613c2f   5-b7f283cc480a</
0x00000360 (00864)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000370 (00880)   613a4672 6f6d3e3c 6c6d733a 4c617267   a:From><lms:Larg
0x00000380 (00896)   654d6574 61646174 61537570 706f7274   eMetadataSupport
0x00000390 (00912)   2f3e3c2f 736f6170 3a486561 6465723e   /></soap:Header>
0x000003a0 (00928)   3c736f61 703a426f 64792f3e 3c2f736f   <soap:Body/></so
0x000003b0 (00944)   61703a45 6e76656c 6f70653e            ap:Envelope>

0x00000000 (00000)   504f5354 202f3365 31363236 34372d63   POST /3e162647-c
0x00000010 (00016)   3364382d 34346333 2d393937 622d3061   3d8-44c3-997b-0a
0x00000020 (00032)   63396135 66363838 33322f20 48545450   c9a5f68832/ HTTP
0x00000030 (00048)   2f312e31 0d0a4361 6368652d 436f6e74   /1.1..Cache-Cont
0x00000040 (00064)   726f6c3a 206e6f2d 63616368 650d0a43   rol: no-cache..C
0x00000050 (00080)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000060 (00096)   0d0a5072 61676d61 3a206e6f 2d636163   ..Pragma: no-cac
0x00000070 (00112)   68650d0a 436f6e74 656e742d 54797065   he..Content-Type
0x00000080 (00128)   3a206170 706c6963 6174696f 6e2f736f   : application/so
0x00000090 (00144)   61702b78 6d6c0d0a 55736572 2d416765   ap+xml..User-Age
0x000000a0 (00160)   6e743a20 57534441 50490d0a 436f6e74   nt: WSDAPI..Cont
0x000000b0 (00176)   656e742d 4c656e67 74683a20 3733330d   ent-Length: 733.
0x000000c0 (00192)   0a486f73 743a2031 39322e31 36382e31   .Host: 192.168.1
0x000000d0 (00208)   30302e31 34343a35 3335370d 0a0d0a3c   00.144:5357....<
0x000000e0 (00224)   3f786d6c 20766572 73696f6e 3d22312e   ?xml version="1.
0x000000f0 (00240)   30222065 6e636f64 696e673d 22757466   0" encoding="utf
0x00000100 (00256)   2d38223f 3e3c736f 61703a45 6e76656c   -8"?><soap:Envel
0x00000110 (00272)   6f706520 786d6c6e 733a736f 61703d22   ope xmlns:soap="
0x00000120 (00288)   68747470 3a2f2f77 77772e77 332e6f72   http://www.w3.or
0x00000130 (00304)   672f3230 30332f30 352f736f 61702d65   g/2003/05/soap-e
0x00000140 (00320)   6e76656c 6f706522 20786d6c 6e733a77   nvelope" xmlns:w
0x00000150 (00336)   73613d22 68747470 3a2f2f73 6368656d   sa="http://schem
0x00000160 (00352)   61732e78 6d6c736f 61702e6f 72672f77   as.xmlsoap.org/w
0x00000170 (00368)   732f3230 30342f30 382f6164 64726573   s/2004/08/addres
0x00000180 (00384)   73696e67 2220786d 6c6e733a 6c6d733d   sing" xmlns:lms=
0x00000190 (00400)   22687474 703a2f2f 73636865 6d61732e   "http://schemas.
0x000001a0 (00416)   6d696372 6f736f66 742e636f 6d2f7769   microsoft.com/wi
0x000001b0 (00432)   6e646f77 732f6c6d 732f3230 30372f30   ndows/lms/2007/0
0x000001c0 (00448)   38223e3c 736f6170 3a486561 6465723e   8"><soap:Header>
0x000001d0 (00464)   3c777361 3a546f3e 75726e3a 75756964   <wsa:To>urn:uuid
0x000001e0 (00480)   3a336531 36323634 372d6333 64382d34   :3e162647-c3d8-4
0x000001f0 (00496)   3463332d 39393762 2d306163 39613566   4c3-997b-0ac9a5f
0x00000200 (00512)   36383833 323c2f77 73613a54 6f3e3c77   68832</wsa:To><w
0x00000210 (00528)   73613a41 6374696f 6e3e6874 74703a2f   sa:Action>http:/
0x00000220 (00544)   2f736368 656d6173 2e786d6c 736f6170   /schemas.xmlsoap
0x00000230 (00560)   2e6f7267 2f77732f 32303034 2f30392f   .org/ws/2004/09/
0x00000240 (00576)   7472616e 73666572 2f476574 3c2f7773   transfer/Get</ws
0x00000250 (00592)   613a4163 74696f6e 3e3c7773 613a4d65   a:Action><wsa:Me
0x00000260 (00608)   73736167 6549443e 75726e3a 75756964   ssageID>urn:uuid
0x00000270 (00624)   3a356139 61643338 362d3461 64662d34   :5a9ad386-4adf-4
0x00000280 (00640)   6462612d 61643838 2d653235 34656238   dba-ad88-e254eb8
0x00000290 (00656)   34383831 343c2f77 73613a4d 65737361   48814</wsa:Messa
0x000002a0 (00672)   67654944 3e3c7773 613a5265 706c7954   geID><wsa:ReplyT
0x000002b0 (00688)   6f3e3c77 73613a41 64647265 73733e68   o><wsa:Address>h
0x000002c0 (00704)   7474703a 2f2f7363 68656d61 732e786d   ttp://schemas.xm
0x000002d0 (00720)   6c736f61 702e6f72 672f7773 2f323030   lsoap.org/ws/200
0x000002e0 (00736)   342f3038 2f616464 72657373 696e672f   4/08/addressing/
0x000002f0 (00752)   726f6c65 2f616e6f 6e796d6f 75733c2f   role/anonymous</
0x00000300 (00768)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000310 (00784)   613a5265 706c7954 6f3e3c77 73613a46   a:ReplyTo><wsa:F
0x00000320 (00800)   726f6d3e 3c777361 3a416464 72657373   rom><wsa:Address
0x00000330 (00816)   3e75726e 3a757569 643a6134 35303165   >urn:uuid:a4501e
0x00000340 (00832)   65342d65 6131382d 34323133 2d393365   e4-ea18-4213-93e
0x00000350 (00848)   662d3065 33376337 61623633 62653c2f   f-0e37c7ab63be</
0x00000360 (00864)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000370 (00880)   613a4672 6f6d3e3c 6c6d733a 4c617267   a:From><lms:Larg
0x00000380 (00896)   654d6574 61646174 61537570 706f7274   eMetadataSupport
0x00000390 (00912)   2f3e3c2f 736f6170 3a486561 6465723e   /></soap:Header>
0x000003a0 (00928)   3c736f61 703a426f 64792f3e 3c2f736f   <soap:Body/></so
0x000003b0 (00944)   61703a45 6e76656c 6f70653e            ap:Envelope>

0x00000000 (00000)   504f5354 202f3365 31363236 34372d63   POST /3e162647-c
0x00000010 (00016)   3364382d 34346333 2d393937 622d3061   3d8-44c3-997b-0a
0x00000020 (00032)   63396135 66363838 33322f20 48545450   c9a5f68832/ HTTP
0x00000030 (00048)   2f312e31 0d0a4361 6368652d 436f6e74   /1.1..Cache-Cont
0x00000040 (00064)   726f6c3a 206e6f2d 63616368 650d0a43   rol: no-cache..C
0x00000050 (00080)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000060 (00096)   0d0a5072 61676d61 3a206e6f 2d636163   ..Pragma: no-cac
0x00000070 (00112)   68650d0a 436f6e74 656e742d 54797065   he..Content-Type
0x00000080 (00128)   3a206170 706c6963 6174696f 6e2f736f   : application/so
0x00000090 (00144)   61702b78 6d6c0d0a 55736572 2d416765   ap+xml..User-Age
0x000000a0 (00160)   6e743a20 57534441 50490d0a 436f6e74   nt: WSDAPI..Cont
0x000000b0 (00176)   656e742d 4c656e67 74683a20 3733330d   ent-Length: 733.
0x000000c0 (00192)   0a486f73 743a2031 39322e31 36382e31   .Host: 192.168.1
0x000000d0 (00208)   30302e31 33333a35 3335370d 0a0d0a3c   00.133:5357....<
0x000000e0 (00224)   3f786d6c 20766572 73696f6e 3d22312e   ?xml version="1.
0x000000f0 (00240)   30222065 6e636f64 696e673d 22757466   0" encoding="utf
0x00000100 (00256)   2d38223f 3e3c736f 61703a45 6e76656c   -8"?><soap:Envel
0x00000110 (00272)   6f706520 786d6c6e 733a736f 61703d22   ope xmlns:soap="
0x00000120 (00288)   68747470 3a2f2f77 77772e77 332e6f72   http://www.w3.or
0x00000130 (00304)   672f3230 30332f30 352f736f 61702d65   g/2003/05/soap-e
0x00000140 (00320)   6e76656c 6f706522 20786d6c 6e733a77   nvelope" xmlns:w
0x00000150 (00336)   73613d22 68747470 3a2f2f73 6368656d   sa="http://schem
0x00000160 (00352)   61732e78 6d6c736f 61702e6f 72672f77   as.xmlsoap.org/w
0x00000170 (00368)   732f3230 30342f30 382f6164 64726573   s/2004/08/addres
0x00000180 (00384)   73696e67 2220786d 6c6e733a 6c6d733d   sing" xmlns:lms=
0x00000190 (00400)   22687474 703a2f2f 73636865 6d61732e   "http://schemas.
0x000001a0 (00416)   6d696372 6f736f66 742e636f 6d2f7769   microsoft.com/wi
0x000001b0 (00432)   6e646f77 732f6c6d 732f3230 30372f30   ndows/lms/2007/0
0x000001c0 (00448)   38223e3c 736f6170 3a486561 6465723e   8"><soap:Header>
0x000001d0 (00464)   3c777361 3a546f3e 75726e3a 75756964   <wsa:To>urn:uuid
0x000001e0 (00480)   3a336531 36323634 372d6333 64382d34   :3e162647-c3d8-4
0x000001f0 (00496)   3463332d 39393762 2d306163 39613566   4c3-997b-0ac9a5f
0x00000200 (00512)   36383833 323c2f77 73613a54 6f3e3c77   68832</wsa:To><w
0x00000210 (00528)   73613a41 6374696f 6e3e6874 74703a2f   sa:Action>http:/
0x00000220 (00544)   2f736368 656d6173 2e786d6c 736f6170   /schemas.xmlsoap
0x00000230 (00560)   2e6f7267 2f77732f 32303034 2f30392f   .org/ws/2004/09/
0x00000240 (00576)   7472616e 73666572 2f476574 3c2f7773   transfer/Get</ws
0x00000250 (00592)   613a4163 74696f6e 3e3c7773 613a4d65   a:Action><wsa:Me
0x00000260 (00608)   73736167 6549443e 75726e3a 75756964   ssageID>urn:uuid
0x00000270 (00624)   3a343764 64646233 312d3337 36332d34   :47dddb31-3763-4
0x00000280 (00640)   3638372d 61623038 2d633765 36646430   687-ab08-c7e6dd0
0x00000290 (00656)   61623562 663c2f77 73613a4d 65737361   ab5bf</wsa:Messa
0x000002a0 (00672)   67654944 3e3c7773 613a5265 706c7954   geID><wsa:ReplyT
0x000002b0 (00688)   6f3e3c77 73613a41 64647265 73733e68   o><wsa:Address>h
0x000002c0 (00704)   7474703a 2f2f7363 68656d61 732e786d   ttp://schemas.xm
0x000002d0 (00720)   6c736f61 702e6f72 672f7773 2f323030   lsoap.org/ws/200
0x000002e0 (00736)   342f3038 2f616464 72657373 696e672f   4/08/addressing/
0x000002f0 (00752)   726f6c65 2f616e6f 6e796d6f 75733c2f   role/anonymous</
0x00000300 (00768)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000310 (00784)   613a5265 706c7954 6f3e3c77 73613a46   a:ReplyTo><wsa:F
0x00000320 (00800)   726f6d3e 3c777361 3a416464 72657373   rom><wsa:Address
0x00000330 (00816)   3e75726e 3a757569 643a3863 61353736   >urn:uuid:8ca576
0x00000340 (00832)   65642d65 6537332d 34626566 2d623334   ed-ee73-4bef-b34
0x00000350 (00848)   332d6634 62366635 34376335 34663c2f   3-f4b6f547c54f</
0x00000360 (00864)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000370 (00880)   613a4672 6f6d3e3c 6c6d733a 4c617267   a:From><lms:Larg
0x00000380 (00896)   654d6574 61646174 61537570 706f7274   eMetadataSupport
0x00000390 (00912)   2f3e3c2f 736f6170 3a486561 6465723e   /></soap:Header>
0x000003a0 (00928)   3c736f61 703a426f 64792f3e 3c2f736f   <soap:Body/></so
0x000003b0 (00944)   61703a45 6e76656c 6f70653e            ap:Envelope>

0x00000000 (00000)   504f5354 202f3365 31363236 34372d63   POST /3e162647-c
0x00000010 (00016)   3364382d 34346333 2d393937 622d3061   3d8-44c3-997b-0a
0x00000020 (00032)   63396135 66363838 33322f20 48545450   c9a5f68832/ HTTP
0x00000030 (00048)   2f312e31 0d0a4361 6368652d 436f6e74   /1.1..Cache-Cont
0x00000040 (00064)   726f6c3a 206e6f2d 63616368 650d0a43   rol: no-cache..C
0x00000050 (00080)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000060 (00096)   0d0a5072 61676d61 3a206e6f 2d636163   ..Pragma: no-cac
0x00000070 (00112)   68650d0a 436f6e74 656e742d 54797065   he..Content-Type
0x00000080 (00128)   3a206170 706c6963 6174696f 6e2f736f   : application/so
0x00000090 (00144)   61702b78 6d6c0d0a 55736572 2d416765   ap+xml..User-Age
0x000000a0 (00160)   6e743a20 57534441 50490d0a 436f6e74   nt: WSDAPI..Cont
0x000000b0 (00176)   656e742d 4c656e67 74683a20 3733330d   ent-Length: 733.
0x000000c0 (00192)   0a486f73 743a2031 39322e31 36382e31   .Host: 192.168.1
0x000000d0 (00208)   30302e31 35373a35 3335370d 0a0d0a3c   00.157:5357....<
0x000000e0 (00224)   3f786d6c 20766572 73696f6e 3d22312e   ?xml version="1.
0x000000f0 (00240)   30222065 6e636f64 696e673d 22757466   0" encoding="utf
0x00000100 (00256)   2d38223f 3e3c736f 61703a45 6e76656c   -8"?><soap:Envel
0x00000110 (00272)   6f706520 786d6c6e 733a736f 61703d22   ope xmlns:soap="
0x00000120 (00288)   68747470 3a2f2f77 77772e77 332e6f72   http://www.w3.or
0x00000130 (00304)   672f3230 30332f30 352f736f 61702d65   g/2003/05/soap-e
0x00000140 (00320)   6e76656c 6f706522 20786d6c 6e733a77   nvelope" xmlns:w
0x00000150 (00336)   73613d22 68747470 3a2f2f73 6368656d   sa="http://schem
0x00000160 (00352)   61732e78 6d6c736f 61702e6f 72672f77   as.xmlsoap.org/w
0x00000170 (00368)   732f3230 30342f30 382f6164 64726573   s/2004/08/addres
0x00000180 (00384)   73696e67 2220786d 6c6e733a 6c6d733d   sing" xmlns:lms=
0x00000190 (00400)   22687474 703a2f2f 73636865 6d61732e   "http://schemas.
0x000001a0 (00416)   6d696372 6f736f66 742e636f 6d2f7769   microsoft.com/wi
0x000001b0 (00432)   6e646f77 732f6c6d 732f3230 30372f30   ndows/lms/2007/0
0x000001c0 (00448)   38223e3c 736f6170 3a486561 6465723e   8"><soap:Header>
0x000001d0 (00464)   3c777361 3a546f3e 75726e3a 75756964   <wsa:To>urn:uuid
0x000001e0 (00480)   3a336531 36323634 372d6333 64382d34   :3e162647-c3d8-4
0x000001f0 (00496)   3463332d 39393762 2d306163 39613566   4c3-997b-0ac9a5f
0x00000200 (00512)   36383833 323c2f77 73613a54 6f3e3c77   68832</wsa:To><w
0x00000210 (00528)   73613a41 6374696f 6e3e6874 74703a2f   sa:Action>http:/
0x00000220 (00544)   2f736368 656d6173 2e786d6c 736f6170   /schemas.xmlsoap
0x00000230 (00560)   2e6f7267 2f77732f 32303034 2f30392f   .org/ws/2004/09/
0x00000240 (00576)   7472616e 73666572 2f476574 3c2f7773   transfer/Get</ws
0x00000250 (00592)   613a4163 74696f6e 3e3c7773 613a4d65   a:Action><wsa:Me
0x00000260 (00608)   73736167 6549443e 75726e3a 75756964   ssageID>urn:uuid
0x00000270 (00624)   3a376238 38646631 332d6535 66312d34   :7b88df13-e5f1-4
0x00000280 (00640)   3436612d 61306239 2d356434 64333933   46a-a0b9-5d4d393
0x00000290 (00656)   35343836 303c2f77 73613a4d 65737361   54860</wsa:Messa
0x000002a0 (00672)   67654944 3e3c7773 613a5265 706c7954   geID><wsa:ReplyT
0x000002b0 (00688)   6f3e3c77 73613a41 64647265 73733e68   o><wsa:Address>h
0x000002c0 (00704)   7474703a 2f2f7363 68656d61 732e786d   ttp://schemas.xm
0x000002d0 (00720)   6c736f61 702e6f72 672f7773 2f323030   lsoap.org/ws/200
0x000002e0 (00736)   342f3038 2f616464 72657373 696e672f   4/08/addressing/
0x000002f0 (00752)   726f6c65 2f616e6f 6e796d6f 75733c2f   role/anonymous</
0x00000300 (00768)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000310 (00784)   613a5265 706c7954 6f3e3c77 73613a46   a:ReplyTo><wsa:F
0x00000320 (00800)   726f6d3e 3c777361 3a416464 72657373   rom><wsa:Address
0x00000330 (00816)   3e75726e 3a757569 643a6134 35303165   >urn:uuid:a4501e
0x00000340 (00832)   65342d65 6131382d 34323133 2d393365   e4-ea18-4213-93e
0x00000350 (00848)   662d3065 33376337 61623633 62653c2f   f-0e37c7ab63be</
0x00000360 (00864)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000370 (00880)   613a4672 6f6d3e3c 6c6d733a 4c617267   a:From><lms:Larg
0x00000380 (00896)   654d6574 61646174 61537570 706f7274   eMetadataSupport
0x00000390 (00912)   2f3e3c2f 736f6170 3a486561 6465723e   /></soap:Header>
0x000003a0 (00928)   3c736f61 703a426f 64792f3e 3c2f736f   <soap:Body/></so
0x000003b0 (00944)   61703a45 6e76656c 6f70653e            ap:Envelope>

0x00000000 (00000)   504f5354 202f3365 31363236 34372d63   POST /3e162647-c
0x00000010 (00016)   3364382d 34346333 2d393937 622d3061   3d8-44c3-997b-0a
0x00000020 (00032)   63396135 66363838 33322f20 48545450   c9a5f68832/ HTTP
0x00000030 (00048)   2f312e31 0d0a4361 6368652d 436f6e74   /1.1..Cache-Cont
0x00000040 (00064)   726f6c3a 206e6f2d 63616368 650d0a43   rol: no-cache..C
0x00000050 (00080)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000060 (00096)   0d0a5072 61676d61 3a206e6f 2d636163   ..Pragma: no-cac
0x00000070 (00112)   68650d0a 436f6e74 656e742d 54797065   he..Content-Type
0x00000080 (00128)   3a206170 706c6963 6174696f 6e2f736f   : application/so
0x00000090 (00144)   61702b78 6d6c0d0a 55736572 2d416765   ap+xml..User-Age
0x000000a0 (00160)   6e743a20 57534441 50490d0a 436f6e74   nt: WSDAPI..Cont
0x000000b0 (00176)   656e742d 4c656e67 74683a20 3733330d   ent-Length: 733.
0x000000c0 (00192)   0a486f73 743a2031 39322e31 36382e31   .Host: 192.168.1
0x000000d0 (00208)   30302e31 36363a35 3335370d 0a0d0a3c   00.166:5357....<
0x000000e0 (00224)   3f786d6c 20766572 73696f6e 3d22312e   ?xml version="1.
0x000000f0 (00240)   30222065 6e636f64 696e673d 22757466   0" encoding="utf
0x00000100 (00256)   2d38223f 3e3c736f 61703a45 6e76656c   -8"?><soap:Envel
0x00000110 (00272)   6f706520 786d6c6e 733a736f 61703d22   ope xmlns:soap="
0x00000120 (00288)   68747470 3a2f2f77 77772e77 332e6f72   http://www.w3.or
0x00000130 (00304)   672f3230 30332f30 352f736f 61702d65   g/2003/05/soap-e
0x00000140 (00320)   6e76656c 6f706522 20786d6c 6e733a77   nvelope" xmlns:w
0x00000150 (00336)   73613d22 68747470 3a2f2f73 6368656d   sa="http://schem
0x00000160 (00352)   61732e78 6d6c736f 61702e6f 72672f77   as.xmlsoap.org/w
0x00000170 (00368)   732f3230 30342f30 382f6164 64726573   s/2004/08/addres
0x00000180 (00384)   73696e67 2220786d 6c6e733a 6c6d733d   sing" xmlns:lms=
0x00000190 (00400)   22687474 703a2f2f 73636865 6d61732e   "http://schemas.
0x000001a0 (00416)   6d696372 6f736f66 742e636f 6d2f7769   microsoft.com/wi
0x000001b0 (00432)   6e646f77 732f6c6d 732f3230 30372f30   ndows/lms/2007/0
0x000001c0 (00448)   38223e3c 736f6170 3a486561 6465723e   8"><soap:Header>
0x000001d0 (00464)   3c777361 3a546f3e 75726e3a 75756964   <wsa:To>urn:uuid
0x000001e0 (00480)   3a336531 36323634 372d6333 64382d34   :3e162647-c3d8-4
0x000001f0 (00496)   3463332d 39393762 2d306163 39613566   4c3-997b-0ac9a5f
0x00000200 (00512)   36383833 323c2f77 73613a54 6f3e3c77   68832</wsa:To><w
0x00000210 (00528)   73613a41 6374696f 6e3e6874 74703a2f   sa:Action>http:/
0x00000220 (00544)   2f736368 656d6173 2e786d6c 736f6170   /schemas.xmlsoap
0x00000230 (00560)   2e6f7267 2f77732f 32303034 2f30392f   .org/ws/2004/09/
0x00000240 (00576)   7472616e 73666572 2f476574 3c2f7773   transfer/Get</ws
0x00000250 (00592)   613a4163 74696f6e 3e3c7773 613a4d65   a:Action><wsa:Me
0x00000260 (00608)   73736167 6549443e 75726e3a 75756964   ssageID>urn:uuid
0x00000270 (00624)   3a353732 35323931 392d3665 35652d34   :57252919-6e5e-4
0x00000280 (00640)   6230302d 61363366 2d356136 66336663   b00-a63f-5a6f3fc
0x00000290 (00656)   64336235 323c2f77 73613a4d 65737361   d3b52</wsa:Messa
0x000002a0 (00672)   67654944 3e3c7773 613a5265 706c7954   geID><wsa:ReplyT
0x000002b0 (00688)   6f3e3c77 73613a41 64647265 73733e68   o><wsa:Address>h
0x000002c0 (00704)   7474703a 2f2f7363 68656d61 732e786d   ttp://schemas.xm
0x000002d0 (00720)   6c736f61 702e6f72 672f7773 2f323030   lsoap.org/ws/200
0x000002e0 (00736)   342f3038 2f616464 72657373 696e672f   4/08/addressing/
0x000002f0 (00752)   726f6c65 2f616e6f 6e796d6f 75733c2f   role/anonymous</
0x00000300 (00768)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000310 (00784)   613a5265 706c7954 6f3e3c77 73613a46   a:ReplyTo><wsa:F
0x00000320 (00800)   726f6d3e 3c777361 3a416464 72657373   rom><wsa:Address
0x00000330 (00816)   3e75726e 3a757569 643a6134 35303165   >urn:uuid:a4501e
0x00000340 (00832)   65342d65 6131382d 34323133 2d393365   e4-ea18-4213-93e
0x00000350 (00848)   662d3065 33376337 61623633 62653c2f   f-0e37c7ab63be</
0x00000360 (00864)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000370 (00880)   613a4672 6f6d3e3c 6c6d733a 4c617267   a:From><lms:Larg
0x00000380 (00896)   654d6574 61646174 61537570 706f7274   eMetadataSupport
0x00000390 (00912)   2f3e3c2f 736f6170 3a486561 6465723e   /></soap:Header>
0x000003a0 (00928)   3c736f61 703a426f 64792f3e 3c2f736f   <soap:Body/></so
0x000003b0 (00944)   61703a45 6e76656c 6f70653e            ap:Envelope>

0x00000000 (00000)   504f5354 202f3365 31363236 34372d63   POST /3e162647-c
0x00000010 (00016)   3364382d 34346333 2d393937 622d3061   3d8-44c3-997b-0a
0x00000020 (00032)   63396135 66363838 33322f20 48545450   c9a5f68832/ HTTP
0x00000030 (00048)   2f312e31 0d0a4361 6368652d 436f6e74   /1.1..Cache-Cont
0x00000040 (00064)   726f6c3a 206e6f2d 63616368 650d0a43   rol: no-cache..C
0x00000050 (00080)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000060 (00096)   0d0a5072 61676d61 3a206e6f 2d636163   ..Pragma: no-cac
0x00000070 (00112)   68650d0a 436f6e74 656e742d 54797065   he..Content-Type
0x00000080 (00128)   3a206170 706c6963 6174696f 6e2f736f   : application/so
0x00000090 (00144)   61702b78 6d6c0d0a 55736572 2d416765   ap+xml..User-Age
0x000000a0 (00160)   6e743a20 57534441 50490d0a 436f6e74   nt: WSDAPI..Cont
0x000000b0 (00176)   656e742d 4c656e67 74683a20 3733330d   ent-Length: 733.
0x000000c0 (00192)   0a486f73 743a2031 39322e31 36382e31   .Host: 192.168.1
0x000000d0 (00208)   30302e31 33333a35 3335370d 0a0d0a3c   00.133:5357....<
0x000000e0 (00224)   3f786d6c 20766572 73696f6e 3d22312e   ?xml version="1.
0x000000f0 (00240)   30222065 6e636f64 696e673d 22757466   0" encoding="utf
0x00000100 (00256)   2d38223f 3e3c736f 61703a45 6e76656c   -8"?><soap:Envel
0x00000110 (00272)   6f706520 786d6c6e 733a736f 61703d22   ope xmlns:soap="
0x00000120 (00288)   68747470 3a2f2f77 77772e77 332e6f72   http://www.w3.or
0x00000130 (00304)   672f3230 30332f30 352f736f 61702d65   g/2003/05/soap-e
0x00000140 (00320)   6e76656c 6f706522 20786d6c 6e733a77   nvelope" xmlns:w
0x00000150 (00336)   73613d22 68747470 3a2f2f73 6368656d   sa="http://schem
0x00000160 (00352)   61732e78 6d6c736f 61702e6f 72672f77   as.xmlsoap.org/w
0x00000170 (00368)   732f3230 30342f30 382f6164 64726573   s/2004/08/addres
0x00000180 (00384)   73696e67 2220786d 6c6e733a 6c6d733d   sing" xmlns:lms=
0x00000190 (00400)   22687474 703a2f2f 73636865 6d61732e   "http://schemas.
0x000001a0 (00416)   6d696372 6f736f66 742e636f 6d2f7769   microsoft.com/wi
0x000001b0 (00432)   6e646f77 732f6c6d 732f3230 30372f30   ndows/lms/2007/0
0x000001c0 (00448)   38223e3c 736f6170 3a486561 6465723e   8"><soap:Header>
0x000001d0 (00464)   3c777361 3a546f3e 75726e3a 75756964   <wsa:To>urn:uuid
0x000001e0 (00480)   3a336531 36323634 372d6333 64382d34   :3e162647-c3d8-4
0x000001f0 (00496)   3463332d 39393762 2d306163 39613566   4c3-997b-0ac9a5f
0x00000200 (00512)   36383833 323c2f77 73613a54 6f3e3c77   68832</wsa:To><w
0x00000210 (00528)   73613a41 6374696f 6e3e6874 74703a2f   sa:Action>http:/
0x00000220 (00544)   2f736368 656d6173 2e786d6c 736f6170   /schemas.xmlsoap
0x00000230 (00560)   2e6f7267 2f77732f 32303034 2f30392f   .org/ws/2004/09/
0x00000240 (00576)   7472616e 73666572 2f476574 3c2f7773   transfer/Get</ws
0x00000250 (00592)   613a4163 74696f6e 3e3c7773 613a4d65   a:Action><wsa:Me
0x00000260 (00608)   73736167 6549443e 75726e3a 75756964   ssageID>urn:uuid
0x00000270 (00624)   3a316531 62663164 622d6233 36312d34   :1e1bf1db-b361-4
0x00000280 (00640)   3630322d 39323037 2d643433 64663631   602-9207-d43df61
0x00000290 (00656)   31653565 653c2f77 73613a4d 65737361   1e5ee</wsa:Messa
0x000002a0 (00672)   67654944 3e3c7773 613a5265 706c7954   geID><wsa:ReplyT
0x000002b0 (00688)   6f3e3c77 73613a41 64647265 73733e68   o><wsa:Address>h
0x000002c0 (00704)   7474703a 2f2f7363 68656d61 732e786d   ttp://schemas.xm
0x000002d0 (00720)   6c736f61 702e6f72 672f7773 2f323030   lsoap.org/ws/200
0x000002e0 (00736)   342f3038 2f616464 72657373 696e672f   4/08/addressing/
0x000002f0 (00752)   726f6c65 2f616e6f 6e796d6f 75733c2f   role/anonymous</
0x00000300 (00768)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000310 (00784)   613a5265 706c7954 6f3e3c77 73613a46   a:ReplyTo><wsa:F
0x00000320 (00800)   726f6d3e 3c777361 3a416464 72657373   rom><wsa:Address
0x00000330 (00816)   3e75726e 3a757569 643a3966 65376130   >urn:uuid:9fe7a0
0x00000340 (00832)   64662d33 6532342d 34663861 2d396633   df-3e24-4f8a-9f3
0x00000350 (00848)   342d6262 66333031 65656339 66343c2f   4-bbf301eec9f4</
0x00000360 (00864)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000370 (00880)   613a4672 6f6d3e3c 6c6d733a 4c617267   a:From><lms:Larg
0x00000380 (00896)   654d6574 61646174 61537570 706f7274   eMetadataSupport
0x00000390 (00912)   2f3e3c2f 736f6170 3a486561 6465723e   /></soap:Header>
0x000003a0 (00928)   3c736f61 703a426f 64792f3e 3c2f736f   <soap:Body/></so
0x000003b0 (00944)   61703a45 6e76656c 6f70653e            ap:Envelope>

0x00000000 (00000)   504f5354 202f3365 31363236 34372d63   POST /3e162647-c
0x00000010 (00016)   3364382d 34346333 2d393937 622d3061   3d8-44c3-997b-0a
0x00000020 (00032)   63396135 66363838 33322f20 48545450   c9a5f68832/ HTTP
0x00000030 (00048)   2f312e31 0d0a4361 6368652d 436f6e74   /1.1..Cache-Cont
0x00000040 (00064)   726f6c3a 206e6f2d 63616368 650d0a43   rol: no-cache..C
0x00000050 (00080)   6f6e6e65 6374696f 6e3a2043 6c6f7365   onnection: Close
0x00000060 (00096)   0d0a5072 61676d61 3a206e6f 2d636163   ..Pragma: no-cac
0x00000070 (00112)   68650d0a 436f6e74 656e742d 54797065   he..Content-Type
0x00000080 (00128)   3a206170 706c6963 6174696f 6e2f736f   : application/so
0x00000090 (00144)   61702b78 6d6c0d0a 55736572 2d416765   ap+xml..User-Age
0x000000a0 (00160)   6e743a20 57534441 50490d0a 436f6e74   nt: WSDAPI..Cont
0x000000b0 (00176)   656e742d 4c656e67 74683a20 3733330d   ent-Length: 733.
0x000000c0 (00192)   0a486f73 743a2031 39322e31 36382e31   .Host: 192.168.1
0x000000d0 (00208)   30302e31 33333a35 3335370d 0a0d0a3c   00.133:5357....<
0x000000e0 (00224)   3f786d6c 20766572 73696f6e 3d22312e   ?xml version="1.
0x000000f0 (00240)   30222065 6e636f64 696e673d 22757466   0" encoding="utf
0x00000100 (00256)   2d38223f 3e3c736f 61703a45 6e76656c   -8"?><soap:Envel
0x00000110 (00272)   6f706520 786d6c6e 733a736f 61703d22   ope xmlns:soap="
0x00000120 (00288)   68747470 3a2f2f77 77772e77 332e6f72   http://www.w3.or
0x00000130 (00304)   672f3230 30332f30 352f736f 61702d65   g/2003/05/soap-e
0x00000140 (00320)   6e76656c 6f706522 20786d6c 6e733a77   nvelope" xmlns:w
0x00000150 (00336)   73613d22 68747470 3a2f2f73 6368656d   sa="http://schem
0x00000160 (00352)   61732e78 6d6c736f 61702e6f 72672f77   as.xmlsoap.org/w
0x00000170 (00368)   732f3230 30342f30 382f6164 64726573   s/2004/08/addres
0x00000180 (00384)   73696e67 2220786d 6c6e733a 6c6d733d   sing" xmlns:lms=
0x00000190 (00400)   22687474 703a2f2f 73636865 6d61732e   "http://schemas.
0x000001a0 (00416)   6d696372 6f736f66 742e636f 6d2f7769   microsoft.com/wi
0x000001b0 (00432)   6e646f77 732f6c6d 732f3230 30372f30   ndows/lms/2007/0
0x000001c0 (00448)   38223e3c 736f6170 3a486561 6465723e   8"><soap:Header>
0x000001d0 (00464)   3c777361 3a546f3e 75726e3a 75756964   <wsa:To>urn:uuid
0x000001e0 (00480)   3a336531 36323634 372d6333 64382d34   :3e162647-c3d8-4
0x000001f0 (00496)   3463332d 39393762 2d306163 39613566   4c3-997b-0ac9a5f
0x00000200 (00512)   36383833 323c2f77 73613a54 6f3e3c77   68832</wsa:To><w
0x00000210 (00528)   73613a41 6374696f 6e3e6874 74703a2f   sa:Action>http:/
0x00000220 (00544)   2f736368 656d6173 2e786d6c 736f6170   /schemas.xmlsoap
0x00000230 (00560)   2e6f7267 2f77732f 32303034 2f30392f   .org/ws/2004/09/
0x00000240 (00576)   7472616e 73666572 2f476574 3c2f7773   transfer/Get</ws
0x00000250 (00592)   613a4163 74696f6e 3e3c7773 613a4d65   a:Action><wsa:Me
0x00000260 (00608)   73736167 6549443e 75726e3a 75756964   ssageID>urn:uuid
0x00000270 (00624)   3a653337 37653130 662d6630 34332d34   :e377e10f-f043-4
0x00000280 (00640)   3939632d 61373862 2d666433 38356337   99c-a78b-fd385c7
0x00000290 (00656)   39363539 323c2f77 73613a4d 65737361   96592</wsa:Messa
0x000002a0 (00672)   67654944 3e3c7773 613a5265 706c7954   geID><wsa:ReplyT
0x000002b0 (00688)   6f3e3c77 73613a41 64647265 73733e68   o><wsa:Address>h
0x000002c0 (00704)   7474703a 2f2f7363 68656d61 732e786d   ttp://schemas.xm
0x000002d0 (00720)   6c736f61 702e6f72 672f7773 2f323030   lsoap.org/ws/200
0x000002e0 (00736)   342f3038 2f616464 72657373 696e672f   4/08/addressing/
0x000002f0 (00752)   726f6c65 2f616e6f 6e796d6f 75733c2f   role/anonymous</
0x00000300 (00768)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000310 (00784)   613a5265 706c7954 6f3e3c77 73613a46   a:ReplyTo><wsa:F
0x00000320 (00800)   726f6d3e 3c777361 3a416464 72657373   rom><wsa:Address
0x00000330 (00816)   3e75726e 3a757569 643a3936 34386262   >urn:uuid:9648bb
0x00000340 (00832)   38322d65 6630362d 34356630 2d616563   82-ef06-45f0-aec
0x00000350 (00848)   612d6339 38373765 32303264 66383c2f   a-c9877e202df8</
0x00000360 (00864)   7773613a 41646472 6573733e 3c2f7773   wsa:Address></ws
0x00000370 (00880)   613a4672 6f6d3e3c 6c6d733a 4c617267   a:From><lms:Larg
0x00000380 (00896)   654d6574 61646174 61537570 706f7274   eMetadataSupport
0x00000390 (00912)   2f3e3c2f 736f6170 3a486561 6465723e   /></soap:Header>
0x000003a0 (00928)   3c736f61 703a426f 64792f3e 3c2f736f   <soap:Body/></so
0x000003b0 (00944)   61703a45 6e76656c 6f70653e            ap:Envelope>


Strings
02ff4vz0
1, 1dsfsdfds, 0, 1
1, 1fgldfgkdfgmdfkmxc.,, 0, 1
1, 1wer3, 0, 1
1, 3sdfsdf, 0, 1
1, 3sdfw234sdfsdf, 0, 1
1, 43214, 0, 1
1, fd.v,bmcv.,bmfg, 0, 1
APPROVE
Copyright (C) 2014-2015
DECLINE
DFGHJKL100
DFGHJKL1001
DFGHJKL10399
DFGHJKL111
DFGHJKL1122	DFGHJKL13
DFGHJKL134	DFGHJKL14
DFGHJKL160
DFGHJKL177
DFGHJKL18211
DFGHJKL190
DFGHJKL201
DFGHJKL202
DFGHJKL203
DFGHJKL204
DFGHJKL205
DFGHJKL206
DFGHJKL207
DFGHJKL20797
DFGHJKL208
DFGHJKL20804	DFGHJKL21	DFGHJKL23	DFGHJKL24
DFGHJKL240
DFGHJKL250
DFGHJKL274
DFGHJKL300
DFGHJKL301
DFGHJKL302
DFGHJKL303
DFGHJKL31048
DFGHJKL337
DFGHJKL349
DFGHJKL350
DFGHJKL351
DFGHJKL36867
DFGHJKL36869
DFGHJKL36871
DFGHJKL368711
DFGHJKL36872
DFGHJKL36884
DFGHJKL38738	DFGHJKL47
FileDescription
FileVersion
FileVersion11
FLASH
FORM
LegalCopyright
LegalCopyright11
PANEL1
PANEL2
ProductVersion
ProductVersion11
sdfsdfx.,cxvbmx.cvmbf
SETTINGS
StringFileInfo
VS_VERSION_INFO
=\@$"*
 <.=['
:-_\*"
.])>"`,(
]|(^!{
$%&'()
%@=-:-
0,	|'&
"01<DOb
(",@04
?0@4/8
0=:4[O
07`ifal
08@P`p
%`0bA95
0+BYN`
#=0'cGig
0Keja)ic
0l A<Si
?0-N!S
0p3L;<
{!-0r`
=0#RXc
!0\"S|
(>`0t<C
0@	TM'
0~T}Uz
;,0u.-~k
'0u:	r!d
0VE>TY
0~\xO@j
<$0Y_F
12345867
1[<5Pm
(15SnC0DZL
!1}9%P
1\Abi	4
1{El/)<
 1E :W2
1{hH#k
1j1$Fj
1j`K9	
;1<^=~L>
!(1m3jA^
1TeehZ
1UCdB>:=`
1Un\~5
+1vm z
1"",We
1Y|+/pqm
1$,z?Y
,}"(|2
20VnO)
	21b}u,6
!<24K)
2_4MZ?
28	pH	
2A{.Fo
2AIlXy
2\?AU&
2	BB'L
	2bn;7
2)d*MNS0S
2e$+51
$2'EGY2
2fh'<9[G
2hA79l
~2?Hn<C
^}2j4O&1
_+2K-8
2,]_:m
2N<V=\
2pp7`9
2rg@|~u
?2sS'de7m;
2tL( d
2U#A#2w
2	(UFo
2$Umxp
2V)l`MBp
2xr>@.f+
2Zauph
?^3^0^
3AUif	-
`3[Bcx:N
3Dm'(=,J
3'F=)u*
'3OF56
3	pBSH
}3P	WtZZL
3 s}drJ
3	T!$@
3[t-2M
3T"p%g
3TU.P#
3.!%uJ
3UXcPke
3zX~6+X
}%41!T{:&E9
$:44Tv
 486DX
?4 8pH@
4?[9=,u
4	a8L3
=4Aa"Yj
4 (black
4Bzg0[
4C}#9{G
#4;^<Ro*
4Tg	:4
4_W]XEFSS
4Xvl%S
4)Z-Of
-~54D!
56789+/=
5`;a=4
5bu;g[-
5cQzB-9
5`:E3"
[5F#F1{
5fZ4:K
#:5GTP
5H$Rj{
+]5LUb
5nPt/t
5NtGvF
5o3bZ}
5q%bF^
@5qD?j$
|5?	R/
5r-eA@
5T K%*(
5>tPJ02,!
,'5T$!#zA
,5[V5a
5wN( ZTH
*5X1XuQ
5y-F2j
@&.>6	
64YDEe
69U{S(-
6a2	VC
6\AM{!
+6bUQI
)6D#@8
6ej$d*C-T
6<G`:Cf
6GYu@gv
6%H Vqd
6m[G	E
6mK	wH
%6Mp=G	
_6>\n[
6O#	#)
[6PB@g
6p;<:)T2
6QIt4B
6:]r23"I9MY
6r2k &
,6&R6y1
6-r%/M
6sBw<<
(6uGmZ
.6U,$h
70g@>F
71kXw,
^71vRqpc?
'74,|~nL
7cx	kN
7d4<u\
7fJzSY~
7#' G+g/
7|HW@Q
7IAqh,kA @<
7IvrsK
7_iz)V,U
@7|"JG
7k|bPlWF 
.! 7L)"
7M.2<V%7
7n'3)'
,7,~qx
	=7$v7
7v)9RYE3
7XLo<S
7~xW}L.
7Y{1@`
'8\~%|
]$-#8,
8*):$?
@8[^0Ek
:81JW}
|,85s1
,8BUj#
@]%%8cu
"8C{.Y
8eu737
8*f`.J
8$F v"
\8g#*qh
8;huxX
8J\Pts
8}mn%3b>
.@,8"N
8^pACK
8pqYTQ
/:8+.q
8r.0f9~R
8r!"<Z
8SilLl
$8TR<C
;8u5#k
8y=G0|
.8^Z+*
^~9\>(_
90LFm2
#~91lA
9}{1 t:
9$1t~"I=
96]^.?
9|fS,2DQ
9 GDUc
9grf7|
\9hs$)B l
9iI>{Of	
9~K0W[
~9|_mn
	9m{q$
{9r\BK
~%>9rh
)]9T@&
9vUXt;	
~>|9XJ
'9+Y@(|6
9ZM3o<
#A0	Ez$
{a5NI.
a7J6Hcg
a8U\a$
a9?KA21
A	A^0}g
AaI`\i
A(aOk:7
|@%A:(aT|
A+:cbp
.adata
ADJ	U>
advapi32.dll
AFmd3I
ag"dX4
a"gxYc
aI{KC\
Ajw8zVo
`A~<;-;K 
Aki$tE
a[(-KQ\B
aL$9ka5
a\L e^fa
A{=lZMU
:Am.0|
AM/sPx
am%\u;
AMWn=Aq[J>
a Mz~5m
aNb+Qqh:H
apGrd6z
[APxS%U
:AQaSd
AQt+k_Y[+
.(!ArEs
[aRi$l
[,AriM
@,^Aro	6"3
as8XR3
</assembly>f
      <assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="*" publicKeyToken="6595b64144ccf1df" language="*"></assemblyIdentity>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
a<S:.z
aTy$pe
`} au(
a-=u=g
A\v	{)R
aWQj9hb
*(Aw#r
a``X$,
!%ayLIs
"A	z4L,A
'?AZ|54
azEJU^v
b1EAE3_c
B1FK*u
_ B["6
(@B76[n
"b7h3|
B>\/7mh
\BA~Lu(
B:\ANp
] "BbyBHu
<?b_c(
Bcl:U%/
BD 1%0!R~]
bDzW.%B
/Be)'4 X
B.e&e4
+b-FfT
B`G8Sf
B,giEK
BGL'yo
bj)BPJg
BK98Nv
B~ktiW
Blysdyz
b!mf}O
b:nBe)|y
%*bnv@L
	\b-#nz
b$o/]e/E
bOnQghg2
#bPRo}
&bQ=9@>
:B}qvz
_+br?,
-b ReJ@Z]
)B}.Rn
B!s,@*Aa
B.sH_`
B`ss=MT
 BuiCf
BuON[pa
=&bUYC@
_BV^#,
b>VbTH
bVzIQW
bwD=xCN@
{bwhl!#
}b#"wW.
,b*X,n
bX\z_|H
<	}#~c
:=	(c|
c1\({v
!c4J9J'P
<c5{I)
C)5w~ 
C-6&9?=
c6[{DM
caA%Jyat
caBrk)
Ca&/h!c
Cancexl
cAU!?|E
c|B	'>3a
| c<bhwu
~cCa#B
-c@'H>
(?C{|"H
<c|I; 
CK!/Ia
c	KM]z.
>CkV>&
@  Cla\sr
CM"d;m
c\My,	
C@n1:1MD:~9c
CNH0}.
comctl32.dll
comdlg32.dll
CoTaskMemAlloc
cPlcj&
['@]cq
CreateStdAccessibleObject
CrU~Xpe<
CsVv!R
;'C"SYn
C&:"@[tGJ
C=U,Fr
<cVh]OO
;C|*~X
{,cY5OE
CYC,gU-
 c@Yz+ N
C ZY4YQ
d052c)!d
'D2$,~<
D2[&Es0wNP
D3atNU
D$3Q2im
\'D5h/
d7Pgi'
d8r4>G
daqn*z
/dA"u(
dawNg#
!D}_bH~_7O
d	B;HJ
D{B}jT
D(B&sx;
d=/{cdx
d {\D0
  </dependency>
  <dependency>
    </dependentAssembly>
    <dependentAssembly>
>DF%MD-
-dG1	(
dgN"qJ
d(	,H*
d]HYVG
#dI%l$'t
dIO!pY^
~{Div$
`&< DJJ 
dK%@,MAR
DkUx^Q
#[,:dl
dlGKDW
d_]LgLWG~1
d\@L=S
<d@mv)ks
*d nMfY^0
Dn?Qgw
	DOeOw
.Do$V0
!d$P~_
D#]PIV
dP`Jl	
d$R)E.
|d_~rn
!dRn5I
.<D=SAH
d`so44
D`Spec
DT\e8q
}DTT(n$y
|Du`mz
-[<d+.v94
d-vb^(Z
dvcf,~
`DWa|+
D.ZI?I`
}E/.[@
e$0hiN^U
_'-E`3
E3_"?ac
E3F7)a
^E4~VC
E67Pu6
'E7E ~
E8M+4w
E9NlZw
EaGP2P
e?$AH_]
Ealhpk4
^EaQ[N
.}eb1<-
@E}B8(a
e|B<X]`
EByl>U
E<({C n
Ecqt9)55]
ECub52
[*Ed<=j
&Ee8} 
#e*Fu,L(
eH9c~e#$l
E):hI?R
\EHS?U
eI)8wm
Ek{p<V
E;KR{~
EkV$e}
	eljlW
E_m*2"
Emo/&'
eN)]E%p
]ENkjuU
e'oGv`{
eON92M@
e}oq"@
_eot8M
eP"P7&
eQ	rT(
ERcyx4
ern`l32.
ERZW7b9
Escape
e,S|=&&pJ
@EsS$8
E;Ssg2
,+Et!3
E]Tr( 4N"
ETT-6@
{.E!uP
eUy793
Eva*IpR
ExA:$L
<ex{O<
Ez	fNL
ezLhLMKn
f0Sk?\
F2$]*#Q
F2QO K_
f6<)T]IK
f6Uc+9
f7eUmo
f^7z!Y
<f8{Qie
^fB''<
F#bCp3p~
fBL=W3
;fB`uECF
f+c=_H.
$fei%h
FENQrf
ff9	9%
fFum`>
Fgavqc
FGHIJK8LM
}F'I_s
#Fj<BD
~Fjx6L1i
FKH]{WVrTy^@
fkor"*
:@fK;{t
flow4t(G
fMemory
Fnn(aSW
f)NYih
]'Fo[	1)
fOj0vdw
!F(o{N
FP3VYpQ
>FpTeY
%F.rDBc
fRo2zO
~\f	%s
F|$+TXwK
F=`}vJ
]f&WJk
F]:wR)n:&
fxrm4-
f:. ?y
 <fyJ1
;_FYJi2
fyPU3!f>sh]
F>Z'5,
=*>F'zG
! FZPT
.!|g, =
)"&-`G
g2^KMDo
G3'0X9P
*]g6c:
G;(@}8
',G8g<
`\G@b5
"|%gCyV
!GD5b(
gdi32.dll
GdipGetImagePaletteSize
gdiplus.dll
gdq`aL
g/dr*Wu
G@E"'[d@
g^Er/l
GetFileTitleW
GetFileVersionInfoSizeW
GetModuleHandleA
GetProcAddress
GetProcessImageFileNameW
GF2@d,
GF;/ai
!_G%F_@h
}%gFlS:
g}F|[wFR
 g,Gw)R
Gh	gfo[
GhlfrQ
=G(kI?{N
!GKUZj_
&]g}/l
gml%|P
'_Gngy
]GNU]n
-gPeC#
GpQwjQ"
gpu':lz
gPxd<?
G,{{+r
Gr=;[%
GradientFill
G`[r?rh+
@$;gRX
g%)sqUiN
,!gTM_b
,G)t#QES
gU)2^{^
}g{&ub
gu%kS%
g-u=s7
Gw$1?7
-gwEQ8%
*gWjvI
gw* p)
Gw.RBj
gxgnsbe
/GXn!g,g'I
_H,/=}
h42\RKL
H %4'r
H55K.G
h5a&yq
h^5P$qY)W
h``5-z
h6)wr9
H70,+=
H9G<;dk
h=$@B3
h?CVEZ7
%h)(@Da
;	!hDp;
H";*<F
h=fG:q;
h{FXsL0+
h[I\%4
HI`pDR
Hjc_mZQ
"h'J	s
Hl _ "
H; /+LB
@h]!:M1
H%NPf;
^H#\p.`<x
[<hQ'b
HqB8F>c
\^hR`?3"
Hr-Fwxvz
!hR.n_
 $HR|PP,
^	.hR.\Y
HsKF!<
ht3=<L
-hTP<Z^
Hulqc,
.;HUZU
Hv>6tg9
Hv# jCnAbZ
H@<wTa
HX>&11
HY+@jy
HyPR~l=
`hY_qX
H$YYljZ
HZh;Y}$
I|{/*)0
#I0q(%
I-	0W'
I2C6Hv
i&2.^|D
,i3rj`g
I(4gR49
i)4R7g
i[6jw^=
I7UCj0t
i?]8E~
I8'=gW[
i#%93a"No
''i~9wi
IA6-Ls
&+I-"B
I'b>~3
i}BkFS
i(c>6s
[i`c+f\R
IDDMeV-
i/ECvJ
[iEDU-
I}EjWPN
i(f,3&R
@>.'IG^
IgM?,>
=,:Ihj
IIh<5fTx,
i-iLg-
im~b(e
i}mf%CF9
I_]}mPo-
+	{i-=NI
INrFtA
InternetOpenA
INw?]j-
IoKl8S%CFxY<g
iplm;E
IProdu
i&PW2S
ip@)%x
i q'9%
"Iq*bJ
iQO)cd
]I*&rj
^IS{d4\y
~i+S"L
ISOy,fd
$i=TqCj
?i u9{
I=Ui24
iuMR7F"
_	I{U<R
i$vbZuG
)=IvSX
&~I=wX
IXf;~C#l
iy,=E6=
IYO2jZa
iZ6hUc
izaT>!
J,0	.;
J0I>{C
{J]1ReA]
~!j2(;/$
`J*!2{
'j{3\'
"+&_J6
J67N~}3
j>'6lko
_j@+@7
J76RJ@
[+j7{J
J(8eF^e 
j93+LB
j9ARFRmH
j}9GT\U
jA{-45
!J.^A|yJ
jb4jaZ
JB @dHP
JBen]iLD
j@CT2cj.
jdDK|:L{g
jectdi
j:EfGej
je_[r1g
j]GB)k=
 J} g`Q
JGT'TBH
JI=a2M
J](IjG
jkB}2-(
J{KU2c2
`JnIp}
:%jnjCM[-
'jntNS
J>O>F	
j&,Old>C
J@! Ps
Jqchd-
j%qEwU@
:jRETp
JS?~B9
&J{sn8
JsZv+R
]{J|Th
jTOy<N
\j^u1(~
juq'A:
J:uSoaa	
Jw2(8cu
J[wE?H
Jx\]WKO
jYgXz*
j;z^kX
\JzpkeO
JzU+.{
{_K4Ossu
k\?5_/
k`;5~72A
k7m5X8
k8W=ly
K9W>:3y{
Kaa\f	
k"AEXKS
KBYsqN
KDu *)
Ke{r<;d
kernel32.dll
kE$[YHl
`k#^~ff
@K]	*I
Ki 3& 
[	KLDs
	klOUE
	KLV|y
kM$LP	
*K!mWd
Kn|m`L
K#|!nR
k[nrI8
[K""OB_
k	oYa#
&%)K)_p<1
=K_Plx
k:%q9U
>K^q:e
"`K:Q"N
]kQ^U 
KR_q$3yc%
ksA6rqq
kSu*Vs
KTCK8t
^K)'t.LIF/
KTRQx;|
k[U:+#
>( Ku2'
K'uAUr
~KuRf92
KVAUbKj
k:VRXX#Z
Kw*hSL
!kwzb/D8c
_KXh;%
kxJfdVf
K{yH[#
kYH'i/
kyp =T
K$)?yq
.Kz2n/
]+L0->
l$*`1|a
l/<1anc
L]1H/*
l1q`kg]
L2+}>|
~[,l2q8
L$3|wv
l46`6Xu
`l	96d
'+LcG%%
\]lc,mk1
LcsP?Jo
lD-\	_>b
LDw*]dmd}
LeBVI!
:LE/PE
l\	(f)
='%L	F1
LGj_~m
LhF$Lz
LHg.MT
/L\hIS
>>L}_I
LibP1 
lig\~F
lISs@w
/l|m=0Z =
Lmdf{1
lmll3<N
lmpv|h
Ln$q[N-
LoadLibraryA
l;@&oD
LoE?~z
LpN=b$
lPnfHB
Lr<+'a
lrC/y3Ad
L`RH?b
l|,$s,
LS$][A
L sAlEU
	L~sITf
LSLR$Q%
$L=TaH
]L?[)u-
lu7i_3
,.}?LuX
L	Var	
lW%0&!
LW}%60
l<WgW|Tc
?^LwW1
[L=%$x
lXnGF\7
l~y)u#
lZ^)N(
-!`<m!
m0k`H6
M2>'jUkD
m}50[Q
,M5e^7
m6c. ck
	M7WXd^|
M8{Z7=
%}m9O:
m@Aa0k
M^?AW_y_
&!%mD.
=MdJ% -
me0O%X
@m:euO
M_'fiX
Mfm0oj
m@fU66
:m]@fy
mGhQ(P
M:!!J_
[ml$>Z
}MmINL
mNu)Fj
+Mnu+QB
@+<|Mo
/Momohp
=MQ7_J
mQ	?.?J
(mr.Mz,
MsB8V>
msimg32.dll
MSve.S
Mul0i?{
M:V;\<l=
mWiD3zO
MXe,aMjpr
<M^Xl:
n\[`#`
n/$&0+
N0/h7+z
/n?1)+
n&]1`A
n1V3Ky
*n'^4?
:)n4i4
:N6Ez|
N_6 Fe|
n6h+<*$mB
NA5	k_Z
+nb#{?
nb&	 6
N^;(`c
{=@=NC
NC+	#B?
!n;%Cg
(NDre(
_NeiQ[
NfHZT>	T3
N_F`'j
|NFjoQ
n>'G7b*j9
-N~GNT
n H(Lm%
@NIj,s
Ni%m& &:
NIu~)L
Ni[XiX
NJfWy3
nk24	TM%)
NK`C3p
<N?KfQ
.=nKnd
NKyBB	r
n{|LVT
[; n]M
n!&m3P[
n.mbcd
,nM.Gc
Nm?/QO
NOng{g
NOPQRST
N]`Pg#'
NQBR-R
+Nq]~j
%.NrcC
NRE#qQ
n;ReY:
nRmh}i.
,n:rq^
<N_r?V
`N+S+#"h~
nSnZCX
'Ns&[Z
?.}N%u
n	 u9D
nU}&Q~
"+nut!
N--v)[
nv<vm;6
NXngXDb
nXs1x`
;N~xxH
[/nXYY)
>nYDi4
]NY~U`Q%~
n,Z_$>E
-n^Zi02;
|O[( !'
O%2uhx
O3X9Sb
O4SRBZ
O5yX*zO
o\64$o
:O79F|I
o~7D8.
`/[%O?9`
O97;;`
Ob/2gE
o%(BBA
=&/+oC
oC=$\'
odeInvf
=o*d<F
$oE7Rz
OE~lgNu
OEYJN:
%'O FP
]_oFR@
O^Htq?X
o[\&iY
O'#J$@w
:o_';}KB4
o,k+qL
,oL6_77%H
ole32.dll
oleacc.dll
oleaut32.dll
oledlg.dll
OleUIBusyW
!):o{N;,
,:#oN=sg
 '^o_p_
OpenPrinterW
&o}p'-r
O#qgv3
ORPU\Y
or_q3`
O.rV!2A
Os'Nh6
OsWkka
%,^'ot
oU	7V:tMsD
"(O^uO
o:VSJ^
=;oVy	
oW1A`0
O"XDaj
OxGW<!
{P[@^{
p`0y#/
P1<Tq}
p$2FHqH
P357s4
#$P4n'
p5(`L+
P79NG9
@PAkXL
p/A@-O
PathIsUNCW
/pB`"G
pByn\}
p?.d89
"(pD#Ku
P+FP-jiw#&
	pg9JE
!<]pGi
P{Grr0GQ
Phc({,
PI6(X#
'PIMV}
PJ<<F+J(6
@pjLJu
P"`MF/bY)
pM`z)	
pmZz.3
?p:N)d+
pN@kbq%e
(&Po,}
<P+~O-
\	,po*B	
[p^pAs
pqP	V0
pqrstu8vw
PqS4rL
p-?>RCm
printf
@PS@3)
psapi.dll
Ps\Qev
*P:&Tb
pt$EAS>
P`$U)"
P.u*1H]
.@Pupx
p%)~VmC
	!PVMx
PVUL$8
P@vUpw(
:{{P{X{`
PxAZe=^&
)pXNb8,b
!pZaM"
q\0%+*
~"Q0p~
Q]2]sb
\]%q3f
q3FS]R
q3sWu.cwm
Q4lB.u
@q74<V
QA[yjQ
(q_]{B
 Qb>hp
Qbxmv@}
^&.Qcn
q*dB~>
q\dj-A
q)E.N}
!QFa$od}
qfh^.`
QF?kHOc
_]q_[Gi
Qh#^g2
QIxZ/?
q-jQ?E
qksr*D
q{N;,g
>qnHF(
%QoGc*
qO\x&]
=qOzRI4:H&
qP-f2Md
qPiNN[
Q,{p\x
qq+mns
;<+	QqW
^qSt-V
qT3D(u
QTgcK%u
Qt+*"K
q)t]nJ
#|Qu~0
)Qud2=5
q^~)vo^
qWUSy{	
QX* 0N
qx@\8Q
%q/xh 
QXY=LU
{QYNnrQ
Q/@zy'
<% .>,r
"^~<$r+
%^~ R	
r23hhr)	O
R2A/Qr
R'2AS<
r2[JPn
r2-t` 
r@\3Ah
r,4Vrq
R5V%LB
r6T}j 
r7D3yU
r7ICp<b.
r.8%(gx
r8oZ([
R9;k8JF
''	r9r
RaiseException
_R|A)Y*na
:.;>rB<
R`b7]0*
/rD&:a
rdE",e
RDEWofWd
<"RDht
R"\Djx
R#:e%'
RegQueryValueW
RemovePropW
Re^}QOm
RErju<
Rf;6b 
RG5Mr"
rga>_=r7H_Z
rgpC8bw
RHNYib
r!i36x(
)R?`Ib
: Rich
!RJ3{22
R!K/T 
~r?K Ty
RKw%~B
{rl,4Q
rlij	=
Rlj[({
rlRPO 
r~Lu=-
?	RmH}9
R N-jSx
	&R>OWb
=r P!_
rP!BTy<
r{PN2I
\Rq}1w
Rs~Uaq
]~R]sy
R&SY=h;
|> ?r$t(P,
;r&t.vnx
	{rTW\s
rU8: J
R'*Ukq
Runtim
!#RVF\
=}rVhaf
$R-v!zNT
R[WNtl'
RWU6z;
RX1u<9Ix
RXDz1Y
rXtYvZx[z\|]~^
R*/YT3
Rz?c&}
S0Q^N@
S	%1 ,
s,_1}W
s2Mc'f
s5^&>;
"S5S/0.
S'63<6q
$	S6pKs
|SAPx:
SBi_Od
;SBZ9)-)
sC~Gdy
ScH<u$
ScsiWqt
SDlu+kz
shell32.dll
ShellExecuteExW
shlwapi.dll
sIrU%y]
sisZ*)
sk*p856
S$kYZ*
>s+m-C
SN59&U
sO7h^K&
Sobl xv
s@o<tZwS
sPhsk[
sp Rai
S(+Py]:
(Sq Co
sQnaejZ
S$Q%O(t
SQWRVvD
@&Srj+
srk!s=
!ssg"U
SSo'hsaW
st/Lp}
stomIni.;
$Su*Y0"?
=->S?w
sw	Puc5X=
s	wxVD
,SXB$=
;,s'xFfO
sy^i$\
Sy%pLu
s_Z%.cn
szX} 0
T2a}Lc
)T2ON:
>@T5gD
-t<5}Y
]T7xV+,r:
t8dtmp
{t9)0!9*q
.*%TAe
tae}#"T
t]B7Fn
t<Bx>0H!v
)tBY@W
(tCK:H
TCY*{Tb
tdE.2q
TE|,sDU@
*T&FG5	
tfzdhG
Tg.+30
TGc`lv
=TGoKp
TGpc3	
THanLd	
T=he(p>7du
!This program cannot be run in DOS mode.
ThkM%H
Ths]?k5p
T	hv&%
-:tI7:
t}I.74
tIeyph<L
T(&}iqs
tirSYb
T:I &Wn
t#j5wI
TJr<ZJE
TK$/~"
tKnu~r
Tk)oI\
TkQjBpd
tK`S~)
Tl+3T:
.*TlF.Y
TLiA@N[
tLv"BJ3
TMG7Ch
@$TMul
$tn)`h
tnvvx~
!to	5f
ToM1ul
tpV*uH
t,=qHv{
t@r\3%
_TrackMouseEvent
TRcG:]
t_&R	j
	\TrR}
$TS?j5Ib
ts=M9m
|TsOE%
TuP<%,
t-vO^[	
twarKe
t"WeZ$
tWHu_w
T#WNw 
t&X7#0
tY+gVm
]&tYmu
.tyt$#9$
~T	)z6(
*+	,-./u
.u0+07
U0 W1Z\3,
U3,!f*
U4M|i>
-+`>U	5
+$u$7G
(U7.L(
U/`*92
u_(a[|
ua*mtE
Ubxg{N})
^UD_3>
UF+^a__
&uF:E*
u	Ff[<
UFi]*l:j
u(fJFc
ufk(=[
ug>7;Acz
U!hH1Q
:*uHj,
uim/q[
|uin-*
u/Ir	Ar	j
Uke63;`
uL<i_Pr
Ul[ju{0
ull-%{`$
um]E<`.
U\MRMs
uNCIZ'
un`v!F
[/>.Uo1}
UpIdZQ
u[p(x~Je
=`#U?S
user32.dll
u S=kRS
uTE7#[
uU)<#	<
uUa[R2
U`Ve.'
u+w4`)&
uW|,y{C
&uXRoy
uXsA3FB
!>/	UY
`@=u$YJR
}uz6zq
 )@v+\
) |v~@
>'_)V 
@#,|V<
v?=0X<'T
v6'/t[\
v7LYT 
V9dWxP
Vao8%=[;_
VariantChangeTypeEx
va	TRgsM
V}aw tp
=v]B8B
v "[bk
vBs9-nW
V!.bym
vdh;+R
vdIAR}
v:d.'x9
version.dll
vF'M'AS
Vg#I'}
[;vh%`
Vh-Dk0R
ViGtua
viZ"&?
 "Vj#m
vjXILV}
V[k/BV
vK|q<<
V#^L]N
+v+\m6
Vm'paz
v,nVV?
vo8ZKJ?
_v @o/&KSj
@V:(p-J
Vpt."h
v-q?%>
"V-QO:
>v]Q{yhU3
v_R c9
V#rD<\
VRh~!q
'VRk\9
.v{r%S
/v&R]Y
v?;'+,s
<v|seX
VS_HvoO(;Y
;|v#T0
~Vt_0Z5a
vtA"l;}T
v<:ts7v
=]v]-]U
	<)vuB
{V+u[|qs!
V~ us'
v[u$ym|6
VVcX#<Yu
v ' ^[w
:V&yxG;-
W4{	xN
w5UO\V`
w;A<S"
WaWTXJ
?w,be5zG
!WBh9\
,wbW;x
wC	GrX
)wDQ!W
W_g+K/h
WHX7k@
wininet.dll
winspool.drv
Wi@T)q
w}jF\(
>WjHoXhW
wKSA1m
WkUOg;
,].WKy
W%l2K-o
w	"LbW
WM0)Ce&
W\N1[,w
wnNLfe
W%NQPQl=
wOnX8V
WOTI2V
$W!p:k?
w)p`O?S
w^q~CD
WQk1>'0l?n
w>%;RA
(wsu'p]
@wtCuss
w<|U{j
@Ww4=D4f
WW:ZHOS
W=!	Yn
WyPH#F}
WzAxEqv
W>[}Z.F
|=W?z\j
x;/;+@
:*\#X'
X/@}*~
X2\F-*6
,>$%<x5
X6m7Pb
x/::99J
X9oMRdi
|!\X+A
Xa7/Wcw
xaMn99n
,.`Xc'
]XcE[z
XDsP91
<%>X,E
xF>1@i=-
XfN?y[
@	xG'[
XG8r}n-
>xgLaU
xgS7DU0
>^XI1(
[;#(Xj
XJo\&Tw
xJzR|Z~b
x}-'ka
$xKVCw_
#X$m@J%:
XNi$w[Y
xOL;NE6
Xp<iQtRF
X@P%^@t
xqt`KJE6
Xr*i\0
xt2;6V
.	,xTjQJ
X@T`NH
[xt{@\w
XVbHR6
%XWdtd
x<xAp+
X\~x"AR ^:
@<XyS#
X=Yx6@
x{}\yz
xyz0123p4
x&(^Z:
x[zhaMBY
x@zH|T
/+^y!"
Y0B.(U
Y1g[Mv
y)1-Kx
y1]	mq
Y4ie	 d
[^&Y.5
Y550gG
^Y"$5P
Y6H;G5
Y6Z]1DST"
&Y	75V
y]7J1|
y7+'M$
_Y;8Y(N
Y!9)M2
yA_6zd
Yb{!*2
yB	2j/C
?YC;`k
^Yc_Y|
YfbI,0
&Yf=Sz
-YGr?9X|
)yH$x[q
YJ>	Cy=L
Y	k)}#
=YK<,_6
Yku(y(
&y\Mh84
YMz}e0
YO2+B,F9
Y@)os.
Yp-&}*
yPLK{Q
YqAmB)+e
yq$~p;
YSi5JWM
?YSJi]
y/T|m.Y
yt>N5@
YUWUj'
/YV+jn
y~v_#l
(y+wX{,
Y?	XG/
-yyyKO
y/<+Z9B}
/-=Y[zt*a#
\:.z>_
z "0N7
		\{Z1
z)4,5o
z4l?X~
 #Z}5d
z5n-qh
z7\CcRx
Z8R&?,
z9?K!8w
ZA='e]
Zb"Sk%
 ZCReM
zEBs_e
$zEOu7
Ze@U}u
z]	fpBsG
ZG|!r#<
Zi3!q#
`Zi#t.
Z{iyRl
zjZ85]
ZL"^<0
Z*m\'y
!zne+T
^z?Nf0
z	o,>b
ZO<J{~
Z%peG{
$\z;Ps
ZpUW	j
Z PYq1
,zs-}c;
zte92=[
ZTU}W	Sb
-ZuF6kk0
_z,u@s
ZVH*-m
;Z!=Wh
^Z_,Y[
ZYj:i{
	zz{	G
ZzGL4`