Analysis Date2014-09-25 03:58:35
MD51cb7f3e8ebaf279f4625388ba9f3a2da
SHA11988b6e6521dcfb94ef56b876fa35ff6538c3277

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386
Section.text md5: 64f29e16ce0205c371397fb7992e8aa5 sha1: 51927abc4860c270b85e20951e42412e688d3713 size: 8192
Section.rdata md5: cbaeaa9915e92e2d8087eebf1bce4d25 sha1: 4a2adde1dd8fdfdd01434382bf04a36a3942d797 size: 4096
Section.data md5: 418c01fc8791a4db607dcc118771f531 sha1: 0a72ed6518b1c1e9892a4efe1e11a8a517e13780 size: 20480
Section.idata md5: 2f9ab99cc86e5bc04c1cf707d0bc707e sha1: 53b301f76648a41ad7f69f6787e3dbc47bf30a06 size: 4096
Section.rsrc md5: 5de89cd082ed997be287d3e9402d2354 sha1: be4c571f9eba33c3041fdec2a816fca5b81be1d6 size: 28672
Sectionreloc md5: 0132625760b471b5f5c88bfd26e281f3 sha1: 2063aae3a28d0b50ece86bb66412fe364338efd6 size: 4096
Timestamp2014-08-09 17:31:38
PEhash3172d116ea0e9053799ce5b55f9a02af7c25a734
IMPhash60ff1adac03b0fe258a0191f0ece9e9f

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates ProcessC:\malware.exe

Process
↳ C:\malware.exe

RegistryHKEY_CURRENT_USER\SOFTWARE\NVIDIA Corporation\Global\nvUpdSrv\value ➝
20140824\\x00
Creates File\Device\Afd\Endpoint
Creates MutexGlobal\MD7H82HHF7EH2D73

Network Details:

HTTP GEThttp://80.91.80.158:31643/stat?uid=100&downlink=1111&uplink=1111&id=0019909D&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://194.23.116.213:26084/stat?uid=100&downlink=1111&uplink=1111&id=0019A53F&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://195.62.29.94:49891/stat?uid=100&downlink=1111&uplink=1111&id=0019B915&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://89.30.61.112:44032/stat?uid=100&downlink=1111&uplink=1111&id=0019CCEB&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://89.30.61.112:44032/stat?uid=100&downlink=1111&uplink=1111&id=0019E0D1&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://54.247.67.39:24247/stat?uid=100&downlink=1111&uplink=1111&id=0019F4A7&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://95.211.198.136:44440/stat?uid=100&downlink=1111&uplink=1111&id=001A086D&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://195.29.89.52:16796/stat?uid=100&downlink=1111&uplink=1111&id=001A1C43&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://213.192.92.3:53109/stat?uid=100&downlink=1111&uplink=1111&id=001A3029&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://149.210.152.141:10238/stat?uid=100&downlink=1111&uplink=1111&id=001A440F&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://69.164.223.222:43118/stat?uid=100&downlink=1111&uplink=1111&id=001A57F5&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://178.33.197.36:31571/stat?uid=100&downlink=1111&uplink=1111&id=001A6BCB&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://176.223.119.253:18625/stat?uid=100&downlink=1111&uplink=1111&id=001A7F91&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://89.30.61.112:44032/stat?uid=100&downlink=1111&uplink=1111&id=001A9377&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://195.62.29.94:49891/stat?uid=100&downlink=1111&uplink=1111&id=001AA76C&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://188.165.186.236:22512/stat?uid=100&downlink=1111&uplink=1111&id=001ABB33&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://82.102.11.115:15396/stat?uid=100&downlink=1111&uplink=1111&id=001ACEF9&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://54.235.89.53:43461/stat?uid=100&downlink=1111&uplink=1111&id=001AE2DF&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://200.142.192.21:18811/stat?uid=100&downlink=1111&uplink=1111&id=001AF6B5&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://61.139.76.42:29178/stat?uid=100&downlink=1111&uplink=1111&id=001B0A7C&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://216.18.197.130:28430/stat?uid=100&downlink=1111&uplink=1111&id=001B1E62&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://108.178.62.114:28654/stat?uid=100&downlink=1111&uplink=1111&id=001B3267&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://216.18.197.130:28430/stat?uid=100&downlink=1111&uplink=1111&id=001B463D&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://178.79.165.113:30007/stat?uid=100&downlink=1111&uplink=1111&id=001B5A32&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://194.28.175.34:51633/stat?uid=100&downlink=1111&uplink=1111&id=001B6DF9&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://75.101.145.14:37470/stat?uid=100&downlink=1111&uplink=1111&id=001B81DE&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://83.222.2.212:28644/stat?uid=100&downlink=1111&uplink=1111&id=001B95C4&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://107.170.145.242:22740/stat?uid=100&downlink=1111&uplink=1111&id=001BA9AA&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://195.62.29.219:10925/stat?uid=100&downlink=1111&uplink=1111&id=001BBD61&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://212.83.149.150:62059/stat?uid=100&downlink=1111&uplink=1111&id=001BD137&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://195.29.89.52:16796/stat?uid=100&downlink=1111&uplink=1111&id=001BE50D&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://188.165.17.213:51340/stat?uid=100&downlink=1111&uplink=1111&id=001BF8F3&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://54.247.67.39:24247/stat?uid=100&downlink=1111&uplink=1111&id=001C0CE8&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://195.154.179.119:64167/stat?uid=100&downlink=1111&uplink=1111&id=001C20ED&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://75.101.145.14:37470/stat?uid=100&downlink=1111&uplink=1111&id=001C34D3&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://79.136.118.230:49649/stat?uid=100&downlink=1111&uplink=1111&id=001C48D8&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://68.169.110.227:44659/stat?uid=100&downlink=1111&uplink=1111&id=001C5CAE&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://217.197.115.196:21196/stat?uid=100&downlink=1111&uplink=1111&id=001C70A3&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://222.82.218.14:45570/stat?uid=100&downlink=1111&uplink=1111&id=001C8479&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://103.248.82.43:51515/stat?uid=100&downlink=1111&uplink=1111&id=001C9840&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://194.58.88.50:61107/stat?uid=100&downlink=1111&uplink=1111&id=001CABF7&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://213.146.173.215:60098/stat?uid=100&downlink=1111&uplink=1111&id=001CBFDD&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://62.212.128.22:12898/stat?uid=100&downlink=1111&uplink=1111&id=001CD393&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://123.30.174.195:18387/stat?uid=100&downlink=1111&uplink=1111&id=001CE74A&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://205.186.143.129:21583/stat?uid=100&downlink=1111&uplink=1111&id=001CFB01&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://212.175.86.17:42737/stat?uid=100&downlink=1111&uplink=1111&id=001D0EA8&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://159.253.4.167:13737/stat?uid=100&downlink=1111&uplink=1111&id=001D2250&statpass=bpass&version=20140824&features=30&guid=f2199487-c949-400a-931e-5c4bff325e91&comment=20140824&p=0&s=
User-Agent:
Flows TCP192.168.1.1:1031 ➝ 80.91.80.158:31643
Flows TCP192.168.1.1:1031 ➝ 80.91.80.158:31643
Flows TCP192.168.1.1:1032 ➝ 194.23.116.213:26084
Flows TCP192.168.1.1:1033 ➝ 195.62.29.94:49891
Flows TCP192.168.1.1:1034 ➝ 89.30.61.112:44032
Flows TCP192.168.1.1:1035 ➝ 89.30.61.112:44032
Flows TCP192.168.1.1:1036 ➝ 54.247.67.39:24247
Flows TCP192.168.1.1:1037 ➝ 95.211.198.136:44440
Flows TCP192.168.1.1:1038 ➝ 195.29.89.52:16796
Flows TCP192.168.1.1:1039 ➝ 213.192.92.3:53109
Flows TCP192.168.1.1:1040 ➝ 149.210.152.141:10238
Flows TCP192.168.1.1:1041 ➝ 69.164.223.222:43118
Flows TCP192.168.1.1:1042 ➝ 178.33.197.36:31571
Flows TCP192.168.1.1:1043 ➝ 176.223.119.253:18625
Flows TCP192.168.1.1:1044 ➝ 89.30.61.112:44032
Flows TCP192.168.1.1:1045 ➝ 195.62.29.94:49891
Flows TCP192.168.1.1:1046 ➝ 188.165.186.236:22512
Flows TCP192.168.1.1:1047 ➝ 82.102.11.115:15396
Flows TCP192.168.1.1:1048 ➝ 54.235.89.53:43461
Flows TCP192.168.1.1:1049 ➝ 200.142.192.21:18811
Flows TCP192.168.1.1:1050 ➝ 61.139.76.42:29178
Flows TCP192.168.1.1:1051 ➝ 216.18.197.130:28430
Flows TCP192.168.1.1:1052 ➝ 108.178.62.114:28654
Flows TCP192.168.1.1:1053 ➝ 216.18.197.130:28430
Flows TCP192.168.1.1:1054 ➝ 178.79.165.113:30007
Flows TCP192.168.1.1:1055 ➝ 194.28.175.34:51633
Flows TCP192.168.1.1:1056 ➝ 75.101.145.14:37470
Flows TCP192.168.1.1:1057 ➝ 83.222.2.212:28644
Flows TCP192.168.1.1:1058 ➝ 107.170.145.242:22740
Flows TCP192.168.1.1:1059 ➝ 195.62.29.219:10925
Flows TCP192.168.1.1:1060 ➝ 212.83.149.150:62059
Flows TCP192.168.1.1:1061 ➝ 195.29.89.52:16796
Flows TCP192.168.1.1:1062 ➝ 188.165.17.213:51340
Flows TCP192.168.1.1:1063 ➝ 54.247.67.39:24247
Flows TCP192.168.1.1:1064 ➝ 195.154.179.119:64167
Flows TCP192.168.1.1:1065 ➝ 75.101.145.14:37470
Flows TCP192.168.1.1:1066 ➝ 79.136.118.230:49649
Flows TCP192.168.1.1:1067 ➝ 68.169.110.227:44659
Flows TCP192.168.1.1:1068 ➝ 217.197.115.196:21196
Flows TCP192.168.1.1:1069 ➝ 222.82.218.14:45570
Flows TCP192.168.1.1:1070 ➝ 103.248.82.43:51515
Flows TCP192.168.1.1:1071 ➝ 194.58.88.50:61107
Flows TCP192.168.1.1:1072 ➝ 213.146.173.215:60098
Flows TCP192.168.1.1:1073 ➝ 62.212.128.22:12898
Flows TCP192.168.1.1:1074 ➝ 123.30.174.195:18387
Flows TCP192.168.1.1:1075 ➝ 205.186.143.129:21583
Flows TCP192.168.1.1:1076 ➝ 212.175.86.17:42737
Flows TCP192.168.1.1:1077 ➝ 159.253.4.167:13737

Raw Pcap
0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313939 30394426 73746174 70617373   019909D&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313941 35334626 73746174 70617373   019A53F&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313942 39313526 73746174 70617373   019B915&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313943 43454226 73746174 70617373   019CCEB&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313945 30443126 73746174 70617373   019E0D1&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313946 34413726 73746174 70617373   019F4A7&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314130 38364426 73746174 70617373   01A086D&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314131 43343326 73746174 70617373   01A1C43&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314133 30323926 73746174 70617373   01A3029&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314134 34304626 73746174 70617373   01A440F&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314135 37463526 73746174 70617373   01A57F5&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314136 42434226 73746174 70617373   01A6BCB&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314137 46393126 73746174 70617373   01A7F91&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314139 33373726 73746174 70617373   01A9377&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314141 37364326 73746174 70617373   01AA76C&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314142 42333326 73746174 70617373   01ABB33&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314143 45463926 73746174 70617373   01ACEF9&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314145 32444626 73746174 70617373   01AE2DF&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314146 36423526 73746174 70617373   01AF6B5&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314230 41374326 73746174 70617373   01B0A7C&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314231 45363226 73746174 70617373   01B1E62&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314233 32363726 73746174 70617373   01B3267&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314234 36334426 73746174 70617373   01B463D&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314235 41333226 73746174 70617373   01B5A32&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314236 44463926 73746174 70617373   01B6DF9&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314238 31444526 73746174 70617373   01B81DE&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314239 35433426 73746174 70617373   01B95C4&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314241 39414126 73746174 70617373   01BA9AA&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314242 44363126 73746174 70617373   01BBD61&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314244 31333726 73746174 70617373   01BD137&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314245 35304426 73746174 70617373   01BE50D&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314246 38463326 73746174 70617373   01BF8F3&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314330 43453826 73746174 70617373   01C0CE8&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314332 30454426 73746174 70617373   01C20ED&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314333 34443326 73746174 70617373   01C34D3&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314334 38443826 73746174 70617373   01C48D8&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314335 43414526 73746174 70617373   01C5CAE&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314337 30413326 73746174 70617373   01C70A3&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314338 34373926 73746174 70617373   01C8479&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314339 38343026 73746174 70617373   01C9840&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314341 42463726 73746174 70617373   01CABF7&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314342 46444426 73746174 70617373   01CBFDD&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314344 33393326 73746174 70617373   01CD393&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314345 37344126 73746174 70617373   01CE74A&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314346 42303126 73746174 70617373   01CFB01&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314430 45413826 73746174 70617373   01D0EA8&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30314432 32353026 73746174 70617373   01D2250&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d663231 39393438   =30&guid=f219948
0x00000070 (00112)   372d6339 34392d34 3030612d 39333165   7-c949-400a-931e
0x00000080 (00128)   2d356334 62666633 32356539 3126636f   -5c4bff325e91&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..


Strings
Q.
.....aew.......#.}..1.Q.<.
b....&.Q..6.........:Tx.,..
{$.
....k.fU.
.c.Y=O
..vk.@.%9*.... .j..0~
>Lo..Nm......a.l
....+...
.1........CTaY.K....q...5
.h&
...B..A.t.:K.<...B....t`[
7....k..;.N.......*.r...czm.>c..
.
..$5.....[{.../T..X.
.
.q..x......h...S
Gl..u.2
.~KF..5d..A...~E)G.n...E..m..`qP.....0bp.Uj'..:..#.".
.P.h.O....2F......3...
w(.B.b.....
C$[.Y.
.....,o.
O..
..BX.&...M^.o.[E....3...z...>.[..B.._!-..9.`.Q.L..
...Ifx2.8Q..0A.qWRq..+#1.C
........,.....=V/iT.r...
^....X>k[k2.'.Y...._...i.GyX.F..!C.8...e..w...wh.
9.+.:..
.
.E
(...`..])P......@f....-G.8+R&....Q..}<:.
..t..).p..w..8.CX....~...!..4.;..
+9X
..=]
.
Y
L..x
 3...
.y.p$.L..S.
..........Z{
....
4..+.........8.#..@..V
.
E..z
...
.....8hI....;
.
.

 (C) 2003
myapp.exe
xlRW
 xlRW
xlRW 1.0 
 xlRW(&A)...
080<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0
!0.+kB
1$1+171>1Q1b1h1v1{1
141L1h1l1p1t1x1|1
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
2DXVP 
3$3*30363<3B3H3N3T3Z3`3f3l3r3x3~3
3 3$3(3,3034383<3@3D3P3l3x3
$34Rbr
3Hgi!Z5
4 4&4,42484>4D4J4P4V4\4b4h4n4t4z4
444@4\4d4l4t4|4
  %*5-%'2(  .?/279<<<$-BFA:F5;<9
5"5(5.545:5@5F5L5R5X5^5d5
6-=9=?=_=y=
}6Oo"'A
7(2V =j
9& &99999999999999999999999999999999999999999999999999
9acspAPPL
AppendMenuW
CreateFileA
__CxxFrameHandler
@.data
db2EY	
dDLE{x
DrawIcon
EkV_^]
EnableWindow
?fB9s_F
GetClientRect
GetModuleFileNameA
GetModuleFileNameW
GetSystemMenu
GetSystemMetrics
HrCg@b	g 
hu[[e:
HxCK7(CGM
i2(uZV
ICC_PROFILE
.idata
IsIconic
KERNEL32.dll
kH r2A
LoadIconW
memcpy
memset
MFC42u.DLL
mntrRGB XYZ 
MSVCRT.dll
@mtEhe
>^ngVc
PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD
`.rdata
SendMessageW
S}[qbH6X
S|S7j\
!This program cannot be run in DOS mode.
UF]1y&
USER32.dll
_wfopen
W|kf#V,
xSzSej
Z!te{3YcE?/