Analysis Date2014-08-19 02:42:07
MD59a2ca34309418045755ca2f113509dd9
SHA1ccc579b872606808b0d5f2433b75d21f67fb783d

Static Details:

File typePE32 executable for MS Windows (GUI) Intel 80386 32-bit
Section.text md5: 0bc2ffd32265a08d72b795b18265828d sha1: dd2a446014a37556f39173b802c63a4e46e09366 size: 23552
Section.rdata md5: f179218a059068529bdb4637ef5fa28e sha1: 6035d27db526131eb0f29aee60cfcdbb5072ed7d size: 4608
Section.data md5: 975304d6dd6c4a4f076b15511e2bbbc0 sha1: 1f65340672c91ffd0f2583ff104beaece43c7855 size: 1024
Section.ndata md5: d41d8cd98f00b204e9800998ecf8427e sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 size: 0
Section.rsrc md5: b6d2e734d561929aa136756a31e13d71 sha1: 9cd1624d36743f0b2c218fb410fb3a8e0bb2bf8b size: 2048
Timestamp2009-12-05 22:50:46
PackerNullsoft PiMP Stub -> SFX
PEhash0aba125851445314f12470a4b89760b38b10f4ff
IMPhash099c0646ea7282d232219f8807883be0
AV360 SafeDropped:Trojan.Generic.11236172
AVAd-AwareDropped:Trojan.Generic.11236172
AVAlwil (avast)Dropper-IM [Drp]:MagnitudeEK-G [Trj]
AVArcabit (arcavir)no_virus
AVAuthentiumno_virus
AVAvira (antivir)TR/Carberp.A.122
AVCA (E-Trust Ino)no_virus
AVCAT (quickheal)TrojanSpy.Zbot.r5
AVClamAVno_virus
AVDr. WebTrojan.DownLoad3.32895
AVEmsisoftDropped:Trojan.Generic.11236172
AVEset (nod32)Win32/Glupteba.M:Win32/Injector.BCTD
AVFortinetW32/Inject.MRZI!tr
AVFrisk (f-prot)no_virus
AVF-SecureDropped:Trojan.Generic.11236172
AVGrisoft (avg)Downloader.Generic13.CCHH
AVIkarusTrojan-Dropper.Win32.Bunitu
AVK7Trojan ( 000001021 )
AVKasperskyTrojan-Spy.Win32.Zbot.sfrl
AVMalwareBytesTrojan.Zbot
AVMcafeeRDN/Generic.dx!dbh
AVMicrosoft Security EssentialsTrojan:Win32/Carberp
AVMicroWorld (escan)Dropped:Trojan.Generic.11236172
AVNormanwinpe/Injector.GKNW
AVRisingno_virus
AVSophosMal/Zbot-QU
AVSymantecTrojan.ADH
AVTrend Microno_virus
AVVirusBlokAda (vba32)BScope.Malware-Cryptor.Hlux
AVYara APTno_virus
AVZillya!Backdoor.Symmi.Win32.225

Runtime Details:

Screenshot

Process
↳ C:\malware.exe

Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\nsr2.tmp
Creates FileC:\Documents and Settings\Administrator\Local Settings\Temp\nsh3.tmp\System.dll
Creates FileC:\Program Files\NVIDIA Corporation\Update Center\nvupdate.exe
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temp\nsg1.tmp
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temp\nsh3.tmp\System.dll
Deletes FileC:\Documents and Settings\Administrator\Local Settings\Temp\nsh3.tmp
Creates ServiceNVIDIA Update Server - C:\Program Files\NVIDIA Corporation\Update Center\nvupdate.exe /svc

Process
↳ C:\Program Files\NVIDIA Corporation\Update Center\nvupdate.exe

Creates ProcessC:\Program Files\NVIDIA Corporation\Update Center\nvupdate.exe

Process
↳ C:\Program Files\NVIDIA Corporation\Update Center\nvupdate.exe

RegistryHKEY_CURRENT_USER\SOFTWARE\NVIDIA Corporation\Global\nvUpdSrv\value ➝
20140426\\x00
Creates File\Device\Afd\Endpoint
Creates MutexGlobal\MD7H82HHF7EH2D73

Process
↳ Pid 812

Process
↳ Pid 860

Process
↳ C:\WINDOWS\System32\svchost.exe

Creates FileC:\WINDOWS\Prefetch\CCC579B872606808B0D5F2433B75D-2B48A107.pf
Creates FileC:\WINDOWS\Prefetch\CMD.EXE-087B4001.pf
Creates FileC:\WINDOWS\Prefetch\NET1.EXE-029B9DB4.pf
Creates FileC:\WINDOWS\Prefetch\EXPLORER.EXE-082F38A9.pf
Creates FileC:\WINDOWS\Prefetch\monitor.exe-1949D260.pf
Creates FileC:\WINDOWS\Prefetch\USERINIT.EXE-30B18140.pf
Creates FileC:\WINDOWS\Prefetch\NVUPDATE.EXE-35D250F4.pf
Creates FileC:\WINDOWS\Prefetch\READER_SL.EXE-3614FA6E.pf
Creates FileC:\WINDOWS\system32\WBEM\Logs\wbemess.log
Creates FileC:\WINDOWS\Prefetch\svchost.EXE-0C867EC1.pf

Process
↳ Pid 1120

Process
↳ Pid 1216

Process
↳ Pid 1328

Process
↳ Pid 1872

Process
↳ Pid 1824

Network Details:

HTTP GEThttp://213.174.153.118:27738/stat?uid=100&downlink=1111&uplink=1111&id=00057E4F&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://70.32.107.132:19796/stat?uid=100&downlink=1111&uplink=1111&id=00059293&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://64.135.144.91:36139/stat?uid=100&downlink=1111&uplink=1111&id=0005A669&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://216.35.160.138:43782/stat?uid=100&downlink=1111&uplink=1111&id=0005BA2F&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://79.170.90.32:31643/stat?uid=100&downlink=1111&uplink=1111&id=0005CDD7&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://72.52.11.117:20357/stat?uid=100&downlink=1111&uplink=1111&id=0005E19D&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://82.98.104.7:30871/stat?uid=100&downlink=1111&uplink=1111&id=0005F573&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://72.13.32.43:29755/stat?uid=100&downlink=1111&uplink=1111&id=0006092A&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://83.212.32.138:13737/stat?uid=100&downlink=1111&uplink=1111&id=00061CF1&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://96.9.133.248:46856/stat?uid=100&downlink=1111&uplink=1111&id=000630B7&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://178.33.197.58:10315/stat?uid=100&downlink=1111&uplink=1111&id=0006447E&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://5.77.49.215:61107/stat?uid=100&downlink=1111&uplink=1111&id=00065834&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://195.12.48.190:25127/stat?uid=100&downlink=1111&uplink=1111&id=00066C1A&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://94.182.146.68:33300/stat?uid=100&downlink=1111&uplink=1111&id=00067FD1&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://109.205.137.229:64167/stat?uid=100&downlink=1111&uplink=1111&id=00069398&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://176.58.122.65:13438/stat?uid=100&downlink=1111&uplink=1111&id=0006A76E&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://212.34.128.45:49105/stat?uid=100&downlink=1111&uplink=1111&id=0006BB44&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://202.217.72.1:19919/stat?uid=100&downlink=1111&uplink=1111&id=0006CF0A&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://216.35.160.138:43782/stat?uid=100&downlink=1111&uplink=1111&id=0006E2C1&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://213.124.38.165:32136/stat?uid=100&downlink=1111&uplink=1111&id=0006F697&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://123.30.174.195:18387/stat?uid=100&downlink=1111&uplink=1111&id=00070A4E&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://89.248.90.108:33816/stat?uid=100&downlink=1111&uplink=1111&id=00071E15&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://54.235.89.53:43461/stat?uid=100&downlink=1111&uplink=1111&id=000731EB&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://80.94.26.250:19285/stat?uid=100&downlink=1111&uplink=1111&id=000745D1&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://216.239.32.21:27323/stat?uid=100&downlink=1111&uplink=1111&id=000759A7&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://216.177.150.107:20261/stat?uid=100&downlink=1111&uplink=1111&id=00076D7D&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://78.108.178.6:36427/stat?uid=100&downlink=1111&uplink=1111&id=00078163&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://80.94.26.250:19285/stat?uid=100&downlink=1111&uplink=1111&id=00079558&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://217.12.199.36:53109/stat?uid=100&downlink=1111&uplink=1111&id=0007A92E&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://178.33.248.60:46612/stat?uid=100&downlink=1111&uplink=1111&id=0007BCF5&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://204.14.213.177:13023/stat?uid=100&downlink=1111&uplink=1111&id=0007D0BB&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://189.89.125.65:18703/stat?uid=100&downlink=1111&uplink=1111&id=0007E482&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://109.205.137.229:64167/stat?uid=100&downlink=1111&uplink=1111&id=0007F829&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://178.79.155.234:15590/stat?uid=100&downlink=1111&uplink=1111&id=00080BEF&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://5.77.49.215:61107/stat?uid=100&downlink=1111&uplink=1111&id=00081FA6&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://94.231.110.183:35463/stat?uid=100&downlink=1111&uplink=1111&id=0008335D&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://184.168.221.25:22903/stat?uid=100&downlink=1111&uplink=1111&id=00084724&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://67.227.167.0:42896/stat?uid=100&downlink=1111&uplink=1111&id=00085ADA&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://89.248.90.108:33816/stat?uid=100&downlink=1111&uplink=1111&id=00086E91&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://178.33.231.139:15396/stat?uid=100&downlink=1111&uplink=1111&id=00088258&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://70.38.101.66:11410/stat?uid=100&downlink=1111&uplink=1111&id=000895FF&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://206.220.43.92:41780/stat?uid=100&downlink=1111&uplink=1111&id=0008A9D5&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://50.28.0.72:25880/stat?uid=100&downlink=1111&uplink=1111&id=0008BD9C&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://200.43.192.230:26666/stat?uid=100&downlink=1111&uplink=1111&id=0008D172&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://213.124.38.165:32136/stat?uid=100&downlink=1111&uplink=1111&id=0008E558&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://78.108.178.6:36427/stat?uid=100&downlink=1111&uplink=1111&id=0008F8FF&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://82.98.104.7:30871/stat?uid=100&downlink=1111&uplink=1111&id=00090CA6&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://85.234.129.33:16193/stat?uid=100&downlink=1111&uplink=1111&id=0009204D&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://82.98.104.7:30871/stat?uid=100&downlink=1111&uplink=1111&id=000933F5&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
HTTP GEThttp://89.248.90.108:33816/stat?uid=100&downlink=1111&uplink=1111&id=0009478C&statpass=bpass&version=20140426&features=30&guid=9ade5870-54ba-44c0-8e60-e2a9713878ea&comment=20140426&p=0&s=
User-Agent:
Flows TCP192.168.1.1:1031 ➝ 213.174.153.118:27738
Flows TCP192.168.1.1:1031 ➝ 213.174.153.118:27738
Flows TCP192.168.1.1:1032 ➝ 70.32.107.132:19796
Flows TCP192.168.1.1:1033 ➝ 64.135.144.91:36139
Flows TCP192.168.1.1:1034 ➝ 216.35.160.138:43782
Flows TCP192.168.1.1:1035 ➝ 79.170.90.32:31643
Flows TCP192.168.1.1:1036 ➝ 72.52.11.117:20357
Flows TCP192.168.1.1:1037 ➝ 82.98.104.7:30871
Flows TCP192.168.1.1:1038 ➝ 72.13.32.43:29755
Flows TCP192.168.1.1:1039 ➝ 83.212.32.138:13737
Flows TCP192.168.1.1:1040 ➝ 96.9.133.248:46856
Flows TCP192.168.1.1:1041 ➝ 178.33.197.58:10315
Flows TCP192.168.1.1:1042 ➝ 5.77.49.215:61107
Flows TCP192.168.1.1:1043 ➝ 195.12.48.190:25127
Flows TCP192.168.1.1:1044 ➝ 94.182.146.68:33300
Flows TCP192.168.1.1:1045 ➝ 109.205.137.229:64167
Flows TCP192.168.1.1:1046 ➝ 176.58.122.65:13438
Flows TCP192.168.1.1:1047 ➝ 212.34.128.45:49105
Flows TCP192.168.1.1:1048 ➝ 202.217.72.1:19919
Flows TCP192.168.1.1:1049 ➝ 216.35.160.138:43782
Flows TCP192.168.1.1:1050 ➝ 213.124.38.165:32136
Flows TCP192.168.1.1:1051 ➝ 123.30.174.195:18387
Flows TCP192.168.1.1:1052 ➝ 89.248.90.108:33816
Flows TCP192.168.1.1:1053 ➝ 54.235.89.53:43461
Flows TCP192.168.1.1:1054 ➝ 80.94.26.250:19285
Flows TCP192.168.1.1:1055 ➝ 216.239.32.21:27323
Flows TCP192.168.1.1:1056 ➝ 216.177.150.107:20261
Flows TCP192.168.1.1:1057 ➝ 78.108.178.6:36427
Flows TCP192.168.1.1:1058 ➝ 80.94.26.250:19285
Flows TCP192.168.1.1:1059 ➝ 217.12.199.36:53109
Flows TCP192.168.1.1:1060 ➝ 178.33.248.60:46612
Flows TCP192.168.1.1:1061 ➝ 204.14.213.177:13023
Flows TCP192.168.1.1:1062 ➝ 189.89.125.65:18703
Flows TCP192.168.1.1:1063 ➝ 109.205.137.229:64167
Flows TCP192.168.1.1:1064 ➝ 178.79.155.234:15590
Flows TCP192.168.1.1:1065 ➝ 5.77.49.215:61107
Flows TCP192.168.1.1:1066 ➝ 94.231.110.183:35463
Flows TCP192.168.1.1:1067 ➝ 184.168.221.25:22903
Flows TCP192.168.1.1:1068 ➝ 67.227.167.0:42896
Flows TCP192.168.1.1:1069 ➝ 89.248.90.108:33816
Flows TCP192.168.1.1:1070 ➝ 178.33.231.139:15396
Flows TCP192.168.1.1:1071 ➝ 70.38.101.66:11410
Flows TCP192.168.1.1:1072 ➝ 206.220.43.92:41780
Flows TCP192.168.1.1:1073 ➝ 50.28.0.72:25880
Flows TCP192.168.1.1:1074 ➝ 200.43.192.230:26666
Flows TCP192.168.1.1:1075 ➝ 213.124.38.165:32136
Flows TCP192.168.1.1:1076 ➝ 78.108.178.6:36427
Flows TCP192.168.1.1:1077 ➝ 82.98.104.7:30871
Flows TCP192.168.1.1:1078 ➝ 85.234.129.33:16193
Flows TCP192.168.1.1:1079 ➝ 82.98.104.7:30871
Flows TCP192.168.1.1:1080 ➝ 89.248.90.108:33816

Raw Pcap
0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303537 45344626 73746174 70617373   0057E4F&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303539 32393326 73746174 70617373   0059293&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303541 36363926 73746174 70617373   005A669&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303542 41324626 73746174 70617373   005BA2F&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303543 44443726 73746174 70617373   005CDD7&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303545 31394426 73746174 70617373   005E19D&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303546 35373326 73746174 70617373   005F573&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303630 39324126 73746174 70617373   006092A&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303631 43463126 73746174 70617373   0061CF1&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303633 30423726 73746174 70617373   00630B7&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303634 34374526 73746174 70617373   006447E&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303635 38333426 73746174 70617373   0065834&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303636 43314126 73746174 70617373   0066C1A&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303637 46443126 73746174 70617373   0067FD1&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303639 33393826 73746174 70617373   0069398&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303641 37364526 73746174 70617373   006A76E&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303642 42343426 73746174 70617373   006BB44&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303643 46304126 73746174 70617373   006CF0A&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303645 32433126 73746174 70617373   006E2C1&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303646 36393726 73746174 70617373   006F697&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303730 41344526 73746174 70617373   0070A4E&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303731 45313526 73746174 70617373   0071E15&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303733 31454226 73746174 70617373   00731EB&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303734 35443126 73746174 70617373   00745D1&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303735 39413726 73746174 70617373   00759A7&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303736 44374426 73746174 70617373   0076D7D&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303738 31363326 73746174 70617373   0078163&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303739 35353826 73746174 70617373   0079558&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303741 39324526 73746174 70617373   007A92E&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303742 43463526 73746174 70617373   007BCF5&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303744 30424226 73746174 70617373   007D0BB&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303745 34383226 73746174 70617373   007E482&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303746 38323926 73746174 70617373   007F829&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303830 42454626 73746174 70617373   0080BEF&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303831 46413626 73746174 70617373   0081FA6&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303833 33354426 73746174 70617373   008335D&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303834 37323426 73746174 70617373   0084724&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303835 41444126 73746174 70617373   0085ADA&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303836 45393126 73746174 70617373   0086E91&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303838 32353826 73746174 70617373   0088258&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303839 35464626 73746174 70617373   00895FF&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303841 39443526 73746174 70617373   008A9D5&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303842 44394326 73746174 70617373   008BD9C&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303844 31373226 73746174 70617373   008D172&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303845 35353826 73746174 70617373   008E558&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303846 38464626 73746174 70617373   008F8FF&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303930 43413626 73746174 70617373   0090CA6&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303932 30344426 73746174 70617373   009204D&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303933 33463526 73746174 70617373   00933F5&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..

0x00000000 (00000)   47455420 2f737461 743f7569 643d3130   GET /stat?uid=10
0x00000010 (00016)   3026646f 776e6c69 6e6b3d31 31313126   0&downlink=1111&
0x00000020 (00032)   75706c69 6e6b3d31 31313126 69643d30   uplink=1111&id=0
0x00000030 (00048)   30303934 37384326 73746174 70617373   009478C&statpass
0x00000040 (00064)   3d627061 73732676 65727369 6f6e3d32   =bpass&version=2
0x00000050 (00080)   30313430 34323626 66656174 75726573   0140426&features
0x00000060 (00096)   3d333026 67756964 3d396164 65353837   =30&guid=9ade587
0x00000070 (00112)   302d3534 62612d34 3463302d 38653630   0-54ba-44c0-8e60
0x00000080 (00128)   2d653261 39373133 38373865 6126636f   -e2a9713878ea&co
0x00000090 (00144)   6d6d656e 743d3230 31343034 32362670   mment=20140426&p
0x000000a0 (00160)   3d302673 3d204854 54502f31 2e300d0a   =0&s= HTTP/1.0..
0x000000b0 (00176)   0d0a                                  ..


Strings
 " "
E
msctls_progress32
MS Shell Dlg
SysListView32
*?|<>/":
0@*B-i
0JT}13H
{1}c@/A
1q[p>W?
1y(~	/
	2G1fh
3O=rDh
3R[h?g
4amvy(
=4p@hp
5Ktkz'i
6+|BA_!
7Rl\Aa1-d=
?,8{4]]F"
8NCRCu
9[1l'L
*9PP>.
)aB'(hR
AdjustTokenPrivileges
ADVAPI32
ADVAPI32.dll
&a}*"E!
aexX$##
Ak<iX7
am^h)=J
AppendMenuA
AR<._A
aRDnJs
BeginPaint
bFiM#1
bP.0-/J
BSf|H^
bygh@7zJ
byu`]8
{c5B% 
CallWindowProcA
cDBRc=
CharNextA
CharPrevA
CheckDlgButton
CloseClipboard
CloseHandle
CoCreateInstance
COMCTL32.dll
CompareFileTime
Control Panel\Desktop\ResourceLocale
CopyFileA
CoTaskMemFree
CreateBrushIndirect
CreateDialogParamA
CreateDirectoryA
CreateFileA
CreateFontIndirectA
CreatePopupMenu
CreateProcessA
CreateThread
CreateWindowExA
CsB!2	D)
... %d%%
D$0+D$(P
_d9pa5
@.data
D$(+D$ SSP
.DEFAULT\Control Panel\International
DefWindowProcA
DeleteFileA
DeleteObject
DestroyWindow
Df	XH{
DialogBoxParamA
DispatchMessageA
-Dj+%Q
DrawTextA
D$(SPS
E5BX<!
e)c#Bo
*eK~b9
+elM4K-KI
EmptyClipboard
EnableMenuItem
EnableWindow
EndDialog
EndPaint
Error launching installer
Error writing temporary file. Make sure your temp folder is valid.
EtskT4
ExitProcess
ExitWindowsEx
e(xn? 
ExpandEnvironmentStringsA
F6dO7D
FillRect
FindClose
FindFirstFileA
FindNextFileA
FindWindowExA
FreeLibrary
^^F{wA~
G?85kj
GDI32.dll
GetClassInfoA
GetClientRect
GetCommandLineA
GetCurrentProcess
GetDeviceCaps
GetDiskFreeSpaceA
GetDiskFreeSpaceExA
GetDlgItem
GetDlgItemTextA
GetExitCodeProcess
GetFileAttributesA
GetFileSize
GetFileVersionInfoA
GetFileVersionInfoSizeA
GetFullPathNameA
GetLastError
GetMessagePos
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileStringA
GetProcAddress
GetShortPathNameA
GetSysColor
GetSystemDirectoryA
GetSystemMenu
GetSystemMetrics
GetTempFileNameA
GetTempPathA
GetTickCount
GetUserDefaultUILanguage
GetVersion
GetWindowLongA
GetWindowRect
GetWindowsDirectoryA
G:jUT'
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
%gP)G2Wo
Gr*MbR
G+t63NHL
gVu'Bt
:hjIi?
_h|PWm.*
http://nsis.sf.net/NSIS_Error
I5.^v#
I9RjLP
ICY:@i
ImageList_AddMasked
ImageList_Create
ImageList_Destroy
incomplete download and damaged media. Contact the
Installer integrity check has failed. Common causes include
installer's author to obtain a new copy.
Instu_
InvalidateRect
ioBye{M TD
iRichu
IsWindow
IsWindowEnabled
IsWindowVisible
ivZk\K
iX9o%=
])(I	z7
j089q?k=BCb
j4d@]?%+
Jn}XkS0%
JrP*aW
^JTd=Rn
J-^uxN
K4RULc
KERNEL32
KERNEL32.dll
Kg$H_&
=*k)"i
l gysQZ
=+Ln)yS
LoadBitmapA
LoadCursorA
LoadImageA
LoadLibraryA
LoadLibraryExA
LookupPrivilegeValueA
lstrcatA
lstrcmpA
lstrcmpiA
lstrcpynA
lstrlenA
lyTbK8X]
lZ<'+S
_m61@U9H
MessageBoxIndirectA
~<~mf5q
\Microsoft\Internet Explorer\Quick Launch
More information at:
MoveFileA
MoveFileExA
'\m(S?
MulDiv
MultiByteToWideChar
.ndata
ndu=;W	
(nP	`{
n:p-u\
n#}rbm
nrFtPA
NSIS Error
~nsu.tmp
NullsoftInst
NulluM	E
O'&>)^
OhZ,"0
ole32.dll
OleInitialize
OleUninitialize
o)!?%mW
OpenClipboard
OpenProcessToken
O'VK@O
OX:5SY
PeekMessageA
PMC7Y5@
PostQuitMessage
PPPPPP
:psWm;p
PTeIc:
=-'PY}
qA?;NM
q.'%Lc[Ib$
qlh&{^
`.rdata
ReadFile
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
RegDeleteKeyExA
RegDeleteValueA
RegEnumKeyA
RegEnumValueA
RegisterClassA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RemoveDirectoryA
[Rename]
RichEd20
RichEd32
RichEdit
RichEdit20A
rM0j]nXD
S(0[an
S=4v5b
ScreenToClient
SearchPathA
SelectObject
SendMessageA
SendMessageTimeoutA
SeShutdownPrivilege
SetBkColor
SetBkMode
SetClassLongA
SetClipboardData
SetCurrentDirectoryA
SetCursor
SetDlgItemTextA
SetErrorMode
SetFileAttributesA
SetFilePointer
SetFileTime
SetForegroundWindow
SetTextColor
SetTimer
SetWindowLongA
SetWindowPos
SetWindowTextA
SHAutoComplete
SHBrowseForFolderA
SHELL32.dll
ShellExecuteA
SHFileOperationA
SHFOLDER
SHGetFileInfoA
SHGetFolderPathA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHLWAPI
ShowWindow
sl,Uh-fT
softuV
Software\Microsoft\Windows\CurrentVersion
SQSSSPW
&(s=X^v6
SystemParametersInfoA
> _?=t
<	t3!/
~!t3A	
t8(|v1.
!This program cannot be run in DOS mode.
_^[t	P
t!r5`P
TrackPopupMenu
t-?r"Z
u49-,?B
(U9E K(
{?uE3(?
U<e{sJ
uf8!nR
unpacking data: %d%%
$^uQ'G
USER32.dll
u;Sf5u
%u.%u%s%s
v3<Rk!R
v95LpA
["VEML&
verifying installer: %d%%
VerQueryValueA
VERSION.dll
#Vh;+@
WaitForSingleObject
WriteFile
WritePrivateProfileStringA
wsprintfA
wwwwwwww
wwwwwwwxp
x<oQz6
Y}(''d
y~%j7|
za~KV5
zu[W0 t
Z{y1k5-
z;zM}TP