Windbg
Windbg 搜索命令s
2021-07-01
98
0
在内存中搜索某个值 - 命令s
命令s(表示搜索search), 是一个非常有用的命令, 可以用来在调试目标内找出已知的值.
这个命令的参数包括素要搜索的类型和值.
s –d 0012ff40 L1024 c0000005
其中-d代表双字DWORD, 是搜索的类型. 其他类型例举如下:
b – Byte
w – WORD
d – DWORD
q – QWORD
a – ASCII字符串
u – Unicode字符串
查看内存的每个位置上都包含着什么
从内存00000000ff800000处查找字节5a4d,最多显示 1024行
windbg> .hh s
0:001> s -w 00000000ff800000 L1024 5a4d
00000000`ff800000 5a4d 0090 0003 0000 0004 0000 ffff 0000 MZ..............
从内存00000000ff800000处查找字节10
0:001> s -b 00000000ff800000 L1024 10
00000000`ff800115 10 00 00 00 00 80 ff 00-00 00 00 00 10 00 00 00 ................
00000000`ff800121 10 00 00 00 02 00 00 06-00 01 00 06 00 01 00 06 ................
00000000`ff800151 10 01 00 00 00 00 00 00-00 10 00 00 00 00 00 00 ................
00000000`ff80015a 10 00 00 00 00 00 00 10-00 00 00 00 00 00 00 00 ................
00000000`ff800161 10 00 00 00 00 00 00 00-00 00 00 10 00 00 00 00 ................
00000000`ff80016c 10 00 00 00 00 00 00 00-00 00 00 00 f8 cf 00 00 ................
00000000`ff8001fd 10 00 00 00 a8 00 00 00-06 00 00 00 00 00 00 00 ................
00000000`ff80034c 10 01 00 00 86 b5 9e 55-1d 01 00 00 a5 b5 9e 55 .......U.......U
00000000`ff8004d2 10 48 89 70 18 4c 89 48-20 57 41 54 41 55 48 83 .H.p.L.H WATAUH.
附：00000000ff800000内容
0:001> db 00000000ff800000 l1024
00000000`ff800000 4d 5a 90 00 03 00 00 00-04 00 00 00 ff ff 00 00 MZ..............
00000000`ff800010 b8 00 00 00 00 00 00 00-40 00 00 00 00 00 00 00 ........@.......
00000000`ff800020 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800030 00 00 00 00 00 00 00 00-00 00 00 00 e8 00 00 00 ................
00000000`ff800040 0e 1f ba 0e 00 b4 09 cd-21 b8 01 4c cd 21 54 68 ........!..L.!Th
00000000`ff800050 69 73 20 70 72 6f 67 72-61 6d 20 63 61 6e 6e 6f is program canno
00000000`ff800060 74 20 62 65 20 72 75 6e-20 69 6e 20 44 4f 53 20 t be run in DOS
00000000`ff800070 6d 6f 64 65 2e 0d 0d 0a-24 00 00 00 00 00 00 00 mode....$.......
00000000`ff800080 83 c2 32 29 c7 a3 5c 7a-c7 a3 5c 7a c7 a3 5c 7a ..2)..\z..\z..\z
00000000`ff800090 ce db d8 7a c6 a3 5c 7a-ce db c9 7a c5 a3 5c 7a ...z..\z...z..\z
00000000`ff8000a0 ce db cf 7a da a3 5c 7a-c7 a3 5d 7a 33 a3 5c 7a ...z..\z..]z3.\z
00000000`ff8000b0 ce db df 7a d3 a3 5c 7a-ce db d5 7a cc a3 5c 7a ...z..\z...z..\z
00000000`ff8000c0 ce db c8 7a c6 a3 5c 7a-ce db cd 7a c6 a3 5c 7a ...z..\z...z..\z
00000000`ff8000d0 52 69 63 68 c7 a3 5c 7a-00 00 00 00 00 00 00 00 Rich..\z........
00000000`ff8000e0 00 00 00 00 00 00 00 00-50 45 00 00 64 86 06 00 ........PE..d...
00000000`ff8000f0 be a8 9e 55 00 00 00 00-00 00 00 00 f0 00 22 00 ...U..........".
00000000`ff800100 0b 02 09 00 00 a8 00 00-00 58 02 00 00 00 00 00 .........X......
00000000`ff800110 cc 3a 00 00 00 10 00 00-00 00 80 ff 00 00 00 00 .:..............
00000000`ff800120 00 10 00 00 00 02 00 00-06 00 01 00 06 00 01 00 ................
00000000`ff800130 06 00 01 00 00 00 00 00-00 50 03 00 00 06 00 00 .........P......
00000000`ff800140 a2 6d 03 00 02 00 40 81-00 00 08 00 00 00 00 00 .m....@.........
00000000`ff800150 00 10 01 00 00 00 00 00-00 00 10 00 00 00 00 00 ................
00000000`ff800160 00 10 00 00 00 00 00 00-00 00 00 00 10 00 00 00 ................
00000000`ff800170 00 00 00 00 00 00 00 00-f8 cf 00 00 2c 01 00 00 ............,...
00000000`ff800180 00 40 01 00 68 f1 01 00-00 30 01 00 b4 06 00 00 .@..h....0......
00000000`ff800190 00 00 00 00 00 00 00 00-00 40 03 00 b8 00 00 00 .........@......
00000000`ff8001a0 40 b7 00 00 38 00 00 00-00 00 00 00 00 00 00 00 @...8...........
00000000`ff8001b0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff8001c0 00 00 00 00 00 00 00 00-e0 02 00 00 38 01 00 00 ............8...
00000000`ff8001d0 00 c0 00 00 f0 07 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff8001e0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff8001f0 2e 74 65 78 74 00 00 00-a0 a7 00 00 00 10 00 00 .text...........
00000000`ff800200 00 a8 00 00 00 06 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800210 00 00 00 00 20 00 00 60-2e 72 64 61 74 61 00 00 .... ..`.rdata..
00000000`ff800220 60 31 00 00 00 c0 00 00-00 32 00 00 00 ae 00 00 `1.......2......
00000000`ff800230 00 00 00 00 00 00 00 00-00 00 00 00 40 00 00 40 ............@..@
00000000`ff800240 2e 64 61 74 61 00 00 00-44 28 00 00 00 00 01 00 .data...D(......
00000000`ff800250 00 18 00 00 00 e0 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800260 00 00 00 00 40 00 00 c0-2e 70 64 61 74 61 00 00 ....@....pdata..
00000000`ff800270 b4 06 00 00 00 30 01 00-00 08 00 00 00 f8 00 00 .....0..........
00000000`ff800280 00 00 00 00 00 00 00 00-00 00 00 00 40 00 00 40 ............@..@
00000000`ff800290 2e 72 73 72 63 00 00 00-68 f1 01 00 00 40 01 00 .rsrc...h....@..
00000000`ff8002a0 00 f2 01 00 00 00 01 00-00 00 00 00 00 00 00 00 ................
00000000`ff8002b0 00 00 00 00 40 00 00 40-2e 72 65 6c 6f 63 00 00 ....@..@.reloc..
00000000`ff8002c0 b8 00 00 00 00 40 03 00-00 02 00 00 00 f2 02 00 .....@..........
00000000`ff8002d0 00 00 00 00 00 00 00 00-00 00 00 00 40 00 00 42 ............@..B
00000000`ff8002e0 51 b4 9e 55 90 00 00 00-a0 b5 9e 55 9d 00 01 00 Q..U.......U....
00000000`ff8002f0 a5 b5 9e 55 aa 00 00 00-b9 b4 9e 55 b4 00 00 00 ...U.......U....
00000000`ff800300 fe b5 9e 55 be 00 01 00-a5 b5 9e 55 aa 00 00 00 ...U.......U....
00000000`ff800310 4f b5 9e 55 c9 00 01 00-a5 b5 9e 55 aa 00 00 00 O..U.......U....
00000000`ff800320 56 b5 9e 55 d4 00 00 00-c2 b5 9e 55 e1 00 00 00 V..U.......U....
00000000`ff800330 33 b6 9e 55 ed 00 00 00-82 b5 9e 55 fa 00 00 00 3..U.......U....
00000000`ff800340 c7 b5 9e 55 04 01 00 00-60 b4 9e 55 10 01 00 00 ...U....`..U....
00000000`ff800350 86 b5 9e 55 1d 01 00 00-a5 b5 9e 55 aa 00 00 00 ...U.......U....
00000000`ff800360 f8 b5 9e 55 2a 01 00 00-00 00 00 00 00 00 00 00 ...U*...........
00000000`ff800370 41 44 56 41 50 49 33 32-2e 64 6c 6c 00 4b 45 52 ADVAPI32.dll.KER
00000000`ff800380 4e 45 4c 33 32 2e 64 6c-6c 00 4e 54 44 4c 4c 2e NEL32.dll.NTDLL.
00000000`ff800390 44 4c 4c 00 47 44 49 33-32 2e 64 6c 6c 00 55 53 DLL.GDI32.dll.US
00000000`ff8003a0 45 52 33 32 2e 64 6c 6c-00 6d 73 76 63 72 74 2e ER32.dll.msvcrt.
00000000`ff8003b0 64 6c 6c 00 43 4f 4d 44-4c 47 33 32 2e 64 6c 6c dll.COMDLG32.dll
00000000`ff8003c0 00 53 48 45 4c 4c 33 32-2e 64 6c 6c 00 57 49 4e .SHELL32.dll.WIN
00000000`ff8003d0 53 50 4f 4f 4c 2e 44 52-56 00 6f 6c 65 33 32 2e SPOOL.DRV.ole32.
00000000`ff8003e0 64 6c 6c 00 53 48 4c 57-41 50 49 2e 64 6c 6c 00 dll.SHLWAPI.dll.
00000000`ff8003f0 43 4f 4d 43 54 4c 33 32-2e 64 6c 6c 00 4f 4c 45 COMCTL32.dll.OLE
00000000`ff800400 41 55 54 33 32 2e 64 6c-6c 00 56 45 52 53 49 4f AUT32.dll.VERSIO
00000000`ff800410 4e 2e 64 6c 6c 00 00 00-41 3b c4 0f 84 ec 45 00 N.dll...A;....E.
00000000`ff800420 00 ff 15 a1 b1 00 00 b9-0b 80 00 00 44 89 64 24 ............D.d$
00000000`ff800430 30 4c 8d 0d 20 06 00 00-8b d1 45 33 c0 44 89 64 0L.. .....E3.D.d
00000000`ff800440 24 28 89 44 24 20 ff 15-44 b4 00 00 48 8b d8 eb $(.D$ ..D...H...
00000000`ff800450 00 48 8d 4c 24 40 45 33-c9 45 33 c0 33 d2 ff 15 .H.L$@E3.E3.3...
00000000`ff800460 24 b4 00 00 41 3b c4 0f-84 b2 06 00 00 83 7c 24 $...A;........|$
00000000`ff800470 48 50 0f 84 5e 45 00 00-48 8b 0d a1 fa 00 00 49 HP..^E..H......I
00000000`ff800480 3b cc 0f 85 6c 45 00 00-48 8b 15 31 f0 00 00 48 ;...lE..H..1...H
00000000`ff800490 8b 0d fa ef 00 00 4c 8d-44 24 40 ff 15 d7 b3 00 ......L.D$@.....
00000000`ff8004a0 00 41 3b c4 75 ab 48 8d-4c 24 40 ff 15 bf b3 00 .A;.u.H.L$@.....
00000000`ff8004b0 00 48 8d 4c 24 40 ff 15-ac b3 00 00 90 eb 92 90 .H.L$@..........
00000000`ff8004c0 90 90 90 90 90 90 90 90-48 8b c4 48 89 58 08 48 ........H..H.X.H
00000000`ff8004d0 89 68 10 48 89 70 18 4c-89 48 20 57 41 54 41 55 .h.H.p.L.H WATAU
00000000`ff8004e0 48 83 ec 20 49 8b e9 49-8b f0 44 8b ea 4c 8b e1 H.. I..I..D..L..
00000000`ff8004f0 83 fa 1c 76 7e 8b c2 bf-01 00 00 00 2d 11 01 00 ...v~.......-...
00000000`ff800500 00 0f 84 aa 03 00 00 2b-c7 0f 84 50 05 00 00 83 .......+...P....
00000000`ff800510 e8 04 0f 84 e1 06 00 00-2b c7 0f 84 c6 06 00 00 ........+.......
00000000`ff800520 2d 1c 01 00 00 0f 84 05-44 00 00 2d e6 00 00 00 -.......D..-....
00000000`ff800530 0f 84 ca 43 00 00 3d e8-7c 00 00 0f 84 95 43 00 ...C..=.|.....C.
00000000`ff800540 00 3b 15 25 ef 00 00 0f-84 6b 42 00 00 4c 8b c6 .;.%.....kB..L..
00000000`ff800550 eb 00 ff 15 78 b3 00 00-eb 00 48 8b 5c 24 40 48 ....x.....H.\$@H
00000000`ff800560 8b 6c 24 48 48 8b 74 24-50 48 83 c4 20 41 5d 41 .l$HH.t$PH.. A]A
00000000`ff800570 5c 5f c3 0f 84 6f 01 00-00 8b c2 41 b8 02 00 00 \_...o.....A....
00000000`ff800580 00 41 2b c0 0f 84 88 05-00 00 83 e8 03 0f 84 79 .A+............y
00000000`ff800590 2b 00 00 41 8d 78 ff 2b-c7 0f 84 76 04 00 00 2b +..A.x.+...v...+
00000000`ff8005a0 c7 0f 84 45 04 00 00 2b-c7 0f 84 23 04 00 00 83 ...E...+...#....
00000000`ff8005b0 e8 08 74 09 3b c7 75 89-e9 5c 41 00 00 e8 ce 04 ..t.;.u..\A.....
00000000`ff8005c0 00 00 33 c9 e8 9b 01 00-00 33 db 3b c3 74 29 48 ..3......3.;.t)H
00000000`ff8005d0 8b 0d c2 ee 00 00 ff 15-dc b2 00 00 48 8b 0d ad ............H...
00000000`ff8005e0 ee 00 00 ff 15 cf b2 00-00 48 8b 0d d8 ee 00 00 .........H......
00000000`ff8005f0 ff 15 12 b1 00 00 eb 00-33 c0 e9 5b ff ff ff 90 ........3..[....
00000000`ff800600 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800610 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800620 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800630 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800640 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800650 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800660 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800670 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800680 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800690 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff8006a0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff8006b0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff8006c0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff8006d0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff8006e0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff8006f0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800700 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800710 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800720 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800730 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800740 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800750 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800760 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800770 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800780 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800790 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff8007a0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff8007b0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff8007c0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff8007d0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff8007e0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff8007f0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800800 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800810 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800820 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800830 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800840 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800850 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800860 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800870 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800880 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800890 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff8008a0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff8008b0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff8008c0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff8008d0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff8008e0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff8008f0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800900 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800910 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800920 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800930 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800940 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800950 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800960 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800970 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800980 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800990 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff8009a0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff8009b0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff8009c0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff8009d0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff8009e0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff8009f0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800a00 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800a10 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800a20 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800a30 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800a40 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800a50 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800a60 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800a70 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800a80 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800a90 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800aa0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800ab0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800ac0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800ad0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800ae0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800af0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800b00 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800b10 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800b20 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800b30 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800b40 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800b50 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800b60 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800b70 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800b80 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800b90 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800ba0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800bb0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800bc0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800bd0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800be0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800bf0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800c00 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800c10 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800c20 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800c30 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800c40 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800c50 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800c60 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800c70 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800c80 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800c90 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800ca0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800cb0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800cc0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800cd0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800ce0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800cf0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800d00 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800d10 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800d20 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800d30 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800d40 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800d50 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800d60 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800d70 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800d80 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800d90 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800da0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800db0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800dc0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800dd0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800de0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800df0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800e00 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800e10 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800e20 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800e30 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800e40 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800e50 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800e60 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800e70 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800e80 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800e90 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800ea0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800eb0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800ec0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800ed0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800ee0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800ef0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800f00 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800f10 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800f20 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800f30 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800f40 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800f50 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800f60 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800f70 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800f80 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800f90 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800fa0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800fb0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800fc0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800fd0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800fe0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff800ff0 00 00 00 00 00 00 00 00-00 00 00 00 00 00 00 00 ................
00000000`ff801000 66 83 3b 09 0f 84 b6 2a-00 00 44 8b c6 48 8b d3 f.;....*..D..H..
00000000`ff801010 48 8b cd e8 48 1f 00 00-41 3b c4 0f 84 ec 45 00 H...H...A;....E.
00000000`ff801020 00 ff 15 a1 ....
