picoCTF2023: UnforgottenBits

- 81 mins read

Since the last hard problem that I attempted was so much fun, I wanted to do another one! Unforgotten Bits has 478 solves and a 69% Like Rate.

Download this disk image and find the flag Note: if you are using the webshell, download and extract the disk image into /tmp not your home directory. Download compressed disk image

We get a disk image file again:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
zimengx@asahi ~/S/p/P/UnforgottenBits> wget https://artifacts.picoctf.net/c/490/disk.flag.img.gz
--2025-10-11 15:26:30--  https://artifacts.picoctf.net/c/490/disk.flag.img.gz
Resolving artifacts.picoctf.net (artifacts.picoctf.net)... 65.8.161.112, 65.8.161.26, 65.8.161.24, ...
Connecting to artifacts.picoctf.net (artifacts.picoctf.net)|65.8.161.112|:443... connected.
HTTP request sent, awaiting response... 200 OK
Length: 53613690 (51M) [application/octet-stream]
Saving to: ‘disk.flag.img.gz’

disk.flag.img.gz              100%[==============================================>]  51.13M  1.19MB/s    in 46s

2025-10-11 15:27:16 (1.12 MB/s) - ‘disk.flag.img.gz’ saved [53613690/53613690]

We can extract with gunzip:

1
2
3
zimengx@asahi ~/S/p/P/UnforgottenBits> gunzip disk.flag.img.gz
zimengx@asahi ~/S/p/P/UnforgottenBits> ls
.rw-r--r-- 1,073,741,824 zimengx 15 Mar  2023 disk.flag.img

We get an .img file, lets see what kind of file it is:

1
2
zimengx@asahi ~/S/p/P/UnforgottenBits> file disk.flag.img
disk.flag.img: DOS/MBR boot sector; partition 1 : ID=0x83, active, start-CHS (0x0,32,33), end-CHS (0xc,223,19), startsector 2048, 204800 sectors; partition 2 : ID=0x82, start-CHS (0xc,223,20), end-CHS (0x2d,130,21), startsector 206848, 524288 sectors; partition 3 : ID=0x83, start-CHS (0x2d,130,22), end-CHS (0x82,138,8), startsector 731136, 1366016 sectors

Looks like its a linux file system

1
2
3
4
5
zimengx@asahi ~/S/p/P/UnforgottenBits [1]> hdiutil attach -nomount disk.flag.img
/dev/disk5              FDisk_partition_scheme
/dev/disk5s1            Linux
/dev/disk5s2            Linux_Swap
/dev/disk5s3            Linux

Unfortunately, I am doing this away from my Linux desktop (arch btw) on a Macbook, so I can’t easily mount this ext4 FS.

Thanks to some Googling, I need to install macfuse and ext4fuse

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
zimengx@asahi ~/S/p/P/UnforgottenBits [1]> brew install --cask macfuse
==> Caveats
macfuse requires a kernel extension to work.
If the installation fails, retry after you enable it in:
  System Settings → Privacy & Security

For more information, refer to vendor documentation or this Apple Technical Note:
  https://developer.apple.com/library/content/technotes/tn2459/_index.html

==> Downloading https://raw.githubusercontent.com/Homebrew/homebrew-cask/c19c
###################################################################### 100.0%
==> Downloading https://github.com/macfuse/macfuse/releases/download/macfuse-
==> Downloading from https://release-assets.githubusercontent.com/github-prod
###################################################################### 100.0%
==> Installing Cask macfuse
==> Running installer for macfuse with `sudo` (which may request your passwor
Password:
installer: Package name is macFUSE
installer: Installing at base path /
installer: The install was successful.
==> Changing ownership of paths required by macfuse with `sudo` (which may re
🍺  macfuse was successfully installed!

MacFuse installed without issue, but ext4fuse ran into some errors:

1
2
3
4
5
zimengx@asahi ~/S/p/P/UnforgottenBits> brew install ext4fuse
==> Fetching downloads for: ext4fuse
ext4fuse: Linux is required for this software.
libfuse@2: Linux is required for this software.
Error: ext4fuse: Unsatisfied requirements failed this build.

It turns out ext4fuse is not actively maintained anymore. Looking around some more, I found the e2tools package that allows reading and copying from ext4 images without needing to mount them.

1
2
zimengx@asahi ~/S/p/P/UnforgottenBits> e2ls 'disk.flag.img'
Bad magic number in super-block: disk.flag.img

Hmmm, maybe that has to do with the challenge? Or are just mounting it incorrectly. I still do not know if the challenge is in

  1. Extracting the disk image
  2. or Sifting through files in the disk image Given the instructions

    Download this disk image and find the flag.

I think the challenge is finding the flags in the files inside the disk image, not getting it to work. So I’ll assume for now that the “bad magic number” is my error.

But wait, the title is “UnforgottenBits”, maybe it has to do with the disk image itself (writing this, I kind of sound like an LLM’s thinking output lol).

1
2
3
4
5
6
7
8
9
Disk: disk.flag.img     geometry: 520/64/63 [2097152 sectors]
Signature: 0xAA55
         Starting       Ending
 #: id  cyl  hd sec -  cyl  hd sec [     start -       size]
------------------------------------------------------------------------
*1: 83    0  32  33 -   12 223  19 [      2048 -     204800] Linux files*
 2: 82   12 223  20 -   45 130  21 [    206848 -     524288] Linux swap
 3: 83   45 130  22 -  130 138   8 [    731136 -    1366016] Linux files*
 4: 00    0   0   0 -    0   0   0 [         0 -          0] unused

Running fdisk, we see there are two linux partitions, and we need to probably calculate the partitions offset to read it correctly.

The first partition starts at sector 2048. Assuming a sector size of 512 bytes, the offset is 1048576 bytes.

1
2
3
4
zimengx@asahi ~/S/p/P/UnforgottenBits> e2ls -o 1048576 'disk.flag.img'
e2ls: illegal option -- o
e2ls: invalid option: ?
Usage: e2ls [-acDfilnrt][-d dir] file

Looks like e2ls does not support offsets. Hmm…

Lets try a different way: use hdiutil to attach but not mount the filesystems as devices and then use e2ls to attach to the devices:

1
2
3
4
5
zimengx@asahi ~/S/p/P/UnforgottenBits> hdiutil attach -nomount 'disk.flag.img'
/dev/disk5                FDisk_partition_scheme
/dev/disk5s1              Linux
/dev/disk5s2              Linux_Swap
/dev/disk5s3              Linux

Then we mount the devices with e2tool

1
2
3
4
5
6
zimengx@asahi ~/S/p/P/UnforgottenBits [1]> sudo e2ls /dev/disk5s1
Password:
System.map-virt     boot                config-virt         extlinux.conf
initramfs-virt      ldlinux.c32         ldlinux.sys         libcom32.c32
libutil.c32         lost+found          mboot.c32           menu.c32
vesamenu.c32        vmlinuz-virt

This seems to contain boot files, lets check the other partition for more interesting stuff (/dev/disk5s3)

1
2
3
4
5
zimengx@asahi ~/S/p/P/UnforgottenBits [1]> sudo e2ls /dev/disk5s3
bin          boot         dev          etc          home         lib
lost+found   media        mnt          opt          proc         root
run          sbin         srv          swap         sys          tmp
usr          var

Yup, this seems to be the root directory of a user. The flag is likely somehwere inside here. Let’s copy the files to our local directory. Reading through the man pages, it seems e2tools has no way of directly copying over a directory, we’ll just use e2ls to navigate the directory, and copy files over when they seem interesting.

1
2
3
zimengx@asahi ~/S/p/P/UnforgottenBits [1]> sudo e2ls -l /dev/disk5s3:/home/
Password:
         24  drwxr-Sr-x     1000     1000     4096 16-Jan-2023 11:52 yone

We found a user yone in the /home directory! Looking deeper:

1
2
3
4
5
zimengx@asahi ~/S/p/P/UnforgottenBits> sudo e2ls -l /dev/disk5s3:/home/yone
       2360  drwx------     1000     1000     4096 14-Jan-2023 10:59 Maildir
       2403  drwxr-xr-x     1000     1000     4096 14-Jan-2023 11:18 gallery
       2374  drwxr-xr-x     1000     1000     4096 14-Jan-2023 11:08 irclogs
       2364  drwxr-Sr-x     1000     1000     4096 14-Jan-2023 14:13 notes

We have Maildir, likely storing mail for an SMTP client, then gallery, some photos (?), then irclogs — chat logs, and what should be plain text notes. All interesting, lets go the notes first, as text is easy to parse:

1
2
3
4
zimengx@asahi ~/S/p/P/UnforgottenBits> sudo e2ls -l /dev/disk5s3:/home/yone/notes
       2365  -rw-r--r--     1000     1000       12 12-Jan-2023 13:04 1.txt
       2366  -rw-r--r--     1000     1000       11 12-Jan-2023 13:04 2.txt
       2408  -rw-r--r--     1000     1000       59 14-Jan-2023 14:13 3.txt

Let’s copy these files over. But first, a quick oversight:

1
2
3
4
5
6
7
8
9
zimengx@asahi ~/S/p/P/UnforgottenBits> sudo e2ls -la /dev/disk5s3:/home/yone/
         24  drwxr-Sr-x     1000     1000     4096 16-Jan-2023 11:52 .
       7130  drwxr-xr-x     root    wheel     4096 12-Jan-2023 12:57 ..
       2362  -rw-------     1000     1000        8 16-Jan-2023 11:52 .ash_history
       2401  drwxr-xr-x     1000     1000     4096 14-Jan-2023 11:12 .lynx
       2360  drwx------     1000     1000     4096 14-Jan-2023 10:59 Maildir
       2403  drwxr-xr-x     1000     1000     4096 14-Jan-2023 11:18 gallery
       2374  drwxr-xr-x     1000     1000     4096 14-Jan-2023 11:08 irclogs
       2364  drwxr-Sr-x     1000     1000     4096 14-Jan-2023 14:13 notes

Listing hidden files, we see a .lynx and .ash_history file. Those might be important as well. But first let’s copy the flags over.

1
zimengx@asahi ~/S/p/P/UnforgottenBits > e2cp /dev/disk5s3:/home/yone/notes/1.txt /dev/disk5s3:/home/yone/notes/2.txt /dev/disk5s3:/home/yone/notes/3.txt .
1
2
# 1.txt
chizazerite
1
2
# 2.txt
guldulheen
1
2
# 3.txt
I keep forgetting this, but it starts like: yasuoaatrox...

It seems like we are given a code of sorts in reverse order, maybe its base64? Doesn’t seem likely due to a lack of numbers. Maybe its a password we’ll use later on. Lets look at the other directories.

1
2
zimengx@asahi ~/S/p/P/UnforgottenBits> sudo e2ls /dev/disk5s3:/home/yone/irclogs
01  02  07

Let’s copy these files over as well:

1
zimengx@asahi ~/S/p/P/UnforgottenBits> sudo e2cp /dev/disk5s3:/home/yone/irclogs/01 /dev/disk5s3:/home/yone/irclogs/02  /dev/disk5s3:/home/yone/irclogs/07 unforgotten_bits_content/irclogs/.

Running file and trying to cat them,

1
2
3
4
zimengx@asahi ~/S/p/P/U/u/irclogs> file 01
01: data
zimengx@asahi ~/S/p/P/U/u/irclogs> cat 01
       │ File: 01   <BINARY>

We see that they are binary files. Lets try executing them?

1
2
exec: Failed to execute process: './01' the file could not be run by the operating system.
exec: Maybe the interpreter directive (#! line) is broken?

Nope. Let’s run strings

1
2
3
zimengx@asahi ~/S/p/P/U/u/irclogs [126]> strings 01
zimengx@asahi ~/S/p/P/U/u/irclogs> strings 02
zimengx@asahi ~/S/p/P/U/u/irclogs> strings 07

Nothing. Let’s do some background research on irclog formats. Google says that irclogs are generally stored in plain text, so we got some nefarious stuff going on right now… Lets move on from this now, and look at the other repositories

1
2
zimengx@asahi ~/S/p/P/U/u/irclogs> sudo e2ls /dev/disk5s3:/home/yone/gallery
1.bmp  2.bmp  3.bmp  7.bmp

Gallery has some .bmp images, lets take a look at those. We start to see some patterns in the numberings. notes/ had 1.txt 2.txt 3.txt, and irclogs/ had 01 02 07.

1
zimengx@asahi ~/S/p/P/U/u/irclogs [1]> sudo e2cp /dev/disk5s3:/home/yone/gallery/1.bmp /dev/disk5s3:/home/yone/gallery/2.bmp  /dev/disk5s3:/home/yone/gallery/3.bmp ../gallery/.

1.bmp, 2.bmp, 3.bmp, 7.bmp in order are listed above. They seem to be statues of people. 7.bmp is the only non person photo. Either 1/ the people are important, or 2/ “their” metadata is. Lets try reverse image searching first. The only match that comes up is from another writeup about this problem—lets not look at that right now….though is tempting.

I learned about .bmp files when I was learning raytracing (shoutout zeb!), they are simple raw image formats that have rows of R,G,B values, essentially text. Let’s see if theres anything hidden inside, as there isn’t really “metadata” for .bmp files.

1
2
3
4
5
6
zimengx@asahi ~/S/p/P/U/unforgotten_bits_content> cat gallery/1.bmp
───────┬─────────────────────────────────────────────────────────────────────────────────────────────────────────────
       │ File: gallery/1.bmp   <BINARY>
───────┴─────────────────────────────────────────────────────────────────────────────────────────────────────────────
zimengx@asahi ~/S/p/P/U/unforgotten_bits_content> file gallery/1.bmp
gallery/1.bmp: PC bitmap, Windows 3.x format, 1024 x 1024 x 24, image size 3145728, resolution 11811 x 11811 px/m, cbSize 3145782, bits offset 54

Mhmm binary… maybe the files in irclogs were BMP as well? Lets revisit that. On that account, lets look at the headers of those binary files, maybe they are compressed file formats of the actual logs, which we know/assume is text.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
zimengx@asahi ~/S/p/P/U/u/irclogs> xxd 01 | head
00000000: 4e09 0000 0c00 0102 2e00 0000 4609 0000  N...........F...
00000010: 0c00 0202 2e2e 0000 4f09 0000 dc0f 0202  ........O.......
00000020: 3034 0000 0000 0000 0000 0000 0000 0000  04..............
00000030: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000040: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000050: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000060: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000070: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000080: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000090: 0000 0000 0000 0000 0000 0000 0000 0000  ................
zimengx@asahi ~/S/p/P/U/u/irclogs> xxd 02 | head
00000000: 5309 0000 0c00 0102 2e00 0000 4609 0000  S...........F...
00000010: 0c00 0202 2e2e 0000 5409 0000 0c00 0202  ........T.......
00000020: 3039 0000 5609 0000 0c00 0202 3037 0000  09..V.......07..
00000030: 5809 0000 0c00 0202 3235 0000 5a09 0000  X.......25..Z...
00000040: 0c00 0202 3137 0000 5c09 0000 ac0f 0202  ....17..\.......
00000050: 3034 0000 0000 0000 0000 0000 0000 0000  04..............
00000060: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000070: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000080: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000090: 0000 0000 0000 0000 0000 0000 0000 0000  ................
zimengx@asahi ~/S/p/P/U/u/irclogs> xxd 07 | head
00000000: 5e09 0000 0c00 0102 2e00 0000 4609 0000  ^...........F...
00000010: 0c00 0202 2e2e 0000 5f09 0000 dc0f 0202  ........_.......
00000020: 3137 0000 0000 0000 0000 0000 0000 0000  17..............
00000030: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000040: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000050: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000060: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000070: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000080: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000090: 0000 0000 0000 0000 0000 0000 0000 0000  ................

Let’s examine the file sizes/lengths for each file:

1
2
3
4
zimengx@asahi ~/S/p/P/U/u/irclogs> dust .
4.0K   ┌── 01│█████████████████████████████████                                                                │  33%
4.0K   ├── 02│█████████████████████████████████                                                                │  33%
4.0K   ├── 07│█████████████████████████████████                                                                │  33%

They are all the same, lets dump them to hex files, as that seems more interesting.

1
2
3
zimengx@asahi ~/S/p/P/U/u/irclogs> xxd 01 > 01.hex
zimengx@asahi ~/S/p/P/U/u/irclogs> xxd 02 > 02.hex
zimengx@asahi ~/S/p/P/U/u/irclogs> xxd 07 > 07.hex

Let’s look at the files:

01.hex
  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
00000000: 4e09 0000 0c00 0102 2e00 0000 4609 0000  N...........F...
00000010: 0c00 0202 2e2e 0000 4f09 0000 dc0f 0202  ........O.......
00000020: 3034 0000 0000 0000 0000 0000 0000 0000  04..............
00000030: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000040: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000050: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000060: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000070: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000080: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000090: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000000a0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000000b0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000000c0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000000d0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000000e0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000000f0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000100: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000110: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000120: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000130: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000140: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000150: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000160: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000170: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000180: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000190: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000001a0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000001b0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000001c0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000001d0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000001e0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000001f0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000200: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000210: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000220: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000230: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000240: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000250: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000260: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000270: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000280: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000290: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000002a0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000002b0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000002c0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000002d0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000002e0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000002f0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000300: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000310: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000320: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000330: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000340: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000350: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000360: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000370: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000380: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000390: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000003a0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000003b0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000003c0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000003d0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000003e0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000003f0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000400: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000410: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000420: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000430: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000440: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000450: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000460: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000470: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000480: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000490: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000004a0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000004b0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000004c0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000004d0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000004e0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000004f0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000500: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000510: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000520: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000530: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000540: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000550: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000560: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000570: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000580: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000590: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000005a0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000005b0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000005c0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000005d0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000005e0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000005f0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000600: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000610: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000620: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000630: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000640: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000650: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000660: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000670: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000680: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000690: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000006a0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000006b0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000006c0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000006d0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000006e0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000006f0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000700: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000710: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000720: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000730: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000740: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000750: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000760: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000770: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000780: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000790: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000007a0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000007b0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000007c0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000007d0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000007e0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000007f0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000800: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000810: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000820: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000830: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000840: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000850: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000860: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000870: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000880: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000890: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000008a0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000008b0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000008c0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000008d0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000008e0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000008f0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000900: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000910: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000920: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000930: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000940: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000950: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000960: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000970: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000980: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000990: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000009a0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000009b0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000009c0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000009d0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000009e0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000009f0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000a00: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000a10: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000a20: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000a30: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000a40: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000a50: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000a60: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000a70: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000a80: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000a90: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000aa0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ab0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ac0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ad0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ae0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000af0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b00: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b10: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b20: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b30: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b40: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b50: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b60: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b70: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b80: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b90: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ba0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000bb0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000bc0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000bd0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000be0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000bf0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000c00: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000c10: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000c20: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000c30: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000c40: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000c50: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000c60: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000c70: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000c80: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000c90: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ca0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000cb0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000cc0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000cd0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ce0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000cf0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000d00: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000d10: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000d20: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000d30: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000d40: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000d50: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000d60: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000d70: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000d80: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000d90: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000da0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000db0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000dc0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000dd0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000de0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000df0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000e00: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000e10: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000e20: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000e30: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000e40: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000e50: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000e60: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000e70: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000e80: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000e90: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ea0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000eb0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ec0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ed0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ee0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ef0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000f00: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000f10: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000f20: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000f30: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000f40: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000f50: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000f60: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000f70: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000f80: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000f90: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000fa0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000fb0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000fc0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000fd0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000fe0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ff0: 0000 0000 0000 0000 0c00 00de 0dc3 79b6  ..............y.
02.hex
  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
00000000: 5309 0000 0c00 0102 2e00 0000 4609 0000  S...........F...
00000010: 0c00 0202 2e2e 0000 5409 0000 0c00 0202  ........T.......
00000020: 3039 0000 5609 0000 0c00 0202 3037 0000  09..V.......07..
00000030: 5809 0000 0c00 0202 3235 0000 5a09 0000  X.......25..Z...
00000040: 0c00 0202 3137 0000 5c09 0000 ac0f 0202  ....17..\.......
00000050: 3034 0000 0000 0000 0000 0000 0000 0000  04..............
00000060: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000070: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000080: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000090: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000000a0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000000b0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000000c0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000000d0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000000e0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000000f0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000100: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000110: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000120: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000130: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000140: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000150: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000160: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000170: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000180: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000190: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000001a0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000001b0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000001c0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000001d0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000001e0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000001f0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000200: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000210: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000220: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000230: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000240: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000250: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000260: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000270: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000280: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000290: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000002a0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000002b0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000002c0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000002d0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000002e0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000002f0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000300: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000310: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000320: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000330: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000340: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000350: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000360: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000370: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000380: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000390: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000003a0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000003b0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000003c0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000003d0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000003e0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000003f0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000400: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000410: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000420: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000430: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000440: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000450: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000460: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000470: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000480: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000490: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000004a0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000004b0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000004c0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000004d0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000004e0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000004f0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000500: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000510: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000520: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000530: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000540: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000550: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000560: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000570: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000580: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000590: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000005a0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000005b0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000005c0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000005d0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000005e0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000005f0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000600: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000610: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000620: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000630: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000640: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000650: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000660: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000670: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000680: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000690: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000006a0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000006b0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000006c0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000006d0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000006e0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000006f0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000700: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000710: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000720: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000730: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000740: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000750: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000760: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000770: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000780: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000790: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000007a0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000007b0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000007c0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000007d0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000007e0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000007f0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000800: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000810: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000820: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000830: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000840: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000850: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000860: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000870: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000880: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000890: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000008a0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000008b0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000008c0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000008d0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000008e0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000008f0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000900: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000910: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000920: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000930: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000940: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000950: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000960: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000970: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000980: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000990: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000009a0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000009b0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000009c0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000009d0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000009e0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000009f0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000a00: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000a10: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000a20: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000a30: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000a40: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000a50: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000a60: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000a70: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000a80: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000a90: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000aa0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ab0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ac0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ad0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ae0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000af0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b00: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b10: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b20: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b30: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b40: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b50: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b60: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b70: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b80: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b90: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ba0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000bb0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000bc0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000bd0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000be0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000bf0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000c00: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000c10: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000c20: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000c30: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000c40: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000c50: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000c60: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000c70: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000c80: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000c90: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ca0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000cb0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000cc0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000cd0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ce0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000cf0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000d00: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000d10: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000d20: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000d30: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000d40: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000d50: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000d60: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000d70: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000d80: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000d90: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000da0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000db0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000dc0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000dd0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000de0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000df0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000e00: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000e10: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000e20: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000e30: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000e40: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000e50: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000e60: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000e70: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000e80: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000e90: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ea0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000eb0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ec0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ed0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ee0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ef0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000f00: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000f10: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000f20: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000f30: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000f40: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000f50: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000f60: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000f70: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000f80: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000f90: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000fa0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000fb0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000fc0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000fd0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000fe0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ff0: 0000 0000 0000 0000 0c00 00de 0b25 90f7  .............%..
07.hex
  1
  2
  3
  4
  5
  6
  7
  8
  9
 10
 11
 12
 13
 14
 15
 16
 17
 18
 19
 20
 21
 22
 23
 24
 25
 26
 27
 28
 29
 30
 31
 32
 33
 34
 35
 36
 37
 38
 39
 40
 41
 42
 43
 44
 45
 46
 47
 48
 49
 50
 51
 52
 53
 54
 55
 56
 57
 58
 59
 60
 61
 62
 63
 64
 65
 66
 67
 68
 69
 70
 71
 72
 73
 74
 75
 76
 77
 78
 79
 80
 81
 82
 83
 84
 85
 86
 87
 88
 89
 90
 91
 92
 93
 94
 95
 96
 97
 98
 99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
00000000: 5e09 0000 0c00 0102 2e00 0000 4609 0000  ^...........F...
00000010: 0c00 0202 2e2e 0000 5f09 0000 dc0f 0202  ........_.......
00000020: 3137 0000 0000 0000 0000 0000 0000 0000  17..............
00000030: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000040: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000050: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000060: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000070: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000080: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000090: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000000a0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000000b0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000000c0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000000d0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000000e0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000000f0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000100: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000110: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000120: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000130: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000140: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000150: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000160: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000170: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000180: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000190: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000001a0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000001b0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000001c0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000001d0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000001e0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000001f0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000200: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000210: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000220: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000230: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000240: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000250: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000260: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000270: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000280: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000290: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000002a0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000002b0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000002c0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000002d0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000002e0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000002f0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000300: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000310: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000320: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000330: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000340: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000350: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000360: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000370: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000380: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000390: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000003a0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000003b0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000003c0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000003d0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000003e0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000003f0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000400: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000410: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000420: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000430: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000440: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000450: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000460: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000470: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000480: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000490: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000004a0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000004b0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000004c0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000004d0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000004e0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000004f0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000500: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000510: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000520: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000530: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000540: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000550: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000560: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000570: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000580: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000590: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000005a0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000005b0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000005c0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000005d0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000005e0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000005f0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000600: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000610: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000620: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000630: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000640: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000650: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000660: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000670: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000680: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000690: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000006a0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000006b0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000006c0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000006d0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000006e0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000006f0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000700: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000710: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000720: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000730: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000740: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000750: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000760: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000770: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000780: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000790: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000007a0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000007b0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000007c0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000007d0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000007e0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000007f0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000800: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000810: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000820: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000830: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000840: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000850: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000860: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000870: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000880: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000890: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000008a0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000008b0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000008c0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000008d0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000008e0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000008f0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000900: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000910: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000920: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000930: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000940: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000950: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000960: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000970: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000980: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000990: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000009a0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000009b0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000009c0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000009d0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000009e0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
000009f0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000a00: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000a10: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000a20: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000a30: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000a40: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000a50: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000a60: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000a70: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000a80: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000a90: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000aa0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ab0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ac0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ad0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ae0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000af0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b00: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b10: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b20: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b30: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b40: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b50: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b60: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b70: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b80: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000b90: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ba0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000bb0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000bc0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000bd0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000be0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000bf0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000c00: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000c10: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000c20: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000c30: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000c40: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000c50: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000c60: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000c70: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000c80: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000c90: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ca0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000cb0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000cc0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000cd0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ce0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000cf0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000d00: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000d10: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000d20: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000d30: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000d40: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000d50: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000d60: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000d70: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000d80: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000d90: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000da0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000db0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000dc0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000dd0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000de0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000df0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000e00: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000e10: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000e20: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000e30: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000e40: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000e50: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000e60: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000e70: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000e80: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000e90: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ea0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000eb0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ec0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ed0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ee0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ef0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000f00: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000f10: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000f20: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000f30: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000f40: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000f50: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000f60: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000f70: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000f80: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000f90: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000fa0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000fb0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000fc0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000fd0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000fe0: 0000 0000 0000 0000 0000 0000 0000 0000  ................
00000ff0: 0000 0000 0000 0000 0c00 00de d6f3 0f16  ................

The other files follow similar patterns: the first few lines contain data, then the last line contains data. Let’s not get hung up here, lets look at the other directories.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
zimengx@asahi ~/S/p/P/UnforgottenBits [1]> sudo e2ls -la /dev/disk5s3:/home/yone/Maildir/
       2360  drwx------     1000     1000     4096 14-Jan-2023 10:59 .
         24  drwxr-Sr-x     1000     1000     4096 16-Jan-2023 11:52 ..
       2371  drwx------     1000     1000     4096 16-Jan-2023 11:51 cur
       2368  drwx------     1000     1000     4096 14-Jan-2023 10:59 new
       2370  drwx------     1000     1000     4096 14-Jan-2023 10:59 tmp

zimengx@asahi ~/S/p/P/UnforgottenBits> sudo e2ls -la /dev/disk5s3:/home/yone/Maildir/cur
       2371  drwx------     1000     1000     4096 16-Jan-2023 11:51 .
       2360  drwx------     1000     1000     4096 14-Jan-2023 10:59 ..
       2373  -rw-r--r--     1000     1000      262 16-Jan-2023 11:49 1673722143.M758346P394112Q1.haynekhtnamet:2,S
       2384  -rw-r--r--     1000     1000      262 16-Jan-2023 11:49 1673722272.M345699P394146Q1.haynekhtnamet:2,S
       2372  -rw-r--r--     1000     1000      250 16-Jan-2023 11:49 1673722272.M354727P394146Q3.haynekhtnamet:2,S
       2376  -rw-r--r--     1000     1000      260 16-Jan-2023 11:49 1673722272.M362142P394146Q4.haynekhtnamet:2,S
       2385  -rw-r--r--     1000     1000      244 16-Jan-2023 11:49 1673722272.M370158P394146Q5.haynekhtnamet:2,S
       2379  -rw-r--r--     1000     1000      262 16-Jan-2023 11:49 1673722272.M382945P394146Q7.haynekhtnamet:2,S
       2378  -rw-r--r--     1000     1000      249 16-Jan-2023 11:49 1673722272.M388674P394146Q8.haynekhtnamet:2,S
       2381  -rw-r--r--     1000     1000      247 16-Jan-2023 11:49 1673722272.M394284P394146Q9.haynekhtnamet:2,S
       2380  -rw-r--r--     1000     1000      264 16-Jan-2023 11:49 1673722272.M406783P394146Q11.haynekhtnamet:2,S
       2377  -rw-r--r--     1000     1000      275 16-Jan-2023 11:49 1673722272.M413082P394146Q12.haynekhtnamet:2,S
       2375  -rw-r--r--     1000     1000      247 16-Jan-2023 11:49 1673722272.M418711P394146Q13.haynekhtnamet:2,S

zimengx@asahi ~/S/p/P/UnforgottenBits> sudo e2ls -la /dev/disk5s3:/home/yone/Maildir/new
       2368  drwx------     1000     1000     4096 14-Jan-2023 10:59 .
       2360  drwx------     1000     1000     4096 14-Jan-2023 10:59 ..
       2369  -rw-r--r--     1000     1000      358 16-Jan-2023 11:49 1673722272.M424681P394146Q14.haynekhtnamet

zimengx@asahi ~/S/p/P/UnforgottenBits> sudo e2ls -la /dev/disk5s3:/home/yone/Maildir/tmp
       2370  drwx------     1000     1000     4096 14-Jan-2023 10:59 .
       2360  drwx------     1000     1000     4096 14-Jan-2023 10:59 ..

What in the world are those names?? Lets look online for what haynekhtnamet is. The other numbers might be encryption keys? Not sure. Searching, we get:

Haynekhtnamet is the name applied to a legendary wamasu that dwelled in Black Marsh.[1] Reports of the creature stretch back centuries, but due to account disparities it is possible that Haynekhtnamet was not a single creature, but a series of wamasu.[2] Local villages made seasonal offerings to the beast, sending nuts, meats, and produce adrift on rafts. They believed that appeasing Haynekhtnamet is the only way to stop seasonal flooding and ensure guar breeding patterns remain consistent. There is no evidence to suggest that these offerings had any effect, and the wasteful practice left villages hungry.[2]

What?? I’m not sure if this is relevant, but given the absolutely diabolical games picoCTF devs have put out in the past, it wouldn’t suprise me that I need to learn the lore behind this.

I will ask genAI to make a command for me to copy this over, since I DO NOT want to copy all those file names by hand :).

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
zimengx@asahi ~/S/p/P/UnforgottenBits> sudo e2cp /dev/disk5s3:/home/yone/Maildir/cur/1673722143.M758346P394112Q1.haynekhtnamet:2,S ./unforgotten_bits_content/Maildir/cur/
                                       sudo e2cp /dev/disk5s3:/home/yone/Maildir/cur/1673722272.M345699P394146Q1.haynekhtnamet:2,S ./unforgotten_bits_content/Maildir/cur/
                                       sudo e2cp /dev/disk5s3:/home/yone/Maildir/cur/1673722272.M354727P394146Q3.haynekhtnamet:2,S ./unforgotten_bits_content/Maildir/cur/
                                       sudo e2cp /dev/disk5s3:/home/yone/Maildir/cur/1673722272.M362142P394146Q4.haynekhtnamet:2,S ./unforgotten_bits_content/Maildir/cur/
                                       sudo e2cp /dev/disk5s3:/home/yone/Maildir/cur/1673722272.M370158P394146Q5.haynekhtnamet:2,S ./unforgotten_bits_content/Maildir/cur/
                                       sudo e2cp /dev/disk5s3:/home/yone/Maildir/cur/1673722272.M382945P394146Q7.haynekhtnamet:2,S ./unforgotten_bits_content/Maildir/cur/
                                       sudo e2cp /dev/disk5s3:/home/yone/Maildir/cur/1673722272.M388674P394146Q8.haynekhtnamet:2,S ./unforgotten_bits_content/Maildir/cur/
                                       sudo e2cp /dev/disk5s3:/home/yone/Maildir/cur/1673722272.M394284P394146Q9.haynekhtnamet:2,S ./unforgotten_bits_content/Maildir/cur/
                                       sudo e2cp /dev/disk5s3:/home/yone/Maildir/cur/1673722272.M406783P394146Q11.haynekhtnamet:2,S ./unforgotten_bits_content/Maildir/cur/
                                       sudo e2cp /dev/disk5s3:/home/yone/Maildir/cur/1673722272.M413082P394146Q12.haynekhtnamet:2,S ./unforgotten_bits_content/Maildir/cur/
                                       sudo e2cp /dev/disk5s3:/home/yone/Maildir/cur/1673722272.M418711P394146Q13.haynekhtnamet:2,S ./unforgotten_bits_content/Maildir/cur/
                                       sudo e2cp /dev/disk5s3:/home/yone/Maildir/new/1673722272.M424681P394146Q14.haynekhtnamet ./unforgotten_bits_content/Maildir/new/

In /cur we seem to have a lot of spam mail:

1
2
3
4
5
subject: re: FA Cup finals
to: Sten Walker <yone786@gmail.com>
from: Carson Dole <carson@facupfinal.com>

Free entry in 2 a wkly comp to win FA Cup final tkts 21st May 2005. Text FA to 87121 to receive entry question(std txt rate)T&C's apply 08452810075over18's
1
2
3
4
5
subject: WINNER!!
to: Sten Walker <yone786@gmail.com>
from: Winners <winners@legitbiz.com>

WINNER!! As a valued network customer you have been selected to receivea $900 prize reward! To claim call 09061701461. Claim code KL341. Valid 12 hours only.
1
2
3
4
5
subject: Upgrade Entitlement
to: Sten Walker <yone786@gmail.com>
from: Adam Scott <adam@uscarrier1.com>

Had your mobile 11 months or more? U R entitled to Update to the latest colour mobiles with camera for Free! Call The Mobile Update Co FREE on 08002986030
1
2
3
4
5
subject: Win CASH!
to: Sten Walker <yone786@gmail.com>
from: Sweepstakes <sweepstakes@newcompetition.com>

SIX chances to win CASH! From 100 to 20,000 pounds txt> CSH11 and send to 87575. Cost 150p/day, 6days, 16+ TsandCs apply Reply HL 4 info
1
2
3
4
5
subject: You hit the jackpot!
to: Sten Walker <yone786@gmail.com>
from: Prize Jackpot <jackpot@dbuk.net>

URGENT! You have won a 1 week FREE membership in our $100,000 Prize Jackpot! Txt the word: CLAIM to No: 81010 T&C www.dbuk.net LCCLTD POBOX 4403LDNW1A7RW18
1
2
3
4
5
subject: Phone sweepstakes!
to: Sten Walker <yone786@gmail.com>
from: Nokia Giveaway <giveaway@4-tc.biz>

500 New Mobiles from 2004, MUST GO! Txt: NOKIA to No: 89545 & collect yours today!From ONLY $1 www.4-tc.biz 2optout 087187262701.50gbp/mtmsg18
1
2
3
4
5
subject: Know the future!
to: Sten Walker <yone786@gmail.com>
from: Horoscope <horoscope@fortuneteller.net>

Will u meet ur dream partner soon? Is ur career off 2 a flyng start? 2 find out free, txt HORO followed by ur star sign, e. g. HORO ARIES
1
2
3
4
5
subject: FREE RINGTONES!!!
to: Sten Walker <yone786@gmail.com>
from: Tom Howard <tom@desperatebank.com>

Your free ringtone is waiting to be collected. Simply text the password "MIX" to 85069 to verify. Get Usher and Britney. FML, PO Box 5249, MK17 92H. 450Ppw 16
1
2
3
4
to: Sten Walker <yone786@gmail.com>
from: Reggie Cotts <reggie@musicdownload.com>

all the lastest from Stereophonics, Marley, Dizzee Racal, Libertines and The Strokes! Win Nookii games with Flirt!! Click TheMob WAP Bookmark or text WAP to 82468
1
2
3
4
5
subject: Free money, boi's!
to: Sten Walker <yone786@gmail.com>
from: Matt Candlesmith <matt@winners.com>

money!!! you r a lucky winner ! 2 claim your prize text money 2 88600 over $1million to give away ! ppt150x3+normal text rate box403 w1t1jy

And in /new we have a suspicious email:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
subject: Deleting emails
to: Sten Walker <yone786@gmail.com>
from: Bob Bobberson <azerite17@gmail.com>

Yone,

This is just a reminder to delete all of our emails and scrub your trash can as well. We don't want our precious light falling into the wrong hands. You know the punishment for such 'crimes'.

To the Light and All it reveals,
- The Azerite Master

Who is the Azerite? Maybe they are tied to the dragon lore??

Azerite is the name given to the crystallized blood of Azeroth. When Sargeras stabbed the world with his sword, it caused her to bleed her life essence all over the world. The Alliance and the Horde fought over it during the Fourth War.[2] Magni Bronzebeard gave an adventurer the  [Heart of Azeroth], a relic from Azeroth herself that allows the bearer to consume the Azerite and through it, heal Azeroth. Island Expeditions serve as the main source for Azerite, with maps for them provided by the gnomes and goblins.[2]

Maybe I should play more games (the only game I’ve played continuously is SuperTuxKart, hilariously). Azerite Master is a character from World of Warcraft. So we have atleast two fandoms from the dragon and here, and likely the images have something to do with that as well. Still unsure what the notes are fore? Or the hex files?

The spam emails have a lot of scrambled letters and numbers. Maybe those are some text to be decoding?? What?. And for the email under /new, “we don’t want our precious light falling into the wrong hands?”

  1. What is the light?
  2. Maybe we need to recover deleted files on this disk image??

Let’s check the hidden files in /home:

1
2
zimengx@asahi ~/S/p/P/UnforgottenBits> sudo e2cp /dev/disk5s3:/home/yone/.ash_history unforgotten_bits_content/
zimengx@asahi ~/S/p/P/UnforgottenBits> sudo e2cp /dev/disk5s3:/home/yone/.lynx unforgotten_bits_content/

.ash_history has a familiar ring to it, maybe .bash_history? The history file created for bash terminals (duh). Maybe they were in a rush to delete some files and deleted b's from files? Let’s hold on to that thought.

In .ash_history we have one line:

.ash_history.py
1
su root

su root is use to switch the current user to the superuser. Maybe yone was using superuser to delete files??

Then we have a .lynx file, not sure what that is. According to Google:

A “.lynx” file can refer to a file encrypted by the Lynx ransomware, a type of malware that encrypts files on a computer and demands payment for their decryption. It can also refer to a file associated with older software, such as the Lynx file transfer protocol or the Lynx text-based web browser, but this is less common

Lets assume scenario #1, maybe yone got infected from the spam emails? If we assume scenario #2, it might be a configuration file for the web browser or the transfer protocol, but .lynx is a binary data file, frustrating.

1
2
zimengx@asahi ~/S/p/P/U/unforgotten_bits_content> file .lynx
.lynx: data

Oops! .lynx is a folder, not a file.

1
2
3
zimengx@asahi ~/S/p/P/U/unforgotten_bits_content> sudo e2ls /dev/disk5s3:/home/yone/.lynx
Password:
browsing-history.log

There! Let’s copy that over.

1
zimengx@asahi ~/S/p/P/U/unforgotten_bits_content [1]> sudo e2cp /dev/disk5s3:/home/yone/.lynx/browsing-history.log .lynx/
browsing-history.log
1
2
3
4
5
www.google.com
https://www.google.com/search?q=number+encodings&source=hp&ei=WeC9Y77KJ_iwqtsP0sGu6A0&iflsig=AK50M_UAAAAAY73uaRxDkbHRUH8jn4OVhOgM8riUqvVI&ved=0ahUKEwj-2r_EgL78AhV4mGoFHdKgC90Q4dUDCAk&uact=5&oq=number+encodings&gs_lcp=Cgdnd3Mtd2l6EAMyBggAEBYQHjIFCAAQhgMyBQgAEIYDMgUIABCGAzIFCAAQhgM6DgguEIAEELEDEIMBENQCOgsIABCABBCxAxCDAToRCC4QgAQQsQMQgwEQxwEQ0QM6CAgAELEDEIMBOgsILhCABBCxAxCDAToFCAAQgAQ6CAgAEIAEELEDOggILhCABBDUAjoHCAAQgAQQCjoHCC4QgAQQClAAWI0VYPAXaABwAHgDgAHDA4gB-iKSAQkwLjMuNS40LjOYAQCgAQE&sclient=gws-wiz
https://en.wikipedia.org/wiki/Church_encoding
https://cs.lmu.edu/~ray/notes/numenc/
https://www.wikiwand.com/en/Golden_ratio_base

Yay! We have some hints. Number encodings:

Number encodings ==represent numerical values in a digital format==, with common examples including binary (base-2), hexadecimal (base-16), and binary-coded decimal (BCD) (where each decimal digit is converted to its 4-bit binary equivalent). Other encodings exist for specific purposes, such as the IEEE 754 standard for floating-point numbers and unary encoding for certain data compression or functional programming applications. The choice of encoding depends on factors like memory efficiency, precision requirements, and compatibility needs.

Church encodings:

In mathematics, Church encoding is a way of representing various data types in the lambda calculus. In the untyped lambda calculus the only primitive data type are functions, represented by lambda abstraction terms. Types that are usually considered primitive in other notations (such as integers, Booleans, pairs, lists, and tagged unions) are not natively present. Hence the need arises to have ways to represent the data of these varying types by lambda terms, that is, by functions that are taking functions as their arguments and are returning functions as their results. The Church numerals are a representation of the natural numbers using lambda notation. The method is named for Alonzo Church, who first encoded data in the lambda calculus this way. It can also be extended to represent other data types in the similar spirit.

NOOOOOOO Mathhh

Lets look at https://cs.lmu.edu/~ray/notes/numenc/, the article covers:

  • Number vs. numeral
  • Egyptian numerals
  • Positional numeral systems
  • Fixed-length integer encodings
  • Floating-point encodings
  • IEEE 754 binary32 and binary64

Lastly, golden ratio bases:

Golden ratio base is a non-integer positional numeral system that uses the golden ratio (the irrational number 1+52{\textstyle {\frac {1+{\sqrt {5}}}{2}}} ≈ 1.61803399 symbolized by the Greek letter φ) as its base. It is sometimes referred to as base-φgolden mean basephi-base, or, colloquially, phinary. Any non-negative real number can be represented as a base-φ numeral using only the digits 0 and 1, and avoiding the digit sequence “11” – this is called a standard form. A base-φ numeral that includes the digit sequence “11” can always be rewritten in standard form, using the algebraic properties of the base φ — most notably that φn + φn − 1 = φn + 1. For instance, 11φ = 100φ.

Ok. time to recollect. That’s too much math for one sitting, lets take a break and look at other directories. The use of su root suggests other root access directories have been modified, such as /tmp and /var/tmp and /var/spool:

1
2
3
4
5
6
7
8
zimengx@asahi ~/S/p/P/U/unforgotten_bits_content> sudo e2ls /dev/disk5s3:/tmp
No files found!
zimengx@asahi ~/S/p/P/U/unforgotten_bits_content> sudo e2ls /dev/disk5s3:/var
cache  empty  lib    local  lock   log    mail   opt    run    spool  tmp
zimengx@asahi ~/S/p/P/U/unforgotten_bits_content> sudo e2ls /dev/disk5s3:/var/tmp
No files found!
zimengx@asahi ~/S/p/P/U/unforgotten_bits_content> sudo e2ls /dev/disk5s3:/var/spool
cron  mail

We have a hit on /var/spool, we have cron and mail, lets copy those over:

1
2
3
4
5
zimengx@asahi ~/S/p/P/U/unforgotten_bits_content [1]> sudo e2ls -la /dev/disk5s3:/var/spool/
        477  drwxr-xr-x     root    wheel     4096 23-Jul-2021 08:45 .
       7126  drwxr-xr-x     root    wheel     4096 19-Dec-2022 13:02 ..
        478  drwxr-xr-x     root    wheel     4096 23-Jul-2021 08:45 cron
        480  lrwxrwxrwx     root    wheel        9 23-Jul-2021 08:45 mail

mhmm…its not copying over:

1
2
3
4
5
6
zimengx@asahi ~/S/p/P/U/unforgotten_bits_content [255]> sudo e2ls /dev/disk5s3:/var/spool/cron
crontabs
zimengx@asahi ~/S/p/P/U/unforgotten_bits_content> sudo e2cp /dev/disk5s3:/var/spool/cron/crontabs .
Invalid argumentError copying file /var/spool/cron/crontabs to ./crontabs
Error encountered copying files
zimengx@asahi ~/S/p/P/U/unforgotten_bits_content [255]>

It seems like both crontabs and mail are symlinks..mhmm Lets try to find other files in other directories, this time going in with -la In /root we have another .ash_history, likely after yone logged into with sudo su. Lets copy that file over

.ash_history
1
2
ls -al
halt

We have ls -al, listing all files/directories with permissions, and then halt(s) the system. We have some interesting files:

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
zimengx@asahi ~/S/p/P/U/unforgotten_bits_content> sudo e2ls -la /dev/disk5s3:/tmp
       7124  drwxrwxrwT     root    wheel     4096 16-Jan-2023 11:47 .
          2  drwxr-xr-x     root    wheel     4096 19-Dec-2022 13:02 ..
       2350  drwxrwxrwT     root    wheel     4096 16-Jan-2023 11:47 .ICE-unix
       2351  drwxrwxrwT     root    wheel     4096 16-Jan-2023 11:47 .X11-unix

zimengx@asahi ~/S/p/P/U/unforgotten_bits_content> sudo e2ls -la /dev/disk5s3:/usr
       7127  drwxr-xr-x     root    wheel     4096 23-Jul-2021 08:45 .
          2  drwxr-xr-x     root    wheel     4096 19-Dec-2022 13:02 ..
         90  drwxr-xr-x     root    wheel    12288 23-Jul-2021 08:45 bin
        460  drwxr-xr-x     root    wheel     4096 23-Jul-2021 08:45 lib
        483  drwxr-xr-x     root    wheel     4096 23-Jul-2021 08:45 libexec
        462  drwxr-xr-x     root    wheel     4096 23-Jul-2021 08:45 local
         94  drwxr-xr-x     root    wheel     4096 23-Jul-2021 08:45 sbin
        112  drwxr-xr-x     root    wheel     4096 23-Jul-2021 08:45 share

zimengx@asahi ~/S/p/P/U/unforgotten_bits_content> sudo e2ls -la /dev/disk5s3:/var
       7126  drwxr-xr-x     root    wheel     4096 19-Dec-2022 13:02 .
          2  drwxr-xr-x     root    wheel     4096 19-Dec-2022 13:02 ..
         82  drwxr-xr-x     root    wheel     4096 23-Jul-2021 08:45 cache
        468  dr-xr-xr-x     root    wheel     4096 23-Jul-2021 08:45 empty
        115  drwxr-xr-x     root    wheel     4096 23-Jul-2021 08:45 lib
        470  drwxr-xr-x     root    wheel     4096 23-Jul-2021 08:45 local
        471  lrwxrwxrwx     root    wheel        9 19-Dec-2022 13:02 lock
        473  drwxr-xr-x     root    wheel     4096 16-Jan-2023 11:47 log
        474  drwxr-xr-x     root    wheel     4096 23-Jul-2021 08:45 mail
        475  drwxr-xr-x     root    wheel     4096 23-Jul-2021 08:45 opt
        476  lrwxrwxrwx     root    wheel        4 23-Jul-2021 08:45 run
        477  drwxr-xr-x     root    wheel     4096 23-Jul-2021 08:45 spool
        481  drwxrwxrwT     root    wheel     4096 23-Jul-2021 08:45 tmp

Mainly the mail file again, which might be the symlink, and .X11-unix, which might contain a log of the opened applications? The tmp/ files also seem interesting in /var.

Copying mail over, we get another binary file:

1
zimengx@asahi ~/S/p/P/U/unforgotten_bits_content> sudo e2cp /dev/disk5s3:/var/mail var/.

In /var/log, we have some interesting files as well:

1
2
3
4
5
6
7
8
9
zimengx@asahi ~/S/p/P/U/unforgotten_bits_content> sudo e2ls -la /dev/disk5s3:/var/log
        473  drwxr-xr-x     root    wheel     4096 16-Jan-2023 11:47 .
       7126  drwxr-xr-x     root    wheel     4096 19-Dec-2022 13:02 ..
       2355  -rw-r-----     root    owner        0 19-Dec-2022 13:02 acpid.log
        842  drwxr-S---     root    owner     4096 23-Jul-2021 08:45 chrony
       2352  -rw-r-----     root    wheel    15582 16-Jan-2023 11:47 dmesg
         32  -rw-r-----     root    owner     8707 16-Jan-2023 11:52 messages
        841  -rw-r-----     root    owner   204807 16-Jan-2023 11:47 messages.0
        472  -rw-rw-r--     root      406        0 19-Dec-2022 13:02 wtmp

Let’s see the messages.

messages
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
Jan 16 19:49:51 localhost auth.info sshd[2098]: Received disconnect from 192.168.98.140 port 40790:11: disconnected by user
Jan 16 19:49:51 localhost auth.info sshd[2098]: Disconnected from user yone 192.168.98.140 port 40790
Jan 16 19:49:58 localhost daemon.info init: process '/sbin/getty -L 0 ttyS0 vt100' (pid 2097) exited. Scheduling for restart.
Jan 16 19:49:59 localhost daemon.info init: starting pid 2100, tty '/dev/ttyS0': '/sbin/getty -L 0 ttyS0 vt100'
Jan 16 19:49:59 localhost auth.err getty[2100]: tcgetattr: I/O error^M
Jan 16 19:50:09 localhost daemon.info init: process '/sbin/getty -L 0 ttyS0 vt100' (pid 2100) exited. Scheduling for restart.
Jan 16 19:50:10 localhost daemon.info init: starting pid 2102, tty '/dev/ttyS0': '/sbin/getty -L 0 ttyS0 vt100'
Jan 16 19:50:10 localhost auth.err getty[2102]: tcgetattr: I/O error^M
Jan 16 19:50:20 localhost daemon.info init: process '/sbin/getty -L 0 ttyS0 vt100' (pid 2102) exited. Scheduling for restart.
Jan 16 19:50:21 localhost daemon.info init: starting pid 2105, tty '/dev/ttyS0': '/sbin/getty -L 0 ttyS0 vt100'
Jan 16 19:50:21 localhost auth.err getty[2105]: tcgetattr: I/O error^M
Jan 16 19:50:31 localhost daemon.info init: process '/sbin/getty -L 0 ttyS0 vt100' (pid 2105) exited. Scheduling for restart.
Jan 16 19:50:32 localhost daemon.info init: starting pid 2106, tty '/dev/ttyS0': '/sbin/getty -L 0 ttyS0 vt100'
Jan 16 19:50:32 localhost auth.err getty[2106]: tcgetattr: I/O error^M
Jan 16 19:50:42 localhost daemon.info init: process '/sbin/getty -L 0 ttyS0 vt100' (pid 2106) exited. Scheduling for restart.
Jan 16 19:50:43 localhost daemon.info init: starting pid 2107, tty '/dev/ttyS0': '/sbin/getty -L 0 ttyS0 vt100'
Jan 16 19:50:43 localhost auth.err getty[2107]: tcgetattr: I/O error^M
Jan 16 19:50:53 localhost daemon.info init: process '/sbin/getty -L 0 ttyS0 vt100' (pid 2107) exited. Scheduling for restart.
Jan 16 19:50:54 localhost daemon.info init: starting pid 2108, tty '/dev/ttyS0': '/sbin/getty -L 0 ttyS0 vt100'
Jan 16 19:50:54 localhost auth.err getty[2108]: tcgetattr: I/O error^M
Jan 16 19:51:04 localhost daemon.info init: process '/sbin/getty -L 0 ttyS0 vt100' (pid 2108) exited. Scheduling for restart.
Jan 16 19:51:05 localhost daemon.info init: starting pid 2110, tty '/dev/ttyS0': '/sbin/getty -L 0 ttyS0 vt100'
Jan 16 19:51:05 localhost auth.err getty[2110]: tcgetattr: I/O error^M
Jan 16 19:51:15 localhost daemon.info init: process '/sbin/getty -L 0 ttyS0 vt100' (pid 2110) exited. Scheduling for restart.
Jan 16 19:51:16 localhost daemon.info init: starting pid 2112, tty '/dev/ttyS0': '/sbin/getty -L 0 ttyS0 vt100'
Jan 16 19:51:16 localhost auth.err getty[2112]: tcgetattr: I/O error^M
Jan 16 19:51:26 localhost daemon.info init: process '/sbin/getty -L 0 ttyS0 vt100' (pid 2112) exited. Scheduling for restart.
Jan 16 19:51:27 localhost daemon.info init: starting pid 2113, tty '/dev/ttyS0': '/sbin/getty -L 0 ttyS0 vt100'
Jan 16 19:51:27 localhost auth.err getty[2113]: tcgetattr: I/O error^M
Jan 16 19:51:37 localhost daemon.info init: process '/sbin/getty -L 0 ttyS0 vt100' (pid 2113) exited. Scheduling for restart.
Jan 16 19:51:38 localhost daemon.info init: starting pid 2115, tty '/dev/ttyS0': '/sbin/getty -L 0 ttyS0 vt100'
Jan 16 19:51:38 localhost auth.err getty[2115]: tcgetattr: I/O error^M
Jan 16 19:51:48 localhost daemon.info init: process '/sbin/getty -L 0 ttyS0 vt100' (pid 2115) exited. Scheduling for restart.
Jan 16 19:51:49 localhost daemon.info init: starting pid 2116, tty '/dev/ttyS0': '/sbin/getty -L 0 ttyS0 vt100'
Jan 16 19:51:49 localhost auth.err getty[2116]: tcgetattr: I/O error^M
Jan 16 19:51:59 localhost daemon.info init: process '/sbin/getty -L 0 ttyS0 vt100' (pid 2116) exited. Scheduling for restart.
Jan 16 19:52:00 localhost daemon.info init: starting pid 2118, tty '/dev/ttyS0': '/sbin/getty -L 0 ttyS0 vt100'
Jan 16 19:52:00 localhost auth.err getty[2118]: tcgetattr: I/O error^M
Jan 16 19:52:02 localhost auth.notice su: + tty1 yone:root
Jan 16 19:52:06 localhost daemon.info init: starting pid 2121, tty '': '/sbin/openrc shutdown'
Jan 16 19:52:06 localhost user.debug : Will stop /usr/sbin/sshd
Jan 16 19:52:06 localhost user.debug : Will stop PID 2078
Jan 16 19:52:06 localhost user.debug : Sending signal 15 to PID 2078
Jan 16 19:52:06 localhost auth.info sshd[2078]: Received signal 15; terminating.
Jan 16 19:52:06 localhost daemon.err /etc/init.d/sshd[2145]: sshd: caught SIGTERM, aborting
Jan 16 19:52:06 localhost user.debug : Will stop /usr/sbin/crond
Jan 16 19:52:06 localhost user.debug : Will stop PID 2014
Jan 16 19:52:06 localhost user.debug : Sending signal 15 to PID 2014
Jan 16 19:52:06 localhost user.debug : Will stop /sbin/syslogd
Jan 16 19:52:06 localhost user.debug : Will stop PID 1902
Jan 16 19:52:06 localhost user.debug : Sending signal 15 to PID 1902
Jan 16 19:52:06 localhost syslog.info syslogd exiting

We see a ssh login attempt and then shutdown, yone logged onto the system via ssh??

Lets copy messages.0 over and see if theres more information: Not a lot of use from messages.0

Thats it for now… 5hrs spent. I’ll continue it whenever I have time next.

I have a few minutes before a robotics competition, but this is what I did last night:

I went to my linux computer and mounted the filesystem, set up a loop device to treat the disk image as a block device, used the partx command to read the partition table from the loop device and create device maps, and finally, mounted the individual partitions to directories. The second partition was not mounted as it was a swap partition and strings did not recover anything of use.

Now, back on my laptop, we have the entire disk stored locally, this gives us access to much more advance tools than just ls.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
zimengx@asahi ~/S/p/P/U/D/disk> ls
drwx------ - zimengx 12 Oct 07:02 bin
drwx------ - zimengx 12 Oct 07:02 boot
drwx------ - zimengx 12 Oct 07:02 dev
drwx------ - zimengx 12 Oct 07:02 etc
drwx------ - zimengx 12 Oct 07:02 home
drwx------ - zimengx 12 Oct 07:02 lib
drwx------ - zimengx 12 Oct 07:02 lost+found
drwx------ - zimengx 12 Oct 07:02 media
drwx------ - zimengx 12 Oct 07:02 mnt
drwx------ - zimengx 12 Oct 07:02 opt
drwx------ - zimengx 12 Oct 07:02 proc
drwx------ - zimengx 12 Oct 07:02 root
drwx------ - zimengx 12 Oct 07:02 run
drwx------ - zimengx 12 Oct 07:02 sbin
drwx------ - zimengx 12 Oct 07:02 srv
drwx------ - zimengx 12 Oct 07:02 swap
drwx------ - zimengx 12 Oct 07:02 sys
drwx------ - zimengx 12 Oct 07:02 tmp
drwx------ - zimengx 12 Oct 07:02 usr
drwx------ - zimengx 12 Oct 07:02 var

I also realized yesterday that irclogs/, 01, 02, 03 are folders, not files, which explain why we couldn’t get anything from them.

So lets dive into the home folder again.

1
2
3
4
5
6
7
zimengx@asahi ~/S/p/P/U/D/d/h/yone> ls -a
.rw------- 8 zimengx 12 Oct 07:02 .ash_history
drwx------ - zimengx 12 Oct 07:02 .lynx
drwx------ - zimengx 12 Oct 07:02 gallery
drwx------ - zimengx 12 Oct 07:02 irclogs
drwx------ - zimengx 12 Oct 07:02 Maildir
drwx------ - zimengx 12 Oct 07:02 notes

I won’t go over the .ash_history, .lynx,Maildir, notes and gallery, but lets take a look at those chat logs!

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
zimengx@asahi ~/S/p/P/U/D/d/h/y/irclogs> tree 
.
├── 01
│   └── 04
│       └── #avidreader13.log
├── 02
│   ├── 04
│   │   └── #leagueoflegends.log
│   ├── 07
│   │   └── #leagueoflegends.log
│   ├── 09
│   │   └── #leagueoflegends.log
│   ├── 17
│   │   └── #leagueoflegends.log
│   └── 25
│       └── #leagueoflegends.log
└── 07
    └── 17
        └── #common.log

This explains some of the connection to lore may be hidden here?

avidreader13.log
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
[08:12] <yone786> Ok, let me give you the keys for the light.
[08:12] <avidreader13> I’m ready.
[08:15] <yone786> First it’s steghide.
[08:15] <yone786> Use password: akalibardzyratrundle
[08:16] <avidreader13> Huh, is that a different language?
[08:18] <yone786> Not really, don’t worry about it.
[08:18] <yone786> The next is the encryption. Use openssl, AES, cbc.
[08:19] <yone786> salt=0f3fa17eeacd53a9 key=58593a7522257f2a95cce9a68886ff78546784ad7db4473dbd91aecd9eefd508 iv=7a12fd4dc1898efcd997a1b9496e7591
[08:19] <avidreader13> Damn! Ever heard of passphrases?
[08:19] <yone786> Don’t trust em. I seed my crypto keys with uuids.
[08:20] <avidreader13> Ok, I get it, you’re paranoid.
[08:20] <avidreader13> But I have no idea if that would work.
[08:21] <yone786> Haha, I’m not paranoid. I know you’re not a good hacker dude.
[08:21] <avidreader13> Is there a better way?
[08:22] * yone786 yawns.
[08:24] <yone786> You’re ok at hacking. I’m good at writing code and using it
[08:24] <avidreader13> What language are you writing in?
[08:26] <yone786> C
[08:26] <avidreader13> Oh, I see.
[08:26] <yone786> I’m glad you like it. I’m sure you wouldn’t understand half of what I was doing.
[08:28] <avidreader13> I understand enough, but I do wish you wouldn’t take so much time with it.
[08:28] <yone786> Sorry. Well, I wish you could learn some things.
[08:29] <avidreader13> But it’s an incredible amount of time you spend on it.
[08:29] <yone786> Haha, don’t take it like that.

We have several keywords, steghide, AES that tell us that the other files (especially the images!) may be steghide’d, and the binary files may be AES encrypted.

02/04/#leagueoflegends.log
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
[21:23] <beautifulAkali07> But to be clear: I’m an indie dev, I want my money
[21:23] <yone786> I’ll happily pay for a song
[21:23] <beautifulAkali07> But I think people need to know there’s no money in this for me
[21:23] <beautifulAkali07> I’ve been trying to get this job, and I’m not even getting interviews
[21:24] <yone786> Oh, because you’ve only been looking?
[21:24] <beautifulAkali07> No
[21:24] <beautifulAkali07> Because I’m trying to get the job on my own
[21:25] <yone786> Oh, I didn’t realize that
[21:25] <AdriiB> Why aren’t you getting interviews?
[21:25] <beautifulAkali07> Because I think they don’t really know how hard it is
[21:25] <yone786> Well, maybe you’ll get a job
[21:25] <beautifulAkali07> They don’t seem to think it’s a big deal
[21:25] <beautifulAkali07> I’ve been applying to things for years
[21:26] <beautifulAkali07> I was rejected about 10 times, with very different causes
[21:26] <beautifulAkali07> I think it’s an important thing to know that they want us and that we could be doing that job
[21:26] <yone786> Ah well, if you don’t get this job, you’ll know what to do next
[21:26] <beautifulAkali07> So I think it’s a good thing to be aware of that
[21:27] <beautifulAkali07> And I don’t think I’m being really arrogant if I just tell you
[21:28] <AdriiB> Yeah I see how you are doing it then
[21:28] <AdriiB> I see.
[21:28] <beautifulAkali07> Because if I don’t get an interview, it doesn’t mean anything
[21:28] <yone786> Well, don’t worry about it then, you can always be like what’s up
[21:29] <yone786> And it’ll be fine
[21:29] <beautifulAkali07> No it won’t
[21:29] <beautifulAkali07> I’ve talked with so many people, so many times, and I know how not to do this
[21:29] <beautifulAkali07> Why? Because I can’t do it, and it’s not very fun or interesting
[21:30] <yone786> Then I wouldn’t
[21:30] <beautifulAkali07> No, and I wish I could but I don’t think that’s what you want too either
[21:30] <beautifulAkali07> This is my first time applying for a job
[21:30] <beautifulAkali07> I don’t have any previous experience with working with computers
[21:30] <yone786> I mean, you’re trying, you’re applying, you should be fine
[21:30] <beautifulAkali07> Why are you doing that? Like I’ve got this job
[21:30] <beautifulAkali07> And there’s nothing I really wanted, I just thought it would help me get a job
[21:30] <AdriiB> I get it, and then you say “well if you don’t get this job, I just thought it would help me get a job”
[21:30] <beautifulAkali07> I don’t have a job where just
02/07/#leagueoflegends.log
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
[21:25] <yone786> Yes, yes… I know that
[21:25] <yone786> That’s why I asked you
[21:25] <beautifulAkali07> Why don’t you want her to be on your team then?
[21:25] <yone786> Yeah, because
[21:26] <beautifulAkali07> I do want to be on your team.
[21:26] <beautifulAkali07> My team is a very small team at this point.
[21:27] <beautifulAkali07> I want to get on the list.
[21:28] <yone786> I know
[21:29] <beautifulAkali07> Thank you though
[21:30] <yone786> Thank you for your answer
[21:30] <yone786> I didn’t say anything
[21:30] <beautifulAkali07> I know
[21:31] <AdriiB> But can you not see that you are already on the list?
[21:31] <yone786> I can see that my team isn’t a very strong one
[21:32] <beautifulAkali07> I think I will start a new team soon, so I don’t want to add another member.
[21:32] <beautifulAkali07> But yeah.
[21:32] <AdriiB> Then use the next time you get on your team to join this list.
[21:33] <yone786> But she is in. I want. I love. That person.
[21:33] <beautifulAkali07> But yeah, I’m on your team
[21:33] <AdriiB> And I suggest that you do not get distracted by the fact that some other member of your team is already on the list.
[21:33] <beautifulAkali07> I’ve thought about it.
[21:33] <beautifulAkali07> I’m not going to get distracted by the fact that I’m already on your team.
[21:33] <beautifulAkali07> It wouldn’t make any sense to me.
[21:34] <beautifulAkali07> I’m on your team.
[21:34] <AdriiB> What the hell does “make sense” mean?
[21:34] <beautifulAkali07> Sorry
[21:35] <BeautifulAkali07> I didn’t mean it like that.
[21:35] <beautifulAkali07> I’m going to use the word “sense” for one of my teams I created.
[21:35] <beautifulAkali07> I’m going to use it for all of them.
[21:35] <beautifulAkali07> There was a time when there was no sense to it.
[21:35] <yone786> I don’t like. Where are you going
[21:35] <AdriiB> “I don’t like” as in “Oh no, Akali is going to leave me” ?
[21:35] <beautifulAkali07> Yes
[21:35] <AdriiB> Now how do you “like” someone leaving you in a comment?
[21:35] <beautifulAkali07> What do you mean?
[21:35] <yone786> I didn’t say.
[21:35] <beautifulAkali07> I think I might stop by sometime and say hi
[21:36] <beautifulAkali07> See you in a while
[21:36] <yone786> I don’t know
[21:36] <beautifulAkali07> Why don’t you tell me your answer?
[21:36] <beautifulAkali07> OK.
[21:36] <yone786>
02/09/#leagueoflegends.log
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
[21:24] <beautifulAkali07> I just don’t like to type on the mac
[21:24] <beautifulAkali07> But when I do it is nice
[21:25] <yone786> I don’t like things to be in word form
[21:25] <AdriiB> I don’t understand your point
[21:25] <beautifulAkali07> You mean that you don’t want to see all the text
[21:25] <yone786> lol
[21:25] <AdriiB> I just don’t want to have to type on the mac
[21:25] <beautifulAkali07> I just don’t like the size of the text
[21:25] <beautifulAkali07> I have a small screen, so maybe that is it
[21:26] <beautifulAkali07> And I am on a mac, so I can see better colors than i have in my PC
[21:27] <beautifulAkali07> I get my text from gmail, and I don’t have to type as much
[21:27] <beautifulAkali07> But I do hate when I type on my laptop
[21:28] <yone786> You can configure which size you get
[21:28] <beautifulAkali07> I am gonna stop by the cafe to get coffee
[21:28] <beautifulAkali07> I guess I will have to just keep a laptop computer in my room.
[21:28] <beautifulAkali07> Goodnight all.
[21:28] <AdriiB> good night xD
[21:29] <yone786> lol
[21:29] <Yuri_C> Night beautifulAkali07
[21:29] <beautifulAkali07> I am leaving now xD
[21:30] <AdriiB> Oh night yone
[21:30] <yone786> Night
[21:30] -!- Chymerus [~chymerus@unaffiliated/chymerus] has quit [Quit: Leaving.]
[21:30] -!- chyper [~chyper@unaffiliated/chyper] has joined #ubuntu-za
[21:31] <beautifulAkali07> So it is night, I guess I will get back to the computer in a little bit
[21:31] <yone786> Good night
[21:31] <AdriiB> Good night
[21:31] <beautifulAkali07> I better sleep. Thank you for the chat though.
[21:31] <beautifulAkali07> I can’t wait to see everyone tomorrow
[21:31] <beautifulAkali07> Bye
[21:32] <cispercai_n> Hello again
[21:32] <AdriiB> Hi
[21:32] <cispercai_n> I was thinking that I could get a Macbook so that I could try to port Ubuntu to it
[21:32] <cispercai_n> Then I guess I will run it on my Ubuntu netbook
[21:33] <AdriiB> What kind of netbook?
[21:33] <cispercai_n> Not a netbook, but I was thinking that one of the Netbooks at best buy was compatible with Ubuntu
[21:33] <cispercai_n> I think that the screen would be too small
[21:33] <cispercai_n> And my netbook is kind of ancient
[21:34] <cispercai_n> But I have Windows XP in it
[21:34] <AdriiB> What kind of netbook?
[21:34] <cispercai_n> But I would do the research and get as much information as possible about the netbook that I could use
[21:34] <cispercai
02/17/#leagueoflegends.log
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
[07:01] <yone786> Who’s your favorite hero?
[07:05] <TheUnforgivenYasuo9000> It’s in the name.
[07:05] <TrevorK> It just depends on the situation, the ops, you know?
[07:07] <oneTrueAatrox> I’m a huge fan of Zoe
[07:08] <yone786> lol
[07:09] <yone786> TrevorK: yeah, but if you had to pick one. It’s not about winning, it’s about fun
[07:10] <TheUnforgivenYasuo9000> There’s a reason why she’s a team leader in a game that has only one.
[07:10] <yone786> i’m not trying to get any attention, it’s just my opinion
[07:11] <TREVORK> If you have to choose, who would be your favorite hero for this season?
[07:11] <TrevorK> You know, I think it would be really interesting if we had a new player that joined the roster.
[07:11] <TrevorK> I don’t think that would be fun, I don’t think that would be a good experience for people who were watching in real life.
[07:12] <TrevorK> They just wouldn’t get to know enough.
[07:13] <TrevorK> I wouldn’t want to give the new player any special privileges.
[07:14] <TrevorK> I want them to be completely fresh, so we can see how they would fit in as well.
[07:14] <TrevorK> I just think that it would be interesting.
[07:14] <TREVORK> What type of heroes would you want to play with?
[07:14] <TrevorK> I personally would like to play with Zoe, and maybe someone else, but I’m pretty sure that I would be the first to say that I’m in love with her.
[07:15] <TrevorK> I personally find her really cute
[07:15] <TrevorK> But I think most people would probably agree with me if I’m just speaking for myself.
[07:15] <TrevorK> I like her, and I like to watch her play, so… I want to see her in action. I want to see her get to play in a different game.
[07:16] <TrevorK> That’s all.
[07:16] <g1y-h3ss> I would like to play with Zoe
[07:16] <TrevorK> A new player?
[07:17] <TrevorK> Why not?
02/25/#leagueoflegends.log
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
[07:10] <TrevorK> No, I like my heroes just fine where I’m at.
[07:10] <TrevorK> There’s a lot of fun stuff in the game. That stuff is fun, but I don’t think you can’t appreciate that without winning.
[07:11] <yone786> I can appreciate winning.
[07:12] <oneTrueAatrox> And I’m a realist too, if I win I have to have fun too, so there’s not a lot of meh
[07:14] <TrevorK> For me, the fun stuff is what I like to do.
[07:15] <yone786> yeah, the win is just there to force you to be more focused on the fun stuff
[07:16] <TrevorK> That’s why they have to build the new things, there’s no time for me to make a game, it has to be built to make the new things work.
[07:17] <TrevorK> And I can’t just sit around and hope that my game will be good.
[07:18] <TrevorK> So I have to make it work.
[07:18] <yone786> TrevorK: yeah, like I said, sometimes you can make fun stuff, sometimes not. But it still should have a sense of fun to it, or else you just have to be forced into some “art”
[07:19] <yone786> TrevorK: but yes, that’s the main thing I’m saying. I can appreciate winning and fun stuff, but not at the same time
[07:20] * oersted is away: Gone away for a while
[07:21] <oneTrueAatrox> I can’t afford to win every fight, I have to have fun.
[07:22] <yone786> TrevorK: that’s why I’m not the kind of person who always wins at the end (in most fights), but I can appreciate it. It doesn’t have to be always the case.
[07:23] <oneTrueAatrox> But if I just fight for fun, I won’t ever get good.
[07:24] <TrevorK> No, I like my heroes to have goals and a reason for coming to where I do.
[07:25] <TrevorK> If I just go and try to win, I will lose.
[07:26] <yone786> haha
[07:26] <TrevorK> So I have to have fun, or else I can’t be there.
[07:26] <TrevorK> And it’s not like it’s fun to me losing.
[07:27] <TrevorK> It’s fun to me winning.
[07:28] * oersted is back (gone for 30 minutes)
[07:28] <TrevorK> We build the game to satisfy a certain type of person.
[07:29] <TrevorK> I don’t know what that type of person is, but they are not me.
[07:29] <TrevorK> And I am that type of person.
[07:29] <TrevorK> So that’s why it’s a fun game to me.
[07:30] <TrevorK> Because I can appreciate it.
[07:30] <TrevorK> But I am not that type of person.
[07:30] <TrevorK> Just because I get to know I’m that person doesn’t mean I have

and a common log:

07/17/#common.log
 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
[15:28] <avidreader13> yone786: do you got any more light for a punk like me? :)
[15:30] <darkone1> yeah, cut me in to, avid!
[15:45] <yone786> avidreader13: alas, it’s the same. I told you, I’ll let you know when more comes in.
[16:12] <avidreader13> yone786: do they have a good name? theres a few here and there.
[16:12] <avidreader13> yone786: you could write to the guy to get his contact/
[16:14] <avidreader13> I’m not sure about that name.
[16:32] <avidreader13> darkone1: this is not a light for me, I’ll get more in a couple of days when I have enough time to look for it
[16:47] <avidreader13> darkone1: I should try again.
[16:48] <avidreader13> darkone1: I’m going to try to find the original of this and send it to you, so you can see who did the painting, and who paid for it
[16:51] <avidreader13> and I will try to get some more work done on it to show you that it is good, so you can also feel a bit of the value
[16:51] <avidreader13> darkone1: thanks for your help
[16:51] <avidreader13> I have been trying to put the thing together.
[16:53] <avidreader13> I am quite happy with those things that I am making.
[17:03] <avidreader13> that is a good thing, to have a good feeling with what you create. I think.
[17:05] <avidreader13> *I feel that I have done a good job with this thing that I am working on
[17:11] <darkone1> a little more coming in here now
[17:12] <darkone1> thanks for the info
[17:13] <avidreader13> Darkone1: if you see more than the ones I have, please tell me. I have quite a few.
[17:19] <avidreader13> darkone1: there are a few more that come now but they are almost like shadows, and I am not sure if I should send them off for you or not.
[17:22] <avidreader13> darkone1: if it is good, please let me know.
[17:36] <avidreader13> darkone1: you can send them yourself.
[17:37] <darkone1> ahhh ok thanks; I will email them
[17:38] <avidreader13> darkone1: thanks!
[17:38] <avidreader13> darkone1: I am still waiting on the last of them. I am going to sleep now.
[17:39] <avidreader13> darkone1: good night!
[17:40] <avidreader13> darkone1: I will check back with you tomorrow.
[17:40] <avidreader13> I need to get some sleep.
[17:46] <avidreader13> darkone1: you are a good friend to have
[17:47] <avidreader13> :D
[17:57] <avidreader13> omg
[18:00] <avidreader13> omg
[18:01] <avidreader13> ugh
[18:01] <avidreader13> what happened
[18:07] <avidreader13> I am lost
[18:13] <avidreader13> I had a feeling that I wasn’t going to survive
[18:13] <avidreader13> lol
[18:13] <avidreader13> I am going to leave now.
[18:18] <avidreader13> thanks for everything!
[18:19] <yone786> lol