Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

Bios Virus Unable To Clean Or Detect


  • Please log in to reply
7 replies to this topic

#1 altered2222

altered2222

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:08:13 PM

Posted 31 January 2007 - 01:14 AM

I have been fighting this infection for a week with complete system rebuilds.

Bios reflash followed by low level format, followed by a bios reflash and reset and a new install of windows Microsoft must think i'm build pc's here...

NONE of the commercial utilities can identify this @#$!@#$!

NAV, AVG , pc house call, spybot, spysweeper.

Most recently tried to install PREVX - but it gets blocked during installation.

The worst thing is that I can't recover my data drives as ever time I do BAM - re-infection.

HELP!


Logfile of HijackThis v1.99.1
Scan saved at 11:01:55 PM, on 30/01/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Ahead\InCD\InCDsrv.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Common Files\Command Software\dvpapi.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\SOUNDMAN.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe
C:\Program Files\Ahead\InCD\InCD.exe
C:\Program Files\TELUS\TELUS Security service\Freedom.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\m\Desktop\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Pop-Up Blocker BHO - {3C060EA2-E6A9-4E49-A530-D4657B8C449A} - C:\Program Files\TELUS\TELUS Security service\pkR.dll
O2 - BHO: Form Filler BHO - {56071E0D-C61B-11D3-B41C-00E02927A304} - C:\Program Files\TELUS\TELUS Security service\FreeBHOR.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [RemoteControl] "C:\Program Files\CyberLink DVD Solution\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [InCD] C:\Program Files\Ahead\InCD\InCD.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [ccApp] "c:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [TELUS Security service] "C:\Program Files\TELUS\TELUS Security service\Freedom.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\reader_sl.exe
O4 - Global Startup: Adobe Reader Synchronizer.lnk = C:\Program Files\Adobe\Reader 8.0\Reader\AdobeCollabSync.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\npjpi150_10.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_10\bin\npjpi150_10.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O23 - Service: Automatic LiveUpdate Scheduler - Symantec Corporation - C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
O23 - Service: DvpApi (dvpapi) - Command Software Systems, Inc. - C:\Program Files\Common Files\Command Software\dvpapi.exe
O23 - Service: InCD Helper (InCDsrv) - Ahead Software AG - C:\Program Files\Ahead\InCD\InCDsrv.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: Symantec Core LC - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

BC AdBot (Login to Remove)

 


m

#2 OldTimer

OldTimer

    Malware Expert


  • Members
  • 11,092 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:North Carolina
  • Local time:11:13 PM

Posted 06 February 2007 - 08:13 PM

Hello altered2222 and welcome to the BC HijackThis forum. There are no indications of any viruses or malware in the log. It is clean.

How about a little more information.

- What exactly is happening (popups, error messages, what)?

- What is reporting an infection and what infection is it reporting (file names, infection names etc).

- If everything is fine until the data drives are reconnected or reinstalled then if there is an infection it would point to being on the data drives. Have these been scanned with anything prior to copying or reinstalling any data from them?

Post back with the information and we'll see where we should go from there.

Cheers.

OT
I do not respond to PM's requesting help. That's what the forums are here for. Please use them so that others may benefit from your questions and the responses you receive.
OldTimer

Posted Image

#3 altered2222

altered2222
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:08:13 PM

Posted 09 February 2007 - 12:48 AM

Oldtimer,

Thanks for the reply.

the viral infection that I am chasing appears to be a wild trojan that installs a back door / ghost operating system. It attacks the bios and embedded a hook in the bios that allows the ghost system to find its boot sector on the hhard drive. Once loaded it appears to use windows messanging to drag in additional malware.

I found this when I was compressing my outlook folder - a message "copying folders" appearred... I didn't invoked that task to copy the folders.

To attempt to clean the system full scans using NAV 2006 latest updates and AVG 751 resulted in no errors found!

My drive was partioned into C:, D:, E:.

I had noticed that my D: was getting bigger by itself..

Windows was intalled on C:.

So to clean the system I did the following:


Critical data was backed up onto data hd's.

1) Reformatting D: resulted in a no boot as the ghost boot loaded could no longer find its OS. And since it loaded before Windows the system would never start again.

3) the entire primary drive was reformatted using win format.

4) following a fresh system build and a reboot the following occured:

The bios malware hook could no longer find its HD boot sector loader and would reboot the system.

5) reflashed bios

6) system would now start but the infection came back - not as severe but still there. The ghost system was not cleaned by the high level format. It loads a window start up service ( I have not been able to find which one).

7) found the utilities to get a bootable cd and a low level formating tool. These were burned on another system.

8) did a low level format, reflash bios again, full system rebuild - clean system.

9) ok got NAV, Mcfee, AVG - tried all of them scanning my back up CD's - no infection found - load the app's from the CD's. BAM -reinfected again.

I really need to get this fixed so i can clean my data HD's and recover my critical data.



OK

Tonight I save the bios to a file on the HD, then got a clean copy of the same version bios from asus. Then got a binary file compare utility and ran a file difference below are the results:

Different between:
First file: "C:\Documents and Settings\m\Desktop\DIRTY BIOS.rom"
Second file: "C:\Documents and Settings\m\Desktop\K8VX1012.ROM"
Shift: 0
------------------------------------------------------------------------

First file: "C:\Documents and Settings\m\Desktop\DIRTY BIOS.rom"
Second file: "C:\Documents and Settings\m\Desktop\K8VX1012.ROM"
Shift: 0
Shift: 0
------------------------------------------------------------------------
DIRTY ASUS K8vx
0006BFE0 | 01 | 0006BFE0 | 00 |
------------------------------------------------------------------------
0006BFF8 | 6B | 0006BFF8 | 6C |
0006C000 | 07 00 00 00 00 10 00 00 | 0006C000 | FF FF FF FF FF FF FF FF |
0006C008 | 10 00 01 | 0006C008 | FF FF FF |
0006C010 | 55 AA 07 CB 6A 00 42 00 | 0006C010 | FF FF FF FF FF FF FF FF |
0006C018 | 50 00 40 01 05 02 10 50 | 0006C018 | FF FF FF FF FF FF FF FF |
0006C020 | 41 00 01 00 00 00 00 00 | 0006C020 | FF FF FF FF FF FF FF FF |
0006C028 | 00 00 00 00 00 00 00 00 | 0006C028 | FF FF FF FF FF FF FF FF |
0006C030 | 00 00 00 00 00 00 00 00 | 0006C030 | FF FF FF FF FF FF FF FF |
0006C038 | 00 00 00 00 00 00 05 06 | 0006C038 | FF FF FF FF FF FF FF FF |
0006C040 | 11 49 31 78 00 00 00 00 | 0006C040 | FF FF FF FF FF FF FF FF |
0006C048 | 00 00 00 00 00 00 00 00 | 0006C048 | FF FF FF FF FF FF FF FF |
0006C050 | 0B 02 00 00 00 00 00 00 | 0006C050 | FF FF FF FF FF FF FF FF |
0006C058 | 00 00 00 00 00 00 00 00 | 0006C058 | FF FF FF FF FF FF FF FF |
0006C060 | 00 00 00 00 00 00 00 00 | 0006C060 | FF FF FF FF FF FF FF FF |
0006C068 | 00 00 00 00 00 00 00 00 | 0006C068 | FF FF FF FF FF FF FF FF |
0006C070 | 00 00 00 00 00 00 00 00 | 0006C070 | FF FF FF FF FF FF FF FF |
0006C078 | 00 00 00 00 00 00 00 00 | 0006C078 | FF FF FF FF FF FF FF FF |
0006C080 | 00 00 00 00 00 00 00 00 | 0006C080 | FF FF FF FF FF FF FF FF |
0006C088 | 00 00 00 00 00 00 00 00 | 0006C088 | FF FF FF FF FF FF FF FF |
0006C090 | 00 00 00 00 00 00 00 00 | 0006C090 | FF FF FF FF FF FF FF FF |
0006C098 | 00 00 00 00 00 00 00 00 | 0006C098 | FF FF FF FF FF FF FF FF |
0006C0A0 | 00 00 00 00 00 00 00 00 | 0006C0A0 | FF FF FF FF FF FF FF FF |
0006C0A8 | 00 00 00 00 00 00 00 00 | 0006C0A8 | FF FF FF FF FF FF FF FF |
0006C0B0 | 00 00 00 00 00 00 00 00 | 0006C0B0 | FF FF FF FF FF FF FF FF |
0006C0B8 | 00 00 00 00 00 00 00 00 | 0006C0B8 | FF FF FF FF FF FF FF FF |
0006C0C0 | 00 00 00 00 00 00 00 00 | 0006C0C0 | FF FF FF FF FF FF FF FF |
0006C0C8 | 00 00 00 00 00 00 00 00 | 0006C0C8 | FF FF FF FF FF FF FF FF |
0006C0D0 | 00 00 00 00 00 00 00 00 | 0006C0D0 | FF FF FF FF FF FF FF FF |
0006C0D8 | 00 00 00 00 00 00 00 00 | 0006C0D8 | FF FF FF FF FF FF FF FF |
0006C0E0 | 00 00 00 00 00 00 00 00 | 0006C0E0 | FF FF FF FF FF FF FF FF |
0006C0E8 | 00 00 00 00 00 00 00 00 | 0006C0E8 | FF FF FF FF FF FF FF FF |
0006C0F0 | 00 00 00 00 00 00 00 00 | 0006C0F0 | FF FF FF FF FF FF FF FF |
0006C0F8 | 00 00 00 00 00 00 00 00 | 0006C0F8 | FF FF FF FF FF FF FF FF |
0006C100 | 00 00 00 00 00 00 00 00 | 0006C100 | FF FF FF FF FF FF FF FF |
0006C108 | 00 00 00 00 00 00 00 00 | 0006C108 | FF FF FF FF FF FF FF FF |
0006C110 | 00 00 00 00 00 00 00 00 | 0006C110 | FF FF FF FF FF FF FF FF |
0006C118 | 00 00 00 00 00 00 00 00 | 0006C118 | FF FF FF FF FF FF FF FF |
0006C120 | 00 00 00 00 00 00 00 00 | 0006C120 | FF FF FF FF FF FF FF FF |
0006C128 | 00 00 00 00 00 00 00 00 | 0006C128 | FF FF FF FF FF FF FF FF |
0006C130 | 00 00 00 00 00 00 00 00 | 0006C130 | FF FF FF FF FF FF FF FF |
0006C138 | 00 00 00 00 00 00 00 00 | 0006C138 | FF FF FF FF FF FF FF FF |
0006C140 | 00 00 00 00 00 00 00 00 | 0006C140 | FF FF FF FF FF FF FF FF |
0006C148 | 00 00 00 00 00 00 00 00 | 0006C148 | FF FF FF FF FF FF FF FF |
0006C150 | 83 05 41 43 46 47 01 02 | 0006C150 | FF FF FF FF FF FF FF FF |
0006C158 | 09 00 00 00 D5 00 00 00 | 0006C158 | FF FF FF FF FF FF FF FF |
0006C160 | 00 00 00 00 40 40 00 00 | 0006C160 | FF FF FF FF FF FF FF FF |
0006C168 | 1F 00 01 00 02 80 00 00 | 0006C168 | FF FF FF FF FF FF FF FF |
0006C170 | 00 00 80 02 80 00 40 0E | 0006C170 | FF FF FF FF FF FF FF FF |
0006C178 | 00 70 00 80 00 00 E0 FE | 0006C178 | FF FF FF FF FF FF FF FF |
0006C180 | 04 00 00 00 00 C0 FE 40 | 0006C180 | FF FF FF FF FF FF FF FF |
0006C188 | 00 0B 00 01 00 14 02 00 | 0006C188 | FF FF FF FF FF FF FF FF |
0006C190 | 81 20 00 01 A0 00 11 00 | 0006C190 | FF FF FF FF FF FF FF FF |
0006C198 | 01 00 18 04 00 8F 00 00 | 0006C198 | FF FF FF FF FF FF FF FF |
0006C1A0 | 90 80 00 8B 94 00 1E C0 | 0006C1A0 | FF FF FF FF FF FF FF FF |
0006C1A8 | 00 08 00 01 00 14 00 00 | 0006C1A8 | FF FF FF FF FF FF FF FF |
0006C1B0 | 03 40 00 08 00 01 00 14 | 0006C1B0 | FF FF FF FF FF FF FF FF |
0006C1B8 | 08 00 01 70 00 0B 00 01 | 0006C1B8 | FF FF FF FF FF FF FF FF |
0006C1C0 | 00 14 01 00 80 60 00 00 | 0006C1C0 | FF FF FF FF FF FF FF FF |
0006C1C8 | 64 00 05 00 01 00 04 0C | 0006C1C8 | FF FF FF FF FF FF FF FF |
0006C1D0 | 00 03 00 01 00 00 06 00 | 0006C1D0 | FF FF FF FF FF FF FF FF |
0006C1D8 | 01 00 10 00 61 00 08 00 | 0006C1D8 | FF FF FF FF FF FF FF FF |
0006C1E0 | 01 00 14 0D 00 0F F0 00 | 0006C1E0 | FF FF FF FF FF FF FF FF |
0006C1E8 | 03 00 01 00 00 03 00 01 | 0006C1E8 | FF FF FF FF FF FF FF FF |
0006C1F0 | 00 00 03 00 01 00 00 06 | 0006C1F0 | FF FF FF FF FF FF FF FF |
0006C1F8 | 00 01 00 10 07 90 02 18 | 0006C1F8 | FF FF FF FF FF FF FF FF |
0006C200 | 00 01 00 10 81 D0 04 87 | 0006C200 | FF FF FF FF FF FF FF FF |
0006C208 | F8 0C 80 2E 00 80 2F 00 | 0006C208 | FF FF FF FF FF FF FF FF |
0006C210 | 8F 80 06 8F 80 07 0F 80 | 0006C210 | FF FF FF FF FF FF FF FF |
0006C218 | 08 03 00 01 00 00 08 00 | 0006C218 | FF FF FF FF FF FF FF FF |
0006C220 | 01 00 14 44 00 07 F8 03 | 0006C220 | FF FF FF FF FF FF FF FF |
0006C228 | 03 00 01 00 00 00 00 00 | 0006C228 | FF FF FF FF FF FF FF FF |
0006C230 | 00 8E 00 12 00 00 00 00 | 0006C230 | FF FF FF FF FF FF FF FF |
0006C238 | 00 40 40 00 00 03 00 01 | 0006C238 | FF FF FF FF FF FF FF FF |
0006C240 | 00 80 03 00 01 00 80 03 | 0006C240 | FF FF FF FF FF FF FF FF |
0006C248 | 00 01 00 80 03 00 01 00 | 0006C248 | FF FF FF FF FF FF FF FF |
0006C250 | 80 03 00 01 00 80 1D 00 | 0006C250 | FF FF FF FF FF FF FF FF |
0006C258 | 01 00 94 65 00 9F 00 CC | 0006C258 | FF FF FF FF FF FF FF FF |
0006C260 | 9F 20 CC 9F 40 CC 9F 60 | 0006C260 | FF FF FF FF FF FF FF FF |
0006C268 | CC 9F 80 CC 9F A0 CC 9F | 0006C268 | FF FF FF FF FF FF FF FF |
0006C270 | C0 CC 1F E0 CC 44 00 01 | 0006C270 | FF FF FF FF FF FF FF FF |
0006C278 | 00 C0 40 41 43 46 47 01 | 0006C278 | FF FF FF FF FF FF FF FF |
0006C280 | 02 04 00 00 00 00 00 00 | 0006C280 | FF FF FF FF FF FF FF FF |
0006C288 | 00 00 00 00 88 27 32 06 | 0006C288 | FF FF FF FF FF FF FF FF |
0006C290 | 11 00 00 00 89 59 30 06 | 0006C290 | FF FF FF FF FF FF FF FF |
0006C298 | 11 00 00 00 8A 59 30 06 | 0006C298 | FF FF FF FF FF FF FF FF |
0006C2A0 | 11 00 00 00 8B 59 30 06 | 0006C2A0 | FF FF FF FF FF FF FF FF |
0006C2A8 | 11 00 00 00 8C 59 30 06 | 0006C2A8 | FF FF FF FF FF FF FF FF |
0006C2B0 | 11 00 00 00 8D 59 30 06 | 0006C2B0 | FF FF FF FF FF FF FF FF |
0006C2B8 | 11 00 00 00 00 00 00 D8 | 0006C2B8 | FF FF FF FF FF FF FF FF |
0006C2C0 | 00 13 00 00 00 00 00 40 | 0006C2C0 | FF FF FF FF FF FF FF FF |
0006C2C8 | 40 00 00 1D 00 01 00 94 | 0006C2C8 | FF FF FF FF FF FF FF FF |
0006C2D0 | 6B 00 9F 00 DC 9F 20 DC | 0006C2D0 | FF FF FF FF FF FF FF FF |
0006C2D8 | 9F 40 DC 9F 60 DC 9F 80 | 0006C2D8 | FF FF FF FF FF FF FF FF |
0006C2E0 | DC 9F A0 DC 9F C0 DC 1F | 0006C2E0 | FF FF FF FF FF FF FF FF |
0006C2E8 | E0 DC 1D 00 01 00 94 6B | 0006C2E8 | FF FF FF FF FF FF FF FF |
0006C2F0 | 00 9F 00 EC 9F 20 EC 9F | 0006C2F0 | FF FF FF FF FF FF FF FF |
0006C2F8 | 40 EC 9F 60 EC 9F 80 EC | 0006C2F8 | FF FF FF FF FF FF FF FF |
0006C300 | 9F A0 EC 9F C0 EC 1F E0 | 0006C300 | FF FF FF FF FF FF FF FF |
0006C308 | EC 1D 00 01 00 94 6A 00 | 0006C308 | FF FF FF FF FF FF FF FF |
0006C310 | 9F 00 C0 9F 20 C0 9F 40 | 0006C310 | FF FF FF FF FF FF FF FF |
0006C318 | C0 9F 60 C0 9F 80 C0 9F | 0006C318 | FF FF FF FF FF FF FF FF |
0006C320 | A0 C0 9F C0 C0 1F E0 C0 | 0006C320 | FF FF FF FF FF FF FF FF |
0006C328 | 1D 00 01 00 94 6A 00 9F | 0006C328 | FF FF FF FF FF FF FF FF |
0006C330 | 00 C4 9F 20 C4 9F 40 C4 | 0006C330 | FF FF FF FF FF FF FF FF |
0006C338 | 9F 60 C4 9F 80 C4 9F A0 | 0006C338 | FF FF FF FF FF FF FF FF |
0006C340 | C4 9F C0 C4 1F E0 C4 0C | 0006C340 | FF FF FF FF FF FF FF FF |
0006C348 | 00 01 00 86 00 00 00 D0 | 0006C348 | FF FF FF FF FF FF FF FF |
0006C350 | FD 00 04 65 00 3C 00 01 | 0006C350 | FF FF FF FF FF FF FF FF |
0006C358 | 00 C0 38 41 43 46 47 01 | 0006C358 | FF FF FF FF FF FF FF FF |
0006C360 | 02 04 00 00 00 00 00 00 | 0006C360 | FF FF FF FF FF FF FF FF |
0006C368 | 00 00 00 00 80 38 30 06 | 0006C368 | FF FF FF FF FF FF FF FF |
0006C370 | 11 00 00 00 81 38 30 06 | 0006C370 | FF FF FF FF FF FF FF FF |
0006C378 | 11 00 00 00 82 38 30 06 | 0006C378 | FF FF FF FF FF FF FF FF |
0006C380 | 11 00 00 00 83 38 30 06 | 0006C380 | FF FF FF FF FF FF FF FF |
0006C388 | 11 00 00 00 84 04 31 06 | 0006C388 | FF FF FF FF FF FF FF FF |
0006C390 | 11 00 00 00 00 00 00 5B | 0006C390 | FF FF FF FF FF FF FF FF |
0006C398 | 00 15 00 00 00 00 00 40 | 0006C398 | FF FF FF FF FF FF FF FF |
0006C3A0 | 40 00 00 2B 00 01 00 96 | 0006C3A0 | FF FF FF FF FF FF FF FF |
0006C3A8 | 80 00 00 F0 FD 00 04 00 | 0006C3A8 | FF FF FF FF FF FF FF FF |
0006C3B0 | 00 00 E0 FD 00 04 6A 00 | 0006C3B0 | FF FF FF FF FF FF FF FF |
0006C3B8 | 9F 00 C8 9F 20 C8 9F 40 | 0006C3B8 | FF FF FF FF FF FF FF FF |
0006C3C0 | C8 9F 60 C8 9F 80 C8 9F | 0006C3C0 | FF FF FF FF FF FF FF FF |
0006C3C8 | A0 C8 9F C0 C8 1F E0 C8 | 0006C3C8 | FF FF FF FF FF FF FF FF |
0006C3D0 | 1C 00 01 00 C0 18 41 43 | 0006C3D0 | FF FF FF FF FF FF FF FF |
0006C3D8 | 46 47 01 02 04 00 00 00 | 0006C3D8 | FF FF FF FF FF FF FF FF |
0006C3E0 | 00 00 00 00 00 00 00 50 | 0006C3E0 | FF FF FF FF FF FF FF FF |
0006C3E8 | 20 43 AB 11 00 00 00 00 | 0006C3E8 | FF FF FF FF FF FF FF FF |
0006C3F0 | 00 00 EE 00 17 00 00 00 | 0006C3F0 | FF FF FF FF FF FF FF FF |
0006C3F8 | 00 00 40 40 00 00 9C 00 | 0006C3F8 | FF FF FF FF FF FF FF FF |
0006C400 | 01 00 96 00 00 C0 F7 | 0006C400 | FF FF FF FF FF FF FF |
0006C408 | 10 00 6A 00 9F 00 E8 9F | 0006C408 | FF FF FF FF FF FF FF FF |
0006C410 | 20 E8 9F 40 E8 9F 60 E8 | 0006C410 | FF FF FF FF FF FF FF FF |
0006C418 | 9F 80 E8 9F A0 E8 9F C0 | 0006C418 | FF FF FF FF FF FF FF FF |
0006C420 | E8 9F E0 E8 9F 00 E4 9F | 0006C420 | FF FF FF FF FF FF FF FF |
0006C428 | 20 E4 9F 40 E4 9F 60 E4 | 0006C428 | FF FF FF FF FF FF FF FF |
0006C430 | 9F 80 E4 9F A0 E4 9F C0 | 0006C430 | FF FF FF FF FF FF FF FF |
0006C438 | E4 9F E0 E4 9F 00 E0 9F | 0006C438 | FF FF FF FF FF FF FF FF |
0006C440 | 20 E0 9F 40 E0 9F 60 E0 | 0006C440 | FF FF FF FF FF FF FF FF |
0006C448 | 9F 80 E0 9F A0 E0 9F C0 | 0006C448 | FF FF FF FF FF FF FF FF |
0006C450 | E0 9F E0 E0 9F 00 D8 9F | 0006C450 | FF FF FF FF FF FF FF FF |
0006C458 | 20 D8 9F 40 D8 9F 60 D8 | 0006C458 | FF FF FF FF FF FF FF FF |
0006C460 | 9F 80 D8 9F A0 D8 9F C0 | 0006C460 | FF FF FF FF FF FF FF FF |
0006C468 | D8 9F E0 D8 9F 00 D4 9F | 0006C468 | FF FF FF FF FF FF FF FF |
0006C470 | 20 D4 9F 40 D4 9F 60 D4 | 0006C470 | FF FF FF FF FF FF FF FF |
0006C478 | 9F 80 D4 9F A0 D4 9F C0 | 0006C478 | FF FF FF FF FF FF FF FF |
0006C480 | D4 9F E0 D4 9F 00 D0 9F | 0006C480 | FF FF FF FF FF FF FF FF |
0006C488 | 20 D0 9F 40 D0 9F 60 D0 | 0006C488 | FF FF FF FF FF FF FF FF |
0006C490 | 9F 80 D0 9F A0 D0 9F C0 | 0006C490 | FF FF FF FF FF FF FF FF |
0006C498 | D0 1F E0 D0 18 00 01 00 | 0006C498 | FF FF FF FF FF FF FF FF |
0006C4A0 | 94 EE 00 EF 00 6E 00 87 | 0006C4A0 | FF FF FF FF FF FF FF FF |
0006C4A8 | F0 01 80 F6 03 87 70 01 | 0006C4A8 | FF FF FF FF FF FF FF FF |
0006C4B0 | 80 76 03 0F 00 FC 24 00 | 0006C4B0 | FF FF FF FF FF FF FF FF |
0006C4B8 | 01 00 C0 20 41 43 46 47 | 0006C4B8 | FF FF FF FF FF FF FF FF |
0006C4C0 | 01 02 04 00 00 00 00 00 | 0006C4C0 | FF FF FF FF FF FF FF FF |
0006C4C8 | 00 00 00 00 00 78 49 31 | 0006C4C8 | FF FF FF FF FF FF FF FF |
0006C4D0 | 06 11 00 00 00 79 71 05 | 0006C4D0 | FF FF FF FF FF FF FF FF |
0006C4D8 | 06 11 00 00 00 00 00 00 | 0006C4D8 | FF FF FF FF FF FF FF FF |
0006C4E0 | 52 00 18 00 00 00 00 00 | 0006C4E0 | FF FF FF FF FF FF FF FF |
0006C4E8 | 40 40 00 00 40 00 01 00 | 0006C4E8 | FF FF FF FF FF FF FF FF |
0006C4F0 | C0 3C 41 43 46 47 01 02 | 0006C4F0 | FF FF FF FF FF FF FF FF |
0006C4F8 | 40 00 00 00 00 00 00 00 | 0006C4F8 | FF FF FF FF FF FF FF FF |
0006C500 | 00 00 00 00 88 31 06 11 | 0006C500 | FF FF FF FF FF FF FF FF |
0006C508 | 00 01 00 B0 00 00 EF | 0006C508 | FF FF FF FF FF FF FF |
0006C510 | 00 00 00 00 30 FD | 0006C510 | FF FF FF FF FF FF |
0006C518 | FD 00 00 20 AD 00 00 | 0006C518 | FF FF FF FF FF FF FF |
0006C520 | 00 00 2F FD 00 00 | 0006C520 | FF FF FF FF FF FF |
0006C528 | 00 00 00 00 00 00 00 00 | 0006C528 | FF FF FF FF FF FF FF FF |
0006C530 | 00 00 52 00 19 00 00 00 | 0006C530 | FF FF FF FF FF FF FF FF |
0006C538 | 00 00 40 40 00 00 40 00 | 0006C538 | FF FF FF FF FF FF FF FF |
0006C540 | 01 00 C0 3C 41 43 46 47 | 0006C540 | FF FF FF FF FF FF FF FF |
0006C548 | 01 02 40 00 00 00 00 00 | 0006C548 | FF FF FF FF FF FF FF FF |
0006C550 | 00 00 00 00 00 08 88 B1 | 0006C550 | FF FF FF FF FF FF FF FF |
0006C558 | 06 11 01 01 00 B0 00 00 | 0006C558 | FF FF FF FF FF FF FF FF |
0006C560 | BF 00 00 00 00 30 FD | 0006C560 | FF FF FF FF FF FF FF |
0006C568 | 8F FD 00 00 20 AD | 0006C568 | FF FF FF FF FF FF |
0006C570 | 00 00 00 00 1F ED | 0006C570 | FF FF FF FF FF FF |
0006C578 | 00 00 00 00 00 00 00 00 | 0006C578 | FF FF FF FF FF FF FF FF |
0006C580 | 00 00 00 00 41 00 1A 00 | 0006C580 | FF FF FF FF FF FF FF FF |
0006C588 | 00 00 00 00 40 40 00 00 | 0006C588 | FF FF FF FF FF FF FF FF |
0006C590 | 11 00 01 00 82 80 00 00 | 0006C590 | FF FF FF FF FF FF FF FF |
0006C598 | 00 F0 00 00 00 00 00 00 | 0006C598 | FF FF FF FF FF FF FF FF |
0006C5A0 | F4 00 00 1C 00 01 00 C0 | 0006C5A0 | FF FF FF FF FF FF FF FF |
0006C5A8 | 18 41 43 46 47 01 02 04 | 0006C5A8 | FF FF FF FF FF FF FF FF |
0006C5B0 | 00 00 00 00 00 00 00 00 | 0006C5B0 | FF FF FF FF FF FF FF FF |
0006C5B8 | 00 00 00 88 31 06 11 00 | 0006C5B8 | FF FF FF FF FF FF FF FF |
0006C5C0 | 00 00 00 00 00 0C 01 1B | 0006C5C0 | FF FF FF FF FF FF FF FF |
0006C5C8 | 00 00 00 00 00 40 40 00 | 0006C5C8 | FF FF FF FF FF FF FF FF |
0006C5D0 | 00 71 00 01 00 96 80 00 | 0006C5D0 | FF FF FF FF FF FF FF FF |
0006C5D8 | 00 00 D0 00 00 80 00 00 | 0006C5D8 | FF FF FF FF FF FF FF FF |
0006C5E0 | 00 D4 00 00 80 00 00 00 | 0006C5E0 | FF FF FF FF FF FF FF FF |
0006C5E8 | D8 00 00 80 00 00 00 DC | 0006C5E8 | FF FF FF FF FF FF FF FF |
0006C5F0 | 00 00 80 00 00 80 FD 00 | 0006C5F0 | FF FF FF FF FF FF FF FF |
0006C5F8 | 04 80 00 00 70 FD 00 04 | 0006C5F8 | FF FF FF FF FF FF FF FF |
0006C600 | 80 00 00 0A 00 40 00 80 | 0006C600 | FF FF FF FF FF FF FF FF |
0006C608 | 00 00 0B 00 40 00 00 00 | 0006C608 | FF FF FF FF FF FF FF FF |
0006C610 | 00 0C 00 34 00 6B 00 9F | 0006C610 | FF FF FF FF FF FF FF FF |
0006C618 | 00 B0 9F 20 B0 9F 40 B0 | 0006C618 | FF FF FF FF FF FF FF FF |
0006C620 | 9F 60 B0 9F 80 B0 9F A0 | 0006C620 | FF FF FF FF FF FF FF FF |
0006C628 | B0 9F C0 B0 9F E0 B0 81 | 0006C628 | FF FF FF FF FF FF FF FF |
0006C630 | B4 03 80 BA 03 8A C0 03 | 0006C630 | FF FF FF FF FF FF FF FF |
0006C638 | 80 CC 03 81 CE 03 81 D4 | 0006C638 | FF FF FF FF FF FF FF FF |
0006C640 | 03 00 DA 03 26 00 01 00 | 0006C640 | FF FF FF FF FF FF FF FF |
0006C648 | 82 80 00 00 00 C0 00 00 | 0006C648 | FF FF FF FF FF FF FF FF |
0006C650 | 80 00 00 00 C4 00 00 80 | 0006C650 | FF FF FF FF FF FF FF FF |
0006C658 | 00 00 00 C8 00 00 80 00 | 0006C658 | FF FF FF FF FF FF FF FF |
0006C660 | 00 00 CC 00 00 00 00 00 | 0006C660 | FF FF FF FF FF FF FF FF |
0006C668 | 60 FD 00 04 03 00 01 00 | 0006C668 | FF FF FF FF FF FF FF FF |
0006C670 | 80 03 00 01 00 80 03 00 | 0006C670 | FF FF FF FF FF FF FF FF |
0006C678 | 01 00 80 0A 00 01 00 82 | 0006C678 | FF FF FF FF FF FF FF FF |
0006C680 | 00 00 00 F8 00 02 44 | 0006C680 | FF FF FF FF FF FF FF |
0006C688 | 00 01 00 C0 40 41 43 46 | 0006C688 | FF FF FF FF FF FF FF FF |
0006C690 | 47 01 02 04 00 00 00 00 | 0006C690 | FF FF FF FF FF FF FF FF |
0006C698 | 00 00 00 00 00 01 00 50 | 0006C698 | FF FF FF FF FF FF FF FF |
0006C6A0 | 41 02 10 00 00 01 01 70 | 0006C6A0 | FF FF FF FF FF FF FF FF |
0006C6A8 | 41 02 10 00 00 01 02 08 | 0006C6A8 | FF FF FF FF FF FF FF FF |
0006C6B0 | 00 25 D4 00 00 01 03 08 | 0006C6B0 | FF FF FF FF FF FF FF FF |
0006C6B8 | 00 25 D4 00 00 01 04 08 | 0006C6B8 | FF FF FF FF FF FF FF FF |
0006C6C0 | 00 25 D4 00 00 01 05 08 | 0006C6C0 | FF FF FF FF FF FF FF FF |
0006C6C8 | 00 25 D4 00 00 00 00 00 | 0006C6C8 | FF FF FF FF FF FF FF FF |
0006C6D0 | 00 4E 99 F7 01 00 C0 40 | 0006C6D0 | FF FF FF FF FF FF FF FF |
0006C6D8 | 41 43 46 47 01 02 04 00 | 0006C6D8 | FF FF FF FF FF FF FF FF |
0006C6E0 | 00 00 00 00 00 00 00 00 | 0006C6E0 | FF FF FF FF FF FF FF FF |
0006C6E8 | 01 00 50 41 02 10 00 00 | 0006C6E8 | FF FF FF FF FF FF FF FF |
0006C6F0 | 01 01 70 41 02 10 00 00 | 0006C6F0 | FF FF FF FF FF FF FF FF |
0006C6F8 | 01 02 08 00 25 D4 00 00 | 0006C6F8 | FF FF FF FF FF FF FF FF |
0006C700 | 01 03 08 00 25 D4 00 00 | 0006C700 | FF FF FF FF FF FF FF FF |
0006C708 | 01 04 08 00 25 D4 00 00 | 0006C708 | FF FF FF FF FF FF FF FF |
0006C710 | 01 05 08 00 25 D4 00 00 | 0006C710 | FF FF FF FF FF FF FF FF |
0006C718 | 00 00 00 00 8F 8D 00 00 | 0006C718 | FF FF FF FF FF FF FF FF |
0006C720 | 00 00 00 5E 8C 00 00 00 | 0006C720 | FF FF FF FF FF FF FF FF |
0006C728 | 00 00 00 00 00 00 00 00 | 0006C728 | FF FF FF FF FF FF FF FF |
0006C730 | 00 00 00 00 00 00 00 00 | 0006C730 | FF FF FF FF FF FF FF FF |
0006C738 | 00 00 00 00 00 00 00 00 | 0006C738 | FF FF FF FF FF FF FF FF |
0006C740 | 00 00 00 00 00 00 00 00 | 0006C740 | FF FF FF FF FF FF FF FF |
0006C748 | 00 00 00 00 00 00 00 00 | 0006C748 | FF FF FF FF FF FF FF FF |
0006C750 | 00 00 00 00 00 00 00 00 | 0006C750 | FF FF FF FF FF FF FF FF |
0006C758 | 00 00 00 00 00 00 00 00 | 0006C758 | FF FF FF FF FF FF FF FF |
0006C760 | 00 00 00 00 00 00 00 00 | 0006C760 | FF FF FF FF FF FF FF FF |
0006C768 | 00 00 00 00 00 00 00 00 | 0006C768 | FF FF FF FF FF FF FF FF |
0006C770 | 00 00 00 00 00 00 00 00 | 0006C770 | FF FF FF FF FF FF FF FF |
0006C778 | 00 00 00 00 00 00 00 00 | 0006C778 | FF FF FF FF FF FF FF FF |
0006C780 | 00 00 00 00 00 00 00 00 | 0006C780 | FF FF FF FF FF FF FF FF |
0006C788 | 00 00 00 00 00 00 00 00 | 0006C788 | FF FF FF FF FF FF FF FF |
0006C790 | 00 00 00 00 00 00 00 00 | 0006C790 | FF FF FF FF FF FF FF FF |
0006C798 | 00 00 00 00 00 00 00 00 | 0006C798 | FF FF FF FF FF FF FF FF |
0006C7A0 | 00 00 00 00 00 00 00 00 | 0006C7A0 | FF FF FF FF FF FF FF FF |
0006C7A8 | 00 00 00 00 00 00 00 00 | 0006C7A8 | FF FF FF FF FF FF FF FF |
0006C7B0 | 00 00 00 00 00 00 00 00 | 0006C7B0 | FF FF FF FF FF FF FF FF |
0006C7B8 | 00 00 00 00 00 00 00 00 | 0006C7B8 | FF FF FF FF FF FF FF FF |
0006C7C0 | 00 00 00 00 00 00 00 00 | 0006C7C0 | FF FF FF FF FF FF FF FF |
0006C7C8 | 00 00 00 00 00 00 00 00 | 0006C7C8 | FF FF FF FF FF FF FF FF |
0006C7D0 | 00 00 00 00 00 00 00 00 | 0006C7D0 | FF FF FF FF FF FF FF FF |
0006C7D8 | 00 00 00 00 00 00 00 00 | 0006C7D8 | FF FF FF FF FF FF FF FF |
0006C7E0 | 00 00 00 00 00 00 00 00 | 0006C7E0 | FF FF FF FF FF FF FF FF |
0006C7E8 | 00 00 00 00 00 00 00 00 | 0006C7E8 | FF FF FF FF FF FF FF FF |
0006C7F0 | 00 00 00 00 00 00 00 00 | 0006C7F0 | FF FF FF FF FF FF FF FF |
0006C7F8 | 00 00 00 00 00 00 00 00 | 0006C7F8 | FF FF FF FF FF FF FF FF |
0006C800 | 00 00 00 00 00 00 00 00 | 0006C800 | FF FF FF FF FF FF FF FF |
0006C808 | 00 00 00 00 00 00 00 00 | 0006C808 | FF FF FF FF FF FF FF FF |
0006C810 | 00 00 00 00 00 00 00 00 | 0006C810 | FF FF FF FF FF FF FF FF |
0006C818 | 00 00 00 00 00 00 00 00 | 0006C818 | FF FF FF FF FF FF FF FF |
0006C820 | 00 00 00 00 00 00 00 00 | 0006C820 | FF FF FF FF FF FF FF FF |
0006C828 | 00 00 00 00 00 00 00 00 | 0006C828 | FF FF FF FF FF FF FF FF |
0006C830 | 00 00 00 00 00 00 00 00 | 0006C830 | FF FF FF FF FF FF FF FF |
0006C838 | 00 00 00 00 00 00 00 00 | 0006C838 | FF FF FF FF FF FF FF FF |
0006C840 | 00 00 00 00 00 00 00 00 | 0006C840 | FF FF FF FF FF FF FF FF |
0006C848 | 00 00 00 00 00 00 00 00 | 0006C848 | FF FF FF FF FF FF FF FF |
0006C850 | 00 00 00 00 00 00 00 00 | 0006C850 | FF FF FF FF FF FF FF FF |
0006C858 | 00 00 00 00 00 00 00 00 | 0006C858 | FF FF FF FF FF FF FF FF |
0006C860 | 00 00 00 00 00 00 00 00 | 0006C860 | FF FF FF FF FF FF FF FF |
0006C868 | 00 00 00 00 00 00 00 00 | 0006C868 | FF FF FF FF FF FF FF FF |
0006C870 | 00 00 00 00 00 00 00 00 | 0006C870 | FF FF FF FF FF FF FF FF |
0006C878 | 00 00 00 00 00 00 00 00 | 0006C878 | FF FF FF FF FF FF FF FF |
0006C880 | 00 00 00 00 00 00 00 00 | 0006C880 | FF FF FF FF FF FF FF FF |
0006C888 | 00 00 00 00 00 00 00 00 | 0006C888 | FF FF FF FF FF FF FF FF |
0006C890 | 00 00 00 00 00 00 00 00 | 0006C890 | FF FF FF FF FF FF FF FF |
0006C898 | 00 00 00 00 00 00 00 00 | 0006C898 | FF FF FF FF FF FF FF FF |
0006C8A0 | 00 00 00 00 00 00 00 00 | 0006C8A0 | FF FF FF FF FF FF FF FF |
0006C8A8 | 00 00 00 00 00 00 00 00 | 0006C8A8 | FF FF FF FF FF FF FF FF |
0006C8B0 | 00 00 00 00 00 00 00 00 | 0006C8B0 | FF FF FF FF FF FF FF FF |
0006C8B8 | 00 00 00 00 00 00 00 00 | 0006C8B8 | FF FF FF FF FF FF FF FF |
0006C8C0 | 00 00 00 00 00 00 00 00 | 0006C8C0 | FF FF FF FF FF FF FF FF |
0006C8C8 | 00 00 00 00 00 00 00 00 | 0006C8C8 | FF FF FF FF FF FF FF FF |
0006C8D0 | 00 00 00 00 00 00 00 00 | 0006C8D0 | FF FF FF FF FF FF FF FF |
0006C8D8 | 00 00 00 00 00 00 00 00 | 0006C8D8 | FF FF FF FF FF FF FF FF |
0006C8E0 | 00 00 00 00 00 00 00 00 | 0006C8E0 | FF FF FF FF FF FF FF FF |
0006C8E8 | 00 00 00 00 00 00 00 00 | 0006C8E8 | FF FF FF FF FF FF FF FF |
0006C8F0 | 00 00 00 00 00 00 00 00 | 0006C8F0 | FF FF FF FF FF FF FF FF |
0006C8F8 | 00 00 00 00 00 00 00 00 | 0006C8F8 | FF FF FF FF FF FF FF FF |
0006C900 | 00 00 00 00 00 00 00 00 | 0006C900 | FF FF FF FF FF FF FF FF |
0006C908 | 00 00 00 00 00 00 00 00 | 0006C908 | FF FF FF FF FF FF FF FF |
0006C910 | 00 00 00 00 00 00 00 00 | 0006C910 | FF FF FF FF FF FF FF FF |
0006C918 | 00 00 00 00 00 00 00 00 | 0006C918 | FF FF FF FF FF FF FF FF |
0006C920 | 00 00 00 00 00 00 00 00 | 0006C920 | FF FF FF FF FF FF FF FF |
0006C928 | 00 00 00 00 00 00 00 00 | 0006C928 | FF FF FF FF FF FF FF FF |
0006C930 | 00 00 00 00 00 00 00 00 | 0006C930 | FF FF FF FF FF FF FF FF |
0006C938 | 00 00 00 00 00 00 00 00 | 0006C938 | FF FF FF FF FF FF FF FF |
0006C940 | 00 00 00 00 00 00 00 00 | 0006C940 | FF FF FF FF FF FF FF FF |
0006C948 | 00 00 00 00 00 00 00 00 | 0006C948 | FF FF FF FF FF FF FF FF |
0006C950 | 00 00 00 00 00 00 00 00 | 0006C950 | FF FF FF FF FF FF FF FF |
0006C958 | 00 00 00 00 00 00 00 00 | 0006C958 | FF FF FF FF FF FF FF FF |
0006C960 | 00 00 00 00 00 00 00 00 | 0006C960 | FF FF FF FF FF FF FF FF |
0006C968 | 00 00 00 00 00 00 00 00 | 0006C968 | FF FF FF FF FF FF FF FF |
0006C970 | 00 00 00 00 00 00 00 00 | 0006C970 | FF FF FF FF FF FF FF FF |
0006C978 | 00 00 00 00 00 00 00 00 | 0006C978 | FF FF FF FF FF FF FF FF |
0006C980 | 00 00 00 00 00 00 00 00 | 0006C980 | FF FF FF FF FF FF FF FF |
0006C988 | 00 00 00 00 00 00 00 00 | 0006C988 | FF FF FF FF FF FF FF FF |
0006C990 | 00 00 00 00 00 00 00 00 | 0006C990 | FF FF FF FF FF FF FF FF |
0006C998 | 00 00 00 00 00 00 00 00 | 0006C998 | FF FF FF FF FF FF FF FF |
0006C9A0 | 00 00 00 00 00 00 00 00 | 0006C9A0 | FF FF FF FF FF FF FF FF |
0006C9A8 | 00 00 00 00 00 00 00 00 | 0006C9A8 | FF FF FF FF FF FF FF FF |
0006C9B0 | 00 00 00 00 00 00 00 00 | 0006C9B0 | FF FF FF FF FF FF FF FF |
0006C9B8 | 00 00 00 00 00 00 00 00 | 0006C9B8 | FF FF FF FF FF FF FF FF |
0006C9C0 | 00 00 00 00 00 00 00 00 | 0006C9C0 | FF FF FF FF FF FF FF FF |
0006C9C8 | 00 00 00 00 00 00 00 00 | 0006C9C8 | FF FF FF FF FF FF FF FF |
0006C9D0 | 00 00 00 00 00 00 00 00 | 0006C9D0 | FF FF FF FF FF FF FF FF |
0006C9D8 | 00 00 00 00 00 00 00 00 | 0006C9D8 | FF FF FF FF FF FF FF FF |
0006C9E0 | 00 00 00 00 00 00 00 00 | 0006C9E0 | FF FF FF FF FF FF FF FF |
0006C9E8 | 00 00 00 00 00 00 00 00 | 0006C9E8 | FF FF FF FF FF FF FF FF |
0006C9F0 | 00 00 00 00 00 00 00 00 | 0006C9F0 | FF FF FF FF FF FF FF FF |
0006C9F8 | 00 00 00 00 00 00 00 00 | 0006C9F8 | FF FF FF FF FF FF FF FF |
0006CA00 | 00 00 00 00 00 00 00 00 | 0006CA00 | FF FF FF FF FF FF FF FF |
0006CA08 | 00 00 00 00 00 00 00 00 | 0006CA08 | FF FF FF FF FF FF FF FF |
0006CA10 | 00 00 00 00 00 00 00 00 | 0006CA10 | FF FF FF FF FF FF FF FF |
0006CA18 | 00 00 00 00 00 00 00 00 | 0006CA18 | FF FF FF FF FF FF FF FF |
0006CA20 | 00 00 00 00 00 00 00 00 | 0006CA20 | FF FF FF FF FF FF FF FF |
0006CA28 | 00 00 00 00 00 00 00 00 | 0006CA28 | FF FF FF FF FF FF FF FF |
0006CA30 | 00 00 00 00 00 00 00 00 | 0006CA30 | FF FF FF FF FF FF FF FF |
0006CA38 | 00 00 00 00 00 00 00 00 | 0006CA38 | FF FF FF FF FF FF FF FF |
0006CA40 | 00 00 00 00 00 00 00 00 | 0006CA40 | FF FF FF FF FF FF FF FF |
0006CA48 | 00 00 00 00 00 00 00 00 | 0006CA48 | FF FF FF FF FF FF FF FF |
0006CA50 | 00 00 00 00 00 00 00 00 | 0006CA50 | FF FF FF FF FF FF FF FF |
0006CA58 | 00 00 00 00 00 00 00 00 | 0006CA58 | FF FF FF FF FF FF FF FF |
0006CA60 | 00 00 00 00 00 00 00 00 | 0006CA60 | FF FF FF FF FF FF FF FF |
0006CA68 | 00 00 00 00 00 00 00 00 | 0006CA68 | FF FF FF FF FF FF FF FF |
0006CA70 | 00 00 00 00 00 00 00 00 | 0006CA70 | FF FF FF FF FF FF FF FF |
0006CA78 | 00 00 00 00 00 00 00 00 | 0006CA78 | FF FF FF FF FF FF FF FF |
0006CA80 | 00 00 00 00 00 00 00 00 | 0006CA80 | FF FF FF FF FF FF FF FF |
0006CA88 | 00 00 00 00 00 00 00 00 | 0006CA88 | FF FF FF FF FF FF FF FF |
0006CA90 | 00 00 00 00 00 00 00 00 | 0006CA90 | FF FF FF FF FF FF FF FF |
0006CA98 | 00 00 00 00 00 00 00 00 | 0006CA98 | FF FF FF FF FF FF FF FF |
0006CAA0 | 00 00 00 00 00 00 00 00 | 0006CAA0 | FF FF FF FF FF FF FF FF |
0006CAA8 | 00 00 00 00 00 00 00 00 | 0006CAA8 | FF FF FF FF FF FF FF FF |
0006CAB0 | 00 00 00 00 00 00 00 00 | 0006CAB0 | FF FF FF FF FF FF FF FF |
0006CAB8 | 00 00 00 00 00 00 00 00 | 0006CAB8 | FF FF FF FF FF FF FF FF |
0006CAC0 | 00 00 00 00 00 00 00 00 | 0006CAC0 | FF FF FF FF FF FF FF FF |
0006CAC8 | 00 00 00 00 00 00 00 00 | 0006CAC8 | FF FF FF FF FF FF FF FF |
0006CAD0 | 00 00 00 00 00 00 00 00 | 0006CAD0 | FF FF FF FF FF FF FF FF |
0006CAD8 | 00 00 00 00 00 00 00 00 | 0006CAD8 | FF FF FF FF FF FF FF FF |
0006CAE0 | 00 00 00 00 00 00 00 00 | 0006CAE0 | FF FF FF FF FF FF FF FF |
0006CAE8 | 00 00 00 00 00 00 00 00 | 0006CAE8 | FF FF FF FF FF FF FF FF |
0006CAF0 | 00 00 00 00 00 00 00 00 | 0006CAF0 | FF FF FF FF FF FF FF FF |
0006CAF8 | 00 00 00 00 00 00 00 00 | 0006CAF8 | FF FF FF FF FF FF FF FF |
0006CB00 | 00 00 00 00 00 00 00 00 | 0006CB00 | FF FF FF FF FF FF FF FF |
0006CB08 | 00 00 00 00 00 00 00 00 | 0006CB08 | FF FF FF FF FF FF FF FF |
0006CB10 | 00 00 00 00 00 00 00 00 | 0006CB10 | FF FF FF FF FF FF FF FF |
0006CB18 | 00 00 00 00 00 00 00 00 | 0006CB18 | FF FF FF FF FF FF FF FF |
0006CB20 | 00 00 00 00 00 00 00 00 | 0006CB20 | FF FF FF FF FF FF FF FF |
0006CB28 | 00 00 00 00 00 00 00 00 | 0006CB28 | FF FF FF FF FF FF FF FF |
0006CB30 | 00 00 00 00 00 00 00 00 | 0006CB30 | FF FF FF FF FF FF FF FF |
0006CB38 | 00 00 00 00 00 00 00 00 | 0006CB38 | FF FF FF FF FF FF FF FF |
0006CB40 | 00 00 00 00 00 00 00 00 | 0006CB40 | FF FF FF FF FF FF FF FF |
0006CB48 | 00 00 00 00 00 00 00 00 | 0006CB48 | FF FF FF FF FF FF FF FF |
0006CB50 | 00 00 00 00 00 00 00 00 | 0006CB50 | FF FF FF FF FF FF FF FF |
0006CB58 | 00 00 00 00 00 00 00 00 | 0006CB58 | FF FF FF FF FF FF FF FF |
0006CB60 | 00 00 00 00 00 00 00 00 | 0006CB60 | FF FF FF FF FF FF FF FF |
0006CB68 | 00 00 00 00 00 00 00 00 | 0006CB68 | FF FF FF FF FF FF FF FF |
0006CB70 | 00 00 00 00 00 00 00 00 | 0006CB70 | FF FF FF FF FF FF FF FF |
0006CB78 | 00 00 00 00 00 00 00 00 | 0006CB78 | FF FF FF FF FF FF FF FF |
0006CB80 | 00 00 00 00 00 00 00 00 | 0006CB80 | FF FF FF FF FF FF FF FF |
0006CB88 | 00 00 00 00 00 00 00 00 | 0006CB88 | FF FF FF FF FF FF FF FF |
0006CB90 | 00 00 00 00 00 00 00 00 | 0006CB90 | FF FF FF FF FF FF FF FF |
0006CB98 | 00 00 00 00 00 00 00 00 | 0006CB98 | FF FF FF FF FF FF FF FF |
0006CBA0 | 00 00 00 00 00 00 00 00 | 0006CBA0 | FF FF FF FF FF FF FF FF |
0006CBA8 | 00 00 00 00 00 00 00 00 | 0006CBA8 | FF FF FF FF FF FF FF FF |
0006CBB0 | 00 00 00 00 00 00 00 00 | 0006CBB0 | FF FF FF FF FF FF FF FF |
0006CBB8 | 00 00 00 00 00 00 00 00 | 0006CBB8 | FF FF FF FF FF FF FF FF |
0006CBC0 | 00 00 00 00 00 00 00 00 | 0006CBC0 | FF FF FF FF FF FF FF FF |
0006CBC8 | 00 00 00 00 00 00 00 00 | 0006CBC8 | FF FF FF FF FF FF FF FF |
0006CBD0 | 00 00 00 00 00 00 00 00 | 0006CBD0 | FF FF FF FF FF FF FF FF |
0006CBD8 | 00 00 00 00 00 00 00 00 | 0006CBD8 | FF FF FF FF FF FF FF FF |
0006CBE0 | 00 00 00 00 00 00 00 00 | 0006CBE0 | FF FF FF FF FF FF FF FF |
0006CBE8 | 00 00 00 00 00 00 00 00 | 0006CBE8 | FF FF FF FF FF FF FF FF |
0006CBF0 | 00 00 00 00 00 00 00 00 | 0006CBF0 | FF FF FF FF FF FF FF FF |
0006CBF8 | 00 00 00 00 00 00 00 00 | 0006CBF8 | FF FF FF FF FF FF FF FF |
0006CC00 | 00 00 00 00 00 00 00 00 | 0006CC00 | FF FF FF FF FF FF FF FF |
0006CC08 | 00 00 00 00 00 00 00 00 | 0006CC08 | FF FF FF FF FF FF FF FF |
0006CC10 | 00 00 00 00 00 00 00 00 | 0006CC10 | FF FF FF FF FF FF FF FF |
0006CC18 | 00 00 00 00 00 00 00 00 | 0006CC18 | FF FF FF FF FF FF FF FF |
0006CC20 | 00 00 00 00 00 00 00 00 | 0006CC20 | FF FF FF FF FF FF FF FF |
0006CC28 | 00 00 00 00 00 00 00 00 | 0006CC28 | FF FF FF FF FF FF FF FF |
0006CC30 | 00 00 00 00 00 00 00 00 | 0006CC30 | FF FF FF FF FF FF FF FF |
0006CC38 | 00 00 00 00 00 00 00 00 | 0006CC38 | FF FF FF FF FF FF FF FF |
0006CC40 | 00 00 00 00 00 00 00 00 | 0006CC40 | FF FF FF FF FF FF FF FF |
0006CC48 | 00 00 00 00 00 00 00 00 | 0006CC48 | FF FF FF FF FF FF FF FF |
0006CC50 | 00 00 00 00 00 00 00 00 | 0006CC50 | FF FF FF FF FF FF FF FF |
0006CC58 | 00 00 00 00 00 00 00 00 | 0006CC58 | FF FF FF FF FF FF FF FF |
0006CC60 | 00 00 00 00 00 00 00 00 | 0006CC60 | FF FF FF FF FF FF FF FF |
0006CC68 | 00 00 00 00 00 00 00 00 | 0006CC68 | FF FF FF FF FF FF FF FF |
0006CC70 | 00 00 00 00 00 00 00 00 | 0006CC70 | FF FF FF FF FF FF FF FF |
0006CC78 | 00 00 00 00 00 00 00 00 | 0006CC78 | FF FF FF FF FF FF FF FF |
0006CC80 | 00 00 00 00 00 00 00 00 | 0006CC80 | FF FF FF FF FF FF FF FF |
0006CC88 | 00 00 00 00 00 00 00 00 | 0006CC88 | FF FF FF FF FF FF FF FF |
0006CC90 | 00 00 00 00 00 00 00 00 | 0006CC90 | FF FF FF FF FF FF FF FF |
0006CC98 | 00 00 00 00 00 00 00 00 | 0006CC98 | FF FF FF FF FF FF FF FF |
0006CCA0 | 00 00 00 00 00 00 00 00 | 0006CCA0 | FF FF FF FF FF FF FF FF |
0006CCA8 | 00 00 00 00 00 00 00 00 | 0006CCA8 | FF FF FF FF FF FF FF FF |
0006CCB0 | 00 00 00 00 00 00 00 00 | 0006CCB0 | FF FF FF FF FF FF FF FF |
0006CCB8 | 00 00 00 00 00 00 00 00 | 0006CCB8 | FF FF FF FF FF FF FF FF |
0006CCC0 | 00 00 00 00 00 00 00 00 | 0006CCC0 | FF FF FF FF FF FF FF FF |
0006CCC8 | 00 00 00 00 00 00 00 00 | 0006CCC8 | FF FF FF FF FF FF FF FF |
0006CCD0 | 00 00 00 00 00 00 00 00 | 0006CCD0 | FF FF FF FF FF FF FF FF |
0006CCD8 | 00 00 00 00 00 00 00 00 | 0006CCD8 | FF FF FF FF FF FF FF FF |
0006CCE0 | 00 00 00 00 00 00 00 00 | 0006CCE0 | FF FF FF FF FF FF FF FF |
0006CCE8 | 00 00 00 00 00 00 00 00 | 0006CCE8 | FF FF FF FF FF FF FF FF |
0006CCF0 | 00 00 00 00 00 00 00 00 | 0006CCF0 | FF FF FF FF FF FF FF FF |
0006CCF8 | 00 00 00 00 00 00 00 00 | 0006CCF8 | FF FF FF FF FF FF FF FF |
0006CD00 | 00 00 00 00 00 00 00 00 | 0006CD00 | FF FF FF FF FF FF FF FF |
0006CD08 | 00 00 00 00 00 00 00 00 | 0006CD08 | FF FF FF FF FF FF FF FF |
0006CD10 | 00 00 00 00 00 00 00 00 | 0006CD10 | FF FF FF FF FF FF FF FF |
0006CD18 | 00 00 00 00 00 00 00 00 | 0006CD18 | FF FF FF FF FF FF FF FF |
0006CD20 | 00 00 00 00 00 00 00 00 | 0006CD20 | FF FF FF FF FF FF FF FF |
0006CD28 | 00 00 00 00 00 00 00 00 | 0006CD28 | FF FF FF FF FF FF FF FF |
0006CD30 | 00 00 00 00 00 00 00 00 | 0006CD30 | FF FF FF FF FF FF FF FF |
0006CD38 | 00 00 00 00 00 00 00 00 | 0006CD38 | FF FF FF FF FF FF FF FF |
0006CD40 | 00 00 00 00 00 00 00 00 | 0006CD40 | FF FF FF FF FF FF FF FF |
0006CD48 | 00 00 00 00 00 00 00 00 | 0006CD48 | FF FF FF FF FF FF FF FF |
0006CD50 | 00 00 00 00 00 00 00 00 | 0006CD50 | FF FF FF FF FF FF FF FF |
0006CD58 | 00 00 00 00 00 00 00 00 | 0006CD58 | FF FF FF FF FF FF FF FF |
0006CD60 | 00 00 00 00 00 00 00 00 | 0006CD60 | FF FF FF FF FF FF FF FF |
0006CD68 | 00 00 00 00 00 00 00 00 | 0006CD68 | FF FF FF FF FF FF FF FF |
0006CD70 | 00 00 00 00 00 00 00 00 | 0006CD70 | FF FF FF FF FF FF FF FF |
0006CD78 | 00 00 00 00 00 00 00 00 | 0006CD78 | FF FF FF FF FF FF FF FF |
0006CD80 | 00 00 00 00 00 00 00 00 | 0006CD80 | FF FF FF FF FF FF FF FF |
0006CD88 | 00 00 00 00 00 00 00 00 | 0006CD88 | FF FF FF FF FF FF FF FF |
0006CD90 | 00 00 00 00 00 00 00 00 | 0006CD90 | FF FF FF FF FF FF FF FF |
0006CD98 | 00 00 00 00 00 00 00 00 | 0006CD98 | FF FF FF FF FF FF FF FF |
0006CDA0 | 00 00 00 00 00 00 00 00 | 0006CDA0 | FF FF FF FF FF FF FF FF |
0006CDA8 | 00 00 00 00 00 00 00 00 | 0006CDA8 | FF FF FF FF FF FF FF FF |
0006CDB0 | 00 00 00 00 00 00 00 00 | 0006CDB0 | FF FF FF FF FF FF FF FF |
0006CDB8 | 00 00 00 00 00 00 00 00 | 0006CDB8 | FF FF FF FF FF FF FF FF |
0006CDC0 | 00 00 00 00 00 00 00 00 | 0006CDC0 | FF FF FF FF FF FF FF FF |
0006CDC8 | 00 00 00 00 00 00 00 00 | 0006CDC8 | FF FF FF FF FF FF FF FF |
0006CDD0 | 00 00 00 00 00 00 00 00 | 0006CDD0 | FF FF FF FF FF FF FF FF |
0006CDD8 | 00 00 00 00 00 00 00 00 | 0006CDD8 | FF FF FF FF FF FF FF FF |
0006CDE0 | 00 00 00 00 00 00 00 00 | 0006CDE0 | FF FF FF FF FF FF FF FF |
0006CDE8 | 00 00 00 00 00 00 00 00 | 0006CDE8 | FF FF FF FF FF FF FF FF |
0006CDF0 | 00 00 00 00 00 00 00 00 | 0006CDF0 | FF FF FF FF FF FF FF FF |
0006CDF8 | 00 00 00 00 00 00 00 00 | 0006CDF8 | FF FF FF FF FF FF FF FF |
0006CE00 | 00 00 00 00 00 00 00 00 | 0006CE00 | FF FF FF FF FF FF FF FF |
0006CE08 | 00 00 00 00 00 00 00 00 | 0006CE08 | FF FF FF FF FF FF FF FF |
0006CE10 | 00 00 00 00 00 00 00 00 | 0006CE10 | FF FF FF FF FF FF FF FF |
0006CE18 | 00 00 00 00 00 00 00 00 | 0006CE18 | FF FF FF FF FF FF FF FF |
0006CE20 | 00 00 00 00 00 00 00 00 | 0006CE20 | FF FF FF FF FF FF FF FF |
0006CE28 | 00 00 00 00 00 00 00 00 | 0006CE28 | FF FF FF FF FF FF FF FF |
0006CE30 | 00 00 00 00 00 00 00 00 | 0006CE30 | FF FF FF FF FF FF FF FF |
0006CE38 | 00 00 00 00 00 00 00 00 | 0006CE38 | FF FF FF FF FF FF FF FF |
0006CE40 | 00 00 00 00 00 00 00 00 | 0006CE40 | FF FF FF FF FF FF FF FF |
0006CE48 | 00 00 00 00 00 00 00 00 | 0006CE48 | FF FF FF FF FF FF FF FF |
0006CE50 | 00 00 00 00 00 00 00 00 | 0006CE50 | FF FF FF FF FF FF FF FF |
0006CE58 | 00 00 00 00 00 00 00 00 | 0006CE58 | FF FF FF FF FF FF FF FF |
0006CE60 | 00 00 00 00 00 00 00 00 | 0006CE60 | FF FF FF FF FF FF FF FF |
0006CE68 | 00 00 00 00 00 00 00 00 | 0006CE68 | FF FF FF FF FF FF FF FF |
0006CE70 | 00 00 00 00 00 00 00 00 | 0006CE70 | FF FF FF FF FF FF FF FF |
0006CE78 | 00 00 00 00 00 00 00 00 | 0006CE78 | FF FF FF FF FF FF FF FF |
0006CE80 | 00 00 00 00 00 00 00 00 | 0006CE80 | FF FF FF FF FF FF FF FF |
0006CE88 | 00 00 00 00 00 00 00 00 | 0006CE88 | FF FF FF FF FF FF FF FF |
0006CE90 | 00 00 00 00 00 00 00 00 | 0006CE90 | FF FF FF FF FF FF FF FF |
0006CE98 | 00 00 00 00 00 00 00 00 | 0006CE98 | FF FF FF FF FF FF FF FF |
0006CEA0 | 00 00 00 00 00 00 00 00 | 0006CEA0 | FF FF FF FF FF FF FF FF |
0006CEA8 | 00 00 00 00 00 00 00 00 | 0006CEA8 | FF FF FF FF FF FF FF FF |
0006CEB0 | 00 00 00 00 00 00 00 00 | 0006CEB0 | FF FF FF FF FF FF FF FF |
0006CEB8 | 00 00 00 00 00 00 00 00 | 0006CEB8 | FF FF FF FF FF FF FF FF |
0006CEC0 | 00 00 00 00 00 00 00 00 | 0006CEC0 | FF FF FF FF FF FF FF FF |
0006CEC8 | 00 00 00 00 00 00 00 00 | 0006CEC8 | FF FF FF FF FF FF FF FF |
0006CED0 | 00 00 00 00 00 00 00 00 | 0006CED0 | FF FF FF FF FF FF FF FF |
0006CED8 | 00 00 00 00 00 00 00 00 | 0006CED8 | FF FF FF FF FF FF FF FF |
0006CEE0 | 00 00 00 00 00 00 00 00 | 0006CEE0 | FF FF FF FF FF FF FF FF |
0006CEE8 | 00 00 00 00 00 00 00 00 | 0006CEE8 | FF FF FF FF FF FF FF FF |
0006CEF0 | 00 00 00 00 00 00 00 00 | 0006CEF0 | FF FF FF FF FF FF FF FF |
0006CEF8 | 00 00 00 00 00 00 00 00 | 0006CEF8 | FF FF FF FF FF FF FF FF |
0006CF00 | 00 00 00 00 00 00 00 00 | 0006CF00 | FF FF FF FF FF FF FF FF |
0006CF08 | 00 00 00 00 00 00 00 00 | 0006CF08 | FF FF FF FF FF FF FF FF |
0006CF10 | 00 00 00 00 00 00 00 00 | 0006CF10 | FF FF FF FF FF FF FF FF |
0006CF18 | 00 00 00 00 00 00 00 00 | 0006CF18 | FF FF FF FF FF FF FF FF |
0006CF20 | 00 00 00 00 00 00 00 00 | 0006CF20 | FF FF FF FF FF FF FF FF |
0006CF28 | 00 00 00 00 00 00 00 00 | 0006CF28 | FF FF FF FF FF FF FF FF |
0006CF30 | 00 00 00 00 00 00 00 00 | 0006CF30 | FF FF FF FF FF FF FF FF |
0006CF38 | 00 00 00 00 00 00 00 00 | 0006CF38 | FF FF FF FF FF FF FF FF |
0006CF40 | 00 00 00 00 00 00 00 00 | 0006CF40 | FF FF FF FF FF FF FF FF |
0006CF48 | 00 00 00 00 00 00 00 00 | 0006CF48 | FF FF FF FF FF FF FF FF |
0006CF50 | 00 00 00 00 00 00 00 00 | 0006CF50 | FF FF FF FF FF FF FF FF |
0006CF58 | 00 00 00 00 00 00 00 00 | 0006CF58 | FF FF FF FF FF FF FF FF |
0006CF60 | 00 00 00 00 00 00 00 00 | 0006CF60 | FF FF FF FF FF FF FF FF |
0006CF68 | 00 00 00 00 00 00 00 00 | 0006CF68 | FF FF FF FF FF FF FF FF |
0006CF70 | 00 00 00 00 00 00 00 00 | 0006CF70 | FF FF FF FF FF FF FF FF |
0006CF78 | 00 00 00 00 00 00 00 00 | 0006CF78 | FF FF FF FF FF FF FF FF |
0006CF80 | 00 00 00 00 00 00 00 00 | 0006CF80 | FF FF FF FF FF FF FF FF |
0006CF88 | 00 00 00 00 00 00 00 00 | 0006CF88 | FF FF FF FF FF FF FF FF |
0006CF90 | 00 00 00 00 00 00 00 00 | 0006CF90 | FF FF FF FF FF FF FF FF |
0006CF98 | 00 00 00 00 00 00 00 00 | 0006CF98 | FF FF FF FF FF FF FF FF |
0006CFA0 | 00 00 00 00 00 00 00 00 | 0006CFA0 | FF FF FF FF FF FF FF FF |
0006CFA8 | 00 00 00 00 00 00 00 00 | 0006CFA8 | FF FF FF FF FF FF FF FF |
0006CFB0 | 00 00 00 00 00 00 00 00 | 0006CFB0 | FF FF FF FF FF FF FF FF |
0006CFB8 | 00 00 00 00 00 00 00 00 | 0006CFB8 | FF FF FF FF FF FF FF FF |
0006CFC0 | 00 00 00 00 00 00 00 00 | 0006CFC0 | FF FF FF FF FF FF FF FF |
0006CFC8 | 00 00 00 00 00 00 00 00 | 0006CFC8 | FF FF FF FF FF FF FF FF |
0006CFD0 | 00 00 00 00 00 00 00 00 | 0006CFD0 | FF FF FF FF FF FF FF FF |
0006CFD8 | 00 00 00 00 00 00 00 00 | 0006CFD8 | FF FF FF FF FF FF FF FF |
0006CFE0 | 00 00 00 00 00 00 00 00 | 0006CFE0 | FF FF FF FF FF FF FF FF |
0006CFE8 | 00 00 00 00 00 00 00 00 | 0006CFE8 | FF FF FF FF FF FF FF FF |
0006CFF0 | 00 00 00 00 00 00 00 00 | 0006CFF0 | FF FF FF FF FF FF FF FF |
0006CFF8 | 00 00 00 00 00 00 00 00 | 0006CFF8 | FF FF FF FF FF FF FF FF |
0006D000 | 05 00 01 00 00 08 00 10 | 0006D000 | FF FF FF FF FF FF FF FF |
0006D008 | 10 00 01 | 0006D008 | FF FF FF |
------------------------------------------------------------------------
0006D800 | 01 00 02 00 00 04 00 18 | 0006D800 | FF FF FF FF FF FF FF FF |
0006D808 | 10 00 01 | 0006D808 | FF FF FF |
------------------------------------------------------------------------
0006DC00 | 02 00 03 00 00 04 00 1C | 0006DC00 | FF FF FF FF FF FF FF FF |
0006DC08 | 10 00 01 | 0006DC08 | FF FF FF |
------------------------------------------------------------------------
0006E000 | 08 00 04 00 9A 00 00 20 | 0006E000 | FF FF FF FF FF FF FF FF |
0006E008 | 10 00 01 | 0006E008 | FF FF FF |
0006E010 | 73 04 12 09 89 10 00 00 | 0006E010 | FF FF FF FF FF FF FF FF |
0006E018 | 00 00 00 00 00 00 00 00 | 0006E018 | FF FF FF FF FF FF FF FF |
0006E020 | 00 00 00 00 00 00 02 48 | 0006E020 | FF FF FF FF FF FF FF FF |
0006E028 | 48 43 43 00 00 00 00 00 | 0006E028 | FF FF FF FF FF FF FF FF |
0006E030 | 00 00 00 00 00 00 00 00 | 0006E030 | FF FF FF FF FF FF FF FF |
0006E038 | 00 00 00 00 00 00 00 00 | 0006E038 | FF FF FF FF FF FF FF FF |
0006E040 | 02 00 03 04 05 06 07 00 | 0006E040 | FF FF FF FF FF FF FF FF |
0006E048 | 01 02 03 02 00 00 00 03 | 0006E048 | FF FF FF FF FF FF FF FF |
0006E050 | A7 6C 8B 80 8E 84 00 00 | 0006E050 | FF FF FF FF FF FF FF FF |
0006E058 | 00 00 00 00 00 00 00 00 | 0006E058 | FF FF FF FF FF FF FF FF |
0006E060 | 00 00 00 00 00 00 00 00 | 0006E060 | FF FF FF FF FF FF FF FF |
0006E068 | 00 01 02 03 04 05 06 07 | 0006E068 | FF FF FF FF FF FF FF FF |
0006E070 | 08 09 0A 0B 00 00 00 00 | 0006E070 | FF FF FF FF FF FF FF FF |
0006E078 | 00 00 00 00 00 00 00 00 | 0006E078 | FF FF FF FF FF FF FF FF |
0006E080 | 00 00 00 00 00 00 00 00 | 0006E080 | FF FF FF FF FF FF FF FF |
0006E088 | 00 01 3A 52 00 00 00 00 | 0006E088 | FF FF FF FF FF FF FF FF |
0006E090 | 00 00 00 01 02 03 00 00 | 0006E090 | FF FF FF FF FF FF FF FF |
0006E098 | 00 00 | 0006E098 | FF FF |
------------------------------------------------------------------------

I cannot get this on anyones radar screen to get help. Any ideas other than getting on a place to Symantec's head office?

#4 OldTimer

OldTimer

    Malware Expert


  • Members
  • 11,092 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:North Carolina
  • Local time:11:13 PM

Posted 09 February 2007 - 07:12 PM

I guess I ask again. What is pointing to there being an infection? What are the specific symptoms when this takes place?

Flashing the bios can be one of the most dangerous things a computer performs because if anything goes wrong it can render the computer unusable. If the problem actually does lie in the bios then the flash routine could be corrupt.

It sounds more like an issue with the OS which can either be software or hardware related. If everything works fine until programs from the backups are installed then it would point to a bad backup of the apps (possibly a corrupt backup or a bad CD). Instead of trying to reinstall the apps from a backup CD try installing them from the original CD.

Cheers.

OT
I do not respond to PM's requesting help. That's what the forums are here for. Please use them so that others may benefit from your questions and the responses you receive.
OldTimer

Posted Image

#5 altered2222

altered2222
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:08:13 PM

Posted 10 February 2007 - 06:39 PM

Following a clean build using a low level formatted HD, when I boot into safe mode I do not get a message asking which operating system I want to log onto.

After slaving in the data drives to recover my critical data - the infection occurs and booting into safe mode I get asked which OS I want to log onto.


Well I only installed 1 instance of XP.

#6 OldTimer

OldTimer

    Malware Expert


  • Members
  • 11,092 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:North Carolina
  • Local time:11:13 PM

Posted 10 February 2007 - 08:35 PM

Hi altered2222. No, you wouldn't in Safe Mode. But if booting normally gives that message it just means that one or more of the data drives has a bootable partition on it set as the primary partition.

What are the OS options that you get when you boot normally?

Cheers.

OT
I do not respond to PM's requesting help. That's what the forums are here for. Please use them so that others may benefit from your questions and the responses you receive.
OldTimer

Posted Image

#7 altered2222

altered2222
  • Topic Starter

  • Members
  • 7 posts
  • OFFLINE
  •  
  • Local time:08:13 PM

Posted 11 February 2007 - 07:51 PM

Sorry,

I didn't quite understand your last answer, if I boot into safemode am I correct that with only XP installed that I should nod get a message asking OS to load?

When I boot normally I do not get any messages asking which OS to load. XP just loads up and runs.

Thanks

#8 OldTimer

OldTimer

    Malware Expert


  • Members
  • 11,092 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:North Carolina
  • Local time:11:13 PM

Posted 11 February 2007 - 09:35 PM

Hi altered2222. It depends. On a system where it is setup to logon a user automatically then in Normal mode you would not get an OS menu unless the boot.ini file had each OS listed in it.

In Safe Mode, a user cannot be logged on automatically. On a drive with multiple partitions or multiple drives, the OS menu may come up first. On a system with only XP installed on it, there will only be one choice. If that menu does not come up you can still get to it by choosing the "Return to OS Choices Menu" from the boot options menu.

It is a normal operation for XP (or 2k).

Cheers.

OT
I do not respond to PM's requesting help. That's what the forums are here for. Please use them so that others may benefit from your questions and the responses you receive.
OldTimer

Posted Image




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users