2024.05.01

观察EFI_HOB_FIRMWARE_VOLUME

dt -b EFI_FIRMWARE_VOLUME_HEADER 200000
   +0x000 ZeroVector       : 
    [00] 0xa6 ''
    [01] 0x21 '!'
    [02] 0 ''
    [03] 0x14 ''
    [04] 0 ''
    [05] 0 ''
    [06] 0 ''
    [07] 0 ''
    [08] 0 ''
    [09] 0 ''
    [10] 0 ''
    [11] 0 ''
    [12] 0 ''
    [13] 0 ''
    [14] 0 ''
    [15] 0 ''
   +0x010 FileSystemGuid   : 
      +0x000 Data1            : 0x8c8ce578
      +0x004 Data2            : 0x8a3d
      +0x006 Data3            : 0x4f1c
      +0x008 Data4            : 
       [00] 0x99 ''
       [01] 0x35 '5'
       [02] 0x89 ''
       [03] 0x61 'a'
       [04] 0x85 ''
       [05] 0xc3 ''
       [06] 0x2d '-'
       [07] 0xd3 ''
   +0x020 FvLength         : 0x500000
   +0x028 Signature        : 0x4856465f
   +0x02c Attributes       : 0xcfeff
   +0x030 HeaderLength     : 0x48
   +0x032 Checksum         : 0xabd1
   +0x034 ExtHeaderOffset  : 0
   +0x036 Reserved         : 
    [00] 0 ''
   +0x037 Revision         : 0x2 ''
   +0x038 BlockMap         : 
    [00] 
      +0x000 NumBlocks        : 
0x500
      +0x004 Length           : 0x1000
.formats 0x4856465f
eval expression:
  Hex:     00000000`4856465f
  Decimal: 1213613663
  Octal:   0000000000011025443137
  Binary:  00000000 00000000 00000000 00000000 01001000 01010110 01000110 01011111
  Chars:   ....HVF_
  Time:    Mon Jan  1 08:02:01.361 1601 (GMT+8)
  Float:   low 219417 high 0
  Double:  5.99605e-315


dt -b EFI_FIRMWARE_VOLUME_HEADER 0`3ec71000
   +0x000 ZeroVector       : 
    [00] 0 ''
    [01] 0 ''
    [02] 0 ''
    [03] 0 ''
    [04] 0 ''
    [05] 0 ''
    [06] 0 ''
    [07] 0 ''
    [08] 0 ''
    [09] 0 ''
    [10] 0 ''
    [11] 0 ''
    [12] 0 ''
    [13] 0 ''
    [14] 0 ''
    [15] 0 ''
   +0x010 FileSystemGuid   : 
      +0x000 Data1            : 0x8c8ce578
      +0x004 Data2            : 0x8a3d
      +0x006 Data3            : 0x4f1c
      +0x008 Data4            : 
       [00] 0x99 ''
       [01] 0x35 '5'
       [02] 0x89 ''
       [03] 0x61 'a'
       [04] 0x85 ''
       [05] 0xc3 ''
       [06] 0x2d '-'
       [07] 0xd3 ''
   +0x020 FvLength         : 0x9ad340
   +0x028 Signature        : 0x4856465f
   +0x02c Attributes       : 0x3feff
   +0x030 HeaderLength     : 0x48
   +0x032 Checksum         : 0xb767
   +0x034 ExtHeaderOffset  : 0
   +0x036 Reserved         : 
    [00] 0 ''
   +0x037 Revision         : 0x2 ''
   +0x038 BlockMap         : 
    [00] 
      +0x000 NumBlocks        : 0x26b4d

    +0x004 Length           : 0x40

.formats 9ad340
eval expression:
  Hex:     00000000`009ad340
  Decimal: 10146624
  Octal:   0000000000000046551500
  Binary:  00000000 00000000 00000000 00000000 00000000 10011010 11010011 01000000
  Chars:   .......@
  Time:    Mon Jan  1 08:00:01.014 1601 (GMT+8)
  Float:   low 1.42184e-38 high 0
  Double:  5.0131e-317

dt -b EFI_FIRMWARE_VOLUME_HEADER 0`3ec71000
+0x020 FvLength : 0x9ad340

Hex: 00000000`009ad340
Decimal: 10146624
于是找到了加载到内存中的FVMAIN:


Excel生成一个脚本文件执行:

打印了每一个EFI_FFS_FILE_HEADER:

$<d:\gedu\uefi\dumpFVMAIN_EFI_FFS_FILE_HEADER.txt
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00000048
   +0x000 Name             : 
      +0x000 Data1            : 0xfc510ee7
      +0x004 Data2            : 0xffdc
      +0x006 Data3            : 0x11d4
      +0x008 Data4            : 
       [00] 0xbd ''
       [01] 0x41 'A'
       [02] 0 ''
       [03] 0x80 ''
       [04] 0xc7 ''
       [05] 0x3c '<'
       [06] 0x88 ''
       [07] 0x81 ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x36 '6'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa36
   +0x012 Type             : 0x2 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x3c '<'
    [01] 0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00000088
   +0x000 Name             : 
      +0x000 Data1            : 0xd6a2cb7f
      +0x004 Data2            : 0x6a18
      +0x006 Data3            : 0x4e2f
      +0x008 Data4            : 
       [00] 0xb4 ''
       [01] 0x3b ';'
       [02] 0x99 ''
       [03] 0x20 ' '
       [04] 0xa7 ''
       [05] 0x33 '3'
       [06] 0x70 'p'
       [07] 0xa ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x6a 'j'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa6a
   +0x012 Type             : 0x5 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x30 '0'
    [01] 0xa0 ''
    [02] 0x4 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+0004A0B8
   +0x000 Name             : 
      +0x000 Data1            : 0x80cf7257
      +0x004 Data2            : 0x87ab
      +0x006 Data3            : 0x47f9
      +0x008 Data4            : 
       [00] 0xa3 ''
       [01] 0xfe ''
       [02] 0xd5 ''
       [03] 0xb ''
       [04] 0x76 'v'
       [05] 0xd8 ''
       [06] 0x95 ''
       [07] 0x41 'A'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xf7 ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaaf7
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x2a '*'
    [01] 0xa9 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+000549E8
   +0x000 Name             : 
      +0x000 Data1            : 0xb8d9777e
      +0x004 Data2            : 0xd72a
      +0x006 Data3            : 0x451f
      +0x008 Data4            : 
       [00] 0x9b ''
       [01] 0xdb ''
       [02] 0xba ''
       [03] 0xfb ''
       [04] 0x52 'R'
       [05] 0xa6 ''
       [06] 0x84 ''
       [07] 0x15 ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x12 ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa12
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x70 'p'
    [01] 0xd0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00061A58
   +0x000 Name             : 
      +0x000 Data1            : 0xb601f8c4
      +0x004 Data2            : 0x43b7
      +0x006 Data3            : 0x4784
      +0x008 Data4            : 
       [00] 0x95 ''
       [01] 0xb1 ''
       [02] 0xf4 ''
       [03] 0x22 '"'
       [04] 0x6c 'l'
       [05] 0xb4 ''
       [06] 0xc ''
       [07] 0xee ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xf9 ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaaf9
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x4e 'N'
    [01] 0 ''
    [02] 0x4 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+000A1AA8
   +0x000 Name             : 
      +0x000 Data1            : 0xf80697e9
      +0x004 Data2            : 0x7fd6
      +0x006 Data3            : 0x4665
      +0x008 Data4            : 
       [00] 0x86 ''
       [01] 0x46 'F'
       [02] 0x88 ''
       [03] 0xe3 ''
       [04] 0x3e '>'
       [05] 0xf7 ''
       [06] 0x1d ''
       [07] 0xfc ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xfe ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaafe
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x58 'X'
    [01] 0xa0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+000ABB00
   +0x000 Name             : 
      +0x000 Data1            : 0x42857f0a
      +0x004 Data2            : 0x13f2
      +0x006 Data3            : 0x4b21
      +0x008 Data4            : 
       [00] 0x8a ''
       [01] 0x23 '#'
       [02] 0x53 'S'
       [03] 0xd3 ''
       [04] 0xf7 ''
       [05] 0x14 ''
       [06] 0xb8 ''
       [07] 0x40 '@'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xf3 ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaaf3
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x6c 'l'
    [01] 0 ''
    [02] 0x3 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+000DBB70
   +0x000 Name             : 
      +0x000 Data1            : 0xfcabe6a7
      +0x004 Data2            : 0x7953
      +0x006 Data3            : 0x4a84
      +0x008 Data4            : 
       [00] 0xb7 ''
       [01] 0xec ''
       [02] 0xd2 ''
       [03] 0x9e ''
       [04] 0x89 ''
       [05] 0xb6 ''
       [06] 0x2e '.'
       [07] 0x87 ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xb7 ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaab7
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x6a 'j'
    [01] 0 ''
    [02] 0x3 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+0010BBE0
   +0x000 Name             : 
      +0x000 Data1            : 0x4b28e4c7
      +0x004 Data2            : 0xff36
      +0x006 Data3            : 0x4e10
      +0x008 Data4            : 
       [00] 0x93 ''
       [01] 0xcf ''
       [02] 0xa8 ''
       [03] 0x21 '!'
       [04] 0x59 'Y'
       [05] 0xe7 ''
       [06] 0x77 'w'
       [07] 0xc5 ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x39 '9'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa39
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x64 'd'
    [01] 0 ''
    [02] 0x4 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+0014BC48
   +0x000 Name             : 
      +0x000 Data1            : 0xb336f62d
      +0x004 Data2            : 0x4135
      +0x006 Data3            : 0x4a55
      +0x008 Data4            : 
       [00] 0xae ''
       [01] 0x4e 'N'
       [02] 0x49 'I'
       [03] 0x71 'q'
       [04] 0xbb ''
       [05] 0xf0 ''
       [06] 0x88 ''
       [07] 0x5d ']'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x17 ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa17
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x78 'x'
    [01] 0 ''
    [02] 0x3 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+0017BCC0
   +0x000 Name             : 
      +0x000 Data1            : 0x4c6e0267
      +0x004 Data2            : 0xc77d
      +0x006 Data3            : 0x410d
      +0x008 Data4            : 
       [00] 0x81 ''
       [01] 0 ''
       [02] 0x14 ''
       [03] 0x95 ''
       [04] 0x91 ''
       [05] 0x1a ''
       [06] 0x98 ''
       [07] 0x9d ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x98 ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa98
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x52 'R'
    [01] 0x50 'P'
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00180D18
   +0x000 Name             : 
      +0x000 Data1            : 0x348c4d62
      +0x004 Data2            : 0xbfbd
      +0x006 Data3            : 0x4882
      +0x008 Data4            : 
       [00] 0x9e ''
       [01] 0xce ''
       [02] 0xc8 ''
       [03] 0xb ''
       [04] 0xb1 ''
       [05] 0xc4 ''
       [06] 0x78 'x'
       [07] 0x3b ';'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x8b ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa8b
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x50 'P'
    [01] 0 ''
    [02] 0x2 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+001A0D68
   +0x000 Name             : 
      +0x000 Data1            : 0xb1f3fd14
      +0x004 Data2            : 0x9bd1
      +0x006 Data3            : 0x48cc
      +0x008 Data4            : 
       [00] 0x92 ''
       [01] 0x58 'X'
       [02] 0xe2 ''
       [03] 0x80 ''
       [04] 0x7e '~'
       [05] 0xcb ''
       [06] 0x1b ''
       [07] 0x84 ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xee ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaaee
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x52 'R'
    [01] 0x50 'P'
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+001A5DC0
   +0x000 Name             : 
      +0x000 Data1            : 0xce7de226
      +0x004 Data2            : 0xae7c
      +0x006 Data3            : 0x11ec
      +0x008 Data4            : 
       [00] 0xa1 ''
       [01] 0x54 'T'
       [02] 0xf4 ''
       [03] 0x2a '*'
       [04] 0x7d '}'
       [05] 0xcb ''
       [06] 0x92 ''
       [07] 0x5d ']'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xe1 ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaae1
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x50 'P'
    [01] 0 ''
    [02] 0x4 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+001E5E10
   +0x000 Name             : 
      +0x000 Data1            : 0xdf325b7e
      +0x004 Data2            : 0xae7c
      +0x006 Data3            : 0x11ec
      +0x008 Data4            : 
       [00] 0xa1 ''
       [01] 0x54 'T'
       [02] 0xf4 ''
       [03] 0x2a '*'
       [04] 0x7d '}'
       [05] 0xcb ''
       [06] 0x92 ''
       [07] 0x5d ']'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x50 'P'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa50
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x4a 'J'
    [01] 0 ''
    [02] 0x4 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00225E60
   +0x000 Name             : 
      +0x000 Data1            : 0xcbd2e4d5
      +0x004 Data2            : 0x7068
      +0x006 Data3            : 0x4ff5
      +0x008 Data4            : 
       [00] 0xb4 ''
       [01] 0x62 'b'
       [02] 0x98 ''
       [03] 0x22 '"'
       [04] 0xb4 ''
       [05] 0xad ''
       [06] 0x8d ''
       [07] 0x60 '`'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x7 ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa07
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x5e '^'
    [01] 0 ''
    [02] 0x4 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00265EC0
   +0x000 Name             : 
      +0x000 Data1            : 0xfe5cea76
      +0x004 Data2            : 0x4f72
      +0x006 Data3            : 0x49e8
      +0x008 Data4            : 
       [00] 0x98 ''
       [01] 0x6f 'o'
       [02] 0x2c ','
       [03] 0xd8 ''
       [04] 0x99 ''
       [05] 0xdf ''
       [06] 0xfe ''
       [07] 0x5d ']'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x57 'W'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa57
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x88 ''
    [01] 0x90 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+0026EF48
   +0x000 Name             : 
      +0x000 Data1            : 0x51ccf399
      +0x004 Data2            : 0x4fdf
      +0x006 Data3            : 0x4e55
      +0x008 Data4            : 
       [00] 0xa4 ''
       [01] 0x5b '['
       [02] 0xe1 ''
       [03] 0x23 '#'
       [04] 0xf8 ''
       [05] 0x4d 'M'
       [06] 0x45 'E'
       [07] 0x6a 'j'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xca ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaaca
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x3e '>'
    [01] 0x80 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00276F88
   +0x000 Name             : 
      +0x000 Data1            : 0x408edcec
      +0x004 Data2            : 0xcf6d
      +0x006 Data3            : 0x477c
      +0x008 Data4            : 
       [00] 0xa5 ''
       [01] 0xa8 ''
       [02] 0xb4 ''
       [03] 0x84 ''
       [04] 0x4e 'N'
       [05] 0x3d '='
       [06] 0xe2 ''
       [07] 0x81 ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x3 ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa03
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x3e '>'
    [01] 0xb0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00281FC8
   +0x000 Name             : 
      +0x000 Data1            : 0xcccb0c28
      +0x004 Data2            : 0x4b24
      +0x006 Data3            : 0x11d5
      +0x008 Data4            : 
       [00] 0x9a ''
       [01] 0x5a 'Z'
       [02] 0 ''
       [03] 0x90 ''
       [04] 0x27 '''
       [05] 0x3f '?'
       [06] 0xc1 ''
       [07] 0x4d 'M'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xb ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa0b
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x46 'F'
    [01] 0x90 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+0028B010
   +0x000 Name             : 
      +0x000 Data1            : 0x9e863906
      +0x004 Data2            : 0xa40f
      +0x006 Data3            : 0x4875
      +0x008 Data4            : 
       [00] 0x97 ''
       [01] 0x7f ''
       [02] 0x5b '['
       [03] 0x93 ''
       [04] 0xff ''
       [05] 0x23 '#'
       [06] 0x7f ''
       [07] 0xc6 ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xc3 ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaac3
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x38 '8'
    [01] 0xc0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00297048
   +0x000 Name             : 
      +0x000 Data1            : 0x9a5163e7
      +0x004 Data2            : 0x5c29
      +0x006 Data3            : 0x453f
      +0x008 Data4            : 
       [00] 0x82 ''
       [01] 0x5c '\'
       [02] 0x83 ''
       [03] 0x7a 'z'
       [04] 0x46 'F'
       [05] 0xa8 ''
       [06] 0x1e ''
       [07] 0x15 ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x23 '#'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa23
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x4c 'L'
    [01] 0x50 'P'
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+0029C098
   +0x000 Name             : 
      +0x000 Data1            : 0xde371f7c
      +0x004 Data2            : 0xdec4
      +0x006 Data3            : 0x4d21
      +0x008 Data4            : 
       [00] 0xad ''
       [01] 0xf1 ''
       [02] 0x59 'Y'
       [03] 0x3a ':'
       [04] 0xbc ''
       [05] 0xc1 ''
       [06] 0x58 'X'
       [07] 0x82 ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xf5 ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaaf5
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x4c 'L'
    [01] 0x70 'p'
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+002A30E8
   +0x000 Name             : 
      +0x000 Data1            : 0x49ea041e
      +0x004 Data2            : 0x6752
      +0x006 Data3            : 0x42ca
      +0x008 Data4            : 
       [00] 0xb0 ''
       [01] 0xb1 ''
       [02] 0x73 's'
       [03] 0x44 'D'
       [04] 0xfe ''
       [05] 0x25 ''
       [06] 0x46 'F'
       [07] 0xb7 ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xe7 ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaae7
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x60 '`'
    [01] 0x60 '`'
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+002A9148
   +0x000 Name             : 
      +0x000 Data1            : 0xf099d67f
      +0x004 Data2            : 0x71ae
      +0x006 Data3            : 0x4c36
      +0x008 Data4            : 
       [00] 0xb2 ''
       [01] 0xa3 ''
       [02] 0xdc ''
       [03] 0xeb ''
       [04] 0xe ''
       [05] 0xb2 ''
       [06] 0xb7 ''
       [07] 0xd8 ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x5b '['
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa5b
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x64 'd'
    [01] 0x50 'P'
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+002AE1B0
   +0x000 Name             : 
      +0x000 Data1            : 0x9585984c
      +0x004 Data2            : 0xf027
      +0x006 Data3            : 0x45e9
      +0x008 Data4            : 
       [00] 0xaf ''
       [01] 0xdf ''
       [02] 0xad ''
       [03] 0xaa ''
       [04] 0x6d 'm'
       [05] 0xfa ''
       [06] 0xaa ''
       [07] 0xc7 ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x3b ';'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa3b
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x4e 'N'
    [01] 0x70 'p'
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+002B5200
   +0x000 Name             : 
      +0x000 Data1            : 0x9622e42c
      +0x004 Data2            : 0x8e38
      +0x006 Data3            : 0x4a08
      +0x008 Data4            : 
       [00] 0x9e ''
       [01] 0x8f ''
       [02] 0x54 'T'
       [03] 0xf7 ''
       [04] 0x84 ''
       [05] 0x65 'e'
       [06] 0x2f '/'
       [07] 0x6b 'k'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x1c ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa1c
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x52 'R'
    [01] 0xb0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+002C0258
   +0x000 Name             : 
      +0x000 Data1            : 0xb8e62775
      +0x004 Data2            : 0xbb0a
      +0x006 Data3            : 0x43f0
      +0x008 Data4            : 
       [00] 0xa8 ''
       [01] 0x43 'C'
       [02] 0x5b '['
       [03] 0xe8 ''
       [04] 0xb1 ''
       [05] 0x4f 'O'
       [06] 0x8c ''
       [07] 0xcd ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x86 ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa86
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x5a 'Z'
    [01] 0x60 '`'
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+002C62B8
   +0x000 Name             : 
      +0x000 Data1            : 0xf9d88642
      +0x004 Data2            : 0x737
      +0x006 Data3            : 0x49bc
      +0x008 Data4            : 
       [00] 0x81 ''
       [01] 0xb5 ''
       [02] 0x68 'h'
       [03] 0x89 ''
       [04] 0xcd ''
       [05] 0x57 'W'
       [06] 0xd9 ''
       [07] 0xea ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x33 '3'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa33
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x4c 'L'
    [01] 0x90 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+002CF308
   +0x000 Name             : 
      +0x000 Data1            : 0x196e5beb
      +0x004 Data2            : 0x983e
      +0x006 Data3            : 0x4b58
      +0x008 Data4            : 
       [00] 0x82 ''
       [01] 0x92 ''
       [02] 0xbc ''
       [03] 0x31 '1'
       [04] 0xf ''
       [05] 0x69 'i'
       [06] 0x62 'b'
       [07] 0xdf ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xd ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa0d
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x6c 'l'
    [01] 0x80 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+002D7378
   +0x000 Name             : 
      +0x000 Data1            : 0xeca2ae9e
      +0x004 Data2            : 0x7594
      +0x006 Data3            : 0x4901
      +0x008 Data4            : 
       [00] 0x87 ''
       [01] 0x1c ''
       [02] 0x44 'D'
       [03] 0x9d ''
       [04] 0xa1 ''
       [05] 0xa1 ''
       [06] 0x16 ''
       [07] 0x60 '`'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xd2 ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaad2
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x2e '.'
    [01] 0x90 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+002E03A8
   +0x000 Name             : 
      +0x000 Data1            : 0x9335a854
      +0x004 Data2            : 0x4b88
      +0x006 Data3            : 0x11ec
      +0x008 Data4            : 
       [00] 0xa8 ''
       [01] 0xee ''
       [02] 0xf4 ''
       [03] 0x2a '*'
       [04] 0x7d '}'
       [05] 0xcb ''
       [06] 0x92 ''
       [07] 0x5d ']'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x21 '!'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa21
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x56 'V'
    [01] 0 ''
    [02] 0x3 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00310400
   +0x000 Name             : 
      +0x000 Data1            : 0xb4d6e6b1
      +0x004 Data2            : 0xb2a0
      +0x006 Data3            : 0x4c79
      +0x008 Data4            : 
       [00] 0x8b ''
       [01] 0xf1 ''
       [02] 0x3a ':'
       [03] 0xf8 ''
       [04] 0xc4 ''
       [05] 0x85 ''
       [06] 0xec ''
       [07] 0x3d '='
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xeb ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaaeb
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x56 'V'
    [01] 0x60 '`'
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00316458
   +0x000 Name             : 
      +0x000 Data1            : 0x1cbb3666
      +0x004 Data2            : 0x99fe
      +0x006 Data3            : 0x11ec
      +0x008 Data4            : 
       [00] 0x99 ''
       [01] 0x27 '''
       [02] 0xf4 ''
       [03] 0x2a '*'
       [04] 0x7d '}'
       [05] 0xcb ''
       [06] 0x92 ''
       [07] 0x5d ']'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x84 ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa84
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x48 'H'
    [01] 0x10 ''
    [02] 0x1 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+003274A0
   +0x000 Name             : 
      +0x000 Data1            : 0x10142bcc
      +0x004 Data2            : 0x7b5c
      +0x006 Data3            : 0x11ec
      +0x008 Data4            : 
       [00] 0xb4 ''
       [01] 0x5f '_'
       [02] 0xf4 ''
       [03] 0x2a '*'
       [04] 0x7d '}'
       [05] 0xcb ''
       [06] 0x92 ''
       [07] 0x5d ']'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xbe ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaabe
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x54 'T'
    [01] 0x90 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+003304F8
   +0x000 Name             : 
      +0x000 Data1            : 0xe4000dd0
      +0x004 Data2            : 0xb732
      +0x006 Data3            : 0x11ed
      +0x008 Data4            : 
       [00] 0x88 ''
       [01] 0x7a 'z'
       [02] 0xf4 ''
       [03] 0x2a '*'
       [04] 0x7d '}'
       [05] 0xcb ''
       [06] 0x92 ''
       [07] 0x5d ']'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x3a ':'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa3a
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x50 'P'
    [01] 0x70 'p'
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00337548
   +0x000 Name             : 
      +0x000 Data1            : 0xe495b4c8
      +0x004 Data2            : 0x4793
      +0x006 Data3            : 0x429b
      +0x008 Data4            : 
       [00] 0xa5 ''
       [01] 0xc5 ''
       [02] 0x5e '^'
       [03] 0x5f '_'
       [04] 0xd6 ''
       [05] 0xb ''
       [06] 0xf6 ''
       [07] 0x3b ';'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x4c 'L'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa4c
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x48 'H'
    [01] 0x80 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+0033F590
   +0x000 Name             : 
      +0x000 Data1            : 0xeaf89ad8
      +0x004 Data2            : 0x92e1
      +0x006 Data3            : 0x11ec
      +0x008 Data4            : 
       [00] 0xb5 ''
       [01] 0x1d ''
       [02] 0xf4 ''
       [03] 0x2a '*'
       [04] 0x7d '}'
       [05] 0xcb ''
       [06] 0x92 ''
       [07] 0x5d ']'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x1c ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa1c
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x72 'r'
    [01] 0x80 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00347608
   +0x000 Name             : 
      +0x000 Data1            : 0xbdfe430e
      +0x004 Data2            : 0x8f2a
      +0x006 Data3            : 0x4db0
      +0x008 Data4            : 
       [00] 0x99 ''
       [01] 0x91 ''
       [02] 0x6f 'o'
       [03] 0x85 ''
       [04] 0x65 'e'
       [05] 0x94 ''
       [06] 0x77 'w'
       [07] 0x7e '~'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x3b ';'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa3b
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x30 '0'
    [01] 0xc0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00353638
   +0x000 Name             : 
      +0x000 Data1            : 0xb7f50e91
      +0x004 Data2            : 0xa759
      +0x006 Data3            : 0x412c
      +0x008 Data4            : 
       [00] 0xad ''
       [01] 0xe4 ''
       [02] 0xdc ''
       [03] 0xd0 ''
       [04] 0x3e '>'
       [05] 0x7f ''
       [06] 0x7c '|'
       [07] 0x28 '('
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x62 'b'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa62
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x30 '0'
    [01] 0x10 ''
    [02] 0x1 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00364668
   +0x000 Name             : 
      +0x000 Data1            : 0x3914ae34
      +0x004 Data2            : 0xb946
      +0x006 Data3            : 0x11ec
      +0x008 Data4            : 
       [00] 0x9d ''
       [01] 0x33 '3'
       [02] 0xf4 ''
       [03] 0x2a '*'
       [04] 0x7d '}'
       [05] 0xcb ''
       [06] 0x92 ''
       [07] 0x5d ']'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x91 ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa91
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x58 'X'
    [01] 0xc0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+003706C0
   +0x000 Name             : 
      +0x000 Data1            : 0x196e7c2a
      +0x004 Data2            : 0x37b2
      +0x006 Data3            : 0x4b85
      +0x008 Data4            : 
       [00] 0x86 ''
       [01] 0x83 ''
       [02] 0x71 'q'
       [03] 0x85 ''
       [04] 0x88 ''
       [05] 0x95 ''
       [06] 0x24 '$'
       [07] 0x49 'I'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xce ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaace
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x4c 'L'
    [01] 0x70 'p'
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00377710
   +0x000 Name             : 
      +0x000 Data1            : 0x240612b7
      +0x004 Data2            : 0xa063
      +0x006 Data3            : 0x11d4
      +0x008 Data4            : 
       [00] 0x9a ''
       [01] 0x3a ':'
       [02] 0 ''
       [03] 0x90 ''
       [04] 0x27 '''
       [05] 0x3f '?'
       [06] 0xc1 ''
       [07] 0x4d 'M'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x42 'B'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa42
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x34 '4'
    [01] 0xd0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00384748
   +0x000 Name             : 
      +0x000 Data1            : 0x9fb4b4a7
      +0x004 Data2            : 0x42c0
      +0x006 Data3            : 0x4bcd
      +0x008 Data4            : 
       [00] 0x85 ''
       [01] 0x40 '@'
       [02] 0x9b ''
       [03] 0xcc ''
       [04] 0x67 'g'
       [05] 0x11 ''
       [06] 0xf8 ''
       [07] 0x3e '>'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x73 's'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa73
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x44 'D'
    [01] 0xa0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+0038E790
   +0x000 Name             : 
      +0x000 Data1            : 0x2d2e62cf
      +0x004 Data2            : 0x9ecf
      +0x006 Data3            : 0x43b7
      +0x008 Data4            : 
       [00] 0x82 ''
       [01] 0x19 ''
       [02] 0x94 ''
       [03] 0xe7 ''
       [04] 0xfc ''
       [05] 0x71 'q'
       [06] 0x3d '='
       [07] 0xfe ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x76 'v'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa76
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x32 '2'
    [01] 0xa0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+003987C8
   +0x000 Name             : 
      +0x000 Data1            : 0x2d2e62aa
      +0x004 Data2            : 0x9ecf
      +0x006 Data3            : 0x43b7
      +0x008 Data4            : 
       [00] 0x82 ''
       [01] 0x19 ''
       [02] 0x94 ''
       [03] 0xe7 ''
       [04] 0xfc ''
       [05] 0x71 'q'
       [06] 0x3d '='
       [07] 0xfe ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xb5 ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaab5
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x38 '8'
    [01] 0x80 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+003A0800
   +0x000 Name             : 
      +0x000 Data1            : 0x4ea43463
      +0x004 Data2            : 0x747c
      +0x006 Data3            : 0x46eb
      +0x008 Data4            : 
       [00] 0x97 ''
       [01] 0xfb ''
       [02] 0xb0 ''
       [03] 0xe5 ''
       [04] 0xc5 ''
       [05] 0xf0 ''
       [06] 0x53 'S'
       [07] 0x6 ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x44 'D'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa44
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x56 'V'
    [01] 0x80 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+003A8858
   +0x000 Name             : 
      +0x000 Data1            : 0x71fd84cd
      +0x004 Data2            : 0x353b
      +0x006 Data3            : 0x464d
      +0x008 Data4            : 
       [00] 0xb7 ''
       [01] 0xa4 ''
       [02] 0x6e 'n'
       [03] 0xa7 ''
       [04] 0xb9 ''
       [05] 0x69 'i'
       [06] 0x95 ''
       [07] 0xcb ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x6d 'm'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa6d
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x58 'X'
    [01] 0x80 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+003B08B0
   +0x000 Name             : 
      +0x000 Data1            : 0x820c59bb
      +0x004 Data2            : 0x274c
      +0x006 Data3            : 0x43b2
      +0x008 Data4            : 
       [00] 0x83 ''
       [01] 0xea ''
       [02] 0xda ''
       [03] 0xc6 ''
       [04] 0x73 's'
       [05] 0x3 ''
       [06] 0x5a 'Z'
       [07] 0x59 'Y'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xb ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa0b
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x3e '>'
    [01] 0x70 'p'
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+003B78F0
   +0x000 Name             : 
      +0x000 Data1            : 0x5e523cb4
      +0x004 Data2            : 0xd397
      +0x006 Data3            : 0x4986
      +0x008 Data4            : 
       [00] 0x87 ''
       [01] 0xbd ''
       [02] 0xa6 ''
       [03] 0xdd ''
       [04] 0x8b ''
       [05] 0x22 '"'
       [06] 0xf4 ''
       [07] 0x55 'U'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x2b '+'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa2b
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x48 'H'
    [01] 0xf0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+003C6938
   +0x000 Name             : 
      +0x000 Data1            : 0x19df145a
      +0x004 Data2            : 0xb1d4
      +0x006 Data3            : 0x453f
      +0x008 Data4            : 
       [00] 0x85 ''
       [01] 0x7 ''
       [02] 0x38 '8'
       [03] 0x81 ''
       [04] 0x66 'f'
       [05] 0x76 'v'
       [06] 0xd7 ''
       [07] 0xf6 ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xc8 ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaac8
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x34 '4'
    [01] 0xa0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+003D0970
   +0x000 Name             : 
      +0x000 Data1            : 0x6b38f7b4
      +0x004 Data2            : 0xad98
      +0x006 Data3            : 0x40e9
      +0x008 Data4            : 
       [00] 0x90 ''
       [01] 0x93 ''
       [02] 0xac ''
       [03] 0xa2 ''
       [04] 0xb5 ''
       [05] 0xa2 ''
       [06] 0x53 'S'
       [07] 0xc4 ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xaa ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaaaa
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x34 '4'
    [01] 0x80 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+003D89A8
   +0x000 Name             : 
      +0x000 Data1            : 0x1fa1f39e
      +0x004 Data2            : 0xfeff
      +0x006 Data3            : 0x4aae
      +0x008 Data4            : 
       [00] 0xbd ''
       [01] 0x7b '{'
       [02] 0x38 '8'
       [03] 0xa0 ''
       [04] 0x70 'p'
       [05] 0xa3 ''
       [06] 0xb6 ''
       [07] 0x9 ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xf7 ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaaf7
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x3a ':'
    [01] 0xa0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+003E29E8
   +0x000 Name             : 
      +0x000 Data1            : 0x961578fe
      +0x004 Data2            : 0xb6b7
      +0x006 Data3            : 0x44c3
      +0x008 Data4            : 
       [00] 0xaf ''
       [01] 0x35 '5'
       [02] 0x6b 'k'
       [03] 0xc7 ''
       [04] 0x5 ''
       [05] 0xcd ''
       [06] 0x2b '+'
       [07] 0x1f ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x2a '*'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa2a
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x28 '('
    [01] 0xe0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+003F0A10
   +0x000 Name             : 
      +0x000 Data1            : 0xcd3bafb6
      +0x004 Data2            : 0x50fb
      +0x006 Data3            : 0x4fe8
      +0x008 Data4            : 
       [00] 0x8e ''
       [01] 0x4e 'N'
       [02] 0xab ''
       [03] 0x74 't'
       [04] 0xd2 ''
       [05] 0xc1 ''
       [06] 0xa6 ''
       [07] 0 ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x50 'P'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa50
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x36 '6'
    [01] 0x50 'P'
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+003F5A48
   +0x000 Name             : 
      +0x000 Data1            : 0x28a03ff4
      +0x004 Data2            : 0x12b3
      +0x006 Data3            : 0x4305
      +0x008 Data4            : 
       [00] 0xa4 ''
       [01] 0x17 ''
       [02] 0xbb ''
       [03] 0x1a ''
       [04] 0x4f 'O'
       [05] 0x94 ''
       [06] 0x8 ''
       [07] 0x1e ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x1b ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa1b
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x4c 'L'
    [01] 0xf1 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00404B98
   +0x000 Name             : 
      +0x000 Data1            : 0xa210f973
      +0x004 Data2            : 0x229d
      +0x006 Data3            : 0x4f4d
      +0x008 Data4            : 
       [00] 0xaa ''
       [01] 0x37 '7'
       [02] 0x98 ''
       [03] 0x95 ''
       [04] 0xe6 ''
       [05] 0xc9 ''
       [06] 0xea ''
       [07] 0xba ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x79 'y'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa79
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x46 'F'
    [01] 0x60 '`'
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+0040ABE0
   +0x000 Name             : 
      +0x000 Data1            : 0xa2f436ea
      +0x004 Data2            : 0xa127
      +0x006 Data3            : 0x4ef8
      +0x008 Data4            : 
       [00] 0x95 ''
       [01] 0x7c '|'
       [02] 0x80 ''
       [03] 0x48 'H'
       [04] 0x60 '`'
       [05] 0x6f 'o'
       [06] 0xf6 ''
       [07] 0x70 'p'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x49 'I'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa49
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x2e '.'
    [01] 0xb0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00415C10
   +0x000 Name             : 
      +0x000 Data1            : 0xe4f61863
      +0x004 Data2            : 0xfe2c
      +0x006 Data3            : 0x4b56
      +0x008 Data4            : 
       [00] 0xa8 ''
       [01] 0xf4 ''
       [02] 0x8 ''
       [03] 0x51 'Q'
       [04] 0x9b ''
       [05] 0xc4 ''
       [06] 0x39 '9'
       [07] 0xdf ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x5d ']'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa5d
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x70 'p'
    [01] 0xa0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+0041FC80
   +0x000 Name             : 
      +0x000 Data1            : 0x25bbfc7
      +0x004 Data2            : 0xe6a9
      +0x006 Data3            : 0x4b8b
      +0x008 Data4            : 
       [00] 0x82 ''
       [01] 0xad ''
       [02] 0x68 'h'
       [03] 0x15 ''
       [04] 0xa1 ''
       [05] 0xae ''
       [06] 0xaf ''
       [07] 0x4a 'J'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xaf ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaaaf
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x2e '.'
    [01] 0xe0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+0042DCB0
   +0x000 Name             : 
      +0x000 Data1            : 0x529d3f93
      +0x004 Data2            : 0xe8e9
      +0x006 Data3            : 0x4e73
      +0x008 Data4            : 
       [00] 0xb1 ''
       [01] 0xe1 ''
       [02] 0xbd ''
       [03] 0xf6 ''
       [04] 0xa9 ''
       [05] 0xd5 ''
       [06] 0x1 ''
       [07] 0x13 ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x1 ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa01
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x2e '.'
    [01] 0xa0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00437CE0
   +0x000 Name             : 
      +0x000 Data1            : 0x94734718
      +0x004 Data2            : 0xbbc
      +0x006 Data3            : 0x47fb
      +0x008 Data4            : 
       [00] 0x96 ''
       [01] 0xa5 ''
       [02] 0xee ''
       [03] 0x7a 'z'
       [04] 0x5a 'Z'
       [05] 0xe6 ''
       [06] 0xa2 ''
       [07] 0xad ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x56 'V'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa56
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x32 '2'
    [01] 0xd0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00444D18
   +0x000 Name             : 
      +0x000 Data1            : 0x9fb1a1f3
      +0x004 Data2            : 0x3b71
      +0x006 Data3            : 0x4324
      +0x008 Data4            : 
       [00] 0xb3 ''
       [01] 0x9a ''
       [02] 0x74 't'
       [03] 0x5c '\'
       [04] 0xbb ''
       [05] 0x1 ''
       [06] 0x5f '_'
       [07] 0xff ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xf8 ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaaf8
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x62 'b'
    [01] 0x70 'p'
    [02] 0x1 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+0045BD80
   +0x000 Name             : 
      +0x000 Data1            : 0x6d6963ab
      +0x004 Data2            : 0x906d
      +0x006 Data3            : 0x4a65
      +0x008 Data4            : 
       [00] 0xa7 ''
       [01] 0xca ''
       [02] 0xbd ''
       [03] 0x40 '@'
       [04] 0xe5 ''
       [05] 0xd6 ''
       [06] 0xaf ''
       [07] 0x2b '+'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x76 'v'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa76
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x30 '0'
    [01] 0xc0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00467DB0
   +0x000 Name             : 
      +0x000 Data1            : 0xdc3641b8
      +0x004 Data2            : 0x2fa8
      +0x006 Data3            : 0x4ed3
      +0x008 Data4            : 
       [00] 0xbc ''
       [01] 0x1f ''
       [02] 0xf9 ''
       [03] 0x96 ''
       [04] 0x2a '*'
       [05] 0x3 ''
       [06] 0x45 'E'
       [07] 0x4b 'K'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xcb ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaacb
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x34 '4'
    [01] 0xd0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00474DE8
   +0x000 Name             : 
      +0x000 Data1            : 0x95e3669d
      +0x004 Data2            : 0x34be
      +0x006 Data3            : 0x4775
      +0x008 Data4            : 
       [00] 0xa6 ''
       [01] 0x51 'Q'
       [02] 0x7e '~'
       [03] 0xa4 ''
       [04] 0x1b ''
       [05] 0x69 'i'
       [06] 0xd8 ''
       [07] 0x9e ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xab ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaaab
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x32 '2'
    [01] 0xe0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00482E20
   +0x000 Name             : 
      +0x000 Data1            : 0x5bedb5cc
      +0x004 Data2            : 0xd830
      +0x006 Data3            : 0x4eb2
      +0x008 Data4            : 
       [00] 0x87 ''
       [01] 0x42 'B'
       [02] 0x2d '-'
       [03] 0x4c 'L'
       [04] 0xc9 ''
       [05] 0xb5 ''
       [06] 0x4f 'O'
       [07] 0x2c ','
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x9a ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa9a
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x62 'b'
    [01] 0xf0 ''
    [02] 0x1 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+004A1E88
   +0x000 Name             : 
      +0x000 Data1            : 0xd912c7bc
      +0x004 Data2            : 0xf098
      +0x006 Data3            : 0x4367
      +0x008 Data4            : 
       [00] 0x92 ''
       [01] 0xba ''
       [02] 0xe9 ''
       [03] 0x11 ''
       [04] 0x8 ''
       [05] 0x3c '<'
       [06] 0x7b '{'
       [07] 0xe ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x56 'V'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa56
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x30 '0'
    [01] 0xc0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+004ADEB8
   +0x000 Name             : 
      +0x000 Data1            : 0x99f03b99
      +0x004 Data2            : 0x98d8
      +0x006 Data3            : 0x49dd
      +0x008 Data4            : 
       [00] 0xa8 ''
       [01] 0xd3 ''
       [02] 0x32 '2'
       [03] 0x19 ''
       [04] 0xd0 ''
       [05] 0xff ''
       [06] 0xe4 ''
       [07] 0x1e ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x6b 'k'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa6b
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x34 '4'
    [01] 0xd0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+004BAEF0
   +0x000 Name             : 
      +0x000 Data1            : 0x1a7e4468
      +0x004 Data2            : 0x2f55
      +0x006 Data3            : 0x4a56
      +0x008 Data4            : 
       [00] 0x90 ''
       [01] 0x3c '<'
       [02] 0x1 ''
       [03] 0x26 '&'
       [04] 0x5e '^'
       [05] 0xb7 ''
       [06] 0x62 'b'
       [07] 0x2b '+'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x6d 'm'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa6d
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x2e '.'
    [01] 0x60 '`'
    [02] 0x1 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+004D0F20
   +0x000 Name             : 
      +0x000 Data1            : 0xb95e9fda
      +0x004 Data2            : 0x26de
      +0x006 Data3            : 0x48d2
      +0x008 Data4            : 
       [00] 0x88 ''
       [01] 0x7 ''
       [02] 0x1f ''
       [03] 0x91 ''
       [04] 0x7 ''
       [05] 0xac ''
       [06] 0x5e '^'
       [07] 0x3a ':'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x36 '6'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa36
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x3a ':'
    [01] 0x50 'P'
    [02] 0x1 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+004E5F60
   +0x000 Name             : 
      +0x000 Data1            : 0x3aceb0c0
      +0x004 Data2            : 0x3c72
      +0x006 Data3            : 0x11e4
      +0x008 Data4            : 
       [00] 0x9a ''
       [01] 0x56 'V'
       [02] 0x74 't'
       [03] 0xd4 ''
       [04] 0x35 '5'
       [05] 0x5 ''
       [06] 0x26 '&'
       [07] 0x46 'F'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x24 '$'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa24
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x2e '.'
    [01] 0xa0 ''
    [02] 0xe ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+005CFF90
   +0x000 Name             : 
      +0x000 Data1            : 0x7ca1024f
      +0x004 Data2            : 0xeb17
      +0x006 Data3            : 0x11e5
      +0x008 Data4            : 
       [00] 0x9d ''
       [01] 0xba ''
       [02] 0x28 '('
       [03] 0xd2 ''
       [04] 0x44 'D'
       [05] 0x7c '|'
       [06] 0x48 'H'
       [07] 0x29 ')'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x2a '*'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa2a
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0xd6 ''
    [01] 0x10 ''
    [02] 0x1 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+005E1068
   +0x000 Name             : 
      +0x000 Data1            : 0xb219e140
      +0x004 Data2            : 0xdffc
      +0x006 Data3            : 0x11e3
      +0x008 Data4            : 
       [00] 0xb9 ''
       [01] 0x56 'V'
       [02] 0 ''
       [03] 0x22 '"'
       [04] 0x68 'h'
       [05] 0x1e ''
       [06] 0x69 'i'
       [07] 0x6 ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xfa ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaafa
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x2e '.'
    [01] 0xf0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+005F0098
   +0x000 Name             : 
      +0x000 Data1            : 0x2366c20f
      +0x004 Data2            : 0xe15a
      +0x006 Data3            : 0x11e3
      +0x008 Data4            : 
       [00] 0x8b ''
       [01] 0xf1 ''
       [02] 0xe4 ''
       [03] 0x11 ''
       [04] 0x5b '['
       [05] 0x28 '('
       [06] 0xbc ''
       [07] 0x50 'P'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x2f '/'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa2f
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x30 '0'
    [01] 0x10 ''
    [02] 0x1 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+006010C8
   +0x000 Name             : 
      +0x000 Data1            : 0x22ea234f
      +0x004 Data2            : 0xe72a
      +0x006 Data3            : 0x11e4
      +0x008 Data4            : 
       [00] 0x91 ''
       [01] 0xf9 ''
       [02] 0x28 '('
       [03] 0xd2 ''
       [04] 0x44 'D'
       [05] 0x7c '|'
       [06] 0x48 'H'
       [07] 0x29 ')'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xf6 ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaaf6
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x5a 'Z'
    [01] 0x70 'p'
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00608128
   +0x000 Name             : 
      +0x000 Data1            : 0xecebcb00
      +0x004 Data2            : 0xd9c8
      +0x006 Data3            : 0x11e4
      +0x008 Data4            : 
       [00] 0xaf ''
       [01] 0x3d '='
       [02] 0x8c ''
       [03] 0xdc ''
       [04] 0xd4 ''
       [05] 0x26 '&'
       [06] 0xc9 ''
       [07] 0x73 's'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x7a 'z'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa7a
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x6c 'l'
    [01] 0x50 'P'
    [02] 0x1 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+0061D198
   +0x000 Name             : 
      +0x000 Data1            : 0x22de1691
      +0x004 Data2            : 0xd65d
      +0x006 Data3            : 0x456a
      +0x008 Data4            : 
       [00] 0x99 ''
       [01] 0x3e '>'
       [02] 0xa2 ''
       [03] 0x53 'S'
       [04] 0xdd ''
       [05] 0x1f ''
       [06] 0x30 '0'
       [07] 0x8c ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x37 '7'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa37
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0xae ''
    [01] 0x5 ''
    [02] 0x2 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+0063D748
   +0x000 Name             : 
      +0x000 Data1            : 0x2eb8953e
      +0x004 Data2            : 0xc191
      +0x006 Data3            : 0x4a5e
      +0x008 Data4            : 
       [00] 0xb2 ''
       [01] 0xac ''
       [02] 0x70 'p'
       [03] 0x5e '^'
       [04] 0xfb ''
       [05] 0x14 ''
       [06] 0xa6 ''
       [07] 0x13 ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x7b '{'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa7b
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x7a 'z'
    [01] 0x5c '\'
    [02] 0x1 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+006533C8
   +0x000 Name             : 
      +0x000 Data1            : 0xb15239d6
      +0x004 Data2            : 0x6a01
      +0x006 Data3            : 0x4808
      +0x008 Data4            : 
       [00] 0xa0 ''
       [01] 0xf7 ''
       [02] 0xb7 ''
       [03] 0xf2 ''
       [04] 0xf ''
       [05] 0x7 ''
       [06] 0x35 '5'
       [07] 0x55 'U'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x8a ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa8a
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x32 '2'
    [01] 0x90 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+0065C400
   +0x000 Name             : 
      +0x000 Data1            : 0x9b680fce
      +0x004 Data2            : 0xad6b
      +0x006 Data3            : 0x4f3a
      +0x008 Data4            : 
       [00] 0xb6 ''
       [01] 0xb ''
       [02] 0xf5 ''
       [03] 0x98 ''
       [04] 0x99 ''
       [05] 0 ''
       [06] 0x34 '4'
       [07] 0x43 'C'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xd6 ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaad6
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x54 'T'
    [01] 0xf0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+0066B458
   +0x000 Name             : 
      +0x000 Data1            : 0xebf342fe
      +0x004 Data2            : 0xb1d3
      +0x006 Data3            : 0x4ef8
      +0x008 Data4            : 
       [00] 0x95 ''
       [01] 0x7c '|'
       [02] 0x80 ''
       [03] 0x48 'H'
       [04] 0x60 '`'
       [05] 0x6f 'o'
       [06] 0xf6 ''
       [07] 0x71 'q'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xbb ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaabb
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x86 ''
    [01] 0xc0 ''
    [02] 0x1 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+006874E0
   +0x000 Name             : 
      +0x000 Data1            : 0xe660ea85
      +0x004 Data2            : 0x58e
      +0x006 Data3            : 0x4b55
      +0x008 Data4            : 
       [00] 0xa5 ''
       [01] 0x4b 'K'
       [02] 0xf0 ''
       [03] 0x2f '/'
       [04] 0x83 ''
       [05] 0xa2 ''
       [06] 0x47 'G'
       [07] 0x7 ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x66 'f'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa66
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0xb8 ''
    [01] 0x70 'p'
    [02] 0x1 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+0069E598
   +0x000 Name             : 
      +0x000 Data1            : 0x6d33944a
      +0x004 Data2            : 0xec75
      +0x006 Data3            : 0x4855
      +0x008 Data4            : 
       [00] 0xa5 ''
       [01] 0x4d 'M'
       [02] 0x80 ''
       [03] 0x9c ''
       [04] 0x75 'u'
       [05] 0x24 '$'
       [06] 0x1f ''
       [07] 0x6c 'l'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x10 ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa10
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x7a 'z'
    [01] 0xc0 ''
    [02] 0x1 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+006BA618
   +0x000 Name             : 
      +0x000 Data1            : 0x462caa21
      +0x004 Data2            : 0x7614
      +0x006 Data3            : 0x4503
      +0x008 Data4            : 
       [00] 0x83 ''
       [01] 0x6e 'n'
       [02] 0x8a ''
       [03] 0xb6 ''
       [04] 0xf4 ''
       [05] 0x66 'f'
       [06] 0x23 '#'
       [07] 0x31 '1'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xe7 ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaae7
   +0x012 Type             : 0x9 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x60 '`'
    [01] 0xc0 ''
    [02] 0x2 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+006E6678
   +0x000 Name             : 
      +0x000 Data1            : 0x3a738b36
      +0x004 Data2            : 0xb9c5
      +0x006 Data3            : 0x4763
      +0x008 Data4            : 
       [00] 0xab ''
       [01] 0xbd ''
       [02] 0x6c 'l'
       [03] 0xbd ''
       [04] 0x4b 'K'
       [05] 0x25 ''
       [06] 0xf9 ''
       [07] 0xff ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x68 'h'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa68
   +0x012 Type             : 0x9 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x40 '@'
    [01] 0xc0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+006F26B8
   +0x000 Name             : 
      +0x000 Data1            : 0x7c04a583
      +0x004 Data2            : 0x9e3e
      +0x006 Data3            : 0x4f1c
      +0x008 Data4            : 
       [00] 0xad ''
       [01] 0x65 'e'
       [02] 0xe0 ''
       [03] 0x52 'R'
       [04] 0x68 'h'
       [05] 0xd0 ''
       [06] 0xb4 ''
       [07] 0xd1 ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xcf ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaacf
   +0x012 Type             : 0x9 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x48 'H'
    [01] 0xe0 ''
    [02] 0x10 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00800700
   +0x000 Name             : 
      +0x000 Data1            : 0xf6c64348
      +0x004 Data2            : 0x45ec
      +0x006 Data3            : 0x11ec
      +0x008 Data4            : 
       [00] 0x97 ''
       [01] 0x26 '&'
       [02] 0xf4 ''
       [03] 0x2a '*'
       [04] 0x7d '}'
       [05] 0xcb ''
       [06] 0x92 ''
       [07] 0x5d ']'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x6d 'm'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa6d
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0xb4 ''
    [01] 0x50 'P'
    [02] 0x1 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+008157B8
   +0x000 Name             : 
      +0x000 Data1            : 0x168d1a6e
      +0x004 Data2            : 0xf4a5
      +0x006 Data3            : 0x448a
      +0x008 Data4            : 
       [00] 0x9e ''
       [01] 0x95 ''
       [02] 0x79 'y'
       [03] 0x56 'V'
       [04] 0x61 'a'
       [05] 0xbb ''
       [06] 0x30 '0'
       [07] 0x67 'g'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xfa ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaafa
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x58 'X'
    [01] 0x60 '`'
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+0081B810
   +0x000 Name             : 
      +0x000 Data1            : 0x93b80004
      +0x004 Data2            : 0x9fb3
      +0x006 Data3            : 0x11d4
      +0x008 Data4            : 
       [00] 0x9a ''
       [01] 0x3a ':'
       [02] 0 ''
       [03] 0x90 ''
       [04] 0x27 '''
       [05] 0x3f '?'
       [06] 0xc1 ''
       [07] 0x4d 'M'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x6 ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa06
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x34 '4'
    [01] 0x60 '`'
    [02] 0x1 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00831848
   +0x000 Name             : 
      +0x000 Data1            : 0x128fb770
      +0x004 Data2            : 0x5e79
      +0x006 Data3            : 0x4176
      +0x008 Data4            : 
       [00] 0x9e ''
       [01] 0x51 'Q'
       [02] 0x9b ''
       [03] 0xb2 ''
       [04] 0x68 'h'
       [05] 0xa1 ''
       [06] 0x7d '}'
       [07] 0xd1 ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x81 ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa81
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x7e '~'
    [01] 0x10 ''
    [02] 0x1 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+008428C8
   +0x000 Name             : 
      +0x000 Data1            : 0x5be3bdf4
      +0x004 Data2            : 0x53cf
      +0x006 Data3            : 0x46a3
      +0x008 Data4            : 
       [00] 0xa6 ''
       [01] 0xa9 ''
       [02] 0x73 's'
       [03] 0xc3 ''
       [04] 0x4a 'J'
       [05] 0x6e 'n'
       [06] 0x5e '^'
       [07] 0xe3 ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x65 'e'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa65
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x3c '<'
    [01] 0xe0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00850908
   +0x000 Name             : 
      +0x000 Data1            : 0x7ed510aa
      +0x004 Data2            : 0x9cdc
      +0x006 Data3            : 0x49d2
      +0x008 Data4            : 
       [00] 0xa3 ''
       [01] 0x6 ''
       [02] 0x6e 'n'
       [03] 0x11 ''
       [04] 0xe3 ''
       [05] 0x59 'Y'
       [06] 0xf9 ''
       [07] 0xb3 ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x69 'i'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa69
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x70 'p'
    [01] 0x70 'p'
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00857978
   +0x000 Name             : 
      +0x000 Data1            : 0x6fbd6b56
      +0x004 Data2            : 0xe302
      +0x006 Data3            : 0x4560
      +0x008 Data4            : 
       [00] 0x85 ''
       [01] 0xf4 ''
       [02] 0xe ''
       [03] 0x78 'x'
       [04] 0xfb ''
       [05] 0x73 's'
       [06] 0x19 ''
       [07] 0x22 '"'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xa ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa0a
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x60 '`'
    [01] 0x70 'p'
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+0085E9D8
   +0x000 Name             : 
      +0x000 Data1            : 0xe08592c7
      +0x004 Data2            : 0x55f6
      +0x006 Data3            : 0x4f90
      +0x008 Data4            : 
       [00] 0xbe ''
       [01] 0x56 'V'
       [02] 0x32 '2'
       [03] 0x73 's'
       [04] 0x56 'V'
       [05] 0xaa ''
       [06] 0x14 ''
       [07] 0x62 'b'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x4a 'J'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa4a
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x58 'X'
    [01] 0x40 '@'
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00862A30
   +0x000 Name             : 
      +0x000 Data1            : 0x1f7decf3
      +0x004 Data2            : 0xc2dc
      +0x006 Data3            : 0x49ee
      +0x008 Data4            : 
       [00] 0xa9 ''
       [01] 0x32 '2'
       [02] 0x80 ''
       [03] 0x74 't'
       [04] 0x71 'q'
       [05] 0x8c ''
       [06] 0xdc ''
       [07] 0x6d 'm'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xcc ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaacc
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x68 'h'
    [01] 0x60 '`'
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00868A98
   +0x000 Name             : 
      +0x000 Data1            : 0x5d028f9c
      +0x004 Data2            : 0xbb17
      +0x006 Data3            : 0x4ff5
      +0x008 Data4            : 
       [00] 0x8c ''
       [01] 0x61 'a'
       [02] 0xdb ''
       [03] 0xb4 ''
       [04] 0x47 'G'
       [05] 0x4e 'N'
       [06] 0x4a 'J'
       [07] 0x13 ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xd5 ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaad5
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x66 'f'
    [01] 0xb0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00873B00
   +0x000 Name             : 
      +0x000 Data1            : 0x7e374e25
      +0x004 Data2            : 0x8e01
      +0x006 Data3            : 0x4fee
      +0x008 Data4            : 
       [00] 0x87 ''
       [01] 0xf2 ''
       [02] 0x39 '9'
       [03] 0xc ''
       [04] 0x23 '#'
       [05] 0xc6 ''
       [06] 0x6 ''
       [07] 0xcd ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xaf ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaaaf
   +0x012 Type             : 0x2 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0xc4 ''
    [01] 0x1d ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+008758C8
   +0x000 Name             : 
      +0x000 Data1            : 0x25462cda
      +0x004 Data2            : 0x221f
      +0x006 Data3            : 0x47df
      +0x008 Data4            : 
       [00] 0xac ''
       [01] 0x1d ''
       [02] 0x25 ''
       [03] 0x9c ''
       [04] 0xfa ''
       [05] 0xa4 ''
       [06] 0xe3 ''
       [07] 0x26 '&'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x3b ';'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa3b
   +0x012 Type             : 0x2 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x31 '1'
    [01] 0x87 ''
    [02] 0x2 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+0089E000
   +0x000 Name             : 
      +0x000 Data1            : 0x4b55f0bc
      +0x004 Data2            : 0x8b1a
      +0x006 Data3            : 0x11ec
      +0x008 Data4            : 
       [00] 0xbd ''
       [01] 0x4b 'K'
       [02] 0xf4 ''
       [03] 0x2a '*'
       [04] 0x7d '}'
       [05] 0xcb ''
       [06] 0x92 ''
       [07] 0x5d ']'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x7 ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa07
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x6c 'l'
    [01] 0x30 '0'
    [02] 0xb ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00951070
   +0x000 Name             : 
      +0x000 Data1            : 0xb6f44cc0
      +0x004 Data2            : 0x9e45
      +0x006 Data3            : 0x11df
      +0x008 Data4            : 
       [00] 0xbe ''
       [01] 0x21 '!'
       [02] 0 ''
       [03] 0x2 ''
       [04] 0xa5 ''
       [05] 0xd5 ''
       [06] 0xc5 ''
       [07] 0x1b ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x6a 'j'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa6a
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0xa ''
    [01] 0xc1 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+0095D180
   +0x000 Name             : 
      +0x000 Data1            : 0x100c2cfa
      +0x004 Data2            : 0xb586
      +0x006 Data3            : 0x4198
      +0x008 Data4            : 
       [00] 0x9b ''
       [01] 0x4c 'L'
       [02] 0x16 ''
       [03] 0x83 ''
       [04] 0xd1 ''
       [05] 0x95 ''
       [06] 0xb1 ''
       [07] 0xda ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x9b ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa9b
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x16 ''
    [01] 0x81 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+00965298
   +0x000 Name             : 
      +0x000 Data1            : 0x4cef31da
      +0x004 Data2            : 0x8682
      +0x006 Data3            : 0x4274
      +0x008 Data4            : 
       [00] 0x9c ''
       [01] 0xc4 ''
       [02] 0xae ''
       [03] 0xe7 ''
       [04] 0x51 'Q'
       [05] 0x6a 'j'
       [06] 0x5e '^'
       [07] 0x7b '{'
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0xb1 ''
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaab1
   +0x012 Type             : 0x9 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x38 '8'
    [01] 0x80 ''
    [02] 0x1 ''
   +0x017 State            : 0xf8 ''
kd> dt -b EFI_FFS_FILE_HEADER 0`3ec71000+0097D2D0
   +0x000 Name             : 
      +0x000 Data1            : 0x16036a73
      +0x004 Data2            : 0xe8ef
      +0x006 Data3            : 0x46d0
      +0x008 Data4            : 
       [00] 0x95 ''
       [01] 0x3c '<'
       [02] 0x9b ''
       [03] 0x8e ''
       [04] 0x96 ''
       [05] 0x52 'R'
       [06] 0x7d '}'
       [07] 0x13 ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x5d ']'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa5d
   +0x012 Type             : 0x7 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x44 'D'
    [01] 0 ''
    [02] 0x3 ''
   +0x017 State            : 0xf8 ''

只输出GUID:

$<d:\gedu\uefi\dumpFVMAIN_EFI_FFS_FILE_HEADER_GUID.txt
kd> db 0`3ec71000+00000048 l10
00000000`3ec71048  e7 0e 51 fc dc ff d4 11-bd 41 00 80 c7 3c 88 81  ..Q......A...<..
kd> 
db 0`3ec71000+00000088 l10
00000000`3ec71088  7f cb a2 d6 18 6a 2f 4e-b4 3b 99 20 a7 33 70 0a  .....j/N.;. .3p.
kd> db 0`3ec71000+0004A0B8 l10
00000000`3ecbb0b8  57 72 cf 80 ab 87 f9 47-a3 fe d5 0b 76 d8 95 41  Wr.....G....v..A
kd> db 0`3ec71000+000549E8 l10
00000000`3ecc59e8  7e 77 d9 b8 2a d7 1f 45-9b db ba fb 52 a6 84 15  ~w..*..E....R...
kd> db 0`3ec71000+00061A58 l10
00000000`3ecd2a58  c4 f8 01 b6 b7 43 84 47-95 b1 f4 22 6c b4 0c ee  .....C.G..."l...
kd> db 0`3ec71000+000A1AA8 l10
00000000`3ed12aa8  e9 97 06 f8 d6 7f 65 46-86 46 88 e3 3e f7 1d fc  ......eF.F..>...
kd> db 0`3ec71000+000ABB00 l10
00000000`3ed1cb00  0a 7f 85 42 f2 13 21 4b-8a 23 53 d3 f7 14 b8 40  ...B..!K.#S....@
kd> 
db 0`3ec71000+000DBB70 l10
00000000`3ed4cb70  a7 e6 ab fc 53 79 84 4a-b7 ec d2 9e 89 b6 2e 87  ....Sy.J........
kd> db 0`3ec71000+0010BBE0 l10
00000000`3ed7cbe0  c7 e4 28 4b 36 ff 10 4e-93 cf a8 21 59 e7 77 c5  ..(K6..N...!Y.w.
kd> db 0`3ec71000+0014BC48 l10
00000000`3edbcc48  2d f6 36 b3 35 41 55 4a-ae 4e 49 71 bb f0 88 5d  -.6.5AUJ.NIq...]
kd> db 0`3ec71000+0017BCC0 l10
00000000`3edeccc0  67 02 6e 4c 7d c7 0d 41-81 00 14 95 91 1a 98 9d  g.nL}..A........
kd> db 0`3ec71000+00180D18 l10
00000000`3edf1d18  62 4d 8c 34 bd bf 82 48-9e ce c8 0b b1 c4 78 3b  bM.4...H......x;
kd> db 0`3ec71000+001A0D68 l10
00000000`3ee11d68  14 fd f3 b1 d1 9b cc 48-92 58 e2 80 7e cb 1b 84  .......H.X..~...
kd> db 0`3ec71000+001A5DC0 l10
00000000`3ee16dc0  26 e2 7d ce 7c ae ec 11-a1 54 f4 2a 7d cb 92 5d  &.}.|....T.*}..]
kd> db 0`3ec71000+001E5E10 l10
00000000`3ee56e10  7e 5b 32 df 7c ae ec 11-a1 54 f4 2a 7d cb 92 5d  ~[2.|....T.*}..]
kd> db 0`3ec71000+00225E60 l10
00000000`3ee96e60  d5 e4 d2 cb 68 70 f5 4f-b4 62 98 22 b4 ad 8d 60  ....hp.O.b."...`
kd> 
db 0`3ec71000+00265EC0 l10
00000000`3eed6ec0  76 ea 5c fe 72 4f e8 49-98 6f 2c d8 99 df fe 5d  v.\.rO.I.o,....]
kd> db 0`3ec71000+0026EF48 l10
00000000`3eedff48  99 f3 cc 51 df 4f 55 4e-a4 5b e1 23 f8 4d 45 6a  ...Q.OUN.[.#.MEj
kd> db 0`3ec71000+00276F88 l10
00000000`3eee7f88  ec dc 8e 40 6d cf 7c 47-a5 a8 b4 84 4e 3d e2 81  ...@m.|G....N=..
kd> db 0`3ec71000+00281FC8 l10
00000000`3eef2fc8  28 0c cb cc 24 4b d5 11-9a 5a 00 90 27 3f c1 4d  (...$K...Z..'?.M
kd> db 0`3ec71000+0028B010 l10
00000000`3eefc010  06 39 86 9e 0f a4 75 48-97 7f 5b 93 ff 23 7f c6  .9....uH..[..#..
kd> db 0`3ec71000+00297048 l10
00000000`3ef08048  e7 63 51 9a 29 5c 3f 45-82 5c 83 7a 46 a8 1e 15  .cQ.)\?E.\.zF...
kd> db 0`3ec71000+0029C098 l10
00000000`3ef0d098  7c 1f 37 de c4 de 21 4d-ad f1 59 3a bc c1 58 82  |.7...!M..Y:..X.
kd> db 0`3ec71000+002A30E8 l10
00000000`3ef140e8  1e 04 ea 49 52 67 ca 42-b0 b1 73 44 fe 25 46 b7  ...IRg.B..sD.%F.
kd> db 0`3ec71000+002A9148 l10
00000000`3ef1a148  7f d6 99 f0 ae 71 36 4c-b2 a3 dc eb 0e b2 b7 d8  .....q6L........
kd> 
db 0`3ec71000+002AE1B0 l10
00000000`3ef1f1b0  4c 98 85 95 27 f0 e9 45-af df ad aa 6d fa aa c7  L...'..E....m...
kd> db 0`3ec71000+002B5200 l10
00000000`3ef26200  2c e4 22 96 38 8e 08 4a-9e 8f 54 f7 84 65 2f 6b  ,.".8..J..T..e/k
kd> db 0`3ec71000+002C0258 l10
00000000`3ef31258  75 27 e6 b8 0a bb f0 43-a8 43 5b e8 b1 4f 8c cd  u'.....C.C[..O..
kd> db 0`3ec71000+002C62B8 l10
00000000`3ef372b8  42 86 d8 f9 37 07 bc 49-81 b5 68 89 cd 57 d9 ea  B...7..I..h..W..
kd> db 0`3ec71000+002CF308 l10
00000000`3ef40308  eb 5b 6e 19 3e 98 58 4b-82 92 bc 31 0f 69 62 df  .[n.>.XK...1.ib.
kd> db 0`3ec71000+002D7378 l10
00000000`3ef48378  9e ae a2 ec 94 75 01 49-87 1c 44 9d a1 a1 16 60  .....u.I..D....`
kd> db 0`3ec71000+002E03A8 l10
00000000`3ef513a8  54 a8 35 93 88 4b ec 11-a8 ee f4 2a 7d cb 92 5d  T.5..K.....*}..]
kd> db 0`3ec71000+00310400 l10
00000000`3ef81400  b1 e6 d6 b4 a0 b2 79 4c-8b f1 3a f8 c4 85 ec 3d  ......yL..:....=
kd> db 0`3ec71000+00316458 l10
00000000`3ef87458  66 36 bb 1c fe 99 ec 11-99 27 f4 2a 7d cb 92 5d  f6.......'.*}..]
kd> 
db 0`3ec71000+003274A0 l10
00000000`3ef984a0  cc 2b 14 10 5c 7b ec 11-b4 5f f4 2a 7d cb 92 5d  .+..\{..._.*}..]
kd> db 0`3ec71000+003304F8 l10
00000000`3efa14f8  d0 0d 00 e4 32 b7 ed 11-88 7a f4 2a 7d cb 92 5d  ....2....z.*}..]
kd> db 0`3ec71000+00337548 l10
00000000`3efa8548  c8 b4 95 e4 93 47 9b 42-a5 c5 5e 5f d6 0b f6 3b  .....G.B..^_...;
kd> db 0`3ec71000+0033F590 l10
00000000`3efb0590  d8 9a f8 ea e1 92 ec 11-b5 1d f4 2a 7d cb 92 5d  ...........*}..]
kd> db 0`3ec71000+00347608 l10
00000000`3efb8608  0e 43 fe bd 2a 8f b0 4d-99 91 6f 85 65 94 77 7e  .C..*..M..o.e.w~
kd> db 0`3ec71000+00353638 l10
00000000`3efc4638  91 0e f5 b7 59 a7 2c 41-ad e4 dc d0 3e 7f 7c 28  ....Y.,A....>.|(
kd> db 0`3ec71000+00364668 l10
00000000`3efd5668  34 ae 14 39 46 b9 ec 11-9d 33 f4 2a 7d cb 92 5d  4..9F....3.*}..]
kd> db 0`3ec71000+003706C0 l10
00000000`3efe16c0  2a 7c 6e 19 b2 37 85 4b-86 83 71 85 88 95 24 49  *|n..7.K..q...$I
kd> db 0`3ec71000+00377710 l10
00000000`3efe8710  b7 12 06 24 63 a0 d4 11-9a 3a 00 90 27 3f c1 4d  ...$c....:..'?.M
kd> 
db 0`3ec71000+00384748 l10
00000000`3eff5748  a7 b4 b4 9f c0 42 cd 4b-85 40 9b cc 67 11 f8 3e  .....B.K.@..g..>
kd> db 0`3ec71000+0038E790 l10
00000000`3efff790  cf 62 2e 2d cf 9e b7 43-82 19 94 e7 fc 71 3d fe  .b.-...C.....q=.
kd> db 0`3ec71000+003987C8 l10
00000000`3f0097c8  aa 62 2e 2d cf 9e b7 43-82 19 94 e7 fc 71 3d fe  .b.-...C.....q=.
kd> db 0`3ec71000+003A0800 l10
00000000`3f011800  63 34 a4 4e 7c 74 eb 46-97 fb b0 e5 c5 f0 53 06  c4.N|t.F......S.
kd> db 0`3ec71000+003A8858 l10
00000000`3f019858  cd 84 fd 71 3b 35 4d 46-b7 a4 6e a7 b9 69 95 cb  ...q;5MF..n..i..
kd> db 0`3ec71000+003B08B0 l10
00000000`3f0218b0  bb 59 0c 82 4c 27 b2 43-83 ea da c6 73 03 5a 59  .Y..L'.C....s.ZY
kd> db 0`3ec71000+003B78F0 l10
00000000`3f0288f0  b4 3c 52 5e 97 d3 86 49-87 bd a6 dd 8b 22 f4 55  .<R^...I.....".U
kd> db 0`3ec71000+003C6938 l10
00000000`3f037938  5a 14 df 19 d4 b1 3f 45-85 07 38 81 66 76 d7 f6  Z.....?E..8.fv..
kd> db 0`3ec71000+003D0970 l10
00000000`3f041970  b4 f7 38 6b 98 ad e9 40-90 93 ac a2 b5 a2 53 c4  ..8k...@......S.
kd> 
db 0`3ec71000+003D89A8 l10
00000000`3f0499a8  9e f3 a1 1f ff fe ae 4a-bd 7b 38 a0 70 a3 b6 09  .......J.{8.p...
kd> db 0`3ec71000+003E29E8 l10
00000000`3f0539e8  fe 78 15 96 b7 b6 c3 44-af 35 6b c7 05 cd 2b 1f  .x.....D.5k...+.
kd> db 0`3ec71000+003F0A10 l10
00000000`3f061a10  b6 af 3b cd fb 50 e8 4f-8e 4e ab 74 d2 c1 a6 00  ..;..P.O.N.t....
kd> db 0`3ec71000+003F5A48 l10
00000000`3f066a48  f4 3f a0 28 b3 12 05 43-a4 17 bb 1a 4f 94 08 1e  .?.(...C....O...
kd> db 0`3ec71000+00404B98 l10
00000000`3f075b98  73 f9 10 a2 9d 22 4d 4f-aa 37 98 95 e6 c9 ea ba  s...."MO.7......
kd> db 0`3ec71000+0040ABE0 l10
00000000`3f07bbe0  ea 36 f4 a2 27 a1 f8 4e-95 7c 80 48 60 6f f6 70  .6..'..N.|.H`o.p
kd> db 0`3ec71000+00415C10 l10
00000000`3f086c10  63 18 f6 e4 2c fe 56 4b-a8 f4 08 51 9b c4 39 df  c...,.VK...Q..9.
kd> db 0`3ec71000+0041FC80 l10
00000000`3f090c80  c7 bf 5b 02 a9 e6 8b 4b-82 ad 68 15 a1 ae af 4a  ..[....K..h....J
kd> db 0`3ec71000+0042DCB0 l10
00000000`3f09ecb0  93 3f 9d 52 e9 e8 73 4e-b1 e1 bd f6 a9 d5 01 13  .?.R..sN........
kd> 
db 0`3ec71000+00437CE0 l10
00000000`3f0a8ce0  18 47 73 94 bc 0b fb 47-96 a5 ee 7a 5a e6 a2 ad  .Gs....G...zZ...
kd> db 0`3ec71000+00444D18 l10
00000000`3f0b5d18  f3 a1 b1 9f 71 3b 24 43-b3 9a 74 5c bb 01 5f ff  ....q;$C..t\.._.
kd> db 0`3ec71000+0045BD80 l10
00000000`3f0ccd80  ab 63 69 6d 6d 90 65 4a-a7 ca bd 40 e5 d6 af 2b  .cimm.eJ...@...+
kd> db 0`3ec71000+00467DB0 l10
00000000`3f0d8db0  b8 41 36 dc a8 2f d3 4e-bc 1f f9 96 2a 03 45 4b  .A6../.N....*.EK
kd> db 0`3ec71000+00474DE8 l10
00000000`3f0e5de8  9d 66 e3 95 be 34 75 47-a6 51 7e a4 1b 69 d8 9e  .f...4uG.Q~..i..
kd> db 0`3ec71000+00482E20 l10
00000000`3f0f3e20  cc b5 ed 5b 30 d8 b2 4e-87 42 2d 4c c9 b5 4f 2c  ...[0..N.B-L..O,
kd> db 0`3ec71000+004A1E88 l10
00000000`3f112e88  bc c7 12 d9 98 f0 67 43-92 ba e9 11 08 3c 7b 0e  ......gC.....<{.
kd> db 0`3ec71000+004ADEB8 l10
00000000`3f11eeb8  99 3b f0 99 d8 98 dd 49-a8 d3 32 19 d0 ff e4 1e  .;.....I..2.....
kd> db 0`3ec71000+004BAEF0 l10
00000000`3f12bef0  68 44 7e 1a 55 2f 56 4a-90 3c 01 26 5e b7 62 2b  hD~.U/VJ.<.&^.b+
kd> 
db 0`3ec71000+004D0F20 l10
00000000`3f141f20  da 9f 5e b9 de 26 d2 48-88 07 1f 91 07 ac 5e 3a  ..^..&.H......^:
kd> db 0`3ec71000+004E5F60 l10
00000000`3f156f60  c0 b0 ce 3a 72 3c e4 11-9a 56 74 d4 35 05 26 46  ...:r<...Vt.5.&F
kd> db 0`3ec71000+005CFF90 l10
00000000`3f240f90  4f 02 a1 7c 17 eb e5 11-9d ba 28 d2 44 7c 48 29  O..|......(.D|H)
kd> db 0`3ec71000+005E1068 l10
00000000`3f252068  40 e1 19 b2 fc df e3 11-b9 56 00 22 68 1e 69 06  @........V."h.i.
kd> db 0`3ec71000+005F0098 l10
00000000`3f261098  0f c2 66 23 5a e1 e3 11-8b f1 e4 11 5b 28 bc 50  ..f#Z.......[(.P
kd> db 0`3ec71000+006010C8 l10
00000000`3f2720c8  4f 23 ea 22 2a e7 e4 11-91 f9 28 d2 44 7c 48 29  O#."*.....(.D|H)
kd> db 0`3ec71000+00608128 l10
00000000`3f279128  00 cb eb ec c8 d9 e4 11-af 3d 8c dc d4 26 c9 73  .........=...&.s
kd> 
db 0`3ec71000+0061D198 l10
00000000`3f28e198  91 16 de 22 5d d6 6a 45-99 3e a2 53 dd 1f 30 8c  ..."].jE.>.S..0.
kd> db 0`3ec71000+0063D748 l10
00000000`3f2ae748  3e 95 b8 2e 91 c1 5e 4a-b2 ac 70 5e fb 14 a6 13  >.....^J..p^....
kd> db 0`3ec71000+006533C8 l10
00000000`3f2c43c8  d6 39 52 b1 01 6a 08 48-a0 f7 b7 f2 0f 07 35 55  .9R..j.H......5U
kd> db 0`3ec71000+0065C400 l10
00000000`3f2cd400  ce 0f 68 9b 6b ad 3a 4f-b6 0b f5 98 99 00 34 43  ..h.k.:O......4C
kd> db 0`3ec71000+0066B458 l10
00000000`3f2dc458  fe 42 f3 eb d3 b1 f8 4e-95 7c 80 48 60 6f f6 71  .B.....N.|.H`o.q
kd> db 0`3ec71000+006874E0 l10
00000000`3f2f84e0  85 ea 60 e6 8e 05 55 4b-a5 4b f0 2f 83 a2 47 07  ..`...UK.K./..G.
kd> db 0`3ec71000+0069E598 l10
00000000`3f30f598  4a 94 33 6d 75 ec 55 48-a5 4d 80 9c 75 24 1f 6c  J.3mu.UH.M..u$.l
kd> db 0`3ec71000+006BA618 l10
00000000`3f32b618  21 aa 2c 46 14 76 03 45-83 6e 8a b6 f4 66 23 31  !.,F.v.E.n...f#1
kd> 
db 0`3ec71000+006E6678 l10
00000000`3f357678  36 8b 73 3a c5 b9 63 47-ab bd 6c bd 4b 25 f9 ff  6.s:..cG..l.K%..
kd> db 0`3ec71000+006F26B8 l10
00000000`3f3636b8  83 a5 04 7c 3e 9e 1c 4f-ad 65 e0 52 68 d0 b4 d1  ...|>..O.e.Rh...
kd> db 0`3ec71000+00800700 l10
00000000`3f471700  48 43 c6 f6 ec 45 ec 11-97 26 f4 2a 7d cb 92 5d  HC...E...&.*}..]
kd> db 0`3ec71000+008157B8 l10
00000000`3f4867b8  6e 1a 8d 16 a5 f4 8a 44-9e 95 79 56 61 bb 30 67  n......D..yVa.0g
kd> db 0`3ec71000+0081B810 l10
00000000`3f48c810  04 00 b8 93 b3 9f d4 11-9a 3a 00 90 27 3f c1 4d  .........:..'?.M
kd> db 0`3ec71000+00831848 l10
00000000`3f4a2848  70 b7 8f 12 79 5e 76 41-9e 51 9b b2 68 a1 7d d1  p...y^vA.Q..h.}.
kd> db 0`3ec71000+008428C8 l10
00000000`3f4b38c8  f4 bd e3 5b cf 53 a3 46-a6 a9 73 c3 4a 6e 5e e3  ...[.S.F..s.Jn^.
kd> db 0`3ec71000+00850908 l10
00000000`3f4c1908  aa 10 d5 7e dc 9c d2 49-a3 06 6e 11 e3 59 f9 b3  ...~...I..n..Y..
kd> db 0`3ec71000+00857978 l10
00000000`3f4c8978  56 6b bd 6f 02 e3 60 45-85 f4 0e 78 fb 73 19 22  Vk.o..`E...x.s."
kd> db 0`3ec71000+0085E9D8 l10
00000000`3f4cf9d8  c7 92 85 e0 f6 55 90 4f-be 56 32 73 56 aa 14 62  .....U.O.V2sV..b
kd> db 0`3ec71000+00862A30 l10
00000000`3f4d3a30  f3 ec 7d 1f dc c2 ee 49-a9 32 80 74 71 8c dc 6d  ..}....I.2.tq..m
kd> db 0`3ec71000+00868A98 l10
00000000`3f4d9a98  9c 8f 02 5d 17 bb f5 4f-8c 61 db b4 47 4e 4a 13  ...]...O.a..GNJ.
kd> 
db 0`3ec71000+00873B00 l10
00000000`3f4e4b00  25 4e 37 7e 01 8e ee 4f-87 f2 39 0c 23 c6 06 cd  %N7~...O..9.#...
kd> db 0`3ec71000+008758C8 l10
00000000`3f4e68c8  da 2c 46 25 1f 22 df 47-ac 1d 25 9c fa a4 e3 26  .,F%.".G..%....&
kd> db 0`3ec71000+0089E000 l10
00000000`3f50f000  bc f0 55 4b 1a 8b ec 11-bd 4b f4 2a 7d cb 92 5d  ..UK.....K.*}..]
kd> db 0`3ec71000+00951070 l10
00000000`3f5c2070  c0 4c f4 b6 45 9e df 11-be 21 00 02 a5 d5 c5 1b  .L..E....!......
kd> db 0`3ec71000+0095D180 l10
00000000`3f5ce180  fa 2c 0c 10 86 b5 98 41-9b 4c 16 83 d1 95 b1 da  .,.....A.L......
kd> db 0`3ec71000+00965298 l10
00000000`3f5d6298  da 31 ef 4c 82 86 74 42-9c c4 ae e7 51 6a 5e 7b  .1.L..tB....Qj^{
kd> db 0`3ec71000+0097D2D0 l10
00000000`3f5ee2d0  73 6a 03 16 ef e8 d0 46-95 3c 9b 8e 96 52 7d 13  sj.....F.<...R}.

了解底层具体的数据结构,心中有数,见内存中的字节,也是有结构、有意义的了。
熟悉了这些具体的特征,有时便能像福尔摩斯,只需瞄一眼,却可脱口而出:“你是从阿富汗回来的吧?”

2024.05.02
FVMAIN.Fv 全局观:

不在FVMAIN.Fv的其他Module:


ArmPlatformPrePiUniCore (Fixed Flash Address, BaseAddress=0x0000201160, EntryPoint=0x0000208698, Type=TE)

想找一下BL33_AP_UEFI的资料,用GUID 9E21FD93-9C72-4c15-8C4B-E77F1DB2D792搜了一下:
先找到:https://www.binarly.io/blog/the-dark-side-of-uefi-a-technical-deep-dive-into-cross-silicon-exploitation
再找到一个不错的工具:https://github.com/LongSoft/UEFITool/releases

UEFI一个更好的全局观浮现出来:

2024.05.03
有了工具的帮助,再来进一步拆解一下FVMAIN.Fv,先试第一个Firmware File, Freeform,内容包含两个Dxe的EFI_GUID:

dt -b EFI_FIRMWARE_VOLUME_HEADER 0`3ec71000
   +0x000 ZeroVector       : 
    [00] 0 ''
    [01] 0 ''
    [02] 0 ''
    [03] 0 ''
    [04] 0 ''
    [05] 0 ''
    [06] 0 ''
    [07] 0 ''
    [08] 0 ''
    [09] 0 ''
    [10] 0 ''
    [11] 0 ''
    [12] 0 ''
    [13] 0 ''
    [14] 0 ''
    [15] 0 ''
   +0x010 FileSystemGuid   : 
      +0x000 Data1            : 0x8c8ce578
      +0x004 Data2            : 0x8a3d
      +0x006 Data3            : 0x4f1c
      +0x008 Data4            : 
       [00] 0x99 ''
       [01] 0x35 '5'
       [02] 0x89 ''
       [03] 0x61 'a'
       [04] 0x85 ''
       [05] 0xc3 ''
       [06] 0x2d '-'
       [07] 0xd3 ''
   +0x020 FvLength         : 0x9ad340
   +0x028 Signature        : 0x4856465f
   +0x02c Attributes       : 0x3feff
   +0x030 HeaderLength     : 0x48
   +0x032 Checksum         : 0xb767
   +0x034 ExtHeaderOffset  : 0
   +0x036 Reserved         : 
    [00] 0 ''
   +0x037 Revision         : 0x2 ''
   +0x038 BlockMap         : 
    [00] 
      +0x000 NumBlocks        : 0x26b4d

    +0x004 Length           : 0x40
dt -b EFI_FFS_FILE_HEADER 0`3ec71000+48
   +0x000 Name             : 
      +0x000 Data1            : 0xfc510ee7
      +0x004 Data2            : 0xffdc
      +0x006 Data3            : 0x11d4
      +0x008 Data4            : 
       [00] 0xbd ''
       [01] 0x41 'A'
       [02] 0 ''
       [03] 0x80 ''
       [04] 0xc7 ''
       [05] 0x3c '<'
       [06] 0x88 ''
       [07] 0x81 ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x36 '6'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa36
   +0x012 Type             : 0x2 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x3c '<'
    [01] 0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
dt -b EFI_FIRMWARE_VOLUME_HEADER 0`3ec71000
   +0x000 ZeroVector       : 
    [00] 0 ''
    [01] 0 ''
    [02] 0 ''
    [03] 0 ''
    [04] 0 ''
    [05] 0 ''
    [06] 0 ''
    [07] 0 ''
    [08] 0 ''
    [09] 0 ''
    [10] 0 ''
    [11] 0 ''
    [12] 0 ''
    [13] 0 ''
    [14] 0 ''
    [15] 0 ''
   +0x010 FileSystemGuid   : 
      +0x000 Data1            : 0x8c8ce578
      +0x004 Data2            : 0x8a3d
      +0x006 Data3            : 0x4f1c
      +0x008 Data4            : 
       [00] 0x99 ''
       [01] 0x35 '5'
       [02] 0x89 ''
       [03] 0x61 'a'
       [04] 0x85 ''
       [05] 0xc3 ''
       [06] 0x2d '-'
       [07] 0xd3 ''
   +0x020 FvLength         : 0x9ad340
   +0x028 Signature        : 0x4856465f
   +0x02c Attributes       : 0x3feff
   +0x030 HeaderLength     : 0x48
   +0x032 Checksum         : 0xb767
   +0x034 ExtHeaderOffset  : 0
   +0x036 Reserved         : 
    [00] 0 ''
   +0x037 Revision         : 0x2 ''
   +0x038 BlockMap         : 
    [00] 
      +0x000 NumBlocks        : 0x26b4d

    +0x004 Length           : 0x40
[ndb]!echo "   +0x030 HeaderLength     : 0x48"
   +0x030 HeaderLength     : 0x48
dt -b EFI_FFS_FILE_HEADER 0`3ec71000+48
   +0x000 Name             : 
      +0x000 Data1            : 0xfc510ee7
      +0x004 Data2            : 0xffdc
      +0x006 Data3            : 0x11d4
      +0x008 Data4            : 
       [00] 0xbd ''
       [01] 0x41 'A'
       [02] 0 ''
       [03] 0x80 ''
       [04] 0xc7 ''
       [05] 0x3c '<'
       [06] 0x88 ''
       [07] 0x81 ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x36 '6'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa36
   +0x012 Type             : 0x2 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x3c '<'
    [01] 0 ''
    [02] 0 ''
   +0x017 State            : 0xf8 ''
[ndb]!echo "#define EFI_FV_FILETYPE_FREEFORM              0x02"
#define EFI_FV_FILETYPE_FREEFORM              0x02
r $t0 = poi(0`3ec71000+48+14)
? $t0 & 00ffffff
eval expression: 60 = 00000000`0000003c
[ndb]!echo "This is size."
This is size.
?? sizeof(EFI_FFS_FILE_HEADER)
unsigned int64 0x18
db 0`3ec71000+48+18 l3c-18
00000000`3ec71060  24 00 00 19 14 fd f3 b1-d1 9b cc 48 92 58 e2 80  $..........H.X..
00000000`3ec71070  7e cb 1b 84 57 72 cf 80-ab 87 f9 47 a3 fe d5 0b  ~...Wr.....G....
00000000`3ec71080  76 d8 95 41                                      v..A
dt -b EFI_COMMON_SECTION_HEADER 0`3ec71000+48+18
   +0x000 Size             : 
    [00] 0x24 '$'
    [01] 0 ''
    [02] 0 ''
   +0x003 Type             : 0x19 ''
[ndb]!echo "#define EFI_SECTION_RAW                   0x19"
#define EFI_SECTION_RAW                   0x19
dt EFI_GUID 0`3ec71000+48+18+4
   +0x000 Data1            : 0xb1f3fd14
   +0x004 Data2            : 0x9bd1
   +0x006 Data3            : 0x48cc
   +0x008 Data4            : [8]UINT8[] 0x92 ''
[ndb]!echo "b1f3fd14-9bd1-48cc-9258-e2807ecb1b84StatusLedDxe"
b1f3fd14-9bd1-48cc-9258-e2807ecb1b84StatusLedDxe
dt EFI_GUID 0`3ec71000+48+18+4+10
   +0x000 Data1            : 0x80cf7257
   +0x004 Data2            : 0x87ab
   +0x006 Data3            : 0x47f9
   +0x008 Data4            : [8]UINT8[] 0xa3 ''
[ndb]!echo "80CF7257-87AB-47f9-A3FE-D50B76D89541PcdDxe"
80CF7257-87AB-47f9-A3FE-D50B76D89541PcdDxe

下一个,DxeCore (00000000`3ecbb0a8 “DxeCore”):

dt -b EFI_FFS_FILE_HEADER 0`3ec71000+88
   +0x000 Name             : 
      +0x000 Data1            : 0xd6a2cb7f
      +0x004 Data2            : 0x6a18
      +0x006 Data3            : 0x4e2f
      +0x008 Data4            : 
       [00] 0xb4 ''
       [01] 0x3b ';'
       [02] 0x99 ''
       [03] 0x20 ' '
       [04] 0xa7 ''
       [05] 0x33 '3'
       [06] 0x70 'p'
       [07] 0xa ''
   +0x010 IntegrityCheck   : 
      +0x000 Checksum         : 
         +0x000 Header           : 0x6a 'j'
         +0x001 File             : 0xaa ''
      +0x000 Checksum16       : 0xaa6a
   +0x012 Type             : 0x5 ''
   +0x013 Attributes       : 0 ''
   +0x014 Size             : 
    [00] 0x30 '0'
    [01] 0xa0 ''
    [02] 0x4 ''
   +0x017 State            : 0xf8 ''
dt -b EFI_COMMON_SECTION_HEADER 0`3ec71000+88+18
   +0x000 Size             : 
    [00] 0x4 ''
    [01] 0xa0 ''
    [02] 0x4 ''
   +0x003 Type             : 0x10 ''
r $t0=poi(0`3ec71000+88+18)
? $t0 & 00ffffff
eval expression: 303108 = 00000000`0004a004
db 0`3ec71000+88+18+4a004
00000000`3ecbb0a4  14 00 00 15 44 00 78 00-65 00 43 00 6f 00 72 00  ....D.x.e.C.o.r.
00000000`3ecbb0b4  65 00 00 00 57 72 cf 80-ab 87 f9 47 a3 fe d5 0b  e...Wr.....G....
00000000`3ecbb0c4  76 d8 95 41 f7 aa 07 00-2a a9 00 f8 e4 08 00 19  v..A....*.......
00000000`3ecbb0d4  3c 19 7d 3c 2c 68 14 4c-a6 8f 55 2d ea 4f 43 7e  <.}<,h.L..U-.OC~
00000000`3ecbb0e4  07 00 00 00 e0 08 00 00-00 00 00 00 00 00 00 00  ................
00000000`3ecbb0f4  e0 08 00 00 1b 00 00 00-04 01 00 00 dc 00 00 00  ................
00000000`3ecbb104  9c 01 00 00 38 04 00 00-d4 08 00 00 50 00 00 00  ....8.......P...
00000000`3ecbb114  00 00 00 00 26 00 05 00-04 00 da da da da da da  ....&...........
dt -b EFI_COMMON_SECTION_HEADER 0`3ec71000+88+18+4a004
   +0x000 Size             : 
    [00] 0x14 ''
    [01] 0 ''
    [02] 0 ''
   +0x003 Type             : 0x15 ''
[ndb]!echo "#define EFI_SECTION_USER_INTERFACE        0x15"
#define EFI_SECTION_USER_INTERFACE        0x15
du 0`3ec71000+88+18+4a004+4
00000000`3ecbb0a8  "DxeCore"

学庖丁,目无全UEFI:
“始臣之解牛之时,所见无非牛者。三年之后,未尝见全牛也。方今之时,臣以神遇而不以目视,官知止而神欲行。依乎天理,批大郤,导大窾,因其固然,技经肯綮之未尝,而况大軱乎!”

作者:朱博渊  创建时间:2024-05-01 18:59
最后编辑:朱博渊  更新时间:2024-05-18 22:48