It appears that you found your answer with the first `dd` already. It's just in different endian order. Read the bytes (two-character hex sequences) reverse. And set the skip value to 440 instead of 439.
It appears that you found your answer with the first `dd` already. It's just in different endian order. Read the bytes (two-character hex sequences) reverse. And set the skip value to 440 instead of 439.