Recipe for extracting plaintext from 0x11000