Virtual Translator?虛擬翻譯器
This assembler can help build translator in manual mode
該匯編程序可以幫助在手動(dòng)模式下構(gòu)建翻譯器
Plan of work for FAT32 partitions
FAT32分區(qū)的工作計(jì)劃
1.
Make ECC Fix ? ?修復(fù)ECC
Set ECC = off ? 設(shè)置ECC=off
2.
Run Auto_Slow
運(yùn)行Auto_Slow
Wait while it finish with block 0x10 and stop it
等待完成0x10塊就停止它
If Root have files inside, go to next step
如果根有文件里面,就進(jìn)行下一步
If not, bad news. Need put it on place with hands (this is hard to do)
如果沒有,壞消息。需要用手工放在一起(這很難做)
3.
Run Auto_Fast
運(yùn)行Auto_Fast
Need run it several times until all files will be found
需要運(yùn)行幾次,直到找到所有文件
Auto Slow?自動(dòng)慢速?
Search for blocks in dump
搜索dump中的塊
It runs Check Files for each block. So works very slow. But can check more file system obects
它運(yùn)行每個(gè)塊的檢查文件。所以工作很慢?但是可以檢查更多的文件系統(tǒng)對象
Advantages 優(yōu)點(diǎn):
– can find blocks with FAT table parts
–?– 可以找到FAT表的塊
– sometimes can find FAT Root
– 有時(shí)可以找到FAT根
Disadvantages 缺點(diǎn):
– can find only 1 block at once
– 一次只能找到1個(gè)塊
Auto Fast?自動(dòng)快速?
Search for blocks in dump
搜索blocks中的塊
First he memorize all file types and positions. Then look for blocks that better match this positions
首先,他記住所有文件類型和位置。然后尋找更好地匹配這個(gè)位置的塊
Advantages 優(yōu)點(diǎn):
– can find many blocks at once
– 可以一次找到多個(gè)塊
– can replace block, if it fit better
– 可以替代塊,如果它更適合
Disadvantages 缺點(diǎn):
– can not find FAT Root
– 找不到FAT根
– can use only after we see file tree
– 只能在我們看到文件樹后才能使用
– do not work if Mix property used
– 如果使用了混合屬性貌似沒用
Properties?屬性?
Image Offset 鏡像偏移
MBR offset in image
Correction?校正?
Found blocks is stored here
Format 格式:
block number in image / block address in dump
Example 示例:
0x10 / 0x125000
Mix?混合?
Adds Join by Page between neighboring blocks in the image
Format 格式:
4 / 0x200
2 / 0x8000
Means:
Join by Page 4, 0x200
Join by Page 2, 0x8000
Listing?列表?
Show blocks in order of their position in dump
按照它們在dump中的位置按順序顯示塊
Half Blocks
Show blocks that is filled with data incompletely
顯示填充有數(shù)據(jù)不完整的塊
Translator 編譯器
Show blocks in order of their position in image
按照其在鏡像中的位置的順序顯示塊
轉(zhuǎn)載請注明:成都千喜數(shù)據(jù)恢復(fù)中心 » Flash Extractor用戶手冊-虛擬編譯器