Virtual Translator 虚拟翻译器
This assembler can help build translator in manual mode
该汇编程序可以帮助在手动模式下构建翻译器
Plan of work for FAT32 partitions
FAT32分区的工作计划
1.
Make ECC Fix 修复ECC
Set ECC = off 设置ECC=off
2.
Run Auto_Slow
运行Auto_Slow
Wait while it finish with block 0x10 and stop it
等待完成0x10块就停止它
If Root have files inside, go to next step
如果根有文件里面,就进行下一步
If not, bad news. Need put it on place with hands (this is hard to do)
如果没有,坏消息。需要用手工放在一起(这很难做)
3.
Run Auto_Fast
运行Auto_Fast
Need run it several times until all files will be found
需要运行几次,直到找到所有文件
Auto Slow 自动慢速
Search for blocks in dump
搜索dump中的块
It runs Check Files for each block. So works very slow. But can check more file system obects
它运行每个块的检查文件。所以工作很慢 但是可以检查更多的文件系统对象
Advantages 优点:
– can find blocks with FAT table parts
– – 可以找到FAT表的块
– sometimes can find FAT Root
– 有时可以找到FAT根
Disadvantages 缺点:
– can find only 1 block at once
– 一次只能找到1个块
Auto Fast 自动快速
Search for blocks in dump
搜索blocks中的块
First he memorize all file types and positions. Then look for blocks that better match this positions
首先,他记住所有文件类型和位置。然后寻找更好地匹配这个位置的块
Advantages 优点:
– can find many blocks at once
– 可以一次找到多个块
– can replace block, if it fit better
– 可以替代块,如果它更适合
Disadvantages 缺点:
– can not find FAT Root
– 找不到FAT根
– can use only after we see file tree
– 只能在我们看到文件树后才能使用
– do not work if Mix property used
– 如果使用了混合属性貌似没用
Properties 属性
Image Offset 镜像偏移
MBR offset in image
Correction 校正
Found blocks is stored here
Format 格式:
block number in image / block address in dump
Example 示例:
0x10 / 0x125000
Mix 混合
Adds Join by Page between neighboring blocks in the image
Format 格式:
4 / 0x200
2 / 0x8000
Means:
Join by Page 4, 0x200
Join by Page 2, 0x8000
Listing 列表
Show blocks in order of their position in dump
按照它们在dump中的位置按顺序显示块
Half Blocks
Show blocks that is filled with data incompletely
显示填充有数据不完整的块
Translator 编译器
Show blocks in order of their position in image
按照其在镜像中的位置的顺序显示块
转载请注明:成都千喜数据恢复中心 » Flash Extractor用户手册-虚拟编译器