| Author |
Message |
pcimage
Joined: 03 Mar 2008
Posts: 1768
Location: UK
|
 Posted: Thu Apr 03, 2008 22:42 Post subject: iCreate i5128-LG
|
|
Hi Sergei!
Got dump, used iCreate util to make disk image.
In Image Explorer get all red folders.
I look in Properties of FAT32 and Claster_0 is set at 0x7c5000
Check_Dirs gives...
Check Dirs
----------
Dir 0x00800000 Must be 0x007c8000 Diff+ 0x00038000 Cluster 0x000003
Dir 0x00b27000 Must be 0x00aef000 Diff+ 0x00038000 Cluster 0x00032a
Dir 0x00b36000 Must be 0x00afe000 Diff+ 0x00038000 Cluster 0x000339
Dir 0x00b3f000 Must be 0x00b07000 Diff+ 0x00038000 Cluster 0x000342
Dir 0x010e2000 Must be 0x010aa000 Diff+ 0x00038000 Cluster 0x0008e5
Dir 0x010e6000 Must be 0x010ae000 Diff+ 0x00038000 Cluster 0x0008e9
I change Claster_0 to 0x00038000, no folders at all.
300k uploaded to container.
I can get most files using Getdataback, but would orginal folder structure if possible.
Thanks
|
|
|
Сергей
Joined: 26 Aug 2005
Posts: 20281
Flash-Extractor developer
|
|
Posted: Thu Apr 03, 2008 23:08 Post subject: Re: iCreate i5128-LG
|
|
| pcimage wrote: | | I change Claster_0 to 0x00038000, no folders at all. |
You skip one important step.
- Claster_0 = 0
- Check_Dirs
- Claster_0 = Diff
|
|
|
pcimage
Joined: 03 Mar 2008
Posts: 1768
Location: UK
|
|
Posted: Thu Apr 03, 2008 23:18 Post subject: Re: iCreate i5128-LG
|
|
| Сергей wrote: | | pcimage wrote: | | I change Claster_0 to 0x00038000, no folders at all. |
You skip one important step.
- Claster_0 = 0
- Check_Dirs
- Claster_0 = Diff |
I did that, changed to 0, then check Dirs.
Before I changed to 0 difference was something like 0x007df000 (or similar, I can't say for sure, I'm at home now)
|
|
|
Сергей
Joined: 26 Aug 2005
Posts: 20281
Flash-Extractor developer
|
|
Posted: Fri Apr 04, 2008 13:02 Post subject:
|
|
OK :)
- Claster_0 = 0
- Check_Dirs
- Claster_0 = Diff
- Check_Dirs
- Verify that Diff = 0 now
|
|
|
pcimage
Joined: 03 Mar 2008
Posts: 1768
Location: UK
|
|
Posted: Fri Apr 04, 2008 15:07 Post subject:
|
|
| Сергей wrote: | OK 
- Claster_0 = 0
- Check_Dirs
- Claster_0 = Diff
- Check_Dirs
- Verify that Diff = 0 now |
Yep, I did that....
Check Dirs
----------
Dir 0x00800000 Must be 0x00800000 Diff 0x00000000 Cluster 0x000003
Dir 0x00b27000 Must be 0x00b27000 Diff 0x00000000 Cluster 0x00032a
Dir 0x00b36000 Must be 0x00b36000 Diff 0x00000000 Cluster 0x000339
Dir 0x00b3f000 Must be 0x00b3f000 Diff 0x00000000 Cluster 0x000342
Dir 0x010e2000 Must be 0x010e2000 Diff 0x00000000 Cluster 0x0008e5
Dir 0x010e6000 Must be 0x010e6000 Diff 0x00000000 Cluster 0x0008e9
Dir 0x03dbb000 Must be 0x03dbb000 Diff 0x00000000 Cluster 0x0035be
Dir 0x03dbc000 Must be 0x03dbc000 Diff 0x00000000 Cluster 0x0035bf
Dir 0x041cf000 Must be 0x041cf000 Diff 0x00000000 Cluster 0x0039d2
Goto "Root" and sector is filled with "FF"
Maybe bad dump?
|
|
|
Сергей
Joined: 26 Aug 2005
Posts: 20281
Flash-Extractor developer
|
|
Posted: Fri Apr 04, 2008 15:17 Post subject:
|
|
Dump is good.
We need cut as in example.
FAT32 or FAT16 ?
Put in container first 10MB of disk image
|
|
|
pcimage
Joined: 03 Mar 2008
Posts: 1768
Location: UK
|
|
Posted: Sat Apr 05, 2008 14:20 Post subject:
|
|
| Сергей wrote: | Dump is good.
We need cut as in example.
FAT32 or FAT16 ?
Put in container first 10MB of disk image |
FAT32
Cut is in container now
|
|
|
Сергей
Joined: 26 Aug 2005
Posts: 20281
Flash-Extractor developer
|
|
Posted: Sat Apr 05, 2008 14:48 Post subject:
|
|
Look:
| Code: | 0x7c7000 Root
0x7c8000 FFFF Starts
0x800000 FFFF finish |
0x800000 - 0x7c8000 = 0x38000
Understand? :)
When finish, add to statistics please.
|
|
|
Сергей
Joined: 26 Aug 2005
Posts: 20281
Flash-Extractor developer
|
|
Posted: Sat Apr 05, 2008 14:50 Post subject:
|
|
WinHex can't cut from large files.
You can:
- copy header to file A
- copy body to file B
- A+B
|
|
|
pcimage
Joined: 03 Mar 2008
Posts: 1768
Location: UK
|
|
Posted: Sat Apr 05, 2008 17:08 Post subject:
|
|
| Сергей wrote: | Look:
| Code: | 0x7c7000 Root
0x7c8000 FFFF Starts
0x800000 FFFF finish |
0x800000 - 0x7c8000 = 0x38000
Understand? :)
When finish, add to statistics please. |
Yes, I understand.
Like you said, make header and body files with winhex and join.
Image Explorer much more healthy now....
Except that client appears to have run Scandisk on the drive, lots of .chk files :-(
|
|
|
Сергей
Joined: 26 Aug 2005
Posts: 20281
Flash-Extractor developer
|
|
Posted: Sat Apr 05, 2008 17:16 Post subject:
|
|
| pcimage wrote: | | Except that client appears to have run Scandisk on the drive, lots of .chk files :-( |
You can easy get them.
To do this, you need damage header of FOUND.000 folder.
Replace [.][space][space][space][space]...
With [.][space][space][q][space]...
And all dirs (!!!) and files you will find in Scan folder.
|
|
|
|
