Flash Extractor
© Soft-Center
About     Shop     Downloads     Manual     Library     Forum     Services     Contacts
Example_1 - FAT Search   Search  Register  Log in
This topic is locked: you cannot edit posts or make replies.
Author Message
Сергей



Joined: 26 Aug 2005
Posts: 7876
Location: Soft-Center

PostPosted: Sun Apr 13, 2008 3:29    Post subject: Example_1 - FAT Search
Reply with quote

FAT Search
The first Job with a dump is to find the Boot sector.

The purpose:
- Check if the dump is mixed
- Determine the size of the block

Search
Usually inside the boot sector there is the text 'FAT16' or 'FAT32'.
Enter in the search box: FAT??[space][space]

Click the magnifier icon to start the search:



Editor stops searching at address 0x35c1000.
It has found the boot sector:



The size of sector in Flash Extractor of 528 bytes, instead of the normal 512 bytes.

The additional 16 bytes stores the ECC sum, block numbers and other service information.

Click the arrow downwards to move to the next sector, until you see FAT table:



The FAT table is in the same block as boot sector.
Display posts from previous:   
This topic is locked: you cannot edit posts or make replies. All times are GMT + 4 Hours
Page 1 of 1

 

Last added
Monolith Micro SD_76   98 3c 99 a3   1x4 AU6989NHL-2   98 d7 98 b2   1x1 SM3281L-AB   45 3c 98 b3   1x1   v5 Monolith USB 68   ec 1e 98 bf   1x1 SM3265P-AC   45 3e 98 03   1x1 SM3281N-AB   45 48 9a b3   2x2 Monolith Micro SD_75   32 2c c3 08   1x1 Monolith Micro SD_74   45 3e 98 b3   1x4   Ref AU6989SNHL-2   45 de 98 92   1x1 SM3261L-AB   45 de 98 92   1x1
News
01.02.2024 Save FE key
23.09.2022 The End
11.11.2021 Legs for NR
16.08.2021 Sector Number Slow
15.07.2021 New drivers
© Soft-Center ltd.