|
|
|
|
|
|
This assembler can help build translator in manual mode
Plan of work for FAT32 partitions
1.
ECC Fix
ECC = off
2.
Run Auto_Slow
Wait while it finish with block 0x10 and stop it
If Root have files inside, go to next step
If not, bad news. Need put it on place with hands (this is hard to do)
3.
Run Auto_Fast
Plan of work for NTFS partitions
1.
ECC Fix
ECC = off
2.
Run Auto_Slow
Wait while it finish with block 0 and stop it
If MBR, NTFS found, go to next step
3.
Run Auto_Fast
Auto Slow
Search for blocks in dump
It runs Check Files for each block. So works very slow. But can check more file system obects
Advantages:
- can find blocks with FAT table parts
- sometimes can find FAT Root
Disadvantages:
- can find only 1 block at once
Auto Fast
Search for blocks in dump
First he memorize all file types and positions. Then look for blocks that better match this positions
Advantages:
- can find many blocks at once
- can replace block, if it fit better
Disadvantages:
- can not find FAT Root
- with FAT32 can use only after we see file tree
- do not work if Mix property used
Properties
Image Offset
MBR offset in image
Correction
Found blocks is stored here
Format:
block number in image / block address in dump
Example:
0x10 / 0x125000
Mix
Adds Join by Page between neighboring blocks in the image
Format:
4 / 0x200
2 / 0x8000
Means:
Join by Page 4, 0x200
Join by Page 2, 0x8000
Listing
Show blocks in order of their position in dump
Half Blocks
Show blocks that is filled with data incompletely
Translator
Show blocks in order of their position in image
|
|
|
|
|
|
|
|
|
|
