虚拟编译器模式 Virtual Translator |
|
该汇编可以帮助在手动模式下构建翻译 This assembler can help build translator in manual mode
Actions 操作
Listing
在dump 位置顺序显示块Show blocks in order of their position in dump
Half Blocks
Show blocks that is filled with data incompletely
Translator
Show blocks in order of their position in image
Auto with File Headers
Search for blocks in dump. Based on check files procedure
Advantages:
- can find blocks with FAT table parts
- sometimes can find FAT Root
Disadvantages:
- can find only 1 block at once
Auto with Check Files
Search for blocks in dump. Based on checking file headers
Advantages:
- can find many blocks at once
- can replace block, if it fit better
Disadvantages:
- can not find FAT Root
- can use after we see file tree
Properties
Image Offset
MBR offset in image
Correction
Found blocks is stored here
Format:
block number in image / block address in dump
Example:
0x10 / 0x125000
Mix
Adds Join by Page between neighboring blocks in the image
Format:
4 / 0x200
2 / 0x8000
Means:
Join by Page 4, 0x200
Join by Page 2, 0x8000