南京西数提供电子取证,数据恢复,司法鉴定,手机取证,图像鉴定,声纹鉴定,解决方案.电话 4006184118

QQ登录

只需一步,快速开始

最新成功案例南京数据恢复涉密数据恢复-电子取证南京数据库修复
南京硬盘恢复中数安盟-数据恢复专家南京司法鉴定 

Flash Extractor升级新增虚拟编译模式

[复制链接]
发表于 2016-9-8 10:07:35 | 显示全部楼层 |阅读模式

虚拟编译器模式 Virtual Translator
该汇编可以帮助在手动模式下构建翻译 This assembler can help build translator in manual mode
Actions   操作

Listing
在dump 位置顺序显示块Show blocks in order of their position in dump

Half Blocks
Show blocks that is filled with data incompletely

Translator
Show blocks in order of their position in image


Auto with File Headers
Search for blocks in dump. Based on check files procedure

Advantages:
- can find blocks with FAT table parts
- sometimes can find FAT Root

Disadvantages:
- can find only 1 block at once

Auto with Check Files
Search for blocks in dump. Based on checking file headers

Advantages:
- can find many blocks at once
- can replace block, if it fit better

Disadvantages:
- can not find FAT Root
- can use after we see file tree


Properties

Image Offset
MBR offset in image

Correction
Found blocks is stored here

Format:
block number in image / block address in dump

Example:
0x10 / 0x125000


Mix
Adds Join by Page between neighboring blocks in the image

Format:
4 / 0x200
2 / 0x8000

Means:
Join by Page 4, 0x200
Join by Page 2, 0x8000

南京数据恢复 ,南京司法鉴定 ,13813824669
您需要登录后才可以回帖 登录 | 注册

本版积分规则

Powered by Discuz! X3.5 Licensed|© 2001-2025 Discuz! Team.

QQ|小黑屋|手机版|联系方式|广告服务|西数科技(江苏)有限公司 ( 苏ICP备09074223号|苏公网备:32010202010982号 )| GMT+8, 2025-8-22 04:38 , Processed in 0.226422 second(s), 25 queries .

快速回复 返回顶部 返回列表