ijcl 发表于 2010-11-1 18:35:48

海云抛砖引玉之 ___FAT32分区 MDF碎片提取(winhex脚本)

海云抛砖引玉之 ___FAT32分区 MDF碎片提取(winhex脚本)]
使用范围:
1.FAT32分区
2.在程序开头处加上 GOTO 根目录位置*512


ForAllObjDo

Assign MyVariable   0
Assign MyVariable10
Assign MyVariable20
Assign MyVariable30

Assign MyVariable4   0
Assign MyVariable50
Assign MyVariable60
Assign MyVariable70
Assign MyVariable8 0
Assign temp   0
Assign my1 0
Assign my2 0

{Label my


Assign MyVariable10
Assign MyVariable20
Assign MyVariable30
Assign MyVariable40
Find 0x013F3F3F3F3F3F3F3F3F3F003F3F3F3F3F3F3F003F3F3F3F3F3F3F3F3F3F3F3F3F3F3F00   WildcardsDown
IfFound

Assign MyVariable   CurrentPos
IfGreater   (MyVariable%512) 0
move 1
JumpTomy
EndIf

move 32

Read MyVariable1 4

move 8156

Read MyVariable2 1



move 31
Read MyVariable3 4




IfEqualMyVariable2 1
Else
move 1
JumpTomy
EndIf

Assign MyVariable4(MyVariable3-MyVariable1)

IfEqualMyVariable4 1
Block1 MyVariable
Assign temp MyVariable3
JumpTomy1
Else
move 1
JumpTomy
EndIf

EndIf







Label my1

move 8156
Assigntemp (temp+1)
Read MyVariable5 1

move 31

Read MyVariable6 4



Assign MyVariable7(MyVariable6+MyVariable5)

IfEqualMyVariable7 0

JumpTomy1

EndIf



IfEqual(MyVariable6-temp) 0
JumpTomy1

Else
move -37
Block2 CurrentPos
JumpTomy3

EndIf
Label my3


CopyIntoNewFile "D:\hy\ +MyVariable1+ file +temp+.mdf"


}

sgqms 发表于 2010-11-1 19:14:23

海云兄弟一出来就是精品,支持!只可惜我写不出,学习了!谢谢。

dgtan 发表于 2010-11-1 20:31:08

支持了,结婚了,今明年事情多了,时间比较少,呵呵

lxb36 发表于 2010-11-1 20:35:31

只有佩服的份,写不出来呀

jackwei057 发表于 2010-11-1 20:35:59

支持一下啊,谢谢

newmanbay 发表于 2010-11-1 20:44:40

牛。。。。。。。。。。。。。。确实舍得啊。

330wang 发表于 2010-11-1 20:56:50

牛。。。。。。。。。。。。。。确实舍得啊

ijcl 发表于 2010-11-1 20:57:39

舍不得孩子套不狼呀,期待更好的作品!

xiongdeyuan 发表于 2010-11-1 21:40:04

支持海云(49:

2434243 发表于 2010-11-2 08:59:26

支持海云
页: [1] 2 3 4 5 6 7 8 9
查看完整版本: 海云抛砖引玉之 ___FAT32分区 MDF碎片提取(winhex脚本)