IT1167Flash Extractor-芯片级数据恢复取证方案025-83608636

IT1167

IT1167 BE-48A 2c 68 04 4a 2x1

Layout
  IT1167 1086_1078 v2 Xor 6771_256
Mix
  Input
    Order  1/0
  Block Pair
    Block  0x100000
    Page   0x1000
  Divide
    Field  Block Number
    Value  0x20
  Join by Page
    Parts  2
    Page   0x200000
  Cross Block
    Field  Block Number
    Block  0x200000
    Parts  2
Assembler
  Block Number
    Block Size   0x200000
    Bank Space   0x4000
    Image Cut    0xdf200
    Mix          2 / 0x200
    Banks        0 / 0x000 / 0xfff
  Actions
    Scan
Comments
  Serg for forum 5624

IT1167BE-48A 2c 68 04 4a 1x1

Layout
  IT1167 1086_1078 v2 Xor 6771_256
Mix
  Input
    Order  0
  Divide
    Field  Block Number
    Value  0x10
  Cross Block
    Field  Block Number
    Block  0x100000
    Parts  2
Assembler
  Block Number
    Block Size   0x100000
    Bank Space   0x4000
    Image Cut    0x5f200
    
    Banks        00 / 0x000 / 0xfff    
    Mix          2 / 0x1000
  Actions
    Scan
Comments
  Serg for forum 11343

IT1167BE-48A 45 de 94 82 1x1

Layout
  IT1167 1086_1078 v2 Xor 6771_256
Mix
  Input
    Order  0
  Block Pair
    Block  0x200000
    Page   0x2000
  Divide
    Field  Block Number
    Value  0x20
Assembler
  Block Number
    Block Size   0x400000
    Bank Space   0x4000
    Image Cut    0xe7000
    Banks        00 / 0x000 / 0x3ff
  Actions
    Scan
Comments
    By Arvika
    Dir structure corrupted because some blocks missing
    Scan image by other software

IT1167BE-48A 89 88 24 4b 1x2

Layout
  IT1167 1086_1078 v2 Xor 6771_256
Mix
  Input
    Order  0/1
  Block Pair
    Block  0x200000
    Page   0x2000
  Divide
    Field  Block Number
    Value  0x40
  Join by Page
    Parts  2
    Page   0x400000
  Cross Block
    Field  Block Number
    Block  0x400000
    Parts  2
Assembler
  Block Number
    Block Size   0x400000
    Bank Space   0x4000
    Image Cut    0xc6200
    Banks        00 / 0x000 / 0xf27
    Mix          2 / 0x4000
  Actions
    Scan
Comments
  Serg for forum 5809

IT1167BE-48A 89 88 24 4b 2x1

Layout
  IT1167 1086_1078 Xor 6771_512_BN
Mix
  Input
    Order  1/0
  Block Pair
    Block  0x200000
    Page   0x2000
  Join by Page
    Parts  2
    Page   0x400000
  Divide
    Field  Block Number
    Value  0x40
  Cross Block
    Field  Block Number
    Block  0x400000
    Parts  2
Assembler
  Block Number
    Block Size   0x400000
    Bank Space   0x1000
    Image Cut    0xc6200    
    Banks        00 / 0x000 / 0xfff
    Mix          2/0x200
  Actions
    Scan
Comments
  by Vlad forum 5405
  FAT was corrupted
  good recovery

IT1167BE-48A 89 88 24 4b 2x2

Layout
  IT1167 1086_1078 v2 Xor 6771_256
Mix
  Input
    Order  2/0/3/1
  Block Pair
    Block  0x200000
    Page   0x2000
  Divide
    Field  Block Number
    Value  0x80
  Cross Dump
    Field  Block Number
    Parts  4
    Step   1
Assembler
  Block Number
    Block Size   0x400000
    Bank Space   0x4000
    Image Cut    0xc4200
    
    Banks        00 / 0x000 / 0x1fff
    
    Mix          2/0x200
                 2/0x8000
Comments
  Serg for forum 11055
  May be need add Image Cut

IT1167BE-48A 89 d7 94 3e 1x1

Layout
  IT1168 1078_1070
Mix
  Input
    Order  0
  Block Pair
    Block  0x80000
    Page   0x1000
  Divide
    Field  Block Number
    Value  0x8
Assembler
  Block Number
    Block Size   0x100000
    Bank Space   0x4000
    Image Cut    0x5f200    
    Banks        00 / 0x000 / 0xfff
  Actions
    Scan
Comments
  Serg for forum 5828

IT1167BE-48A 98 d7 98 b2 1x1

Layout
  IT1168 1078_1070 Xor 6771_192
Mix
  Input
    Order  0
  Block Pair
    Block  0x180000
    Page   0x2000
  Divide
    Field  Block Number
    Value  0x18
Assembler
  Block Number
    Block Size   0x300000
    Bank Space   0x4000
    Image Cut    0x45f200    
    Banks        00 / 0x000 / 0x56d
  Actions
    Scan
Comments
  Serg for forum 8567

IT1167BE-48A ec d7 98 ca 1x1

Layout
  IT1168 1078_1070 Xor 6771_192
Mix
  Input
    Order  0
  Block Pair
    Block  0x180000
    Page   0x2000
  Divide
    Field  Block Number
    Value  0x18
Assembler
  Block Number
    Block Size   0x300000
    Bank Space   0x1000
    Image Cut    0x45f200
    Banks        00 / 0x000 / 0x578
  Actions
    Scan
Comments
  Serg for forum 10076

IT1167BE 18A ad d7 94 9a 1x1

Layout
  IT1167 1086_1078
Mix
  Input
    Order  0
  Block Pair
    Block  0x200000
    Page   0x2000
  Divide
    Field  Block Number
    Value  0x20
Assembler
  Block Number
    Block Size   0x400000
    Bank Space   0x400
    Image Cut    0x5f200
    Scan Back    true
  Actions
    Scan
    Find Bank Size
Comments
  by Vlad forum 5348
  FAT was corrupted

IT1167BE 48A ec d7 94 7a 1x1

Layout
  IT1167 1086_1078 v2 Xor 6771_256
Mix
  Input
    Order  0
  Block Pair
    Block  0x100000
    Page   0x2000
  Divide
    Field  Block Number
    Value  0x10
Assembler
  Block Number
    Block Size   0x200000
    Bank Space   0x4000
    Image Cut    0x5f200
    Banks        00 / 0x000 / 0x7ff
  Actions
    Scan
Comments
  Serg for forum 6858
  Some folders was erased with FF

IT1167BFN-46A 89 88 24 4b 1x4

Layout
  IT1167 1086_1078 v2 Xor 6771_256
Mix
  Input
    Order  0/1/2/3
  Block Pair
    Block  0x200000
    Page   0x2000
  Divide
    Field  Block Number
    Value  0x80
  Join by Page
    Parts  4
    Page   0x400000
  Cross Block
    Field  Block Number
    Block  0x400000
    Parts  4
Assembler
  Block Number
    Block Size   0x400000
    Bank Space   0x4000
    Image Cut    0xc4200    
    Banks        00 / 0x000 / 0x1fff
    Mix          4 / 0x4000
  Actions
    Scan
Comments
  Serg for forum 6688

IT1167E-48B 2c 88 04 4b 1x1

Layout
  IT1167 1078_7 Xor 6771_64
Mix
  Input
    Order  0
  Block Pair
    Block  0x200000
    Page   0x2000
  Divide
    Field  Block Number
    Value  0x2
Assembler
  Block Number
    Block Size   0x400000
    Bank Space   0x400
    Image Cut    0xef200
  Actions
    Scan
    Find Bank Size
Comments
  Serg for forum 8658

IT1167E-48B 89 88 24 4b 1x2

Layout
  UT165 1078 Xor 6771 64
Mix
  Input
    Order  0/1
  Block Pair
    Block  0x200000
    Page   0x2000
  Join by Dump
    Parts  2
  Divide
    Field  Block Number
    Value  0x2
Assembler
  Block Number
    Block Size   0x400000
    Bank Space   0x400
    Image Cut    0xee000
    Banks        00..03 / 0x000 / 0x3c3
  Actions
    Scan
Comments
  by Karol
  perfect recovery after fix one conflict

IT1167E-48B 98 d5 98 b2 1x1

Layout
  UT165 1070 Xor 6771 64
Mix
  Input
    Order  0
  Block Pair
    Block  0x180000
    Page   0x2000
  Divide
    Field  Block Number
    Value  2
Assembler
  Block Number
    Block Size   0x300000
    Bank Space   0x400
    Image Cut    0x12000
  Actions
    Scan
    Find Bank Size
Comments
  By aj2008

IT1167E-48B 98 d7 98 b2 1x1

Layout
  UT165 1070 Xor 6771 64
Mix
  Input
    Order  0
  Block Pair
    Block  0x180000
    Page   0x2000
  Divide
    Field  Block Number
    Value  0x2
Assembler
  Block Number
    Block Size   0x300000
    Bank Space   0x400
  Actions
    Scan
    Find Bank Size
Comments
  by Arvika
  MBR corrupted, save image and scan

IT1167E-64B ad d7 94 9a 1x1

Layout
  UT165 1078 Xor 6771 64
Mix
  Input
    Order  0
Assembler
  Block Number
    Block Size   0x200000
    Bank Space   0x4000
    Image Cut    0x77000
    
    Banks        00 / 0x000 / 0x7ff
    
    Mix          2/0x2000
  Actions
    Scan
Comments
  Serg for forum 7309

IT1167E 48B 89 68 24 4a 1x1

Layout
  UT165 1078 Xor 6771 64
Mix
  Input
    Order  0
  Block Pair
    Block  0x100000
    Page   0x1000
  Divide
    Field  Block Number
    Value  0x2
Assembler
  Block Number
    Block Size   0x200000
    Bank Space   0x400
    Image Cut    0x71200
  Actions
    Scan
    Find Bank Size
Comments
  Serg for forum 6655

IT1167E 48B 98 d5 94 32 1x1

Layout
  UT165 1070 Xor 6771 64
Mix
  Input
    Order  0
  Cross Block
    Field  Block Number
    Block  0x100000
    Parts  2
  Divide
    Field  Block Number
    Value  2
Assembler
  Block Number
    Block Size   0x100000
    Bank Space   0x800
    Image Cut    0x7b7200
    Mix          2/0x2000
  Actions
    Scan
    Find Bank Size
Comments
  by Vlad forum 4704
  FAT was erased
  change FAT16 to FAT32

IT1167FN-46B 89 88 24 4b 1x1

Layout
  IT1167 1078_7 Xor 6771_64
Mix
  Input
    Order  0
  Block Pair
    Block  0x200000
    Page   0x2000
  Divide
    Field  Block Number
    Value  0x2
Assembler
  Block Number
    Block Size   0x400000
    Bank Space   0x4000
    Image Cut    0xf7000
    Banks        00 / 0x000 / 0x7ff
  Actions
    Scan
Comments
  by Arvika

IT1167 2c 88 04 4b 2x1

Layout
  IT1167 1086_1078 v2 Xor 6771_256
Mix
  Input
    Order  1/0
  Block Pair
    Block  0x200000
    Page   0x2000
  Divide
    Field  Block Number
    Value  0x40
  Join by Page
    Parts  2
    Page   0x400000
  Cross Block
    Field  Block Number
    Block  0x400000
    Parts  2
Assembler
  Block Number
    Block Size   0x400000
    Bank Space   0x1000
    Image Cut    0xc6200    
    Banks        00 / 0x000 / 0xfff
    Mix          2/0x200
  Actions
    Scan
Comments
  by Vlad forum 5007
  some conflicts
  data has got logical damages

IT1167 89 88 24 4b 1x1

Layout
  IT1167 1086_1078
Mix
  Input
    Order  0
  Block Pair
    Block  0x200000
    Page   0x2000
  Divide
    Field  Block Number
    Value  32
Assembler
  Block Number
    Block Size    0x400000
    Bank Space    0x40000
    Image Cut  0xd7200
    Banks         00 / 0x000 / 0x7ff
  Actions
    Scan
Comments
  Serg for forum 4142
  Many bit errors
  But recovery is good

IT1167 98 d5 98 b2 1x2

Layout
  IT1168 1078_1070 Xor 6771_192
Mix
  Input
    Order  0/1
  Block Pair
    Block  0x180000
    Page   0x2000
  Join by Page
    Parts  2
    Page   0x300000
  Divide
    Field  Block Number
    Value  48
  Cross Block
    Field  Block Number
    Block  0x300000
    Parts  2
Assembler
  Block Number
    Block Size    0x300000
    Bank Space    0x4000
    Image Cut     0x45f200
    
    Banks         00 / 0x000 / 0x57b
    Mix           2 / 0x4000
  Actions
    Scan
Comments
  Serg for forum 4414

IT1167 98 d7 98 b2 1x1

Layout
  UT165 1070 Xor 6771 64
Mix
Assembler
  Block Number
    Block Size    0x180000
    Bank Space    0x400
    Image Cut  0x48f000
  Actions
    Scan
    Find Bank Size
Comments
  Serg for forum 3866
  100% recovery

IT1167 98 d7 98 b2 2x1

Layout
  UT165 1070 Xor 6771_64 JBB
Mix
  Input
    Order  1/0
  Join by Byte
    Parts  2
    Data   false
Assembler
  Block Number
    Block Size    0x300000
    Bank Space    0x800
    Image Cut  0x31f000
    
    Banks         00 / 0x000 / 0x71d
                  01 / 0x000 / 0x2a7
  Actions
    Scan
Comments
  Serg for forum 2949
  100% recovery
  Nut sure in Bank Space

IT1167 ad d7 94 9a 1x1

Layout
  UT165 1078 Xor 6771 64
Mix
  Block Pair
    Block  0x200000
    Page   0x2000
  Divide
    Field  Block Number
    Value  2
Assembler
  Block Number
    Block Size    0x400000
    Bank Space    0x100000
    Image Cut  0x71200
  Actions
    Scan
    Find Bank Size
Comments
  Bank Space unknown

IT1167 ec d5 84 72 1x1

Layout
  UT165 1070 Xor 6771 64
Mix
Assembler
  Block Number
    Block Size    0x100000
    Bank Space    0x400
    Image Cut  0x7b7200
  Actions
    Scan
    Find Bank Size
Comments
  Serg for forum 4191
  100% recovery
  Change FAT16 to FAT32 in MBR

ITE1167BE-48A 2c 88 04 4b 2x2

Layout
  IT1167 1086_1078 v2 Xor 6771_256
Mix
  Input
    Order  2/0/3/1
  Block Pair
    Block  0x200000
    Page   0x2000
  Divide
    Field  Block Number
    Value  0x80
  Join by Page
    Parts  4
    Page   0x400000
  Cross Block
    Field  Block Number
    Block  0x400000
    Parts  4
Assembler
  Block Number
    Block Size   0x400000
    Bank Space   0x4000
    Image Cut    0xc4200    
    
    Banks        00 / 0x000 / 0x1fff
    
    Mix          2/0x200
                 2/0x8000
  Actions
    Scan
Comments
  Serg for forum 6721

ITE1167BFN-46A 45 de 94 82 2x1

Layout
  IT1167 1086_1078 Xor 6771_512_BN
Mix
  Input
    Order  1/0
  Block Pair
    Block  0x200000
    Page   0x2000
  Divide
    Field  Block Number
    Value  0x40
  Join by Page
    Parts  2
    Page   0x400000
  Cross Block
    Field  Block Number
    Block  0x400000
    Parts  2
Assembler
  Block Number
    Block Size   0x400000
    Bank Space   0x4000
    Image Cut    0xc6200
    Banks        00 / 0x000 / 0xfff
    Mix          2 / 0x200
  Actions
    Scan
Comments
  Serg for forum 5680

ITE1167BGN-46A 89 88 04 4b 1x1

Layout
  IT1167 1086_1078 v2 Xor 6771_256
Mix
  Input
    Order  0
  Block Pair
    Block  0x200000
    Page   0x2000
  Divide
    Field  Block Number
    Value  0x20
Assembler
  Block Number
    Block Size   0x400000
    Bank Space   0x4000
    Image Cut    0xdf200    
    Banks        00 / 0x000 / 0x7ff
  Actions
    Scan
Comments
  Serg for forum 6981

ITE1167 89 68 24 4a 2x1

Layout
  IT1167 1086_1078 Xor 6771_512_BN
Mix
  Input
    Order  1/0
  Block Pair
    Block  0x100000
    Page   0x1000
  Join by Page
    Parts  2
    Page   0x200000
  Divide
    Field  Block Number
    Value  0x20
  Cross Block
    Field  Block Number
    Block  0x200000
    Parts  2
Assembler
  Block Number
    Block Size   0x200000
    Bank Space   0x1000
    Image Cut    0xd7200
    Mix          2/0x200
  Actions
    Scan
    Find Bank Size
Comments
  KostikN 02.07.2012 Good result

上一篇：IT1165
下一篇： IT1168

站内搜索

联系我们