template, dmde-free-2.8.0.542-win32-gui
[ Pobierz całość w formacie PDF ]
;DMDE Disk Editor Templates[MFT Record]flow:1CALCSIZESTART$1:={0x1C+2}IF $1<1024$1:=1024ENDIF$RECSIZE:=$1CALCSIZEENDLOADSTART$1:={0x04+2} ;fixups offset$2:={0x06+2} ;fixups count$3:=0x1FE ;seq. offsetIF {$3+2}={$1+2} ;insert fixups$1:=$1+2$2:=$2-1LABEL:0{$3+2}:={$1+2}$1:=$1+2$2:=$2-1$3:=$3+0x200IF $2>0IF $3<$RECSIZEGOTO:0ENDIFENDIFENDIFLOADENDFLUSHSTART$1:={0x04+2}$2:={0x06+2}$3:=0x1FE$4:={$1+2}$1:=$1+2$2:=$2-1LABEL:0{$1+2}:={$3+2}{$3+2}:=$4$1:=$1+2$2:=$2-1$3:=$3+0x200IF $2>0IF $3<$RECSIZEGOTO:0ENDIFENDIFFLUSHEND$FILERECOFS:=0x00$63:=TOGGLE:0,x:1x:5,w:5,f:FileIF {0x04+2}>=0x30x:10,w:1,f:#$1:={0x2C+4}$1,x:11,w:10,f:%d ========ENDIF$1:={0x10+2}$1,x:22,w:8,f:(%h) =======x:38,w:42,f:==================IF $63>0=x:5,w:25,f:magic ("FILE"):{0x00+4},x:32,w:4,f:%4c=x:5,w:25,f:fixups offset:{0x04+2},x:32,w:4,f:%4hXx:36,w:1,f:h=x:5,w:25,f:fixups count:{0x06+2},x:32,w:5,f:%4h=x:5,w:23,f:LSNlo:{0x08+4},x:28,w:8,f:%08Xx:36,w:1,f:h=x:5,w:23,f:LSNHi:{0x0C+4},x:28,w:8,f:%08Xx:36,w:1,f:h=x:5,w:25,f:seq. number:{0x10+2},x:32,w:5,f:%4h=x:5,w:25,f:hlink number:{0x12+2},x:32,w:5,f:%4h=x:5,w:25,f:attrs offset:{0x14+2},x:32,w:4,f:%4hXx:36,w:1,f:h=x:5,w:25,f:flags:{0x16+2},x:32,w:4,f:%4hXx:36,w:1,f:h=x:5,w:23,f:used size:{0x18+4},x:28,w:8,f:%8Xx:36,w:1,f:h=x:5,w:23,f:record size:{0x1C+4},x:28,w:10,f:%8d=x:5,w:23,f:basefileref:{0x20+4},x:28,w:10,f:%8d=x:5,w:25,f:0x24:{0x24+2},x:32,w:4,f:%4hXx:36,w:1,f:h=x:5,w:25,f:basefileref seq.:{0x26+2},x:32,w:5,f:%4h=x:5,w:25,f:next attribute #:{0x28+2},x:32,w:5,f:%4h=IF {0x04+2}>=0x30x:5,w:25,f:0x2A:{0x2A+2},x:32,w:4,f:%4hXx:36,w:1,f:h=x:5,w:23,f:file #:{0x2C+4},x:28,w:10,f:%8d=ENDIF$3:={0x04+2} ;fixup offsetIF $3>=0x2AIF $3<$RECSIZEx:5,w:25,f:fixup:{$3+2},x:32,w:4,f:%04hXx:36,w:1,f:h=ENDIFENDIFELSEx:31,w:1,f:"{0x00+4},x:32,w:4,f:%4cx:36,w:1,f:"=ENDIF;Attributes$1:={0x14+2}LABEL:0IF $1>=$RECSIZEx:21,w:30,f:ERROR Attribute Offset=GOTO:1ENDIFIF $1<0x2Ax:21,w:30,f:ERROR Attribute Offset=GOTO:1ENDIF$OFFSET:=$1$2:={0x00+4}IF $2!=0xFFFFFFFF$63:=TOGGLE:$1,x:1ENDIF$3:=0IF $2=0x10x:11,w:30,f:$STANDARD_INFORMATION (10h)$3:=1ENDIFIF $2=0x20x:11,w:30,f:$ATTRIBUTE_LIST (20h)$3:=1ENDIFIF $2=0x30x:11,w:30,f:$FILE_NAME (30h)$3:=1ENDIFIF $2=0x50x:11,w:30,f:$SECURITY_DESCRIPTOR (50h)$3:=1ENDIFIF $2=0x60x:11,w:30,f:$VOLUME_NAME (60h)$3:=1ENDIFIF $2=0x70x:11,w:30,f:$VOLUME_INFORMATION (70h)$3:=1ENDIFIF $2=0x80x:11,w:30,f:$DATA (80h)$3:=1ENDIFIF $2=0x90x:11,w:30,f:$INDEX_ROOT (90h)$3:=1ENDIFIF $2=0xA0x:11,w:30,f:$INDEX_ALLOCATION (A0h)$3:=1ENDIFIF $2=0xB0x:11,w:30,f:$BITMAP (90h)$3:=1ENDIFIF $2=0xFFFFFFFFx:5,w:4,f:End{0x00+4},x:32,w:8,f:%8Xx:40,w:1,f:h$3:=1ENDIFIF $3=0$2,x:11,w:30,f:Attribute (%Xh)ENDIFIF $2=0xFFFFFFFFGOTO:1ENDIFx:5,w:1,f:#$3:={0x0E+2}$3,x:6,w:5,f:%h$3:={0x0A+2}$4:={-1:0+1,0x09+1}IF $4>0x:42,w:1,f::{$3+$4},x:43,w:37,f:UENDIF$ATTROFS:=$1=IF $63>0x:7,w:20,f:Attr. type:{0x00+4},x:34,w:8,f:%8Xx:42,w:1,f:h=x:7,w:20,f:Attr. length:{0x04+4},x:32,w:10,f:%10uENDIF$2:={0x04+4}IF $2<=0x:42,w:30,f:ERROR=GOTO:1ENDIF$2:=$1+$2 ;next attribute offsetIF $2>$RECSIZE$2=$RECSIZEx:42,w:30,f:ERRORENDIF=IF $63>0x:7,w:20,f:Non-resident:{0x08+1},x:39,w:3,f:%3h=x:7,w:20,f:Attrname len:{0x09+1},x:39,w:3,f:%3h=x:7,w:20,f:Attrname ofs:{0x0A+2},x:38,w:4,f:%4hXx:42,w:1,f:h=x:7,w:20,f:Flags:{0x0C+2},x:38,w:4,f:%4hXx:42,w:1,f:h{0x0C:0+2},x:45,w:2,f:F:C-+-{0x0C:14+2},x:48,w:2,f:F:E-S-=x:7,w:20,f:Attr. number:{0x0E+2},x:37,w:5,f:%5h=ENDIFIF {0x08+1}=0 ;resident attributeIF $63=0IF {0x00+4}=0x80 ;$DATAx:14,w:20,f:Data Size:{0x10+4},x:32,w:10,f:%u=ENDIFELSEx:7,w:20,f:Data Size:{0x10+4},x:32,w:10,f:%10u=x:7,w:20,f:Data Offset:{0x14+2},x:38,w:4,f:%4hXx:42,w:1,f:h=$3:={0x0A+2}$4:={-1:0+1,0x09+1}IF $4>0x:7,w:20,f:Attr. name:{$3+$4},x:32,w:48,f:U=ENDIFENDIF$4:={0x10+4}$3:={0x14+2}IF $3>$2$3:=$2$4:=0ENDIF$5:=$3+$4IF $5>$2$4:=$2-$3ENDIFIF {0x00+4}=0x10 ;standard informationIF $63>0x:14,w:10,f:created:{$3+8},x:32,w:23,f:FILETIME=ENDIF$3:=$3+8$4:=$4-8x:14,w:18,f:modified:{$3+8},x:32,w:23,f:FILETIME=IF $63>0$3:=$3+8$4:=$4-8x:14,w:18,f:changed:{$3+8},x:32,w:23,f:FILETIME=$3:=$3+8$4:=$4-8x:14,w:18,f:accessed:{$3+8},x:32,w:23,f:FILETIME=$3:=$3+8$4:=$4-8x:14,w:18,f:attrs:{$3+2},x:32,w:16,f:F:R-H-S-V-D-A-d-n-t-s-r-c-o-i-e-+-$3:=$3+2$4:=$4-2{$3+2},x:49,w:16,f:F:+-+-+-+-+-+-+-+-+-+-+-+-D-I-+-+-=$3:=$3+2$4:=$4-2IF $4>=12x:14,w:18,f:Max versions:{$3+4},x:32,w:10,f:%u=$3:=$3+4$4:=$4-4x:14,w:18,f:Version:{$3+4},x:32,w:10,f:%u=$3:=$3+4$4:=$4-4x:14,w:18,f:Class Id:{$3+4},x:32,w:10,f:%u=$3:=$3+4$4:=$4-4IF $4>=24x:14,w:18,f:Owner Id:{$3+4},x:32,w:10,f:%u=$3:=$3+4$4:=$4-4x:14,w:18,f:Security Id:{$3+4},x:32,w:10,f:%u=$3:=$3+4$4:=$4-4x:14,w:18,f:Quota Charged:{$3+8},x:32,w:10,f:%u=$3:=$3+8$4:=$4-8x:14,w:18,f:USN:{$3+8},x:32,w:10,f:%u=$3:=$3+8$4:=$4-8ENDIFENDIFENDIFENDIFIF {0x00+4}=0x30 ;file name$FILENUM:={$3+4}IF $63>0x:14,w:10,f:folder:{$3+6},x:32,w:10,f:%u$3:=$3+6$4:=$4-6x:44,w:1,f:({$3+2},x:45,w:5,f:%hx:50,w:1,f:)=$3:=$3+2$4:=$4-2x:14,w:10,f:created:{$3+8},x:32,w:23,f:FILETIME=$3:=$3+8$4:=$4-8x:14,w:10,f:modified:{$3+8},x:32,w:23,f:FILETIME=$3:=$3+8$4:=$4-8x:14,w:10,f:changed:{$3+8},x:32,w:23,f:FILETIME=$3:=$3+8$4:=$4-8x:14,w:10,f:accessed:{$3+8},x:32,w:23,f:FILETIME=$3:=$3+8$4:=$4-8x:14,w:10,f:allocated:{$3+8},x:32,w:20,f:%I=$3:=$3+8$4:=$4-8x:14,w:10,f:size:{$3+8},x:32,w:20,f:%I=$3:=$3+8$4:=$4-8x:14,w:10,f:attrs:{$3+2},x:32,w:16,f:F:R-H-S-V-D-A-d-n-t-s-r-c-o-i-e-+-$3:=$3+2$4:=$4-2{$3+2},x:49,w:16,f:F:+-+-+-+-+-+-+-+-+-+-+-+-D-I-+-+-=$3:=$3+2$4:=$4-2x:14,w:10,f:reparse:{$3+4},x:32,w:10,f:%u=$3:=$3+4$4:=$4-4ELSE$3:=$3+0x40$4:=$4-0x40ENDIF$5:={-1:0+1,$3+1}$3:=$3+2x:14,w:5,f:name:{$3+$5},x:32,w:60,f:U=$3:=$3+$5$4:=$4-$5ENDIFIF {0x00+4}=0x60 ;volume namex:14,w:18,f:Volume Name:{$3+$4},x:32,w:60,f:U=$3:=$3+$4$4:=0ENDIFIF $4>0 ;hex outputIF $63>0x:7,w:10,f:Hex:IF $3>=$2x:16,w:30,f:ERROR Data OffsetELSE$5:=12$6:=$3$7:=0$8:=61LABEL:5{$3+1},x:$5,w:2,f:%cX$3:=$3+1$4:=$4-1$5:=$5+3$7:=$7+1IF $5<=57IF $4>0GOTO:6ENDIFENDIF{$6+$7},x:$8,w:$7,f:C$6:=$3$7:=$0LABEL:6IF $4>0IF $5>57=$5:=12$7:=0$8:=61ENDIFGOTO:5ENDIF=ENDIF=ENDIFENDIFELSE ;non-resident attributeIF $63=0IF {0x00+4}=0x80 ;$DATAx:14,w:20,f:Size:{0x30+8},x:32,w:20,f:%I=ENDIF...
[ Pobierz całość w formacie PDF ]