Shulou(Shulou.com)06/03 Report--

'' terminology specification: brief: BS refers to 256m 256Mbs bs refers to 256KBS: size, 256Mbs: refers to size, 256KSecsPerBS: number of sectors per BS SecsPerbs: number of sectors per bs FRid: file record number FRDs: physical sector number FRDBS: file record should be on the entire LUN FRDbs: the file record should be the bs number on the entire LUN FRDbsiBS: the bs where the file record is located, the serial number FRDSibs in the BS where the file record is located In the bs where the bitmap is located, the sequence number SMDid: disk number SMBS: the BS number of the disk where the bitmap is located SMbs: the bs number of the disk where the bitmap is located SMDs: the starting sector number of the bitmap SDid: the disk number of the source data SDBS: the BS number of the source data SDbs: the bs number of the source data SDs: the sector number of the source data SDSibs: the sector where the source data is located, the sequence number SDbsiBS in the bs where the source data is located: the bs where the source data is located The sequence number Mbsi8GM in the BS: the bs entry where the data resides, the sequence number MbsiBS in the 8G bitmap: the bs entry in which the data resides, and the sequence number MBSi8GM in the current BS bitmap: the BS entry in which the data resides In the 8G bitmap, the sequence number''import sysimport osimport structimport sqlite3import timeBS = 1024 * 1024bs = 256 * 1024SecsPerBS = BS / / 512SecsPerbs = bs / / 512bs_tnum = 128 * 1024 * 1024def trans (FRid MFT_Slice_List): mft_no_clus = FRid / / 8 mft_no_sec = (FRid% 8) * 2 for i in MFT_Slice_List: if I [0] + I [2] > mft_no_clus: if I [0] > mft_no_clus: continue FRDs = (mft_no_clus-I [0] + I [1]) * 16 + Mft_no_sec break FRDs + = 262208 # DBR pos return FRDsdef find_FRid_SDbs (FRid): mftlist = [] FRDS = trans (FRid MFT_Slice_List) # cu_mft is the cursor cu_mft.execute of allv2.db (r "select * from mft_info WHERE FRID =% d"% FRid) rows = cu_mft.fetchall () # SDid, SDS, FRid is row [0], row [1] Row [2] new = 0 for row in rows: if row [1]% 512 = = FRDS% 512: # sector code consistent new + = 1 SDid = row [0] SDS = row [1] mftlist.append ([FRid, FRDS, SDid, SDS]) if new! = 1: # the selected record is not unique Returns an empty mftlist print ("FR (% d), result not found or not only, new =% d, FRDS =% d"% (FRid, new, FRDS) # os.system ("pause") # pass return return mftlistdef find_bs_SMBS (FRDs, SDid) SDs): SMDBS_list = [] # Bitmap list FRbs = (FRDs / / 512) SDBS = SDs / / SecsPerBS SDbsiBS = (SDs% SecsPerBS) / / SecsPerbs print ("FRDs,SDid,SDs is:", FRDs,SDid SDs) print ("SDbsiBS is% d"% SDbsiBS) # cu_m is the cursor cu_m.execute of map_v2.db (r "select * from map_info where v_num =% d"% (FRbs * 512 + 1)) # + 1: because the lowest bit of v7000 MAP is 1 May indicate type rows = cu_m.fetchall () print ("rows:", rows) os.system ("pause") x = 0 # EM_SMDid, EM_SMBS, EM_Mbsi8GM, EM_FRDS_add_1 = range (4) for row in rows: Mbsi8GM = row [2] # bs entry where the data is located The bs entry where the sequence number FRDbsiBS = (FRDs% SecsPerBS) / / SecsPerbs MbsiBS = (Mbsi8GM + 2)% 1024 # data in the 8G bitmap is located, and the BS entry where the sequence number MBSi8GM = (Mbsi8GM + 2) / / 1024 # data is in the current BS bitmap Sequence number print ("MBSi8GM,SDbsiBS,MbsiBS is", MBSi8GM,SDbsiBS) in 8G bitmap MbsiBS) os.system ("pause") if MBSi8GM = 0: if SDbsiBS = = MbsiBS: X + = 1 SMDid = row [0] # disk number SMBS = row [1] # BS number SMDBS_list.append ([SMDid, SMBS, 0, SMDid) of the disk where the bitmap is located SMBS]) else: if SDbsiBS = = MbsiBS: X + = 1 SMDid = row [0] # disk number SMBS = row [1] # BS number SMDBS_list.append ([SMDid, SMBS, MBSi8GM, SDid, SDBS]) SMDBS_list.append ([SMDid, SMBS, 0, SMDid) of the disk where the bitmap is located SMBS]) if x = 0: print ("FRDs:%d result not found!"% FRDs) # os.system ("pause") # pass print ("line 131l, x = = 0") return os.system ("pause") print (SMDBS_list) return SMDBS_list#tmp1 writefile to diskwritedisk = Falseif writedisk: fd = open ("\\.\ physicaldrive3", 'rb+') def update_1Gmap (bsMapList) Map1g_list): SMDid, SMBS, MBSi8GM, SDid, SDBS = bsMapList SMDs = SMBS * SecsPerBS + 1024 SDbs = SDBS * 1024 smFile = sDisk [SMDid] [1] # disk where the bitmap is located sdFile = sDisk [SDid] [1] # disk where the data is located # to the specified bitmap location Read bs = 256K bytes smFile.seek (SMDs * 512) mData = smFile.read (bs) if MBSi8GM = 0: # 8GB's first 256K mapitem = struct.unpack_from ("1022Q", mData, 0) start_sec = 1024 elif MBSi8GM

< 32: # print("MBSi8gm IS",MBSi8GM) mapitem = struct.unpack_from("1024Q", mData, MBSi8GM * 8192 - 16) # 1024 * 8 代表一个256M start_sec = 0 else: return t = 0 keyMap = SMDid * 1000000 + SMBS * 100 + MBSi8GM cu.execute(r"INSERT or ignore into MAP values(%d, %d, %d, %d, %d, %d)" % (keyMap, SMDid, SMBS, MBSi8GM, SDid, SDBS)) cx.commit() # print(keyMap, SMDid, SMBS, MBSi8GM, SDid, SDBS) # os.system("pause") for ii in mapitem: if ii == 3: # 跳过位图为3的 t += 1 continue FRDbs = (ii - 1) // 512 if FRDbs >

Bs_tnum: t + = 1 print ("FRDBS is too large, FRDbs:% d"% FRDbs) else: value1 = (SDbs + t) * SecsPerbs + start_sec # value refers to the sector position of the bs value = value1 + (SDid)

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.