GUIDELINES FOR DATA RECOVERY OF SIMILAR CASES (from developers):
Current Flash drive has capacity of 32 GB printed on lable, but PHYSICALLY dumps have 64 GB capacity
After all preparations with dump we can see that sectors with data goes with sectors filled by 0000 after each 256 sectors one by one. It's mean that goes 256 sectors filled by data than - 256 sectors filled by 0000 - and this structure is repeating till the end of dump. Unfortunatelly, operation of splitting by blocks with 256 sectors will not help us, because first 512 sectors in block filled by DATA, and final 512 sectors in block filled by 0000. That's why we should use special operation Cut Sectors in Block:
Formula for cutting should be the following:
BEGINNING OF BLOCK 512-256;(256-256)*N;256-512; END OF BLOCK
N=(32768 - (512+256+512+256))/(256+256) = 61
KEEP-DELETE;(KEEP-DELETE)*N(KEEP-DELETE);
GUIDELINES FOR DATA RECOVERY OF SIMILAR CASES(statistical data):
