• mascalzone:~ root# SWFExtract -m -o /destination_path/myfile.mp3 /origin_path/myfile.swf
  

Note:

SWF Tools is a collection of SWF manipulation and creation utilities written by Rainer Böhme and Matthias Kramm. It is released under the GPL. You can find it @ http://www.swftools.org

While playing here and there with some laptops, I had the necessity to save disks images. I was with a new Intel MacBook. The following is the output from the mount command:

• mascalzone:~ root# mount
  
• /dev/disk0s2 on / (local, journaled)
  
• devfs on /dev (local)
  
• fdesc on /dev (union) on /.vol
  
• automount -nsl [264] on /Network (automounted)
  
• automount -fstab [269] on /automount/Servers (automounted)
  
• automount -static [269] on /automount/static (automounted)
  
• /dev/disk2s1 on /Volumes/BCK-EXT (local, nodev, nosuid)
  
• /dev/disk1s1 on /Volumes/Untitled (local, nodev, nosuid, read-only)

The last 2 volumes where my external USB drives, the first one was the storage area to store images, the second one the HD to acquire. I created the directory where to put the image:

• mascalzone:~ root# mkdir -p /Volumes/BCK-EXT/WindowsHD
  
• mascalzone:~ root# cd /Volumes/BCK-EXT/WindowsHD
  
• mascalzone:~ root# umount /dev/disk1s1
  
• mascalzone:~ root# dd if=/dev/disk1 of=/Volumes/BCK-EXT/WindowsHD/win_1.bin conv=notrunc,noerror,sync count=3000000 skip=0
  

(Note: if you use /dev/disk1s1 you get dd: /dev/disk1s1: Resource busy, you have to unmout disk1s1 and use disk1. I splitted the images because I copied directly into a FAT32 partition.)

• mascalzone:~ root# dd if=/dev/disk2 of=/Volumes/BCK-EXT/WindowsHD/win_2.bin conv=notrunc,noerror,sync count=3000000 skip=3000000
  
• 3000000+0 records in
  
• 3000000+0 records out
  
• 1536000000 bytes transferred in 1169.438317 secs (1313451 bytes/sec)
  
• ………….. and so on
  

The count switch indicates how many blocks are copied from the input device (512 bytes per block as default) count=3000000 is actually a file with a size of 1,43GB. The skip switch indicates the number of blocks that are skipped before copying begins. The conv=notrunc,noerror,sync switch indicates respectively not to truncate the output if an error is encountered, not to stop duplicating when an error is encountered, to place zeros in any blocks in the output if an error (bad blocks) is encountered. In order to automate the process I did some math, to calculate the iteration considering the size of the disk, and the following script:

• #!/bin/bash
  
• jump=0
  
• for i in seq ‘1 40′; do
  
• echo “I’m working with file: win_”$i”.dmg with skip=”$jump dd if=/dev/disk1 of=/Volumes/BCK-EXT/WindowsHD/win_$i.dmg conv=notrunc,noerror,sync count=3000000 skip=$jump jump=$(( $jump + 3000000 ))
  
• done
  
• mascalzone:~ root# ./hd_acquire.sh
  
• ……………….
  
• I’m working with file: win_40.dmg with skip=117000000
  
• 210240+0 records in
  
• 210240+0 records out
  
• 107642880 bytes transferred in 81.325086 secs (1323612 bytes/sec)
  

As you can see the last transfer is shorter than the other, 107642880 bytes are 102.7MB.