In the third partition (I am a retail machine developer, maybe in the second partition), under the content \ 00000000000 \ 4d5308e \ 0000001

The generation time is about 100K, which is obviously a photo file.

Export to PC hard disk (as shown in figure 1).

2. Use wxPirs- 1. 1 to open the exported file, and you can see the decrypted file. Right-click the decrypted file to be exported, and remember to add jpg suffix when exporting. (as shown in figure 2)