HDD GURU FORUMS http://forum.hddguru.com/ |
|
Restore MBR and data on SDXC card? http://forum.hddguru.com/viewtopic.php?f=10&t=35059 |
Page 2 of 2 |
Author: | fzabkar [ March 2nd, 2017, 20:32 ] |
Post subject: | Re: Restore MBR and data on SDXC card? |
Can you show us what the header of a typical MTS file looks like? You could use a freeware hex editor such as HxD: https://mh-nexus.de/en/hxd/ |
Author: | pcimage [ March 3rd, 2017, 2:55 ] |
Post subject: | Re: Restore MBR and data on SDXC card? |
You could try "Remo" video recovery software. |
Author: | Gregor [ March 4th, 2017, 4:04 ] |
Post subject: | Re: Restore MBR and data on SDXC card? |
fzabkar wrote: In DMDE, select Tools -> Full Scan. Tick the Raw and FAT checkboxes. Under Raw:File Signatures, uncheck everything and then Add your MTS file's signature and properties. Hi, I've did all this. Have ran a scan, but nothing was found. Can you please check the properties that I've added? I suspect that something is wrong with the signature (#built-in signature# appears as #built-in\x20signature#). https://drive.google.com/open?id=0B34Te ... k5ZcnhDdU0 https://drive.google.com/open?id=0B34Te ... XlOUUM0OGs Here is some example of right signature: https://drive.google.com/open?id=0B34Te ... jBnR3R1bG8 Thank you, fzabkar |
Author: | Gregor [ March 4th, 2017, 14:33 ] |
Post subject: | Re: Restore MBR and data on SDXC card? |
fzabkar, I've wrote an answer to you yesterday buy it wasn't appear here until now.. How much time it takes to approve a post?.. I've wrote that I've made new file signature for MTS file in DMDE and ran a scan. Nothing was found. Maybe something is wrong with the custom signature that i've made. And, unfortunately, I don't know how to search for a header of a file in hex editor.. |
Author: | Gregor [ March 4th, 2017, 16:00 ] |
Post subject: | Re: Restore MBR and data on SDXC card? |
fzabkar, I've posted wrong screenshots before. Here is the rights ones: Attachment: Attachment:
|
Author: | fzabkar [ March 4th, 2017, 16:12 ] |
Post subject: | Re: Restore MBR and data on SDXC card? |
Here is the header of an MTS file which I recorded off a digital TV transmission (SBS_TWO is the TV channel): Code: Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 00000000 02 1E 15 76 47 FF FF 00 0B 00 53 00 42 00 53 00 ...vGÿÿ...S.B.S. 00000010 5F 00 54 00 57 00 4F 00 2D 00 32 00 30 00 31 00 _.T.W.O.-.2.0.1. 00000020 32 00 30 00 00 00 00 00 00 00 00 00 00 00 00 00 2.0............. http://www.users.on.net/~fzabkar/temp/GermanyNetherlands2012Euro_start.mts Simply open the file in HxD and view the data at offset 0. Your MTS file may have a different format. In DMDE I might try searching for a custom header as follows:
|
Author: | fzabkar [ March 4th, 2017, 19:51 ] |
Post subject: | Re: Restore MBR and data on SDXC card? |
Here are a few threads that talk about MTS file headers: .MTS file header: http://forum.acelaboratory.com/viewtopic.php?t=6825 Custom file signature -> .mts problem: viewtopic.php?t=21390&start= Trying to find AVCHD files formatted drive: viewtopic.php?t=10623&start= It appears that the relevant part of the signature starts at offset 04. We would really need to see samples of your own files in order to configure an appropriate search string for your particular case. |
Author: | fzabkar [ March 4th, 2017, 20:48 ] |
Post subject: | Re: Restore MBR and data on SDXC card? |
The data in my MTS file appear to be organised in 192-byte (0xC0) blocks. Here are the first 8 bytes of each block: Code: Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F 00000000 02 1E 15 76 47 FF FF 00 ...vGÿÿ. 000000C0 02 1E 15 76 47 FF FF 01 ...vGÿÿ. 00000180 02 1E 15 76 47 FF FF 02 ...vGÿÿ. ........ 00000A80 02 1E 15 76 47 FF FF 0E ...vGÿÿ. 00000B40 02 1E 15 76 47 FF FF 0F ...vGÿÿ. 00000C00 00 00 00 00 47 00 A2 12 ....G.¢. 00000CC0 00 00 00 19 47 00 A2 13 ....G.¢. 00000D80 00 00 00 2A 47 00 A2 14 ...*G.¢. 00000E40 00 00 00 67 47 00 A2 15 ...gG.¢. 00000F00 00 00 00 78 47 00 A2 16 ...xG.¢. 00000FC0 00 00 00 94 47 00 A2 17 ...”G.¢. It would appear that in my case I should search for those sectors which contain \x47\xFF\xFF\x00 at offset 0x04. |
Author: | Gregor [ March 5th, 2017, 16:09 ] |
Post subject: | Re: Restore MBR and data on SDXC card? |
fzabkar, thank you, my friend, for your help. Unfortunately, I have to give up. All those things are beyond my mental abilities. |
Author: | fzabkar [ March 5th, 2017, 16:43 ] |
Post subject: | Re: Restore MBR and data on SDXC card? |
That's too bad. If your MTS files are structured in the same way as mine, and if PhotoRec has found all the file fragments, then I can see a relatively easy way to identify each fragment and stitch them all together into their respective files. In fact I believe I can automate the process with a relatively simple program. All I would need from you would be a hex dump of the beginning and end of a good MTS file. In HxD ...
Drag your cursor from offset 00000000 to 00000200 Select Edit -> Copy as -> Editor view Then switch to your HDD Guru reply box Click the "Code" BBcode button Paste (Ctrl-V) your hex dump into the "code" area You can navigate to the start and end of your MTS file in HxD using Ctrl-Home and Ctrl-End, respectively. |
Author: | fzabkar [ March 5th, 2017, 17:02 ] |
Post subject: | Re: Restore MBR and data on SDXC card? |
This is how I propose to address the problem. - Write a program to analyse each MTS file fragment. This program should identify the first and last 192-byte blocks. - Sort all the MTS fragments by block number. - Stitch the fragments together by matching the end block of one MTS fragment with the leading block of the next fragment. For example, if a particular fragment ends with block number X, then we need to find a fragment that starts with block number X+1. Hopefully the previous sort procedure will have done this for us. - We could use the following DOS command to concatenate the appropriate fragments:
|
Author: | Amarbir[CDR-Labs] [ March 6th, 2017, 0:55 ] |
Post subject: | Re: Restore MBR and data on SDXC card? |
fzabkar wrote: This is how I propose to address the problem. - Write a program to analyse each MTS file fragment. This program should identify the first and last 192-byte blocks. - Sort all the MTS fragments by block number. - Stitch the fragments together by matching the end block of one MTS fragment with the leading block of the next fragment. For example, if a particular fragment ends with block number X, then we need to find a fragment that starts with block number X+1. Hopefully the previous sort procedure will have done this for us. - We could use the following DOS command to concatenate the appropriate fragments:
Frank , Way to go man ,this is exactly the way to handle this .Mts .A general data recovery tool cannot recover "Most " .mts files .More and More cameras are fragmenting the files they store making data recovery hard if not impossible . |
Author: | fzabkar [ March 6th, 2017, 15:38 ] |
Post subject: | Re: Restore MBR and data on SDXC card? |
It appears that the first non-zero sector on the OP's card is actually the first sector of an MTS file: download/file.php?id=13939&mode=view The format appears to be identical to these screenshots: download/file.php?id=721&mode=view download/file.php?id=720&mode=view download/file.php?id=719&mode=view This MTS format differs from my own. ISTM that each file begins with "47 40 00 10 00 00 B0 11 00 00 C1 00 00 00 00 E0 1F ..." at offset 0x04. The first 4 bytes appear to constitute a big-endian time stamp. In this case, instead of searching for a block number (?), I would try to match the time stamp of the last block of a particular MTS fragment with the time stamp of the leading block of the next fragment. One could also confirm the integrity of an MTS file by ensuring that the time stamps of each block are sequential and reasonably close. |
Author: | fzabkar [ March 7th, 2017, 16:36 ] | ||
Post subject: | Re: Restore MBR and data on SDXC card? | ||
Here is a sample MTS file (24.8MB): https://archive.org/download/scm-10794- ... /00007.mts I have extracted the first 8 bytes of each 192-byte block. Here are excerpts from the start, middle, and end of the file: Code: 0000006C 47 40 00 10 first 8 bytes of block #1 0000093C 47 41 00 10 first 8 bytes of block #2 0000120C 47 40 1F 10 first 8 bytes of block #3 00001ADC 47 10 01 20 000023AC 47 50 11 10 00002C7C 47 10 11 11 0000354C 47 10 11 12 00003E1C 47 10 11 13 000046EC 47 10 11 14 00004FBC 47 10 11 15 0000588C 47 10 11 16 0000615C 47 10 11 17 00006A2C 47 10 11 18 000072FC 47 10 11 19 00007BCC 47 10 11 1A 0000849C 47 10 11 1B 00008D6C 47 10 11 1C 0000963C 47 10 11 1D 00009F0C 47 10 11 1E 0000A7DC 47 10 11 1F 0000B0AC 47 10 11 10 0000B97C 47 10 11 11 0000C24C 47 10 11 12 0000CB1C 47 10 11 13 0000D3EC 47 10 11 14 ........ 0A134FFC 47 10 11 1D 0A1358CC 47 10 11 1E 0A13619C 47 10 11 1F 0A136A6C 47 10 11 10 0A13733C 47 10 11 11 0A137C0C 47 10 11 12 0A1384DC 47 10 11 13 0A138DAC 47 10 11 14 0A13967C 47 10 11 15 0A139F4C 47 10 11 16 0A13A81C 47 10 11 17 0A13B0EC 47 10 11 18 0A13B9BC 47 10 11 19 0A13C28C 47 10 11 1A 0A13CB5C 47 10 11 1B 0A13D42C 47 10 11 1C 0A13DCFC 47 10 11 1D 0A13E5CC 47 10 11 1E 0A13EE9C 47 10 11 1F 0A13F76C 47 10 11 10 0A14003C 47 10 11 11 0A14090C 47 10 11 12 0A1411DC 47 10 11 13 ........ 137EA790 47 10 11 1F 137EB060 47 10 11 10 137EB930 47 10 11 11 137EC200 47 10 11 12 137ECAD0 47 10 11 13 137ED3A0 47 10 11 14 137EDC70 47 10 11 15 137EE540 47 10 11 16 137EEE10 47 10 11 17 137EF6E0 47 10 11 18 137EFFB0 47 10 11 19 137F0880 47 10 11 1A 137F1150 47 10 11 1B 137F1A20 47 10 11 1C 137F22F0 47 10 11 1D 137F2BC0 47 10 11 1E 137F3490 47 10 11 1F 137F3D60 47 10 11 10 137F4630 47 10 11 31 137F4F00 47 71 00 13 137F7C63 47 31 00 14 137FA9C6 47 31 00 15 137FD729 47 31 00 16 1380048C 47 31 00 37 1380DC8C 47 71 00 18 138109EF 47 31 00 19 13813752 47 31 00 1A 138164B5 47 31 00 1B 13819218 47 31 00 3C 13819AE8 47 10 11 32 1381A3B8 47 1F FF 10 1381AC88 47 1F FF 10 1381B558 47 1F FF 10 1381BE28 47 1F FF 10 1381C6F8 47 1F FF 10 1381CFC8 47 1F FF 10 1381D898 47 1F FF 10 1381E168 47 1F FF 10 1381EA38 47 1F FF 10 1381F308 47 1F FF 10 1381FBD8 47 1F FF 10 138204A8 47 1F FF 10 13820D78 47 1F FF 10 first 8 bytes of last block ISTM that the MTS file fragments could easily be reassembled by sorting the time stamps of the first and last blocks of each fragment. Bytes 4 - 8 could be used for additional confirmation.
|
Page 2 of 2 | All times are UTC - 5 hours [ DST ] |
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group http://www.phpbb.com/ |