HDD GURU FORUMS
http://forum.hddguru.com/

Restore MBR and data on SDXC card?
http://forum.hddguru.com/viewtopic.php?f=10&t=35059
Page 2 of 2

Author:  fzabkar [ March 2nd, 2017, 20:32 ]
Post subject:  Re: Restore MBR and data on SDXC card?

Can you show us what the header of a typical MTS file looks like?

You could use a freeware hex editor such as HxD:
https://mh-nexus.de/en/hxd/

Author:  pcimage [ March 3rd, 2017, 2:55 ]
Post subject:  Re: Restore MBR and data on SDXC card?

You could try "Remo" video recovery software.

Author:  Gregor [ March 4th, 2017, 4:04 ]
Post subject:  Re: Restore MBR and data on SDXC card?

fzabkar wrote:
In DMDE, select Tools -> Full Scan. Tick the Raw and FAT checkboxes. Under Raw:File Signatures, uncheck everything and then Add your MTS file's signature and properties.


Hi, I've did all this. Have ran a scan, but nothing was found. Can you please check the properties that I've added? I suspect that something is wrong with the signature (#built-in signature# appears as #built-in\x20signature#).
https://drive.google.com/open?id=0B34Te ... k5ZcnhDdU0
https://drive.google.com/open?id=0B34Te ... XlOUUM0OGs

Here is some example of right signature:
https://drive.google.com/open?id=0B34Te ... jBnR3R1bG8

Thank you, fzabkar

Author:  Gregor [ March 4th, 2017, 14:33 ]
Post subject:  Re: Restore MBR and data on SDXC card?

fzabkar, I've wrote an answer to you yesterday buy it wasn't appear here until now.. How much time it takes to approve a post?..
I've wrote that I've made new file signature for MTS file in DMDE and ran a scan. Nothing was found. Maybe something is wrong with the custom signature that i've made.

And, unfortunately, I don't know how to search for a header of a file in hex editor..

Author:  Gregor [ March 4th, 2017, 16:00 ]
Post subject:  Re: Restore MBR and data on SDXC card?

fzabkar, I've posted wrong screenshots before. Here is the rights ones:
Attachment:
Untitled-1 (1).jpg
Untitled-1 (1).jpg [ 295.67 KiB | Viewed 13232 times ]

Attachment:
Untitled-2 (1).jpg
Untitled-2 (1).jpg [ 287.66 KiB | Viewed 13232 times ]

Author:  fzabkar [ March 4th, 2017, 16:12 ]
Post subject:  Re: Restore MBR and data on SDXC card?

Here is the header of an MTS file which I recorded off a digital TV transmission (SBS_TWO is the TV channel):

Code:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000000  02 1E 15 76 47 FF FF 00 0B 00 53 00 42 00 53 00  ...vGÿÿ...S.B.S.
00000010  5F 00 54 00 57 00 4F 00 2D 00 32 00 30 00 31 00  _.T.W.O.-.2.0.1.
00000020  32 00 30 00 00 00 00 00 00 00 00 00 00 00 00 00  2.0.............


http://www.users.on.net/~fzabkar/temp/GermanyNetherlands2012Euro_start.mts

Simply open the file in HxD and view the data at offset 0. Your MTS file may have a different format.

In DMDE I might try searching for a custom header as follows:

    \x02\x1E\x15\x76\x47\xFF\xFF

Author:  fzabkar [ March 4th, 2017, 19:51 ]
Post subject:  Re: Restore MBR and data on SDXC card?

Here are a few threads that talk about MTS file headers:

.MTS file header:
http://forum.acelaboratory.com/viewtopic.php?t=6825

Custom file signature -> .mts problem:
viewtopic.php?t=21390&start=

Trying to find AVCHD files formatted drive:
viewtopic.php?t=10623&start=

It appears that the relevant part of the signature starts at offset 04. We would really need to see samples of your own files in order to configure an appropriate search string for your particular case.

Author:  fzabkar [ March 4th, 2017, 20:48 ]
Post subject:  Re: Restore MBR and data on SDXC card?

The data in my MTS file appear to be organised in 192-byte (0xC0) blocks.

Here are the first 8 bytes of each block:

Code:
Offset(h) 00 01 02 03 04 05 06 07 08 09 0A 0B 0C 0D 0E 0F

00000000  02 1E 15 76 47 FF FF 00                          ...vGÿÿ.

000000C0  02 1E 15 76 47 FF FF 01                          ...vGÿÿ.

00000180  02 1E 15 76 47 FF FF 02                          ...vGÿÿ.
........

00000A80  02 1E 15 76 47 FF FF 0E                          ...vGÿÿ.

00000B40  02 1E 15 76 47 FF FF 0F                          ...vGÿÿ.

00000C00  00 00 00 00 47 00 A2 12                          ....G.¢.

00000CC0  00 00 00 19 47 00 A2 13                          ....G.¢.

00000D80  00 00 00 2A 47 00 A2 14                          ...*G.¢.

00000E40  00 00 00 67 47 00 A2 15                          ...gG.¢.

00000F00  00 00 00 78 47 00 A2 16                          ...xG.¢.

00000FC0  00 00 00 94 47 00 A2 17                          ...”G.¢.

It would appear that in my case I should search for those sectors which contain \x47\xFF\xFF\x00 at offset 0x04.

Author:  Gregor [ March 5th, 2017, 16:09 ]
Post subject:  Re: Restore MBR and data on SDXC card?

fzabkar, thank you, my friend, for your help. Unfortunately, I have to give up. All those things are beyond my mental abilities.

Author:  fzabkar [ March 5th, 2017, 16:43 ]
Post subject:  Re: Restore MBR and data on SDXC card?

That's too bad. :-(

If your MTS files are structured in the same way as mine, and if PhotoRec has found all the file fragments, then I can see a relatively easy way to identify each fragment and stitch them all together into their respective files. In fact I believe I can automate the process with a relatively simple program. All I would need from you would be a hex dump of the beginning and end of a good MTS file.

In HxD ...

    Select File -> Open and choose your MTS file
    Drag your cursor from offset 00000000 to 00000200
    Select Edit -> Copy as -> Editor view

    Then switch to your HDD Guru reply box
    Click the "Code" BBcode button
    Paste (Ctrl-V) your hex dump into the "code" area

You can navigate to the start and end of your MTS file in HxD using Ctrl-Home and Ctrl-End, respectively.

Author:  fzabkar [ March 5th, 2017, 17:02 ]
Post subject:  Re: Restore MBR and data on SDXC card?

This is how I propose to address the problem.

- Write a program to analyse each MTS file fragment. This program should identify the first and last 192-byte blocks.

- Sort all the MTS fragments by block number.

- Stitch the fragments together by matching the end block of one MTS fragment with the leading block of the next fragment. For example, if a particular fragment ends with block number X, then we need to find a fragment that starts with block number X+1. Hopefully the previous sort procedure will have done this for us.

- We could use the following DOS command to concatenate the appropriate fragments:

    COPY /B file1 + file2 + file3 file_all.mts

Author:  Amarbir[CDR-Labs] [ March 6th, 2017, 0:55 ]
Post subject:  Re: Restore MBR and data on SDXC card?

fzabkar wrote:
This is how I propose to address the problem.

- Write a program to analyse each MTS file fragment. This program should identify the first and last 192-byte blocks.

- Sort all the MTS fragments by block number.

- Stitch the fragments together by matching the end block of one MTS fragment with the leading block of the next fragment. For example, if a particular fragment ends with block number X, then we need to find a fragment that starts with block number X+1. Hopefully the previous sort procedure will have done this for us.

- We could use the following DOS command to concatenate the appropriate fragments:

    COPY /B file1 + file2 + file3 file_all.mts


Frank ,
Way to go man ,this is exactly the way to handle this .Mts .A general data recovery tool cannot recover "Most " .mts files .More and More cameras are fragmenting the files they store making data recovery hard if not impossible .

Author:  fzabkar [ March 6th, 2017, 15:38 ]
Post subject:  Re: Restore MBR and data on SDXC card?

It appears that the first non-zero sector on the OP's card is actually the first sector of an MTS file:
download/file.php?id=13939&mode=view

The format appears to be identical to these screenshots:
download/file.php?id=721&mode=view
download/file.php?id=720&mode=view
download/file.php?id=719&mode=view

This MTS format differs from my own. ISTM that each file begins with "47 40 00 10 00 00 B0 11 00 00 C1 00 00 00 00 E0 1F ..." at offset 0x04. The first 4 bytes appear to constitute a big-endian time stamp. In this case, instead of searching for a block number (?), I would try to match the time stamp of the last block of a particular MTS fragment with the time stamp of the leading block of the next fragment. One could also confirm the integrity of an MTS file by ensuring that the time stamps of each block are sequential and reasonably close.

Author:  fzabkar [ March 7th, 2017, 16:36 ]
Post subject:  Re: Restore MBR and data on SDXC card?

Here is a sample MTS file (24.8MB):
https://archive.org/download/scm-10794- ... /00007.mts

I have extracted the first 8 bytes of each 192-byte block.

Here are excerpts from the start, middle, and end of the file:

Code:
0000006C 47 40 00 10  first 8 bytes of block #1
0000093C 47 41 00 10  first 8 bytes of block #2
0000120C 47 40 1F 10  first 8 bytes of block #3
00001ADC 47 10 01 20
000023AC 47 50 11 10
00002C7C 47 10 11 11
0000354C 47 10 11 12
00003E1C 47 10 11 13
000046EC 47 10 11 14
00004FBC 47 10 11 15
0000588C 47 10 11 16
0000615C 47 10 11 17
00006A2C 47 10 11 18
000072FC 47 10 11 19
00007BCC 47 10 11 1A
0000849C 47 10 11 1B
00008D6C 47 10 11 1C
0000963C 47 10 11 1D
00009F0C 47 10 11 1E
0000A7DC 47 10 11 1F
0000B0AC 47 10 11 10
0000B97C 47 10 11 11
0000C24C 47 10 11 12
0000CB1C 47 10 11 13
0000D3EC 47 10 11 14
........
0A134FFC 47 10 11 1D
0A1358CC 47 10 11 1E
0A13619C 47 10 11 1F
0A136A6C 47 10 11 10
0A13733C 47 10 11 11
0A137C0C 47 10 11 12
0A1384DC 47 10 11 13
0A138DAC 47 10 11 14
0A13967C 47 10 11 15
0A139F4C 47 10 11 16
0A13A81C 47 10 11 17
0A13B0EC 47 10 11 18
0A13B9BC 47 10 11 19
0A13C28C 47 10 11 1A
0A13CB5C 47 10 11 1B
0A13D42C 47 10 11 1C
0A13DCFC 47 10 11 1D
0A13E5CC 47 10 11 1E
0A13EE9C 47 10 11 1F
0A13F76C 47 10 11 10
0A14003C 47 10 11 11
0A14090C 47 10 11 12
0A1411DC 47 10 11 13
........
137EA790 47 10 11 1F
137EB060 47 10 11 10
137EB930 47 10 11 11
137EC200 47 10 11 12
137ECAD0 47 10 11 13
137ED3A0 47 10 11 14
137EDC70 47 10 11 15
137EE540 47 10 11 16
137EEE10 47 10 11 17
137EF6E0 47 10 11 18
137EFFB0 47 10 11 19
137F0880 47 10 11 1A
137F1150 47 10 11 1B
137F1A20 47 10 11 1C
137F22F0 47 10 11 1D
137F2BC0 47 10 11 1E
137F3490 47 10 11 1F
137F3D60 47 10 11 10
137F4630 47 10 11 31
137F4F00 47 71 00 13
137F7C63 47 31 00 14
137FA9C6 47 31 00 15
137FD729 47 31 00 16
1380048C 47 31 00 37
1380DC8C 47 71 00 18
138109EF 47 31 00 19
13813752 47 31 00 1A
138164B5 47 31 00 1B
13819218 47 31 00 3C
13819AE8 47 10 11 32
1381A3B8 47 1F FF 10
1381AC88 47 1F FF 10
1381B558 47 1F FF 10
1381BE28 47 1F FF 10
1381C6F8 47 1F FF 10
1381CFC8 47 1F FF 10
1381D898 47 1F FF 10
1381E168 47 1F FF 10
1381EA38 47 1F FF 10
1381F308 47 1F FF 10
1381FBD8 47 1F FF 10
138204A8 47 1F FF 10
13820D78 47 1F FF 10  first 8 bytes of last block

ISTM that the MTS file fragments could easily be reassembled by sorting the time stamps of the first and last blocks of each fragment. Bytes 4 - 8 could be used for additional confirmation.

Attachments:
MTSBLKS.rar [271.01 KiB]
Downloaded 387 times

Page 2 of 2 All times are UTC - 5 hours [ DST ]
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group
http://www.phpbb.com/