Switch to full style
CompactFlash, SD, MMC, USB flash storage. Anything that does not have moving parts inside.
Post a reply

Can someone identify this first sector in a flash drive ?

August 2nd, 2014, 8:33

hex.txt
I was examning a Flash drives MBR to check if there is any Byte-interleave. The dump from the Flash drive has already gone through some processes such as XOR extraction and others, but I can not yet see a normal Fat32 MBR yet. Can someone help. Attached is the dump after the processes.

Re: Can someone identify this first sector in a flash drive

August 2nd, 2014, 9:05

There's no file attached to topic.

Re: Can someone identify this first sector in a flash drive

August 2nd, 2014, 10:57

Sorry, here is the bin file>

http://www.filedropper.com/hex

Re: Can someone identify this first sector in a flash drive

August 2nd, 2014, 13:41

looks like part of the flash firmware, or a cd partition on the flash drive.
IMHO it should start with BtPramCD so yes, maybe some interleave or something not done right. see comparison with my example which is a code file example that flashes leds on a flash drive when uploaded to one.
a.jpg

Re: Can someone identify this first sector in a flash drive

August 2nd, 2014, 14:19

Bit errors..Apply ECC. There's no byte split in PS2251(looks like Phison). You either overheated chip or standard 3.3V produces too much noise. Attach one block with data here I check it in bitmap

Re: Can someone identify this first sector in a flash drive

August 2nd, 2014, 15:47

This is bit error from HaQue's comparison

Image

Re: Can someone identify this first sector in a flash drive

August 3rd, 2014, 12:52

Does ECC function well in a transformed page ? Will not some of the ECC information get lost during the process ?


Sasha Sheremetov wrote:This is bit error from HaQue's comparison

Image

Re: Can someone identify this first sector in a flash drive

August 3rd, 2014, 16:07

You need to apply ECC on physical images (dumps). If chip has bad columns then remove them and apply ECC on the result. (Most latest TLC chips of Sandisk [0x45] and Toshiba [0x98] have them.)

Re: Can someone identify this first sector in a flash drive

August 4th, 2014, 11:22

Thank you everyone for your help. I have succeeded in recovering all the data. The problem was that the auto method failed to identify the correct Translator, I got the right info from Solbase. It have to admit that I was a little lazy to ask for help without first looking there.

Thanks
Post a reply