Page 1 of 1
Can someone identify this first sector in a flash drive ?
Posted: August 2nd, 2014, 8:33
by Matiw
hex.txt
I was examning a Flash drives MBR to check if there is any Byte-interleave. The dump from the Flash drive has already gone through some processes such as XOR extraction and others, but I can not yet see a normal Fat32 MBR yet. Can someone help. Attached is the dump after the processes.
Re: Can someone identify this first sector in a flash drive
Posted: August 2nd, 2014, 9:05
by Sasha Sheremetov
There's no file attached to topic.
Re: Can someone identify this first sector in a flash drive
Posted: August 2nd, 2014, 10:57
by Matiw
Re: Can someone identify this first sector in a flash drive
Posted: August 2nd, 2014, 13:41
by HaQue
looks like part of the flash firmware, or a cd partition on the flash drive.
IMHO it should start with BtPramCD so yes, maybe some interleave or something not done right. see comparison with my example which is a code file example that flashes leds on a flash drive when uploaded to one.
Re: Can someone identify this first sector in a flash drive
Posted: August 2nd, 2014, 14:19
by Sasha Sheremetov
Bit errors..Apply ECC. There's no byte split in PS2251(looks like Phison). You either overheated chip or standard 3.3V produces too much noise. Attach one block with data here I check it in bitmap
Re: Can someone identify this first sector in a flash drive
Posted: August 2nd, 2014, 15:47
by Sasha Sheremetov
This is bit error from HaQue's comparison

Re: Can someone identify this first sector in a flash drive
Posted: August 3rd, 2014, 12:52
by Matiw
Does ECC function well in a transformed page ? Will not some of the ECC information get lost during the process ?
Sasha Sheremetov wrote:This is bit error from HaQue's comparison

Re: Can someone identify this first sector in a flash drive
Posted: August 3rd, 2014, 16:07
by Sasha Sheremetov
You need to apply ECC on physical images (dumps). If chip has bad columns then remove them and apply ECC on the result. (Most latest TLC chips of Sandisk [0x45] and Toshiba [0x98] have them.)
Re: Can someone identify this first sector in a flash drive
Posted: August 4th, 2014, 11:22
by Matiw
Thank you everyone for your help. I have succeeded in recovering all the data. The problem was that the auto method failed to identify the correct Translator, I got the right info from Solbase. It have to admit that I was a little lazy to ask for help without first looking there.
Thanks