Recovering .RAW from HEX Editor/Corrupted Card

Started by fatpig, February 21, 2014, 07:20:55 AM

Previous topic - Next topic

0 Members and 1 Guest are viewing this topic.

fatpig

Hello,

I have a corrupted CF card.
The camera did not stop accessing the card, and when I finally took out the battery,
the next time it said the card was not formatted.

Well, As windows asks me to format the card,
and Software like PhotoRec does not know the RAW format,
I have now tried to recover footage using a hex editor like WinHEX,
which I used to open the whole corrupted Disk.

I just extracted a huge block of data until the end of the first footer.
(12th line starting from "RAWM" - like is described here:
http://www.magiclantern.fm/forum/index.php?topic=5732.msg41099#msg41099 )

What I get when I put it into raw2dng are pink grainy images which still have the silhouettes of my images,
but are divided up into 4 rectangles- and have the wrong colors and grain.
So I assume I have not found the right start of the file.
I know how to identify the footer. But how to identify the start of the file?

When comparing RAW files I could not find similarities there.

Can anyone help?

Thank you!

regards

Felix

a1ex

First, try small offsets until you get rid of the grain (wrong colors are OK). Then, use the rectangle boundaries to see how many lines/columns you are away from the next top-left image corner, do the math in bytes, and that should do the trick.

baldand has a recovery script for raw files, try it.

fatpig

hello a1ex!

This, again, was very helpful. Thank you for making me aware of that script.
It is almost a one-stop solution for my problem.

If I find a command line hex-editor that can replace strings and access raw disks like HxD does,
I may consider making this an easy to use tool. :)

fatpig

I have great news- it seems to work.

baldand has adjusted the script and added some bug fixes,
and now the script is able to work with Dumps of the complete CF-Card and outputs valid .RAW Files.

This is HUGE news for everyone that has a crashed card or lost data on it!

VictorSaliba

Hi,

Could you please explain the steps you did to recover the pink psychedelic frames ?
I joined the spanned files and pasted the footer with hex editor but don't know how to use baldand script.

Can anyone help ?