Further investigation

The 32-bit addresses from the previous post don’t seem te be direct pointers onto the disk. When looking at a full 250GB disk with hundreds of files, most of the ‘addresses’ are of the form

xx006300
xx006200
xx006100
xx006000

Most of the xx’s are consecutive. Some 32-bit words even appear double, but I’m not sure if this has to do with deleted files.

I wrote a small tool that seeks to a given place on the disk and then starts outputting the data, which I then piped into mplayer. Turns out that short-play (SP) recorded movies are chopped up into 16MB blocks (about 28 seconds), which are stored in some non-constant order (although in the test most blocks were stored in decreasing but concatenated offset order).

Leave a Reply

You must be logged in to post a comment.