Restore modification time if possible

[slavanap]

Use $STANDARD_INFORMATION for modification time because only it is preserved on file copy. Reference: https://www.forensixchange.com/posts/19_04_22_win10_ntfs_time_rules/

My fix may not be the best, because I haven't read full code base, but it allowed me to restore photos with correct modification time on them (file capture time) which have been copied onto the damaged drive. So, let's discuss if I didn't catch something.