![]() |
China DOS Union-- Unite DOS · Advance DOS · Grow DOS --Union site: www.cn-dos.net Forum site: www.cn-dos.net/forum |
| Guest | Log in | Register | Members | Search | China DOS Union |
|
中国DOS联盟论坛 The time now is 2026-08-15 15:00 |
47,813 topics / 349,903 posts / today 1 new / 48,257 members |
| DOS疑难解答 & 问题讨论 (解答室) » Experts in data recovery, please come in!!! |
| Printable Version 1,117 / 2 |
| Floor1 Ontrack | Posted 2003-05-04 00:00 |
| 初级用户 Posts 2 Credits 107 | |
|
I used WINHEX (a piece of software for viewing disk data in hexadecimal under WUNDOWS) to look at the information on drive C: (primary partition, file
system is FAT32). I discovered that the FAT area does not appear until the 33rd sector after the system boot record sector. I remembered that it should come immediately after the system boot record sector. Later I converted the code in bytes 15 to 16 of the BPB in the system boot record into decimal, and it came out to exactly 33 (could these two bytes be used to indicate the starting sector of the FAT? I remember that in a FAT12 system they indicate reserved sectors, and generally are 1). Also, in sector 6 there is actually information completely identical to the system boot record, which I really don't understand?。。。。。。。。。 |
|
| Floor2 Ontrack | Posted 2003-05-04 00:00 |
| 初级用户 Posts 2 Credits 107 | |
|
Also, if recovering files manually (using only DEBUG), how can I find that file's directory entry table? In the directory table only its filename is in ASSIC code; does that mean I also need some software to look up that filename? Also, under what circumstances will the first byte of the filename in the directory table of a deleted file not be changed to E5? In that case, how should recovery be done? 。。。。If recovering directly from sectors in the data area, then how should it be done?
Can you tell me specifically how to do manual recovery? 。。。。Thanks!!! QQ:46394091 |
|
| Floor3 nre | Posted 2003-05-04 00:00 |
| 银牌会员 Posts 361 Credits 1,210 | |
|
Inside the boot record,
byte 14 is Reserved sectors 32(32 reserved sectors) byte 16 is Number of FATs 2 (2 FATs) So just as you said, because 32 sectors are reserved, the starting position of the FAT is sector 33 Among the 32 reserved sectors, sector 6-8 are backups of sector 0-2. I once used this backup before to restore the boot sector |
|
|
[ Contact the Union admin team -
中国DOS联盟 -
Standard version ] Sponsored by ifanr Inc | © 2001–2023 |