中国DOS联盟论坛

China DOS Union

-- Unite DOS · Advance DOS · Grow DOS --
Union site: www.cn-dos.net Forum site: www.cn-dos.net/forum
Guest | Log in | Register | Members | Search | China DOS Union
中国DOS联盟论坛
The time now is 2026-08-15 15:00
47,813 topics / 349,903 posts / today 1 new / 48,257 members
DOS疑难解答 & 问题讨论 (解答室) » Experts in data recovery, please come in!!!
Printable Version  1,117 / 2
Floor1 Ontrack Posted 2003-05-04 00:00
初级用户 Posts 2 Credits 107
I used WINHEX (a piece of software for viewing disk data in hexadecimal under WUNDOWS) to look at the information on drive C: (primary partition, file

system is FAT32). I discovered that the FAT area does not appear until the 33rd sector after the system boot record sector. I remembered that it should come immediately

after the system boot record sector. Later I converted the code in bytes 15 to 16 of the BPB in the system boot record

into decimal, and it came out to exactly 33 (could these two bytes be used to indicate the starting sector of the FAT? I remember that in a FAT12 system

they indicate reserved sectors, and generally are 1). Also, in sector 6 there is actually information completely identical to the system boot record, which

I really don't understand?。。。。。。。。。
Floor2 Ontrack Posted 2003-05-04 00:00
初级用户 Posts 2 Credits 107
Also, if recovering files manually (using only DEBUG), how can I find that file's directory entry table? In the directory table only its filename is in ASSIC code; does that mean I also need some software to look up that filename? Also, under what circumstances will the first byte of the filename in the directory table of a deleted file not be changed to E5? In that case, how should recovery be done? 。。。。If recovering directly from sectors in the data area, then how should it be done?     
  Can you tell me specifically how to do manual recovery? 。。。。Thanks!!!
            
                 QQ:46394091
Floor3 nre Posted 2003-05-04 00:00
银牌会员 Posts 361 Credits 1,210
Inside the boot record,
byte 14 is Reserved sectors 32(32 reserved sectors)
byte 16 is Number of FATs 2 (2 FATs)
So just as you said, because 32 sectors are reserved, the starting position of the FAT is sector 33
Among the 32 reserved sectors, sector 6-8 are backups of sector 0-2. I once used this backup before to restore the boot sector
[ Contact the Union admin team - 中国DOS联盟 - Standard version ]
Sponsored by ifanr Inc | © 2001–2023