Recommended To Read:

What data recovery tools to buy if you want to start a data recovery business?

Free video data recovery training on how to recover lost data from different hard drives?

Where to buy head and platter replacement tools at good prices?

Data recover case studies step by step guide

I want to attend professional data recovery training courses

In command to know hard disk better, we must have a simple understanding of hard disk construction. (NTFS uses different file management technology with FAT16 and the FAT32 file system, here we only introduce FAT16 and FAT32) The hard disk data may divide into 5 parts approximately according to its different characteristics and functions: MBR area, DBR area, FAT area, DIR area and DATA area. Among them, MBR is founded by the partition software, while DBR area, FAT area, DIR area and DATA area are founded by high-level format procedure. When file system writes in data, it just rewrites corresponding FAT area, DIR area and DATA area. Also it is the result which these 5 regions affect together. Only by this way, hard disk can be managed methodically. Here are some introductions to the 5 regions.

The first physical sector (cylinder 0, head 0, sector 1) of the first hard drive in the system (the first hard drive with the BIOS device number 0x80); each hard drive contains an MBR, but not every BIOS can start the corresponding operation system from every hard drive. When booting from the hard drive, the BIOS or a special Firmware loads the contents of the MBR to a fixed address in the memory and allows it to take control. This code then loads either the operation system from a bootable hard drive partition, or from a complex boot loader, such as LILO.

Short for DOS Boot Record, it is the sector at cylinder 0, column 1, and sector 1 of a hard disk.  DBR is the first sector that the operation system visits. It contains a boot program and a BPB (BIOS Parameter Block). The main task of the boot program is to determine whether the first two files in root directory of this partition are the boot files of operation system, when MBR hands over the system mastery to it. Take an example of DOS, i.e. IO.SYS and MSDOS.SYS. DOS of low edition requests that these two files are the first two files, and located at the section start of the root directory, covering the first two directory items (the high edition does not have this requirement.). Moreover, Windows and DOS are families; therefore, Windows follows the same management manner, except for the filenames. If it does exist, then reads IO.SYS in the memory, and hands over mastery to IO.SYS. BPB parameter block records the start sector, ending sector, file storage form, descriptor of hard disk media, size of root directory, number of FAT and size of allocated cell.

File Allocation Table (FAT) is a file system that was developed for MS-DOS and is the primary file system for consumer versions of Microsoft Windows up to and including Windows ME. The FAT file system is considered relatively uncomplicated, and because of that, it is a popular format for floppy disks; moreover, it is supported by virtually all existing operation systems for personal computers, and because of that, it is often used to share data between several operation systems booting on the same computer (a multi-boot environment). It is also used on solid-state memory cards and other similar devices. It has a serious drawback in that when files are deleted and new files written to the media, the files can become scattered over the entire media making reading and writing a slow process. De-fragmentation is one solution to this, but is often a lengthy process in itself and has to be repeated regularly to keep the FAT file system clean.

FAT is also called 12-bit FAT, the file allocation table (FAT) for a floppy disk. The location of files on a floppy disk are listed in a one-column table in the FAT. Because the width of each entry in a floppy disk column is 12 bits, the FAT is called FAT12. As a file system for floppy disks, it had a number of limitations: no support for hierarchical directories, cluster addresses were “only” 12-bits long (which made the code manipulating the FAT a bit tricky) and the disk size was stored as a 16-bit count of sectors, which limited the size to 32MB.

The FAT file system, as is the case with most file systems, does not utilize individual sectors, and there are several performance reasons for this. By using individual sectors, the process of managing disks becomes overly cumbersome since files are being broken into 512-byte pieces. If you were to take a 20 GB disk volume set up with 512 byte sectors and manage them individually, the disk would have over 40 million individual sectors. Just keeping track of this many pieces of information is both time, as well as resource, consuming. While some operation systems do allocate specific sector storage, they also require some advanced intelligence to do so. Bear in mind how old the FAT file system is, as it was designed many years ago as merely a simple file system, without the capability to managed individual sectors.

In order for FAT to manage files with some form of efficiency is to group sectors into larger blocks referred to as clusters, or allocation units. Cluster size, however, is not a predetermined size, but rather is determined by the size of the disk volume itself, with small volumes (disk sizes) resulting in smaller clusters, and larger volumes (disk sizes) using larger cluster sizes. For the most part, a cluster ranges in size from 4 sectors or 2,048 bytes to 64 sectors or 32,768 bytes. You should be aware that you may, on some occasions, find 128-sector clusters in use at 65,536 bytes per cluster, as well as some floppy disks with smaller clusters that is usual at just 1 sector per cluster. In all cases, the sectors in a cluster are continuous, therefore each cluster is a continuous block of space on the disk.

Cluster sizing, and therefore partition or volume size, as they are directly related, have an important impact on performance and disk utilization. In all cases, cluster size is determined at the time a disk volume is partitioned. Certain third-party partitioning utilities such as Partition Magic by PowerQuest can alter the cluster size of an existing partition within specific parameters. However, this aside, once the partition size is selected, so are the cluster sizes fixed.

FAT 16 means that file allocation table that uses 16 bits for addressing clusters. It is commonly used with DOS and Windows 95 systems. A 16-bit DOS and Windows file system (see FAT) that varies cluster sizes based on hard drive size. Cluster sizes range from 4K (for drives up to 127MB), to 4K (255MB drives), 8K (511MB drives), 16K (1GB drives). and 32K (for drives up to 2GB).

The ultimate capacity of a FAT16 partition is 2GB.  FAT 32 is a disk file allocation system from Microsoft that uses 32-bit values for FAT entries instead of 16-bit values used by the original FAT system, enabling partition sizes up to 2TB (terabytes). FAT32 first appeared in Windows 95B and is also found in Windows 98 and Windows NT 5.0.

In order to overcome the volume size limit of FAT16 while still allowing memory-constrained DOS real-mode code to handle the format, Microsoft decided to implement a newer generation of FAT, known as FAT32, with 32-bit cluster numbers, of which 28 bits are currently used.

In theory, this should support a total of approximately 268,435,438 (< 2^28 ) clusters, allowing for drive sizes in the range of 2 terabytes. However, due to limitations in Microsoft’s scandisk utility, the FAT is not allowed to grow beyond 4,177,920 (< 2^24 ) clusters, placing the volume limit at 124.55 gigabytes, unless “scandisk” is not needed. Windows 2000 and XP placed a limit on the size of FAT32 partitions they can create at 32 GB, Microsoft says this is by design but does not explain why, and those versions of Windows are quite capable of reading and writing larger FAT32 partitions created by other means. FAT32 was introduced with Windows 95 OSR2. The many changes it incorporated made it a major improvement.

The maximum possible file size for a FAT32 volume is 4 GB minus 1 byte (2^32 -1 bytes). For most users, this has become the most nagging limit of FAT32 as of 2005, since video capture and editing applications can easily exceed this limit, as can the system swap file.

32-bit File Allocation Table File System Not the same as VFAT or FAT, which are both 16-bit file systems.

Means  Directory, also called FDT?File Directory Table. DIR is the root sector, following after the second FAT (backup FAT). It records each start cell, files. Operation system can locate files according to the outset of FAT and FAT.

DATA area is the real place where data is stored. It is after DIR, covering the most space of hard disk.

The location of the 5 areas is as following:


Usually, MBR covers 63 sectors (actually it covers only one); DBR covers 32 sectors (actually it covers the first and the sixth sectors. The first sector works while the sixth is backup of the first); FAT1=FAT2. The length of FAT will change according to the size of partition and the number of sectors. DIR changes the most. In early time system, DIR has fixed length of 32 sectors while each file directory covers 32 bytes. As a result, there are at most 512 items under root directory. Floppy disk can only contain 112 items, or there would be no file or directory created under root directory. Afterward, the limitation is broken. From then on, there will be no single root directory, which becomes part of DATA. Even, root directory files are not right after FAT. They can be in any position in DATA.

Data recovery Salon welcomes your comments and share with us your ideas, suggestions and experience. Data recovery salon is dedicated in sharing the most useful data recovery information with our users and only if you are good at data recovery or related knowledge, please kindly drop us an email and we will publish your article here. We need to make data recovery Salon to be the most professional and free data recovery E-book online.