FAT 32 table

FAT table is used for determination of condition of clusters and for searching next cluster of file or catalog.
FAT表用于確定簇的狀態(tài)，并用于搜索下一個(gè)文件或目錄集。

One record about condition of cluster uses 4 bytes (32 bits) in FAT32.
The first sector of FAT32 table starts with signature?F8 FF FF.
FAT32表的第一個(gè)扇區(qū)以簽名F8 FF開頭。

Free space is marked with signature?00 00 00 00. The end of the file is marked with signature?FF FF FF F8?–?FF FF FF FF. The damaged cluster is marked with signature?FF FF FF F7?.

Searching for file tables using Hex Editor:
使用十六進(jìn)制編輯器搜索文件分配表：

F8FFFF/h?– put to find the first sector of FAT tables
F8FFFF / h?– 找到FAT表的第一個(gè)扇區(qū)

01070000020700000307070000/h?– put to find the 7th sector of FAT tables.
0107020703070407/h?– 找到第七扇區(qū)的FAT表。

There is the special view of the first three sectors of FAT32 table on the picture above.
FAT32表前三個(gè)部分的特點(diǎn)如上圖所示。

轉(zhuǎn)載請(qǐng)注明：成都千喜數(shù)據(jù)恢復(fù)中心 » Flash Extractor用戶手冊(cè)-FAT 32文件分配表