Kwakungu-2019. Ilabhorethri yethu ithole idrayivu ye-QUANTUM FIREBALL Plus KA enamandla angu-9.1GB, okungajwayelekile neze esikhathini sethu. Ngokusho komnikazi wedrayivu, ukwehluleka kwenzeka emuva ngo-2004 ngenxa yokuphelelwa amandla kwamandla, okwathatha i-hard drive nezinye izingxenye ze-PC nayo. Bese kuba khona ukuvakashelwa kwezinsizakalo ezihlukahlukene ngemizamo yokulungisa idrayivu nokubuyisela idatha, engazange iphumelele. Kwezinye izimo bathembisa ukuthi kuzoba ezishibhile, kodwa abakaze baxazulule inkinga, kwabanye kwakubiza kakhulu futhi iklayenti lalingafuni ukubuyisela idatha, kodwa ekugcineni idiski yadabula izikhungo eziningi zesevisi. Yalahleka izikhathi eziningana, kodwa ngenxa yokuthi umnikazi wayenakekela ukurekhoda kolwazi oluvela ku-stickers ehlukahlukene kusengaphambili, wakwazi ukuqinisekisa ukuthi i-hard drive yakhe ibuyiselwe kwezinye izikhungo zesevisi. Ukuhamba akuzange kudlule ngaphandle komkhondo, iminonjana eminingi ye-solder yahlala ebhodini lesilawuli sokuqala, futhi ukungabi khona kwezakhi ze-SMD nakho kwazizwa ngokubonakalayo (uma ngibheka phambili, ngizosho ukuthi lokhu kuncane kwezinkinga zale drive).
Ilayisi. 1 HDD Quantum Fireball Plus KA 9,1GB
Into yokuqala okwakudingeka siyenze kwakuwukusesha endaweni yokulondoloza yomlando iwele lakudala lale drayivu enebhodi elisebenzayo lokulawula. Lapho lesi sicelo sesiqediwe, kwaba nokwenzeka ukuba kwenziwe izinyathelo ezibanzi zokuxilonga. Ngemva kokuhlola ama-motor windings nge-circuit emfushane futhi uqiniseke ukuthi ayikho isifunda esifushane, sifaka ibhodi kusuka ku-donor drive kuya ku-drive yesiguli. Sisebenzisa amandla futhi sizwe umsindo ovamile we-shaft ejikelezayo, sidlula ukuhlolwa kokulinganisa ngokulayisha i-firmware, futhi ngemva kwemizuzwana embalwa idrayivu ibika ngamarejista ukuthi isilungele ukuphendula imiyalo evela ku-interface.
Ilayisi. Izinkomba ezi-2 ze-DRD DSC zibonisa ukulungela ukwamukela imiyalo.
Senza ikhophi yasenqolobaneni wonke amamojula we-firmware. Sihlola ubuqotho bamamojula we-firmware. Azikho izinkinga zokufunda amamojula, kodwa ukuhlaziya imibiko kukhombisa ukuthi kukhona okungajwayelekile.
Ilayisi. 3. Ithebula lendawo.
Sinaka ithebula lokusabalalisa izindawo futhi siqaphele ukuthi inani lamasilinda yi-13845.
Ilayisi. 4 Uhlu lwe-P (uhlu oluyisisekelo – uhlu lwamaphutha olwethulwa ngesikhathi somjikelezo wokukhiqiza).
Sidonsela ukunaka enanini elincane kakhulu lamaphutha nendawo yawo. Sibheka imojuli yelogi yokufihla iphutha lasefekthri (60h) futhi sithola ukuthi ayinalutho futhi ayiqukethe okukodwa okufakiwe. Ngokusekelwe kulokhu, singacabanga ukuthi kwesinye sezikhungo zesevisi zangaphambilini, kungenzeka ukuthi okunye ukukhohlisa kwenziwa ngendawo yesevisi yedrayivu, futhi ngengozi noma ngamabomu kwabhalwa imodyuli yangaphandle, noma uhlu lwamaphutha ekuqaleni. eyodwa yasulwa. Ukuze sihlole lokhu kucabangela, sidala umsebenzi kokuthi Isikhiqizi Sedatha “senza ikhophi yomkhakha ngamunye” kanye nezinketho “zokudala umhumushi obonakalayo” ezinikwe amandla.
Ilayisi. 5 Amapharamitha omsebenzi.
Ngemva kokudala umsebenzi, sibheka okufakiwe kuthebula lokuhlukanisa ku-sector zero (LBA 0)
Ilayisi. 6 Irekhodi lokuqalisa eliyinhloko netafula lokuhlukanisa.
Ku-offset 0x1BE kukhona okufakiwe okukodwa (amabhayithi angu-16). Uhlobo lwesistimu yefayela ekuhlukaniseni luyi-NTFS, lusukela ekuqaleni kwemikhakha engu-0x3F (63), usayizi wokuhlukanisa 0x011309A3 (18) imikhakha.
Kumhleli womkhakha, vula i-LBA 63.
Ilayisi. 7 Umkhakha wokuqalisa we-NTFS
Ngokusho kolwazi emkhakheni we-boot we-partition ye-NTFS, singasho okulandelayo: usayizi womkhakha owamukelwe kuvolumu ungamabhayithi angama-512 (igama elithi 0x0 (0) libhalwe ku-offset 0200x512B), inani lemikhakha kuqoqo 8 (ibhayithi engu-0x0 ibhalwe ku-offset 0x08D), usayizi weqoqo ungamabhayithi angu-512x8=4096, irekhodi lokuqala le-MFT litholakala endaweni eyi-offset yemikhakha engu-6 kusukela ekuqaleni kwediski (ku-offset ye-291x519 quadruple word 0x30 0 00 00C 00 00 (00) inombolo yeqoqo lokuqala le-MFT. Inombolo yomkhakha ibalwa ngefomula: Inombolo yeqoqo * inombolo yemikhakha ku-cluster + offset kuya ekuqaleni kwesigaba 0* 00+00= 786).
Asiqhubekele kumkhakha 6.
U-fig. 8
Kodwa idatha equkethwe kulo mkhakha ihluke ngokuphelele kurekhodi le-MFT. Nakuba lokhu kukhombisa ukuhumusha okungenzeka okungalungile ngenxa yohlu olungalungile, akufakazeli leli qiniso. Ukuqhubeka nokuhlola, sizofunda idiski ngemikhakha eyi-10 kuzo zombili izinkomba ngokuhlobene nemikhakha eyi-000. Bese sizocinga izinkulumo ezijwayelekile kulokho esikufundayo.
Ilayisi. 9 Ukurekhoda kokuqala kwe-MFT
Emkhakheni wezi-6 sithola irekhodi lokuqala le-MFT. Isikhundla saso sihluka esibalweni esisodwa ngemikhakha engama-291, bese kuthi iqembu lamarekhodi ayi-551 (kusuka ku-32 kuye ku-16) lilandele ngokuqhubekayo. Ake singene esikhundleni somkhakha wezi-0 kuthebula lokushintsha bese siqhubekela phambili ngemikhakha engama-15.
U-fig. 10
Isikhundla serekhodi No. 16 kufanele sibe ku-offset 12, kodwa sithola ama-zero lapho esikhundleni serekhodi le-MFT. Masenze ukusesha okufanayo endaweni ezungezile.
Ilayisi. 11 MFT ukungena 0x00000011 (17)
Kutholwe ingxenye enkulu ye-MFT, eqala ngenombolo yerekhodi engu-17 enobude obungamarekhodi angama-53) ngokushintshwa kwemikhakha eyi-646. Ukuze uthole isikhundla 17, faka i-shift yemikhakha engu-+12 kuthebula lokushintsha.
Ngemva kokunquma isikhundla sezingcezu ze-MFT emkhathini, singaphetha ngokuthi lokhu akubukeki njengokuhluleka okungahleliwe nokuqoshwa kwezingcezu ze-MFT kuma-offset angalungile. Inguqulo enomhumushi ongalungile ingabhekwa njengeqinisekisiwe.
Ukuze siqhubeke senze ama-shift points abe ngawendawo, sizosetha ubuningi bokuhamba okungenzeka. Ukuze senze lokhu, sinquma ukuthi ingakanani umaka wokugcina we-NTFS partition (ikhophi yomkhakha we-boot) oguquliwe. Emfanekisweni 7, ku-offset 0x28, igama le-quadword inani likasayizi wesahlukaniso wemikhakha engu-0x00 00 00 00 01 13 09 A2 (18). Ake sengeze i-offset ye-partition ngokwayo kusukela ekuqaleni kwediski kuya kubude bayo, futhi sithola i-offset yokuphela kwe-NTFS marker 024 + 866= 18. Njengoba kulindelekile, ikhophi edingekayo yomkhakha we-boot yayingekho. Lapho kuseshwa indawo ezungezile, kutholwe ngokushintshashintsha okwandayo kwemikhakha engu-+024 ngokuhlobene nesiqephu sokugcina se-MFT.
Ilayisi. 12 Ikhophi yomkhakha wokuqalisa we-NTFS
Asiyinaki enye ikhophi yomkhakha we-boot ku-offset 18, njengoba ingahlobene nokuhlukanisa kwethu. Ngokusekelwe emisebenzini yangaphambilini, kwatholakala ukuthi ngaphakathi kwesigaba kukhona okufakiwe kwemikhakha engama-041 “evele yavela” ekusakazeni, eyandisa idatha.
Senza ukufunda okugcwele kwedrayivu, okushiya imikhakha engama-34 engafundiwe. Ngeshwa, akunakwenzeka ukuqinisekisa ngokuthembekile ukuthi zonke ziyiziphambeko ezisusiwe ohlwini lwe-P, kodwa ekuhlaziyeni okuqhubekayo kuhle ukucabangela isikhundla sabo, ngoba kwezinye izimo kuzokwazi ukunquma ngokuthembekile amaphuzu okushintsha ukunemba komkhakha, hhayi ifayela.
Ilayisi. 13 Izibalo zokufunda idiski.
Umsebenzi wethu olandelayo kuzoba ukusungula izindawo ezicishe zifane zamashifu (ngokunemba kwefayela ezenzeke kulo). Ukuze senze lokhu, sizoskena wonke amarekhodi e-MFT futhi sakhe amaketanga ezindawo zamafayela (izingcezu zefayela).
Ilayisi. 14 Amaketanga endawo yamafayela noma izingcezu zawo.
Okulandelayo, sisuka efayeleni siye efayeleni, sibheka isikhathi lapho kuzoba khona enye idatha esikhundleni senhlokweni yefayela elindelwe, futhi inhlokweni oyifunayo izotholakala ngokushintsha okuthile okuhle. Futhi njengoba sicwenga ama-shift points, sigcwalisa ithebula. Umphumela wokuwugcwalisa uzoba ngaphezu kuka-99% wamafayela ngaphandle kokulimala.
Ilayisi. 15 Uhlu lwamafayela abasebenzisi (imvume itholwe kuklayenti yokushicilela lesi sithombe-skrini)
Ukuze uthole ukushintsha kwamaphoyinti kumafayela ngamanye, ungenza umsebenzi owengeziwe futhi, uma wazi ukwakheka kwefayela, uthole okufakiwe kwedatha engahlobene nalo. Kodwa kulo msebenzi bekungenzeki ngokwezomnotho.
PS Ngingathanda futhi ukukhuluma nozakwethu, ababesezandleni zabo leli cwecwe ngaphambilini. Sicela uqaphele lapho usebenza ne-firmware yedivayisi futhi wenze ikhophi yasenqolobaneni yedatha yesevisi ngaphambi kokushintsha noma yini, futhi ungayibhebhethekisi inkinga ngamabomu uma ungakwazi ukuvumelana neklayenti emsebenzini.
Source: www.habr.com