Print Page - masm32 code to recover deleted files.

Title: masm32 code to recover deleted files.
Post by: bonjour on March 09, 2007, 07:12:34 PM

Hey guys, I dont even know how to read NTFS partion table. I am thinking to have a small code for learning purpose to recover deleted file.
I would appreciate if any one could give me how to do it?
How can I access the MFT?
I would like to gather directory, file information from the MFT as well as main partition information.

Is there a documentation or paper regarding the MFT?

Title: Re: masm32 code to recover deleted files.
Post by: MoreBits on March 10, 2007, 04:07:38 PM

hi,

what about the WinSDK (if it is planned to be done using WinAPI) or a short search on MSDN? - You'll find a NTFS reference here (http://technet2.microsoft.com/WindowsServer/en/library/81cc8a8a-bd32-4786-a849-03245d68d8e41033.mspx?mfr=true).

regards

MoreBits

Title: Re: masm32 code to recover deleted files.
Post by: Tedd on March 12, 2007, 02:01:18 PM

Better information: www.linux-ntfs.org (http://www.linux-ntfs.org)
:wink

The MASM Forum Archive 2004 to 2012

General Forums => The Workshop => Topic started by: bonjour on March 09, 2007, 07:12:34 PM