CHNG 3: B NH

1. Phn loi
2. Mt s khi nim
3. T chc b nh
4. B nh trong
5. B nh ngoi

2:12 PM

Chng 3

Phn loi
B nh ngoi

B nh quang: CD, DVD,

B nh t

a cng: ATA, SATA,

a mm

B nh trong

ROM
(Read Only
Memory)

ROM
PROM (Programmable ROM)
EPROM (Erasable PROM)
EEPROM (Electrically EPROM)

RAM
2:12 PM

(Random Access
Memory)

Flash ROM
Chng 3

Phn loi
RAM

SRAM (Static RAM)

DRAM (Dynamic RAM)

FPM DRAM (Fast Page Mode)

EDO DRAM (Extended Data Out)
BEDO DRAM (Burst EDO)
SDRAM (Synchronous)
DDR SDRAM (Double Data Rate)
DDR2 SDRAM

PRAM (Phase RAM)

2:12 PM

Chng 3

Mt s khi nim v thut ng

Dung lng : kh nng lu tr
Tc

B nh ngoi : s bit truyn/s

B nh trong : tn s xung clock

Giao tip

SIMM (Single In-Line Memory Module)

DIMM (Dual In-Line Memory Module)
SO DIMM (Small Outline DIMM)
RIMM (Rambus In-Line Memory Module)

2:12 PM

Chng 3

Mt s khi nim v thut ng

PC100, PC133

: tn s xung clock

PC1600, PC2100

: tn s xung clock ca h thng DDR SDRAM

PC100 -> 100 x 2 x 8 byte = 1600 -> PC1600

PC133 -> 133 x 2 x 8 byte = 2128 -> PC2100
CAS latency

: thi gian tr khi gii m cho b nh

2:12 PM

Chng 3

T chc b nh
B nh 2KB
A0 A6

m ng
vo

Gii m
hng

A7 A10

Ma trn nh

8 mch gii m
ct

m ng ra

2:12 PM

Chng 3

T chc b nh
Memory Cell
(W d logic)
(Word
l i )

Word vt
l
Memory Array

Gii m
hng

Gii m ct
2:12 PM

Chng 3

T chc b nh
B nh 64K x 16 gii m 2 bc vi 10 bit gii m hng:
S bit gii m ct

: 6 bit

Tng s word logic

: 216

Kch thc word logic

: 16 bit

Tng s word vt l

: 210

S lng word logic / word vt l : 26

Kch thc word vt l
2:12 PM

: 16 x 26
Chng 3

B nh trong
S cu to DRAM

DRAM

Tin np
(precharge)

iu
khin

Ma trn nh
a ch

m a
ch

D liu
vo

Gii m
hng

Khuch i
nhy

m d
liu

m
d liu
D liu
ra

Gii m ct
2:12 PM

Chng 3

B nh trong
DRAM

Bit line
Word line

Cu to mt t bo nh DRAM

2:12 PM

Chng 3

10

VDD

Mch tin np
(precharge)

B nh trong

T bo nh

DRAM
+

Gii m
hng
S nguyn l ca DRAM Khuch i nhy
(sense amplifier)
Bit line

Bit line

VDD

m
ng
vo

m
ng
ra
Chng 3 Gii m ct

2:12 PM

11

B nh trong
DRAM

tchu k
tRAS

tPR
tCAS

a ch

D liu
Gin thi gian c DRAM
2:12 PM

Chng 3

12

VDD

Mch tin np
(precharge)

B nh trong
SRAM

T bo nh

Gii m hng

Khuch i nhy
(sense amplifier)
S nguyn l ca SRAM
Bit line
VDD

Bit line
m
ng
ra

m
ng
vo
2:12 PM

Gii m ct

Chng 3

13

B nh trong
VCC

ROM
Lu tr bng diode
0

Hng

VD

2:12 PM

Chng 3

0
Ct

14

B nh trong
PROM

VCC

Lu tr bng diode
mc ni tip vi
cu ch

Hng

Ct
2:12 PM

Chng 3

15

B nh trong
EPROM
Lu tr bng FET c cu trc FAMOST
(Floating gate Avalanche injection MOS Transistor)
VCC

Floating gate: khng c in tch

FET dn
1

2:12 PM

Chng 3

16

B nh trong
EPROM
Lu tr bng FET c cu trc FAMOST
(Floating gate Avalanche injection MOS Transistor)
VCC

Floating gate: c in tch

FET khng dn do
floating gate c in tch
0

2:12 PM

Chng 3

17

Chng 3

18

B nh ngoi
a mm

2:12 PM

B nh ngoi
a mm
1 Bo v chng ghi
2 Trc quay
3 Bo v mt a
4 Lp nha bo v

5 Vng giy
6 Lp t lu tr d liu

7 Sector (512 byte): 1

Cluster: 2, 4, 8 sector
8 Side: 0 hay 1

9 Track: 0

2:12 PM

Chng 3

19

B nh ngoi
a mm
Dung lng a mm = s track s sector/track s side 512 byte
a mm c 80 track, 2 side, 18 sector / track:
Dung lng = 80 x 18 x 2 x 512 = 1440 x 210 = 1440 KB
Nh sn xut: 1440 KB = 1.44 MB
H iu hnh: 1440 KB = 1440 / 1024 = 1.4 MB
2:12 PM

Chng 3

20

10

B nh ngoi
a cng

2:12 PM

Chng 3

21

Chng 3

22

B nh ngoi
a cng

2:12 PM

11

B nh ngoi
a cng

- Thi gian tm kim l thi gian chuyn

u t t mt track ny sang track khc
- Thi gian chuyn u t l thi gian chuyn
gia hai trong s cc u t khi c hay ghi
d liu
- Thi gian quay tr l thi gian tnh t khi u t
c t trn mt track cho n khi ti c
sector mong mun
2:12 PM

Chng 3

23

B nh ngoi
a cng
Track cylinder : 0
Side : 0
Sector : 1 (thng thng t 1 63 v cha 512 byte)

Dung lng a cng = s side s cylinder s sector/track 512 byte

2:12 PM

Chng 3

24

12

B nh ngoi
a cng
a cng c 1022 cylinder, 255 side, 63 sector / track:
Dung lng = 255 x 1022 x 63 x 512 = 8,209,215 x 210
Nh sn xut: 8,209,215
8 209 215 KB = 8.2
8 2 GB
H iu hnh: 8,209,215 KB = 8,209,215 / 10242 = 7.8 GB

2:12 PM

Chng 3

25

B nh ngoi
a cng Giao tip
IDE (Integrated Drive Electronics) ATA (Advanced Technology Attachment)
EIDE (Enhenced IDE): pht trin t IDE, dng DMA truyn d liu
SCSI (Small Computer System Interface) SASI (Shugart Associates System
Interface)
Fibre Channel: SCSI song song
SATA (Serial Advanced Technology Attachment)
SAS (Serial Attached SCSI): da c s trn SCSI v tng thch vi SATA)
2:12 PM

Chng 3

26

13

B nh ngoi
Sector logic
80 track, 2 side, 18 sector / track:
Sector vt l

Sector logic

Track 0, side 0, sector 1

Sector logic 0

Track 0, side 0, sector 18

Sector logic 17

Track 0, side 1, sector 1

Sector logic 18

Track 1, side 0, sector 1

Sector logic 36

Track 79, side 1, sector 18

2:12 PM

Sector logic 2879

Side tng 1
sector logic tng 18
= s sector/track
Track tng 1
sector logic tng 36
= s sector/track *
s side

Chng 3

27

B nh ngoi
Sector logic
Sector logic = STT track * S sector / track * S side +
+ STT side * S sector / track + STT sector - 1
80 track, 2 side, 18 sector / track:
Track 5, side 1, sector 17
Track 15, side 0, sector 19
2:12 PM

Sector logic 5*18*2+1*18+17-1

= Sector logic 214
Khng tn ti sector vt l
Chng 3

28

14

B nh ngoi
Sector logic
Sector logic = STT cylinder * S sector / track * S side +
+ STT side * S sector / track + STT sector - 1
1022 cylinder, 255 side, 63 sector / track:
Cylinder 95, side 50,
sector 42

2:12 PM

Sector logic 95*255*63 + 50*63

+ 42 - 1 = Sector logic 1,529,366

Chng 3

29

B nh ngoi
Sector logic
Chuyn t sector logic sector vt l:

Sector log ic
= a d b
So sec tor / track So side
b
= c d d
So sector / track
Sector vt l: Track (Cylinder) a, side c, sector d + 1
2:12 PM

Chng 3

30

15

B nh ngoi
Sector logic
80 track, 2 side, 18 sector / track
Chuyn t sector logic 500 sector vt l:

500
= 13 d 32
18x 2
32
= 1 d 14
18
Sector vt l: Track 13, side 1, sector 15
2:12 PM

Chng 3

31

B nh ngoi
Sector logic
1022 cylinder, 255 side, 63 sector / track
Chuyn t sector logic 5,000,000 sector vt l:

5, 000, 000
= 311 d 3785
63x 255
3785
= 60 d 5
63
Sector vt l: Cylinder 311, side 60, sector 6
2:12 PM

Chng 3

32

16

B nh ngoi
Phn vng
Primary DOS
Extended DOS
Non DOS

2:12 PM

Chng 3

33

B nh ngoi
Sector phn vng
Lu tr thng tin v cc phn vng
V tr: sector logic 0 ca a cng (cylinder 0, side 0, sector 1)
Thng tin v phn vng bt u ti cc im vo (partition entry)

2:12 PM

Chng 3

34

17

B nh ngoi
Sector phn vng
MBR (Master Boot Record): 446 byte
Byte 0 - 445

512 byte

Bng phn vng : 64 byte

Byte 446 - 509

Phn vng 1: 16 byte

Byte 446 - 461
Phn vng 2: 16 byte
Byte 462 - 477
Phn vng 3: 16 byte
Byte 478 - 493

Nhn dng : 2 byte (AA55h)

Byte 510 - 511
2:12 PM

Phn vng 4: 16 byte

Byte 494 - 509

Chng 3

35

B nh ngoi
Bng phn vng
Byte
0
1
2
3
4
5
6
7
8 - 11
12 - 15

ngha
Phn vng c khi ng c (=80h) hay khng (=00h)
Side bt u
Sector bt u (bit 0-5, bit 6-7 dng cho cylinder)
Cylinder bt u
Loi phn vng
Side kt thc
Sector kt thc
Cylinder kt thc
Sector logic
Tng s sector

2:12 PM

Chng 3

36

18

B nh ngoi
Loi phn vng
Gi tr

ngha
FAT-12 hay a logic vi s sector <
32680
FAT-16hay a logic vi s sector 2680
v 65535
Phn vng m rng
BIGDOS FAT (> 32MB)
NTFS chnh
FAT32 chnh, dng INT 13 m rng
FAT32 m rng, dng INT 13 m rng
FAT16 m rng, dng INT 13 m rng
FAT16 chnh, dng INT 13 m rng

01h
04h
05h
06h
07h
0Bh
0Ch
0Eh
0Fh
2:12 PM

Chng 3

37

B nh ngoi
Bng phn vng
Phn vng 1
Phn vng 2

01
41
C1
1
C1

00
97
2
2D
93

06
07
05
01

0F
0F
0
0F
0F

2:12 PM

7F
FF
FF
FF

96
2C
92
A6

3F
90
30
D0

00
42
81
12

00
06
0
0C
0E

00
00
00
00

51
A0
A0
0
C0

Chng 3

80
42 06 00 00
3E 06 00 00
91 01 00 00
4E 00 00

01
00
00 Phn vngg 3
00
Phn vng 4

38

19

B nh ngoi
Phn vng 1

Side bt
u: 1
Cho php
khi ng
80 01

01 00 06 0F 7F 96 3F 00 - 00 00 51 42 06 00
Sector bt
u: 1

Loi phn vng:

BIGDOS FAT

Tng s sector: 410,193

(00 06 42 51h)
Sector logic: 63
(00 00 00 3Fh)

Cylinder
bt u: 0

Sector vt l kt thc:
Side: 15
Sector: 63
Sector: 01h 0000 0001b
(7Fh 0111 1111b: 6 bit thp l 11 1111b 63)
(ch dng 6 bit thp)
Cylinder: 00h 0000 0000b Cylinder: 406
(96h1001 0110b tng cng 10 bit: 01 1001 0110b
(10 bit bao gm 2 bit trong
2:12 PM
Chng 3
39
phn sector)

B nh ngoi
Phn vng 1
80 01
01 00 06 0F 7F 96 3F 00 - 00 00 51 42 06 00
Cho php khi ng
Sector vt l bt u: Cylinder 0, side 1, sector 1
Sector vt l kt thc: Cylinder 406, side 15, sector 63
Loi phn vng: BIGDOS FAT
Sector logic: 63
Tng s sector: 410, 193 dung lng: 410,193*512/10242 = 200 MB
2:12 PM

Chng 3

40

20

Byte
ngha
0
Phn vng c khi ng c (=80h) hay khng (=00h)
1
2
3
4
5
6
7
8 - 11
12 - 15

Side bt u
Sector bt u (bit 0-5, bit 6-7 dng cho cylinder)
Cylinder bt u
Loi phn vng
Side kt thc
Sector kt thc
Cylinder kt thc
Sector logic
Tng s sector

Phn vng 2

00 00

41 97 07 0F FF 2C 90 42 - 06 00 A0 3E 06 00

Phn
vng
3

00 00

C1 2D 05 0F FF 92 30 81 - 0C 00 A0 91 01 00

Phn vng 4

00 00

C1 93 01 0F FF A6 D0 12 - 0E 00 C0 4E 00 00
2:12 PM

Chng 3

41

B nh ngoi
H thng file FAT (File Allocation Table
File System)
Cu trc ca h thng file FAT
Partition Boot
Sector

2:12 PM

FAT1

FAT2

Folder gc
(Root folder)

Chng 3

Folder v file
khc

42

21

B nh ngoi
Sector khi ng phn vng (PBS)
Byte
02
3 10
11 12
13
14 15
16
17 18
19 20
21
22 23

ngha
Lnh nhy
Nh sn xut
S byte / sector
S sector / cluster
S th t ca sector dnh ring
S lng FAT (thng l 2)
S lng im vo gc
Tng s sector ( 16 bit)
Mi trng lu tr (F8h ch a cng)
S sector / FAT (khng dng)

2:12 PM

Chng 3

43

B nh ngoi
Sector khi ng phn vng (PBS)
Byte
24 25 S sector / track

ngha

26 27
28 31
32 35
36 39
40 41

S side
Sector logic
Tng s sector ( > 16 bit)
S sector / FAT
C m rng (bit 7 xc nh c cn cp nht thng tin cho FAT
hay khng)
42 43 Phin bn h thng file
44 47 Cluster u tin ca folder gc
48 49 S th t ca sector cha thng tin h thng file
50 2:12
51PMS th t ca bn sao boot sector
Chng 3

44

22

B nh ngoi
Sector khi ng phn vng (PBS)
Byte
52 63 Dnh ring
64
65
66
67 70
71 81
82 89
90 509

ngha

S th t a vt l (80h ch a 1)
Khng dng
= 28h hay 29h WinNT nhn dng
S serial
Nhn a
H thng file
M khi ng

2:12 PM

Chng 3

45

B nh ngoi
Sector khi ng phn vng (PBS)
EB
02
F4
01
80
20

58
00
51
00
00
20

90
00
7A
06
29
46

2:12 PM

4D
00
00
00
FA
41

53
00
86
00
10
54

57
F8
1E
00
30
33

49
00
00
00
15
32

4E
00
00
00
53
20

34
3F
00
00
59
20

2E
00
00
00
53
20

31
FF
00
00
20
20

Chng 3

00
00
00
00
20
20

02
3F
02
00
20

08
00
00
00
20

20
00
00
00
20

00
00
00
00
20

46

23

B nh ngoi
Lnh nhy

Sector dnh
ring:
0020h (32)

S sector / cluster: 8

Nh sn xut: MSWIN4.1
MSWIN4 1

S byte / sector: 0200h (512)

EB 58 90 4D 53 57 49 4E - 34 2E 31 00 02 08 20 00
S lng FAT

Tng s sector
( 16 bit)

S sector / track:
003Fh (63)

S side: 00FFh
(255)

Sector logic:
0000003Fh (63)

02 00 00 00 00 F8 00 00 - 3F 00 FF 00 3F 00 00 00
Tng s sector: 007A51F4h
(8,016,372)

S sector / FAT:
00001E86h (7,814)

Cluster u tin ca folder

gc: 00000002h (2)

F4 51 7A 00 86 1E 00 00 00 00 00 00 02 00 00 00

2:12 PM

Chng 3

47

B nh ngoi
Sector cha thng tin
h thng file: 0001h (1)
01 00 06 00
S th t a
vt l: 1

S th t ca bn sao
boot sector: 0006h (6)

Dnh ring

00 00 00 00 00 00 00 00 00 00 00 00

S serial

Nhn a: SYS

80 00 29 FA 10 30 15 53 - 59 53 20 20 20 20 20 20
H thng file: FAT32

20 20 46 41 54 33 32 20 - 20 20 20 20
2:12 PM

Chng 3

48

24

B nh ngoi
EB
02
F4
01
80
20

58
00
51
00
00
20

90
00
7A
06
29
46

4D
00
00
00
FA
41

53
00
86
00
10
54

57
F8
1E
00
30
33

49
00
00
00
15
32

4E
00
00
00
53
20

34
3F
00
00
59
20

2E
00
00
00
53
20

31
FF
00
00
20
20

00
00
00
00
20
20

02
3F
02
00
20

08
00
00
00
20

20
00
00
00
20

00
00
00
00
20

S byte / sector: 512

S byte / cluster: 8 x 512 = 4096 = 4K

S sector / cluster: 8
S lng FAT: 2
S sector / track: 63

Sector logic: 63

S side: 255
2:12 PM

Chng 3

Sector vt l: Cylinder 0,
side 1, sector 1

49

B nh ngoi
EB
02
F4
01
80
20

58
00
51
00
00
20

90
00
7A
06
29
46

4D
00
00
00
FA
41

53
00
86
00
10
54

57
F8
1E
00
30
33

49
00
00
00
15
32

4E
00
00
00
53
20

Tng s sector: 8,016,372

34
3F
00
00
59
20

2E
00
00
00
53
20

31
FF
00
00
20
20

00
00
00
00
20
20

02
3F
02
00
20

08
00
00
00
20

20
00
00
00
20

00
00
00
00
20

Dung lng: 8,016,372 * 512 / 10243

= 3.82 GB

S sector / FAT: 7,814

STT bn sao boot sector: 6

Cluster ca folder gc: 2

Nhn a: SYS

Sector cha thng tin h thng: 1

2:12 PM

Chng 3

50

25

B nh ngoi
Sector khi ng phn vng (PBS)
EB
02
21
01
80
20

FE
00
0A
00
00
20

90
00
95
06
29
46

4D
00
00
00
48
41

53
00
30
00
24
54

57
F8
25
00
CC
33

49
00
00
00
6B
32

4E
00
00
00
50
20

2:12 PM

34
3F
00
00
52
20

2E
00
00
00
4F
20

31
FF
00
00
47
20

00
00
00
00
52
20

02
72
02
00
41

08
52
00
00
4D

20
7A
00
00
20

00
00
00
00
20

Chng 3

51

B nh ngoi
FAT (File Allocation Table)
Phn t 0

Cluster 0

Phn t 1

Cluster 1

Phn t 2

Cluster 2

Phn t 3

Cluster 3

Phn t n

Cluster n
2:12 PM

Kch thc 1 phn t:

12 bit: FAT12
16 bit: FAT16
32 bit: FAT32

Ni dung 1 phn t (FAT12):

FF8h - FFFh: kt thc
FF7h: cluster h
000h: cluster trng
Khc: cluster ang dng
(ch v tr cluster k tip)

Ni dung 1 phn t (FAT16):

FFF8h - FFFFh: kt thc
FFF7h: cluster h
0000h: cluster trng
Khc: cluster ang dng
(ch v tr cluster k tip)

Ni dung 1 phn t (FAT32):

0FFF FFF8h 0FFF FFFFh: kt thc
0FFF FFF7h: cluster h
0000 0000h: cluster trng
Khc: cluster ang dng (ch v tr cluster k tip)
Chng 3

52

26

B nh ngoi
FAT16

File1

File2

File3

2:12 PM

Chng 3

FFF8h

Cluster 0

0002h

Cluster 1

0004h

Cluster 2

0001h

Cluster 3

FFFFh

Cluster 4

000Eh

Cluster 5

FFFFh

Cluster 6

0009h

Cluster 7

000Dh

Cluster 8

000Ch

Cluster 9

000Bh

Cluster 10

0008h

Cluster 11

0005h

Cluster 12

0006h

Cluster 13

FFFFh

Cluster 14

53

FFF8h

B nh ngoi

0002h
0004h
0001h

FAT16

FFFFh
000Eh
FFFFh

FFF8

0002

0004

0001

FFFF

000E

FFFF

000D

000C

000B

0008

0005

0006

FFFF

0009

0009h
000Dh
000Ch
000Bh
0008h

F8 FF 02 00 04 00 01 00 FF FF 0E 00 FF FF 09 00
0D 00 0C 00 0B 00 08 00 05 00 06 00 FF FF

0005h
0006h
FFFFh

2:12 PM

Chng 3

54

27

FF8

B nh ngoi

02F
400
000

FAT12

001
FF0

F8 FF 02 00 04 00 01 00 FF FF 0E 00 FF FF 09 00
0D 00 0C 00 0B 00 08 00 05 00 06 00 FF FF

EFF
000
FFF
09F

FF8

02F

400

000

001

FF0

EFF

000

FFF

09F

D00

000

00C

0B0

800

000

005

060

F00

FFF

D00
000
00C
0B0
800

2:12 PM

Chng 3

55

B nh ngoi
FAT32
F8 FF 02 00 04 00 01 00 FF FF 0E 00 FF FF 09 00
0D 00 0C 00 0B 00 08 00 05 00 06 00 FF FF 00 00

0002FFF8
00010004
000EFFFF

0002FFF8

00010004

000EFFFF

0009FFFF

000C000D 0008000B 00060005

0000FFFF

0009FFFF
000C000D
0008000B
00060005
0000FFFF

2:12 PM

Chng 3

56

28

B nh ngoi
F8 FF 08 00 0C 00 02 00 - 06 00 FF FF 01 00 0E 00
FF FF 0F 00 03 00 0D 00 05 00 FF FF 0B 00 07 00

File1: bt u ti cluster 4
Fil 2 bt
File2:
b u
tii cluster
l
9
File3: bt u ti cluster 10

2:12 PM

Chng 3

57

B nh ngoi
1 entry ca folder gc (root folder)
Byte

0-10

11

Chc
nng
Byte

Tn
M rng
18-19

Thuc tnh

Chc
nng

Ngy
truy xut

2:12 PM

12-13

14-15

16-17
Ngy to

20-21

22-23

Thi gian
to
24-25

26-27

28-31

Cluster bt
u (2 byte
cao)

Thi gian
thay i thng
tin

Ngy thay
i thng
tin

Cluster bt
u (2 byte
thp)

Kch
thc

Chng 3

58

29

B nh ngoi
1 entry ca folder gc (root folder)
Thuc tnh file / folder
D7

D6

D5

D4

D3

D2

D1

D0

Archive

SubDir

Volume

System

Hidden

ReadOnly

Back
2:12 PM

Chng 3

59

B nh ngoi
1 entry ca folder gc (root folder)
Ngy
D15 D14 D13 D12 D11 D10 D9 D8 D7 D6 D5 D4 D3 D2 D1 D0
Nm - 1980

Thng

Ngy

Back
2:12 PM

Chng 3

60

30

B nh ngoi
1 entry ca folder gc (root folder)
Thi gian
D15 D14 D13 D12 D11 D10 D9 D8 D7 D6 D5 D4 D3 D2 D1 D0
Gi

Pht

Giy/2

Back
2:12 PM

Chng 3

61

Thi gian to: 6B8Ch 0110 1011 1000 1100b

Gi: 01101b 13h
Pht: 011100b 28m
Giy/2: 01100b 12 24s
13h28m24s

B nh ngoi
Tn M rng:
WINZIP.80

Thuc tnh: 0001 0001b

SubDir + Read-Only

57 49 4E 5A 49 50 20 20 38 30 20 11 00 0A

8C 6B

C9 2A C9 2A 00 00 8D 6B C9 2A 17 8F 00 00 00 00
Ngy truy xut thng tin cui cng
Ngy to: 2AC9h 0010 1010 1100 1001
Nm: 0010101b 21 21 + 1980 = 2001
Thng: 0110b 6
Ngy: 01001b 9
09/06/2001
2:12 PM

Kch
thc

Ngy thay i thng tin

Thi gian thay
i thng tin

Cluster bt u: 00008F17h
(36,631)

Chng 3

62

31

Byte

0-10

11

Chc
nng
Byte

Tn
M rng
18-19

Thuc tnh

Chc
nng

Ngy
truy xut

D7
-

D6
-

12-13

14-15

16-17
Ngy to

20-21

22-23

Thi gian
to
24-25

26-27

28-31

Cluster bt
u (2 byte
cao)

Thi gian
thay i thng
tin

Ngy thay
i thng
tin

Cluster bt
u (2 byte
thp)

Kch
thc

D5
Archive

D4
SubDir

D3
Volume

D2
System

D1
D0
Hidden Read-Only

D15 D14 D13 D12 D11 D10 D9 D8 D7 D6 D5 D4 D3 D2 D1 D0

Nm - 1980
Thng
Ngy
D15 D14 D13 D12 D11 D10 D9 D8 D7 D6 D5 D4 D3 D2 D1 D0
41
C3
41
00
54
1F

4F
2E
56
00
45
31

Gi
4D 54
2F 31
52 54
00 00
53 54
59 31

2:12 PM

52
0D
4F
00
45
06

49
00
4F
00
52
00

41
30
4C
EE
20
6D

4C
6E
53
9C
20
84

45
C3
20
1F
4A
69

Pht
58
2E
20
31
50
30

45
B1
20
AB
47
5C

Chng 3

23
E4
10
00
20
F9

00
C8
00
00
00
40

64
2F
00
00
A5
72

2F
13
00
00
9A
01

Giy/2
6E
15
00
00
9D
00

63

B nh ngoi
NTFS (New Technology File System)
Partition Boot
Sector

2:12 PM

Master File
Table

System File

Chng 3

File area

64

32

NTFS
Sector khi ng phn vng (PBS)
Byte
02
3 10
11 12
13
14 15
16 18
19 20
21
22 23
24 25
26 27

ngha
Lnh nhy
Nh sn xut
S byte / sector
S sector / cluster
Sector dnh ring
Lun bng 0
Khng dng
Mi trng lu tr (F8h ch a cng)
Lun bng 0
S sector / track
S side

2:12 PM

Chng 3

65

NTFS
Sector khi ng phn vng (PBS)
Byte
28 31
32 35
36 39
40 47
48 55
56 63
64 67
68 71
72 79
80 83

ngha
Sector logic
Khng dng
Khng dng
Tng s sector
S cluster vt l dnh cho $MFT
S cluster vt l dnh cho $MFTMirror
S cluster dng cho File Record Segment
S cluster dnh cho khi ch mc
Serial
Kim tra

2:12 PM

Chng 3

66

33

NTFS
EB
00
00
04
F6
00

52
00
00
00
00
00

90
00
00
00
00
00

4E
00
00
00
00
00

54
00
80
00
01

2:12 PM

46
F8
00
00
00

53
00
80
00
00

20
00
00
00
00

20
3F
4A
54
14

20
00
F5
FF
A5

20
FF
7F
07
1B

Chng 3

00
00
00
00
74

02
3F
00
00
C9

08
00
00
00
1B

00
00
00
00
74

00
00
00
00
1C

67

NTFS
MFT (Master File Table)

2:12 PM

Chng 3

68

34

NTFS
MFT (Master File Table)

2:12 PM

$MFT
$MFTMirror
$Logfile
$Volume
$AttrDef
Root Dir
$Bitmap
$Boot
$BadClus
$Secure
$Upcase
$Extend
$Quota
$ObjId
$Reparse

Chng 3

69

Chng 3

70

NTFS
MFT Record
-

2:12 PM

Sector
Name
Type
Attributes
Size
Date
1st cluster
NT attribute

35