Home/ Questions/Q 800361
In Process

The Archive Base Latest Questions

Editorial Team
  • 0
Asked: 2026-05-14T23:16:51+00:00

I needed to recover the partition table I deleted accidentally. I used an application

  • 0

I needed to recover the partition table I deleted accidentally. I used an application named TestDisk. Its simply mind blowing. I reads each cylinder from the disk. I’ve seen similar such applications which work with MBR & partitioning.

I’m curious.

How do they read
clusters/cylinders/sectors from the
disk? Is there some kind of API for this?

Is it again OS dependent? If so whats the way to for Linux & for windows?

EDIT:
Well, I’m not just curious I want a hands on experience. I want to write a simple application which displays each LBA.

Share

Leave an answer

You must login to add an answer.

Need An Account,

1 Answer

  1. Editorial Team

    I’m the OP. I’m combining Eric Seppanen’s & Matteo Italia’s answers to make it complete.

    *NIX Platforms:

    It’s easy due to the magic of *nix special device files. You can open and read /dev/sda the same way you’d read any other file.

    Just use open, lseek, read, write (or pread, pwrite). If you want to make sure you’re physically fetching data from a drive and not from kernel buffers you can open with the flag O_DIRECT (though you must perform aligned reads/writes of 512 byte chunks for this to work).

    Windows Platform

    For Windows, there are the special objects \\.\PhisicalDriveX, with X as the number of the drive, which can be opened using the normal CreateFile API. To perform reads or writes simply call ReadFile and WriteFile (buffer must be aligned on sector size).

    More info can be found in “Physical Disks and Volumes” section of the CreateFile API documentation.

    Alternatively you can also you DeviceIoControl function which sends a control code directly to a specified device driver, causing the corresponding device to perform the corresponding operation.

    • 0