重建GPT分区与FAT32_DBR的研究

Research on Reconstructing GPT Partition and FAT32_DBR

  • 摘要: GPT分区是目前硬盘普遍使用的一种分区形式,而FAT32则是逻辑盘使用的一种常见文件系统。该文以Windows 7为平台、WinHex 15.08为分析工具、虚拟硬盘为对象;通过对GPT硬盘整体结构和FAT32_DBR结构分析,以实验的形式对硬盘GPT分区,FAT32_DBR以及FAT32_DBR备份同时被破坏后,进行大量的修复实验。实验结果表明:当GPT分区、FAT32_DBR同时被破坏后,通过查找FAT32文件系统的特征,计算每个FAT32文件系统的容量以及每个FAT32_DBR在整个硬盘中的位置;最后,通过重建GPT分区的形式恢复GPT分区,通过恢复FAT32_DBR中BPB参数的形式恢复FAT32_DBR。

     

    Abstract: Globally Unique Identifier Partition Table(GPT_partition is a form of partition commonly used in hard disks,and FAT32 is a common file system used by logical disks. This article uses Windows 7 as the platform and WinHex 15.08 as the analysis tool and virtual hard disk. Through the analysis of the overall structure of GPT hard disk and FAT32_DBR structure,a lot of repair ex-periments are carried out after the hard disk GPT partition,FAT32_DBR and FAT32_DBR backup are destroyed at the same time. The experimental results show that when the GPT partition and FAT32_DBR are destroyed at the same time,the capacity of each FAT32 file system and the position of each FAT32_DBR in the entire hard disk are calculated by searching the characteristics of the FAT32 file system. Finally,the GPT partition is restored through rebuilding GPT partition and FAT32_DBR is restored by restoring the BPB parameters in FAT32_DBR.

     

/

返回文章
返回