可扩展固件接口硬盘GUID分区表

Analysis on Extensible Firmware Interface GUID Partition Table

研究了可扩展固件接口硬盘的数据组织存储结构.采用同主引导(MBR)硬盘的数据组织结构进行类比的方法,直接分析了可扩展固件接口硬盘扇区的十六进制数据,并得出可扩展固件接口硬盘的数据组织结构、分区表项中各个字节的具体含义和分区之间的逻辑关系.该研究为恢复GPT硬盘分区表,进行灾难数据恢复和克隆数据提供了理论基础.

This paper studies data organizing and saving structure of Extensible Firmware Interface hard disk, adopts a method of analogy with MBR hard disk data organization structure to analyze hexadecimal data of Extensible Firmware Interface hard disk sector, data organization structure of Extensible Firmware Interface hard disk, and obtains the data organization structure of Extensible Firmware Interface hard disks, the concrete meanings of the various bytes in disk partition table, and the logical relations between partitions. The study provides theoretical basis for restoration of GVF hard disk partition table, disaster data restoration and cloning data.