摘要
GPT分区是目前硬盘普遍使用的一种分区形式,而FAT32则是逻辑盘使用的一种常见文件系统。该文以Windows 7为平台、WinHex 15.08为分析工具、虚拟硬盘为对象;通过对GPT硬盘整体结构和FAT32_DBR结构分析,以实验的形式对硬盘GPT分区,FAT32_DBR以及FAT32_DBR备份同时被破坏后,进行大量的修复实验。实验结果表明:当GPT分区、FAT32_DBR同时被破坏后,通过查找FAT32文件系统的特征,计算每个FAT32文件系统的容量以及每个FAT32_DBR在整个硬盘中的位置;最后,通过重建GPT分区的形式恢复GPT分区,通过恢复FAT32_DBR中BPB参数的形式恢复FAT32_DBR。
Globally Unique Identifier Partition Table GPT_partition is a form of partition commonly used in hard disks,and FAT32 is a common file system used by logical disks.This article uses Windows 7 as the platform and WinHex 15.08 as the analysis tool and virtual hard disk.Through the analysis of the overall structure of GPT hard disk and FAT32_DBR structure,a lot of repair ex⁃periments are carried out after the hard disk GPT partition,FAT32_DBR and FAT32_DBR backup are destroyed at the same time.The experimental results show that when the GPT partition and FAT32_DBR are destroyed at the same time,the capacity of each FAT32 file system and the position of each FAT32_DBR in the entire hard disk are calculated by searching the characteristics of the FAT32 file system.Finally,the GPT partition is restored through rebuilding GPT partition and FAT32_DBR is restored by restoring the BPB parameters in FAT32_DBR.
作者
陈培德
吴建平
钱文华
姬永倩
陈华明
徐溪溪
CHEN Peide;WU Jianping;QIAN Wenhua;JI Yongqian;CHEN Huaming;XU Xixi(School of Information Science and Engineering,Yunnan University,Kunming 650223,China;Digital Media Technology Key Laboratory of Universities and Colleges in Yunnan Province,Kunming 650223,China;College of Vocational and Continuing Education,Yunnnan University,Kunming 650223,China)
出处
《实验科学与技术》
2019年第6期41-45,共5页
Experiment Science and Technology
基金
国家自然科学基金地区项目(61662087)
国家自然科学基金地区项目(61462093)
