TestDisk 7.1-WIP, Data Recovery Utility, September 2018
Christophe GRENIER <grenier@cgsecurity.org>
https://www.cgsecurity.org
OS: Darwin, kernel 9.8.0 (Darwin Kernel Version 9.8.0: Wed Jul 15 16:55:01 PDT 2009; root:xnu-1228.15.4~1/RELEASE_I386) i386
Compiler: GCC 4.0
Compilation date: Oct 30 201809:11:24
ext2fs lib: 1.42.8, ntfs lib: libntfs-3g, reiserfs lib: 0.3.1-rc8, ewf lib: 20120504, curses lib: ncurses 5.4
Hard disk list
Disk /dev/disk0 - 320 GB / 298 GiB - 625142448 sectors (RO), sector size=512
Disk /dev/disk1 - 500 GB / 465 GiB - 976773168 sectors (RO), sector size=512
Disk /dev/disk2 - 1000 GB / 931 GiB - 1953525168 sectors, sector size=512
Disk /dev/rdisk0 - 320 GB / 298 GiB - 625142448 sectors (RO), sector size=512
Disk /dev/rdisk1 - 500 GB / 465 GiB - 976773168 sectors (RO), sector size=512
Disk /dev/rdisk2 - 1000 GB / 931 GiB - 1953525168 sectors, sector size=512
Partition table type (auto): EFI GPT
Media is opened in read-only.
Partition table type (auto): EFI GPT
Media is opened in read-only.
Disk /dev/disk0 - 320 GB / 298 GiB (RO)
Partition table type: Intel
Analyse Disk /dev/disk0 - 320 GB / 298 GiB - 625142448 sectors (RO)
Geometry from i386 MBR: head=255 sector=63
BAD_RS LBA=1 1339
check_part_i386 1 type EE: no test
get_geometry_from_list_part_aux head=1 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
Current partition structure:
1 P EFI GPT 1 625142447 625142447
Warning: Bad starting sector (CHS and LBA don't match)
No partition is bootable
search_part()
Disk /dev/disk0 - 320 GB / 298 GiB - 625142448 sectors (RO)
FAT32 at 40/0/1
check_FAT: Unusual media descriptor (0xf0!=0xf8)
FAT1 : 32-3182
FAT2 : 3183-6333
start_rootdir : 6334 root cluster : 2
Data : 6334-409599
sectors : 409600
cluster_size : 1
no_of_cluster : 403266 (2 - 403267)
fat_length 3151 calculated 3151
heads/cylinder 16 (FAT) != 1 (HD)
sect/track 32 (FAT) != 1 (HD)
FAT32 at 40/0/1
FAT32 LBA 40 409639 409600 [EFI System Partition] [EFI]
FAT32, blocksize=512, 209 MB / 200 MiB
HFS+ magic value at 409640/0/1
HFS+ magic value at 409640/0/1
part_size 623463232
HFS 409640 623872871 623463232
HFS+ blocksize=4096 + Backup, 319 GB / 297 GiB
HFS+ magic value at 623872872/0/1
HFS+ magic value at 623872872/0/1
part_size 1269536
HFS 623872872 625142407 1269536
HFS+ blocksize=4096 + Backup, 650 MB / 619 MiB
get_geometry_from_list_part_aux head=1 nbr=6
get_geometry_from_list_part_aux head=8 nbr=6
Warning: the current number of heads per cylinder is 1 but the correct value may be 8.
Results
* FAT32 LBA 40 409639 409600 [EFI System Partition] [EFI]
FAT32, blocksize=512, 209 MB / 200 MiB
P HFS 409640 623872871 623463232
HFS+ blocksize=4096 + Backup, 319 GB / 297 GiB
P HFS 623872872 625142407 1269536
HFS+ blocksize=4096 + Backup, 650 MB / 619 MiB
dir_partition inode=0
* FAT32 LBA 40 409639 409600 [EFI System Partition] [EFI]
FAT32, blocksize=512, 209 MB / 200 MiB
FAT: cluster=2(0x2), pos=6374
Directory /
3 drwxr-xr-x 0 0 0 4-Jun-2008 20:21 EFI
6 drwxr-xr-x 0 0 0 12-Apr-2016 17:51 .Trashes
interface_write()
1 * FAT32 LBA 40 409639 409600 [EFI System Partition] [EFI]
2 P HFS 409640 623872871 623463232
3 P HFS 623872872 625142407 1269536
simulate write!
write_mbr_i386: starting...
write_all_log_i386: starting...
No extended partition
Partition table type (auto): EFI GPT
Media is opened in read-only.
Disk /dev/disk0 - 320 GB / 298 GiB (RO)
Partition table type: Intel
Interface Advanced
Geometry from i386 MBR: head=255 sector=63
BAD_RS LBA=1 1339
check_part_i386 1 type EE: no test
get_geometry_from_list_part_aux head=1 nbr=2
get_geometry_from_list_part_aux head=8 nbr=2
get_geometry_from_list_part_aux head=16 nbr=2
get_geometry_from_list_part_aux head=32 nbr=1
get_geometry_from_list_part_aux head=64 nbr=1
get_geometry_from_list_part_aux head=128 nbr=1
get_geometry_from_list_part_aux head=240 nbr=1
get_geometry_from_list_part_aux head=255 nbr=1
1 P EFI GPT 1 625142447 625142447