Technical |
The Private Header (PRIVHEAD) structure is 512 bytes long and there are three copies on each physical disk. The first is located just after the partition table. The second is near the end of the LDM database. The third makes up the last 512 bytes of the physical disk.
Offset | Size | Description |
---|---|---|
0x00 | 8 | "PRIVHEAD" Magic number |
0x08 | 4 | Don't know (looks sequential) |
0x0C | 2 | Major Version Number (Always 0x02) |
0x0E | 2 | Minor Version Number (Always 0x0B) |
0x10 | 8 | Timestamp (of what?) |
0x18 | 8 | Number? |
0x20 | 8 | Size? |
0x28 | 8 | Size? |
0x30 | 64 | Disk Id GUID (string, null padded) |
0x70 | 64 | Host Id GUID (string, null padded) |
0xB0 | 64 | Disk Group Id GUID (string, null padded) |
0xF0 | 32 | Disk Group Name (string, null padded) |
0x110 | 2 | Unknown |
0x112 | 9 | Zeros |
0x11B | 8 | Logical Disk Start (a) |
0x123 | 8 | Logical Disk Size (a) |
0x12B | 8 | Configuration Start (a) |
0x133 | 8 | Configuration Size (a) |
0x13B | 8 | Number of TOCs |
0x143 | 8 | TOC Size |
0x14B | 4 | Number of Configs |
0x14F | 4 | Number of Logs |
0x153 | 8 | Size of Config |
0x15B | 8 | Size of Log |
0x163 | 4 | Disk Signature (or zero) |
0x167 | 16 | Disk Set GUID (hex) |
0x177 | 16 | Disk Set GUID (hex) (duplicate?) |
(a) Offsets and sizes are in sectors.
N.B. The final two GUIDs may be missing from the first PRIVHEAD.