Q: file recovery after partition deletion

Go ahead and try it.

The Windows 10 deluge seems to have buried this one. .

Please install OS X and GPT Fdisk on an external drive, in case we need it.

We are going to delete your current GPT 2 and GPT 3 entries and build new ones.

Install GPT Fdisk (aka gdisk).  Leave your Testdisk display and start a new Terminal Window. You need to use the following steps. If you see any error messages during the following steps, please stop and post back here with the error message. The following steps have values from your Testdisk output (and you can verify) in Steps 7 and 8. Please notice the'+' sign in step 8 (this is called offset notation). The text in parentheses is for informational purpose to describe theaction being taken. Gdisk has one-character commands except when entering numbers.

Rebuild GPT2,3,4 using start/end offsets and size

1. Sudo gdisk /dev/rdisk0
2. P  (print the full list of parts)
3. D  (delete)
4. 2  (part 2)
5. D  (delete)
6. 3  (part 3)
7. N  (new)
8. 2  (part 2)
9. 409640 ( - Start offset in sectors or the start point for Bootcamp part)
10. 311372871 ( End offset)
11. AF00 (HFS+)
12. N  (new part)
13. 3  (part 3)
14. 311372872 ( - Start offset in sectors or the start point for Bootcamp part)
15. +1269536 ( - Size offset, as opposed to End offset)
16. AB00 (Recovery HD)
17. N (new part)
18. 4 (part 4)
19. 321167968
20. +312498176 ( - Size offset, as opposed to End offset)
21. 0700
    
22. P  (print list of all parts just to see what changes will be made)
23. W (Write the new GPT)
24. Y  (Yes! really write the new GPT)

This will delete and re-write the GPT partition info for /dev/disk0s[2,3,4].

I have added two commands for sector alignment. Please test.

Here is an example

Command (? for help): x

 

Expert command (? for help): l

Enter the sector alignment value (1-65536, default = 2048): 1

Rebuild GPT2,3,4 using start/end offsets and size

1. Sudo gdisk /dev/rdisk0
2. P  (print the full list of parts)
3. x (Expert mode)
4. l (This is lowercase L, not digit 1)
5. 1 (set sector alignment to 1)
6. D  (delete)
7. 2  (part 2)
8. D  (delete)
9. 3  (part 3)
10. N  (new)
11. 2  (part 2)
12. 409640 ( - Start offset in sectors or the start point for Bootcamp part)
13. 311372871 ( End offset)
14. AF00 (HFS+)
15. N  (new part)
16. 3  (part 3)
17. 311372872 ( - Start offset in sectors or the start point for Bootcamp part)
18. +1269536 ( - Size offset, as opposed to End offset)
19. AB00 (Recovery HD)
20. N (new part)
21. 4 (part 4)
22. 321167968
23. +312498176 ( - Size offset, as opposed to End offset)
24. 0700
25. P  (print list of all parts just to see what changes will be made)
26. W (Write the new GPT)
27. Y  (Yes! really write the new GPT)

This will delete and re-write the GPT partition info for /dev/disk0s[2,3,4].

Type 'm' to get back to the main menu.

Instead of using the + notation in step 23, use the absolute value of 625142414 which is the last sector right before the secondary GPT table entries.

This looks fine, but the acid test is yet to come. Once you reboot, please post the output of

sudo dd if=/dev/rdisk0s4 count=1 2>?dev/null | hexdump -C