I am investigating how to find out physical address from start offset to end offset.
For example:
1) There is a 70GB storage. (F:\)
2) There are four 17GB files. 17GB-1.bin, 17GB-2.bin, 17GB-3.bin, 17GB-4.bin
3) copy 17GB-1.bin, 17GB-2.bin, 17GB-3.bin and 17GB-4.bin to 70GB storage.
I found out sector address of file with IOCTL_VOLUME_LOGICAL_TO_PHYSICAL.
start offset is physicalOffsets.PhysicalOffset [0].Offset.
end offset is physicalOffsets.PhysicalOffset [0].Offset + filesize.
Any way to find a large file offset on start address and end offset?
Any help is highly appreciated.
What I have tried:
F:\17GB-1.bin start offset and end offset are correct.
F:\17GB-2.bin start offset and end offset are correct.
F:\17GB-3.bin start offset and end offset are correct.
F:\17GB-4.bin start offset is correct, but end offset is wrong.