سؤال

Does anyone know how to get the cluster/block no. of $BITMAP file from MFT in C/C++? I know the file record number of $BITMAP file in MFT is 6, but how can I know its sector or block/cluster no.? Actually I want to read the $Bitmap file.

Note: I don't want to use Windows API.

Awaiting a positive response. Thanks in advance.

هل كانت مفيدة؟

المحلول

I have solved my issue by parsing the MFT. I have referred this post from CodeProject. I have read/parsed MFT_IDX_BITMAP file and then read the $DATA attribute.

مرخصة بموجب: CC-BY-SA مع الإسناد
لا تنتمي إلى StackOverflow
scroll top