Get file offset using IOCTL_VOLUME_LOGICAL_to_PHYSICAL

See more:

C++

CLI

storage

NTFS

I am investigating how to find out physical address from start offset to end offset.

For example:
1) There is a 70GB storage. (F:\)
2) There are four 17GB files. 17GB-1.bin, 17GB-2.bin, 17GB-3.bin, 17GB-4.bin
3) copy 17GB-1.bin, 17GB-2.bin, 17GB-3.bin and 17GB-4.bin to 70GB storage.

I found out sector address of file with IOCTL_VOLUME_LOGICAL_TO_PHYSICAL.

start offset is physicalOffsets.PhysicalOffset [0].Offset.
end offset is physicalOffsets.PhysicalOffset [0].Offset + filesize.


Any way to find a large file offset on start address and end offset?


Any help is highly appreciated.

What I have tried:

F:\17GB-1.bin start offset and end offset are correct.
F:\17GB-2.bin start offset and end offset are correct.
F:\17GB-3.bin start offset and end offset are correct.
F:\17GB-4.bin start offset is correct, but end offset is wrong.