如何从C中的内存映射文件中读取bin文件（FAT16分区）？

I have a very small FAT16 partition in a .bin file. I have mapped it into memory using: CreateFile, CreateFileMapping and MapViewOfFile.

我在.bin文件中有一个非常小的FAT16分区。我使用以下方法将其映射到内存:CreateFile,CreateFileMapping和MapViewOfFile。

What I want to do is to read a specific byte of the file.

我想要做的是读取文件的特定字节。

For example I want to read offset from 0x36 to 0x3A to check if this is a FAT16 partition:

例如,我想读取从0x36到0x3A的偏移量来检查这是否是FAT16分区:

This is my code until:

这是我的代码,直到:

#include <Windows.h>
#include <stdio.h>

void CheckError (BOOL condition, LPCSTR message, UINT retcode);


int main(int argc, char *argv[])
{
    HANDLE hFile;
    HANDLE hMap;
    char *pView;
    DWORD TamArchivoLow, TamArchivoHigh;

    //> open file
    hFile =CreateFile (L"disk10mb.bin", GENERIC_READ | GENERIC_WRITE, FILE_SHARE_READ, NULL, OPEN_EXISTING, FILE_ATTRIBUTE_NORMAL, NULL);
    CheckError(hFile == INVALID_HANDLE_VALUE,"ERROR opening the file", 1);

    //> get file size.
    TamArchivoLow = GetFileSize (hFile, &TamArchivoHigh);


    //> Create the map
    hMap = CreateFileMapping (hFile, NULL, PAGE_READWRITE, TamArchivoHigh, TamArchivoLow, NULL);
    CheckError(NULL== hMap, "ERROR executing CreateFileMapping", 1);

    //> Create the view
    pView= (char *) MapViewOfFile(hMap, FILE_MAP_ALL_ACCESS, 0, 0,  TamArchivoLow);
    CheckError(NULL==pView, "ERROR executing MapViewOfFile", 1);


    // Access the file through pView
    //////////////////////////////////////





    //////////////////////////////////////



    //>Free view and map
    UnmapViewOfFile(pView);
    CloseHandle(hMap);
    CloseHandle(hFile);

    return 0;

}


void CheckError (BOOL condition, LPCSTR message, UINT retcode)
{
    if (condition)
    {
        printf ("%s\n", message);
        ExitProcess (retcode);
    }
}

1 个解决方案

#1

pview[0x36] will give you the byte at offset 0x36, and so on. To check for the FAT16 signature you could, for instance:

pview [0x36]将给出偏移量为0x36的字节,依此类推。要检查FAT16签名,您可以,例如:

if (pview[0x36] == 'F' && pview[0x37] == 'A' && pview[0x38] == 'T' &&
        pview[0x39] == '1' && pview[0x3A] == '6') {
    // ...
}