263 printf(
"Sector 0 seems to be FAT boot sector\n");
268 printf(
"Sector 0 seems to be NTFS boot sector\n");
273 printf(
"Sector 0 might be MBR\n");
278 printf(
"Sector 0 not recognized\n");
323 printf(
"Seems to be a FAT partittion\n");
328 printf(
"Seems to be a NTFS partition\n");
333 printf(
"Seems to be MBR\n");
338 printf(
"Not recognized\n");
IN PUNICODE_STRING IN POBJECT_ATTRIBUTES ObjectAttributes
#define OBJ_CASE_INSENSITIVE
BOOL CheckAgainstNTFS(PNTFSBootSector Sector)
BOOL CheckAgainstMBR(PMASTER_BOOT_RECORD Sector)
_Check_return_opt_ _CRTIMP int __cdecl fprintf(_Inout_ FILE *_File, _In_z_ _Printf_format_string_ const char *_Format,...)
NTSYSAPI NTSTATUS NTAPI NtOpenFile(OUT PHANDLE phFile, IN ACCESS_MASK DesiredAccess, IN POBJECT_ATTRIBUTES ObjectAttributes, OUT PIO_STATUS_BLOCK pIoStatusBlock, IN ULONG ShareMode, IN ULONG OpenMode)
NTSTATUS NTAPI NtClose(IN HANDLE Handle)
#define FILE_SHARE_DELETE
int _cdecl swprintf(const WCHAR *,...)
static OUT PIO_STATUS_BLOCK IoStatusBlock
#define FILE_SYNCHRONOUS_IO_NONALERT
#define NT_SUCCESS(_Status)
NTSYSAPI VOID NTAPI RtlInitUnicodeString(PUNICODE_STRING DestinationString, PCWSTR SourceString)
#define InitializeObjectAttributes(p, n, a, r, s)
BOOL CheckAgainstFAT(PFATBootSector Sector)
NTSTATUS NTAPI NtReadFile(HANDLE FileHandle, HANDLE Event, PIO_APC_ROUTINE ApcRoutine, PVOID ApcContext, PIO_STATUS_BLOCK IoStatusBlock, PVOID Buffer, ULONG Length, PLARGE_INTEGER ByteOffset, PULONG Key)