7 typedef struct sNTFS_Disk
12 typedef struct sNTFS_FILE_Header
14 Uint32 Magic; // 'FILE'
15 Uint16 UpdateSequenceOfs;
16 Uint16 UpdateSequenceSize; // Size in words of the UpdateSequenceArray
18 Uint64 LSN; // $LogFile Sequence Number
20 Uint16 SequenceNumber;
22 Uint16 FirstAttribOfs; // Size of header?
23 Uint16 Flags; // 0: In Use, 1: Directory
25 Uint32 RecordSize; // Real Size of FILE Record
26 Uint32 RecordSpace; // Allocated Size for FILE Record
29 * Base address of the MFT containing this record
31 Uint64 Reference; // "File reference to the base FILE record" ???
39 Uint16 RecordNumber; // Number of this MFT Record
40 Uint16 UpdateSequenceNumber;
41 Uint16 UpdateSequenceArray[];
44 Uint16 UpdateSequenceNumber;
45 Uint16 UpdateSequenceArray[];
51 typedef struct sNTFS_FILE_Attrib
53 Uint32 Type; // See eNTFS_FILE_Attribs
54 Uint32 Size; // Includes header
56 Uint8 ResidentFlag; // (What does this mean?)
59 Uint16 Flags; // 0: Compressed, 14: Encrypted, 15: Sparse
65 Uint32 AttribLen; // In words
70 Uint16 Name[]; // UTF-16
77 Uint16 CompressionUnitSize;
81 Uint64 InitiatedSize; // One assumes, ammount of actual data stored
82 Uint16 Name[]; // UTF-16