- Uint32 Magic; // 'FILE'
- Uint16 UpdateSequenceOfs;
- Uint16 UpdateSequenceSize; // Size in words of the UpdateSequenceArray
-
- Uint64 LSN; // $LogFile Sequence Number
-
- Uint16 SequenceNumber;
- Uint16 HardLinkCount;
- Uint16 FirstAttribOfs; // Size of header?
- Uint16 Flags; // 0: In Use, 1: Directory
-
- Uint32 RecordSize; // Real Size of FILE Record
- Uint32 RecordSpace; // Allocated Size for FILE Record
-
- /**
- * Base address of the MFT containing this record
- */
- Uint64 Reference; // "File reference to the base FILE record" ???
-
- Uint16 NextAttribID;
- union
- {
- // Only in XP
- struct {
- Uint16 AlignTo4Byte;
- Uint16 RecordNumber; // Number of this MFT Record
- Uint16 UpdateSequenceNumber;
- Uint16 UpdateSequenceArray[];
- } XP;
- struct {
- Uint16 UpdateSequenceNumber;
- Uint16 UpdateSequenceArray[];
- } All;
- } OSDep;
-
-} PACKED tNTFS_FILE_Header;