23 #define NTFS_FILE_MFT 0 24 #define NTFS_FILE_MFTMIRR 1 25 #define NTFS_FILE_LOGFILE 2 26 #define NTFS_FILE_VOLUME 3 27 #define NTFS_FILE_ATTRDEF 4 28 #define NTFS_FILE_ROOT 5 29 #define NTFS_FILE_BITMAP 6 30 #define NTFS_FILE_BOOT 7 31 #define NTFS_FILE_BADCLUS 8 32 #define NTFS_FILE_QUOTA 9 33 #define NTFS_FILE_UPCASE 10 34 #define NTFS_FILE_EXTEND 11 36 #define NTFS_ATTR_TYPE_STANDARD_INFORMATION 0x10 37 #define NTFS_ATTR_TYPE_ATTRIBUTE_LIST 0x20 38 #define NTFS_ATTR_TYPE_FILENAME 0x30 39 #define NTFS_ATTR_TYPE_OBJECT_ID 0x40 40 #define NTFS_ATTR_TYPE_SECURITY_DESCRIPTOR 0x50 41 #define NTFS_ATTR_TYPE_VOLUME_NAME 0x60 42 #define NTFS_ATTR_TYPE_VOLUME_INFORMATION 0x70 43 #define NTFS_ATTR_TYPE_DATA 0x80 44 #define NTFS_ATTR_TYPE_INDEX_ROOT 0x90 45 #define NTFS_ATTR_TYPE_INDEX_ALLOCATION 0xa0 46 #define NTFS_ATTR_TYPE_BITMAP 0xb0 47 #define NTFS_ATTR_TYPE_REPARSE_POINT 0xc0 48 #define NTFS_ATTR_TYPE_EA_INFORMATION 0xd0 49 #define NTFS_ATTR_TYPE_EA 0xe0 50 #define NTFS_ATTR_TYPE_END 0xffffffff 52 #define NTFS_ATTR_NORMAL 0 53 #define NTFS_ATTR_COMPRESSED 1 54 #define NTFS_ATTR_RESIDENT 2 55 #define NTFS_ATTR_ENCRYPTED 0x4000 57 #define NTFS_SMALL_INDEX 0 58 #define NTFS_LARGE_INDEX 1 60 #define NTFS_INDEX_ENTRY_NODE 1 61 #define NTFS_INDEX_ENTRY_END 2 63 #define NTFS_FILE_NAME_POSIX 0 64 #define NTFS_FILE_NAME_WIN32 1 65 #define NTFS_FILE_NAME_DOS 2 66 #define NTFS_FILE_NAME_WIN32_AND_DOS 3 68 #define NTFS_MFT_MASK 0x0000FFFFFFFFFFFFULL 243 #include <pshpack1.h>
ULONGLONG LogSequenceNumber
struct NTFS_MFT_RECORD * PNTFS_MFT_RECORD
LONGLONG LastDataChangeTime
USHORT NextAttributeInstance
struct NTFS_ATTR_RECORD * PNTFS_ATTR_RECORD
NTFS_INDEX_HEADER IndexHeader
USHORT MappingPairsOffset
_Must_inspect_result_ _In_ WDFDEVICE _In_ PWDF_DEVICE_PROPERTY_DATA _In_ DEVPROPTYPE _In_ ULONG _In_opt_ PVOID Data
struct NTFS_ATTR_CONTEXT * PNTFS_ATTR_CONTEXT
LONGLONG CacheRunStartLCN
PNTFS_ATTR_CONTEXT DataContext
NTFS_FILE_NAME_ATTR FileName
struct NTFS_INDEX_HEADER * PNTFS_INDEX_HEADER
const DEVVTBL * NtfsMount(ULONG DeviceId)
struct NTFS_FILE_NAME_ATTR * PNTFS_FILE_NAME_ATTR
struct NTFS_ATTR_LIST_ATTR * PNTFS_ATTR_LIST_ATTR
struct NTFS_RECORD * PNTFS_RECORD
ULONGLONG MftMirrorLocation
_Reserved_ PVOID Reserved
ULONGLONG CacheRunCurrentOffset
struct NTFS_FILE_HANDLE * PNTFS_FILE_HANDLE
USHORT PackedExtendedAttributeSize
ULONGLONG VolumeSerialNumber
struct NTFS_INDEX_ROOT * PNTFS_INDEX_ROOT
struct _NTFS_ATTR_CONTEXT NTFS_ATTR_CONTEXT
LONGLONG LastMftChangeTime
ULONGLONG ParentDirectory
CHAR ClustersPerIndexRecord
UCHAR ClustersPerIndexBlock
struct _NTFS_VOLUME_INFO * PNTFS_VOLUME_INFO
struct NTFS_BOOTSECTOR * PNTFS_BOOTSECTOR
ULONGLONG VolumeSectorCount
CHAR ClustersPerMftRecord
struct NTFS_INDEX_ENTRY * PNTFS_INDEX_ENTRY
_In_ BOOLEAN _In_ USHORT Directory