Public Attributes | |
MUTEX | Lock |
dd | sectors_per_cluster |
dd | mft_cluster |
dd | mftmirr_cluster |
dd | frs_size |
dd | frs_buffer |
dd | mft_retrieval_end |
dd | mftSize |
dd | cur_index_size |
dd | cur_index_buf |
dd | secondIndexBuffer |
dd | BitmapBuffer |
dd | BitmapTotalSize |
dd | BitmapSize |
dd | BitmapLocation |
dd | BitmapStart |
dd | mftBitmapBuffer |
dd | mftBitmapSize |
dd | mftBitmapLocation |
dq | attr_size |
dd | attr_offs |
dd | attr_list |
dd | attr_iBaseRecord |
dd | cur_attr |
dd | cur_iRecord |
dd | cur_offs |
dd | cur_size |
dd | cur_buf |
dd | cur_read |
dd | cur_tail |
dd | cur_subnode_size |
dd | LastRead |
dd | mftLastRead |
dd | rootLastRead |
dd | nodeLastRead |
dd | indexRoot |
dd | indexPointer |
dd | newRecord |
dd | fileDataStart |
dd | fileDataSize |
dd | fileDataBuffer |
dd | fileRealSize |
db | fragmentCount |
db | bCanContinue |
db | bFolder |
db | bWriteAttr |
rb | mft_retrieval |
rb | align0 |
rb | attrlist_buf |
rb | attrlist_mft_buf |
rb | bitmap_buf |
rb NTFS::align0 |
dd NTFS::attr_iBaseRecord |
dd NTFS::attr_list |
dd NTFS::attr_offs |
dq NTFS::attr_size |
rb NTFS::attrlist_buf |
rb NTFS::attrlist_mft_buf |
db NTFS::bCanContinue |
db NTFS::bFolder |
rb NTFS::bitmap_buf |
dd NTFS::BitmapBuffer |
dd NTFS::BitmapLocation |
starting sector
dd NTFS::BitmapSize |
bytes readen
dd NTFS::BitmapStart |
first byte after area, reserved for MFT
dd NTFS::BitmapTotalSize |
bytes reserved
db NTFS::bWriteAttr |
Warning: Don't forget to turn off!!!
dd NTFS::cur_attr |
attribute type
dd NTFS::cur_buf |
dd NTFS::cur_index_buf |
index node buffer
dd NTFS::cur_index_size |
in sectors
dd NTFS::cur_iRecord |
number of fileRecord in MFT
dd NTFS::cur_offs |
attribute VCN in sectors
dd NTFS::cur_read |
bytes readen
dd NTFS::cur_size |
max sectors to read
dd NTFS::cur_subnode_size |
dd NTFS::cur_tail |
dd NTFS::fileDataBuffer |
dd NTFS::fileDataSize |
in clusters
dd NTFS::fileDataStart |
starting cluster
dd NTFS::fileRealSize |
in bytes
db NTFS::fragmentCount |
dd NTFS::frs_buffer |
MFT fileRecord buffer
dd NTFS::frs_size |
in bytes
dd NTFS::indexPointer |
dd NTFS::indexRoot |
dd NTFS::LastRead |
last readen block of sectors
MUTEX NTFS::Lock |
Currently operations with one partition
dd NTFS::mft_cluster |
location
rb NTFS::mft_retrieval |
dd NTFS::mft_retrieval_end |
dd NTFS::mftBitmapBuffer |
one cluster
dd NTFS::mftBitmapLocation |
starting sector
dd NTFS::mftBitmapSize |
bytes readen
dd NTFS::mftLastRead |
dd NTFS::mftmirr_cluster |
location
dd NTFS::mftSize |
in sectors
dd NTFS::newRecord |
dd NTFS::nodeLastRead |
dd NTFS::rootLastRead |
dd NTFS::secondIndexBuffer |
dd NTFS::sectors_per_cluster |
can not be executed in parallel since the legacy code is not ready.