File - $Reparse (Any)
Previous
Next
Overview
Win2K can mount volumes and shares on top of existing directories.
This is managed part in software and part by the volume itself.
Layout of the File
$R Index
| Offset |
Size |
Value |
Description |
| ~ |
~ |
~ |
Index Entry |
| 0x00 |
2 |
0x1C |
Offset to data |
| 0x02 |
2 |
0x00 |
Size of data |
| 0x04 |
4 |
0x00 |
Padding |
| 0x08 |
2 |
0x20 |
Size of Index Entry |
| 0x0A |
2 |
0x0C |
Size of Index Key |
| 0x0C |
2 |
|
Flags |
| 0x0E |
2 |
0x00 |
Padding |
| 0x10 |
4 |
|
Key |
Reparse Tag (and Flags) |
| 0x14 |
8 |
|
Key |
MFT Reference of Reparse Point |
| 0x1C |
4 |
0x00 |
Key |
Padding (align to 8 bytes) |
0xA000003 flags -- see $REPARSE_POINT
No data!
Notes
Other Information
More information needed.
Copyright ©