|
按说ntfs的存储是按ID号进行排序生成的
但是在win7的盘符根目录的里面遍历时遇到了索引项结构异常
即文件的mft参考号为0
数据如下:
Offset 0 1 2 3 4 5 6 7 8 9 A B C D E F
00002CC90 00 00 00 00 00 00 00 00 10 00 00 00 02 00 00 00 ................
00002CCA0 00 00 00 00 00 00 00 00 00 00 00 10 00 00 00 00 ................
00002CCB0 07 00 57 00 69 00 6E 00 64 00 6F 00 77 00 73 00 ..W.i.n.d.o.w.s.
00002CCC0 00 00 00 00 00 00 00 00 10 00 00 00 02 00 00 00 ................
00002CCD0 60 00 50 00 00 00 00 00 05 00 00 00 00 00 05 00 `.P.............
00002CCE0 45 14 19 FA 2B 04 CA 01 7A 9D 8C 58 3E FB CC 01 E..?.?z.孹>?.
00002CCF0 7A 9D 8C 58 3E FB CC 01 7A 9D 8C 58 3E FB CC 01 z.孹>?.z.孹>?.
00002CD00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00002CD10 00 00 00 10 00 00 00 00 07 00 57 00 69 00 6E 00 ..........W.i.n.
00002CD20 64 00 6F 00 77 00 73 00 00 00 00 00 00 00 00 00 d.o.w.s.........
00002CD30 10 00 00 00 02 00 00 00 ........
请大侠指点如何继续解析 多谢(2: |
|