Reading MFT

I had some time this weekend so I added the code to call NtCreateFile() and NtQueryFileInformation() to get the path and display it in the detail window.  This works but I haven't addressed the edge case where the parent folder has been deleted by the time I process the USN Journal entry.  

I've posted the code for the changes files in my DreamInCode blog at this link:http://www.dreamincode.net/forums/blog/1017-stcroixskippers-blog/