Reading MFT

    Private Const FILE_FLAG_BACKUP_SEMANTICS = &H2000000
    Private Const FileNameInformationClass = 9
    Private Const FILE_OPEN_FOR_BACKUP_INTENT = &H4000
    Private Const FILE_OPEN_BY_FILE_ID = &H2000
    Private Const FILE_OPEN = &H1
    Private Const OBJ_CASE_INSENSITIVE = &H40
    'Private Const OBJ_KERNEL_HANDLE = &H200<DllImport("ntdll.dll", ExactSpelling:=True, SetLastError:=True, CharSet:=CharSet.Auto)> _
    Private Shared Function NtCreateFile(ByRef FileHandle As IntPtr, ByVal DesiredAccess As Integer, ByRef ObjectAttributes As OBJECT_ATTRIBUTES, ByRef IoStatusBlock As IO_STATUS_BLOCK, ByVal AllocationSize As Integer, ByVal FileAttribs As Integer, ByVal SharedAccess As Integer, ByVal CreationDisposition As Integer, ByVal CreateOptions As Integer, ByVal EaBuffer As Integer, ByVal EaLength As Integer) As Integer
    End Function<DllImport("ntdll.dll", ExactSpelling:=True, SetLastError:=True, CharSet:=CharSet.Auto)> _
    Private Shared Function NtQueryInformationFile(ByVal FileHandle As IntPtr, ByRef IoStatusBlock As IO_STATUS_BLOCK, ByVal FileInformation As IntPtr, ByVal Length As Integer, ByVal FileInformationClass As Integer) As Integer
    End Function


    Private Structure IO_STATUS_BLOCK
        Dim Status As Integer
        Dim Information As Integer
    End Structure

    Private Structure UNICODE_STRING
        Dim Length As Short
        Dim MaximumLength As Short
        Dim Buffer As IntPtr
    End Structure

    Private Structure OBJECT_ATTRIBUTES
        Dim Length As Integer
        Dim RootDirectory As IntPtr
        Dim ObjectName As IntPtr
        Dim Attributes As Integer
        Dim SecurityDescriptor As Integer
        Dim SecurityQualityOfService As Integer
    End Structure