Index entry

The index entry has the following structure:

    Offset(length)         Description
    0(8)                   MFT record number (inode number)
    8(2)                   Entry size
    C(1)                   Flags: 1 - entry has subnodes, 2 - entry is last
    10(8)                  Directory where entry appears
    18(20)                 File modification times
    38(8)                  Data attribute allocated size
    40(8)                  Data attribute size
    50(1)                  File name in words
    51(1)                  File name type (see file name attribute)
    52(2*namelen)          File name
    entry size-8 (8)       Virtual cluster number of index buffer with subnodes

Most entries are not valid (and present) if the entry is the last one. This entry does not represent a file and is used only for subnodes. The pointer to the subnode buffer is only present if the entry has subnodes.