Distantly related: What is the function of c:\BOOT. This is the "boot" folder, where the BCD and other boot data is stored, not a file.
Running either of these commands yields information on the location of the file (on disk), its size, attributes, etc.:
fsutil volume filelayout C:\$MFT fsutil file queryextents C:\$MFT
However, attempting to do so on the
$Boot file in the same directory yields:
Error: Access is denied.
Even running as Administrator. What is the purpose of this file, what are its contents, and how can I find out where it is stored on disk?
I'm attempting to validate claims that:
For Windows the PBR loads an additional 16 sectors from the beginning of the partition. These sectors constitute the first stage of the Windows boot loader which in turn loads one of two files depending on the version of Window
The reason I ask is that I thought the PBR was a single sector before a partition (on an MBR formatted disk), which is followed by the main data storage (formatted as whatever File-System you want).