Min versionXP
Max version10 TH2
x86 offset
offset:bitpos
Field Name
0x0000union _LARGE_INTEGER
AllocationSize
0x0008union _LARGE_INTEGER
EndOfFile
0x0010unsigned long
NumberOfLinks
0x0014uint8_t
DeletePending
0x0015uint8_t
Directory