TAG: windows,NTFS,xp,ntfs,attribute
Table 2.4. Layout of the $ATTRIBUTE_LIST (0x20) attribute
Offset Size Description Standard AttributeHeader 0x00 4 Type 0x04 2 Record length 0x06 1 Name length (N) 0x07 1 Offset to Name (a) 0x08 8 Starting VCN (b) 0x10 8 Base File Reference of the attribute 0x18&nb...
