how to determine physical size

NTDEV
1

Edit: I do not have physical access to this computer
However, I know I have a sector size of 0x0200, a cluster size of 4 sectors, and a file with a logical size of 1,256,333 bytes what is the best approach to find out the actual physical size? TYIA

2

Moved from “Announcements and Administration” to NTDEV.

Peter

3

I would do this with ZwQueryFileInformation for FileStandardInformation.

Peter

1 Like
4

Assuming the file is not compressed, you’re just rounding up to the next cluster boundary. The math is (size + sector*cluster - 1) / (sector*cluster) * (sector*cluster). For 1,256,333 that’s 1,257,472.