Edit: I do not have physical access to this computer
However, I know I have a sector size of 0x0200, a cluster size of 4 sectors, and a file with a logical size of 1,256,333 bytes what is the best approach to find out the actual physical size? TYIA
Moved from “Announcements and Administration” to NTDEV.
Peter
I would do this with ZwQueryFileInformation for FileStandardInformation.
Peter
1 Like
Assuming the file is not compressed, you’re just rounding up to the next cluster boundary. The math is (size + sector*cluster - 1) / (sector*cluster) * (sector*cluster)
. For 1,256,333 that’s 1,257,472.