These 2 fields of EBPB can be negative (0x80 to 0xFF).The explanation says "If the number is negative (80 to FF), then the size of the file record is 2 raised to the absolute value of this number.".Example #1) This byte field is 0xFF. The absolute value of -1 is +1. 2^1 is 2. OKExample #2) This byte field is 0x80. The absolute value of -128 is +128. 2^128 is 3.4e+38. WOWThis last number is greater than NTFS Size Limits -> Maximum file size -> Architecturally
↧
