_CIM_FILE_LAYER_INFORMATION

Metadatacopy
struct _CIM_FILE_LAYER_INFORMATION {
    union {
        unsigned long Flags;/* 0x0  4 */
        struct {
            unsigned long FlagsBlockDevice : 1;/* 0x0:0  4 */
            unsigned long FlagsBlockFile : 1;/* 0x0:1  4 */
            unsigned long FlagsDiskHashesLookup : 1;/* 0x0:2  4 */
        };/* 0x0  4 */
    };/* 0x0  4 */
    /* 4 bytes padding */
    struct _BOOT_LAYER_INFORMATION* ParentLayer;/* 0x8  8 */
    struct _UNICODE_STRING FilePath;/* 0x10  16 */
    struct _CIM_IMAGE_LAYER_INFORMATION* Images;/* 0x20  8 */
    unsigned long ImagesCount;/* 0x28  4 */
    unsigned long HashAlgId;/* 0x2c  4 */
    unsigned short ExpectedHashSourceLength;/* 0x30  2 */
    unsigned short ExpectedHashLength;/* 0x32  2 */
    /* 4 bytes padding */
    unsigned char* ExpectedHash;/* 0x38  8 */
};