LPFILETIME is even a pointer. I used GetFileTime which returned 3 bytes as maybe FILETIME to LPFILETIME. > .\copy_001.execreationtime: 14749440lp_creationtime: 0lp_creationtime_256: 14750232n 0: cn: 40n 1: cn: 113n 2: cn: -31n 0: cn: 40n 1…