https://clarkiv.dev/posts/Windows-bootstat-parser/
Windows `bootstat.dat` Forensic Parser - Andrew Clark's Blog