这几天在研究LDM的时候发现WinHex有点问题,在解释时间的时候不对劲,正在联系他们,希望下个版本能改进。
 
 
官方回复:
Posted on Tuesday, Jul 28, 2009 - 2:03:  
OK, you are referring to Win32 FILETIME structures stored in big-endian byte order located somewhere in the LDM database that organizes the dynamic volumes on a dynamic disk. I wasn't aware of any timestamps there. I will probably make the FILETIME interpretation endian-dependent in the next version 15.4.