这几天在研究LDM的时候发现WinHex有点问题，在解释时间的时候不对劲，正在联系他们，希望下个版本能改进。
官方回复：
Posted on Tuesday, Jul 28, 2009 - 2:03:
OK, you are referring to Win32 FILETIME structures stored in big-endian byte order located somewhere in the LDM database that organizes the dynamic volumes on a dynamic disk. I wasn't aware of any timestamps there. I will probably make the FILETIME interpretation endian-dependent in the next version 15.4.
Posted on Tuesday, Jul 28, 2009 - 2:03:
OK, you are referring to Win32 FILETIME structures stored in big-endian byte order located somewhere in the LDM database that organizes the dynamic volumes on a dynamic disk. I wasn't aware of any timestamps there. I will probably make the FILETIME interpretation endian-dependent in the next version 15.4.
