Question about Rusolut video "Page structure analysis"
Page 1 of 1

Author:  bos [ October 14th, 2017, 14:11 ]
Post subject:  Question about Rusolut video "Page structure analysis"

Link to case 2: https://rusolut.com/page-structure-analysis/#case2

In the last second, just after defining LBN in SA, the two last bytes in SA is left untouched. What are these two bytes? How can I be sure that these are not LBN, or a part of it? I'm aware that the trained eye of an expert can see this immediately, but I cannot (yet).

If I get into a spare area like this, are there any tests / tricks I can apply to make sure I define the correct LBN bytes?

Author:  Sasha Sheremetov [ October 16th, 2017, 15:51 ]
Post subject:  Re: Question about Rusolut video "Page structure analysis"

Empty bytes (FF or grey in bitmap) you just leave undefined usually, software will ignore it.
Usually LBN consists of 2 bytes of counter, one byte grows slow another fast so that you can see a dynamically changed patterns in SA from block to block.

Page 1 of 1 All times are UTC - 5 hours [ DST ]
Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group