What is happening
For each logical block, the BAT records state and a file offset. Differencing disks also track sector bitmaps so reads can fall through to the parent. Recovery must distinguish unallocated, zero, fully present, and partially present states, then correlate candidate offsets with checkpoint lineage and guest structures.