Edit: /usr/bin/ntfsrecover (104832B)
ELF > M @ @ 8
@ @ @ @ E E 0 0 0 Y Y 0 0 0 p 8 8 8 0 0 h h h D D Std 8 8 8 0 0 Ptd X} X} X} Qtd Rtd 0 0 0 /lib64/ld-linux-x86-64.so.2 GNU GNU "#YIqYY GNU 6 6 em t ~ c F $ y 2 Q | J r o > / g _ X K D , X " _ITM_deregisterTMCloneTable __gmon_start__ _ITM_registerTMCloneTable __libc_start_main __cxa_finalize __printf_chk free puts putchar ntfs_attr_vcn_to_lcn ntfs_pwrite malloc realloc memcpy ntfs_attr_pread stderr __fprintf_chk fseek fread gmtime __stack_chk_fail __sprintf_chk ntfs_inode_open AT_UNNAMED ntfs_attr_open ftell fwrite fopen fclose ntfs_mount ntfs_umount __memcpy_chk ntfs_pread ntfs_mst_post_read_fixup_warn ntfs_bit_set ntfs_mapping_pairs_decompress memcmp ntfs_mst_pre_write_fixup memmove memset calloc getopt_long optind optarg __isoc23_strtoull ntfs_log_handler_outerr ntfs_log_set_handler ntfs_check_logfile ntfs_attr_close ntfs_inode_close ntfs_home exit __memset_chk ntfs_attr_pwrite libntfs-3g.so.89 libc.so.6 GLIBC_2.14 GLIBC_2.3.4 GLIBC_2.4 GLIBC_2.38 GLIBC_2.34 GLIBC_2.2.5 ti ii
ui 0 N 8 `N @ !H ` *H 3H ;H @H RH \H aH @ gH ` lH yH ~H H H
ȟ П 1 ؟ 6 4 8 @ H P X `
h p x Ȟ О ؞ ! " # $ % & ( ' 0 ( 8 ) @ * H + P , X - ` . h / p 0 x 2 3 5 HH HtH 5~ %~ @ h f h f h f h f h f h f h f h rf h bf h Rf h
Bf h 2f h "f h
f h f h f h f h f h f h f h f h f h f h rf h bf h Rf h Bf h 2f h "f h f h f h f h f h! f h" f h# f h$ f h% f h& f h' rf h( bf h) Rf h* Bf %| f D %>{ f D %6{ f D %.{ f D %&{ f D % { f D %{ f D %{ f D %{ f D %z f D %z f D %z f D %z f D %z f D %z f D %z f D %z f D %z f D %z f D %z f D %z f D %z f D %z f D %z f D %z f D %~z f D %vz f D %nz f D %fz f D %^z f D %Vz f D %Nz f D %Fz f D %>z f D %6z f D %.z f D %&z f D % z f D %z f D %z f D %z f D %y f D %y f D %y f D UHAWL=t AVL5 AUL-P ATISHcH dH%( HE1E z ez oz mz oz a { Az # { k{ y z E1LLL xw
IcD L>Hy H Hc ILHy H81E y Hx ;
dy syy dfy U[ FPy 7-y (HE1HEHHTx H8HUH HH~ <-
H=x H= HHE1HxHHw H8PH}, H5 ~ H1HMHxH}H}HM,f HH
uHw H=E H{x HNw 1HuH8>y HE8 a /y 4y } HE1HEHHv H8WHUHw HHw <-m Hv H=Y H/Hv 1HuH8x HE8 xx # w w w Dw
v | E
v twL-;v / H=b< IM =v t@E w w | L-u / H=I< IM HE [| =w cv tB w w L-u 3 H='< IM E | 5v * Qw tGL-\u + H=< IM ={ 4 E =u E u
u V 11I\D Hb{ H { Hx V{ Hv v z 1HH=t HEH3HHxF e HEH`H@ H=w 1" 1HXHuH=t 1ɉrz HMIg HUHH Hx 1HN H}%1H6 HEHEH @=RSTR M =CHKDg H=A , HEX4H2v n =Wt y t v E11E1Džp DTD]t
s s 9_ s s M =Jy " HxN5 IM
AE hAE=RCRDt$=RSTRt =CHKDtH=Z 6Džt HE@=RCRD =RSTR =CHKD
]E1LmD-.s x E ~ =s E;v ;r =r t=x t
p Bx 0 t r s s
=}x t
p
H]H [x s tt gx H=r H=^r i H qs 5gs h
r r _s w =w .s s L-q + H=
8 IM qE IM : H=8 PIM H=;8 6IM - H=A8 IM F H=W8 IM C H=8 IM $ H=8 IM : H=8 IM & H=8 IM # H=8 IM $ H=9 fIM H=9 LIM ' H= 9 2IM = H=-9 IM , H=S9 IM . H=i9 IM H=r IM 0 H=e9 IM . H=9 IM H=9 |} =o HEdH+%( H 1[A\A]A^A_]Hn " H=4 H H
H 1H559 hH=9 H%n H
9 H9 H5 L 11J1ɄHcHut E1HcɉD =n !H
n H={ HaHm H={ H
D}H`DH DEH5R8 IHѿ 1HE@=RCRD H5: 1m E1E1ҋEDxA9rKDhDf D =ij ~H5 1m D)AA9sAD)҃/wE1A9HxE1f, ]HE$j ^k Tk o u
=yo }AHEH@8HH+
k HHk H=9 dHh پ H H81`H` t
}~ E1]LuA Džt =j hUH5
1jM=i H=S L}}IGHH8! AG AfD9sA; l s
Et$AAH8AH$ u<=h ' H} k AHXH9
=bh EEL8LHEՉ@D DMAD$Dp0= F > HEkk G .@0D9 D9 si =g Pci HxLD A|$ t<k DDD)/hLH@EU EEDxH=
ALH@;j EEԉD)Ѓ/vEDxA9EDH5R5 1 vD1D@LxA TIfDH DL:) H 1ɁxRCRD LH M+ M9MLLH M E1 L9LOAOH M ff MLDL#%g LhHID( LhH MȁxRCRD AA" EgLDD`( HxRCRDL@ Mt_M9MLDLLh(( LhHu?MtM~#M tE1HXHcD$oDMM룁xRCRDuL=me LhTDHD@ HhL-f H6k I!ŋ e HI= e ~ HhD 1H5 YE DTDDEt=d t=ej E1fDf )E< THx& HEH HEH@8HH+e H~=[d He ) HuHx&* IH D0@=RCRD =RSTR =CHKD H= Džt H]H3 =Ie }E1]E1L}u H51 1 3i -i Džp 11uH}Džt ETH@ M I9LL HL9
}MEALH@}HED4D)@ $/ 0D9
ȉЉH)ȉ,DHH8PD4HH@D0PDDb )B 1Dȉ D9I E H8H@LLDA 1҉HDDP ( 04qttEHx4C$ 1HtP4H8D,DPH9HBAsL@HI<H)LMP 49(}HEHD94 EHxDDx(B48# DH 4H8DH9HB)H,H)HH@HDH@t lb P` ]b H H@HxD 1ҋ,Pc 2)ȃ/N (, =^`
Hu 8H( 89tUH5/ 1u$+pc DF$0H
fEl
H@n@c EQHEEIcֿ EDUH5"
@1LHuHxLz b H`1 1ҿ H5K H1STHxD`D! H} I Hw HEH@8I9F8 A~RCRD =_ Lt
L}M LuDT=d bHC E1E1DTLML%7/ MHE1Awu
^ HEH]Ls8DTHIHxD Ht xRCRDt!=k^ HEH@8HVd HP I9sDHEEI녃=2^ 5
^ ^ EoA9r=c " OAjH= H` t1HEHx 1HPd 1fH} H= A L= fTHX
II"t BtDL 1ڋTIA =9] tL=b H]DTsD9k H`o SD IH5- 1CTHMEV1HxE1MDUK D}ى E^E)C=RCRDt*D]=RSTRQ =CHKD' H= WD]=t\ tXDH}HEE =a N AuA9A D] AUDH55- I 1vD]LMDILHxD LmDIE A9s E9b ;] 1] t%] ;] D HxL! HHtrD E9
[ j[ =a E\" NE)A)DH5 1D]H=c D]HZ D EH H81 DD]_ D H5@ H16D]DD]1 ED HH5|+ 1D]UH5r( 1IHED`0fA'c ] EAMAԿ H5 ( D%] L IH1LLHL LH_ H5;[ f
[ fZ HCZ 3[ D=$[ 0 H5Z M9LK|= ICL)YZ LH5Y DHI9I| HBH)*DL1 L)H=% .HExRCRD I9+=0Y H]AMA 1H`DIn D H5 H1E=X ~5>\ L, LD EH3X " H="* HH=( i=X tMt1E1[H=$ @H=S /SH=p BAH56& 1H= n[ EԉD)Ѓ/jDL 1=UH5' 1"$[ ,}ITH` ڿ H5f H1AH= @X X k =W] tWAH H
D,] HDH =J] H H5_( HE1\ H H]H}HuE11ALEtEAA9[E9RAH} YMH=# hH=# \\ ETAE9r A9;W H=x' Y H=V L1H~Y H9
U H=U HLE1EW DTH`D5 D H5o H1Mo=U ~5Y L) TLS H= RDH5: 1 H5$ 8B8189H=# 1Hdt1HDG E H5$ 1D8.U01DHH5 D81H4D 1H5s# D1DHH8H5# 1D4LHD4LHLLL@H8DPLLMLMH8 L9K<IBH$L)ItvLN DPD4H4U EP(U uMH t6H@HxDg $+V DF$0EDxVH=! +DG E H5! 1DUU01DHH5 eDUfR ML#%T LLhHID4 LhHL94f. f 1I^HHPTE11H=Q f. H=R HR H9tHQ Ht H=Q H5Q H)HH?HHHtHQ Htf D =Q u+UH=bQ Ht H=Q YdQ ] w f> W8O4G6t L00G:9BÐL(( G tPt1W0f W2ft1fuf: u W$1uGh 1f0%wf2%wW4uO8uG$tGu= zw6fu DAEDIH5I 1 ]AO~
A 1D H5T 7D A @ E# uD9t DH5 1 H[A\A]A^A_] AGAE IH5. 1fEu
D9}1 EDH5 1 wf @ AGAE0 AH5 @ AGAE( A 1AA =M )DH5 1At 1ۃ=M ~ D9}tP0f D ED9}r D9}uH= -1ۋUDH5 1 tH5| 1hED9}g fUHATISF HHߍPFp?AL$0S DC A9rA9tH5O 1 [A\]f UHSHHR uZ{ LKALu1O DP D uAAALA9sE1H]D H= fUHAWAVAUIATSHH{ Db0Dz AHfE SE̅ zJ IIIE1IuHI L3IJ HHx.Ћ
D I?HAHLHHJ H9tOHH5 11H [A\A]A^A_] D H=& H1[A\A]A^A_] ID9eT UHAWAVAUATSHD=I E L5H D1Df"f 2I I99 A9rD9s IL*AE9' H IH8 ALDD=H HHqH HH AOA9sIL) HHHH9uN,1fA]fAEAE IE HL[A\A]A^A_]f D H 'IHt}G HG L( IE1@9A p9C։AE9{LHUH HUIHZE1RL5KG *ff. UHSHHG@t W^u3 tvH] D T1Ht @t= uMH] CLf{V P(tP0f{X u#f{Z u1f{Nv*HD8FILEt 8INDXtH] f. STH5 1)H]1ÐHT @tfU1H%HH> HtOf~ H tA1ɺ L9B f. DHHAFH9rH
B 8 ] D H| UHAWAVAUIATSH AELfA}V I}p(tp0AENAIEAEHf f f u|'E1)fA}R t1AM01҃0)ID~fx u8 t H9AA}TD
IHt"ULH$fEwEv f D Mm M3H1[A\A]A^A_]fAD$ Et$Eȅt̓}vA 1 1DHtDDHLEȃE9sEA9r끐}vA AFE<DA<fAw_OD'Ht2AvAfDxHPLsQ EGt>A9rf D DH5 1 D H>Gt>HxH|1H|
Hx HHH)H)HEA9- IDLz>@xZD1fD
K1Ë>xD1D
6f D UHAWAVAUIATASH( #C 5@ A
A DL=@ ?M4Mh A9vP AN3 D H@ @ D;$DHH"u9tnI} E&A^q
< MfH=< HLH8@ HH9 H=< AF HY H81AF LDH(L[A\A]A^A_] @ L=? AT$@M4MHUH@u=uAL$HUfn@ IfnIfbf@DI} E&A^ zfD9SLuuủuH@ĿuAL$fn@ Ifnfbf@As D?M4ǃav 1 I}1H衿MfIM5> L>H
> EF CD )A>AF EN LE E Ay}9 AP 9 A LEi1A HE1ADH5- 1DE M
DEM̸ AE9txH A9siA H}@87u }LA8AF AD$@M4ǃAFxU1HAWAVIAUIATE1SH=? D "s 9 I^ H# \; JH" 9 LIHtL@(tqfx0 tjEt=< H0W9IBH[A\A]A^A_] LIljHuH5 1螽1H[A\A]A^A_] D A=> 7u9 8 E1ftӋ8 H^ H f UH
Hֳ HAUATSHH=e fHnH=a H dH%( HEHB fHnH> flfHnH6 )pfHnH= fHnflH )EfHnH= fHnflH )EfHnfHnH= flH )EfHnfHnH_flH)EfHnfl)EH9 H HHH?H 2H'H)Hik9H/iб: )iА DIHi
#H-i kd)A HismH'iKȍ T@HiҹuyH%im D
Ai)\)(\
ף ; D ׀+LLI'Aiș Eh Hc HigfffH!))Aā vnH1 H5k D\D\Ff D Av: AŃHi҅BH A)AAADڃ )AHEdH+%( McDHڿ NpHeH5
1[A\A]]g HBzՔHhHH oIHH?HH)HHhuH8pHcPH WxDl H5C W@ PLp1HH HEdH+%( u He[A\A]]f Ps %o H HcH> @ H8 H# H H H Hy HN H H H Hx H H H Hf HD H- H H H H H H9 H H H H Hy HT H0 H
H H H Hv HM H+ H UAH
1HSH v5 HHڷHH]ÐUHAVIAUATSH? H DF V
fD2 DDIԺ D8 A щD9r
42 IV0A~@Mn(Hh2 @ A=2 A x f D9r
1 =1 IH
H9 H@B HHHH5 H1D1 LL1H5 ϵL1ҿ ID
[1 D7 H5 HH1蠵H1 1D/1 H5 H|51
<7 9f 1H5* H1LH; H H 1 H
1 H H0 1ɾ H諴H0 Ho H@8y0 [A\A]A^]H % >RSTRt >CHKD H= 8H{ 1xH{AVA~ANHÁ _ S Bq!! A @@9@z AD>+ - E=5 A D9r@ DH5* 1
/ 1҃=/ [/ HL/ 1b/ T/ H. ! H={ H#1H. H= H1y ) H ʚ; HHHH5 H1)4H=> 蘱1%. n1ҿ H5 H1s. H=S F1
{4 Hڿ 1H5N 虲 @ UHAUATIH5 SHH dH%( HE1H L蕲HCH LH L輰= uWRSTRt CHKDu?1LHHAą HEdH+%( H D[A\A]]H{u1 HC- . . R3 t=i3 HHLE1豱HHtHHjAąmH; 袯[H{Mf. wT @w#vnH GHf D P0wHH H wP v H 0H D 1 D H pH D t1f [ U1LGHAWL= AVAUATSH8EH}uLE ]1 H5p DuȉكDM)DGD9 HM]HEL,M A$ H5 ID1I誯A9uՋU H5 A)ֺ C)1yHEH]HAFH A} G<]v. 芭IL9u
wM9M H8[A\A]A^A_] @ & H5n 1 UHAWAVAUATSH(DF>H}HuE
0 DDEMHHE:IH ME1 HEȋ=V0 NtPAM,t{H D0 Hum D HSHOHHtXHsI9uH}HHH9HLHBH)HHo) Q ID9}~[
/ l @ HEʋ
) LH8HL۬H/ H9t= LH5 1跭L߫E1H(L[A\A]A^A_]f.
2) q1L H5 l=
) N!/ @HEȃx 2P>Hf"L. HGP1L . H|XH A HH!L9rI9ACHH9u5. Lof. 1L H5 説=K( 5_. ~HEȃx pP>Hf`L'. HGP1L . H|XH A D HH!L9rI9ACHH9u 5- Hf. H= t@ff. @ UHAWAVAAUIATASHH D;%}- Hr,1DH_x[HH[A\A]A^A_]f DHHUIHt.AuDHUH HH蟪HLtfEuHc1 AMDIUP 1H5a f. UHAWAVAUATSHF>E̅e I5, Iօ~ n& E1HO|P v,
D& LH;HALH*HM, H9 LH5 1bH [A\A]A^A_]E1 H, O|PH
, 5+ Hu u D HXHOHH\ HPI9uHH' AHXHLR
% uXID9e1H[A\A]A^A_] D ID9e~P% O|PLH5I 1腩1L H5 j= % ~#+ {A} pAU>fbL
* IEP1L * MDXH A f D HH!L9rI9ACHL9u
5* HwfLH5F 1躨S D uHz HU.uHfLxHU HH= 1 UHAWAVAUIATSHH# H}ȃ~ H H5 1 # AMLfA}V M}A(tA0LE1fA}HD0D@Aă~%IUhED H5y 1DEƧDEG,Et f DDHAE9uH}HLÅu4=%# H[A\A]A^A_]f. H=L ԥfH=# 迥ff. fUHAWAVAUIATSHH" H}ȃ~ HS H5 1" AMLfA}V M}A(tA0LE1fA}HD0D@Aă~%IUhED H5I 1DE薦DEG,Et f DDHAΦE9uH}HLZÅu4=! H[A\A]A^A_]f. H= 褤fH= 菤ff. fU1HSHHHF HtPHx HHt%Hx( HPuf D HHz tHzuHHHCΣH]1f D H=a H߾ H] ff. UHcHAUIATISHH2u A HD[A\A]]f. uFIEE1H9CuCPIuPH{PHT u tH= Y H= DDLE1VIEH9Cpf D U1HAVIH5 AUATSHcH u~~I ^L-n L%i F D ?D X DL1 IL9t$Aft . I8L9u[
A\A]A^]!? L1 迣 D 두UE1HAWIAVAUATSH(DoG(LAHD;-! E fDME1E1DU f D DCfD;E fA?wMA# HI ƃ= ~4;0DCuEUXMA: DDH5# 1 ; DkD;-x EK DD#AW D A9FDH5 1舢E DCfD;E)MAH5 1 DESE DE SCLDAt 9 DẺE7f D H5 1MMDDH5 1 LUӡLUAuZH=; LA DŰ =K Ee~stIEG AWDH5F 1zA H(D[A\A]A^A_]f= DUEe~_D 1H5 DU0 DUAWEG uA9uE9s끐= EegAWEG bfAWEG f D UHAWIAVAUIATISH9
^ t0A;]0v H= " H[A\A]A^A_]f D :FILEuD! EtWLHJH L R,H5U L9LL1B= ~ AODIWH 1H5 LeD
! EtIIT$
AW>E1IWHIc H
{ HH9AA;]0{ &LyI ; w! LLHADLHE HHULLiHMȅuEt5&! HωEsE E1A<$INDXyD Eu+LL= 7IIT$* D MIT$Hz H
: H5 L9HL1f D LLLEc HLLL[A\A]A^A_] H=ް ܜ A<$INDXw D HLLZHMUHAWIAVEAUIATISDH8= H}#E D t|H8[A\A]A^A_]
j HV` F\H
P H1HHNhH5N 虝=: ~H=5 DLE D uD A A9DElM E ADK HuHLHL]HE
DEDEDL]+MD)HcH]MLD)LHHULH?MtMAL$=c ~H=n -H}DA
? H}LIw=, H " @ = zH H5( 1MAMUf UHAWAVEAUIATISDHH= H}HM NXL<
D
B3A A9? AG uD DTD\0AADD)؉EAG9 H} DAHuDMID
LD]HDUHMHELET DMHMD]Hc}DUE)HuCHD)L?LEHuH}L苚+EAGEAGMtAE= ~H= mH}
H}It$L=l A~"H[ H5 1DU衚DUHHD[A\A]A^A_] 9 E1҃= H
HV` F\H
H1HHNhH5 1AL$X= M|
#H= 荘DL Hc}DE)CIt HD)HuLH} AH}L1藘fUHAWIAVEAUEATISHH8=1 H} VXL
?u H8[A\A]A^A_] D A;rAuD CD5 A9DErEDLK LMHHUHELMDE = H ~H5 1MטMi
b HV` F\H
H H1HHNhH5F 葘SXL=+ H= HUDDLHU:A;?r$ A H= 褖5 LHU D DHuD)LuD)K<LH}LLLAT$Df{HAT$thA?0ufAD$=\ ~!H5 1蟗H}Ct- 1
/ H}HsL= H sAD$(fA9GufAD$( UHAWAVIAUEATISDHH= H}HM. D^XIA
B+9 E EO<A ^ HuȉLL]DMLEMHU蝕DML]Y A0HUMLEufAl$fA~H D)I4L)LHrAT$)ڃ= AT$~ H5 1:L
H}IvL:= A~H H5ب 1HHD[A\A]A^A_]f
z HV` F\H
` H1HHNhH5^ 評=J E~X~H=̨ DL"EMpf D ASHuLDML]LEM@L]DMt uE1>fMLEfDEK1A H5< L]L] Huȉ1
HH9 <A8<tH5 1L]E1諔H}ȉ@H= AFX5- H}) = H c+ D AD$(fA;CfAD$(Pq1jUHAWIAVIAUIATESDH(= H}#E ب H([A\A]A^A_]1HW H5 Ɠ=g ~
W IW`AEAG\H5Q H
/ H1HIOh= oH= DLE بVED DDEA9 fA Hs H} IH 8FILE DsD)H5 HD1! H}HsIH$ sJKHuAf%p H HcH>E9$ ֿ zIHuf EA fA fAzDcHDkJ IGL9cH+ HSHD KHp(t97HH9uH 9 D
a E=J AAISM HH5Ϛ 1i @ IGL9H+ HH KHp(k9HH9uO D ADUH5E H1 DA HH o }DMDISM HH5 1褅= MDM6LDM贃DM!
EEfA% ;f. ADI|SM HH5v 1MfH߉U5 UH}HsEDEHI E5_ уIH
=F 8EA f HEKLf{V P0A0 D[XKNHsEmHDɁ8INDXZA PD@ H}DMUAE9DE0UDMHDEI8INDXE9L l HH Z fLgA(DE1fAF fA6 D HH Mu E1fAt fAuʋ ~ Hp H5
1- SLf{V J(MtJ0MDsNKXDcZEÃ3 HEȋ@0EfN A?INDX A E1fA fA E1H誼u 4
H= A E1 fA ~ H H5 19 CLf{V Dp(tDp0KXsZDKNCRDfEEHDMDEm M$A|$ s A<$ A E1fEz %E1fA
E1fAt fA= ~H H55 1XSLf{V B(tB0f{R DKNKXSZ2 A 5E1fA t fA= ~H2 H5Ē 1SLf{V HKB(tB0sXSZHDKNH}DD(LH. AŸ HH / EAEE1fAt fA=
~H H5# 1Ff{V SPHKCL 00HHDKNsX{ZD)f{JDD>P1 HH}HAQELHLE Y ^A0E1fAt fA4=] ~H H5v 1SLf{V HKB(tB0sXSZHDKNH}DDLH0 AE1fA t
fA ~ H H5 1 CPf{V H(Mt0EKXDsZDcREfDeDE M4EFO,A> _ A
E1 fA= ~ Hq H5S 1v~ CLf{V Dh(tDh0DCNKXDcZDEMHÃ HMȋI0MI 9INDX A %E1E AfAr= ~HZ H5 1}SPf{V B(tB0f{N DKRKXSZ A E1fEG E1 fA
~ Hg H51 1T} CLf{V Dp(tDp0KXsZDKNDDMEDE M$ED$MA<$ / A E1 fAU=~ ~H H5 1|f{V SPHKCL 00HHf{N A E1fAt fA= ~Hh H5" 1E|CLf{V P(tP0f{N A /E1EUfA zE1 fAgH}LH A-E1fE 4E1fE % E1fAt fAH}LH AE1fA% ~ H H5 12{ CPf{V H(Mt0EDCRKXDcZDEMHÃ
HMM,I0MA} INDX!
A l ~ H H5 1zG SLf{V Dj(tDj0DKNDcXSZDMMAԃ ED9 McHCDLO,'HHELHu%yHuA AG E1= H >H5Ռ 1y A= DkNDcZCXDAGt% D;5^ |
N HC`H5# S\H
- HHH1~yEDDH5 1by5 L= ~H_ H5 1,yHCHH+ HH s= ~H H5Ê 1xC0DsNKLf{V P0HCfDuHEA(tA0A AHEDcXI19SZICAHECRA9 D9 HHMH}LPEEH3AXZ ~ H H5 1/x KVCLL[DsN{0L]p0(fDcXEƍw0fDuA<A1M9LBCZAE{
j EC&9=M
UMcLK<'HUH}vH}HU Lv= ~H=̊ uK<'DHuH}LL= H; A~H5 1&w v ~ H H5Ԉ 1v KVCLDcXDsNp0(fDCZEAuE HEȋ@0E
G UC&9uMcHCAMHUHLHEHu^uHuHUA
= H D5 A~!H H5 1vD5 HCf{V HECLDh(tDh0CNE1f{R fEH HE {T1HH|
HELIE Ef(V f,uH I#EH;9 A=
A HK H5 1Tu ~ H H5 1%u SPf{V J(MtJ0MDcRDkXSZEAՃ C,9 uHCHEHE McAHuK<'HUsHuHUp K<'tfAg=. ~H=܇ r5 L
HuLH}t= H> A H5 1%t u= ~H# H5Յ 1sC0DsNKLf{V P0HCEHEA(tA0A AHEDCXI19SZICE,HECRA9 D9 HHMH}EPELHVAZ A[A((HH1HSh1EDH5R 8s= [H=Y qIcDL9M>LcHCK HELELHHHELMHMfAŅ} |u}LM)M} Q t }))K<LLLgLLuHuLfEAD$LAGH}g= A~H=z euLE# = H$y H5y 1g dKZCXA H}ȍHA4HLLDD0H A&LEAEHcMDT A9DUHCAHMJ40M4HELHuHUieHMDULEAD = H
H I#EH;GA9EGD9EK HwH}DdAŅrAHey x#f. E1=n HXx 8FILEHEf. A
HS`EEC\H5 H
H1HHKhHe= H=ix cIcDLUHH}\H}fDgECHDL[d/MDI4H}D)L)HdE)fE)fMtE)gA~EfAn܃=M fpffAE~H=*x cH}D
HuLH}=
AH4w sGA9E$UMK4'D)1dEA)E LMHuH}'= ALHcw {ZsXHLHL~AH}Hk _ AXAA
2 HS`EEC\H5- H
H1HHKh[c= H=|v aIcDLԲHuLb= ~H=rv aDL裲
HuLH}
= Ht AsH=v EaE1E1H
= 'HuLb=5 ~H=u `DL
HuLH}~= HMt AHt H5 u 1(b xDmEDLLED))HEH<LbHUHuLXaEl$LEEl$MtEofnUA~@=g fpffA@~H=Du "`uL7
5 HuLH}=" Ht A/ ))= Hs H
H
EA A
HuLH}"= ABHzs H5s 1` LmUMHMK<'D)L`HuLLM`HMDmDi =* ~H=t ^DL MHuLH}v= Hs A^ AE1 HH H
1{Hr H5 s 1_ IL<_E=g AG ~H=r -^DLBMHuLH}课=0 H~q A fUHcHAWIAVAAUIATLbSLHhHU^H Hø HULI9H{ICHHd^IEDsC HC HH HXI] t
1A
x tiIH+ HZW I}I}su#1 Y IuI} 4 H=ps \ He[A\A]A^A_] @ 5J V9= ; e = O Hw5 Iu IEHuHt9LmHL} D {8` H[HuLmL}
% 9 5? I}fIuI} o s i I] @ I]b HJ2 C^
ALmL}UH5 H1\ H=A \[I] Ht%f D A D HHZI]HuD
S IE 8f D H=p Z SVfL HCh1L H|pH A HH!L9rI9ACHH9u= DcHDkJuyfA%w?fA DH :
HH & ` DkJSHDf%] H5 Hc H>f ALsáAI跡SMMHH5 1H[J fAv H}Ls L>IH" 8FILE HpLKL9 = ~$DCHH
so 1H5- Z DkJSHDf%" H5O Hc H>f D H}Ls LG0E蛮IH 8INDX HpLKL9w = ~DCHH
n 1H5 (Z[ H}LsL IH< @ LmL} [ALmHEL}(H5 H¿ 1YL]LW [ALmHEL}H5_ HfI]9 D &f. I t @ IL}DLmDE1DL]oH5 n H1 YL]ȉL]JDH?AVIH5 H 1XL]ȃ Mf! f LV IMDL}LmDKE1f f. Y MuE1f u= ~H H5 j 1#XSPf{V HKB(tB0HDKXHECRMȉECZBD(EAGY O$A<$ =x AOAWHL9r D 1HL9s 8 pv8 Lcpu
B1A9$ H=Fl L}IL}DLmUL]A EE1f= ~H= H5h 1Wf{V SLHKCP 00HH{RHsXA DCZW)H}EL0PLHHL#^ ^_WIMDL}LmE1f4=5 ~H4 H5Nh 1qVCPf{V P(tP0f{R IMDL}LmA 4E1f= ~Hܪ H5g 1 Vf{V KLHSCP 00HHf{R_ IMDL}LmA E1fS=T ~Hs H5mg 1UC0DcRKPf{V P0HCfDeHEA(tA0HuA H9ʺ KNHCCZHUSXA9! D9G H= SE1f= ~H H5f 1TSPf{V B(tB0f{N DKRKXSZ IMDL}LmA E1f<== ~H\ H5Vf 1yTSLf{V B(tB0f{R DKNKXSZy IMDL}LmA /E1fH}LHA LE1H!
MH=g L}IA DLmL]GRL]E1fQ=R ~H1 H5ke 1SC0DcRKPf{V P0HCfDeHEA(tA0HuA DCXH9ʺ HCCNISZAA9 D9o AQH}ELPLHA ܶAZA[BE1f= ~H H5d 1RC0DcRKPf{V P0HCfDeHEA(tA0HuA DCXH9ʺ HCCNISZAA9_ D9. ARH}ELPLH5A[A\A E1f ~ H H5c 1R SPf{V Dr(tDr0DKRKXSZfDMDMD$ ED9n <
HCMcUIMHELLHUPHU AG =( Hd 1MA H54d WQME1f ~ H` H5b 1 Q CPf{V p(ut0EDsRCNKXsZDE)DfDuHȉ}DE M$A|$ A<$肟 IMDL}LmA E1f!# ~ H H59b 1\P CPf{V p(ut0EKXsZDcRHfDeM HuM4v0uA>INDX IMDL}LmA D E1f su ~ H H5a 1OP CPf{V p(ut0EKXsZDsRDHfDuDE~>HS`C\E
H5} H
H1HHKh5OCXM$AD$fEA$= g H5 1NH=c sM L膞H=c ZMHcEDI<HEf=g G A<$ IMDL}LmA
E1f
~ H H53` 1VN CLf{V p(ut0EKXsZDcNDfDeDEA
M4EFMA> IMDL}LmA E1ftH}LHA 菦E1fK=L ~H H5e_ 1MSPf{V HKB(tB0sXSZHA DKRH}DDLHE1f ~ Hà H5^ 1M CLf{V p(ut0EKXsZDsNHfDuM
HuI Df09INDX
IMDL}LmA fEBE1=0 ~H' H5I^ 1lL
HC`H5 S\H
HHH16LfEE1LsD- A~!H H5] 1KD- CLf{V p(ut0ECNE1f{R fEH] HE {T1σHHW EMLf(= f,uH H#PH; HO` AH5{ 1NKf f D IEH5A` HIEP1KfIEIU H5{ JD@1 J H=F_ DII] SLf{V B(tB0D{XSNEuL8INDXu : fA{u IIHbD% E
HINDX( A IHȢ oSXfSIGHEAW@0AG$ IG@ PfE_LAW fAG0AGH (H(S H4 DCHH( @ tA9gHH9u2 A9O=B HH
#^ 1H5 { wIH DCHH( tA9\HH9u A9D= HH
] 1H5lz IL7G2H=| vGI] IEIM H5\| D@I1H2c ~ H H5yZ 1H> SLf{V Dr(tDr0DKNKXSZfDMDMD$ ED9 McUHCDMHHELHUHuGHuHUA# AG 1Ƀ= HZ 1MA H5Z GMp ~ H, H5Y 1GK sVSPDcRJ0(ffuDSZfDeMKXD4p E' E
C&9 EMcUHsMHuLHHUHuFHuHU = HY 1MA H5Z FMx ~ H H5X 1FS SPf{V r(utr0uDcRKXSZfDeD43 HuC49F0sHIMDL}LmA G@ 9nH=x DE\ uMcUHCMHEHLHUHuDHuHU! =~ HhX dIMDL}LmA HS`C\E
2 H5;s H
H1HHKhnE= H=X C5 LHSh1EDH5?t %E= H=FX CIcDL螔HShED H5s 1D~ EdH=W 8CIcDLJE1fAO=> 1
IMDL}LmA g((HHd((HHeEH=X BLnK00I4)Hun HV1z u: t H9AA-U 1H5W CHuDH=W D-Z =N & EMD0 ADxA9ELcHsUHuHKLMHHuHUHE7BLMDx =Ӿ HU 1MA
H5U CM;f. LXBfAg= ~H=1V MA5k L_
] HuLA H}á=D EH#U HT HEHcEHEH=mU @H}DLH H#PH;N9HFD9EtH}HD@AHzU HSh1EH5p AHE=r D`0CXfE~H=T 0@Hc}DLAMLHSh1EH5p {AHEDsX= @0E~H=T ?Hc}DLAM4-HS`C\E
ż H5n H
H1HHKhA= H="T h?5 LzHS`C\E
_ H5hn H
H H1HHKh@KX=8 M4AFfE~H=|S >Hc}DLDEMOf H=r LmL}HE>H}_>B
Ļ HS`EH5^r HChHK\ Hʋ
ATW HH1?= XZ~H=
S S>Hc}DLdCX1EEF 0E9LcEuHCDDMK<HHMLEHEH} h LEuDDMH}LD)LS?HMHuLH}D)q DA B=ú HR M 1MA H5R >M)H=q L}IL}DLmJ=L]A RH}ELPHLA 莬^_=6 C9" UMcLK<HUH}M=HUT = HP 1MA H5P >MX= D4< C&9 IMDL}LmH=)n T GL fB LB fDJB JD AG(fBfAG(?7IDMLmȉL]L}w HwAVIH5c H 10 L]8ɉ>DDRH8H>LD8LD>H~HH)H)HH"DfD01ttQH0H1H|0H|1HyHHH)H)H!H}L^H=S d.DLy=z l1H\B tftDD))=C H-B )
' HuLA H}荎= EUHu)HEJ< LM/HUHuH}.Ef =ɪ ~H=B -H}D~HE@Hx.HHt-MHuLH}=w H7B A D UHAWAVAUATSHHJIIEl$AMcIՋ# I$oE1Iu H IE)2 oKH^ )
/ Ao$H5Z )˪ Ao\$) ͪ ̪ Aod$ )%ƪ Ho,)- ot)5 o| )= oD0) oL@)
oTP) o\`)
odp)%
o )-
o )5
AD$fA C Sb L
q 0 f D 9r
A@ +
HL
DHcH)H H[A\A]A^A_] AD$II I?D6 LL IH5` 1,RSTRt CHKD D E> = HSH5B 1A,Ds5ާ Iޅ IH5` 1,AVH5B 1 +AV
H5B 1 +AV H5B 1 +AVH5B 1 +AV 1H5B +AVH5B 1 +AVH5B 1 n+IV 1H5_ W+AV 1H5B @+AV$H5B 1 (+AV&H5B 1 +AV( 1H5B *
/)AVCD4 McIޅ> IH5l_ 1*IV 1H5n_ *AVH5B 1 *AVH5B 1 q*AVH5B 1 Y*AV 1H5B B*AV Iv H=B 茅 fH
Z? H HE? H5] HD1)SD EH5 ? 1)˨ df D D
Ѧ E CHKDtRSTRtH5w^ 1)D5) IE
! fAHH+{ AAI? Q Hy U L
d Τ f D H5> 1)S 1H5> (S 1H5> (HS 1H5 ] (S 1H5> (S 1H5> (S 1H5> (S 1H5> v(S 1H5> _(S 1H5> H(
~&f 4HwmH 1H5q=
(y D Ho;MM H E1I$)= o{Hm )=
L
ؤ o< )=D o| )=G F oD )A Ho )
s oT)v o\ ) y od0)%| ol@)- otP)5 o|`)= oDp)
2 o )
o ) AD$fA
fLH < L< H5[ LDHHC; H9 HH1&P IH5> 1l&IV 1H5> U&
j IH5 > 1,&8 H)ff D H? t>wCH> Pt0 H> 0t Hq> t Hz> uOf D H> t H> t H> tH> tUAH
> 1HSH ~ HH&HH]f H > paH > NH= `uHU> .HX> H%> Zf H~= @@ H= % @ UHAWAVIAUATASHH(FBH}Dnu DHcH> D HEH8 D^D H5kY H1#AFDIVHH5F=
K HH
4 H1H#} CSL-:Y D D|EA9|M @ uEANjEA9}:McF$3D:DELH 1"#A0x BD3H([A\A]A^A_]D~2F:DEY H([A\A]A^A_] 1DvYIċ=
= [ 0#1D H5AW !MtL' SXHsZH=M; [|Hs H=F; cHs(H=C; cHs0H=@; cHs8H==; cHS@ 1H5+< HSH 1H53< SPH5
; f D 1DXIċ M,
I<$ A|$ r Eh D 1fA9F@P Du 1DA H5mV E)Lu& E MD)9 M' )ȋM92 M/ )ȋM9 M7 )ȋM9} M0 H= : )HH4bbM; )ȋM9i MO )ȋM9}"ML H5: )H1: M_ )ȋM9MX H59 )HH f DYD H59 H1 1DVIHHA% fA|$H$ S D S I9D$u
} H$ I 3 0 I9D$uE1;INDX I AH59 AIcH1L!L AD$ H59 HH1L!+ AD$PAt$RHHcH=}9 HiyAD$ H=q9 HH4H([A\A]A^A_]` @ DXH(DH5T [HA\ A]1A^A_] DXD H5S H1 AFDIVHH57
HH
HHH( 1[A\A]A^A_]K D XD H5!T H1' H 1H58 HS 1H58 HSH58 D EH5T DD`1 1DTHtH4# Aj Ax A A A A A_f D ẼH 1DH5T : L"FE AN8fA~> Q(tQ0)fA~: M 1DTE1fA~: E AM̅H=8 Sf DVD H5IT H1}DsDS DEf(x E`A1DUHHEE1A U/ EHEEAHD9m EA9 1D6SIHtDHHPMAAID IH5S 1AWfg fIwH=4 vh @ DUD H5S H1}nE E1A EMcFl3B3fA Ѕ Uȅ+UH57 H( 1[A\A]A^A_]f D H5iQ 1D1DRHtHc HH56 o @ UD 1H5LP H(L[A\A]A^A_]! BT3XJt3ZH=3 tH53 1H J#T3gJfAN4fA~> Q(tQ0)fA~: M: D1PQIH+A!UHLE1YK1fAEA}AU H55 H1IU 1H55 IU 1 H52 fA~: HcuDH=5 Hs H5P 1m H5iO 1M EH=2 8HH4[EH=2 0HH4ZEH=v2 (HH4ZEH=k2 HH4ZEH5X3 HH1EH5X3 HH15 D S1 H5/1 }S1 H5$1 `}SH5 1 1A<AfA fA H="1 5 }s 5 \ D 9r
Y DH5L qDH5v? 1@ D DDEUNUDEHt;AfDhLPJt38 o t>@xn A EEG|/AA9ANQ0)HcEHHEHE1 D x u 8 AHD9DDMIHAUHLGfE}HuI}Icq UȅV)
H52 1DE9DJt3H=- pDE f. H>HxH|1I|
Hx HI)DL)H H=w/ TMtLG SH5r/ 1S&C$H(H=a/ fHt,[A\A]A^A_]o @ CPS
H=1 D B9H=0 H5v. 1H H#S8CKSPHsR H={0 zoH5~0 1H H#HS@ 1H5g0 HsH=.. VHs H=+. VHs(H=(. VHs0H=%. H=/ S 1H5U. ~SH5.
H=v/ S 1H5 . FSH5R. UH(D [H5I A\1A]A^A_] f DH5/0 1DU DUe D DDJIHAUHHDfE}Ef D E ẼP7FUds2 @ H=$, H=, H=\, jm1H5- }=fA|$D >xD1AD
D1fAD
S1 H5n, }~SH5, 1{ A A}}AA}1AA'McH=}+ J4;S@M; )ȋM9M8 H5z+ )H1pM/ )ȋM9[M( H=)+ )HH4SM' )ȋM9M H=* )HH4VSUHAWAAVAUATSHH(D H}E D E HHS AA)E< LL
% H
HH+5 H~ H+ L
HH LOH5H 1HS 1H5 I HS 1H5I S 1H5 - S 1H5%- rS 1H5)- [S 1H5.- ES$ 1H56- /S( 1H5=- K,S*1DC.H5H C | 3 H=. W
ٍ 9C S H5FL 1sH{0F^f D = c { L%, tKHL% HH+ H~2HH+z L%n H~ H+ L%e HHc LN{0THH DPH5K M I1L+
3 HSY^H H{ H5K 1
HSH H5- Heؿ 1[A\A]A^A_]
z R>ftXLK HCP1L6 H|XH A f HH!L9rI9ACHH9uW He[A\A]A^A_]H5J H;SJ f. Heؿ
[A\A]A^A_]( H H
McHEȸ L
LDf D H=, $ {0RS0 H5CF H1 {2RS2 H5@F H1^ S4 1H5* G S6 1H5* 0 HS8 1H5H HS@ 1H5I HSH 1H5I HSP1 H5I CP DpA9DG(E1L-I f D DDL HLXA1 B D9r f{D {0A u?f%wH: HAƄu!C2E1f%wH: HAkQS0 H5D H1 {2HQS2 H5D H1
S4 1H5 )
S6 1H5)
S8 1H5)
S: 1H5)
S< 1H5!) k
S> 1H5') T
S@ 1H5-) =
SB 1H53) &
SD 1H59)
SF 1H5?) t E HSHH5D 1 L[PL+[Hf{> k D}A EL] D E HE5Y 1I M!MI)MLLHI9 J 1H5C HLҿ HH1;
ӄ 1H5C IHSDfH1 C>IA
tpA9skNtHAT$1EB H H5 C M
f
f D HH5' 1R D P D}ECK6DK:D`0ȃDAAfn f S8C4f9 f9B EAE4E,f D1ҿ D)E9H5B CDP1AUDEf{6 AXAYt1C4DC>P0(fEDA9tDH5B 1f{: t2C8DC>P0(fEDЋE9tH5B 1pHX1A9t DC>D H5B 1FC6E9 f f{> SBC@H5~B
ЍQ
!HDPH1s6A6A9 DL4LkVH}LH 7f{: f{> SBC@H5zB
S ЍQ
!HDPH1gs:M1A9L =V ?9# L4LUH}1LHE9{D9% f H=% ] D H=% lG DuAG,1 @ HsH
^ HHKD HcHʉ1HHHH5? ft DA9x C:fMA9H=B DuAE, H=@ ` DH5@ 1
D UH5@ 1n D H=^$ DUH}1HH0 DH5c$ 1DDD)H!T @ H=# DH}HHڹ EP @ DuAAEE, H=Y@ H=i@ |H=@ kwDuAf UHAWIAVAAUAATISLH L dH%( HEȋAM =RCRDt6 HEdH+%( H [A\A]A^A_]f. AxRCRDu~ I|$H( ~ 5) RDE9t$I?DHa
ED$ HIH51A 1HH(D87H DHLA2AAD$0ffEfD9j 1fD;AE11Dž] W09 H A H(AAAL$ HSA)Dj0DA @E9@@t
A/F DIc
IcH5A 1D5y} 1ۅA! @ ELcH DL0L M$ D1I C ~H(IHËCDh0L~ P| =~ t
˂ 9 { ~ tD9 DL HLN} } \ N
} DHL"DI >f=RCRDD y} EyDH5t 1: ^ D El$ w D H(AHH H2*A D{ HE 1Dž 5~ L0H(DP0= 9X fE Ѓ AA!AH5> 1H6HQf. s>f"L
ɀ HKP1L LDX H H#1L9r I9 CHI9uڅGL% ED H5 ? 1Fz f DDHc1H5= p AfD9fA!f D 9fE(AA͍Q09 IyA7H=9 dHH;zz H9y z 9CH=> , H H5< I1H{A (H5>< 1RD
x EupLN,AftEDx 1E?H== >H== yH DH5; 1PHLUzHH5< 1DT IcD Hz)fH)ЉDHHHHLw D A9B I DENL DEEDDeDADH D)D9AO9Ht8HIcHcH9HHBHD8HH)HHAE9~<
w w A9rA# A =| " EMMfDL DHV%=v ËHx P?x u^1ۃ=v HDDA!7DH5 1D D LL1DLw w "| Dm
w DLLDٚDCEH59 D F (1ۋIcAH59 1ED HL9IBHD)H L)HHt7HHLD YFf D H UHSHHuPf{ KH H5 17SHsH]fH=; xT KLHo IH5cF 1SfuH]
H]H5MF 1 UHAWIAVAUMATESHHH}FNHMf9FRt H=' =t 0AWXL4A> H[A\A]A^A_] @ IW`DME
s AG\H5% H
s H1HIOhAWX=s L4~H= KuDH]GH= 1AvLEGA> VELED9!s :DuILLLRt>1Ƀ=r H H5
1M2Mf. HuLL=r ~H=`
|uLF
r H}IwHU=|r H x UHAWAVAUATSHWLfV B0uB(_Xu#LlA} FILEt H[A\A]A^A_] 1 @ GN9r IrՃvAULbM| M9s) EU̅t AWL`M| M9rA?ŨuM9r1A?vf.
~q HHt,
vq H=_q UHHs
]q ]H 2q H9~
?q Hq HHH HH would be was * cluster 0x%llx %s updated
** Missing end of index mark * Skipping over free space No minimal record space ** Could not wraparound Marking transaction 0x%x
** Action %d was aborted
+ synced committed *stale* *uncommitted* magic %08lx
usa_ofs %04x
usa_count %04x
file_offset %016llx
flags %08lx
page_count %d
page_position %d
next_record_offset %04x
usn %04x
** Error : no lcn to write to Unnamed Invalid Undefined ** Could not read block %d
Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec %s %02u %3s %4u
Noop CompensationlogRecord InitializeFileRecordSegment DeallocateFileRecordSegment WriteEndofFileRecordSegment CreateAttribute DeleteAttribute UpdateResidentValue UpdateNonResidentValue UpdateMappingPairs DeleteDirtyClusters SetNewAttributeSizes AddIndexEntryRoot DeleteIndexEntryRoot AddIndexEntryAllocation DeleteIndexEntryAllocation WriteEndOfIndexBuffer SetIndexEntryVcnRoot SetIndexEntryVcnAllocation UpdateFileNameRoot UpdateFileNameAllocation SetBitsInNonResidentBitMap ClearBitsInNonResidentBitMap HotFix EndTopLevelAction PrepareTransaction CommitTransaction ForgetTransaction OpenNonResidentAttribute OpenAttributeTableDump AttributeNamesDump DirtyPageTableDump TransactionTableDump UpdateRecordDataRoot UpdateRecordDataAllocation Win10Action35 Win10Action36 Win10Action37 *Unknown-Action-%d* %ld clusters per MFT entry
%ld MFT entries per cluster
* Assuming a log file copy ** Unsupported page size. * Assuming cluster size %ld
rb %02x %04x %*c == lcn 0x%llx from store
== lcn 0x%llx from device
== lcn 0x%llx to store
== lcn 0x%llx to device
-> %s()
** redo_clearbits failed -> record updated %s %c%c%c attr %08lx offs 0x%x nres %d attr %08lx offs 0x%x nres %d
attr %08lx offs 0x%x
newer mft vcn %lld index %d
** Failed to protect record unchanged expanded existing data : new data at same location : -> MFT record %s
shrinked full attr : -> existing index : -> new index : -> INDX record %s
-> existing record : -> full MFT record : -> new record : inserted removed matches -> inserted record : new index at same location : -> length %d namelen %d , * Unrecorded attribute -> data record %s
** Bad attribute type -> MFT record trimmed target %d length %d sum %d
** Unsupported redo %s
Action %d %s (%s) not redone
* Refreshing attributes not older Controversial deletion of existing mft existing index ** index root does not match ** Unsupported undo %s
* Syncing actions failed * Syncing actions %d->%d
dirty clean * Block size %ld bytes
restart %ld
magic %08lx
usa_ofs %04x
usa_count %04x
system_page_size %08lx
log_page_size %08lx
restart_area_offset %04x
minor_vers %d
major_vers %d
usn %04x
chkdsk %016llx
log_clients %04x
client_free_list %04x
client_in_use_list %04x
flags %04x
seq_number_bits %08lx
restart_area_length %04x
client_array_offset %04x
last_lsn_data_len %08lx
record_length %04x
log_page_data_offs %04x
restart_log_open_count %08lx
latest %016llx
prev_client %04x
next_client %04x
seq_number %04x
client_name_length %08x
client_name synced %016llx
committed %016llx
Standard-Information Attribute-List Volume-Version Security-Descriptor Volume-Name Volume-Information Data Index-Root Index-Allocation Bitmap Reparse-Point EA-Information EA Property-Set Logged-Utility-Stream End *0x%x-Unknown* inode %lld
seq number 0x%04x
link count %d
flags 0x%x (file in use) (directory in use) (not in use) name parent dir inode %lld
inode %lld
file created modified changed read DOS flags 0x%lx
create reparse data tag 0x%lx
print name security id 0x%lx
journal idx 0x%llx
set attr 0x%x (%s)
security hash 0x%lx
entry size %ld
inode %lld
parent inode %lld
file date allocated size %lld
real size %lld
initialized size %lld
$R reparse index reparsed inode 0x%016llx
reparse tag 0x%lx
$SII security id index $SDH security id index directory index file (dir) file inode %lld
file size %lld
unknown index type vcn %lld
first bit %ld
bit count %ld
MFT attribute 0x%lx (%s)
lsn 0x%016llx
extra : attr name * undo attr not shown ** Unexpected step %d
(%d more attrs not shown)
attr 0x%x is --checkpoint-- client_data_length %08lx
seq_number %d
client_index %d
record_type %08lx
transaction_id %08lx
log_record_flags %04x
redo_offset %04x
redo_length %04x
undo_offset %04x
undo_length %04x
target_attribute %04x
lcns_to_follow %04x
record_offset %04x
attribute_offset %04x
cluster_index %04x
attribute_flags %04x
(MFT record for inode %lld)
no redo data (new data) no undo data (old data) invalid extra data size extra data at offs 0x%x
---> checkpoint record ** Unknown action type ** Bad client data undo %016llx
block %ld
* big record, size %d
* This is the latest record successful Sync simulation Syncing Bad cluster range
Bad play count
Bad log block range
Bad undo count
Bad exception list
Unknown option '%s'.
-bc:hifknp:r:stu:vVx: Device argument is missing
-t : show transactions
2022.10.3 ntfsrecover
%s
%s%s
** Invalid restart block
* block %d at 0x%llx
** Invalid block ** Bad client_data_length * Bad return from overlap() Skipping block %d pos 0x%x
empty block
Blocks redirected : * block %d to block %d
final lsn %llx in blk %d
* Ignored block %d at 0x%llx
Block %d is the latest one
* Restart page was obsolete ** Unexpected block type CHKD ** Unexpected block type RSTR ** Invalid block %d
* block %ld at 0x%llx
** Could not read block %lu
* Earliest block reached Could not open %s
backward clusters forward help kill-fast-restart no-action play range sync transactions undo verbose version exceptions %sattr 0x%x : type Unknown -> full record : ** Bad index record length %ld (computed %ld)
index to none lth 0x%x flags 0x%x pos 0x%x
index to reparse of 0x%016llx lth 0x%x flags 0x%x pos 0x%x
index to securid 0x%lx lth 0x%x flags 0x%x pos 0x%x
index to inode 0x%016llx lth 0x%x flags 0x%x pos 0x%x
** Invalid index record length %d
** Bad index length %ld (usable %ld allocated %ld)
** Error : searchlikely() used for syncing * Reaching free space at end of block %d
*** Inconsistency : blocks skipped after free space ** Bad record size %ld in block %ld offset 0x%x
*** Inconsistency : the final record does not overlap Overlapping record from block %d, starting at offset 0x%x
No minimal record from block %d, starting at offset 0x%x
No block before %d, starting at offset 0x%x
* Skipping over bad wraparound ** Unexpected attribute format, length %d
%d active transactions in set
last_lsn %016llx (synced%s%ld)
reserved4 %04x %04x %04x
last_end_lsn %016llx (synced%s%ld)
last %016llx (synced%s%ld) %s
last_end %016llx (synced%s%ld) %s
** Could not write cluster 0x%llx
** Error : attribute 0x%x is not defined
** Error : bad attribute name length %d
* Update sequence number %d does not match
%s %02d %3s %4d %2d:%02d:%02d UTC
** Bad day stamp %lld days %lu mon %d year %u
Capacity %lld bytes (%lld GB)
Capacity %lld bytes (%lld MB)
sectors %lld (0x%llx), sector size %d
clusters %lld (0x%llx), cluster size %d (%d bits)
MFT at cluster %lld (0x%llx), entry size %lu
** Could not read the log file
** Inconsistent restart area offset. Log file size %lld bytes, cluster size %ld
** Not an NTFS image or log file
** Error : no lcn to read from ** Could not read cluster 0x%llx
** Invalid protected record at 0x%llx index %d
** Could not store cluster 0x%llx
-> lcn 0x%llx firstbit %d count %d wanted %d
** Failed to decompress the runlist The existing index does not match : However parent dir and name do match ** Bad type ordering 0x%lx after 0x%lx
** Bad attr instance %d (max %d)
** Duplicated attr instance %d
** Bad MFT record length %ld (computed %ld allocated %ld)
update inode %ld lsn 0x%llx (record %s than action 0x%llx)
update index lsn 0x%llx (index %s than action 0x%llx)
** Error : writing protected record of unknown type -> inode %lld lcn 0x%llx target 0x%x length %d
** Bad attribute order, full record : expanded record (now 0x%x bytes used) :
data 0x%lx 0x%lx offset %d %ld
The existing record does not match (%d/%d)
new record at same location (now 0x%x bytes used) :
* fake test, assuming not shrinked : value length %ld length %ld oldlength %ld
-> lcn 0x%llx target 0x%x length %d
** Error size change in change_resident ** Error : update overflows from attribute Redo action %d %s (%s) 0x%llx
** %s (action %d) not acting on MFT
** %s (action %d) not acting on INDX
** Error : action %s on MFT or INDX
-> attribute %s the recorded one
** Error : update_mapping on resident attr ** Bad action-37, inode %lld record :
** Non-null record_offset in redo_write_index() * Redoing action %d %s (%s) failed
* Undoing transaction set %d (actions %d->%d)
Undo action %d %s (%s) lsn 0x%llx
record lsn 0x%llx is %s than action %d lsn 0x%llx
index lsn 0x%llx is %s than action %d lsn 0x%llx
** Call to unsupported create_indx() ** Unexpected attr type 0x%lx
** Call to unsupported insert_index_allocation() -> inode %lld lcn 0x%llx target 0x%x new length %d resize %d
Cannot undo, there is no undo data * Ignored action-37, inode %lld record :
** add_non_resident() not implemented ** delete_non_resident() not implemented * Undoing action %d %s (%s) failed
* Undoing transaction set failed * Redoing transaction set %d (actions %d->%d)
* Redoing transaction set failed * Using initial restart page, syncing from 0x%llx, %s
* RSTR in block %ld 0x%lx (addr 0x%llx)
chkdsk_lsn %016llx
current_lsn %016llx
file_size %016llx
oldest_lsn %016llx
client_restart_lsn %016llx
Not a RSTR or CHKD record, MAGIC 0x%08lx
* Using %s restart page, syncing from 0x%llx, %s
redo fixup %dR %s attr 0x%x offs 0x%x
undo fixup %dU %s attr 0x%x offs 0x%x
new base MFT record, attr 0x%x (%s)
attrib 0x%lx (%s) at offset 0x%x
free base MFT record, attr 0x%x (%s)
create file name, attr 0x%x
create a data stream, attr 0x%x
set standard information, attr 0x%x
set an MFT attribute at offset 0x%x, attr 0x%x
update runlist in attr 0x%x (%s)
set sizes in attr 0x%x (%s)
add resident index entry, attr 0x%x
add nonres index entry, attr 0x%x
set vcn of non-resident index root, attr 0x%x
set directory resident entry, attr 0x%x
** Unexpected index parameters set directory nonres entry, attr 0x%x
SetBitsInNonResidentBitMap, attr 0x%x
ClearBitsInNonResidentBitMap, attr 0x%x
OpenNonResidentAttribute, attr 0x%x
OpenAttributeTableDump, attr 0x%x (%s)
attr 0x%x inode %lld type %s AttributeNamesDump, attr 0x%x (%s)
this_lsn %016llx (synced%s%ld) %s
client_previous_lsn %016llx
client_undo_next_lsn %016llx
reserved1 %04x %04x %04x
redo_operation %04x %s
undo_operation %04x %s
target_vcn %016llx (inode %lld)
target_vcn %016llx
(%d offs 0x%x) lcn %016llx (MFT records for inodes %lld-%lld)
assuming record for inode %lld
redo 0x%x (%u) undo 0x%x (%u) extra 0x%x (%d)
** Unexpected redo offset 0x%x %u (%u)
** Unexpected undo offset 0x%x %u (%u)
** Unexpected extra offset 0x%x %u (%u)
redo data (new data) cluster 0x%llx pos 0x%x :
redo data (new data) at offs 0x%x :
redo data overflowing from record undo data (old data) cluster 0x%llx pos 0x%x :
undo data (old data) at offs 0x%x :
undo data overflowing from two blocks undo data overflowing from record * redo data overflows from record * undo data overflows from record transaction_lsn %016llx
attributes_lsn %016llx
names_lsn %016llx
dirty_pages_lsn %016llx
unknown-%u %016llx
client_data for record type %ld
at %04x %016llx %s (%ld) %s
previous and undo %016llx
previous %016llx * RCRD for block %ld 0x%lx in block %ld (addr 0x%llx)
* RCRD in block %ld 0x%lx (addr 0x%llx)
First record checked at offset 0x%x
** Bad first record at offset 0x%x
** Could not recover, stopping at block %d
** Bad size %ld in block %ld offset 0x%x, stopping
Overlapping backward action %d at 0x%x size %d (next at 0x%x)
Overlap marked for block %ld space %d likely %d
** Invalid record size %ld in block %ld
** Inconsistency : the final record in block %ld does not overlap
* log backward action %u at 0x%x size %d (next at 0x%x)
its lsn matches the global restart lsn its lsn matches the client restart lsn its length matches the last record length Device must be the last argument.
Options -f, -r and -s are incompatible with -b
Options -p, -s and -u are incompatible with -f
Options -r, -s, -t and -u are incompatible with -p
Options -s and -u are incompatible with -r
Options -t and -u are incompatible with -s
Usage : for recovering the updates committed by Windows :
ntfsrecover partition
(e.g. ntfsrecover /dev/sda1)
Advanced : ntfsrecover [-b] [-c first-last] [-i] [-f] [-n] [-p count]
[-r first-last] [-t] [-u count] [-v] partition
-b : show the full log backward
-c : restrict to the actions related to cluster range
-i : show invalid (stale) records
-f : show the full log forward
-h : show this help information
-k : kill fast restart data
-n : do not apply any modification
-p : undo the latest count transaction sets and play one
-r : show a range of log blocks forward
-s : sync the committed changes (default)
-u : undo the latest count transaction sets
-v : show more information (-vv yet more)
-V : show version and exit
%s v%s (libntfs-3g) - Recover updates committed by Windows on an NTFS Volume.
Copyright (c) 2012-2017 Jean-Pierre Andre Developers' email address: ntfs-3g-devel@lists.sf.net
This program is free software, released under the GNU General Public License
and you are welcome to redistribute it under certain conditions. It comes with
ABSOLUTELY NO WARRANTY; for details read the GNU General Public License to be
found in the file "COPYING" distributed with this program, or online at:
http://www.gnu.org/copyleft/gpl.html
Options -s, -p and -u require a full device ** The log file has been wiped out ** Could not get any restart page ** The log file has been obsoleted by chkdsk ** Fast restart mode detected, data could be lost Use option --kill-fast-restart to bypass ** Unsupported $LogFile version %d.%d
* RCRD in block %ld 0x%lx (addr 0x%llx) from pos 0x%x
* Bad start 0x%x for block %d
No likely full record in block %lu
First record computed at offset 0x%x
* log action %u at 0x%x size %d (next at 0x%x)
Overlapping record %u at 0x%x size %d (next at 0x%x)
** Skipping unlikely overlapping record More than two blocks required (size %lu)
** Error : bad big overlap pos %d size %d
Big overlapping record %u at 0x%x size %u (next at 0x%x)
Next record expected in block %lu index 0x%x
** Error next != firstrecord after block %d
* No block found overlapping on block %d
** Not a RCRD record, MAGIC 0x%08lx
* Restart page was obsolete, updated committed lsn * Volume is clean, nothing to do block %d is more recent than block %d
* block %d for block %d at 0x%llx
* block %ld at 0x%llx (block %ld used as previous one)
* block %ld for block %ld at 0x%llx
* Transaction set count reached * %s %s after playing %u actions
** No valid start block, aborting
Redo actions which were executed : %sattr 0x%x : inode %lld type %s %s(definition of attr 0x%x not met)
`<,, |l\, |l\L0 AF
BEEEL
E , , n AE
I
I \ 0w| Y
A[ Jp x AC
DGDl
A
H w
I j
F `
H -
K j
F
I r
N < ( AC
BJ
H
A s
M , 4 J
AC
BEEED\
K 4 d ( EC
BIIIDH
A 8 p NC
AN
P | T S , EC
BGEDY
E (
Ĥ EC
Mw
D 4
hg bF
L L N `N !H b *H c 3H f ;H h @H k RH n \H p aH r gH s lH t yH u ~H v H V H x
8/ 0 8 o
o o o o o 0 @ P ` p ! ! ! 0! @! P! `! p! ! ! ! ! ! ! ! ! " " " 0" @" P" `" p" " " " " " " /usr/lib/debug/.dwz/x86_64-linux-gnu/ntfs-3g.debug $G[ow(؎~ a8239ec5fd59d849a47159f1c5e2fb59b8b594.debug ߁Q .shstrtab .interp .note.gnu.property .note.gnu.build-id .note.ABI-tag .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rela.dyn .rela.plt .init .plt.got .plt.sec .text .fini .rodata .eh_frame_hdr .eh_frame .init_array .fini_array .data.rel.ro .dynamic .data .bss .gnu_debugaltlink .gnu_debuglink 8 8 0 & h h $ 9 G o $ Q ( Y a o n n o p }
B " " " " % % 8/ 8/
0 0 XM X} X} 0 0 T
0 0 8 8 @ @ G X 4 /