Edit: /usr/bin/ntfsinfo (59672B)
ELF > PS @ @ 8
@ @ @ @ H H Uk Uk F F P P 8 8 8 X X X D D Std 8 8 8 Ptd t t t , , Qtd Rtd /lib64/ld-linux-x86-64.so.2 GNU GNU (Dpgdt' GNU ? 0 ? E G ( "?
"?em@Pl(
Q2""? 7 L 2 8 M d 1 Y h
E X / ) ! } ^ G > r ^ z l " X | p F X
k " ` r @ H
d x
0 e libntfs-3g.so.883 _ITM_deregisterTMCloneTable __gmon_start__ _ITM_registerTMCloneTable ntfs_attr_close ntfs_names_are_equal ntfs_rl_pread AT_UNNAMED ntfs_get_attribute_value_length ntfs_inode_open NTFS_INDEX_SII ntfs_mst_post_read_fixup ntfs_log_parse_option ntfs_attr_put_search_ctx ntfs_log_set_handler ntfs_attr_find_in_attrdef ntfs_log_redirect ntfs_mbstoucs ntfs_volume_get_free_space ntfs_guid_is_zero ntfs_umount ntfs_log_clear_levels ntfs_inode_close ntfs_index_root_get NTFS_INDEX_SDH ntfs_file_record_read ntfs_malloc ntfs_attr_open ntfs_log_handler_outerr ntfs_ucsnlen ntfs_get_attribute_value ntfs_log_set_levels ntfs_attr_get_search_ctx ntfs_mapping_pairs_decompress ntfs_log_get_levels ntfs_attr_readall ntfs_guid_to_mbs ntfs_sid_to_mbs ntfs_pathname_to_inode ntfs_mount NTFS_INDEX_I30 ntfs_attr_pread ntfs_check_if_mounted ntfs_attr_lookup NTFS_INDEX_O NTFS_INDEX_Q ntfs_home NTFS_INDEX_R ntfs_ie_get_vcn ntfs_ucstombs libc.so.6 __printf_chk exit setlocale strncmp optind puts __stack_chk_fail putchar realloc strtoll calloc __errno_location stdout memcpy optarg __snprintf_chk optopt getopt_long setlinebuf strchr __cxa_finalize __sprintf_chk __xstat opterr __libc_start_main snprintf free GLIBC_2.14 GLIBC_2.4 GLIBC_2.2.5 GLIBC_2.3.4 ii
ui ti 0T S բ ٢ ݢ ( 0 @ H P X ` h p x
! ' , 2 7 @ = ` E M T 0 8
# 9 D @ G H H X ? ` E d I p @ x J K A L B C F ( 0 8 @ H P
X ` h p x ! " $ % & ' ( ) * ( + 0 , 8 - @ . H / P 0 X 1 ` 2 h 3 p 4 x 5 6 7 8 : ; < = > HH HtH 5 % h h h h h h h h q h a h Q h
A h 1 h ! h
h h h h h h h h h h q h a h Q h A h 1 h ! h h h h h! h" h# h$ h% h& h' q h( a h) Q h* A h+ 1 h, ! h- h. h/ h0 h1 h2 h3 h4 h5 h6 h7 q h8 a % D % D % D %
D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D %} D %u D %m D %e D %] D %U D %M D %E D %= D %5 D %- D %% D % D % D %
D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D % D %} D %u D %m D %e D %] D AWL= AVAAUE1ATE1UHS1H H= dH%( H$ 1gH= HF H3 E1H
HDH4p c B Pƃ< IcL>=m ? A멃 AE1 1L
~ H5 k H=~ iH= uHc HDH| GHc VL
~ E1 tH5j H=! 1'XZL
0o QE1 P ɿ ( 7 % H= -H=G 1H5 AO | @ t u DD H=q H=s =n =e E11L
/~ H5i H= H= H5n H5k~ 1H
( 1H H5n nH= B H= H+ H o Es H
m Hm 1H5 H=m H= H= H=m H= H= H=m H=m H= wL0 H
! 1H H5m oA C 1Hc H|~Hc L
l WE1 t2H= C" = tY= H=e tBH=S t8A6E1 ' 1L
a| H5g H= A F = H= HH H J IH& D= E H5 H H H 1LXIM II_H5n 1 Hk HH=t |- S 1H5ҁ S 1H5 S 1H5
IoHLHH HD$ HH HLcHH H5j 1dHD$ Lt$0L%Qh L|$(HL,(HD$XIL9
H5ej 1 S 1H5_j S 1H5bj S 1H5cj HS 1H5~ HH5~ 1H H#SHS 1H5&j uH5/j 1bs@U 1H{LHD$X ._ H|$X H|$XbH5i 1CSPC9~8HcHl3)L43H AL 1IL9u
CHof D }
1HT$XHD$X H| Ll$XM LH5f 1`L = 1 = = = AU
AM LD$XL LHHt$XH$ =
w = T= I= >1HVl H5 A} H= ]A} A} AFuLn$ f = uA} AEAmHD$0 HD$(LL|$8Dd$ L-j Lt$@O LH=k z UH5k E AHIcH;D$( H5j 1U H5j 1tU 1LuH5j WU 1H5j >L 1H5j (H5j 1]
Mt ] H5 k 1f} H=i A]L=,
S Au H=yi O AU0H H5y 1d = = = A}
EeKD% HD$ H\$ 3Lc HH5h 1k 1H5\ 1 H5h v H5i 1
A} H|$ = A]LLLH6 H5f 1J Y H5V 1 H1LHH H=b L]HD$M HD$HD$HL%v} Hl$IU HU 1MH5b vHx1H9]HD$H]H]L](HIEMp IHMHyHAHp IcL>H
\] HU MH5Jb 1 H
] H
)] H
] H
] HU0H5a 1HHU( 1H5u HHU81 H5u H}" uE u f.HU@H5u 1HY8G E1 h 1L
z H5X H=B~ mH|$sL1LqH$ dH3%( HĘ 1[]A\A]A^A_Hl$Ll$HHtE1 E 1L
t H5rW H=} NH=\ ZI H5\ HP1`I H5\ HP1FIV 1H5\ /IV 1H5\ AV"1H5\ AF" fA~" ;
?AN!AV 1H5\ AV$H5\ 1 AV( 1H5\ AV0 1H5\ |IVp 1H5"n eH=t\ 9AV, 1H5n\ BAV7H5s\ 1 *IV@ 1H5o\ IVH 1H5r\ IVP 1H5r\ IVX 1H5p\ IV` 1H5m IVh 1H5m I AN4ffH5m HP0I*Np HH*Y{ ^XI H5m 1 >A 1H5[ $I H5m 1
A H5m 1 I H5m P01H=[ IFx H5m H1IFx H5m HP1IFx H5m P$1xIFx H5Xm P01^H=m 2H=m &I H5[ H@H1%H=m I H5[ P 1I H5 [ HP(1I H5m HP01I H5Z HP81I H5m HP@1I H5m HPH1fI H5Z PP1II H5m PT1+I H5m PU1
LI ffH5m I*Np H*Y"y ^YL\$(E1! 1VH=x L
>p QH5qR _H
V AXL\$(]E1 1L
Ca H56R H=x ?H LH!IE1 1L
o H5Q H= x T H=` =h HL$HT$H5et 1 LLYHD$ H
HT$ LL- A]
E1L D$@Md Em LD"HD$(H LD$XDL⾠ LHH HT$XHH9 HD$ E1Lt$HIEH\$(Dl$@D$8 D$0 p( @ AIA~HE1HD I9 DsLs E11 Z L
^ H5yP H=t = ID$E1 L
] ^ H5@P H=t PP1AD$=ŭ AYAZMD DLO! HD$ HT$Xp AmH5q 1LU U 1H5] U 1H5aq MIGP q A]Ld$`AmLLH1L H5kZ z HkH H=e^ 1Hk HA
H=*^ Hk0H LHL 1H5/Z Au HD$X A}1HT$XL HT$XH5Z 1H|$X-H H5 j H!1HzXH5YV 1bH=vZ 1H=Y H5m 1(HR H5b 1 H
1H H5S ruH; H5 W H1H{ H5W H1H{ H5W H1H{ H5
W H1`LD$X11Ҿ LHD$ H E1 1L
yn H5L H=#q ^MO1LLLL$ IH I]0HLL$ HH 1IHLLH9
E1 Q 1L
hl H5lL H=
r LH H5HX 1]E
H5 X 1AE
H5W 1%E
xH5W 1 E
TH5W 1E
0H5W 1IH5W 1E
$H5W 1 D$0E1 D$8H=o L
Y VH5GK P1HD$0_AXHT$XpWA~)E1 1L
3_ H5K H=eq p
HO H5_ 1H
1H H5O g%bH5R 1,H5\R 1H5cR 1|H5?R 1aH5 R 1F1H5bY . l$( FHL$ LH W HD I D U H1H L9ul$( 3H=W ,=; IA0 I3 H 1A] $Ee
UE1j E1 H= MLA]ZLLD$X LH-H5TL 1H=U jH=wU ^H=Q RI_Im01LHHl$(IH H'HHtRLl$(1ILHLGI98 E1 - 1H=i L
S H5E 5H L`=Q A~)E1 1L
Y H5{E H=k = uH5.R 1l
S 1H5MR JS1 H5e 2IGS @(9C- H5e 1 HsH=R
CE1 L
R : H5D LdH=i 1L H5Q 14L
ue E1 H5dD H=h IG8H H5WQ 1YLHL 1H56O 3E1 5 1L
e H5C H=g UH=vO H5d 1E1 1L
N H5C H=i S$H5SM 1S( 1H5OM }S, 1H5QM gS0 1H5MM OS4 1H5LM 7HS8 1H5%a H HS@ 1H53a HE1 1L
c H5B H=*h %`E1 1L
za H5B H=|h 2H5_O 1 L
c E1 H5JB H=f H|$ L|$(Lt$0H=a H5O 1&LYH5N 1LHqL 1H5L LHl$0H5N 1@E1 1L
~` H5jA H=Xg H|$ D$8 D$0 xE1 1L
qb H5 A H=e H5N 1 E1 Y 1L
a H5@ H=uf @{W E1 1H5@ L
N H=d HD$ HT$XpE1 1L
L H5n@ H=e H H5E 1h yf 1I^HHPTL7 H
_7 H=R H= H H9tH& Ht H= H5 H)HH?HHHtH Htf D =ɜ u+UH= Ht H= d ] w H; tQw1H; t@vX H; H
M HD H; t uH; Á H; HL HDH|; tׁ HX; HL HD H; tmw?H; @t_ H; ptM H+f HE; HDfH; t v?H; t uH; Á H; H: HDf. Hf; tvc Hy; H: HDH; Pt`H ; H: HD @ Hg; tvB0H: H: HDH; U Hd HS: HDHP: -HQ: H.: HDff. AU1AHAT ESH5: A A A Ae A ; A@ AĀ A A A ` A 3 A A A @ 0t/A uVEup[DA\ H5: 1A]Nf D A tH5: 1A%A t @ H5: 1AEtDH5: 1uf D H5@: 1A=f H5: 1AH59 1AvH59 1AVH59 1A6H5R9 1ATH5'9 1A'H58 1A @ H58 1A @ H58 1A @ H58 1Ay @ H5[8 1AYU @ H538 1A9+ @ H5 8 1A @ ATHI1S HHH5I AKL H58 1AKL H5I 1AK HL[H5I 1A\ff. @ ATHI1S HHNH5vI AVKL1H5I A9CLH5I 1AHKHL[H5I 1A\ AWAVAUATUSHH|$ A1ۉH57 1Hl$DcIA, A 1AH5Z7 IE9vtE9w A9v;} G<_. CHA9wH
[]A\A]A^A_
A9MH[]A\A]A^A_f D E9s H56 1AE9uoff. @ HHHH HHH?H :HBzՔHH'H) HHW)QΠEHH)HHHH?H
H)AHHiҀQ Hi%I$H)H ) )Љ)Hik9H/i: Di )tIHi
#H-iƬ kd)HHismA0A H'Di D)t@HiuyH%Dim i)\D)AAA(\-
ף DH: HiɅBH )IȉDDAAA)D)HAAHcVLIH%DkfEALH563 1Aȿ LH5\3 1jHD$dH3%( H[A\f D E1 x 1L
D H53 H=X o D H{?L H51 H1H{ L H51 H1H{L H51 H1H{ L H51 H1z !L H5C I1h~ff. AWH1AVAUATUHSH LmHH5>2 m A L=2 @ AAE L<t H
1 <tH
1 H1 HEEMEEH1H5UC I}11Hڿ H51 HI1LAEIAD$D9lH[]A\A]A^A_ff. fATHI1UH5v1 SH -K1LH5h1 f{ H { LH51 1{ H11 LH51 HH1HLH51 1C: b
s H=Q> HLH51 1PC <
sH= > H[]A\ @ H11 L H50 HH1H({LH50 1fHKLH50 1 HK L1H50 HKL1H50 rHK L[H50 ] 1A\T @ H=: $ [H=: ]A\ H5J0 1
H5*0 1 AWAVIAUATA UH-Q SH8dH%( HD$(1& IucAF p E11 L
W2 H5V. H=4S 迾HD$(dH3%(
H8D[]A\A]A^A_f AFL
/ E1 H5- H=R PP1`AF
E1L
q/ H5- PH=R P10AF HE1L
X/ PH5- H=tR 1AF A[A_ AL
)/ E1 H5G- H=%R PP1謽AFE1L
/ H5- PH=Q P1|H HcD H>fLLI
AWE1 PL
> 1 H5, H=Q !AYAF AZ' E1 H I#PL
> H5r, PH=OQ 1ؼH=e: Iv_AXAFf IL
R6 E11 AH5 , H=P 臼 @ AFAIt AFE1 L
*/ H5+ H=P PP11E1 1L
- H5+ H=}P E>E1L
. J H5t+ MH=P A$1һAGE1L
. L H5>+ $H=O 1袻IGE1L
= N H5+ PH=O P1sIH FHE1L
|. P 1S H5* H=mO 8IGE1L
c. V H5* PH=AO P1 IG H E1L
N. [ PH5p* H=O P1ֺIG(E1L
P= ` H5B* PH=N P1觺H fA~0I011:Hh E1PIL
- H5) H=N 1YLAXZf. I~11HE1L
, PIǹ H5) H=YN 1LE1 1L
z+ H5h) H=FN ѹE>E1L
o, B H5=) MH=M APP1蜹AGH E1L
O, E PPH5) H=M 1iY^fANE1L
s; PH5( H=M 1Q *IFE1L
d; H5( PH=SM P1H E11L
|* H5e( H=CM θf I~LHE11AU L
* H5 ( H=L 腸E1 1L
* H5' H=L \E>E1H L
W* + MH5' H=YL I#H$1IE1 L
4* . H5' H0H="L $1IL E1 1L
* 3 L,$H5F' H=K 请ILӸE1 1L
) 7 L,$H5
' H=K vI(L蚸L,$E1L
) : D AFHE1 L
( H5& PH=mK 1AFE1L
8 H5& PH=?K P1H E11L
h( H5Q& H=/K 躶E>HE1L
F( MH5 & H=J AP1肶AGE1L
%( H5% PH=J P1SIGH E1L
!8 PH5% H=XJ P1 AGE1L
8 H5% PH=)J P1AGHE1L
' " PQ AFL
}7 E1 H54% H=I PP1虵E1 1L
' H5% H=I pE>E1L
' H5$ MH=wI A$1:AGE1L
& H5$ PH=CI P1 IGH E1L
6 PH5r$ H=I P1شAGE1L
6 H5D$ PH=H P1詴H HL
E7 E11S H5 $ H=H rE1 1L
% H5# H=H I $E1 L
6 m D L
6 E1 H5# H=vH Ǵ ATUSHPdH%( HD$H1~ tDD"EtbA0 HE1H=BH 1AT L
6 H5!# 葳_AXE1HD$HdH3%( HPD[]A\ HH ~H@ H ~HK S
E1j E1H=} H]Y^C HS
K E1j E1 H= H+]Z! HS
K E1j E1 H=y HAZA[ HS
K E1j E1 H=1 HųAXAY HS
K E1j H=~ E1H葳^_ HK S
E1j E1 H=~ H_ZYH/$Quota H3T$H/$ExtendH3$H uTA ] A J D A : D A *A A H/$ObjId H3T$H ¸ DDJf. HH5. I1Mt
H 1 ijH E1PL
H 1 H5"G H={W XZ Hf. AUATUSHdH%( HD$1H H> HtxHH$ 螳Aąx;DhH} McM9|L
HHt_HE H4$LUH<$\HD$dH3%( u1HD[]A\A]f D 3AiA A ATUSH dH%( H$ 1HD$ H HHT$H Ht$H述 A D$t:B E1@ 1L
E H5E H=U yf H$ dH3%( Hİ D[]A\f. k8tFHL
G E1 S H=fU H5 E 1E1_AX+E1 HL
D E1 S D H E11SH5D L
F H=T 袮Y^ E1@ 1L
D H5D A H=T i @ HE1 E1HF L
y! PH5FD H=T 1( E11L
WG H5D H=TT XZ L
!F E11E1乀 H5C H=T ĭO芮f. ATUSH H Hn HHKIH @"t1 t1E1 8 1L
{M H5TC H=mS 8L[]A\H4 E1 HK L
G PH5C H=2S 11LXZE1[]LA\ @ E1 L[]A\f. HE1H=R 1S L
B H5B 蒬转_AX to _ gHE1 * HI L
m Pf D H59B H=RR 1Y^HL
E E1 S HE1 " HIF L
PHE1 $ HF L
PHE1 & H-G L
P`HE1 ( HC L
P;ff. AUATUSHdH%( HD$1H$ HtmHHteAH1HݬIH <8" H $H EtVt^- 1HL$dH3 %( H[]A\A] @ <-t Le Mi Mi Mi Mi HL
@ E1 Sc H5P@ H=IP 12X1ZnHL
J E1u Q f D E1 h 1L
jJ H5? H=O ߩ1 H)SL
8@ E1z Q hzf. AVAUATAUSH dH%( HD$1HH HH I- I=HH9t%Ht$DHtqHuHD$H fHD$ { uYHHD$IE IH\$dH3 %( uOH []A\A]A^f 1ː1 @ Ht$H{DGtHD$HT$bf SHt&V11Hj E1E11oZYuHC[ 苨 1[Ð1[ff. ATUHHt8A1FHHtFDHHIHL]A\ D #E1 HL]A\ L
H E11E1乀 H5= H=M 謧f. AWAVAUATUSH H<$Ht$T$ dH%( H$ 1H H H$Hl$0 D$ HHl$ A H@Hl$(HD$1HH<$17IH A D L0 cH XHD{AE9H} L3Ht
踦HE s@1H{BHNxJE D ˦ 1H$ dH3%( S H []A\A]A^A_f. E1 @ 1L
RG H5S< H= L 7 ͦHH H$L< HH L1إH] E LDL$Et H<$mH L!H H|$L٨H$HtND$D$HhHa E11jL
F H5w; H=0K [XZ1HE1H=K SL
; Y H5;; &_AXD|$ Ld$ 1L-; H$ f D HHHt;HHcEH|$PA)HMIcA/ 1裤Y^A9~8HCI9uH\$ Hl$(Hà H} H胤H9u E1 l 1L
#; H5w: H=0J [E1 & 1L
#E H5L: H=J 01 @ AUATUSHdH%( HD$1H IH H6A`HH HH$ 1HHPH H $IcH 1L蠤D9W s @ {
Hc1A)IHH$ IcHM L $L1L: H H H<$A9 芙LA,Y^L
N: E1 7 芙A L
0 E1 L Vf. AWL=_ AVIAUIATAUH-_ SL)HHt 1 LLDAHH9uH[]A\A]A^A_ff. HH (Windows container) (Cloud) (Wof compressed) (NFS symlink) (deduplicated) (symlink) (Linux symlink) (mount point) $UNKNOWN $UNUSED $OBJECT_ID $STANDARD_INFORMATION $INDEX_ROOT $VOLUME_INFORMATION $SECURITY_DESCRIPTOR $FILE_NAME $VOLUME_NAME $REPARSE_POINT $INDEX_ALLOCATION $EA $END $EA_INFORMATION $LOGGED_UTILITY_STREAM $ATTRIBUTE_LIST $PROPERTY_SET %sFile attributes: READONLY HIDDEN SYSTEM DIRECTORY ARCHIVE DEVICE NORMAL TEMPORARY SPARSE_FILE REPARSE_POINT COMPRESSED OFFLINE NOT_CONTENT_INDEXED ENCRYPTED I30_INDEX VIEW_INDEX UNKNOWN: 0x%08x (0x%08x)
%sIndex Size: %u (0x%x)
%04X %02hhX (unknown) Win32 POSIX Win32 & DOS %sFile Creation Time: %s %sFile Altered Time: %s %sMFT Changed Time: %s %sLast Accessed Time: %s %sData Size: %lld (0x%llx)
%sEA Length: %d (0x%x)
%sReserved: %d (0x%x)
%sNamespace: %s
%sFilename: '%s'
ntfsinfo.c %sFile Name: unnamed?!?
unknown audit deny allow %sRevision %u
%s SID: %s
%s Revision: %u
%s Control: 0x%04x
%s Owner SID pointer: %p
%s Group SID pointer: %p
%s SACL pointer: %p
%s DACL pointer: %p
%s Owner SID: %s
%s Owner SID: missing
%s Group SID: %s
%s Group SID: missing
%s System ACL: defaulted %s Discretionary ACL: Entry length: %u (0x%x)
Key length: %u (0x%x)
Index entry flags: 0x%02x
Data offset: %u (0x%x)
Data length: %u (0x%x)
Key Data:
Hash: 0x%08x
Security id: %u (0x%x)
Key hash: 0x%08x
Unknown (padding): 0x%08x
Key GUID: %s
MFT Number: 0x%llx
MFT Sequence Number: 0x%x
Birth volume id GUID: %s
Birth object id GUID: %s
Domain id GUID: %s
Key SID: %s
Owner id: %u (0x%x)
Unknown: %u (0x%x)
Key owner id: %u (0x%x)
Version: %u
Quota flags: 0x%08x
Last changed: %s Threshold: %lld (0x%llx)
Limit: %lld (0x%llx)
Owner SID: %s
End of index block reached
/$Extend/$Quota /$Extend/$ObjId No Yes ??? Unknown option '%s'.
Unhandled option case: %d.
-:dfhi:F:mqtTvV ntfsinfo 2017.3.23AR.3 Copyright (c) 2002-2005 Richard Russon 2004-2005 Yuval Fledel 2004-2007 Yura Pakhuchiy
%s
%s%s
Failed to open '%s'.
Volume Information Name of device: %s
Device state: %lu
Volume Name: %s
Volume State: %lu
Volume Flags: 0x%04x DIRTY MODIFIED_BY_CHKDSK Volume Version: %u.%u
Sector Size: %hu
Cluster Size: %u
Index Block Size: %u
MFT Information MFT Record Size: %u
MFT Zone Multiplier: %u
MFT Data Position: %lld
MFT Zone Start: %lld
MFT Zone End: %lld
MFT Zone Position: %lld
FILE_MFTMirr Size: %d
FILE_Bitmap Information Base Inode: %llu
Attribute Name Length: %u
Attribute State: %lu
Attribute Data Size: %lld
Compression Block Size: %u
Dumping Inode %llu (0x%llx)
Attribute Offset: %u (0x%x)
MFT Record Flags: IN_USE DIRECTORY IS_4 VIEW_INDEX UNKNOWN: 0x%04x none MFT Padding: %02x Resident: %s
Name length: %u (0x%x)
Name offset: %u (0x%x)
Attribute name: '%s'
Attribute flags: 0x%04x
Data size: %u (0x%x)
Resident flags: 0x%02x
ReservedR: %d (0x%x)
Lowest VCN %lld (0x%llx)
Data size: %llu (0x%llx)
Runlist: VCN LCN Length 0x%llx 0x%llx 0x%llx
0x%llx %s 0x%llx
File Creation Time: %s File Altered Time: %s MFT Changed Time: %s Last Accessed Time: %s Maximum versions: %u
Version number: %u
Class ID: %u
User ID: %u (0x%x)
Security ID: %u (0x%x)
Dumping attribute list: Attribute type: 0x%x
Record length: %u (0x%x)
Name length: %u (0x%x)
Name offset: %u (0x%x)
Instance: %u (0x%x)
Name: ntfs_ucstombs failed Padding: Object ID: %s
Birth Volume ID: %s
Birth Object ID: %s
Domain ID: %s
Domain ID: missing Volume Name: '%s'
Volume Name: unnamed Volume Version: %d.%d
Volume Flags: DIRTY RESIZE_LOG UPG_ON_MOUNT MOUNTED_NT4 DEL_USN REPAIR_OBJID CHKDSK_UNDERWAY MOD_BY_CHKDSK (0x%04x)
none set (0x0000) Unknown Flags: 0x%04x
Failed to read $SDS attribute Offset: %llu (0x%llx)
Length: %u (0x%x)
Indexed Attr Type: DIRECTORY_I30 SECURE_SDH SECURE_SII OBJID_O QUOTA_O QUOTA_Q REPARSE_R Collation Rule: %u (0x%x)
Dumping index root:
Index entries total: %d
Damaged INDX record Dumping index block:
Node VCN: %lld (0x%llx)
Index entries: %d
INDX blocks total: %d
Reparse tag: 0x%08lx%s
Data: %02x ... NEED_EA count: %u (0x%x)
ntfs_rl_pread failed
EA flags: NEED_EA Unknown (0x%02x)
NONE Name length: %d (0x%x)
Value length: %d (0x%x)
Name: '%s'
Value: SETFILEBITS 0%lo
ntfs-3g-devel@lists.sf.net End of inode reached Error loading node Birth Object ID: missing Birth Volume ID: missing 0x (NONE) Sun Mon Tue Wed Thu Fri Sat Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec force help inode file quiet verbose version notime mft %sEntries Offset: %u (0x%x)
%sAllocated Size: %u (0x%x)
%sIndex header flags: 0x%02x
%sUpd. Seq. Array Off.: %u (0x%x)
%sUpd. Seq. Array Count: %u (0x%x)
%sUpd. Seq. Number: %u (0x%x)
%sLogFile Seq. Number: 0x%llx
%3s %3s %2u %02u:%02u:%02u %4u UTC
%sParent directory: %lld (0x%llx)
%sAllocated Size: %lld (0x%llx)
%sFilename Length: %d (0x%x)
%sReparse point tag: 0x%08lx%s
ntfsinfo error: could not parse file name %sACE: type:%s flags:0x%x access:0x%x
Subnode VCN: %lld (0x%llx)
FILE record number: %llu (0x%llx)
Key security id: %u (0x%x)
Offset in $SDS: %llu (0x%llx)
Length in $SDS: %u (0x%x)
Key reparse tag: 0x%08lx%s
Key file id: %llu (0x%llx)
Bytes used: %llu (0x%llx)
Exceeded time: %lld (0x%llx)
Index attr type is UNKNOWN: 0x%08x
WARNING: Corrupt index entry, skipping the remainder of this index block.
Unknown index attribute type: 0x%0X
Option 'T' is deprecated, it was replaced by 't'.
Option '%s' requires an argument.
You must specify exactly one device.
You must specify an inode to learn about.
You may not use --quiet and --verbose at the same time.
You may not specify --inode and --file together.
Usage: %s [options] device
-i, --inode NUM Display information about this inode
-F, --file FILE Display information about this file (absolute path)
-m, --mft Dump information about the volume
-t, --notime Don't report timestamps
-f, --force Use less caution
-q, --quiet Less output
-v, --verbose More output
-V, --version Display version information
-h, --help Display this help
%s v%s (libntfs-3g) - Display information about an NTFS Volume.
2002-2004 Matthew J. Fanto 2002-2006 Anton Altaparmakov 2003-2006 Szabolcs Szakacsits 2003 Leonard Norrgård 2011-2018 Jean-Pierre Andre Failed to parse command line options Volume Size in Clusters: %lld
Current Position in First Data Zone: %lld
Current Position in Second Data Zone: %lld
Allocated clusters %lld (%2.1lf%%)
LCN of Data Attribute for FILE_MFT: %lld
LCN of Data Attribute for File_MFTMirr: %lld
Size of Attribute Definition Table: %d
Number of Attached Extent Inodes: %d
FILE_Bitmap MFT Record Number: %llu
State of FILE_Bitmap Inode: %lu
Length of Attribute List: %u
FILE_Bitmap Data Attribute Information Decompressed Runlist: not done yet Attribute Types: not done yet Attribute Allocated Size: %lld
Attribute Initialized Size: %lld
Attribute Compressed Size: %lld
Compression Block Size Bits: %u
Compression Block Clusters: %u
Free Clusters: %lld (%2.1lf%%)
MFT Record Seq. Numb.: %u (0x%x)
Number of Hard Links: %u (0x%x)
Bytes Used: %u (0x%x) bytes
Bytes Allocated: %u (0x%x) bytes
Base MFT Record: %llu (0x%llx)
Next Attribute Instance: %u (0x%x)
Weird: %s attribute type was found, please report this.
Dumping attribute %s (0x%x) from mft record %lld (0x%llx)
Attribute length: %u (0x%x)
Error: couldn't parse attribute name Attribute instance: %u (0x%x)
Highest VCN: %lld (0x%llx)
Mapping pairs offset: %u (0x%x)
Compression unit: %u (0x%x)
Allocated size: %llu (0x%llx)
Initialized size: %llu (0x%llx)
Compressed size: %llu (0x%llx)
Invalid LCN value %llx passed to ntfs_dump_lcn().
Error: couldn't decompress runlist
Quota charged: %llu (0x%llx)
Update Sequence Number: %llu (0x%llx)
Size of STANDARD_INFORMATION is %u (0x%x). It should be either 72 or 48, something is wrong...
ntfs_get_attribute_value_length failed ntfs_get_attribute_value failed Starting VCN: %lld (0x%llx)
MFT reference: %lld (0x%llx)
End of attribute list reached. $OBJECT_ID not present. Only NTFS versions > 3.0
have $OBJECT_ID. Your version of NTFS is %d.
ntfsinfo error: could not read security descriptor
ntfsinfo error: could not decompress runlist
ntfsinfo error: could not parse volume name Index Block Size: %u (0x%x)
512-byte Units Per Block: %u (0x%x)
Clusters Per Block: %u (0x%x)
Failed to read $INDEX_ROOT attribute Failed to read $BITMAP attribute Failed to read $INDEX_ALLOCATION attribute Failed to get the reparse data Packed EA length: %u (0x%x)
Unpacked EA length: %u (0x%x)
ntfs_mapping_pairs_decompress failed ===== Please report this unknown attribute type to %s =====
Dumping some of the attribute data: ntfsinfo error: stopped before finished enumerating attributes Total runs: %lu (fragments: %lu)
ȷHд0P0rPrPrPrPrqPrPrPrPrPrPrqPrPrPrPrPrPrPrPrPrPrPrPrPrqPrqPrPrPrPrPrPrPrPrPrPrPrPrPrPrPrqPrqrPrPrPrrPrPrPrrPrPr~rPrhr6H?
- ntfs_dump_attr_ea ntfs_dump_attr_reparse_point ntfs_dump_index_block ntfs_dump_attr_index_allocation ntfs_dump_index_data ntfs_dump_index_key ntfs_dump_index_entries get_index_attr_type ntfs_dump_attr_index_root ntfs_dump_sds_entry ntfs_dump_sds ntfs_dump_attr_volume_name ntfs_dump_attr_security_descriptor ntfs_dump_filename ntfs_dump_attr_list ntfs_dump_lcn ntfs_dump_attribute_header ntfs_dump_file_attributes parse_options main Y@utils.c The device %s doesn't exist
Forced to continue.
Failed to mount '%s' Invalid size '%s'.
Invalid number '%.*s'.
Couldn't open inode %llu.
%c%s Pathname was truncated.
(%s) Couldn't open $Bitmap Couldn't read $Bitmap Couldn't read $MFT/$BITMAP Error reading inode %lld.
Out of memory. Aborting.
Couldn't open $MFT/$DATA Couldn't read MFT Record %llu Error closing inode %llu.
Failed to set locale, using default '%s'.
Error getting information about %s Failed to determine whether %s is mounted Use the force option to ignore this error.
Access is denied because the NTFS volume is already exclusively opened.
The volume may be already mounted, or another software may use it which
could be identified for example by the help of the 'fuser' command.
You can use force option to avoid this check, but this is not recommended
and may lead to data corruption.
The device '%s' doesn't have a valid NTFS.
Maybe you selected the wrong device? Or the whole disk instead of a
partition (e.g. /dev/hda, not /dev/hda1)? Or the other way around?
NTFS is inconsistent. Run chkdsk /f on Windows then reboot it TWICE!
The usage of the /f parameter is very IMPORTANT! No modification was
made to NTFS by this software.
The NTFS partition is hibernated. Please resume Windows and turned it
off properly, so mounting could be done safely.
Access is denied because the NTFS journal file is unclean. Choices are:
A) Shutdown Windows properly.
B) Click the 'Safely Remove Hardware' icon in the Windows taskbar
notification area before disconnecting the device.
C) Use 'Eject' from Windows Explorer to safely remove the device.
D) If you ran chkdsk previously then boot Windows again which will
automatically initialize the journal.
E) Submit 'force' option (WARNING: This solution it not recommended).
F) ntfsmount: Mount the volume read-only by using the 'ro' mount option.
You seem to have a SoftRAID/FakeRAID hardware and must use an activated,
different device under /dev/mapper, (e.g. /dev/mapper/nvidia_eahaabcc1)
to mount NTFS. Please see the 'dmraid' documentation for help.
Volume is scheduled for check.
Please boot into Windows TWICE, or use the 'force' option.
NOTE: If you had not scheduled check and last time accessed this volume
using ntfsmount and shutdown system properly, then init scripts in your
distribution are broken. Please report to your distribution developers
(NOT to us!) that init scripts kill ntfsmount or mount.ntfs-fuse during
shutdown instead of proper umount.
WARNING: Dirty volume mount was forced by the 'force' mount option.
Internal error, strtoll didn't return a suffix.
Invalid size suffix '%s'. Use T, G, M, or K.
Couldn't create a search context.
Couldn't translate filename to current locale.
The directory structure is too deep (over %d) nested directories.
Couldn't translate attribute type to current locale.
Unknown attribute type 0x%02x
Attribute type was truncated.
Couldn't translate attribute name to current locale.
Attribute name was truncated.
Error reading inode %llu. Aborting.
Inode %lld is an extent of inode %lld.
This program is free software, released under the GNU General Public License
and you are welcome to redistribute it under certain conditions. It comes with
ABSOLUTELY NO WARRANTY; for details read the GNU General Public License to be
found in the file "COPYING" distributed with this program, or online at:
http://www.gnu.org/copyleft/gpl.html
Developers' email address: ntfs-3g-devel@lists.sf.net
4FTM?FTM?mft_next_record utils_mftrec_in_use utils_cluster_in_use utils_attr_get_name utils_inode_get_name find_first_attribute utils_parse_size utils_mount_volume utils_valid_device utils_set_locale ;( $ U\ LY \Y \ ܈D ̉ | 4 <\ \ ̓ ܖ ܗd L 4 $ P \ ̫ ܯ 0 FAA
ABA ( l p EAD ^
AAF ( 4 E
F F
B F
J Q ? Ed
G N ) JU
( FBB A(A0D@ HMPTHB@p
0D(A BBBG XHPP\HB@m
HFPG THCPkHA@QHCPrHA@PHCPxHA@ D
e FIE E(D0H8G@n8A0A(B BBB
0T S բ ٢ ݢ
! f ' h , i 2 F 7 q = v E V M T T m
H o @
X o o o o $ o ! 0 @ P ` p ! ! ! 0! @! P! `! p! ! ! ! ! ! ! ! ! " " " 0" @" P" `" p" " " " " " " " " # # # 0# @# P# `# p# # # # # $ S D S 284470fdb1b78f03fd67b38d80e9ea64fc7427.debug - .shstrtab .interp .note.gnu.property .note.gnu.build-id .note.ABI-tag .gnu.hash .dynsym .dynstr .gnu.version .gnu.version_r .rela.dyn .rela.plt .init .plt.got .plt.sec .text .fini .rodata .eh_frame_hdr .eh_frame .init_array .fini_array .data.rel.ro .dynamic .data .bss .gnu_debuglink 8 8 & X X $ 9 | | G o d Q 8 Y @ @ a o $ $ n o P } B X # # # # `' `' c H H
q: t t , @ @ @ @ 4 t