Your IP : 172.28.240.42


Current Path : /sbin/
Upload File :
Current File : //sbin/ntfsundelete

ELF>0@`@8	@@@@888   8(   TTTDDPtdQtdRtd  /lib64/ld-linux-x86-64.so.2GNUGNU[	G0(E/
OG!$d)GIPBE|BY׬KqXMj|8P>-$F@[s!7
)|pZ6 awaELr\" ?QD"iS0     w
v0 ( }
A
 whwlibntfs-3g.so.831__gmon_start___Jv_RegisterClassesntfs_attr_closeAT_UNNAMEDntfs_inode_openntfs_log_parse_optionntfs_attr_put_search_ctxntfs_log_set_handlerntfs_attr_find_in_attrdefntfs_log_redirectntfs_mbstoucsntfs_umountntfs_cluster_readntfs_log_clear_levelsntfs_inode_closentfs_attr_reinit_search_ctxntfs_mallocntfs_attr_openntfs_log_handler_outerrntfs_ucsnlenntfs_log_set_levelsntfs_attr_get_search_ctxntfs_mapping_pairs_decompressntfs_log_get_levelsntfs_callocntfs_attr_mst_preadntfs_mountNTFS_INDEX_I30ntfs_attr_preadntfs_check_if_mountedntfs_attr_lookupntfs_homentfs_ucstombslibc.so.6setlocaleftruncateoptindregexecregfree__stack_chk_failreallocstrtollstrftimestrtolstrlenmemset__errno_locationmemcpystrtoulregcompoptarg__snprintf_chkoptoptgetopt_longlocaltimestrchrutime__cxa_finalize__sprintf_chk__xstatopterr__libc_start_mainwritesnprintf_edata__bss_start_endntfs_gpl_IO_stdin_usedntfs_bugs__libc_csu_fini__libc_csu_initGLIBC_2.14GLIBC_2.4GLIBC_2.3.4GLIBC_2.2.5hii
ti	ui	  }@ `        @ ` Œ Ɍ Ԍ ڌ ߌ   @ `  x  w    vȯ ( Я     ( xp      ( ) -د < D E      ȭ 	Э 
ح  
         ( 0 8 @ H P X `  h !p "x # $ % & ' * + , . /Ȯ 0Ю 1خ 2 3 4 5 6 7 8 9 :  ;( =0 >8 ?@ @H AP BX C` Dh FH?E^H5 % @% h% h% h%z h%r h%j h%b h%Z hp%R h`%J h	P%B h
@%: h0%2 h %* h
%" h% h% h%
 h% h% h% h% h% h%ړ hp%ғ h`%ʓ hP%“ h@% h0% h % h% h% h% h % h!% h"%z h#%r h$%j h%%b h&%Z h'p%R h(`%J h)P%B h*@%: h+0%2 h, %* h-%" h.% h/% h0%
 h1% h2% h3% h4% h5% h6%ڒ h7p%Ғ h8`%ʒ h9P%’ h:@AWAVAUATU1SHHx|$(H= dH%(H$h1H fg f` HD$Hs q ] “ D$8D$<f.|$(H
ŋ H~bE1HvvmH6 PH H8H L
(nH5jH=4qE1hHcHDH$1SfDH!oHcHfDt u D$<D$8 = D$<\$8	tzHmL
dH5iH=pE1H$1H L
vmH5iH=cpE1HHD$H HH$1b\$<H=đ Ht2H$hdH3%(_Hx[]A\A]A^A_H=_ [ I H=Y zL
`H5hH=oE11=0 tH= 
 e= t=
 =ɐ _= a= TL
aH5hhH=nE11%#w@L
`E1H5hH=n10P =  H=8 f=ُ ˏ  x= uH Ht$H1HD$HH8 HD$HH<1<%<"H=j dHe HHS H=N @HA HH-1HHIHу3<.t<*uHuHcH^.?Hc0IA$
*uHcу.Hc*H HD$HHݎ L MW1HLLd$XHHHL$0D$0xLcMHcHHH 
LE18@H
y <,HHj HD(DhH
P ID$0D)I9Ht$X1LUM9IHT$XsI9j<-uHzI9HT$PH|$X
Ht$P1Dl$ Ld$PHT$XL$ I9
9wDH= IHH HM9H= 0H7= !HD$HH8 H= H HHΌ =  e= H Ht$H1HD$HH8ی HD$HHi D$<s 
H= LH= >H? Hp H5a H8\B=0   =   {H HcH|GT$8ZH= Hq 9mpogp^SUtfJuR;H LbHM9D(DhH
 2L
CYH5bH=}iE118= H= HHH<HI
 (1L1HeHeL
[H5%bH=hE1HT$H$1L
[H5aH=hE11H L
}eH5aH=fhE1HHD$H HHD$H HH$1^u ]|$(~)L
YH5]aH=gE1{1H=݉ f=/ dLf 11H' L
_H5`H=hE1@H$1wL
YE1H5`H=Ag1vL
rYH5`H=gE11EH H H5 H8>i )Hz HD$XL M
Ht$X
LHI
8"{HT$XHV1HHHHH<Y<H@fx<DeL
VH5y_H=GfH$E115= u== u4=s u+H= u!= uH= H= \L
{WE1L
'bH5^H=eE11L$$H HcHDHن L@09/FH L
{]H5^H=eE1@H$1:
H L- I9HD$(A|$,_HHI$HL 1ɾHHHL5E H'aH=/ HL$`MLD1LA#H|$`WAI$AL$5MH@@HHL9Ll$(LNAAT$,HHHIAT$,H9eHD0"A;D$,IM9}LH+D$(L
SaH5;]H=dE1E1HH$1D(H1HEI$AL$5L
\Hq H5\H=_c@H@@HH9HOE1HD$H1 H$1n>H=Ʉ x=؄ k= ^L
`H5S\H=dE1P11L
}UE1eL
d[H5
\H=cE11E1L
XQH5[H=cE11L;5g fN,LHW @H9sHA HBD(H9HL1!@uL
CQH5Y[H=bE1H$<wt<yMkIMkMkMi1L)H L
%SE1IL
RH5ZH=aH$E1L
]H5ZH=UaE11aHcу\Hc.L
]H5]ZH=+aE1}1L$$L
j]H5+ZH=`H$E11YHC L
\QH5YH=`E1fHcHDH$1Hc.AL
XH5YH=PaE11l<<mZD<dM<hfBHcH fX $D:L
[H51YH=`E11AL
\H5XH=`E1{1L,$A<M<W@8L
fXH5XH=``E1j1L4$AbuL
nOH5tXH=B_E1f15L
WH5GXH=_E1V11L
[H5XH=_E1\1HL
&NH5WH=^E1L
zNH5WH=t^E19rL
.NH5WH=H^E1.1D1I^HHPTLn~ H
~ H=~ HH~ HtHÐU=~ HATSubH=~ tH=~ *Hw L%w H~ L)HHH9s DHH~ AH~ H9r~ [A\]fH=Pw UHtH~ Ht]H=6w @]ÐAUIATUSHHH_LgL9H+u;HHH{XHtH{pHtHI9HEuI] Me I9H+u6HHH{HtH{PHtHI9HEuI}P|HL[]A\A]jf.H[]A\A]DAWIAVAUATIU1SHhHXHH&
A,H@HU LeHEHEHU HU(HD$0HT$@GHHEP
IH4| 1ɾ0HH(
AO,LEPHljIH\	HXHuP4HuP H4HuPIx4HHt5CH*!NbHBzՔHLHHHH?HH)HUHtMtEHHtELHuP13HHD$(1L|$8D$XI*!NbIBzՔAZDC`;D$X}HSXD$XHU0HSpHU8HU@H9S HMS HC(H9HMHT$0AHE@HEH]HHCHHt$(0$3HIPAVxfT$ HHD$ LIAFAI~BINH{Av@C`IF(sHC IF0HC(AF8C0HIHH?HH)LINHS8HIHH?HH)LINHS@HIHH?HH)LIN HSHHIHH?HH)1HSPHSX%{ HCpHT$8Ir,HChHHD$ HD$8Hy 1ɾHyHHD$HCHD$8IL#shHL$ H|$HP,LHHHD$ @W1HHHD$PHt$P0`1H'DpLIINHIHH?HH)H;S8S`A8VAD|$\IHH\$P@H޿00HPHPA:U`A:VALB@H=sXL
AH5 QE1J1LLL
AH5PH=WE11HhH[]A\A]A^A_L
@H5PH=WE1zf.H|$H&H|$ LHLD|$\H|$PHD$VHD$IAv@HSpI~B1yHCp@DL|$8H|$(LmPHt$(/HL)HXA;MAu[9LcCT5Gd5EBLa9xT$WHHËT$bK|5P`HPX1D`DHxHCXHt1L
eOH5OOH=VH$E11HCXH|$(HE0)Ht$(.HHH*!NbHBzՔIHLAA8C0LHLI?HL)ILAHS8LHLI?HL)ILAHS@Hy LHHLI?HL)HSHHHH?HH)HSPHt$(-HtPHHP(H@0HS HC(HEHT$0H]HHCHH|$(HuP1 HIILt$@_f.EHC8EHHC`1HL1IT$@H9S8HMS8HCPHC@L3H9HMID$@ID$(I\$(HCHL.-HHhHH7U1}@C$‰K(҉S,}	u5EHE(HC0HE0HC8HE8HC@HEHHCH.@}
HS1HH{u	s {C$fDLLH=SL
j<H5LE11L|$8rH|$(L
<H5LH=mSE11??f.L
<H5GLH=SE1[1?fL
;H5LH=+SE1V1L4$^fDL
Q;H5KH=RE1O6@H|$PHLD|$\PfDL
;H5KH=RE1IQLL
:H5[KH=IRE11L$$HH1ML
Q:H5KH=RE11L
#:H5JH=QE1H1aL
%:H5JH=QE11sH1)HLRAVAUATIUSH0dH%(HD$(1HHL
JH5<JH=QE1iHl$H$1EL$LH=JH,JH5IH=bQEL
JJHDE1jH$1I|$H,JHH;L
JH5IH=QE11lH,$^ET$HE.I\$Ml$L9L5IG7c@NL
LH5IH=tPE11Daq Et8HCpL
IH5HH=;PHIDE1H$1HC L
IH5HH=PE1H$1[HC(L
qIH5nHH=OE1H$1*H{8AHHHHL
5IH5!HH=OE11H,$H{@H^HHHmL
HH5GH=8OE11H,$H{HHHHH L
HH5GH=NE11H,$CH{PZHGHHL
rHH5:GH=NE11H,$HL9HCXL
GH5FH=aNE1uHD$C`$1L
^GH5FH=,NE11vC0ML
7GH5FH=ME11xTC0!L
GH5`FH=ME11z C0L
FH5+FH=ME11|C0L
FH5EH=ZME11~C0L
FH5EH=%ME11C0@qL
_FH5EH=LE11LC0NEH3FL
sGH5NEH=LE1H$1
DL
FH5EH={LE11CXL
%6H5DH=OLE1$1HL9L
6H5DH=LE11sHD$(dH3%(kH0[]A\A]A^fL
EH5gDH=KE11'I\$ I L9yL-zDfDHCL
nEH5DH=KHIDE1H$1H=YKL
{DH5CE11{$s(K,S$uH{($L
FH5CH=JE11KHC0L
ODH5^CH=JE1H$1HC8L
0DH5-CH=JE1H$1HC@L
zDH5BH=`JE1H$1HCHL
ZDH5BH=/JE1H$1L
=DH5BH=JE11^HCPHQHPH?H@L
DH5KBH=IH$E1HD$1HHCPHHPHfL
jCH5AH=[IE11,fL
.CH5AH=+IE11fL
BH5AH=HE11WfL
CH5gAH=HE11'L
C2H59AH=HE1o1ffffff.AUATUSHHHxHl$PdH%(HD$h1HBHHN{HHC Hs EA
A!{LEAADH9A..E11ACAEHH8H9H@HMH@HH9HLH9t4Hxu݃x$H(RɋH,EEŅɋHXEEA9DLE@HC0H
@DL$(|$L
1H5?H=kGHT$8DD$HHl$0HDE1HD$@HD\$ DT$H$1HD$hdH3%(u Hx[]A\A]ÿ.A.E11g*f.SH5m?HL
%AE1H1H<$H=F=g HߺH1[BfAWAVAUATIUSH8HH|$(|HsDWLD$$EZL HH HD$L9Rf.EO,EEG(EA$MwPMIFHV1I~wMn1DIVH
HL4L9}FLl$MMIIM9tLL)$uIM9uMLl$MIIEHؾdƉ9D$$AGXMD$$D$$M?L9|$D$$L
?H5=H=DE1M$1YD$$H8[]A\A]A^A_fDMIIEHdDL
0H57=H=DH$E11+AnMIIEHfDL
.H5<H=;DE11fL
.H5<H=DE11wL
.H5<H=CE1
1IAGXdD$$dHT$(L
H/H5F<H=CE1HCH$1cL
.H5<H=eCE115L
.H5;H=7CH$E11"1IF(AnIH@L
-H5;H=BE11ZD$$L
;=H5_;H=BE11f.Hl$Ld$HLl$H\$H(HAAtbHpHH?t%ÉHl$H\$Ld$Ll$ H(H9tDHt)D'HI@fDSH<HHHHDHtEH|L|<HT$H4$IHH1HH[HtKL><H$IHH1HH[@H4$IL<H;HH߾1DAWAVAUATE1UHSHHdH%(H$1H6HHD$('HxPf=va >Dc(DHHT$0zHHHL$(HAP@+H|$(HHD$(H HD$HHD$(H@ H9D$HHD$8fH58a HoHL$8H=a HQHL$`5HD$8@$MHL$8LiPMI}H|$`D$2I}IEH0IUE1HT$@MuI0ILMcI9HMnHD$ B5` HT$0H|$DHA9MIL;l$ t_LHt
E` tHLHH|$DHrA9	IMIL;l$ uLl$@HD$@HL$@HAHL
:H5a7H=>E11!D_ Et_HD$8xXdu+HH@0Hr8H9|S(HH)H9
IH9VL
+H56H=r>E11|$L
X9H56H=8>E11|L
)H56H=>E1E1FH.H|$(H$dH3%(DHĘ[]A\A]A^A_^ H|$(tyL
8H55H=s=E11A^ tEL
	8H55H=@=E11t-HE1MH|$(fDH|$`AZL
7H5J5H=<E1&1
HL$8DHQ8Hq`HT$8H;B8D=HL$(Ht$PH|$`HAHD$PHD$XHT$8HBHHL$(HD$L
?)H54H=!<E1HA0H$1]HL$8H	H9L$HHL$8vAf.L
'H5G4H=;E11H,$E1L
&H54H=;E191mf.L
6E1~H53H=F;1E1|$@fDE1:L
6E1f.HD$(Hp0HLLc5H
5H$`@!1H$`JfL
'H53H=:E1H$W15[ HT$0HC(IEHGE1|$DHA9C(Lt$0IIEL9L
S5H52H=
:E1e1NHT$01HoC(IEHE1|$DHA9SC(Lt$0IEL9L
4E1x6L
c&H51H=9E11
L
%H51H=G9E1H$F15HZ HT$0HS(IEHHH\$ E1D|$H\$0HL$ IEIދQ(HL9DHDA9vL
3E1JTL
i#H51H=8E141uHT$(L
3H50H=`8E1HB0H$1:L
J3H50H=*8E1.1nL
$E1H5s0H=71E1=HL
2E1?E1L
2H5)0H=7E1(1E1DL
Q2E1"kL
f2E1iL
M2E1[Y|$L
|2H5/H=7E11Of.AWAVAUATUSHHH|$(HHkV 1ɾgHHD$8HD$8 H@@HD$X1HHD$0H5DW Ht!=@W H|$`҃jHT$(L
#H5.H=5E1HJ5H@@HHD$1aL
#H5x.H=Q5E118H|$XD$LwHD$@1HT$XHL$0 H|$8H)H HO2HHD$P6L|$@HD$ IHD$ HT$01,D$ D$@D$Hf.HHDd$HJ4;AH9t$@uH|$(	HIHU H~I;F}SH=U MfMnM9t8It$XHt H|$`E111pM$$M9uDLHHPHD$ IHD$PH9D$ HD$@ Ht$@H9t$XD$LL
"H5,H=3E1,$1}H=T t
H|$`H|$0OH|$8D$LHĨ[]A\A]A^A_HT Ht
I;F@*HT Ht
I;F@Ht$(LAċRT tA9}A9Đ2=]T Ls=T E	T ~uD$LL
u!H5+H=2E1*1svL
.H5+H=^2E11D$$AL
m H5S+H=,2E11D$L!9L
H5+H=1E1ջD$LKI6H|$(t.L
A.H5*H=1E11莻IL
 H5*H=v1E1H$1YD$LL
#H5a*H=:1E1#D$LH
v%HtH1 !øfffff.H5[-HK1HtHD1,L
2H5w1H=?H$E11oHHl$Ld$HH\$H(HAH>|Ht$HD$x*D9DcMc}7H}MHt$LH|$Hl$H\$Ld$ H(H}MLIHHtHE裼ܹffffff.USHHHHDŽ$HT$H{tfH$H6$t|/L
s*H5/H==E1@1Hĸ[]f8H$L
O1E1H5/H=L=11裸Hĸ[]˸Hĸ[]fL
1H5K/H=<E11H$CL
1H5/H=<E111hL
.E15H0L
)H5.H=l<E1H$1贷L
1H5.H=?<E110艷@L
(H5[.H=<E1@1Rffff.Hl$Ld$HH\$H(HIV1tOLH¹HHtZ@"t6A7L
7H5-H=;E181辶HHl$H\$Ld$ H(L
-H5{-H=K;E11H,$s讶th#_fHzH4L
m'H5-H=:E1H$)1AL
P0H5,H=:E11H,$ҵD1fDH4L
&H5,H=T:E1H$31|H11耵Ht0L
&H5?,H=:E1H$!17tH0L
g&H5,H=9E1H$#1;H.L
.&H5+H=9E1H$'1ŴH0L
%H5+H=d9E1H$%1茴H\$Hl$HLd$Ll$HHHHAHD$u)茴1H\$(Hl$0Ld$8Ll$@HHHtHt$1HIF8"HD$HoEtgT>KD4GfDt2-t-fH$L
4E1t6fDu|L++L
*H,$E1bH52*H="81;1@ktygu@MiMiMif-{H)L
$*H5)H=7E1$y1Hl$1ufmttfMit@MifL
H5[)H=K7E1gY1fH\$Hl$HLd$Lt$HLl$H8HIA~HtyHtt-H9ItrDHHt1t+MA}H$HuNHEI$H\$Hl$Ld$ Ll$(Lt$0H8۱1АH$fDI}Ht$D1tH$HT$@H$H~fff.SHHHt31Ht$E1E111$61҅uHSHH[;1Hl$H\$HHt;1HHt<HHHײHH\$Hl$HD۰1ڐL
1H5k'H={5E111eAWAVAUATUSHHH|$ Ht$(T$<uw1H[]A\A]A^A_HtHD$ Ld$@1ALH@HD$01HH|$ 1HIM<D$@L0{HxHXA;\$I<L0HtHD${HD$Ip@HxB1Lx\$fL
0H5;&H=k4E1=17譯HIHD$ Ld&LHL1LT$ҮLT$M|@Lt
H|$ jHL!HH|$0LHHD$ t|HHL
/0H5i%H=3E1^1$^1(1!L
/H5+%H=[3E1#1'1L
r%H5$H=+3E1WH$M$L|$81LLt$Dt$<fHHt<HcH|$(EA)L'%H$Ic1A/HsA9~2HL9uLt$fDI<$I[M9u-L
$H57$H=g2E1i1Lt$.fff.H\$Hl$HLd$Ll$HHHHAu*51H\$(Hl$0Ld$8Ll$@HH@Htы64HIXHHD$BHT$1ɉLAHL$HIcH1耭D9s	@k{
Hc1HHT$@A)HD$HLL$L#IcHH1H|$A9L
.H5"H=1E11ƫL
.H5"H=0E11藫fL
y-H5k"H=0E11gsfL
-H59"H=0E1$12H"IcH1.fL
q-H5!H=;0E11Hr"IcH1fffff.Ld$H\$IHl$Ll$H(HHuA H9HL-sB H9|qHxH@ 1ɾǬHHL-DB H@HLLHHH5	A LHHZHxBHͫLDH%AD!H\$Hl$Ld$Ll$ H(L
!H5 H=/E11誩Hb٩L
&!H5g H=.E11cmfUHSHHHH
@ HH!H9|BHH-C H9}/H؉ٺH%D!H[]fH-B 1@HHHHH5? HHHHyL
d H5yH=	.E1%1u{覨ffDH\$Hl$HLd$HHHoHH7HAtQH[Ht	HC Hu\H޿0HtjPHE1H#4HtHE1ADH$Hl$Ld$HHHH!{u@A賧ADfffff.HSHt' ȨH@HX[f.[1[ÐHSHtHHt虩H[[fffff.AUATUSHHH	HHt
\HCH{HsHO5HL`@HsII9(@KHsH{诩HHCHpdIHC HpOHHCHp:MK@HtK@HtKtQH{1+HHH5X< E1E11ɺHD$$uKHէH{\4C CH{*HCHsHI9HsH{CJK迦HHHCHCHEHCx,HE臥H{HEHHCHA; 1ɾH6HHHSHCHHJP,HHsHSR,H9~HSC1H{H[]A\A]Ct CDCDHCL
%H5H=)E1H$1fK@HCL
&H5H=)E1H$1ϣH[]A\A]fHCL
H5H=G)E1YH$1菣ʣH[]A\A]L
wE14H5IH=(1RH[]A\A]-L
+E1CHCL
0H5H=(E1JH$1H褤\L
#$E1Z.Hl$Ld$H-S2 L%L2 Ll$Lt$L|$H\$H8L)AIHIHt1@LLDAHH9uH\$Hl$Ld$Ll$ Lt$(L|$0H8ÐUHSHH1 HtH1 HHHuH[]ÐHϹHERROR: Couldn't allocate memory in read_record()
ERROR: Couldn't open $MFT/$DATAERROR: Couldn't read MFT Record %lld.
ERROR: Couldn't allocate memory in get_filenames().
ERROR: Couldn't allocate memory in get_parent_name()
ERROR: Couldn't create a search context.
ERROR: Couldn't get filenames.
ERROR: Couldn't allocate memory in get_data().
ERROR: Cannot translate name into current locale.
ERROR: Couldn't get data streams.
Metadata may span more than one MFT record
Amount potentially recoverable %d%%
________________________________________

%-8lld %c%c%c%c   %3d%%  %s %9lld  %s
File is encrypted, recovery is impossible.
File is compressed, recovery not yet implemented.
File is resident, therefore recoverable.
File has no runlist, hence no data.
File has an empty runlist, hence no data.
Missing segment at beginning, %lld clusters
Missing segment at end, %lld clusters
ERROR: Unexpected error whilst calculating percentage for inode %lld
Can't read info from mft record %lld.
File has no recoverable data.
File has no data.  There is nothing to recover.
Missing segment at beginning, %lld clusters.
Missing segment at end, %lld clusters.
Truncation not performed because file has an inconsistent $MFT record.
ERROR: Couldn't set the file's date and time
Undeleted '%s:%s' successfully.
ERROR: Couldn't open $MFT/$BITMAPERROR: Couldn't allocate memory in scan_disk()
ERROR: Couldn't create a regex.
Inode    Flags  %%age  Date           Size  Filename
---------------------------------------------------------------
Couldn't compare filename with regexERROR: Failed to undelete inode %lli
!
Files with potentially recoverable content: %d
ERROR: Couldn't alloc mem for parsing inodes!
ERROR: Missing new value at end of input!
Pattern to transform is empty
Couldn't allocate memory in transform()
Internal error, strtoll didn't return a suffix.
Invalid time suffix '%s'.  Use Y, M, W, D or H.
Option '%s' requires an argument.
-b:Cc:d:fh?i:m:o:OPp:sS:t:TuqvVYou must specify exactly one device.
Scan can only be used with --percent, --match, --ignore-case, --size and --time.
The --case option doesn't make sense without the --match option
Copy can only be used with --output and --destination.
You can only select one of Scan, Undelete or Copy.
Percentage value must be in the range 0 - 100.
You may not use --quiet and --verbose at the same time.
You may not use --quiet when scanning a volume.
To use --parent, you must also use --verbose.

%s v%s (libntfs-3g) - Recover deleted files from an NTFS Volume.

Copyright (c) 2002-2005 Richard Russon
Copyright (c) 2004-2005 Holger Ohmacht
Copyright (c) 2005      Anton Altaparmakov
Copyright (c) 2007      Yura Pakhuchiy

Usage: %s [options] device
    -s, --scan             Scan for files (default)
    -p, --percentage NUM   Minimum percentage recoverable
    -m, --match PATTERN    Only work on files with matching names
    -C, --case             Case sensitive matching
    -S, --size RANGE       Match files of this size
    -t, --time SINCE       Last referenced since this time

    -u, --undelete         Undelete mode
    -i, --inodes RANGE     Recover these inodes
    -o, --output FILE      Save with this filename
    -O, --optimistic       Undelete in-use clusters as well
    -d, --destination DIR  Destination directory
    -b, --byte NUM         Fill missing parts with this byte
    -T, --truncate         Truncate 100%% recoverable file to exact size.
    -P, --parent           Show parent directory

    -c, --copy RANGE       Write a range of MFT records to a file

    -f, --force            Use less caution
    -q, --quiet            Less output
    -v, --verbose          More output
    -V, --version          Display version information
    -h, --help             Display this help

ERROR: Failed to scan device '%s'.
ERROR: NO inode(s) AND NO match-regex specified!
Inode    Flags  %%age  Date            Size  Filename
Couldn't allocate memory in copy_mft()
Couldn't open output file '%s'ERROR: Failed to read MFT blocks %lld-%lld.
ntfsundelete.cRecovered file name %s
DirectoryFile<non-determined><unnamed>MFT Record %lld
Type: %s
%F %RDate: %s
Filename: (%d) %s
File Flags: System Directory Sparse Reparse Compressed Encrypted <none>Parent: %s
Size alloc: %lld
Size data: %lld
Date C: %s
Date A: %s
Date M: %s
Date R: %s
Data Streams:
Name: %s
Resident
Compressed
Encrypted
Size init: %lld
Size vcn: %lld
Data runs:
    None
    %lld @ %lld
%FCreating file: %s
File has no data streams.
File is %d%% recoverable
unknown%s/%s:%s%s/%sRecord is in use by the mft
Forced to continue.
%s%lldCouldn't create fileFile has resident data.
Write failedClose failedCouldn't create output fileFile has a sparse section.
Read failedTruncation failedUndeleted '%s' successfully.
Couldn't read MFT Record %d.
mftERROR: Invalid Number: %s
ERROR: Missing range end!
Invalid time '%s'.
Unknown option '%s'.
2012.1.15AR.1ntfsundelete
%s
%s%s
Range to copy is backwards.
Couldn't open $MFT/$DATACouldn't read MFT Record %lldRead %lld MFT Records
bytecasecopydestinationforcehelpinodesmatchoptimisticoutputparentpercentagequietscansizetimetruncateverboseversionkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkkŗkkkkkkkkkkkkkkkk6*k kkkkkkkkkkkۖkkŗkkkBkȓkfPmainparse_optionsversionusageparse_inode_argtransformparse_timescan_diskname_matchread_recordget_filenamesget_parent_nameverify_parentrescue_nameget_datacalc_percentagedump_recordlist_recordundelete_fileset_dateopen_filehandle_undeletecopy_mftutils.cThe device %s doesn't exist
Failed to mount '%s'Invalid size '%s'.
Invalid number '%.*s'.
<MFT%llu>Couldn't open inode %llu.
%c%sPathname was truncated.
<UNKNOWN>(%s)Couldn't open $BitmapCouldn't read $BitmapCouldn't read $MFT/$BITMAPError reading inode %llu.
Out of memory.  Aborting.
Couldn't read MFT Record %lluError closing inode %llu.
Failed to set locale, using default '%s'.
Error getting information about %sFailed to determine whether %s is mountedUse the force option to ignore this error.
Access is denied because the NTFS volume is already exclusively opened.
The volume may be already mounted, or another software may use it which
could be identified for example by the help of the 'fuser' command.
You can use force option to avoid this check, but this is not recommended
and may lead to data corruption.
The device '%s' doesn't have a valid NTFS.
Maybe you selected the wrong device? Or the whole disk instead of a
partition (e.g. /dev/hda, not /dev/hda1)? Or the other way around?
NTFS is inconsistent. Run chkdsk /f on Windows then reboot it TWICE!
The usage of the /f parameter is very IMPORTANT! No modification was
made to NTFS by this software.
The NTFS partition is hibernated. Please resume Windows and turned it 
off properly, so mounting could be done safely.
Access is denied because the NTFS journal file is unclean. Choices are:
 A) Shutdown Windows properly.
 B) Click the 'Safely Remove Hardware' icon in the Windows taskbar
    notification area before disconnecting the device.
 C) Use 'Eject' from Windows Explorer to safely remove the device.
 D) If you ran chkdsk previously then boot Windows again which will
    automatically initialize the journal.
 E) Submit 'force' option (WARNING: This solution it not recommended).
 F) ntfsmount: Mount the volume read-only by using the 'ro' mount option.
You seem to have a SoftRAID/FakeRAID hardware and must use an activated,
different device under /dev/mapper, (e.g. /dev/mapper/nvidia_eahaabcc1)
to mount NTFS. Please see the 'dmraid' documentation for help.
Volume is scheduled for check.
Please boot into Windows TWICE, or use the 'force' option.
NOTE: If you had not scheduled check and last time accessed this volume
using ntfsmount and shutdown system properly, then init scripts in your
distribution are broken. Please report to your distribution developers
(NOT to us!) that init scripts kill ntfsmount or mount.ntfs-fuse during
shutdown instead of proper umount.
WARNING: Dirty volume mount was forced by the 'force' mount option.
Invalid size suffix '%s'.  Use T, G, M, or K.
Couldn't create a search context.
Couldn't translate filename to current locale.
The directory structure is too deep (over %d) nested directories.
Couldn't translate attribute type to current locale.
Unknown attribute type 0x%02x
Attribute type was truncated.
Couldn't translate attribute name to current locale.
Attribute name was truncated.
Error reading inode %llu.  Aborting.
This program is free software, released under the GNU General Public License
and you are welcome to redistribute it under certain conditions.  It comes with
ABSOLUTELY NO WARRANTY; for details read the GNU General Public License to be
found in the file "COPYING" distributed with this program, or online at:
http://www.gnu.org/copyleft/gpl.html
Developers' email address: ntfs-3g-devel@lists.sf.net
utils_set_localeutils_valid_deviceutils_mount_volumeutils_parse_sizefind_first_attributeutils_inode_get_nameutils_attr_get_nameutils_cluster_in_useutils_mftrec_in_usemft_next_record; z(}Pp8x`@@@0Hh(P`x08h@p`@zRx$xFJw?;*3$"LDBEA A(D0
(D ABBOD(A ABBLH	BEB B(D0C8D
8D0A(B BBBADa	BBB D(A0D`
0A(A BBBC<,0BBA A(KT
(A ABBAl^A] lCLBBB B(D0A8Dp
8A0A(B BBBG$PMN0|
I,ȫAN O
AAz
AEL4hV
BBB B(D0D8Js
8A0A(B BBBILx*BBB B(A0A8G
8A0A(B BBBHLyABBB B(A0C8JH
8A0A(B BBBA$2<0mK W
FB$\MI0n
DD83ACJ
CACD
CAHR
CAJ$0MI0
H$.MNPy
D$MV@
D$DOAG p
DDlN |
FLP4BBB B(A0A8Gg
8A0A(B BBBA$@RMNPp
E$xgMN0
A,,ADG X
AAJ$\MI 
HXP?Da
KNp"DW
EAt4BBA A(G@Y
(A ABBD
(C ABBC|
(A ABDAm
(F ABBA$THQ_@X|}bCcdfhimOoŒPɌpԌqڌsߌStTuvVh
hwo

 P	ooXooo &6FVfv&6FVfv&6FVfv&6FVfv w  v(  x0988e8d447853028f645832ffafa0d1a4ffafc.debug;9.shstrtab.interp.note.ABI-tag.note.gnu.build-id.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rela.dyn.rela.plt.init.text.fini.rodata.eh_frame_hdr.eh_frame.ctors.dtors.jcr.data.rel.ro.dynamic.got.data.bss.gnu_debuglink88TT !tt$4oP>F

No[oXXPjtPP~yZhwhwww`'         p 0@ 0 04d