ELF>U)@@Q@8 @@@@888lClC LL L px LL L TTTDDPtdhAhAhATTQtdRtdLL L ``/lib64/ld-linux-x86-64.so.2GNUGNUQ9S|+\p]U(& d@ &(+BE|KqX8y |W\l/ LA> tR "P P ,P ; 5,libntfs-3g.so.841_ITM_deregisterTMCloneTable__gmon_start___Jv_RegisterClasses_ITM_registerTMCloneTablentfs_attr_closeAT_UNNAMEDntfs_inode_openntfs_mst_post_read_fixupntfs_log_set_handlerntfs_log_redirectntfs_umountntfs_inode_closentfs_version_is_supportedntfs_attr_openntfs_log_handler_outerr_fini_initntfs_mountntfs_attr_preadntfs_ucstombslibc.so.6exit__errno_locationmemcmpfputslseekmallocstderrfwrite__vfprintf_chk__cxa_finalize__xstatstrerror__libc_start_mainfree_edata__bss_start_end_IO_stdin_usedGLIBC_2.3.4GLIBC_2.2.5jti ui +L 0*L )P P O O  O  O O O !O $O %N N N N N N O  O  O  O  O (O 0O 8O @O HO PO XO `O hO pO xO O O O O O  O "O #O $HH=B HtH5 A % A @% A h%A h%@ h%@ h%@ h%@ h%@ h%@ hp%@ h`%@ h P%@ h @%@ h 0%@ h %@ h %@ h%@ h%@ h%@ h%z@ h%r@ h%j@ h%b@ h%Z@ h%R@ hp%J@ h`%B@ hP%:@ h@%2@ h0%*@ h %"@ hHHH(+L &H|$8H|$0H5*H|$(H|$ E1H|$H|$H<$H=s1HD$1KATIUSHHLD$PLL$Xt:)D$`)L$p)$)$)$)$)$)$HHtHBHt L @,H5 )H=/E11Cx HuH=)H]H$H11H*qH$D$hD$PH\$XHT$`H\$`H HcHHD$0HHD$(|$PHL$(HT$01H|$xR9L aH5(H=.E1\$1D$,$+H|$PHG(H|$(H54H1j8eeH5NHH11?|$h11HHT$0Ht$(|$h.H|$PHt$(=CHKDts=RSTRHT$0HHH9r*fHH9t8tH|$(H51uH|$(H=(GH1[]A\A]A^A_HD$(DpA?AFD2HD$(@A9=PHt$(Vff~H|$( wO9эrftUHD$(@9.L !!H5 &H=,E11L 8!H5%H=},E11L|$(H$Dt$@D$8IL}CHKDt$@H}BAAD|$8;AWHLA_uuLWHPEfA9GEfA9GwH%L X&H5%H=<+E1H$ 1L >&H5$H=*E1^1}RSTRH=L%H@%L &H5$`HEH=*E1H$1EL %H5c$H=|*E1bD$$1QEL %H5/$H=H*E1dD$$1HEL %H5#H=*E1gHD$H$1EL %H5#H=)E1jD$$1EL %H5#H=)E1mD$$1EL k%H5_#H=x)E1pD$$1ML W%H5/#H=h)E1 1$DmL 9%H5#H=(E1IIEHD$H$1AEL %H5"H=(E1D$$1AE L $H5"H=(E1Љ$1T$yAE L H5V"H=O(E1E1Љ$1T$>AEL $H5"H=(E1$1 AEL $H5!H='E1D$$1AEL =H5!H='E1D$$1AEL 0H5!H=z'E1D$$1oIEL $H5M!H=F'E1HD$H$19AE L H5!H='E1D$$1AE$L H5 H=&E1D$$1AE&L H5 H=&E1D$$1AE(L H5y H=r&E1D$$1gAEfA}I\ u+1LHHDŽ$'H$L T#H5 H=&E1H$1HàH$AEA9AL +H5H=%E11D$$HCL W"H5H=|%E1HD$H$1oHCL H5MH=F%E1HD$H$19CL "H5H=%E1Љ$1T$CL !H5H=$E1Љ$1T$CL !H5H=$E1D$$1CH5}L .H=o$E1D$$1bs mHtHHfPH$|$8~D$@D$8HPL H5H=#E11HtHH5 L |H5H=9$E11LeLHH] HPp!L H HH=#Ld$HHE‰t$H5#E1L$H$1Ho HHH H1 1ɾHHW HP8H$ HT$`H\$hHl$pHD$xD$PLd$X Dt$@L H5yH=#E11nHD$0HD$(D$0HD$@DHD$HH@D$0HL$HHH9L$@HL$8L jH5 H=!$E11cE=CHKDtQ=RCRDtJ1f.|u$HA9wH=,D$0Hl$8mA9vH=H= H]@L}RCRDH5 H L H=8!tHEH5CE1H$1E1BHEL H5 H= E1wH$1EL uH5H= E1x$1EL SH5H= E1y$1EL 4H5H=i E1z$1EL H5`H=9 E1|H$1QHE L H5/H= E1~H$1 L H5H=E11D,$HL H5H=E1!H$1HCL H5H=jE1#H$1HCL 7H5pH=9E1%H$1aCL XH5@H= E1'$12CL CH5H=E1)$1CL H5H=E1+$1C L H5H=zE1-$1C$L H5H=KE1/$1tC(L H5RH=E10$1DC(fw@L "H5H=E1?1C0L H5H=E1A$1C2L uH5H=nE1B$1C4L \H5uH=>E1C$1gC6L @H5EH=E1D$17C8L $H5H=E1E$1C:L H5H=E1F$1CL H5H=NE1H$1wC@L H5UH=E1I$1GCBL H5%H=E1J$1HCHL H5H=E1LH$1f{>ELIpAHI9L *H5H=cE117C(`L H5bH=+E1<1WL H59H=E1=1. fL H5H=E11Nf{>E1fDL zH5HDPH=D<$E1QAHD$1C>A9r@L H5rH=;E12imH|$(J^H5 H11EL \H5 H=YE1D$E$1 HD]H=wDt$@5IL H5H=)E11$H|$P6:HD$(HxH5b H18H MIA1HH1x8H IA11H1XH 11H1C98H5HL11H|$(H51yH|$(HHH;H5OH9HE1QH|$(H51>H HHH1L H5iH=E1`H|$P`k8H5HH11H}H|$(H5 1H|$(H5 1H|$(H5C 1|H|$(H5 1iH52 1[HD$(H5 HH1AH|$(H5U 1.H|$(H511I^HHPTLUH H=H& H=& UH)HHw]H& Ht]@HY& H=R& UH)HHHH?HHu]H& Ht]H@=& u'H=% UHt H=% }h]% fffff.H=x" t&H% HtUH=b" H]WKf.USHHT$0HL$8LD$@LL$Ht7)D$P)L$`)T$p)$)$)$)$)$HH!% H=H pH$H;HL$HD$HD$HD$ D$ 0HD$H=L H5E11{SHHt;H(Ht4H{ Ht H{1CuGH1[ËtHCL pH5H=RE1lH$1HCL H5H=E1hH$1L H5H=$E1e1BAWAAVIAUIATL%8 UH-8 SL)1HH HtLLDAHH9uH[]A\A]A^A_ff.HH%s v%s (libntfs-3g) - Interpret and display information about the journal ($LogFile) of an NTFS volume. Copyright (c) 2000-2005 Anton Altaparmakov. %s is free software, released under the GNU General Public License and you are welcome to redistribute it under certain conditions. %s comes with ABSOLUTELY NO WARRANTY; for details read the GNU General Public License to be found in the file COPYING in the main Linux-NTFS distribution directory. Usage: %s device e.g. %s /dev/hda6 Alternative usage: %s -f file e.g. %s -f MyCopyOfTheLogFile Warning: Failed to close $LogFile (inode %i)Warning: Failed to close file %sMounted NTFS volume %s (NTFS v%i.%i) on device %s. Failed to open $LogFile (inode %i): %s Failed to open $LogFile/$DATA (attribute 0x%x): %s $LogFile has zero length. Run chkdsk /f to correct this. The file %s does not exist. Did you specify it correctly? Error getting information about %s: %s Warning: $LogFile is too big. Only analysing the first 64MiB. Failed to allocate buffer for file dataOnly %d out of %d bytes read starting at %d Failed to read $LogFile/$DATA: %s $LogFile contents are corrupt (magic RSTR is missing). Cannot handle this yet. $LogFile is corrupt: Restart page header magic is not CHKD but a chkdsk LSN is specified. Cannot handle this yet. $LogFile is corrupt: Restart page header specifies invalid log page size. Cannot handle this yet. $LogFile is corrupt: Restart page header specifies invalid system page size. Cannot handle this yet. Unknown $LogFile version %i.%i. Only know how to handle version 1.1. Restart page header in $LogFile is corrupt: Update sequence array size is wrong. Cannot handle this yet. Restart page header in $LogFile is corrupt: Update sequence array overlaps restart page header. Cannot handle this yet. Restart page header in $LogFile is corrupt: Update sequence array overlaps or is behind first protected sequence number. Cannot handle this yet. Restart page header in $LogFile is corrupt: Update sequence array overlaps or is behind restart area. Cannot handle this yet. Restart page header in $LogFile is corrupt: Restart area offset is not aligned to 8-byte boundary. Cannot handle this yet. Warning: Sanity checking of restart area not implemented yet. Warning: Sanity checking of array of log client records not implemented yet. The %s restart page header in $LogFile has been modified by chkdsk. Do not know how to handle this yet. Reboot into Windows to fix this. $LogFile incomplete multi sector transfer detected in restart page header. Cannot handle this yet. Skipping analysis of second restart page because it fully matches the first one.Second restart area specifies different $LogFile version to first restart area. Cannot handle this yet. client_in_use_list = %i (0x%x) restart_area_length = %u (0x%x) client_array_offset = %u (0x%x) last_lsn_data_length = %u (0x%x) log_record_header_length = %u (0x%x) log_page_data_offset = %u (0x%x) restart_log_open_count = %u (0x%x) Log client record number %i: client_restart_lsn = %lli (0x%llx) client_name_length = %u (0x%x) Failed to convert log client name Finished with restart pages. Beginning with log pages. is corrupt (magic is not RCRD or CHKD).copy.last_lsn/file_offset = 0x%llx header.next_record_offset = 0x%llx client undo next lsn = 0x%llx client_id.client_index = 0x%x ntfsdump_logfile.c2013.1.13AR.1Warning: Failed to umountERROR: Aborting... Warning: Failed to umount %sPartial read.firstsecond1st2ndRSTRCHKDRCRDFailed to mount %s: %s Unsupported NTFS version. -fFailed to open file %s: %s Could not seek to offset %u $LogFile is not initialized.$LogFile version %i.%i. %s restart page: Restart page header: magic = %s usa_ofs = %u (0x%x) usa_count = %u (0x%x) chkdsk_lsn = %lli (0x%llx) system_page_size = %u (0x%x) log_page_size = %u (0x%x) restart_offset = %u (0x%x) Restart area: current_lsn = %lli (0x%llx) log_clients = %u (0x%x) client_free_list = %i (0x%x) flags = 0x%.4x seq_number_bits = %u (0x%x) file_size = %lli (0x%llx) oldest_lsn = %lli (0x%llx) prev_client = %i (0x%x) next_client = %i (0x%x) seq_number = %u (0x%x) client_name = %s Log record page number %i is empty.flags = 0x%x page count = %i page position = %i header.last_end_lsn = 0x%llx Log record %i: this lsn = 0x%llx client previous lsn = 0x%llx client data length = 0x%x client_id.seq_number = 0x%x record type = 0x%x transaction_id = 0x%x flags = 0x%x: NONE LOG_RECORD_MULTI_PAGE | Unknown flagsredo_operation = 0x%x undo_operation = 0x%x redo_offset = 0x%x redo_length = 0x%x undo_offset = 0x%x undo_length = 0x%x target_attribute = 0x%x lcns_to_follow = 0x%x record_offset = 0x%x attribute_offset = 0x%x target_vcn = 0x%llx Array of lcns: lcn_list[%u].lcn = 0x%llx dump_log_recorddump_log_recordsdump_restart_areas_areadump_restart_areas_headerdump_restart_areaslog_err_exitlogfile_closelogfile_preaddevice_err_exitlogfile_openusagemain;T H8Pp(XzRx u*zRx $FJ w?;*3$"DheDP$\fBDA JAAG$AG } CA LBBB B(A0D8IZ 8C0A(B BBBA D@eBEE E(H0H8M@l8A0A(B BBBdh0*)j ,L L o 7 N    oo oo0 oL &6FVfv&6FVfvP eb03b3ac39537cc2fb2b5c701be9bf5d55a328.debugt.shstrtab.interp.note.ABI-tag.note.gnu.build-id.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rela.dyn.rela.plt.init.text.fini.rodata.eh_frame_hdr.eh_frame.init_array.fini_array.jcr.dynamic.got.data.bss.gnu_debuglink 88TT !tt$4o<>  F7No0 0 X[o 0j t  ~ y ",, ,,hAhATAAL LL LL LL LN NHP PP PP4DP