ELF>?@@8 @@@@HH TT4+4+000 88800hhhDDStd88800Ptd@@@QtdRtd000/lib64/ld-linux-x86-64.so.2 GNUGNUƧ7%#P%_L^{GNU>>em&W1Fx \T: DFt( 6L&, gd,X"_ITM_deregisterTMCloneTable__gmon_start___ITM_registerTMCloneTable__libc_start_main__cxa_finalizentfs_attr_get_search_ctxntfs_attr_lookupntfs_attr_put_search_ctx__errno_locationntfs_log_redirectmallocAT_UNNAMEDntfs_attr_openntfs_attr_mst_preadntfs_attr_closentfs_log_clear_levelsntfs_ucstombsntfs_attr_preadntfs_mapping_pairs_decompressntfs_log_set_levelsntfs_attr_reinit_search_ctxntfs_calloclocaltimestrftime__stack_chk_failwrite__isoc23_strtollstrchr__snprintf_chkstrlenlstatsnprintfntfs_cluster_read__memset_chkutime__sprintf_chkftruncateregcompregexecregfreentfs_log_handler_outerrntfs_log_set_handleropterrgetopt_longntfs_log_get_levelsoptindoptoptoptargntfs_homentfs_log_parse_option__isoc23_strtol__isoc23_strtoulsetlocalentfs_check_if_mountedntfs_mountntfs_umountlibntfs-3g.so.89libc.so.6GLIBC_2.33GLIBC_2.4GLIBC_2.34GLIBC_2.3.4GLIBC_2.2.5GLIBC_2.38NXii cmti xui 0@8@@y`~ @`ŠР֠۠ @`   %&ȿ)п9ؿ>< (0 8 @HPX`hpx Ⱦ!о"ؾ#$'(*+,-. /(00182@3H4P5X6`7h8p:x;=HHHtH5%ĝ@hfhfhfhfhfhfhfhrfhbfh Rfh Bfh 2fh "fh fhfhfhfhfhfhfhfhfhfhrfhbfhRfhBfh2fh"fhfhfhfh fh!fh"fh#fh$fh%fh&fh'rfh(bfh)Rfh*Bfh+2fh,"fh-fh.fh/fh0fh1f%~fD%fD%fD%~fD%vfD%nfD%ffD%^fD%VfD%NfD%FfD%>fD%6fD%.fD%&fD%fD%fD%fD%fD%fD%fD%fD%fD%ޙfD%֙fD%ΙfD%ƙfD%fD%fD%fD%fD%fD%fD%fD%fD%~fD%vfD%nfD%ffD%^fD%VfD%NfD%FfD%>fD%6fD%.fD%&fD%fD%fD%fD%fDUHAWAAVAUATL%{S1HxHH=dH%(HE1JH1E1f=wfDqHDžlHeʛDžDžfDHE1DH HatvIcL>fDAt!uDA H=u  H= L aE11<H5-tH=}= H=w L aE1At HyHHcHTH{S"w!H4HsHJH8L vAUE1RH5sH=C}1AZA[pE1ɀ=D ϙuKLvE1HvL%sPL-|L1ARL )bLL57czE1LL PbL1YAXE1L=0LLH&cL GvA7AVP1"H Lv  E1H=HtHEdH+%(%HeD[A\A]A^A_]ÿB={uo*=cS=sSL-gHIcEH|PIcEE1HL tH5qH=N{t1XZH= 1H5`H=H۔1HL0M6L LLIH}8"oLMLHAqD<5HxHcH>=#=ÖHE1H1LH8HHA<%6<,H=|HHHeH=`HL(MoLL<*uHuHc(H6^D zDzAUHcH<0> *" .' ? IHޒE1LHL5ZH1HH*HxLcHAHcHIHHxfHIHHxL9HHLHhpHDdEML?fnHfpIL SKQE1AV4E11L JH5^H=hAUL ^E11AVV H5\^H=hHWHA^A_L bE1H H5^H=ThHw[E1/1L FH5]H=~gYdAVL UE11AU 5A_XPHuT(E1PL B`1 XZHYAUE1PL `*1A^A_lHVASE1PL _"1[A\?HVAPE1PL _$1AYAZ_HVQL _E1P&1L^_E131L HH5\H=!fEE1B 1L [H5w\H=fL HE1H5K\H=eX1I^HHPTE11H=q{f.H=HH9tH^Ht H=H5H)HH?HHHtHUHtfD=u+UH=2Ht H=Vd]]wHUHAVLwAUIATSH_L#L9u :IH{XHtoH{pHtaHLVI$M9uI] Mu L#L9u6IH{Ht'H{PHtHLI$M9uI}P[LA\A]A^]@UHATSHtLA1HHtZP11E1jE11DKZYu5LcHHeL[A\]DE1E1E11L =H5YH=$cOff.fUHAWAVAUATSHhH}H. HXpIH H@It$ I$fHnHEHEflHuAD$fHnƋx,flAD$ ID$PH? HEH|1ɾHIH HEMD$PLp,HHH0 LrIt$PEPIt$P I>It$PH,HMH*!NbAEILHBzՔHHH?HH)IT$HcHt AD$LIt$P1iHEH EI*!NbIBzՔEhC`}9}ochEfcXAd$0HS(HC ~EH9HLIT$@H9HLƒEID$@ID$I\$fHnflHH]11E1E110SjZYLCMA@xM44HHI~BHxAv@pAFAC`AoN(AF8K INC0LHIHH?HH)INHS8LHIHH?HH)INHS@LHIHH?HH)IN HSHLHIHH?HH)1HSPHSX}HCpIHChHEȋp,JHEH9HEHy1ɾHHEHHEHMIL#ChH}P,LLEHuHHE@E1HHPE1E11HE110jAXAY LUMZMH*!NbACIHBzՔIKHHH?HH)H;S8C`A8CALxMMAT10E1jE111>^_ID$HPHPA:S`:A:VALBAD$HfLEH1L 29 H5TAPH=_E1-AZA[H}H}fEUH}It$P1HH+L5ZTiAWAGLIU`IE8H}1LIU@~EIEPIE8H9HLIT$@H9HLID$@ID$(Ml$(fHnflAEL(S11E1jE11ZYL{MhIH1A‰P$AG AM(AE,Aw @u8IA~G8IG(HWfHnIE0IG0flAE@A Au 1IULI}%x AU$L 8E1L1H=]sАHH} HeL[A\A]A^A_]fDMHELxLHEp@1HSpHxBHCpfDL 6E1H5bRH=.]@MLuLxLHE@LuI\$PLAVE1E1j111A]A_tIFHgH)؍PX;SXK[9JHcDD3D43HuADE*E!BDr9xIHHuDEDp1HPXH|3D@`DHx[ IEXHt6HL KQE1P^H5'Q1H=\IEXAZA[H]ID$0HSE1E1j111AXAYH{HH*!NbGHBzՔHLGG8IAE0LHJI?HL)LGIE8ILHJI?HL)LGIE@IHO LHJI?HL)IEHHHH H?HH)IEPH]1E1E111Sj%^_uHCHtPo|(A} ID$~EMl$H}fHnflAEL(.MLL]HEH_E11SL 4H5OH=ZLL6XZE1@E1Y1L 3H5HOH=TZLE11L 4H5OH=Y^E11H5NL :4H=YHuZH2HuE11L p4H=Y,E11H5NL 3H=sYHuH}HuE1}1L 3H=`YLH5/N_H5#NL 2E1H5NH=X}L 2E1RH5MH=XQLPE1H1L 1H5MH=X"fDUHAWAVAUATLeSHHH(dH%(HE1HMLH {HHC LC EA A!{LEAADL9..E11ACAE#DHP8Lx@HL9ILH9HLI9t:Hxuۃx$P(Dx,RҋPXAEEAEA9DL@HC0HLHHDHE1P1QATAQL J2ASWH=WVH5ULAR3HPHEdH+%(u(He[A\A]A^A_]D..E11x/ff.@UE1L PL$HAWIAVL5LAULmATL%3USHKHH@H}dH%(HE17LALHHKHKL KLHEE1%H$1ILLHL,$E1H޹'L1L KEWHAXAYEPHELxHpI9Huf@N>L NE1HLD1DqEtH=XI#L]EdACXdHL]E1LUL %H5a>PH= I1LUAYA[L]IB(EzHIHEHL]E1H5>L %0H=H1xYL]^L]L %E1E11L ?H5=H=\H'E1AUHAUATSHdH%(HE1HEHu"1DI1HuHIH8"tyHUHt;-MiMiMiMiMeHUdH+%(He[A\A]]HL >E1ScH5<H=E1X1Z@HL $E1RyDE1h1L b$H50<H=DE1WCUHAVAUATSH dH%(HE1HI-HI&IH9tHuHBtiMuHEHHEA~uQHHEIEI$HUdH+%(uBH [A\A]A^]f.+1ːHuI~tHEHU`UHAWAVAUATISHdH%(HE1HHT=HDHIHRL;=VL1H3XZLL0LLHtADžuTAA)HcMcLALH1EL<HLL&u A~HEdH+%(uaHe[A\A]A^A_]HL<V9HtHIL\<RHH<L1N@UHAWAVAUATSHdH%(HE1HDIIHHHxPf=_AD$(HHhIIH HCP@HI9H`HCHPLH HC H{ HH9 H@HXHHHH5M_HHSHXH=*_D{$EL{PMIHX|IIWH H0MWE1IHoHHHcH9yHpL8PfLHLH|DLsD9IHpHH9HLWt5Q^uHh5s^LH|DLD9sHHL U:E1Z%f.Hf7L 9E1H`HƺHAHPH1賾]E11H`HPL }9|HNjc]OQDL8IR IHPH0E1m1H`HPL 9 \tY{Xdu*HS0Hs8H9|HAD$(H)H9 IH9E11H`HPL 襽|誾y.E11H`HPL 8mDHHHXH~@fl)HHHCHQ0H^HXH`L ^HPPE1R1H HH9@aHHAL谼HHX4ADžE11H`HPL 7pHs`S8DQH;C8D]E11H`HPL w7fDLH0E1HEdH+%(HeD[A\A]A^A_]XE11H`RL !HP萻XZfHHHp0HLL1L6H ^6!LLHE11AUL !H53H=>XZ f.HHL a6E1`HPH`1|ŻE1DHHL 5E1eE11H`HPL 4_uf.E1G1H`HPL 5Lp Hh1LH謼LpAD$(IBH1LpEILӋ|DLD9HhIAD$(HCL9EILpRH`E1HPL q@HH`E11R&HPL :Hh5dXLHIWAD$(AYAZHH1HpH)fHhIWHAD$(HH9|DLD9sHHL 3E1,E11H`L H=f;q6HLpE11RH`L HP77Hh5aWLH辺LpAD$(_AXIBH1LpMEILHp|DD9mHhIIAD$(HCL9EIMLpSE11H`HPL sE11H`HPL EHp5HXHE1HHL 02 QH`HP1A[A\:E1HHL "2E1KHXHE1HHL 1QE1 1HPH`L 1HHnDvHHE1=LpL 1eն|*}E11H`HPL 1OE1,ff.UHAWAVAUATSHHhdH%(HE1HHHQ1ɾ裷HPHzHh HHHPH@@H@XHHyH5-THt =)TH}҃XHhE1L 7H5-H=7HI5Lh@1ILp״E11L .H57-H=7讴H@HE1IDž\H0IH@ LLHPL)H9HOKHLL(MJH8HL E.LbL9pL`HxAHhLIHHRH~I;F}iH=R3M~I^I9tNLHML0DIt$XHtE111L蟵M$$I9uLHLHxAI9mHpII91H(\H L <E1H5+PH=51XZH=Qt H}aHɲHhHPH`NHEdH+%(\He[A\A]A^A_]LHHQHt I;F@HQHt I;F@HhLAËQD9~ D +QDHLE=PDHPE\L`HH8HII9L(L I L9@Lb@s=DPDHlI6HhDHDHE1 1L -H5)DHH=3DH fDD9 ARL E11ATH5N)H=3ŰA[[eE11L H5)LHH=b3荰(L E11E1乀H5(H=A3\D\\VE1H=%3A6L 6 H5(%_DHAX1ɉ\L E1H5k(H=2Dž\E11L H53(H=2誯Dž\6HHCouldn't create a search context. ERROR: Couldn't allocate memory in read_record() ERROR: Couldn't open $MFT/$DATAERROR: Couldn't read MFT Record %lld. ERROR: Couldn't allocate memory in get_filenames(). ERROR: Couldn't allocate memory in get_parent_name() ERROR: Couldn't create a search context. ERROR: Couldn't get filenames. ERROR: Couldn't allocate memory in get_data(). ERROR: Cannot translate name into current locale. ERROR: Couldn't get data streams. %-8lld %c%c%c%c %3d%% %s %9lld %s Metadata may span more than one MFT record ________________________________________ Amount potentially recoverable %d%% File is encrypted, recovery is impossible. File is compressed, recovery not yet implemented. File is resident, therefore recoverable. File has no runlist, hence no data. File has an empty runlist, hence no data. Missing segment at beginning, %lld clusters Missing segment at end, %lld clusters ERROR: Unexpected error whilst calculating percentage for inode %lld Internal error, strtoll didn't return a suffix. Invalid size suffix '%s'. Use T, G, M, or K. Can't read info from mft record %lld. File has no recoverable data. File has no data. There is nothing to recover. Missing segment at beginning, %lld clusters. Missing segment at end, %lld clusters. Truncation not performed because file has an inconsistent $MFT record. ERROR: Couldn't set the file's date and time Undeleted '%s:%s' successfully to %s. Undeleted '%s' successfully to %s. ERROR: Couldn't open $MFT/$BITMAPERROR: Couldn't allocate memory in scan_disk() ERROR: Couldn't create a regex. Inode Flags %%age Date Time Size Filename ----------------------------------------------------------------------- Couldn't read MFT Record %lld. Couldn't compare filename with regexERROR: Failed to undelete inode %lli ! Files with potentially recoverable content: %d ERROR: Couldn't alloc mem for parsing inodes! ERROR: Missing new value at end of input! Pattern to transform is empty Couldn't allocate memory in transform() Invalid time suffix '%s'. Use Y, M, W, D or H. Option '%s' requires an argument. -b:Cc:d:fh?i:m:o:OPp:sS:t:TuqvVYou must specify exactly one device. Scan can only be used with --percent, --match, --ignore-case, --size and --time. The --case option doesn't make sense without the --match option Copy can only be used with --output and --destination. You can only select one of Scan, Undelete or Copy. Percentage value must be in the range 0 - 100. You may not use --quiet and --verbose at the same time. You may not use --quiet when scanning a volume. To use --parent, you must also use --verbose. %s v%s (libntfs-3g) - Recover deleted files from an NTFS Volume. Copyright (c) 2002-2005 Richard Russon Copyright (c) 2004-2005 Holger Ohmacht Copyright (c) 2005 Anton Altaparmakov Copyright (c) 2007 Yura Pakhuchiy Copyright (c) 2013-2018 Jean-Pierre Andre Developers' email address: ntfs-3g-devel@lists.sf.net This program is free software, released under the GNU General Public License and you are welcome to redistribute it under certain conditions. It comes with ABSOLUTELY NO WARRANTY; for details read the GNU General Public License to be found in the file "COPYING" distributed with this program, or online at: http://www.gnu.org/copyleft/gpl.html Usage: %s [options] device -s, --scan Scan for files (default) -p, --percentage NUM Minimum percentage recoverable -m, --match PATTERN Only work on files with matching names -C, --case Case sensitive matching -S, --size RANGE Match files of this size -t, --time SINCE Last referenced since this time -u, --undelete Undelete mode -i, --inodes RANGE Recover these inodes -o, --output FILE Save with this filename -O, --optimistic Undelete in-use clusters as well -d, --destination DIR Destination directory -b, --byte NUM Fill missing parts with this byte -T, --truncate Truncate 100%% recoverable file to exact size. -P, --parent Show parent directory -c, --copy RANGE Write a range of MFT records to a file -f, --force Use less caution -q, --quiet Less output -v, --verbose More output -V, --version Display version information -h, --help Display this help Failed to set locale, using default '%s'. Error getting information about %sFailed to determine whether %s is mountedUse the force option to ignore this error. Access is denied because the NTFS volume is already exclusively opened. The volume may be already mounted, or another software may use it which could be identified for example by the help of the 'fuser' command. You can use force option to avoid this check, but this is not recommended and may lead to data corruption. The device '%s' doesn't have a valid NTFS. Maybe you selected the wrong device? Or the whole disk instead of a partition (e.g. /dev/hda, not /dev/hda1)? Or the other way around? NTFS is inconsistent. Run chkdsk /f on Windows then reboot it TWICE! The usage of the /f parameter is very IMPORTANT! No modification was made to NTFS by this software. The NTFS partition is hibernated. Please resume Windows and turned it off properly, so mounting could be done safely. Access is denied because the NTFS journal file is unclean. Choices are: A) Shutdown Windows properly. B) Click the 'Safely Remove Hardware' icon in the Windows taskbar notification area before disconnecting the device. C) Use 'Eject' from Windows Explorer to safely remove the device. D) If you ran chkdsk previously then boot Windows again which will automatically initialize the journal. E) Submit 'force' option (WARNING: This solution it not recommended). F) ntfsmount: Mount the volume read-only by using the 'ro' mount option. You seem to have a SoftRAID/FakeRAID hardware and must use an activated, different device under /dev/mapper, (e.g. /dev/mapper/nvidia_eahaabcc1) to mount NTFS. Please see the 'dmraid' documentation for help. Volume is scheduled for check. Please boot into Windows TWICE, or use the 'force' option. NOTE: If you had not scheduled check and last time accessed this volume using ntfsmount and shutdown system properly, then init scripts in your distribution are broken. Please report to your distribution developers (NOT to us!) that init scripts kill ntfsmount or mount.ntfs-fuse during shutdown instead of proper umount. WARNING: Dirty volume mount was forced by the 'force' mount option. ERROR: Failed to scan device '%s'. ERROR: NO inode(s) AND NO match-regex specified! Inode Flags %%age Date Size Filename Couldn't allocate memory in copy_mft() Couldn't create output file '%s'ERROR: Failed to read MFT blocks %lld-%lld. utils.cntfsundelete.cRecovered file name %s %F %RDirectoryFileMFT Record %lld Type: %s Date: %s Data Streams: Filename: (%d) %s File Flags: System Directory Sparse Reparse Compressed Encrypted Parent: %s Size alloc: %lld Size data: %lld Date C: %s Date A: %s Date M: %s Date R: %s Name: %s Resident Compressed Encrypted Size init: %lld Size vcn: %lld Data runs: None %lld @ %lld Creating file: %s Couldn't open $BitmapCouldn't read $BitmapFile has no data streams. File is %d%% recoverable Invalid size '%s'. unknown%s/%s:%s%s/%s.%dRecord is in use by the mft Forced to continue. %s%lldCouldn't create file %sFile has resident data. Write failedClose failedFile has a sparse section. Read failedTruncation failedmftUnknown option '%s'. ERROR: Invalid Number: %s ERROR: Missing range end! Invalid time '%s'. 2022.10.3ntfsundelete %s %s%s The device %s doesn't exist Failed to mount '%s'Range to copy is backwards. Couldn't open $MFT/$DATACouldn't read MFT Record %lldRead %lld MFT Records MFT extracted to file %s bytecasecopydestinationforcehelpinodesmatchoptimisticoutputparentpercentagequietscansizetimetruncateverboseversionF1?8*1?8*"YMAއԌȌ܉lPƇcccccccccccccccccccccccccccccccccccccccccccc%dddʙddddddddddddddxutils_parse_sizeutils_cluster_in_usefind_first_attributedump_recordparse_inode_argtransformparse_timeversionusageparse_optionsutils_set_localeutils_valid_deviceutils_mount_volumehandle_undeletecopy_mftmainname_matchscan_diskset_dateundelete_fileopen_filelist_recordcalc_percentageverify_parentget_parent_namerescue_nameget_filenamesget_dataread_record.*\.;x| |@0pd PP X`xP0`zRx &D$4x0FJ w?9*3$"\{t{ 0hJC BFFEBBA $AC CK F ,* AC M G ,AC HEQ F 0HkAW BEIFH B 4|(AC MP G P H ^ aA` Al $@AC I A 8JC FJ C   $8lmAC I D (`AC K K ,h\AC HK D ,t AC P I ,JAC P5 A ,x{hEC BIH4 A @@yb~CcdfhimOoPŠpРq֠s۠StTuvV=N t08o   PH oo oo\ o0 @ P ` p !! !0!@!P!`!p!!!!!!!!!"" "0"@"P"`"p"""""""""## #0#@#/usr/lib/debug/.dwz/x86_64-linux-gnu/ntfs-3g.debugBC(ԉ1"vU,ӣc6a78f3725ddf123ddcd50dbe6255fa24c5e7b.debug.shstrtab.interp.note.gnu.property.note.gnu.build-id.note.ABI-tag.gnu.hash.dynsym.dynstr.gnu.version.gnu.version_r.rela.dyn.rela.plt.init.plt.got.plt.sec.text.fini.rodata.eh_frame_hdr.eh_frame.init_array.fini_array.data.rel.ro.dynamic.data.bss.gnu_debugaltlink.gnu_debuglink 880&hh$9 Go$Q Y ao\ \ ~no p}PPHB  0P#P#`#`# &&M t t @'@@L0088@@    G `4/