NTFS部分損毀，抓不到目錄結構 - 儲存設備

拜託NTFS高手了....

室友電腦從一頓一頓的，過了一個多月開始回報bad sector，再一周系統crash

用硬碟複製機複製時過不了25%，於是用Todo backup跑，有跑完
插上去無法開機(找不到efi image)，用電腦看發現資料似乎位移了

於是到linux上看，發現sector 0正確，sector 1-4不知道哪來的資料
sector 5- EFI partition table (本來應該在1的) /disk dump

先用device mapper把系統磁區抓出來試著掛載，結果發現目錄結構炸掉了(C:\)
系統區是想要把書籤&桌面複製出來

ubuntu@ubuntu:~$ sudo dmsetup create -r W10 --table '0 585106972 linear
/dev/sda 2107392'
ubuntu@ubuntu:~$ sudo mount -r /dev/mapper/W10 /W10/
ubuntu@ubuntu:~$ ls /W10/
ls: cannot access '/W10/$Recycle.Bin': Input/output error
ls: cannot access '/W10/BOOTNXT': Input/output error
ls: cannot access '/W10/Documents and Settings': Input/output error
ls: cannot access '/W10/found.003': Input/output error
ls: cannot access '/W10/hiberfil.sys': Input/output error
ls: cannot access '/W10/PerfLogs': Input/output error
ls: cannot access '/W10/ProgramData': Input/output error
ls: cannot access '/W10/Recovery': Input/output error
AsusVibeData found.003 PerfLogs
Boot hiberfil.sys ProgramData
bootmgr hsrv.txt Program Files
BOOTNXT Intel Program Files (x86)
bootTel.dat iResearch Rbackup
Config.Msi iSTAR Recovery
CSTEMP K56CA.BIN $Recycle.Bin
desktop.ini K56CM.BIN swapfile.sys
Documents KMPlayer $SysReset
Documents and Settings Logs System Volume Information
Downloads NVIDIA Users
eSupport NvidiaLogging Windows
found.000 OneDriveTemp Windows.old
found.002 pagefile.sys
大部分的資料夾底下只剩下一兩個檔案或資料夾....如果還能讀的話

資料槽(D:\)更糟，被複製出來的那個硬碟裝上別台windows後
直接說檔案系統損毀，標識成未格式化，在linux ntfs報的錯誤如下

ubuntu@ubuntu:~$ sudo dmsetup create -r Ddrive --table '0 835018751 linear
/dev/sda 588165124'
ubuntu@ubuntu:~$ sudo mount -r /dev/mapper/Ddrive /Ddrive/
ntfs_mst_post_read_fixup_warn: magic: 0x00000000 size: 1024 usa_ofs: 0
usa_count: 65535: Invalid argument
Record 4 has no FILE magic (0x0)
Failed to open $AttrDef: Input/output error
Failed to mount '/dev/mapper/Ddrive': Input/output error
NTFS is either inconsistent, or there is a hardware fault, or it's a
SoftRAID/FakeRAID hardware. In the first case run chkdsk /f on Windows
then reboot into Windows twice. The usage of the /f parameter is very
important! If the device is a SoftRAID/FakeRAID then first activate
it and mount a different device under the /dev/mapper/ directory, (e.g.
/dev/mapper/nvidia_eahaabcc1). Please see the 'dmraid' documentation
for more details.

可是前幾個NTFS record好像還在

ubuntu@ubuntu:~$ sudo dd if=/dev/mapper/Ddrive bs=512 count=1M 2>/dev/null |
hd | grep FILE
00002000 46 49 4c 45 30 00 03 00 42 5c 12 be 00 00 00 00 |FILE0...B\......|
00002400 46 49 4c 45 30 00 03 00 14 61 00 02 00 00 00 00 |FILE0....a......|
00002800 46 49 4c 45 30 00 03 00 5a 61 00 02 00 00 00 00 |FILE0...Za......|
00002c00 46 49 4c 45 30 00 03 00 d5 4d 00 04 00 00 00 00 |FILE0....M......|

在想怎樣盡量抓回資料，會不會是手動把MFT backup找出來，或是把sector offset之類
改正確有機會可以搞定的?

是說直接重灌W10的話，會有授權嗎?(同一台筆電只換了硬碟，乾淨新安裝)

下面是資料碟的8kb dump

ubuntu@ubuntu:~$ sudo dd if=/dev/mapper/Ddrive bs=512 count=16 2>/dev/null |
hd
00000000 eb 52 90 4e 54 46 53 20 20 20 20 00 02 08 00 00 |.R.NTFS .....|
00000010 00 00 00 00 00 f8 00 00 3f 00 ff 00 00 b0 0e 23 |........?......#|
00000020 00 00 00 00 80 00 80 00 ff 5f c5 31 00 00 00 00 |........._.1....|
00000030 00 00 0c 00 00 00 00 00 02 00 00 00 00 00 00 00 |................|
00000040 f6 00 00 00 01 00 00 00 08 df f9 0a 07 fa 0a dc |................|
00000050 00 00 00 00 fa 33 c0 8e d0 bc 00 7c fb 68 c0 07 |.....3.....|.h..|
00000060 1f 1e 68 66 00 cb 88 16 0e 00 66 81 3e 03 00 4e |..hf......f.>..N|
00000070 54 46 53 75 15 b4 41 bb aa 55 cd 13 72 0c 81 fb |TFSu..A..U..r...|
00000080 55 aa 75 06 f7 c1 01 00 75 03 e9 dd 00 1e 83 ec |U.u.....u.......|
00000090 18 68 1a 00 b4 48 8a 16 0e 00 8b f4 16 1f cd 13 |.h...H..........|
000000a0 9f 83 c4 18 9e 58 1f 72 e1 3b 06 0b 00 75 db a3 |.....X.r.;...u..|
000000b0 0f 00 c1 2e 0f 00 04 1e 5a 33 db b9 00 20 2b c8 |........Z3... +.|
000000c0 66 ff 06 11 00 03 16 0f 00 8e c2 ff 06 16 00 e8 |f...............|
000000d0 4b 00 2b c8 77 ef b8 00 bb cd 1a 66 23 c0 75 2d |K.+.w......f#.u-|
000000e0 66 81 fb 54 43 50 41 75 24 81 f9 02 01 72 1e 16 |f..TCPAu$....r..|
000000f0 68 07 bb 16 68 52 11 16 68 09 00 66 53 66 53 66 |h...hR..h..fSfSf|
00000100 55 16 16 16 68 b8 01 66 61 0e 07 cd 1a 33 c0 bf |U...h..fa....3..|
00000110 0a 13 b9 f6 0c fc f3 aa e9 fe 01 90 90 66 60 1e |.............f`.|
00000120 06 66 a1 11 00 66 03 06 1c 00 1e 66 68 00 00 00 |.f...f.....fh...|
00000130 00 66 50 06 53 68 01 00 68 10 00 b4 42 8a 16 0e |.fP.Sh..h...B...|
00000140 00 16 1f 8b f4 cd 13 66 59 5b 5a 66 59 66 59 1f |.......fY[ZfYfY.|
00000150 0f 82 16 00 66 ff 06 11 00 03 16 0f 00 8e c2 ff |....f...........|
00000160 0e 16 00 75 bc 07 1f 66 61 c3 a1 f6 01 e8 09 00 |...u...fa.......|
00000170 a1 fa 01 e8 03 00 f4 eb fd 8b f0 ac 3c 00 74 09 |............<.t.|
00000180 b4 0e bb 07 00 cd 10 eb f2 c3 0d 0a 41 20 64 69 |............A di|
00000190 73 6b 20 72 65 61 64 20 65 72 72 6f 72 20 6f 63 |sk read error oc|
000001a0 63 75 72 72 65 64 00 0d 0a 42 4f 4f 54 4d 47 52 |curred...BOOTMGR|
000001b0 20 69 73 20 63 6f 6d 70 72 65 73 73 65 64 00 0d | is compressed..|
000001c0 0a 50 72 65 73 73 20 43 74 72 6c 2b 41 6c 74 2b |.Press Ctrl+Alt+|
000001d0 44 65 6c 20 74 6f 20 72 65 73 74 61 72 74 0d 0a |Del to restart..|
000001e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
000001f0 00 00 00 00 00 00 8a 01 a7 01 bf 01 00 00 55 aa |..............U.|
00000200 07 00 42 00 4f 00 4f 00 54 00 4d 00 47 00 52 00 |..B.O.O.T.M.G.R.|
00000210 04 00 24 00 49 00 33 00 30 00 00 d4 00 00 00 24 |..$.I.3.0......$|
00000220 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
*
00000250 00 00 00 00 00 00 e9 c0 00 90 05 00 4e 00 54 00 |............N.T.|
00000260 4c 00 44 00 52 00 07 00 42 00 4f 00 4f 00 54 00 |L.D.R...B.O.O.T.|
00000270 54 00 47 00 54 00 07 00 42 00 4f 00 4f 00 54 00 |T.G.T...B.O.O.T.|
00000280 4e 00 58 00 54 00 00 00 00 00 00 00 00 00 00 00 |N.X.T...........|
00000290 00 00 00 00 00 00 00 00 00 00 0d 0a 41 6e 20 6f |............An o|
000002a0 70 65 72 61 74 69 6e 67 20 73 79 73 74 65 6d 20 |perating system |
000002b0 77 61 73 6e 27 74 20 66 6f 75 6e 64 2e 20 54 72 |wasn't found. Tr|
000002c0 79 20 64 69 73 63 6f 6e 6e 65 63 74 69 6e 67 20 |y disconnecting |
000002d0 61 6e 79 20 64 72 69 76 65 73 20 74 68 61 74 20 |any drives that |
000002e0 64 6f 6e 27 74 0d 0a 63 6f 6e 74 61 69 6e 20 61 |don't..contain a|
000002f0 6e 20 6f 70 65 72 61 74 69 6e 67 20 73 79 73 74 |n operating syst|
00000300 65 6d 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 |em..............|
00000310 00 00 00 00 00 00 00 9a 02 66 0f b7 06 0b 00 66 |.........f.....f|
00000320 0f b6 1e 0d 00 66 f7 e3 66 a3 52 02 66 8b 0e 40 |.....f..f.R.f..@|
00000330 00 80 f9 00 0f 8f 0e 00 f6 d9 66 b8 01 00 00 00 |..........f.....|
00000340 66 d3 e0 eb 08 90 66 a1 52 02 66 f7 e1 66 a3 86 |f.....f.R.f..f..|
00000350 02 66 0f b7 1e 0b 00 66 33 d2 66 f7 f3 66 a3 56 |.f.....f3.f..f.V|
00000360 02 e8 a2 04 66 8b 0e 4e 02 66 89 0e 26 02 66 03 |....f..N.f..&.f.|
00000370 0e 86 02 66 89 0e 2a 02 66 03 0e 86 02 66 89 0e |...f..*.f....f..|
00000380 2e 02 66 03 0e 86 02 66 89 0e 3e 02 66 03 0e 86 |..f....f..>.f...|
00000390 02 66 89 0e 46 02 66 b8 90 00 00 00 66 8b 0e 26 |.f..F.f.....f..&|
000003a0 02 e8 90 09 66 0b c0 0f 84 bf fd 66 a3 32 02 66 |....f......f.2.f|
000003b0 b8 a0 00 00 00 66 8b 0e 2a 02 e8 77 09 66 a3 36 |.....f..*..w.f.6|
000003c0 02 66 b8 b0 00 00 00 66 8b 0e 2e 02 e8 65 09 66 |.f.....f.....e.f|
000003d0 a3 3a 02 66 a1 32 02 66 0b c0 0f 84 8c fd 67 80 |.:.f.2.f......g.|
000003e0 78 08 00 0f 85 83 fd 67 66 8d 50 10 67 03 42 04 |x......gf.P.g.B.|
000003f0 67 66 0f b6 48 0c 66 89 0e 92 02 67 66 8b 48 08 |gf..H.f....gf.H.|
00000400 66 89 0e 8e 02 66 a1 8e 02 66 0f b7 0e 0b 00 66 |f....f...f.....f|
00000410 33 d2 66 f7 f1 66 a3 96 02 66 a1 46 02 66 03 06 |3.f..f...f.F.f..|
00000420 8e 02 66 a3 4a 02 66 83 3e 36 02 00 0f 84 1d 00 |..f.J.f.>6......|
00000430 66 83 3e 3a 02 00 0f 84 30 fd 66 8b 1e 3a 02 1e |f.>:....0.f..:..|
00000440 07 66 8b 3e 4a 02 66 a1 2e 02 e8 ed 01 e8 2c 0d |.f.>J.f.......,.|
00000450 66 0b c0 0f 84 03 00 e8 42 0e 66 0f b7 0e 00 02 |f.......B.f.....|
00000460 66 b8 02 02 00 00 e8 22 08 66 0b c0 0f 85 16 00 |f......".f......|
00000470 66 0f b7 0e 5a 02 66 b8 5c 02 00 00 e8 0c 08 66 |f...Z.f.\......f|
00000480 0b c0 0f 84 78 0e 67 66 8b 00 1e 07 66 8b 3e 3e |....x.gf....f.>>|
00000490 02 e8 3f 06 66 a1 3e 02 66 bb 20 00 00 00 66 b9 |..?.f.>.f. ...f.|
000004a0 00 00 00 00 66 ba 00 00 00 00 e8 e4 00 66 85 c0 |....f........f..|
000004b0 0f 85 23 00 66 a1 3e 02 66 bb 80 00 00 00 66 b9 |..#.f.>.f.....f.|
000004c0 00 00 00 00 66 ba 00 00 00 00 e8 c4 00 66 0b c0 |....f........f..|
000004d0 0f 85 44 00 e9 27 0e 66 33 d2 66 b9 80 00 00 00 |..D..'.f3.f.....|
000004e0 66 a1 3e 02 e8 ca 08 66 0b c0 0f 84 10 0e 1e 07 |f.>....f........|
000004f0 66 8b 3e 3e 02 e8 db 05 66 a1 3e 02 66 bb 80 00 |f.>>....f.>.f...|
00000500 00 00 66 b9 00 00 00 00 66 ba 00 00 00 00 e8 80 |..f.....f.......|
00000510 00 66 0b c0 0f 84 e6 0d 67 66 0f b7 58 0c 66 81 |.f......gf..X.f.|
00000520 e3 ff 00 00 00 0f 85 db 0d 66 8b d8 68 00 20 07 |.........f..h. .|
00000530 66 2b ff 66 a1 3e 02 e8 00 01 68 00 20 07 66 2b |f+.f.>....h. .f+|
00000540 ff 66 a1 3e 02 e8 ac 0a 8a 16 0e 00 b8 e8 03 8e |.f.>............|
00000550 c0 8d 36 0b 00 2b c0 68 00 20 50 cb 06 1e 66 60 |..6..+.h. P...f`|
00000560 66 8b da 66 0f b6 0e 0d 00 66 f7 e1 66 a3 11 00 |f..f.....f..f...|
00000570 66 8b c3 66 f7 e1 a3 16 00 8b df 83 e3 0f 8c c0 |f..f............|
00000580 66 c1 ef 04 03 c7 50 07 e8 92 fb 66 61 90 1f 07 |f.....P....fa...|
00000590 c3 67 03 40 14 67 66 83 38 ff 0f 84 4c 00 67 66 |[email protected]|
000005a0 39 18 0f 85 33 00 66 0b c9 0f 85 0a 00 67 80 78 |9...3.f......g.x|
000005b0 09 00 0f 85 23 00 c3 67 3a 48 09 0f 85 1a 00 66 |....#..g:H.....f|
000005c0 8b f0 67 03 70 0a e8 97 06 66 51 1e 07 66 8b fa |..g.p....fQ..f..|
000005d0 f3 a7 66 59 0f 85 01 00 c3 67 66 83 78 04 00 0f |..fY.....gf.x...|
000005e0 84 07 00 67 66 03 40 04 eb ab 66 2b c0 c3 66 8b |[email protected]+..f.|
000005f0 f3 e8 6c 06 67 66 03 00 67 f7 40 0c 02 00 0f 85 |..l.gf..g.@.....|
00000600 34 00 67 66 8d 50 10 67 3a 4a 40 0f 85 18 00 67 |4.gf.P.g:[email protected]|
00000610 66 8d 72 42 e8 49 06 66 51 1e 07 66 8b fb f3 a7 |f.rB.I.fQ..f....|
00000620 66 59 0f 85 01 00 c3 67 83 78 08 00 0f 84 06 00 |fY.....g.x......|
00000630 67 03 40 08 eb c2 66 33 c0 c3 67 80 7b 08 00 0f |[email protected].{...|
00000640 85 1c 00 06 1e 66 60 67 66 8d 53 10 67 66 8b 0a |.....f`gf.S.gf..|
00000650 66 8b f3 67 03 72 04 f3 a4 66 61 90 1f 07 c3 66 |f..g.r...fa....f|
00000660 50 67 66 8d 53 10 66 85 c0 0f 85 0a 00 67 66 8b |Pgf.S.f......gf.|
00000670 4a 08 66 41 eb 11 90 67 66 8b 42 18 66 33 d2 66 |J.fA...gf.B.f3.f|
00000680 f7 36 52 02 66 8b c8 66 2b c0 66 5e e8 01 00 c3 |.6R.f..f+.f^....|
00000690 06 1e 66 60 67 80 7b 08 01 0f 84 03 00 e9 ca fa |..f`g.{.........|
000006a0 66 83 f9 00 0f 85 06 00 66 61 90 1f 07 c3 66 53 |f.......fa....fS|
000006b0 66 50 66 51 66 56 66 57 06 e8 91 04 66 8b d1 07 |fPfQfVfW....f...|
000006c0 66 5f 66 5e 66 59 66 85 c0 0f 84 34 00 66 3b ca |f_f^fYf....4.f;.|
000006d0 0f 8d 03 00 66 8b d1 e8 82 fe 66 2b ca 66 8b da |....f.....f+.f..|
000006e0 66 8b c2 66 0f b6 16 0d 00 66 f7 e2 66 0f b7 16 |f..f.....f..f...|
000006f0 0b 00 66 f7 e2 66 03 f8 66 58 66 03 c3 66 5b eb |..f..f..fXf..f[.|
00000700 9f 66 85 f6 0f 84 62 fa 66 51 66 57 06 67 66 0f |.f....b.fQfW.gf.|
00000710 b6 43 09 66 85 c0 0f 84 20 00 66 d1 e0 66 2b e0 |.C.f.... .f..f+.|
00000720 66 8b fc 66 54 66 56 67 66 0f b7 73 0a 66 03 f3 |f..fTfVgf..s.f..|
00000730 66 8b c8 f3 a4 66 5e eb 03 90 66 50 66 50 67 66 |f....f^...fPfPgf|
00000740 8b 03 66 50 67 66 8b 43 18 66 50 67 66 8b 56 20 |..fPgf.C.fPgf.V |
00000750 66 85 d2 0f 84 0b 00 66 8b fe 1e 07 66 8b c2 e8 |f......f....f...|
00000760 71 03 66 8b c6 66 5a 66 59 66 42 66 51 66 56 e8 |q.f..fZfYfBfQfV.|
00000770 3f 06 66 85 c0 0f 84 f1 f9 66 5e 66 59 66 8b fe |?.f......f^fYf..|
00000780 1e 07 e8 4e 03 66 8b c6 66 8b d9 66 59 66 5a 66 |...N.f..f..fYfZf|
00000790 51 66 56 66 d1 e9 e8 f8 fd 66 85 c0 0f 84 ca f9 |QfVf.....f......|
000007a0 66 5e 66 59 66 03 e1 07 66 5f 66 59 66 8b d0 66 |f^fYf...f_fYf..f|
000007b0 58 66 5b 66 8b da e9 f5 fe 06 1e 66 60 26 67 66 |Xf[f.......f`&gf|
000007c0 0f b7 5f 04 26 67 66 0f b7 4f 06 66 0b c9 0f 84 |.._.&gf..O.f....|
000007d0 98 f9 66 03 df 66 83 c3 02 66 81 c7 fe 01 00 00 |..f..f...f......|
000007e0 66 49 66 0b c9 0f 84 17 00 26 67 8b 03 26 67 89 |fIf......&g..&g.|
000007f0 07 66 83 c3 02 66 81 c7 00 02 00 00 66 49 eb e2 |.f...f......fI..|
00000800 66 61 90 1f 07 c3 06 1e 66 60 66 b8 01 00 00 00 |fa......f`f.....|
00000810 66 a3 22 02 66 a1 1e 02 66 03 06 86 02 66 a3 8a |f.".f...f....f..|
00000820 02 66 03 06 86 02 66 a3 4e 02 66 a1 30 00 66 0f |.f....f.N.f.0.f.|
00000830 b6 1e 0d 00 66 f7 e3 66 8b 1e 4e 02 66 89 07 66 |....f..f..N.f..f|
00000840 a3 11 00 83 c3 04 66 a1 56 02 66 89 07 a3 16 00 |......f.V.f.....|
00000850 83 c3 04 66 89 1e 4e 02 66 8b 1e 1e 02 1e 07 e8 |...f..N.f.......|
00000860 bb f8 66 8b fb e8 51 ff 66 a1 1e 02 66 bb 20 00 |..f...Q.f...f. .|
00000870 00 00 66 b9 00 00 00 00 66 ba 00 00 00 00 e8 10 |..f.....f.......|
00000880 fd 66 0b c0 0f 84 19 01 66 8b d8 1e 07 66 8b 3e |.f......f....f.>|
00000890 1a 02 66 33 c0 e8 a2 fd 66 8b 1e 1a 02 66 81 3f |..f3....f....f.?|
000008a0 80 00 00 00 0f 84 eb 00 03 5f 04 eb f0 66 53 66 |........._...fSf|
000008b0 8b 47 10 66 f7 26 56 02 66 50 66 33 d2 66 0f b6 |.G.f.&V.fPf3.f..|
000008c0 1e 0d 00 66 f7 f3 66 52 e8 dc 00 66 0b c0 0f 84 |...f..fR...f....|
000008d0 98 f8 66 8b 0e 56 02 66 0f b6 1e 0d 00 66 f7 e3 |..f..V.f.....f..|
000008e0 66 5a 66 03 c2 66 8b 1e 4e 02 66 89 07 83 c3 04 |fZf..f..N.f.....|
000008f0 66 0f b6 06 0d 00 66 2b c2 66 3b c1 0f 86 03 00 |f.....f+.f;.....|
00000900 66 8b c1 66 89 07 66 2b c8 66 5a 0f 84 75 00 66 |f..f..f+.fZ..u.f|
00000910 03 c2 66 50 66 33 d2 66 0f b6 1e 0d 00 66 f7 f3 |..fPf3.f.....f..|
00000920 66 51 e8 82 00 66 59 66 0b c0 0f 84 3c f8 66 0f |fQ...fYf....<.f.|
00000930 b6 1e 0d 00 66 f7 e3 66 8b 1e 4e 02 66 8b 17 83 |....f..f..N.f...|
00000940 c3 04 66 03 17 66 3b d0 0f 85 15 00 66 0f b6 06 |..f..f;.....f...|
00000950 0d 00 66 3b c1 0f 86 03 00 66 8b c1 66 01 07 eb |..f;.....f..f...|
00000960 a5 83 c3 04 66 89 1e 4e 02 66 89 07 83 c3 04 66 |....f..N.f.....f|
00000970 0f b6 06 0d 00 66 3b c1 0f 86 03 00 66 8b c1 66 |.....f;.....f..f|
00000980 89 07 eb 82 83 c3 04 66 ff 06 22 02 66 89 1e 4e |.......f..".f..N|
00000990 02 66 5b 03 5f 04 66 81 3f 80 00 00 00 0f 84 0c |.f[._.f.?.......|
000009a0 ff 66 61 90 1f 07 c3 66 8b d0 66 8b 0e 22 02 66 |.fa....f..f..".f|
000009b0 8b 36 8a 02 66 03 36 86 02 66 52 66 51 66 52 66 |.6..f.6..fRfQfRf|
000009c0 8b 1e 8a 02 66 8b 3e 56 02 66 8b 04 66 a3 11 00 |....f.>V.f..f...|
000009d0 83 c6 04 66 8b 04 a3 16 00 83 c6 04 1e 07 e8 3c |...f...........<|
000009e0 f7 66 2b f8 0f 84 08 00 f7 26 0b 00 03 d8 eb d9 |.f+......&......|
000009f0 66 8b 3e 8a 02 1e 07 e8 bf fd 66 a1 8a 02 66 bb |f.>.......f...f.|
00000a00 80 00 00 00 66 b9 00 00 00 00 66 8b d1 e8 81 fb |....f.....f.....|
00000a10 66 0b c0 0f 84 53 f7 66 8b d8 66 58 66 56 e8 2c |f....S.f..fXfV.,|
00000a20 01 66 5e 66 0b c0 0f 84 05 00 66 5b 66 5b c3 66 |.f^f......f[f[.f|
00000a30 59 66 5a e2 84 66 33 c0 c3 06 1e 66 60 66 50 66 |YfZ..f3....f`fPf|
00000a40 51 66 33 d2 66 0f b6 1e 0d 00 66 f7 f3 66 52 66 |Qf3.f.....f..fRf|
00000a50 57 e8 53 ff 66 5f 66 0b c0 0f 84 0d f7 66 0f b6 |W.S.f_f......f..|
00000a60 1e 0d 00 66 f7 e3 66 5a 66 03 c2 66 a3 11 00 66 |...f..fZf..f...f|
00000a70 59 66 0f b6 1e 0d 00 66 3b cb 0f 8e 13 00 89 1e |Yf.....f;.......|
00000a80 16 00 66 2b cb 66 58 66 03 c3 66 50 66 51 eb 14 |..f+.fXf..fPfQ..|
00000a90 90 66 58 66 03 c1 66 50 89 0e 16 00 66 b9 00 00 |.fXf..fP....f...|
00000aa0 00 00 66 51 06 66 57 8b df 83 e3 0f 8c c0 66 c1 |..fQ.fW.......f.|
00000ab0 ef 04 03 c7 50 07 e8 64 f6 66 5f 07 66 03 3e 52 |....P..d.f_.f.>R|
00000ac0 02 66 59 66 58 66 83 f9 00 0f 8f 70 ff 66 61 90 |.fYfXf.....p.fa.|
00000ad0 1f 07 c3 06 1e 66 60 66 f7 26 56 02 66 8b 0e 56 |.....f`f.&V.f..V|
00000ae0 02 e8 55 ff e8 d2 fc 66 61 90 1f 07 c3 06 1e 66 |..U....fa......f|
00000af0 60 66 f7 26 92 02 66 8b 1e 36 02 66 8b 0e 92 02 |`f.&..f..6.f....|
00000b00 66 8b 36 2a 02 1e 07 66 8b 3e 46 02 e8 81 fb e8 |f.6*...f.>F.....|
00000b10 a7 fc 66 61 90 1f 07 c3 66 50 66 53 66 51 66 8b |..fa....fPfSfQf.|
00000b20 1e 4a 02 66 8b c8 66 c1 e8 03 66 83 e1 07 66 03 |.J.f..f...f...f.|
00000b30 d8 66 b8 01 00 00 00 66 d3 e0 67 84 03 0f 84 04 |.f.....f..g.....|
00000b40 00 f8 eb 02 90 f9 66 59 66 5b 66 58 c3 67 80 7b |......fYf[fX.g.{|
00000b50 08 01 0f 84 04 00 66 2b c0 c3 67 66 8d 73 10 67 |......f+..gf.s.g|
00000b60 66 8b 56 08 66 3b c2 0f 87 0b 00 67 66 8b 16 66 |f.V.f;.....gf..f|
00000b70 3b c2 0f 83 04 00 66 2b c0 c3 67 03 5e 10 66 2b |;.....f+..g.^.f+|
00000b80 f6 67 80 3b 00 0f 84 3e 00 e8 81 00 66 03 f1 e8 |.g.;...>....f...|
00000b90 39 00 66 03 ca 66 3b c1 0f 8c 21 00 66 8b d1 66 |9.f..f;...!.f..f|
00000ba0 50 67 66 0f b6 0b 66 8b c1 66 83 e0 0f 66 c1 e9 |Pgf...f..f...f..|
00000bb0 04 66 03 d9 66 03 d8 66 43 66 58 eb c4 66 2b c8 |.f..f..fCfX..f+.|
00000bc0 66 2b c2 66 03 c6 c3 66 2b c0 c3 66 2b c9 67 8a |f+.f...f+..f+.g.|
00000bd0 0b 80 e1 0f 66 83 f9 00 0f 85 04 00 66 2b c9 c3 |....f.......f+..|
00000be0 66 53 66 52 66 03 d9 67 66 0f be 13 66 49 66 4b |fSfRf..gf...fIfK|
00000bf0 66 83 f9 00 0f 84 0d 00 66 c1 e2 08 67 8a 13 66 |f.......f...g..f|
00000c00 4b 66 49 eb eb 66 8b ca 66 5a 66 5b c3 66 53 66 |KfI..f..fZf[.fSf|
00000c10 52 66 2b d2 67 8a 13 66 83 e2 0f 66 2b c9 67 8a |Rf+.g..f...f+.g.|
00000c20 0b c0 e9 04 66 83 f9 00 0f 85 08 00 66 2b c9 66 |....f.......f+.f|
00000c30 5a 66 5b c3 66 03 da 66 03 d9 67 66 0f be 13 66 |Zf[.f..f..gf...f|
00000c40 49 66 4b 66 83 f9 00 0f 84 0d 00 66 c1 e2 08 67 |IfKf.......f...g|
00000c50 8a 13 66 4b 66 49 eb eb 66 8b ca 66 5a 66 5b c3 |..fKfI..f..fZf[.|
00000c60 66 0b c9 0f 85 01 00 c3 66 51 66 56 67 83 3e 61 |f.......fQfVg.>a|
00000c70 0f 8c 0c 00 67 83 3e 7a 0f 8f 04 00 67 83 2e 20 |....g.>z....g.. |
00000c80 66 83 c6 02 e2 e6 66 5e 66 59 c3 66 50 66 51 66 |f.....f^fY.fPfQf|
00000c90 8b d0 66 a1 32 02 67 66 8d 58 10 67 03 43 04 67 |..f.2.gf.X.g.C.g|
00000ca0 66 8d 40 10 66 8b da e8 44 f9 66 0b c0 0f 84 05 |[email protected].....|
00000cb0 00 66 59 66 59 c3 66 a1 36 02 66 0b c0 0f 85 08 |.fYfY.f.6.f.....|
00000cc0 00 66 59 66 59 66 33 c0 c3 66 8b 16 36 02 67 66 |.fYfYf3..f..6.gf|
00000cd0 8d 52 10 67 66 8b 42 18 66 33 d2 66 f7 36 8e 02 |.R.gf.B.f3.f.6..|
00000ce0 66 33 f6 66 50 66 56 66 58 66 5e 66 3b c6 0f 84 |f3.fPfVfXf^f;...|
00000cf0 3a 00 66 56 66 40 66 50 66 48 e8 1b fe 72 e8 e8 |:[email protected]..|
00000d00 eb fd 66 5a 66 5e 66 59 66 5b 66 53 66 51 66 56 |..fZf^fYf[fSfQfV|
00000d10 66 52 66 a1 46 02 67 66 8d 40 18 e8 d0 f8 66 0b |[email protected].|
00000d20 c0 74 c4 66 59 66 59 66 59 66 59 c3 66 59 66 59 |.t.fYfYfYfY.fYfY|
00000d30 66 33 c0 c3 66 51 66 50 66 b8 05 00 00 00 1e 07 |f3..fQfPf.......|
00000d40 66 8b f9 e8 8d fd 66 8b c1 66 bb 20 00 00 00 66 |f.....f..f. ...f|
00000d50 b9 00 00 00 00 66 ba 00 00 00 00 e8 33 f8 66 5b |.....f......3.f[|
00000d60 66 59 66 85 c0 0f 85 15 00 66 8b c1 66 0f b7 0e |fYf......f..f...|
00000d70 10 02 66 ba 12 02 00 00 e8 16 f8 eb 33 90 66 33 |..f.........3.f3|
00000d80 d2 66 8b c1 66 8b cb 66 50 66 53 e8 23 00 66 5b |.f..f..fPfS.#.f[|
00000d90 66 5f 66 0b c0 0f 84 17 00 1e 07 e8 35 fd 66 8b |f_f.........5.f.|
00000da0 c7 66 0f b7 0e 10 02 66 ba 12 02 00 00 e8 e1 f7 |.f.....f........|
00000db0 c3 66 52 66 51 66 bb 20 00 00 00 66 b9 00 00 00 |.fRfQf. ...f....|
00000dc0 00 66 ba 00 00 00 00 e8 c7 f7 66 0b c0 0f 84 63 |.f........f....c|
00000dd0 00 66 8b d8 1e 07 66 8b 3e 1a 02 66 33 c0 e8 59 |.f....f.>..f3..Y|
00000de0 f8 1e 07 66 8b 1e 1a 02 66 59 66 5a 26 66 39 0f |...f....fYfZ&f9.|
00000df0 0f 85 0c 00 26 66 39 57 08 0f 84 31 00 eb 13 90 |....&f9W...1....|
00000e00 26 66 83 3f ff 0f 84 2f 00 26 83 7f 04 00 0f 84 |&f.?.../.&......|
00000e10 26 00 26 66 0f b7 47 04 03 d8 8b c3 25 00 80 74 |&.&f..G.....%..t|
00000e20 cb 8c c0 05 00 08 8e c0 81 e3 ff 7f eb be 26 66 |..............&f|
00000e30 8b 47 10 c3 66 59 66 5a 66 33 c0 c3 66 50 66 51 |.G..fYfZf3..fPfQ|
00000e40 66 8b c7 66 c1 e8 04 06 59 03 c8 51 07 66 83 e7 |f..f....Y..Q.f..|
00000e50 0f 66 59 66 58 c3 60 06 be 69 0e bf 00 20 1e 07 |.fYfX.`..i... ..|
00000e60 b9 0d 00 90 f3 a5 07 61 c3 01 23 45 67 89 ab cd |.......a..#Eg...|
00000e70 ef fe dc ba 98 76 54 32 10 f0 e1 d2 c3 00 00 00 |.....vT2........|
00000e80 00 20 20 60 8b 36 18 20 26 8a 05 88 04 47 46 66 |. `.6. &....GFf|
00000e90 ff 06 14 20 81 fe 60 20 75 06 e8 5b 00 be 20 20 |... ..` u..[.. |
00000ea0 e2 e6 89 36 18 20 61 c3 66 60 8b 36 18 20 b0 80 |...6. a.f`.6. ..|
00000eb0 88 04 46 32 c0 81 fe 60 20 75 06 e8 3a 00 be 20 |..F2...` u..:.. |
00000ec0 20 81 fe 58 20 75 e9 66 33 c0 66 a3 58 20 66 a1 | ..X u.f3.f.X f.|
00000ed0 14 20 66 c1 e0 03 66 0f c8 66 a3 5c 20 e8 18 00 |. f...f..f.\ ...|
00000ee0 bb 00 20 66 8b 07 66 0f c8 66 89 07 83 c3 04 81 |.. f..f..f......|
00000ef0 fb 34 20 75 ee 66 61 c3 66 60 bb 20 20 66 8b 07 |.4 u.fa.f`. f..|
00000f00 66 0f c8 66 89 07 83 c3 04 81 fb 60 20 75 ee bb |f..f.......` u..|
00000f10 00 20 66 8b 0f 66 8b 57 04 66 8b 77 08 66 8b 7f |. f..f.W.f.w.f..|
00000f20 0c 66 8b 6f 10 bb 20 20 c7 06 1a 20 dc 0f c6 06 |.f.o.. ... ....|
00000f30 1c 20 14 90 53 8b 1e 1a 20 ff 17 66 03 47 02 5b |. ..S... ..f.G.[|
00000f40 66 03 e8 66 03 2f 66 8b c1 66 c1 c0 05 66 03 c5 |f..f./f..f...f..|
00000f50 66 8b ef 66 8b fe 66 8b f2 66 c1 c6 1e 66 8b d1 |f..f..f..f...f..|
00000f60 66 8b c8 66 8b 07 66 33 47 08 66 33 47 20 66 33 |f..f..f3G.f3G f3|
00000f70 47 34 66 d1 c0 66 89 47 40 83 c3 04 fe 0e 1c 20 |G4f..f.G@...... |
00000f80 75 b2 83 06 1a 20 06 81 3e 1a 20 f4 0f 75 9f bb |u.... ..>. ..u..|
00000f90 00 20 66 01 0f 66 01 57 04 66 01 77 08 66 01 7f |. f..f.W.f.w.f..|
00000fa0 0c 66 01 6f 10 66 61 c3 66 8b c6 66 33 c7 66 23 |.f.o.fa.f..f3.f#|
00000fb0 c2 66 33 c7 c3 66 8b c2 66 33 c6 66 33 c7 c3 66 |.f3..f..f3.f3..f|
00000fc0 53 66 8b c2 66 23 c6 66 8b da 66 23 df 66 0b c3 |Sf..f#.f..f#.f..|
00000fd0 66 8b de 66 23 df 66 0b c3 66 5b c3 a8 0f 99 79 |f..f#.f..f[....y|
00000fe0 82 5a b5 0f a1 eb d9 6e bf 0f dc bc 1b 8f b5 0f |.Z.....n........|
00000ff0 d6 c1 62 ca 06 1e 66 60 66 33 db b8 00 bb cd 1a |..b...f`f3......|
00001000 66 23 c0 0f 85 bb 00 66 81 fb 54 43 50 41 0f 85 |f#.....f..TCPA..|
00001010 b0 00 81 f9 02 01 0f 82 a8 00 66 61 90 1f 07 06 |..........fa....|
00001020 1e 66 60 67 80 7b 08 00 0f 85 0c 00 67 66 8d 53 |.f`g.{......gf.S|
00001030 10 67 66 8b 0a eb 25 90 67 66 8d 53 10 67 66 8b |.gf...%.gf.S.gf.|
00001040 4a 28 66 81 f9 00 00 08 00 0f 83 0c 00 67 66 8b |J(f..........gf.|
00001050 42 2c 66 23 c0 0f 84 03 00 66 33 c9 0e 1f e8 f5 |B,f#.....f3.....|
00001060 fd 66 23 c9 0f 84 32 00 66 ba 00 80 00 00 66 3b |.f#...2.f.....f;|
00001070 ca 0f 86 1f 00 66 2b ca 06 66 51 66 57 66 52 66 |.....f+..fQfWfRf|
00001080 8b ca e8 b7 fd e8 fb fd 66 5a 66 5f 66 59 07 66 |........fZf_fY.f|
00001090 03 fa eb da e8 a5 fd e8 e9 fd e8 0b fe 0e 07 66 |...............f|
000010a0 bb 54 43 50 41 66 bf 00 20 00 00 66 b9 14 00 00 |.TCPAf.. ..f....|
000010b0 00 66 b8 07 bb 00 00 66 ba 0a 00 00 00 66 33 f6 |.f.....f.....f3.|
000010c0 cd 1a 66 61 90 1f 07 c3 06 1e 66 60 66 33 db b8 |..fa......f`f3..|
000010d0 00 bb cd 1a 66 23 c0 0f 85 74 00 66 81 fb 54 43 |....f#...t.f..TC|
000010e0 50 41 0f 85 69 00 81 f9 02 01 0f 82 61 00 66 b8 |PA..i.......a.f.|
000010f0 07 bb 00 00 66 bb 54 43 50 41 66 b9 b8 01 00 00 |....f.TCPAf.....|
00001100 66 ba 04 00 00 00 66 33 f6 66 be 4d 42 52 43 68 |f.....f3.f.MBRCh|
00001110 00 00 07 66 bf 00 7c 00 00 cd 1a 66 b8 07 bb 00 |...f..|....f....|
00001120 00 66 bb 54 43 50 41 66 b9 42 00 00 00 66 ba 05 |.f.TCPAf.B...f..|
00001130 00 00 00 66 33 f6 66 be 4d 42 52 44 68 00 00 07 |...f3.f.MBRDh...|
00001140 66 bf 00 7c 00 00 66 81 c7 be 01 00 00 cd 1a 66 |f..|..f........f|
00001150 61 90 1f 07 c3 66 52 66 33 c0 67 80 7b 08 00 0f |a....fRf3.g.{...|
00001160 85 0c 00 67 66 8d 53 10 67 66 8b 02 eb 0b 90 67 |...gf.S.gf.....g|
00001170 66 8d 53 10 67 66 8b 42 28 66 5a c3 06 1e 66 60 |f.S.gf.B(fZ...f`|
00001180 66 0f b7 0e 66 02 66 b8 68 02 00 00 e8 fc fa 66 |f...f.f.h......f|
00001190 0b c0 0f 84 fa 00 66 0f b7 0e 76 02 66 b8 78 02 |......f...v.f.x.|
000011a0 00 00 e8 e6 fa 66 0b c0 0f 84 e4 00 67 66 8b 00 |.....f......gf..|
000011b0 1e 07 66 8b 3e 3e 02 e8 19 f9 66 a1 3e 02 66 bb |..f.>>....f.>.f.|
000011c0 20 00 00 00 66 b9 00 00 00 00 66 ba 00 00 00 00 | ...f.....f.....|
000011d0 e8 be f3 66 85 c0 0f 85 23 00 66 a1 3e 02 66 bb |...f....#.f.>.f.|
000011e0 80 00 00 00 66 b9 00 00 00 00 66 ba 00 00 00 00 |....f.....f.....|
000011f0 e8 9e f3 66 0b c0 0f 85 44 00 e9 93 00 66 33 d2 |...f....D....f3.|
00001200 66 b9 80 00 00 00 66 a1 3e 02 e8 a4 fb 66 0b c0 |f.....f.>....f..|
00001210 0f 84 7c 00 1e 07 66 8b 3e 3e 02 e8 b5 f8 66 a1 |..|...f.>>....f.|
00001220 3e 02 66 bb 80 00 00 00 66 b9 00 00 00 00 66 ba |>.f.....f.....f.|
00001230 00 00 00 00 e8 5a f3 66 0b c0 0f 84 52 00 66 8b |.....Z.f....R.f.|
00001240 d0 66 8b d8 e8 0e ff 66 3d 00 04 00 00 0f 87 3f |.f.....f=......?|
00001250 00 67 66 0f b7 5a 0c 66 81 e3 ff 00 00 00 0f 85 |.gf..Z.f........|
00001260 2e 00 66 8b da 68 00 20 07 66 2b ff 66 a1 3e 02 |..f..h. .f+.f.>.|
00001270 e8 c7 f3 68 00 20 1f 66 33 d2 67 8a 0a 80 f9 00 |...h. .f3.g.....|
00001280 0f 84 0c 00 66 61 90 1f 07 66 b8 01 00 00 00 c3 |....fa...f......|
00001290 66 61 90 1f 07 66 b8 00 00 00 00 c3 06 1e 66 60 |fa...f........f`|
000012a0 8a 16 0e 00 fe c2 2b 26 0b 00 b8 01 02 32 ed b1 |......+&.....2..|
000012b0 01 32 f6 16 07 8b dc cd 13 0f 82 37 00 b9 04 00 |.2.........7....|
000012c0 8b eb 81 c5 be 01 80 7e 00 00 0f 8c 0b 00 83 c5 |.......~........|
000012d0 10 e2 f3 03 26 0b 00 eb cb 68 00 00 07 16 1f 8b |....&....h......|
000012e0 f3 bf 00 7c b9 00 02 fc f3 a4 e8 db fd 68 00 00 |...|.........h..|
000012f0 68 00 7c cb 03 26 0b 00 66 61 90 1f 07 c3 a1 17 |h.|..&..fa......|
00001300 03 e9 69 ee a1 f8 01 e9 63 ee 00 00 00 00 00 00 |..i.....c.......|
00001310 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
*
00001e00 6b 87 08 38 76 c1 48 4e b7 ae 04 04 6e 6c c7 52 |k..8v.HN....nl.R|
00001e10 01 00 00 00 01 00 00 00 00 1e 00 00 00 00 00 00 |................|
00001e20 00 1e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
00001e30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
00001e40 f7 98 d5 dd a0 cb e7 11 bf 4d 80 6e 6f 6e 69 63 |.........M.nonic|
*
00001e60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
*
00002000


# disk dump
ubuntu@ubuntu:~$ sudo dd if=/dev/sda bs=512 count=16 2>/dev/null | hd
00000000 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
*
000001b0 00 00 00 00 00 00 00 00 94 21 52 5a 00 00 00 00 |.........!RZ....|
000001c0 02 00 ee fe ff 00 01 00 00 00 ff ff ff ff 00 00 |................|
000001d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
*
000001f0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 aa |..............U.|
00000200 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
*
00000800 eb 52 90 4e 54 46 53 20 20 20 20 00 02 08 00 00 |.R.NTFS .....|
00000810 00 00 00 00 00 f8 00 00 3f 00 ff 00 00 10 d4 54 |........?......T|
00000820 00 00 00 00 80 00 80 00 ff 4f 80 02 00 00 00 00 |.........O......|
00000830 00 00 0c 00 00 00 00 00 ff 04 28 00 00 00 00 00 |..........(.....|
00000840 f6 00 00 00 01 00 00 00 ee dd 44 d8 20 45 d8 b8 |..........D. E..|
00000850 00 00 00 00 fa 33 c0 8e d0 bc 00 7c fb 68 c0 07 |.....3.....|.h..|
00000860 1f 1e 68 66 00 cb 88 16 0e 00 66 81 3e 03 00 4e |..hf......f.>..N|
00000870 54 46 53 75 15 b4 41 bb aa 55 cd 13 72 0c 81 fb |TFSu..A..U..r...|
00000880 55 aa 75 06 f7 c1 01 00 75 03 e9 dd 00 1e 83 ec |U.u.....u.......|
00000890 18 68 1a 00 b4 48 8a 16 0e 00 8b f4 16 1f cd 13 |.h...H..........|
000008a0 9f 83 c4 18 9e 58 1f 72 e1 3b 06 0b 00 75 db a3 |.....X.r.;...u..|
000008b0 0f 00 c1 2e 0f 00 04 1e 5a 33 db b9 00 20 2b c8 |........Z3... +.|
000008c0 66 ff 06 11 00 03 16 0f 00 8e c2 ff 06 16 00 e8 |f...............|
000008d0 4b 00 2b c8 77 ef b8 00 bb cd 1a 66 23 c0 75 2d |K.+.w......f#.u-|
000008e0 66 81 fb 54 43 50 41 75 24 81 f9 02 01 72 1e 16 |f..TCPAu$....r..|
000008f0 68 07 bb 16 68 52 11 16 68 09 00 66 53 66 53 66 |h...hR..h..fSfSf|
00000900 55 16 16 16 68 b8 01 66 61 0e 07 cd 1a 33 c0 bf |U...h..fa....3..|
00000910 0a 13 b9 f6 0c fc f3 aa e9 fe 01 90 90 66 60 1e |.............f`.|
00000920 06 66 a1 11 00 66 03 06 1c 00 1e 66 68 00 00 00 |.f...f.....fh...|
00000930 00 66 50 06 53 68 01 00 68 10 00 b4 42 8a 16 0e |.fP.Sh..h...B...|
00000940 00 16 1f 8b f4 cd 13 66 59 5b 5a 66 59 66 59 1f |.......fY[ZfYfY.|
00000950 0f 82 16 00 66 ff 06 11 00 03 16 0f 00 8e c2 ff |....f...........|
00000960 0e 16 00 75 bc 07 1f 66 61 c3 a1 f6 01 e8 09 00 |...u...fa.......|
00000970 a1 fa 01 e8 03 00 f4 eb fd 8b f0 ac 3c 00 74 09 |............<.t.|
00000980 b4 0e bb 07 00 cd 10 eb f2 c3 0d 0a 41 20 64 69 |............A di|
00000990 73 6b 20 72 65 61 64 20 65 72 72 6f 72 20 6f 63 |sk read error oc|
000009a0 63 75 72 72 65 64 00 0d 0a 42 4f 4f 54 4d 47 52 |curred...BOOTMGR|
000009b0 20 69 73 20 63 6f 6d 70 72 65 73 73 65 64 00 0d | is compressed..|
000009c0 0a 50 72 65 73 73 20 43 74 72 6c 2b 41 6c 74 2b |.Press Ctrl+Alt+|
000009d0 44 65 6c 20 74 6f 20 72 65 73 74 61 72 74 0d 0a |Del to restart..|
000009e0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
000009f0 00 00 00 00 00 00 8a 01 a7 01 bf 01 00 00 55 aa |..............U.|
00000a00 45 46 49 20 50 41 52 54 00 00 01 00 5c 00 00 00 |EFI PART....\...|
00000a10 9d 6c 57 aa 00 00 00 00 01 00 00 00 00 00 00 00 |.lW.............|
00000a20 af 6d 70 74 00 00 00 00 22 00 00 00 00 00 00 00 |.mpt....".......|
00000a30 8e 6d 70 74 00 00 00 00 9f 44 00 ea ef 79 b7 40 |.mpt.....D...y.@|
00000a40 9a 63 f0 62 ce d0 eb be 02 00 00 00 00 00 00 00 |.c.b............|
00000a50 80 00 00 00 80 00 00 00 40 c1 13 a1 00 00 00 00 |........@.......|
00000a60 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
*
00000c00 28 73 2a c1 1f f8 d2 11 ba 4b 00 a0 c9 3e c9 3b |(s*......K...>.;|
00000c10 1e 5b 6a 1d 62 55 49 4e 87 88 76 6c 57 65 7f 36 |.[j.bUIN..vlWe.6|
00000c20 00 08 00 00 00 00 00 00 ff 67 09 00 00 00 00 00 |.........g......|
00000c30 00 00 00 00 00 00 00 00 d1 cb 4a c0 00 28 00 80 |..........J..(..|
00000c40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
*
00000c80 a4 bb 94 de d1 06 40 4d a1 6a bf d5 01 79 d6 ac |[email protected]..|
00000c90 46 b1 4d 68 93 3a fc 42 a5 6f b0 df 69 ae 1b 7c |F.Mh.:.B.o..i..||
00000ca0 00 68 09 00 00 00 00 00 ff 27 1c 00 00 00 00 00 |.h.......'......|
00000cb0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
*
00000d00 16 e3 c9 e3 5c 0b b8 4d 81 7d f9 2d f0 02 15 ae |....\..M.}.-....|
00000d10 63 9d 9b 6f 9c da 14 40 90 66 16 44 01 6d 0e 58 |[email protected]|
00000d20 00 28 1c 00 00 00 00 00 ff 27 20 00 00 00 00 00 |.(.......' .....|
00000d30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
*
00000d80 a2 a0 d0 eb e5 b9 33 44 87 c0 68 b6 b7 26 99 c7 |......3D..h..&..|
00000d90 e9 10 01 81 b4 28 c4 46 b1 b3 95 26 12 7f fa 0c |.....(.F...&....|
00000da0 00 28 20 00 00 00 00 00 1c 2e 00 23 00 00 00 00 |.( ........#....|
00000db0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
*
00000e00 a2 a0 d0 eb e5 b9 33 44 87 c0 68 b6 b7 26 99 c7 |......3D..h..&..|
00000e10 11 13 f4 c2 bc a0 18 47 a9 85 1c 43 8f 94 00 f8 |.......G...C....|
00000e20 00 b0 0e 23 00 00 00 00 ff 0f d4 54 00 00 00 00 |...#.......T....|
00000e30 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
*
00000e80 a4 bb 94 de d1 06 40 4d a1 6a bf d5 01 79 d6 ac |[email protected]..|
00000e90 3e 79 0a cb 24 5b c3 42 89 a1 76 e0 bb 24 c3 9c |>y..$[.B..v..$..|
00000ea0 00 10 d4 54 00 00 00 00 ff 5f 54 57 00 00 00 00 |...T....._TW....|
00000eb0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 |................|
*
00002000


ubuntu@ubuntu:~$ sudo dd if=/dev/mapper/W10 bs=512 count=1M 2>/dev/null | hd
| grep FILE
00002000 46 49 4c 45 30 00 03 00 f7 12 27 ea 31 00 00 00 |FILE0.....'.1...|
00002400 46 49 4c 45 30 00 03 00 10 25 00 02 00 00 00 00 |FILE0....%......|
00002800 46 49 4c 45 30 00 03 00 56 25 00 02 00 00 00 00 |FILE0...V%......|
00002c00 46 49 4c 45 30 00 03 00 bf 44 00 c4 31 00 00 00 |FILE0....D..1...|
006dc3b0 55 4c 54 5f 46 49 4c 45 5f 4e 41 4d 45 00 4c 4f |ULT_FILE_NAME.LO|
006e0340 49 4e 47 00 41 50 4b 5f 46 49 4c 45 5f 4e 4f 54 |ING.APK_FILE_NOT|
006e20e0 49 47 43 46 5f 50 52 4f 46 49 4c 45 00 44 49 47 |IGCF_PROFILE.DIG|
0086d880 00 a0 25 55 53 45 52 50 52 4f 46 49 4c 45 25 5c |..%USERPROFILE%\|
0086e030 00 a0 25 55 53 45 52 50 52 4f 46 49 4c 45 25 5c |..%USERPROFILE%\|
0086efe0 46 49 4c 45 25 5c 41 70 70 44 61 74 61 5c 4c 6f |FILE%\AppData\Lo|
0086f990 25 55 53 45 52 50 52 4f 46 49 4c 45 25 5c 41 70 |%USERPROFILE%\Ap|
00870320 07 00 00 a0 25 55 53 45 52 50 52 4f 46 49 4c 45 |....%USERPROFILE|
00870c30 52 50 52 4f 46 49 4c 45 25 5c 41 70 70 44 61 74 |RPROFILE%\AppDat|
00a4ffa0 48 5f 46 49 4c 45 29 00 cc cc cc cc cc cc cc cc |H_FILE).........|
00a59b80 4f 46 49 4c 45 5f 50 49 43 54 55 52 45 5f 4f 46 |OFILE_PICTURE_OF|

--