jschicht / mftrcrd Goto Github PK

I can't use MftRcrd on a specific non-system partition (GPT, if matters). It appears that the record of the $MFT file itself, the record 0, has a $ATTRIBUTE_LIST (0x20 found at position 0x98 in the record; 1024-length records) and it seems to be an issue. The execution of MftRcrd.exe stops with a "Variable used without being declared" error. In particular, the runtime error is at the function _FindFileMFTRecord when it tries to use the variable $MFT_RUN_Clusters.
As a workaround it may be deleted the code for the Case $AttributeType = $ATTRIBUTE_LIST. Normally it works fine but, obviously, now it gives only partial results if a file actually has a $ATTRIBUTE_LIST.

I notice that your program generates a UAC prompt (tested in win7)

Is that really necessary?