From 793d38baab5ab9d677da7f68ec7b8ab855695bb6 Mon Sep 17 00:00:00 2001
From: Costas K <11378310+kacos2000@users.noreply.github.com>
Date: Thu, 31 Dec 2020 15:54:15 +0200
Subject: [PATCH] Add files via upload

---
 MFTbrowser.ps1 | 56 ++++++++++++++++++++++++++------------------------
 1 file changed, 29 insertions(+), 27 deletions(-)

diff --git a/MFTbrowser.ps1 b/MFTbrowser.ps1
index a24079e..24c71f2 100644
--- a/MFTbrowser.ps1
+++ b/MFTbrowser.ps1
@@ -1,8 +1,10 @@
-<#
+
+#------------------------------------------------------------------------
+<#
     .NOTES
     --------------------------------------------------------------------------------
      Code generated by:  SAPIEN Technologies, Inc., PowerShell Studio 2020 v5.7.182
-     Generated on:       30/12/2020 
+     Generated on:       31/12/2020 
      Generated by:       Costas Katsavounidis
     --------------------------------------------------------------------------------
     .DESCRIPTION
@@ -564,7 +566,7 @@ Should match the 'File reference number' in fsutil"
 				}
 				$headernode.Nodes.Add("Nextavailable", "[0x28] Next Available Attribute ID: $($nrofattributes)")
 				$headernode.Nodes["Nextavailable"].Tag = @("40","2")
-				$headernode.Nodes.Add("MFT_Record_Nr", "[0x28] `$MFT Record Nr: $($recordbnr)")
+				$headernode.Nodes.Add("MFT_Record_Nr", "[0x2C] `$MFT Record Nr: $($recordbnr)")
 				$headernode.Nodes["MFT_Record_Nr"].Tag = @("44", "4")
 				# https://docs.microsoft.com/en-us/windows/win32/devnotes/multi-sector-header
 				$headernode.Nodes.Add("Update sequence Nr", "[0x30] Update sequence Number: $($updatesqnr)")
@@ -9574,7 +9576,7 @@ AAAAAAAAAAAAAAAAAAAAAAAAAAAAgAEAAAs='))
 	[void]$splitcontainer1.Panel1.Controls.Add($treeview1)
 	[void]$splitcontainer1.Panel2.Controls.Add($splitcontainer2)
 	$splitcontainer1.Size = New-Object System.Drawing.Size(2531, 1641)
-	$splitcontainer1.SplitterDistance = 936
+	$splitcontainer1.SplitterDistance = 935
 	$splitcontainer1.SplitterWidth = 6
 	$splitcontainer1.TabIndex = 3
 	$splitcontainer1.TabStop = $False
@@ -9660,7 +9662,7 @@ dD+HD+5i324JOyQ++Hp7sWnjWtav8WCDp4c74D+XIPwBF8beaT1+/VgAAAAASUVORK5CYIIL'))
 	$treeview1.Margin = '28, 24, 28, 24'
 	$treeview1.Name = 'treeview1'
 	$treeview1.ShowNodeToolTips = $True
-	$treeview1.Size = New-Object System.Drawing.Size(932, 1637)
+	$treeview1.Size = New-Object System.Drawing.Size(931, 1637)
 	$treeview1.TabIndex = 0
 	$treeview1.add_BeforeSelect($treeview1_BeforeSelect)
 	$treeview1.add_AfterSelect($treeview1_AfterSelect)
@@ -9680,7 +9682,7 @@ dD+HD+5i324JOyQ++Hp7sWnjWtav8WCDp4c74D+XIPwBF8beaT1+/VgAAAAASUVORK5CYIIL'))
 	$richtextbox1.Name = 'richtextbox1'
 	$richtextbox1.ReadOnly = $True
 	$richtextbox1.ShowSelectionMargin = $True
-	$richtextbox1.Size = New-Object System.Drawing.Size(1585, 376)
+	$richtextbox1.Size = New-Object System.Drawing.Size(1586, 376)
 	$richtextbox1.TabIndex = 0
 	$richtextbox1.Text = ''
 	#
@@ -9754,7 +9756,7 @@ dD+HD+5i324JOyQ++Hp7sWnjWtav8WCDp4c74D+XIPwBF8beaT1+/VgAAAAASUVORK5CYIIL'))
 	$datagridview1.ShowCellErrors = $False
 	$datagridview1.ShowEditingIcon = $False
 	$datagridview1.ShowRowErrors = $False
-	$datagridview1.Size = New-Object System.Drawing.Size(1585, 1251)
+	$datagridview1.Size = New-Object System.Drawing.Size(1586, 1251)
 	$datagridview1.TabIndex = 1
 	$datagridview1.Visible = $False
 	$datagridview1.add_CellMouseEnter($datagridview1_CellMouseEnter)
@@ -13384,7 +13386,7 @@ AAAAAAAAAAAAAAAAAAAAAAAAAAAAgAEAAAs='))
 	[void]$splitcontainer2.Panel1.Controls.Add($toolstrip1)
 	[void]$splitcontainer2.Panel1.Controls.Add($richtextbox1)
 	[void]$splitcontainer2.Panel2.Controls.Add($datagridview1)
-	$splitcontainer2.Size = New-Object System.Drawing.Size(1589, 1641)
+	$splitcontainer2.Size = New-Object System.Drawing.Size(1590, 1641)
 	$splitcontainer2.SplitterDistance = 380
 	$splitcontainer2.SplitterWidth = 6
 	$splitcontainer2.TabIndex = 3
@@ -13734,7 +13736,7 @@ V3r+l7leIiAvDHlrTQXSM4H5tGn/AjkLWg2DRQjrAAAAAElFTkSuQmCCCw=='))
 AAEAAAD/////AQAAAAAAAAAMAgAAAFdTeXN0ZW0uV2luZG93cy5Gb3JtcywgVmVyc2lvbj00LjAu
 MC4wLCBDdWx0dXJlPW5ldXRyYWwsIFB1YmxpY0tleVRva2VuPWI3N2E1YzU2MTkzNGUwODkFAQAA
 ACZTeXN0ZW0uV2luZG93cy5Gb3Jtcy5JbWFnZUxpc3RTdHJlYW1lcgEAAAAERGF0YQcCAgAAAAkD
-AAAADwMAAAAeCwAAAk1TRnQBSQFMAgEBBQEAAVgBAAFYAQABEAEAARABAAT/AQkBAAj/AUIBTQE2
+AAAADwMAAAAeCwAAAk1TRnQBSQFMAgEBBQEAAWABAAFgAQABEAEAARABAAT/AQkBAAj/AUIBTQE2
 AQQGAAE2AQQCAAEoAwABQAMAASADAAEBAQABCAYAAQgYAAGAAgABgAMAAoABAAGAAwABgAEAAYAB
 AAKAAgADwAEAAcAB3AHAAQAB8AHKAaYBAAEzBQABMwEAATMBAAEzAQACMwIAAxYBAAMcAQADIgEA
 AykBAANVAQADTQEAA0IBAAM5AQABgAF8Af8BAAJQAf8BAAGTAQAB1gEAAf8B7AHMAQABxgHWAe8B
@@ -17765,8 +17767,8 @@ Main ($CommandLine)
 # SIG # Begin signature block
 # MIIfcAYJKoZIhvcNAQcCoIIfYTCCH10CAQExDzANBglghkgBZQMEAgEFADB5Bgor
 # BgEEAYI3AgEEoGswaTA0BgorBgEEAYI3AgEeMCYCAwEAAAQQH8w7YFlLCE63JNLG
-# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCBwF1xnlsTHYKJh
-# he1MzOUFWz5HxW3afzyQ415bL9BoT6CCGf4wggQVMIIC/aADAgECAgsEAAAAAAEx
+# KX7zUQIBAAIBAAIBAAIBAAIBADAxMA0GCWCGSAFlAwQCAQUABCB9OCDMjvaBshSv
+# 0GfeoZkHU9MiU478ifZQivz02xu1LaCCGf4wggQVMIIC/aADAgECAgsEAAAAAAEx
 # icZQBDANBgkqhkiG9w0BAQsFADBMMSAwHgYDVQQLExdHbG9iYWxTaWduIFJvb3Qg
 # Q0EgLSBSMzETMBEGA1UEChMKR2xvYmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2ln
 # bjAeFw0xMTA4MDIxMDAwMDBaFw0yOTAzMjkxMDAwMDBaMFsxCzAJBgNVBAYTAkJF
@@ -17909,26 +17911,26 @@ Main ($CommandLine)
 # R3JlYXRlciBNYW5jaGVzdGVyMRAwDgYDVQQHEwdTYWxmb3JkMRgwFgYDVQQKEw9T
 # ZWN0aWdvIExpbWl0ZWQxJDAiBgNVBAMTG1NlY3RpZ28gUlNBIENvZGUgU2lnbmlu
 # ZyBDQQIRALjpohQ9sxfPAIfj9za0FgUwDQYJYIZIAWUDBAIBBQCgTDAZBgkqhkiG
-# 9w0BCQMxDAYKKwYBBAGCNwIBBDAvBgkqhkiG9w0BCQQxIgQg9RN78SiOZZsQq5Ti
-# UJ4SQnB4eBZjgViN1R9ajmBuQN4wDQYJKoZIhvcNAQEBBQAEggEAeG8Lp9ixRxhZ
-# s6sCZr0DkGfBtYh5ILylY63Smly6LxQPWEG4rz+/F2vEGR0G/DYyHLiCo4m8UZBd
-# KWqTmMR5Tci3JNZUF/NhMiPzHQZpvdkdhCgnPQg92SF3VpWL04bsrd2InVRcV7nx
-# 2BfLS5R3Al6sUKgtSOsZT+mMNWwx2nUZ+BpKpt9Rt5LGBqcOJ9t63TWhANfj9Gk9
-# RqZL0OuwW2NYw4M3LRzZM1Uk02EMWVtAiW5IEWhtev4CEXzC4boS0a8PW6UQu4Ig
-# 7SU7eo5Fx+0GWBA6KH9Z+C0L2Al+5W9FQ1KLaCtrD27pcAClezRupC8bsO24BUn9
-# 6+lZ8TsnNaGCArkwggK1BgkqhkiG9w0BCQYxggKmMIICogIBATBrMFsxCzAJBgNV
+# 9w0BCQMxDAYKKwYBBAGCNwIBBDAvBgkqhkiG9w0BCQQxIgQgxUqisflP/+ERIV3w
+# xuXI3B+/OAPNPNoaJMV3EUGeyMMwDQYJKoZIhvcNAQEBBQAEggEAmRN+Oxp47eC0
+# u6mWfuQ1C5lQyk4j71eHLBIjD5TOkChef9TUBoW4tnCbEqe18S3IKeCJj45ypVdq
+# VpzId+p25WnjlxXU27RQh0y0jyRcrej+nwEPdzJeCNL9rm/W1gjKJ3eXe6pt/Ujy
+# PQuA7fh4qU0DprSzzr2wrTALVX6my6cJhnn60hGjBrCoVEAWMAnFezUINLk4MiH2
+# uOcY6VSnoYi3kTXi3jGKzDqjkxFj64aGWvBsftz5g20vNxX95Y28/yv/kcp135zW
+# N9NJW6dnwUEAshaHBNObtKF2Sg1SSHjqPiWxB1xLMMDGveS91Iah2gp5sdJwulLU
+# 8NVSQXWdkqGCArkwggK1BgkqhkiG9w0BCQYxggKmMIICogIBATBrMFsxCzAJBgNV
 # BAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTEwLwYDVQQDEyhHbG9i
 # YWxTaWduIFRpbWVzdGFtcGluZyBDQSAtIFNIQTI1NiAtIEcyAgwkVLh/HhRTrTf6
 # oXgwDQYJYIZIAWUDBAIBBQCgggEMMBgGCSqGSIb3DQEJAzELBgkqhkiG9w0BBwEw
-# HAYJKoZIhvcNAQkFMQ8XDTIwMTIzMDE5MzcyN1owLwYJKoZIhvcNAQkEMSIEIMhe
-# +D8ru0gCAW8WTWvvkPCX8aUV91wlVjfIaIH/yiwqMIGgBgsqhkiG9w0BCRACDDGB
+# HAYJKoZIhvcNAQkFMQ8XDTIwMTIzMTEzNDczNlowLwYJKoZIhvcNAQkEMSIEIG+/
+# Ho7C2MsfuPgTTkDHB4VqqHcjN/2UKmPy56cJuHr9MIGgBgsqhkiG9w0BCRACDDGB
 # kDCBjTCBijCBhwQUPsdm1dTUcuIbHyFDUhwxt5DZS2gwbzBfpF0wWzELMAkGA1UE
 # BhMCQkUxGTAXBgNVBAoTEEdsb2JhbFNpZ24gbnYtc2ExMTAvBgNVBAMTKEdsb2Jh
 # bFNpZ24gVGltZXN0YW1waW5nIENBIC0gU0hBMjU2IC0gRzICDCRUuH8eFFOtN/qh
-# eDANBgkqhkiG9w0BAQEFAASCAQA809GbmxqziwCUTz/ow0cYJZzyoY84/W+RNL67
-# FxNHChxxluk8CdWbcZGUXzQ2Kj/NbOXuKspjKRBjtdGrjhxmX7hJsS4uztOhpg0P
-# T8JRxBDTt0uP0FNgXi/HeutvsBRd2SBaLXXmMQb9Obuw5H+3Pl43KrkPMCGcH8WR
-# B21HRycjQFAosHb8BeX+CoGwyQ3l3tC3HuPyS9yBoQpYFGi4k1Hcrz2LhYU8bHpC
-# jD+qGhRh3USk7CKsIJl8R9WZ73JQ38R/V7042u2lsM9rDTenqSUbS3PyVMY57TGL
-# XTTd44wZ9hHtbFHabXvMH3ufPFBEDBMdiEIZOWAiN34r8Hno
+# eDANBgkqhkiG9w0BAQEFAASCAQBmwo0Cdtl1S3+ePyGEgWFRGWa+GvSvDzgSi0BZ
+# f9rEn4Q0Gf0Mg/lYakJ1vLM9HpkePNn3EnsmbKcUg7YyYV3LLx4Z3dO2xa9f8ZuR
+# T051aMeEoA37RqNprGWWWWfSqBeGNd31rabHucYAARLiIBAuMOoqitlc5/+HkO0p
+# bPXTNBHyxBq38BNLmihyD25DMw7V+8Ac1M6WXQBRHLEagSmO0yGondziHtg06cCu
+# nkXTFSlKyjPNwSxmxX/k9H3dkJWQMY55m8ZBXnRYvmuXEZHIkUB7cZnl/E5mqMMc
+# aReRmhSMrVflsTFUHYf25piX+NIOZRhIDp0fB8dtkZvSe3Sn
 # SIG # End signature block