def get_mft_buffer(self): mft_lcn = self._vbr.mft_lcn() g_logger.debug("mft: %x", mft_lcn * 4096) mft_chunk = self._clusters[mft_lcn] mft_record = MFTRecord(mft_chunk, 0, None, inode=INODE_MFT) mft_data_attribute = mft_record.data_attribute() return self.get_attribute_data(mft_data_attribute)
def get_mftmirr_buffer(self): g_logger.debug("mft mirr: %s", hex(self._vbr.mftmirr_lcn() * 4096)) mftmirr_chunk = self._clusters[self._vbr.mftmirr_lcn()] mftmirr_mft_record = MFTRecord(mftmirr_chunk, INODE_MFTMIRR * MFT_RECORD_SIZE, None, inode=INODE_MFTMIRR) mftmirr_data_attribute = mftmirr_mft_record.data_attribute() return self.get_attribute_data(mftmirr_data_attribute)