.

KGRKJGETMRETU895U-589TY5MIGM5JGB5SDFESFREWTGR54TY

Server : Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
System : Windows NT SERVER-PC 10.0 build 26200 (Windows 11) AMD64
User : ServerPC ( 0)
PHP Version : 8.2.12
Disable Function : NONE
Directory : C:/Windows/System32/en-US/

Upload File :

Current File : C:/Windows/System32/en-US/refsutil.exe.mui

MZ����@��� �!�L�!This program cannot be run in DOS mode.

$�X=��9S��9S��9S������9S���Q��9S�Rich�9S�PEL���"�!&,

Pa@ �)8.rdata�@@.rsrc�) *@@���"
lPP���"$����8.rdata8.rdata$voltmdP�.rdata$zzzdbg �.rsrc$01� �(.rsrc$02 ��.�1Ҳ.Ë��_Ԩ��Y��������"��(�@�X�p����� � � �� ���!d$�F��MUI���u.�����D���ٺ�L��_&*K/���MUIen-US�P�@P�@Z�@[�@H0a�@a�@4c�@c�@44f�@h�@h4j�@k�@�5r�@r�@P7w�@w�@x7y�@|�@�7��@��@�8��@��@�=��@��@�>��@��@?��@��@p?��@��@d@��@��@�A��@��@�B��@��@4D��@��@�F��@��@�F��@��@G��@��@ G��@��@�G��@��@I��@��@�I��@��@�I��@��@\K��@��@�X��@��@�Z�@�@([�@�@�[�@�@�\ �@#�@]%�@%�@�^'�@(�@�_*�@*�@|`,�@,�@ e.�@.�@|e3�@4�@�e6�@7�@$g9�@:�@h@�@@�@XiG�@G�@�qK�@K�@dtN�@U�@�tW�@W�@�yZ�@_�@�yb�@k�@�zp�@p�@ȉs�@s�@��u�@u�@h�y�@{�@T�~�@~�@@���@��@x���@��@P���@��@����@��@�o��o����s��s����v��v����}��}��T��������������������������������������t����������������������������������������������������� �������������,�`��`��8�l��m������������Q��Y����\��`����b��b��T�d��e����i��i���n��n��\�p��q����t��u��8�x��x����~���������������������������@������������������������������D������������������������������h��������������@������p�����T�����x�����$�����$��$��0
&��'��)��)���+��+��L
-��-��/��2��l5��5���8��8��`;��;��@A��F��H��J���L��M��XV��V�� X��Y���a��a��tn��o���q��r���t��t���v��x��8|��}��� �����!������D"�������"8*Attempts to diagnose heavily damaged ReFS volumes, identify remaining files,

and copy those files to another volume.

ReFS Salvage has a Scan Phase and a Copy Phase. In automatic mode, the Scan

Phase and Copy Phase will run sequentially. In manual mode, each phase can be

run separately. Progress and logs are saved in a working directory to allow

phases to be run separately as well as Scan Phase to be paused and resumed.

Here are the automatic mode Command Line Usages:

Quick Automatic Mode Command Line Usage:

refsutil salvage -QA <source volume> <working directory> <target directory> <options>

It will perform a Quick Scan Phase followed by a Copy Phase.

This mode runs quicker as it assumes some critical structures of the volume

are not corrupted and so there is no need to scan the entire volume to

locate them. This also reduces the recovery of stale files/directories/volumes.

Full Automatic Mode Command Line Usage:

refsutil salvage -FA <source volume> <working directory> <target directory> <options>

It will perform a Full Scan Phase followed by a Copy Phase.

This mode may take a long time as it will scan the entire volume for any

recoverable files/directories/volumes.

Here are the manual mode Command Line Usages:

Diagnose Phase Command Line Usage:

refsutil salvage -D <source volume> <working directory> <options>

Attempt to determine if <source volume> is an ReFS volume and determine

if the volume is mountable. When a volume is not-mountable, reason(s) will

be determined. This is a standalone phase.

Quick Scan Phase Command Line Usage:

refsutil salvage -QS <source volume> <working directory> <options>

Quick Scan <source volume> for any recoverable files.

This mode runs quicker as it assumes some critical structures of the volume

are not corrupted and so there is no need to scan the entire volume to

locate them. This also reduces the recovery of stale files/directories/volumes.

Discovered files will be logged to "foundfiles.<volume signature>.txt" under

<working directory>. If the Scan Phase was previously stopped, running with

the -QS flag again will resume the scan from where it left off.

Full Scan Phase Command Line Usage:

refsutil salvage -FS <source volume> <working directory> <options>

Scan entire <source volume> for any recoverable files.

This mode may take a long time as it will scan the entire volume for any

recoverable files.

Discovered files will be logged to "foundfiles.<volume signature>.txt" under

<working directory>. If the Scan Phase was previously stopped, running with

the -FS flag again will resume the scan from where it left off.

Copy Phase Command Line Usage:

refsutil salvage -C <source volume> <working directory> <target directory> <options>

Copy all files described in "foundfiles.<volume signature>.txt" to

<target directory>. If Scan Phase is stopped too early,

"foundfiles.<volume signature>.txt" may not have been written yet and so no file

will be copied to <target directory>.

Copy Phase with List Command Line Usage:

refsutil salvage -SL <source volume> <working directory> <target directory> <file list> <options>

Copy all the files in <file list> from <source volume> to <target directory>.

The files in <file list> must have first been identified by the Scan Phase

though the scan need not have been run to completion.

<file list> can be generated by copying "foundfiles.<volume signature>.txt"

to a new file, removing lines referencing files that shouldn't be restored,

and preserving files that should be restored. The PowerShell cmdlet

Select-String may be helpful in filtering "foundfiles.<volume signature>.txt"

to only include desired paths, extensions, or file names.

Copy Phase with Interactive Console:

refsutil salvage -IC <source volume> <working directory> <options>

Salvage files in an interactive console for advanced users.

This mode also requires files generated from either of the Scan Phases.

Parameter definitions:

<source volume> ReFS volume to process. Drive letter in format "L:",

or a path to the volume mount point.

<working directory> Location to store temporary information and logs.

It must not be located on <source volume>.

<target directory> Location where identified files will be copied to.

It must not be located on <source volume>.

-m Recover all possible files including deleted ones.

This option will be ignored on refsutil salvage v1.

WARNING: Not only this will take longer time to run,

it can lead to unexpected result.

-v Verbose mode

-sv Skip ReFS volume version check. Assume the highest

volume version this tool can handle.

WARNING: May lead to unexpected result.

-hl Assume volume supports hardlink.

-x Force the volume to dismount first if necessary. All

opened handles to the volume would then be invalid.

Eg: refsutil salvage -QA R: N:\WORKING N:\DATA -x

Scanning phase completed.

Copy all files found...

@For more information on a specific command, type HELP command name.

CD Displays the name of or changes the current directory.

COPY Copies one or more files to another location.

DIR Displays a list of files and subdirectories in a directory.

EXIT Quits the ReFS salvage program.

For more information on tools see the ReFS salvage reference in the online help.

4Boot sector checked.

4Superblocks checked.

4Checkpoints checked.

@No corruption is detected.

�Boot sector checked.

Cluster Size: %1!d! (0x%1!x!).

Cluster Count: %2!I64d! (0x%2!I64x!).

�Since boot sector is invalid, assuming cluster size is %1!d! bytes

to search for superblock%!

�Quick scan completed. Assuming cluster size is %1!d! bytes.

Classifying data found during quick scanning...

(

Processing %1

LNo salvageable file found in %1%!

�

Multiple volume metadata files found. Choose which volume to work upon:

%1!d!: %2

H%rInitializing volume from %1.

<Container Table checked.

Object Table checked.

�Running Scan-Phase:

Scanning volume for recoverable files.

Logging discovered files to: foundfiles.<volume signature>.txt

Press Ctrl+C at any time to stop the scan.

Identified files may be copied as soon as the scan finds them by stopping the

scan and running the Copy phase (see the usage text with "refsutil salvage -?" for

more information). A stopped scan may be restarted where it left off by

re-running the Scan phase with the same command line options.

Warning: To get the latest version of files with least corruption,

do not stop the scan%!

�

Examining identified metadata disk data for versioning and consistency.

�

Examining volume with signature %1!x! for salvageable files.

$SALVAGE %1>%0

exit%0

dir%0

cd%0

copy%0

H %1!d! file(s) copied.

�Microsoft ReFS Salvage [Version 10.0.11070]

0Command Completed.

Run time = %1!d! seconds.

�%1!d! container table entry pages processed (%2!d! invalid page(s)).

�Validating discovered table roots on volume with signature %1!x!.

h%1!I64d! table roots validated (%2!d!%%)...%r%0

l%1!I64d! table roots validated (%2!d!%%). %r%n%0

�Enumerating files from discovered tables on volume with signature %1!x!.

`%1!I64d! tables enumerated (%2!d!%%)...%r%0

h%1!I64d! tables enumerated (%2!d!%%). %r%n%0

0 Directory of %1

�%2!02d!/%3!02d!/%4!04d! %5!02d!:%6!02d!:%7!02d! AM <DIR> %1

�%2!02d!/%3!02d!/%4!04d! %5!02d!:%6!02d!:%7!02d! PM <DIR> %1

�%2!02d!/%3!02d!/%4!04d! %5!02d!:%6!02d!:%7!02d! AM %8!17ld! %1

�%2!02d!/%3!02d!/%4!04d! %5!02d!:%6!02d!:%7!02d! PM %8!17ld! %1

,%1!16d! Dir(s)

,Copying: %1...%0

Done

XThis doesn't look like an ReFS volume.

<ReFS version: %1!d!.%2!d!

l%1!I64d! disk clusters analyzed (%2!d!%%)...%r%0

hRead %1!I64d! of %2!I64d! MBs (%3!d!%%)...%r%0

�Processing %1!I64d! of %2!I64d! object table pages (%3!d!%%)...%r%0

tLocal time: %1!d!/%2!d!/%3!d! %4!d!:%5!02d!:%6!02d!

File: %1 %0

,(%2!I64d! bytes).

Resume volume scanning from LCN 0x%1!x!.

�

Resume volume scanning from LCN 0x%1!x! (0x%2!x! each).

�%1!d! container index table entry pages processed (%2!d! invalid page(s)).

�---- Commands Supported ----

fixboot Repair boot sectors

leak Leak Detection and Fixing

salvage Salvage operations for corrupt volume

triage Handle corruptions

streamsnapshot Stream snapshot management

compression Volume compression support

dedup Dedup equivalent clusters

iometrics Volume IO metrics tracking

�
---- Leak Detection and Fixing ----

Usage: refsutil leak <drive> [/a] [/x] [/v] [/d] [/q] [/t <count>] [/s <file>]

/a If leak detection finds a corruption, setting this switch attempt to fix it and re-run leak

detection. With this switch set leak detection will be restarted once for every corrupted

directory found on the volume.

/x Operate holding an exclusive lock on the volume. Without this switch leak detection will

create a snapshot of the volume for processing.

/v Verbose output.

/d Diagnose only. Leaks will be printed to stdout, but not fixed.

/q Query required space for operation.

/t <count> Number of threads to spawn for leak detection. Specifying a value of 0 will run leak detection

synchronously (this is not recommended). Default is 4.

/s <file> Run operation using <file> as a scratch buffer. <file> must be able to grow to the value

reported by /q. Ommision of this switch will create a scratch buffer in %TEMP%.

<drive> Drive letter in format "L:", or a path to the volume mount point.

Note that providing /d alongside /a will triage all found directory/file corruptions, but will not fix leaks.

Eg: refsutil leak D: /a /t 4 /s R:\scratch.tmp

Eg: refsutil leak D: /a /d /v /t 4

Eg: refsutil leak D: /q

lBegin leak verification pass 1 (Cluster leaks)...

�End leak verification pass 1. Found %1!llu! leaked clusters on the volume.

|Begin leak verification pass 2 (Reference count leaks)...

�End leak verification pass 2. Found %1!llu! leaked references on the volume.

|Space required for leak detection and fixing: %1!llu!MB.

lBeginning volume scan... This may take a while...

`Creating volume snapshot on drive %1!s!...

\Running holding volume %1!s! exclusive...

DCreating the scratch file...

�Begin leak verification pass 3 (Compacted cluster leaks)...

HEnd leak verification pass 3.

�Begin leak verification pass 4 (Remaining cluster leaks)...

�End leak verification pass 4. Fixed %1!llu! leaks during this pass.

�Finished.

Found leaked clusters: %1!llu!

Found reference leaks: %2!llu!

Total cluster fixed : %3!llu!

|Leak detection is invoking automatic corruption fixing...

8Scrubbing file "%1!s!"

�---- Triage and corruption handling ----

Usage: refsutil triage <drive> [/s <id>] [/g] [/v]

/s <id> Scrub the directory corresponding to <id>. <id> Is the file id for the directory. This

will scrub all files under the given directory. It can not be used together with /g

option.

/g Scrub the global tables of the volume. It can not be used together with /s <id> option.

/v Verbose output.

<drive> Drive letter in format "L:", or a path to the volume mount point.

Eg: refsutil triage D: /s 15100

Eg: refsutil triage D: /s 16040 /v

\The file "%1!s!" was correctly scrubbed.

PTriage has completed successfully.

pBegin leak verification pass 5 (Hardlink leaks)...

�End leak verification pass 5. Fixed %1!llu! hardlinks, and %1!llu! posix deleted files/dirs during this pass.

PBegin leak verification pass 1 ...

�End leak verification 1. Fixed %1!llu! leaks during this pass.

pBegin leak verification pass 2 (Hardlink leaks)...

�End leak verification pass 2. Fixed %1!llu! hardlinks, and %1!llu! posix deleted files/dirs during this pass.

WARNING: THIS OPERATION CHANGES BOOT SECTOR(S) OF A VOLUME AND CAN RESULT IN TOTAL LOSS OF DATA.

Usage: refsutil fixboot <drive> <MajorVersion> <MinorVersion> <ClusterSize> [-f] [-w <Dir>] [-smr <SMRBandSizeInMB>] [-x]

<drive> Drive letter in format "L:".

<MajorVersion> Major version of the ReFS volume.

<MinorVersion> Minor version of the ReFS volume.

<ClusterSize> Cluster size of the volume. Either 4096 or 65536.

-f Ignore any valid boot sector found. Fix boot sector based on input parameters.

-w <Dir> Actually write to the boot sector(s) if needed and backup the current boot sector(s)

into the backup directory <Dir>.

-smr Specifies this if volume is of SMR format. Cluster size must be 65536.

SMRBandSizeInMB can be 128 or 256.

-x Force the volume to dismount first if necessary. All opened handles to

the volume would then be invalid.

Eg: refsutil fixboot D: 3 3 4096

Eg: refsutil fixboot D: 3 1 65536 -f -w c:\backup

�Found ReFS boot sector at 0x%1!llx! with the following parameters:

Major version : %2!d!

Minor version : %3!d!

Bytes per sector : 0x%4!x!

Sectors per cluster : 0x%5!x!

Cluster size : 0x%6!x!

Number of sectors : 0x%7!llx!

Number of clusters : 0x%8!llx!

Bytes per container : 0x%9!llx!

�Fake writing boot sector at 0x%1!llx! as option -w is not specified

�Proceed to regenerate boot sectors with the following parameters:

Major version : %1!d!

Minor version : %2!d!

Bytes per sector : 0x%3!x!

Sectors per cluster : 0x%4!x!

Cluster size : 0x%5!x!

Number of sectors : 0x%6!llx!

Number of clusters : 0x%7!llx!

Bytes per container : 0x%8!llx!

@Wrote primary boot sector.

<Wrote mirror boot sector.

XSkip looking for any valid boot sector.

@No valid boot sector found.

TFailed to backup primary boot sector.

TFailed to backup mirror boot sector.

,No repair needed.

@Retrying snapshot creation.

8Option(s) specified: %0

-m %0

-v %0

-x %0

<Scrubbing global tables.

`Assume ReFS volume version is %1!d!.%2!d!.

---- Stream Snapshot Management ----

Usage: refsutil streamsnapshot [/c <name>] [/l] [/d <name>] [/q <name>] <file[:stream]>

/c <name> Create a snapshot named <name> of the stream <file[:stream]> at this point in time. This

option is mutually exclusive with [/d], [/l], and [/q].

/d <name> Delete the snapshot <name> from the file <file>. This operation ignores the [:stream]

portion. This option is mutually exclusive with [/c], [/l], and [/q].

/l <name> List all the snapshots for the stream <file[:stream]> matching the string <name>. <name>

may contain wildcards. This option is mutually exclusive with [/c], [/d], and [/q].

/q <name> List all the modifications that have been incurred between the snapshot named <name> and

the stream indicated by [:stream]. Both <name> and [:stream] must reference streams in

the same snapshot chain. <name> must be an older snapshot than the one specified by

[:stream]. This option is mutually exclusive with [/c], [/d], and [/l].

When [:stream] is not provided, this utility acts on the default unnamed data stream, $DATA.

Eg: refsutil streamsnapshot /c "snapshot_jan_2020" C:\file.dat

Eg: refsutil streamsnapshot /d "snapshot_jan_2020" C:\file.dat

Eg: refsutil streamsnapshot /l "*" C:\file.dat

Eg: refsutil streamsnapshot /q "snapshot_jan_2020" C:\file.dat:snapshot_feb_2020

TThe operation completed successfully.

�The operation did not complete successfully. The returned Win32 error code was 0x%1!x!.

�There are no snapshots matching the query string on the provided stream.

�%1!-*s! %2!-*s! %3!-*s! stream size: %4!-*llu! bytes. snapshot size: %5!-*llu! bytes.

tThere are no deltas between the requested snapshots.

�VCN: 0x%1!llx! Clusters: 0x%2!llx! LCN: 0x%3!llx! Properties: 0x%4!x!.

-hl %0

-sv %0

�---- Volume Compression Management ----

Usage: refsutil compression <drive> <[/q]>|<[/c] [/f <format>] [/e <engine>] [/cs <size>]>

/q Query volume compression parameters.

/c Compress the volume with the provided compression parameters.

/f Compression format to compress with. Valid values:

- LZ4,

- ZSTD,

- NONE.

Use NONE to decompress a compressed volume. When this option is provided,

the engine and compression chunk size must be omitted.

/e Compression level to compress with, dependent on the compression format selected.

Omit this parameter or use 0 to pick the default level for any given compression

format. The defaults are subject to change.

Valid values:

- LZ4: 1, 3-12. Default: 1.

Values in the range 3-12 utilize the LZ4 HC algorithm, which achieves greater

compression ratios at the cost of greatly reduced compression speed. Decompression

speed is independent of the selected compression level.

- ZSTD: 1-22. Default: 3.

Larger values provide higher compression ratios at the cost of reduced compression

speeds. Values greater/equal to 20 require higher memory consumption. Decompression

speed is independent of the selected compression level.

/cs Compression chunk size to compress with, in bytes. Must be a power of two larger or

equal to the volumes cluster size, and no greater than 64mb. Larger values yield larger

compression ratios at the cost of read performance penalties for reading amounts of data

smaller than the chunk size. Diminishing returns are drastic after 1mb, and as such are

not recommended. Omitting this parameter or using 0 will pick the volumes cluster size.

Eg: refsutil compression /q R:

Eg: refsutil compression /c /f LZ4 /e 12 /cs 524288 R:

Eg: refsutil compression /c /f ZSTD /e 15 /cs 131072 R:

Eg: refsutil compression /c /f ZSTD R:

Eg: refsutil compression /c /f NONE R:

�Compression format: %1!s!

Compression level: %2!d!

Compression chunk size: %3!s!%4!s!

Volume size: %5!s!%6!s!

Total logical data on volume: %7!s!%8!s!

Uncompressed size of compressed data: %9!s!%10!s!

Compressed size of compressed data: %11!s!%12!s!

Estimated garbage collection savings: %13!s!%14!s!

Percentage of volume data compressed: %15!s!%%

Compression efficiency: %16!s!%%

Compression efficiency (w/o GC): %17!s!%%

Last compression run NTSTATUS: 0x%18!08x!

�Usage: refsutil dedup <volume path/mount point> [/d] [/s] [/cpu <percentage>] [/mm]

<drive> Volume path or mount point.

/d Dedup volume; mutually exclusive with /s flag.

/s Scan volume to determine how much space can be saved by deduplicating equivalent clusters.

Mutually exclusive with /d flag.

/mm Use memory mapped file I/O to read files to dedup. Default is to use async reads with IOCP.

Must be used in conjunction with /d or /s flags.

/cpu Specify the maximum percentage of CPU to use. Valid values are [1-100].

Eg: refsutil dedup D: /s

Eg: refsutil dedup D: /d /cpu 50

\Volume compression is currently running.

\Volume compression is currently stopped.

4Bytes saved: %1!llu!

8---- Volume IO Metrics Tracking ----

Usage: refsutil iometrics <drive> <[/q]>|<[/s] [/st <seconds>]>

/q Query volume heat parameters.

/s Set volume heat parameters.

/st Number of seconds the volume should track IO access for.

/sp Periodicity in seconds of io metrics tracking.

/sg Number of periods to track per volume tracking unit.

For the /st, /sp, and /sg options ReFS will enforce these values to lie within

suitable ranges, and will reassign these values to filesystem minimums if required.

These values can be omitted, in which case ReFS will pick defaults. Minimum values

are as follows, and subject to change:

/st: 3600.

/sp: 10.

/sg: 5.

Eg: refsutil heat /q R:

Eg: refsutil heat /s R:

Eg: refsutil heat /s /st 604800 R:

�Volume heat parameters have been successfully changed and will take effect after the next volume mount.

LIO statistics tracking window: %1!d! seconds.

IO statistics periodicity: %2!d! seconds.

Periods per volume tracking unit: %3!d! periods.

pUnable to query volume IO metrics data. GLE: %1!d!

(---- Volume Compression Management ----

Usage:

refsutil rollbackprotection freeze [-allowMountOnRollbackDetection] [-userPayloadFile <PayloadFilePath>] [-volumePath] <VolumePath>

refsutil rollbackprotection query [-userPayloadFile <PayloadFilePath>] [-volumePath] <VolumePath>

Eg:

refsutil rollbackprotection query C:

refsutil rollbackprotection freeze -userPayloadFile customPayload.bin C:

<Volume GUID: %1!ws!

Rollback Protection GUID: %2!ws!

Fail Mount on Rollback: %3!u!

Frozen Virtual Clock: %4!I64u!

Current Virtual Clock: %5!I64u!

Frozen Root Checksum: %6!ws!

Checksum Type: %7!ws!

User Payload: %8!I64u! bytes

xFreezing current volume state for rollback protection.

�Freezing succeeded. Querying persisted rollback protection status:

\Reading custom payload from file: %1!ws!

XWriting custom payload to file: %1!ws!

|Unfreezing current volume state for rollback protection.

4Unfreezing succeeded.

�Clearing boot volume GUID from UEFI for rollback protection.

PBoot volume GUID cleared from UEFI.

�---- Rollback Protection ----

WARNING: Do not use this feature unless you are certain of the consequences. Improper use

can result in machine being in an unbootable and unrecoverable state.

Usage:

refsutil rollbackprotection freeze [-allowMountOnRollbackDetection] [-userPayloadFile <PayloadFilePath>] [-volumePath] <VolumePath>

refsutil rollbackprotection unfreeze [-volumePath] <VolumePath>

refsutil rollbackprotection clearBootGuid

refsutil rollbackprotection query [-userPayloadFile <PayloadFilePath>] [-volumePath] <VolumePath>

Eg:

refsutil rollbackprotection query C:

refsutil rollbackprotection freeze -userPayloadFile customPayload.bin C:

refsutil rollbackprotection unfreeze C:

refsutil rollbackprotection clearBootGuid

�Usage: fsutil rollbackprotection failMountOnRollbackDetection <option>

This command allows user to clear/query/set the behavior of whether to fail mount

when rollback has been detected. This applies to all volumes on the system and when

this setting is present, it overwrites the per-volume setting when freeze was invoked.

clear - clear the setting for failMountOnRollbackDetection

query - query the setting for failMountOnRollbackDetection

set <0|1> - set the value to 0 (false) or 1 (true)

Eg: refsutil rollbackprotection failMountOnRollbackDetection clear

refsutil rollbackprotection failMountOnRollbackDetection query

refsutil rollbackprotection failMountOnRollbackDetection set 0

�Clearing failMountOnRollbackDetection UEFI setting for rollback protection.

�UEFI setting failMountOnRollbackDetection has been cleared.

tUEFI setting failMountOnRollbackDetection is not set.

HFail Mount on Rollback: %1!u!

�Setting failMountOnRollbackDetection UEFI setting for rollback protection.

�UEFI setting failMountOnRollbackDetection has been set to %1!u!.

�---- Rollback Protection ----

WARNING: Do not use this feature unless you are certain of the consequences. Improper use

can result in machine being in an unbootable and unrecoverable state.

Usage:

refsutil rollbackprotection freeze [-allowMountOnRollbackDetection] [-userPayloadFile <PayloadFilePath>] [-volumePath] <VolumePath>

refsutil rollbackprotection unfreeze [-volumePath] <VolumePath>

refsutil rollbackprotection clearBootGuid

refsutil rollbackprotection query [-userPayloadFile <PayloadFilePath>] [-volumePath] <VolumePath>

refsutil rollbackprotection failMountOnRollbackDetection <query|clear|set <0|1>>

Eg:

refsutil rollbackprotection query C:

refsutil rollbackprotection freeze -userPayloadFile customPayload.bin C:

refsutil rollbackprotection unfreeze C:

refsutil rollbackprotection clearBootGuid

refsutil rollbackprotection failMountOnRollbackDetection query

refsutil rollbackprotection failMountOnRollbackDetection set 0

�Skipped %1!I64u! files totalling %2!I64u!MB in volume with signature %3!x!.

�Warning: Error occurred while quick scanning volume.

Assuming cluster size is %1!d! bytes.

@Cannot open file list %1%!

�Cannot load container table for volume with signature %1!x!.

DCannot initialize volume %1%!

t%1!d! error(s) encountered while scanning partition.

�Cannot process metadata tables for volume with signature %1!x!%!

XWarning: Cannot find root info for Table[0x%1!I64x!'%2!I64x!] on volume with signature %3!x!%!

Directory name and info are lost because of corruption/writes.

�Invalid path with loop found for Table[0x%1!I64x!'%2!I64x!]%!

�Cannot find any disk pages for container tables for volume with signature %1!x!%!

�Cannot find any disk pages for primary container table for volume with signature %1!x!.

�Cannot find undamaged root for primary container table for volume with signature %1!x!%!

�Cannot find any disk pages for dup container table for volume with signature %1!x!.

�Cannot find undamaged root for dup container table for volume with signature %1!x!.

�Cannot allocate memory for container table for volume with signature %1!x!.

hThere is no root in Table[0x%1!I64x!'%2!I64x!].

<Cannot allocate memory%!

hCannot enumerate file extents for source file%!

tCannot translate virtual LCN 0x%1!I64x! to real LCN%!

`Cannot read at partition offset 0x%1!I64x!.

�Cannot write to file at file offset 0x%1!I64x! for 0x%2!x! bytes%!

�Cannot read parent directory page hosting the root of file %1%!

�Parent directory page hosting the root of file %1 is invalid%!

�Parent directory page hosting the root of file %1 is a director page%!

tCannot get file pair info for root entry of file %1%!

xFile pair info for file %1 is not a name index entry%!

hFile pair info for file %1 is not for a file%!

TCannot allocate memory for file %1%!

XCannot open the file root of file %1%!

<Cannot open output file%!

\Cannot set end of file for output file%!

<Cannot copy data stream%!

DCannot set output file size%!

@Couldn't read boot sector%!

Warning:

�Reading at offset 0x%1!I64x! failed%! Total error encountered is %2!d!.

�Cannot find any disk pages for container index table for volume with signature %1!x!%!

�Cannot find undamaged root for container index table for volume with signature %1!x!%!

Unable to delete created snapshot due to it being the newest one. The snapshot will be automatically deleted on volume dismount.

PUnable to locate file table for %1.

�

Mismatch between number of composite table(s) found versus expected count.

Composite tables ordering is inconsistent.

�Skipped copying %1 of %2!I64u! bytes as it has exceeded the file size limit of %3!I64u!MB.

�Skipped copying %1 of %2!I64u! bytes as it would have exceeded the space usage limit of %3!I64u!GB.

�Skipped copying %1 of %2!I64u! bytes as it would have dropped the free space remaining limit to below %3!I64u!GB.

�Failed to query free space remaining on target directory. GLE %1!d!.

DInvalid target directory %1%!

DInvalid source directory %1%!

DInvalid parameters detected%!

4No phase specified%!

DSource volume not specified%!

LWorking directory not specified%!

LTarget directory not specified%!

<File list not specified%!

8Failed to open volume.

DInvalid operation requested%!

HFailure to write %1... to file.

hInvalid ScanUnitSize of %1 while expecting %2.

<Cannot read boot sector%!

4Invalid boot sector%!

4No valid superblock%!

DVolume initialization failed.

4No valid checkpoint%!

\Partition length of 0x%1!d! is too small.

DData classification failed%!

@Invalid working directory%!

XFinding volume signature files failed%!

@Cannot initialize volume%!

�Cannot open metadata file for volume with signature %1!x!.

�Error: No volume metadata files found%!

Please run quick scan or full scan phase first%!

`Cannot find root directory for volume %1%!

xCannot find root page of root directory for volume %1%!

lCannot create working file to record index LCNs%!

`The system cannot find the path specified.

\Cannot find root page for directory %1%!

HThe target path not specified.

4Cannot copy file %1%!

8Initialization failed.

(Command failed.

Cannot open file %1 for write access%!

tCannot find volume signature from meta-data file %1%!

lCannot find cluster size from meta-data file %1%!

lCannot initialize volume for meta-data file %1%!

HCannot load meta-data file %1%!

XKeyRules library initialization failed.

XChecksum library initialization failed.

XCannot truncate file %1 to zero size%!

Error:

LIncompatible switches detected%!

hThe system cannot find the file name specified.

<Failed to open volume: %1

LFailed to dismount the volume: %1

DFailed to lock the volume: %1

DFailed to set file pointer%!

4Failed to read file%!

XFailed to query file size for file: %1

pFailed to obtain container range for leaked range.

�Encountered corruption (LCN in use but unallocated) at LCN 0x%1!016llx!. Halting leak detection.

0Found corruption (aliased refcount) in refcount analysis at CLCN %1!016llx! Real refcount: %2!d! Reported refcount: %3!d!. Stopping leak detection.

LUnable to create event. GLE %1!d!

TUnable to open file %1!s!. GLE %2!d!

(Error GLE:%1!d!

XUnable to lock drive %1!s!. GLE: %2!d!

@Unable to open drive %1!s!.

\Unable to open %%TEMP%% path. GLE: %2!d!

4Unable to build path.

|Failed to create temporary scratch file %1!s!. GLE: %2!d!

�Failed to set file pointer for file to %1!llu! bytes. GLE: %2!d!

xFailed to set EOF for file to %1!llu! bytes. GLE: %2!d!

�Failed to create virtual file mapping for file. GLE: %1!d!

pFailed to map virtual file into memory. GLE: %1!d!

lFailed to create scratch file for leak detection.

�Found aliased metadata tuple at LCN %1!016llx!. Stopping leak detection.

|Failed to create snapshot for leak detection. GLE: %1!d!

dFailed to mount the ReFS volume. NT: %1!08x!

\Failed to create transaction. NT: %1!08x!

dFailed to enumerate table: %1!s!. NT: %2!08x!

XThe volume %1!s! is not a ReFS volume.

4Invalid thread count.

�The volume is an unsupported ReFS version. This utility supports versions up to %1!d!.%2!d!. Volume is %3!d!.%4!d!.

|Leak detection and fixing did not complete successfully.

hThis program requires administrator privileges.

`Unable to dismount drive %1!s!. GLE: %2!d!

PUnable to unlock drive. GLE: %1!d!

�There are not enough system resources to satisfy the requested operation.

�The volume contains an invalid or corrupt ReFS boot sector. The volume may not be a ReFS volume.

xUnable to initialize the Minstore library. NT: %1!08x!

|There was an error sparsing the scratch file. GLE: %1!d!

�There was an error reserving space for the scratch file. Your disk may be full.

�There was an error reading or writing from the scratch file. Your disk may be full.

xThere was an error querying the volume for allocations.

�There was an error adding reserved ranges to the scratch file.

hThere was an error during verification pass 1.

hThere was an error during verification pass 2.

�There was an error opening the ReFS volume in read/write mode for leak repairs. GLE: %1!d!

�There was an error processing certain leaks.

Not all leaks on the volume may have been fixed. NT: %1!08x!

�There was an error initializing the repair engine. Leak detection is unable to continue.

�Encountered corruption (Index allocated but free) at LCN 0x%1!016llx!. Halting leak detection.

�There was an error processing certain leaks.

Not all leaks on the volume may have been fixed. NT: %1!08x!

�The supplied drive is mounted read-only or write protected.

(Leak detection found corruption in a directory. Please re-run leak detection with the "/a" switch or invoke "refsutil triage %1!s! /s %2!llu!".

�Leak detection found corruption for file ID 0x%1!016llx!`%2!016llx!.

�An invalid directory ID was provided. The directory ID is the upper 64 bits of the file ID.

`Error scrubbing file "%1!s!". Error: %2!d!

�This volume cannot currently undergo triage. We are sorry for the inconvenience.

�Triage attempted to scrub the ID, but due to a file system limitation it cannot guarantee success.

HTriage failed with error %1!d!.

XTriage was unable to open file "%1!s!".

�There was an error fixing a hardlink leak. Not all leaks on the volume may have been fixed. NT: %1!08x!

�There was an error processing certain leaks.

Not all leaks on the volume may have been fixed. NT: %1!08x!

�There was an error fixing a hardlink leak. Not all leaks on the volume may have been fixed. NT: %1!08x!

8Failed to write file%!

DCouldn't write boot sector%!

@Couldn't read boot sector%!

Boot sector at 0x%1!llx! contains invalid value(s):

Major version : %1!d!

Minor version : %2!d!

Bytes per sector : 0x%3!x!

Sectors per cluster : 0x%4!x!

Number of sectors : 0x%5!llx!

Bytes per container : 0x%6!llx!

TCouldn't write primary boot sector%!

hBoot sector at 0x%1!llx! has checksum failure%!

�Found valid boot sector at 0x%1!llx! with:

Cluster size : 0x%1!x!

Number of Clusters : 0x%2!llx!

tUpdated primary boot sector with mirror boot sector.

PCouldn't write mirror boot sector%!

XBoot sector at 0x%1!llx! not readable.

pBoot sector at 0x%1!llx! doesn't appear to be ReFS.

xAn instance of refsutil already exists for drive %1!s!.

�Scan state file TotalScanUnitCount (0x%1!llx!) does not match that of the current volume.

The current volume has 0x%2!llx! LCNs in it.

Please specifies the correct volume or working directory.

LCurrent LCN (0x%1!llx!) scanned larger than TotalScanUnitCount (0x%2!llx!) of the volume

in the scan state file. Please starts with an empty working directory.

TCannot open file %1 for read access%!

�Failed to create allocation state log file %1!s!. GLE: %2!d!

|Failed to write to allocation state log file. GLE: %1!d!

TUnable to compress volume. GLE: %1!d!

�Unable to query volume compression information. GLE: %1!d!

�Leak detection is currently unsupported on volumes utilizing compression.

lInvalid number of partitions for the hash index.

�Invalid chunk size for dedup; must be either 4096 or 65536 (bytes).

�Invalid maximum CPU utilization value; must be between 1-100%.

\Unable to optimize storage. GLE: 0x%1!x!

�Invalid maximum number of files concurrently opened for optimization; must be between 1-512

lUnable to set volume heat parameters. GLE: %1!d!

pUnable to query volume heat parameters. GLE: %1!d!

XChecksum objects initialization failed.

`Compression library initialization failed.

PSector size of 0x%1!d! is invalid.

PFailed to create event. GLE %1!u!.

XFailed to read boot sector. GLE %1!u!.

�4VS_VERSION_INFO��
H�e
H�e?�StringFileInfo�040904B0LCompanyNameMicrosoft CorporationB
FileDescriptionrefsutil.exen'FileVersion10.0.26100.3912 (WinBuild.160101.0800):
InternalNamerefsutil.exe�.LegalCopyright� Microsoft Corporation. All rights reserved.JOriginalFilenamerefsutil.exe.muij%ProductNameMicrosoft� Windows� Operating SystemDProductVersion10.0.26100.3912DVarFileInfo$Translation �PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGX

Anon7 - 2021