refsutil.exe

Associated Error Codes

Below lists error codes and symbolic names found for this module.

Code	Found in	Description
0x40002710	10	Attempts to diagnose heavily damaged ReFS volumes, identify remaining files, and copy those files to another volume. ReFS Salvage has a Scan Phase and a Copy Phase. In automatic mode, the Scan Phase and Copy Phase will run sequentially. In manual mode, each phase can be run separately. Progress and logs are saved in a working directory to allow phases to be run separately as well as Scan Phase to be paused and resumed. Here are the automatic mode Command Line Usages: Quick Automatic Mode Command Line Usage: refsutil salvage -QA It will perform a Quick Scan Phase followed by a Copy Phase. This mode runs quicker as it assumes some critical structures of the volume are not corrupted and so there is no need to scan the entire volume to locate them. This also reduces the recovery of stale files/directories/volumes. Full Automatic Mode Command Line Usage: refsutil salvage -FA It will perform a Full Scan Phase followed by a Copy Phase. This mode may take a long time as it will scan the entire volume for any recoverable files/directories/volumes. Here are the manual mode Command Line Usages: Diagnose Phase Command Line Usage: refsutil salvage -D Attempt to determine if is an ReFS volume and determine if the volume is mountable. When a volume is not-mountable, reason(s) will be determined. This is a standalone phase. Quick Scan Phase Command Line Usage: refsutil salvage -QS Quick Scan for any recoverable files. This mode runs quicker as it assumes some critical structures of the volume are not corrupted and so there is no need to scan the entire volume to locate them. This also reduces the recovery of stale files/directories/volumes. Discovered files will be logged to "foundfiles..txt" under . If the Scan Phase was previously stopped, running with the -QS flag again will resume the scan from where it left off. Full Scan Phase Command Line Usage: refsutil salvage -FS Scan entire for any recoverable files. This mode may take a long time as it will scan the entire volume for any recoverable files. Discovered files will be logged to "foundfiles..txt" under . If the Scan Phase was previously stopped, running with the -FS flag again will resume the scan from where it left off. Copy Phase Command Line Usage: refsutil salvage -C Copy all files described in "foundfiles..txt" to . If Scan Phase is stopped too early, "foundfiles..txt" may not have been written yet and so no file will be copied to . Copy Phase with List Command Line Usage: refsutil salvage -SL Copy all the files in from to . The files in must have first been identified by the Scan Phase though the scan need not have been run to completion. can be generated by copying "foundfiles..txt" to a new file, removing lines referencing files that shouldn't be restored, and preserving files that should be restored. The PowerShell cmdlet Select-String may be helpful in filtering "foundfiles..txt" to only include desired paths, extensions, or file names. Copy Phase with Interactive Console: refsutil salvage -IC Salvage files in an interactive console for advanced users. This mode also requires files generated from either of the Scan Phases. Parameter definitions: ReFS volume to process. Drive letter in format "L:", or a path to the volume mount point. Location to store temporary information and logs. It must not be located on . Location where identified files will be copied to. It must not be located on . -m Recover all possible files including deleted ones. This option will be ignored on refsutil salvage v1. WARNING: Not only this will take longer time to run, it can lead to unexpected result. -v Verbose mode -x Force the volume to dismount first if necessary. All opened handles to the volume would then be invalid. Eg: refsutil salvage -QA R: N:\WORKING N:\DATA -x
0x4000271a	10	Scanning phase completed. Copy all files found...
0x4000271b	10	For more information on a specific command, type HELP command name. CD Displays the name of or changes the current directory. COPY Copies one or more files to another location. DIR Displays a list of files and subdirectories in a directory. EXIT Quits the ReFS salvage program. For more information on tools see the ReFS salvage reference in the online help.
0x40002721	10	Boot sector checked.
0x40002723	10	Superblocks checked.
0x40002726	10	Checkpoints checked.
0x40002727	10	No corruption is detected.
0x40002728	10	Boot sector checked. Cluster Size: %1!d! (0x%1!x!). Cluster Count: %2!I64d! (0x%2!I64x!).
0x4000272a	10	Since boot sector is invalid, assuming cluster size is %1!d! bytes to search for superblock!
0x4000272b	10	Quick scan completed. Assuming cluster size is %1!d! bytes. Classifying data found during quick scanning...
0x40002732	10	Processing %1
0x40002737	10	No salvageable file found in %1!
0x40002739	10	Multiple volume metadata files found. Choose which volume to work upon:
0x4000273a	10	%1!d!: %2
0x4000273b	10
0x4000273c	10	Initializing volume from %1.
0x40002740	10	Container Table checked.
0x40002741	10	Object Table checked.
0x40002742	10	Running Scan-Phase: Scanning volume for recoverable files. Logging discovered files to: foundfiles..txt Press Ctrl+C at any time to stop the scan. Identified files may be copied as soon as the scan finds them by stopping the scan and running the Copy phase (see the usage text with "refsutil salvage -?" for more information). A stopped scan may be restarted where it left off by re-running the Scan phase with the same command line options. Warning: To get the latest version of files with least corruption, do not stop the scan!
0x40002745	10	Examining identified metadata disk data for versioning and consistency.
0x40002746	10	Examining volume with signature %1!x! for salvageable files.
0x40002748	10	SALVAGE %1>
0x4000274c	10	exit
0x4000274d	10	dir
0x4000274e	10	cd
0x4000274f	10	copy
0x40002754	10	%1!d! file(s) copied.
0x40002755	10	Microsoft ReFS Salvage [Version 10.0.11070] Copyright (c) 2015 Microsoft Corp.
0x40002758	10	Command Completed.
0x40002759	10	Run time = %1!d! seconds.
0x4000275a	10	%1!d! container table entry pages processed (%2!d! invalid page(s)).
0x4000275b	10	Validating discovered table roots on volume with signature %1!x!.
0x4000275d	10	%1!I64d! table roots validated (%2!d!%)...
0x4000275e	10	%1!I64d! table roots validated (%2!d!%).
0x40002760	10	Enumerating files from discovered tables on volume with signature %1!x!.
0x40002761	10	%1!I64d! tables enumerated (%2!d!%)...
0x40002762	10	%1!I64d! tables enumerated (%2!d!%).
0x40002772	10	Directory of %1
0x40002773	10	%2!02d!/%3!02d!/%4!04d! %5!02d!:%6!02d!:%7!02d! AM %1
0x40002774	10	%2!02d!/%3!02d!/%4!04d! %5!02d!:%6!02d!:%7!02d! PM %1
0x40002775	10	%2!02d!/%3!02d!/%4!04d! %5!02d!:%6!02d!:%7!02d! AM %8!17ld! %1
0x40002776	10	%2!02d!/%3!02d!/%4!04d! %5!02d!:%6!02d!:%7!02d! PM %8!17ld! %1
0x40002777	10	%1!16d! Dir(s)
0x40002779	10	%1
0x4000278a	10	Copying: %1...
0x4000278f	10	Done
0x40002791	10	This doesn't look like an ReFS volume.
0x40002792	10	ReFS version: %1!d!.%2!d!
0x40002796	10	%1!I64d! disk clusters analyzed (%2!d!%)...
0x40002797	10	Read %1!I64d! of %2!I64d! MBs (%3!d!%)...
0x40002798	10	Processing %1!I64d! of %2!I64d! object table pages (%3!d!%)...
0x4000279a	10	Local time: %1!d!/%2!d!/%3!d! %4!d!:%5!02d!:%6!02d!
0x4000279c	10	File: %1
0x4000279d	10	(%2!I64d! bytes).
0x400027a6	10	Resume volume scanning from LCN 0x%1!x!.
0x400027a7	10	Resume volume scanning from LCN 0x%1!x! (0x%2!x! each).
0x400027a8	10	%1!d! container index table entry pages processed (%2!d! invalid page(s)).
0x400027ab	10	---- Commands Supported ---- fixboot Repair boot sectors leak Leak Detection and Fixing salvage Salvage operations for corrupt volume triage Handle corruptions
0x400027ac	10	---- Leak Detection and Fixing ---- Usage: refsutil leak [/a] [/x] [/v] [/d] [/q] [/t ] [/s ] /a If leak detection finds a corruption, setting this switch attempt to fix it and re-run leak detection. With this switch set leak detection will be restarted once for every corrupted directory found on the volume. /x Operate holding an exclusive lock on the volume. Without this switch leak detection will create a snapshot of the volume for processing. /v Verbose output. /d Diagnose only. Leaks will be printed to stdout, but not fixed. /q Query required space for operation. /t Number of threads to spawn for leak detection. Specifying a value of 0 will run leak detection synchronously (this is not recommended). Default is 4. /s Run operation using as a scratch buffer. must be able to grow to the value reported by /q. Ommision of this switch will create a scratch buffer in %TEMP. Drive letter in format "L:", or a path to the volume mount point. Note that providing /d alongside /a will triage all found directory/file corruptions, but will not fix leaks. Eg: refsutil leak D: /a /t 4 /s R:\scratch.tmp Eg: refsutil leak D: /a /d /v /t 4 Eg: refsutil leak D: /q
0x400027ae	10	Begin leak verification pass 1 (Cluster leaks)...
0x400027af	10	End leak verification pass 1. Found %1!llu! leaked clusters on the volume.
0x400027b0	10	Begin leak verification pass 2 (Reference count leaks)...
0x400027b2	10	End leak verification pass 2. Found %1!llu! leaked references on the volume.
0x400027c2	10	Space required for leak detection and fixing: %1!llu!MB.
0x400027cf	10	Beginning volume scan... This may take a while...
0x400027d0	10	Creating volume snapshot on drive %1!s!...
0x400027d1	10	Running holding volume %1!s! exclusive...
0x400027d6	10	Creating the scratch file...
0x400027e0	10	Begin leak verification pass 3 (Compacted cluster leaks)...
0x400027e1	10	End leak verification pass 3.
0x400027e2	10	Begin leak verification pass 4 (Remaining cluster leaks)...
0x400027e3	10	End leak verification pass 4. Fixed %1!llu! leaks during this pass.
0x400027e5	10	Finished. Found leaked clusters: %1!llu! Found reference leaks: %2!llu! Total cluster fixed : %3!llu!
0x400027e7	10	Leak detection is invoking automatic corruption fixing...
0x400027e8	10	Scrubbing file "%1!s!"
0x400027ea	10	---- Triage and corruption handling ---- Usage: refsutil triage [/s ] [/g] [/v] /s Scrub the directory corresponding to . Is the file id for the directory. This will scrub all files under the given directory. It can not be used together with /g option. /g Scrub the global tables of the volume. It can not be used together with /s option. /v Verbose output. Drive letter in format "L:", or a path to the volume mount point. Eg: refsutil triage D: /s 15100 Eg: refsutil triage D: /s 16040 /v
0x400027ec	10	The file "%1!s!" was correctly scrubbed.
0x400027ee	10	Triage has completed succesfully.
0x40002800	10	WARNING: THIS OPERATION CHANGES BOOT SECTOR(S) OF A VOLUME AND CAN RESULT IN TOTAL LOSS OF DATA. Usage: refsutil fixboot [-f] [-w ] [-smr ] [-x] Drive letter in format "L:". Major version of the ReFS volume. Minor version of the ReFS volume. Cluster size of the volume. Either 4096 or 65536. -f Ignore any valid boot sector found. Fix boot sector based on input parameters. -w Actually write to the boot sector(s) if needed and backup the current boot sector(s) into the backup directory . -smr Specifies this if volume is of SMR format. Cluster size must be 65536. SMRBandSizeInMB can be 128 or 256. -x Force the volume to dismount first if necessary. All opened handles to the volume would then be invalid. Eg: refsutil fixboot D: 3 3 4096 Eg: refsutil fixboot D: 3 1 65536 -f -w c:\backup
0x40002807	10	Found ReFS boot sector at 0x%1!llx! with the following parameters: Major version : %2!d! Minor version : %3!d! Bytes per sector : 0x%4!x! Sectors per cluster : 0x%5!x! Cluster size : 0x%6!x! Number of sectors : 0x%7!llx! Number of clusters : 0x%8!llx! Bytes per container : 0x%9!llx!
0x4000280b	10	Fake writing boot sector at 0x%1!llx! as option -w is not specified
0x4000280e	10	Proceed to regenerate boot sectors with the following parameters: Major version : %1!d! Minor version : %2!d! Bytes per sector : 0x%3!x! Sectors per cluster : 0x%4!x! Cluster size : 0x%5!x! Number of sectors : 0x%6!llx! Number of clusters : 0x%7!llx! Bytes per container : 0x%8!llx!
0x4000280f	10	Wrote primary boot sector.
0x40002810	10	Wrote mirror boot sector.
0x40002811	10	Skip looking for any valid boot sector.
0x40002812	10	No valid boot sector found.
0x40002813	10	Failed to backup primary boot sector.
0x40002814	10	Failed to backup mirror boot sector.
0x40002815	10	No repair needed.
0x40002817	10	Retrying snapshot creation.
0x4000281a	10	Option(s) specified:
0x4000281b	10	-m
0x4000281c	10	-v
0x4000281d	10	-x
0x4000281e	10
0x4000281f	10	Scrubbing global tables.
0x8000272f	10	Warning: Error occurred while quick scanning volume. Assuming cluster size is %1!d! bytes.
0x80002733	10	Cannot open file list %1!
0x80002736	10	Cannot load container table for volume with signature %1!x!.
0x8000273d	10	Cannot initialize volume %1!
0x80002744	10	%1!d! error(s) encountered while scanning partition.
0x80002747	10	Cannot process metadata tables for volume with signature %1!x!!
0x8000275c	10	Warning: Cannot find root info for Table[0x%1!I64x!'%2!I64x!] on volume with signature %3!x!! Directory name and info are lost because of corruption/writes.
0x80002763	10	Invalid path with loop found for Table[0x%1!I64x!'%2!I64x!]!
0x8000276c	10	Cannot find any disk pages for container tables for volume with signature %1!x!!
0x8000276d	10	Cannot find any disk pages for primary container table for volume with signature %1!x!.
0x8000276e	10	Cannot find undamaged root for primary container table for volume with signature %1!x!!
0x8000276f	10	Cannot find any disk pages for dup container table for volume with signature %1!x!.
0x80002770	10	Cannot find undamaged root for dup container table for volume with signature %1!x!.
0x80002771	10	Cannot allocate memory for container table for volume with signature %1!x!.
0x8000277a	10	There is no root in Table[0x%1!I64x!'%2!I64x!].
0x8000277c	10	Cannot allocate memory!
0x8000277d	10	Cannot enumerate file extents for source file!
0x8000277e	10	Cannot translate virtual LCN 0x%1!I64x! to real LCN!
0x8000277f	10	Cannot read at partition offset 0x%1!I64x!.
0x80002780	10	Cannot write to file at file offset 0x%1!I64x! for 0x%2!x! bytes!
0x80002781	10	Cannot read parent directory page hosting the root of file %1!
0x80002782	10	Parent directory page hosting the root of file %1 is invalid!
0x80002783	10	Parent directory page hosting the root of file %1 is a director page!
0x80002784	10	Cannot get file pair info for root entry of file %1!
0x80002785	10	File pair info for file %1 is not a name index entry!
0x80002786	10	File pair info for file %1 is not for a file!
0x80002788	10	Cannot allocate memory for file %1!
0x80002789	10	Cannot open the file root of file %1!
0x8000278b	10	Cannot open output file!
0x8000278c	10	Cannot set end of file for output file!
0x8000278d	10	Cannot copy data stream!
0x8000278e	10	Cannot set output file size!
0x80002790	10	Couldn't read boot sector!
0x80002794	10	Warning:
0x800027a4	10	Reading at offset 0x%1!I64x! failed! Total error encountered is %2!d!.
0x800027a9	10	Cannot find any disk pages for container index table for volume with signature %1!x!!
0x800027aa	10	Cannot find undamaged root for container index table for volume with signature %1!x!!
0x800027c6	10	Unable to delete created snapshot due to it being the newest one. The snapshot will be automatically deleted on volume dismount.
0xc0002711	10	Invalid target directory %1!
0xc0002712	10	Invalid source directory %1!
0xc0002713	10	Invalid parameters detected!
0xc0002714	10	No phase specified!
0xc0002715	10	Source volume not specified!
0xc0002716	10	Working directory not specified!
0xc0002717	10	Target directory not specified!
0xc0002718	10	File list not specified!
0xc0002719	10	Failed to open volume.
0xc000271c	10	Invalid operation requested!
0xc000271d	10	Failure to write %1... to file.
0xc000271e	10	Invalid ScanUnitSize of %1 while expecting %2.
0xc000271f	10	Cannot read boot sector!
0xc0002720	10	Invalid boot sector!
0xc0002722	10	No valid superblock!
0xc0002724	10	Volume initialization failed.
0xc0002725	10	No valid checkpoint!
0xc0002729	10	Partition length of 0x%1!d! is too small.
0xc000272e	10	Data classification failed!
0xc0002730	10	Invalid working directory!
0xc0002731	10	Finding volume signature files failed!
0xc0002734	10	Cannot initialize volume!
0xc0002735	10	Cannot open metadata file for volume with signature %1!x!.
0xc0002738	10	Error: No volume metadata files found! Please run quick scan or full scan phase first!
0xc000273e	10	Cannot find root directory for volume %1!
0xc000273f	10	Cannot find root page of root directory for volume %1!
0xc0002749	10	Cannot create working file to record index LCNs!
0xc0002750	10	The system cannot find the path specified.
0xc0002751	10	Cannot find root page for directory %1!
0xc0002752	10	The target path not specified.
0xc0002753	10	Cannot copy file %1!
0xc0002756	10	Initialization failed.
0xc0002757	10	Command failed.
0xc000275f	10	Cannot open file %1 for write access!
0xc0002764	10	Cannot find volume signature from meta-data file %1!
0xc0002765	10	Cannot find cluster size from meta-data file %1!
0xc0002766	10	Cannot initialize volume for meta-data file %1!
0xc0002767	10	Cannot load meta-data file %1!
0xc000276a	10	KeyRules library initialization failed.
0xc000276b	10	Checksum library initialization failed.
0xc0002778	10	Cannot truncate file %1 to zero size!
0xc0002793	10	Error:
0xc0002795	10	Incompatible switches detected!
0xc0002799	10	The system cannot find the file name specified.
0xc000279e	10	Failed to open volume: %1
0xc000279f	10	Failed to dismount the volume: %1
0xc00027a0	10	Failed to lock the volume: %1
0xc00027a1	10	Failed to set file pointer!
0xc00027a2	10	Failed to read file!
0xc00027a3	10	Failed to query file size for file: %1
0xc00027ad	10	Failed to obtain container range for leaked range.
0xc00027ae	10	Encountered corruption (LCN in use but unallocated) at LCN 0x%1!016llx!. Halting leak detection.
0xc00027b1	10	Found corruption (aliased refcount) in refcount analysis at CLCN %1!016llx! Real refcount: %2!d! Reported refcount: %3!d!. Stopping leak detection.
0xc00027b3	10	Unable to create event. GLE %1!d!
0xc00027b4	10	Unable to open file %1!s!. GLE %2!d!
0xc00027b5	10	Error GLE:%1!d!
0xc00027b6	10	Unable to lock drive %1!s!. GLE: %2!d!
0xc00027b7	10	Unable to open drive %1!s!.
0xc00027b8	10	Unable to open %TEMP% path. GLE: %2!d!
0xc00027b9	10	Unable to build path.
0xc00027ba	10	Failed to create temporary scratch file %1!s!. GLE: %2!d!
0xc00027bb	10	Failed to set file pointer for file to %1!llu! bytes. GLE: %2!d!
0xc00027bc	10	Failed to set EOF for file to %1!llu! bytes. GLE: %2!d!
0xc00027bd	10	Failed to create virtual file mapping for file. GLE: %1!d!
0xc00027be	10	Failed to map virtual file into memory. GLE: %1!d!
0xc00027bf	10	Failed to create scratch file for leak detection.
0xc00027c0	10	Found aliased metadata tuple at LCN %1!016llx!. Stopping leak detection.
0xc00027c1	10	Failed to create snapshot for leak detection. GLE: %1!d!
0xc00027c3	10	Failed to mount the ReFS volume. NT: %1!08x!
0xc00027c4	10	Failed to create transaction. NT: %1!08x!
0xc00027c5	10	Failed to enumerate table: %1!s!. NT: %2!08x!
0xc00027c7	10	The volume %1!s! is not a ReFS volume.
0xc00027c8	10	Invalid thread count.
0xc00027c9	10	The volume is an unsupported ReFS version. This utility supports versions up to %1!d!.%2!d!. Volume is %3!d!.%4!d!.
0xc00027ca	10	Leak detection and fixing did not complete successfully.
0xc00027cb	10	This program requires administrator privileges.
0xc00027cc	10	Unable to dismount drive %1!s!. GLE: %2!d!
0xc00027cd	10	Unable to unlock drive. GLE: %1!d!
0xc00027ce	10	There are not enough system resources to satisfy the requested operation.
0xc00027d2	10	The volume contains an invalid or corrupt ReFS boot sector. The volume may not be a ReFS volume.
0xc00027d3	10	Unable to initialize the Minstore library. NT: %1!08x!
0xc00027d4	10	There was an error sparsing the scratch file. GLE: %1!d!
0xc00027d5	10	There was an error reserving space for the scratch file. Your disk may be full.
0xc00027d7	10	There was an error reading or writing from the scratch file. Your disk may be full.
0xc00027d8	10	There was an error querying the volume for allocations.
0xc00027d9	10	There was an error adding reserved ranges to the scratch file.
0xc00027da	10	There was an error during verification pass 1.
0xc00027db	10	There was an error during verification pass 2.
0xc00027dc	10	There was an error opening the ReFS volume in read/write mode for leak repairs. GLE: %1!d!
0xc00027dd	10	There was an error processing certain leaks. Not all leaks on the volume may have been fixed. NT: %1!08x!
0xc00027de	10	There was an error initializing the repair engine. Leak detection is unable to continue.
0xc00027df	10	Encountered corruption (Index allocated but free) at LCN 0x%1!016llx!. Halting leak detection.
0xc00027e4	10	There was an error processing certain leaks. Not all leaks on the volume may have been fixed. NT: %1!08x!
0xc00027e6	10	The supplied drive is mounted read-only or write protected.
0xc00027e7	10	Leak detection found corruption in a directory. Please re-run leak detection with the "/a" switch or invoke "refsutil triage %1!s! /s %2!llu!".
0xc00027e9	10	Leak detection found corruption for file ID 0x%1!016llx!`%2!016llx!.
0xc00027eb	10	An invalid directory ID was provided. The directory ID is the upper 64 bits of the file ID.
0xc00027ed	10	Error scrubbing file "%1!s!". Error: %2!d!
0xc00027ef	10	This volume cannot currently undergo triage. We are sorry for the inconvenience.
0xc00027f0	10	Triage attempted to scrub the ID, but due to a file system limitation it cannot guarantee success.
0xc00027f1	10	Triage failed with error %1!d!.
0xc00027f2	10	Triage was unable to open file "%1!s!".
0xc0002801	10	Failed to write file!
0xc0002802	10	Couldn't write boot sector!
0xc0002803	10	Couldn't read boot sector!
0xc0002804	10	Boot sector at 0x%1!llx! contains invalid value(s): Major version : %1!d! Minor version : %2!d! Bytes per sector : 0x%3!x! Sectors per cluster : 0x%4!x! Number of sectors : 0x%5!llx! Bytes per container : 0x%6!llx!
0xc0002805	10	Couldn't write primary boot sector!
0xc0002806	10	Boot sector at 0x%1!llx! has checksum failure!
0xc0002808	10	Found valid boot sector at 0x%1!llx! with: Cluster size : 0x%1!x! Number of Clusters : 0x%2!llx!
0xc0002809	10	Updated primary boot sector with mirror boot sector.
0xc000280a	10	Couldn't write mirror boot sector!
0xc000280c	10	Boot sector at 0x%1!llx! not readable.
0xc000280d	10	Boot sector at 0x%1!llx! doesn't appear to be ReFS.
0xc0002816	10	An instance of refsutil already exists for drive %1!s!.
0xc0002818	10	Scan state file TotalScanUnitCount (0x%1!llx!) does not match that of the current volume. The current volume has 0x%2!llx! LCNs in it. Please specifies the correct volume or working directory.
0xc0002819	10	Current LCN (0x%1!llx!) scanned larger than TotalScanUnitCount (0x%2!llx!) of the volume in the scan state file. Please starts with an empty working directory.
0x4000c350	11	Attempts to diagnose heavily damaged ReFS volumes, identify remaining files, and copy those files to another volume. ReFS Salvage has a Scan Phase and a Copy Phase. In automatic mode, the Scan Phase and Copy Phase will run sequentially. In manual mode, each phase can be run separately. Progress and logs are saved in a working directory to allow phases to be run separately as well as Scan Phase to be paused and resumed. Here are the automatic mode Command Line Usages: Quick Automatic Mode Command Line Usage: refsutil salvage -QA It will perform a Quick Scan Phase followed by a Copy Phase. This mode runs quicker as it assumes some critical structures of the volume are not corrupted and so there is no need to scan the entire volume to locate them. This also reduces the recovery of stale files/directories/volumes. Full Automatic Mode Command Line Usage: refsutil salvage -FA It will perform a Full Scan Phase followed by a Copy Phase. This mode may take a long time as it will scan the entire volume for any recoverable files/directories/volumes. Here are the manual mode Command Line Usages: Diagnose Phase Command Line Usage: refsutil salvage -D Attempt to determine if is an ReFS volume and determine if the volume is mountable. When a volume is not-mountable, reason(s) will be determined. This is a standalone phase. Quick Scan Phase Command Line Usage: refsutil salvage -QS Quick Scan for any recoverable files. This mode runs quicker as it assumes some critical structures of the volume are not corrupted and so there is no need to scan the entire volume to locate them. This also reduces the recovery of stale files/directories/volumes. Discovered files will be logged to "foundfiles..txt" under . If the Scan Phase was previously stopped, running with the -QS flag again will resume the scan from where it left off. Full Scan Phase Command Line Usage: refsutil salvage -FS Scan entire for any recoverable files. This mode may take a long time as it will scan the entire volume for any recoverable files. Discovered files will be logged to "foundfiles..txt" under . If the Scan Phase was previously stopped, running with the -FS flag again will resume the scan from where it left off. Copy Phase Command Line Usage: refsutil salvage -C Copy all files described in "foundfiles..txt" to . If Scan Phase is stopped too early, "foundfiles..txt" may not have been written yet and so no file will be copied to . Copy Phase with List Command Line Usage: refsutil salvage -SL Copy all the files in from to . The files in must have first been identified by the Scan Phase though the scan need not have been run to completion. can be generated by copying "foundfiles..txt" to a new file, removing lines referencing files that shouldn't be restored, and preserving files that should be restored. The PowerShell cmdlet Select-String may be helpful in filtering "foundfiles..txt" to only include desired paths, extensions, or file names. Copy Phase with Interactive Console: refsutil salvage -IC Salvage files in an interactive console for advanced users. This mode also requires files generated from either of the Scan Phases. Parameter definitions: ReFS volume to process. Drive letter in format "L:", or a path to the volume mount point. Location to store temporary information and logs. It must not be located on . Location where identified files will be copied to. It must not be located on . -m Recover all possible files including deleted ones. This option will be ignored on refsutil salvage v1. WARNING: Not only this will take longer time to run, it can lead to unexpected result. -v Verbose mode -sv Skip ReFS volume version check. Assume the highest volume version this tool can handle. WARNING: May lead to unexpected result. -hl Assume volume supports hardlink. -x Force the volume to dismount first if necessary. All opened handles to the volume would then be invalid. Eg: refsutil salvage -QA R: N:\WORKING N:\DATA -x
0x4000c35a	11	Scanning phase completed. Copy all files found...
0x4000c35b	11	For more information on a specific command, type HELP command name. CD Displays the name of or changes the current directory. COPY Copies one or more files to another location. DIR Displays a list of files and subdirectories in a directory. EXIT Quits the ReFS salvage program. For more information on tools see the ReFS salvage reference in the online help.
0x4000c361	11	Boot sector checked.
0x4000c363	11	Superblocks checked.
0x4000c366	11	Checkpoints checked.
0x4000c367	11	No corruption is detected.
0x4000c368	11	Boot sector checked. Cluster Size: %1!d! (0x%1!x!). Cluster Count: %2!I64d! (0x%2!I64x!).
0x4000c36a	11	Since boot sector is invalid, assuming cluster size is %1!d! bytes to search for superblock!
0x4000c36b	11	Quick scan completed. Assuming cluster size is %1!d! bytes. Classifying data found during quick scanning...
0x4000c372	11	Processing %1
0x4000c377	11	No salvageable file found in %1!
0x4000c379	11	Multiple volume metadata files found. Choose which volume to work upon:
0x4000c37a	11	%1!d!: %2
0x4000c37b	11
0x4000c37c	11	Initializing volume from %1.
0x4000c380	11	Container Table checked.
0x4000c381	11	Object Table checked.
0x4000c382	11	Running Scan-Phase: Scanning volume for recoverable files. Logging discovered files to: foundfiles..txt Press Ctrl+C at any time to stop the scan. Identified files may be copied as soon as the scan finds them by stopping the scan and running the Copy phase (see the usage text with "refsutil salvage -?" for more information). A stopped scan may be restarted where it left off by re-running the Scan phase with the same command line options. Warning: To get the latest version of files with least corruption, do not stop the scan!
0x4000c385	11	Examining identified metadata disk data for versioning and consistency.
0x4000c386	11	Examining volume with signature %1!x! for salvageable files.
0x4000c388	11	SALVAGE %1>
0x4000c38c	11	exit
0x4000c38d	11	dir
0x4000c38e	11	cd
0x4000c38f	11	copy
0x4000c394	11	%1!d! file(s) copied.
0x4000c395	11	Microsoft ReFS Salvage [Version 10.0.11070] Copyright (c) 2015 Microsoft Corp.
0x4000c398	11	Command Completed.
0x4000c399	11	Run time = %1!d! seconds.
0x4000c39a	11	%1!d! container table entry pages processed (%2!d! invalid page(s)).
0x4000c39b	11	Validating discovered table roots on volume with signature %1!x!.
0x4000c39d	11	%1!I64d! table roots validated (%2!d!%)...
0x4000c39e	11	%1!I64d! table roots validated (%2!d!%).
0x4000c3a0	11	Enumerating files from discovered tables on volume with signature %1!x!.
0x4000c3a1	11	%1!I64d! tables enumerated (%2!d!%)...
0x4000c3a2	11	%1!I64d! tables enumerated (%2!d!%).
0x4000c3b2	11	Directory of %1
0x4000c3b3	11	%2!02d!/%3!02d!/%4!04d! %5!02d!:%6!02d!:%7!02d! AM %1
0x4000c3b4	11	%2!02d!/%3!02d!/%4!04d! %5!02d!:%6!02d!:%7!02d! PM %1
0x4000c3b5	11	%2!02d!/%3!02d!/%4!04d! %5!02d!:%6!02d!:%7!02d! AM %8!17ld! %1
0x4000c3b6	11	%2!02d!/%3!02d!/%4!04d! %5!02d!:%6!02d!:%7!02d! PM %8!17ld! %1
0x4000c3b7	11	%1!16d! Dir(s)
0x4000c3b9	11	%1
0x4000c3ca	11	Copying: %1...
0x4000c3cf	11	Done
0x4000c3d1	11	This doesn't look like an ReFS volume.
0x4000c3d2	11	ReFS version: %1!d!.%2!d!
0x4000c3d6	11	%1!I64d! disk clusters analyzed (%2!d!%)...
0x4000c3d7	11	Read %1!I64d! of %2!I64d! MBs (%3!d!%)...
0x4000c3d8	11	Processing %1!I64d! of %2!I64d! object table pages (%3!d!%)...
0x4000c3da	11	Local time: %1!d!/%2!d!/%3!d! %4!d!:%5!02d!:%6!02d!
0x4000c3dc	11	File: %1
0x4000c3dd	11	(%2!I64d! bytes).
0x4000c3e6	11	Resume volume scanning from LCN 0x%1!x!.
0x4000c3e7	11	Resume volume scanning from LCN 0x%1!x! (0x%2!x! each).
0x4000c3e8	11	%1!d! container index table entry pages processed (%2!d! invalid page(s)).
0x4000c3eb	11	---- Commands Supported ---- fixboot Repair boot sectors leak Leak Detection and Fixing salvage Salvage operations for corrupt volume triage Handle corruptions streamsnapshot Stream snapshot management compression Volume compression support dedup Dedup equivalent clusters iometrics Volume IO metrics tracking
0x4000c3ec	11	---- Leak Detection and Fixing ---- Usage: refsutil leak [/a] [/x] [/v] [/d] [/q] [/t ] [/s ] /a If leak detection finds a corruption, setting this switch attempt to fix it and re-run leak detection. With this switch set leak detection will be restarted once for every corrupted directory found on the volume. /x Operate holding an exclusive lock on the volume. Without this switch leak detection will create a snapshot of the volume for processing. /v Verbose output. /d Diagnose only. Leaks will be printed to stdout, but not fixed. /q Query required space for operation. /t Number of threads to spawn for leak detection. Specifying a value of 0 will run leak detection synchronously (this is not recommended). Default is 4. /s Run operation using as a scratch buffer. must be able to grow to the value reported by /q. Ommision of this switch will create a scratch buffer in %TEMP. Drive letter in format "L:", or a path to the volume mount point. Note that providing /d alongside /a will triage all found directory/file corruptions, but will not fix leaks. Eg: refsutil leak D: /a /t 4 /s R:\scratch.tmp Eg: refsutil leak D: /a /d /v /t 4 Eg: refsutil leak D: /q
0x4000c3ee	11	Begin leak verification pass 1 (Cluster leaks)...
0x4000c3ef	11	End leak verification pass 1. Found %1!llu! leaked clusters on the volume.
0x4000c3f0	11	Begin leak verification pass 2 (Reference count leaks)...
0x4000c3f2	11	End leak verification pass 2. Found %1!llu! leaked references on the volume.
0x4000c402	11	Space required for leak detection and fixing: %1!llu!MB.
0x4000c40f	11	Beginning volume scan... This may take a while...
0x4000c410	11	Creating volume snapshot on drive %1!s!...
0x4000c411	11	Running holding volume %1!s! exclusive...
0x4000c416	11	Creating the scratch file...
0x4000c420	11	Begin leak verification pass 3 (Compacted cluster leaks)...
0x4000c421	11	End leak verification pass 3.
0x4000c422	11	Begin leak verification pass 4 (Remaining cluster leaks)...
0x4000c423	11	End leak verification pass 4. Fixed %1!llu! leaks during this pass.
0x4000c425	11	Finished. Found leaked clusters: %1!llu! Found reference leaks: %2!llu! Total cluster fixed : %3!llu!
0x4000c427	11	Leak detection is invoking automatic corruption fixing...
0x4000c428	11	Scrubbing file "%1!s!"
0x4000c42a	11	---- Triage and corruption handling ---- Usage: refsutil triage [/s ] [/g] [/v] /s Scrub the directory corresponding to . Is the file id for the directory. This will scrub all files under the given directory. It can not be used together with /g option. /g Scrub the global tables of the volume. It can not be used together with /s option. /v Verbose output. Drive letter in format "L:", or a path to the volume mount point. Eg: refsutil triage D: /s 15100 Eg: refsutil triage D: /s 16040 /v
0x4000c42c	11	The file "%1!s!" was correctly scrubbed.
0x4000c42e	11	Triage has completed successfully.
0x4000c433	11	Begin leak verification pass 5 (Hardlink leaks)...
0x4000c434	11	End leak verification pass 5. Fixed %1!llu! hardlinks, and %1!llu! posix deleted files/dirs during this pass.
0x4000c436	11	Begin leak verification pass 1 ...
0x4000c437	11	End leak verification 1. Fixed %1!llu! leaks during this pass.
0x4000c439	11	Begin leak verification pass 2 (Hardlink leaks)...
0x4000c43a	11	End leak verification pass 2. Fixed %1!llu! hardlinks, and %1!llu! posix deleted files/dirs during this pass.
0x4000c440	11	WARNING: THIS OPERATION CHANGES BOOT SECTOR(S) OF A VOLUME AND CAN RESULT IN TOTAL LOSS OF DATA. Usage: refsutil fixboot [-f] [-w ] [-smr ] [-x] Drive letter in format "L:". Major version of the ReFS volume. Minor version of the ReFS volume. Cluster size of the volume. Either 4096 or 65536. -f Ignore any valid boot sector found. Fix boot sector based on input parameters. -w Actually write to the boot sector(s) if needed and backup the current boot sector(s) into the backup directory . -smr Specifies this if volume is of SMR format. Cluster size must be 65536. SMRBandSizeInMB can be 128 or 256. -x Force the volume to dismount first if necessary. All opened handles to the volume would then be invalid. Eg: refsutil fixboot D: 3 3 4096 Eg: refsutil fixboot D: 3 1 65536 -f -w c:\backup
0x4000c447	11	Found ReFS boot sector at 0x%1!llx! with the following parameters: Major version : %2!d! Minor version : %3!d! Bytes per sector : 0x%4!x! Sectors per cluster : 0x%5!x! Cluster size : 0x%6!x! Number of sectors : 0x%7!llx! Number of clusters : 0x%8!llx! Bytes per container : 0x%9!llx!
0x4000c44b	11	Fake writing boot sector at 0x%1!llx! as option -w is not specified
0x4000c44e	11	Proceed to regenerate boot sectors with the following parameters: Major version : %1!d! Minor version : %2!d! Bytes per sector : 0x%3!x! Sectors per cluster : 0x%4!x! Cluster size : 0x%5!x! Number of sectors : 0x%6!llx! Number of clusters : 0x%7!llx! Bytes per container : 0x%8!llx!
0x4000c44f	11	Wrote primary boot sector.
0x4000c450	11	Wrote mirror boot sector.
0x4000c451	11	Skip looking for any valid boot sector.
0x4000c452	11	No valid boot sector found.
0x4000c453	11	Failed to backup primary boot sector.
0x4000c454	11	Failed to backup mirror boot sector.
0x4000c455	11	No repair needed.
0x4000c457	11	Retrying snapshot creation.
0x4000c45a	11	Option(s) specified:
0x4000c45b	11	-m
0x4000c45c	11	-v
0x4000c45d	11	-x
0x4000c45e	11
0x4000c45f	11	Scrubbing global tables.
0x4000c462	11	Assume ReFS volume version is %1!d!.%2!d!.
0x4000c463	11	---- Stream Snapshot Management ---- Usage: refsutil streamsnapshot [/c ] [/l] [/d ] [/q ] /c Create a snapshot named of the stream at this point in time. This option is mutually exclusive with [/d], [/l], and [/q]. /d Delete the snapshot from the file . This operation ignores the [:stream] portion. This option is mutually exclusive with [/c], [/l], and [/q]. /l List all the snapshots for the stream matching the string . may contain wildcards. This option is mutually exclusive with [/c], [/d], and [/q]. /q List all the modifications that have been incurred between the snapshot named and the stream indicated by [:stream]. Both and [:stream] must reference streams in the same snapshot chain. must be an older snapshot than the one specified by [:stream]. This option is mutually exclusive with [/c], [/d], and [/l]. When [:stream] is not provided, this utility acts on the default unnamed data stream, $DATA. Eg: refsutil streamsnapshot /c "snapshot_jan_2020" C:\file.dat Eg: refsutil streamsnapshot /d "snapshot_jan_2020" C:\file.dat Eg: refsutil streamsnapshot /l "*" C:\file.dat Eg: refsutil streamsnapshot /q "snapshot_jan_2020" C:\file.dat:snapshot_feb_2020
0x4000c464	11	The operation completed successfully.
0x4000c465	11	The operation did not complete successfully. The returned Win32 error code was 0x%1!x!.
0x4000c466	11	There are no snapshots matching the query string on the provided stream.
0x4000c467	11	%1!-s! %2!-s! %3!-s! stream size: %4!-llu! bytes. snapshot size: %5!-*llu! bytes.
0x4000c468	11	There are no deltas between the requested snapshots.
0x4000c469	11	VCN: 0x%1!llx! Clusters: 0x%2!llx! LCN: 0x%3!llx! Properties: 0x%4!x!.
0x4000c46a	11	-hl
0x4000c46b	11	-sv
0x4000c470	11	---- Volume Compression Management ---- Usage: refsutil compression <[/q]>\|<[/c] [/f ] [/e ] [/cs ]> /q Query volume compression parameters. /c Compress the volume with the provided compression parameters. /f Compression format to compress with. Valid values: - LZ4, - ZSTD, - NONE. Use NONE to decompress a compressed volume. When this option is provided, the engine and compression chunk size must be omitted. /e Compression level to compress with, dependent on the compression format selected. Omit this parameter or use 0 to pick the default level for any given compression format. The defaults are subject to change. Valid values: - LZ4: 1, 3-12. Default: 1. Values in the range 3-12 utilize the LZ4 HC algorithm, which achieves greater compression ratios at the cost of greatly reduced compression speed. Decompression speed is independent of the selected compression level. - ZSTD: 1-22. Default: 3. Larger values provide higher compression ratios at the cost of reduced compression speeds. Values greater/equal to 20 require higher memory consumption. Decompression speed is independent of the selected compression level. /cs Compression chunk size to compress with, in bytes. Must be a power of two larger or equal to the volumes cluster size, and no greater than 64mb. Larger values yield larger compression ratios at the cost of read performance penalties for reading amounts of data smaller than the chunk size. Diminishing returns are drastic after 1mb, and as such are not recommended. Omitting this parameter or using 0 will pick the volumes cluster size. Eg: refsutil compression /q R: Eg: refsutil compression /c /f LZ4 /e 12 /cs 524288 R: Eg: refsutil compression /c /f ZSTD /e 15 /cs 131072 R: Eg: refsutil compression /c /f ZSTD R: Eg: refsutil compression /c /f NONE R:
0x4000c473	11	Compression format: %1!s! Compression level: %2!d! Compression chunk size: %3!s!%4!s! Volume size: %5!s!%6!s! Total logical data on volume: %7!s!%8!s! Uncompressed size of compressed data: %9!s!%10!s! Compressed size of compressed data: %11!s!%12!s! Estimated garbage collection savings: %13!s!%14!s! Percentage of volume data compressed: %15!s!% Compression efficiency: %16!s!% Compression efficiency (w/o GC): %17!s!% Last compression run NTSTATUS: 0x%18!08x!
0x4000c475	11	Usage: refsutil dedup [/d] [/s] [/cpu ] [/mm] Volume path or mount point. /d Dedup volume; mutually exclusive with /s flag. /s Scan volume to determine how much space can be saved by deduplicating equivalent clusters. Mutually exclusive with /d flag. /mm Use memory mapped file I/O to read files to dedup. Default is to use async reads with IOCP. Must be used in conjunction with /d or /s flags. /cpu Specify the maximum percentage of CPU to use. Valid values are [1-100]. Eg: refsutil dedup D: /s Eg: refsutil dedup D: /d /cpu 50
0x4000c479	11	Volume compression is currently running.
0x4000c47a	11	Volume compression is currently stopped.
0x4000c47b	11	Bytes saved: %1!llu!
0x4000c47e	11	---- Volume IO Metrics Tracking ---- Usage: refsutil iometrics <[/q]>\|<[/s] [/st ]> /q Query volume heat parameters. /s Set volume heat parameters. /st Number of seconds the volume should track IO access for. /sp Periodicity in seconds of io metrics tracking. /sg Number of periods to track per volume tracking unit. For the /st, /sp, and /sg options ReFS will enforce these values to lie within suitable ranges, and will reassign these values to filesystem minimums if required. These values can be omitted, in which case ReFS will pick defaults. Minimum values are as follows, and subject to change: /st: 3600. /sp: 10. /sg: 5. Eg: refsutil heat /q R: Eg: refsutil heat /s R: Eg: refsutil heat /s /st 604800 R:
0x4000c480	11	Volume heat parameters have been successfully changed and will take effect after the next volume mount.
0x4000c482	11	IO statistics tracking window: %1!d! seconds. IO statistics periodicity: %2!d! seconds. Periods per volume tracking unit: %3!d! periods.
0x4000c483	11	Unable to query volume IO metrics data. GLE: %1!d!
0x4000c484	11	---- Volume Compression Management ---- Usage: refsutil rollbackprotection freeze [-allowMountOnRollbackDetection] [-userPayloadFile ] [-volumePath] refsutil rollbackprotection query [-userPayloadFile ] [-volumePath] Eg: refsutil rollbackprotection query C: refsutil rollbackprotection freeze -userPayloadFile customPayload.bin C:
0x4000c485	11	Volume GUID: %1!ws! Rollback Protection GUID: %2!ws! Fail Mount on Rollback: %3!u! Frozen Virtual Clock: %4!I64u! Current Virtual Clock: %5!I64u! Frozen Root Checksum: %6!ws! Checksum Type: %7!ws! User Payload: %8!I64u! bytes
0x4000c486	11	Freezing current volume state for rollback protection.
0x4000c487	11	Freezing succeeded. Querying persisted rollback protection status:
0x4000c488	11	Reading custom payload from file: %1!ws!
0x4000c489	11	Writing custom payload to file: %1!ws!
0x4000c48a	11	Unfreezing current volume state for rollback protection.
0x4000c48b	11	Unfreezing succeeded.
0x4000c48c	11	Clearing boot volume GUID from UEFI for rollback protection.
0x4000c48d	11	Boot volume GUID cleared from UEFI.
0x4000c48e	11	---- Rollback Protection ---- WARNING: Do not use this feature unless you are certain of the consequences. Improper use can result in machine being in an unbootable and unrecoverable state. Usage: refsutil rollbackprotection freeze [-allowMountOnRollbackDetection] [-userPayloadFile ] [-volumePath] refsutil rollbackprotection unfreeze [-volumePath] refsutil rollbackprotection clearBootGuid refsutil rollbackprotection query [-userPayloadFile ] [-volumePath] Eg: refsutil rollbackprotection query C: refsutil rollbackprotection freeze -userPayloadFile customPayload.bin C: refsutil rollbackprotection unfreeze C: refsutil rollbackprotection clearBootGuid
0x4000c491	11	Usage: fsutil rollbackprotection failMountOnRollbackDetection
0x4000c492	11	Clearing failMountOnRollbackDetection UEFI setting for rollback protection.
0x4000c493	11	UEFI setting failMountOnRollbackDetection has been cleared.
0x4000c494	11	UEFI setting failMountOnRollbackDetection is not set.
0x4000c495	11	Fail Mount on Rollback: %1!u!
0x4000c496	11	Setting failMountOnRollbackDetection UEFI setting for rollback protection.
0x4000c497	11	UEFI setting failMountOnRollbackDetection has been set to %1!u!.
0x4000c498	11	---- Rollback Protection ---- WARNING: Do not use this feature unless you are certain of the consequences. Improper use can result in machine being in an unbootable and unrecoverable state. Usage: refsutil rollbackprotection freeze [-allowMountOnRollbackDetection] [-userPayloadFile ] [-volumePath] refsutil rollbackprotection unfreeze [-volumePath] refsutil rollbackprotection clearBootGuid refsutil rollbackprotection query [-userPayloadFile ] [-volumePath] refsutil rollbackprotection failMountOnRollbackDetection > Eg: refsutil rollbackprotection query C: refsutil rollbackprotection freeze -userPayloadFile customPayload.bin C: refsutil rollbackprotection unfreeze C: refsutil rollbackprotection clearBootGuid refsutil rollbackprotection failMountOnRollbackDetection query refsutil rollbackprotection failMountOnRollbackDetection set 0
0x4000c4a2	11	Skipped %1!I64u! files totalling %2!I64u!MB in volume with signature %3!x!.
0x8000c36f	11	Warning: Error occurred while quick scanning volume. Assuming cluster size is %1!d! bytes.
0x8000c373	11	Cannot open file list %1!
0x8000c376	11	Cannot load container table for volume with signature %1!x!.
0x8000c37d	11	Cannot initialize volume %1!
0x8000c384	11	%1!d! error(s) encountered while scanning partition.
0x8000c387	11	Cannot process metadata tables for volume with signature %1!x!!
0x8000c39c	11	Warning: Cannot find root info for Table[0x%1!I64x!'%2!I64x!] on volume with signature %3!x!! Directory name and info are lost because of corruption/writes.
0x8000c3a3	11	Invalid path with loop found for Table[0x%1!I64x!'%2!I64x!]!
0x8000c3ac	11	Cannot find any disk pages for container tables for volume with signature %1!x!!
0x8000c3ad	11	Cannot find any disk pages for primary container table for volume with signature %1!x!.
0x8000c3ae	11	Cannot find undamaged root for primary container table for volume with signature %1!x!!
0x8000c3af	11	Cannot find any disk pages for dup container table for volume with signature %1!x!.
0x8000c3b0	11	Cannot find undamaged root for dup container table for volume with signature %1!x!.
0x8000c3b1	11	Cannot allocate memory for container table for volume with signature %1!x!.
0x8000c3ba	11	There is no root in Table[0x%1!I64x!'%2!I64x!].
0x8000c3bc	11	Cannot allocate memory!
0x8000c3bd	11	Cannot enumerate file extents for source file!
0x8000c3be	11	Cannot translate virtual LCN 0x%1!I64x! to real LCN!
0x8000c3bf	11	Cannot read at partition offset 0x%1!I64x!.
0x8000c3c0	11	Cannot write to file at file offset 0x%1!I64x! for 0x%2!x! bytes!
0x8000c3c1	11	Cannot read parent directory page hosting the root of file %1!
0x8000c3c2	11	Parent directory page hosting the root of file %1 is invalid!
0x8000c3c3	11	Parent directory page hosting the root of file %1 is a director page!
0x8000c3c4	11	Cannot get file pair info for root entry of file %1!
0x8000c3c5	11	File pair info for file %1 is not a name index entry!
0x8000c3c6	11	File pair info for file %1 is not for a file!
0x8000c3c8	11	Cannot allocate memory for file %1!
0x8000c3c9	11	Cannot open the file root of file %1!
0x8000c3cb	11	Cannot open output file!
0x8000c3cc	11	Cannot set end of file for output file!
0x8000c3cd	11	Cannot copy data stream!
0x8000c3ce	11	Cannot set output file size!
0x8000c3d0	11	Couldn't read boot sector!
0x8000c3d4	11	Warning:
0x8000c3e4	11	Reading at offset 0x%1!I64x! failed! Total error encountered is %2!d!.
0x8000c3e9	11	Cannot find any disk pages for container index table for volume with signature %1!x!!
0x8000c3ea	11	Cannot find undamaged root for container index table for volume with signature %1!x!!
0x8000c406	11	Unable to delete created snapshot due to it being the newest one. The snapshot will be automatically deleted on volume dismount.
0x8000c460	11	Unable to locate file table for %1.
0x8000c46c	11	Mismatch between number of composite table(s) found versus expected count.
0x8000c46d	11	Composite tables ordering is inconsistent.
0x8000c49e	11	Skipped copying %1 of %2!I64u! bytes as it has exceeded the file size limit of %3!I64u!MB.
0x8000c49f	11	Skipped copying %1 of %2!I64u! bytes as it would have exceeded the space usage limit of %3!I64u!GB.
0x8000c4a0	11	Skipped copying %1 of %2!I64u! bytes as it would have dropped the free space remaining limit to below %3!I64u!GB.
0x8000c4a1	11	Failed to query free space remaining on target directory. GLE %1!d!.
0xc000c351	11	Invalid target directory %1!
0xc000c352	11	Invalid source directory %1!
0xc000c353	11	Invalid parameters detected!
0xc000c354	11	No phase specified!
0xc000c355	11	Source volume not specified!
0xc000c356	11	Working directory not specified!
0xc000c357	11	Target directory not specified!
0xc000c358	11	File list not specified!
0xc000c359	11	Failed to open volume.
0xc000c35c	11	Invalid operation requested!
0xc000c35d	11	Failure to write %1... to file.
0xc000c35e	11	Invalid ScanUnitSize of %1 while expecting %2.
0xc000c35f	11	Cannot read boot sector!
0xc000c360	11	Invalid boot sector!
0xc000c362	11	No valid superblock!
0xc000c364	11	Volume initialization failed.
0xc000c365	11	No valid checkpoint!
0xc000c369	11	Partition length of 0x%1!d! is too small.
0xc000c36e	11	Data classification failed!
0xc000c370	11	Invalid working directory!
0xc000c371	11	Finding volume signature files failed!
0xc000c374	11	Cannot initialize volume!
0xc000c375	11	Cannot open metadata file for volume with signature %1!x!.
0xc000c378	11	Error: No volume metadata files found! Please run quick scan or full scan phase first!
0xc000c37e	11	Cannot find root directory for volume %1!
0xc000c37f	11	Cannot find root page of root directory for volume %1!
0xc000c389	11	Cannot create working file to record index LCNs!
0xc000c390	11	The system cannot find the path specified.
0xc000c391	11	Cannot find root page for directory %1!
0xc000c392	11	The target path not specified.
0xc000c393	11	Cannot copy file %1!
0xc000c396	11	Initialization failed.
0xc000c397	11	Command failed.
0xc000c39f	11	Cannot open file %1 for write access!
0xc000c3a4	11	Cannot find volume signature from meta-data file %1!
0xc000c3a5	11	Cannot find cluster size from meta-data file %1!
0xc000c3a6	11	Cannot initialize volume for meta-data file %1!
0xc000c3a7	11	Cannot load meta-data file %1!
0xc000c3aa	11	KeyRules library initialization failed.
0xc000c3ab	11	Checksum library initialization failed.
0xc000c3b8	11	Cannot truncate file %1 to zero size!
0xc000c3d3	11	Error:
0xc000c3d5	11	Incompatible switches detected!
0xc000c3d9	11	The system cannot find the file name specified.
0xc000c3de	11	Failed to open volume: %1
0xc000c3df	11	Failed to dismount the volume: %1
0xc000c3e0	11	Failed to lock the volume: %1
0xc000c3e1	11	Failed to set file pointer!
0xc000c3e2	11	Failed to read file!
0xc000c3e3	11	Failed to query file size for file: %1
0xc000c3ed	11	Failed to obtain container range for leaked range.
0xc000c3ee	11	Encountered corruption (LCN in use but unallocated) at LCN 0x%1!016llx!. Halting leak detection.
0xc000c3f1	11	Found corruption (aliased refcount) in refcount analysis at CLCN %1!016llx! Real refcount: %2!d! Reported refcount: %3!d!. Stopping leak detection.
0xc000c3f3	11	Unable to create event. GLE %1!d!
0xc000c3f4	11	Unable to open file %1!s!. GLE %2!d!
0xc000c3f5	11	Error GLE:%1!d!
0xc000c3f6	11	Unable to lock drive %1!s!. GLE: %2!d!
0xc000c3f7	11	Unable to open drive %1!s!.
0xc000c3f8	11	Unable to open %TEMP% path. GLE: %2!d!
0xc000c3f9	11	Unable to build path.
0xc000c3fa	11	Failed to create temporary scratch file %1!s!. GLE: %2!d!
0xc000c3fb	11	Failed to set file pointer for file to %1!llu! bytes. GLE: %2!d!
0xc000c3fc	11	Failed to set EOF for file to %1!llu! bytes. GLE: %2!d!
0xc000c3fd	11	Failed to create virtual file mapping for file. GLE: %1!d!
0xc000c3fe	11	Failed to map virtual file into memory. GLE: %1!d!
0xc000c3ff	11	Failed to create scratch file for leak detection.
0xc000c400	11	Found aliased metadata tuple at LCN %1!016llx!. Stopping leak detection.
0xc000c401	11	Failed to create snapshot for leak detection. GLE: %1!d!
0xc000c403	11	Failed to mount the ReFS volume. NT: %1!08x!
0xc000c404	11	Failed to create transaction. NT: %1!08x!
0xc000c405	11	Failed to enumerate table: %1!s!. NT: %2!08x!
0xc000c407	11	The volume %1!s! is not a ReFS volume.
0xc000c408	11	Invalid thread count.
0xc000c409	11	The volume is an unsupported ReFS version. This utility supports versions up to %1!d!.%2!d!. Volume is %3!d!.%4!d!.
0xc000c40a	11	Leak detection and fixing did not complete successfully.
0xc000c40b	11	This program requires administrator privileges.
0xc000c40c	11	Unable to dismount drive %1!s!. GLE: %2!d!
0xc000c40d	11	Unable to unlock drive. GLE: %1!d!
0xc000c40e	11	There are not enough system resources to satisfy the requested operation.
0xc000c412	11	The volume contains an invalid or corrupt ReFS boot sector. The volume may not be a ReFS volume.
0xc000c413	11	Unable to initialize the Minstore library. NT: %1!08x!
0xc000c414	11	There was an error sparsing the scratch file. GLE: %1!d!
0xc000c415	11	There was an error reserving space for the scratch file. Your disk may be full.
0xc000c417	11	There was an error reading or writing from the scratch file. Your disk may be full.
0xc000c418	11	There was an error querying the volume for allocations.
0xc000c419	11	There was an error adding reserved ranges to the scratch file.
0xc000c41a	11	There was an error during verification pass 1.
0xc000c41b	11	There was an error during verification pass 2.
0xc000c41c	11	There was an error opening the ReFS volume in read/write mode for leak repairs. GLE: %1!d!
0xc000c41d	11	There was an error processing certain leaks. Not all leaks on the volume may have been fixed. NT: %1!08x!
0xc000c41e	11	There was an error initializing the repair engine. Leak detection is unable to continue.
0xc000c41f	11	Encountered corruption (Index allocated but free) at LCN 0x%1!016llx!. Halting leak detection.
0xc000c424	11	There was an error processing certain leaks. Not all leaks on the volume may have been fixed. NT: %1!08x!
0xc000c426	11	The supplied drive is mounted read-only or write protected.
0xc000c427	11	Leak detection found corruption in a directory. Please re-run leak detection with the "/a" switch or invoke "refsutil triage %1!s! /s %2!llu!".
0xc000c429	11	Leak detection found corruption for file ID 0x%1!016llx!`%2!016llx!.
0xc000c42b	11	An invalid directory ID was provided. The directory ID is the upper 64 bits of the file ID.
0xc000c42d	11	Error scrubbing file "%1!s!". Error: %2!d!
0xc000c42f	11	This volume cannot currently undergo triage. We are sorry for the inconvenience.
0xc000c430	11	Triage attempted to scrub the ID, but due to a file system limitation it cannot guarantee success.
0xc000c431	11	Triage failed with error %1!d!.
0xc000c432	11	Triage was unable to open file "%1!s!".
0xc000c435	11	There was an error fixing a hardlink leak. Not all leaks on the volume may have been fixed. NT: %1!08x!
0xc000c438	11	There was an error processing certain leaks. Not all leaks on the volume may have been fixed. NT: %1!08x!
0xc000c43b	11	There was an error fixing a hardlink leak. Not all leaks on the volume may have been fixed. NT: %1!08x!
0xc000c441	11	Failed to write file!
0xc000c442	11	Couldn't write boot sector!
0xc000c443	11	Couldn't read boot sector!
0xc000c444	11	Boot sector at 0x%1!llx! contains invalid value(s): Major version : %1!d! Minor version : %2!d! Bytes per sector : 0x%3!x! Sectors per cluster : 0x%4!x! Number of sectors : 0x%5!llx! Bytes per container : 0x%6!llx!
0xc000c445	11	Couldn't write primary boot sector!
0xc000c446	11	Boot sector at 0x%1!llx! has checksum failure!
0xc000c448	11	Found valid boot sector at 0x%1!llx! with: Cluster size : 0x%1!x! Number of Clusters : 0x%2!llx!
0xc000c449	11	Updated primary boot sector with mirror boot sector.
0xc000c44a	11	Couldn't write mirror boot sector!
0xc000c44c	11	Boot sector at 0x%1!llx! not readable.
0xc000c44d	11	Boot sector at 0x%1!llx! doesn't appear to be ReFS.
0xc000c456	11	An instance of refsutil already exists for drive %1!s!.
0xc000c458	11	Scan state file TotalScanUnitCount (0x%1!llx!) does not match that of the current volume. The current volume has 0x%2!llx! LCNs in it. Please specifies the correct volume or working directory.
0xc000c459	11	Current LCN (0x%1!llx!) scanned larger than TotalScanUnitCount (0x%2!llx!) of the volume in the scan state file. Please starts with an empty working directory.
0xc000c461	11	Cannot open file %1 for read access!
0xc000c46e	11	Failed to create allocation state log file %1!s!. GLE: %2!d!
0xc000c46f	11	Failed to write to allocation state log file. GLE: %1!d!
0xc000c471	11	Unable to compress volume. GLE: %1!d!
0xc000c472	11	Unable to query volume compression information. GLE: %1!d!
0xc000c474	11	Leak detection is currently unsupported on volumes utilizing compression.
0xc000c476	11	Invalid number of partitions for the hash index.
0xc000c477	11	Invalid chunk size for dedup; must be either 4096 or 65536 (bytes).
0xc000c478	11	Invalid maximum CPU utilization value; must be between 1-100.
0xc000c47c	11	Unable to optimize storage. GLE: 0x%1!x!
0xc000c47d	11	Invalid maximum number of files concurrently opened for optimization; must be between 1-512
0xc000c47f	11	Unable to set volume heat parameters. GLE: %1!d!
0xc000c481	11	Unable to query volume heat parameters. GLE: %1!d!
0xc000c499	11	Checksum objects initialization failed.
0xc000c49a	11	Compression library initialization failed.
0xc000c49b	11	Sector size of 0x%1!d! is invalid.
0xc000c49c	11	Failed to create event. GLE %1!u!.
0xc000c49d	11	Failed to read boot sector. GLE %1!u!.
574 entries