# The configurations that used for the recording, feel free to edit them
config:
# Specify a command to be executed
# like `/bin/bash -l`, `ls`, or any other commands
# the default is bash for Linux
# or powershell.exe for Windows
command: cmd.exe
# Specify the current working directory path
# the default is the current working directory path
cwd: C:\
# Export additional ENV variables
env:
recording: true
# Explicitly set the number of columns
# or use `auto` to take the current
# number of columns of your shell
cols: 111
# Explicitly set the number of rows
# or use `auto` to take the current
# number of rows of your shell
rows: 28
# Amount of times to repeat GIF
# If value is -1, play once
# If value is 0, loop indefinitely
# If value is a positive number, loop n times
repeat: 0
# Quality
# 1 - 100
quality: 100
# Delay between frames in ms
# If the value is `auto` use the actual recording delays
frameDelay: auto
# Maximum delay between frames in ms
# Ignored if the `frameDelay` isn't set to `auto`
# Set to `auto` to prevent limiting the max idle time
maxIdleTime: 2000
# The surrounding frame box
# The `type` can be null, window, floating, or solid`
# To hide the title use the value null
# Don't forget to add a backgroundColor style with a null as type
frameBox:
type: solid
title: null
style: []
# Add a watermark image to the rendered gif
# You need to specify an absolute path for
# the image on your machine or a URL, and you can also
# add your own CSS styles
watermark:
imagePath: null
style:
position: absolute
right: 15px
bottom: 15px
width: 100px
opacity: 0.9
# Cursor style can be one of
# `block`, `underline`, or `bar`
cursorStyle: block
# Font family
# You can use any font that is installed on your machine
# in CSS-like syntax
fontFamily: "Consolas"
# The size of the font
fontSize: 8
# The height of lines
lineHeight: 1
# The spacing between letters
letterSpacing: 0
# Theme
theme:
background: "transparent"
foreground: "#afafaf"
cursor: "#c7c7c7"
black: "#232628"
red: "#fc4384"
green: "#b3e33b"
yellow: "#ffa727"
blue: "#75dff2"
magenta: "#ae89fe"
cyan: "#708387"
white: "#d5d5d0"
brightBlack: "#626566"
brightRed: "#ff7fac"
brightGreen: "#c8ed71"
brightYellow: "#ebdf86"
brightBlue: "#75dff2"
brightMagenta: "#ae89fe"
brightCyan: "#b1c6ca"
brightWhite: "#f9f9f4"
# Records, feel free to edit them
records:
- delay: 1796
content: 'n'
- delay: 286
content: t
- delay: 264
content: f
- delay: 214
content: s
- delay: 169
content: '-'
- delay: 140
content: s
- delay: 106
content: h
- delay: 113
content: e
- delay: 90
content: l
- delay: 132
content: l
- delay: 140
content: ' '
- delay: 688
content: \
- delay: 190
content: \
- delay: 360
content: .
- delay: 654
content: \
- delay: 1144
content: C
- delay: 555
content: ':'
- delay: 464
content: "\r\n"
- delay: 21
content: "\e]0;Administrator: C:\\WINDOWS\\SYSTEM32\\cmd.exe - ntfs-shell \\\\.\\C:\a"
- delay: 496
content: "**********************************************************************\r\n"
- delay: 21
content: "ntfs-shell - Demonstration of the ntfs Rust crate\e[21X\r\nby Colin Finck <colin@reactos.org>\e[36X\r\n**********************************************************************\r\n\e[70X\r\nOpened \"\\\\.\\C:\" read-only.\e[44X\r\n\e[70X\r\nntfs-shell:\\>\e[57X\e[1C"
- delay: 1302
content: h
- delay: 398
content: e
- delay: 325
content: l
- delay: 319
content: p
- delay: 451
content: "\r\n"
- delay: 12
content: "Available Commands:\e[70X\r\n attr - Show structure of NTFS attributes of a particular file\e[21X\r\n attr_runs - Show structure of NTFS attributes of a particular file, including data runs\r\n cd - Change the current directory\e[47X\r\n dir - Show files of the current directory\e[40X\r\n exit - Quit ntfs-shell\e[60X\r\n fileinfo - Show information about a particular file\e[35X\r\n fsinfo - Show general filesystem information\e[40X\r\n get - Copy a file from the NTFS filesystem\e[39X\r\n help - Show this help\e[61X\r\n quit - Quit ntfs-shell\e[60X\r\n\e[89X\r\nYou can also enter \"help COMMAND\" to get additional help about some commands.\e[12X\r\nntfs-shell:\\>\e[76X\e[1C"
- delay: 2112
content: f
- delay: 347
content: s
- delay: 427
content: i
- delay: 234
content: 'n'
- delay: 250
content: f
- delay: 259
content: o
- delay: 642
content: "\r\nCluster Size: 4096\r\nFile Record Size: 1024\r\nMFT Byte Position: 0xc0000000"
- delay: 20
content: "\r\n"
- delay: 7
content: "NTFS Version: 3.1\r\nSector Size: 512\r\nSerial Number: 9302646815782242889\r\nSize: 510603845120\r\nVolume Name: \"System\""
- delay: 8
content: "\r\nntfs-shell:\\>\e[1C"
- delay: 2589
content: f
- delay: 251
content: i
- delay: 226
content: l
- delay: 222
content: e
- delay: 240
content: i
- delay: 148
content: 'n'
- delay: 242
content: f
- delay: 190
content: o
- delay: 142
content: ' '
- delay: 324
content: $
- delay: 345
content: M
- delay: 284
content: F
- delay: 313
content: T
- delay: 536
content: "\r\n"
- delay: 27
content: "============================= FILE RECORD ==============================\r\nAllocated Size: 1024\r\nByte Position: 0xc0000000\r\nData Size: 552\r\nHard-Link Count: 1\r\nIs Directory: false\r\nRecord Number: 0x0\r\nSequence Number: 1\r\n\n========================= STANDARD INFORMATION =========================\r\nAttributes: HIDDEN | SYSTEM\r\nAccess Time: 2021-11-09 13:37:00 UTC\r\nCreation Time: 2021-11-09 13:37:00 UTC\r\nModification Time: 2021-11-09 13:37:00 UTC\r\nMFT Record Modification Time: 2021-11-09 13:37:00 UTC\r\nClass ID: 0\r\nMaximum Versions: 0\r\nOwner ID: 0\r\nQuota Charged: 0\r\nSecurity ID: 256\r\nUSN: 0\r\nVersion: 0\r\n\n============================== FILE NAME ===============================\r\nName: \"$MFT\"\r\nNamespace: Win32AndDos\r\nParent Directory Record Number: 0x5\r\n\n============================= DATA STREAM ==============================\r\nName: \"\"\r\nSize: 3085434880"
- delay: 14
content: "\r\nntfs-shell:\\>\e[1C"
- delay: 2172
content: f
- delay: 278
content: i
- delay: 264
content: l
- delay: 263
content: e
- delay: 218
content: i
- delay: 253
content: 'n'
- delay: 243
content: f
- delay: 262
content: o
- delay: 196
content: ' '
- delay: 187
content: p
- delay: 154
content: a
- delay: 304
content: g
- delay: 302
content: e
- delay: 193
content: f
- delay: 132
content: i
- delay: 207
content: l
- delay: 206
content: e
- delay: 223
content: .
- delay: 293
content: s
- delay: 343
content: 'y'
- delay: 270
content: s
- delay: 572
content: "\r\n============================= FILE RECORD ==============================\r\nAllocated Size: 1024\r\nByte Position: 0xc1076400\r\nData Size: 400\r\nHard-Link Count: 1\r\nIs Directory: false\r\nRecord Number: 0x41d9\r\nSequence Number: 62\r\n\n========================= STANDARD INFORMATION =========================\r\nAttributes: HIDDEN | SYSTEM | ARCHIVE\r\nAccess Time: 2021-12-07 18:13:20 UTC\r\nCreation Time: 2021-11-16 14:51:37 UTC\r\nModification Time: 2021-12-07 18:13:20 UTC\r\nMFT Record Modification Time: 2021-12-07 18:13:20 UTC\r\nClass ID: 0\r\nMaximum Versions: 0\r\nOwner ID: 0\r\nQuota Charged: 0\r\nSecurity ID: 4739\r\nUSN: 95763283628\r\nVersion: 0\r\n\n============================= DATA STREAM ==============================\r\nName: \"\"\r\nSize: 6634323968\r\n\n============================== FILE NAME ===============================\r\nName: \"pagefile.sys\"\r\nNamespace: Win32AndDos\r\nParent Directory Record Number: 0x5"
- delay: 15
content: "\r\nntfs-shell:\\>\e[1C"
- delay: 2030
content: a
- delay: 277
content: t
- delay: 188
content: t
- delay: 227
content: r
- delay: 195
content: ' '
- delay: 186
content: p
- delay: 138
content: a
- delay: 215
content: g
- delay: 164
content: e
- delay: 111
content: f
- delay: 157
content: i
- delay: 209
content: l
- delay: 157
content: e
- delay: 372
content: .
- delay: 151
content: s
- delay: 464
content: 'y'
- delay: 226
content: s
- delay: 290
content: "\r\n==============================================================================================================\e[25l\r\nINSTANCE | TYPE | RESIDENT | RECORD NUMBER | START | LENGTH | NAME \e[28;105H\e[?25h\r\n============================================================================================================== \b\r\n● 0 | StandardInformation | true | 0x41d9 | 0xc1076438 | 72 | \"\"\r\n● 3 | AttributeList | true | 0x41d9 | 0xc1076498 | 96 | \"\"\r\n ○ 0 | Data | false | 0x4819 | 0xc1206438 | 6634323968 | \"\"\r\n● 2 | FileName | true | 0x41d9 | 0xc1076510 | 90 | \"\""
- delay: 18
content: "\r\nntfs-shell:\\>\e[1C"
- delay: 1859
content: a
- delay: 596
content: t
- delay: 209
content: t
- delay: 242
content: r
- delay: 322
content: _
- delay: 229
content: r
- delay: 119
content: u
- delay: 221
content: 'n'
- delay: 136
content: s
- delay: 158
content: ' '
- delay: 152
content: p
- delay: 113
content: a
- delay: 153
content: g
- delay: 243
content: e
- delay: 222
content: f
- delay: 122
content: i
- delay: 196
content: l
- delay: 317
content: e
- delay: 573
content: .
- delay: 158
content: s
- delay: 415
content: 'y'
- delay: 230
content: s
- delay: 342
content: "\r\n==============================================================================================================\e[25l\r\nINSTANCE | TYPE | RESIDENT | RECORD NUMBER | START | LENGTH | NAME \e[28;105H\e[?25h\r\n============================================================================================================== \b\r\n● 0 | StandardInformation | true | 0x41d9 | 0xc1076438 | 72 | \"\"\r\n● 3 | AttributeList | true | 0x41d9 | 0xc1076498 | 96 | \"\"\r\n ○ 0 | Data | false | 0x4819 | 0xc1206438 | 6634323968 | \"\"\r\n □ 0 | DataRun | | | 0x1ff4864000 | 2756567040 |\r\n □ 1 | DataRun | | | 0x6276168000 | 196222976 |\r\n □ 2 | DataRun | | | 0x6289c86000 | 24576 |\r\n □ 3 | DataRun | | | 0x64be2dc000 | 401358848 |\r\n □ 4 | DataRun | | | 0x6cf5800000 | 397721600 |\r\n □ 5 | DataRun | | | 0x6083ee8000 | 296140800 |\r\n □ 6 | DataRun | | | 0x55ed0f0000 | 384090112 |\r\n □ 7 | DataRun | | | 0x5939fa0000 | 154939392 |\r\n □ 8 | DataRun | | | 0x60edc60000 | 384073728 |\r\n □ 9 | DataRun | | | 0x55a9b2c000 | 165298176 |\r\n □ 10 | DataRun | | | 0x65c8530000 | 377798656 |\r\n □ 11 | DataRun | | | 0x525e9e8000 | 165212160 |\r\n □ 12 | DataRun | | | 0x6109a0c000 | 361250816 |\r\n □ 13 | DataRun | | | 0x6e68300000 | 175554560 |\r\n □ 14 | DataRun | | | 0x66f9bec000 | 349519872 |\r\n □ 15 | DataRun | | | 0x4505830000 | 68550656 |\r\n● 2 | FileName | true | 0x41d9 | 0xc1076510 | 90 | \"\""
- delay: 11
content: "\r\nntfs-shell:\\>\e[1C"
- delay: 1911
content: f
- delay: 650
content: i
- delay: 184
content: l
- delay: 192
content: e
- delay: 215
content: i
- delay: 118
content: 'n'
- delay: 144
content: f
- delay: 118
content: o
- delay: 127
content: ' '
- delay: 159
content: w
- delay: 120
content: i
- delay: 116
content: 'n'
- delay: 113
content: d
- delay: 140
content: o
- delay: 101
content: w
- delay: 183
content: s
- delay: 318
content: "\r\n============================= FILE RECORD ==============================\r\nAllocated Size: 1024\r\nByte Position: 0xc8f5e800\r\nData Size: 576\r\nHard-Link Count: 1\r\nIs Directory: true\r\nRecord Number: 0x23d7a\r\nSequence Number: 27\r\n\n========================= STANDARD INFORMATION =========================\r\nAttributes: (empty)\r\nAccess Time: 2021-12-08 20:35:10 UTC\r\nCreation Time: 2021-11-11 08:15:11 UTC\r\nModification Time: 2021-12-04 14:07:43 UTC\r\nMFT Record Modification Time: 2021-12-04 14:07:43 UTC\r\nClass ID: 0\r\nMaximum Versions: 0\r\nOwner ID: 0\r\nQuota Charged: 0\r\nSecurity ID: 10667\r\nUSN: 73543275068\r\nVersion: 0\r\n\n============================== FILE NAME ===============================\r\nName: \"Windows\"\r\nNamespace: Posix\r\nParent Directory Record Number: 0x5"
- delay: 10
content: "\r\nntfs-shell:\\>\e[1C"
- delay: 2276
content: c
- delay: 228
content: d
- delay: 208
content: ' '
- delay: 262
content: w
- delay: 148
content: i
- delay: 173
content: 'n'
- delay: 102
content: d
- delay: 382
content: o
- delay: 152
content: w
- delay: 200
content: s
- delay: 277
content: "\r\n"
- delay: 19
content: 'ntfs-shell:\Windows> '
- delay: 1206
content: c
- delay: 221
content: d
- delay: 113
content: ' '
- delay: 218
content: s
- delay: 286
content: 'y'
- delay: 251
content: s
- delay: 222
content: t
- delay: 127
content: e
- delay: 230
content: m
- delay: 185
content: '3'
- delay: 145
content: '2'
- delay: 314
content: "\r\n"
- delay: 30
content: 'ntfs-shell:\Windows\System32> '
- delay: 1398
content: c
- delay: 229
content: d
- delay: 161
content: ' '
- delay: 149
content: c
- delay: 146
content: o
- delay: 237
content: 'n'
- delay: 266
content: f
- delay: 143
content: i
- delay: 184
content: g
- delay: 736
content: "\r\n"
- delay: 15
content: 'ntfs-shell:\Windows\System32\config> '
- delay: 1603
content: f
- delay: 271
content: i
- delay: 255
content: l
- delay: 210
content: e
- delay: 206
content: i
- delay: 137
content: 'n'
- delay: 136
content: f
- delay: 202
content: o
- delay: 176
content: ' '
- delay: 419
content: S
- delay: 310
content: 'Y'
- delay: 262
content: S
- delay: 240
content: T
- delay: 95
content: E
- delay: 375
content: M
- delay: 551
content: "\r\n============================= FILE RECORD ==============================\r\nAllocated Size: 1024\r\nByte Position: 0x5a15f17800\r\nData Size: 392\r\nHard-Link Count: 1\r\nIs Directory: false\r\nRecord Number: 0x143c32\r\nSequence Number: 7\r\n\n========================= STANDARD INFORMATION =========================\r\nAttributes: ARCHIVE\r\nAccess Time: 2021-11-24 20:15:07 UTC\r\nCreation Time: 2021-11-11 08:15:11 UTC\r\nModification Time: 2021-11-24 20:15:07 UTC\r\nMFT Record Modification Time: 2021-11-20 19:08:55 UTC\r\nClass ID: 0\r\nMaximum Versions: 0\r\nOwner ID: 0\r\nQuota Charged: 0\r\nSecurity ID: 18314\r\nUSN: 59962183284\r\nVersion: 0\r\n\n============================== FILE NAME ===============================\r\nName: \"SYSTEM\"\r\nNamespace: Posix\r\nParent Directory Record Number: 0x2f1af\r\n\n============================= DATA STREAM ==============================\r\nName: \"\"\r\nSize: 30670848"
- delay: 6
content: "\r\nntfs-shell:\\Windows\\System32\\config>\e[1C"
- delay: 7214
content: f
- delay: 544
content: i
- delay: 273
content: l
- delay: 254
content: e
- delay: 169
content: i
- delay: 114
content: 'n'
- delay: 148
content: f
- delay: 160
content: o
- delay: 215
content: ' '
- delay: 290
content: /
- delay: 1402
content: '0x143c32'
- delay: 2182
content: "\r\n============================= FILE RECORD ==============================\r\nAllocated Size: 1024\r\nByte Position: 0x5a15f17800\r\nData Size: 392\r\nHard-Link Count: 1\r\nIs Directory: false\r\nRecord Number: 0x143c32\r\nSequence Number: 7\r\n\n========================= STANDARD INFORMATION =========================\r\nAttributes: ARCHIVE\r\nAccess Time: 2021-11-24 20:15:07 UTC\r\nCreation Time: 2021-11-11 08:15:11 UTC\r\nModification Time: 2021-11-24 20:15:07 UTC\r\nMFT Record Modification Time: 2021-11-20 19:08:55 UTC\r\nClass ID: 0\r\nMaximum Versions: 0\r\nOwner ID: 0\r\nQuota Charged: 0\r\nSecurity ID: 18314\r\nUSN: 59962183284\r\nVersion: 0\r\n\n============================== FILE NAME ===============================\r\nName: \"SYSTEM\"\r\nNamespace: Posix\r\nParent Directory Record Number: 0x2f1af\r\n\n============================= DATA STREAM ==============================\r\nName: \"\"\r\nSize: 30670848"
- delay: 23
content: "\r\nntfs-shell:\\Windows\\System32\\config>\e[1C"
- delay: 919
content: g
- delay: 262
content: e
- delay: 243
content: t
- delay: 238
content: ' '
- delay: 415
content: S
- delay: 352
content: 'Y'
- delay: 280
content: S
- delay: 240
content: T
- delay: 96
content: E
- delay: 496
content: M
- delay: 783
content: "\r\nSaving 30670848 bytes of data in \"SYSTEM\"..."
- delay: 12
content: "\r\n"
- delay: 1221
content: 'ntfs-shell:\Windows\System32\config> '
- delay: 2580
content: e
- delay: 237
content: x
- delay: 168
content: i
- delay: 118
content: t
