ntfs.py extracts MFT records from raw files