Command line $MFT record decoder