Format of EWF Partition.

  • Thread starter Thread starter Stuart Langley
  • Start date Start date
S

Stuart Langley

Hi All,

Does anybody have any information of the format of the data stored in the
EWF partition? I would like to create the partition from scratch for volumes
that are only using RAM overlay.

TIA

Stuart
 
Hi Stuart,

No idea about the format (I was never that much interested in it). But you can read EWF partition info to one 64 KB file then change
RAM EWF configuration (other protected volumes or disable/enable EWF) and try to figure it out. It should be easy.

Regards,
Slobodan

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Do have an opinion on the effectiveness of Microsoft Windows Mobile and Embedded newsgroups? Let us know!
https://www.windowsembeddedeval.com/community/newsgroups
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
Hi Slobodan,

Yes this is the path I was going to go down. Just checking if anybody else
has done it first.

Regards,

Stuart

Slobodan Brcin (eMVP) said:
Hi Stuart,

No idea about the format (I was never that much interested in it). But you
can read EWF partition info to one 64 KB file then change
RAM EWF configuration (other protected volumes or disable/enable EWF) and
try to figure it out. It should be easy.
Regards,
Slobodan

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Do have an opinion on the effectiveness of Microsoft Windows Mobile and
Embedded newsgroups? Let us know!
 
Stuart,

I've done so but manually (no code written). Basically, I used a 3rd party
product to operate the content of disk sector on EWF partition. Was able to
disable/enable EWF by changing bits.

You may do the same for beginning. Then you will learn (if you really need
to) what EWF Config partition bytes do.

KM
 
Back
Top