Is EWF enabled?

  • Thread starter Thread starter Mike Warren
  • Start date Start date
M

Mike Warren

Hi,

Is there any way (apart from EWF API) from a Win32 program to
find out if EWF (RAM Reg mode) is enabled?

I'm hoping there might be a registry entry I can read.

The problem with using the EWF API for me is the application that
needs this information is written in Delphi.

I also don't want the users to see a console window if I were to call
EwfMgr and examine its text output.

-Mike
 
Hi Mike,

HKLM\SYSTEM\ControlSet001\Services\EWF\Parameters\Protected\Volume0\Enabled
You can easily accedd dll functions from Delphi also.
Also you can redirect console output to pipe so user will never see any console created and you can parse text internaly.

First method is the simplest.

Regards,
Slobodan
 
Hi Slobodan,
HKLM\SYSTEM\ControlSet001\Services\EWF\Parameters\Protected\Volume0\Enabled
You can easily accedd dll functions from Delphi also.
Also you can redirect console output to pipe so user will never see
any console created and you can parse text internaly.

First method is the simplest.
Click to expand...

Thanks

-Mike
 
Mike,

Just a couple more not really important comments..
As Slobodan mention, you can easy use EWF API from Delphi app as Win32 Dll:
http://msdn.microsoft.com/library/d...y/en-us/xpehelp/html/xetbsewfapifunctions.asp

In case you just wanted to see the EWF state visually, you can use EWFTray app from
http://www.xpefiles.com/a_file.cfm?custid=Components&fileid=EwfTray.zip&groupName=Other.

Regarding the ewfmgr (I don't really understand why you need to parse its results as it is just more work tha, say, using EWF API or
reading registry values) you can also launch it with CreateProcessAsUser to run process as noninteractive.
Or create your own stdout and use STARTUPINFO/STARTF_USESTDHANDLES/hStdOutput redirection for the console utility. (see example here
http://support.microsoft.com/default.aspx?scid=kb;en-us;190351).

KM
 
Hi Konstantin,
Just a couple more not really important comments..
As Slobodan mention, you can easy use EWF API from Delphi app as
Win32 Dll:
http://msdn.microsoft.com/library/d...y/en-us/xpehelp/html/xetbsewfapifunctions.asp
Click to expand...

I was under the impression that a LIB file had to be compiled ito the program.
Even so, I would have to translate the headers which is more work than reading
the registry. BTW, where do I find the API files?
Regarding the ewfmgr (I don't really understand why you need to parse
its results
Click to expand...

Oh, I don't. The registry key will do me fine. If I want more control later, I'll
go the API route.

-Mike
 
Mike,
I was under the impression that a LIB file had to be compiled ito the program.
Click to expand...

How about just dynamic linking (LoadLibrary/GetProcAddress)?
Even so, I would have to translate the headers which is more work than reading the registry.
Click to expand...

Well.. This is true. No Pascal source/headers from MS available. :-(
BTW, where do I find the API files?
Click to expand...

SP1: http://www.microsoft.com/downloads/...A8-14E6-4509-A8AC-572836A8B373&displaylang=en

SP2: It is in the install pacage (see in the installation menu). However, there is a known bug with the LIB from there that was not
properly built. According to MS, this had to be resolved in December last year but I failed yet to find new QFE.
So, unless you want to use two new API functions that appeared in EWF/SP2 you can go with SP1 headers/libraries.
Or, again, dynamic linking will fix everything for you.

Konstantin
 
Mike,
Go over to XPeFiles.com and get the 3rd party EWF Code.
A guy name Dan Goldberg I believe put together some DLL calls already so you
don't have to convert the headers.
I use these from within my shell to do a few things.

'Written by Dan Goldenberg
'Demonstrates use of the EwfWin.dll for Windows XP embedded systems.

Now write my name down so if you ever get around to converting the headers
you could shoot me a copy <grin>

Richard
 
Hi Richard,
Go over to XPeFiles.com and get the 3rd party EWF Code.
A guy name Dan Goldberg I believe put together some DLL calls already
so you don't have to convert the headers.
I use these from within my shell to do a few things.

'Written by Dan Goldenberg
'Demonstrates use of the EwfWin.dll for Windows XP embedded systems.
Click to expand...

Ok, I'll have a look at it. Thanks.
Now write my name down so if you ever get around to converting the
headers you could shoot me a copy <grin>
Click to expand...

I'll post it to xpefiles.com and place a message here if I ever do it. At the
moment I have the tools that do the job for me and can't afford the time.

-Mike
 
Back
Top