Hi, I need to get a file which represents the OS partition. I tried using ReadFile from the Win32 API with the EWF filter on and reading the \\.\C partition and it doesn't return the same exact file from boot to boot.
Anyone have any ideas on how I could create the file before windows locks up the \windows\system32\config\* on bootup?
If I have the boot device which is CF attached externally, I can read the partition and get the contents but if I boot into it, the results are not the same which is the current requirement that the OS boots up exactly from the same CRC.
Thanks in advance,
Anyone have any ideas on how I could create the file before windows locks up the \windows\system32\config\* on bootup?
If I have the boot device which is CF attached externally, I can read the partition and get the contents but if I boot into it, the results are not the same which is the current requirement that the OS boots up exactly from the same CRC.
Thanks in advance,