EwfMgrGetPersistentData
3/21/2011
This function gets the persistent data for an Enhanced Write Filter (EWF)-protected volume.
Syntax
BOOL EwfMgrGetPeristentData(
HANDLE hDevice,
LPBYTE lpPersistentData,
DWORD cbPersistentData
);
Parameters
- hDevice
[in] Handle to the EWF-protected volume.
- lpPersistentData
[out] Long pointer to a buffer to receive the persistent data.
- cbPersistentData
[in] Specifies the size, in bytes, of the buffer that is pointed to by lpPersistentData. Only the first EWF_MAX_PERSISTENT_DATA bytes are retrieved.
Return Value
If the function succeeds, the return value is TRUE. If the function fails, the return value is FALSE. Call GetLastError for extended error information.
Remarks
This function is supported on RAM overlays with an associated EWF overlay store tracking its protection settings. However, it is not supported on RAM overlays that are described only within the registry.
Example
The DoEwfPersistCommands function included in the EWF API Code Sample (Sample.cpp), shows you how to use the EwfMgrGetPeristentData function.
Requirements
OS Versions: Standard 7
Header: Ewfapi.h
Link Library: Ewfapi.lib