Share via

EwfMgrRestore (Standard 8)

  • Article

7/8/2014

Review the use, syntax, parameters, and return values of the EwfMgrRestore function of the EWF API in Windows Embedded 8 Standard (Standard 8).

This function restores one overlay level on the specified Enhanced Write Filter (EWF)-protected volume, discarding all changes in the current level.

Syntax

BOOL EwfMgrRestore(
  HANDLE hDevice
);

Parameters

  • hDevice
    [in] Handle to the EWF-protected volume.

Return Value

Returns TRUE if successful; otherwise, returns FALSE. Call GetLastError for extended error information.

Remarks

The overlay is restored on the next restart and is supported for disk overlays only. The API ignores this function when it is called on RAM-based overlays.

If the current level is greater than 1, the data that is contained in the current level is discarded and the current level is decremented by 1.

If the current level is 1, all data that is contained in the current level is discarded and the current level is set to 1 with a new overlay.

Example

The DoEwfRestore function in EWF API Code Sample (Sample.cpp) shows you how to use the EwfMgrRestore function.

Requirements

Header

ewfapi.h

Library

ewfapi.lib

See Also

Reference

EwfMgrCheckpoint
EwfMgrSetLevel

Concepts

EWF API Functions