Windows XPE Enhanced Write Filter header conversion 1.2.0

By Magenta Systems Ltd

Freeware 30 Sep 2013

In category

Components > Files and Drives > Disk Access


The Windows XP Embedded Enhanced Write Filter (EWF) is used to protect one or more disk volumes by intercepting write requests to the volume and redirecting it to an overlay volume, either RAM or another disk. Note the EWF header conversion is only useful on Windows XP Embedded with the Enhanced Write Filter DLL installed. It is not available on Windows XP Pro, or other operating systems.

EWF is designed to protect the Windows boot volume so effectively it's write protected and boots up identically each time, with any changes made to a protected drive being lost on power down. If changes need to be saved, EWF API calls are needed followed by a reboot to actually update the protected drive.

Microsoft provides a command line utility EWFMGR.EXE that reports any protected volumes and provides various commands that will be processed on the next restart of the PC.

The EWF API allows these commands to be made from Windows applications. The Microsoft EWFAPI.H C header file is included, with the Microsoft help file that details the various APIs. The EWF API functions enable applications to query and modify EWF configuration settings for protected volumes. Typical usage scenarios for these functions include:

  • Disabling/enabling EWF for a protected volume.
  • Restoring or discarding an overlay level.
  • Creating a checkpoint by adding an overlay level.
  • Committing the current overlay.
  • Persisting data through a reboot.
As well as a Delphi conversion of the EWF APIs, this package includes a Windows demonstration application using the APIs. Please note this program has only been testing on Windows WP Embedded running on a flash memory C drive (IDE interface) with a single overlay in RAM. It has not been tested with a hard disk which potentially offer multiple overlays.


  • Status: Fully functional
  • Source: FW
  • Size: 540 954kB


  • Delphi 2005 (VCL)
  • Delphi 2006 (Win32)
  • Delphi 2007 (VCL)
  • Delphi 2009
  • Delphi 2010
  • Delphi 7
  • Delphi XE
  • Delphi XE 2
  • Delphi XE3