Dumping the FileSystem in RAM
Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance
The devices running on WinCE 3.x-4.x have the file system in RAM, it is
mounted as root directory. How can it be dumped?
As i understood the memory allocated for filesystem is in
LogPtr->fsmemblk[0].startptr. I've dumped that area. There are
registry, files and some other data in the dump. As i see the files are
compressed. How can i decompress it? And how to parse the filesystem?
.
Relevant Pages
- Re: Prefetch Abort in FileSys
... looks at a few magic variables to decide if the RAM contents are valid. ... RAM is in a random state and will easily cause a file system ... NKForceCleanBootAPI in OEMInit to ensure that the filesystem is ... >> Errors like this are almost always problems in memory setup. ... (microsoft.public.windowsce.platbuilder) - Re: Why its called ROM-only
... In the case of "Filesystem", the descriptions tell you how things work. ... ROM *and* RAM. ... all temp data in external file system. ... (microsoft.public.windowsce.platbuilder) - Re: delete big file doesnt free space on filesystem
... Could it be the file you deleted be another file system? ... /filesys/test are two file systems that have the same root directory. ... delete big file doesn't free space on filesystem ... correct freespace. ... (AIX-L) - Re: Please HELP!! How to make a USB drive appear not working ?
... >>>filesystem type that indicates a filesystem not in wide use, ... >> VFAT partition. ... >> table as soon as it saw something that it recognized as a file system ... What writes an empty FAT and root directory? ... (comp.sys.ibm.pc.hardware.storage) - Re: Listing All Files In A Filesystem
... How would I list all files in the Filesystem? ... starting from the root directory. ... over them shouldn't be too tricky as there aren't many "file system ... interrogate them and find out if they control drives, ... (comp.sys.acorn.programmer) |
|