[求]求个修改系统分区卷GUID（下图软件箭头所指） C++源码 （内容里面的有问题仅供参考 [复制链接]

图片:QQ图片20240426150534.png

分区序列号修改工具.rar (643 K) 下载次数:0 uaCI2I  
QQ377718625 at2)%V)  
1 求个修改系统分区卷GUID C++源码(编译后能改成功的) _.EM])b  
2 下面内容里面的有问题仅供参考。 04}c_XFFE  
3 执行到下面标记位置程序就秒退了。 F<dhG>E9  
#define _CRT_SECURE_NO_WARNINGS }/IP\1bG  
#include <windows.h> [[Nn~7  
#include <winternl.h> CwyE8v  
#include <stdio.h> [i>D|X  
rTJ;s  
// https://docs.microsoft.com/en-us/windows-hardware/drivers/ddi/wdm/ne-wdm-_fsinfoclass J@IKXhb7_  
XB:E<I'q!3  
typedef enum _FSINFOCLASS { t~qAA\p}o  
FileFsVolumeInformation = 1, q%)."10}]  
FileFsLabelInformation, P86wRq  
FileFsSizeInformation, 5a2 ;@}%V  
FileFsDeviceInformation, M~Er6Zg  
FileFsAttributeInformation, =vDDfPR  
FileFsControlInformation, c{x:'@%/s'  
FileFsFullSizeInformation, =Pp-9<&S  
FileFsObjectIdInformation, PfhKomt"  
FileFsDriverPathInformation, T)eUo  
FileFsMaximumInformation ,Hp7`I>/  
} FS_INFORMATION_CLASS, * PFS_INFORMATION_CLASS; tZ*>S]qD  
\`-xxhb?e  
typedef NTSTATUS(*FZwSetVolumeInformationFile)(HANDLE, PIO_STATUS_BLOCK, PVOID, ULONG, FS_INFORMATION_CLASS); ,XN4Iy#BZl  
Q#&6J=}  
typedef NTSTATUS(*FZwQueryVolumeInformationFile)(HANDLE, PIO_STATUS_BLOCK, PVOID, ULONG, FS_INFORMATION_CLASS); [g=4'4EZc  
)2u_c=  
int main(int argc, char* argv[]) ]
{0OPU  
{ qK%#$Jgq
A  
const wchar_t* device = L"\\.\c:"; ldRq:M5z  
TIF =fQ  
HANDLE h = CreateFileW(device, 0x40000000, 3, 0, 3, 0x80, 0); 6 \ y?+H1  
if (h == INVALID_HANDLE_VALUE) return 0; bZj5qjl`x  
printf("handle is %d \n", h); p`!<yq2_  
DV*e.Y>  
HMODULE m = GetModuleHandleW(L"ntdll.dll"); %xp 69  
if (!m) return 0; 6J cXhlB`  
printf("module is %p \n", m); ^ 7)H;$  
};gcM@]]E  
FZwSetVolumeInformationFile _ZwSetVolumeInformationFile = (FZwSetVolumeInformationFile)GetProcAddress(m, "ZwSetVolumeInformationFile"); _b 
*gg  
FZwQueryVolumeInformationFile _ZwQueryVolumeInformationFile = (FZwQueryVolumeInformationFile)GetProcAddress(m, "ZwQueryVolumeInformationFile"); '?3
(&  
if (!_ZwSetVolumeInformationFile || !_ZwQueryVolumeInformationFile) return 0; bJeF1LjS  
printf("_ZwSetVolumeInformationFile %p \n", _ZwSetVolumeInformationFile); muhu` k`C  
printf("_ZwQueryVolumeInformationFile %p \n", _ZwQueryVolumeInformationFile); S]4!uv^y  
|ss4pN0X  
NTSTATUS s; Le,;)N
d  
const int size = 1024 * 10; rV*Ri~Vx  
char* buf = new char[size]; 9pk-#/ag  
memset(buf, 0, size); @Q!Tvw/  
IO_STATUS_BLOCK status{ 0 }; EQ"+G[j~x  
F 9r|EU#;  
typedef struct _FILE_FS_VOLUME_INFORMATION { "od2i
\  
    LARGE_INTEGER VolumeCreationTime; 5E}]
U,$  
    ULONG VolumeSerialNumber; /U6r y
'  
    ULONG VolumeLabelLength; Tv|iCYB?  
    BOOLEAN SupportsObjects; vJX0c\e  
    WCHAR VolumeLabel[1]; ~ET XXu${I  
} FILE_FS_VOLUME_INFORMATION, * PFILE_FS_VOLUME_INFORMATION; f%q ?  
s = _ZwQueryVolumeInformationFile(h, &status, buf, size, FileFsVolumeInformation); H#T&7X_<  
PFILE_FS_VOLUME_INFORMATION p1 = (PFILE_FS_VOLUME_INFORMATION)buf; a?X @ D<.;  
p1->VolumeSerialNumber = 0; gTdr  
p1->VolumeLabel[0] = L'\0'; $"6Gv  
s = _ZwSetVolumeInformationFile(h, &status, p1, size, FileFsVolumeInformation); sy6[%8
D$  
printf("%p \n", s); Q*e\I8R}  
X3~@U7DU  
typedef struct _FILE_FS_OBJECTID_INFORMATION { }5Km \OI  
    UCHAR ObjectId[16]; Su+[Q6oC@  
    UCHAR ExtendedInfo[48]; xA0=C  
} FILE_FS_OBJECTID_INFORMATION, * PFILE_FS_OBJECTID_INFORMATION; iRV=I,  
s = _ZwQueryVolumeInformationFile(h, &status, buf, size, FileFsObjectIdInformation);//秒退了。**************
)vY)Mg  
PFILE_FS_OBJECTID_INFORMATION p2 = (PFILE_FS_OBJECTID_INFORMATION)buf; mKUm*m#<R  
p2->ObjectId[0] = 55; `<hMrhfh  
p2->ObjectId[1] = 55; -"x@V7X  
p2->ObjectId[2] = 55; /#?!9c  
p2->ObjectId[3] = 55; tK6=F63e  
p2->ObjectId[4] = 55; 8}Q2!,9Q  
p2->ObjectId[5] = 55; u!t<2`:h  
p2->ObjectId[6] = 55; vVjk9_Ul  
p2->ObjectId[7] = 55; c&PaJm  
s = _ZwSetVolumeInformationFile(h, &status, p2, size, FileFsObjectIdInformation);//秒退了。************** *-E'$  
printf("%p \n", s); f$-- y|=  
*{O[ }  
//typedef struct _FILE_FS_DRIVER_PATH_INFORMATION { bu=RU  
//  BOOLEAN DriverInPath; YmHu8H_Q  
//  ULONG   DriverNameLength; [&lH[:Y#  
//  WCHAR   DriverName[1]; J2$,'(!(  
//} FILE_FS_DRIVER_PATH_INFORMATION, * PFILE_FS_DRIVER_PATH_INFORMATION; sdN1BV2  
//PFILE_FS_DRIVER_PATH_INFORMATION p3 = (PFILE_FS_DRIVER_PATH_INFORMATION)buf; +{%)}?F  
//p3->DriverInPath = TRUE; ,=: -&~?  
//p3->DriverNameLength = 0x200; #K /95!)  
//wcscpy(p3->DriverName, L"\\\\?\\Volume{c6708e20-53cd-4265-a031-af74f04ca24b}"); ghTue*A  
//s = _ZwQueryVolumeInformationFile(h, &status, buf, size, FileFsDriverPathInformation); Lx|0G $  
N7^sn!JB  
CloseHandle(h); ~CHVU3  
system("pause"); 0="wxB  
return 0; [7,q@>:CS  
}