Win32 Windows Volume Programming









What do we have in this session?

In this session we will learn the programming environment setup (VC++) that will be used throughout the tutorial. We will learn the Windows volume, disk/drive, directory and Master File Table (MFT) will working program examples to demonstrate the use of Windows APIs. Take note that the MFT program examples use the undocumented Windows APIs.

  1. Some Notes to Students

  2. Environment for the Program Examples (Build and Run)

  3. Brief Introduction

  4. File System Recognition

    File System Recognition Components and Use

    Computing a File System Recognition Checksum Code Snippet

  5. Obtaining File System Recognition Information Example

  6. Naming a Volume

  7. Enumerating Volumes

    Enumerating Volume GUID Paths Example

  8. Obtaining Volume Information Program Example

  9. Getting the System Information Program Example

  10. Another Basic Windows System Information Program Example

  11. Getting Logical Drive Program Example

  12. Getting the Logical Drive String Program Example

  13. Getting Drive Type Program Example

  14. Change Journals

  15. Change Journal Records

    Using the Change Journal Identifier

    Creating, Modifying, and Deleting a Change Journal

    Obtaining a Volume Handle for Change Journal Operations

    Change Journal Operations

  16. Walking a Buffer of Change Journal Records

  17. Walking a Buffer of Change Journal Records Program Example




  1. Mounted Folders (drives)

  2. How to create a mounted drive

    How to remove a mounted drive

  3. Creating Mounted Folders Programmatically

  4. Enumerating Mounted Folders Program

    Determining Whether a Directory Is a Mounted Folder

    Assigning a Drive Letter to a Volume

    Mounted Folder Functions

    General-Purpose Mounted Folder Functions

    Volume-Scanning Functions

    Mounted Folder Scanning Functions

  5. Mounted Folder Program Examples

  6. Displaying Volume Paths Program Example

  7. Editing Drive Letter Assignments Program Example

  8. Creating a Mounted Folder Program Example

  9. Deleting a Mounted Folder Program Example

  10. Windows Master File Table (MFT)

  11. Master File Table Program Example 1

  12. Master File Table Program Example 2: Reading and Dumping the Deleted Files

  13. Master File Table Program Example 3: Using Non-Windows Types

  14. Listing the Deleted Files from Master File Table (MFT)

  15. Another Day, Another MFT Program Example: List, Recover and Delete the Deleted Files from Master File Table

  16. ...Continue: Adding the ntfs.h header file to the project

  17. ...Continue: Deleting permanently the deleted file & Windows Master Boot Record (MBR)

  18. Volume Management Reference

      Volume Management Functions

      Volume Management Control Codes

      Volume Management Structures

< Win32 Programming | Windows Volume 1 >