All pastes #927342 Raw Edit

NtQueryInformationProcess

public text v1 · immutable
·published 2008-03-04 06:00 UTC
rendered paste body
hello,
 
 
i am trying to convert a path returned from NtQueryInformationProcess to a WIN32 path. i have been searching for days until i found your post about the RtlNtPathNameToDosPathName function. can you please tell me how its 4 arguments work? i would really really appreciate it. thank you so much again.
 
example:
i have a path "\Device\HarddiskVolume1\data\work_binary\client.exe" whichi i need to convert to "c:\data\work_binary\client.exe".
 
i found this on a russian page but it doesn't seem to work or maybe i did not understand the last parameter

NTSTATUS RtlNtPathNameToDosPathName (UNICODE_STRING* NtPathName, UNICODE_STRING* DosPathName, ULONG* ReturnedLength, LPWSTR* FilePath)

 

again thank you so much. my email is bishr_adi@hotmail.com