Re: Converting to and from *extended file paths * - Article 1564 - go-pugleaf

Article View: borland.public.cppbuilder.nativeapi

Article #1564

Back to borland.public.cppbuilder.nativeapi Previous Next

Re: Converting to and from extended file paths

#1564

From: Bob Gonder
Date: Sun, 15 Jul 2007 15:38

27 lines
1849 bytes

Mike Collins wrote:

>Hi Bob, in this particular case, i'm hooking the lowest native api call used 
>to create a process i.e. Nt/ZwCreateSection.  This is the format that the 
>file path is returned in, when i query the file handle of this api (using 
>ZwQueryObject).

Do you have a link to this Query?
MSDN doesn't have that function.

>>>\Device\Harddisk\Volume1\Windows\system32\notepad.exe

If that is the actual string returned, then maybe this would work?

I suppose you just know that it is a device of some sort.
"\\Device"

You can  GetDriveType
"\\Harddisk"
"\\Cdrom"

You can query the drive for PARTITION_INFORMATION_EX
"\\Volume"+pie.PartitionNumber
Or my previous suggestion GetVolumeInformation
"\\"+lpVolumeNameBuffer

Add the path.

Technical Details

Message-ID: <cndk93hd6roqqs7lsso36q8lo9eibusamu@4ax.com>

Path:

arc1-ca.pugleaf.net!g2news1.google.com!news1.google.com!border1.nntp.dca.giganews.com!nntp.giganews.com!newsfeed00.sul.t-online.de!newsfeed01.sul.t-online.de!t-online.de!newsgroups.borland.com!not-for-mail

References: <4697853e@newsgroups.borland.com> <pn4f93pgj3ghntrb47c12he658laicl5ps@4ax.com> <4698ff14$1@newsgroups.borland.com>

Show Full Headers

Complete Article Headers

X-Google-Thread: 10cc67,7324c995313c3b47
X-Google-Attributes: gid10cc67,public,usenet
X-Google-Language: ENGLISH,ASCII-7-bit
From: Bob Gonder <notbg@notmindspring.invalid>
Newsgroups: borland.public.cppbuilder.nativeapi
Subject: Re: Converting to and from *extended file paths *
Date: Sun, 15 Jul 2007 08:38:34 -0700
Organization: MindSpring Enterprises, Inc.
Reply-To: notbg@notmindspring.invalid
Message-ID: <cndk93hd6roqqs7lsso36q8lo9eibusamu@4ax.com>
References: <4697853e@newsgroups.borland.com> <pn4f93pgj3ghntrb47c12he658laicl5ps@4ax.com> <4698ff14$1@newsgroups.borland.com>
X-Newsreader: Forte Agent 1.93/32.576 English (American)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
NNTP-Posting-Host: 69.69.90.153
X-Trace: newsgroups.borland.com 1184513912 69.69.90.153 (15 Jul 2007 08:38:32 -0700)
Lines: 29
Path: arc1-ca.pugleaf.net!g2news1.google.com!news1.google.com!border1.nntp.dca.giganews.com!nntp.giganews.com!newsfeed00.sul.t-online.de!newsfeed01.sul.t-online.de!t-online.de!newsgroups.borland.com!not-for-mail

Reply to Parent Message