Programming Forums > Application Development > C++

dc2000 · Jun 7th, 2005, 8:52 PM

Hi everyone:

I seem to have an issue with GetProcessImageFileName() function on my Windows XP. It returns file path that looks like this:

"\Device\HarddiskVolume1\Windows\system32\notepad.exe"

But when I try to open this file I get an error "ERROR_PATH_NOT_FOUND" -- what is this "\Device\HarddiskVolume1" part?????

Anybody know -- please help?

The Dark · Jun 8th, 2005, 3:34 AM

Try using GetModuleFileNameEx instead.
You can pass NULL as the module handle (second parameter) and it gives the top level module.

(Toggle Plain Text)

    GetModuleFileNameEx(hProcess, NULL, name, sizeof name);

dc2000 · Jun 8th, 2005, 4:06 AM

Thanks, I'll try...

I was also able to locate that this is a "symbolic-link" and the closest API to decode it could be ZwQuerySymbolicLinkObject() function from DDK.

Any thoughts on it?

Jun 7th, 2005, 8:52 PM	#1
dc2000 Newbie Join Date: Jun 2005 Location: Portland, OR Posts: 12 Rep Power: 0	GetProcessImageFileName() and "\Device\HarddiskVolume1" Hi everyone: I seem to have an issue with GetProcessImageFileName() function on my Windows XP. It returns file path that looks like this: "\Device\HarddiskVolume1\Windows\system32\notepad.exe" But when I try to open this file I get an error "ERROR_PATH_NOT_FOUND" -- what is this "\Device\HarddiskVolume1" part????? Anybody know -- please help?

Jun 8th, 2005, 3:34 AM	#2
The Dark Expert Programmer Join Date: Jun 2005 Posts: 915 Rep Power: 4	Try using GetModuleFileNameEx instead. You can pass NULL as the module handle (second parameter) and it gives the top level module. (Toggle Plain Text) GetModuleFileNameEx(hProcess, NULL, name, sizeof name); GetModuleFileNameEx(hProcess, NULL, name, sizeof name);

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

Jun 8th, 2005, 4:06 AM	#3
dc2000 Newbie Join Date: Jun 2005 Location: Portland, OR Posts: 12 Rep Power: 0	Thanks, I'll try... I was also able to locate that this is a "symbolic-link" and the closest API to decode it could be ZwQuerySymbolicLinkObject() function from DDK. Any thoughts on it?

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Programming Forums > Application Development > C++

GetProcessImageFileName() and "\Device\HarddiskVolume1"