将Windows设备文件名转换为驱动器号

Question

I am trying to get the filename associated with a process handle in C, and since my code needs to run on Windows XP I'm using GetProcessImageFileName (rather than QueryFullProcessImageName ).

However, GetProcessImageFileName returns the path in device form, eg \\device\\harddiskvolume0\\ - how can I convert this to a drive letter?

Answer 1

I was going to suggest GetModuleFileNameEx like Luke did in comments.

QueryDosDevice() on all drive letters (you can find all the drive letters with GetLogicalDrives() ) would be another bet, though it's theoretically possible that you could get a path without a drive letter, or symbolic links could screw up a straightforward string compare.

But.. How about this... You should be able to prefix the NT path with \\??\\GLOBALROOT (this is from memory, it might not be exactly that) and then use it in functions like CreateFileW() . (AFAIK it has to be the Unicode versions of the file APIs..)

Answer 2

You can try convert the drive letter form to device form instead, and here is what I did, hope it helps:

    TCHAR szTemp[MAX_PATH] = {0};
    _tcsncpy(szTemp, lpszImageFile, 2);
    QueryDosDevice(szTemp, szImageFile, MAX_PATH);

    _tcsncat(szImageFile, lpszImageFile+2, _tcslen(lpszImageFile) - 2);

In this code, lpszImageFile is the full path name of the process, eg c:\\program files\\test.exe.