How to transfer path '\Device\BootDevice' to drive format

he_dk · October 2, 2019, 1:09am

When I retrieve system root path from ‘\SystemRoot’ by using function ZwQuerySymbolicLinkObject,
I got '\Device\BootDevice\Windows' in Windows 10.
Can anyone tell me how to change ‘\Device\BootDevice\Windows’ to drive letter, such as ‘C:\Windows’
Thanks~

rod_widdowson · October 2, 2019, 8:17am

Not exactly what you asked, but are you aware of IoQueryFileDosDeviceName ?

he_dk · October 4, 2019, 2:44am

@rod_widdowson said:
Not exactly what you asked, but are you aware of IoQueryFileDosDeviceName ?

Thanks for your advice, rod_widdowson, I will try that~

he_dk · October 8, 2019, 9:15am

I found that if I query it one more time I can get volume format, and then use IoVolumeDeviceToDosName could get drive letter.
That is,
‘\SystemRoot’ ====(ZwQuerySymbolicLinkObject)===> ‘\Device\BootDevice’ ====(ZwQuerySymbolicLinkObject)===>
‘\Device\HarddiskVolume3’ ====(IoVolumeDeviceToDosName)===> 'C:'

Thanks all!