Hello,I want to \Device\HarddiskVolume2\Windows\System32\taskmgr.exe convert c:\Windows\System32\taskmgr.exe.
What should i do ?
What should i do ?
A forum for reverse engineering, OS internals and malware analysis
EP_X0FF wrote:NtOpenSymbolicLinkObject, NtQuerySymbolicLinkObject or QueryDosDevice are your friends.Thank you very much