A forum for reverse engineering, OS internals and malware analysis 

Ask your beginner questions here.
 #24566  by IamBeginner
 Wed Dec 10, 2014 7:29 am
Hello,I want to \Device\HarddiskVolume2\Windows\System32\taskmgr.exe convert c:\Windows\System32\taskmgr.exe.
What should i do ?
 #24567  by EP_X0FF
 Wed Dec 10, 2014 7:58 am
NtOpenSymbolicLinkObject, NtQuerySymbolicLinkObject or QueryDosDevice are your friends.