hello, i am trying to convert a path returned from NtQueryInformationProcess to a WIN32 path. i have been searching for days until i found your post about the RtlNtPathNameToDosPathName function. can you please tell me how its 4 arguments work? i would really really appreciate it. thank you so much again. example: i have a path "\Device\HarddiskVolume1\data\work_binary\client.exe" whichi i need to convert to "c:\data\work_binary\client.exe". i found this on a russian page but it doesn't seem to work or maybe i did not understand the last parameter NTSTATUS RtlNtPathNameToDosPathName (UNICODE_STRING* NtPathName, UNICODE_STRING* DosPathName, ULONG* ReturnedLength, LPWSTR* FilePath) again thank you so much. my email is bishr_adi@hotmail.com