//////////////////////////////////////////////////////////////////////////
//
// ConvertDeviceName
//
// 将形如 "\\Device\\HarddiskVolumeX\\xxxx的内核文件路径
// 转化为 DOS文件路径(c:\\xxxx\\xxx....)
//
//////////////////////////////////////////////////////////////////////////
NTSTATUS ConvertDeviceName(LPCWSTR FileName , LPCWSTR OutFileName)
{
	HANDLE	FileHandle ; 
	OBJECT_ATTRIBUTES oba; 
	IO_STATUS_BLOCK iosb ; 
	UNICODE_STRING uniname; 
	NTSTATUS	stat ; 
	PFILE_OBJECT FileObject ; 


	RtlInitUnicodeString(&uniname , FileName);

	InitializeObjectAttributes(&oba , &uniname , OBJ_CASE_INSENSITIVE | OBJ_KERNEL_HANDLE , 0 , 0 );


	stat = IoCreateFile(&FileHandle , 
		FILE_READ_ATTRIBUTES , 
		&oba,
		&iosb , 
		0,
		FILE_ATTRIBUTE_NORMAL , 
		FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE ,
		FILE_OPEN,
		FILE_NON_DIRECTORY_FILE | FILE_SYNCHRONOUS_IO_NONALERT  , 
		0 ,
		0,
		CreateFileTypeNone , 
		0,
		IO_NO_PARAMETER_CHECKING
		);

	if (!NT_SUCCESS(stat))
	{
		return stat ; 
	}
	
	stat = ObReferenceObjectByHandle(FileHandle , 
		GENERIC_READ , 
		*IoFileObjectType , 
		KernelMode , 
		&FileObject , 
		NULL);

	if (!NT_SUCCESS(stat) ||
		!FileObject ||
		!FileObject->FileName.Length ||
		!FileObject->FileName.Buffer)
	{
		ZwClose(FileHandle);
		return STATUS_INVALID_PARAMETER ; 
	}
	//开始获取DosName

	{
		UNICODE_STRING VolumeName ; 
		UNICODE_STRING FanalName ; 
		BOOL	WillFreeVolumeName = TRUE ; 


		VolumeName.Buffer = NULL ;
		VolumeName.Length = 0 ; 
		VolumeName.MaximumLength = 0 ; 
		

		stat = RtlVolumeDeviceToDosName(FileObject->DeviceObject , &VolumeName);

		if (!NT_SUCCESS(stat))
		{
			RtlInitUnicodeString(&VolumeName , L"\\" );
			WillFreeVolumeName = FALSE ; 
		}
		if (FileObject->FileName.Length + VolumeName.Length >= 0x800 * 2)
		{
			ObDereferenceObject(FileObject);
			ZwClose(FileHandle);
			if (WillFreeVolumeName && MmIsAddressValid(VolumeName.Buffer))
			{
				ExFreePool(VolumeName.Buffer);
			}
			return STATUS_INVALID_PARAMETER ; 
		}

		RtlZeroMemory((PVOID)OutFileName , 0x800 * 2);

		RtlInitUnicodeString(&FanalName , OutFileName);

		FanalName.MaximumLength = 0x800 * 2 ;
		
		//byte 

		if (!NT_SUCCESS(RtlAppendUnicodeStringToString(&FanalName , &VolumeName)))
		{
			ObDereferenceObject(FileObject);
			ZwClose(FileHandle);
			if (WillFreeVolumeName && MmIsAddressValid(VolumeName.Buffer))
			{
				ExFreePool(VolumeName.Buffer);
			}
			return STATUS_INVALID_PARAMETER ;			
		}

		if (!NT_SUCCESS(RtlAppendUnicodeStringToString(&FanalName , &FileObject->FileName)))
		{
			ObDereferenceObject(FileObject);
			ZwClose(FileHandle);
			if (WillFreeVolumeName && MmIsAddressValid(VolumeName.Buffer))
			{
				ExFreePool(VolumeName.Buffer);
			}
			return STATUS_INVALID_PARAMETER ;
		}
		
		ObDereferenceObject(FileObject);
		ZwClose(FileHandle);
		if (WillFreeVolumeName && MmIsAddressValid(VolumeName.Buffer))
		{
			ExFreePool(VolumeName.Buffer);
		}

		return STATUS_SUCCESS ; 
	

		

	}

}