1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:
30:
31:
32:
33:
34:
35:
36:
37:
38:
39:
40:
41:

{*******************************************************************************
  Procedure: GetFileNameByHandle
  Author   : EvilSoft
  Date     : 2008-09-04
  Comment  : Gets the filename associated to the given handle.
             Does not work properly when requested objects do not answer.
             Processing just stops.
             There is no proper way in user mode for this task.
*******************************************************************************}
function GetFileNameByHandle(FileHandle: THandle): string;
var
  FileNameInfo      : TFileNameInformation;
  ObjectNameInfo    : TObjectNameInformation;
  IoStatusBlock     : TIOStatusBlock;
  res, dwReturn     : DWORD;
begin
  result := '';
  res := NtQueryInformationFile(FileHandle, @IoStatusBlock, @FileNameInfo,
    SizeOf(FileNameInfo.FileName), FileNameInformation);
  if res = STATUS_SUCCESS then
  begin
    res := NtQueryObject(FileHandle, ObjectNameInformation,
      @ObjectNameInfo, SizeOf(ObjectNameInfo.Name.Buffer), @dwReturn);
    if res = STATUS_SUCCESS then
    begin
      SetLength(result, MAX_PATH);
      SetLength(result, WideCharToMultiByte(CP_ACP, 0,
        @ObjectNameInfo.Name.Buffer[ObjectNameInfo.Name.MaximumLength -
        ObjectNameInfo.Name.Length],
          ObjectNameInfo.Name.Length div SizeOf(WideChar),
        @result[1], MAX_PATH, nil, nil));
    end
    else
    begin
      SetLength(result, MAX_PATH);
      SetLength(result, WideCharToMultiByte(CP_ACP, 0,
        @FileNameInfo.FileName[0], FileNameInfo.FileNameLength div
        SizeOf(WideChar), @result[1], MAX_PATH, nil, nil));
    end;
  end;
end;