1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:
24:
25:
26:
27:
28:
29:

function GetFileNameFromHandle(hFile: Cardinal) : PChar;
var
hFileMap: Cardinal;
pMem: Pointer;
FileName: array[0..MAX_PATH] of char;
begin
  hFileMap:=CreateFileMapping(hFile, nil, PAGE_READONLY, 0, 1, nil);
  if hfilemap=0 then
  begin
    result := '';
    exit;
  end;
  pMem:=MapViewOfFile(hFileMap, FILE_MAP_READ, 0, 0, 1);
  if pmem=nil then
  begin
    result := '';
    CloseHandle(hFileMap);
    exit;
  end;
  if getcurrentprocess=0 then
  begin
    result := '';
    exit;
  end;
  GetMappedFileName(GetCurrentProcess, pMem, FileName, MAX_PATH);
  result:=FileName;
  UnmapViewOfFile(pMem);
  CloseHandle(hFileMap);
end;                    

1:

\Device\HarddiskVolume1\Dokumente und Einstellungen\xxxxx\Anwendungsdaten\Mozilla\Firefox\Profiles\xxxxxx\cookies.sqlite-journal740                    

1:
2:
3:
4:
5:
6:
7:
8:
9:
10:
11:
12:
13:
14:
15:
16:
17:
18:
19:
20:
21:
22:
23:

// DosName-Format: "\Device\HarddiskVolume2"; LogicalName-Format: "X:\"
function DosNameToLogical(DosName:String; var LogicalName:String):Boolean;
var
  r,r2:String;
begin
  Result := False;
  SetLength(r, MAX_PATH+1);
  SetLength(r2, MAX_PATH+1);

  GetLogicalDriveStringsW(MAX_PATH, @r[1]);
  while pos('\', r) > 0 do
  begin
    r[3] := #00;
    QueryDosDeviceW(@r[1], @r2[1], MAX_PATH);
    if CompareMem(@r2[1], @DosName[1], Length(DosName)*SizeOf(Char))  then
    begin
      LogicalName := r[1]+':\';
      Result := True;
      break;
    end;
    Delete(r, 1, 4);
  end;
end;