procedure CreateWinNTProcessList();
var
 PIDArray: array[0..1023] of DWORD;
 cb: DWORD;
 I: Integer;
 ProcCount: Integer;
 hMod: longint;
 hProcess: THandle;
 ModuleName: array[0..300] of Char;
begin
 EnumProcesses(@PIDArray, SizeOf(PIDArray), cb);
 ProcCount := cb div SizeOf(DWORD);
 for I := 0 to ProcCount - 1 do
 begin
   hProcess := OpenProcess(PROCESS_QUERY_INFORMATION or
     PROCESS_VM_READ,
     False,
     PIDArray[I]);
   if (hProcess <> 0) then
   begin
     EnumProcessModules(hProcess, @hMod, SizeOf(hMod), cb);
     GetModuleFilenameEx(hProcess, hMod, ModuleName, SizeOf(ModuleName));
     writeln(ModuleName);
     CloseHandle(hProcess);
   end;
 end;
end;

QueryFullProcessImageName
GetProcessImageFileName
NtQueryInformationProcess