determine comandline call of task

[Brummelchen]

with process explorer (sysinternals) i can see it, but how to with nsis?

eg task/name "explorer.exe" commandline: "explorer.exe /e c:\" started from: blah

WMIC from windows can list all processes but cannot handle wildcards.

cheers.

[LoRd_MuldeR]

Why does your NSIS installer need to obtain the command-line of another process?

[Brummelchen]

i dont write installers, i code some other stuff for me.

with WMIC i need to use an array and filtering - not smart.

[Anders]

Why is there no supported way to get the command line of another process?

[Brummelchen]

ofc - or not ► http://www.autoitscript.com/forum/to...nning-process/

[LoRd_MuldeR]

For 32-bit processes running on x86 systems, the PEB is "generally" located at 0x7ffd6000. At an offset of 0x10 bytes from the start of the PEB, you will find the pointer to the RTL_USER_PROCESS_PARAMETERS structure. The pointer to the unicode string containing the command line is located at an offset of 0x040 from the start of the RTL_USER_PROCESS_PARAMETERS structure.

Having to dig in another process's memory to dump a data structure whose exact location is not officially documented and may be subject to change in future operating system versions sounds a bit "dubious" to me. The WMI method feels more credible to me...