Get the keys (arguments) with which the process was started

We get the keys for starting the process by its identifier (PID). You can get them only from the process of the corresponding bit capacity. That is, a 32-bit program cannot get this information from a 64-bit process and vice versa. To access processes running on behalf of another user, you need to give your process the SeDebugPrivilege privilege [Set process privileges to perform system operations].


pid - process ID

cmdLine - is a variable that will contain a line consisting of the path to the process file and its launch keys. If there are no keys, only the path to the process file.


True if the operation is successful, False if not.

Author: admin