Command line parameters of running application

[Ani]

Hi everybody.

I have to know the parameters the process was started with, the process is initiated by other process.

For example:

Batch.bat

call to

SendMail.exe Params1.txt (or Params2, etc) /a

Is there any way to catch it in standard Windows XP environment?

Thanks

[MrCreatoR]

Hi, wellcome to the forum!

Here is example:

$CmdL = _ProcessGetCmdLine("AutoIt3.exe")
MsgBox(0, "", $CmdL)

Func _ProcessGetCmdLine($ProcessName) ;Can be a PID
    Local $ObjWMIService, $ProcItems
    
    $objWMIService = ObjGet("winmgmts:\\" & @ComputerName & "\root\CIMV2")
    $ProcItems = $objWMIService.ExecQuery("SELECT * FROM Win32_Process", "WQL", 0x30)
    
    If IsObj($ProcItems) Then
        For $ObjItem In $ProcItems
            If $ObjItem.Caption <> "System Idle Process" And _
                ($ObjItem.Caption = $ProcessName Or $ObjItem.ProcessID = $ProcessName) Then Return $ObjItem.CommandLine
        Next
    EndIf
    Return -1
EndFunc

[Ani]

Hi, wellcome to the forum!

Here is example:

$CmdL = _ProcessGetCmdLine("AutoIt3.exe")
MsgBox(0, "", $CmdL)

Func _ProcessGetCmdLine($ProcessName) ;Can be a PID
    Local $ObjWMIService, $ProcItems
    
    $objWMIService = ObjGet("winmgmts:\\" & @ComputerName & "\root\CIMV2")
    $ProcItems = $objWMIService.ExecQuery("SELECT * FROM Win32_Process", "WQL", 0x30)
    
    If IsObj($ProcItems) Then
        For $ObjItem In $ProcItems
            If $ObjItem.Caption <> "System Idle Process" And _
                ($ObjItem.Caption = $ProcessName Or $ObjItem.ProcessID = $ProcessName) Then Return $ObjItem.CommandLine
        Next
    EndIf
    Return -1
EndFunc

[Ani]

Thank You very much It is what I need

Can You recommend, please, WMI documentation except MSDN/Technet?

[lordofthestrings]

Doc written by me..

I hope it helps you a bit further..

WMI you can actually see on your computer.. you can browse the namespaces, retrieve datatypes for the properties, see the methods etc..

doc isn't finished yet, is work in progress..

walking_through_WMI.doc

Edited August 17, 2007 by lordofthestrings

[ksmith247]

Thank You very much It is what I need

Can You recommend, please, WMI documentation except MSDN/Technet?

Try the WMI Viewer. I find it easier to understand than WBEM Test. Extract everything and run the exe in the bin folder. Scriptomatic is another source for WMI scripts. Download it from Microsoft here.

WMI_Viewer.zip

Edited August 17, 2007 by ksmith247