NOTE : This is going to be a very long, verbose, bizarre and wierd post. So try not to fall asleep. Before I start, a big thanks must go to my colleague Seva Titov for pointing this issue out to me. Ok…………Here we go……………. Consider this sorry...

QUESTION - What is the easiest way to view an arbitrary process's command line? SHORT ANSWER - Fire up the debugger (ntsd/windbg), attach to the process, fix symbols and dump out the process's environment Block (PEB). LONG ANSWER - For 32-bit processes...