Get the command line of a process
Get Process Info with NtQueryInformationProcess
Get command line string of 64-bit process from 32-bit process
hooking
Getting a command line for another process