I thought it was possible using the same technique that you can use to get an external command line procedure , and that seems _RTL_USER_PROCESS_PARAMETERS->CurrentDirectoryPathto sound promising.
(The example does not indicate that the APIs are mostly undocumented and that they are not future evidence , therefore YMMV)
source
share