there is no way to do with windows api as Process32First?
with taskmanager you can see the full path of a process and there is no need to be administrator...
That's because they are in-memory processes: you will need to do more to see
from where a process is launched.
Why do you
really need it?
As usual you can find those things on
http://www.delphibasics.info/ btw.
The best source available for anyone dabbling with hacker things in Object Pascal....
You will find it is full of useful snippets for the
idiots,
malware writers and "system protectors".
Why do you need such techniques?
It would also help if you are able to translate C code into Object Pascal and examine anything sysinternals...