http://bugs.winehq.org/show_bug.cgi?id=16543
--- Comment #22 from Anastasius Focht focht@gmx.net 2009-05-03 16:49:28 --- Hello,
--- quote --- '"C:\Program Files\PopCap Games\Bookworm Deluxe\Bookworm.exe" '
In other words, there is a rogue space after the command line. --- quote ---
So this trailing whitespace character (0x20) also applies to all other explorer/shell spawned processes. That "lpCmd" parameter passed to CreateProcess(W) must already contain that whitespace to let the command line show up that way in process explorer.
That leaves the question where it gets added. The most likely candidate is ShellExecute(Ex)(W). Maybe someone can extend "shlexec" part of shell32 test suite and verify this behaviour in Windows. Alternatively you could try native shell32 and friends overrides and do relay log.
Regards