Usa
NtQueryInformationProcess
Código:
typedef struct _PROCESS_BASIC_INFORMATION {
PVOID Reserved1;
//PPEB PebBaseAddress;
PVOID PebBaseAddress;
PVOID Reserved2[2];
ULONG_PTR UniqueProcessId;
PVOID Reserved3;
} PROCESS_BASIC_INFORMATION;
PROCESS_BASIC_INFORMATION PBI;
NtQueryInformationProcess(GetCurrentProcess(), 0, &PBI, sizeof(PBI), 0);
Saludos.