This structure defines basic information about the process.
NtQueryInformationProcesswithProcessBasicInformation(0)
The exit code of the process. If the process has not exited, this field contains STATUS_PENDING.
RtlExitUserProcessNtTerminateProcess
The address of the Process Environment Block. See PEB for more details. To query the address of the 32-bit PEB32, use ProcessWow64Information (26).
The bit mask indicating on which processors the threads from the process are allowed to run.
PROCESSINFOCLASSvalue ofProcessAffinityMask(21)
The base priority for the threads in the process.
PROCESSINFOCLASSvalue ofProcessBasePriority(5)
The PID of the process.
CLIENT_ID
The PID of the process's parent from which it inherits various attributes.
PS_ATTRIBUTE_PARENT_PROCESS
PROCESS_EXTENDED_BASIC_INFORMATION