获取当前进程的父进程

DWORD GetParentProcessID(DWORD dwId)  
{  
    LONG                      status;  
    DWORD                     dwParentPID = (DWORD)-1;  
    HANDLE                    hProcess;  
    PROCESS_BASIC_INFORMATION pbi;

    typedef LONG (WINAPI *PROCNTQSIP)(HANDLE,UINT,PVOID,ULONG,PULONG);  
    PROCNTQSIP NtQueryInformationProcess;

    NtQueryInformationProcess = (PROCNTQSIP)GetProcAddress(GetModuleHandle(L"ntdll.dll"), "NtQueryInformationProcess");  

    if (!NtQueryInformationProcess)  
        return;  

    // Get process handle  
    hProcess = OpenProcess(PROCESS_QUERY_INFORMATION,FALSE,dwId);  
    if (!hProcess)  
        return (DWORD)-1;  

    // Retrieve information  
    status = NtQueryInformationProcess( hProcess,  
        ProcessBasicInformation,  
        (PVOID)&pbi,  
        sizeof(PROCESS_BASIC_INFORMATION),  
        NULL  
        );  

    // Copy parent Id on success  
    if  (!status)  
        dwParentPID = pbi.InheritedFromUniqueProcessId;  

    CloseHandle (hProcess);  

    return dwParentPID;  
}