title: How can I get a process entry point address
body: <p>I create a suspended process <code>test.exe</code> like this:</p>
  
  <pre><code>CreateProcess(
      TEXT( "C:\\Documents and Settings\\willy\\桌面\\project\\test.exe" ), 
      TEXT( "test.exe" ),
      NULL, NULL, FALSE, CREATE_SUSPENDED, NULL, NULL, &amp;si, &amp;pi
  );
  </code></pre>
  
  <p>How can I get the entry point/startup/main address for the process <code>test.exe</code> after it has been created?</p>
  
  <p>Should I look up PE file information or use API like <code>ReadProcessMemory()</code> or <code>VirtualQueryEx()</code></p>