获得进程的EPROCESS(13) DWORD Addr = GetEprocessFromPid( (DWORD)GetCurrentProcessId() ); printf("result: Current EPROCESS's Address is 0x%x \n\r",Addr); return TRUE;}