Month: August 2017

Every Windows processes represented by an executive process block (EPROCESS). This block contains a lot of information about process and pointers to related structures such as ETHREAD, PEB, Pcb structures.…

Operating System Reverse Engineering