_EPROCESS 썸네일형 리스트형 Info PEB, EPROCESS, KPROCESS, TEB, ETHREAD, KTHREAD ||| [Ctrl + C] -> [Ctrl + F] [Ctrl + V] -> Enter Key ||| PEB ||| EPROCESS ||| KPROCESS ||| TEB ||| ETHREAD ||| KTHREAD kd> dt _PEB nt!_PEB +0x000 InheritedAddressSpace : UChar +0x001 ReadImageFileExecOptions : UChar +0x002 BeingDebugged : UChar +0x003 SpareBool : UChar +0x004 Mutant : Ptr32 Void +0x008 ImageBaseAddress : Ptr32 Void +0x00c Ldr : Ptr32 _PEB_LDR_DATA +0x010 ProcessParameters : Ptr3.. 더보기 이전 1 다음
