PEPROCESS EP = NULL; ..... ..... ..... status = PsLookupProcessByProcessId((HANDLE)pid, &EP);
NT_SUCCESS
peb = (DWORD)EP->Peb;
" left of 'Peb' specifies undefined struct/union '_EPROCESS' "
peb = (DWORD)EP.Peb;
var
This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)