ReactOS documentation is good starting point for learning Windows internals for security researchers especially for developing malware targeting Windows. ReactOS is an opensource implementation of Windows, hence it uses structures and APIs similar to Windows.
reactos.org
reactos.org
ReactOS Wiki
reactos.org
Techwiki:API Reference - ReactOS Wiki
reactos.org