enum peb_bitfield_t
{
ImageUsedLargePages = 0x1,
IsProtectedProcess = 0x2,
IsLegacyProcess = 0x4,
IsImageDynamicallyRelocated = 0x8,
SkipPatchingUser32Forwarders = 0x10,
IsPackagedProcess = 0x20,
IsAppContainer = 0x40,
IsProtectedProcessLight = 0x40,
IsLongPathAwareProcess = 0x80,
};
enum SameTebFlags_t
{
DbgSafeThunkCall = 0x1,
DbgInDebugPrint = 0x2,
DbgHasFiberData = 0x4,
DbgSkipThreadAttach = 0x8,
DbgWerInShipAssertCode = 0x10,
DbgRanProcessInit = 0x20,
DbgClonedThread = 0x40,
DbgSuppressDebugMsg = 0x80,
RtlDisableUserStackWalk = 0x100,
RtlExceptionAttached = 0x200,
InitialThread = 0x400,
SessionAware = 0x800,
LoadOwner = 0x1000,
LoaderWorker = 0x2000,
SkipLoaderInit = 0x4000,
};
Comments