enum peb_bitfield_t { ImageUsedLargePages = 0x1, IsProtectedProcess = 0x2, IsLegacyProcess = 0x4, IsImageDynamicallyRelocated = 0x8, SkipPatchingUser32Forwarders = 0x10, IsPackagedProcess = 0x20, IsAppContainer = 0x40, IsProtectedProcessLight = 0x40, IsLongPathAwareProcess = 0x80, }; enum SameTebFlags_t { DbgSafeThunkCall = 0x1, DbgInDebugPrint = 0x2, DbgHasFiberData = 0x4, DbgSkipThreadAttach = 0x8, DbgWerInShipAssertCode = 0x10, DbgRanProcessInit = 0x20, DbgClonedThread = 0x40, DbgSuppressDebugMsg = 0x80, RtlDisableUserStackWalk = 0x100, RtlExceptionAttached = 0x200, InitialThread = 0x400, SessionAware = 0x800, LoadOwner = 0x1000, LoaderWorker = 0x2000, SkipLoaderInit = 0x4000, };