1,359
edits
Changes
→CreateProcessInfo
| 0x20 || 4 || || CodeNumPages
| 0x20 || 4 || || CodeNumPages
|-
|-
| 0x24 || 4 || Bit0 || Is64bit (maybe?)
| 0x24 || 4 || Bit0 || Is64bit
|-
|-
| 0x24 || 4 || Bit3-1 || AddressSpaceType (0=32-bit with map and heap regions, 1=36-bit with map and heap regions, 2=32-bit with heap region only)
| 0x24 || 4 || Bit3-1 || AddressSpaceType (0=32-bit with map and heap regions, 1=36-bit with map and heap regions, 2=32-bit with heap region only), 3=Invalid
|-
|-
| 0x24 || 4 || Bit4 ||
| 0x24 || 4 || Bit4 ||
| 0x24 || 4 || Bit5 || EnableAslr
| 0x24 || 4 || Bit5 || EnableAslr
|-
|-
| 0x24 || 4 || Bit6 ||
| 0x24 || 4 || Bit6 || IsSystem
|-
|-
| 0x28 || 4 || || ResourceLimitHandle
| 0x28 || 4 || || ResourceLimitHandle