1,359
edits
Changes
Jump to navigation
Jump to search
Line 526:
Line 526: − + − + Line 534:
Line 534: − +
→CreateProcessInfo
| 0x20 || 4 || || CodeNumPages
| 0x20 || 4 || || CodeNumPages
|-
|-
| 0x24 || 4 || Bit0 || Is64bit (maybe?)
| 0x24 || 4 || Bit0 || Is64bit
|-
|-
| 0x24 || 4 || Bit3-1 || AddressSpaceType (0=32-bit with map and heap regions, 1=36-bit with map and heap regions, 2=32-bit with heap region only)
| 0x24 || 4 || Bit3-1 || AddressSpaceType (0=32-bit with map and heap regions, 1=36-bit with map and heap regions, 2=32-bit with heap region only), 3=Invalid
|-
|-
| 0x24 || 4 || Bit4 ||
| 0x24 || 4 || Bit4 ||
| 0x24 || 4 || Bit5 || EnableAslr
| 0x24 || 4 || Bit5 || EnableAslr
|-
|-
| 0x24 || 4 || Bit6 ||
| 0x24 || 4 || Bit6 || IsSystem
|-
|-
| 0x28 || 4 || || ResourceLimitHandle
| 0x28 || 4 || || ResourceLimitHandle