From 109012cca5306084db59d0451f684477001c7b8d Mon Sep 17 00:00:00 2001 From: midipix Date: Sun, 24 Dec 2017 20:08:06 +0000 Subject: nt_process: added foreign process creation flags. --- include/ntapi/nt_process.h | 19 +++++++++++++++++++ 1 file changed, 19 insertions(+) (limited to 'include') diff --git a/include/ntapi/nt_process.h b/include/ntapi/nt_process.h index a2e549b..699bcb5 100644 --- a/include/ntapi/nt_process.h +++ b/include/ntapi/nt_process.h @@ -193,6 +193,25 @@ typedef enum _nt_process_opcode_idx { #define NT_PROCESS_STARTUP_INFO_UNTRUSTED_SOURCE (0x00008000) +/* foreign process creation flags */ +#define NT_PROCESS_INTEROP_FLAG_DEBUG_PROCESS_TREE (0x00000001) +#define NT_PROCESS_INTEROP_FLAG_DEBUG_ONLY_THIS_PROCESS (0x00000002) +#define NT_PROCESS_INTEROP_FLAG_SUSPENDED (0x00000004) +#define NT_PROCESS_INTEROP_FLAG_DETACHED_PROCESS (0x00000008) +#define NT_PROCESS_INTEROP_FLAG_NEW_CONSOLE (0x00000010) +#define NT_PROCESS_INTEROP_FLAG_NEW_PROCESS_GROUP (0x00000200) +#define NT_PROCESS_INTEROP_FLAG_UNICODE_ENVIRONMENT (0x00000400) +#define NT_PROCESS_INTEROP_FLAG_SEPARATE_WOW_VDM (0x00000800) +#define NT_PROCESS_INTEROP_FLAG_SHARED_WOW_VDM (0x00001000) +#define NT_PROCESS_INTEROP_FLAG_INHERIT_PARENT_AFFINITY (0x00010000) +#define NT_PROCESS_INTEROP_FLAG_PROTECTED_PROCESS (0x00040000) +#define NT_PROCESS_INTEROP_FLAG_EXTENDED_STARTUPINFO_PRESENT (0x00080000) +#define NT_PROCESS_INTEROP_FLAG_BREAKAWAY_FROM_JOB (0x01000000) +#define NT_PROCESS_INTEROP_FLAG_PRESERVE_CODE_AUTHZ_LEVEL (0x02000000) +#define NT_PROCESS_INTEROP_FLAG_DEFAULT_ERROR_MODE (0x04000000) +#define NT_PROCESS_INTEROP_FLAG_NO_WINDOW (0x08000000) + + /* zw_create_user_process: console flag bits */ #define NT_CREATE_PROCESS_EXT_CONSOLE_FLAG_DEFAULT (0x00) #define NT_CREATE_PROCESS_EXT_CONSOLE_FLAG_DO_NOT_USE_HANDLES (0x00) -- cgit v1.2.3