Native API online documentation, based on the System Informer
(formerly Process Hacker) phnt
headers
#ifndef _NTWMI_H
//
// SignatureLevel flags indicating if the image is embedded or catalog signed.
//
#define ETW_IMAGE_CATALOG_SIGNED 0x10
#endif
View code on GitHub