#ifndef _NTPSAPI_H
#if (PHNT_MODE != PHNT_MODE_KERNEL)

/**
 * The PROCESS_EXECUTE_FLAGS structure is used to query or set per-process execute options.
 */
typedef struct _PROCESS_EXECUTE_FLAGS
{
    union
    {
        ULONG Flags; // MEM_EXECUTE_OPTION_*
        struct
        {
            ULONG Disable : 1; // MEM_EXECUTE_OPTION_DISABLE
            ULONG Enable : 1; // MEM_EXECUTE_OPTION_ENABLE
            ULONG DisableThunkEmulation : 1; // MEM_EXECUTE_OPTION_DISABLE_THUNK_EMULATION
            ULONG Permanent : 1; // MEM_EXECUTE_OPTION_PERMANENT
            ULONG ExecuteDispatchEnable : 1; // MEM_EXECUTE_OPTION_EXECUTE_DISPATCH_ENABLE
            ULONG ImageDispatchEnable : 1; // MEM_EXECUTE_OPTION_IMAGE_DISPATCH_ENABLE
            ULONG DisableExceptionChainValidation : 1; // MEM_EXECUTE_OPTION_DISABLE_EXCEPTION_CHAIN_VALIDATION
            ULONG Spare : 25;
        };
    };
} PROCESS_EXECUTE_FLAGS, *PPROCESS_EXECUTE_FLAGS;

#endif
#endif
View code on GitHub