in PPLGuardDll/dllexploit.h [41:50]
typedef __declspec(align(4)) struct _PS_PROTECTION {
union {
UCHAR Level;
struct {
UCHAR Type : 3;
UCHAR Audit : 1; // Reserved
UCHAR Signer : 4;
};
};
} PS_PROTECTION, * PPS_PROTECTION;