Metadatacopystruct _EWOW64PROCESS { void* Peb;/* 0x0 8 */ enum _SYSTEM_DLL_TYPE NtdllType;/* 0x8 4 */ /* 4 bytes padding */ void* KernelWriteToExecutableSignal;/* 0x10 8 */};