Metadatacopyunion _KPROCESS_SECURE_STATE { unsigned __int64 EntireField;/* 0x0 8 */ struct { unsigned __int64 SecureProcess : 1;/* 0x0:0 8 */ unsigned __int64 TrustedApp : 1;/* 0x0:1 8 */ } Flags;/* 0x0 8 */ unsigned __int64 EntireFlags : 2;/* 0x0:0 8 */};