Added machine type.

Author: tyranid

NtApiDotNet/Win32/Win32ProcessConfig.cs

@@ -235,6 +235,10 @@ public bool NoTokenFallback
         /// Specify component filter flags.
         /// </summary>
         public ProcessComponentFilterFlags ComponentFilter { get; set; }
+        /// <summary>
+        /// Specify the machine type for the new process. 
+        /// </summary>
+        public DllMachineType? MachineType { get; set; }
 
         /// <summary>
         /// Add an object's handle to the list of inherited handles. 
@@ -401,6 +405,11 @@ private int GetAttributeCount()
                 count++;
             }
 
+            if (MachineType.HasValue)
+            {
+                count++;
+            }
+
             return count;
         }
 
@@ -516,6 +525,11 @@ private SafeHGlobalBuffer GetAttributes(DisposableList resources)
                 attr_list.AddAttribute(Win32ProcessAttributes.ProcThreadAttributeComponentFilter, (int)ComponentFilter);
             }
 
+            if (MachineType.HasValue)
+            {
+                attr_list.AddAttribute(Win32ProcessAttributes.ProcThreadAttributeMachineType, (ushort)MachineType.Value);
+            }
+
             return attr_list;
         }
 

NtApiDotNet/Win32/Win32ProcessNative.cs

@@ -462,6 +462,8 @@ enum PROC_THREAD_ATTRIBUTE_NUM
         public static IntPtr ProcThreadAttributeMitigationAuditPolicy => GetValue(PROC_THREAD_ATTRIBUTE_NUM.ProcThreadAttributeMitigationAuditPolicy, false, true, false);
 
         public static IntPtr ProcThreadAttributeComponentFilter => GetValue(PROC_THREAD_ATTRIBUTE_NUM.ProcThreadAttributeComponentFilter, false, true, false);
+
+        public static IntPtr ProcThreadAttributeMachineType => GetValue(PROC_THREAD_ATTRIBUTE_NUM.ProcThreadAttributeMachineType, false, true, false);
     }
 
     class SafeProcThreadAttributeListBuffer : SafeHGlobalBuffer