UINT8 __stdcall PsGetProcessExitProcessCalled(_EPROCESS *Process){ return(Process->Flags & 4) != 0; }