TIF_flags

The THREADINFO structure has from the beginning had a TIF_flags member that is, of course, interpreted in bits. Type information in symbol files for WIN32K.SYS in Windows 7 (only) shows that these bits are not defined as formal bit fields. Debugger extensions for early Windows versions have text for describing some bits, presumably by reproducing Microsoft’s macro definitions from a C-language header. I may some day follow up which of these persist to later versions (and whether they are credible for the stated versions).

Mask Name Versions
0x00000001 TIF_INCLEANUP 3.51 to 5.0
0x00000002 TIF_16BIT 3.51 to 5.0
0x00000004 TIF_SYSTEMTHREAD 3.51 to 5.0
0x00000008 TIF_LOCKNOREMOVE 3.51 only
TIF_CSRSSTHREAD 4.0 to 5.0
0x00000010 TIF_TRACKRECTVISIBLE 3.51 to 5.0
0x00000020 TIF_ALLOWFOREGROUNDACTIVATE 3.51 to 5.0
0x00000040 TIF_DONTATTACHQUEUE 3.51 to 5.0
0x00000080 TIF_DONTJOURNALATTACH 3.51 to 5.0
0x00000100 TIF_SCREENSAVER 3.51 to 4.0
TIF_WOW64 5.0 only
0x00000200 TIF_INACTIVATEAPPMSG 3.51 to 5.0
0x00000400 TIF_SPINNING 3.51 to 5.0
0x00000800 unnamed 3.51 only
TIF_PALETTEAWARE 4.0 to 5.0
0x00001000 TIF_SHAREDWOW 3.51 to 5.0
0x00002000 TIF_FIRSTIDLE 3.51 to 5.0
0x00004000 TIF_WAITFORINPUTIDLE 3.51 to 5.0
0x00008000 TIF_MOVESIZETRACKING 3.51 to 5.0
0x00010000 TIF_VDMAPP 3.51 to 5.0
0x00020000 TIF_DOSEMULATOR 3.51 to 5.0
0x00040000 TIF_GLOBALHOOKER 3.51 to 5.0
0x00080000 TIF_DELAYEDEVENT 3.51 to 5.0
0x00100000 TIF_ALLOWSHUTDOWN 4.0 only
TIF_MSGPOSCHANGED 5.0 only
0x00200000 TIF_SHUTDOWNCOMPLETE 4.0 to 5.0
0x00100000 (3.51);
0x00400000
TIF_IGNOREPLAYBACKDELAY 3.51 to 5.0
0x00800000 TIF_ALLOWOTHERACCOUNTHOOK 4.0 to 5.0
0x01000000 unnamed 5.0 only
0x01000000 (4.0);
0x02000000
TIF_GUIDTHREADINITIALIZED 4.0 to 5.0
0x04000000 TIF_DISABLEIME 5.0 only
0x08000000 TIF_INGETTEXTLENGTH 5.0 only
0x10000000 TIF_ANSILENGTH 5.0 only
0x20000000 TIF_DISABLEHOOKS 5.0 only