introduce a signature index enum
do not inject into dr watson processes
explain flag representation information to be interpreted on the cuckoo side
add seterrormode, remove loading advapi32