Read the child process's PE file header * typedef struct _IMAGE_FILE_HEADER { USHORT Machine; USHORT NumberOfSections; ULONG TimeDateStamp; ULONG PointerToSymbolTable; ULONG NumberOfSymbols; USHORT SizeOfOptionalHeader; USHORT Characteristics; } IMAGE_FILE_HEADER,
| 288 | */ |
| 289 | |
| 290 | type IMAGE_FILE_HEADER struct { |
| 291 | Machine uint16 |
| 292 | NumberOfSections uint16 |
| 293 | TimeDateStamp uint32 |
| 294 | PointerToSymbolTable uint32 |
| 295 | NumberOfSymbols uint32 |
| 296 | SizeOfOptionalHeader uint16 |
| 297 | Characteristics uint16 |
| 298 | } |
| 299 | |
| 300 | |
| 301 | var peHeader IMAGE_FILE_HEADER |
nothing calls this directly
no outgoing calls
no test coverage detected