MCPcopy Create free account
hub / github.com/TideSec/GoBypassAV / ImageOptionalHeader32

Struct ImageOptionalHeader32

Go_Windows_API/07-CreatProcess/main.go:112–144  ·  view source on GitHub ↗

Source from the content-addressed store, hash-verified

110}
111
112type ImageOptionalHeader32 struct {
113 Magic uint16
114 MajorLinkerVersion byte
115 MinorLinkerVersion byte
116 SizeOfCode uint32
117 SizeOfInitializedData uint32
118 SizeOfUninitializedData uint32
119 AddressOfEntryPoint uint32
120 BaseOfCode uint32
121 BaseOfData uint32
122 ImageBase uint64
123 SectionAlignment uint32
124 FileAlignment uint32
125 MajorOperatingSystemVersion uint16
126 MinorOperatingSystemVersion uint16
127 MajorImageVersion uint16
128 MinorImageVersion uint16
129 MajorSubsystemVersion uint16
130 MinorSubsystemVersion uint16
131 Win32VersionValue uint32
132 SizeOfImage uint32
133 SizeOfHeaders uint32
134 CheckSum uint32
135 Subsystem uint16
136 DllCharacteristics uint16
137 SizeOfStackReserve uint64
138 SizeOfStackCommit uint64
139 SizeOfHeapReserve uint64
140 SizeOfHeapCommit uint64
141 LoaderFlags uint32
142 NumberOfRvaAndSizes uint32
143 DataDirectory uintptr
144}
145func Xor(src string) string {
146 var XorKey = []byte{0x74, 0x69, 0x64, 0x65, 0x62, 0x79, 0x70, 0x61, 0x73, 0x73} //tidesec
147 var result string

Callers

nothing calls this directly

Calls

no outgoing calls

Tested by

no test coverage detected