| 20 | } |
| 21 | |
| 22 | bool FillRemotePEHeader(HANDLE ProcessHandle, ULONG_PTR BaseAddress, OUT REMOTE_PE_HEADER& PEHeader) |
| 23 | { |
| 24 | ZeroMemory(PEHeader.rawData, PE_HEADER_SIZE); |
| 25 | if (!ReadProcessMemory(ProcessHandle, PVOID(BaseAddress), PEHeader.rawData, PE_HEADER_SIZE, NULL)) |
| 26 | return false; |
| 27 | if (!FillPEHeader(ULONG_PTR(&PEHeader.rawData), PEHeader)) |
| 28 | return false; |
| 29 | PEHeader.remoteBaseAddress = BaseAddress; |
| 30 | return true; |
| 31 | } |
| 32 | |
| 33 | //////////////////////////////////////////////////////////////////////////////// |
| 34 | // utils |
nothing calls this directly
no test coverage detected