1328
1329
1330
1331
1332
1333
1334
1335
1336
1337
1338
1339
1340
1341
|
1328
1329
1330
1331
1332
1333
1334
1335
1336
1337
1338
1339
1340
1341
1342
|
+
|
if (attr & FILE_ATTRIBUTE_REPARSE_POINT) {
/*
* But [4f0b5767ac]. Likely a App Execution Alias. This can only
* be a Win32 APP. Attempt to ReadFile below will fail. We assume
* that if it is on the PATH, and it is a reparse point, it is an
* App Execution Alias.
*/
CloseHandle(hFile);
applType = APPL_WIN32;
break;
}
header.e_magic = 0;
ReadFile(hFile, (void *) &header, sizeof(header), &read, NULL);
if (header.e_magic != IMAGE_DOS_SIGNATURE) {
|