Reversing : The Hacker's Guide to Reverse Engineering

0 [ 0] RVA [size] of Thread Storage Directory

0 [ 0] RVA [size] of Load Configuration Directory

0 [ 0] RVA [size] of Bound Import Directory

5000 [ 8] RVA [size] of Import Address Table Directory

0 [ 0] RVA [size] of Delay Import Directory

0 [ 0] RVA [size] of COM Descriptor Directory

0 [ 0] RVA [size] of Reserved Directory

SECTION HEADER #1

.h3mf85n name

3300 virtual size

1000 virtual address (00401000 to 004042FF)

3400 size of raw data

400 file pointer to raw data (00000400 to 000037FF)

0 file pointer to relocation table

0 file pointer to line numbers

0 number of relocations

0 number of line numbers

E0000020 flags

Code

Execute Read Write

SECTION HEADER #2

.rdata name

95 virtual size

5000 virtual address (00405000 to 00405094)

200 size of raw data

3800 file pointer to raw data (00003800 to 000039FF)

0 file pointer to relocation table

0 file pointer to line numbers

0 number of relocations

0 number of line numbers

40000040 flags

Initialized Data

Read Only

SECTION HEADER #3

.data name

24 virtual size

6000 virtual address (00406000 to 00406023)

0 size of raw data

0 file pointer to raw data

0 file pointer to relocation table

0 file pointer to line numbers

0 number of relocations

0 number of line numbers

C0000040 flags

Initialized Data

Listing 11.5 (continued)

Breaking Protections 375