View Single Post
  #3  
Old 04-02-2018, 17:13
dosprog dosprog is offline
Friend
 
Join Date: Feb 2018
Posts: 114
Rept. Given: 0
Rept. Rcvd 17 Times in 16 Posts
Thanks Given: 33
Thanks Rcvd at 147 Times in 74 Posts
dosprog Reputation: 17
===================================
Comment for HEM-plugin PE_TAILS.HEM
===================================

Original PE-sections table of target example file:
Quote:
N Name.... VirtSize...... RVA....... PhysSize.... Offset..... Flag
1 .text...... 00028874 00001000 00028A00 00000400 60500060
2 .data..... 00000084 0002A000 00000200 00028E00 C0300040
3 .rdata.... 00008970 0002B000 00008A00 00029000 40700040
4 .eh_fram 000065A8 00034000 00006600 00031A00 40300040
5 .bss...... 00010F20 0003B000 00000000 00000000 C0700080
6 .idata.... 00000A68 0004C000 00000C00 00038000 C0300040
7 .CRT...... 00000018 0004D000 00000200 00038C00 C0300040
8 .tls........ 00000020 0004E000 00000200 00038E00 C0300040
PE-sections table of target example file after PE_TAILS.HEM working:
Quote:
N Name.... VirtSize...... RVA....... PhysSize.... Offset..... Flag
1 .text...... 00028A00 00001000 00028A00 00000400 60500060
2 .data..... 00000200 0002A000 00000200 00028E00 C0300040
3 .rdata.... 00008A00 0002B000 00008A00 00029000 40700040
4 .eh_fram 00006600 00034000 00006600 00031A00 40300040
5 .bss...... 00010F20 0003B000 00000000 00000000 C0700080
6 .idata.... 00000C00 0004C000 00000C00 00038000 C0300040
7 .CRT...... 00000200 0004D000 00000200 00038C00 C0300040
8 .tls........ 00000200 0004E000 00000200 00038E00 C0300040
See column <VirtSize> ~before & ~after.




===================================
Comment for HEM-plugin PE_RWE.HEM
===================================


Original PE-sections table of target example file:
Quote:
N Name.... VirtSize...... RVA....... PhysSize.... Offset..... Flag
1 .text...... 00028874 00001000 00028A00 00000400 60500060
2 .data..... 00000084 0002A000 00000200 00028E00 C0300040
3 .rdata.... 00008970 0002B000 00008A00 00029000 40700040
4 .eh_fram 000065A8 00034000 00006600 00031A00 40300040
5 .bss...... 00010F20 0003B000 00000000 00000000 C0700080
6 .idata.... 00000A68 0004C000 00000C00 00038000 C0300040
7 .CRT...... 00000018 0004D000 00000200 00038C00 C0300040
8 .tls........ 00000020 0004E000 00000200 00038E00 C0300040
PE-sections table of target example file after PE_RWE.HEM working:
Quote:
N Name.... VirtSize...... RVA....... PhysSize.... Offset..... Flag
1 .text...... 00028874 00001000 00028A00 00000400 FF500060
2 .data..... 00000084 0002A000 00000200 00028E00 FF300040
3 .rdata.... 00008970 0002B000 00008A00 00029000 FF700040
4 .eh_fram 000065A8 00034000 00006600 00031A00 FF300040
5 .bss...... 00010F20 0003B000 00000000 00000000 FF700080
6 .idata.... 00000A68 0004C000 00000C00 00038000 FF300040
7 .CRT...... 00000018 0004D000 00000200 00038C00 FF300040
8 .tls........ 00000020 0004E000 00000200 00038E00 FF300040
See column <Flag> ~before & ~after.





Last edited by dosprog; 04-02-2018 at 19:34.
Reply With Quote
The Following User Says Thank You to dosprog For This Useful Post:
Indigo (07-19-2019)