Function ValidateSectionAlignment

Self-Remapping Code/main.cpp:13–47

Verify that .rdata and .data's base addresses are a multiple of the system allocation granularity.

// Verify that .rdata and .data's base addresses are a multiple of the system 
// allocation granularity.
static bool ValidateSectionAlignment(const PVOID ImageBase)
{
    PE_HEADER pe;
    if (!FillPEHeader(SIZE_T(ImageBase), pe))
        return false;

    const PIMAGE_SECTION_HEADER text = GetPeSectionByName(pe, ".text");
    const PIMAGE_SECTION_HEADER rdata = GetPeSectionByName(pe, ".rdata");
    const PIMAGE_SECTION_HEADER data = GetPeSectionByName(pe, ".data");
    if (!(text && text < rdata && rdata < data))
        return false;

    auto printSectionSummary = [&ImageBase](const PIMAGE_SECTION_HEADER Section)
    {
        printf("%-8.8s   %p  +%016X  %16X\n",
               Section->Name,
               SIZE_T(ImageBase) + Section->VirtualAddress,
               Section->VirtualAddress,
               Section->Misc.VirtualSize);
    };

    printSectionSummary(text);
    printSectionSummary(rdata);
    printSectionSummary(data);

    SYSTEM_INFO si;
    GetSystemInfo(&si);

    auto isAligned = [&si](const PIMAGE_SECTION_HEADER Section)
    {
        return Section->VirtualAddress % si.dwAllocationGranularity == 0;
    };

    return isAligned(rdata) && isAligned(data);
}

// Verify that we're unable set .text or .rdata's page protection via NtProtectVirtualMemory.
// e.g., changing .text from PAGE_EXECUTE_READ to PAGE_EXECUTE_READWRITE should