Reversing : The Hacker's Guide to Reverse Engineering

C0000040 flags

Initialized Data

Read Write

SECTION HEADER #3

.rsrc name

2A098 virtual size

62000 virtual address (77DA2000 to 77DCC097)

2A200 size of raw data

5FE00 file pointer to raw data (0005FE00 to 00089FFF)

0 file pointer to relocation table

0 file pointer to line numbers

0 number of relocations

0 number of line numbers

40000040 flags

Initialized Data

Read Only

SECTION HEADER #4

.reloc name

2DB4 virtual size

8D000 virtual address (77DCD000 to 77DCFDB3)

2E00 size of raw data

8A000 file pointer to raw data (0008A000 to 0008CDFF)

0 file pointer to relocation table

0 file pointer to line numbers

0 number of relocations

0 number of line numbers

42000040 flags

Initialized Data

Discardable

Read Only

Summary

2000 .data

3000 .reloc

2B000 .rsrc

5F000 .text

Listing 4.1 (continued)

DUMPBIN is distributed along with the various Microsoft software devel-

opment tools such as Visual Studio .NET.

136 Chapter 4