Re: reversing a PE file into it's obj's?
Posted: Tue Feb 03, 2009 12:21 pm
Yes, I believe you did but I don't seem to full understand.I believe I have answered this question previously.
You have .rdata and symbol tables which are used in the obj's when linking to produce an exe file.
I would think the linker use the symbol table of each object and creates the .rdata for the exe on the file.
My confusion is how the obj's get linked to a exe file?
If you could explain one more time based on my simple example above I think I would be all set.
It must have to merge the sections first and then resolve symbols and create the .rdata section for the .exe file.
If that's all it does then how does it resolve symbols and how does it know if a symbol is not resolved.
I have seen something like symbol ???? but what happens if the symbol is at the address ?????