The Sections display shows the all the sections in the PE file.

 

Sections are also known as segments, often mentioned in MAP files and in the context of debugging information.
 
Symbol information is often provided as an offset and a segment. The symbol address is the module load address + the segment offset inside the dll, plus the symbol offset inside the segment.

 

 

 

 

Segment

The segment identifier.

 

Name

The section name.

 

Relocations

The number of relocations in this section.

 

Line Numbers

The number of line numbers in this section.

 

Physical

The physical address of this section.

 

Virtual

The virtual address of this section.

 

Size

The size of this section.

 

Characteristics

The characteristics of this section. This is a bitmask. Many values can apply at the same time. Some of these values are obsolete.

•Code

•Init data

•Uninit data

•Comments/info

•Not part of image

•COMDAT

•Reset speculative exception

•GP relative data

•FAR data

•Purgeable data

•16 bit data

•Locked data

•Preloadable data

•Extended relocations

•Discardable

•Not cacheable

•Not pageable

•Shareable

•Executable

•Readable

•Writeable

•Alignment:1

•Alignment:2

•Alignment:4

•Alignment:8

•Alignment:16

•Alignment:32

•Alignment:64

•Alignment:128

•Alignment:256

•Alignment:512

•Alignment:1024

•Alignment:2048

•Alignment:4096

•Alignment:8192

 

The alignment values are exclusive. Only one alignment value can be applied.

 

Sorting

The data can be sorted by any column. Click the column header to select sorting by that column. Click the same header to reverse the sort direction.

 

 

Context Menu

 

A context menu provides a single option:

 

 

 

Clicking View data... opens a memory inspection dialog, allowing you to view the memory as BYTEs, WORDs, DWORDs or QWORDs. For executable code a disassembly view is provided.