Piotr Wyderski <piotr.wyder...@gmail.com> writes: > The PE header walker is able to > dump PE sections, > but they have strange, numeric names, e.g.: > > sec[5]: name = /4
That strange numeric name is used when the section name is more than 8 characters long. The value after the '/' is an offset into the string table. Ian
