EXE Header Information (.reloc & .rsrc value)
If you do dumpbin / header, it will give you all 7 dumps of the partition data. .data.idata.rdata.reloc.rsrc.text.textbss
Among that, .rsrc and .idata are both content-initialized data. These sections are read-only. Then what is the difference between the two? What is the purpose of the .reloc section?
source to share
The .rdata section represents read-only data such as literal strings, constants, and debug directory information.
The .rsrc section contains resource information for the module. It starts with a resource directory structure like most other sections, but the data in this section is further structured into a resource tree. The IMAGE_RESOURCE_DIRECTORY shown below forms the root and nodes of the tree.
Source code for format description: http://www.csn.ul.ie/~caolan/pub/winresdump/winresdump/doc/pefile2.html
You can find more information here: http://msdn.microsoft.com/en-us/library/ms809762.aspx
source to share