-
Book Overview & Buying
-
Table Of Contents
Reverse Engineering Armv8-A Systems
By :
Section headers contain valuable information, especially when performing reverse engineering without access to the source code. By analyzing instructions, you can find function calls and understand routines inside functions. In addition, you can check the values of global variables. All this information is stored in one of the section headers. In this section, we will cover the key elements of section headers, including the layout and primary sections such as the .text, .bss, and .data sections.
Before delving into the key elements of section headers, we need to check where the section headers are located in the ELF file. Figure 2.4 illustrates the position of section headers within the file:

Figure 2.4: Position of section headers in ELF
Figure 2.4 illustrates the position of the section header within ELF. Let’s focus on 1 in the figure. The e_shoff field of the Elf64_Ehdr structure contains the offset location...