The pointers to the bss section are acquired in init.c() by inspecting the PE header. Works for msvc and mingw.
stijn