Created
November 25, 2019 07:24
-
-
Save pypy-vrc/f347554ca31cb559aee1e7dfb6a262e2 to your computer and use it in GitHub Desktop.
IMAGE_NT_HEADERS offsets
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
// 0 Signature | |
// 0 DWORD Signature | |
// 4 FileHeader | |
// 4 WORD Machine; | |
// 6 WORD NumberOfSections; | |
// 8 DWORD TimeDateStamp; | |
// 12 DWORD PointerToSymbolTable; | |
// 16 DWORD NumberOfSymbols; | |
// 20 WORD SizeOfOptionalHeader; | |
// 22 WORD Characteristics; | |
// 24 OptionalHeader | |
// 24 WORD Magic; | |
// 26 BYTE MajorLinkerVersion; | |
// 27 BYTE MinorLinkerVersion; | |
// 28 DWORD SizeOfCode; | |
// 32 DWORD SizeOfInitializedData; | |
// 36 DWORD SizeOfUninitializedData; | |
// 40 DWORD AddressOfEntryPoint; | |
// 44 DWORD BaseOfCode; | |
// 48 DWORD BaseOfData; | |
// 52 DWORD ImageBase; | |
// 56 DWORD SectionAlignment; | |
// 60 DWORD FileAlignment; | |
// 64 WORD MajorOperatingSystemVersion; | |
// 66 WORD MinorOperatingSystemVersion; | |
// 68 WORD MajorImageVersion; | |
// 70 WORD MinorImageVersion; | |
// 72 WORD MajorSubsystemVersion; | |
// 74 WORD MinorSubsystemVersion; | |
// 76 DWORD Win32VersionValue; | |
// 80 DWORD SizeOfImage; | |
// 84 DWORD SizeOfHeaders; | |
// 88 DWORD CheckSum; | |
// 92 WORD Subsystem; | |
// 94 WORD DllCharacteristics; | |
// 96 DWORD SizeOfStackReserve; | |
// 100 DWORD SizeOfStackCommit; | |
// 104 DWORD SizeOfHeapReserve; | |
// 108 DWORD SizeOfHeapCommit; | |
// 112 DWORD LoaderFlags; | |
// 116 DWORD NumberOfRvaAndSizes; | |
// 120 IMAGE_DATA_DIRECTORY DataDirectory[IMAGE_NUMBEROF_DIRECTORY_ENTRIES]; |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment