offset 0123456789A B C D E F 00000000 00000010 00000020 00000030
000000400000005000000060000000700000008000000090000000A0 000000B0 000000C0
Maj orL ink erV ers ion Min orL ink erV ers ion 000000D0
Signature IMAGE_FILE_HEADER DOS stub M S -D o s 部首 IMAGE_FILE_HEADER IMAGE_OPTIONAL_HEADER32 IMAGE_FILE_HEADER NumberOfSymbols SizeOfO ptional Header
Characte ristics Magic SizeOfCode e_lfanew Signature
Machine NumberOf Sections TimeDataStamp PointerTpSymbo lTable e_oemid e_oemin fo e_res2 e_ss e_sp
e_csum e_ip e_cs e_lfarl c
e_ovno e_res PE文件结构 DOS\
e_magic e_cblp e_cp e_crlc e_cparh dr e_minal loc e_maxal loc 000000E0 000000F0 00000100 00000110 00000120 00000130 00000140 00000150
IMAGE_OPTIONAL_HEADER32 DataDirectory( PE文件头
IMAGE_NT_HEADERS
IMAGE_OPTIONAL_HEADER32 DataDirectory
IMAGE_DIRECTORY_ENTRY_BASERELOC IMAGE_DIRECTORY_ENTRY_DEBUG
PE文件结构详解--对照《加密与破解》第十章.
