PE文件格式.xls

地址( DEC ) 地址( HEX ) 整体名称整体名称下级名称下级结构下级结构 00MS-DOS 头部 IMAGE_DOS_ HEADER DOS STUB MS-DOS 头部 IMAGE_DOS_ HEADER e_magic 1122e_cblp 3344e_cp 5566e_crlc 7788e_cparhdr 9910Ae_minallo c 11B12Ce_maxallo c 13D14Ee_ss 15F1610e_sp 1711 1812e_csum 1913 2014e_ip 2115 2216e_cs 2317 2418e_lfarlc 2519 261Ae_ovno 271B 3624e_oemid 3725 3826e_oeminfo 3927 603Ce_lfanew 613D 623E 633F 208 D0 PE文件头 Signature IMAGE_FILE _HEADER IMAGE_OPTI ONAL_HEADE R Signature Signature 209 D1 210 D2 211 D3 212 D4文件头 IMAGE_FILE _HEADER Machine 213 D5 214 D6NumberOfS ections 215 D7 216 D8TimeDateS tamp 217 D9 218 DA 219 DB 220 DCPointerTo SymbolTab le 221 DD 222 DE PE文件头 Signature IMAGE_FILE _HEADER IMAGE_OPTI ONAL_HEADE R 文件头 IMAGE_FILE _HEADER PointerTo SymbolTab le 223 DF 224 E0NumberOfS ymbols 225 E1 226 E2 227 E3 228 E4 SizeOfOpt ionalHead er 229 E5 230 E6Character istics 231 E7 232 E8 选择文件头 IMAGE_OPTI ONAL_HEADE R Magic 233 E9 234 EA MajorLink erVersion 235 EB MinorLink erVersion 236 ECSizeOfCod e 237 ED 238 EE 239 EF 240 F0SizeOfIni tializedD ata 241 F1 242 F2 243 F3 244 F4SizeOfUni nitialize dData 245 F5 246 F6 247 F7 248 F8AddressOf EntryPoin t 249 F9 250 FA 251 FB 252 FCBaseOfCod e 253 FD 254 FE 255 FF 256 100BaseOfDat a 257 101 258 102 259 103 260 104ImageBase 261 105 262 106 263 107 264 108SectionAl ignment 265 109 266 10A 267 10B 268 10CFileAlign ment 269 10D 270 10E 271 10F 272 110 MajorOper atingSyst emVersion 273 111 274 112 PE文件头 Signature IMAGE_FILE _HEADER IMAGE_OPTI ONAL_HEADE R选择文件头 IMAGE_OPTI ONAL_HEADE R MinorOper atingSyst emVersion 275 113 276 114MajorImag eVersion 277 115 278 116MinorImag eVersion 279 117 280 118 MajorSubs ystemVers ion 281 119 282 11A MinorSubs ystemVers ion 283 11B 284 11CWin32Vers ionValue 285 11D 286 11E 287 11F 288 120SizeOfIma ge 289 121 290 122 291 123 292 124SizeOfHea ders 293 125 294 126 295 127 296 128CheckSum 297 129 298 12A 299 12B 300 12CSubsystem 301 12D 302 12EDllCharac teristics 303 12F 304 130SizeOfSta ckReserve 305 131 306 132 307 133 308 134Size