Skip to content

Instantly share code, notes, and snippets.

@pypy-vrc
Created November 25, 2019 07:24
Show Gist options
  • Save pypy-vrc/f347554ca31cb559aee1e7dfb6a262e2 to your computer and use it in GitHub Desktop.
Save pypy-vrc/f347554ca31cb559aee1e7dfb6a262e2 to your computer and use it in GitHub Desktop.
IMAGE_NT_HEADERS offsets
// 0 Signature
// 0 DWORD Signature
// 4 FileHeader
// 4 WORD Machine;
// 6 WORD NumberOfSections;
// 8 DWORD TimeDateStamp;
// 12 DWORD PointerToSymbolTable;
// 16 DWORD NumberOfSymbols;
// 20 WORD SizeOfOptionalHeader;
// 22 WORD Characteristics;
// 24 OptionalHeader
// 24 WORD Magic;
// 26 BYTE MajorLinkerVersion;
// 27 BYTE MinorLinkerVersion;
// 28 DWORD SizeOfCode;
// 32 DWORD SizeOfInitializedData;
// 36 DWORD SizeOfUninitializedData;
// 40 DWORD AddressOfEntryPoint;
// 44 DWORD BaseOfCode;
// 48 DWORD BaseOfData;
// 52 DWORD ImageBase;
// 56 DWORD SectionAlignment;
// 60 DWORD FileAlignment;
// 64 WORD MajorOperatingSystemVersion;
// 66 WORD MinorOperatingSystemVersion;
// 68 WORD MajorImageVersion;
// 70 WORD MinorImageVersion;
// 72 WORD MajorSubsystemVersion;
// 74 WORD MinorSubsystemVersion;
// 76 DWORD Win32VersionValue;
// 80 DWORD SizeOfImage;
// 84 DWORD SizeOfHeaders;
// 88 DWORD CheckSum;
// 92 WORD Subsystem;
// 94 WORD DllCharacteristics;
// 96 DWORD SizeOfStackReserve;
// 100 DWORD SizeOfStackCommit;
// 104 DWORD SizeOfHeapReserve;
// 108 DWORD SizeOfHeapCommit;
// 112 DWORD LoaderFlags;
// 116 DWORD NumberOfRvaAndSizes;
// 120 IMAGE_DATA_DIRECTORY DataDirectory[IMAGE_NUMBEROF_DIRECTORY_ENTRIES];
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment