PE结构~

_IMAGE_NT_HEADERS64

ntdll!_IMAGE_NT_HEADERS64
   +0x000 Signature        : Uint4B
   +0x004 FileHeader       : _IMAGE_FILE_HEADER
      +0x000 Machine          : Uint2B              4
      +0x002 NumberOfSections : Uint2B              6
      +0x004 TimeDateStamp    : Uint4B              8
      +0x008 PointerToSymbolTable : Uint4B          0xc 
      +0x00c NumberOfSymbols  : Uint4B              0x10
      +0x010 SizeOfOptionalHeader : Uint2B          0x14
      +0x012 Characteristics  : Uint2B              0x16
   +0x018 OptionalHeader   : _IMAGE_OPTIONAL_HEADER64   
      +0x000 Magic            : Uint2B              0x18
      +0x002 MajorLinkerVersion : UChar             0x1a   
      +0x003 MinorLinkerVersion : UChar             0x1b 
      +0x004 SizeOfCode       : Uint4B              0x1c
      +0x008 SizeOfInitializedData : Uint4B         0x20
      +0x00c SizeOfUninitializedData : Uint4B       0x24
      +0x010 AddressOfEntryPoint : Uint4B           0x28 
      +0x014 BaseOfCode       : Uint4B              0x2c
      +0x018 ImageBase        : Uint8B              0x30
      +0x020 SectionAlignment : Uint4B              0x38
      +0x024 FileAlignment    : Uint4B              0x3c
      +0x028 MajorOperatingSystemVersion : Uint2B   0x40
      +0x02a MinorOperatingSystemVersion : Uint2B   0x42
      +0x02c MajorImageVersion : Uint2B             0x44
      +0x02e MinorImageVersion : Uint2B             0x46
      +0x030 MajorSubsystemVersion : Uint2B         0x48
      +0x032 MinorSubsystemVersion : Uint2B         0x4a    
      +0x034 Win32VersionValue : Uint4B             0x4c
      +0x038 SizeOfImage      : Uint4B              0x50
      +0x03c SizeOfHeaders    : Uint4B              0x54
      +0x040 CheckSum         : Uint4B              0x58
      +0x044 Subsystem        : Uint2B              0x5c
      +0x046 DllCharacteristics : Uint2B            0x5e
      +0x048 SizeOfStackReserve : Uint8B            0x60
      +0x050 SizeOfStackCommit : Uint8B             0x68
      +0x058 SizeOfHeapReserve : Uint8B             0x70
      +0x060 SizeOfHeapCommit : Uint8B              0x78
      +0x068 LoaderFlags      : Uint4B              0x80
      +0x06c NumberOfRvaAndSizes : Uint4B           0x84
      +0x070 DataDirectory    : [16] _IMAGE_DATA_DIRECTORY      0x88
         +0x000 VirtualAddress   : Uint4B
         +0x004 Size             : Uint4B