ImageOptionalHeader

final class ntoseye.ImageOptionalHeader

Subclass of BaseRecord.

IMAGE_OPTIONAL_HEADER (PE32 or PE32+).

property base_of_code: int
property base_of_data: int | None

Only for PE32. None for PE32+.

property checksum: int
property dll_characteristics: int
property dll_characteristics_names: list[str]

The IMAGE_DLLCHARACTERISTICS_* flags that are set.

property entry_point: int | None

The mapped entry point. None if the image has no entry point.

property entry_point_rva: int
property file_alignment: int
property image_base: int

The preferred base address for which the image was linked.

property image_version: str

major.minor.

property linker_version: str

major.minor.

property loader_flags: int
property magic: int
property number_of_rva_and_sizes: int
property operating_system_version: str

major.minor.

property section_alignment: int
property size_of_code: int
property size_of_headers: int
property size_of_heap_commit: int
property size_of_heap_reserve: int
property size_of_image: int
property size_of_initialized_data: int
property size_of_stack_commit: int
property size_of_stack_reserve: int
property size_of_uninitialized_data: int
property subsystem: int
property subsystem_name: str

Native, Windows GUI, …

property subsystem_version: str

major.minor.

property win32_version_value: int