OptionalHeader

final class ntoseye.OptionalHeader

Subclass of BaseRecord.

IMAGE_OPTIONAL_HEADER32/64 (PE32 or PE32+), widened to one shape. base_of_data exists only in the 32-bit header.

property base_of_code: int
property base_of_data: int | None

Only for PE32. None for PE32+.

property checksum: int
property dll_characteristics: int
property dll_characteristics_names: list[str]

The IMAGE_DLLCHARACTERISTICS_* flags that are set.

property entry_point_rva: int

The RVA of the entry point; 0 if the image has none.

property file_alignment: int
property image_base: int

The preferred base address for which the image was linked.

property image_version: str

major.minor.

property linker_version: str

major.minor.

property loader_flags: int
property magic: int
property number_of_rva_and_sizes: int
property operating_system_version: str

major.minor.

property section_alignment: int
property size_of_code: int
property size_of_headers: int
property size_of_heap_commit: int
property size_of_heap_reserve: int
property size_of_image: int
property size_of_initialized_data: int
property size_of_stack_commit: int
property size_of_stack_reserve: int
property size_of_uninitialized_data: int
property subsystem: int
property subsystem_name: str

Native, Windows GUI, …

property subsystem_version: str

major.minor.

property win32_version_value: int