_IMAGE_OPTIONAL_HEADER Struct Reference

#include <ntddk_ex.h>

Collaboration diagram for _IMAGE_OPTIONAL_HEADER:

Public Attributes
WORD	Magic
BYTE	MajorLinkerVersion
BYTE	MinorLinkerVersion
DWORD	SizeOfCode
DWORD	SizeOfInitializedData
DWORD	SizeOfUninitializedData
DWORD	AddressOfEntryPoint
DWORD	BaseOfCode
DWORD	BaseOfData
DWORD	ImageBase
DWORD	SectionAlignment
DWORD	FileAlignment
WORD	MajorOperatingSystemVersion
WORD	MinorOperatingSystemVersion
WORD	MajorImageVersion
WORD	MinorImageVersion
WORD	MajorSubsystemVersion
WORD	MinorSubsystemVersion
DWORD	Win32VersionValue
DWORD	SizeOfImage
DWORD	SizeOfHeaders
DWORD	CheckSum
WORD	Subsystem
WORD	DllCharacteristics
DWORD	SizeOfStackReserve
DWORD	SizeOfStackCommit
DWORD	SizeOfHeapReserve
DWORD	SizeOfHeapCommit
DWORD	LoaderFlags
DWORD	NumberOfRvaAndSizes
IMAGE_DATA_DIRECTORY	DataDirectory [IMAGE_NUMBEROF_DIRECTORY_ENTRIES]
USHORT	Magic
UCHAR	MajorLinkerVersion
UCHAR	MinorLinkerVersion
ULONG	SizeOfCode
ULONG	SizeOfInitializedData
ULONG	SizeOfUninitializedData
ULONG	AddressOfEntryPoint
ULONG	BaseOfCode
ULONG	BaseOfData
ULONG	ImageBase
ULONG	SectionAlignment
ULONG	FileAlignment
USHORT	MajorOperatingSystemVersion
USHORT	MinorOperatingSystemVersion
USHORT	MajorImageVersion
USHORT	MinorImageVersion
USHORT	MajorSubsystemVersion
USHORT	MinorSubsystemVersion
ULONG	Win32VersionValue
ULONG	SizeOfImage
ULONG	SizeOfHeaders
ULONG	CheckSum
USHORT	Subsystem
USHORT	DllCharacteristics
ULONG	SizeOfStackReserve
ULONG	SizeOfStackCommit
ULONG	SizeOfHeapReserve
ULONG	SizeOfHeapCommit
ULONG	LoaderFlags
ULONG	NumberOfRvaAndSizes

Detailed Description

Definition at line 138 of file ntddk_ex.h.

Member Data Documentation

AddressOfEntryPoint [1/2]

DWORD _IMAGE_OPTIONAL_HEADER::AddressOfEntryPoint

Definition at line 149 of file ntddk_ex.h.

Referenced by DbgkCreateThread(), GetModuleEntryPoint(), IopInitializeDriverModule(), LdrpFetchAddressOfEntryPoint(), main(), MiReloadBootLoadedDrivers(), MmLoadSystemImage(), pe_load_export_debug_info(), PeFmtCreateSection(), PeLdrAllocateDataTableEntry(), query_image_section(), SSI_DEF(), test_ExitProcess(), test_Loader(), test_NtQuerySection(), and test_thread_start_address().

AddressOfEntryPoint [2/2]

ULONG _IMAGE_OPTIONAL_HEADER::AddressOfEntryPoint

Definition at line 297 of file ntimage.h.

BaseOfCode [1/2]

DWORD _IMAGE_OPTIONAL_HEADER::BaseOfCode

Definition at line 150 of file ntddk_ex.h.

Referenced by build_exe(), main(), and RosSymCreateFromFile().

BaseOfCode [2/2]

ULONG _IMAGE_OPTIONAL_HEADER::BaseOfCode

Definition at line 298 of file ntimage.h.

BaseOfData [1/2]

DWORD _IMAGE_OPTIONAL_HEADER::BaseOfData

Definition at line 151 of file ntddk_ex.h.

Referenced by RosSymCreateFromFile().

BaseOfData [2/2]

ULONG _IMAGE_OPTIONAL_HEADER::BaseOfData

Definition at line 299 of file ntimage.h.

CheckSum [1/2]

DWORD _IMAGE_OPTIONAL_HEADER::CheckSum

Definition at line 169 of file ntddk_ex.h.

Referenced by CreateOutputFile(), DbgLoadImageSymbols(), fetch_pe_module_info_cb(), fix_checksum(), ImageGetDigestStream(), IMAGEHLP_RecalculateChecksum(), ImgpLoadPEImage(), LdrpRecordUnloadEvent(), main(), MmLoadSystemImage(), Notify(), pe_load_builtin_module(), PeLdrAllocateDataTableEntry(), query_image_section(), and test_pe_checksum().

CheckSum [2/2]

ULONG _IMAGE_OPTIONAL_HEADER::CheckSum

Definition at line 312 of file ntimage.h.

DataDirectory

IMAGE_DATA_DIRECTORY _IMAGE_OPTIONAL_HEADER::DataDirectory

Definition at line 178 of file ntddk_ex.h.

Referenced by __mingw_enum_import_library_names(), __RtlImageDirectoryEntryToData(), add_loadconfig(), build_exe(), check_exe(), check_pe_exe(), CreateOutputFile(), hook_WaitForInputIdle(), ImageDirectoryEntryToDataEx(), ImageDirectoryOffset(), IMAGEHLP_GetSecurityDirOffset(), IMAGEHLP_SetSecurityDirOffset(), InitializeTestImage(), IntVideoPortImageDirectoryEntryToData(), is_managed_app(), LdrpSnapIAT(), LdrRelocateImageWithBias(), parse_pe_header(), pe_map_directory(), ProcessRelocations(), query_image_section(), RtlImageDirectoryEntryToData(), SOFTPUB_HashPEFile(), START_TEST(), test_import_resolution(), test_ImportDescriptors(), test_Loader(), test_ResolveDelayLoadedAPI(), and write_raw_resources().

DllCharacteristics [1/2]

WORD _IMAGE_OPTIONAL_HEADER::DllCharacteristics

Definition at line 171 of file ntddk_ex.h.

Referenced by ImgpLoadPEImage(), IopInitializeDriverModule(), PeFmtCreateSection(), PeLdrAllocateDataTableEntry(), query_image_section(), test_filenames(), test_Loader(), and test_NtQuerySection().

DllCharacteristics [2/2]

USHORT _IMAGE_OPTIONAL_HEADER::DllCharacteristics

Definition at line 314 of file ntimage.h.

FileAlignment [1/2]

DWORD _IMAGE_OPTIONAL_HEADER::FileAlignment

Definition at line 159 of file ntddk_ex.h.

Referenced by build_exe(), create_fake_dll(), CreateOutputFile(), MmCheckFreeldrImageFile(), PeFmtCreateSection(), test_ExitProcess(), test_filenames(), test_import_resolution(), test_Loader(), test_ResolveDelayLoadedAPI(), test_section_access(), and write_raw_resources().

FileAlignment [2/2]

ULONG _IMAGE_OPTIONAL_HEADER::FileAlignment

Definition at line 302 of file ntimage.h.

ImageBase [1/2]

DWORD _IMAGE_OPTIONAL_HEADER::ImageBase

Definition at line 157 of file ntddk_ex.h.

Referenced by build_exe(), create_fake_dll(), DbgkCreateThread(), get_ImageBase(), get_sectionheader(), GetImageBase(), image_base(), ImgpLoadPEImage(), InitializeTestImage(), LdrpInitializeProcess(), LdrpMapDll(), LdrRelocateImageWithBias(), main(), MiReloadBootLoadedDrivers(), MmCheckFreeldrImageFile(), PeFmtCreateSection(), PeLdrLoadImageEx(), process_data(), query_image_section(), RosSymCreateFromFile(), RosSymCreateFromMem(), test_import_resolution(), test_Loader(), test_NtQuerySection(), and test_ResolveDelayLoadedAPI().

ImageBase [2/2]

ULONG _IMAGE_OPTIONAL_HEADER::ImageBase

Definition at line 300 of file ntimage.h.

LoaderFlags [1/2]

DWORD _IMAGE_OPTIONAL_HEADER::LoaderFlags

Definition at line 176 of file ntddk_ex.h.

Referenced by PeFmtCreateSection().

LoaderFlags [2/2]

ULONG _IMAGE_OPTIONAL_HEADER::LoaderFlags

Definition at line 319 of file ntimage.h.

Magic [1/2]

WORD _IMAGE_OPTIONAL_HEADER::Magic

Definition at line 143 of file ntddk_ex.h.

Referenced by _ValidateImageBase(), BindImageEx(), build_exe(), check_pe_exe(), create_fake_dll(), get_ImageBase(), ImageDirectoryEntryToDataEx(), IMAGEHLP_GetNTHeaders(), InitializeTestImage(), is_managed_app(), map_image_section(), MmCheckFreeldrImageFile(), MmCheckSystemImage(), pe_map_file(), PeFmtCreateSection(), query_image_section(), RtlImageDirectoryEntryToData(), SOFTPUB_HashPEFile(), test_Loader(), and write_raw_resources().

Magic [2/2]

USHORT _IMAGE_OPTIONAL_HEADER::Magic

Definition at line 291 of file ntimage.h.

MajorImageVersion [1/2]

WORD _IMAGE_OPTIONAL_HEADER::MajorImageVersion

Definition at line 162 of file ntddk_ex.h.

Referenced by build_exe(), create_fake_dll(), MmLoadSystemImage(), and test_Loader().

MajorImageVersion [2/2]

USHORT _IMAGE_OPTIONAL_HEADER::MajorImageVersion

Definition at line 305 of file ntimage.h.

MajorLinkerVersion [1/2]

BYTE _IMAGE_OPTIONAL_HEADER::MajorLinkerVersion

Definition at line 144 of file ntddk_ex.h.

Referenced by build_exe(), create_fake_dll(), ImgpLoadPEImage(), and test_Loader().

MajorLinkerVersion [2/2]

UCHAR _IMAGE_OPTIONAL_HEADER::MajorLinkerVersion

Definition at line 292 of file ntimage.h.

MajorOperatingSystemVersion [1/2]

WORD _IMAGE_OPTIONAL_HEADER::MajorOperatingSystemVersion

Definition at line 160 of file ntddk_ex.h.

Referenced by build_exe(), create_fake_dll(), MiWriteProtectSystemImage(), MmLoadSystemImage(), and test_Loader().

MajorOperatingSystemVersion [2/2]

USHORT _IMAGE_OPTIONAL_HEADER::MajorOperatingSystemVersion

Definition at line 303 of file ntimage.h.

MajorSubsystemVersion [1/2]

WORD _IMAGE_OPTIONAL_HEADER::MajorSubsystemVersion

Definition at line 164 of file ntddk_ex.h.

Referenced by build_exe(), create_fake_dll(), GetProcessVersion(), LdrpInitializeProcess(), LdrpMapDll(), MiWriteProtectSystemImage(), MmCreatePeb(), PeFmtCreateSection(), query_image_section(), RtlGetExpWinVer(), shgfi_get_exe_type(), test_Loader(), and test_NtQuerySection().

MajorSubsystemVersion [2/2]

USHORT _IMAGE_OPTIONAL_HEADER::MajorSubsystemVersion

Definition at line 307 of file ntimage.h.

MinorImageVersion [1/2]

WORD _IMAGE_OPTIONAL_HEADER::MinorImageVersion

Definition at line 163 of file ntddk_ex.h.

Referenced by create_fake_dll().

MinorImageVersion [2/2]

USHORT _IMAGE_OPTIONAL_HEADER::MinorImageVersion

Definition at line 306 of file ntimage.h.

MinorLinkerVersion [1/2]

BYTE _IMAGE_OPTIONAL_HEADER::MinorLinkerVersion

Definition at line 145 of file ntddk_ex.h.

Referenced by create_fake_dll().

MinorLinkerVersion [2/2]

UCHAR _IMAGE_OPTIONAL_HEADER::MinorLinkerVersion

Definition at line 293 of file ntimage.h.

MinorOperatingSystemVersion [1/2]

WORD _IMAGE_OPTIONAL_HEADER::MinorOperatingSystemVersion

Definition at line 161 of file ntddk_ex.h.

Referenced by create_fake_dll().

MinorOperatingSystemVersion [2/2]

USHORT _IMAGE_OPTIONAL_HEADER::MinorOperatingSystemVersion

Definition at line 304 of file ntimage.h.

MinorSubsystemVersion [1/2]

WORD _IMAGE_OPTIONAL_HEADER::MinorSubsystemVersion

Definition at line 165 of file ntddk_ex.h.

Referenced by create_fake_dll(), GetProcessVersion(), LdrpInitializeProcess(), MmCreatePeb(), PeFmtCreateSection(), query_image_section(), RtlGetExpWinVer(), shgfi_get_exe_type(), and test_NtQuerySection().

MinorSubsystemVersion [2/2]

USHORT _IMAGE_OPTIONAL_HEADER::MinorSubsystemVersion

Definition at line 308 of file ntimage.h.

NumberOfRvaAndSizes [1/2]

DWORD _IMAGE_OPTIONAL_HEADER::NumberOfRvaAndSizes

Definition at line 177 of file ntddk_ex.h.

Referenced by __RtlImageDirectoryEntryToData(), create_fake_dll(), CreateOutputFile(), ImageDirectoryEntryToDataEx(), ImageDirectoryOffset(), InitializeTestImage(), IntVideoPortImageDirectoryEntryToData(), is_managed_app(), MiReloadBootLoadedDrivers(), ProcessRelocations(), RtlImageDirectoryEntryToData(), test_import_resolution(), test_Loader(), test_ResolveDelayLoadedAPI(), and write_raw_resources().

NumberOfRvaAndSizes [2/2]

ULONG _IMAGE_OPTIONAL_HEADER::NumberOfRvaAndSizes

Definition at line 320 of file ntimage.h.

SectionAlignment [1/2]

DWORD _IMAGE_OPTIONAL_HEADER::SectionAlignment

Definition at line 158 of file ntddk_ex.h.

Referenced by build_exe(), create_fake_dll(), create_test_dll(), CreateOutputFile(), main(), MiEnablePagingOfDriver(), MiFindInitializationCode(), MmCheckFreeldrImageFile(), PeFmtCreateSection(), query_image_section(), test_ExitProcess(), test_filenames(), test_import_resolution(), test_Loader(), test_ResolveDelayLoadedAPI(), test_section_access(), and write_raw_resources().

SectionAlignment [2/2]

ULONG _IMAGE_OPTIONAL_HEADER::SectionAlignment

Definition at line 301 of file ntimage.h.

SizeOfCode [1/2]

DWORD _IMAGE_OPTIONAL_HEADER::SizeOfCode

Definition at line 146 of file ntddk_ex.h.

Referenced by PeFmtCreateSection(), query_image_section(), and test_Loader().

SizeOfCode [2/2]

ULONG _IMAGE_OPTIONAL_HEADER::SizeOfCode

Definition at line 294 of file ntimage.h.

SizeOfHeaders [1/2]

DWORD _IMAGE_OPTIONAL_HEADER::SizeOfHeaders

Definition at line 168 of file ntddk_ex.h.

Referenced by __RtlImageDirectoryEntryToData(), build_exe(), create_fake_dll(), create_test_dll(), ImgpLoadPEImage(), InitializeTestImage(), PeFmtCreateSection(), PeLdrLoadImageEx(), RtlImageDirectoryEntryToData(), test_ExitProcess(), test_filenames(), test_import_resolution(), test_Loader(), test_ResolveDelayLoadedAPI(), and test_section_access().

SizeOfHeaders [2/2]

ULONG _IMAGE_OPTIONAL_HEADER::SizeOfHeaders

Definition at line 311 of file ntimage.h.

SizeOfHeapCommit [1/2]

DWORD _IMAGE_OPTIONAL_HEADER::SizeOfHeapCommit

Definition at line 175 of file ntddk_ex.h.

Referenced by LdrpInitializeProcess().

SizeOfHeapCommit [2/2]

ULONG _IMAGE_OPTIONAL_HEADER::SizeOfHeapCommit

Definition at line 318 of file ntimage.h.

SizeOfHeapReserve [1/2]

DWORD _IMAGE_OPTIONAL_HEADER::SizeOfHeapReserve

Definition at line 174 of file ntddk_ex.h.

Referenced by LdrpInitializeProcess().

SizeOfHeapReserve [2/2]

ULONG _IMAGE_OPTIONAL_HEADER::SizeOfHeapReserve

Definition at line 317 of file ntimage.h.

SizeOfImage [1/2]

DWORD _IMAGE_OPTIONAL_HEADER::SizeOfImage

Definition at line 167 of file ntddk_ex.h.

Referenced by build_exe(), check_address(), create_fake_dll(), CreateOutputFile(), DbgkCreateThread(), DbgLoadImageSymbols(), ImageGetDigestStream(), ImgpInitializeBootApplicationParameters(), ImgpLoadPEImage(), InitializeTestImage(), IopInitializeDriverModule(), LdrFindEntryForAddress(), LdrpAllocateDataTableEntry(), LdrpCheckForLoadedDll(), main(), MiWriteProtectSystemImage(), MmCheckFreeldrImageFile(), module_find_cb(), pe_load_builtin_module(), PeFmtCreateSection(), PeLdrAllocateDataTableEntry(), PeLdrLoadImageEx(), query_image_section(), RosSymCreateFromFile(), RosSymCreateFromMem(), SSI_DEF(), START_TEST(), test_ExitProcess(), test_filenames(), test_import_resolution(), test_Loader(), test_NtQuerySection(), test_ResolveDelayLoadedAPI(), test_section_access(), and write_raw_resources().

SizeOfImage [2/2]

ULONG _IMAGE_OPTIONAL_HEADER::SizeOfImage

Definition at line 310 of file ntimage.h.

SizeOfInitializedData [1/2]

DWORD _IMAGE_OPTIONAL_HEADER::SizeOfInitializedData

Definition at line 147 of file ntddk_ex.h.

Referenced by ImageGetDigestStream(), and write_raw_resources().

SizeOfInitializedData [2/2]

ULONG _IMAGE_OPTIONAL_HEADER::SizeOfInitializedData

Definition at line 295 of file ntimage.h.

SizeOfStackCommit [1/2]

DWORD _IMAGE_OPTIONAL_HEADER::SizeOfStackCommit

Definition at line 173 of file ntddk_ex.h.

Referenced by BaseCreateStack(), CallPerInstanceInitFunctions(), PeFmtCreateSection(), query_image_section(), RtlpCreateUserStack(), test_Loader(), and test_NtQuerySection().

SizeOfStackCommit [2/2]

ULONG _IMAGE_OPTIONAL_HEADER::SizeOfStackCommit

Definition at line 316 of file ntimage.h.

SizeOfStackReserve [1/2]

DWORD _IMAGE_OPTIONAL_HEADER::SizeOfStackReserve

Definition at line 172 of file ntddk_ex.h.

Referenced by BaseCreateStack(), PeFmtCreateSection(), query_image_section(), RtlpCreateUserStack(), test_Loader(), and test_NtQuerySection().

SizeOfStackReserve [2/2]

ULONG _IMAGE_OPTIONAL_HEADER::SizeOfStackReserve

Definition at line 315 of file ntimage.h.

SizeOfUninitializedData [1/2]

DWORD _IMAGE_OPTIONAL_HEADER::SizeOfUninitializedData

Definition at line 148 of file ntddk_ex.h.

SizeOfUninitializedData [2/2]

ULONG _IMAGE_OPTIONAL_HEADER::SizeOfUninitializedData

Definition at line 296 of file ntimage.h.

Subsystem [1/2]

WORD _IMAGE_OPTIONAL_HEADER::Subsystem

Definition at line 170 of file ntddk_ex.h.

Referenced by build_exe(), create_fake_dll(), CreateProcessInternalW(), CsrClientConnectToServer(), ImgpLoadPEImage(), IsConsoleApp(), LdrpInitializeProcess(), MmCheckFreeldrImageFile(), MmCreatePeb(), PeFmtCreateSection(), query_image_section(), shgfi_get_exe_type(), test_Loader(), test_NtQuerySection(), and test_WaitForInputIdle().

Subsystem [2/2]

USHORT _IMAGE_OPTIONAL_HEADER::Subsystem

Definition at line 313 of file ntimage.h.

Win32VersionValue [1/2]

DWORD _IMAGE_OPTIONAL_HEADER::Win32VersionValue

Definition at line 166 of file ntddk_ex.h.

Referenced by MmCreatePeb().

Win32VersionValue [2/2]

ULONG _IMAGE_OPTIONAL_HEADER::Win32VersionValue

Definition at line 309 of file ntimage.h.

---

The documentation for this struct was generated from the following files:

• drivers/filesystems/udfs/Include/ntddk_ex.h
• drivers/storage/ide/uniata/ntddk_ex.h
• modules/rosapps/applications/sysutils/pedump/pedump.c
• sdk/include/ddk/ntimage.h