_IMAGE_NT_HEADERS structure

Represents the PE header format.

Syntax

typedef struct _IMAGE_NT_HEADERS {
  DWORD                   Signature;
  IMAGE_FILE_HEADER       FileHeader;
  IMAGE_OPTIONAL_HEADER32 OptionalHeader;
} IMAGE_NT_HEADERS32, *PIMAGE_NT_HEADERS32;

Members

Signature

A 4-byte signature identifying the file as a PE image. The bytes are "PE\0\0".

FileHeader

An IMAGE_FILE_HEADER structure that specifies the file header.

OptionalHeader

An IMAGE_OPTIONAL_HEADER structure that specifies the optional file header.

Remarks

The actual structure in WinNT.h is named IMAGE_NT_HEADERS32 and IMAGE_NT_HEADERS is defined as IMAGE_NT_HEADERS32. However, if _WIN64 is defined, then IMAGE_NT_HEADERS is defined as IMAGE_NT_HEADERS64.

C++
typedef struct _IMAGE_NT_HEADERS64 {
    DWORD Signature;
    IMAGE_FILE_HEADER FileHeader;
    IMAGE_OPTIONAL_HEADER64 OptionalHeader;
} IMAGE_NT_HEADERS64, *PIMAGE_NT_HEADERS64;

Requirements

   
Windows version Windows XP [desktop apps only] Windows Server 2003 [desktop apps only]
Header winnt.h (include Windows.h)

See Also

CheckSumMappedFile

IMAGE_FILE_HEADER

IMAGE_OPTIONAL_HEADER

ImageHlp Structures

ImageNtHeader

ImageRvaToSection

ImageRvaToVa

LOADED_IMAGE

UpdateDebugInfoFile