IMAGE_FILE_HEADER

The IMAGE_FILE_HEADER structure represents the COFF header format.

typedef struct _IMAGE_FILE_HEADER {
    WORD Machine;
    WORD NumberOfSections;
    DWORD TimeDateStamp;
    DWORD PointerToSymbolTable;
    DWORD NumberOfSymbols;
    WORD SizeOfOptionalHeader;
    WORD Characteristics;
} IMAGE_FILE_HEADER, *PIMAGE_FILE_HEADER;

Members

Machine

Specifies the architecture type of the computer. This parameter can be one of the following values.

Value	Meaning
IMAGE_FILE_MACHINE_I386	Intel
IMAGE_FILE_MACHINE_ALPHA	DEC Alpha
IMAGE_FILE_MACHINE_IA64	Intel (64-bit)
IMAGE_FILE_MACHINE_AXP64	DEC Alpha (64-bit)

NumberOfSections

Specifies the number of sections.

TimeDateStamp

Specifies the time stamp of the image. This represents the date and time the image was created by the linker.

PointerToSymbolTable

Offset of the symbol table, or zero if no symbol table exists.

NumberOfSymbols

Specifies the number of symbols in the symbol table.

SizeOfOptionalHeader

Specifies the size of the optional header, in bytes.

Characteristics

Specifies the characteristics of the image.

Value	Meaning
IMAGE_FILE_RELOCS_STRIPPED	Relocation information is stripped from the file.
IMAGE_FILE_EXECUTABLE_IMAGE	The file is executable (there are no unresolved external references).
IMAGE_FILE_LINE_NUMS_STRIPPED	Line numbers are stripped from the file.
IMAGE_FILE_LOCAL_SYMS_STRIPPED	Local symbols are stripped from file.
IMAGE_FILE_AGGRESIVE_WS_TRIM	Aggressively trim the working set.
IMAGE_FILE_LARGE_ADDRESS_AWARE	The application can handle addresses larger than 2 GB.
IMAGE_FILE_BYTES_REVERSED_LO	Bytes of the word are reversed.
IMAGE_FILE_32BIT_MACHINE	Computer supports 32-bit words.
IMAGE_FILE_DEBUG_STRIPPED	Debugging information is stored separately in a .dbg file.
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP	If the image is on removable media, copy and run from the swap file.
IMAGE_FILE_NET_RUN_FROM_SWAP	If the image is on the network, copy and run from the swap file.
IMAGE_FILE_SYSTEM	System file.
IMAGE_FILE_DLL	DLL file.
IMAGE_FILE_UP_SYSTEM_ONLY	File should be run only on a uniprocessor computer.
IMAGE_FILE_BYTES_REVERSED_HI	Bytes of word are reversed.

Requirements

  Windows NT/2000: Requires Windows NT 4.0 or later.
  Windows 95/98: Requires Windows 95 or later. Available as a redistributable for Windows 95.
  Header: Declared in Winnt.h; include Windows.h.

See Also

Image Help Library Overview, ImageHlp Structures, IMAGE_NT_HEADERS