(Note: The leftmost is the offset of the file header.) )
Image_dos_header STRUCT
{ +0h WORD e_magic//Magic DOS signature MZ (4Dh 5Ah) DOS executable tag+2h WORD E_CBLP//bytes on last page of file+4h WORD e_cp//pages in file+6h WORD E_CRLC//relocations+8h WORD e_cparhdr//size of header in paragraphs+0ah WORD E_minalloc//minimun Extra paragraphs needs+0ch WORD E_maxalloc//maximun Extra paragraphs needs+0eh WORD e_ss//intial (relative) SS valueinitialization of the DOS code stack SS+10h WORD e_sp//intial SP value DOS code initialization stack pointer SP+12h WORD e_csum//checksum+14h WORD e_ip//intial IP value DOS code initialization instruction entry [pointer IP]+16h WORD e_cs//intial (relative) CS value DOS code initial stack entry+18h WORD E_LFARLC//file Address of relocation table +1ah WORD e_ovno//Overlay number+1ch WORD e_res[4]//reserved words+24h WORD e_oemid//OEM identifier (for e_oeminfo)+26h WORD e_oeminfo//OEM Information;e_oemid specific+29h WORD e_res2[10]//Reserved words+3ch DWORD e_lfanew//offset to start of PE header point to PE file header} image_dos_header ENDS
Small Turtle PE detailed image_dos_header structure definition is the function of each property (PE detailed 01)