IMAGE_DOS_HEADER
Offset 0x00
e_magic
0x5A4D
e_cblp ... e_lfanew
e_lfanew
0x000000D0
Offset 0x3C
MS-DOS Stub
Offset 0x40 - 0xCF
0E 1F BA 0E 00 B4 09 CD 21 B8 01 4C CD 21 ...
"This program cannot be run in DOS mode."
IMAGE_NT_HEADERS
Offset 0xD0 (208 bytes)
Signature
50 45 00 00
'PE'