x86 / ntoskrnl

_DOS_IMAGE_HEADER

← first 1 build latest →

incomplete derived from kernel debugger

struct _DOS_IMAGE_HEADER {
unsigned short e_magic;/* 0x0 2 */
unsigned short e_cblp;/* 0x2 2 */
unsigned short e_cp;/* 0x4 2 */
unsigned short e_crlc;/* 0x6 2 */
unsigned short e_cparhdr;/* 0x8 2 */
unsigned short e_minalloc;/* 0xa 2 */
unsigned short e_maxalloc;/* 0xc 2 */
unsigned short e_ss;/* 0xe 2 */
unsigned short e_sp;/* 0x10 2 */
unsigned short e_csum;/* 0x12 2 */
unsigned short e_ip;/* 0x14 2 */
unsigned short e_cs;/* 0x16 2 */
unsigned short e_lfarlc;/* 0x18 2 */
unsigned short e_ovno;/* 0x1a 2 */
unsigned short e_res[4];/* 0x1c 8 */
unsigned short e_oemid;/* 0x24 2 */
unsigned short e_oeminfo;/* 0x26 2 */
unsigned short e_res2[10];/* 0x28 20 */
long e_lfanew;/* 0x3c 4 */
};
/* computed: October 1991 pre-release CD, SETUP/DBUGDISK/I386KD.EXE CodeView 3 types (compiled 1-byte packed for its 16-bit host), laid out with natural 32-bit alignment; _KPCR agrees with NT 3.1's offsets on every shared member */
size 64 (0x40)19 members0 holespadding 01 cacheline