Portland Executable Format 0x00 magic dword 0xb9ba4c50 0x04 minor version word 0x0000 0x06 major version word 0x0000 0x08 payload file offset dword 0x0c payload length dword 0x10 bss length dword 0x14 virtual entry point dword Payload loaded at start of cs=ds=ss. bss after payload, esp set to end of bss.