windbg dt命令显示PE相关数据结构

本文深入探讨了PE(可移植执行)文件格式的内部结构，详细介绍了ntdll和MyApp模块中包含的各种数据结构，如_IMAGE_NT_HEADERS、_IMAGE_DOS_HEADER、_IMAGE_FILE_HEADER等，这些结构对于理解Windows操作系统下的程序加载和执行至关重要。
摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >
0:001> dt ntdll!*IMAGE_*
          ntdll!_IMAGE_NT_HEADERS
          ntdll!_IMAGE_DOS_HEADER
          ntdll!_IMAGE_FILE_HEADER
          ntdll!_IMAGE_OPTIONAL_HEADER
          ntdll!_IMAGE_DATA_DIRECTORY
          
0:001> dt MyApp*!*IMAGE_*
          MyApp!PIMAGE_DEBUG_DIRECTORY
          MyApp!PIMAGE_RESOURCE_DIRECTORY_ENTRY
          MyApp!PIMAGE_TLS_CALLBACK
          MyApp!PIMAGE_FUNCTION_ENTRY
          MyApp!PIMAGE_EXPORT_DIRECTORY
          MyApp!IMAGE_ARCHITECTURE_HEADER
          MyApp!PIMAGE_AUX_SYMBOL
          MyApp!IMAGE_ALPHA_RUNTIME_FUNCTION_ENTRY
          MyApp!PIMAGE_RESOURCE_DIR_STRING_U
          MyApp!PIMAGE_THUNK_DATA
          MyApp!PIMAGE_RUNTIME_FUNCTION_ENTRY
          MyApp!IMAGE_ROM_HEADERS
          MyApp!PIMAGE_TLS_DIRECTORY64
          MyApp!PIMAGE_SYMBOL
          MyApp!_PIMAGE_RUNTIME_FUNCTION_ENTRY
          MyApp!IMAGE_TLS_DIRECTORY32
          MyApp!PIMAGE_BASE_RELOCATION
          MyApp!IMAGE_FILE_HEADER
          MyApp!IMAGE_DOS_HEADER
          MyApp!PIMAGE_ARCHITECTURE_ENTRY
          MyApp!PIMAGE_DOS_HEADER
          MyApp!IMAGE_RUNTIME_FUNCTION_ENTRY
          MyApp!IMAGE_FUNCTION_ENTRY
          MyApp!PIMAGE_THUNK_DATA32
          MyApp!PIMAGE_SEPARATE_DEBUG_HEADER
          MyApp!PIMAGE_TLS_DIRECTORY32
          MyApp!PIMAGE_IMPORT_DESCRIPTOR
          MyApp!IMAGE_IA64_RUNTIME_FUNCTION_ENTRY
          MyApp!PIMAGE_DATA_DIRECTORY
          MyApp!IMAGE_ARCHITECTURE_ENTRY
          MyApp!PIMAGE_FUNCTION_ENTRY64
          MyApp!IMAGE_DEBUG_MISC
          MyApp!IMAGE_VXD_HEADER
          MyApp!PIMAGE_TLS_DIRECTORY
          MyApp!PIMAGE_VXD_HEADER
          MyApp!IMAGE_COFF_SYMBOLS_HEADER
          MyApp!PIMAGE_THUNK_DATA64
          MyApp!IMAGE_ROM_OPTIONAL_HEADER
          MyApp!PIMAGE_ARCHIVE_MEMBER_HEADER
          MyApp!IMAGE_TLS_DIRECTORY64
          MyApp!PIMAGE_DEBUG_MISC
          MyApp!IMAGE_IMPORT_BY_NAME
          MyApp!IMAGE_FUNCTION_ENTRY64
          MyApp!IMAGE_IMPORT_DESCRIPTOR
          MyApp!PIMAGE_ALPHA64_RUNTIME_FUNCTION_ENTRY
          MyApp!PIMAGE_LOAD_CONFIG_DIRECTORY64
          MyApp!IMAGE_BASE_RELOCATION
          MyApp!IMAGE_EXPORT_DIRECTORY
          MyApp!PIMAGE_ROM_HEADERS
          MyApp!IMAGE_BOUND_IMPORT_DESCRIPTOR
          MyApp!PIMAGE_NT_HEADERS
          MyApp!IMAGE_LINENUMBER
          MyApp!PIMAGE_RESOURCE_DATA_ENTRY
          MyApp!IMAGE_NT_HEADERS
          MyApp!PIMAGE_COFF_SYMBOLS_HEADER
          MyApp!IMAGE_THUNK_DATA
          MyApp!PIMAGE_OS2_HEADER
          MyApp!IMAGE_LOAD_CONFIG_DIRECTORY
          MyApp!IMAGE_SECTION_HEADER
          MyApp!PIMAGE_SECTION_HEADER
          MyApp!IMAGE_BOUND_FORWARDER_REF
          MyApp!IMAGE_TLS_DIRECTORY
          MyApp!PIMAGE_ALPHA_RUNTIME_FUNCTION_ENTRY
          MyApp!PIMAGE_OPTIONAL_HEADER
          MyApp!PIMAGE_OPTIONAL_HEADER32
          MyApp!IMAGE_OPTIONAL_HEADER64
          MyApp!IMAGE_NT_HEADERS32
          MyApp!IMAGE_RESOURCE_DIRECTORY_STRING
          MyApp!IMAGE_THUNK_DATA32
          MyApp!PIMAGE_IA64_RUNTIME_FUNCTION_ENTRY
          MyApp!IMAGE_ARCHIVE_MEMBER_HEADER
          MyApp!IMAGE_DATA_DIRECTORY
          MyApp!PIMAGE_NT_HEADERS32
          MyApp!IMAGE_RESOURCE_DIR_STRING_U
          MyApp!PIMAGE_RESOURCE_DIRECTORY
          MyApp!PIMAGE_LOAD_CONFIG_DIRECTORY
          MyApp!PIMAGE_OPTIONAL_HEADER64
          MyApp!IMAGE_CE_RUNTIME_FUNCTION_ENTRY
          MyApp!PIMAGE_IMPORT_BY_NAME
          MyApp!PIMAGE_AUX_SYMBOL_TOKEN_DEF
          MyApp!PIMAGE_COR20_HEADER
          MyApp!IMAGE_OPTIONAL_HEADER
          MyApp!PIMAGE_RESOURCE_DIRECTORY_STRING
          MyApp!IMAGE_NT_HEADERS64
          MyApp!IMAGE_THUNK_DATA64
          MyApp!PIMAGE_FILE_HEADER
          MyApp!IMAGE_SYMBOL
          MyApp!PIMAGE_CE_RUNTIME_FUNCTION_ENTRY
          MyApp!PIMAGE_RELOCATION
          MyApp!IMAGE_SEPARATE_DEBUG_HEADER
          MyApp!IMAGE_OPTIONAL_HEADER32
          MyApp!PIMAGE_LOAD_CONFIG_DIRECTORY32
          MyApp!IMAGE_OS2_HEADER
          MyApp!PIMAGE_ROM_OPTIONAL_HEADER
          MyApp!PIMAGE_BOUND_FORWARDER_REF
          MyApp!PIMAGE_NT_HEADERS64
          MyApp!IMAGE_RESOURCE_DIRECTORY
          MyApp!IMAGE_RESOURCE_DATA_ENTRY
          MyApp!IMAGE_ALPHA64_RUNTIME_FUNCTION_ENTRY
          MyApp!IMAGE_RELOCATION
          MyApp!PIMAGE_ARCHITECTURE_HEADER
          MyApp!IMAGE_RESOURCE_DIRECTORY_ENTRY
          MyApp!IMAGE_AUX_SYMBOL
          MyApp!PIMAGE_BOUND_IMPORT_DESCRIPTOR
          MyApp!IMAGE_DEBUG_DIRECTORY
          MyApp!PIMAGE_LINENUMBER
          MyApp!_IMAGE_DOS_HEADER
          MyApp!IMAGE_AUX_SYMBOL_TYPE
          MyApp!_IMAGE_OPTIONAL_HEADER64
          MyApp!_IMAGE_AUX_SYMBOL
          MyApp!_IMAGE_RESOURCE_DIRECTORY_ENTRY
          MyApp!_IMAGE_NT_HEADERS
          MyApp!_IMAGE_FUNCTION_ENTRY64
          MyApp!_IMAGE_ROM_HEADERS
          MyApp!_IMAGE_DEBUG_DIRECTORY
          MyApp!_IMAGE_LINENUMBER
          MyApp!_IMAGE_ALPHA_RUNTIME_FUNCTION_ENTRY
          MyApp!_IMAGE_CE_RUNTIME_FUNCTION_ENTRY
          MyApp!_IMAGE_VXD_HEADER
          MyApp!_IMAGE_OPTIONAL_HEADER
          MyApp!_IMAGE_COFF_SYMBOLS_HEADER
          MyApp!_IMAGE_SYMBOL
          MyApp!_IMAGE_THUNK_DATA32
          MyApp!_IMAGE_THUNK_DATA32::<unnamed-type-u1>
          MyApp!_IMAGE_FILE_HEADER
          MyApp!_IMAGE_RELOCATION
          MyApp!_IMAGE_SEPARATE_DEBUG_HEADER
          MyApp!_IMAGE_ARCHIVE_MEMBER_HEADER
          MyApp!_IMAGE_EXPORT_DIRECTORY
          MyApp!IMAGE_LOAD_CONFIG_DIRECTORY32
          MyApp!_IMAGE_RUNTIME_FUNCTION_ENTRY
          MyApp!_IMAGE_RESOURCE_DATA_ENTRY
          MyApp!IMAGE_LOAD_CONFIG_DIRECTORY64
          MyApp!_IMAGE_ALPHA64_RUNTIME_FUNCTION_ENTRY
          MyApp!_IMAGE_BOUND_FORWARDER_REF
          MyApp!_IMAGE_DEBUG_MISC
          MyApp!_IMAGE_FUNCTION_ENTRY
          MyApp!_IMAGE_SECTION_HEADER
          MyApp!_IMAGE_SECTION_HEADER::<unnamed-type-Misc>
          MyApp!_IMAGE_NT_HEADERS64
          MyApp!_IMAGE_RESOURCE_DIR_STRING_U
          MyApp!_IMAGE_RESOURCE_DIRECTORY_STRING
          MyApp!_IMAGE_OS2_HEADER
          MyApp!_IMAGE_TLS_DIRECTORY32
          MyApp!_IMAGE_ROM_OPTIONAL_HEADER
          MyApp!_IMAGE_BOUND_IMPORT_DESCRIPTOR
          MyApp!_IMAGE_LINENUMBER::<unnamed-type-Type>
          MyApp!_IMAGE_DATA_DIRECTORY
          MyApp!_IMAGE_IMPORT_BY_NAME
          MyApp!_IMAGE_BASE_RELOCATION
          MyApp!_IMAGE_THUNK_DATA64
          MyApp!_IMAGE_THUNK_DATA64::<unnamed-type-u1>
          MyApp!_IMAGE_RESOURCE_DIRECTORY
          MyApp!_IMAGE_TLS_DIRECTORY64
          MyApp!IMAGE_COR20_HEADER
          MyApp!_IMAGE_IMPORT_DESCRIPTOR
          MyApp!IMAGE_LOAD_CONFIG_DIRECTORY32_2
          MyApp!_IMAGE_SECTION_HEADER