[Windows]_[0基础]_[使用命令行工具dumpbin分析文件]

最新推荐文章于 2023-12-24 16:45:02 发布

weixin_33754913

最新推荐文章于 2023-12-24 16:45:02 发布

阅读量120

点赞数

dumpbin(vs拥有)

1. 出口lib函数符号文件(symbols)

dumpbin /exports zlib1.lib

Microsoft (R) COFF/PE Dumper Version 10.00.40219.01
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file zlib1.lib

File Type: LIBRARY

     Exports

       ordinal    name

             1    _adler32@12
           140    _adler32_combine@12
            39    _compress2@20
             2    _compress@16
            46    _compressBound@4
             3    _crc32@12

2.查看PE文件是32 bit还是64 bit.

dumpbin /HEADERS libgcc_s_seh_64-1.dll

64 bit

E:\software\TDM-GCC-64\bin>dumpbin /HEADERS libgcc_s_seh_64-1.dll
Microsoft (R) COFF/PE Dumper Version 10.00.40219.01
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file libgcc_s_seh_64-1.dll

PE signature found

File Type: DLL

FILE HEADER VALUES
            8664 machine (x64)

32 bit

E:\software\TDM-GCC-64\bin>dumpbin /HEADERS g++.exe
Microsoft (R) COFF/PE Dumper Version 10.00.40219.01
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file g++.exe

PE signature found

File Type: EXECUTABLE IMAGE

FILE HEADER VALUES
             14C machine (x86)

3.查看PE文件依赖,类似于Dependency Walker

dumpbin /DEPENDENTS libgcc_s_seh_64-1.dll

E:\software\TDM-GCC-64\bin>dumpbin /DEPENDENTS libgcc_s_seh_64-1.dll
Microsoft (R) COFF/PE Dumper Version 10.00.40219.01
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file libgcc_s_seh_64-1.dll

File Type: DLL

  Image has the following dependencies:

    KERNEL32.dll
    msvcrt.dll

  Summary

        1000 .CRT
        1000 .bss
        1000 .data
        1000 .edata
        1000 .idata
        2000 .pdata
        2000 .rdata
        1000 .reloc
       16000 .text
        1000 .tls
        1000 .xdata