[Windows]_[0基础]_[使用命令行工具dumpbin分析文件]


dumpbin(vs拥有)

1. 出口lib函数符号文件(symbols)

dumpbin /exports zlib1.lib

Microsoft (R) COFF/PE Dumper Version 10.00.40219.01
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file zlib1.lib

File Type: LIBRARY

     Exports

       ordinal    name

             1    _adler32@12
           140    _adler32_combine@12
            39    _compress2@20
             2    _compress@16
            46    _compressBound@4
             3    _crc32@12

2.查看PE文件是32 bit还是64 bit.

dumpbin /HEADERS libgcc_s_seh_64-1.dll


64 bit

E:softwareTDM-GCC-64in>dumpbin /HEADERS libgcc_s_seh_64-1.dll
Microsoft (R) COFF/PE Dumper Version 10.00.40219.01
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file libgcc_s_seh_64-1.dll

PE signature found

File Type: DLL

FILE HEADER VALUES
            8664 machine (x64)

32 bit
E:softwareTDM-GCC-64in>dumpbin /HEADERS g++.exe
Microsoft (R) COFF/PE Dumper Version 10.00.40219.01
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file g++.exe

PE signature found

File Type: EXECUTABLE IMAGE

FILE HEADER VALUES
             14C machine (x86)


3.查看PE文件依赖,类似于Dependency Walker

dumpbin /DEPENDENTS libgcc_s_seh_64-1.dll

E:softwareTDM-GCC-64in>dumpbin /DEPENDENTS libgcc_s_seh_64-1.dll
Microsoft (R) COFF/PE Dumper Version 10.00.40219.01
Copyright (C) Microsoft Corporation.  All rights reserved.


Dump of file libgcc_s_seh_64-1.dll

File Type: DLL

  Image has the following dependencies:

    KERNEL32.dll
    msvcrt.dll

  Summary

        1000 .CRT
        1000 .bss
        1000 .data
        1000 .edata
        1000 .idata
        2000 .pdata
        2000 .rdata
        1000 .reloc
       16000 .text
        1000 .tls
        1000 .xdata


原文地址:https://www.cnblogs.com/zfyouxi/p/5037253.html