Use the dumpbin command

xiaoxiao2021-03-06  41

You can use dumpbin when you use VC. EXE to get a list of symbols output in a DLL. Below

Command: dumpbin -exports Cmpnt1.dll as: C:. / WINDOWS / system32> dumpbin -exports msgsvc.dllMicrosoft (R) COFF Binary File Dumper Version 6.00.8447Copyright (C) Microsoft Corp 1992-1998 All rights reserved.

Dump of file msgsvc.dll

FILE TYPE: DLL

Section Contains The Following Exports for Msgsvc.dll

0 Characteristics 41107F60 Time Date Stamp Wed Aug 04 14:17:04 2004 0.00 Version 1 Ordinal Base 2 Number of Functions 2 Number of Names

Ordinal Hint Rva Name

1 0 00004ABF ServiceMain 2 1 00004595 SVCHOSTPUSHSERVICEGLOBALS

Summary

1000.Data 1000 .reloc 1000 .RSRC 8000.textc: /> Dumpbinmicrosoft (r) Coff Binary File Dumper Version 6.00.844Copyright (c) Microsoft Corp 1992-1998. All Rights Res

USAGE: DUMPBIN [OPTION] [Files]

Options:

/ ALL / ARCH / ARCHIVEMEMBERS / DEPENDENTS / DIRECTIVES / DISASM / EXPORTS / FPO / HEADERS / IMPORTS / LINENUMBERS / LINKERMEMBER [: {1 | 2}] / LOADCONFIG / OUT: filename / PDATA / RAWDATA [: {NONE | BYTES | SHORTS | Longs} [, #]] / relocations / section: name / summary / symbols

To run dumpbin, use the following syntax:

Dumpbin [options] FILES ...

Specify one or more binary files and any options needed to control information. DUMPBIN will display this information to a standard output. You can redirect the output to the file, or use the / OUT option to the output specified file name.

Dumpbin displays the / summary output when the Dumpbin is running Dumpbin but does not specify an option.

When typing command dumpbin but does not have any other command line input, Dumpbin displays the usual schematic of the summary it.

DUMPBIN option

/ All

This option displays all available information other than the code disassembly. Use / disasm to display disassembly. You can use / Rawdata: None with / ALL to omit the original binary details of the file.

Only the / headers dumpbin option can be used for files generated by the / GL compiler option.

/ Archivemembers

This option displays the least information about the library member object.

Only the / headers dumpbin option can be used for files generated by the / GL compiler option.

/ Clrheader file

Here: file

use

/ CLR

The generated image file.

Note

Clrheader displays information about the .NET header used in any managed program. The output is displayed .NET header and the position and size of each section (in bytes).

File Format Spec.doc Description The information in the .NET header. Net SDK is installed in the Tools Developers Guide directory in the Tools Developers Guide directory.

Only the / headers dumpbin option can be used for files generated by the / GL compiler option.

/ DIRECTIVES

This option dump image is generated by the compiler. Directive section.

Only the / headers dumpbin option can be used for files generated by the / GL compiler option.

/ Dependents

Dump the name of the DLL of the image from the import function. Do not dump import function names.

Only the / headers dumpbin option can be used for files generated by the / GL compiler option.

/ Disasm

This option displays the disassembly of the code segment, uses the symbol if it appears in the file.

Only the / headers dumpbin option can be used for files generated by the / GL compiler option.

/ Exports

This option displays all definitions exported from executables or DLLs.

Only the / headers dumpbin option can be used for files generated by the / GL compiler option.

/ Fpo

This option displays the Frame Pointer Optimization (FPO) record.

Only the / headers dumpbin option can be used for files generated by the / GL compiler option.

/ Headers

This option displays the header of the file header and each section. When used for library, the head of each member object is displayed.

Only the / headers dumpbin option can be used for files generated by the / GL compiler option.

/ Imports [: file]

This option displays the DLL list (static link and delay load) that imported to the executable or DLL and each of the above DLLs.

Optional FILE specification allows you to specify that only an import of a DLL is displayed. E.g:

DUMPBIN /IMPORTS: MSVCRT.DLL

The output displayed by this option is similar to the / exports output.

Only the / headers dumpbin option can be used for files generated by the / GL compiler option.

/ Linenumbers

This option displays the COFF line number. If the object file is compiled with program database (/ zi), C7 compatibility (/ z7) or only line number (/ zd), it contains a line number. If the executable or DLL is linked to the generation debug information (/ debug), it contains the COFF line number.

Only the / headers dumpbin option can be used for files generated by the / GL compiler option.

/ Linkermember [: {1 | 2}]

This option displays the public symbol defined in the library. Specify parameters 1 will display symbols and their offsets in the object order. The specified parameter 2 will display the offset and index number of the object, and then list the object indexes of these symbols and each symbol in alphabetical order. To get two outputs, specify / LinkerMember without digital parameters.

Only the / headers dumpbin option can be used for files generated by the / GL compiler option.

/ LoadingConfig

This option dumps the image_load_config_directory structure, which is used by the Windows NT loader and the optional structure defined in Winnt.h.

Only the / headers dumpbin option can be used for files generated by the / GL compiler option.

/ OUT: FileName

This option specifies the FileName output. By default, Dumpbin displays the information to the standard output.

Only the / headers dumpbin option can be used for files generated by the / GL compiler option.

/ Pdbpath [: verbose] filename

Here:

Filename

To find the .dll or .exe file name to match the .pdb file.

Verbose reports all directories in which the .pdb file is locked.

Note

/ Pdbpath searches the same path to the .pdb file along the debugger, and will report which .pdb files (if) and file specified in FileName.

You may have problems when using the Visual Studio debugger because the debugger uses the .pdb file for different versions of the debug file.

/ Pdbpath searches the .pdb file along the lower path:

Check the location where the executable file resides. Check the location of the PDB written to the executable. This is usually the location when the image is linked. Search path checks in Visual Studio IDE. Check the path check in the _NT_SYMBOL_PATH and _NT_ALT_SYMBOL_PATH environment variables. Check in the Windows directory.

/ PDATA

Used only for RISC processors.

This option dumps the exception table (.pdata) from an image or object.

Only the / headers dumpbin option can be used for files generated by the / GL compiler option.

/ Rawdata [: {1 | 2 | 4 | 8 | None [, Number]]

This option displays the original content of each section in the file. Parameter control display format, as shown below:

Parameter results 1 default. The content is displayed in hexadecimal byte, and if the content has a representation of print, it is also shown as an ASCII character. 2 The content is displayed as a hexadecimal 2-byte value. 4 The content is displayed as a 4-byte value of hexadecimal. 8 The content is displayed as a hexadecimal 8-byte value. NONE Cancels the original data. This parameter is useful for the control / all output. The rows displayed by Number are set to each row with the width of the Number value.

Only the / headers dumpbin option can be used for files generated by the / GL compiler option.

/ Relocations

This option displays any relocation in an object or image.

Only the / headers dumpbin option can be used for files generated by the / GL compiler option.

/ Section: Section

This option limits the output of information related to the specified section.

Only the / headers dumpbin option can be used for files generated by the / GL compiler option.

/ Summary

This option displays the minimum information of the section (including the total size). This option is the default value if other options are specified.

Only the / headers dumpbin option can be used for files generated by the / GL compiler option.

/ Symbols

This option displays the COFF symbol table. The symbol table is in all object files. For image files, only when it is linked to the / debug, it contains a COFF symbol table.

The following is a description of the / symbols output. Additional information about / symbols output meaning is found by reviewing Winnt.h (Image_Symbol and Image_AUX_SYMBOL) or COFF documents.

Suppose there is a sample dump:

Dump of file main.obj

FILE TYPE: COFF OBJECT

Coff Symbol Table

000 000000 Debug Notype FileName | .file

Main.cpp

002 000B1FDB ABS NOTYPE Static | @ Comp.ID

003 00000000 SECT1 NOTYPE Static | .dRectVe

Section Length 26, #relocs 0, #LINENUMS 0, Checksum 722C964F

005 00000000 SECT2 NOTYPE Static | .TEXT

Section Length 23, #relocs 1, #LINENUMS 0, Checksum 459FF65F, Selection 1 (Pick no duplicates) 007 00000000 SECT2 NOTYPE () External | _MAIN

008 00000000 Undef Notype () EXTERNAL |? Mydump @@ yaxxz (void __cdecl mydump (void))

String Table size = 0x10 bytes

Summary

26.dRectve

23.Text

The following description describes the columns containing information related to the user:

The 3 digits of the beginning are symbolic index / numbers. If the third column contains SECTX, the symbol is defined in the section of the object file. However, if Undef appears, it is not defined in that object and must be parsed elsewhere. The fifth column illustrates whether the symbol is only visible inside the object, or is it a common (external visible). Static symbol _SYM will not link to public symbol _ssym; these symbols are two different instances named _sym.

The last column in the number row is a symbolic name (modice name and unpaired name).

Only the / headers dumpbin option can be used for files generated by the / GL compiler option.

/ UnwindInfo

The deployment descriptor of the dump structured exception handling (SEH) table in the program image (e.g., Exe and DLL) table. / UnwindInfo is only available for IA64 images.

Only the / headers dumpbin option can be used for files generated by the / GL compiler option.

转载请注明原文地址:https://www.9cbs.com/read-72836.html

New Post(0)