Debugging, Disassembling, Reverse Engineering

Reversing with DumpBin

The Microsoft COFF Binary File Dumper (DUMPBIN) displays information about Common Object File Format (COFF) binary files. You can use DUMPBIN to examine COFF object files, standard libraries of COFF objects, executable files, and dynamic-link libraries (DLLs). For more…

DumpBin syntax

DUMPBIN [options] files...

Display Section Headers

dumpbin.exe /HEADERS x:\path\to\object\file

Disassembling Executable Sections

dumpbin.exe /DISASM x:\path\to\object\file

Display all exported definitions

dumpbin.exe /EXPORTS x:\path\to\object\file

Display all imported definitions

dumpbin.exe /IMPORTS x:\path\to\object\file

Display the symbol table

dumpbin.exe /SYMBOLS x:\path\to\object\file

Display any relocations

dumpbin.exe /RELOCATIONS x:\path\to\object\file

Display all available information except code disassembly

dumpbin.exe /ALL x:\path\to\object\file

DumpBin Options

    /ALL
    /ARCHIVEMEMBERS
    /CLRHEADER
    /DEPENDENTS
    /DIRECTIVES
    /DISASM
    /ERRORREPORT (dumpbin.exe)
    /EXPORTS
    /FPO
    /HEADERS
    /IMPORTS
    /LINENUMBERS
    /LINKERMEMBER
    /LOADCONFIG
    /OUT
    /PDATA
    /PDBPATH
    /RANGE
    /RAWDATA
    /RELOCATIONS
    /SECTION
    /SUMMARY
    /SYMBOLS
    /TLS