オブジェクトの情報を得る

> tdump -em usukey.exe
Turbo Dump  Version 5.0.16.12 Copyright (c) 1988, 2000 Inprise Corporation
               Display of File USUKEY.EXE

IMPORT:     ADVAPI32.DLL='AdjustTokenPrivileges'
IMPORT:     ADVAPI32.DLL='LookupPrivilegeValueA'
IMPORT:     ADVAPI32.DLL='OpenProcessToken'
IMPORT:     ADVAPI32.DLL='RegCloseKey'
IMPORT:     ADVAPI32.DLL='RegCreateKeyExA'
IMPORT:     ADVAPI32.DLL='RegOpenKeyExA'
IMPORT:     ADVAPI32.DLL='RegQueryValueExA'
IMPORT:     ADVAPI32.DLL='RegSetValueExA'
...中略
IMPORT:        GDI32.DLL='CreateSolidBrush'
IMPORT:      SHELL32.DLL='Shell_NotifyIconA'
IMPORT:       USER32.DLL='AppendMenuA'
IMPORT:       USER32.DLL='CheckDlgButton'
IMPORT:       USER32.DLL='CreateDialogParamA'
IMPORT:       USER32.DLL='CreatePopupMenu'
IMPORT:       USER32.DLL='CreateWindowExA'
IMPORT:       USER32.DLL='DefWindowProcA'
IMPORT:       USER32.DLL='DestroyMenu'
IMPORT:       USER32.DLL='DestroyWindow'
...後略

> tdump -ee c:\winnt\system32\wininet.dll
Turbo Dump  Version 5.0.16.12 Copyright (c) 1988, 2000 Inprise Corporation
           Display of File C:\WINNT\SYSTEM32\WININET.DLL

EXPORT ord:0115='CommitUrlCacheEntryA'
EXPORT ord:0116='CommitUrlCacheEntryW'
EXPORT ord:0117='CreateUrlCacheContainerA'
EXPORT ord:0118='CreateUrlCacheContainerW'
EXPORT ord:0119='CreateUrlCacheEntryA'
EXPORT ord:0120='CreateUrlCacheEntryW'
EXPORT ord:0121='CreateUrlCacheGroup'
...後略

> dumpbin/imports usukey.exe
Microsoft (R) COFF Binary File Dumper Version 6.00.8168
Copyright (C) Microsoft Corp 1992-1998. All rights reserved.


Dump of file usukey.exe

File Type: EXECUTABLE IMAGE

  Section contains the following imports:

    ADVAPI32.DLL
                410088 Import Address Table
                410064 Import Name Table
                     0 time date stamp
                     0 Index of first forwarder reference

                   0  AdjustTokenPrivileges
                   0  LookupPrivilegeValueA
                   0  OpenProcessToken
                   0  RegCloseKey
                   0  RegCreateKeyExA
                   0  RegOpenKeyExA
                   0  RegQueryValueExA
                   0  RegSetValueExA

    KERNEL32.DLL
                410154 Import Address Table
                4100AC Import Name Table
                     0 time date stamp
                     0 Index of first forwarder reference

                   0  CloseHandle
                   0  CreateFileA
                   0  ExitProcess
...中略

    SHELL32.DLL
                410204 Import Address Table
                4101FC Import Name Table
                     0 time date stamp
                     0 Index of first forwarder reference

                   0  Shell_NotifyIconA

    USER32.DLL
                410288 Import Address Table
                41020C Import Name Table
                     0 time date stamp
                     0 Index of first forwarder reference

                   0  AppendMenuA
                   0  CheckDlgButton
                   0  CreateDialogParamA
...中略

  Summary

        3000 .data
        1000 .edata
        1000 .idata
        1000 .rdata
        1000 .reloc
        1000 .rsrc
        A000 .text
        1000 .tls

> dumpbin/exports c:\winnt\system32\wininet.dll
Microsoft (R) COFF Binary File Dumper Version 6.00.8168
Copyright (C) Microsoft Corp 1992-1998. All rights reserved.


Dump of file c:\WINNT\system32\wininet.dll

File Type: DLL

  Section contains the following exports for WININET.dll

           0 characteristics
    393D5D75 time date stamp Wed Jun 07 05:22:13 2000
        0.00 version
         101 ordinal base
         218 number of functions
         208 number of names

    ordinal hint RVA      name

        115    0 0000BEF5 CommitUrlCacheEntryA
        116    1 000527EC CommitUrlCacheEntryW
        117    2 00027F23 CreateUrlCacheContainerA
        118    3 0005371C CreateUrlCacheContainerW
...中略

  Summary

        3000 .data
        4000 .reloc
        B000 .rsrc
       64000 .text