cygwin 环境下 :
objdump pe_dump.exe -x : Display the contents of all headers
objdump pe_dump.exe -s -j .idata : Display the full contents of ".idata" section
objdump pe_dump.exe -s -j .idata –start-address=0x431200 –stop-address=0x431800 : Display the full contents of ".idata" section in address [0x431200, 0x431800)
objdump pe_dump.exe -d -j .text : disassemble the contents of ".text" section
objdump pe_dump.exe -d -j .text –start-address=0x4187b0 : disassemble the contents of ".text" section starting from address 0x4187b0
bind -p C:WINDOWSsystem32 -o -u QtCore4.dll (old style binding)
bind -p C:WINDOWSsystem32 -u QtCore4.dll (new style binding)