[vadimus_ca]

Сообщение от AS21

расшифруй или пример

tdump tdump.exe

Turbo Dump  Version 6.4.1.0 Copyright (c) 1988-2011 Embarcadero Technologies, Inc.
                     Display of File tdump.exe

Old Executable Header

DOS File Size                                      79800h  (497664. )
Load Image Size                                      210h  (   528. )
Relocation Table entry count                          0000h  (     0. )
Relocation Table address                              0040h  (    64. )
Size of header record      (in paragraphs)            0004h  (     4. )
Minimum Memory Requirement (in paragraphs)            000Fh  (    15. )
Maximum Memory Requirement (in paragraphs)            FFFFh  ( 65535. )
File load checksum                                    0000h  (     0. )
Overlay Number                                        001Ah  (    26. )

Borland TLINK Version 2.01

Initial Stack Segment  (SS:SP)			  0000:00B8
Program Entry Point    (CS:IP)			  0000:0000


Portable Executable (PE) File

Header base: 00000200

CPU type                 80386
Flags                    30E [ executable backwards 32bit nodebug ]
DLL flags                0000 [ ]
Linker Version           5.0
Time stamp               4EE784AD : Tue Dec 13 12:00:29 2011
O/S Version              4.0
User Version             0.0
Subsystem Version        4.0
Subsystem                0003 [ Windows character ]
Object count             00000008
Symbols offset           00000000
Symbols count            00000000
Optional header size     00E0
Magic #                  10B
Code size                00052000
Init Data size           00034000
Uninit Data size         00000000
Entry RVA                00001108
Image base               00400000
Code base                00001000
Data base                00053000
Object/File align        00001000/00000200
Reserved                 00000000
Image size               00093000
Header size              00000600
Checksum                 00000000
Stack reserve/commit     00100000/00002000
Heap reserve/commit      00100000/00001000
Number interesting RVAs  00000010
Name                   RVA       Size  
------------------  --------  --------
Exports             0008A000  00000069
Imports             00089000  00000932
Resources           0008B000  00000200
Exceptions          00000000  00000000
Security            00000000  00000000
Fixups              0008C000  00006110
Debug               00000000  00000000
Description         00000000  00000000
Global Ptr          00000000  00000000
TLS                 00088000  00000018
Callbacks           00000000  00000000
Bound Imports       00000000  00000000
Import Addr Table   00000000  00000000
Delayed Imports     00000000  00000000
COM Runtime         00000000  00000000
reserved            00000000  00000000

Object table:
#   Name      VirtSize    RVA     PhysSize  Phys off  Flags   
--  --------  --------  --------  --------  --------  --------
01  .text     00052000  00001000  00051600  00000600  60000020 [CER]
02  .data     00034000  00053000  00020800  00051C00  C0000040 [IRW]
03  .tls      00001000  00087000  00000200  00072400  C0000040 [IRW]
04  .rdata    00001000  00088000  00000200  00072600  50000040 [IRS]
05  .idata    00001000  00089000  00000A00  00072800  40000040 [IR]
06  .edata    00001000  0008A000  00000200  00073200  40000040 [IR]
07  .rsrc     00001000  0008B000  00000200  00073400  40000040 [IR]
08  .reloc    00007000  0008C000  00006200  00073600  50000040 [IRS]

Key to section flags:
  C - contains code
  E - executable
  I - contains initialized data
  R - readable
  S - shareable
  W - writeable

******************************************************************************
Section:             Import
File Offset:         00072800 (468992)
  ImportLookUpTblRVA:0008903C
  Time Stamp:        00000000
  Forwarder Chain:   00000000 (index of first forwarder reference)

Imports from KERNEL32.DLL
                  CloseHandle
                  CreateFileA
                  CreateFileMappingA
                  DeleteFileA
                  DuplicateHandle
                  EnterCriticalSection
                  ExitProcess
                  FileTimeToDosDateTime
                  FileTimeToLocalFileTime
                  FindClose
                  FindFirstFileA
                  FindNextFileA
                  FlushConsoleInputBuffer
                  GetACP
                  GetCPInfo
                  GetCommandLineA
                  GetConsoleMode
                  GetConsoleScreenBufferInfo
                  GetCurrentProcess
                  GetCurrentProcessId
                  GetCurrentThreadId
                  GetDriveTypeA
                  GetEnvironmentStrings
                  GetFileAttributesA
                  GetFileSize
                  GetFileType
                  GetFullPathNameA
                  GetLargestConsoleWindowSize
                  GetLastError
                  GetLocalTime
                  GetLocaleInfoA
                  GetModuleFileNameA
                  GetModuleHandleA
                  GetNumberOfConsoleInputEvents
                  GetOEMCP
                  GetProcAddress
                  GetProcessHeap
                  GetStartupInfoA
                  GetStdHandle
                  GetStringTypeA
                  GetStringTypeW
                  GetSystemDefaultLangID
                  GetTimeZoneInformation
                  GetUserDefaultLCID
                  GetVersion
                  GetVersionExA
                  GetVolumeInformationA
                  HeapAlloc
                  HeapFree
                  IsDBCSLeadByteEx
                  IsDebuggerPresent
                  IsValidLocale
                  LCMapStringA
                  LeaveCriticalSection
                  LoadLibraryA
                  MapViewOfFile
                  MultiByteToWideChar
                  OpenFileMappingA
                  RaiseException
                  ReadConsoleInputA
                  ReadFile
                  RtlUnwind
                  SetConsoleCtrlHandler
                  SetConsoleMode
                  SetConsoleScreenBufferSize
                  SetConsoleWindowInfo
                  SetFilePointer
                  SetHandleCount
                  SetLastError
                  SetStdHandle
                  SetThreadLocale
                  Sleep
                  TlsAlloc
                  TlsFree
                  TlsGetValue
                  TlsSetValue
                  UnmapViewOfFile
                  VirtualAlloc
                  VirtualFree
                  VirtualQuery
                  WideCharToMultiByte
                  WriteConsoleInputA
                  WriteFile

Imports from USER32.DLL
                  EnumThreadWindows
                  MessageBoxA
                  wsprintfA

******************************************************************************
Section:             Exports
File Offset:         00073200 (471552)
  Flags:             00000000
  Time Stamp:        00000000
  Major Version:     0000
  Minor Version:     0000

Exports from tdump.exe
  2 exported name(s), 2 export addresse(s).  Ordinal base is 1.
  Sorted by Name:
    RVA      Ord. Hint Name
    -------- ---- ---- ----
    00001161    1 0000 __GetExceptDLLinfo
    000530AC    2 0001 ___CPPdebugHook

******************************************************************************
Section:             Resources
File Offset:         00073400 (472064)
  Flags:             00000000
  Time Stamp:        4EE784AD : Tue Dec 13 12:00:29 2011
  Major Version:     0000
  Minor Version:     0000

Resources:
Type          Name                   Lang Id
--------------------------------------------
[0 named entries, 1 ID entries]
type: RCData (10)  (next directory @00000018)

              [1 named entries, 0 ID entries]
              DVCLAL  (next directory @00000030)

                                     [0 named entries, 1 ID entries]
                                     type: Unknown (0)  (data @00000048)
                                         Offset:    0008B068
                                         Size:      00000010
                                         Code Page: 00000000
                                         Reserved:  00000000

Секция Import

Добавлено через 3 минуты

Сообщение от AS21

нужен билдер под Win Ce 3

4.2 не подойдет?
http://rutracker.org/forum/viewtopic.php?t=2844126

[AS21]

Сообщение от vadimus_ca

4.2 не подойдет?

Все ошибку нашел
Вопрос снимается

Сообщение от vadimus_ca

Секция Import

Я правильно понял - нужна расшифровка PE Format?

[vadimus_ca]

Сообщение от AS21

Я правильно понял - нужна расшифровка PE Format?

Да, для конкретной версии avunit.exe. Import ведь содержит названия всех используемых модулей?