查看DLL 内部函数工具

DLL Export Viewer v1.35 Copyright (c) 2005 - 2009 Nir Sofer Web Site: http://www.nirsoft.net Description =========== This utility displays the list of all exported functions and their virtual memory addresses for the specified DLL files. You can easily copy the memory address of the desired function, paste it into your debugger, and set a breakpoint for this memory address. When this function is called, the debugger will stop in the beginning of this function. For example: If you want to break each time that a message box is going to be displayed, simply put breakpoints on the memory addresses of message-box functions: MessageBoxA, MessageBoxExA, and MessageBoxIndirectA (or MessageBoxW, MessageBoxExW, and MessageBoxIndirectW in unicode based applications) When one of the message-box functions is called, your debugger should break in the entry point of that function, and then you can look at call stack and go backward into the code that initiated this API call. Versions History ================ * Version 1.35 o Added option to undecorate/unmangle C++ function names that mangled by Microsoft compilers. When this option is selected, all mangled functions will be displayed with parameters list and return value type. Works on computers with Windows XP or greater OS. * Version 1.30 o Added Drag & Drop support. o Added support for 'Open With' menu/dialog-box of Windows. If you choose Dll Export Viewer in the 'Open With' dialog-box, it'll now be opened with the right dll that you right-clicked. o Fixed the Esc key problem in the 'Select Dlls' dialog-box. * Version 1.27 o New option: Show found items during the scan process. * Version 1.26 o Added option: Automatically remove Ascii/Unicode Postfix ('A' and 'W') On Google Search. It means that if the function name, for example, is CreateWindowExW, the google search will be 'CreateWindowEx'. * Version 1.25 o Added function name filter - Don't show functions that contains the specified strings. * Version 1.22 o The export options dialog-box is now resizable. * Version 1.21 o Added AutoComplete support for filename text-boxes. * Version 1.20 o Added new option: Scan subfolders. o Fixed bug: The main window lost the focus when the user switched to another application and then returned back to DLL Export Viewer. * Version 1.16 o Added support for saving as comma-delimited text file. * Version 1.15 o Added command-line support * Version 1.12 o The configuration is now saved to a file, instead of the Registry. * Version 1.11 o Added function name filter (Show only functions that contains the specified strings) * Version 1.10 o Added support for 64-bit DLL files. o New option: Display method and properties of COM type libraries. o Function counter is now displayed while scanning the files. o A tooltip is displayed when a string in a column is longer than the column length. * Version 1.02 - New Option: Search Function In Google. * Version 1.01 - New Option: Copy WinDbg BP Commands. You can use this option to easily set multiple breakpoints in WinDbg debugger. Just select the desired API functions, execute this option, and then paste the bp commands into the command window of WinDbg. * Version 1.00 - First Release. Start using DLL Export Viewer ============================= This utility doesn't require any installation process or additional DLLs, in order to start using it, just run the executable file - dllexp.exe When DLL Export Viewer is loaded, you have to choose one of the following options: * Load all functions from standard system DLLs: This is the default option. If you select it, the exported API functions of standard Windows DLLs (kernel32.dll, user32.dll, and so on...) will be displayed. * Load functions from the specified DLL file: If you select this option, you have to specify the DLL file that you want to load in the text-box below this option. You can also specify a wildcard for loading multiple DLL files. If for some reason, you want to view all API functions on your system, you can specify something like 'c:\windows\system32\*.dll' - but I must warn you... You'll get a very long functions list, probably more than 50,000 functions ! * Load functions from the DLL files specified in the following text file: If you select this option, the specified text file should contain a list of DLL files, separated by Enter characters (CR-LF). All exported functions from the specified DLLs will be loaded. * Load functions from all DLLs attached to the selected process: This is the most useful option if you want to use this utility for debugging. Select the process that you are currently debugging, and the exported functions of all DLLs attached to the selected process will be displayed. System Requirements =================== This utility works properly on all 32-bit/64-bit versions of Windows, including Windows 98/ME, Windows NT, Windows 2000, Windows XP, Windows Server 2003, and Windows Vista. If you want to use it on Windows NT, you should add psapi.dll into your system32 folder. Command-Line Options ==================== /from_std Load all functions from standard system DLLs. /from_files <Filename> Load all functions from the specified DLL file or wildcard. /from_textfile <Filename> Load all functions from the DLL files specified in the text file. /from_process <Process ID> Load all functions from the DLL files loaded by the specified process. /filter <Filter String> Show only functions that contain the specified strings /nofilter Don't use the functions filter. /subfolders Scan subfolders (Only for /from_files) /nosubfolders Don't scan subfolders (Only for /from_files) /stext <Filename> Save the functions list into a regular text file. /stab <Filename> Save the functions list into a tab-delimited text file. /scomma <Filename> Save the functions list into a comma-delimited text file. /stabular <Filename> Save the functions list into a tabular text file. /shtml <Filename> Save the functions list into HTML file (Horizontal). /sverhtml <Filename> Save the functions list into HTML file (Vertical). /sxml <Filename> Save the functions list to XML file. Examples: dllexp.exe /from_files "c:\windows\system32\s*.dll" dllexp.exe /from_files "c:\windows\system32\sh*.dll" /filter "shell open" /shtml "c:\temp\func.html" dllexp.exe /from_process 2020 /nofilter dllexp.exe /from_std License ======= This utility is released as freeware. You are allowed to freely distribute this utility via floppy disk, CD-ROM, Internet, or in any other way, as long as you don't charge anything for this. If you distribute this utility, you must include all files in the distribution package, without any modification ! Disclaimer ========== The software is provided "AS IS" without any warranty, either expressed or implied, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. The author will not be liable for any special, incidental, consequential or indirect damages due to loss of data or any other reason. Translating this utility to other languages =========================================== In order to translate this utility to other language, follow the instructions below: 1. Run DLL Export Viewer with /savelangfile parameter: dllexp.exe /savelangfile A file named dllexp_lng.ini will be created in the folder of DLL Export Viewer utility. 2. Open the created language file in Notepad or in any other text editor. 3. Translate all string entries to the desired language. Optionally, you can also add your name and/or a link to your Web site. (TranslatorName and TranslatorUR