Opening and snooping DLLs

Question

Is there a way you can open and snoop DLLs? Like, see what functions are inside, etc?

Is there some sort of header in them with tables of functions, information embedded by the maker of the dll, etc? Also, how do you find/view that information?

Thanks!

Russel

Answer 1

If they are .NET DLLs, you can find out a remarkable amount, including disassembling the code, using redgate's free tool "Reflector" - see http://www.red-gate.com/products/reflector/

Answer 2

for non-.Net windows DLLs, there is this one here:

http://www.dependencywalker.com/

Answer 3

I think you will find what you need (and more) in Dependency Walker

Answer 4

Maybe you want to do it programmatically and write your own tool. Then have a look at the import and export tables of the COFF format.

Some other tools with source code doing it are: Texe and LordPE

Answer 5

As material for my own lectures for Reverse Engineering, I developed PeStudio (www.winitor.net/en/pestudio.html). Using this tool you can snoop many details about imported and exported functions. You can even undecorate these when these have been decorated by a compiler.